@cogenta/schema 0.3.0 → 0.5.0

package/dist/store/search-console-store.d.ts

@@ -0,0 +1,44 @@
+import { type DatabaseHandle } from '@cogenta/core';
+/**
+ * The one Google Search Console connection a site can have (fiche 70 task
+ * 4, ADR-0032). Same encryption discipline as `@cogenta/agents`'
+ * `ProviderConfigStore` and `@cogenta/mcp`'s connection store — AES-256-GCM
+ * via `node:crypto`, key derived from `COGENTA_AUTH_SIGNING_KEY` with a
+ * purpose-specific salt so the derived key is never the literal signing key
+ * reused across purposes (R7: no second secret to generate, rotate or
+ * lose). The refresh token is the only thing encrypted; `siteUrl` is not a
+ * secret (it is the property URL, already public knowledge to anyone who
+ * knows the site's own domain).
+ *
+ * Real database table (`ensureSearchConsoleConnectionTable`), not a file
+ * store: a Search Console connection is exactly the kind of "fixed row, not
+ * schema-declared content" `menu-tables.ts`/`pattern-tables.ts` already
+ * established a home for in this package, and it gets the same
+ * SQLite/Postgres/MySQL portability their tables already have for free.
+ */
+export interface SearchConsoleConnectionSummary {
+    readonly siteUrl: string;
+    readonly connectedAt: string;
+    readonly updatedAt: string;
+}
+export interface ConnectSearchConsoleInput {
+    readonly siteUrl: string;
+    readonly refreshToken: string;
+}
+export interface SearchConsoleConnectionStore {
+    /** `null` when no site has ever completed the OAuth flow. */
+    read(): Promise<SearchConsoleConnectionSummary | null>;
+    /** Encrypts and persists `refreshToken`; replaces any existing connection (a site connects to at most one GSC property at a time). */
+    connect(input: ConnectSearchConsoleInput): Promise<SearchConsoleConnectionSummary>;
+    disconnect(): Promise<void>;
+    /** The one place the real refresh token is ever decrypted. Throws `SEARCH_CONSOLE_NOT_CONNECTED` if there is none. */
+    decryptRefreshToken(): Promise<string>;
+}
+export interface SearchConsoleConnectionStoreOptions {
+    readonly db: DatabaseHandle;
+    /** `COGENTA_AUTH_SIGNING_KEY` — the encryption key is derived from it, never stored itself. */
+    readonly signingKey: string;
+    readonly now?: () => Date;
+}
+export declare function createSearchConsoleConnectionStore(options: SearchConsoleConnectionStoreOptions): SearchConsoleConnectionStore;
+//# sourceMappingURL=search-console-store.d.ts.map

package/dist/store/search-console-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-console-store.d.ts","sourceRoot":"","sources":["../../src/store/search-console-store.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,KAAK,cAAc,EAAmB,MAAM,eAAe,CAAA;AAMlF;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAC9B;AAED,MAAM,WAAW,4BAA4B;IAC3C,6DAA6D;IAC7D,IAAI,IAAI,OAAO,CAAC,8BAA8B,GAAG,IAAI,CAAC,CAAA;IACtD,sIAAsI;IACtI,OAAO,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAA;IAClF,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3B,sHAAsH;IACtH,mBAAmB,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;CACvC;AA+BD,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,EAAE,EAAE,cAAc,CAAA;IAC3B,+FAA+F;IAC/F,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;CAC1B;AAED,wBAAgB,kCAAkC,CAChD,OAAO,EAAE,mCAAmC,GAC3C,4BAA4B,CA+E9B"}

package/dist/store/search-console-store.js

@@ -0,0 +1,90 @@
+import { createCipheriv, createDecipheriv, randomBytes, scryptSync } from 'node:crypto';
+import { CogentaError, identifier, sql } from '@cogenta/core';
+import { SEARCH_CONSOLE_CONNECTION_ID, SEARCH_CONSOLE_CONNECTION_TABLE, } from './search-console-tables.js';
+const KEY_DERIVATION_SALT = 'cogenta-search-console-secrets-v1';
+const ALGORITHM = 'aes-256-gcm';
+function deriveKey(signingKey) {
+    return scryptSync(signingKey, KEY_DERIVATION_SALT, 32);
+}
+function notConnected() {
+    return new CogentaError({
+        code: 'SEARCH_CONSOLE_NOT_CONNECTED',
+        message: 'No site has connected a Google Search Console property yet.',
+        hint: "Connect one from the SEO screen's Diagnostics tab first.",
+    });
+}
+function toSummary(row) {
+    return { siteUrl: row.site_url, connectedAt: row.connected_at, updatedAt: row.updated_at };
+}
+export function createSearchConsoleConnectionStore(options) {
+    const { db } = options;
+    const now = options.now ?? (() => new Date());
+    const key = deriveKey(options.signingKey);
+    const table = identifier(SEARCH_CONSOLE_CONNECTION_TABLE, db.dialect);
+    function encrypt(plaintext) {
+        const iv = randomBytes(12);
+        const cipher = createCipheriv(ALGORITHM, key, iv);
+        const ciphertext = Buffer.concat([cipher.update(plaintext, 'utf8'), cipher.final()]);
+        return {
+            iv: iv.toString('base64'),
+            authTag: cipher.getAuthTag().toString('base64'),
+            ciphertext: ciphertext.toString('base64'),
+        };
+    }
+    function decrypt(row) {
+        const decipher = createDecipheriv(ALGORITHM, key, Buffer.from(row.refresh_token_iv, 'base64'));
+        decipher.setAuthTag(Buffer.from(row.refresh_token_auth_tag, 'base64'));
+        const plaintext = Buffer.concat([
+            decipher.update(Buffer.from(row.refresh_token_ciphertext, 'base64')),
+            decipher.final(),
+        ]);
+        return plaintext.toString('utf8');
+    }
+    async function findRow() {
+        const found = await db.query(sql `select * from ${table} where id = ${SEARCH_CONSOLE_CONNECTION_ID}`);
+        return found.rows[0] ?? null;
+    }
+    return {
+        async read() {
+            const row = await findRow();
+            return row === null ? null : toSummary(row);
+        },
+        async connect(input) {
+            const { iv, authTag, ciphertext } = encrypt(input.refreshToken);
+            const existing = await findRow();
+            const nowIso = now().toISOString();
+            const connectedAt = existing?.connected_at ?? nowIso;
+            if (existing === null) {
+                await db.query(sql `
+          insert into ${table} (
+            id, site_url, refresh_token_iv, refresh_token_auth_tag,
+            refresh_token_ciphertext, connected_at, updated_at
+          ) values (
+            ${SEARCH_CONSOLE_CONNECTION_ID}, ${input.siteUrl}, ${iv}, ${authTag},
+            ${ciphertext}, ${connectedAt}, ${nowIso}
+          )`);
+            }
+            else {
+                await db.query(sql `
+          update ${table} set
+            site_url = ${input.siteUrl},
+            refresh_token_iv = ${iv},
+            refresh_token_auth_tag = ${authTag},
+            refresh_token_ciphertext = ${ciphertext},
+            updated_at = ${nowIso}
+          where id = ${SEARCH_CONSOLE_CONNECTION_ID}`);
+            }
+            return { siteUrl: input.siteUrl, connectedAt, updatedAt: nowIso };
+        },
+        async disconnect() {
+            await db.query(sql `delete from ${table} where id = ${SEARCH_CONSOLE_CONNECTION_ID}`);
+        },
+        async decryptRefreshToken() {
+            const row = await findRow();
+            if (row === null)
+                throw notConnected();
+            return decrypt(row);
+        },
+    };
+}
+//# sourceMappingURL=search-console-store.js.map

package/dist/store/search-console-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-console-store.js","sourceRoot":"","sources":["../../src/store/search-console-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACvF,OAAO,EAAE,YAAY,EAAuB,UAAU,EAAE,GAAG,EAAE,MAAM,eAAe,CAAA;AAClF,OAAO,EACL,4BAA4B,EAC5B,+BAA+B,GAChC,MAAM,4BAA4B,CAAA;AAmDnC,MAAM,mBAAmB,GAAG,mCAAmC,CAAA;AAC/D,MAAM,SAAS,GAAG,aAAa,CAAA;AAE/B,SAAS,SAAS,CAAC,UAAkB;IACnC,OAAO,UAAU,CAAC,UAAU,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAA;AACxD,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,IAAI,YAAY,CAAC;QACtB,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,6DAA6D;QACtE,IAAI,EAAE,0DAA0D;KACjE,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,GAAkB;IACnC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,CAAC,YAAY,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,CAAA;AAC5F,CAAC;AASD,MAAM,UAAU,kCAAkC,CAChD,OAA4C;IAE5C,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAA;IACtB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAS,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;IACnD,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,+BAA+B,EAAE,EAAE,CAAC,OAAO,CAAC,CAAA;IAErE,SAAS,OAAO,CAAC,SAAiB;QAChC,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAA;QAC1B,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;QACjD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;QACpF,OAAO;YACL,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACzB,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC/C,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;SAC1C,CAAA;IACH,CAAC;IAED,SAAS,OAAO,CAAC,GAAkB;QACjC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAA;QAC9F,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,sBAAsB,EAAE,QAAQ,CAAC,CAAC,CAAA;QACtE,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;YAC9B,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,wBAAwB,EAAE,QAAQ,CAAC,CAAC;YACpE,QAAQ,CAAC,KAAK,EAAE;SACjB,CAAC,CAAA;QACF,OAAO,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IACnC,CAAC;IAED,KAAK,UAAU,OAAO;QACpB,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,KAAK,CAC1B,GAAG,CAAA,iBAAiB,KAAK,eAAe,4BAA4B,EAAE,CACvE,CAAA;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAA;IAC9B,CAAC;IAED,OAAO;QACL,KAAK,CAAC,IAAI;YACR,MAAM,GAAG,GAAG,MAAM,OAAO,EAAE,CAAA;YAC3B,OAAO,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;QAC7C,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,KAAK;YACjB,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;YAC/D,MAAM,QAAQ,GAAG,MAAM,OAAO,EAAE,CAAA;YAChC,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,EAAE,CAAA;YAClC,MAAM,WAAW,GAAG,QAAQ,EAAE,YAAY,IAAI,MAAM,CAAA;YAEpD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtB,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;wBACF,KAAK;;;;cAIf,4BAA4B,KAAK,KAAK,CAAC,OAAO,KAAK,EAAE,KAAK,OAAO;cACjE,UAAU,KAAK,WAAW,KAAK,MAAM;YACvC,CAAC,CAAA;YACP,CAAC;iBAAM,CAAC;gBACN,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;mBACP,KAAK;yBACC,KAAK,CAAC,OAAO;iCACL,EAAE;uCACI,OAAO;yCACL,UAAU;2BACxB,MAAM;uBACV,4BAA4B,EAAE,CAAC,CAAA;YAChD,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,CAAA;QACnE,CAAC;QAED,KAAK,CAAC,UAAU;YACd,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA,eAAe,KAAK,eAAe,4BAA4B,EAAE,CAAC,CAAA;QACtF,CAAC;QAED,KAAK,CAAC,mBAAmB;YACvB,MAAM,GAAG,GAAG,MAAM,OAAO,EAAE,CAAA;YAC3B,IAAI,GAAG,KAAK,IAAI;gBAAE,MAAM,YAAY,EAAE,CAAA;YACtC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAA;QACrB,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/store/search-console-tables.d.ts

@@ -0,0 +1,14 @@
+import { type DatabaseHandle } from '@cogenta/core';
+/**
+ * Google Search Console connector (fiche 70 task 4, ADR-0032) — same
+ * one-fixed-table treatment as `menu-tables.ts`/`pattern-tables.ts`: this is
+ * not schema-declared content, it is one site-wide connection record. At
+ * most one row ever exists (`id` is always `'default'`), because a Cogenta
+ * install is one site with one Search Console property, not a multi-tenant
+ * registry.
+ */
+export declare const SEARCH_CONSOLE_CONNECTION_TABLE = "cogenta_seo_search_console_connection";
+/** The table's one and only possible row id. */
+export declare const SEARCH_CONSOLE_CONNECTION_ID = "default";
+export declare function ensureSearchConsoleConnectionTable(db: DatabaseHandle): Promise<void>;
+//# sourceMappingURL=search-console-tables.d.ts.map

package/dist/store/search-console-tables.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-console-tables.d.ts","sourceRoot":"","sources":["../../src/store/search-console-tables.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAA8B,MAAM,eAAe,CAAA;AAG/E;;;;;;;GAOG;AACH,eAAO,MAAM,+BAA+B,0CAA0C,CAAA;AAEtF,gDAAgD;AAChD,eAAO,MAAM,4BAA4B,YAAY,CAAA;AAKrD,wBAAsB,kCAAkC,CAAC,EAAE,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAa1F"}

package/dist/store/search-console-tables.js

@@ -0,0 +1,29 @@
+import { identifier, sql, unsafeRaw } from '@cogenta/core';
+import { textColumn, timestampColumn } from './columns.js';
+/**
+ * Google Search Console connector (fiche 70 task 4, ADR-0032) — same
+ * one-fixed-table treatment as `menu-tables.ts`/`pattern-tables.ts`: this is
+ * not schema-declared content, it is one site-wide connection record. At
+ * most one row ever exists (`id` is always `'default'`), because a Cogenta
+ * install is one site with one Search Console property, not a multi-tenant
+ * registry.
+ */
+export const SEARCH_CONSOLE_CONNECTION_TABLE = 'cogenta_seo_search_console_connection';
+/** The table's one and only possible row id. */
+export const SEARCH_CONSOLE_CONNECTION_ID = 'default';
+/** How long a GSC `siteUrl` (`https://example.com/` or `sc-domain:example.com`) may be. */
+const SITE_URL_LENGTH = 255;
+export async function ensureSearchConsoleConnectionTable(db) {
+    const dialect = db.dialect;
+    const table = identifier(SEARCH_CONSOLE_CONNECTION_TABLE, dialect);
+    await db.query(sql `create table if not exists ${table} (
+    ${identifier('id', dialect)} ${textColumn(dialect, 16)} not null primary key,
+    ${identifier('site_url', dialect)} ${textColumn(dialect, SITE_URL_LENGTH)} not null,
+    ${identifier('refresh_token_iv', dialect)} ${textColumn(dialect, 64)} not null,
+    ${identifier('refresh_token_auth_tag', dialect)} ${textColumn(dialect, 64)} not null,
+    ${identifier('refresh_token_ciphertext', dialect)} ${unsafeRaw('text')} not null,
+    ${identifier('connected_at', dialect)} ${timestampColumn(dialect)} not null,
+    ${identifier('updated_at', dialect)} ${timestampColumn(dialect)} not null
+  )`);
+}
+//# sourceMappingURL=search-console-tables.js.map

package/dist/store/search-console-tables.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-console-tables.js","sourceRoot":"","sources":["../../src/store/search-console-tables.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAC/E,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAE1D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,uCAAuC,CAAA;AAEtF,gDAAgD;AAChD,MAAM,CAAC,MAAM,4BAA4B,GAAG,SAAS,CAAA;AAErD,2FAA2F;AAC3F,MAAM,eAAe,GAAG,GAAG,CAAA;AAE3B,MAAM,CAAC,KAAK,UAAU,kCAAkC,CAAC,EAAkB;IACzE,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAA;IAC1B,MAAM,KAAK,GAAG,UAAU,CAAC,+BAA+B,EAAE,OAAO,CAAC,CAAA;IAElE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA,8BAA8B,KAAK;MACjD,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;MACpD,UAAU,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,eAAe,CAAC;MACvE,UAAU,CAAC,kBAAkB,EAAE,OAAO,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;MAClE,UAAU,CAAC,wBAAwB,EAAE,OAAO,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;MACxE,UAAU,CAAC,0BAA0B,EAAE,OAAO,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC;MACpE,UAAU,CAAC,cAAc,EAAE,OAAO,CAAC,IAAI,eAAe,CAAC,OAAO,CAAC;MAC/D,UAAU,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,eAAe,CAAC,OAAO,CAAC;IAC/D,CAAC,CAAA;AACL,CAAC"}

package/dist/store/search-indexing.d.ts

@@ -30,5 +30,41 @@ export interface SearchIndexingOptions {
      */
     readonly onError?: (error: unknown) => void;
 }
+/**
+ * Re-derives the indexed document for one entry.
+ *
+ * The published face is asked for **first**, and it is the one indexed
+ * whenever it exists. That ordering is the whole safety property: with drafts
+ * enabled, `update()` returns the working face of an entry whose `status` is
+ * still `published`, and indexing *that* would file unreviewed text under a
+ * status a public search is allowed to reach. Reading back through
+ * `state: 'published'` makes it structurally impossible — the store only
+ * returns a row there when its status really is `published`.
+ *
+ * When there is no published face, the working one is indexed under its real
+ * status (`draft`, `scheduled`, `archived`), which is what lets the admin
+ * find a draft while `SearchQuery`'s `published` default keeps it away from
+ * anyone who did not explicitly ask for it and hold the permission to.
+ */
+declare function reindex<TValues extends ContentValues>(store: ContentStore<TValues>, options: SearchIndexingOptions, id: string): Promise<void>;
+/**
+ * Re-derives the indexed document for one entry — exported so a full rebuild
+ * (`reindexAll`, and `cogenta`'s "Reindex search" tool, fiche 24 task 3) uses
+ * the exact same per-entry logic as the write path, rather than a second
+ * copy that could drift from what `withSearchIndexing` actually does on save.
+ */
+export declare const reindexEntry: typeof reindex;
+/**
+ * Walks every entry of a collection — trashed included, since a trashed entry
+ * can still be `published` (ADR-0022: trash is orthogonal to status) and a
+ * stale search hit for it is exactly the kind of thing a full rebuild exists
+ * to fix — and re-derives its indexed document.
+ *
+ * This is the "Reindexer la recherche" tool (fiche 24 task 3): after an
+ * import, or after `SearchDriver.clear()`, nothing else ever repopulates the
+ * index for content that already existed before the write path saw it.
+ */
+export declare function reindexAll<TValues extends ContentValues = ContentValues>(store: ContentStore<TValues>, options: SearchIndexingOptions, onProgress?: (count: number) => void): Promise<number>;
 export declare function withSearchIndexing<TValues extends ContentValues = ContentValues>(store: ContentStore<TValues>, options: SearchIndexingOptions): ContentStore<TValues>;
+export {};
 //# sourceMappingURL=search-indexing.d.ts.map

package/dist/store/search-indexing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"search-indexing.d.ts","sourceRoot":"","sources":["../../src/store/search-indexing.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAC9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAE/C;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAA;IACzC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAA;IAC5B;;;;;;;;OAQG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAA;CAC5C;AA0CD,wBAAgB,kBAAkB,CAAC,OAAO,SAAS,aAAa,GAAG,aAAa,EAC9E,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,EAC5B,OAAO,EAAE,qBAAqB,GAC7B,YAAY,CAAC,OAAO,CAAC,CA2BvB"}
+{"version":3,"file":"search-indexing.d.ts","sourceRoot":"","sources":["../../src/store/search-indexing.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAC9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAE/C;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAA;IACzC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAA;IAC5B;;;;;;;;OAQG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAA;CAC5C;AAED;;;;;;;;;;;;;;;GAeG;AACH,iBAAe,OAAO,CAAC,OAAO,SAAS,aAAa,EAClD,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,EAC5B,OAAO,EAAE,qBAAqB,EAC9B,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,IAAI,CAAC,CAkBf;AAED;;;;;GAKG;AACH,eAAO,MAAM,YAAY,gBAAU,CAAA;AAEnC;;;;;;;;;GASG;AACH,wBAAsB,UAAU,CAAC,OAAO,SAAS,aAAa,GAAG,aAAa,EAC5E,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,EAC5B,OAAO,EAAE,qBAAqB,EAC9B,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,GACnC,OAAO,CAAC,MAAM,CAAC,CAcjB;AAED,wBAAgB,kBAAkB,CAAC,OAAO,SAAS,aAAa,GAAG,aAAa,EAC9E,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,EAC5B,OAAO,EAAE,qBAAqB,GAC7B,YAAY,CAAC,OAAO,CAAC,CA2BvB"}

package/dist/store/search-indexing.js

@@ -34,6 +34,39 @@ async function reindex(store, options, id) {
         options.onError?.(error);
     }
 }
+/**
+ * Re-derives the indexed document for one entry — exported so a full rebuild
+ * (`reindexAll`, and `cogenta`'s "Reindex search" tool, fiche 24 task 3) uses
+ * the exact same per-entry logic as the write path, rather than a second
+ * copy that could drift from what `withSearchIndexing` actually does on save.
+ */
+export const reindexEntry = reindex;
+/**
+ * Walks every entry of a collection — trashed included, since a trashed entry
+ * can still be `published` (ADR-0022: trash is orthogonal to status) and a
+ * stale search hit for it is exactly the kind of thing a full rebuild exists
+ * to fix — and re-derives its indexed document.
+ *
+ * This is the "Reindexer la recherche" tool (fiche 24 task 3): after an
+ * import, or after `SearchDriver.clear()`, nothing else ever repopulates the
+ * index for content that already existed before the write path saw it.
+ */
+export async function reindexAll(store, options, onProgress) {
+    let cursor;
+    let count = 0;
+    for (;;) {
+        const page = await store.list({ trashed: 'include', limit: 100, ...(cursor ? { cursor } : {}) });
+        for (const entry of page.items) {
+            await reindex(store, options, entry.id);
+            count += 1;
+            onProgress?.(count);
+        }
+        if (!page.hasMore || page.nextCursor === null)
+            break;
+        cursor = page.nextCursor;
+    }
+    return count;
+}
 export function withSearchIndexing(store, options) {
     async function after(entry) {
         await reindex(store, options, entry.id);

package/dist/store/search-indexing.js.map

@@ -1 +1 @@
-{"version":3,"file":"search-indexing.js","sourceRoot":"","sources":["../../src/store/search-indexing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAoCxD;;;;;;;;;;;;;;;GAeG;AACH,KAAK,UAAU,OAAO,CACpB,KAA4B,EAC5B,OAA8B,EAC9B,EAAU;IAEV,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;IACrC,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAA;QAC9D,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,MAAM,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAA;YAC3D,OAAM;QACR,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;QAC1D,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC,CAAA;YACvD,OAAM;QACR,CAAC;QACD,MAAM,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAA;IAC3D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAA;IAC1B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,KAA4B,EAC5B,OAA8B;IAE9B,KAAK,UAAU,KAAK,CAAyC,KAAa;QACxE,MAAM,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,CAAA;QACvC,OAAO,KAAK,CAAA;IACd,CAAC;IAED,OAAO;QACL,GAAG,KAAK;QACR,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzD,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACjE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACnE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACvE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QACrF,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YACnB,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YACtC,sEAAsE;YACtE,yEAAyE;YACzE,kEAAkE;YAClE,kDAAkD;YAClD,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAA;YACzE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAA;YAC1B,CAAC;YACD,OAAO,OAAO,CAAA;QAChB,CAAC;KACF,CAAA;AACH,CAAC"}
+{"version":3,"file":"search-indexing.js","sourceRoot":"","sources":["../../src/store/search-indexing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAoCxD;;;;;;;;;;;;;;;GAeG;AACH,KAAK,UAAU,OAAO,CACpB,KAA4B,EAC5B,OAA8B,EAC9B,EAAU;IAEV,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;IACrC,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAA;QAC9D,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,MAAM,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAA;YAC3D,OAAM;QACR,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;QAC1D,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC,CAAA;YACvD,OAAM;QACR,CAAC;QACD,MAAM,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAA;IAC3D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAA;IAC1B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,OAAO,CAAA;AAEnC;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,KAA4B,EAC5B,OAA8B,EAC9B,UAAoC;IAEpC,IAAI,MAA0B,CAAA;IAC9B,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,SAAS,CAAC;QACR,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;QAChG,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC/B,MAAM,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,CAAA;YACvC,KAAK,IAAI,CAAC,CAAA;YACV,UAAU,EAAE,CAAC,KAAK,CAAC,CAAA;QACrB,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI;YAAE,MAAK;QACpD,MAAM,GAAG,IAAI,CAAC,UAAU,CAAA;IAC1B,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,KAA4B,EAC5B,OAA8B;IAE9B,KAAK,UAAU,KAAK,CAAyC,KAAa;QACxE,MAAM,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,CAAA;QACvC,OAAO,KAAK,CAAA;IACd,CAAC;IAED,OAAO;QACL,GAAG,KAAK;QACR,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzD,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACjE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACnE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACvE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QACrF,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YACnB,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YACtC,sEAAsE;YACtE,yEAAyE;YACzE,kEAAkE;YAClE,kDAAkD;YAClD,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAA;YACzE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAA;YAC1B,CAAC;YACD,OAAO,OAAO,CAAA;QAChB,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/store/site-settings-registry.d.ts

@@ -0,0 +1,164 @@
+import { z } from 'zod';
+/**
+ * The declarative registry fiche 23 task 1 asks for: "un magasin clé/valeur
+ * typé, avec un schéma Zod déclarant chaque réglage : clé, type, valeur par
+ * défaut, portée (site ou locale), permission requise. Un réglage inconnu est
+ * refusé — pas un dépotoir de clés libres."
+ *
+ * Adding a setting is one entry here — `SiteSettingsStore` validates,
+ * defaults and scopes every key generically from this list (never a special
+ * case per key), and the admin's settings screen renders a field from each
+ * entry's `group`/`order`/`uiType` the same way (`site-settings-field.tsx`).
+ * That is what makes the fiche's own acceptance test true: "ajouter un
+ * réglage nouveau = une ligne de déclaration, et il apparaît à l'écran sans
+ * code d'interface supplémentaire."
+ *
+ * Every key here is **editorial** (ADR-0025's third category) — a rédacteur
+ * changes it from the admin, and it never duplicates a field
+ * `cogenta.config.mjs` already owns. `general.defaultLocale` and
+ * `reading.notFoundPath`, for instance, stay in the config file on purpose
+ * (section 8 of the fiche recommends migrating nothing that already exists);
+ * the settings screen shows them too, but read-only, mirrored from
+ * `SchemaDocument`/`Site.site` rather than declared here.
+ */
+/** How the admin renders a value — never a free-form widget choice per key. */
+export declare const SITE_SETTING_UI_TYPES: readonly ['string', 'text', 'email', 'boolean', 'path', 'number', 'timeZone', 'dateStyle', 'timeStyle', 
+/**
+ * A closed choice, rendered as a `<select>`. Fiche 34 task 4's first user:
+ * `commerce.priceDisplay` (`ttc`/`ht`) — free text would let an operator
+ * type a third value the totals engine does not know what to do with.
+ */
+'select', 
+/**
+ * A single optional media reference, rendered as `MediaPicker` (fiche L21
+ * task 8's first and only user: `branding.customLogoMediaId`). The value
+ * stored is a media id, or `''` for "unset" — a plain string, like every
+ * other value this registry holds; nothing here talks to `MediaStore`
+ * directly, exactly the way a `path` setting names a route without
+ * checking the route exists.
+ */
+'media', 
+/**
+ * A short ordered list of `{label, url}` pairs (L25 D2's first and only
+ * user: `general.socialLinks`), rendered as a textarea of one
+ * `Label | https://url` line per entry, converted to/from JSON by the
+ * field component itself — the same "closest shape in the closed set"
+ * reasoning `seo.collectionTitleTemplates` already documents for a `text`
+ * bypass, except this one *is* a real, generic editor (a JSON object map
+ * has no natural line-per-entry form; an ordered list of two short strings
+ * does) rather than a placeholder for a bespoke screen.
+ */
+'linkList'];
+export type SiteSettingUiType = (typeof SITE_SETTING_UI_TYPES)[number];
+export declare const SITE_SETTING_GROUPS: readonly ['general', 'reading', 'discussion', 'media', 'privacy', 
+/**
+ * The shop-wide settings of fiche 34 task 4 — currency, tax-inclusive vs.
+ * exclusive display, countries served, minimum order, default backorder
+ * policy, and the invoice mentions of task 5. `commerce.tosPagePath` and
+ * `commerce.returnPolicyPagePath` are, deliberately, **paths** here —
+ * exactly the way `reading.homePath`/`privacy.policyPath` already point at
+ * a real content entry rather than storing legal text as a settings field
+ * (fiche 34 § pièges: "les CGV doivent être une page publique").
+ */
+'commerce', 
+/**
+ * Cogenta's own credit and white-label override (fiche L21 task 8) —
+ * whether the public footer and the admin shell name Cogenta at all, and
+ * what replaces it when they don't. Editorial on purpose: a reseller
+ * turns this off from the admin the same way any other setting here
+ * changes, with no redeploy and no code touched.
+ */
+'branding', 
+/**
+ * Search-engine visibility (fiche 21 task 3): title/description templates,
+ * per-collection sitemap hints, and social-card defaults. Previously
+ * `seo.tsx` was read-only "by design" — that was a scope choice of a
+ * previous lot, never an ADR, and this group is what makes it editable
+ * without inventing a second settings store: exactly the same registry
+ * that already backs `SettingsRoute`, just with its own screen
+ * (`SeoRoute`) rather than a tab there, the same way `commerce` gets its
+ * own screen instead of a `SettingsRoute` tab.
+ */
+'seo', 
+/**
+ * OpenTelemetry tracing and structured-log collection (fiche L22 task 5).
+ * Editorial on purpose, unlike the OTLP export destination (which stays in
+ * `cogenta.config.mjs`'s `observability` section, because it can carry a
+ * bearer-token header — rule R7): whether the local recent-events buffer
+ * runs at all, and how verbose it is, are exactly the kind of switch an
+ * admin should be able to flip from the "Exploitation" screen with no
+ * redeploy, the same way `discussion.enabled` already works.
+ */
+'observability', 
+/**
+ * L22 task 4 — which collections the writing assistant's vector index
+ * actually contains. Its own screen (the redesigned `AssistantRoute`),
+ * not a `SettingsRoute` tab, for the same reason `commerce`/`seo` get
+ * their own: the one key this group holds (`assistant.indexedCollections`)
+ * is a per-collection map, not a single scalar a generic form field can
+ * render — exactly `seo.sitemapCollectionSettings`'s own shape.
+ */
+'assistant', 
+/**
+ * The update system (L22 task 9): whether `cogenta serve`'s own
+ * `updates-auto-check` scheduled task may apply an npm update on its own,
+ * and how far it may go. Lives here, not in `cogenta.config.mjs`, for the
+ * same reason `discussion.moderationRequired` does — it is a live
+ * operational choice an admin flips from the screen at 3am because a
+ * package just misbehaved, not something that should need a git commit
+ * and a redeploy to change. Read by the scheduled task on every tick
+ * (`updates.ts` in `cogenta serve`'s wiring), never cached at startup.
+ */
+'updates', 
+/**
+ * Admin nav reordering/hiding (fiche 22 tâche 8, part 3) — which sidebar
+ * sections and entries a signed-in actor sees, and in what order.
+ * Deliberately **site-wide**, not per-browser: `sidebarCollapsed` and
+ * `groupOpen` (`app-shell.tsx`) stay in `localStorage` on purpose (each
+ * person's own "collapsed today" is not something anyone else needs to
+ * see), but "this site sells nothing, so hide Boutique for everyone" is an
+ * editorial decision about the site, no different from every other setting
+ * in this registry — it has to survive a different browser, a different
+ * person signing in, and a fresh install pulling the same database.
+ */
+'navigation', 
+/**
+ * Fiche 59 — the one non-secret, operator-set fact a channel's step-by-step
+ * guide needs to name the bot by handle instead of "the Cogenta bot": each
+ * channel's bot display name/handle, free text, never a credential. Bot
+ * *tokens* stay environment-only (R7) and never enter this table — this
+ * group exists specifically so a guide can say "open a chat with
+ * @my_cogenta_bot" without ever storing anything a leaked table could turn
+ * into a working credential.
+ */
+'channels'];
+export type SiteSettingGroup = (typeof SITE_SETTING_GROUPS)[number];
+export declare const SITE_SETTING_SCOPES: readonly ['site', 'locale'];
+export type SiteSettingScope = (typeof SITE_SETTING_SCOPES)[number];
+export interface SiteSettingDefinition {
+    /** The machine key, `<group-ish>.<name>` by convention — never parsed, just a stable id. */
+    readonly key: string;
+    readonly group: SiteSettingGroup;
+    /** Sort order within the group, ascending. Ties break on `key`. */
+    readonly order: number;
+    readonly uiType: SiteSettingUiType;
+    readonly scope: SiteSettingScope;
+    readonly schema: z.ZodType;
+    readonly defaultValue: unknown;
+    /** Only meaningful for `uiType: 'select'` — the closed set of choices the admin renders. */
+    readonly options?: readonly {
+        readonly value: string;
+        readonly label: string;
+    }[];
+    /**
+     * Only `admin` may write any of these (fiche 23 § "Critères d'acceptation":
+     * "réglages éditoriaux réservés à admin"). Kept on the descriptor rather
+     * than hardcoded in the router so a future setting could in principle name
+     * a different role — none does today, and the router still refuses
+     * anything this field does not say.
+     */
+    readonly writeRoles: readonly string[];
+}
+export declare const SITE_SETTINGS_REGISTRY: readonly SiteSettingDefinition[];
+export declare function siteSettingByKey(key: string): SiteSettingDefinition | undefined;
+//# sourceMappingURL=site-settings-registry.d.ts.map

package/dist/store/site-settings-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"site-settings-registry.d.ts","sourceRoot":"","sources":["../../src/store/site-settings-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,+EAA+E;AAC/E,eAAO,MAAM,qBAAqB,YAChC,QAAQ,EACR,MAAM,EACN,OAAO,EACP,SAAS,EACT,MAAM,EACN,QAAQ,EACR,UAAU,EACV,WAAW,EACX,WAAW;AACX;;;;GAIG;AACH,QAAQ;AACR;;;;;;;GAOG;AACH,OAAO;AACP;;;;;;;;;GASG;AACH,UAAU,CACF,CAAA;AAEV,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAA;AAEtE,eAAO,MAAM,mBAAmB,YAC9B,SAAS,EACT,SAAS,EACT,YAAY,EACZ,OAAO,EACP,SAAS;AACT;;;;;;;;GAQG;AACH,UAAU;AACV;;;;;;GAMG;AACH,UAAU;AACV;;;;;;;;;GASG;AACH,KAAK;AACL;;;;;;;;GAQG;AACH,eAAe;AACf;;;;;;;GAOG;AACH,WAAW;AACX;;;;;;;;;GASG;AACH,SAAS;AACT;;;;;;;;;;GAUG;AACH,YAAY;AACZ;;;;;;;;GAQG;AACH,UAAU,CACF,CAAA;AAEV,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAA;AAEnE,eAAO,MAAM,mBAAmB,YAAI,MAAM,EAAE,QAAQ,CAAU,CAAA;AAE9D,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAA;AAEnE,MAAM,WAAW,qBAAqB;IACpC,4FAA4F;IAC5F,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAA;IAChC,mEAAmE;IACnE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAA;IAClC,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAA;IAChC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAA;IAC1B,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAA;IAC9B,4FAA4F;IAC5F,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;IAChF;;;;;;OAMG;IACH,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAA;CACvC;AA4LD,eAAO,MAAM,sBAAsB,EAAE,SAAS,qBAAqB,EA+3BzD,CAAA;AAIV,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,qBAAqB,GAAG,SAAS,CAE/E"}