@plumix/core 0.1.0

package/dist/rpc/procedures/entry/lookup.js

@@ -0,0 +1,120 @@
+import { and, eq, inArray, like, ne } from "../../../db/index.js";
+import { entries } from "../../../db/schema/entries.js";
+import { buildEntryPermalink } from "../../../route/permalink.js";
+import { LookupScopeError } from "../lookup.errors.js";
+const DEFAULT_LIST_LIMIT = 20;
+const MAX_LIST_LIMIT = 100;
+const ENTRY_ROW_COLUMNS = {
+    id: entries.id,
+    type: entries.type,
+    title: entries.title,
+    status: entries.status,
+    slug: entries.slug,
+    parentId: entries.parentId,
+};
+export const entryLookupAdapter = {
+    async list(ctx, options) {
+        const conditions = scopeConditions(options.scope);
+        let limit;
+        if (options.ids !== undefined) {
+            // Resolve-by-id batch path: ignore `query`, return only the
+            // requested ids (still subject to scope). Invalid ids are
+            // silently dropped — they read as orphans on the caller's side.
+            // Limit tracks `numericIds.length` (not `MAX_LIST_LIMIT`) since
+            // the meta pipeline aggregates ids across same-`(kind,scope)`
+            // fields and may legitimately request >100 in one call.
+            const numericIds = options.ids
+                .map((id) => parseEntryId(id))
+                .filter((id) => id !== null);
+            if (numericIds.length === 0)
+                return [];
+            conditions.push(inArray(entries.id, numericIds));
+            limit = numericIds.length;
+        }
+        else {
+            const trimmedQuery = options.query?.trim();
+            if (trimmedQuery) {
+                conditions.push(like(entries.title, `%${trimmedQuery}%`));
+            }
+            limit = clampLimit(options.limit);
+        }
+        const rows = await ctx.db
+            .select(ENTRY_ROW_COLUMNS)
+            .from(entries)
+            .where(conditions.length === 0 ? undefined : and(...conditions))
+            .orderBy(entries.title)
+            .limit(limit);
+        return Promise.all(rows.map((row) => toLookupResult(ctx, row)));
+    },
+    async resolve(ctx, id, scope) {
+        const numericId = parseEntryId(id);
+        if (numericId === null)
+            return null;
+        const [row] = await ctx.db
+            .select(ENTRY_ROW_COLUMNS)
+            .from(entries)
+            .where(buildEntryWhere(numericId, scope))
+            .limit(1);
+        return row ? toLookupResult(ctx, row) : null;
+    },
+};
+function parseEntryId(id) {
+    // entries.id is autoincrement; reject anything that isn't a positive integer.
+    if (!/^[1-9]\d*$/.test(id))
+        return null;
+    const parsed = Number(id);
+    return Number.isSafeInteger(parsed) ? parsed : null;
+}
+function buildEntryWhere(numericId, scope) {
+    return and(eq(entries.id, numericId), ...scopeConditions(scope));
+}
+function scopeConditions(scope) {
+    // Required at runtime, not just at the builder's TS level: a wire-side
+    // caller (lookup RPC, plugin-registered legacy field) could otherwise
+    // omit `entryTypes` and silently disable the type filter — which would
+    // turn the picker into a "list every entry across every type" channel
+    // bypassing per-type read scoping.
+    if (!scope?.entryTypes || scope.entryTypes.length === 0) {
+        throw LookupScopeError.entryTypesRequired();
+    }
+    const conditions = [
+        inArray(entries.type, scope.entryTypes),
+    ];
+    if (!scope.includeTrashed) {
+        conditions.push(ne(entries.status, "trash"));
+    }
+    return conditions;
+}
+function clampLimit(requested) {
+    if (requested === undefined)
+        return DEFAULT_LIST_LIMIT;
+    if (!Number.isFinite(requested) || requested <= 0)
+        return DEFAULT_LIST_LIMIT;
+    return Math.min(Math.floor(requested), MAX_LIST_LIMIT);
+}
+async function toLookupResult(ctx, row) {
+    const trimmedTitle = row.title.trim();
+    // `null` (not an English "Untitled <type>" string) so consumers
+    // render their own localized fallback. cached.label snapshots the
+    // wire shape so the meta-pipeline doesn't pin source-locale English
+    // into entry meta forever; menu items and reference fields fall
+    // through to their own deletion-resilient fallback chain when the
+    // linked entity is later deleted.
+    const label = trimmedTitle !== "" ? trimmedTitle : null;
+    const href = await buildEntryPermalink(ctx, {
+        type: row.type,
+        slug: row.slug,
+        parentId: row.parentId,
+    });
+    const cached = { label };
+    if (href !== null)
+        cached.href = href;
+    return {
+        id: String(row.id),
+        label,
+        targetType: row.type,
+        subtitle: `${row.type} · ${row.status}`,
+        cached,
+    };
+}
+//# sourceMappingURL=lookup.js.map

package/dist/rpc/procedures/entry/lookup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lookup.js","sourceRoot":"","sources":["../../../../src/rpc/procedures/entry/lookup.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEvD,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B,MAAM,iBAAiB,GAAG;IACxB,EAAE,EAAE,OAAO,CAAC,EAAE;IACd,IAAI,EAAE,OAAO,CAAC,IAAI;IAClB,KAAK,EAAE,OAAO,CAAC,KAAK;IACpB,MAAM,EAAE,OAAO,CAAC,MAAM;IACtB,IAAI,EAAE,OAAO,CAAC,IAAI;IAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;CAClB,CAAC;AAWX,MAAM,CAAC,MAAM,kBAAkB,GAAmC;IAChE,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO;QACrB,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAClD,IAAI,KAAa,CAAC;QAClB,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC9B,4DAA4D;YAC5D,0DAA0D;YAC1D,gEAAgE;YAChE,gEAAgE;YAChE,8DAA8D;YAC9D,wDAAwD;YACxD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG;iBAC3B,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;iBAC7B,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC;YAC7C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAC;YACvC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;YACjD,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;YAC3C,IAAI,YAAY,EAAE,CAAC;gBACjB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,YAAY,GAAG,CAAC,CAAC,CAAC;YAC5D,CAAC;YACD,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,EAAE;aACtB,MAAM,CAAC,iBAAiB,CAAC;aACzB,IAAI,CAAC,OAAO,CAAC;aACb,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC;aAC/D,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;aACtB,KAAK,CAAC,KAAK,CAAC,CAAC;QAChB,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK;QAC1B,MAAM,SAAS,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,SAAS,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC,EAAE;aACvB,MAAM,CAAC,iBAAiB,CAAC;aACzB,IAAI,CAAC,OAAO,CAAC;aACb,KAAK,CAAC,eAAe,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;aACxC,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,OAAO,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/C,CAAC;CACF,CAAC;AAEF,SAAS,YAAY,CAAC,EAAU;IAC9B,8EAA8E;IAC9E,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1B,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC;AAED,SAAS,eAAe,CACtB,SAAiB,EACjB,KAAkC;IAElC,OAAO,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,eAAe,CAAC,KAAkC;IACzD,uEAAuE;IACvE,sEAAsE;IACtE,uEAAuE;IACvE,sEAAsE;IACtE,mCAAmC;IACnC,IAAI,CAAC,KAAK,EAAE,UAAU,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,gBAAgB,CAAC,kBAAkB,EAAE,CAAC;IAC9C,CAAC;IACD,MAAM,UAAU,GAAU;QACxB,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,UAAsB,CAAC;KACpD,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QAC1B,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,UAAU,CAAC,SAA6B;IAC/C,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,kBAAkB,CAAC;IACvD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC;QAAE,OAAO,kBAAkB,CAAC;IAC7E,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,cAAc,CAAC,CAAC;AACzD,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,GAAe,EACf,GAAmB;IAEnB,MAAM,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IACtC,gEAAgE;IAChE,kEAAkE;IAClE,oEAAoE;IACpE,gEAAgE;IAChE,kEAAkE;IAClE,kCAAkC;IAClC,MAAM,KAAK,GAAkB,YAAY,KAAK,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC;IACvE,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE;QAC1C,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,QAAQ,EAAE,GAAG,CAAC,QAAQ;KACvB,CAAC,CAAC;IACH,MAAM,MAAM,GAA4B,EAAE,KAAK,EAAE,CAAC;IAClD,IAAI,IAAI,KAAK,IAAI;QAAE,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;IACtC,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAClB,KAAK;QACL,UAAU,EAAE,GAAG,CAAC,IAAI;QACpB,QAAQ,EAAE,GAAG,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,MAAM,EAAE;QACvC,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/rpc/procedures/entry/meta.d.ts

@@ -0,0 +1,64 @@
+import type { AppContext } from "../../../context/app.js";
+import type { PluginRegistry } from "../../../plugin/manifest.js";
+import type { MetaPatch } from "../../meta/core.js";
+import { applyMetaPatch, sanitizeMetaForRpc as sanitizeMetaForRpcCore } from "../../meta/core.js";
+export type { MetaChanges as EntryMetaChanges } from "../../meta/core.js";
+/** RPC-facing sanitizer for an entry's meta input, scoped by entry type. */
+export declare function sanitizeMetaForRpc(registry: PluginRegistry, entryType: string, input: Record<string, unknown> | undefined, errors: Parameters<typeof sanitizeMetaForRpcCore>[2]): MetaPatch | null;
+/**
+ * Reject a meta patch that writes to a capability-gated field the viewer
+ * can't access. Treats the field's `capability` as a server-side gate so
+ * the API stays honest regardless of admin-side filtering. Deletes count
+ * as writes — you can't blank a value you can't see. Repeater subfields
+ * are NOT recursed: capability gates apply at the top-level field only;
+ * a row's capability is whichever the parent repeater field declares.
+ */
+export declare function assertEntryMetaCapabilities(registry: PluginRegistry, entryType: string, patch: MetaPatch, auth: {
+    can(capability: string): boolean;
+}, errors: {
+    FORBIDDEN: (args: {
+        data: {
+            capability: string;
+        };
+    }) => Error;
+}): void;
+/**
+ * Generic shape — `term.{create,update}` and `user.update` reuse this by
+ * passing their own `findField` lookup so all three surfaces honour the
+ * field-level capability gate uniformly.
+ */
+export declare function assertMetaCapabilities(patch: MetaPatch, findField: (key: string) => {
+    readonly capability?: string;
+} | undefined, auth: {
+    can(capability: string): boolean;
+}, errors: {
+    FORBIDDEN: (args: {
+        data: {
+            capability: string;
+        };
+    }) => Error;
+}): void;
+/**
+ * Async second pass on a sanitised entry-meta patch: validates each
+ * reference field's upserted ID against its registered
+ * `LookupAdapter`. RPC procedures call this between
+ * `sanitizeMetaForRpc` and `writeEntryMeta`.
+ */
+export declare function validateEntryMetaReferences(ctx: AppContext, entryType: string, patch: MetaPatch, errors: Parameters<typeof sanitizeMetaForRpcCore>[2]): Promise<void>;
+export declare function decodeMetaBag(registry: PluginRegistry, entry: {
+    readonly type: string;
+}, raw: Readonly<Record<string, unknown>> | null | undefined): Record<string, unknown>;
+export declare function loadEntryMeta(ctx: AppContext, entry: {
+    readonly id: number;
+    readonly type: string;
+}): Promise<Record<string, unknown>>;
+/**
+ * Apply a meta patch to `entries.meta` and fire `entry:meta_changed`.
+ * Plugins that need to mutate the patch subscribe to
+ * `rpc:entry.{create,update}:input` and mutate `input.meta` there.
+ */
+export declare function writeEntryMeta(ctx: AppContext, entry: {
+    readonly id: number;
+    readonly type: string;
+}, patch: Parameters<typeof applyMetaPatch>[4]): Promise<void>;
+//# sourceMappingURL=meta.d.ts.map

package/dist/rpc/procedures/entry/meta.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"meta.d.ts","sourceRoot":"","sources":["../../../../src/rpc/procedures/entry/meta.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAGpD,OAAO,EACL,cAAc,EAKd,kBAAkB,IAAI,sBAAsB,EAE7C,MAAM,oBAAoB,CAAC;AAE5B,YAAY,EAAE,WAAW,IAAI,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE1E,4EAA4E;AAC5E,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,cAAc,EACxB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAC1C,MAAM,EAAE,UAAU,CAAC,OAAO,sBAAsB,CAAC,CAAC,CAAC,CAAC,GACnD,SAAS,GAAG,IAAI,CAMlB;AAED;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,cAAc,EACxB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,SAAS,EAChB,IAAI,EAAE;IAAE,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,EAC1C,MAAM,EAAE;IACN,SAAS,EAAE,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE;YAAE,UAAU,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,KAAK,KAAK,CAAC;CAC9D,GACA,IAAI,CAON;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,SAAS,EAChB,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK;IAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,EACxE,IAAI,EAAE;IAAE,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,EAC1C,MAAM,EAAE;IACN,SAAS,EAAE,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE;YAAE,UAAU,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,KAAK,KAAK,CAAC;CAC9D,GACA,IAAI,CASN;AAED;;;;;GAKG;AACH,wBAAsB,2BAA2B,CAC/C,GAAG,EAAE,UAAU,EACf,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,SAAS,EAChB,MAAM,EAAE,UAAU,CAAC,OAAO,sBAAsB,CAAC,CAAC,CAAC,CAAC,GACnD,OAAO,CAAC,IAAI,CAAC,CAOf;AAED,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAChC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,GAAG,SAAS,GACxD,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAKzB;AAED,wBAAsB,aAAa,CACjC,GAAG,EAAE,UAAU,EACf,KAAK,EAAE;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACpD,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CASlC;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,GAAG,EAAE,UAAU,EACf,KAAK,EAAE;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EACrD,KAAK,EAAE,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC,GAC1C,OAAO,CAAC,IAAI,CAAC,CAOf"}

package/dist/rpc/procedures/entry/meta.js

@@ -0,0 +1,65 @@
+import { entries } from "../../../db/schema/entries.js";
+import { findEntryMetaField } from "../../../plugin/manifest.js";
+import { applyMetaPatch, decodeMetaBag as decodeMetaBagCore, filterMetaOrphans as filterMetaOrphansCore, isEmptyMetaPatch, loadMeta, sanitizeMetaForRpc as sanitizeMetaForRpcCore, validateMetaReferencesForRpc, } from "../../meta/core.js";
+/** RPC-facing sanitizer for an entry's meta input, scoped by entry type. */
+export function sanitizeMetaForRpc(registry, entryType, input, errors) {
+    return sanitizeMetaForRpcCore((key) => findEntryMetaField(registry, entryType, key), input, errors);
+}
+/**
+ * Reject a meta patch that writes to a capability-gated field the viewer
+ * can't access. Treats the field's `capability` as a server-side gate so
+ * the API stays honest regardless of admin-side filtering. Deletes count
+ * as writes — you can't blank a value you can't see. Repeater subfields
+ * are NOT recursed: capability gates apply at the top-level field only;
+ * a row's capability is whichever the parent repeater field declares.
+ */
+export function assertEntryMetaCapabilities(registry, entryType, patch, auth, errors) {
+    assertMetaCapabilities(patch, (key) => findEntryMetaField(registry, entryType, key), auth, errors);
+}
+/**
+ * Generic shape — `term.{create,update}` and `user.update` reuse this by
+ * passing their own `findField` lookup so all three surfaces honour the
+ * field-level capability gate uniformly.
+ */
+export function assertMetaCapabilities(patch, findField, auth, errors) {
+    const touched = new Set([...patch.upserts.keys(), ...patch.deletes]);
+    for (const key of touched) {
+        const field = findField(key);
+        if (!field?.capability)
+            continue;
+        if (!auth.can(field.capability)) {
+            throw errors.FORBIDDEN({ data: { capability: field.capability } });
+        }
+    }
+}
+/**
+ * Async second pass on a sanitised entry-meta patch: validates each
+ * reference field's upserted ID against its registered
+ * `LookupAdapter`. RPC procedures call this between
+ * `sanitizeMetaForRpc` and `writeEntryMeta`.
+ */
+export async function validateEntryMetaReferences(ctx, entryType, patch, errors) {
+    await validateMetaReferencesForRpc(ctx, (key) => findEntryMetaField(ctx.plugins, entryType, key), patch, errors);
+}
+export function decodeMetaBag(registry, entry, raw) {
+    return decodeMetaBagCore((key) => findEntryMetaField(registry, entry.type, key), raw);
+}
+export async function loadEntryMeta(ctx, entry) {
+    const decoded = await loadMeta(ctx, entries, entries.id, entry.id, (key) => findEntryMetaField(ctx.plugins, entry.type, key));
+    return filterMetaOrphansCore(ctx, (key) => findEntryMetaField(ctx.plugins, entry.type, key), decoded);
+}
+/**
+ * Apply a meta patch to `entries.meta` and fire `entry:meta_changed`.
+ * Plugins that need to mutate the patch subscribe to
+ * `rpc:entry.{create,update}:input` and mutate `input.meta` there.
+ */
+export async function writeEntryMeta(ctx, entry, patch) {
+    if (isEmptyMetaPatch(patch))
+        return;
+    await applyMetaPatch(ctx, entries, entries.id, entry.id, patch);
+    await ctx.hooks.doAction("entry:meta_changed", entry, {
+        set: Object.fromEntries(patch.upserts),
+        removed: [...patch.deletes],
+    });
+}
+//# sourceMappingURL=meta.js.map

package/dist/rpc/procedures/entry/meta.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"meta.js","sourceRoot":"","sources":["../../../../src/rpc/procedures/entry/meta.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EACL,cAAc,EACd,aAAa,IAAI,iBAAiB,EAClC,iBAAiB,IAAI,qBAAqB,EAC1C,gBAAgB,EAChB,QAAQ,EACR,kBAAkB,IAAI,sBAAsB,EAC5C,4BAA4B,GAC7B,MAAM,oBAAoB,CAAC;AAI5B,4EAA4E;AAC5E,MAAM,UAAU,kBAAkB,CAChC,QAAwB,EACxB,SAAiB,EACjB,KAA0C,EAC1C,MAAoD;IAEpD,OAAO,sBAAsB,CAC3B,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,EACrD,KAAK,EACL,MAAM,CACP,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,2BAA2B,CACzC,QAAwB,EACxB,SAAiB,EACjB,KAAgB,EAChB,IAA0C,EAC1C,MAEC;IAED,sBAAsB,CACpB,KAAK,EACL,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,EACrD,IAAI,EACJ,MAAM,CACP,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAAgB,EAChB,SAAwE,EACxE,IAA0C,EAC1C,MAEC;IAED,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7E,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK,EAAE,UAAU;YAAE,SAAS;QACjC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YAChC,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,GAAe,EACf,SAAiB,EACjB,KAAgB,EAChB,MAAoD;IAEpD,MAAM,4BAA4B,CAChC,GAAG,EACH,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,EACxD,KAAK,EACL,MAAM,CACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,QAAwB,EACxB,KAAgC,EAChC,GAAyD;IAEzD,OAAO,iBAAiB,CACtB,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,EACtD,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAe,EACf,KAAqD;IAErD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CACzE,kBAAkB,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CACjD,CAAC;IACF,OAAO,qBAAqB,CAC1B,GAAG,EACH,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,EACzD,OAAO,CACR,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAe,EACf,KAAqD,EACrD,KAA2C;IAE3C,IAAI,gBAAgB,CAAC,KAAK,CAAC;QAAE,OAAO;IACpC,MAAM,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAChE,MAAM,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,oBAAoB,EAAE,KAAK,EAAE;QACpD,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC;QACtC,OAAO,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC;KAC5B,CAAC,CAAC;AACL,CAAC"}

package/dist/rpc/procedures/entry/publish-scheduled.d.ts

@@ -0,0 +1,21 @@
+import type { AppContext } from "../../../context/app.js";
+/**
+ * True when a `scheduled` write lacks a valid target time. A scheduled entry
+ * must carry a future `publishedAt` — without one the cron can never pick it
+ * up, so the write is rejected rather than silently stranded.
+ */
+export declare function scheduledDateInvalid(status: string | undefined, publishedAt: Date | undefined): boolean;
+/**
+ * Publish every scheduled entry whose target `publishedAt` has arrived,
+ * returning how many were published. Driven by the core `publish-scheduled`
+ * cron task. Each transition flips `status` to `published` (keeping the
+ * scheduled `publishedAt` as the publish time, WordPress-style) and fires the
+ * same lifecycle hooks the editor's publish path does — so cache-purge,
+ * sitemap invalidation, and audit all run.
+ *
+ * Unlike the editor path this skips `entry:before_save` and revision capture:
+ * a cron run has no `ctx.user`, so there's no actor to attribute a revision to
+ * and the content was already snapshotted when it was scheduled.
+ */
+export declare function publishDueScheduledEntries(ctx: AppContext): Promise<number>;
+//# sourceMappingURL=publish-scheduled.d.ts.map

package/dist/rpc/procedures/entry/publish-scheduled.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish-scheduled.d.ts","sourceRoot":"","sources":["../../../../src/rpc/procedures/entry/publish-scheduled.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAS1D;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,WAAW,EAAE,IAAI,GAAG,SAAS,GAC5B,OAAO,CAKT;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,0BAA0B,CAC9C,GAAG,EAAE,UAAU,GACd,OAAO,CAAC,MAAM,CAAC,CAgCjB"}

package/dist/rpc/procedures/entry/publish-scheduled.js

@@ -0,0 +1,50 @@
+import { and, eq, isNotNull, lte } from "../../../db/index.js";
+import { entries } from "../../../db/schema/entries.js";
+import { fireEntryPublished, fireEntryTransition, fireEntryUpdated, } from "./lifecycle.js";
+/**
+ * True when a `scheduled` write lacks a valid target time. A scheduled entry
+ * must carry a future `publishedAt` — without one the cron can never pick it
+ * up, so the write is rejected rather than silently stranded.
+ */
+export function scheduledDateInvalid(status, publishedAt) {
+    return (status === "scheduled" &&
+        (publishedAt === undefined || publishedAt.getTime() <= Date.now()));
+}
+/**
+ * Publish every scheduled entry whose target `publishedAt` has arrived,
+ * returning how many were published. Driven by the core `publish-scheduled`
+ * cron task. Each transition flips `status` to `published` (keeping the
+ * scheduled `publishedAt` as the publish time, WordPress-style) and fires the
+ * same lifecycle hooks the editor's publish path does — so cache-purge,
+ * sitemap invalidation, and audit all run.
+ *
+ * Unlike the editor path this skips `entry:before_save` and revision capture:
+ * a cron run has no `ctx.user`, so there's no actor to attribute a revision to
+ * and the content was already snapshotted when it was scheduled.
+ */
+export async function publishDueScheduledEntries(ctx) {
+    const now = new Date();
+    const due = await ctx.db
+        .select()
+        .from(entries)
+        .where(and(eq(entries.status, "scheduled"), isNotNull(entries.publishedAt), lte(entries.publishedAt, now)));
+    let published = 0;
+    for (const entry of due) {
+        // Re-assert `status='scheduled'` in the write so a manual publish that
+        // raced this run flips the row once and fires hooks once.
+        const flipped = await ctx.db
+            .update(entries)
+            .set({ status: "published" })
+            .where(and(eq(entries.id, entry.id), eq(entries.status, "scheduled")))
+            .returning({ id: entries.id });
+        if (flipped.length === 0)
+            continue;
+        published += 1;
+        const updated = { ...entry, status: "published" };
+        await fireEntryUpdated(ctx, updated, entry);
+        await fireEntryTransition(ctx, updated, entry.status);
+        await fireEntryPublished(ctx, updated);
+    }
+    return published;
+}
+//# sourceMappingURL=publish-scheduled.js.map

package/dist/rpc/procedures/entry/publish-scheduled.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish-scheduled.js","sourceRoot":"","sources":["../../../../src/rpc/procedures/entry/publish-scheduled.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AACxD,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AAExB;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAA0B,EAC1B,WAA6B;IAE7B,OAAO,CACL,MAAM,KAAK,WAAW;QACtB,CAAC,WAAW,KAAK,SAAS,IAAI,WAAW,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CACnE,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,GAAe;IAEf,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,EAAE;SACrB,MAAM,EAAE;SACR,IAAI,CAAC,OAAO,CAAC;SACb,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,EAC/B,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,EAC9B,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAC9B,CACF,CAAC;IAEJ,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QACxB,uEAAuE;QACvE,0DAA0D;QAC1D,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,EAAE;aACzB,MAAM,CAAC,OAAO,CAAC;aACf,GAAG,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;aAC5B,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;aACrE,SAAS,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QACjC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAEnC,SAAS,IAAI,CAAC,CAAC;QACf,MAAM,OAAO,GAAG,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,WAAoB,EAAE,CAAC;QAC3D,MAAM,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAC5C,MAAM,mBAAmB,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACtD,MAAM,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/rpc/procedures/entry/publish.d.ts

@@ -0,0 +1,92 @@
+import * as v from "valibot";
+export declare const publish: import("@orpc/server").DecoratedProcedure<import("@orpc/server").MergedInitialContext<import("../../../index.js").AppContextBase<typeof import("../../../db/schema/index.js")> & import("../../../index.js").AppContextExtensions & Record<never, never>, import("../../../index.js").AppContextBase<typeof import("../../../db/schema/index.js")> & import("../../../index.js").AppContextExtensions & Record<never, never>, import("../../../index.js").AppContext>, import("@orpc/server").MergedCurrentContext<import("../../../index.js").AppContext, import("../../../index.js").AuthenticatedAppContext<typeof import("../../../db/schema/index.js")>>, v.ObjectSchema<{
+    readonly id: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly expectedLiveUpdatedAt: v.DateSchema<undefined>;
+}, undefined>, import("@orpc/server").Schema<{
+    id: number;
+    meta: Record<string, unknown>;
+    createdAt: Date;
+    updatedAt: Date;
+    type: string;
+    parentId: number | null;
+    title: string;
+    slug: string;
+    content: import("../../../index.js").EntryContent | null;
+    excerpt: string | null;
+    status: "draft" | "published" | "scheduled" | "trash";
+    authorId: number;
+    sortOrder: number;
+    publishedAt: Date | null;
+}, {
+    id: number;
+    meta: Record<string, unknown>;
+    createdAt: Date;
+    updatedAt: Date;
+    type: string;
+    parentId: number | null;
+    title: string;
+    slug: string;
+    content: import("../../../index.js").EntryContent | null;
+    excerpt: string | null;
+    status: "draft" | "published" | "scheduled" | "trash";
+    authorId: number;
+    sortOrder: number;
+    publishedAt: Date | null;
+}>, import("@orpc/server").MergedErrorMap<Record<never, never>, {
+    readonly UNAUTHORIZED: {
+        readonly message: "Authentication required";
+    };
+    readonly BAD_REQUEST: {
+        readonly message: "Invalid input";
+        readonly data: v.ObjectSchema<{
+            readonly reason: v.StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly FORBIDDEN: {
+        readonly message: "Permission denied";
+        readonly data: v.ObjectSchema<{
+            readonly capability: v.StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly NOT_FOUND: {
+        readonly message: "Resource not found";
+        readonly data: v.ObjectSchema<{
+            readonly kind: v.StringSchema<undefined>;
+            readonly id: v.UnionSchema<[v.StringSchema<undefined>, v.NumberSchema<undefined>], undefined>;
+        }, undefined>;
+    };
+    readonly CONFLICT: {
+        readonly message: "Resource conflict";
+        readonly data: v.ObjectSchema<{
+            readonly reason: v.StringSchema<undefined>;
+            readonly key: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        }, undefined>;
+    };
+    readonly PAYLOAD_TOO_LARGE: {
+        readonly message: "Payload too large";
+        readonly data: v.ObjectSchema<{
+            readonly limit: v.NumberSchema<undefined>;
+            readonly received: v.OptionalSchema<v.NumberSchema<undefined>, undefined>;
+        }, undefined>;
+    };
+    readonly UNSUPPORTED_MEDIA_TYPE: {
+        readonly message: "Unsupported media type";
+        readonly data: v.ObjectSchema<{
+            readonly mime: v.StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly INVALID_BLOCK_CONTENT: {
+        readonly message: "Block content failed registry validation";
+        readonly data: v.ObjectSchema<{
+            readonly issues: v.ArraySchema<v.ObjectSchema<{
+                readonly code: v.StringSchema<undefined>;
+                readonly message: v.StringSchema<undefined>;
+                readonly path: v.StringSchema<undefined>;
+                readonly nodeName: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+                readonly attributeName: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+                readonly markName: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+            }, undefined>, undefined>;
+        }, undefined>;
+    };
+}>, Record<never, never>>;
+//# sourceMappingURL=publish.d.ts.map

package/dist/rpc/procedures/entry/publish.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish.d.ts","sourceRoot":"","sources":["../../../../src/rpc/procedures/entry/publish.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAC;AAuC7B,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAyEhB,CAAC"}

package/dist/rpc/procedures/entry/publish.js

@@ -0,0 +1,111 @@
+import * as v from "valibot";
+import { eq } from "../../../db/index.js";
+import { entries } from "../../../db/schema/entries.js";
+import { deleteAutosave, getAutosave } from "../../../revisions/repository.js";
+import { isReservedType } from "../../../revisions/slug-codec.js";
+import { authenticated } from "../../authenticated.js";
+import { base } from "../../base.js";
+import { idParam } from "../../validation.js";
+import { assertExpectedLiveUpdatedAt } from "./concurrency.js";
+import { applyEntryBeforeSave, captureRevisionIfSupported, entryCapability, fireEntryTransition, fireEntryUpdated, } from "./lifecycle.js";
+const publishInput = v.object({
+    id: idParam,
+    // Required for the publish path — promoting a pending draft over a
+    // live row is the canonical concurrency battleground. Callers must
+    // round-trip the live `updatedAt` they observed when loading the
+    // editor; mismatched tokens fail loudly rather than silently
+    // clobbering a parallel write.
+    expectedLiveUpdatedAt: v.date(),
+});
+// Promotes the caller's autosave row onto the live entry. Mirrors the
+// transactional shape of `entry.update` minus the pre-save filter
+// (the autosave was already filtered when it was written): copy the
+// pending fields onto live, capture a revision via the existing
+// revisions-on-live-write semantics, delete the autosave.
+//
+// Errors:
+//   CONFLICT { reason: "stale_expected_updated_at" }
+//   NOT_FOUND  - no live entry / reserved-type row
+//   FORBIDDEN  - missing publish capability
+//   NO_PENDING_DRAFT - caller has no autosave for this entry
+export const publish = base
+    .use(authenticated)
+    .input(publishInput)
+    .handler(async ({ input, context, errors }) => {
+    const live = await context.db.query.entries.findFirst({
+        where: eq(entries.id, input.id),
+    });
+    if (!live || isReservedType(live.type)) {
+        throw errors.NOT_FOUND({ data: { kind: "entry", id: input.id } });
+    }
+    const publishCapability = entryCapability(live.type, "publish");
+    if (!context.auth.can(publishCapability)) {
+        throw errors.FORBIDDEN({ data: { capability: publishCapability } });
+    }
+    assertExpectedLiveUpdatedAt(input.expectedLiveUpdatedAt, live.updatedAt, {
+        stale: () => {
+            throw errors.CONFLICT({
+                data: { reason: "stale_expected_updated_at" },
+            });
+        },
+    });
+    const autosave = await getAutosave(context.db, {
+        entryId: live.id,
+        authorId: context.user.id,
+    });
+    if (!autosave) {
+        throw errors.BAD_REQUEST({ data: { reason: "no_pending_draft" } });
+    }
+    // Copy the autosave fields onto the live row. Slug + parentId
+    // stay anchored to live (the autosave envelope carries them
+    // only for restore-from-revision flows, not for publish, which
+    // promotes content onto an already-existing slug).
+    const patch = {
+        title: autosave.title,
+        content: autosave.content,
+        excerpt: autosave.excerpt,
+        // Autosave's meta carries the snapshot envelope — strip it
+        // before writing back so the live row doesn't accrue a stale
+        // envelope reference.
+        meta: stripSnapshotEnvelope(autosave.meta),
+    };
+    const prepared = await applyEntryBeforeSave(context, live.type, {
+        ...live,
+        ...patch,
+    });
+    const toWrite = {
+        title: prepared.title,
+        content: prepared.content,
+        excerpt: prepared.excerpt,
+        meta: prepared.meta,
+    };
+    const [updatedRow] = await context.db
+        .update(entries)
+        .set(toWrite)
+        .where(eq(entries.id, live.id))
+        .returning();
+    if (!updatedRow) {
+        throw errors.CONFLICT({ data: { reason: "update_failed" } });
+    }
+    // Drop the autosave before firing hooks so a subscriber that
+    // re-reads the row state observes a clean "no pending draft"
+    // post-publish.
+    await deleteAutosave(context.db, {
+        entryId: live.id,
+        authorId: context.user.id,
+    });
+    await fireEntryUpdated(context, updatedRow, live);
+    await fireEntryTransition(context, updatedRow, live.status);
+    await captureRevisionIfSupported(context, updatedRow);
+    return updatedRow;
+});
+// Snapshot envelope key — duplicated rather than imported to keep this
+// file's dependency surface tight. Worth folding into a shared helper
+// if a third consumer appears.
+const SNAPSHOT_META_KEY = "__plumix_snapshot";
+function stripSnapshotEnvelope(meta) {
+    const next = { ...meta };
+    delete next[SNAPSHOT_META_KEY];
+    return next;
+}
+//# sourceMappingURL=publish.js.map

package/dist/rpc/procedures/entry/publish.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish.js","sourceRoot":"","sources":["../../../../src/rpc/procedures/entry/publish.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAC;AAE7B,OAAO,EAAE,EAAE,EAAE,MAAM,sBAAsB,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,eAAe,EACf,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AAExB,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,EAAE,EAAE,OAAO;IACX,mEAAmE;IACnE,mEAAmE;IACnE,iEAAiE;IACjE,6DAA6D;IAC7D,+BAA+B;IAC/B,qBAAqB,EAAE,CAAC,CAAC,IAAI,EAAE;CAChC,CAAC,CAAC;AAEH,sEAAsE;AACtE,kEAAkE;AAClE,oEAAoE;AACpE,gEAAgE;AAChE,0DAA0D;AAC1D,EAAE;AACF,UAAU;AACV,qDAAqD;AACrD,mDAAmD;AACnD,4CAA4C;AAC5C,6DAA6D;AAC7D,MAAM,CAAC,MAAM,OAAO,GAAG,IAAI;KACxB,GAAG,CAAC,aAAa,CAAC;KAClB,KAAK,CAAC,YAAY,CAAC;KACnB,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;IAC5C,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;QACpD,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC;KAChC,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,iBAAiB,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAChE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACzC,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,2BAA2B,CAAC,KAAK,CAAC,qBAAqB,EAAE,IAAI,CAAC,SAAS,EAAE;QACvE,KAAK,EAAE,GAAG,EAAE;YACV,MAAM,MAAM,CAAC,QAAQ,CAAC;gBACpB,IAAI,EAAE,EAAE,MAAM,EAAE,2BAA2B,EAAE;aAC9C,CAAC,CAAC;QACL,CAAC;KACF,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,EAAE,EAAE;QAC7C,OAAO,EAAE,IAAI,CAAC,EAAE;QAChB,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE;KAC1B,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,MAAM,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,8DAA8D;IAC9D,4DAA4D;IAC5D,+DAA+D;IAC/D,mDAAmD;IACnD,MAAM,KAAK,GAAG;QACZ,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,2DAA2D;QAC3D,6DAA6D;QAC7D,sBAAsB;QACtB,IAAI,EAAE,qBAAqB,CAAC,QAAQ,CAAC,IAAI,CAAC;KAC3C,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;QAC9D,GAAG,IAAI;QACP,GAAG,KAAK;KACT,CAAC,CAAC;IACH,MAAM,OAAO,GAAG;QACd,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,IAAI,EAAE,QAAQ,CAAC,IAAI;KACpB,CAAC;IACF,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE;SAClC,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,OAAO,CAAC;SACZ,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;SAC9B,SAAS,EAAE,CAAC;IACf,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,6DAA6D;IAC7D,6DAA6D;IAC7D,gBAAgB;IAChB,MAAM,cAAc,CAAC,OAAO,CAAC,EAAE,EAAE;QAC/B,OAAO,EAAE,IAAI,CAAC,EAAE;QAChB,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE;KAC1B,CAAC,CAAC;IAEH,MAAM,gBAAgB,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IAClD,MAAM,mBAAmB,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5D,MAAM,0BAA0B,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACtD,OAAO,UAAU,CAAC;AACpB,CAAC,CAAC,CAAC;AAEL,uEAAuE;AACvE,sEAAsE;AACtE,+BAA+B;AAC/B,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AAE9C,SAAS,qBAAqB,CAC5B,IAAuC;IAEvC,MAAM,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;IACzB,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC/B,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/rpc/procedures/entry/read-errors.d.ts

@@ -0,0 +1,29 @@
+/**
+ * The subset of oRPC typed-error constructors the entries read path maps onto.
+ * Structural so the mapper is unit-testable with a plain stub — no oRPC runtime.
+ */
+export interface EntryReadErrorConstructors {
+    NOT_FOUND(opts: {
+        data: {
+            kind: string;
+            id: number | string;
+        };
+    }): Error;
+    FORBIDDEN(opts: {
+        data: {
+            capability: string;
+        };
+    }): Error;
+    BAD_REQUEST(opts: {
+        data: {
+            reason: string;
+        };
+    }): Error;
+}
+/**
+ * Translate an entries-read domain error into the oRPC typed error to throw,
+ * preserving the wire contract the SPA already handles. Non-domain errors pass
+ * through unchanged for the caller to rethrow.
+ */
+export declare function toRpcEntryReadError(error: unknown, errors: EntryReadErrorConstructors): unknown;
+//# sourceMappingURL=read-errors.d.ts.map

package/dist/rpc/procedures/entry/read-errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-errors.d.ts","sourceRoot":"","sources":["../../../../src/rpc/procedures/entry/read-errors.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,WAAW,0BAA0B;IACzC,SAAS,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAAA;SAAE,CAAA;KAAE,GAAG,KAAK,CAAC;IACxE,SAAS,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE;YAAE,UAAU,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,GAAG,KAAK,CAAC;IACzD,WAAW,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE;YAAE,MAAM,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,GAAG,KAAK,CAAC;CACxD;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,0BAA0B,GACjC,OAAO,CAcT"}

package/dist/rpc/procedures/entry/read-errors.js

@@ -0,0 +1,23 @@
+import { EntryReadError } from "../../../entries/errors.js";
+/**
+ * Translate an entries-read domain error into the oRPC typed error to throw,
+ * preserving the wire contract the SPA already handles. Non-domain errors pass
+ * through unchanged for the caller to rethrow.
+ */
+export function toRpcEntryReadError(error, errors) {
+    if (!(error instanceof EntryReadError))
+        return error;
+    switch (error.data.code) {
+        case "not_found":
+            return errors.NOT_FOUND({
+                data: { kind: "entry", id: error.data.entryId },
+            });
+        case "forbidden":
+            return errors.FORBIDDEN({
+                data: { capability: error.data.capability },
+            });
+        case "reserved_type":
+            return errors.BAD_REQUEST({ data: { reason: "reserved_type" } });
+    }
+}
+//# sourceMappingURL=read-errors.js.map

package/dist/rpc/procedures/entry/read-errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-errors.js","sourceRoot":"","sources":["../../../../src/rpc/procedures/entry/read-errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAY5D;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAc,EACd,MAAkC;IAElC,IAAI,CAAC,CAAC,KAAK,YAAY,cAAc,CAAC;QAAE,OAAO,KAAK,CAAC;IACrD,QAAQ,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,WAAW;YACd,OAAO,MAAM,CAAC,SAAS,CAAC;gBACtB,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE;aAChD,CAAC,CAAC;QACL,KAAK,WAAW;YACd,OAAO,MAAM,CAAC,SAAS,CAAC;gBACtB,IAAI,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE;aAC5C,CAAC,CAAC;QACL,KAAK,eAAe;YAClB,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;IACrE,CAAC;AACH,CAAC"}