@elytracms/studio 0.0.97 → 0.0.99

package/dist/components/notifications/notice-model.d.ts

@@ -0,0 +1,137 @@
+import type { CmsValidationIssue } from '@elytracms/core/cms-core';
+import type { IssueSeverity } from '../issue-severity.js';
+/**
+ * EC-690 — the model of the studio's ONE notification-and-issue surface (design note and
+ * owner ruling in `tasks/EC-690-one-notification-and-issue-surface.md`).
+ *
+ * Two kinds of entry, two TYPES — never a `dismissable` flag:
+ * - a {@link Finding} is PERSISTENT: it is listed while its producer publishes it, and no
+ *   reader can dismiss it (no API exists for it);
+ * - a transient notice (`lib/notices/toast-store.ts` `ToastItem`) is an action's outcome:
+ *   always dismissable; a success expires, an error stays until dismissed.
+ */
+/**
+ * WHERE a finding is — what the tray's "Go to" opens, or the file it names. Exported for
+ * addons (`@elytracms/studio/addon`), so a contributed finding can be located too.
+ *
+ * - `record` — a row of a record rail, by RECORD KIND (`redirect`, `submission`): a
+ *   consumer names the rail's view (`nav.rail(kind, { id })`), the kind is what the data is.
+ *   No `id` → the rail's list.
+ * - `document` — a CMS document.
+ * - `view` — a studio view's home, by view id.
+ * - `config` — code, so it is NAMED, never linked: `project` = `elytra.config.ts`, `studio` =
+ *   the developer's `defineStudio({…})` (its file path is theirs, AGENTS §4). `entry` names the
+ *   declaration (a route id, a view id).
+ * - `deployment` — a setting of the Convex deployment (env vars), named, never linked.
+ */
+export type NoticeLocation = {
+    kind: 'record';
+    recordKind: string;
+    id?: string;
+} | {
+    kind: 'document';
+    collection: string;
+    id: string;
+} | {
+    kind: 'view';
+    view: string;
+} | {
+    kind: 'config';
+    declaredIn: 'project' | 'studio';
+    entry?: string;
+} | {
+    kind: 'deployment';
+    settings: readonly string[];
+};
+/** An action a finding's row offers besides "Go to" (an engine finding's Retry). */
+export interface FindingAction {
+    label: string;
+    run(): void;
+}
+/** One persistent finding, as the tray reads it. */
+export interface Finding {
+    /** Unique across the tray (its publisher's identity + its key). */
+    id: string;
+    /** Who reported it — an engine source (`routes`, `config`, …) or a contributor's name. */
+    source: string;
+    /** Stable within its source. */
+    key: string;
+    severity: IssueSeverity;
+    /** The localized message — the detail. */
+    message: string;
+    /** A short localized title ("Invalid redirect"); absent → the row leads with the message. */
+    title?: string;
+    location?: NoticeLocation;
+    action?: FindingAction;
+}
+/**
+ * The engine's own finding sources, in the order the tray lists them (critic point 2: an
+ * EXPLICIT rank, never "registration order" — a source that clears and comes back must not
+ * move behind the addons). Reserved: an addon cannot publish under one of these names, or
+ * under the `engine:` prefix (it is listed, and reported — never silently merged).
+ */
+export declare const ENGINE_FINDING_SOURCES: readonly ["config", "customization", "routes", "orphans", "delivery"];
+export type EngineFindingSource = (typeof ENGINE_FINDING_SOURCES)[number];
+export declare function isReservedFindingSource(source: string): boolean;
+/**
+ * The tray's ONE order: source rank, then severity (errors first), then source name, then key
+ * — total and deterministic, whatever order the publishers mounted in.
+ */
+export declare function orderFindings(findings: readonly Finding[]): Finding[];
+/**
+ * Where a URL-map issue (EC-469/590/628) is: core addresses a redirect as
+ * `['redirects', <record id>]` (an unreadable row without an id: its index), and a route as
+ * `['routes', <route id>]` — routes are code, so a route issue is named in `elytra.config.ts`.
+ */
+export declare function routeIssueLocation(issue: Pick<CmsValidationIssue, 'path'>): NoticeLocation | undefined;
+/** A studio view as the location resolver needs it. */
+export interface LocatableView {
+    id: string;
+    /** The record kind a record rail lists (`railView`), absent on every other view. */
+    recordKind?: string;
+}
+/** What a finding's row offers for its location. */
+export type GoToTarget = {
+    kind: 'link';
+    splat: string;
+}
+/** `config` / `deployment`: what to name (the file, the settings) — never a link. */
+ | {
+    kind: 'named';
+    declaredIn?: 'project' | 'studio';
+    entry?: string;
+    settings?: readonly string[];
+};
+/**
+ * Where "Go to" leads, or what the row names. `null` when the location's view is not in this
+ * studio (a record kind no rail lists, a view the consumer did not mount): the message still
+ * says what is wrong, there is just nowhere in this studio to open.
+ */
+export declare function goToTarget(location: NoticeLocation, views: readonly LocatableView[]): GoToTarget | null;
+/** Who is reading the tray. */
+export interface FindingAudience {
+    /** The role grants `project.administer` — the one who can change config and the deployment. */
+    isAdmin: boolean;
+    /** The role grants `content.read`. */
+    canReadContent: boolean;
+    /** The views this role sees in the rail (`isNavViewVisible`), with the record kind a rail lists. */
+    views: readonly (LocatableView & {
+        visible: boolean;
+    })[];
+}
+/**
+ * Owner ruling (b), 2026-10-28: config and deployment findings go to admins; a finding
+ * located in content goes to anyone who can open that content; nothing is hidden from the
+ * role that can act on it. So:
+ * - `config` / `deployment` → admins;
+ * - `record` → whoever sees the rail that lists the kind; no such rail → admins (nobody else
+ *   can act on it from this studio, and it is still a real problem);
+ * - `view` → whoever sees that view (absent view → admins);
+ * - `document` → whoever can read content;
+ * - no location → everyone (nothing to gate on, and hiding it could hide it from its fixer).
+ */
+export declare function canSeeFinding(finding: Pick<Finding, 'location'>, audience: FindingAudience): boolean;
+/** Per-severity counts, for the header badge. */
+export declare function countBySeverity(entries: readonly {
+    severity: IssueSeverity;
+}[]): Record<IssueSeverity, number>;

package/dist/components/notifications/notice-model.js

@@ -0,0 +1,107 @@
+import { redirectRecordKind } from '@elytracms/core/persistence';
+import { studioPath } from '@elytracms/studio/router';
+/**
+ * The engine's own finding sources, in the order the tray lists them (critic point 2: an
+ * EXPLICIT rank, never "registration order" — a source that clears and comes back must not
+ * move behind the addons). Reserved: an addon cannot publish under one of these names, or
+ * under the `engine:` prefix (it is listed, and reported — never silently merged).
+ */
+export const ENGINE_FINDING_SOURCES = ['config', 'customization', 'routes', 'orphans', 'delivery'];
+/** Where every contributed source ranks: after the engine's, in source-name order. */
+const CONTRIBUTED_RANK = ENGINE_FINDING_SOURCES.length + 1;
+export function isReservedFindingSource(source) {
+    return ENGINE_FINDING_SOURCES.includes(source) || source.startsWith('engine:');
+}
+function sourceRank(source) {
+    const index = ENGINE_FINDING_SOURCES.indexOf(source);
+    return index === -1 ? CONTRIBUTED_RANK : index;
+}
+const SEVERITY_RANK = { error: 0, warning: 1 };
+/**
+ * The tray's ONE order: source rank, then severity (errors first), then source name, then key
+ * — total and deterministic, whatever order the publishers mounted in.
+ */
+export function orderFindings(findings) {
+    return [...findings].sort((a, b) => sourceRank(a.source) - sourceRank(b.source) ||
+        SEVERITY_RANK[a.severity] - SEVERITY_RANK[b.severity] ||
+        (a.source < b.source ? -1 : a.source > b.source ? 1 : 0) ||
+        (a.key < b.key ? -1 : a.key > b.key ? 1 : 0));
+}
+/**
+ * Where a URL-map issue (EC-469/590/628) is: core addresses a redirect as
+ * `['redirects', <record id>]` (an unreadable row without an id: its index), and a route as
+ * `['routes', <route id>]` — routes are code, so a route issue is named in `elytra.config.ts`.
+ */
+export function routeIssueLocation(issue) {
+    const [domain, id] = issue.path;
+    if (domain === 'redirects') {
+        return typeof id === 'string'
+            ? { kind: 'record', recordKind: redirectRecordKind.kind, id }
+            : { kind: 'record', recordKind: redirectRecordKind.kind };
+    }
+    if (domain === 'routes' && typeof id === 'string')
+        return { kind: 'config', declaredIn: 'project', entry: id };
+    return undefined;
+}
+/**
+ * Where "Go to" leads, or what the row names. `null` when the location's view is not in this
+ * studio (a record kind no rail lists, a view the consumer did not mount): the message still
+ * says what is wrong, there is just nowhere in this studio to open.
+ */
+export function goToTarget(location, views) {
+    switch (location.kind) {
+        case 'record': {
+            const view = views.find((candidate) => candidate.recordKind === location.recordKind);
+            if (!view)
+                return null;
+            return { kind: 'link', splat: location.id === undefined ? view.id : `${view.id}/${location.id}` };
+        }
+        case 'document':
+            return { kind: 'link', splat: studioPath.cmsDocument(location.collection, location.id) };
+        case 'view':
+            return views.some((candidate) => candidate.id === location.view) ? { kind: 'link', splat: location.view } : null;
+        case 'config':
+            return { kind: 'named', declaredIn: location.declaredIn, ...(location.entry !== undefined ? { entry: location.entry } : {}) };
+        case 'deployment':
+            return { kind: 'named', settings: location.settings };
+    }
+}
+/**
+ * Owner ruling (b), 2026-10-28: config and deployment findings go to admins; a finding
+ * located in content goes to anyone who can open that content; nothing is hidden from the
+ * role that can act on it. So:
+ * - `config` / `deployment` → admins;
+ * - `record` → whoever sees the rail that lists the kind; no such rail → admins (nobody else
+ *   can act on it from this studio, and it is still a real problem);
+ * - `view` → whoever sees that view (absent view → admins);
+ * - `document` → whoever can read content;
+ * - no location → everyone (nothing to gate on, and hiding it could hide it from its fixer).
+ */
+export function canSeeFinding(finding, audience) {
+    const location = finding.location;
+    if (!location)
+        return true;
+    switch (location.kind) {
+        case 'config':
+        case 'deployment':
+            return audience.isAdmin;
+        case 'record': {
+            const view = audience.views.find((candidate) => candidate.recordKind === location.recordKind);
+            return view ? view.visible : audience.isAdmin;
+        }
+        case 'view': {
+            const view = audience.views.find((candidate) => candidate.id === location.view);
+            return view ? view.visible : audience.isAdmin;
+        }
+        case 'document':
+            return audience.canReadContent;
+    }
+}
+/** Per-severity counts, for the header badge. */
+export function countBySeverity(entries) {
+    const counts = { error: 0, warning: 0 };
+    for (const entry of entries)
+        counts[entry.severity] += 1;
+    return counts;
+}
+//# sourceMappingURL=notice-model.js.map

package/dist/components/notifications/notice-model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notice-model.js","sourceRoot":"","sources":["../../../src/components/notifications/notice-model.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAA;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AA0DrD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAU,CAAA;AAG3G,sFAAsF;AACtF,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,MAAM,GAAG,CAAC,CAAA;AAE1D,MAAM,UAAU,uBAAuB,CAAC,MAAc;IACpD,OAAQ,sBAA4C,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;AACvG,CAAC;AAED,SAAS,UAAU,CAAC,MAAc;IAChC,MAAM,KAAK,GAAI,sBAA4C,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAC3E,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAA;AAChD,CAAC;AAED,MAAM,aAAa,GAAkC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAA;AAE7E;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,QAA4B;IACxD,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CACvB,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC;QAC3C,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC;QACrD,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC/C,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAuC;IACxE,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAA;IAC/B,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;QAC3B,OAAO,OAAO,EAAE,KAAK,QAAQ;YAC3B,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,kBAAkB,CAAC,IAAI,EAAE,EAAE,EAAE;YAC7D,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,kBAAkB,CAAC,IAAI,EAAE,CAAA;IAC7D,CAAC;IACD,IAAI,MAAM,KAAK,QAAQ,IAAI,OAAO,EAAE,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,CAAA;IAC9G,OAAO,SAAS,CAAA;AAClB,CAAC;AAeD;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,QAAwB,EAAE,KAA+B;IAClF,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtB,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,CAAC,CAAA;YACpF,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAA;YACtB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE,IAAI,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAA;QACnG,CAAC;QACD,KAAK,UAAU;YACb,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,WAAW,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAA;QAC1F,KAAK,MAAM;YACT,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;QAClH,KAAK,QAAQ;YACX,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;QAC/H,KAAK,YAAY;YACf,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAA;IACzD,CAAC;AACH,CAAC;AAYD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAAC,OAAkC,EAAE,QAAyB;IACzF,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAA;IACjC,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAA;IAC1B,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtB,KAAK,QAAQ,CAAC;QACd,KAAK,YAAY;YACf,OAAO,QAAQ,CAAC,OAAO,CAAA;QACzB,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,CAAC,CAAA;YAC7F,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAA;QAC/C,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,QAAQ,CAAC,IAAI,CAAC,CAAA;YAC/E,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAA;QAC/C,CAAC;QACD,KAAK,UAAU;YACb,OAAO,QAAQ,CAAC,cAAc,CAAA;IAClC,CAAC;AACH,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,eAAe,CAAC,OAA+C;IAC7E,MAAM,MAAM,GAAkC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAA;IACtE,KAAK,MAAM,KAAK,IAAI,OAAO;QAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;IACxD,OAAO,MAAM,CAAA;AACf,CAAC","sourcesContent":["import type { CmsValidationIssue } from '@elytracms/core/cms-core'\nimport { redirectRecordKind } from '@elytracms/core/persistence'\nimport { studioPath } from '@elytracms/studio/router'\nimport type { IssueSeverity } from '../issue-severity'\n\n/**\n * EC-690 — the model of the studio's ONE notification-and-issue surface (design note and\n * owner ruling in `tasks/EC-690-one-notification-and-issue-surface.md`).\n *\n * Two kinds of entry, two TYPES — never a `dismissable` flag:\n * - a {@link Finding} is PERSISTENT: it is listed while its producer publishes it, and no\n *   reader can dismiss it (no API exists for it);\n * - a transient notice (`lib/notices/toast-store.ts` `ToastItem`) is an action's outcome:\n *   always dismissable; a success expires, an error stays until dismissed.\n */\n\n/**\n * WHERE a finding is — what the tray's \"Go to\" opens, or the file it names. Exported for\n * addons (`@elytracms/studio/addon`), so a contributed finding can be located too.\n *\n * - `record` — a row of a record rail, by RECORD KIND (`redirect`, `submission`): a\n *   consumer names the rail's view (`nav.rail(kind, { id })`), the kind is what the data is.\n *   No `id` → the rail's list.\n * - `document` — a CMS document.\n * - `view` — a studio view's home, by view id.\n * - `config` — code, so it is NAMED, never linked: `project` = `elytra.config.ts`, `studio` =\n *   the developer's `defineStudio({…})` (its file path is theirs, AGENTS §4). `entry` names the\n *   declaration (a route id, a view id).\n * - `deployment` — a setting of the Convex deployment (env vars), named, never linked.\n */\nexport type NoticeLocation =\n  | { kind: 'record'; recordKind: string; id?: string }\n  | { kind: 'document'; collection: string; id: string }\n  | { kind: 'view'; view: string }\n  | { kind: 'config'; declaredIn: 'project' | 'studio'; entry?: string }\n  | { kind: 'deployment'; settings: readonly string[] }\n\n/** An action a finding's row offers besides \"Go to\" (an engine finding's Retry). */\nexport interface FindingAction {\n  label: string\n  run(): void\n}\n\n/** One persistent finding, as the tray reads it. */\nexport interface Finding {\n  /** Unique across the tray (its publisher's identity + its key). */\n  id: string\n  /** Who reported it — an engine source (`routes`, `config`, …) or a contributor's name. */\n  source: string\n  /** Stable within its source. */\n  key: string\n  severity: IssueSeverity\n  /** The localized message — the detail. */\n  message: string\n  /** A short localized title (\"Invalid redirect\"); absent → the row leads with the message. */\n  title?: string\n  location?: NoticeLocation\n  action?: FindingAction\n}\n\n/**\n * The engine's own finding sources, in the order the tray lists them (critic point 2: an\n * EXPLICIT rank, never \"registration order\" — a source that clears and comes back must not\n * move behind the addons). Reserved: an addon cannot publish under one of these names, or\n * under the `engine:` prefix (it is listed, and reported — never silently merged).\n */\nexport const ENGINE_FINDING_SOURCES = ['config', 'customization', 'routes', 'orphans', 'delivery'] as const\nexport type EngineFindingSource = (typeof ENGINE_FINDING_SOURCES)[number]\n\n/** Where every contributed source ranks: after the engine's, in source-name order. */\nconst CONTRIBUTED_RANK = ENGINE_FINDING_SOURCES.length + 1\n\nexport function isReservedFindingSource(source: string): boolean {\n  return (ENGINE_FINDING_SOURCES as readonly string[]).includes(source) || source.startsWith('engine:')\n}\n\nfunction sourceRank(source: string): number {\n  const index = (ENGINE_FINDING_SOURCES as readonly string[]).indexOf(source)\n  return index === -1 ? CONTRIBUTED_RANK : index\n}\n\nconst SEVERITY_RANK: Record<IssueSeverity, number> = { error: 0, warning: 1 }\n\n/**\n * The tray's ONE order: source rank, then severity (errors first), then source name, then key\n * — total and deterministic, whatever order the publishers mounted in.\n */\nexport function orderFindings(findings: readonly Finding[]): Finding[] {\n  return [...findings].sort(\n    (a, b) =>\n      sourceRank(a.source) - sourceRank(b.source) ||\n      SEVERITY_RANK[a.severity] - SEVERITY_RANK[b.severity] ||\n      (a.source < b.source ? -1 : a.source > b.source ? 1 : 0) ||\n      (a.key < b.key ? -1 : a.key > b.key ? 1 : 0),\n  )\n}\n\n/**\n * Where a URL-map issue (EC-469/590/628) is: core addresses a redirect as\n * `['redirects', <record id>]` (an unreadable row without an id: its index), and a route as\n * `['routes', <route id>]` — routes are code, so a route issue is named in `elytra.config.ts`.\n */\nexport function routeIssueLocation(issue: Pick<CmsValidationIssue, 'path'>): NoticeLocation | undefined {\n  const [domain, id] = issue.path\n  if (domain === 'redirects') {\n    return typeof id === 'string'\n      ? { kind: 'record', recordKind: redirectRecordKind.kind, id }\n      : { kind: 'record', recordKind: redirectRecordKind.kind }\n  }\n  if (domain === 'routes' && typeof id === 'string') return { kind: 'config', declaredIn: 'project', entry: id }\n  return undefined\n}\n\n/** A studio view as the location resolver needs it. */\nexport interface LocatableView {\n  id: string\n  /** The record kind a record rail lists (`railView`), absent on every other view. */\n  recordKind?: string\n}\n\n/** What a finding's row offers for its location. */\nexport type GoToTarget =\n  | { kind: 'link'; splat: string }\n  /** `config` / `deployment`: what to name (the file, the settings) — never a link. */\n  | { kind: 'named'; declaredIn?: 'project' | 'studio'; entry?: string; settings?: readonly string[] }\n\n/**\n * Where \"Go to\" leads, or what the row names. `null` when the location's view is not in this\n * studio (a record kind no rail lists, a view the consumer did not mount): the message still\n * says what is wrong, there is just nowhere in this studio to open.\n */\nexport function goToTarget(location: NoticeLocation, views: readonly LocatableView[]): GoToTarget | null {\n  switch (location.kind) {\n    case 'record': {\n      const view = views.find((candidate) => candidate.recordKind === location.recordKind)\n      if (!view) return null\n      return { kind: 'link', splat: location.id === undefined ? view.id : `${view.id}/${location.id}` }\n    }\n    case 'document':\n      return { kind: 'link', splat: studioPath.cmsDocument(location.collection, location.id) }\n    case 'view':\n      return views.some((candidate) => candidate.id === location.view) ? { kind: 'link', splat: location.view } : null\n    case 'config':\n      return { kind: 'named', declaredIn: location.declaredIn, ...(location.entry !== undefined ? { entry: location.entry } : {}) }\n    case 'deployment':\n      return { kind: 'named', settings: location.settings }\n  }\n}\n\n/** Who is reading the tray. */\nexport interface FindingAudience {\n  /** The role grants `project.administer` — the one who can change config and the deployment. */\n  isAdmin: boolean\n  /** The role grants `content.read`. */\n  canReadContent: boolean\n  /** The views this role sees in the rail (`isNavViewVisible`), with the record kind a rail lists. */\n  views: readonly (LocatableView & { visible: boolean })[]\n}\n\n/**\n * Owner ruling (b), 2026-10-28: config and deployment findings go to admins; a finding\n * located in content goes to anyone who can open that content; nothing is hidden from the\n * role that can act on it. So:\n * - `config` / `deployment` → admins;\n * - `record` → whoever sees the rail that lists the kind; no such rail → admins (nobody else\n *   can act on it from this studio, and it is still a real problem);\n * - `view` → whoever sees that view (absent view → admins);\n * - `document` → whoever can read content;\n * - no location → everyone (nothing to gate on, and hiding it could hide it from its fixer).\n */\nexport function canSeeFinding(finding: Pick<Finding, 'location'>, audience: FindingAudience): boolean {\n  const location = finding.location\n  if (!location) return true\n  switch (location.kind) {\n    case 'config':\n    case 'deployment':\n      return audience.isAdmin\n    case 'record': {\n      const view = audience.views.find((candidate) => candidate.recordKind === location.recordKind)\n      return view ? view.visible : audience.isAdmin\n    }\n    case 'view': {\n      const view = audience.views.find((candidate) => candidate.id === location.view)\n      return view ? view.visible : audience.isAdmin\n    }\n    case 'document':\n      return audience.canReadContent\n  }\n}\n\n/** Per-severity counts, for the header badge. */\nexport function countBySeverity(entries: readonly { severity: IssueSeverity }[]): Record<IssueSeverity, number> {\n  const counts: Record<IssueSeverity, number> = { error: 0, warning: 0 }\n  for (const entry of entries) counts[entry.severity] += 1\n  return counts\n}\n"]}

package/dist/components/notifications/outcome-notice.d.ts

@@ -0,0 +1,16 @@
+import type { OperationError } from '../../lib/operations/index.js';
+/**
+ * The tray text of a failed operation an owner holds: its localized label and message — or
+ * `null` when there is nothing to show. A session expiry is never a notice: it is routed to
+ * the blocking re-auth overlay (EC-403), and a tray entry would only duplicate it.
+ */
+export declare function outcomeNoticeMessage(error: OperationError | null): string | null;
+/**
+ * EC-690 (critic point 4) — a failed operation its OWNER holds (`persistError`, a rail's
+ * `lastError`) as an error notice of the one issues tray, for as long as the owner holds it:
+ * raised when it is set, retracted when the owner clears it (the next save, the inline
+ * banner's dismiss), and dismissing it in the tray calls `clear` — one state, two views. It
+ * stays until dismissed (owner ruling (d)). Registered ONCE, by the hook's caller, which must
+ * be the error's real owner — never an edit shell that merely renders it.
+ */
+export declare function useOutcomeNotice(error: OperationError | null, clear: () => void): void;

package/dist/components/notifications/outcome-notice.js

@@ -0,0 +1,34 @@
+import { useEffect, useId } from 'react';
+import { isSessionExpiredError } from '../../lib/auth-errors.js';
+import { operationErrorLabel, operationErrorMessage } from '../../lib/persona/labels.js';
+import { studioToasts } from '../../lib/notices/toast-store.js';
+/**
+ * The tray text of a failed operation an owner holds: its localized label and message — or
+ * `null` when there is nothing to show. A session expiry is never a notice: it is routed to
+ * the blocking re-auth overlay (EC-403), and a tray entry would only duplicate it.
+ */
+export function outcomeNoticeMessage(error) {
+    if (!error || isSessionExpiredError(error))
+        return null;
+    return `${operationErrorLabel(error.code)} — ${operationErrorMessage(error)}`;
+}
+/**
+ * EC-690 (critic point 4) — a failed operation its OWNER holds (`persistError`, a rail's
+ * `lastError`) as an error notice of the one issues tray, for as long as the owner holds it:
+ * raised when it is set, retracted when the owner clears it (the next save, the inline
+ * banner's dismiss), and dismissing it in the tray calls `clear` — one state, two views. It
+ * stays until dismissed (owner ruling (d)). Registered ONCE, by the hook's caller, which must
+ * be the error's real owner — never an edit shell that merely renders it.
+ */
+export function useOutcomeNotice(error, clear) {
+    const key = useId();
+    const message = outcomeNoticeMessage(error);
+    useEffect(() => {
+        if (message === null)
+            studioToasts.retract(key);
+        else
+            studioToasts.raise(key, { message, variant: 'error', onDismiss: clear });
+    }, [key, message, clear]);
+    useEffect(() => () => studioToasts.retract(key), [key]);
+}
+//# sourceMappingURL=outcome-notice.js.map

package/dist/components/notifications/outcome-notice.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outcome-notice.js","sourceRoot":"","sources":["../../../src/components/notifications/outcome-notice.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,OAAO,CAAA;AAExC,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAC7D,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAA;AACrF,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAA;AAE5D;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAA4B;IAC/D,IAAI,CAAC,KAAK,IAAI,qBAAqB,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACvD,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAA;AAC/E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAA4B,EAAE,KAAiB;IAC9E,MAAM,GAAG,GAAG,KAAK,EAAE,CAAA;IACnB,MAAM,OAAO,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAA;IAC3C,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,OAAO,KAAK,IAAI;YAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;;YAC1C,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAA;IAC/E,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAA;IACzB,SAAS,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;AACzD,CAAC","sourcesContent":["import { useEffect, useId } from 'react'\nimport type { OperationError } from '../../lib/operations'\nimport { isSessionExpiredError } from '../../lib/auth-errors'\nimport { operationErrorLabel, operationErrorMessage } from '../../lib/persona/labels'\nimport { studioToasts } from '../../lib/notices/toast-store'\n\n/**\n * The tray text of a failed operation an owner holds: its localized label and message — or\n * `null` when there is nothing to show. A session expiry is never a notice: it is routed to\n * the blocking re-auth overlay (EC-403), and a tray entry would only duplicate it.\n */\nexport function outcomeNoticeMessage(error: OperationError | null): string | null {\n  if (!error || isSessionExpiredError(error)) return null\n  return `${operationErrorLabel(error.code)} — ${operationErrorMessage(error)}`\n}\n\n/**\n * EC-690 (critic point 4) — a failed operation its OWNER holds (`persistError`, a rail's\n * `lastError`) as an error notice of the one issues tray, for as long as the owner holds it:\n * raised when it is set, retracted when the owner clears it (the next save, the inline\n * banner's dismiss), and dismissing it in the tray calls `clear` — one state, two views. It\n * stays until dismissed (owner ruling (d)). Registered ONCE, by the hook's caller, which must\n * be the error's real owner — never an edit shell that merely renders it.\n */\nexport function useOutcomeNotice(error: OperationError | null, clear: () => void): void {\n  const key = useId()\n  const message = outcomeNoticeMessage(error)\n  useEffect(() => {\n    if (message === null) studioToasts.retract(key)\n    else studioToasts.raise(key, { message, variant: 'error', onDismiss: clear })\n  }, [key, message, clear])\n  useEffect(() => () => studioToasts.retract(key), [key])\n}\n"]}

package/dist/components/notifications/shell-findings.d.ts

@@ -0,0 +1,36 @@
+import type { Project } from '@elytracms/core/studio-core';
+import type { Finding, FindingAudience } from './notice-model.js';
+/**
+ * EC-690 — every persistent finding of the studio shell, for the ONE issues tray.
+ *
+ * The ENGINE's own sources are computed here, in render — config (EC-479), customization
+ * (EC-236/467/478), the URL map (EC-469/590/628), orphaned collections (EC-606) and
+ * instant-publish health (EC-268) — so they are there on the first paint (no effect has to
+ * run before the badge can count them) and no contributor can overwrite them: they are not
+ * in the registry's namespace at all. Contributions (`useNavIssues`, a view's `useIssues`)
+ * come from the registry. Then the viewer's audience filter (owner ruling (b)) and the ONE
+ * order ({@link orderFindings}).
+ *
+ * The findings hooks moved here from `SectionNav`, which renders none of them any more (the
+ * rail foot is only its collapse toggle — owner ruling (a)).
+ */
+export declare function useShellFindings(project: Project): Finding[];
+/**
+ * Who is reading (owner ruling (b)): an admin (`project.administer`) sees config and
+ * deployment findings; a located finding shows to whoever can open its location. While the
+ * role is still loading nobody is an admin and no view is visible, so a gated finding
+ * appears once the role is known, never to the wrong reader first.
+ */
+export declare function useFindingAudience(project: Project): FindingAudience;
+/**
+ * EC-616 → EC-690: runs every view's always-on findings hook (`useIssues`) — whether or not
+ * the view is open — and publishes what it returns. One component per view (each hook keeps
+ * its own hook order), each its OWN publisher with the source `view:<id>`: before EC-690 every
+ * probe published under the one source `view:`, so two such views overwrote each other and
+ * one unmount retracted both (critic point 1).
+ */
+export declare function ViewIssuesProbes({ project }: {
+    project: Project;
+}): import("react").JSX.Element;
+/** The source a view's always-on findings publish under. */
+export declare function viewIssuesSource(viewId: string): string;

package/dist/components/notifications/shell-findings.js

@@ -0,0 +1,140 @@
+import { jsx as _jsx, Fragment as _Fragment } from "react/jsx-runtime";
+import { useMemo, useSyncExternalStore } from 'react';
+import { redirectRecordKind, roleGrantsCapability } from '@elytracms/core/persistence';
+import { getStudioRegistry } from '../../lib/registry/index.js';
+import { projectConfigIssues, resolveDeploymentCollections, resolveDeploymentReuse, resolveDeploymentRoutes, } from '../../lib/workspace/index.js';
+import { routeValidationIssues } from '../../lib/routes/route-issues.js';
+import { contentSessionOrphans, serverContentSessionOrphans, subscribeContentSession } from '../../lib/data/index.js';
+import { projectRolePolicyFor } from '../../lib/operations/project-runtime-config.js';
+import { customizationItems, orphanedCollectionItems, routeIssueItems } from '../nav-issues.js';
+import { useContributedNavIssues, useNavIssues } from '../nav-issues-registry.js';
+import { resolveReuse } from '../builder/reuse.js';
+import { useRecordList } from '../records/record-rail.js';
+import { useFieldRenderers } from '../cms/field-renderer.js';
+import { useProjectRole } from '../auth-context.js';
+import { isNavViewVisible, useStudioNav } from '../app-views/sidebar.js';
+import { useDeliveryHealthFindings } from '../delivery-health-banner.js';
+import { canSeeFinding, orderFindings } from './notice-model.js';
+/**
+ * EC-690 — every persistent finding of the studio shell, for the ONE issues tray.
+ *
+ * The ENGINE's own sources are computed here, in render — config (EC-479), customization
+ * (EC-236/467/478), the URL map (EC-469/590/628), orphaned collections (EC-606) and
+ * instant-publish health (EC-268) — so they are there on the first paint (no effect has to
+ * run before the badge can count them) and no contributor can overwrite them: they are not
+ * in the registry's namespace at all. Contributions (`useNavIssues`, a view's `useIssues`)
+ * come from the registry. Then the viewer's audience filter (owner ruling (b)) and the ONE
+ * order ({@link orderFindings}).
+ *
+ * The findings hooks moved here from `SectionNav`, which renders none of them any more (the
+ * rail foot is only its collapse toggle — owner ruling (a)).
+ */
+export function useShellFindings(project) {
+    const nav = useStudioNav(project);
+    const { issues: rendererIssues } = useFieldRenderers();
+    const configIssues = useProjectConfigIssues();
+    const reuseIssues = useReuseIssues();
+    const routeIssues = useRouteIssues(project.id);
+    const orphanIssues = useOrphanedCollectionIssues();
+    const deliveryIssues = useDeliveryHealthFindings(project.id);
+    const contributed = useContributedNavIssues();
+    const audience = useFindingAudience(project);
+    return useMemo(() => {
+        const engine = [
+            // Config issues lead: "this project declares no collections" explains every other
+            // emptiness on the screen, so it is the first thing to read.
+            ...asFindings('config', customizationItems(configIssues)),
+            ...asFindings('customization', customizationItems([...nav.issues, ...rendererIssues, ...reuseIssues])),
+            ...asFindings('routes', routeIssues),
+            ...asFindings('orphans', orphanIssues),
+            ...asFindings('delivery', deliveryIssues),
+        ];
+        return orderFindings([...engine, ...contributed]).filter((finding) => canSeeFinding(finding, audience));
+    }, [configIssues, nav.issues, rendererIssues, reuseIssues, routeIssues, orphanIssues, deliveryIssues, contributed, audience]);
+}
+function asFindings(source, items) {
+    return items.map((item) => ({ id: `${source}:${item.key}`, source, ...item }));
+}
+/**
+ * Who is reading (owner ruling (b)): an admin (`project.administer`) sees config and
+ * deployment findings; a located finding shows to whoever can open its location. While the
+ * role is still loading nobody is an admin and no view is visible, so a gated finding
+ * appears once the role is known, never to the wrong reader first.
+ */
+export function useFindingAudience(project) {
+    const nav = useStudioNav(project);
+    const role = useProjectRole(project.id);
+    return useMemo(() => {
+        const policy = projectRolePolicyFor(project.id);
+        const ctx = { project, role };
+        return {
+            isAdmin: role !== null && roleGrantsCapability(role, 'project.administer', policy),
+            canReadContent: role !== null && roleGrantsCapability(role, 'content.read', policy),
+            views: nav.registry.views.map((view) => ({
+                id: view.id,
+                ...(view.recordKind !== undefined ? { recordKind: view.recordKind } : {}),
+                visible: role !== null && isNavViewVisible(view, ctx),
+            })),
+        };
+    }, [nav, role, project]);
+}
+/**
+ * EC-616 → EC-690: runs every view's always-on findings hook (`useIssues`) — whether or not
+ * the view is open — and publishes what it returns. One component per view (each hook keeps
+ * its own hook order), each its OWN publisher with the source `view:<id>`: before EC-690 every
+ * probe published under the one source `view:`, so two such views overwrote each other and
+ * one unmount retracted both (critic point 1).
+ */
+export function ViewIssuesProbes({ project }) {
+    const nav = useStudioNav(project);
+    const issueViews = useMemo(() => nav.registry.views.filter((view) => view.useIssues), [nav]);
+    return (_jsx(_Fragment, { children: issueViews.map((view) => (_jsx(ViewIssuesProbe, { view: view, project: project }, view.id))) }));
+}
+function ViewIssuesProbe({ view, project }) {
+    const issues = view.useIssues({ project, projectId: project.id });
+    useNavIssues(viewIssuesSource(view.id), issues);
+    return null;
+}
+/** The source a view's always-on findings publish under. */
+export function viewIssuesSource(viewId) {
+    return `view:${viewId}`;
+}
+/**
+ * EC-479 — what the project has not declared but the studio cannot work without. Read from
+ * the config holder alone (static per studio boot), so it needs no CMS provider and is
+ * memoised once. The pure decision core is `projectConfigIssues`.
+ */
+function useProjectConfigIssues() {
+    return useMemo(() => projectConfigIssues(resolveDeploymentCollections()), []);
+}
+/**
+ * EC-467 — the project's reusable-elements config issues: a declaration that cannot
+ * resolve, or an ambiguous inference the studio refuses to guess through. Static per studio
+ * boot (registry + config collections + studio config). The pure core is `resolveReuse`.
+ */
+function useReuseIssues() {
+    return useMemo(() => resolveReuse(getStudioRegistry().registry.list(), resolveDeploymentCollections(), resolveDeploymentReuse())
+        .issues, []);
+}
+/**
+ * EC-469 — the project's URL-map issues: two routes that match the same URLs, a redirect
+ * chain that loops, a duplicate or unreadable redirect. Routes are CODE (config, static per
+ * boot); redirects are editorial DATA (the rail, live) — the read shares the rail's own query
+ * key, so a finding disappears the moment it is fixed; while that query is loading or failed
+ * only the code-side conflicts are reported (the rail surfaces its own load error).
+ */
+function useRouteIssues(projectId) {
+    const redirects = useRecordList(redirectRecordKind, projectId).data;
+    return useMemo(() => routeIssueItems(routeValidationIssues({ routes: resolveDeploymentRoutes(), collections: resolveDeploymentCollections() }, redirects ?? [])), [redirects]);
+}
+/**
+ * EC-606 — stored documents whose collection the project does not declare. Read from the
+ * content session (subscribable, configured from the same hydration in both modes); the
+ * server snapshot is empty — there is no session during SSR. The pure mapping is
+ * {@link orphanedCollectionItems}.
+ */
+function useOrphanedCollectionIssues() {
+    const orphans = useSyncExternalStore(subscribeContentSession, contentSessionOrphans, serverContentSessionOrphans);
+    return useMemo(() => orphanedCollectionItems(orphans), [orphans]);
+}
+//# sourceMappingURL=shell-findings.js.map

package/dist/components/notifications/shell-findings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-findings.js","sourceRoot":"","sources":["../../../src/components/notifications/shell-findings.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,OAAO,CAAA;AAGrD,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAA;AACtF,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,EACL,mBAAmB,EACnB,4BAA4B,EAC5B,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAA;AACrE,OAAO,EAAE,qBAAqB,EAAE,2BAA2B,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAA;AAC5G,OAAO,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAA;AAClF,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAE5F,OAAO,EAAE,uBAAuB,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AAC9E,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAChD,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAErE,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAA;AAErE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAG7D;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAC/C,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAA;IACjC,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,iBAAiB,EAAE,CAAA;IACtD,MAAM,YAAY,GAAG,sBAAsB,EAAE,CAAA;IAC7C,MAAM,WAAW,GAAG,cAAc,EAAE,CAAA;IACpC,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC9C,MAAM,YAAY,GAAG,2BAA2B,EAAE,CAAA;IAClD,MAAM,cAAc,GAAG,yBAAyB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC5D,MAAM,WAAW,GAAG,uBAAuB,EAAE,CAAA;IAC7C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAA;IAE5C,OAAO,OAAO,CAAC,GAAG,EAAE;QAClB,MAAM,MAAM,GAAc;YACxB,kFAAkF;YAClF,6DAA6D;YAC7D,GAAG,UAAU,CAAC,QAAQ,EAAE,kBAAkB,CAAC,YAAY,CAAC,CAAC;YACzD,GAAG,UAAU,CAAC,eAAe,EAAE,kBAAkB,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,GAAG,cAAc,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC;YACtG,GAAG,UAAU,CAAC,QAAQ,EAAE,WAAW,CAAC;YACpC,GAAG,UAAU,CAAC,SAAS,EAAE,YAAY,CAAC;YACtC,GAAG,UAAU,CAAC,UAAU,EAAE,cAAc,CAAC;SAC1C,CAAA;QACD,OAAO,aAAa,CAAC,CAAC,GAAG,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAA;IACzG,CAAC,EAAE,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAA;AAC/H,CAAC;AAED,SAAS,UAAU,CAAC,MAA2B,EAAE,KAAwD;IACvG,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,CAAA;AAChF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAgB;IACjD,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAA;IACjC,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IACvC,OAAO,OAAO,CAAC,GAAG,EAAE;QAClB,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAC/C,MAAM,GAAG,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;QAC7B,OAAO;YACL,OAAO,EAAE,IAAI,KAAK,IAAI,IAAI,oBAAoB,CAAC,IAAI,EAAE,oBAAoB,EAAE,MAAM,CAAC;YAClF,cAAc,EAAE,IAAI,KAAK,IAAI,IAAI,oBAAoB,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,CAAC;YACnF,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBACvC,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzE,OAAO,EAAE,IAAI,KAAK,IAAI,IAAI,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC;aACtD,CAAC,CAAC;SACJ,CAAA;IACH,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAA;AAC1B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAAE,OAAO,EAAwB;IAChE,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAA;IACjC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;IAC5F,OAAO,CACL,4BACG,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CACxB,KAAC,eAAe,IAAe,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,IAArC,IAAI,CAAC,EAAE,CAAkC,CAChE,CAAC,GACD,CACJ,CAAA;AACH,CAAC;AAED,SAAS,eAAe,CAAC,EAAE,IAAI,EAAE,OAAO,EAA6C;IACnF,MAAM,MAAM,GAAG,IAAI,CAAC,SAAU,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;IAClE,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAA;IAC/C,OAAO,IAAI,CAAA;AACb,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,OAAO,QAAQ,MAAM,EAAE,CAAA;AACzB,CAAC;AAED;;;;GAIG;AACH,SAAS,sBAAsB;IAC7B,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,4BAA4B,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;AAC/E,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc;IACrB,OAAO,OAAO,CACZ,GAAG,EAAE,CACH,YAAY,CAAC,iBAAiB,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,4BAA4B,EAAE,EAAE,sBAAsB,EAAE,CAAC;SACxG,MAAM,EACX,EAAE,CACH,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,cAAc,CAAC,SAAiB;IACvC,MAAM,SAAS,GAAG,aAAa,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC,IAAI,CAAA;IACnE,OAAO,OAAO,CACZ,GAAG,EAAE,CACH,eAAe,CACb,qBAAqB,CACnB,EAAE,MAAM,EAAE,uBAAuB,EAAE,EAAE,WAAW,EAAE,4BAA4B,EAAE,EAAE,EAClF,SAAS,IAAI,EAAE,CAChB,CACF,EACH,CAAC,SAAS,CAAC,CACZ,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,2BAA2B;IAClC,MAAM,OAAO,GAAG,oBAAoB,CAAC,uBAAuB,EAAE,qBAAqB,EAAE,2BAA2B,CAAC,CAAA;IACjH,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC,uBAAuB,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAA;AACnE,CAAC","sourcesContent":["import { useMemo, useSyncExternalStore } from 'react'\nimport type { Project } from '@elytracms/core/studio-core'\nimport type { CustomizationIssue } from '@elytracms/core/studio-core'\nimport { redirectRecordKind, roleGrantsCapability } from '@elytracms/core/persistence'\nimport { getStudioRegistry } from '../../lib/registry'\nimport {\n  projectConfigIssues,\n  resolveDeploymentCollections,\n  resolveDeploymentReuse,\n  resolveDeploymentRoutes,\n} from '../../lib/workspace'\nimport { routeValidationIssues } from '../../lib/routes/route-issues'\nimport { contentSessionOrphans, serverContentSessionOrphans, subscribeContentSession } from '../../lib/data'\nimport { projectRolePolicyFor } from '../../lib/operations/project-runtime-config'\nimport { customizationItems, orphanedCollectionItems, routeIssueItems } from '../nav-issues'\nimport type { NavIssueItem } from '../nav-issues'\nimport { useContributedNavIssues, useNavIssues } from '../nav-issues-registry'\nimport { resolveReuse } from '../builder/reuse'\nimport { useRecordList } from '../records/record-rail'\nimport { useFieldRenderers } from '../cms/field-renderer'\nimport { useProjectRole } from '../auth-context'\nimport { isNavViewVisible, useStudioNav } from '../app-views/sidebar'\nimport type { AppViewModule } from '../app-views/module'\nimport { useDeliveryHealthFindings } from '../delivery-health-banner'\nimport type { DeliveryHealthFinding } from '../delivery-health-banner'\nimport { canSeeFinding, orderFindings } from './notice-model'\nimport type { EngineFindingSource, Finding, FindingAudience } from './notice-model'\n\n/**\n * EC-690 — every persistent finding of the studio shell, for the ONE issues tray.\n *\n * The ENGINE's own sources are computed here, in render — config (EC-479), customization\n * (EC-236/467/478), the URL map (EC-469/590/628), orphaned collections (EC-606) and\n * instant-publish health (EC-268) — so they are there on the first paint (no effect has to\n * run before the badge can count them) and no contributor can overwrite them: they are not\n * in the registry's namespace at all. Contributions (`useNavIssues`, a view's `useIssues`)\n * come from the registry. Then the viewer's audience filter (owner ruling (b)) and the ONE\n * order ({@link orderFindings}).\n *\n * The findings hooks moved here from `SectionNav`, which renders none of them any more (the\n * rail foot is only its collapse toggle — owner ruling (a)).\n */\nexport function useShellFindings(project: Project): Finding[] {\n  const nav = useStudioNav(project)\n  const { issues: rendererIssues } = useFieldRenderers()\n  const configIssues = useProjectConfigIssues()\n  const reuseIssues = useReuseIssues()\n  const routeIssues = useRouteIssues(project.id)\n  const orphanIssues = useOrphanedCollectionIssues()\n  const deliveryIssues = useDeliveryHealthFindings(project.id)\n  const contributed = useContributedNavIssues()\n  const audience = useFindingAudience(project)\n\n  return useMemo(() => {\n    const engine: Finding[] = [\n      // Config issues lead: \"this project declares no collections\" explains every other\n      // emptiness on the screen, so it is the first thing to read.\n      ...asFindings('config', customizationItems(configIssues)),\n      ...asFindings('customization', customizationItems([...nav.issues, ...rendererIssues, ...reuseIssues])),\n      ...asFindings('routes', routeIssues),\n      ...asFindings('orphans', orphanIssues),\n      ...asFindings('delivery', deliveryIssues),\n    ]\n    return orderFindings([...engine, ...contributed]).filter((finding) => canSeeFinding(finding, audience))\n  }, [configIssues, nav.issues, rendererIssues, reuseIssues, routeIssues, orphanIssues, deliveryIssues, contributed, audience])\n}\n\nfunction asFindings(source: EngineFindingSource, items: readonly (NavIssueItem | DeliveryHealthFinding)[]): Finding[] {\n  return items.map((item) => ({ id: `${source}:${item.key}`, source, ...item }))\n}\n\n/**\n * Who is reading (owner ruling (b)): an admin (`project.administer`) sees config and\n * deployment findings; a located finding shows to whoever can open its location. While the\n * role is still loading nobody is an admin and no view is visible, so a gated finding\n * appears once the role is known, never to the wrong reader first.\n */\nexport function useFindingAudience(project: Project): FindingAudience {\n  const nav = useStudioNav(project)\n  const role = useProjectRole(project.id)\n  return useMemo(() => {\n    const policy = projectRolePolicyFor(project.id)\n    const ctx = { project, role }\n    return {\n      isAdmin: role !== null && roleGrantsCapability(role, 'project.administer', policy),\n      canReadContent: role !== null && roleGrantsCapability(role, 'content.read', policy),\n      views: nav.registry.views.map((view) => ({\n        id: view.id,\n        ...(view.recordKind !== undefined ? { recordKind: view.recordKind } : {}),\n        visible: role !== null && isNavViewVisible(view, ctx),\n      })),\n    }\n  }, [nav, role, project])\n}\n\n/**\n * EC-616 → EC-690: runs every view's always-on findings hook (`useIssues`) — whether or not\n * the view is open — and publishes what it returns. One component per view (each hook keeps\n * its own hook order), each its OWN publisher with the source `view:<id>`: before EC-690 every\n * probe published under the one source `view:`, so two such views overwrote each other and\n * one unmount retracted both (critic point 1).\n */\nexport function ViewIssuesProbes({ project }: { project: Project }) {\n  const nav = useStudioNav(project)\n  const issueViews = useMemo(() => nav.registry.views.filter((view) => view.useIssues), [nav])\n  return (\n    <>\n      {issueViews.map((view) => (\n        <ViewIssuesProbe key={view.id} view={view} project={project} />\n      ))}\n    </>\n  )\n}\n\nfunction ViewIssuesProbe({ view, project }: { view: AppViewModule; project: Project }) {\n  const issues = view.useIssues!({ project, projectId: project.id })\n  useNavIssues(viewIssuesSource(view.id), issues)\n  return null\n}\n\n/** The source a view's always-on findings publish under. */\nexport function viewIssuesSource(viewId: string): string {\n  return `view:${viewId}`\n}\n\n/**\n * EC-479 — what the project has not declared but the studio cannot work without. Read from\n * the config holder alone (static per studio boot), so it needs no CMS provider and is\n * memoised once. The pure decision core is `projectConfigIssues`.\n */\nfunction useProjectConfigIssues(): CustomizationIssue[] {\n  return useMemo(() => projectConfigIssues(resolveDeploymentCollections()), [])\n}\n\n/**\n * EC-467 — the project's reusable-elements config issues: a declaration that cannot\n * resolve, or an ambiguous inference the studio refuses to guess through. Static per studio\n * boot (registry + config collections + studio config). The pure core is `resolveReuse`.\n */\nfunction useReuseIssues(): CustomizationIssue[] {\n  return useMemo(\n    () =>\n      resolveReuse(getStudioRegistry().registry.list(), resolveDeploymentCollections(), resolveDeploymentReuse())\n        .issues,\n    [],\n  )\n}\n\n/**\n * EC-469 — the project's URL-map issues: two routes that match the same URLs, a redirect\n * chain that loops, a duplicate or unreadable redirect. Routes are CODE (config, static per\n * boot); redirects are editorial DATA (the rail, live) — the read shares the rail's own query\n * key, so a finding disappears the moment it is fixed; while that query is loading or failed\n * only the code-side conflicts are reported (the rail surfaces its own load error).\n */\nfunction useRouteIssues(projectId: string): NavIssueItem[] {\n  const redirects = useRecordList(redirectRecordKind, projectId).data\n  return useMemo(\n    () =>\n      routeIssueItems(\n        routeValidationIssues(\n          { routes: resolveDeploymentRoutes(), collections: resolveDeploymentCollections() },\n          redirects ?? [],\n        ),\n      ),\n    [redirects],\n  )\n}\n\n/**\n * EC-606 — stored documents whose collection the project does not declare. Read from the\n * content session (subscribable, configured from the same hydration in both modes); the\n * server snapshot is empty — there is no session during SSR. The pure mapping is\n * {@link orphanedCollectionItems}.\n */\nfunction useOrphanedCollectionIssues(): NavIssueItem[] {\n  const orphans = useSyncExternalStore(subscribeContentSession, contentSessionOrphans, serverContentSessionOrphans)\n  return useMemo(() => orphanedCollectionItems(orphans), [orphans])\n}\n"]}

package/dist/components/rail-view-source.js

@@ -1,6 +1,7 @@
 import { useCallback, useMemo, useState } from 'react';
 import { defaultViewState } from '../lib/cms-views/index.js';
 import { runBulkAction } from './cms/bulk-actions.js';
+import { useOutcomeNotice } from './notifications/outcome-notice.js';
 /** The default normalizer for an {@link OkResult}: a failure maps to a
  *  surfaced {@link OperationError}; a success maps to no error at all. */
 export function normalizeOkResult(result) {
@@ -122,6 +123,10 @@ export function useRailViewSource(adapter) {
         setViewStateRaw((prev) => (typeof update === 'function' ? update(prev) : update));
     }, []);
     const clearLastError = useCallback(() => setLastError(null), []);
+    // EC-690: a failed save/remove is ALSO an error notice of the shell's issues tray, for as long
+    // as this rail holds it — registered here, at its owner, once (the edit shell only renders it);
+    // dismissing it in the tray clears it here too.
+    useOutcomeNotice(lastError, clearLastError);
     const save = useCallback(createErrorMappedWriter(rawSave, normalizeSaveResult, setLastError), [
         rawSave,
         normalizeSaveResult,