@murumets-ee/content 0.89.0 → 0.91.0

package/dist/client.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"client.mjs","names":[],"sources":["../src/drafts.ts","../src/locale-status.ts","../src/translation-status.ts","../src/client.ts"],"sourcesContent":["/**\n * Draft-overlay operations.\n *\n * Capability: requires the entity to declare `publishable()`. Reads\n * (`getDraft`, `hasDraft`, `countDrafts`, `hasDraftBatch`) silently\n * return falsy when the entity doesn't support drafts; writes\n * (`saveDraft`, `mergeDraft`, `publishDraft`) throw `EntityCapabilityError`.\n */\n\nimport 'server-only'\n\nimport { blockTreeFieldsOf, type FieldConfig } from '@murumets-ee/entity'\nimport type { InferEntityDTO, InferUpdateInput } from '@murumets-ee/entity/admin'\nimport { diffBlocks } from './diff/block-diff.js'\nimport { diffFields } from './diff/field-diff.js'\nimport type { FieldDiff } from './diff/types.js'\nimport { DraftNotFoundError, EntityCapabilityError } from './errors.js'\nimport {\n  applyLocaleRoutedUpdate,\n  localeFindOptions,\n} from './internal/apply-locale-routed-update.js'\nimport { type ContentContext, getDraftsClient } from './internal/context.js'\nimport { projectToEntityFields } from './internal/projection.js'\nimport { DEFAULT_LOCALE_SENTINEL, validateLocale } from './locale-utils.js'\nimport { getContentConfig } from './plugin.js'\nimport type { DraftsTable } from './schema/drafts.js'\nimport type { DraftEntry } from './types.js'\nimport { createVersionSnapshot } from './versions.js'\n\ntype DraftRow = NonNullable<Awaited<ReturnType<ReturnType<DraftsTable['makeClient']>['findOne']>>>\n\nfunction toDraftEntry(row: DraftRow): DraftEntry {\n  return {\n    id: row.id,\n    entityId: row.entityId,\n    locale: row.locale,\n    data: row.data,\n    createdBy: row.createdBy,\n    createdByName: row.createdByName ?? null,\n    createdAt: row.createdAt,\n    updatedAt: row.updatedAt,\n  }\n}\n\n/**\n * Save (upsert) a draft for an entity+locale. One draft per\n * entity+locale — overwrites any existing draft.\n *\n * `data` is projected through the entity's declared field whitelist\n * BEFORE it is stored (same `projectToEntityFields` call `publishDraft`\n * makes on the way out). Storing the caller's JSON verbatim let a draft\n * carry keys the entity never declared, identity/audit columns and\n * `internal: true` fields; publishing filtered them, but `getDraft` and\n * `compareDraftWithCurrent` echoed them straight back to the admin UI,\n * and the drafts table accumulated arbitrary caller-controlled JSON\n * (`plan/admin-api-hardening` F002). Validating at the write closes the\n * asymmetry — the stored draft is now always a subset of what the entity\n * can actually hold.\n */\nexport async function saveDraft<F extends Record<string, FieldConfig>>(\n  ctx: ContentContext<F>,\n  entityId: string,\n  data: InferUpdateInput<F>,\n  locale = DEFAULT_LOCALE_SENTINEL,\n  user?: { id: string; name?: string },\n): Promise<DraftEntry<InferUpdateInput<F>>> {\n  validateLocale(locale)\n  const client = await getDraftsClient(ctx)\n  if (!client) throw new EntityCapabilityError(ctx.entity.name, 'drafts')\n\n  const projected = projectToEntityFields(ctx.entity, data as Record<string, unknown>)\n\n  // `projectToEntityFields` is a field-NAME whitelist — it never inspects a\n  // value, so a `field.blockTree()` column in a draft took arbitrary JSON, and\n  // `editor-state` hands the stored draft back as the CANVAS BASE STATE\n  // (editor F002). Publishing is already gated by the entity write path, but\n  // waiting until publish means the editor loads a tree it cannot represent.\n  // Same validator, same judgement — asked here because the draft blob carries\n  // no Zod schema of its own.\n  ctx.admin.assertBlockTreesValid(projected)\n  // F116, same reasoning — and this is precisely the write path the finding\n  // was filed against: dava's home-page DRAFT already holds a mismatched\n  // media reference. Grandfathering against the draft ALREADY STORED (rather\n  // than validating strictly) is what keeps that draft's next autosave\n  // working instead of turning \"a broken image\" into \"a draft that can never\n  // be saved again\".\n  //\n  // The lookup is skipped entirely when the PROJECTED payload carries no\n  // block-tree field at all — `assertMediaKindsValid` would no-op anyway\n  // (same optimization as `saveTranslation`'s), and most entities with\n  // drafts have no block-tree field to begin with.\n  const hasBlockTreeValue = blockTreeFieldsOf(ctx.entity).some(({ name }) =>\n    Object.hasOwn(projected, name),\n  )\n  const existing = hasBlockTreeValue ? await client.findOne({ entityId, locale }) : null\n  await ctx.admin.assertMediaKindsValid(\n    projected,\n    existing?.data as Record<string, unknown> | undefined,\n  )\n\n  const now = new Date()\n  const createdBy = user?.id ?? ''\n  const createdByName = user?.name ?? null\n\n  const row = await client.upsert(\n    {\n      entityId,\n      locale,\n      data: projected,\n      createdBy,\n      createdByName,\n      createdAt: now,\n      updatedAt: now,\n    },\n    {\n      target: ['entityId', 'locale'],\n      // On conflict, only update the mutable fields — preserve createdBy/createdAt.\n      set: { data: projected, updatedAt: now },\n    },\n  )\n\n  return toDraftEntry(row) as DraftEntry<InferUpdateInput<F>>\n}\n\n/**\n * The keys that move a document's canonical URL in the patterns the toolkit\n * ships (`[slug]`, `[parent.path]`) plus the slug mode that decides whether a\n * clash is refused or auto-suffixed. A merge naming one of them, on a ROUTABLE\n * entity, runs the path-conflict check (see `mergeDraft`); any other merge\n * skips its lookups — the staged draft, the row, and `toolkit_paths` (twice\n * under a parent).\n *\n * A pattern built from another field (`/[category]/[slug]`) is not covered:\n * staging only `category` is refused at Publish rather than here.\n */\nconst PATH_KEYS = ['slug', 'slugMode', 'parent'] as const\n\n/**\n * Stage a PARTIAL change: merge `patch` into the entity+locale draft, creating\n * the draft if there is none. Keys not in `patch` are left exactly as the draft\n * (or, absent a draft key, the live row) has them.\n *\n * This is the write every editing surface uses since editor D019 — \"every edit\n * on every surface saves to the document's one shared draft\". `saveDraft`\n * REPLACES the blob, which is right for a surface that owns the whole document\n * (the menu editor) and wrong for one that owns a few fields of it: page\n * settings saving `title` through `saveDraft` would erase the block edits the\n * canvas staged a second earlier. A draft is therefore a patch over the row, and\n * every reader that shows editable values reads row ⊕ draft.\n *\n * Judged like the entity PATCH it replaces, BEFORE it is stored:\n *  - projected through the field whitelist (`internal`, undeclared keys dropped)\n *  - `assertBlockTreesValid` + `assertMediaKindsValid` (grandfathered against the\n *    stored draft, same as `saveDraft`)\n *  - `assertUpdateValid` — the entity's own update schema. `saveDraft` never ran\n *    it, which was harmless while the form's Publish still PATCHed; moving a\n *    surface into the draft must not move its refusal to Publish, where the\n *    author is no longer looking at the field.\n *  - `assertPathAvailable` — the path-conflict guard, as a dry run, when the\n *    merge moves the URL (see {@link PATH_KEYS}) on a routable entity (F150).\n *\n * 🔴 ONE STATEMENT, not read-modify-write. The merge is `data || patch` inside\n * `ON CONFLICT DO UPDATE` (`TableClient.upsert`'s `mergeJsonb`), so it cannot\n * lose a concurrent write: a read-then-upsert that interleaved with op-commit's\n * or a bound field's stage would write back the draft as it was read — silently\n * reverting the other writer's change. `writeDraft` merges the same way, so\n * neither can erase the other. Top-level `||`, a SHALLOW merge.\n *\n * Resolves `null` when the projected patch is EMPTY and no draft exists: nothing\n * the entity declares was sent, so nothing is staged and no empty draft row is\n * created.\n *\n * ⚠️ The rest of the write path's hooks — `pathParent()`'s cycle check, the\n * partial-unique slug index, `sluggable()`'s regeneration — still run only at\n * Publish, inside its transaction, where a refusal stops the whole publish. The\n * path check here answers \"as of now\"; Publish runs the real guard again.\n */\nexport async function mergeDraft<F extends Record<string, FieldConfig>>(\n  ctx: ContentContext<F>,\n  entityId: string,\n  patch: InferUpdateInput<F>,\n  locale = DEFAULT_LOCALE_SENTINEL,\n  user?: { id: string; name?: string },\n): Promise<DraftEntry<InferUpdateInput<F>> | null> {\n  validateLocale(locale)\n  const client = await getDraftsClient(ctx)\n  if (!client) throw new EntityCapabilityError(ctx.entity.name, 'drafts')\n\n  const projected = projectToEntityFields(ctx.entity, patch as Record<string, unknown>)\n  // Nothing the entity declares: stage nothing. Upserting `{}` would CREATE an\n  // empty draft, and the document would then read \"Draft saved · not live\n  // yet\" about a change that does not exist.\n  if (Object.keys(projected).length === 0) {\n    const current = await client.findOne({ entityId, locale })\n    return current ? (toDraftEntry(current) as DraftEntry<InferUpdateInput<F>>) : null\n  }\n  ctx.admin.assertBlockTreesValid(projected)\n  ctx.admin.assertUpdateValid(projected)\n  const hasBlockTreeValue = blockTreeFieldsOf(ctx.entity).some(({ name }) =>\n    Object.hasOwn(projected, name),\n  )\n  const touchesPath =\n    ctx.entity.frontend?.path !== undefined &&\n    PATH_KEYS.some((key) => Object.hasOwn(projected, key))\n  const existing =\n    hasBlockTreeValue || touchesPath ? await client.findOne({ entityId, locale }) : null\n  await ctx.admin.assertMediaKindsValid(\n    projected,\n    existing?.data as Record<string, unknown> | undefined,\n  )\n  // A staged slug that another document's URL already holds is refused NOW,\n  // beside the field the author typed it in — not first at Publish (editor\n  // PR60, F150). Checked against what the draft will hold after this merge,\n  // since an earlier stage may have set `slugMode` or `parent`.\n  if (touchesPath) {\n    const staged = {\n      ...((existing?.data as Record<string, unknown> | undefined) ?? {}),\n      ...projected,\n    }\n    if (locale === DEFAULT_LOCALE_SENTINEL) {\n      await ctx.admin.assertPathAvailable(entityId, staged)\n    } else {\n      // Checked the way Publish writes it: `updateForLocale` sends a locale's\n      // TRANSLATABLE fields through that locale's guard and the rest (a\n      // `parent`, a non-translatable slug) through `update()`, whose guard\n      // checks the default locale. One guard over everything would test a\n      // shared `parent` against the wrong locale's URLs.\n      const fields = ctx.entity.allFields as Record<string, { translatable?: boolean } | undefined>\n      const translatable: Record<string, unknown> = {}\n      const shared: Record<string, unknown> = {}\n      for (const [key, value] of Object.entries(staged)) {\n        if (fields[key]?.translatable === true) translatable[key] = value\n        else shared[key] = value\n      }\n      const moves = (part: Record<string, unknown>) =>\n        PATH_KEYS.some((key) => Object.hasOwn(part, key) && Object.hasOwn(projected, key))\n      if (moves(translatable)) await ctx.admin.assertPathAvailable(entityId, translatable, locale)\n      if (moves(shared)) await ctx.admin.assertPathAvailable(entityId, shared)\n    }\n  }\n\n  const now = new Date()\n  const row = await client.upsert(\n    {\n      entityId,\n      locale,\n      data: projected,\n      createdBy: user?.id ?? '',\n      createdByName: user?.name ?? null,\n      createdAt: now,\n      updatedAt: now,\n    },\n    { target: ['entityId', 'locale'], set: { updatedAt: now }, mergeJsonb: ['data'] },\n  )\n  return toDraftEntry(row) as DraftEntry<InferUpdateInput<F>>\n}\n\n/**\n * Get the draft for an entity+locale, or null if none exists (or the\n * entity doesn't support drafts).\n */\nexport async function getDraft<F extends Record<string, FieldConfig>>(\n  ctx: ContentContext<F>,\n  entityId: string,\n  locale = DEFAULT_LOCALE_SENTINEL,\n): Promise<DraftEntry<InferUpdateInput<F>> | null> {\n  validateLocale(locale)\n  const client = await getDraftsClient(ctx)\n  if (!client) return null\n  const row = await client.findOne({ entityId, locale })\n  return row ? (toDraftEntry(row) as DraftEntry<InferUpdateInput<F>>) : null\n}\n\n/**\n * Delete (discard) a draft for an entity+locale. Returns whether\n * anything was deleted; safely no-ops on entities without drafts.\n */\nexport async function deleteDraft(\n  ctx: ContentContext,\n  entityId: string,\n  locale = DEFAULT_LOCALE_SENTINEL,\n): Promise<boolean> {\n  validateLocale(locale)\n  const client = await getDraftsClient(ctx)\n  if (!client) return false\n  const deleted = await client.deleteMany({ entityId, locale })\n  return deleted.length > 0\n}\n\n/**\n * Publish a draft: make THIS document's staged changes live.\n *\n * \"Publish\" means one thing on every surface (editor D019): the draft's fields\n * are written to the row for the draft's locale AND the row is put live. The\n * draft is then gone and, if versionable, a version snapshot records what went\n * live.\n *\n * Locale routing mirrors the admin PATCH handler (and the taxonomy fix\n * in 10a7cc2b): a default-locale draft writes the base row; a\n * non-default-locale draft routes translatable fields to\n * `saveTranslation` (→ `{entity}_translations`), `status` to the\n * per-locale status table, and only non-translatable fields (which have\n * no per-locale home) to the base row. Without this split, publishing\n * an `et` draft overwrote the default-locale base row wholesale.\n *\n * ## ONE TRANSACTION (editor PR60, R055 §4)\n *\n * The row write, the locale status, `_overrides`, the draft delete and the\n * version snapshot commit together or not at all. They used to be five separate\n * statements, so a failure part-way left a document whose content was live and\n * whose draft still claimed to be pending — or, worse, whose draft was gone while\n * the row write had not landed.\n *\n * The draft is CLAIMED first, by deleting it and publishing what the delete\n * returned. The delete takes the row lock, so an op-commit that is mid-flight on\n * the same draft either committed before (and its edit is in what we publish) or\n * blocks until we commit and then retries its SERIALIZABLE transaction — or, if it\n * had not read the draft yet, inserts a fresh draft holding only its own patch.\n * Either way it does not write a stale copy back over the published one. The editor also flushes and awaits its own in-flight saves\n * before it calls this, so the lock is the backstop, not the mechanism.\n *\n * Path-index and write notifications fire after COMMIT, not inside it —\n * `AdminClient.afterCommit` defers them on a tracked transaction.\n */\nexport async function publishDraft<F extends Record<string, FieldConfig>>(\n  ctx: ContentContext<F>,\n  entityId: string,\n  locale = DEFAULT_LOCALE_SENTINEL,\n  user?: { id: string; name?: string },\n): Promise<InferEntityDTO<F>> {\n  validateLocale(locale)\n  if (!(await getDraftsClient(ctx))) {\n    throw new EntityCapabilityError(ctx.entity.name, 'drafts')\n  }\n\n  // Previous state for the version delta — locale-merged, so the delta compares\n  // against what this locale's readers actually saw. Read BEFORE the\n  // transaction: it is the committed state the publish replaces.\n  const previousState: InferEntityDTO<F> | null = ctx.versionableOptions\n    ? await ctx.admin.findById(entityId, localeFindOptions(locale))\n    : null\n\n  return ctx.db.transaction(async (tx) => {\n    // Every table client below binds to `tx` through this context — drafts,\n    // locale status, versions and the `_version` column write.\n    const txCtx: ContentContext<F> = { ...ctx, db: tx }\n    const draftsClient = await getDraftsClient(txCtx)\n    if (!draftsClient) throw new EntityCapabilityError(ctx.entity.name, 'drafts')\n    const [claimed] = await draftsClient.deleteMany({ entityId, locale })\n    if (!claimed) {\n      throw new DraftNotFoundError(entityId, locale)\n    }\n\n    // `?? {}` because the column is `jsonb NOT NULL`, and that forbids SQL NULL\n    // while permitting the JSON literal `null` — which deserializes to JS `null`.\n    // A bare cast then made `draftData.status` a TypeError, so a malformed row\n    // 500'd the publish route instead of taking the ordinary \"nothing declared,\n    // publish the row as-is\" path below. Nothing in this package writes such a\n    // row; a seed, a migration or a hand-edit can.\n    const claimedData = (claimed.data ?? {}) as Record<string, unknown>\n    // `publishedAt` is Publish's to set, like `status` below: a staged value\n    // would let whoever wrote the draft back- or forward-date the publication.\n    // publishable()'s hook fills it when the UPDATE carries none — which, with\n    // the staged value dropped, is every publish: it records the LATEST\n    // publication, not the first.\n    const { publishedAt: _stagedPublishedAt, ...draftData } = claimedData\n    // \"Publish\" means MAKE LIVE, always — the status is not the draft's to\n    // decide. Block-editor drafts carry no `status` at all, and before D019 a\n    // form-saved draft could carry `status: 'draft'`, which then won: Publish\n    // wrote the content and left the document unpublished, so the same button\n    // meant \"publish\" on one surface and \"stage\" on another. The publishable()\n    // behavior auto-sets `publishedAt` on the transition. The publish-permission\n    // gate lives in the admin route, not here.\n    const updateData = projectToEntityFields(ctx.entity, { ...draftData, status: 'published' })\n    const result = await applyLocaleRoutedUpdate(txCtx, entityId, updateData, locale, tx)\n\n    // F009 — promote the page's chrome overrides.\n    //\n    // `projectToEntityFields` drops every `internal: true` field, deliberately, so\n    // `_overrides` cannot ride the generic promotion. That guard is NOT relaxed:\n    // this is one named field, written through the trusted `updateInternal` path\n    // that `with-overrides.ts` documents as \"the only path that can mutate it\".\n    // Before F009 that call site did not exist, so an override survived in the\n    // draft buffer and never reached the column — the op committed, the canvas\n    // updated, and a reload brought the hidden header back.\n    //\n    // AFTER the main update, so the override never lands against content that\n    // failed to — and inside the same transaction, so neither lands alone.\n    // `_overrides` is not translatable, so it belongs on the base row for every\n    // locale.\n    const overrides = readOverridesForPublish(ctx.entity, draftData)\n    if (overrides !== undefined) {\n      await ctx.admin.updateInternal(entityId, { _overrides: overrides }, { tx })\n    }\n\n    if (ctx.versionableOptions) {\n      await createVersionSnapshot(txCtx, entityId, result, previousState, locale, user)\n    }\n\n    return result\n  })\n}\n\n/**\n * The page's override map from a draft payload, when the entity declares the\n * field and the draft carries one.\n *\n * Returns `undefined` — never `{}` — so an ordinary content publish does not\n * touch the column. Shape-guarded because a draft payload is stored jsonb: an\n * array or a scalar is malformed data, not an override map. ← F009\n */\nfunction readOverridesForPublish(\n  entity: { allFields: Record<string, unknown>; behaviors?: readonly { name: string }[] },\n  draftData: Record<string, unknown>,\n): Record<string, unknown> | undefined {\n  // The BEHAVIOR, not just a field with the right name — a draft payload is\n  // stored jsonb and can be crafted or legacy, so this must not become a way\n  // to promote arbitrary JSON into an unrelated internal field on an entity\n  // that never opted in. Requiring the behavior also means `beforeUpdate` runs\n  // `validateOverridesMap` on the way through `updateInternal`.\n  if (!(entity.behaviors ?? []).some((b) => b.name === 'withOverrides')) return undefined\n  const field = entity.allFields._overrides as { internal?: boolean } | undefined\n  if (field === undefined || field.internal !== true) return undefined\n  const value = draftData._overrides\n  if (typeof value !== 'object' || value === null || Array.isArray(value)) return undefined\n  return value as Record<string, unknown>\n}\n\n/**\n * Quick existence check for list badges — does a draft exist?\n */\nexport async function hasDraft(\n  ctx: ContentContext,\n  entityId: string,\n  locale = DEFAULT_LOCALE_SENTINEL,\n): Promise<boolean> {\n  validateLocale(locale)\n  const client = await getDraftsClient(ctx)\n  if (!client) return false\n  return client.exists({ entityId, locale })\n}\n\n/**\n * Count drafts for this entity type, optionally filtered by locale.\n * Single indexed COUNT — used by dashboard widgets.\n */\nexport async function countDrafts(\n  ctx: ContentContext,\n  locale = DEFAULT_LOCALE_SENTINEL,\n): Promise<number> {\n  validateLocale(locale)\n  const client = await getDraftsClient(ctx)\n  if (!client) return 0\n  return client.count({ locale })\n}\n\n/**\n * Check draft existence for multiple entities in one query. Returns\n * a set of entity IDs that have a draft for `locale`.\n */\nexport async function hasDraftBatch(\n  ctx: ContentContext,\n  entityIds: string[],\n  locale = DEFAULT_LOCALE_SENTINEL,\n): Promise<Set<string>> {\n  validateLocale(locale)\n  const result = new Set<string>()\n  if (entityIds.length === 0) return result\n  const client = await getDraftsClient(ctx)\n  if (!client) return result\n\n  const rows = await client.findMany({\n    where: { entityId: { in: entityIds }, locale },\n  })\n  for (const row of rows) {\n    result.add(row.entityId as string)\n  }\n  return result\n}\n\n/**\n * Compare the current draft with the live entity. Returns field-level\n * diffs between the published data and the draft (only for fields\n * present in the draft — missing fields are NOT \"changed to empty\").\n */\nexport async function compareDraftWithCurrent<F extends Record<string, FieldConfig>>(\n  ctx: ContentContext<F>,\n  entityId: string,\n  locale = DEFAULT_LOCALE_SENTINEL,\n): Promise<{\n  diffs: FieldDiff[]\n  current: InferEntityDTO<F>\n  draft: DraftEntry<InferUpdateInput<F>>\n} | null> {\n  validateLocale(locale)\n  const draft = await getDraft(ctx, entityId, locale)\n  if (!draft) return null\n\n  // Fetch the live entity with the same locale context as the draft.\n  const config = getContentConfig()\n  const defaultLocale = config.defaultLocale\n  const findOptions =\n    locale === DEFAULT_LOCALE_SENTINEL ? { defaultLocale } : { locale, defaultLocale }\n  const current = await ctx.admin.findById(entityId, findOptions)\n  if (!current) return null\n\n  const fieldConfigs = ctx.entity.allFields as Record<string, FieldConfig> | undefined\n  const currentRecord = current as Record<string, unknown>\n  const draftRecord = draft.data as Record<string, unknown>\n  const currentSubset: Record<string, unknown> = {}\n  for (const key of Object.keys(draftRecord)) {\n    currentSubset[key] = currentRecord[key]\n  }\n  const diffs = diffFields(currentSubset, draftRecord, fieldConfigs)\n  for (const diff of diffs) {\n    if (diff.type === 'blockTree') {\n      // Normalize a null/undefined side to [] so add/clear of the whole field\n      // (null ↔ blockTree[]) still produces a structural diff, not an opaque one.\n      diff.blockDiffs = diffBlocks(\n        Array.isArray(diff.from) ? diff.from : [],\n        Array.isArray(diff.to) ? diff.to : [],\n      )\n    }\n  }\n\n  return { diffs, current, draft }\n}\n","/**\n * Per-locale publish status — independent draft/published state for\n * each locale of a publishable + translatable entity.\n *\n * Capability: requires `publishable() + at least one translatable\n * field` (the `_locale_status` table is registered only for that\n * combination). Reads silently return falsy on entities without it;\n * `setLocaleStatus` throws `EntityCapabilityError`.\n */\n\nimport 'server-only'\n\nimport type { FieldConfig } from '@murumets-ee/entity'\nimport type { InferUpdateInput } from '@murumets-ee/entity/admin'\nimport { EntityCapabilityError } from './errors.js'\nimport { type ContentContext, getLocaleStatusClient } from './internal/context.js'\nimport { upsertLocaleStatusRow } from './locale-status-slot.js'\nimport { validateLocale } from './locale-utils.js'\nimport { getContentConfig } from './plugin.js'\nimport type { LocalePublishStatus } from './types.js'\n\n/**\n * Get per-locale publish status overrides for an entity.\n * Missing locale = inherits the base entity status (no row written).\n *\n * **Not permission-gated, deliberately — see {@link getLocaleStatusBatch}.**\n */\nexport async function getLocaleStatus(\n  ctx: ContentContext,\n  entityId: string,\n): Promise<LocalePublishStatus[]> {\n  const map = await getLocaleStatusBatch(ctx, [entityId])\n  const entry = map.get(entityId)\n  if (!entry) return []\n  return Object.values(entry)\n}\n\n/**\n * Set per-locale publish status. Upserts into the locale_status\n * table — except when `locale === defaultLocale`, which updates the\n * base entity status column directly (the per-locale table only\n * stores overrides for non-default locales).\n *\n * **Both branches are publish-gated by the entity layer (D041).** The default\n * branch inherits it from `AdminClient.update`; the non-default branch routes\n * through `AdminClient.updateForLocale`, which asserts the SAME\n * `assertPublishAuthority` from the caller's payload before it hands the write\n * to the locale-status writer. This is deliberately a delegation and not a\n * second predicate in this package: `<entity>_locale_status` is the table the\n * public read predicate (`COALESCE(locale_status.status, main.status)`) resolves\n * against, so a direct `TableClient.upsert` here — which is what this function\n * used to do — is a fourth publish door, reachable from any plugin/route/job\n * holding a `ContentClient` (a PUBLIC subpath export) with no `publish` grant\n * ever consulted.\n */\nexport async function setLocaleStatus<F extends Record<string, FieldConfig>>(\n  ctx: ContentContext<F>,\n  entityId: string,\n  locale: string,\n  status: 'draft' | 'published',\n): Promise<void> {\n  validateLocale(locale)\n  const config = getContentConfig()\n\n  // Default locale → update base entity status column.\n  if (locale === config.defaultLocale) {\n    const data: Record<string, unknown> = { status }\n    if (status === 'published') data.publishedAt = new Date()\n    await ctx.admin.update(entityId, data as InferUpdateInput<F>)\n    return\n  }\n\n  const client = await getLocaleStatusClient(ctx)\n  if (!client) {\n    // Per-locale status only exists for publishable + translatable\n    // entities. Calling on a non-translatable publishable (where the\n    // only valid locale is the default) is a programmer error.\n    // Checked BEFORE delegating: `updateForLocale` would otherwise fall back to\n    // the base `status` column for a missing writer, silently publishing the\n    // default locale instead of refusing.\n    throw new EntityCapabilityError(ctx.entity.name, 'localeStatus')\n  }\n\n  // The writer we hand down is the RAW upsert, not this function — the\n  // delegation terminates here rather than re-entering `updateForLocale`.\n  //\n  // Routing through `updateForLocale` rather than calling the upsert directly\n  // is what closes the publish door: this branch used to write\n  // `<entity>_locale_status` with no permission check at all, so any holder of\n  // this public export could make a translation publicly live without\n  // `publish`. `updateForLocale` asserts publish authority at the operation\n  // entry (D041), so the gate is inherited rather than duplicated here.\n  //\n  // Widened through `Record<string, unknown>` for the same reason the\n  // default-locale branch above does it: `InferUpdateInput<F>` is keyed on the\n  // entity's own field map, which a generic `F` cannot be proven to overlap.\n  const localeData: Record<string, unknown> = { status }\n  await ctx.admin.updateForLocale(entityId, localeData as InferUpdateInput<F>, locale, {\n    defaultLocale: config.defaultLocale,\n    localeStatusWriter: (id, loc, s) => upsertLocaleStatusRow(client, id, loc, s),\n  })\n}\n\n/**\n * Get per-locale publish status for multiple entities in one query.\n *\n * ## Why this read is NOT permission-gated (and what would gate it)\n *\n * It returns publish-state METADATA only — `{ locale, status, publishedAt }` —\n * never field data, so it is not a content-disclosure door the way the write\n * side above is a publish door. What it does expose is an existence oracle for\n * unpublished TRANSLATIONS: a principal without `view_unpublished` learns that\n * `et` is a draft, which `QueryClient` would have hidden. The correct predicate\n * is therefore `view_unpublished` (D017), NOT `publish`.\n *\n * A CodeRabbit pass proposed gating it on exactly that predicate. Deliberately\n * declined, on the strength of **F063**: `view_unpublished` governs `QueryClient`\n * reads — the PUBLIC delivery surface — and is not a disclosure boundary over\n * the admin API, where `AdminClient` shows editors their own drafts by design.\n * `ContentClient` is an in-process server-side API whose consumers are plugins,\n * routes and jobs on the admin side, so gating it here would extend the control\n * onto the surface F063 explicitly recommended NOT extending it to. The concrete\n * cost would be an editor lacking `view_unpublished` no longer able to see that\n * their OWN translation is still a draft.\n *\n * The asymmetry with the write side above is real, not convenient:\n * `setLocaleStatus` MINTS public visibility, so it is gated regardless of which\n * surface calls it. This read hands publish-state metadata to a caller who\n * already holds `view` on the row — they needed its id to ask.\n *\n * It is not applied here because the predicate (`mayViewUnpublishedEntity`) is\n * module-private to `@murumets-ee/entity` — re-deriving it in this package\n * would create exactly the second, drifting copy of a security predicate that\n * D041 exists to eliminate, and there is no read-path equivalent of\n * `updateForLocale` to delegate to. The one in-repo caller\n * (`admin-ui`'s versions route) is already gated by `checkPermission`. Closing\n * this properly means exporting the predicate from `@murumets-ee/entity` and\n * dropping non-`published` rows for principals without it — tracked as the\n * read-side sibling of F060.\n */\nexport async function getLocaleStatusBatch(\n  ctx: ContentContext,\n  entityIds: string[],\n): Promise<Map<string, Record<string, LocalePublishStatus>>> {\n  const result = new Map<string, Record<string, LocalePublishStatus>>()\n  if (entityIds.length === 0) return result\n  const client = await getLocaleStatusClient(ctx)\n  if (!client) return result\n\n  const rows = await client.findMany({ where: { entityId: { in: entityIds } } })\n  for (const r of rows) {\n    const eid = r.entityId as string\n    const locale = r.locale as string\n    let entry = result.get(eid)\n    if (!entry) {\n      entry = {}\n      result.set(eid, entry)\n    }\n    entry[locale] = {\n      locale,\n      status: r.status as 'draft' | 'published',\n      publishedAt: (r.publishedAt as Date | null) ?? null,\n    }\n  }\n  return result\n}\n","/**\n * Translation status reporting — per-locale completion of translatable\n * fields for one entity, batches of entities, or the whole entity type.\n *\n * Capability: requires the entity to have at least one translatable\n * field. All methods return falsy / empty when the entity has no\n * translatable fields (read-only and defensive).\n */\n\nimport 'server-only'\n\nimport { getContext, requireSiteFor } from '@murumets-ee/core'\nimport { schemaRegistry } from '@murumets-ee/db'\nimport { buildPartitionCondition, type FieldConfig } from '@murumets-ee/entity'\nimport { and, inArray } from 'drizzle-orm'\nimport { InvalidLocaleError } from './errors.js'\nimport type { ContentContext } from './internal/context.js'\nimport { getContentConfig } from './plugin.js'\nimport type { TranslationReport, TranslationStatus } from './types.js'\n\n/**\n * The locales a status report covers and the default it skips: the request's\n * — which the admin narrows to its SITE's locales and default (plan `multisite`\n * phase 03) — else the configured content locales.\n */\nfunction statusLocales(): { locales: { code: string }[]; defaultLocale: string } {\n  const config = getContentConfig()\n  const ctx = getContext()\n  const codes = ctx?.availableLocales ?? config.locales.map((l) => l.code)\n  return {\n    locales: codes.map((code) => ({ code })),\n    defaultLocale: ctx?.defaultLocale ?? config.defaultLocale,\n  }\n}\n\n/**\n * For one entity, compute per-locale completion status across every\n * translatable field. Default-locale rows are skipped.\n */\nfunction computeStatusForEntity(\n  translatableFields: string[],\n  translatedByLocale: Map<string, Record<string, unknown>> | undefined,\n  locales: { code: string }[],\n  defaultLocale: string,\n): TranslationStatus {\n  const status: TranslationStatus = {}\n  for (const locale of locales) {\n    if (locale.code === defaultLocale) continue\n    const translated = translatedByLocale?.get(locale.code) ?? {}\n    const missing: string[] = []\n    for (const fieldName of translatableFields) {\n      if (translated[fieldName] === undefined || translated[fieldName] === null) {\n        missing.push(fieldName)\n      }\n    }\n    status[locale.code] = {\n      complete: missing.length === 0,\n      total: translatableFields.length,\n      translated: translatableFields.length - missing.length,\n      missing,\n    }\n  }\n  return status\n}\n\n/**\n * Get translation status for an entity — per-locale completion report.\n */\nexport async function getTranslationStatus(\n  ctx: ContentContext,\n  entityId: string,\n): Promise<TranslationStatus> {\n  // Single-entity is the batch path with one ID — keeps the two\n  // codepaths from drifting.\n  const map = await getTranslationStatusBatch(ctx, [entityId])\n  return map.get(entityId) ?? {}\n}\n\n/**\n * Get translation status for multiple entities in a single query.\n * O(1) DB roundtrips regardless of `entityIds.length`.\n */\nexport async function getTranslationStatusBatch(\n  ctx: ContentContext,\n  entityIds: string[],\n): Promise<Map<string, TranslationStatus>> {\n  const result = new Map<string, TranslationStatus>()\n  if (entityIds.length === 0) return result\n\n  const { locales, defaultLocale } = statusLocales()\n\n  const translatableFields = Object.entries(ctx.entity.allFields as Record<string, FieldConfig>)\n    .filter(([_, f]) => f.translatable)\n    .map(([name]) => name)\n  if (translatableFields.length === 0) return result\n\n  // Translation tables are generated in @murumets-ee/entity (with FK\n  // refs); accessed via schemaRegistry + direct Drizzle here.\n  const translationTable = schemaRegistry.get(`${ctx.entity.name}_translations`)\n  if (!translationTable) return result\n\n  // A site-bound entity's translation rows are confined to the request's\n  // site (multisite D003): ids alone are no boundary — a caller holding\n  // another site's id must learn nothing about its translations.\n  const site = await requireSiteFor(ctx.entity)\n  const byIds = inArray(translationTable.entityId, entityIds)\n  const translations = await ctx.db\n    .select()\n    .from(translationTable)\n    .where(\n      site !== undefined\n        ? and(byIds, buildPartitionCondition(translationTable, { site }, ctx.entity.name))\n        : byIds,\n    )\n\n  // Group: entityId → locale → { fieldName: value }\n  const translationsByEntity = new Map<string, Map<string, Record<string, unknown>>>()\n  for (const t of translations) {\n    const row = t as Record<string, unknown>\n    const eid = row.entityId as string\n    const locale = row.locale as string\n    const fieldValues: Record<string, unknown> = {}\n    for (const fieldName of translatableFields) {\n      fieldValues[fieldName] = row[fieldName]\n    }\n    let entry = translationsByEntity.get(eid)\n    if (!entry) {\n      entry = new Map()\n      translationsByEntity.set(eid, entry)\n    }\n    entry.set(locale, fieldValues)\n  }\n\n  for (const entityId of entityIds) {\n    result.set(\n      entityId,\n      computeStatusForEntity(\n        translatableFields,\n        translationsByEntity.get(entityId),\n        locales,\n        defaultLocale,\n      ),\n    )\n  }\n\n  return result\n}\n\n/**\n * Roll up translation status across every entity of this type.\n *\n * Defaults to the first non-default configured locale; pass\n * `options.locale` to target a specific one. Returns counts of\n * complete / partial / missing entities for that locale.\n */\nexport async function getTranslationReport(\n  ctx: ContentContext,\n  options?: { locale?: string },\n): Promise<TranslationReport> {\n  const { locales, defaultLocale } = statusLocales()\n  const targetLocale = options?.locale ?? locales.find((l) => l.code !== defaultLocale)?.code\n  if (!targetLocale) return { total: 0, complete: 0, partial: 0, missing: 0 }\n  // A locale the site does not serve has no report on that site.\n  if (!locales.some((l) => l.code === targetLocale)) {\n    throw new InvalidLocaleError(\n      targetLocale,\n      locales.map((l) => l.code),\n    )\n  }\n\n  const entities = await ctx.admin.findMany()\n  if (entities.length === 0) return { total: 0, complete: 0, partial: 0, missing: 0 }\n\n  // Single batched query covers every entity at once.\n  const statusMap = await getTranslationStatusBatch(\n    ctx,\n    entities.map((e) => e.id),\n  )\n\n  let complete = 0\n  let partial = 0\n  let missing = 0\n  for (const entity of entities) {\n    const status = statusMap.get(entity.id)\n    const localeStatus = status?.[targetLocale]\n    if (!localeStatus || localeStatus.translated === 0) missing++\n    else if (localeStatus.complete) complete++\n    else partial++\n  }\n\n  return { total: entities.length, complete, partial, missing }\n}\n","/**\n * ContentClient — thin shell over per-feature modules.\n *\n * Wraps AdminClient with version history (`./versions.ts`), draft\n * overlays (`./drafts.ts`), translation status reporting\n * (`./translation-status.ts`), per-locale publish status\n * (`./locale-status.ts`), and block-layout operations (`./layout.ts`).\n *\n * The class is generic over the entity's `AllFields` map: when\n * constructed with a typed entity, every method's input/output is\n * inferred end-to-end. When constructed with a runtime `Entity`\n * (admin-ui's heterogeneous entity loops), the generic defaults to\n * `Record<string, FieldConfig>` and methods accept/return the loose\n * shape — same behavior as the pre-generic version.\n *\n * Usage:\n *   import { createContentClient } from '@murumets-ee/content/client'\n *   const pages = createContentClient(Page)\n *   await pages.create({ title: 'Hello', layout: [...] })\n */\n\nimport 'server-only'\n\nimport { getApp, type Logger } from '@murumets-ee/core'\nimport { createAdminClient } from '@murumets-ee/core/clients'\nimport type { Entity, FieldConfig } from '@murumets-ee/entity'\nimport type {\n  AdminClient,\n  FindManyOptions,\n  InferCreateInput,\n  InferEntityDTO,\n  InferUpdateInput,\n} from '@murumets-ee/entity/admin'\nimport { getVersionableOptions } from './behaviors/versionable.js'\nimport {\n  compareDraftWithCurrent,\n  countDrafts,\n  deleteDraft,\n  getDraft,\n  hasDraft,\n  hasDraftBatch,\n  mergeDraft,\n  publishDraft,\n  saveDraft,\n} from './drafts.js'\nimport { type ContentContext, createContentContext } from './internal/context.js'\nimport { calculateDelta } from './internal/projection.js'\nimport { getLocaleStatus, getLocaleStatusBatch, setLocaleStatus } from './locale-status.js'\nimport {\n  getTranslationReport,\n  getTranslationStatus,\n  getTranslationStatusBatch,\n} from './translation-status.js'\nimport {\n  compareVersions,\n  createVersionSnapshot,\n  getVersion,\n  getVersions,\n  pruneVersions,\n  restoreVersion,\n  saveVersionSnapshot,\n  writeVersionColumn,\n} from './versions.js'\n\nexport interface ContentClientConfig<\n  AllFields extends Record<string, FieldConfig> = Record<string, FieldConfig>,\n> {\n  admin: AdminClient<AllFields>\n  entity: Entity<AllFields>\n  logger?: Logger\n}\n\nexport class ContentClient<\n  AllFields extends Record<string, FieldConfig> = Record<string, FieldConfig>,\n> {\n  private ctx: ContentContext<AllFields>\n\n  constructor(config: ContentClientConfig<AllFields>) {\n    const versionableOptions = getVersionableOptions(config.entity.behaviors)\n    this.ctx = createContentContext(config, versionableOptions)\n  }\n\n  // -----------------------------------------------------------------\n  // CRUD (delegated to AdminClient + version snapshots)\n  // -----------------------------------------------------------------\n\n  async create(data: InferCreateInput<AllFields>): Promise<InferEntityDTO<AllFields>> {\n    const result = await this.ctx.admin.create(data)\n    if (this.ctx.versionableOptions) {\n      await saveVersionSnapshot(this.ctx, result.id, result, null, false)\n    }\n    return result\n  }\n\n  findById(id: string, options?: { locale?: string }): Promise<InferEntityDTO<AllFields> | null> {\n    return this.ctx.admin.findById(id, options)\n  }\n\n  findMany(options?: FindManyOptions): Promise<InferEntityDTO<AllFields>[]> {\n    return this.ctx.admin.findMany(options)\n  }\n\n  /**\n   * Base-row update + version snapshot. Subject to AdminClient's\n   * cross-locale write guard (SD021): under a non-default request-context\n   * locale, translatable fields throw `CrossLocaleWriteError` — that's\n   * enforcement, not a gap. Locale-belonging writes go through the draft\n   * flow (`saveDraft` → `publishDraft`) or `admin.updateForLocale` directly.\n   */\n  async update(id: string, data: InferUpdateInput<AllFields>): Promise<InferEntityDTO<AllFields>> {\n    let previousState: InferEntityDTO<AllFields> | null = null\n    if (this.ctx.versionableOptions) {\n      previousState = await this.ctx.admin.findById(id)\n    }\n\n    const result = await this.ctx.admin.update(id, data)\n\n    if (this.ctx.versionableOptions && previousState) {\n      const delta = calculateDelta(previousState, result)\n      const version = await saveVersionSnapshot(this.ctx, id, result, delta, false)\n      if (version !== undefined) {\n        await writeVersionColumn(this.ctx, id, version)\n        await pruneVersions(this.ctx, id)\n        return { ...result, _version: version } as InferEntityDTO<AllFields>\n      }\n      await pruneVersions(this.ctx, id)\n    }\n\n    return result\n  }\n\n  delete(id: string): Promise<unknown> {\n    return this.ctx.admin.delete(id)\n  }\n\n  // -----------------------------------------------------------------\n  // Translation delegation\n  // -----------------------------------------------------------------\n\n  saveTranslation(entityId: string, locale: string, translations: Record<string, unknown>) {\n    return this.ctx.admin.saveTranslation(entityId, locale, translations)\n  }\n\n  deleteTranslation(entityId: string, locale?: string) {\n    return this.ctx.admin.deleteTranslation(entityId, locale)\n  }\n\n  // -----------------------------------------------------------------\n  // Version history\n  // -----------------------------------------------------------------\n\n  getVersions(entityId: string, options?: { limit?: number; offset?: number; locale?: string }) {\n    return getVersions(this.ctx, entityId, options)\n  }\n\n  getVersion(entityId: string, version: number, locale?: string) {\n    return getVersion(this.ctx, entityId, version, locale)\n  }\n\n  compareVersions(entityId: string, v1: number, v2: number, locale?: string) {\n    return compareVersions(this.ctx, entityId, v1, v2, locale)\n  }\n\n  restoreVersion(entityId: string, version: number, locale?: string) {\n    return restoreVersion(this.ctx, entityId, version, locale)\n  }\n\n  pruneVersions(entityId: string, locale?: string) {\n    return pruneVersions(this.ctx, entityId, locale)\n  }\n\n  createVersionSnapshot(\n    entityId: string,\n    currentData: Record<string, unknown>,\n    previousData?: Record<string, unknown> | null,\n    locale?: string,\n    user?: { id: string; name?: string },\n  ) {\n    return createVersionSnapshot(this.ctx, entityId, currentData, previousData, locale, user)\n  }\n\n  // -----------------------------------------------------------------\n  // Translation status\n  // -----------------------------------------------------------------\n\n  getTranslationStatus(entityId: string) {\n    return getTranslationStatus(this.ctx, entityId)\n  }\n\n  getTranslationStatusBatch(entityIds: string[]) {\n    return getTranslationStatusBatch(this.ctx, entityIds)\n  }\n\n  getTranslationReport(options?: { locale?: string }) {\n    return getTranslationReport(this.ctx, options)\n  }\n\n  // -----------------------------------------------------------------\n  // Per-locale publish status\n  // -----------------------------------------------------------------\n\n  getLocaleStatus(entityId: string) {\n    return getLocaleStatus(this.ctx, entityId)\n  }\n\n  setLocaleStatus(entityId: string, locale: string, status: 'draft' | 'published') {\n    return setLocaleStatus(this.ctx, entityId, locale, status)\n  }\n\n  getLocaleStatusBatch(entityIds: string[]) {\n    return getLocaleStatusBatch(this.ctx, entityIds)\n  }\n\n  // -----------------------------------------------------------------\n  // Drafts\n  // -----------------------------------------------------------------\n\n  saveDraft(\n    entityId: string,\n    data: InferUpdateInput<AllFields>,\n    locale?: string,\n    user?: { id: string; name?: string },\n  ) {\n    return saveDraft(this.ctx, entityId, data, locale, user)\n  }\n\n  mergeDraft(\n    entityId: string,\n    patch: InferUpdateInput<AllFields>,\n    locale?: string,\n    user?: { id: string; name?: string },\n  ) {\n    return mergeDraft(this.ctx, entityId, patch, locale, user)\n  }\n\n  getDraft(entityId: string, locale?: string) {\n    return getDraft(this.ctx, entityId, locale)\n  }\n\n  deleteDraft(entityId: string, locale?: string) {\n    return deleteDraft(this.ctx, entityId, locale)\n  }\n\n  publishDraft(entityId: string, locale?: string, user?: { id: string; name?: string }) {\n    return publishDraft(this.ctx, entityId, locale, user)\n  }\n\n  hasDraft(entityId: string, locale?: string) {\n    return hasDraft(this.ctx, entityId, locale)\n  }\n\n  countDrafts(locale?: string) {\n    return countDrafts(this.ctx, locale)\n  }\n\n  hasDraftBatch(entityIds: string[], locale?: string) {\n    return hasDraftBatch(this.ctx, entityIds, locale)\n  }\n\n  compareDraftWithCurrent(entityId: string, locale?: string) {\n    return compareDraftWithCurrent(this.ctx, entityId, locale)\n  }\n}\n\n/**\n * Factory — creates a ContentClient for an entity. Must be called\n * after `createApp()`. Generic flows from the entity definition:\n * `createContentClient(Article)` returns a `ContentClient<typeof\n * Article['allFields']>` typed end-to-end.\n */\nexport function createContentClient<AllFields extends Record<string, FieldConfig>>(\n  entity: Entity<AllFields>,\n): ContentClient<AllFields> {\n  const admin = createAdminClient(entity)\n  return new ContentClient<AllFields>({\n    admin,\n    entity,\n    logger: getApp().logger.child({ content: entity.name }),\n  })\n}\n"],"mappings":"0wBA+BA,SAAS,EAAa,EAA2B,CAC/C,MAAO,CACL,GAAI,EAAI,GACR,SAAU,EAAI,SACd,OAAQ,EAAI,OACZ,KAAM,EAAI,KACV,UAAW,EAAI,UACf,cAAe,EAAI,eAAiB,KACpC,UAAW,EAAI,UACf,UAAW,EAAI,SACjB,CACF,CAiBA,eAAsB,EACpB,EACA,EACA,EACA,EAAA,IACA,EAC0C,CAC1C,EAAe,CAAM,EACrB,IAAM,EAAS,MAAM,EAAgB,CAAG,EACxC,GAAI,CAAC,EAAQ,MAAM,IAAI,EAAsB,EAAI,OAAO,KAAM,QAAQ,EAEtE,IAAM,EAAY,EAAsB,EAAI,OAAQ,CAA+B,EASnF,EAAI,MAAM,sBAAsB,CAAS,EAezC,IAAM,EAHoB,EAAkB,EAAI,MAAM,CAAC,CAAC,MAAM,CAAE,UAC9D,OAAO,OAAO,EAAW,CAAI,CAEE,EAAI,MAAM,EAAO,QAAQ,CAAE,WAAU,QAAO,CAAC,EAAI,KAClF,MAAM,EAAI,MAAM,sBACd,EACA,GAAU,IACZ,EAEA,IAAM,EAAM,IAAI,KACV,EAAY,GAAM,IAAM,GACxB,EAAgB,GAAM,MAAQ,KAmBpC,OAAO,EAAa,MAjBF,EAAO,OACvB,CACE,WACA,SACA,KAAM,EACN,YACA,gBACA,UAAW,EACX,UAAW,CACb,EACA,CACE,OAAQ,CAAC,WAAY,QAAQ,EAE7B,IAAK,CAAE,KAAM,EAAW,UAAW,CAAI,CACzC,CACF,CAEuB,CACzB,CAaA,MAAM,EAAY,CAAC,OAAQ,WAAY,QAAQ,EA0C/C,eAAsB,EACpB,EACA,EACA,EACA,EAAA,IACA,EACiD,CACjD,EAAe,CAAM,EACrB,IAAM,EAAS,MAAM,EAAgB,CAAG,EACxC,GAAI,CAAC,EAAQ,MAAM,IAAI,EAAsB,EAAI,OAAO,KAAM,QAAQ,EAEtE,IAAM,EAAY,EAAsB,EAAI,OAAQ,CAAgC,EAIpF,GAAI,OAAO,KAAK,CAAS,CAAC,CAAC,SAAW,EAAG,CACvC,IAAM,EAAU,MAAM,EAAO,QAAQ,CAAE,WAAU,QAAO,CAAC,EACzD,OAAO,EAAW,EAAa,CAAO,EAAwC,IAChF,CACA,EAAI,MAAM,sBAAsB,CAAS,EACzC,EAAI,MAAM,kBAAkB,CAAS,EACrC,IAAM,EAAoB,EAAkB,EAAI,MAAM,CAAC,CAAC,MAAM,CAAE,UAC9D,OAAO,OAAO,EAAW,CAAI,CAC/B,EACM,EACJ,EAAI,OAAO,UAAU,OAAS,IAAA,IAC9B,EAAU,KAAM,GAAQ,OAAO,OAAO,EAAW,CAAG,CAAC,EACjD,EACJ,GAAqB,EAAc,MAAM,EAAO,QAAQ,CAAE,WAAU,QAAO,CAAC,EAAI,KASlF,GARA,MAAM,EAAI,MAAM,sBACd,EACA,GAAU,IACZ,EAKI,EAAa,CACf,IAAM,EAAS,CACb,GAAK,GAAU,MAAgD,CAAC,EAChE,GAAG,CACL,EACA,GAAI,IAAA,IACF,MAAM,EAAI,MAAM,oBAAoB,EAAU,CAAM,MAC/C,CAML,IAAM,EAAS,EAAI,OAAO,UACpB,EAAwC,CAAC,EACzC,EAAkC,CAAC,EACzC,IAAK,GAAM,CAAC,EAAK,KAAU,OAAO,QAAQ,CAAM,EAC1C,EAAO,EAAI,EAAE,eAAiB,GAAM,EAAa,GAAO,EACvD,EAAO,GAAO,EAErB,IAAM,EAAS,GACb,EAAU,KAAM,GAAQ,OAAO,OAAO,EAAM,CAAG,GAAK,OAAO,OAAO,EAAW,CAAG,CAAC,EAC/E,EAAM,CAAY,GAAG,MAAM,EAAI,MAAM,oBAAoB,EAAU,EAAc,CAAM,EACvF,EAAM,CAAM,GAAG,MAAM,EAAI,MAAM,oBAAoB,EAAU,CAAM,CACzE,CACF,CAEA,IAAM,EAAM,IAAI,KAahB,OAAO,EAAa,MAZF,EAAO,OACvB,CACE,WACA,SACA,KAAM,EACN,UAAW,GAAM,IAAM,GACvB,cAAe,GAAM,MAAQ,KAC7B,UAAW,EACX,UAAW,CACb,EACA,CAAE,OAAQ,CAAC,WAAY,QAAQ,EAAG,IAAK,CAAE,UAAW,CAAI,EAAG,WAAY,CAAC,MAAM,CAAE,CAClF,CACuB,CACzB,CAMA,eAAsB,EACpB,EACA,EACA,EAAA,IACiD,CACjD,EAAe,CAAM,EACrB,IAAM,EAAS,MAAM,EAAgB,CAAG,EACxC,GAAI,CAAC,EAAQ,OAAO,KACpB,IAAM,EAAM,MAAM,EAAO,QAAQ,CAAE,WAAU,QAAO,CAAC,EACrD,OAAO,EAAO,EAAa,CAAG,EAAwC,IACxE,CAMA,eAAsB,EACpB,EACA,EACA,EAAA,IACkB,CAClB,EAAe,CAAM,EACrB,IAAM,EAAS,MAAM,EAAgB,CAAG,EAGxC,OAFK,GAEE,MADe,EAAO,WAAW,CAAE,WAAU,QAAO,CAAC,EAAA,CAC7C,OAAS,EAFJ,EAGtB,CAqCA,eAAsB,EACpB,EACA,EACA,EAAA,IACA,EAC4B,CAE5B,GADA,EAAe,CAAM,EACjB,CAAE,MAAM,EAAgB,CAAG,EAC7B,MAAM,IAAI,EAAsB,EAAI,OAAO,KAAM,QAAQ,EAM3D,IAAM,EAA0C,EAAI,mBAChD,MAAM,EAAI,MAAM,SAAS,EAAU,EAAkB,CAAM,CAAC,EAC5D,KAEJ,OAAO,EAAI,GAAG,YAAY,KAAO,IAAO,CAGtC,IAAM,EAA2B,CAAE,GAAG,EAAK,GAAI,CAAG,EAC5C,EAAe,MAAM,EAAgB,CAAK,EAChD,GAAI,CAAC,EAAc,MAAM,IAAI,EAAsB,EAAI,OAAO,KAAM,QAAQ,EAC5E,GAAM,CAAC,GAAW,MAAM,EAAa,WAAW,CAAE,WAAU,QAAO,CAAC,EACpE,GAAI,CAAC,EACH,MAAM,IAAI,EAAmB,EAAU,CAAM,EAe/C,GAAM,CAAE,YAAa,EAAoB,GAAG,GANvB,EAAQ,MAAQ,CAAC,EAehC,EAAS,MAAM,EAAwB,EAAO,EADjC,EAAsB,EAAI,OAAQ,CAAE,GAAG,EAAW,OAAQ,WAAY,CAClB,EAAG,EAAQ,CAAE,EAgB9E,EAAY,EAAwB,EAAI,OAAQ,CAAS,EAS/D,OARI,IAAc,IAAA,IAChB,MAAM,EAAI,MAAM,eAAe,EAAU,CAAE,WAAY,CAAU,EAAG,CAAE,IAAG,CAAC,EAGxE,EAAI,oBACN,MAAM,EAAsB,EAAO,EAAU,EAAQ,EAAe,EAAQ,CAAI,EAG3E,CACT,CAAC,CACH,CAUA,SAAS,EACP,EACA,EACqC,CAMrC,GAAI,EAAE,EAAO,WAAa,CAAC,EAAA,CAAG,KAAM,GAAM,EAAE,OAAS,eAAe,EAAG,OACvE,IAAM,EAAQ,EAAO,UAAU,WAC/B,GAAI,IAAU,IAAA,IAAa,EAAM,WAAa,GAAM,OACpD,IAAM,EAAQ,EAAU,WACpB,YAAO,GAAU,WAAY,GAAkB,MAAM,QAAQ,CAAK,GACtE,OAAO,CACT,CAKA,eAAsB,EACpB,EACA,EACA,EAAA,IACkB,CAClB,EAAe,CAAM,EACrB,IAAM,EAAS,MAAM,EAAgB,CAAG,EAExC,OADK,EACE,EAAO,OAAO,CAAE,WAAU,QAAO,CAAC,EADrB,EAEtB,CAMA,eAAsB,EACpB,EACA,EAAA,IACiB,CACjB,EAAe,CAAM,EACrB,IAAM,EAAS,MAAM,EAAgB,CAAG,EAExC,OADK,EACE,EAAO,MAAM,CAAE,QAAO,CAAC,EADV,CAEtB,CAMA,eAAsB,EACpB,EACA,EACA,EAAA,IACsB,CACtB,EAAe,CAAM,EACrB,IAAM,EAAS,IAAI,IACnB,GAAI,EAAU,SAAW,EAAG,OAAO,EACnC,IAAM,EAAS,MAAM,EAAgB,CAAG,EACxC,GAAI,CAAC,EAAQ,OAAO,EAEpB,IAAM,EAAO,MAAM,EAAO,SAAS,CACjC,MAAO,CAAE,SAAU,CAAE,GAAI,CAAU,EAAG,QAAO,CAC/C,CAAC,EACD,IAAK,IAAM,KAAO,EAChB,EAAO,IAAI,EAAI,QAAkB,EAEnC,OAAO,CACT,CAOA,eAAsB,EACpB,EACA,EACA,EAAA,IAKQ,CACR,EAAe,CAAM,EACrB,IAAM,EAAQ,MAAM,EAAS,EAAK,EAAU,CAAM,EAClD,GAAI,CAAC,EAAO,OAAO,KAInB,IAAM,EADS,EACY,CAAC,CAAC,cACvB,EACJ,IAAA,IAAqC,CAAE,eAAc,EAAI,CAAE,SAAQ,eAAc,EAC7E,EAAU,MAAM,EAAI,MAAM,SAAS,EAAU,CAAW,EAC9D,GAAI,CAAC,EAAS,OAAO,KAErB,IAAM,EAAe,EAAI,OAAO,UAC1B,EAAgB,EAChB,EAAc,EAAM,KACpB,EAAyC,CAAC,EAChD,IAAK,IAAM,KAAO,OAAO,KAAK,CAAW,EACvC,EAAc,GAAO,EAAc,GAErC,IAAM,EAAQ,EAAW,EAAe,EAAa,CAAY,EACjE,IAAK,IAAM,KAAQ,EACb,EAAK,OAAS,cAGhB,EAAK,WAAa,EAChB,MAAM,QAAQ,EAAK,IAAI,EAAI,EAAK,KAAO,CAAC,EACxC,MAAM,QAAQ,EAAK,EAAE,EAAI,EAAK,GAAK,CAAC,CACtC,GAIJ,MAAO,CAAE,QAAO,UAAS,OAAM,CACjC,CCnfA,eAAsB,EACpB,EACA,EACgC,CAEhC,IAAM,GAAQ,MADI,EAAqB,EAAK,CAAC,CAAQ,CAAC,EAAA,CACpC,IAAI,CAAQ,EAE9B,OADK,EACE,OAAO,OAAO,CAAK,EADP,CAAC,CAEtB,CAoBA,eAAsB,EACpB,EACA,EACA,EACA,EACe,CACf,EAAe,CAAM,EACrB,IAAM,EAAS,EAAiB,EAGhC,GAAI,IAAW,EAAO,cAAe,CACnC,IAAM,EAAgC,CAAE,QAAO,EAC3C,IAAW,cAAa,EAAK,YAAc,IAAI,MACnD,MAAM,EAAI,MAAM,OAAO,EAAU,CAA2B,EAC5D,MACF,CAEA,IAAM,EAAS,MAAM,EAAsB,CAAG,EAC9C,GAAI,CAAC,EAOH,MAAM,IAAI,EAAsB,EAAI,OAAO,KAAM,cAAc,EAgBjE,IAAM,EAAsC,CAAE,QAAO,EACrD,MAAM,EAAI,MAAM,gBAAgB,EAAU,EAAmC,EAAQ,CACnF,cAAe,EAAO,cACtB,oBAAqB,EAAI,EAAK,IAAM,EAAsB,EAAQ,EAAI,EAAK,CAAC,CAC9E,CAAC,CACH,CAuCA,eAAsB,EACpB,EACA,EAC2D,CAC3D,IAAM,EAAS,IAAI,IACnB,GAAI,EAAU,SAAW,EAAG,OAAO,EACnC,IAAM,EAAS,MAAM,EAAsB,CAAG,EAC9C,GAAI,CAAC,EAAQ,OAAO,EAEpB,IAAM,EAAO,MAAM,EAAO,SAAS,CAAE,MAAO,CAAE,SAAU,CAAE,GAAI,CAAU,CAAE,CAAE,CAAC,EAC7E,IAAK,IAAM,KAAK,EAAM,CACpB,IAAM,EAAM,EAAE,SACR,EAAS,EAAE,OACb,EAAQ,EAAO,IAAI,CAAG,EACrB,IACH,EAAQ,CAAC,EACT,EAAO,IAAI,EAAK,CAAK,GAEvB,EAAM,GAAU,CACd,SACA,OAAQ,EAAE,OACV,YAAc,EAAE,aAA+B,IACjD,CACF,CACA,OAAO,CACT,CC5IA,SAAS,GAAwE,CAC/E,IAAM,EAAS,EAAiB,EAC1B,EAAM,EAAW,EAEvB,MAAO,CACL,SAFY,GAAK,kBAAoB,EAAO,QAAQ,IAAK,GAAM,EAAE,IAAI,EAAA,CAEtD,IAAK,IAAU,CAAE,MAAK,EAAE,EACvC,cAAe,GAAK,eAAiB,EAAO,aAC9C,CACF,CAMA,SAAS,EACP,EACA,EACA,EACA,EACmB,CACnB,IAAM,EAA4B,CAAC,EACnC,IAAK,IAAM,KAAU,EAAS,CAC5B,GAAI,EAAO,OAAS,EAAe,SACnC,IAAM,EAAa,GAAoB,IAAI,EAAO,IAAI,GAAK,CAAC,EACtD,EAAoB,CAAC,EAC3B,IAAK,IAAM,KAAa,GAClB,EAAW,KAAe,IAAA,IAAa,EAAW,KAAe,OACnE,EAAQ,KAAK,CAAS,EAG1B,EAAO,EAAO,MAAQ,CACpB,SAAU,EAAQ,SAAW,EAC7B,MAAO,EAAmB,OAC1B,WAAY,EAAmB,OAAS,EAAQ,OAChD,SACF,CACF,CACA,OAAO,CACT,CAKA,eAAsB,EACpB,EACA,EAC4B,CAI5B,OAAO,MADW,EAA0B,EAAK,CAAC,CAAQ,CAAC,EAAA,CAChD,IAAI,CAAQ,GAAK,CAAC,CAC/B,CAMA,eAAsB,EACpB,EACA,EACyC,CACzC,IAAM,EAAS,IAAI,IACnB,GAAI,EAAU,SAAW,EAAG,OAAO,EAEnC,GAAM,CAAE,UAAS,iBAAkB,EAAc,EAE3C,EAAqB,OAAO,QAAQ,EAAI,OAAO,SAAwC,CAAC,CAC3F,QAAQ,CAAC,EAAG,KAAO,EAAE,YAAY,CAAC,CAClC,KAAK,CAAC,KAAU,CAAI,EACvB,GAAI,EAAmB,SAAW,EAAG,OAAO,EAI5C,IAAM,EAAmB,EAAe,IAAI,GAAG,EAAI,OAAO,KAAK,cAAc,EAC7E,GAAI,CAAC,EAAkB,OAAO,EAK9B,IAAM,EAAO,MAAM,EAAe,EAAI,MAAM,EACtC,EAAQ,EAAQ,EAAiB,SAAU,CAAS,EACpD,EAAe,MAAM,EAAI,GAC5B,OAAO,CAAC,CACR,KAAK,CAAgB,CAAC,CACtB,MACC,IAAS,IAAA,GAEL,EADA,EAAI,EAAO,EAAwB,EAAkB,CAAE,MAAK,EAAG,EAAI,OAAO,IAAI,CAAC,CAErF,EAGI,EAAuB,IAAI,IACjC,IAAK,IAAM,KAAK,EAAc,CAC5B,IAAM,EAAM,EACN,EAAM,EAAI,SACV,EAAS,EAAI,OACb,EAAuC,CAAC,EAC9C,IAAK,IAAM,KAAa,EACtB,EAAY,GAAa,EAAI,GAE/B,IAAI,EAAQ,EAAqB,IAAI,CAAG,EACnC,IACH,EAAQ,IAAI,IACZ,EAAqB,IAAI,EAAK,CAAK,GAErC,EAAM,IAAI,EAAQ,CAAW,CAC/B,CAEA,IAAK,IAAM,KAAY,EACrB,EAAO,IACL,EACA,EACE,EACA,EAAqB,IAAI,CAAQ,EACjC,EACA,CACF,CACF,EAGF,OAAO,CACT,CASA,eAAsB,EACpB,EACA,EAC4B,CAC5B,GAAM,CAAE,UAAS,iBAAkB,EAAc,EAC3C,EAAe,GAAS,QAAU,EAAQ,KAAM,GAAM,EAAE,OAAS,CAAa,CAAC,EAAE,KACvF,GAAI,CAAC,EAAc,MAAO,CAAE,MAAO,EAAG,SAAU,EAAG,QAAS,EAAG,QAAS,CAAE,EAE1E,GAAI,CAAC,EAAQ,KAAM,GAAM,EAAE,OAAS,CAAY,EAC9C,MAAM,IAAI,EACR,EACA,EAAQ,IAAK,GAAM,EAAE,IAAI,CAC3B,EAGF,IAAM,EAAW,MAAM,EAAI,MAAM,SAAS,EAC1C,GAAI,EAAS,SAAW,EAAG,MAAO,CAAE,MAAO,EAAG,SAAU,EAAG,QAAS,EAAG,QAAS,CAAE,EAGlF,IAAM,EAAY,MAAM,EACtB,EACA,EAAS,IAAK,GAAM,EAAE,EAAE,CAC1B,EAEI,EAAW,EACX,EAAU,EACV,EAAU,EACd,IAAK,IAAM,KAAU,EAAU,CAE7B,IAAM,EADS,EAAU,IAAI,EAAO,EACV,CAAC,GAAG,GAC1B,CAAC,GAAgB,EAAa,aAAe,EAAG,IAC3C,EAAa,SAAU,IAC3B,GACP,CAEA,MAAO,CAAE,MAAO,EAAS,OAAQ,WAAU,UAAS,SAAQ,CAC9D,CCvHA,IAAa,EAAb,KAEE,CACA,IAEA,YAAY,EAAwC,CAClD,IAAM,EAAqB,EAAsB,EAAO,OAAO,SAAS,EACxE,KAAK,IAAM,EAAqB,EAAQ,CAAkB,CAC5D,CAMA,MAAM,OAAO,EAAuE,CAClF,IAAM,EAAS,MAAM,KAAK,IAAI,MAAM,OAAO,CAAI,EAI/C,OAHI,KAAK,IAAI,oBACX,MAAM,EAAoB,KAAK,IAAK,EAAO,GAAI,EAAQ,KAAM,EAAK,EAE7D,CACT,CAEA,SAAS,EAAY,EAA0E,CAC7F,OAAO,KAAK,IAAI,MAAM,SAAS,EAAI,CAAO,CAC5C,CAEA,SAAS,EAAiE,CACxE,OAAO,KAAK,IAAI,MAAM,SAAS,CAAO,CACxC,CASA,MAAM,OAAO,EAAY,EAAuE,CAC9F,IAAI,EAAkD,KAClD,KAAK,IAAI,qBACX,EAAgB,MAAM,KAAK,IAAI,MAAM,SAAS,CAAE,GAGlD,IAAM,EAAS,MAAM,KAAK,IAAI,MAAM,OAAO,EAAI,CAAI,EAEnD,GAAI,KAAK,IAAI,oBAAsB,EAAe,CAChD,IAAM,EAAQ,EAAe,EAAe,CAAM,EAC5C,EAAU,MAAM,EAAoB,KAAK,IAAK,EAAI,EAAQ,EAAO,EAAK,EAC5E,GAAI,IAAY,IAAA,GAGd,OAFA,MAAM,EAAmB,KAAK,IAAK,EAAI,CAAO,EAC9C,MAAM,EAAc,KAAK,IAAK,CAAE,EACzB,CAAE,GAAG,EAAQ,SAAU,CAAQ,EAExC,MAAM,EAAc,KAAK,IAAK,CAAE,CAClC,CAEA,OAAO,CACT,CAEA,OAAO,EAA8B,CACnC,OAAO,KAAK,IAAI,MAAM,OAAO,CAAE,CACjC,CAMA,gBAAgB,EAAkB,EAAgB,EAAuC,CACvF,OAAO,KAAK,IAAI,MAAM,gBAAgB,EAAU,EAAQ,CAAY,CACtE,CAEA,kBAAkB,EAAkB,EAAiB,CACnD,OAAO,KAAK,IAAI,MAAM,kBAAkB,EAAU,CAAM,CAC1D,CAMA,YAAY,EAAkB,EAAgE,CAC5F,OAAO,EAAY,KAAK,IAAK,EAAU,CAAO,CAChD,CAEA,WAAW,EAAkB,EAAiB,EAAiB,CAC7D,OAAO,EAAW,KAAK,IAAK,EAAU,EAAS,CAAM,CACvD,CAEA,gBAAgB,EAAkB,EAAY,EAAY,EAAiB,CACzE,OAAO,EAAgB,KAAK,IAAK,EAAU,EAAI,EAAI,CAAM,CAC3D,CAEA,eAAe,EAAkB,EAAiB,EAAiB,CACjE,OAAO,EAAe,KAAK,IAAK,EAAU,EAAS,CAAM,CAC3D,CAEA,cAAc,EAAkB,EAAiB,CAC/C,OAAO,EAAc,KAAK,IAAK,EAAU,CAAM,CACjD,CAEA,sBACE,EACA,EACA,EACA,EACA,EACA,CACA,OAAO,EAAsB,KAAK,IAAK,EAAU,EAAa,EAAc,EAAQ,CAAI,CAC1F,CAMA,qBAAqB,EAAkB,CACrC,OAAO,EAAqB,KAAK,IAAK,CAAQ,CAChD,CAEA,0BAA0B,EAAqB,CAC7C,OAAO,EAA0B,KAAK,IAAK,CAAS,CACtD,CAEA,qBAAqB,EAA+B,CAClD,OAAO,EAAqB,KAAK,IAAK,CAAO,CAC/C,CAMA,gBAAgB,EAAkB,CAChC,OAAO,EAAgB,KAAK,IAAK,CAAQ,CAC3C,CAEA,gBAAgB,EAAkB,EAAgB,EAA+B,CAC/E,OAAO,EAAgB,KAAK,IAAK,EAAU,EAAQ,CAAM,CAC3D,CAEA,qBAAqB,EAAqB,CACxC,OAAO,EAAqB,KAAK,IAAK,CAAS,CACjD,CAMA,UACE,EACA,EACA,EACA,EACA,CACA,OAAO,EAAU,KAAK,IAAK,EAAU,EAAM,EAAQ,CAAI,CACzD,CAEA,WACE,EACA,EACA,EACA,EACA,CACA,OAAO,EAAW,KAAK,IAAK,EAAU,EAAO,EAAQ,CAAI,CAC3D,CAEA,SAAS,EAAkB,EAAiB,CAC1C,OAAO,EAAS,KAAK,IAAK,EAAU,CAAM,CAC5C,CAEA,YAAY,EAAkB,EAAiB,CAC7C,OAAO,EAAY,KAAK,IAAK,EAAU,CAAM,CAC/C,CAEA,aAAa,EAAkB,EAAiB,EAAsC,CACpF,OAAO,EAAa,KAAK,IAAK,EAAU,EAAQ,CAAI,CACtD,CAEA,SAAS,EAAkB,EAAiB,CAC1C,OAAO,EAAS,KAAK,IAAK,EAAU,CAAM,CAC5C,CAEA,YAAY,EAAiB,CAC3B,OAAO,EAAY,KAAK,IAAK,CAAM,CACrC,CAEA,cAAc,EAAqB,EAAiB,CAClD,OAAO,EAAc,KAAK,IAAK,EAAW,CAAM,CAClD,CAEA,wBAAwB,EAAkB,EAAiB,CACzD,OAAO,EAAwB,KAAK,IAAK,EAAU,CAAM,CAC3D,CACF,EAQA,SAAgB,GACd,EAC0B,CAE1B,OAAO,IAAI,EAAyB,CAClC,MAFY,EAAkB,CAE1B,EACJ,SACA,OAAQ,EAAO,CAAC,CAAC,OAAO,MAAM,CAAE,QAAS,EAAO,IAAK,CAAC,CACxD,CAAC,CACH"}
+{"version":3,"file":"client.mjs","names":[],"sources":["../src/drafts.ts","../src/locale-status.ts","../src/translation-status.ts","../src/client.ts"],"sourcesContent":["/**\n * Draft-overlay operations.\n *\n * Capability: requires the entity to declare `publishable()`. Reads\n * (`getDraft`, `hasDraft`, `countDrafts`, `hasDraftBatch`) silently\n * return falsy when the entity doesn't support drafts; writes\n * (`saveDraft`, `mergeDraft`, `publishDraft`) throw `EntityCapabilityError`.\n */\n\nimport 'server-only'\n\nimport { blockTreeFieldsOf, type FieldConfig } from '@murumets-ee/entity'\nimport type { InferEntityDTO, InferUpdateInput } from '@murumets-ee/entity/admin'\nimport { diffBlocks } from './diff/block-diff.js'\nimport { diffFields } from './diff/field-diff.js'\nimport type { FieldDiff } from './diff/types.js'\nimport { DraftNotFoundError, EntityCapabilityError } from './errors.js'\nimport {\n  applyLocaleRoutedUpdate,\n  localeFindOptions,\n} from './internal/apply-locale-routed-update.js'\nimport { type ContentContext, getDraftsClient } from './internal/context.js'\nimport { projectToEntityFields } from './internal/projection.js'\nimport { DEFAULT_LOCALE_SENTINEL, validateLocale } from './locale-utils.js'\nimport { getContentConfig } from './plugin.js'\nimport type { DraftsTable } from './schema/drafts.js'\nimport type { DraftEntry } from './types.js'\nimport { createVersionSnapshot } from './versions.js'\n\ntype DraftRow = NonNullable<Awaited<ReturnType<ReturnType<DraftsTable['makeClient']>['findOne']>>>\n\nfunction toDraftEntry(row: DraftRow): DraftEntry {\n  return {\n    id: row.id,\n    entityId: row.entityId,\n    locale: row.locale,\n    data: row.data,\n    createdBy: row.createdBy,\n    createdByName: row.createdByName ?? null,\n    createdAt: row.createdAt,\n    updatedAt: row.updatedAt,\n  }\n}\n\n/**\n * Save (upsert) a draft for an entity+locale. One draft per\n * entity+locale — overwrites any existing draft.\n *\n * `data` is projected through the entity's declared field whitelist\n * BEFORE it is stored (same `projectToEntityFields` call `publishDraft`\n * makes on the way out). Storing the caller's JSON verbatim let a draft\n * carry keys the entity never declared, identity/audit columns and\n * `internal: true` fields; publishing filtered them, but `getDraft` and\n * `compareDraftWithCurrent` echoed them straight back to the admin UI,\n * and the drafts table accumulated arbitrary caller-controlled JSON\n * (`plan/admin-api-hardening` F002). Validating at the write closes the\n * asymmetry — the stored draft is now always a subset of what the entity\n * can actually hold.\n */\nexport async function saveDraft<F extends Record<string, FieldConfig>>(\n  ctx: ContentContext<F>,\n  entityId: string,\n  data: InferUpdateInput<F>,\n  locale = DEFAULT_LOCALE_SENTINEL,\n  user?: { id: string; name?: string },\n): Promise<DraftEntry<InferUpdateInput<F>>> {\n  validateLocale(locale)\n  const client = await getDraftsClient(ctx)\n  if (!client) throw new EntityCapabilityError(ctx.entity.name, 'drafts')\n\n  const projected = projectToEntityFields(ctx.entity, data as Record<string, unknown>)\n\n  // `projectToEntityFields` is a field-NAME whitelist — it never inspects a\n  // value, so a `field.blockTree()` column in a draft took arbitrary JSON, and\n  // `editor-state` hands the stored draft back as the CANVAS BASE STATE\n  // (editor F002). Publishing is already gated by the entity write path, but\n  // waiting until publish means the editor loads a tree it cannot represent.\n  // Same validator, same judgement — asked here because the draft blob carries\n  // no Zod schema of its own.\n  ctx.admin.assertBlockTreesValid(projected)\n  // …and the STRICT judgement for a token-derived caller (agent-access D014):\n  // a draft is published later by whoever presses Publish, so a tree a machine\n  // could not store directly must not be parked here for a person to promote.\n  // F116, same reasoning — and this is precisely the write path the finding\n  // was filed against: dava's home-page DRAFT already holds a mismatched\n  // media reference. Grandfathering against the draft ALREADY STORED (rather\n  // than validating strictly) is what keeps that draft's next autosave\n  // working instead of turning \"a broken image\" into \"a draft that can never\n  // be saved again\".\n  //\n  // The lookup is skipped entirely when the PROJECTED payload carries no\n  // block-tree field at all — `assertMediaKindsValid` would no-op anyway\n  // (same optimization as `saveTranslation`'s), and most entities with\n  // drafts have no block-tree field to begin with.\n  const hasBlockTreeValue = blockTreeFieldsOf(ctx.entity).some(({ name }) =>\n    Object.hasOwn(projected, name),\n  )\n  const existing = hasBlockTreeValue ? await client.findOne({ entityId, locale }) : null\n  // Grandfathered against the draft already stored, like the media-kind check\n  // below: a tree that was there before this save is not what this save adds.\n  await ctx.admin.assertBlockTreesStrictForCaller(\n    projected,\n    () => existing?.data as Record<string, unknown> | undefined,\n  )\n  await ctx.admin.assertMediaKindsValid(\n    projected,\n    existing?.data as Record<string, unknown> | undefined,\n  )\n\n  const now = new Date()\n  const createdBy = user?.id ?? ''\n  const createdByName = user?.name ?? null\n\n  const row = await client.upsert(\n    {\n      entityId,\n      locale,\n      data: projected,\n      createdBy,\n      createdByName,\n      createdAt: now,\n      updatedAt: now,\n    },\n    {\n      target: ['entityId', 'locale'],\n      // On conflict, only update the mutable fields — preserve createdBy/createdAt.\n      set: { data: projected, updatedAt: now },\n    },\n  )\n\n  return toDraftEntry(row) as DraftEntry<InferUpdateInput<F>>\n}\n\n/**\n * The keys that move a document's canonical URL in the patterns the toolkit\n * ships (`[slug]`, `[parent.path]`) plus the slug mode that decides whether a\n * clash is refused or auto-suffixed. A merge naming one of them, on a ROUTABLE\n * entity, runs the path-conflict check (see `mergeDraft`); any other merge\n * skips its lookups — the staged draft, the row, and `toolkit_paths` (twice\n * under a parent).\n *\n * A pattern built from another field (`/[category]/[slug]`) is not covered:\n * staging only `category` is refused at Publish rather than here.\n */\nconst PATH_KEYS = ['slug', 'slugMode', 'parent'] as const\n\n/**\n * Stage a PARTIAL change: merge `patch` into the entity+locale draft, creating\n * the draft if there is none. Keys not in `patch` are left exactly as the draft\n * (or, absent a draft key, the live row) has them.\n *\n * This is the write every editing surface uses since editor D019 — \"every edit\n * on every surface saves to the document's one shared draft\". `saveDraft`\n * REPLACES the blob, which is right for a surface that owns the whole document\n * (the menu editor) and wrong for one that owns a few fields of it: page\n * settings saving `title` through `saveDraft` would erase the block edits the\n * canvas staged a second earlier. A draft is therefore a patch over the row, and\n * every reader that shows editable values reads row ⊕ draft.\n *\n * Judged like the entity PATCH it replaces, BEFORE it is stored:\n *  - projected through the field whitelist (`internal`, undeclared keys dropped)\n *  - `assertBlockTreesValid` + `assertMediaKindsValid` (grandfathered against the\n *    stored draft, same as `saveDraft`)\n *  - `assertUpdateValid` — the entity's own update schema. `saveDraft` never ran\n *    it, which was harmless while the form's Publish still PATCHed; moving a\n *    surface into the draft must not move its refusal to Publish, where the\n *    author is no longer looking at the field.\n *  - `assertPathAvailable` — the path-conflict guard, as a dry run, when the\n *    merge moves the URL (see {@link PATH_KEYS}) on a routable entity (F150).\n *\n * 🔴 ONE STATEMENT, not read-modify-write. The merge is `data || patch` inside\n * `ON CONFLICT DO UPDATE` (`TableClient.upsert`'s `mergeJsonb`), so it cannot\n * lose a concurrent write: a read-then-upsert that interleaved with op-commit's\n * or a bound field's stage would write back the draft as it was read — silently\n * reverting the other writer's change. `writeDraft` merges the same way, so\n * neither can erase the other. Top-level `||`, a SHALLOW merge.\n *\n * Resolves `null` when the projected patch is EMPTY and no draft exists: nothing\n * the entity declares was sent, so nothing is staged and no empty draft row is\n * created.\n *\n * ⚠️ The rest of the write path's hooks — `pathParent()`'s cycle check, the\n * partial-unique slug index, `sluggable()`'s regeneration — still run only at\n * Publish, inside its transaction, where a refusal stops the whole publish. The\n * path check here answers \"as of now\"; Publish runs the real guard again.\n */\nexport async function mergeDraft<F extends Record<string, FieldConfig>>(\n  ctx: ContentContext<F>,\n  entityId: string,\n  patch: InferUpdateInput<F>,\n  locale = DEFAULT_LOCALE_SENTINEL,\n  user?: { id: string; name?: string },\n): Promise<DraftEntry<InferUpdateInput<F>> | null> {\n  validateLocale(locale)\n  const client = await getDraftsClient(ctx)\n  if (!client) throw new EntityCapabilityError(ctx.entity.name, 'drafts')\n\n  const projected = projectToEntityFields(ctx.entity, patch as Record<string, unknown>)\n  // Nothing the entity declares: stage nothing. Upserting `{}` would CREATE an\n  // empty draft, and the document would then read \"Draft saved · not live\n  // yet\" about a change that does not exist.\n  if (Object.keys(projected).length === 0) {\n    const current = await client.findOne({ entityId, locale })\n    return current ? (toDraftEntry(current) as DraftEntry<InferUpdateInput<F>>) : null\n  }\n  ctx.admin.assertBlockTreesValid(projected)\n  ctx.admin.assertUpdateValid(projected)\n  const hasBlockTreeValue = blockTreeFieldsOf(ctx.entity).some(({ name }) =>\n    Object.hasOwn(projected, name),\n  )\n  const touchesPath =\n    ctx.entity.frontend?.path !== undefined &&\n    PATH_KEYS.some((key) => Object.hasOwn(projected, key))\n  const existing =\n    hasBlockTreeValue || touchesPath ? await client.findOne({ entityId, locale }) : null\n  // The STRICT judgement for a token-derived caller (agent-access D014), with\n  // the stored draft to grandfather against — see `saveDraft`.\n  await ctx.admin.assertBlockTreesStrictForCaller(\n    projected,\n    () => existing?.data as Record<string, unknown> | undefined,\n  )\n  await ctx.admin.assertMediaKindsValid(\n    projected,\n    existing?.data as Record<string, unknown> | undefined,\n  )\n  // A staged slug that another document's URL already holds is refused NOW,\n  // beside the field the author typed it in — not first at Publish (editor\n  // PR60, F150). Checked against what the draft will hold after this merge,\n  // since an earlier stage may have set `slugMode` or `parent`.\n  if (touchesPath) {\n    const staged = {\n      ...((existing?.data as Record<string, unknown> | undefined) ?? {}),\n      ...projected,\n    }\n    if (locale === DEFAULT_LOCALE_SENTINEL) {\n      await ctx.admin.assertPathAvailable(entityId, staged)\n    } else {\n      // Checked the way Publish writes it: `updateForLocale` sends a locale's\n      // TRANSLATABLE fields through that locale's guard and the rest (a\n      // `parent`, a non-translatable slug) through `update()`, whose guard\n      // checks the default locale. One guard over everything would test a\n      // shared `parent` against the wrong locale's URLs.\n      const fields = ctx.entity.allFields as Record<string, { translatable?: boolean } | undefined>\n      const translatable: Record<string, unknown> = {}\n      const shared: Record<string, unknown> = {}\n      for (const [key, value] of Object.entries(staged)) {\n        if (fields[key]?.translatable === true) translatable[key] = value\n        else shared[key] = value\n      }\n      const moves = (part: Record<string, unknown>) =>\n        PATH_KEYS.some((key) => Object.hasOwn(part, key) && Object.hasOwn(projected, key))\n      if (moves(translatable)) await ctx.admin.assertPathAvailable(entityId, translatable, locale)\n      if (moves(shared)) await ctx.admin.assertPathAvailable(entityId, shared)\n    }\n  }\n\n  const now = new Date()\n  const row = await client.upsert(\n    {\n      entityId,\n      locale,\n      data: projected,\n      createdBy: user?.id ?? '',\n      createdByName: user?.name ?? null,\n      createdAt: now,\n      updatedAt: now,\n    },\n    { target: ['entityId', 'locale'], set: { updatedAt: now }, mergeJsonb: ['data'] },\n  )\n  return toDraftEntry(row) as DraftEntry<InferUpdateInput<F>>\n}\n\n/**\n * Get the draft for an entity+locale, or null if none exists (or the\n * entity doesn't support drafts).\n */\nexport async function getDraft<F extends Record<string, FieldConfig>>(\n  ctx: ContentContext<F>,\n  entityId: string,\n  locale = DEFAULT_LOCALE_SENTINEL,\n): Promise<DraftEntry<InferUpdateInput<F>> | null> {\n  validateLocale(locale)\n  const client = await getDraftsClient(ctx)\n  if (!client) return null\n  const row = await client.findOne({ entityId, locale })\n  return row ? (toDraftEntry(row) as DraftEntry<InferUpdateInput<F>>) : null\n}\n\n/**\n * Delete (discard) a draft for an entity+locale. Returns whether\n * anything was deleted; safely no-ops on entities without drafts.\n */\nexport async function deleteDraft(\n  ctx: ContentContext,\n  entityId: string,\n  locale = DEFAULT_LOCALE_SENTINEL,\n): Promise<boolean> {\n  validateLocale(locale)\n  const client = await getDraftsClient(ctx)\n  if (!client) return false\n  const deleted = await client.deleteMany({ entityId, locale })\n  return deleted.length > 0\n}\n\n/**\n * Publish a draft: make THIS document's staged changes live.\n *\n * \"Publish\" means one thing on every surface (editor D019): the draft's fields\n * are written to the row for the draft's locale AND the row is put live. The\n * draft is then gone and, if versionable, a version snapshot records what went\n * live.\n *\n * Locale routing mirrors the admin PATCH handler (and the taxonomy fix\n * in 10a7cc2b): a default-locale draft writes the base row; a\n * non-default-locale draft routes translatable fields to\n * `saveTranslation` (→ `{entity}_translations`), `status` to the\n * per-locale status table, and only non-translatable fields (which have\n * no per-locale home) to the base row. Without this split, publishing\n * an `et` draft overwrote the default-locale base row wholesale.\n *\n * ## ONE TRANSACTION (editor PR60, R055 §4)\n *\n * The row write, the locale status, `_overrides`, the draft delete and the\n * version snapshot commit together or not at all. They used to be five separate\n * statements, so a failure part-way left a document whose content was live and\n * whose draft still claimed to be pending — or, worse, whose draft was gone while\n * the row write had not landed.\n *\n * The draft is CLAIMED first, by deleting it and publishing what the delete\n * returned. The delete takes the row lock, so an op-commit that is mid-flight on\n * the same draft either committed before (and its edit is in what we publish) or\n * blocks until we commit and then retries its SERIALIZABLE transaction — or, if it\n * had not read the draft yet, inserts a fresh draft holding only its own patch.\n * Either way it does not write a stale copy back over the published one. The editor also flushes and awaits its own in-flight saves\n * before it calls this, so the lock is the backstop, not the mechanism.\n *\n * Path-index and write notifications fire after COMMIT, not inside it —\n * `AdminClient.afterCommit` defers them on a tracked transaction.\n */\nexport async function publishDraft<F extends Record<string, FieldConfig>>(\n  ctx: ContentContext<F>,\n  entityId: string,\n  locale = DEFAULT_LOCALE_SENTINEL,\n  user?: { id: string; name?: string },\n): Promise<InferEntityDTO<F>> {\n  validateLocale(locale)\n  if (!(await getDraftsClient(ctx))) {\n    throw new EntityCapabilityError(ctx.entity.name, 'drafts')\n  }\n\n  // Previous state for the version delta — locale-merged, so the delta compares\n  // against what this locale's readers actually saw. Read BEFORE the\n  // transaction: it is the committed state the publish replaces.\n  const previousState: InferEntityDTO<F> | null = ctx.versionableOptions\n    ? await ctx.admin.findById(entityId, localeFindOptions(locale))\n    : null\n\n  return ctx.db.transaction(async (tx) => {\n    // Every table client below binds to `tx` through this context — drafts,\n    // locale status, versions and the `_version` column write.\n    const txCtx: ContentContext<F> = { ...ctx, db: tx }\n    const draftsClient = await getDraftsClient(txCtx)\n    if (!draftsClient) throw new EntityCapabilityError(ctx.entity.name, 'drafts')\n    const [claimed] = await draftsClient.deleteMany({ entityId, locale })\n    if (!claimed) {\n      throw new DraftNotFoundError(entityId, locale)\n    }\n\n    // `?? {}` because the column is `jsonb NOT NULL`, and that forbids SQL NULL\n    // while permitting the JSON literal `null` — which deserializes to JS `null`.\n    // A bare cast then made `draftData.status` a TypeError, so a malformed row\n    // 500'd the publish route instead of taking the ordinary \"nothing declared,\n    // publish the row as-is\" path below. Nothing in this package writes such a\n    // row; a seed, a migration or a hand-edit can.\n    const claimedData = (claimed.data ?? {}) as Record<string, unknown>\n    // `publishedAt` is Publish's to set, like `status` below: a staged value\n    // would let whoever wrote the draft back- or forward-date the publication.\n    // publishable()'s hook fills it when the UPDATE carries none — which, with\n    // the staged value dropped, is every publish: it records the LATEST\n    // publication, not the first.\n    const { publishedAt: _stagedPublishedAt, ...draftData } = claimedData\n    // \"Publish\" means MAKE LIVE, always — the status is not the draft's to\n    // decide. Block-editor drafts carry no `status` at all, and before D019 a\n    // form-saved draft could carry `status: 'draft'`, which then won: Publish\n    // wrote the content and left the document unpublished, so the same button\n    // meant \"publish\" on one surface and \"stage\" on another. The publishable()\n    // behavior auto-sets `publishedAt` on the transition. The publish-permission\n    // gate lives in the admin route, not here.\n    const updateData = projectToEntityFields(ctx.entity, { ...draftData, status: 'published' })\n    const result = await applyLocaleRoutedUpdate(txCtx, entityId, updateData, locale, tx)\n\n    // F009 — promote the page's chrome overrides.\n    //\n    // `projectToEntityFields` drops every `internal: true` field, deliberately, so\n    // `_overrides` cannot ride the generic promotion. That guard is NOT relaxed:\n    // this is one named field, written through the trusted `updateInternal` path\n    // that `with-overrides.ts` documents as \"the only path that can mutate it\".\n    // Before F009 that call site did not exist, so an override survived in the\n    // draft buffer and never reached the column — the op committed, the canvas\n    // updated, and a reload brought the hidden header back.\n    //\n    // AFTER the main update, so the override never lands against content that\n    // failed to — and inside the same transaction, so neither lands alone.\n    // `_overrides` is not translatable, so it belongs on the base row for every\n    // locale.\n    const overrides = readOverridesForPublish(ctx.entity, draftData)\n    if (overrides !== undefined) {\n      await ctx.admin.updateInternal(entityId, { _overrides: overrides }, { tx })\n    }\n\n    if (ctx.versionableOptions) {\n      await createVersionSnapshot(txCtx, entityId, result, previousState, locale, user)\n    }\n\n    return result\n  })\n}\n\n/**\n * The page's override map from a draft payload, when the entity declares the\n * field and the draft carries one.\n *\n * Returns `undefined` — never `{}` — so an ordinary content publish does not\n * touch the column. Shape-guarded because a draft payload is stored jsonb: an\n * array or a scalar is malformed data, not an override map. ← F009\n */\nfunction readOverridesForPublish(\n  entity: { allFields: Record<string, unknown>; behaviors?: readonly { name: string }[] },\n  draftData: Record<string, unknown>,\n): Record<string, unknown> | undefined {\n  // The BEHAVIOR, not just a field with the right name — a draft payload is\n  // stored jsonb and can be crafted or legacy, so this must not become a way\n  // to promote arbitrary JSON into an unrelated internal field on an entity\n  // that never opted in. Requiring the behavior also means `beforeUpdate` runs\n  // `validateOverridesMap` on the way through `updateInternal`.\n  if (!(entity.behaviors ?? []).some((b) => b.name === 'withOverrides')) return undefined\n  const field = entity.allFields._overrides as { internal?: boolean } | undefined\n  if (field === undefined || field.internal !== true) return undefined\n  const value = draftData._overrides\n  if (typeof value !== 'object' || value === null || Array.isArray(value)) return undefined\n  return value as Record<string, unknown>\n}\n\n/**\n * Quick existence check for list badges — does a draft exist?\n */\nexport async function hasDraft(\n  ctx: ContentContext,\n  entityId: string,\n  locale = DEFAULT_LOCALE_SENTINEL,\n): Promise<boolean> {\n  validateLocale(locale)\n  const client = await getDraftsClient(ctx)\n  if (!client) return false\n  return client.exists({ entityId, locale })\n}\n\n/**\n * Count drafts for this entity type, optionally filtered by locale.\n * Single indexed COUNT — used by dashboard widgets.\n */\nexport async function countDrafts(\n  ctx: ContentContext,\n  locale = DEFAULT_LOCALE_SENTINEL,\n): Promise<number> {\n  validateLocale(locale)\n  const client = await getDraftsClient(ctx)\n  if (!client) return 0\n  return client.count({ locale })\n}\n\n/**\n * Check draft existence for multiple entities in one query. Returns\n * a set of entity IDs that have a draft for `locale`.\n */\nexport async function hasDraftBatch(\n  ctx: ContentContext,\n  entityIds: string[],\n  locale = DEFAULT_LOCALE_SENTINEL,\n): Promise<Set<string>> {\n  validateLocale(locale)\n  const result = new Set<string>()\n  if (entityIds.length === 0) return result\n  const client = await getDraftsClient(ctx)\n  if (!client) return result\n\n  const rows = await client.findMany({\n    where: { entityId: { in: entityIds }, locale },\n  })\n  for (const row of rows) {\n    result.add(row.entityId as string)\n  }\n  return result\n}\n\n/**\n * Compare the current draft with the live entity. Returns field-level\n * diffs between the published data and the draft (only for fields\n * present in the draft — missing fields are NOT \"changed to empty\").\n */\nexport async function compareDraftWithCurrent<F extends Record<string, FieldConfig>>(\n  ctx: ContentContext<F>,\n  entityId: string,\n  locale = DEFAULT_LOCALE_SENTINEL,\n): Promise<{\n  diffs: FieldDiff[]\n  current: InferEntityDTO<F>\n  draft: DraftEntry<InferUpdateInput<F>>\n} | null> {\n  validateLocale(locale)\n  const draft = await getDraft(ctx, entityId, locale)\n  if (!draft) return null\n\n  // Fetch the live entity with the same locale context as the draft.\n  const config = getContentConfig()\n  const defaultLocale = config.defaultLocale\n  const findOptions =\n    locale === DEFAULT_LOCALE_SENTINEL ? { defaultLocale } : { locale, defaultLocale }\n  const current = await ctx.admin.findById(entityId, findOptions)\n  if (!current) return null\n\n  const fieldConfigs = ctx.entity.allFields as Record<string, FieldConfig> | undefined\n  const currentRecord = current as Record<string, unknown>\n  const draftRecord = draft.data as Record<string, unknown>\n  const currentSubset: Record<string, unknown> = {}\n  for (const key of Object.keys(draftRecord)) {\n    currentSubset[key] = currentRecord[key]\n  }\n  const diffs = diffFields(currentSubset, draftRecord, fieldConfigs)\n  for (const diff of diffs) {\n    if (diff.type === 'blockTree') {\n      // Normalize a null/undefined side to [] so add/clear of the whole field\n      // (null ↔ blockTree[]) still produces a structural diff, not an opaque one.\n      diff.blockDiffs = diffBlocks(\n        Array.isArray(diff.from) ? diff.from : [],\n        Array.isArray(diff.to) ? diff.to : [],\n      )\n    }\n  }\n\n  return { diffs, current, draft }\n}\n","/**\n * Per-locale publish status — independent draft/published state for\n * each locale of a publishable + translatable entity.\n *\n * Capability: requires `publishable() + at least one translatable\n * field` (the `_locale_status` table is registered only for that\n * combination). Reads silently return falsy on entities without it;\n * `setLocaleStatus` throws `EntityCapabilityError`.\n */\n\nimport 'server-only'\n\nimport type { FieldConfig } from '@murumets-ee/entity'\nimport type { InferUpdateInput } from '@murumets-ee/entity/admin'\nimport { EntityCapabilityError } from './errors.js'\nimport { type ContentContext, getLocaleStatusClient } from './internal/context.js'\nimport { upsertLocaleStatusRow } from './locale-status-slot.js'\nimport { validateLocale } from './locale-utils.js'\nimport { getContentConfig } from './plugin.js'\nimport type { LocalePublishStatus } from './types.js'\n\n/**\n * Get per-locale publish status overrides for an entity.\n * Missing locale = inherits the base entity status (no row written).\n *\n * **Not permission-gated, deliberately — see {@link getLocaleStatusBatch}.**\n */\nexport async function getLocaleStatus(\n  ctx: ContentContext,\n  entityId: string,\n): Promise<LocalePublishStatus[]> {\n  const map = await getLocaleStatusBatch(ctx, [entityId])\n  const entry = map.get(entityId)\n  if (!entry) return []\n  return Object.values(entry)\n}\n\n/**\n * Set per-locale publish status. Upserts into the locale_status\n * table — except when `locale === defaultLocale`, which updates the\n * base entity status column directly (the per-locale table only\n * stores overrides for non-default locales).\n *\n * **Both branches are publish-gated by the entity layer (D041).** The default\n * branch inherits it from `AdminClient.update`; the non-default branch routes\n * through `AdminClient.updateForLocale`, which asserts the SAME\n * `assertPublishAuthority` from the caller's payload before it hands the write\n * to the locale-status writer. This is deliberately a delegation and not a\n * second predicate in this package: `<entity>_locale_status` is the table the\n * public read predicate (`COALESCE(locale_status.status, main.status)`) resolves\n * against, so a direct `TableClient.upsert` here — which is what this function\n * used to do — is a fourth publish door, reachable from any plugin/route/job\n * holding a `ContentClient` (a PUBLIC subpath export) with no `publish` grant\n * ever consulted.\n */\nexport async function setLocaleStatus<F extends Record<string, FieldConfig>>(\n  ctx: ContentContext<F>,\n  entityId: string,\n  locale: string,\n  status: 'draft' | 'published',\n): Promise<void> {\n  validateLocale(locale)\n  const config = getContentConfig()\n\n  // Default locale → update base entity status column.\n  if (locale === config.defaultLocale) {\n    const data: Record<string, unknown> = { status }\n    if (status === 'published') data.publishedAt = new Date()\n    await ctx.admin.update(entityId, data as InferUpdateInput<F>)\n    return\n  }\n\n  const client = await getLocaleStatusClient(ctx)\n  if (!client) {\n    // Per-locale status only exists for publishable + translatable\n    // entities. Calling on a non-translatable publishable (where the\n    // only valid locale is the default) is a programmer error.\n    // Checked BEFORE delegating: `updateForLocale` would otherwise fall back to\n    // the base `status` column for a missing writer, silently publishing the\n    // default locale instead of refusing.\n    throw new EntityCapabilityError(ctx.entity.name, 'localeStatus')\n  }\n\n  // The writer we hand down is the RAW upsert, not this function — the\n  // delegation terminates here rather than re-entering `updateForLocale`.\n  //\n  // Routing through `updateForLocale` rather than calling the upsert directly\n  // is what closes the publish door: this branch used to write\n  // `<entity>_locale_status` with no permission check at all, so any holder of\n  // this public export could make a translation publicly live without\n  // `publish`. `updateForLocale` asserts publish authority at the operation\n  // entry (D041), so the gate is inherited rather than duplicated here.\n  //\n  // Widened through `Record<string, unknown>` for the same reason the\n  // default-locale branch above does it: `InferUpdateInput<F>` is keyed on the\n  // entity's own field map, which a generic `F` cannot be proven to overlap.\n  const localeData: Record<string, unknown> = { status }\n  await ctx.admin.updateForLocale(entityId, localeData as InferUpdateInput<F>, locale, {\n    defaultLocale: config.defaultLocale,\n    localeStatusWriter: (id, loc, s) => upsertLocaleStatusRow(client, id, loc, s),\n  })\n}\n\n/**\n * Get per-locale publish status for multiple entities in one query.\n *\n * ## Why this read is NOT permission-gated (and what would gate it)\n *\n * It returns publish-state METADATA only — `{ locale, status, publishedAt }` —\n * never field data, so it is not a content-disclosure door the way the write\n * side above is a publish door. What it does expose is an existence oracle for\n * unpublished TRANSLATIONS: a principal without `view_unpublished` learns that\n * `et` is a draft, which `QueryClient` would have hidden. The correct predicate\n * is therefore `view_unpublished` (D017), NOT `publish`.\n *\n * A CodeRabbit pass proposed gating it on exactly that predicate. Deliberately\n * declined, on the strength of **F063**: `view_unpublished` governs `QueryClient`\n * reads — the PUBLIC delivery surface — and is not a disclosure boundary over\n * the admin API, where `AdminClient` shows editors their own drafts by design.\n * `ContentClient` is an in-process server-side API whose consumers are plugins,\n * routes and jobs on the admin side, so gating it here would extend the control\n * onto the surface F063 explicitly recommended NOT extending it to. The concrete\n * cost would be an editor lacking `view_unpublished` no longer able to see that\n * their OWN translation is still a draft.\n *\n * The asymmetry with the write side above is real, not convenient:\n * `setLocaleStatus` MINTS public visibility, so it is gated regardless of which\n * surface calls it. This read hands publish-state metadata to a caller who\n * already holds `view` on the row — they needed its id to ask.\n *\n * It is not applied here because the predicate (`mayViewUnpublishedEntity`) is\n * module-private to `@murumets-ee/entity` — re-deriving it in this package\n * would create exactly the second, drifting copy of a security predicate that\n * D041 exists to eliminate, and there is no read-path equivalent of\n * `updateForLocale` to delegate to. The one in-repo caller\n * (`admin-ui`'s versions route) is already gated by `checkPermission`. Closing\n * this properly means exporting the predicate from `@murumets-ee/entity` and\n * dropping non-`published` rows for principals without it — tracked as the\n * read-side sibling of F060.\n */\nexport async function getLocaleStatusBatch(\n  ctx: ContentContext,\n  entityIds: string[],\n): Promise<Map<string, Record<string, LocalePublishStatus>>> {\n  const result = new Map<string, Record<string, LocalePublishStatus>>()\n  if (entityIds.length === 0) return result\n  const client = await getLocaleStatusClient(ctx)\n  if (!client) return result\n\n  const rows = await client.findMany({ where: { entityId: { in: entityIds } } })\n  for (const r of rows) {\n    const eid = r.entityId as string\n    const locale = r.locale as string\n    let entry = result.get(eid)\n    if (!entry) {\n      entry = {}\n      result.set(eid, entry)\n    }\n    entry[locale] = {\n      locale,\n      status: r.status as 'draft' | 'published',\n      publishedAt: (r.publishedAt as Date | null) ?? null,\n    }\n  }\n  return result\n}\n","/**\n * Translation status reporting — per-locale completion of translatable\n * fields for one entity, batches of entities, or the whole entity type.\n *\n * Capability: requires the entity to have at least one translatable\n * field. All methods return falsy / empty when the entity has no\n * translatable fields (read-only and defensive).\n */\n\nimport 'server-only'\n\nimport { getContext, requireSiteFor } from '@murumets-ee/core'\nimport { schemaRegistry } from '@murumets-ee/db'\nimport { buildPartitionCondition, type FieldConfig } from '@murumets-ee/entity'\nimport { and, inArray } from 'drizzle-orm'\nimport { InvalidLocaleError } from './errors.js'\nimport type { ContentContext } from './internal/context.js'\nimport { getContentConfig } from './plugin.js'\nimport type { TranslationReport, TranslationStatus } from './types.js'\n\n/**\n * The locales a status report covers and the default it skips: the request's\n * — which the admin narrows to its SITE's locales and default (plan `multisite`\n * phase 03) — else the configured content locales.\n */\nfunction statusLocales(): { locales: { code: string }[]; defaultLocale: string } {\n  const config = getContentConfig()\n  const ctx = getContext()\n  const codes = ctx?.availableLocales ?? config.locales.map((l) => l.code)\n  return {\n    locales: codes.map((code) => ({ code })),\n    defaultLocale: ctx?.defaultLocale ?? config.defaultLocale,\n  }\n}\n\n/**\n * For one entity, compute per-locale completion status across every\n * translatable field. Default-locale rows are skipped.\n */\nfunction computeStatusForEntity(\n  translatableFields: string[],\n  translatedByLocale: Map<string, Record<string, unknown>> | undefined,\n  locales: { code: string }[],\n  defaultLocale: string,\n): TranslationStatus {\n  const status: TranslationStatus = {}\n  for (const locale of locales) {\n    if (locale.code === defaultLocale) continue\n    const translated = translatedByLocale?.get(locale.code) ?? {}\n    const missing: string[] = []\n    for (const fieldName of translatableFields) {\n      if (translated[fieldName] === undefined || translated[fieldName] === null) {\n        missing.push(fieldName)\n      }\n    }\n    status[locale.code] = {\n      complete: missing.length === 0,\n      total: translatableFields.length,\n      translated: translatableFields.length - missing.length,\n      missing,\n    }\n  }\n  return status\n}\n\n/**\n * Get translation status for an entity — per-locale completion report.\n */\nexport async function getTranslationStatus(\n  ctx: ContentContext,\n  entityId: string,\n): Promise<TranslationStatus> {\n  // Single-entity is the batch path with one ID — keeps the two\n  // codepaths from drifting.\n  const map = await getTranslationStatusBatch(ctx, [entityId])\n  return map.get(entityId) ?? {}\n}\n\n/**\n * Get translation status for multiple entities in a single query.\n * O(1) DB roundtrips regardless of `entityIds.length`.\n */\nexport async function getTranslationStatusBatch(\n  ctx: ContentContext,\n  entityIds: string[],\n): Promise<Map<string, TranslationStatus>> {\n  const result = new Map<string, TranslationStatus>()\n  if (entityIds.length === 0) return result\n\n  const { locales, defaultLocale } = statusLocales()\n\n  const translatableFields = Object.entries(ctx.entity.allFields as Record<string, FieldConfig>)\n    .filter(([_, f]) => f.translatable)\n    .map(([name]) => name)\n  if (translatableFields.length === 0) return result\n\n  // Translation tables are generated in @murumets-ee/entity (with FK\n  // refs); accessed via schemaRegistry + direct Drizzle here.\n  const translationTable = schemaRegistry.get(`${ctx.entity.name}_translations`)\n  if (!translationTable) return result\n\n  // A site-bound entity's translation rows are confined to the request's\n  // site (multisite D003): ids alone are no boundary — a caller holding\n  // another site's id must learn nothing about its translations.\n  const site = await requireSiteFor(ctx.entity)\n  const byIds = inArray(translationTable.entityId, entityIds)\n  const translations = await ctx.db\n    .select()\n    .from(translationTable)\n    .where(\n      site !== undefined\n        ? and(byIds, buildPartitionCondition(translationTable, { site }, ctx.entity.name))\n        : byIds,\n    )\n\n  // Group: entityId → locale → { fieldName: value }\n  const translationsByEntity = new Map<string, Map<string, Record<string, unknown>>>()\n  for (const t of translations) {\n    const row = t as Record<string, unknown>\n    const eid = row.entityId as string\n    const locale = row.locale as string\n    const fieldValues: Record<string, unknown> = {}\n    for (const fieldName of translatableFields) {\n      fieldValues[fieldName] = row[fieldName]\n    }\n    let entry = translationsByEntity.get(eid)\n    if (!entry) {\n      entry = new Map()\n      translationsByEntity.set(eid, entry)\n    }\n    entry.set(locale, fieldValues)\n  }\n\n  for (const entityId of entityIds) {\n    result.set(\n      entityId,\n      computeStatusForEntity(\n        translatableFields,\n        translationsByEntity.get(entityId),\n        locales,\n        defaultLocale,\n      ),\n    )\n  }\n\n  return result\n}\n\n/**\n * Roll up translation status across every entity of this type.\n *\n * Defaults to the first non-default configured locale; pass\n * `options.locale` to target a specific one. Returns counts of\n * complete / partial / missing entities for that locale.\n */\nexport async function getTranslationReport(\n  ctx: ContentContext,\n  options?: { locale?: string },\n): Promise<TranslationReport> {\n  const { locales, defaultLocale } = statusLocales()\n  const targetLocale = options?.locale ?? locales.find((l) => l.code !== defaultLocale)?.code\n  if (!targetLocale) return { total: 0, complete: 0, partial: 0, missing: 0 }\n  // A locale the site does not serve has no report on that site.\n  if (!locales.some((l) => l.code === targetLocale)) {\n    throw new InvalidLocaleError(\n      targetLocale,\n      locales.map((l) => l.code),\n    )\n  }\n\n  const entities = await ctx.admin.findMany()\n  if (entities.length === 0) return { total: 0, complete: 0, partial: 0, missing: 0 }\n\n  // Single batched query covers every entity at once.\n  const statusMap = await getTranslationStatusBatch(\n    ctx,\n    entities.map((e) => e.id),\n  )\n\n  let complete = 0\n  let partial = 0\n  let missing = 0\n  for (const entity of entities) {\n    const status = statusMap.get(entity.id)\n    const localeStatus = status?.[targetLocale]\n    if (!localeStatus || localeStatus.translated === 0) missing++\n    else if (localeStatus.complete) complete++\n    else partial++\n  }\n\n  return { total: entities.length, complete, partial, missing }\n}\n","/**\n * ContentClient — thin shell over per-feature modules.\n *\n * Wraps AdminClient with version history (`./versions.ts`), draft\n * overlays (`./drafts.ts`), translation status reporting\n * (`./translation-status.ts`), per-locale publish status\n * (`./locale-status.ts`), and block-layout operations (`./layout.ts`).\n *\n * The class is generic over the entity's `AllFields` map: when\n * constructed with a typed entity, every method's input/output is\n * inferred end-to-end. When constructed with a runtime `Entity`\n * (admin-ui's heterogeneous entity loops), the generic defaults to\n * `Record<string, FieldConfig>` and methods accept/return the loose\n * shape — same behavior as the pre-generic version.\n *\n * Usage:\n *   import { createContentClient } from '@murumets-ee/content/client'\n *   const pages = createContentClient(Page)\n *   await pages.create({ title: 'Hello', layout: [...] })\n */\n\nimport 'server-only'\n\nimport { getApp, type Logger } from '@murumets-ee/core'\nimport { createAdminClient } from '@murumets-ee/core/clients'\nimport type { Entity, FieldConfig } from '@murumets-ee/entity'\nimport type {\n  AdminClient,\n  FindManyOptions,\n  InferCreateInput,\n  InferEntityDTO,\n  InferUpdateInput,\n} from '@murumets-ee/entity/admin'\nimport { getVersionableOptions } from './behaviors/versionable.js'\nimport {\n  compareDraftWithCurrent,\n  countDrafts,\n  deleteDraft,\n  getDraft,\n  hasDraft,\n  hasDraftBatch,\n  mergeDraft,\n  publishDraft,\n  saveDraft,\n} from './drafts.js'\nimport { type ContentContext, createContentContext } from './internal/context.js'\nimport { calculateDelta } from './internal/projection.js'\nimport { getLocaleStatus, getLocaleStatusBatch, setLocaleStatus } from './locale-status.js'\nimport {\n  getTranslationReport,\n  getTranslationStatus,\n  getTranslationStatusBatch,\n} from './translation-status.js'\nimport {\n  compareVersions,\n  createVersionSnapshot,\n  getVersion,\n  getVersions,\n  pruneVersions,\n  restoreVersion,\n  saveVersionSnapshot,\n  writeVersionColumn,\n} from './versions.js'\n\nexport interface ContentClientConfig<\n  AllFields extends Record<string, FieldConfig> = Record<string, FieldConfig>,\n> {\n  admin: AdminClient<AllFields>\n  entity: Entity<AllFields>\n  logger?: Logger\n}\n\nexport class ContentClient<\n  AllFields extends Record<string, FieldConfig> = Record<string, FieldConfig>,\n> {\n  private ctx: ContentContext<AllFields>\n\n  constructor(config: ContentClientConfig<AllFields>) {\n    const versionableOptions = getVersionableOptions(config.entity.behaviors)\n    this.ctx = createContentContext(config, versionableOptions)\n  }\n\n  // -----------------------------------------------------------------\n  // CRUD (delegated to AdminClient + version snapshots)\n  // -----------------------------------------------------------------\n\n  async create(data: InferCreateInput<AllFields>): Promise<InferEntityDTO<AllFields>> {\n    const result = await this.ctx.admin.create(data)\n    if (this.ctx.versionableOptions) {\n      await saveVersionSnapshot(this.ctx, result.id, result, null, false)\n    }\n    return result\n  }\n\n  findById(id: string, options?: { locale?: string }): Promise<InferEntityDTO<AllFields> | null> {\n    return this.ctx.admin.findById(id, options)\n  }\n\n  findMany(options?: FindManyOptions): Promise<InferEntityDTO<AllFields>[]> {\n    return this.ctx.admin.findMany(options)\n  }\n\n  /**\n   * Base-row update + version snapshot. Subject to AdminClient's\n   * cross-locale write guard (SD021): under a non-default request-context\n   * locale, translatable fields throw `CrossLocaleWriteError` — that's\n   * enforcement, not a gap. Locale-belonging writes go through the draft\n   * flow (`saveDraft` → `publishDraft`) or `admin.updateForLocale` directly.\n   */\n  async update(id: string, data: InferUpdateInput<AllFields>): Promise<InferEntityDTO<AllFields>> {\n    let previousState: InferEntityDTO<AllFields> | null = null\n    if (this.ctx.versionableOptions) {\n      previousState = await this.ctx.admin.findById(id)\n    }\n\n    const result = await this.ctx.admin.update(id, data)\n\n    if (this.ctx.versionableOptions && previousState) {\n      const delta = calculateDelta(previousState, result)\n      const version = await saveVersionSnapshot(this.ctx, id, result, delta, false)\n      if (version !== undefined) {\n        await writeVersionColumn(this.ctx, id, version)\n        await pruneVersions(this.ctx, id)\n        return { ...result, _version: version } as InferEntityDTO<AllFields>\n      }\n      await pruneVersions(this.ctx, id)\n    }\n\n    return result\n  }\n\n  delete(id: string): Promise<unknown> {\n    return this.ctx.admin.delete(id)\n  }\n\n  // -----------------------------------------------------------------\n  // Translation delegation\n  // -----------------------------------------------------------------\n\n  saveTranslation(entityId: string, locale: string, translations: Record<string, unknown>) {\n    return this.ctx.admin.saveTranslation(entityId, locale, translations)\n  }\n\n  deleteTranslation(entityId: string, locale?: string) {\n    return this.ctx.admin.deleteTranslation(entityId, locale)\n  }\n\n  // -----------------------------------------------------------------\n  // Version history\n  // -----------------------------------------------------------------\n\n  getVersions(entityId: string, options?: { limit?: number; offset?: number; locale?: string }) {\n    return getVersions(this.ctx, entityId, options)\n  }\n\n  getVersion(entityId: string, version: number, locale?: string) {\n    return getVersion(this.ctx, entityId, version, locale)\n  }\n\n  compareVersions(entityId: string, v1: number, v2: number, locale?: string) {\n    return compareVersions(this.ctx, entityId, v1, v2, locale)\n  }\n\n  restoreVersion(entityId: string, version: number, locale?: string) {\n    return restoreVersion(this.ctx, entityId, version, locale)\n  }\n\n  pruneVersions(entityId: string, locale?: string) {\n    return pruneVersions(this.ctx, entityId, locale)\n  }\n\n  createVersionSnapshot(\n    entityId: string,\n    currentData: Record<string, unknown>,\n    previousData?: Record<string, unknown> | null,\n    locale?: string,\n    user?: { id: string; name?: string },\n  ) {\n    return createVersionSnapshot(this.ctx, entityId, currentData, previousData, locale, user)\n  }\n\n  // -----------------------------------------------------------------\n  // Translation status\n  // -----------------------------------------------------------------\n\n  getTranslationStatus(entityId: string) {\n    return getTranslationStatus(this.ctx, entityId)\n  }\n\n  getTranslationStatusBatch(entityIds: string[]) {\n    return getTranslationStatusBatch(this.ctx, entityIds)\n  }\n\n  getTranslationReport(options?: { locale?: string }) {\n    return getTranslationReport(this.ctx, options)\n  }\n\n  // -----------------------------------------------------------------\n  // Per-locale publish status\n  // -----------------------------------------------------------------\n\n  getLocaleStatus(entityId: string) {\n    return getLocaleStatus(this.ctx, entityId)\n  }\n\n  setLocaleStatus(entityId: string, locale: string, status: 'draft' | 'published') {\n    return setLocaleStatus(this.ctx, entityId, locale, status)\n  }\n\n  getLocaleStatusBatch(entityIds: string[]) {\n    return getLocaleStatusBatch(this.ctx, entityIds)\n  }\n\n  // -----------------------------------------------------------------\n  // Drafts\n  // -----------------------------------------------------------------\n\n  saveDraft(\n    entityId: string,\n    data: InferUpdateInput<AllFields>,\n    locale?: string,\n    user?: { id: string; name?: string },\n  ) {\n    return saveDraft(this.ctx, entityId, data, locale, user)\n  }\n\n  mergeDraft(\n    entityId: string,\n    patch: InferUpdateInput<AllFields>,\n    locale?: string,\n    user?: { id: string; name?: string },\n  ) {\n    return mergeDraft(this.ctx, entityId, patch, locale, user)\n  }\n\n  getDraft(entityId: string, locale?: string) {\n    return getDraft(this.ctx, entityId, locale)\n  }\n\n  deleteDraft(entityId: string, locale?: string) {\n    return deleteDraft(this.ctx, entityId, locale)\n  }\n\n  publishDraft(entityId: string, locale?: string, user?: { id: string; name?: string }) {\n    return publishDraft(this.ctx, entityId, locale, user)\n  }\n\n  hasDraft(entityId: string, locale?: string) {\n    return hasDraft(this.ctx, entityId, locale)\n  }\n\n  countDrafts(locale?: string) {\n    return countDrafts(this.ctx, locale)\n  }\n\n  hasDraftBatch(entityIds: string[], locale?: string) {\n    return hasDraftBatch(this.ctx, entityIds, locale)\n  }\n\n  compareDraftWithCurrent(entityId: string, locale?: string) {\n    return compareDraftWithCurrent(this.ctx, entityId, locale)\n  }\n}\n\n/**\n * Factory — creates a ContentClient for an entity. Must be called\n * after `createApp()`. Generic flows from the entity definition:\n * `createContentClient(Article)` returns a `ContentClient<typeof\n * Article['allFields']>` typed end-to-end.\n */\nexport function createContentClient<AllFields extends Record<string, FieldConfig>>(\n  entity: Entity<AllFields>,\n): ContentClient<AllFields> {\n  const admin = createAdminClient(entity)\n  return new ContentClient<AllFields>({\n    admin,\n    entity,\n    logger: getApp().logger.child({ content: entity.name }),\n  })\n}\n"],"mappings":"0wBA+BA,SAAS,EAAa,EAA2B,CAC/C,MAAO,CACL,GAAI,EAAI,GACR,SAAU,EAAI,SACd,OAAQ,EAAI,OACZ,KAAM,EAAI,KACV,UAAW,EAAI,UACf,cAAe,EAAI,eAAiB,KACpC,UAAW,EAAI,UACf,UAAW,EAAI,SACjB,CACF,CAiBA,eAAsB,EACpB,EACA,EACA,EACA,EAAA,IACA,EAC0C,CAC1C,EAAe,CAAM,EACrB,IAAM,EAAS,MAAM,EAAgB,CAAG,EACxC,GAAI,CAAC,EAAQ,MAAM,IAAI,EAAsB,EAAI,OAAO,KAAM,QAAQ,EAEtE,IAAM,EAAY,EAAsB,EAAI,OAAQ,CAA+B,EASnF,EAAI,MAAM,sBAAsB,CAAS,EAkBzC,IAAM,EAHoB,EAAkB,EAAI,MAAM,CAAC,CAAC,MAAM,CAAE,UAC9D,OAAO,OAAO,EAAW,CAAI,CAEE,EAAI,MAAM,EAAO,QAAQ,CAAE,WAAU,QAAO,CAAC,EAAI,KAGlF,MAAM,EAAI,MAAM,gCACd,MACM,GAAU,IAClB,EACA,MAAM,EAAI,MAAM,sBACd,EACA,GAAU,IACZ,EAEA,IAAM,EAAM,IAAI,KACV,EAAY,GAAM,IAAM,GACxB,EAAgB,GAAM,MAAQ,KAmBpC,OAAO,EAAa,MAjBF,EAAO,OACvB,CACE,WACA,SACA,KAAM,EACN,YACA,gBACA,UAAW,EACX,UAAW,CACb,EACA,CACE,OAAQ,CAAC,WAAY,QAAQ,EAE7B,IAAK,CAAE,KAAM,EAAW,UAAW,CAAI,CACzC,CACF,CAEuB,CACzB,CAaA,MAAM,EAAY,CAAC,OAAQ,WAAY,QAAQ,EA0C/C,eAAsB,EACpB,EACA,EACA,EACA,EAAA,IACA,EACiD,CACjD,EAAe,CAAM,EACrB,IAAM,EAAS,MAAM,EAAgB,CAAG,EACxC,GAAI,CAAC,EAAQ,MAAM,IAAI,EAAsB,EAAI,OAAO,KAAM,QAAQ,EAEtE,IAAM,EAAY,EAAsB,EAAI,OAAQ,CAAgC,EAIpF,GAAI,OAAO,KAAK,CAAS,CAAC,CAAC,SAAW,EAAG,CACvC,IAAM,EAAU,MAAM,EAAO,QAAQ,CAAE,WAAU,QAAO,CAAC,EACzD,OAAO,EAAW,EAAa,CAAO,EAAwC,IAChF,CACA,EAAI,MAAM,sBAAsB,CAAS,EACzC,EAAI,MAAM,kBAAkB,CAAS,EACrC,IAAM,EAAoB,EAAkB,EAAI,MAAM,CAAC,CAAC,MAAM,CAAE,UAC9D,OAAO,OAAO,EAAW,CAAI,CAC/B,EACM,EACJ,EAAI,OAAO,UAAU,OAAS,IAAA,IAC9B,EAAU,KAAM,GAAQ,OAAO,OAAO,EAAW,CAAG,CAAC,EACjD,EACJ,GAAqB,EAAc,MAAM,EAAO,QAAQ,CAAE,WAAU,QAAO,CAAC,EAAI,KAelF,GAZA,MAAM,EAAI,MAAM,gCACd,MACM,GAAU,IAClB,EACA,MAAM,EAAI,MAAM,sBACd,EACA,GAAU,IACZ,EAKI,EAAa,CACf,IAAM,EAAS,CACb,GAAK,GAAU,MAAgD,CAAC,EAChE,GAAG,CACL,EACA,GAAI,IAAA,IACF,MAAM,EAAI,MAAM,oBAAoB,EAAU,CAAM,MAC/C,CAML,IAAM,EAAS,EAAI,OAAO,UACpB,EAAwC,CAAC,EACzC,EAAkC,CAAC,EACzC,IAAK,GAAM,CAAC,EAAK,KAAU,OAAO,QAAQ,CAAM,EAC1C,EAAO,EAAI,EAAE,eAAiB,GAAM,EAAa,GAAO,EACvD,EAAO,GAAO,EAErB,IAAM,EAAS,GACb,EAAU,KAAM,GAAQ,OAAO,OAAO,EAAM,CAAG,GAAK,OAAO,OAAO,EAAW,CAAG,CAAC,EAC/E,EAAM,CAAY,GAAG,MAAM,EAAI,MAAM,oBAAoB,EAAU,EAAc,CAAM,EACvF,EAAM,CAAM,GAAG,MAAM,EAAI,MAAM,oBAAoB,EAAU,CAAM,CACzE,CACF,CAEA,IAAM,EAAM,IAAI,KAahB,OAAO,EAAa,MAZF,EAAO,OACvB,CACE,WACA,SACA,KAAM,EACN,UAAW,GAAM,IAAM,GACvB,cAAe,GAAM,MAAQ,KAC7B,UAAW,EACX,UAAW,CACb,EACA,CAAE,OAAQ,CAAC,WAAY,QAAQ,EAAG,IAAK,CAAE,UAAW,CAAI,EAAG,WAAY,CAAC,MAAM,CAAE,CAClF,CACuB,CACzB,CAMA,eAAsB,EACpB,EACA,EACA,EAAA,IACiD,CACjD,EAAe,CAAM,EACrB,IAAM,EAAS,MAAM,EAAgB,CAAG,EACxC,GAAI,CAAC,EAAQ,OAAO,KACpB,IAAM,EAAM,MAAM,EAAO,QAAQ,CAAE,WAAU,QAAO,CAAC,EACrD,OAAO,EAAO,EAAa,CAAG,EAAwC,IACxE,CAMA,eAAsB,EACpB,EACA,EACA,EAAA,IACkB,CAClB,EAAe,CAAM,EACrB,IAAM,EAAS,MAAM,EAAgB,CAAG,EAGxC,OAFK,GAEE,MADe,EAAO,WAAW,CAAE,WAAU,QAAO,CAAC,EAAA,CAC7C,OAAS,EAFJ,EAGtB,CAqCA,eAAsB,EACpB,EACA,EACA,EAAA,IACA,EAC4B,CAE5B,GADA,EAAe,CAAM,EACjB,CAAE,MAAM,EAAgB,CAAG,EAC7B,MAAM,IAAI,EAAsB,EAAI,OAAO,KAAM,QAAQ,EAM3D,IAAM,EAA0C,EAAI,mBAChD,MAAM,EAAI,MAAM,SAAS,EAAU,EAAkB,CAAM,CAAC,EAC5D,KAEJ,OAAO,EAAI,GAAG,YAAY,KAAO,IAAO,CAGtC,IAAM,EAA2B,CAAE,GAAG,EAAK,GAAI,CAAG,EAC5C,EAAe,MAAM,EAAgB,CAAK,EAChD,GAAI,CAAC,EAAc,MAAM,IAAI,EAAsB,EAAI,OAAO,KAAM,QAAQ,EAC5E,GAAM,CAAC,GAAW,MAAM,EAAa,WAAW,CAAE,WAAU,QAAO,CAAC,EACpE,GAAI,CAAC,EACH,MAAM,IAAI,EAAmB,EAAU,CAAM,EAe/C,GAAM,CAAE,YAAa,EAAoB,GAAG,GANvB,EAAQ,MAAQ,CAAC,EAehC,EAAS,MAAM,EAAwB,EAAO,EADjC,EAAsB,EAAI,OAAQ,CAAE,GAAG,EAAW,OAAQ,WAAY,CAClB,EAAG,EAAQ,CAAE,EAgB9E,EAAY,EAAwB,EAAI,OAAQ,CAAS,EAS/D,OARI,IAAc,IAAA,IAChB,MAAM,EAAI,MAAM,eAAe,EAAU,CAAE,WAAY,CAAU,EAAG,CAAE,IAAG,CAAC,EAGxE,EAAI,oBACN,MAAM,EAAsB,EAAO,EAAU,EAAQ,EAAe,EAAQ,CAAI,EAG3E,CACT,CAAC,CACH,CAUA,SAAS,EACP,EACA,EACqC,CAMrC,GAAI,EAAE,EAAO,WAAa,CAAC,EAAA,CAAG,KAAM,GAAM,EAAE,OAAS,eAAe,EAAG,OACvE,IAAM,EAAQ,EAAO,UAAU,WAC/B,GAAI,IAAU,IAAA,IAAa,EAAM,WAAa,GAAM,OACpD,IAAM,EAAQ,EAAU,WACpB,YAAO,GAAU,WAAY,GAAkB,MAAM,QAAQ,CAAK,GACtE,OAAO,CACT,CAKA,eAAsB,EACpB,EACA,EACA,EAAA,IACkB,CAClB,EAAe,CAAM,EACrB,IAAM,EAAS,MAAM,EAAgB,CAAG,EAExC,OADK,EACE,EAAO,OAAO,CAAE,WAAU,QAAO,CAAC,EADrB,EAEtB,CAMA,eAAsB,EACpB,EACA,EAAA,IACiB,CACjB,EAAe,CAAM,EACrB,IAAM,EAAS,MAAM,EAAgB,CAAG,EAExC,OADK,EACE,EAAO,MAAM,CAAE,QAAO,CAAC,EADV,CAEtB,CAMA,eAAsB,EACpB,EACA,EACA,EAAA,IACsB,CACtB,EAAe,CAAM,EACrB,IAAM,EAAS,IAAI,IACnB,GAAI,EAAU,SAAW,EAAG,OAAO,EACnC,IAAM,EAAS,MAAM,EAAgB,CAAG,EACxC,GAAI,CAAC,EAAQ,OAAO,EAEpB,IAAM,EAAO,MAAM,EAAO,SAAS,CACjC,MAAO,CAAE,SAAU,CAAE,GAAI,CAAU,EAAG,QAAO,CAC/C,CAAC,EACD,IAAK,IAAM,KAAO,EAChB,EAAO,IAAI,EAAI,QAAkB,EAEnC,OAAO,CACT,CAOA,eAAsB,EACpB,EACA,EACA,EAAA,IAKQ,CACR,EAAe,CAAM,EACrB,IAAM,EAAQ,MAAM,EAAS,EAAK,EAAU,CAAM,EAClD,GAAI,CAAC,EAAO,OAAO,KAInB,IAAM,EADS,EACY,CAAC,CAAC,cACvB,EACJ,IAAA,IAAqC,CAAE,eAAc,EAAI,CAAE,SAAQ,eAAc,EAC7E,EAAU,MAAM,EAAI,MAAM,SAAS,EAAU,CAAW,EAC9D,GAAI,CAAC,EAAS,OAAO,KAErB,IAAM,EAAe,EAAI,OAAO,UAC1B,EAAgB,EAChB,EAAc,EAAM,KACpB,EAAyC,CAAC,EAChD,IAAK,IAAM,KAAO,OAAO,KAAK,CAAW,EACvC,EAAc,GAAO,EAAc,GAErC,IAAM,EAAQ,EAAW,EAAe,EAAa,CAAY,EACjE,IAAK,IAAM,KAAQ,EACb,EAAK,OAAS,cAGhB,EAAK,WAAa,EAChB,MAAM,QAAQ,EAAK,IAAI,EAAI,EAAK,KAAO,CAAC,EACxC,MAAM,QAAQ,EAAK,EAAE,EAAI,EAAK,GAAK,CAAC,CACtC,GAIJ,MAAO,CAAE,QAAO,UAAS,OAAM,CACjC,CClgBA,eAAsB,EACpB,EACA,EACgC,CAEhC,IAAM,GAAQ,MADI,EAAqB,EAAK,CAAC,CAAQ,CAAC,EAAA,CACpC,IAAI,CAAQ,EAE9B,OADK,EACE,OAAO,OAAO,CAAK,EADP,CAAC,CAEtB,CAoBA,eAAsB,EACpB,EACA,EACA,EACA,EACe,CACf,EAAe,CAAM,EACrB,IAAM,EAAS,EAAiB,EAGhC,GAAI,IAAW,EAAO,cAAe,CACnC,IAAM,EAAgC,CAAE,QAAO,EAC3C,IAAW,cAAa,EAAK,YAAc,IAAI,MACnD,MAAM,EAAI,MAAM,OAAO,EAAU,CAA2B,EAC5D,MACF,CAEA,IAAM,EAAS,MAAM,EAAsB,CAAG,EAC9C,GAAI,CAAC,EAOH,MAAM,IAAI,EAAsB,EAAI,OAAO,KAAM,cAAc,EAgBjE,IAAM,EAAsC,CAAE,QAAO,EACrD,MAAM,EAAI,MAAM,gBAAgB,EAAU,EAAmC,EAAQ,CACnF,cAAe,EAAO,cACtB,oBAAqB,EAAI,EAAK,IAAM,EAAsB,EAAQ,EAAI,EAAK,CAAC,CAC9E,CAAC,CACH,CAuCA,eAAsB,EACpB,EACA,EAC2D,CAC3D,IAAM,EAAS,IAAI,IACnB,GAAI,EAAU,SAAW,EAAG,OAAO,EACnC,IAAM,EAAS,MAAM,EAAsB,CAAG,EAC9C,GAAI,CAAC,EAAQ,OAAO,EAEpB,IAAM,EAAO,MAAM,EAAO,SAAS,CAAE,MAAO,CAAE,SAAU,CAAE,GAAI,CAAU,CAAE,CAAE,CAAC,EAC7E,IAAK,IAAM,KAAK,EAAM,CACpB,IAAM,EAAM,EAAE,SACR,EAAS,EAAE,OACb,EAAQ,EAAO,IAAI,CAAG,EACrB,IACH,EAAQ,CAAC,EACT,EAAO,IAAI,EAAK,CAAK,GAEvB,EAAM,GAAU,CACd,SACA,OAAQ,EAAE,OACV,YAAc,EAAE,aAA+B,IACjD,CACF,CACA,OAAO,CACT,CC5IA,SAAS,GAAwE,CAC/E,IAAM,EAAS,EAAiB,EAC1B,EAAM,EAAW,EAEvB,MAAO,CACL,SAFY,GAAK,kBAAoB,EAAO,QAAQ,IAAK,GAAM,EAAE,IAAI,EAAA,CAEtD,IAAK,IAAU,CAAE,MAAK,EAAE,EACvC,cAAe,GAAK,eAAiB,EAAO,aAC9C,CACF,CAMA,SAAS,EACP,EACA,EACA,EACA,EACmB,CACnB,IAAM,EAA4B,CAAC,EACnC,IAAK,IAAM,KAAU,EAAS,CAC5B,GAAI,EAAO,OAAS,EAAe,SACnC,IAAM,EAAa,GAAoB,IAAI,EAAO,IAAI,GAAK,CAAC,EACtD,EAAoB,CAAC,EAC3B,IAAK,IAAM,KAAa,GAClB,EAAW,KAAe,IAAA,IAAa,EAAW,KAAe,OACnE,EAAQ,KAAK,CAAS,EAG1B,EAAO,EAAO,MAAQ,CACpB,SAAU,EAAQ,SAAW,EAC7B,MAAO,EAAmB,OAC1B,WAAY,EAAmB,OAAS,EAAQ,OAChD,SACF,CACF,CACA,OAAO,CACT,CAKA,eAAsB,EACpB,EACA,EAC4B,CAI5B,OAAO,MADW,EAA0B,EAAK,CAAC,CAAQ,CAAC,EAAA,CAChD,IAAI,CAAQ,GAAK,CAAC,CAC/B,CAMA,eAAsB,EACpB,EACA,EACyC,CACzC,IAAM,EAAS,IAAI,IACnB,GAAI,EAAU,SAAW,EAAG,OAAO,EAEnC,GAAM,CAAE,UAAS,iBAAkB,EAAc,EAE3C,EAAqB,OAAO,QAAQ,EAAI,OAAO,SAAwC,CAAC,CAC3F,QAAQ,CAAC,EAAG,KAAO,EAAE,YAAY,CAAC,CAClC,KAAK,CAAC,KAAU,CAAI,EACvB,GAAI,EAAmB,SAAW,EAAG,OAAO,EAI5C,IAAM,EAAmB,EAAe,IAAI,GAAG,EAAI,OAAO,KAAK,cAAc,EAC7E,GAAI,CAAC,EAAkB,OAAO,EAK9B,IAAM,EAAO,MAAM,EAAe,EAAI,MAAM,EACtC,EAAQ,EAAQ,EAAiB,SAAU,CAAS,EACpD,EAAe,MAAM,EAAI,GAC5B,OAAO,CAAC,CACR,KAAK,CAAgB,CAAC,CACtB,MACC,IAAS,IAAA,GAEL,EADA,EAAI,EAAO,EAAwB,EAAkB,CAAE,MAAK,EAAG,EAAI,OAAO,IAAI,CAAC,CAErF,EAGI,EAAuB,IAAI,IACjC,IAAK,IAAM,KAAK,EAAc,CAC5B,IAAM,EAAM,EACN,EAAM,EAAI,SACV,EAAS,EAAI,OACb,EAAuC,CAAC,EAC9C,IAAK,IAAM,KAAa,EACtB,EAAY,GAAa,EAAI,GAE/B,IAAI,EAAQ,EAAqB,IAAI,CAAG,EACnC,IACH,EAAQ,IAAI,IACZ,EAAqB,IAAI,EAAK,CAAK,GAErC,EAAM,IAAI,EAAQ,CAAW,CAC/B,CAEA,IAAK,IAAM,KAAY,EACrB,EAAO,IACL,EACA,EACE,EACA,EAAqB,IAAI,CAAQ,EACjC,EACA,CACF,CACF,EAGF,OAAO,CACT,CASA,eAAsB,EACpB,EACA,EAC4B,CAC5B,GAAM,CAAE,UAAS,iBAAkB,EAAc,EAC3C,EAAe,GAAS,QAAU,EAAQ,KAAM,GAAM,EAAE,OAAS,CAAa,CAAC,EAAE,KACvF,GAAI,CAAC,EAAc,MAAO,CAAE,MAAO,EAAG,SAAU,EAAG,QAAS,EAAG,QAAS,CAAE,EAE1E,GAAI,CAAC,EAAQ,KAAM,GAAM,EAAE,OAAS,CAAY,EAC9C,MAAM,IAAI,EACR,EACA,EAAQ,IAAK,GAAM,EAAE,IAAI,CAC3B,EAGF,IAAM,EAAW,MAAM,EAAI,MAAM,SAAS,EAC1C,GAAI,EAAS,SAAW,EAAG,MAAO,CAAE,MAAO,EAAG,SAAU,EAAG,QAAS,EAAG,QAAS,CAAE,EAGlF,IAAM,EAAY,MAAM,EACtB,EACA,EAAS,IAAK,GAAM,EAAE,EAAE,CAC1B,EAEI,EAAW,EACX,EAAU,EACV,EAAU,EACd,IAAK,IAAM,KAAU,EAAU,CAE7B,IAAM,EADS,EAAU,IAAI,EAAO,EACV,CAAC,GAAG,GAC1B,CAAC,GAAgB,EAAa,aAAe,EAAG,IAC3C,EAAa,SAAU,IAC3B,GACP,CAEA,MAAO,CAAE,MAAO,EAAS,OAAQ,WAAU,UAAS,SAAQ,CAC9D,CCvHA,IAAa,EAAb,KAEE,CACA,IAEA,YAAY,EAAwC,CAClD,IAAM,EAAqB,EAAsB,EAAO,OAAO,SAAS,EACxE,KAAK,IAAM,EAAqB,EAAQ,CAAkB,CAC5D,CAMA,MAAM,OAAO,EAAuE,CAClF,IAAM,EAAS,MAAM,KAAK,IAAI,MAAM,OAAO,CAAI,EAI/C,OAHI,KAAK,IAAI,oBACX,MAAM,EAAoB,KAAK,IAAK,EAAO,GAAI,EAAQ,KAAM,EAAK,EAE7D,CACT,CAEA,SAAS,EAAY,EAA0E,CAC7F,OAAO,KAAK,IAAI,MAAM,SAAS,EAAI,CAAO,CAC5C,CAEA,SAAS,EAAiE,CACxE,OAAO,KAAK,IAAI,MAAM,SAAS,CAAO,CACxC,CASA,MAAM,OAAO,EAAY,EAAuE,CAC9F,IAAI,EAAkD,KAClD,KAAK,IAAI,qBACX,EAAgB,MAAM,KAAK,IAAI,MAAM,SAAS,CAAE,GAGlD,IAAM,EAAS,MAAM,KAAK,IAAI,MAAM,OAAO,EAAI,CAAI,EAEnD,GAAI,KAAK,IAAI,oBAAsB,EAAe,CAChD,IAAM,EAAQ,EAAe,EAAe,CAAM,EAC5C,EAAU,MAAM,EAAoB,KAAK,IAAK,EAAI,EAAQ,EAAO,EAAK,EAC5E,GAAI,IAAY,IAAA,GAGd,OAFA,MAAM,EAAmB,KAAK,IAAK,EAAI,CAAO,EAC9C,MAAM,EAAc,KAAK,IAAK,CAAE,EACzB,CAAE,GAAG,EAAQ,SAAU,CAAQ,EAExC,MAAM,EAAc,KAAK,IAAK,CAAE,CAClC,CAEA,OAAO,CACT,CAEA,OAAO,EAA8B,CACnC,OAAO,KAAK,IAAI,MAAM,OAAO,CAAE,CACjC,CAMA,gBAAgB,EAAkB,EAAgB,EAAuC,CACvF,OAAO,KAAK,IAAI,MAAM,gBAAgB,EAAU,EAAQ,CAAY,CACtE,CAEA,kBAAkB,EAAkB,EAAiB,CACnD,OAAO,KAAK,IAAI,MAAM,kBAAkB,EAAU,CAAM,CAC1D,CAMA,YAAY,EAAkB,EAAgE,CAC5F,OAAO,EAAY,KAAK,IAAK,EAAU,CAAO,CAChD,CAEA,WAAW,EAAkB,EAAiB,EAAiB,CAC7D,OAAO,EAAW,KAAK,IAAK,EAAU,EAAS,CAAM,CACvD,CAEA,gBAAgB,EAAkB,EAAY,EAAY,EAAiB,CACzE,OAAO,EAAgB,KAAK,IAAK,EAAU,EAAI,EAAI,CAAM,CAC3D,CAEA,eAAe,EAAkB,EAAiB,EAAiB,CACjE,OAAO,EAAe,KAAK,IAAK,EAAU,EAAS,CAAM,CAC3D,CAEA,cAAc,EAAkB,EAAiB,CAC/C,OAAO,EAAc,KAAK,IAAK,EAAU,CAAM,CACjD,CAEA,sBACE,EACA,EACA,EACA,EACA,EACA,CACA,OAAO,EAAsB,KAAK,IAAK,EAAU,EAAa,EAAc,EAAQ,CAAI,CAC1F,CAMA,qBAAqB,EAAkB,CACrC,OAAO,EAAqB,KAAK,IAAK,CAAQ,CAChD,CAEA,0BAA0B,EAAqB,CAC7C,OAAO,EAA0B,KAAK,IAAK,CAAS,CACtD,CAEA,qBAAqB,EAA+B,CAClD,OAAO,EAAqB,KAAK,IAAK,CAAO,CAC/C,CAMA,gBAAgB,EAAkB,CAChC,OAAO,EAAgB,KAAK,IAAK,CAAQ,CAC3C,CAEA,gBAAgB,EAAkB,EAAgB,EAA+B,CAC/E,OAAO,EAAgB,KAAK,IAAK,EAAU,EAAQ,CAAM,CAC3D,CAEA,qBAAqB,EAAqB,CACxC,OAAO,EAAqB,KAAK,IAAK,CAAS,CACjD,CAMA,UACE,EACA,EACA,EACA,EACA,CACA,OAAO,EAAU,KAAK,IAAK,EAAU,EAAM,EAAQ,CAAI,CACzD,CAEA,WACE,EACA,EACA,EACA,EACA,CACA,OAAO,EAAW,KAAK,IAAK,EAAU,EAAO,EAAQ,CAAI,CAC3D,CAEA,SAAS,EAAkB,EAAiB,CAC1C,OAAO,EAAS,KAAK,IAAK,EAAU,CAAM,CAC5C,CAEA,YAAY,EAAkB,EAAiB,CAC7C,OAAO,EAAY,KAAK,IAAK,EAAU,CAAM,CAC/C,CAEA,aAAa,EAAkB,EAAiB,EAAsC,CACpF,OAAO,EAAa,KAAK,IAAK,EAAU,EAAQ,CAAI,CACtD,CAEA,SAAS,EAAkB,EAAiB,CAC1C,OAAO,EAAS,KAAK,IAAK,EAAU,CAAM,CAC5C,CAEA,YAAY,EAAiB,CAC3B,OAAO,EAAY,KAAK,IAAK,CAAM,CACrC,CAEA,cAAc,EAAqB,EAAiB,CAClD,OAAO,EAAc,KAAK,IAAK,EAAW,CAAM,CAClD,CAEA,wBAAwB,EAAkB,EAAiB,CACzD,OAAO,EAAwB,KAAK,IAAK,EAAU,CAAM,CAC3D,CACF,EAQA,SAAgB,GACd,EAC0B,CAE1B,OAAO,IAAI,EAAyB,CAClC,MAFY,EAAkB,CAE1B,EACJ,SACA,OAAQ,EAAO,CAAC,CAAC,OAAO,MAAM,CAAE,QAAS,EAAO,IAAK,CAAC,CACxD,CAAC,CACH"}

package/dist/detail-template-names-CD1Y9n1U.mjs

@@ -0,0 +1,2 @@
+const e=`detail_template`,t=`target`;function n(t){let n=t?.entities;return!n||typeof n.has!=`function`?!1:n.has(e)}export{t as n,n as r,e as t};
+//# sourceMappingURL=detail-template-names-CD1Y9n1U.mjs.map

package/dist/detail-template-names-CD1Y9n1U.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"detail-template-names-CD1Y9n1U.mjs","names":[],"sources":["../src/detail-template-names.ts"],"sourcesContent":["/**\n * The detail-template entity's name, and the list-time predicate its seeder\n * uses — in a module that imports NOTHING, for the reason\n * `./chrome-entity-names.ts` gives: `available` runs on the seed page's\n * synchronous shell and inside `lumi seed --list`, so it cannot sit behind an\n * `await import`, and importing it from a module that reaches\n * `@murumets-ee/core/clients` would hoist that into `dist/plugin.mjs`.\n */\n\n/** The one detail-template entity. Rows differ by `target`, not by entity name. */\nexport const DETAIL_TEMPLATE_ENTITY_NAME = 'detail_template'\n\n/** The column holding the entity a template draws. Also its unique key. */\nexport const DETAIL_TEMPLATE_TARGET_FIELD = 'target'\n\n/**\n * Does this app have the detail-template entity for the seeder to create rows\n * in? `app` is `unknown` — see `hasChromeEntities`.\n */\nexport function hasDetailTemplateEntity(app: unknown): boolean {\n  const entities = (app as { entities?: Map<string, unknown> } | null | undefined)?.entities\n  if (!entities || typeof entities.has !== 'function') return false\n  return entities.has(DETAIL_TEMPLATE_ENTITY_NAME)\n}\n"],"mappings":"AAUA,MAAa,EAA8B,kBAG9B,EAA+B,SAM5C,SAAgB,EAAwB,EAAuB,CAC7D,IAAM,EAAY,GAAgE,SAElF,MADI,CAAC,GAAY,OAAO,EAAS,KAAQ,WAAmB,GACrD,EAAS,IAAI,CAA2B,CACjD"}

package/dist/detail-template-provider.d.mts

@@ -0,0 +1,28 @@
+import { ToolkitApp } from "@murumets-ee/core";
+
+//#region src/detail-template-provider.d.ts
+/** A published template, as stored — its blocks are resolved by the caller. */
+interface DetailTemplateDocument {
+  /** The template row's id, for the response's cache tags. */
+  readonly id: string;
+  readonly blocks: unknown[];
+}
+interface DetailTemplateProvider {
+  /** The template entity's name, for the response's cache tags. */
+  readonly entity: string;
+  readTemplate(opts: {
+    entity: string;
+    locale: string;
+  }): Promise<DetailTemplateDocument | null>;
+  publicRow(opts: {
+    entity: string;
+    row: Readonly<Record<string, unknown>>;
+    locale: string;
+  }): Promise<Record<string, unknown>>;
+}
+declare function createDetailTemplateProvider(getApp: () => Promise<ToolkitApp> | ToolkitApp, options: {
+  defaultLocale: string;
+}): DetailTemplateProvider;
+//#endregion
+export { DetailTemplateDocument, DetailTemplateProvider, createDetailTemplateProvider };
+//# sourceMappingURL=detail-template-provider.d.mts.map

package/dist/detail-template-provider.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detail-template-provider.d.mts","names":[],"sources":["../src/detail-template-provider.ts"],"mappings":";;;AAmFA;AAAA,UAjBiB,sBAAA;;WAEN,EAAA;EAAA,SACA,MAAM;AAAA;AAAA,UAGA,sBAAA;EAcQ;EAAA,SAZd,MAAA;EACT,YAAA,CAAa,IAAA;IAAQ,MAAA;IAAgB,MAAA;EAAA,IAAmB,OAAA,CAAQ,sBAAA;EAChE,SAAA,CAAU,IAAA;IACR,MAAA;IACA,GAAA,EAAK,QAAA,CAAS,MAAA;IACd,MAAA;EAAA,IACE,OAAA,CAAQ,MAAA;AAAA;AAAA,iBAGE,4BAAA,CACd,MAAA,QAAc,OAAA,CAAQ,UAAA,IAAc,UAAA,EACpC,OAAA;EAAW,aAAA;AAAA,IACV,sBAAA"}

package/dist/detail-template-provider.mjs

@@ -0,0 +1,2 @@
+import{n as e,t}from"./detail-template-names-CD1Y9n1U.mjs";import{getBlockTreeFieldName as n,isTemplateDrawn as r}from"@murumets-ee/entity";import{createSystemReachResolver as i}from"@murumets-ee/core";import{QueryClient as a}from"@murumets-ee/entity/query";import{schemaRegistry as o}from"@murumets-ee/db";import{eq as s,getTableColumns as c}from"drizzle-orm";import{effectiveDetailSpecs as l,resolveDocumentDetail as u}from"@murumets-ee/blocks/server";const d=i(`detail-template-resolver`),f=new Set([`title`,`text`]);function p(i,p){return{entity:t,readTemplate:async({entity:l,locale:u})=>{let f=await i(),m=f.entities.get(l);if(!m||!r(m))return null;let h=f.entities.get(t);if(!h)return null;let g=n(h),_=o.get(t),v=(_?c(_):void 0)?.[e];if(!g||!v)return null;let y=(await new a({entity:h,db:f.db.readOnly,logger:f.logger.child({resolve:`detail-template`}),contextResolver:d}).findMany({limit:1,locale:u,defaultLocale:p.defaultLocale,where:s(v,l)}))[0];if(!y||typeof y.id!=`string`)return null;let b=y[g];return!Array.isArray(b)||b.length===0?null:{id:y.id,blocks:b}},publicRow:async({entity:e,row:t,locale:n})=>{let r=l(await i()).specs.get(e);if(r===void 0)return{};let a=u(r,t,n,f);return{...a?.title!==void 0&&{title:a.title},...a?.text!==void 0&&{description:a.text}}}}}export{p as createDetailTemplateProvider};
+//# sourceMappingURL=detail-template-provider.mjs.map

package/dist/detail-template-provider.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"detail-template-provider.mjs","names":[],"sources":["../src/detail-template-provider.ts"],"sourcesContent":["/**\n * The detail-template provider `content-api` is handed (block-library D009).\n *\n * `content-api` is a leaf: it knows an entity is drawn by a template\n * (`frontend.drawnBy`), and nothing about where a template is stored or which\n * of a row's columns a site lets a visitor see. Both answers live here, and are\n * injected as {@link createDetailTemplateProvider}.\n *\n * ## 🔴 What a visitor can reach through this\n *\n * - **`readTemplate`** answers for a row's ENTITY NAME, which the handler takes\n *   from a whitelisted entity the caller holds `view` on — never from a request\n *   parameter and never from a stored value. It reads the PUBLISHED template\n *   for that entity and locale: the read runs under a reach context that grants\n *   `view` and withholds `view_unpublished`, so `QueryClient`'s publish filter\n *   and trashed-row exclusion still apply. A draft template is `null`, and the\n *   page falls back to a plain one.\n *\n *   It runs under reach rather than under the caller's own grants on purpose. A\n *   template is not a document a visitor asks for; it is how a row they may\n *   already read is drawn, the same derivation a menu or a path resolution is.\n *   Requiring `detail_template:view` on `public` would be a second grant an\n *   operator has to remember, whose absence looks exactly like \"no template\n *   published\" — the two-grant trap `chrome-provider.ts` records.\n *\n * - **`publicRow`** is the ONLY thing of the row that crosses, besides its id.\n *   It projects `title` and `description` through the site's detail declaration\n *   (`blocksPlugin({ details })`), whose columns were validated at boot as\n *   declared, non-`internal`, non-`adminOnly`. An entity with no declaration\n *   yields `{}`. No stored value names a column.\n *\n * ## Fan-out\n *\n * One query per `readTemplate` call, and the handler calls it once per by-id\n * response. `publicRow` does no I/O (it awaits only the app handle).\n */\n\nimport {\n  type DocumentDetailPart,\n  effectiveDetailSpecs,\n  resolveDocumentDetail,\n} from '@murumets-ee/blocks/server'\nimport type { ToolkitApp } from '@murumets-ee/core'\nimport { createSystemReachResolver } from '@murumets-ee/core'\nimport { schemaRegistry } from '@murumets-ee/db'\nimport type { SecurityContext } from '@murumets-ee/entity'\nimport { getBlockTreeFieldName, isTemplateDrawn } from '@murumets-ee/entity'\nimport { QueryClient } from '@murumets-ee/entity/query'\nimport { eq, getTableColumns } from 'drizzle-orm'\nimport type { PgColumn } from 'drizzle-orm/pg-core'\nimport {\n  DETAIL_TEMPLATE_ENTITY_NAME,\n  DETAIL_TEMPLATE_TARGET_FIELD,\n} from './detail-template-names.js'\n\n/**\n * Reach, never visibility of unpublished rows — see the file header. Named so\n * its reads are distinguishable from the path and menu resolvers' in audit\n * output.\n */\nconst SYSTEM_CONTEXT: () => SecurityContext = createSystemReachResolver('detail-template-resolver')\n\n/** The parts of a detail that are the row's public name and summary. */\nconst PUBLIC_ROW_PARTS: ReadonlySet<DocumentDetailPart> = new Set(['title', 'text'])\n\n/** A published template, as stored — its blocks are resolved by the caller. */\nexport interface DetailTemplateDocument {\n  /** The template row's id, for the response's cache tags. */\n  readonly id: string\n  readonly blocks: unknown[]\n}\n\nexport interface DetailTemplateProvider {\n  /** The template entity's name, for the response's cache tags. */\n  readonly entity: string\n  readTemplate(opts: { entity: string; locale: string }): Promise<DetailTemplateDocument | null>\n  publicRow(opts: {\n    entity: string\n    row: Readonly<Record<string, unknown>>\n    locale: string\n  }): Promise<Record<string, unknown>>\n}\n\nexport function createDetailTemplateProvider(\n  getApp: () => Promise<ToolkitApp> | ToolkitApp,\n  options: { defaultLocale: string },\n): DetailTemplateProvider {\n  return {\n    entity: DETAIL_TEMPLATE_ENTITY_NAME,\n\n    readTemplate: async ({ entity: targetName, locale }) => {\n      const app = await getApp()\n      // Asked again here rather than trusted from the caller: this is the gate\n      // that keeps the provider from being a way to read a template for an\n      // entity code never marked as drawn by one.\n      const target = app.entities.get(targetName)\n      if (!target || !isTemplateDrawn(target)) return null\n\n      const templateEntity = app.entities.get(DETAIL_TEMPLATE_ENTITY_NAME)\n      if (!templateEntity) return null\n      const blockTreeField = getBlockTreeFieldName(templateEntity)\n      const table = schemaRegistry.get(DETAIL_TEMPLATE_ENTITY_NAME)\n      // `?.` — see `chrome-provider.ts`: a registry entry that is not a real\n      // table must degrade to \"no template\", not throw on every detail page.\n      const columns = table\n        ? (getTableColumns(table) as Record<string, PgColumn> | undefined)\n        : undefined\n      const targetColumn = columns?.[DETAIL_TEMPLATE_TARGET_FIELD]\n      if (!blockTreeField || !targetColumn) return null\n\n      const client = new QueryClient({\n        entity: templateEntity,\n        db: app.db.readOnly,\n        logger: app.logger.child({ resolve: 'detail-template' }),\n        contextResolver: SYSTEM_CONTEXT,\n      })\n      // `eq(target)` on the unique column: at most one live row can match.\n      const rows = await client.findMany({\n        limit: 1,\n        locale,\n        defaultLocale: options.defaultLocale,\n        where: eq(targetColumn, targetName),\n      })\n      const row = rows[0] as Record<string, unknown> | undefined\n      if (!row || typeof row.id !== 'string') return null\n      const blocks = row[blockTreeField]\n      // A published template with nothing in it is \"no template\": the plain\n      // fallback is a better page than an empty one.\n      if (!Array.isArray(blocks) || blocks.length === 0) return null\n      return { id: row.id, blocks }\n    },\n\n    publicRow: async ({ entity, row, locale }) => {\n      const app = await getApp()\n      const spec = effectiveDetailSpecs(app).specs.get(entity)\n      if (spec === undefined) return {}\n      const detail = resolveDocumentDetail(spec, row, locale, PUBLIC_ROW_PARTS)\n      return {\n        ...(detail?.title !== undefined && { title: detail.title }),\n        ...(detail?.text !== undefined && { description: detail.text }),\n      }\n    },\n  }\n}\n"],"mappings":"scA4DA,MAAM,EAAwC,EAA0B,0BAA0B,EAG5F,EAAoD,IAAI,IAAI,CAAC,QAAS,MAAM,CAAC,EAoBnF,SAAgB,EACd,EACA,EACwB,CACxB,MAAO,CACL,OAAQ,EAER,aAAc,MAAO,CAAE,OAAQ,EAAY,YAAa,CACtD,IAAM,EAAM,MAAM,EAAO,EAInB,EAAS,EAAI,SAAS,IAAI,CAAU,EAC1C,GAAI,CAAC,GAAU,CAAC,EAAgB,CAAM,EAAG,OAAO,KAEhD,IAAM,EAAiB,EAAI,SAAS,IAAI,CAA2B,EACnE,GAAI,CAAC,EAAgB,OAAO,KAC5B,IAAM,EAAiB,EAAsB,CAAc,EACrD,EAAQ,EAAe,IAAI,CAA2B,EAMtD,GAHU,EACX,EAAgB,CAAK,EACtB,IAAA,GAAA,GAC2B,GAC/B,GAAI,CAAC,GAAkB,CAAC,EAAc,OAAO,KAe7C,IAAM,GAAM,MANO,IAPA,EAAY,CAC7B,OAAQ,EACR,GAAI,EAAI,GAAG,SACX,OAAQ,EAAI,OAAO,MAAM,CAAE,QAAS,iBAAkB,CAAC,EACvD,gBAAiB,CACnB,CAEwB,CAAC,CAAC,SAAS,CACjC,MAAO,EACP,SACA,cAAe,EAAQ,cACvB,MAAO,EAAG,EAAc,CAAU,CACpC,CAAC,EAAA,CACgB,GACjB,GAAI,CAAC,GAAO,OAAO,EAAI,IAAO,SAAU,OAAO,KAC/C,IAAM,EAAS,EAAI,GAInB,MADI,CAAC,MAAM,QAAQ,CAAM,GAAK,EAAO,SAAW,EAAU,KACnD,CAAE,GAAI,EAAI,GAAI,QAAO,CAC9B,EAEA,UAAW,MAAO,CAAE,SAAQ,MAAK,YAAa,CAE5C,IAAM,EAAO,EAAqB,MADhB,EAAO,CACY,CAAC,CAAC,MAAM,IAAI,CAAM,EACvD,GAAI,IAAS,IAAA,GAAW,MAAO,CAAC,EAChC,IAAM,EAAS,EAAsB,EAAM,EAAK,EAAQ,CAAgB,EACxE,MAAO,CACL,GAAI,GAAQ,QAAU,IAAA,IAAa,CAAE,MAAO,EAAO,KAAM,EACzD,GAAI,GAAQ,OAAS,IAAA,IAAa,CAAE,YAAa,EAAO,IAAK,CAC/D,CACF,CACF,CACF"}

package/dist/entities/index.d.mts

@@ -1,2 +1,64 @@
+import { t as VersionableFields } from "../versionable-ByZgfpp0.mjs";
 import { a as siteChromeEntity, i as SiteChromeEntityOptions, n as CHROME_PLACEMENT_LABELS, r as ChromePlacement, t as CHROME_PLACEMENTS } from "../site-chrome-CUE16iIz.mjs";
-export { CHROME_PLACEMENTS, CHROME_PLACEMENT_LABELS, type ChromePlacement, type SiteChromeEntityOptions, siteChromeEntity };
+import { Behavior, Entity, EntityAdminConfig, ForbiddenError } from "@murumets-ee/entity";
+
+//#region src/entities/detail-template.d.ts
+interface DetailTemplateEntityOptions {
+  /**
+   * The entities drawn by a stored template. Each must declare
+   * `frontend: { path, drawnBy: 'template' }`; one that does not throws here,
+   * at boot, rather than producing a template nothing ever draws.
+   *
+   * May be empty — a project with no such entity yet keeps the registration and
+   * adds a name when it gets one. The entity is then hidden from the sidebar.
+   */
+  for: readonly Pick<Entity, 'name' | 'frontend'>[];
+  /** Role that may read templates in the admin. Default `'editor'`. */
+  viewRole?: string;
+  /** Role that may edit and publish templates. Default `'editor'`. */
+  updateRole?: string;
+  /** Role named for create/delete (both are otherwise closed). Default `'admin'`. */
+  adminRole?: string;
+  /** Snapshots kept per template. Default 30. */
+  maxVersions?: number;
+  /** The block environment the canvas opens (e.g. `'page'`). */
+  environment?: string;
+  /** App-supplied behaviors — `withOpLog()` at least. Must contribute no fields. */
+  behaviors?: readonly Behavior<Record<never, never>, string>[];
+  /** Field naming overrides, merged per field over the English defaults. */
+  admin?: {
+    fieldOverrides?: EntityAdminConfig['fieldOverrides'];
+  };
+}
+/** Thrown when someone tries to delete or trash a detail template. */
+declare class DetailTemplateDeleteRefusedError extends ForbiddenError {
+  constructor();
+}
+/** The names a template may target — validated, de-duplicated, in the given order. */
+declare function detailTemplateTargets(entities: readonly Pick<Entity, 'name' | 'frontend'>[]): string[];
+/**
+ * Build the `detail_template` entity. The return type is INFERRED, for the
+ * reason `siteChromeEntity` gives: annotating it widens the name to `string`.
+ */
+declare function detailTemplateEntity(options: DetailTemplateEntityOptions): Entity<{
+  id: import("@murumets-ee/entity").IdField;
+} & import("@murumets-ee/entity").AuditableFields & import("@murumets-ee/entity").PublishableFields & VersionableFields & Record<never, never> & {
+  target: import("@murumets-ee/entity").SelectField & {
+    options: string[];
+  } & {
+    readonly options: string[];
+    readonly required: true;
+    readonly unique: true;
+  };
+  label: import("@murumets-ee/entity").TextField & {
+    readonly required: true;
+  };
+  layout: import("@murumets-ee/entity").BlockTreeField & {
+    readonly environment?: string;
+    readonly translatable: true;
+    readonly rowsFrom: "target";
+  };
+}, "detail_template", [Behavior<import("@murumets-ee/entity").AuditableFields, string>, Behavior<import("@murumets-ee/entity").PublishableFields, "publishable">, Behavior<VersionableFields, string>, Behavior<Record<never, never>, "content:detail-template-undeletable">, ...Behavior<Record<never, never>, string>[]]>;
+//#endregion
+export { CHROME_PLACEMENTS, CHROME_PLACEMENT_LABELS, type ChromePlacement, DetailTemplateDeleteRefusedError, type DetailTemplateEntityOptions, type SiteChromeEntityOptions, detailTemplateEntity, detailTemplateTargets, siteChromeEntity };
+//# sourceMappingURL=index.d.mts.map

package/dist/entities/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../src/entities/detail-template.ts"],"mappings":";;;;;UAqEiB,2BAAA;EA0FwD;;;;;;;;EAjFvE,GAAA,WAAc,IAAA,CAAK,MAAA;;EAEnB,QAAA;;EAEA,UAAA;;EAEA,SAAA;;EAEA,WAAA;;EAEA,WAAA;;EAEA,SAAA,YAAqB,QAAA,CAAS,MAAA;;EAE9B,KAAA;IACE,cAAA,GAAiB,iBAAA;EAAA;AAAA;;cAsBR,gCAAA,SAAyC,cAAc;EAAd,WAAA,CAAA;AAAA;;iBAwBtC,qBAAA,CACd,QAAA,WAAmB,IAAI,CAAC,MAAA;;;;;iBAmBV,oBAAA,CAAqB,OAAA,EAAS,2BAAA,GAA2B,MAAA;;sGAAA,iBAAA"}

package/dist/entities/index.mjs

@@ -1 +1,2 @@
-import{n as e,r as t,t as n}from"../site-chrome-DvP9SXGu.mjs";export{n as CHROME_PLACEMENTS,e as CHROME_PLACEMENT_LABELS,t as siteChromeEntity};
+import{n as e}from"../versionable-Br_G5VGR.mjs";import{t}from"../detail-template-names-CD1Y9n1U.mjs";import{n,r,t as i}from"../site-chrome-DvP9SXGu.mjs";import{ForbiddenError as a,auditable as o,defineEntity as s,field as c,isTemplateDrawn as l,publishable as u}from"@murumets-ee/entity";const d={label:{label:`Name`,description:`Shown in the admin list and as the editor title. Visitors never see it.`}};function f(e){let t={...d};for(let[n,r]of Object.entries(e??{}))t[n]={...t[n],...r};return t}var p=class extends a{constructor(){super(`A detail template is not deleted: the rows it draws are still on the site. Unpublish it instead — those pages then show a plain fallback, and the draft stays editable.`),this.name=`DetailTemplateDeleteRefusedError`}};const m={name:`content:detail-template-undeletable`,hooks:{beforeDelete:async()=>{throw new p}}};function h(e){let t=[];for(let n of e){if(!l(n))throw Error(`detailTemplateEntity: '${n.name}' is listed in \`for\` but does not declare \`frontend: { path, drawnBy: 'template' }\`. A template for it would never be drawn.`);t.includes(n.name)||t.push(n.name)}return t}function g(n){let r=n.viewRole??`editor`,i=n.updateRole??`editor`,a=n.adminRole??`admin`,l=h(n.for);return s({name:t,site:`bound`,kind:`collection`,fields:{target:c.select({options:l,required:!0,unique:!0}),label:c.text({required:!0}),layout:c.blockTree({translatable:!0,rowsFrom:`target`,...n.environment!==void 0&&{environment:n.environment}})},behaviors:[o(),u(),e({maxPerDoc:n.maxVersions??30}),m,...n.behaviors??[]],scope:`global`,access:{view:r,create:a,update:i,delete:a},admin:{icon:`layout-template`,description:`One page layout per kind of synced record, drawn for every record of that kind.`,rootFields:[`label`],fieldOverrides:f(n.admin?.fieldOverrides),titleField:`label`,group:`Site`,disableCreate:!0,...l.length===0&&{hidden:!0}}})}export{i as CHROME_PLACEMENTS,n as CHROME_PLACEMENT_LABELS,p as DetailTemplateDeleteRefusedError,g as detailTemplateEntity,h as detailTemplateTargets,r as siteChromeEntity};
+//# sourceMappingURL=index.mjs.map

package/dist/entities/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../src/entities/detail-template.ts"],"sourcesContent":["/**\n * `detail_template` — the ONE stored block document per entity type that draws\n * every row of an entity the site does not author (block-library D009).\n *\n * A synced room type or a synced legal document has no block-tree field and\n * cannot have one: its rows are written by a machine, so there is nothing an\n * editor could save a layout into. Its detail page is therefore a document of\n * THIS entity, keyed by the entity it draws. An editor opens \"Room detail\" on\n * the canvas and edits it like a page — adds, moves and removes blocks,\n * translates its fixed copy per locale, publishes it — and the site draws that\n * one published tree for every room, with that room's values in the bound\n * blocks.\n *\n * ## The same shape as `site_chrome`, for the same reasons\n *\n * One entity, one row per key, the key's `unique: true` as the whole\n * cardinality rule (a partial index, `WHERE \"deletedAt\" IS NULL`, because a\n * publishable entity is trashable). `layout` is `translatable`, so each locale\n * is an independent tree. `withOpLog()` comes from the app, because it ships\n * from `@murumets-ee/blocks/server` and this package must not depend on blocks:\n *\n * ```ts\n * import { withOpLog } from '@murumets-ee/blocks/server'\n * import { detailTemplateEntity } from '@murumets-ee/content/entities'\n *\n * export const DetailTemplate = detailTemplateEntity({\n *   for: [RoomType, LegalDocument],\n *   environment: 'page',\n *   behaviors: [withOpLog({ retentionDays: 7 })],\n * })\n * ```\n *\n * Rows are created by the `content:detail-templates` bootstrap seeder (one\n * DRAFT per target, on every `lumi migrate`), so `admin.disableCreate` is on.\n *\n * ## 🔴 `target` is a key, never a choice\n *\n * `target` is a `select` whose options are the names of the entities passed in\n * `for` — each of which must itself declare `frontend: { drawnBy: 'template' }`\n * or this throws at boot. So a stored value can only ever be an entity that\n * CODE offered, and the public read never follows it: the site resolves a URL\n * to a row, and asks for the template WHERE `target` = that row's entity. No\n * request reads a template and then goes looking for the entity it names.\n *\n * `layout`'s `rowsFrom: 'target'` is what tells the canvas to draw the bound\n * blocks with a sample row of that entity, read-only.\n *\n * ## Deleting is refused; unpublishing is the off switch\n *\n * While an entity is drawn by a template its rows are routable, and a deleted\n * template would leave them with nothing an editor can open again (the row is\n * bootstrapped, and `disableCreate` hides the only other way to make one). So\n * delete and trash are refused outright. To take a detail page back to the\n * plain fallback, UNPUBLISH the template: the site then draws the row's title\n * on a plain page, and the draft is still there to publish again.\n */\n\nimport type { Behavior, Entity, EntityAdminConfig } from '@murumets-ee/entity'\nimport {\n  auditable,\n  defineEntity,\n  ForbiddenError,\n  field,\n  isTemplateDrawn,\n  publishable,\n} from '@murumets-ee/entity'\nimport { versionable } from '../behaviors/versionable.js'\nimport { DETAIL_TEMPLATE_ENTITY_NAME } from '../detail-template-names.js'\n\nexport interface DetailTemplateEntityOptions {\n  /**\n   * The entities drawn by a stored template. Each must declare\n   * `frontend: { path, drawnBy: 'template' }`; one that does not throws here,\n   * at boot, rather than producing a template nothing ever draws.\n   *\n   * May be empty — a project with no such entity yet keeps the registration and\n   * adds a name when it gets one. The entity is then hidden from the sidebar.\n   */\n  for: readonly Pick<Entity, 'name' | 'frontend'>[]\n  /** Role that may read templates in the admin. Default `'editor'`. */\n  viewRole?: string\n  /** Role that may edit and publish templates. Default `'editor'`. */\n  updateRole?: string\n  /** Role named for create/delete (both are otherwise closed). Default `'admin'`. */\n  adminRole?: string\n  /** Snapshots kept per template. Default 30. */\n  maxVersions?: number\n  /** The block environment the canvas opens (e.g. `'page'`). */\n  environment?: string\n  /** App-supplied behaviors — `withOpLog()` at least. Must contribute no fields. */\n  behaviors?: readonly Behavior<Record<never, never>, string>[]\n  /** Field naming overrides, merged per field over the English defaults. */\n  admin?: {\n    fieldOverrides?: EntityAdminConfig['fieldOverrides']\n  }\n}\n\nconst DEFAULT_FIELD_OVERRIDES: NonNullable<EntityAdminConfig['fieldOverrides']> = {\n  label: {\n    label: 'Name',\n    description: 'Shown in the admin list and as the editor title. Visitors never see it.',\n  },\n}\n\nfunction mergeFieldOverrides(\n  project: EntityAdminConfig['fieldOverrides'],\n): NonNullable<EntityAdminConfig['fieldOverrides']> {\n  const merged: NonNullable<EntityAdminConfig['fieldOverrides']> = { ...DEFAULT_FIELD_OVERRIDES }\n  for (const [name, override] of Object.entries(project ?? {})) {\n    merged[name] = { ...merged[name], ...override }\n  }\n  return merged\n}\n\n/** Thrown when someone tries to delete or trash a detail template. */\nexport class DetailTemplateDeleteRefusedError extends ForbiddenError {\n  constructor() {\n    super(\n      'A detail template is not deleted: the rows it draws are still on the site. ' +\n        'Unpublish it instead — those pages then show a plain fallback, and the draft stays editable.',\n    )\n    this.name = 'DetailTemplateDeleteRefusedError'\n  }\n}\n\n/**\n * Refuse every delete path. `beforeDelete` runs on a single delete, a purge, a\n * trash, `deleteMany` and a cascade, so this one hook covers all of them.\n */\nconst undeletable: Behavior<Record<never, never>, 'content:detail-template-undeletable'> = {\n  name: 'content:detail-template-undeletable',\n  hooks: {\n    beforeDelete: async () => {\n      throw new DetailTemplateDeleteRefusedError()\n    },\n  },\n}\n\n/** The names a template may target — validated, de-duplicated, in the given order. */\nexport function detailTemplateTargets(\n  entities: readonly Pick<Entity, 'name' | 'frontend'>[],\n): string[] {\n  const names: string[] = []\n  for (const entity of entities) {\n    if (!isTemplateDrawn(entity)) {\n      throw new Error(\n        `detailTemplateEntity: '${entity.name}' is listed in \\`for\\` but does not declare ` +\n          \"`frontend: { path, drawnBy: 'template' }`. A template for it would never be drawn.\",\n      )\n    }\n    if (!names.includes(entity.name)) names.push(entity.name)\n  }\n  return names\n}\n\n/**\n * Build the `detail_template` entity. The return type is INFERRED, for the\n * reason `siteChromeEntity` gives: annotating it widens the name to `string`.\n */\nexport function detailTemplateEntity(options: DetailTemplateEntityOptions) {\n  const viewRole = options.viewRole ?? 'editor'\n  const updateRole = options.updateRole ?? 'editor'\n  const adminRole = options.adminRole ?? 'admin'\n  const targets = detailTemplateTargets(options.for)\n\n  return defineEntity({\n    name: DETAIL_TEMPLATE_ENTITY_NAME,\n    // Per site, like chrome: each site has its own detail pages.\n    site: 'bound',\n    kind: 'collection',\n    fields: {\n      // THE key. Not translatable — which entity a template draws is a property\n      // of the document, not of a translation. `unique: true` is the whole\n      // one-template-per-entity-type rule, enforced by the database for every\n      // writer.\n      target: field.select({\n        options: targets,\n        required: true,\n        unique: true,\n      }),\n      label: field.text({ required: true }),\n      layout: field.blockTree({\n        translatable: true,\n        rowsFrom: 'target',\n        ...(options.environment !== undefined && { environment: options.environment }),\n      }),\n    },\n    behaviors: [\n      auditable(),\n      publishable(),\n      versionable({ maxPerDoc: options.maxVersions ?? 30 }),\n      undeletable,\n      ...(options.behaviors ?? []),\n    ],\n    scope: 'global',\n    access: {\n      view: viewRole,\n      create: adminRole,\n      update: updateRole,\n      delete: adminRole,\n    },\n    admin: {\n      icon: 'layout-template',\n      description:\n        'One page layout per kind of synced record, drawn for every record of that kind.',\n      // `target` is deliberately absent, as `placement` is on chrome: pointing\n      // a room template at legal documents by editing a dropdown would collide\n      // with the row already holding that target.\n      rootFields: ['label'],\n      fieldOverrides: mergeFieldOverrides(options.admin?.fieldOverrides),\n      titleField: 'label',\n      group: 'Site',\n      disableCreate: true,\n      // Nothing to list until a project has a template-drawn entity.\n      ...(targets.length === 0 && { hidden: true }),\n    },\n  })\n}\n\n/**\n * COMPILE-TIME guard that the name stays a literal — see `site-chrome.ts`'s\n * twin for why it lives in `src/`.\n */\ntype DetailTemplateName = ReturnType<typeof detailTemplateEntity>['name']\nconst _nameIsLiteral: string extends DetailTemplateName ? never : true = true\nvoid _nameIsLiteral\n"],"mappings":"gSAiGA,MAAM,EAA4E,CAChF,MAAO,CACL,MAAO,OACP,YAAa,yEACf,CACF,EAEA,SAAS,EACP,EACkD,CAClD,IAAM,EAA2D,CAAE,GAAG,CAAwB,EAC9F,IAAK,GAAM,CAAC,EAAM,KAAa,OAAO,QAAQ,GAAW,CAAC,CAAC,EACzD,EAAO,GAAQ,CAAE,GAAG,EAAO,GAAO,GAAG,CAAS,EAEhD,OAAO,CACT,CAGA,IAAa,EAAb,cAAsD,CAAe,CACnE,aAAc,CACZ,MACE,yKAEF,EACA,KAAK,KAAO,kCACd,CACF,EAMA,MAAM,EAAqF,CACzF,KAAM,sCACN,MAAO,CACL,aAAc,SAAY,CACxB,MAAM,IAAI,CACZ,CACF,CACF,EAGA,SAAgB,EACd,EACU,CACV,IAAM,EAAkB,CAAC,EACzB,IAAK,IAAM,KAAU,EAAU,CAC7B,GAAI,CAAC,EAAgB,CAAM,EACzB,MAAU,MACR,0BAA0B,EAAO,KAAK,iIAExC,EAEG,EAAM,SAAS,EAAO,IAAI,GAAG,EAAM,KAAK,EAAO,IAAI,CAC1D,CACA,OAAO,CACT,CAMA,SAAgB,EAAqB,EAAsC,CACzE,IAAM,EAAW,EAAQ,UAAY,SAC/B,EAAa,EAAQ,YAAc,SACnC,EAAY,EAAQ,WAAa,QACjC,EAAU,EAAsB,EAAQ,GAAG,EAEjD,OAAO,EAAa,CAClB,KAAM,EAEN,KAAM,QACN,KAAM,aACN,OAAQ,CAKN,OAAQ,EAAM,OAAO,CACnB,QAAS,EACT,SAAU,GACV,OAAQ,EACV,CAAC,EACD,MAAO,EAAM,KAAK,CAAE,SAAU,EAAK,CAAC,EACpC,OAAQ,EAAM,UAAU,CACtB,aAAc,GACd,SAAU,SACV,GAAI,EAAQ,cAAgB,IAAA,IAAa,CAAE,YAAa,EAAQ,WAAY,CAC9E,CAAC,CACH,EACA,UAAW,CACT,EAAU,EACV,EAAY,EACZ,EAAY,CAAE,UAAW,EAAQ,aAAe,EAAG,CAAC,EACpD,EACA,GAAI,EAAQ,WAAa,CAAC,CAC5B,EACA,MAAO,SACP,OAAQ,CACN,KAAM,EACN,OAAQ,EACR,OAAQ,EACR,OAAQ,CACV,EACA,MAAO,CACL,KAAM,kBACN,YACE,kFAIF,WAAY,CAAC,OAAO,EACpB,eAAgB,EAAoB,EAAQ,OAAO,cAAc,EACjE,WAAY,QACZ,MAAO,OACP,cAAe,GAEf,GAAI,EAAQ,SAAW,GAAK,CAAE,OAAQ,EAAK,CAC7C,CACF,CAAC,CACH"}

package/dist/plugin-BpkCaBrp.mjs

@@ -0,0 +1,2 @@
+import{t as e}from"./versionable-Br_G5VGR.mjs";import{r as t}from"./errors-NRNILhhm.mjs";import{r as n,t as r}from"./locale-entity-CoSq3C77.mjs";import{n as i,t as a}from"./content-config-store-8omQF5p5.mjs";import{r as o}from"./routing-strategy-D6B4ngT9.mjs";import{n as s,t as c}from"./registry-CaPbY5lm.mjs";import"./locale-utils-B0mFoV47.mjs";import{n as l}from"./chrome-entity-names-zYJzP-_U.mjs";import{r as u}from"./detail-template-names-CD1Y9n1U.mjs";import{c as d,i as f,n as p,o as m,r as h,t as g}from"./schema-BYrYzsmO.mjs";import{l as _,t as v,u as y}from"./schema-IML1rRU_.mjs";import{r as b,t as x}from"./routes-BmNSYyuT.mjs";import{n as S}from"./locks-5779ugSW.mjs";import{MAX_PATH_DEPTH as C,buildPartitionCondition as w,hasPathParent as T,isSiteBound as E,resolveEffectiveSlugMode as D,resolvePattern as O}from"@murumets-ee/entity";import{definePlugin as k,getApp as A,getAppOrUndefined as j,getContext as M,getCurrentSite as N,requireRequestSite as P,requireSiteFor as F,resolveImplicitSite as I,runAsCli as L,runInEverySite as R,runInSite as z}from"@murumets-ee/core";import{column as B,defineTable as V,schemaRegistry as H}from"@murumets-ee/db";import{and as U,asc as ee,eq as W,getTableColumns as te,inArray as ne,sql as re}from"drizzle-orm";import{z as G}from"zod";import{createHash as ie}from"node:crypto";const ae=Symbol.for(`@murumets-ee/content:locale-status-writer`);async function K(e,t,n,r){let i=r===`published`?new Date:null;await e.upsert({entityId:t,locale:n,status:r,publishedAt:i},{target:[`entityId`,`locale`],set:{status:r,publishedAt:i}})}function q(e){globalThis[ae]=(n,r)=>{let{localeStatus:i}=c(n.name);if(i)return async(n,a,o,s)=>{let c=M()?.availableLocales??e;if(!c.includes(a))throw new t(a,[...c]);await K(i.makeClient(r,s),n,a,o)}}}async function J(e){let t=M()?.app??j();if(!t)return;let n=t.entities.get(e);if(n)return F(n,t)}function oe(){return{async writeDraft({documentType:e,documentId:t,locale:n,dataPatch:r,user:i,tx:a}){let{drafts:o}=c(e);if(!o)return!1;let s=o.makeClient(a,await J(e)),l=new Date;return await s.upsert({entityId:t,locale:n,data:r,createdBy:i.id,createdByName:i.name??null,createdAt:l,updatedAt:l},{target:[`entityId`,`locale`],set:{updatedAt:l},mergeJsonb:[`data`]}),!0},async readDraft({documentType:e,documentId:t,locale:n,db:r}){let{drafts:i}=c(e);if(!i)return null;let a=await i.makeClient(r,await J(e)).findOne({entityId:t,locale:n});return a?{data:a.data??{},createdBy:a.createdBy??null,createdByName:a.createdByName??null,updatedAt:a.updatedAt??null}:null},async readLocaleStatus({documentType:e,documentId:t,locale:n,db:r}){let{localeStatus:i}=c(e);if(!i)return null;let a=await i.makeClient(r,await J(e)).findOne({entityId:t,locale:n});return a?a.status===`published`?`published`:`draft`:null},async hasAnyDraft({documentType:e,documentId:t,db:n}){let{drafts:r}=c(e);return r?r.makeClient(n,await J(e)).exists({entityId:t}):!1},async hasAnyLocaleActivity({documentType:e,documentId:t,db:n}){let{localeStatus:r}=c(e),i=await J(e);if(r&&await r.makeClient(n,i).exists({entityId:t}))return!0;let a=H.get(`${e}_translations`);if(a){let r=a.entityId;if(r!==void 0){let o=i===void 0?W(r,t):U(W(r,t),w(a,{site:i},e));if((await n.select({one:re`1`}).from(a).where(o).limit(1)).length>0)return!0}}return!1}}}function se(e){let{defaultLocale:t}=a();return e===`_`||e===t?{defaultLocale:t}:{locale:e,defaultLocale:t}}function ce(e){let{defaultLocale:t}=a();return e===`_`||e===t?`_`:e}async function le(e,t,n,r){let{drafts:i}=c(e);if(!i)return;let a=await i.makeClient(r,await J(e)).findOne({entityId:t,locale:n});return a?a.data??void 0:void 0}function ue(){return{async snapshotCurrentState({documentType:t,documentId:n,locale:r,user:i}){let a=A(),o=a.entities.get(t);if(!o)return!1;let s=e(o.behaviors);if(!s)return!1;let c=a.getClient(o),l=c.getDb(),u=ce(r),d=await c.findById(n,se(u));if(!d)return!1;let f=await le(t,n,u,l),p=f?{...d,...f}:{...d},[{createContentContext:m},{createVersionSnapshot:h}]=await Promise.all([import(`./context-D7eEItCY.mjs`).then(e=>e.t),import(`./versions-CD2Tnqla.mjs`).then(e=>e.c)]);return await h(m({admin:c,entity:o},s),n,p,d,u,{id:i.id,...i.name==null?{}:{name:i.name}}),!0}}}async function Y(e,t,n){let r=te(g),i=r[h],a=r.entityType,o=r.entityId;if(!i||!a||!o)throw Error(`toolkit_paths is missing '${h}'/entity columns`);let s=await e.selectDistinct({site:i}).from(g).where(U(W(a,t),W(o,n))).limit(2);if(s.length>1)return null;let c=s[0]?.site;return typeof c==`string`?c:void 0}const de=Symbol.for(`@murumets-ee/content:path-writers-factory`),X=Symbol.for(`@murumets-ee/content:cascade-trigger-factory`);function fe(e){globalThis[X]=e}function pe(){let e=globalThis[X];return typeof e==`function`?e:void 0}function me(e,t){return async r=>{let i=await he(e,t,r);if(i===null)return;let a=p.makeClient(e.db.readWrite,i),o=N();if(o!==void 0&&o!==i&&!(r.action===`delete`||r.action===`release`)){e.logger.warn({entity:r.entityName,id:r.id,site:i,requestSite:o},"toolkit_paths: a cascade reached a document on another site — its path is left for `lumi paths:rebuild` on that site rather than recomputed from this request");return}return o===void 0&&r.viaCascade===!0&&E(t)?z(i,()=>n(a,r)):n(a,r)};async function n(n,r){if(r.action===`delete`){await n.deleteMany({entityType:r.entityName,entityId:r.id});return}if(r.action===`release`){await n.deleteMany({entityType:r.entityName,entityId:r.id,isCanonical:!0});return}let i=a(),o=i.defaultLocale,s=i.reservedPathPrefixes??[],c=r.locale?[r.locale]:i.locales.map(e=>e.code),l=r.viaCascade===!0?e.getSystemClient(t):e.getClient(t),u=async n=>{if(!T(t))return;let i=pe();if(i)try{await i(e,t,r.id,n)}catch(t){e.logger.warn({err:t,entity:r.entityName,id:r.id,locale:n},`toolkit_paths: descendant-cascade trigger threw — the entity write already committed, so tolerating and continuing (paths are rebuildable, D005)`)}};for(let i of c){let a=i===r.locale?r.row??null:await l.findById(r.id,{locale:i,defaultLocale:o});if(!a){await m({pathsClient:n,entityType:r.entityName,entityId:r.id,locale:i,path:null,skipReason:`row-unreadable`,reservedPathPrefixes:s,logger:e.logger});continue}let c=await _({entity:t,row:a,locale:i,defaultLocale:o,pathsClient:n}),d=await m({pathsClient:n,entityType:r.entityName,entityId:r.id,locale:i,path:c.path,...c.skipReason!==void 0&&{skipReason:c.skipReason},reservedPathPrefixes:s,logger:e.logger});(d.outcome===`renamed`||r.action===`restore`&&d.outcome===`created`)&&await u(i)}}}async function he(e,t,n){if(n.viaCascade===!0&&E(t)){let t=await Y(e.db.readWrite,n.entityName,n.id);if(t===null)return e.logger.warn({entity:n.entityName,id:n.id},"toolkit_paths: a document has path rows on SEVERAL sites — refusing to guess which one this cascade maintains; `lumi paths:rebuild` per site repairs it"),null;if(t!==void 0)return t;let r=N();if(r!==void 0)return r;let i=await I(e).catch(()=>void 0);return i===void 0?(e.logger.warn({entity:n.entityName,id:n.id,action:n.action},"toolkit_paths: cascade child has no path rows and the request names no site — nothing to maintain here; `lumi paths:rebuild` recomputes it per site"),null):i}return P(`toolkit_paths`,e)}function ge(e,t){return async n=>{let r=p.makeClient(e.db.readWrite,await P(`toolkit_paths`,e)),i=a(),o=i.defaultLocale,s=i.reservedPathPrefixes??[],c=n.locale??o,l=null;n.id!==void 0&&(l=await e.getClient(t).findById(n.id,{locale:c,defaultLocale:o}));let u=D(n.data.slugMode,l?.slugMode);await y({entity:t,data:n.data,currentRow:l,id:n.id,locale:c,defaultLocale:o,slugMode:u,reservedPathPrefixes:s,pathsClient:r})}}function _e(){globalThis[de]=(e,t)=>({pathIndexWriter:me(e,t),pathConflictGuard:ge(e,t)})}const Z=G.object({entityType:G.string().min(1),parentId:G.string().uuid(),locale:G.string().min(1)}),Q=G.object({entity:G.string().min(1).optional(),locale:G.string().min(1).optional(),dryRun:G.boolean()});async function ve(e,t,n={}){let{entityType:r,parentId:i,locale:o}=t,s=n.maxItems??2e3,c=n.concurrency??5,l={processed:0,regenerated:0,unchanged:0,skipped:0,failed:0,truncated:!1},u=e=>({phase:e,...l}),f=()=>({entityType:r,parentId:i,locale:o,cap:s,...l}),h=e.entities.get(r);if(!h)return e.logger.warn({entityType:r,parentId:i,locale:o},`paths-cascade: unknown entity type — nothing to regenerate`),n.onProgress?.(u(`done`)),f();if(!T(h))return e.logger.warn({entityType:r,parentId:i,locale:o},`paths-cascade: entity is not a pathParent() hierarchy — nothing to regenerate`),n.onProgress?.(u(`done`)),f();let g=a(),v=g.defaultLocale,y=g.reservedPathPrefixes??[],b=p.makeClient(e.db.readWrite,await P(`toolkit_paths`,e)),x=e.getClient(h),S=x.getTable().parent,C=async t=>{let n=t.id;try{let i=await _({entity:h,row:t,locale:o,defaultLocale:v,pathsClient:b});switch((await m({pathsClient:b,entityType:r,entityId:n,locale:o,path:i.path,...i.skipReason!==void 0&&{skipReason:i.skipReason},reservedPathPrefixes:y,logger:e.logger})).outcome){case`created`:case`renamed`:l.regenerated+=1;break;case`unchanged`:l.unchanged+=1;break;default:l.skipped+=1;break}}catch(t){l.failed+=1,e.logger.warn({err:t,entityType:r,id:n,locale:o},`paths-cascade: failed to regenerate one descendant path — continuing (per-item isolation)`)}},w=[i];for(;w.length>0;){let e=s-l.processed;if(e<=0){l.truncated=!0;break}let t=await x.findMany({where:ne(S,w),locale:o,defaultLocale:v,limit:e+1});if(t.length===0)break;let r=t;if(t.length>e&&(r=t.slice(0,e),l.truncated=!0),await d(r,c,C),l.processed+=r.length,n.onProgress?.(u(`walking`)),l.truncated)break;w=r.map(e=>e.id)}return l.truncated&&e.logger.warn({entityType:r,parentId:i,locale:o,processed:l.processed,cap:s},`paths-cascade: descendant subtree exceeded the cap — deeper/remaining descendants were NOT regenerated. Run \`lumi paths:rebuild --entity ${r}\` for guaranteed full coverage.`),n.onProgress?.(u(`done`)),f()}async function ye(e,t,n={}){let r=n.pageSize??200,i=n.concurrency??5,o=n.sampleCap??25,s=t.dryRun,c=a(),l=c.defaultLocale,u=c.reservedPathPrefixes??[],f=c.locales.map(e=>e.code),h=t.locale?f.filter(e=>e===t.locale):f,g=[...e.entities.values()].filter(e=>!!e.frontend?.path&&(t.entity===void 0||e.name===t.entity)),v=t.entity!==void 0&&g.length===0,y=t.locale!==void 0&&h.length===0;v&&e.logger.warn({entity:t.entity,dryRun:s},`paths-rebuild: --entity matches no routable entity (one declaring frontend.path) — nothing to rebuild (likely a typo in the entity name)`),y&&e.logger.warn({locale:t.locale,configuredLocales:f,dryRun:s},`paths-rebuild: --locale matches no configured locale — nothing to rebuild (likely a typo in the locale code)`);let b=v||y?{entity:v,locale:y}:void 0,x=g.some(e=>T(e)),S=s&&x?`Preview reflects a SINGLE pass; a pathParent() hierarchy drifted at multiple levels may need the real (non-dry-run) rebuild's multi-pass convergence to fully resolve. The real run always converges.`:void 0,w=p.makeClient(e.db.readWrite,await P(`toolkit_paths`,e)),E={scanned:0,changed:0,applied:0,failed:0},D=new Map,O={missing:0,conflicts:0,unchanged:0,skipped:0},k=(e,t)=>{let n=D.get(e);n!==t&&(n!==void 0&&n!==`resolved`&&--O[n],D.set(e,t),t!==`resolved`&&(O[t]+=1))},A=[],j=!1,M=e=>{A.length<o?A.push(e):j=!0},N=0,F=e=>({phase:e,dryRun:s,scope:{entity:t.entity??null,locale:t.locale??null},scanned:E.scanned,changed:E.changed,applied:E.applied,failed:E.failed,missing:O.missing,conflicts:O.conflicts,unchanged:O.unchanged,skipped:O.skipped,passes:N,sample:A,sampleTruncated:j,...S===void 0?{}:{hierarchyNote:S},...b===void 0?{}:{unmatchedScope:b}}),I=async(t,n,r,i)=>{let a=r.id,o=!1;try{let c=await _({entity:t,row:r,locale:i,defaultLocale:l,pathsClient:w}),d=await m({pathsClient:w,entityType:n,entityId:a,locale:i,path:c.path,...c.skipReason!==void 0&&{skipReason:c.skipReason},suppressNoteworthy:[`parent-not-indexed`],reservedPathPrefixes:u,logger:e.logger,dryRun:s}),f=`${n}:${a}:${i}`;switch(d.outcome){case`unchanged`:k(f,`unchanged`);break;case`skipped-null`:case`skipped-reserved`:k(f,`skipped`);break;case`conflict`:k(f,`conflicts`),M({kind:`conflict`,entityType:n,entityId:a,locale:i,oldPath:d.oldPath,newPath:d.newPath,...d.conflictWith?{conflictWith:d.conflictWith.entityId}:{}});break;case`created`:s?k(f,`missing`):(E.applied+=1,o=!0,k(f,`resolved`)),M({kind:`missing`,entityType:n,entityId:a,locale:i,oldPath:null,newPath:d.newPath});break;case`renamed`:E.changed+=1,s||(E.applied+=1,o=!0),k(f,`resolved`),M({kind:`changed`,entityType:n,entityId:a,locale:i,oldPath:d.oldPath,newPath:d.newPath});break}}catch(t){E.failed+=1,e.logger.warn({err:t,entityType:n,id:a,locale:i},`paths-rebuild: failed to process one document — continuing (per-item isolation)`)}return o},L=async t=>{let a=0;for(let o of t){let t=e.getClient(o),s=o.name,c=t.getTable().id;for(let e of h){let u;for(;;){let f=await t.findMany({locale:e,defaultLocale:l,limit:r,orderBy:ee(c),...u===void 0?{}:{cursor:{field:`id`,value:u,direction:`asc`}}});if(f.length===0)break;await d(f,i,async t=>{await I(o,s,t,e)&&(a+=1)}),E.scanned+=f.length;let p=f[f.length-1];if(p&&(u=p.id),n.onProgress?.(F(`scanning`)),f.length<r)break}}}return a},R=async t=>{let r=[];for(let[n,i]of D){if(i!==`conflicts`&&i!==`skipped`&&i!==`missing`)continue;let a=n.indexOf(`:`),o=n.lastIndexOf(`:`);if(a<=0||o<=a)continue;let s=n.slice(0,a);if(t.has(s))continue;let c=e.entities.get(s);c!==void 0&&r.push({entity:c,entityType:s,entityId:n.slice(a+1,o),locale:n.slice(o+1)})}if(r.length===0)return 0;let a=0;return await d(r,i,async t=>{let n=await e.getClient(t.entity).findById(t.entityId,{locale:t.locale,defaultLocale:l});n!==null&&(E.scanned+=1,await I(t.entity,t.entityType,n,t.locale)&&(a+=1))}),n.onProgress?.(F(`scanning`)),a},z=g.filter(e=>T(e)),B=new Set(z.map(e=>e.name)),V=s||!x?1:C;for(let e=0;e<V;e++){N=e+1;let t=await L(e===0?g:z);if(e>0&&(t+=await R(B)),t===0)break}j&&e.logger.warn({scanned:E.scanned,changed:E.changed,missing:O.missing,conflicts:O.conflicts,sampleCap:o},`paths-rebuild: more diff entries than the progress sample can hold — see the aggregate counts; the stored sample is truncated`);let H=F(`done`);n.onProgress?.(H);let{phase:U,...W}=H;return W}async function be(e){let{defineJob:t,registerJob:n,QueueClient:r}=await import(`@murumets-ee/queue/client`),i=t({name:`content:paths-cascade`,description:`Regenerate toolkit_paths canonical rows for the descendants of a renamed routable-hierarchy ancestor (one locale). Walks the full bounded subtree in a single invocation.`,schema:Z}),a=t({name:`content:paths-rebuild`,description:`Recompute every routable document's canonical toolkit_paths row (optionally scoped to one entity/locale); dryRun reports the diff without writing. On-demand (lumi paths:rebuild).`,schema:Q});n(i,async t=>{await L(async()=>{let n=await ve(e,Z.parse(t.payload),{onProgress:e=>t.updateProgress(e)});e.logger.info(n,`paths-cascade: descendant regeneration complete`)})}),n(a,async t=>{await L(()=>R(async()=>{let n=await ye(e,Q.parse(t.payload),{onProgress:e=>t.updateProgress({...e,site:N()??null})});e.logger.info({dryRun:n.dryRun,scanned:n.scanned,changed:n.changed,missing:n.missing,conflicts:n.conflicts,applied:n.applied,failed:n.failed,passes:n.passes,...n.hierarchyNote===void 0?{}:{hierarchyNote:n.hierarchyNote}},`paths-rebuild: sweep complete`)},{app:e,label:`paths-rebuild`}))}),fe(async(e,t,n,a)=>{await new r({app:e,logger:e.logger}).enqueue(i,{entityType:t.name,parentId:n,locale:a})})}const $=V({name:`toolkit_path_patterns`,columns:{id:B.uuid({primaryKey:!0,defaultRandom:!0}),entityType:B.varchar({length:100,notNull:!0,pgName:`entity_type`}),locale:B.varchar({length:10,notNull:!0}),patternHash:B.varchar({length:64,notNull:!0,pgName:`pattern_hash`}),updatedAt:B.timestamp({notNull:!0,defaultNow:!0,withTimezone:!0,pgName:`updated_at`})},unique:[{on:[`entityType`,`locale`]}]}),xe=$.table;function Se(e,t,n){let r=O(e,t,n);if(r===null)return null;let i=typeof r==`function`?r.toString():JSON.stringify(r);return ie(`sha256`).update(i).digest(`hex`)}async function Ce(e){let t=a(),n=t.defaultLocale,r=t.locales.map(e=>e.code),i=$.makeClient(e.db.readWrite);for(let[t,a]of e.entities){let o=a.frontend?.path;if(o!==void 0)for(let a of r){let r=Se(o,a,n);if(r===null)continue;let s=await i.findOne({entityType:t,locale:a});s!==null&&s.patternHash===r||(s!==null&&e.logger.warn({entity:t,locale:a,previousHash:s.patternHash,currentHash:r},`toolkit_paths: frontend.path pattern for '${t}' (locale '${a}') changed since last boot — stale toolkit_paths rows may exist; run \`lumi paths:rebuild --entity ${t}\``),await i.upsert({entityType:t,locale:a,patternHash:r},{target:[`entityType`,`locale`],set:{patternHash:r,updatedAt:new Date}}))}}}const we=async(e,t,n)=>{if(t.length===0)return new Map;let[{buildEnumerateDeps:r},{getCanonicalPaths:i}]=await Promise.all([import(`./resolve-context-Cvc1aNJe.mjs`).then(e=>e.l),import(`./enumerate-CYHJKQz6.mjs`).then(e=>e.n)]),a=r(A()),o=await a.filterPublished(e,t,n);return o.size===0?new Map:i(e,[...o],n,a)};function Te(e){return f(e,{name:`${e.name}_drafts`,columns:{id:B.uuid({primaryKey:!0,defaultRandom:!0}),entityId:B.uuid({notNull:!0,pgName:`entity_id`}),locale:B.varchar({length:10,notNull:!0,default:`_`}),data:B.jsonb({notNull:!0}),createdBy:B.varchar({length:255,notNull:!0,pgName:`created_by`}),createdByName:B.varchar({length:255,pgName:`created_by_name`}),createdAt:B.timestamp({notNull:!0,defaultNow:!0,withTimezone:!0,pgName:`created_at`}),updatedAt:B.timestamp({notNull:!0,defaultNow:!0,withTimezone:!0,pgName:`updated_at`})},unique:[{on:[`entityId`,`locale`]}]})}function Ee(e){return f(e,{name:`${e.name}_locale_status`,columns:{id:B.uuid({primaryKey:!0,defaultRandom:!0}),entityId:B.uuid({notNull:!0,pgName:`entity_id`}),locale:B.varchar({length:10,notNull:!0}),status:B.varchar({length:20,notNull:!0,default:`draft`}),publishedAt:B.timestamp({withTimezone:!0,pgName:`published_at`})},unique:[{on:[`entityId`,`locale`]}]})}function De(e){return f(e,{name:`${e.name}_versions`,columns:{id:B.uuid({primaryKey:!0,defaultRandom:!0}),entityId:B.uuid({notNull:!0,pgName:`entity_id`}),version:B.integer({notNull:!0}),locale:B.varchar({length:10,notNull:!0,default:`_`}),data:B.jsonb({notNull:!0}),delta:B.jsonb(),status:B.varchar({length:20}),createdBy:B.varchar({length:255,pgName:`created_by`}),createdByName:B.varchar({length:255,pgName:`created_by_name`}),createdAt:B.timestamp({notNull:!0,defaultNow:!0,withTimezone:!0,pgName:`created_at`}),isAutosave:B.boolean({notNull:!0,default:!1,pgName:`is_autosave`})},unique:[{on:[`entityId`,`version`,`locale`]}]})}function Oe(e){if(!e.locales||e.locales.length===0)throw Error(`content() requires at least one locale`);if(!e.defaultLocale)throw Error(`content() requires a defaultLocale`);if(!e.locales.some(t=>t.code===e.defaultLocale))throw Error(`defaultLocale "${e.defaultLocale}" not found in locales: [${e.locales.map(e=>e.code).join(`, `)}]`);if(e.reservedPathPrefixes){for(let t of e.reservedPathPrefixes)if(typeof t!=`string`||!t.startsWith(`/`))throw Error(`content(): reservedPathPrefixes entries must be absolute paths starting with '/', got ${JSON.stringify(t)}`)}let t=e.autoTrash??!0,a=t===!1?void 0:{publishable:!0,...typeof t==`object`&&t.exclude?{exclude:t.exclude}:{}};return k({name:`@murumets-ee/content`,contributes:{"blocks.documentDraftStore":oe(),"blocks.documentVersionStore":ue(),"blocks.publishedPathResolver":we,...a?{"trash.autoEnable":a}:{},...e.reservedPathPrefixes?{"routing.reservedPathPrefixes":e.reservedPathPrefixes}:{}},shared:{settings:[n],features:[{resource:`redirect`,actions:[`manage`],defaultRoles:[`admin`],description:`Create, edit, and delete manual URL redirects (toolkit_redirects).`},{resource:`path`,actions:[`resolve`],defaultRoles:[`admin`,`editor`],description:`Resolve a site URL path to the CMS document that serves it.`}]},server:{entities:[r,o],tables:{toolkitContentLocks:S,toolkitPaths:g,toolkitPathPatterns:xe,toolkitRedirects:v},routes:[...x(),...b()],seeders:[{name:`content:site-chrome`,description:`Create the empty site_chrome row for each placement (header, footer), as a DRAFT, so they can be edited on the page canvas. Publishing one is what makes /v1/_chrome serve it instead of the delivery template's own fallback. Idempotent — an existing row for a placement is left alone.`,available:l,bootstrap:!0,run:async()=>{let{seedSiteChrome:e}=await import(`@murumets-ee/content/seed`);return await e()}},{name:`content:detail-templates`,description:`Create the DRAFT detail template for each entity drawn by one (block-library D009), so its page layout can be edited on the canvas. Until a template is published its rows keep the plain fallback page. Idempotent — an existing template is left alone.`,available:u,bootstrap:!0,run:async()=>{let{seedDetailTemplates:e}=await import(`@murumets-ee/content/seed`);return await e()}}],init:async t=>{i(e);let n=0,r=0,a=0;for(let[e,i]of t.entities){if(i.behaviors?.some(e=>e.name===`versionable`)){let t=`${e}_versions`;if(!H.has(t)){let n=De(i);H.register(t,n.table),s(e,{versions:n})}n++}let t=i.behaviors?.some(e=>e.name===`publishable`),o=i.allFields,c=Object.values(o).some(e=>e.translatable);if(t&&c){let t=`${e}_locale_status`;if(!H.has(t)){let n=Ee(i);H.register(t,n.table),s(e,{localeStatus:n})}r++}if(t){let t=`${e}_drafts`;if(!H.has(t)){let n=Te(i);H.register(t,n.table),s(e,{drafts:n})}a++}}q(e.locales.map(e=>e.code)),_e();try{await be(t)}catch(e){t.logger.warn({err:e},"content: failed to register routing path jobs — descendant cascade + `lumi paths:rebuild` will be unavailable (path writes still succeed)")}t.logger.info({locales:e.locales.map(e=>e.code),defaultLocale:e.defaultLocale,versionableEntities:n,localeStatusEntities:r,draftEntities:a},`Content plugin initialized`)},onReady:async e=>{try{await Ce(e)}catch(t){e.logger.error({err:t},"content: boot-time frontend-path pattern-drift check failed — continuing app boot without it. Inspect the logged `err` for the cause: a transient DB error can be retried (and `lumi paths:rebuild` re-derives the index if a pattern actually changed), whereas a structural cause — e.g. a missing migration leaving `toolkit_path_patterns` absent — will recur on every boot and needs `lumi migrate`")}}}})}export{K as n,Oe as t};
+//# sourceMappingURL=plugin-BpkCaBrp.mjs.map