@beechcms/core 0.8.0 → 0.9.0

package/dist/content/content.repository.d.ts

@@ -1,4 +1,4 @@
-import { Seed, SelectOptions } from '../engine/types.js';
+import { Seed, SelectOptions, TrashedMode } from '../engine/types.js';
 /**
  * One row of the cross-seed pending-drafts overview. Aggregates the minimum a
  * reviewer needs to triage a draft without opening it: which seed it belongs to,
@@ -62,6 +62,59 @@ export declare class HookValidationError extends RepositoryError {
         message: string;
     }>);
 }
+/**
+ * Thrown by `publishDraft` when the live entry was written after the draft captured its
+ * `live_snapshot_at`. Publishing would overwrite that write, so the repository refuses and the
+ * caller must discard the draft or re-create it from the current live version.
+ * Mapped to 409 Conflict by the API problem-mapper.
+ */
+export declare class DraftConflictError extends RepositoryError {
+    readonly seedSlug: string;
+    readonly entryId: string;
+    readonly snapshotAt: number | null;
+    readonly liveUpdatedAt: number;
+    constructor(params: {
+        seedSlug: string;
+        entryId: string;
+        snapshotAt: number | null;
+        liveUpdatedAt: number;
+    });
+}
+/**
+ * Thrown by `update` when the caller supplied `options.ifMatch` and the live row's
+ * `updated_at` no longer matches it — another writer committed in between.
+ * Mapped to 409 Conflict by the API problem-mapper.
+ */
+export declare class EntryConflictError extends RepositoryError {
+    readonly seedSlug: string;
+    readonly entryId: string;
+    readonly expectedUpdatedAt: number;
+    readonly actualUpdatedAt: number;
+    constructor(params: {
+        seedSlug: string;
+        entryId: string;
+        expectedUpdatedAt: number;
+        actualUpdatedAt: number;
+    });
+}
+/**
+ * Thrown by `saveDraft` when the caller supplied `options.ifMatch` and the pending draft
+ * row's `updated_at` no longer matches it — another writer saved a draft in between, and
+ * blindly merging on top of it would silently drop that writer's fields.
+ * Mapped to 409 Conflict by the API problem-mapper.
+ */
+export declare class DraftSaveConflictError extends RepositoryError {
+    readonly seedSlug: string;
+    readonly entryId: string;
+    readonly expectedUpdatedAt: number;
+    readonly actualUpdatedAt: number;
+    constructor(params: {
+        seedSlug: string;
+        entryId: string;
+        expectedUpdatedAt: number;
+        actualUpdatedAt: number;
+    });
+}
 export type BulkFieldUpdate = {
     kind: 'set';
     value: unknown;
@@ -85,6 +138,12 @@ export interface RepositoryOptions {
         role?: string;
         email?: string;
     };
+    /**
+     * Optimistic concurrency guard for `update`: the `updated_at` the caller last read.
+     * When set, the write only applies if the live row's `updated_at` still matches;
+     * otherwise `update` throws {@link EntryConflictError}.
+     */
+    ifMatch?: number;
 }
 /**
  * Declarative multi-write operation translated into a single `db.batch` call.
@@ -121,6 +180,21 @@ export type BatchWrite = {
         max?: number;
     };
 };
+/** Everything a purge caller needs to finish cleanup outside the database. */
+export interface PurgeResult {
+    /** The row as it existed immediately before erasure — the source of the R2 media keys. */
+    row: Record<string, any>;
+    /** True when a ledger event was appended. False only for a seed without `softDelete`. */
+    ledgerWritten: boolean;
+}
+/** Per-id outcome of a bulk trash operation, mirroring `bulkUpdate`'s shape. */
+export interface BulkDeleteResult {
+    succeeded: string[];
+    failed: Array<{
+        id: string;
+        reason: string;
+    }>;
+}
 /**
  * Interface defining the standard operations for content persistence.
  * This is platform-agnostic and should be implemented for specific databases (e.g., D1).
@@ -135,14 +209,28 @@ export interface ContentRepository {
     }>;
     /**
      * Finds a single entry by its unique ID.
+     * Trashed rows are invisible unless `options.trashed` says otherwise.
      * Throws EntryNotFoundError if not found.
      */
-    findById(seed: Seed, id: string): Promise<Record<string, any>>;
+    findById(seed: Seed, id: string, options?: {
+        trashed?: TrashedMode;
+    }): Promise<Record<string, any>>;
     /**
      * Finds a single entry by its unique slug.
      * Throws EntryNotFoundError if not found.
      */
     findBySlug(seed: Seed, slug: string): Promise<Record<string, any>>;
+    /**
+     * Resolves the parent entry ids that reference any of `targetIds` through a MULTI relation
+     * branch (junction table). Single-value relations need no lookup — their target id lives in a
+     * column on the parent row and is filterable directly.
+     *
+     * Returns at most `limit` distinct parent ids, in no guaranteed order. Callers that must
+     * distinguish "complete" from "truncated" pass `limit = cap + 1` and compare the length.
+     *
+     * @throws RepositoryError if `branchAlias` is not a `multiple: true` relation branch of `seed`.
+     */
+    findParentIdsByRelation(seed: Seed, branchAlias: string, targetIds: string[], limit: number): Promise<string[]>;
     /**
      * Computes facets (status counts and distinct tags) for a content type.
      */
@@ -158,6 +246,7 @@ export interface ContentRepository {
     /**
      * Partially updates an existing entry in the live table.
      * Throws EntryNotFoundError if the ID does not exist.
+     * Throws EntryConflictError if `options.ifMatch` is set and no longer matches the live row's `updated_at`.
      */
     update(seed: Seed, id: string, data: Record<string, any>, status?: string, options?: RepositoryOptions): Promise<void>;
     /**
@@ -187,9 +276,17 @@ export interface ContentRepository {
     /**
      * Atomically applies an axis-value patch AND a kanban_positions upsert in one DB batch (KB-S04e).
      * `patch` is null for same-column reorders (position only).
+     *
+     * @param ctx.ifMatch Optimistic concurrency guard for the axis-value patch: the `updated_at`
+     *   the caller last read. When set and `patch` is non-null, the write only applies if the live
+     *   row's `updated_at` still matches; otherwise throws {@link EntryConflictError}. Ignored when
+     *   `patch` is null, since a position-only reorder does not read-modify-write column data.
+     * @throws EntryConflictError if `ctx.ifMatch` is set, `patch` is non-null, and the live row's
+     *   `updated_at` no longer matches it.
      */
     updateWithKanbanPosition(seed: Seed, id: string, patch: Record<string, unknown> | null, position: string, axisBranchId: string, ctx: {
         actor: string;
+        ifMatch?: number;
     }): Promise<{
         success: boolean;
     }>;
@@ -200,13 +297,21 @@ export interface ContentRepository {
     runBatch(operations: BatchWrite[]): Promise<void>;
     /**
      * Saves or updates a pending draft in the mirror table.
+     * Throws DraftSaveConflictError if `options.ifMatch` is set and no longer matches the
+     * pending draft row's `updated_at`.
      */
-    saveDraft(seed: Seed, entryId: string, data: Record<string, any>): Promise<void>;
+    saveDraft(seed: Seed, entryId: string, data: Record<string, any>, options?: RepositoryOptions): Promise<void>;
     /**
      * Retrieves the pending draft for a given entry.
      * Returns null if no draft exists.
      */
     getDraft(seed: Seed, entryId: string): Promise<Record<string, any> | null>;
+    /**
+     * Retrieves the pending draft row's `updated_at`, for use as an optimistic-concurrency
+     * guard by callers that read the draft before merging into it.
+     * Returns null if no draft exists (or drafts are disallowed for the seed).
+     */
+    getDraftUpdatedAt(seed: Seed, entryId: string): Promise<number | null>;
     /**
      * Atomic promotion of a draft to the live table.
      * Must use a transaction (db.batch) to update live and delete draft.
@@ -243,5 +348,51 @@ export interface ContentRepository {
             reason: string;
         }>;
     }>;
+    /**
+     * Reversible delete: stamps `deleted_at` and returns the row as it was.
+     * Runs `beforeDelete`/`afterDelete`, exactly like `delete`.
+     * Leaves junction rows, `_drafts` rows and R2 media untouched — a trashed entry must be
+     * restorable whole.
+     * @throws RepositoryError if `seed.softDelete` is not true.
+     * @throws EntryNotFoundError if no live row with `id` exists.
+     */
+    softDelete(seed: Seed, id: string, options?: RepositoryOptions): Promise<{
+        row: Record<string, any>;
+    }>;
+    /**
+     * Clears `deleted_at`. When the entry's slug was taken by a live entry in the meantime the
+     * UNIQUE constraint rejects the update; the implementation catches it and restores under an
+     * auto-renamed slug rather than failing the operation (feature brief §4).
+     * @returns The restored row, carrying the slug it actually ended up with.
+     * @throws EntryNotFoundError if no TRASHED row with `id` exists.
+     */
+    restore(seed: Seed, id: string, options?: RepositoryOptions): Promise<{
+        row: Record<string, any>;
+    }>;
+    /**
+     * Irreversible erasure: runs `beforeDelete`, reads the row, deletes it (junction and
+     * `_drafts` rows follow via ON DELETE CASCADE), appends the ledger event, runs `afterDelete`.
+     * Works on a live row and on a trashed one.
+     * R2 media deletion is NOT performed here — the caller owns it (VSA: no external I/O in the
+     * repository beyond the ledger port).
+     * @throws EntryNotFoundError if no row with `id` exists.
+     */
+    purge(seed: Seed, id: string, options?: RepositoryOptions): Promise<PurgeResult>;
+    /** `restore` applied per id. Never partially fails the batch: each id reports its own outcome. */
+    bulkRestore(seed: Seed, ids: string[], options?: RepositoryOptions): Promise<BulkDeleteResult>;
+    /**
+     * `purge` applied per id. Returns the purged rows so the caller can collect R2 media keys.
+     */
+    bulkPurge(seed: Seed, ids: string[], options?: RepositoryOptions): Promise<BulkDeleteResult & {
+        rows: Record<string, any>[];
+    }>;
+    /**
+     * Pure query, no side effects: ids of trashed entries whose retention window has elapsed
+     * (`deleted_at + seed.retentionDays * 86400 <= now`).
+     * Returns [] when the seed has no `retentionDays` or no `softDelete`.
+     * Deliberately NOT wired to any scheduler — the recurring-automation adapter is future work
+     * (feature brief §2). `now` is supplied by the caller's `IClock`; never read the clock here.
+     */
+    findExpiredByRetention(seed: Seed, now: number, limit: number): Promise<string[]>;
 }
 //# sourceMappingURL=content.repository.d.ts.map

package/dist/content/content.repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"content.repository.d.ts","sourceRoot":"","sources":["../../src/content/content.repository.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAExD;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE;QACd,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;QACnB,KAAK,EAAE,MAAM,CAAA;KACd,CAAA;CACF;AAED;;GAEG;AACH,qBAAa,eAAgB,SAAQ,KAAK;IACJ,KAAK,CAAC,EAAE,OAAO;gBAAvC,OAAO,EAAE,MAAM,EAAS,KAAK,CAAC,EAAE,OAAO,YAAA;CAIpD;AAED;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,eAAe;gBACzC,OAAO,EAAE,MAAM;CAI5B;AAED;;GAEG;AACH,qBAAa,iBAAkB,SAAQ,eAAe;gBACxC,OAAO,EAAE,MAAM;CAI5B;AAED;;;GAGG;AACH,qBAAa,2BAA4B,SAAQ,eAAe;IAC9D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;gBAEV,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;CASzE;AAED;;;GAGG;AACH,qBAAa,mBAAoB,SAAQ,eAAe;IACtD,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;gBAE/C,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAKhF;AAED,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,CAAA;AAE7C;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CACtD;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;CAAE,GACnG;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACtF;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,IAAI,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE;QAAE,IAAI,EAAE,WAAW,GAAG,WAAW,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,OAAO,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAA;AAE/K;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAEtG;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAA;IAE9D;;;OAGG;IACH,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAA;IAElE;;OAEG;IACH,SAAS,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC;QAC7B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;KACvC,CAAC,CAAA;IAEF;;;OAGG;IACH,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEnI;;;OAGG;IACH,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEtH;;;;OAIG;IACH,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;KAAE,CAAC,CAAA;IAElG;;;;;;OAMG;IACH,WAAW,CACT,IAAI,EAAE,IAAI,EACV,EAAE,EAAE,MAAM,EACV,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE;QAAE,IAAI,EAAE,WAAW,GAAG,WAAW,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAC7D,OAAO,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,GACvC,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAEhC;;;OAGG;IACH,wBAAwB,CACtB,IAAI,EAAE,IAAI,EACV,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,EACrC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,GAAG,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GACrB,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;IAEhC;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEjD;;OAEG;IACH,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhF;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,CAAA;IAE1E;;;OAGG;IACH,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAExD;;OAEG;IACH,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEvD;;OAEG;IACH,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAE1E;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAEvD;;;;;OAKG;IACH,iBAAiB,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAA;IAEzD;;;;OAIG;IACH,UAAU,CACR,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,MAAM,EAAE,EACb,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GACtC,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,KAAK,CAAC;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC,CAAA;CAC/E"}
+{"version":3,"file":"content.repository.d.ts","sourceRoot":"","sources":["../../src/content/content.repository.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAErE;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE;QACd,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;QACnB,KAAK,EAAE,MAAM,CAAA;KACd,CAAA;CACF;AAED;;GAEG;AACH,qBAAa,eAAgB,SAAQ,KAAK;IACJ,KAAK,CAAC,EAAE,OAAO;gBAAvC,OAAO,EAAE,MAAM,EAAS,KAAK,CAAC,EAAE,OAAO,YAAA;CAIpD;AAED;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,eAAe;gBACzC,OAAO,EAAE,MAAM;CAI5B;AAED;;GAEG;AACH,qBAAa,iBAAkB,SAAQ,eAAe;gBACxC,OAAO,EAAE,MAAM;CAI5B;AAED;;;GAGG;AACH,qBAAa,2BAA4B,SAAQ,eAAe;IAC9D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;gBAEV,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;CASzE;AAED;;;GAGG;AACH,qBAAa,mBAAoB,SAAQ,eAAe;IACtD,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;gBAE/C,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAKhF;AAED;;;;;GAKG;AACH,qBAAa,kBAAmB,SAAQ,eAAe;IACrD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;gBAElB,MAAM,EAAE;QAClB,QAAQ,EAAE,MAAM,CAAA;QAChB,OAAO,EAAE,MAAM,CAAA;QACf,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;QACzB,aAAa,EAAE,MAAM,CAAA;KACtB;CAWF;AAED;;;;GAIG;AACH,qBAAa,kBAAmB,SAAQ,eAAe;IACrD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;gBAEpB,MAAM,EAAE;QAClB,QAAQ,EAAE,MAAM,CAAA;QAChB,OAAO,EAAE,MAAM,CAAA;QACf,iBAAiB,EAAE,MAAM,CAAA;QACzB,eAAe,EAAE,MAAM,CAAA;KACxB;CAWF;AAED;;;;;GAKG;AACH,qBAAa,sBAAuB,SAAQ,eAAe;IACzD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;gBAEpB,MAAM,EAAE;QAClB,QAAQ,EAAE,MAAM,CAAA;QAChB,OAAO,EAAE,MAAM,CAAA;QACf,iBAAiB,EAAE,MAAM,CAAA;QACzB,eAAe,EAAE,MAAM,CAAA;KACxB;CAWF;AAED,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,CAAA;AAE7C;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACrD;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;CAAE,GACnG;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACtF;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,IAAI,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE;QAAE,IAAI,EAAE,WAAW,GAAG,WAAW,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,OAAO,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAA;AAE/K,8EAA8E;AAC9E,MAAM,WAAW,WAAW;IAC1B,0FAA0F;IAC1F,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACxB,yFAAyF;IACzF,aAAa,EAAE,OAAO,CAAA;CACvB;AAED,gFAAgF;AAChF,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,MAAM,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAC9C;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAEtG;;;;OAIG;IACH,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAA;IAEnG;;;OAGG;IACH,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAA;IAElE;;;;;;;;;OASG;IACH,uBAAuB,CACrB,IAAI,EAAE,IAAI,EACV,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EAAE,EACnB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAEpB;;OAEG;IACH,SAAS,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC;QAC7B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;KACvC,CAAC,CAAA;IAEF;;;OAGG;IACH,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEnI;;;;OAIG;IACH,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEtH;;;;OAIG;IACH,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;KAAE,CAAC,CAAA;IAElG;;;;;;OAMG;IACH,WAAW,CACT,IAAI,EAAE,IAAI,EACV,EAAE,EAAE,MAAM,EACV,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE;QAAE,IAAI,EAAE,WAAW,GAAG,WAAW,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAC7D,OAAO,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,GACvC,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAEhC;;;;;;;;;;OAUG;IACH,wBAAwB,CACtB,IAAI,EAAE,IAAI,EACV,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,EACrC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,GAAG,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GACvC,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;IAEhC;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEjD;;;;OAIG;IACH,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE7G;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,CAAA;IAE1E;;;;OAIG;IACH,iBAAiB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IAEtE;;;OAGG;IACH,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAExD;;OAEG;IACH,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEvD;;OAEG;IACH,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAE1E;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAEvD;;;;;OAKG;IACH,iBAAiB,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAA;IAEzD;;;;OAIG;IACH,UAAU,CACR,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,MAAM,EAAE,EACb,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GACtC,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,KAAK,CAAC;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC,CAAA;IAE9E;;;;;;;OAOG;IACH,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;KAAE,CAAC,CAAA;IAEtG;;;;;;OAMG;IACH,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;KAAE,CAAC,CAAA;IAEnG;;;;;;;OAOG;IACH,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;IAEhF,kGAAkG;IAClG,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAE9F;;OAEG;IACH,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CACxE,gBAAgB,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAA;KAAE,CACnD,CAAA;IAED;;;;;;OAMG;IACH,sBAAsB,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;CAClF"}

package/dist/content/content.repository.js

@@ -57,3 +57,65 @@ export class HookValidationError extends RepositoryError {
         this.fields = fields;
     }
 }
+/**
+ * Thrown by `publishDraft` when the live entry was written after the draft captured its
+ * `live_snapshot_at`. Publishing would overwrite that write, so the repository refuses and the
+ * caller must discard the draft or re-create it from the current live version.
+ * Mapped to 409 Conflict by the API problem-mapper.
+ */
+export class DraftConflictError extends RepositoryError {
+    seedSlug;
+    entryId;
+    snapshotAt;
+    liveUpdatedAt;
+    constructor(params) {
+        super(`Draft conflict: entry '${params.entryId}' in '${params.seedSlug}' was modified at ` +
+            `${params.liveUpdatedAt}, after the draft snapshot ${params.snapshotAt}`);
+        this.name = 'DraftConflictError';
+        this.seedSlug = params.seedSlug;
+        this.entryId = params.entryId;
+        this.snapshotAt = params.snapshotAt;
+        this.liveUpdatedAt = params.liveUpdatedAt;
+    }
+}
+/**
+ * Thrown by `update` when the caller supplied `options.ifMatch` and the live row's
+ * `updated_at` no longer matches it — another writer committed in between.
+ * Mapped to 409 Conflict by the API problem-mapper.
+ */
+export class EntryConflictError extends RepositoryError {
+    seedSlug;
+    entryId;
+    expectedUpdatedAt;
+    actualUpdatedAt;
+    constructor(params) {
+        super(`Entry conflict: entry '${params.entryId}' in '${params.seedSlug}' was modified at ` +
+            `${params.actualUpdatedAt}, expected ${params.expectedUpdatedAt}`);
+        this.name = 'EntryConflictError';
+        this.seedSlug = params.seedSlug;
+        this.entryId = params.entryId;
+        this.expectedUpdatedAt = params.expectedUpdatedAt;
+        this.actualUpdatedAt = params.actualUpdatedAt;
+    }
+}
+/**
+ * Thrown by `saveDraft` when the caller supplied `options.ifMatch` and the pending draft
+ * row's `updated_at` no longer matches it — another writer saved a draft in between, and
+ * blindly merging on top of it would silently drop that writer's fields.
+ * Mapped to 409 Conflict by the API problem-mapper.
+ */
+export class DraftSaveConflictError extends RepositoryError {
+    seedSlug;
+    entryId;
+    expectedUpdatedAt;
+    actualUpdatedAt;
+    constructor(params) {
+        super(`Draft save conflict: draft for entry '${params.entryId}' in '${params.seedSlug}' was saved at ` +
+            `${params.actualUpdatedAt}, expected ${params.expectedUpdatedAt}`);
+        this.name = 'DraftSaveConflictError';
+        this.seedSlug = params.seedSlug;
+        this.entryId = params.entryId;
+        this.expectedUpdatedAt = params.expectedUpdatedAt;
+        this.actualUpdatedAt = params.actualUpdatedAt;
+    }
+}

package/dist/content/deletion-ledger.d.ts

@@ -0,0 +1,39 @@
+/**
+ * The GDPR erasure record. It lives OUTSIDE D1 on purpose: a D1 Time Travel restore rewinds
+ * every table it wrote, including any local ledger, which would defeat the one guarantee this
+ * record exists to give — that an erasure stays erased.
+ */
+export interface DeletionLedgerEvent {
+    /** Seed slug the purged entry belonged to. */
+    seedSlug: string;
+    /** Entry id, the reconciliation key against a restored `content_{slug}` row. */
+    entryId: string;
+    /** Entry slug at purge time. Diagnostic only; `entryId` is the identity. */
+    entrySlug: string | null;
+    /** Unix seconds (`IClock`), never `Date.now()`. */
+    purgedAt: number;
+    /** Who ordered the purge. `null` for a system/reconciliation purge. */
+    actorId: string | null;
+    /** 'purge' = operator action; 'reconcile' = re-applied after a restore. */
+    reason: 'purge' | 'reconcile';
+}
+/**
+ * Append-only erasure log. `append` must be durable before the caller reports success:
+ * a purge whose event was lost is a purge that a restore can silently undo.
+ */
+export interface IDeletionLedger {
+    /** Records one erasure. Throws if the write did not land. */
+    append(event: DeletionLedgerEvent): Promise<void>;
+    /**
+     * Streams recorded erasures for one seed, newest-first is NOT guaranteed.
+     * `cursor` is opaque and comes from the previous page's `nextCursor`.
+     */
+    list(seedSlug: string, options?: {
+        limit?: number;
+        cursor?: string;
+    }): Promise<{
+        events: DeletionLedgerEvent[];
+        nextCursor?: string;
+    }>;
+}
+//# sourceMappingURL=deletion-ledger.d.ts.map

package/dist/content/deletion-ledger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deletion-ledger.d.ts","sourceRoot":"","sources":["../../src/content/deletion-ledger.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,8CAA8C;IAC9C,QAAQ,EAAE,MAAM,CAAA;IAChB,gFAAgF;IAChF,OAAO,EAAE,MAAM,CAAA;IACf,4EAA4E;IAC5E,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,mDAAmD;IACnD,QAAQ,EAAE,MAAM,CAAA;IAChB,uEAAuE;IACvE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,2EAA2E;IAC3E,MAAM,EAAE,OAAO,GAAG,WAAW,CAAA;CAC9B;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,6DAA6D;IAC7D,MAAM,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACjD;;;OAGG;IACH,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAC7E,MAAM,EAAE,mBAAmB,EAAE,CAAA;QAC7B,UAAU,CAAC,EAAE,MAAM,CAAA;KACpB,CAAC,CAAA;CACH"}

package/dist/content/deletion-ledger.js

@@ -0,0 +1,3 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2024–2026 Flavio De Musso
+export {};

package/dist/content/seed-media-purge.repository.d.ts

@@ -0,0 +1,34 @@
+import type { Seed } from '../engine/types.js';
+export type SeedPurgePhase = 'live' | 'drafts' | 'purging' | 'done' | 'failed';
+export interface SeedPurgeJob {
+    id: string;
+    slug: string;
+    definition: Seed;
+    phase: SeedPurgePhase;
+    cursor: number;
+    stagedCount: number;
+    purgedCount: number;
+}
+export interface SeedPurgeRow {
+    rowid: number;
+    data: Record<string, unknown>;
+}
+/** Durable, bounded staging and acknowledgement of media references during seed deletion. */
+export interface ISeedMediaPurgeRepository {
+    begin(id: string, seed: Seed, now: number): Promise<void>;
+    get(id: string): Promise<SeedPurgeJob | null>;
+    getActiveBySlug(slug: string): Promise<SeedPurgeJob | null>;
+    listPendingIds(limit: number): Promise<string[]>;
+    claim(id: string, token: string, now: number, leaseSeconds: number): Promise<SeedPurgeJob | null>;
+    release(id: string, token: string): Promise<void>;
+    getColumns(table: string): Promise<Set<string> | null>;
+    readPage(table: string, columns: string[], cursor: number, limit: number): Promise<SeedPurgeRow[]>;
+    stagePage(id: string, token: string, cursor: number, keys: string[], now: number): Promise<void>;
+    moveToDrafts(id: string, token: string, now: number): Promise<void>;
+    dropAndStartPurge(id: string, token: string, statements: string[], now: number): Promise<void>;
+    abortDrop(id: string, token: string, now: number): Promise<void>;
+    listKeys(id: string, limit: number): Promise<string[]>;
+    completeKey(id: string, token: string, key: string, now: number): Promise<void>;
+    finish(id: string, token: string, now: number): Promise<void>;
+}
+//# sourceMappingURL=seed-media-purge.repository.d.ts.map

package/dist/content/seed-media-purge.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-media-purge.repository.d.ts","sourceRoot":"","sources":["../../src/content/seed-media-purge.repository.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAA;AAE9C,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAA;AAE9E,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,IAAI,CAAA;IAChB,KAAK,EAAE,cAAc,CAAA;IACrB,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC9B;AAED,6FAA6F;AAC7F,MAAM,WAAW,yBAAyB;IACxC,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACzD,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAA;IAC7C,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAA;IAC3D,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAChD,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAA;IACjG,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACjD,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAA;IACtD,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAA;IAClG,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAChG,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACnE,iBAAiB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9F,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAChE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IACtD,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/E,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC9D"}

package/dist/content/seed-media-purge.repository.js

@@ -0,0 +1,3 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2024–2026 Flavio De Musso
+export {};

package/dist/content/seed.repository.d.ts

@@ -38,6 +38,9 @@ export interface ISeedRepository {
      *  All-or-nothing: a guard mismatch or a failing statement writes nothing.
      *  The DDL strings MUST come from the core planners — this method never generates SQL. */
     applyAtomic(input: SeedApplyInput): Promise<SeedApplyResult>;
+    /** Applies destructive DDL, the seed-row update or deletion, and the registry-version
+     *  bump in one OCC-guarded batch. Kept separate from the additive apply contract. */
+    applyDestructiveAtomic(input: SeedDestructiveApplyInput): Promise<SeedApplyResult>;
 }
 /** Input for an atomic, OCC-guarded schema apply. */
 export interface SeedApplyInput {
@@ -56,4 +59,15 @@ export interface SeedApplyResult {
     /** The version now in D1: expectedVersion + 1 on success, the live value on conflict. */
     version: number;
 }
+/** A destructive schema change planned by the core DDL generators. */
+export type SeedDestructiveApplyInput = {
+    slug: string;
+    ddl: string[];
+    expectedVersion: number;
+} & ({
+    operation: 'update';
+    definition: Seed;
+} | {
+    operation: 'delete';
+});
 //# sourceMappingURL=seed.repository.d.ts.map

package/dist/content/seed.repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"seed.repository.d.ts","sourceRoot":"","sources":["../../src/content/seed.repository.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAA;AAE9C,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,IAAI,CAAA;IAChB,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAA;IAC5B,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,8DAA8D;IAC9D,UAAU,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;IAC7B,kEAAkE;IAClE,OAAO,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC,CAAA;IAChC,wDAAwD;IACxD,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAA;IAC7C,kGAAkG;IAClG,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAClF,+EAA+E;IAC/E,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACvC;gFAC4E;IAC5E,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACvC,2BAA2B;IAC3B,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;IACrC,2EAA2E;IAC3E,mBAAmB,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;IACtC;;;8FAG0F;IAC1F,WAAW,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;CAC7D;AAED,qDAAqD;AACrD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,gEAAgE;IAChE,UAAU,EAAE,IAAI,CAAA;IAChB,mFAAmF;IACnF,GAAG,EAAE,MAAM,EAAE,CAAA;IACb,gFAAgF;IAChF,eAAe,EAAE,MAAM,CAAA;IACvB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC5B;AAED,MAAM,WAAW,eAAe;IAC9B,oEAAoE;IACpE,OAAO,EAAE,OAAO,CAAA;IAChB,yFAAyF;IACzF,OAAO,EAAE,MAAM,CAAA;CAChB"}
+{"version":3,"file":"seed.repository.d.ts","sourceRoot":"","sources":["../../src/content/seed.repository.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAA;AAE9C,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,IAAI,CAAA;IAChB,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAA;IAC5B,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,8DAA8D;IAC9D,UAAU,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;IAC7B,kEAAkE;IAClE,OAAO,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC,CAAA;IAChC,wDAAwD;IACxD,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAA;IAC7C,kGAAkG;IAClG,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAClF,+EAA+E;IAC/E,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACvC;gFAC4E;IAC5E,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACvC,2BAA2B;IAC3B,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;IACrC,2EAA2E;IAC3E,mBAAmB,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;IACtC;;;8FAG0F;IAC1F,WAAW,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IAC5D;yFACqF;IACrF,sBAAsB,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;CACnF;AAED,qDAAqD;AACrD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,gEAAgE;IAChE,UAAU,EAAE,IAAI,CAAA;IAChB,mFAAmF;IACnF,GAAG,EAAE,MAAM,EAAE,CAAA;IACb,gFAAgF;IAChF,eAAe,EAAE,MAAM,CAAA;IACvB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC5B;AAED,MAAM,WAAW,eAAe;IAC9B,oEAAoE;IACpE,OAAO,EAAE,OAAO,CAAA;IAChB,yFAAyF;IACzF,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,sEAAsE;AACtE,MAAM,MAAM,yBAAyB,GAAG;IACtC,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,EAAE,MAAM,EAAE,CAAA;IACb,eAAe,EAAE,MAAM,CAAA;CACxB,GAAG,CACA;IAAE,SAAS,EAAE,QAAQ,CAAC;IAAC,UAAU,EAAE,IAAI,CAAA;CAAE,GACzC;IAAE,SAAS,EAAE,QAAQ,CAAA;CAAE,CAC1B,CAAA"}

package/dist/content-scan.repository.d.ts

@@ -0,0 +1,9 @@
+import type { Seed } from './types.js';
+export interface IContentScanRepository {
+    /**
+     * Scans across all registered seeds to identify media keys that are currently referenced
+     * by any content entry. Used for orphaned media detection and storage analytics.
+     */
+    getReferencedMediaKeys(seeds: Seed[]): Promise<Set<string>>;
+}
+//# sourceMappingURL=content-scan.repository.d.ts.map

package/dist/content-scan.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-scan.repository.d.ts","sourceRoot":"","sources":["../src/content-scan.repository.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAA;AAEtC,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,sBAAsB,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;CAC5D"}

package/dist/content-scan.repository.js

@@ -0,0 +1,3 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2024–2026 Flavio De Musso
+export {};