@jini-ai/cms 0.5.8 → 0.5.10

package/CHANGELOG.md

@@ -1,3 +1,12 @@
+## 0.5.10 — 2026-10-13
+
+- `./entries`: `InMemoryEntryRepo.hardDelete({ workspaceId, id })` removes one workspace-scoped entry and its revisions (memory-only purge seam, not part of the port).
+- `./forms`: `InMemoryFormSubmissionRepo.listAllForDefinition({ workspaceId, formDefinitionId })` lists a form's submissions, trashed ones included, so a host can drop their Trash rows before the purge cascade (memory-only, not part of the port).
+
+## 0.5.9 — 2026-10-13
+
+- `./widgets`: write, embed and region services take an optional `entryLocks` dependency, threaded into every `withEntryLock` call. New `getEntryLockState({ owner })` returns one lock state per store object, so a host that rebuilds dependency bags per request still shares one queue per store. Omitting `entryLocks` keeps the previous module-wide state.
+
 ## 0.5.8 — 2026-10-13
 
 - New `./navigation/node` subpath: re-exports the full `./navigation` API with parse5 menu-HTML normalization bound into `createMenu`, `updateMenuTree`, `mergeMenuHtml` and `buildMenusRegistrations`. Node hosts writing HTML-mode menus should import those from `./navigation/node`.

package/dist/entries/repo.memory.d.ts

@@ -9,7 +9,7 @@ import type { EntryRecord, EntryStatus } from "./types.js";
  */
 export declare class InMemoryEntryRepo implements EntryRepoPort, EntryListPort {
     private readonly byId;
-    private readonly revisions;
+    private revisions;
     private static slugKey;
     findBySlug(params: {
         workspaceId: string;
@@ -22,6 +22,12 @@ export declare class InMemoryEntryRepo implements EntryRepoPort, EntryListPort {
     }): Promise<EntryRecord | null>;
     save(row: EntryRecord, options?: EntrySaveOptions): Promise<void>;
     appendRevision(revision: EntryRevisionInput): Promise<void>;
+    /** Memory-only purge seam: removes the scoped entry and its revision history. Missing or foreign
+     * entries are unchanged. @complexity O(r) time and space over stored revisions. */
+    hardDelete(required: {
+        workspaceId: string;
+        id: string;
+    }, _optional?: Record<string, never>): Promise<void>;
     transaction<T>({ fn }: {
         fn: () => Promise<T>;
     }): Promise<T>;

package/dist/entries/repo.memory.js

@@ -37,6 +37,15 @@ export class InMemoryEntryRepo {
     async appendRevision(revision) {
         this.revisions.push(revision);
     }
+    /** Memory-only purge seam: removes the scoped entry and its revision history. Missing or foreign
+     * entries are unchanged. @complexity O(r) time and space over stored revisions. */
+    async hardDelete(required, _optional = {}) {
+        const row = this.byId.get(required.id);
+        if (!row || row.workspaceId !== required.workspaceId)
+            return;
+        this.byId.delete(required.id);
+        this.revisions = this.revisions.filter(revision => revision.workspaceId !== required.workspaceId || revision.entryId !== required.id);
+    }
     async transaction({ fn }) {
         return fn();
     }

package/dist/forms/repo.memory.d.ts

@@ -115,6 +115,12 @@ export declare class InMemoryFormSubmissionRepo implements FormSubmissionRepoPor
         workspaceId: UUID;
         formDefinitionId: UUID;
     }): Promise<void>;
+    /** Trash-blind memory seam: enumerate a form's submissions before its purge cascade, so the host
+     * can forget their Trash index rows too. @complexity O(n) time and space over stored submissions. */
+    listAllForDefinition(required: {
+        workspaceId: UUID;
+        formDefinitionId: UUID;
+    }, _optional?: Record<string, never>): Promise<StoredFormSubmission[]>;
 }
 export {};
 //# sourceMappingURL=repo.memory.d.ts.map

package/dist/forms/repo.memory.js

@@ -184,5 +184,12 @@ export class InMemoryFormSubmissionRepo {
             }
         }
     }
+    /** Trash-blind memory seam: enumerate a form's submissions before its purge cascade, so the host
+     * can forget their Trash index rows too. @complexity O(n) time and space over stored submissions. */
+    async listAllForDefinition(required, _optional = {}) {
+        return [...this.rows.values()]
+            .filter(row => row.workspaceId === required.workspaceId && row.formDefinitionId === required.formDefinitionId)
+            .map(cloneSubmission);
+    }
 }
 //# sourceMappingURL=repo.memory.js.map

package/dist/widgets/concurrency.d.ts

@@ -22,6 +22,11 @@ export type EntryLockState = Map<string, Promise<void>>;
 /** A host can own this state; the compatibility adapter still serializes existing callers.
  * Idle keys are removed by withEntryLock. @complexity O(1). */
 export declare function createEntryLockState(_required: Record<string, never>, _optional?: Record<string, never>): EntryLockState;
+/** Repeated dependency composition for the same store retains one lock queue.
+ * The weak owner reference lets disposed stores and their idle state be collected. @complexity O(1). */
+export declare function getEntryLockState({ owner }: {
+    readonly owner: object;
+}, _optional?: Record<string, never>): EntryLockState;
 /**
  * Runs `fn` exclusively with respect to every other `withEntryLock` call sharing the same `key` —
  * callers queue in call order, each waiting for the previous holder to finish.

package/dist/widgets/concurrency.js

@@ -3,6 +3,17 @@
 export function createEntryLockState(_required, _optional = {}) {
     return new Map();
 }
+const ownedLocks = new WeakMap();
+/** Repeated dependency composition for the same store retains one lock queue.
+ * The weak owner reference lets disposed stores and their idle state be collected. @complexity O(1). */
+export function getEntryLockState({ owner }, _optional = {}) {
+    let locks = ownedLocks.get(owner);
+    if (!locks) {
+        locks = createEntryLockState({});
+        ownedLocks.set(owner, locks);
+    }
+    return locks;
+}
 const defaultLocks = createEntryLockState({});
 /**
  * Runs `fn` exclusively with respect to every other `withEntryLock` call sharing the same `key` —

package/dist/widgets/embed-service.d.ts

@@ -29,7 +29,10 @@ import type { ContentTypeRepoPort } from "../content-types/index.js";
 import type { EntryRecord, EntryRepoPort } from "../entries/index.js";
 import type { WidgetHostPorts, BeforeSaveHookPort, PostRecord, ForgetRemovedPostFn, PostRepoPort } from "./host-ports.js";
 import { type WidgetsAuthorizeFn } from "./authorize-helper.js";
+import { type EntryLockState } from "./concurrency.js";
 export interface EmbedServiceDeps {
+    /** One store-owned state shared by write, embed and region services; omission preserves compatibility. */
+    entryLocks?: EntryLockState;
     host: Pick<WidgetHostPorts, "entries" | "entryRefs" | "posts">;
     entryRepo: EntryRepoPort;
     contentTypeRepo: ContentTypeRepoPort;

package/dist/widgets/embed-service.js

@@ -381,7 +381,7 @@ export async function insertWidgetEmbed(required, _optional = {}) {
                 ? await writeHostBody(deps, input.workspaceId, input.actor, host.record, input.baseVersion, nextBodyJson)
                 : await writePostHostBody(deps, input.workspaceId, input.actor, host.record, input.baseVersion, nextBodyJson);
             return { entry, placementId };
-        } });
+        } }, deps.entryLocks ? { locks: deps.entryLocks } : {});
 }
 /** REQ-44/45: removes the `widgetEmbed` node matching `placementId` from the host entry's body —
  * the placement itself is removed (the widget instance it referenced is untouched). */
@@ -407,7 +407,7 @@ export async function removeWidgetEmbed(required, _optional = {}) {
                 ? await writeHostBody(deps, input.workspaceId, input.actor, host.record, input.baseVersion, nextBodyJson)
                 : await writePostHostBody(deps, input.workspaceId, input.actor, host.record, input.baseVersion, nextBodyJson);
             return { entry };
-        } });
+        } }, deps.entryLocks ? { locks: deps.entryLocks } : {});
 }
 export class WidgetEmbedReorderCountMismatchError extends Error {
     expectedCount;
@@ -455,6 +455,6 @@ export async function reorderWidgetEmbeds(required, _optional = {}) {
                 ? await writeHostBody(deps, input.workspaceId, input.actor, host.record, input.baseVersion, nextBodyJson)
                 : await writePostHostBody(deps, input.workspaceId, input.actor, host.record, input.baseVersion, nextBodyJson);
             return { entry };
-        } });
+        } }, deps.entryLocks ? { locks: deps.entryLocks } : {});
 }
 //# sourceMappingURL=embed-service.js.map

package/dist/widgets/region-area-service.d.ts

@@ -24,9 +24,12 @@ import type { EntryRefsRepoPort } from "./ports.js";
 import type { ContentTypeRepoPort } from "../content-types/index.js";
 import type { EntryListPort, EntryRepoPort } from "../entries/index.js";
 import { type WidgetsAuthorizeFn } from "./authorize-helper.js";
+import { type EntryLockState } from "./concurrency.js";
 import type { WidgetRegionBindingRepoPort } from "./ports.js";
 import type { WidgetAreaEntry, WidgetPlacementNode, WidgetRegionKey } from "./types.js";
 export interface RegionAreaServiceDeps {
+    /** One store-owned state shared by write, embed and region services; omission preserves compatibility. */
+    entryLocks?: EntryLockState;
     host: Pick<WidgetHostPorts, "entries" | "contentTypes" | "entryRefs">;
     entryRepo: EntryRepoPort & EntryListPort;
     contentTypeRepo: ContentTypeRepoPort;

package/dist/widgets/region-area-service.js

@@ -78,7 +78,7 @@ export async function bindWidgetArea(required, _optional = {}) {
                 updatedAt: clockNowIso({ clock: deps.clock }),
             });
             return { areaEntry: toWidgetAreaEntry({ entry: entry }) };
-        } });
+        } }, deps.entryLocks ? { locks: deps.entryLocks } : {});
 }
 /** REQ-16/AC-10: every referenced widgetEntryId must exist, be a live (non-trashed) widget instance,
  *  in this same workspace — checked before any write. Throws the first violation found. */
@@ -142,7 +142,7 @@ export async function mutateWidgetAreaPlacements(required, _optional = {}) {
                 updatedAt: clockNowIso({ clock: deps.clock }),
             });
             return { areaEntry: toWidgetAreaEntry({ entry: result.value.entry }) };
-        } });
+        } }, deps.entryLocks ? { locks: deps.entryLocks } : {});
 }
 /**
  * REQ-12/14: reconciles `widget_region_bindings` from the authoritative `widget_area` entries. The

package/dist/widgets/write-service.d.ts

@@ -29,10 +29,13 @@ import type { EntryRefsRepoPort } from "./ports.js";
 import type { ContentTypeRepoPort } from "../content-types/index.js";
 import type { EntryListPort, EntryRepoPort } from "../entries/index.js";
 import { type WidgetsAuthorizeFn } from "./authorize-helper.js";
+import { type EntryLockState } from "./concurrency.js";
 import type { RemoveWidgetFn } from "./ports.js";
 import type { WidgetInstanceEntry, WidgetTypeKey } from "./types.js";
 import type { WidgetHostPorts } from "./host-ports.js";
 export interface WidgetWriteServiceDeps {
+    /** One store-owned state shared by write, embed and region services; omission preserves compatibility. */
+    entryLocks?: EntryLockState;
     host: Pick<WidgetHostPorts, "entries" | "contentTypes" | "entryRefs" | "slugify">;
     entryRepo: EntryRepoPort & EntryListPort;
     contentTypeRepo: ContentTypeRepoPort;
@@ -128,7 +131,7 @@ export interface WidgetTrashDeps extends WidgetWriteServiceDeps {
     remove: RemoveWidgetFn;
 }
 export interface TrashWidgetInstanceRequired {
-    deps: Pick<WidgetTrashDeps, "entryRepo" | "clock" | "authorize" | "remove">;
+    deps: Pick<WidgetTrashDeps, "entryRepo" | "clock" | "authorize" | "remove" | "entryLocks">;
     input: TrashWidgetInstanceInput;
 }
 /**

package/dist/widgets/write-service.js

@@ -135,7 +135,7 @@ export async function updateWidgetInstance(required, _optional = {}) {
                 throw result.error;
             }
             return { instance: toWidgetInstanceEntry({ entry: result.value.entry }) };
-        } });
+        } }, deps.entryLocks ? { locks: deps.entryLocks } : {});
 }
 /**
  * Publish-content's widget write: create-or-update at a caller-given id, with the same permission,
@@ -182,7 +182,7 @@ export async function importWidgetInstance(required, _optional = {}) {
             if (!result.ok)
                 throw result.error;
             return { instance: toWidgetInstanceEntry({ entry: result.value.entry }) };
-        } });
+        } }, deps.entryLocks ? { locks: deps.entryLocks } : {});
 }
 /**
  * Deleting a widget = moving it to the Trash (the injected `remove`). UNCONDITIONAL, per ADR-047 §7
@@ -226,7 +226,7 @@ export async function trashWidgetInstance(required, _optional = {}) {
             if (!fresh)
                 throw notFound();
             throw new WidgetVersionConflictError({ message: `widget instance '${input.widgetInstanceId}' changed while it was being deleted — reload and try again`, currentVersion: fresh.version });
-        } });
+        } }, deps.entryLocks ? { locks: deps.entryLocks } : {});
 }
 /** The payload statuses the old delete ladder left behind: `trash` (step 1) and `purged` (its
  *  "delete permanently", which never removed the row). */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jini-ai/cms",
-  "version": "0.5.8",
+  "version": "0.5.10",
   "description": "Content-model capability for Jini-hosted products: framework-free contracts, ports, and domain services in `/core` and per-domain subpaths; Node-bound adapters in domain-specific subpaths.",
   "license": "Apache-2.0",
   "repository": {
@@ -419,8 +419,8 @@
     "@electric-sql/pglite": "0.5.8",
     "jsdom": "^25.0.1",
     "@jini-ai/core": "0.4.4",
-    "@jini-ai/http-kit": "0.4.1",
-    "@jini-ai/db": "0.3.3"
+    "@jini-ai/db": "0.3.3",
+    "@jini-ai/http-kit": "0.4.1"
   },
   "dependencies": {
     "@jini-ai/core": "^0.4.4"