@beechcms/core 0.8.1 → 0.9.1

package/dist/antivirus/noop-antivirus.provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"noop-antivirus.provider.d.ts","sourceRoot":"","sources":["../../src/antivirus/noop-antivirus.provider.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAEvF,qBAAa,qBAAsB,YAAW,kBAAkB;IAC9D,QAAQ,CAAC,IAAI,UAAS;IAEhB,IAAI,CAAC,WAAW,EAAE,WAAW,GAAG,UAAU,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAEjG;CACF"}
+{"version":3,"file":"noop-antivirus.provider.d.ts","sourceRoot":"","sources":["../../src/antivirus/noop-antivirus.provider.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAEvF,qBAAa,qBAAsB,YAAW,kBAAkB;IAC9D,QAAQ,CAAC,IAAI,UAAS;IAEhB,IAAI,CAAC,WAAW,EAAE,WAAW,GAAG,UAAU,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;CAGnG"}

package/dist/antivirus/virustotal-antivirus.provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"virustotal-antivirus.provider.d.ts","sourceRoot":"","sources":["../../src/antivirus/virustotal-antivirus.provider.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAEvF,qBAAa,2BAA4B,YAAW,kBAAkB;IAExD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IADpC,QAAQ,CAAC,IAAI,gBAAe;IAC5B,YAA6B,MAAM,CAAC,EAAE,MAAM,YAAA,EAAI;IAE1C,IAAI,CAAC,UAAU,EAAE,WAAW,GAAG,UAAU,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA0C/F;CACF"}
+{"version":3,"file":"virustotal-antivirus.provider.d.ts","sourceRoot":"","sources":["../../src/antivirus/virustotal-antivirus.provider.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAEvF,qBAAa,2BAA4B,YAAW,kBAAkB;IAExD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IADpC,QAAQ,CAAC,IAAI,gBAAe;gBACC,MAAM,CAAC,EAAE,MAAM,YAAA;IAEtC,IAAI,CAAC,UAAU,EAAE,WAAW,GAAG,UAAU,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;CA2CjG"}

package/dist/auth/account-email.d.ts

@@ -0,0 +1,3 @@
+/** Validates the trimmed, lowercased account identifier used by login and account writes. */
+export declare function isValidAccountEmail(email: string): boolean;
+//# sourceMappingURL=account-email.d.ts.map

package/dist/auth/account-email.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-email.d.ts","sourceRoot":"","sources":["../../src/auth/account-email.ts"],"names":[],"mappings":"AAMA,6FAA6F;AAC7F,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAG1D"}

package/dist/auth/account-email.js

@@ -0,0 +1,9 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2024–2026 Flavio De Musso
+const ACCOUNT_EMAIL_REGEX = /^[^\s@]+@[^\s@.]+(?:\.[^\s@.]+)+$/;
+const MAX_ACCOUNT_EMAIL_LENGTH = 254;
+/** Validates the trimmed, lowercased account identifier used by login and account writes. */
+export function isValidAccountEmail(email) {
+    const normalizedEmail = email.trim().toLowerCase();
+    return normalizedEmail.length <= MAX_ACCOUNT_EMAIL_LENGTH && ACCOUNT_EMAIL_REGEX.test(normalizedEmail);
+}

package/dist/auth/password-reset-token.repository.d.ts

@@ -8,6 +8,12 @@ export interface ValidatedResetToken {
     userId: string;
     email: string;
 }
+export interface RedeemPasswordResetInput {
+    tokenId: string;
+    userId: string;
+    newPasswordHash: string;
+    nowTimestamp: number;
+}
 export interface IPasswordResetTokenRepository {
     /**
      * Marks all pending (unused) tokens for the user as consumed before issuing a new one.
@@ -22,7 +28,12 @@ export interface IPasswordResetTokenRepository {
      * Returns null if the token is expired, already used, or not found.
      */
     findValidByHashWithEmail(tokenHash: string, nowTimestamp: number): Promise<ValidatedResetToken | null>;
-    /** Marks a token as consumed so it cannot be used again. */
-    markUsed(tokenId: string, nowTimestamp: number): Promise<void>;
+    /**
+     * Redeems a token in one atomic unit: burns it, replaces the user's password hash and revokes
+     * every refresh token. Either all three land or none do.
+     * Returns `true` for the single caller that burned the token, `false` (writing nothing) when it
+     * was already redeemed by a concurrent request.
+     */
+    redeem(input: RedeemPasswordResetInput): Promise<boolean>;
 }
 //# sourceMappingURL=password-reset-token.repository.d.ts.map

package/dist/auth/password-reset-token.repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"password-reset-token.repository.d.ts","sourceRoot":"","sources":["../../src/auth/password-reset-token.repository.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,6BAA6B;IAC5C;;;OAGG;IACH,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEtE,0FAA0F;IAC1F,MAAM,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEpD;;;;OAIG;IACH,wBAAwB,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAA;IAEtG,4DAA4D;IAC5D,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC/D"}
+{"version":3,"file":"password-reset-token.repository.d.ts","sourceRoot":"","sources":["../../src/auth/password-reset-token.repository.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,eAAe,EAAE,MAAM,CAAA;IACvB,YAAY,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,6BAA6B;IAC5C;;;OAGG;IACH,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEtE,0FAA0F;IAC1F,MAAM,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEpD;;;;OAIG;IACH,wBAAwB,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAA;IAEtG;;;;;OAKG;IACH,MAAM,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CAC1D"}

package/dist/auth/user.repository.d.ts

@@ -1,12 +1,43 @@
+import type { AdminGuardedResult, PageRequest } from '../rbac/types.js';
 export interface UserRecord {
     id: string;
     email: string;
     name: string | null;
     surname: string | null;
     passwordHash: string;
+    /**
+     * System-level account type ('admin' | 'editor').
+     * - 'admin': Developer / instance owner with full system access and Seed Builder control.
+     * - 'editor': Generic Beech CMS user whose permissions are managed via RBAC assignments.
+     *   (Note: 'editor' is retained as technical debt for DB CHECK constraint and backwards compatibility).
+     */
     role: string;
     avatarUrl: string | null;
     notificationPreferences: string;
+    /**
+     * Reversible deactivation (`users.is_active`). A deactivated account keeps its rows,
+     * its assignments and its refresh tokens, but is refused at every authorization
+     * boundary — which is what makes revocation instant despite 15-minute access JWTs.
+     */
+    isActive: boolean;
+}
+/**
+ * Administrative projection of an account. Deliberately carries NO `passwordHash`:
+ * account listings must never put credential material on the wire.
+ */
+export interface AccountSummary {
+    id: string;
+    email: string;
+    name: string | null;
+    surname: string | null;
+    /**
+     * Developer/owner axis ('admin' | 'editor'), orthogonal to RBAC permissions.
+     * - 'admin' = Developer / Owner
+     * - 'editor' = Generic Beech user (RBAC-gated)
+     */
+    role: string;
+    isActive: boolean;
+    createdAt: number;
 }
 export interface NewUserInput {
     id: string;
@@ -16,6 +47,15 @@ export interface NewUserInput {
     name: string | null;
     surname: string | null;
 }
+/**
+ * The (role, scope) grant `createInitialAdmin` writes in the same transaction as the
+ * account itself, so the first administrator can never exist without one.
+ */
+export interface InitialRoleGrant {
+    id: string;
+    roleId: string;
+    scope: string;
+}
 export interface IUserRepository {
     /**
      * Returns the total number of registered users.
@@ -29,11 +69,15 @@ export interface IUserRepository {
     /** Inserts a new user record. */
     create(user: NewUserInput): Promise<void>;
     /**
-     * Atomically creates the first administrator account, guarded by a
-     * setup-completed marker row inserted in the same transaction. Returns
-     * false instead of throwing when setup was already completed concurrently.
+     * Atomically creates the first administrator account AND its `roleGrant`,
+     * guarded by a setup-completed marker row inserted in the same transaction.
+     * The account can never exist without its role: callers must resolve the
+     * grant before calling this, so a missing or unresolvable role aborts setup
+     * with nothing written instead of leaving a stranded, unrecoverable admin.
+     * Returns false instead of throwing when setup was already completed
+     * concurrently.
      */
-    createInitialAdmin(user: NewUserInput): Promise<boolean>;
+    createInitialAdmin(user: NewUserInput, roleGrant: InitialRoleGrant): Promise<boolean>;
     /** Updates the user's display name, surname, and/or email address. */
     updateProfile(userId: string, fields: {
         name?: string;
@@ -42,6 +86,11 @@ export interface IUserRepository {
     }): Promise<void>;
     /** Replaces the user's stored password hash after a successful password change. */
     updatePasswordHash(userId: string, newPasswordHash: string): Promise<void>;
+    /**
+     * Replaces the password hash and revokes every active refresh token of the user in one
+     * atomic write, so a password change can never leave old sessions valid.
+     */
+    changePasswordAndRevokeSessions(userId: string, newPasswordHash: string, nowTimestamp: number): Promise<void>;
     /** Sets or clears the user's avatar URL. */
     updateAvatarUrl(userId: string, avatarUrl: string | null): Promise<void>;
     /** Persists the user's notification preferences as a JSON string. */
@@ -52,5 +101,21 @@ export interface IUserRepository {
      * an unrelated account exists.
      */
     emailBelongsToAnotherUser(email: string, currentUserId: string): Promise<boolean>;
+    /** One page of accounts, oldest first, without credential material. */
+    listAccounts(page: PageRequest): Promise<AccountSummary[]>;
+    /** One account by id, without credential material. Null when absent. */
+    findAccountById(userId: string): Promise<AccountSummary | null>;
+    /**
+     * Flips `users.is_active`. `not-found` when the user does not exist.
+     * Reversible by design (brief §4): rows, assignments and tokens are all preserved.
+     * Deactivation returns `last-global-admin` and changes nothing when the account is the
+     * last active global administrator.
+     */
+    setActive(userId: string, isActive: boolean): Promise<AdminGuardedResult>;
+    /**
+     * Read-only twin of the deactivation guard in {@link setActive}: is this account the last
+     * active global administrator? ADVISORY — see `IRoleAssignmentRepository.isLastGlobalAdminAssignment`.
+     */
+    isLastGlobalAdmin(userId: string): Promise<boolean>;
 }
 //# sourceMappingURL=user.repository.d.ts.map

package/dist/auth/user.repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user.repository.d.ts","sourceRoot":"","sources":["../../src/auth/user.repository.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,uBAAuB,EAAE,MAAM,CAAA;CAChC;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CACvB;AAED,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;IAE3B,yEAAyE;IACzE,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAA;IAEpD,qEAAqE;IACrE,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAA;IAEtD,iCAAiC;IACjC,MAAM,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEzC;;;;OAIG;IACH,kBAAkB,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAExD,sEAAsE;IACtE,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEzG,mFAAmF;IACnF,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE1E,4CAA4C;IAC5C,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAExE,qEAAqE;IACrE,6BAA6B,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAErF;;;;OAIG;IACH,yBAAyB,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CAClF"}
+{"version":3,"file":"user.repository.d.ts","sourceRoot":"","sources":["../../src/auth/user.repository.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAEvE,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB;;;;;OAKG;IACH,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,uBAAuB,EAAE,MAAM,CAAA;IAC/B;;;;OAIG;IACH,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,OAAO,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CACvB;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;IAE3B,yEAAyE;IACzE,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAA;IAEpD,qEAAqE;IACrE,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAA;IAEtD,iCAAiC;IACjC,MAAM,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEzC;;;;;;;;OAQG;IACH,kBAAkB,CAAC,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAErF,sEAAsE;IACtE,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEzG,mFAAmF;IACnF,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE1E;;;OAGG;IACH,+BAA+B,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE7G,4CAA4C;IAC5C,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAExE,qEAAqE;IACrE,6BAA6B,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAErF;;;;OAIG;IACH,yBAAyB,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAEjF,uEAAuE;IACvE,YAAY,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAA;IAE1D,wEAAwE;IACxE,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAA;IAE/D;;;;;OAKG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;IAEzE;;;OAGG;IACH,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACpD"}

package/dist/common/canonical-json.d.ts

@@ -2,7 +2,8 @@
  * @module common/canonical-json
  * Deterministic JSON serialization, shared by two callers that must never disagree:
  * the manifest writer (`schema/canonical.ts`, authoring-side) and the schema fingerprint
- * (`engine/schema-fingerprint.ts`, runtime-side).
+ * (`engine/schema-fingerprint.ts`, runtime-side). The public API's Idempotency-Key request
+ * fingerprint also hashes it, so equivalent payloads with reordered JSON keys match.
  *
  * Moved here in sprint 2 because the fingerprint runs inside the Worker and `schema/` is the one
  * module the Worker must never import. The BYTES ARE FROZEN — sprint 1 declared this format a

package/dist/common/canonical-json.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"canonical-json.d.ts","sourceRoot":"","sources":["../../src/common/canonical-json.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;GAWG;AAEH,4DAA4D;AAC5D,qBAAa,2BAA4B,SAAQ,KAAK;IAElD,gFAAgF;IAChF,QAAQ,CAAC,IAAI,EAAE,MAAM;IACrB,6CAA6C;IAC7C,QAAQ,CAAC,KAAK,EAAE,MAAM;;IAHtB,gFAAgF;IACvE,IAAI,EAAE,MAAM;IACrB,6CAA6C;IACpC,KAAK,EAAE,MAAM;CAQzB;AA8CD;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEzD"}
+{"version":3,"file":"canonical-json.d.ts","sourceRoot":"","sources":["../../src/common/canonical-json.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;GAYG;AAEH,4DAA4D;AAC5D,qBAAa,2BAA4B,SAAQ,KAAK;IAElD,gFAAgF;IAChF,QAAQ,CAAC,IAAI,EAAE,MAAM;IACrB,6CAA6C;IAC7C,QAAQ,CAAC,KAAK,EAAE,MAAM;;IAHtB,gFAAgF;IACvE,IAAI,EAAE,MAAM;IACrB,6CAA6C;IACpC,KAAK,EAAE,MAAM;CAQzB;AA+CD;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEzD"}

package/dist/common/canonical-json.js

@@ -4,7 +4,8 @@
  * @module common/canonical-json
  * Deterministic JSON serialization, shared by two callers that must never disagree:
  * the manifest writer (`schema/canonical.ts`, authoring-side) and the schema fingerprint
- * (`engine/schema-fingerprint.ts`, runtime-side).
+ * (`engine/schema-fingerprint.ts`, runtime-side). The public API's Idempotency-Key request
+ * fingerprint also hashes it, so equivalent payloads with reordered JSON keys match.
  *
  * Moved here in sprint 2 because the fingerprint runs inside the Worker and `schema/` is the one
  * module the Worker must never import. The BYTES ARE FROZEN — sprint 1 declared this format a
@@ -62,14 +63,15 @@ function canonicalize(value, path) {
     if (value === null)
         return null;
     if (Array.isArray(value)) {
-        return value.map((item, index) => {
+        return Array.from({ length: value.length }, (_, index) => {
+            const item = Object.hasOwn(value, index) ? value[index] : undefined;
             if (item === undefined)
                 throw new CanonicalSerializationError(`${path}[${index}]`, 'undefined');
             return canonicalize(item, `${path}[${index}]`);
         });
     }
     if (typeof value === 'object') {
-        const out = {};
+        const out = Object.create(null);
         for (const key of Object.keys(value).sort()) {
             const child = value[key];
             if (child === undefined)

package/dist/content/content-scan.repository.d.ts

@@ -2,7 +2,7 @@ import type { Seed } from '../engine/types.js';
 export interface IContentScanRepository {
     /**
      * Scans across all registered seeds to identify media keys that are currently referenced
-     * by any content entry. Used for orphaned media detection and storage analytics.
+     * by any content entry, live or draft. Used for orphaned media detection and storage analytics.
      */
     getReferencedMediaKeys(seeds: Seed[]): Promise<Set<string>>;
 }

package/dist/content/content.repository.d.ts

@@ -1,4 +1,4 @@
-import { Seed, SelectOptions } from '../engine/types.js';
+import { Seed, SelectOptions, TrashedMode } from '../engine/types.js';
 /**
  * One row of the cross-seed pending-drafts overview. Aggregates the minimum a
  * reviewer needs to triage a draft without opening it: which seed it belongs to,
@@ -19,8 +19,8 @@ export interface DraftSummary {
  * Base Repository Error
  */
 export declare class RepositoryError extends Error {
-    cause?: unknown;
-    constructor(message: string, cause?: unknown);
+    cause?: unknown | undefined;
+    constructor(message: string, cause?: unknown | undefined);
 }
 /**
  * Thrown when an entry is not found by ID or Slug
@@ -62,6 +62,59 @@ export declare class HookValidationError extends RepositoryError {
         message: string;
     }>);
 }
+/**
+ * Thrown by `publishDraft` when the live entry was written after the draft captured its
+ * `live_snapshot_at`. Publishing would overwrite that write, so the repository refuses and the
+ * caller must discard the draft or re-create it from the current live version.
+ * Mapped to 409 Conflict by the API problem-mapper.
+ */
+export declare class DraftConflictError extends RepositoryError {
+    readonly seedSlug: string;
+    readonly entryId: string;
+    readonly snapshotAt: number | null;
+    readonly liveUpdatedAt: number;
+    constructor(params: {
+        seedSlug: string;
+        entryId: string;
+        snapshotAt: number | null;
+        liveUpdatedAt: number;
+    });
+}
+/**
+ * Thrown by `update` when the caller supplied `options.ifMatch` and the live row's
+ * `updated_at` no longer matches it — another writer committed in between.
+ * Mapped to 409 Conflict by the API problem-mapper.
+ */
+export declare class EntryConflictError extends RepositoryError {
+    readonly seedSlug: string;
+    readonly entryId: string;
+    readonly expectedUpdatedAt: number;
+    readonly actualUpdatedAt: number;
+    constructor(params: {
+        seedSlug: string;
+        entryId: string;
+        expectedUpdatedAt: number;
+        actualUpdatedAt: number;
+    });
+}
+/**
+ * Thrown by `saveDraft` when the caller supplied `options.ifMatch` and the pending draft
+ * row's `updated_at` no longer matches it — another writer saved a draft in between, and
+ * blindly merging on top of it would silently drop that writer's fields.
+ * Mapped to 409 Conflict by the API problem-mapper.
+ */
+export declare class DraftSaveConflictError extends RepositoryError {
+    readonly seedSlug: string;
+    readonly entryId: string;
+    readonly expectedUpdatedAt: number;
+    readonly actualUpdatedAt: number;
+    constructor(params: {
+        seedSlug: string;
+        entryId: string;
+        expectedUpdatedAt: number;
+        actualUpdatedAt: number;
+    });
+}
 export type BulkFieldUpdate = {
     kind: 'set';
     value: unknown;
@@ -85,6 +138,12 @@ export interface RepositoryOptions {
         role?: string;
         email?: string;
     };
+    /**
+     * Optimistic concurrency guard for `update`: the `updated_at` the caller last read.
+     * When set, the write only applies if the live row's `updated_at` still matches;
+     * otherwise `update` throws {@link EntryConflictError}.
+     */
+    ifMatch?: number;
 }
 /**
  * Declarative multi-write operation translated into a single `db.batch` call.
@@ -121,6 +180,21 @@ export type BatchWrite = {
         max?: number;
     };
 };
+/** Everything a purge caller needs to finish cleanup outside the database. */
+export interface PurgeResult {
+    /** The row as it existed immediately before erasure — the source of the R2 media keys. */
+    row: Record<string, any>;
+    /** True when a ledger event was appended. False only for a seed without `softDelete`. */
+    ledgerWritten: boolean;
+}
+/** Per-id outcome of a bulk trash operation, mirroring `bulkUpdate`'s shape. */
+export interface BulkDeleteResult {
+    succeeded: string[];
+    failed: Array<{
+        id: string;
+        reason: string;
+    }>;
+}
 /**
  * Interface defining the standard operations for content persistence.
  * This is platform-agnostic and should be implemented for specific databases (e.g., D1).
@@ -135,14 +209,28 @@ export interface ContentRepository {
     }>;
     /**
      * Finds a single entry by its unique ID.
+     * Trashed rows are invisible unless `options.trashed` says otherwise.
      * Throws EntryNotFoundError if not found.
      */
-    findById(seed: Seed, id: string): Promise<Record<string, any>>;
+    findById(seed: Seed, id: string, options?: {
+        trashed?: TrashedMode;
+    }): Promise<Record<string, any>>;
     /**
      * Finds a single entry by its unique slug.
      * Throws EntryNotFoundError if not found.
      */
     findBySlug(seed: Seed, slug: string): Promise<Record<string, any>>;
+    /**
+     * Resolves the parent entry ids that reference any of `targetIds` through a MULTI relation
+     * branch (junction table). Single-value relations need no lookup — their target id lives in a
+     * column on the parent row and is filterable directly.
+     *
+     * Returns at most `limit` distinct parent ids, in no guaranteed order. Callers that must
+     * distinguish "complete" from "truncated" pass `limit = cap + 1` and compare the length.
+     *
+     * @throws RepositoryError if `branchAlias` is not a `multiple: true` relation branch of `seed`.
+     */
+    findParentIdsByRelation(seed: Seed, branchAlias: string, targetIds: string[], limit: number): Promise<string[]>;
     /**
      * Computes facets (status counts and distinct tags) for a content type.
      */
@@ -158,6 +246,7 @@ export interface ContentRepository {
     /**
      * Partially updates an existing entry in the live table.
      * Throws EntryNotFoundError if the ID does not exist.
+     * Throws EntryConflictError if `options.ifMatch` is set and no longer matches the live row's `updated_at`.
      */
     update(seed: Seed, id: string, data: Record<string, any>, status?: string, options?: RepositoryOptions): Promise<void>;
     /**
@@ -187,9 +276,17 @@ export interface ContentRepository {
     /**
      * Atomically applies an axis-value patch AND a kanban_positions upsert in one DB batch (KB-S04e).
      * `patch` is null for same-column reorders (position only).
+     *
+     * @param ctx.ifMatch Optimistic concurrency guard for the axis-value patch: the `updated_at`
+     *   the caller last read. When set and `patch` is non-null, the write only applies if the live
+     *   row's `updated_at` still matches; otherwise throws {@link EntryConflictError}. Ignored when
+     *   `patch` is null, since a position-only reorder does not read-modify-write column data.
+     * @throws EntryConflictError if `ctx.ifMatch` is set, `patch` is non-null, and the live row's
+     *   `updated_at` no longer matches it.
      */
     updateWithKanbanPosition(seed: Seed, id: string, patch: Record<string, unknown> | null, position: string, axisBranchId: string, ctx: {
         actor: string;
+        ifMatch?: number;
     }): Promise<{
         success: boolean;
     }>;
@@ -200,13 +297,21 @@ export interface ContentRepository {
     runBatch(operations: BatchWrite[]): Promise<void>;
     /**
      * Saves or updates a pending draft in the mirror table.
+     * Throws DraftSaveConflictError if `options.ifMatch` is set and no longer matches the
+     * pending draft row's `updated_at`.
      */
-    saveDraft(seed: Seed, entryId: string, data: Record<string, any>): Promise<void>;
+    saveDraft(seed: Seed, entryId: string, data: Record<string, any>, options?: RepositoryOptions): Promise<void>;
     /**
      * Retrieves the pending draft for a given entry.
      * Returns null if no draft exists.
      */
     getDraft(seed: Seed, entryId: string): Promise<Record<string, any> | null>;
+    /**
+     * Retrieves the pending draft row's `updated_at`, for use as an optimistic-concurrency
+     * guard by callers that read the draft before merging into it.
+     * Returns null if no draft exists (or drafts are disallowed for the seed).
+     */
+    getDraftUpdatedAt(seed: Seed, entryId: string): Promise<number | null>;
     /**
      * Atomic promotion of a draft to the live table.
      * Must use a transaction (db.batch) to update live and delete draft.
@@ -243,5 +348,51 @@ export interface ContentRepository {
             reason: string;
         }>;
     }>;
+    /**
+     * Reversible delete: stamps `deleted_at` and returns the row as it was.
+     * Runs `beforeDelete`/`afterDelete`, exactly like `delete`.
+     * Leaves junction rows, `_drafts` rows and R2 media untouched — a trashed entry must be
+     * restorable whole.
+     * @throws RepositoryError if `seed.softDelete` is not true.
+     * @throws EntryNotFoundError if no live row with `id` exists.
+     */
+    softDelete(seed: Seed, id: string, options?: RepositoryOptions): Promise<{
+        row: Record<string, any>;
+    }>;
+    /**
+     * Clears `deleted_at`. When the entry's slug was taken by a live entry in the meantime the
+     * UNIQUE constraint rejects the update; the implementation catches it and restores under an
+     * auto-renamed slug rather than failing the operation (feature brief §4).
+     * @returns The restored row, carrying the slug it actually ended up with.
+     * @throws EntryNotFoundError if no TRASHED row with `id` exists.
+     */
+    restore(seed: Seed, id: string, options?: RepositoryOptions): Promise<{
+        row: Record<string, any>;
+    }>;
+    /**
+     * Irreversible erasure: runs `beforeDelete`, reads the row, deletes it (junction and
+     * `_drafts` rows follow via ON DELETE CASCADE), appends the ledger event, runs `afterDelete`.
+     * Works on a live row and on a trashed one.
+     * R2 media deletion is NOT performed here — the caller owns it (VSA: no external I/O in the
+     * repository beyond the ledger port).
+     * @throws EntryNotFoundError if no row with `id` exists.
+     */
+    purge(seed: Seed, id: string, options?: RepositoryOptions): Promise<PurgeResult>;
+    /** `restore` applied per id. Never partially fails the batch: each id reports its own outcome. */
+    bulkRestore(seed: Seed, ids: string[], options?: RepositoryOptions): Promise<BulkDeleteResult>;
+    /**
+     * `purge` applied per id. Returns the purged rows so the caller can collect R2 media keys.
+     */
+    bulkPurge(seed: Seed, ids: string[], options?: RepositoryOptions): Promise<BulkDeleteResult & {
+        rows: Record<string, any>[];
+    }>;
+    /**
+     * Pure query, no side effects: ids of trashed entries whose retention window has elapsed
+     * (`deleted_at + seed.retentionDays * 86400 <= now`).
+     * Returns [] when the seed has no `retentionDays` or no `softDelete`.
+     * Deliberately NOT wired to any scheduler — the recurring-automation adapter is future work
+     * (feature brief §2). `now` is supplied by the caller's `IClock`; never read the clock here.
+     */
+    findExpiredByRetention(seed: Seed, now: number, limit: number): Promise<string[]>;
 }
 //# sourceMappingURL=content.repository.d.ts.map

package/dist/content/content.repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"content.repository.d.ts","sourceRoot":"","sources":["../../src/content/content.repository.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAExD;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE;QACd,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;QACnB,KAAK,EAAE,MAAM,CAAA;KACd,CAAA;CACF;AAED;;GAEG;AACH,qBAAa,eAAgB,SAAQ,KAAK;IACJ,KAAK,CAAC,EAAE,OAAO;IAAnD,YAAY,OAAO,EAAE,MAAM,EAAS,KAAK,CAAC,EAAE,OAAO,EAGlD;CACF;AAED;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,eAAe;IACrD,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAED;;GAEG;AACH,qBAAa,iBAAkB,SAAQ,eAAe;IACpD,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAED;;;GAGG;AACH,qBAAa,2BAA4B,SAAQ,eAAe;IAC9D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IAEtB,YAAY,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAQvE;CACF;AAED;;;GAGG;AACH,qBAAa,mBAAoB,SAAQ,eAAe;IACtD,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAE3D,YAAY,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,EAI9E;CACF;AAED,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,CAAA;AAE7C;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CACtD;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;CAAE,GACnG;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACtF;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,IAAI,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE;QAAE,IAAI,EAAE,WAAW,GAAG,WAAW,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,OAAO,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAA;AAE/K;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAEtG;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAA;IAE9D;;;OAGG;IACH,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAA;IAElE;;OAEG;IACH,SAAS,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC;QAC7B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;KACvC,CAAC,CAAA;IAEF;;;OAGG;IACH,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEnI;;;OAGG;IACH,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEtH;;;;OAIG;IACH,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;KAAE,CAAC,CAAA;IAElG;;;;;;OAMG;IACH,WAAW,CACT,IAAI,EAAE,IAAI,EACV,EAAE,EAAE,MAAM,EACV,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE;QAAE,IAAI,EAAE,WAAW,GAAG,WAAW,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAC7D,OAAO,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,GACvC,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAEhC;;;OAGG;IACH,wBAAwB,CACtB,IAAI,EAAE,IAAI,EACV,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,EACrC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,GAAG,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GACrB,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;IAEhC;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEjD;;OAEG;IACH,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhF;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,CAAA;IAE1E;;;OAGG;IACH,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAExD;;OAEG;IACH,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEvD;;OAEG;IACH,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAE1E;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAEvD;;;;;OAKG;IACH,iBAAiB,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAA;IAEzD;;;;OAIG;IACH,UAAU,CACR,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,MAAM,EAAE,EACb,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GACtC,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,KAAK,CAAC;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC,CAAA;CAC/E"}
+{"version":3,"file":"content.repository.d.ts","sourceRoot":"","sources":["../../src/content/content.repository.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAErE;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE;QACd,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;QACnB,KAAK,EAAE,MAAM,CAAA;KACd,CAAA;CACF;AAED;;GAEG;AACH,qBAAa,eAAgB,SAAQ,KAAK;IACJ,KAAK,CAAC,EAAE,OAAO;gBAAvC,OAAO,EAAE,MAAM,EAAS,KAAK,CAAC,EAAE,OAAO,YAAA;CAIpD;AAED;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,eAAe;gBACzC,OAAO,EAAE,MAAM;CAI5B;AAED;;GAEG;AACH,qBAAa,iBAAkB,SAAQ,eAAe;gBACxC,OAAO,EAAE,MAAM;CAI5B;AAED;;;GAGG;AACH,qBAAa,2BAA4B,SAAQ,eAAe;IAC9D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;gBAEV,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;CASzE;AAED;;;GAGG;AACH,qBAAa,mBAAoB,SAAQ,eAAe;IACtD,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;gBAE/C,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAKhF;AAED;;;;;GAKG;AACH,qBAAa,kBAAmB,SAAQ,eAAe;IACrD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;gBAElB,MAAM,EAAE;QAClB,QAAQ,EAAE,MAAM,CAAA;QAChB,OAAO,EAAE,MAAM,CAAA;QACf,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;QACzB,aAAa,EAAE,MAAM,CAAA;KACtB;CAWF;AAED;;;;GAIG;AACH,qBAAa,kBAAmB,SAAQ,eAAe;IACrD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;gBAEpB,MAAM,EAAE;QAClB,QAAQ,EAAE,MAAM,CAAA;QAChB,OAAO,EAAE,MAAM,CAAA;QACf,iBAAiB,EAAE,MAAM,CAAA;QACzB,eAAe,EAAE,MAAM,CAAA;KACxB;CAWF;AAED;;;;;GAKG;AACH,qBAAa,sBAAuB,SAAQ,eAAe;IACzD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;gBAEpB,MAAM,EAAE;QAClB,QAAQ,EAAE,MAAM,CAAA;QAChB,OAAO,EAAE,MAAM,CAAA;QACf,iBAAiB,EAAE,MAAM,CAAA;QACzB,eAAe,EAAE,MAAM,CAAA;KACxB;CAWF;AAED,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,CAAA;AAE7C;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACrD;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;CAAE,GACnG;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACtF;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,IAAI,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE;QAAE,IAAI,EAAE,WAAW,GAAG,WAAW,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,OAAO,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAA;AAE/K,8EAA8E;AAC9E,MAAM,WAAW,WAAW;IAC1B,0FAA0F;IAC1F,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACxB,yFAAyF;IACzF,aAAa,EAAE,OAAO,CAAA;CACvB;AAED,gFAAgF;AAChF,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,MAAM,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAC9C;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAEtG;;;;OAIG;IACH,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAA;IAEnG;;;OAGG;IACH,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAA;IAElE;;;;;;;;;OASG;IACH,uBAAuB,CACrB,IAAI,EAAE,IAAI,EACV,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EAAE,EACnB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAEpB;;OAEG;IACH,SAAS,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC;QAC7B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;KACvC,CAAC,CAAA;IAEF;;;OAGG;IACH,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEnI;;;;OAIG;IACH,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEtH;;;;OAIG;IACH,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;KAAE,CAAC,CAAA;IAElG;;;;;;OAMG;IACH,WAAW,CACT,IAAI,EAAE,IAAI,EACV,EAAE,EAAE,MAAM,EACV,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE;QAAE,IAAI,EAAE,WAAW,GAAG,WAAW,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAC7D,OAAO,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,GACvC,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAEhC;;;;;;;;;;OAUG;IACH,wBAAwB,CACtB,IAAI,EAAE,IAAI,EACV,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,EACrC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,GAAG,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GACvC,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;IAEhC;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEjD;;;;OAIG;IACH,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE7G;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,CAAA;IAE1E;;;;OAIG;IACH,iBAAiB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IAEtE;;;OAGG;IACH,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAExD;;OAEG;IACH,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEvD;;OAEG;IACH,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAE1E;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAEvD;;;;;OAKG;IACH,iBAAiB,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAA;IAEzD;;;;OAIG;IACH,UAAU,CACR,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,MAAM,EAAE,EACb,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GACtC,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,KAAK,CAAC;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC,CAAA;IAE9E;;;;;;;OAOG;IACH,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;KAAE,CAAC,CAAA;IAEtG;;;;;;OAMG;IACH,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;KAAE,CAAC,CAAA;IAEnG;;;;;;;OAOG;IACH,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;IAEhF,kGAAkG;IAClG,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAE9F;;OAEG;IACH,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CACxE,gBAAgB,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAA;KAAE,CACnD,CAAA;IAED;;;;;;OAMG;IACH,sBAAsB,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;CAClF"}

package/dist/content/content.repository.js

@@ -57,3 +57,65 @@ export class HookValidationError extends RepositoryError {
         this.fields = fields;
     }
 }
+/**
+ * Thrown by `publishDraft` when the live entry was written after the draft captured its
+ * `live_snapshot_at`. Publishing would overwrite that write, so the repository refuses and the
+ * caller must discard the draft or re-create it from the current live version.
+ * Mapped to 409 Conflict by the API problem-mapper.
+ */
+export class DraftConflictError extends RepositoryError {
+    seedSlug;
+    entryId;
+    snapshotAt;
+    liveUpdatedAt;
+    constructor(params) {
+        super(`Draft conflict: entry '${params.entryId}' in '${params.seedSlug}' was modified at ` +
+            `${params.liveUpdatedAt}, after the draft snapshot ${params.snapshotAt}`);
+        this.name = 'DraftConflictError';
+        this.seedSlug = params.seedSlug;
+        this.entryId = params.entryId;
+        this.snapshotAt = params.snapshotAt;
+        this.liveUpdatedAt = params.liveUpdatedAt;
+    }
+}
+/**
+ * Thrown by `update` when the caller supplied `options.ifMatch` and the live row's
+ * `updated_at` no longer matches it — another writer committed in between.
+ * Mapped to 409 Conflict by the API problem-mapper.
+ */
+export class EntryConflictError extends RepositoryError {
+    seedSlug;
+    entryId;
+    expectedUpdatedAt;
+    actualUpdatedAt;
+    constructor(params) {
+        super(`Entry conflict: entry '${params.entryId}' in '${params.seedSlug}' was modified at ` +
+            `${params.actualUpdatedAt}, expected ${params.expectedUpdatedAt}`);
+        this.name = 'EntryConflictError';
+        this.seedSlug = params.seedSlug;
+        this.entryId = params.entryId;
+        this.expectedUpdatedAt = params.expectedUpdatedAt;
+        this.actualUpdatedAt = params.actualUpdatedAt;
+    }
+}
+/**
+ * Thrown by `saveDraft` when the caller supplied `options.ifMatch` and the pending draft
+ * row's `updated_at` no longer matches it — another writer saved a draft in between, and
+ * blindly merging on top of it would silently drop that writer's fields.
+ * Mapped to 409 Conflict by the API problem-mapper.
+ */
+export class DraftSaveConflictError extends RepositoryError {
+    seedSlug;
+    entryId;
+    expectedUpdatedAt;
+    actualUpdatedAt;
+    constructor(params) {
+        super(`Draft save conflict: draft for entry '${params.entryId}' in '${params.seedSlug}' was saved at ` +
+            `${params.actualUpdatedAt}, expected ${params.expectedUpdatedAt}`);
+        this.name = 'DraftSaveConflictError';
+        this.seedSlug = params.seedSlug;
+        this.entryId = params.entryId;
+        this.expectedUpdatedAt = params.expectedUpdatedAt;
+        this.actualUpdatedAt = params.actualUpdatedAt;
+    }
+}

package/dist/content/seed-media-purge.repository.d.ts

@@ -0,0 +1,34 @@
+import type { Seed } from '../engine/types.js';
+export type SeedPurgePhase = 'live' | 'drafts' | 'purging' | 'done' | 'failed';
+export interface SeedPurgeJob {
+    id: string;
+    slug: string;
+    definition: Seed;
+    phase: SeedPurgePhase;
+    cursor: number;
+    stagedCount: number;
+    purgedCount: number;
+}
+export interface SeedPurgeRow {
+    rowid: number;
+    data: Record<string, unknown>;
+}
+/** Durable, bounded staging and acknowledgement of media references during seed deletion. */
+export interface ISeedMediaPurgeRepository {
+    begin(id: string, seed: Seed, now: number): Promise<void>;
+    get(id: string): Promise<SeedPurgeJob | null>;
+    getActiveBySlug(slug: string): Promise<SeedPurgeJob | null>;
+    listPendingIds(limit: number): Promise<string[]>;
+    claim(id: string, token: string, now: number, leaseSeconds: number): Promise<SeedPurgeJob | null>;
+    release(id: string, token: string): Promise<void>;
+    getColumns(table: string): Promise<Set<string> | null>;
+    readPage(table: string, columns: string[], cursor: number, limit: number): Promise<SeedPurgeRow[]>;
+    stagePage(id: string, token: string, cursor: number, keys: string[], now: number): Promise<void>;
+    moveToDrafts(id: string, token: string, now: number): Promise<void>;
+    dropAndStartPurge(id: string, token: string, statements: string[], now: number): Promise<void>;
+    abortDrop(id: string, token: string, now: number): Promise<void>;
+    listKeys(id: string, limit: number): Promise<string[]>;
+    completeKey(id: string, token: string, key: string, now: number): Promise<void>;
+    finish(id: string, token: string, now: number): Promise<void>;
+}
+//# sourceMappingURL=seed-media-purge.repository.d.ts.map

package/dist/content/seed-media-purge.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-media-purge.repository.d.ts","sourceRoot":"","sources":["../../src/content/seed-media-purge.repository.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAA;AAE9C,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAA;AAE9E,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,IAAI,CAAA;IAChB,KAAK,EAAE,cAAc,CAAA;IACrB,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC9B;AAED,6FAA6F;AAC7F,MAAM,WAAW,yBAAyB;IACxC,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACzD,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAA;IAC7C,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAA;IAC3D,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAChD,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAA;IACjG,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACjD,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAA;IACtD,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAA;IAClG,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAChG,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACnE,iBAAiB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9F,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAChE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IACtD,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/E,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC9D"}