@glw907/cairn-cms 0.58.0 → 0.59.0

package/dist/components/CairnMediaLibrary.svelte.d.ts

@@ -13,8 +13,16 @@ interface Props {
  * shows where each one is used, edits its name and default alt, and deletes it safely. The resting
  * surface is a visual contact-sheet grid (a roving-tabindex listbox of tiles), with a list-density
  * toggle that flips to an enriched sortable table. One toolbar row carries search, a pick-one triage
- * radiogroup (All, Needs alt, Unused), and the density toggle. Filtering, sorting, and a growing
- * client window all run over the full loaded set in component state.
+ * radiogroup (All, Needs alt, No references found), and the density toggle. Filtering, sorting, and a
+ * growing client window all run over the full loaded set in component state.
+ *
+ * Multi-select rides a Set of selected hashes, decoupled from the slide-over's single asset and from
+ * roving focus. The grid is an APG multiselectable listbox (aria-multiselectable, real cell focus):
+ * Space toggles the focused tile, Shift+Arrow extends a range, Ctrl/Cmd+A selects every visible asset,
+ * and Escape clears. The list density is a plain selectable table whose leading native-checkbox column
+ * is the selection signal (no grid role, since it has no grid keyboard model). A sticky action bar
+ * appears on the first selection with a live count, the scope, Select all in view, Clear, and the
+ * reversible bulk Delete.
  *
  * Activating a tile or row opens a NON-MODAL detail slide-over from the right (the established
  * details-slide-over recipe): no scrim, the library stays live and in the a11y tree behind it, Escape

package/dist/components/admin-icons.d.ts

@@ -27,3 +27,4 @@ export { default as RefreshCwIcon } from '@lucide/svelte/icons/refresh-cw';
 export { default as GitBranchIcon } from '@lucide/svelte/icons/git-branch';
 export { default as ArrowRightIcon } from '@lucide/svelte/icons/arrow-right';
 export { default as MegaphoneIcon } from '@lucide/svelte/icons/megaphone';
+export { default as DatabaseIcon } from '@lucide/svelte/icons/database';

package/dist/components/admin-icons.js

@@ -29,3 +29,4 @@ export { default as RefreshCwIcon } from '@lucide/svelte/icons/refresh-cw';
 export { default as GitBranchIcon } from '@lucide/svelte/icons/git-branch';
 export { default as ArrowRightIcon } from '@lucide/svelte/icons/arrow-right';
 export { default as MegaphoneIcon } from '@lucide/svelte/icons/megaphone';
+export { default as DatabaseIcon } from '@lucide/svelte/icons/database';

package/dist/components/cairn-admin.css

@@ -80,6 +80,7 @@
     --container-md: 28rem;
     --container-lg: 32rem;
     --container-xl: 36rem;
+    --container-2xl: 42rem;
     --container-3xl: 48rem;
     --container-5xl: 64rem;
     --text-xs: .75rem;
@@ -3046,6 +3047,14 @@
     bottom: calc(var(--spacing) * 0);
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .bottom-3\.5 {
+    bottom: calc(var(--spacing) * 3.5);
+  }
+
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .left-2 {
+    left: calc(var(--spacing) * 2);
+  }
+
   :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .join {
     --join-ss: 0;
     --join-se: 0;
@@ -3348,6 +3357,10 @@
     z-index: 10;
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .z-20 {
+    z-index: 20;
+  }
+
   :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .z-30 {
     z-index: 30;
   }
@@ -4309,10 +4322,22 @@
     height: 1px;
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .max-h-36 {
+    max-height: calc(var(--spacing) * 36);
+  }
+
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .max-h-40 {
+    max-height: calc(var(--spacing) * 40);
+  }
+
   :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .max-h-44 {
     max-height: calc(var(--spacing) * 44);
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .max-h-52 {
+    max-height: calc(var(--spacing) * 52);
+  }
+
   :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .max-h-56 {
     max-height: calc(var(--spacing) * 56);
   }
@@ -4513,6 +4538,10 @@
     max-width: calc(var(--spacing) * 0);
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .max-w-2xl {
+    max-width: var(--container-2xl);
+  }
+
   :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .max-w-3xl {
     max-width: var(--container-3xl);
   }
@@ -4541,6 +4570,10 @@
     max-width: 72ch;
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .max-w-\[640px\] {
+    max-width: 640px;
+  }
+
   :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .max-w-full {
     max-width: 100%;
   }
@@ -4695,6 +4728,10 @@
     grid-template-columns: repeat(2, minmax(0, 1fr));
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .grid-cols-3 {
+    grid-template-columns: repeat(3, minmax(0, 1fr));
+  }
+
   :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .grid-cols-\[1fr_auto_1fr\] {
     grid-template-columns: 1fr auto 1fr;
   }
@@ -4871,6 +4908,10 @@
     border-radius: .25rem;
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .rounded-2xl {
+    border-radius: var(--radius-2xl);
+  }
+
   :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .rounded-\[0\.55rem\] {
     border-radius: .55rem;
   }
@@ -5001,6 +5042,26 @@
     }
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .border-\[color-mix\(in_oklab\,var\(--cairn-card-border\)_70\%\,transparent\)\] {
+    border-color: var(--cairn-card-border);
+  }
+
+  @supports (color: color-mix(in lab, red, red)) {
+    :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .border-\[color-mix\(in_oklab\,var\(--cairn-card-border\)_70\%\,transparent\)\] {
+      border-color: color-mix(in oklab,var(--cairn-card-border) 70%,transparent);
+    }
+  }
+
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .border-\[color-mix\(in_oklab\,var\(--cairn-error-border\)_70\%\,transparent\)\] {
+    border-color: var(--cairn-error-border);
+  }
+
+  @supports (color: color-mix(in lab, red, red)) {
+    :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .border-\[color-mix\(in_oklab\,var\(--cairn-error-border\)_70\%\,transparent\)\] {
+      border-color: color-mix(in oklab,var(--cairn-error-border) 70%,transparent);
+    }
+  }
+
   :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .border-\[color-mix\(in_oklab\,var\(--color-error\)_35\%\,var\(--cairn-card-border\)\)\] {
     border-color: var(--color-error);
   }
@@ -5105,6 +5166,16 @@
     border: none;
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .bg-\[color-mix\(in_oklab\,var\(--cairn-warning-ink\)_8\%\,var\(--color-base-100\)\)\] {
+    background-color: var(--cairn-warning-ink);
+  }
+
+  @supports (color: color-mix(in lab, red, red)) {
+    :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .bg-\[color-mix\(in_oklab\,var\(--cairn-warning-ink\)_8\%\,var\(--color-base-100\)\)\] {
+      background-color: color-mix(in oklab,var(--cairn-warning-ink) 8%,var(--color-base-100));
+    }
+  }
+
   :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .bg-\[color-mix\(in_oklab\,var\(--color-error\)_5\%\,transparent\)\] {
     background-color: var(--color-error);
   }
@@ -5157,6 +5228,14 @@
     }
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .bg-\[var\(--color-error\)\] {
+    background-color: var(--color-error);
+  }
+
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .bg-\[var\(--color-positive-tint\,var\(--cairn-card-border\)\)\] {
+    background-color: var(--color-positive-tint, var(--cairn-card-border));
+  }
+
   :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .bg-base-100 {
     background-color: var(--color-base-100);
   }
@@ -5273,6 +5352,16 @@
     }
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .bg-primary\/\[0\.03\] {
+    background-color: var(--color-primary);
+  }
+
+  @supports (color: color-mix(in lab, red, red)) {
+    :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .bg-primary\/\[0\.03\] {
+      background-color: color-mix(in oklab, var(--color-primary) 3%, transparent);
+    }
+  }
+
   :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .bg-primary\/\[0\.05\] {
     background-color: var(--color-primary);
   }
@@ -5305,12 +5394,30 @@
     background-color: var(--color-warning);
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .\[background-image\:linear-gradient\(45deg\,color-mix\(in_oklab\,var\(--color-base-content\)_7\%\,transparent\)_25\%\,transparent_25\%\,transparent_75\%\,color-mix\(in_oklab\,var\(--color-base-content\)_7\%\,transparent\)_75\%\)\,linear-gradient\(45deg\,color-mix\(in_oklab\,var\(--color-base-content\)_7\%\,transparent\)_25\%\,transparent_25\%\,transparent_75\%\,color-mix\(in_oklab\,var\(--color-base-content\)_7\%\,transparent\)_75\%\)\] {
+    background-image: linear-gradient(45deg,var(--color-base-content) 25%,transparent 25%,transparent 75%,var(--color-base-content) 75%),linear-gradient(45deg,var(--color-base-content) 25%,transparent 25%,transparent 75%,var(--color-base-content) 75%);
+  }
+
+  @supports (color: color-mix(in lab, red, red)) {
+    :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .\[background-image\:linear-gradient\(45deg\,color-mix\(in_oklab\,var\(--color-base-content\)_7\%\,transparent\)_25\%\,transparent_25\%\,transparent_75\%\,color-mix\(in_oklab\,var\(--color-base-content\)_7\%\,transparent\)_75\%\)\,linear-gradient\(45deg\,color-mix\(in_oklab\,var\(--color-base-content\)_7\%\,transparent\)_25\%\,transparent_25\%\,transparent_75\%\,color-mix\(in_oklab\,var\(--color-base-content\)_7\%\,transparent\)_75\%\)\] {
+      background-image: linear-gradient(45deg,color-mix(in oklab,var(--color-base-content) 7%,transparent) 25%,transparent 25%,transparent 75%,color-mix(in oklab,var(--color-base-content) 7%,transparent) 75%),linear-gradient(45deg,color-mix(in oklab,var(--color-base-content) 7%,transparent) 25%,transparent 25%,transparent 75%,color-mix(in oklab,var(--color-base-content) 7%,transparent) 75%);
+    }
+  }
+
   @layer daisyui.l1.l2 {
     :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .loading-spinner {
       mask-image: url("data:image/svg+xml,%3Csvg width='24' height='24' stroke='black' viewBox='0 0 24 24' xmlns='http://www.w3.org/2000/svg'%3E%3Cg transform-origin='center'%3E%3Ccircle cx='12' cy='12' r='9.5' fill='none' stroke-width='3' stroke-linecap='round'%3E%3CanimateTransform attributeName='transform' type='rotate' from='0 12 12' to='360 12 12' dur='2s' repeatCount='indefinite'/%3E%3Canimate attributeName='stroke-dasharray' values='0,150;42,150;42,150' keyTimes='0;0.475;1' dur='1.5s' repeatCount='indefinite'/%3E%3Canimate attributeName='stroke-dashoffset' values='0;-16;-59' keyTimes='0;0.475;1' dur='1.5s' repeatCount='indefinite'/%3E%3C/circle%3E%3C/g%3E%3C/svg%3E");
     }
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .\[background-size\:8px_8px\] {
+    background-size: 8px 8px;
+  }
+
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .\[background-position\:0_0\,4px_4px\] {
+    background-position: 0 0, 4px 4px;
+  }
+
   :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .object-contain {
     object-fit: contain;
   }
@@ -5464,6 +5571,10 @@
     padding-inline: calc(var(--spacing) * 3);
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .px-3\.5 {
+    padding-inline: calc(var(--spacing) * 3.5);
+  }
+
   :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .px-4 {
     padding-inline: calc(var(--spacing) * 4);
   }
@@ -5786,6 +5897,10 @@
     word-break: break-all;
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .whitespace-nowrap {
+    white-space: nowrap;
+  }
+
   @layer daisyui.l1.l2 {
     :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .alert-error {
       color: var(--color-error-content);
@@ -5822,6 +5937,10 @@
     color: var(--color-accent);
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .text-\[var\(--color-error-content\)\] {
+    color: var(--color-error-content);
+  }
+
   :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .text-\[var\(--color-muted\)\] {
     color: var(--color-muted);
   }
@@ -6005,6 +6124,16 @@
     box-shadow: var(--tw-inset-shadow), var(--tw-inset-ring-shadow), var(--tw-ring-offset-shadow), var(--tw-ring-shadow), var(--tw-shadow);
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .ring-primary\/40 {
+    --tw-ring-color: var(--color-primary);
+  }
+
+  @supports (color: color-mix(in lab, red, red)) {
+    :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .ring-primary\/40 {
+      --tw-ring-color: color-mix(in oklab, var(--color-primary) 40%, transparent);
+    }
+  }
+
   :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .ring-primary\/70 {
     --tw-ring-color: var(--color-primary);
   }
@@ -6343,6 +6472,24 @@
     }
   }
 
+  @media (hover: hover) {
+    :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .hover\:bg-\[var\(--cairn-error-tint\)\]:hover {
+      background-color: var(--cairn-error-tint);
+    }
+  }
+
+  @media (hover: hover) {
+    :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .hover\:bg-\[var\(--color-error\)\]\/90:hover {
+      background-color: var(--color-error);
+    }
+
+    @supports (color: color-mix(in lab, red, red)) {
+      :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .hover\:bg-\[var\(--color-error\)\]\/90:hover {
+        background-color: color-mix(in oklab, var(--color-error) 90%, transparent);
+      }
+    }
+  }
+
   @media (hover: hover) {
     :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .hover\:bg-base-200:hover {
       background-color: var(--color-base-200);

package/dist/log/events.d.ts

@@ -1 +1 @@
-export type CairnLogEvent = 'auth.link.requested' | 'auth.link.send_failed' | 'auth.token.minted' | 'auth.token.confirmed' | 'auth.session.created' | 'auth.session.destroyed' | 'commit.succeeded' | 'commit.failed' | 'config.invalid' | 'entry.published' | 'entry.discarded' | 'publish.failed' | 'github.unreachable' | 'guard.rejected' | 'media.uploaded' | 'media.upload_failed' | 'media.delivery_failed' | 'media.orphan_reconcile' | 'media.resolve_missing' | 'media.deleted' | 'media.delete_blocked' | 'media.replaced' | 'media.replace_blocked' | 'media.alt_propagated';
+export type CairnLogEvent = 'auth.link.requested' | 'auth.link.send_failed' | 'auth.token.minted' | 'auth.token.confirmed' | 'auth.session.created' | 'auth.session.destroyed' | 'commit.succeeded' | 'commit.failed' | 'config.invalid' | 'entry.published' | 'entry.discarded' | 'publish.failed' | 'github.unreachable' | 'guard.rejected' | 'media.uploaded' | 'media.upload_failed' | 'media.delivery_failed' | 'media.orphan_reconcile' | 'media.resolve_missing' | 'media.deleted' | 'media.delete_blocked' | 'media.bulk_deleted' | 'media.orphans_purged' | 'media.replaced' | 'media.replace_blocked' | 'media.alt_propagated';

package/dist/media/bulk-delete-plan.d.ts

@@ -0,0 +1,24 @@
+import type { UsageEntry, UsageIndex } from './usage.js';
+import type { MediaManifest } from './manifest.js';
+/** One selected hash that is not deleted, with why and (for the where-used) its usage rows. The rows
+ *  are present only for 'still-referenced'; an 'uncommitted' skip carries an empty list. */
+export interface BulkDeleteSkip {
+    hash: string;
+    reason: 'still-referenced' | 'uncommitted';
+    usage: UsageEntry[];
+}
+/** The partitioned selection: the hashes safe to purge and the hashes held back. Both arrays keep the
+ *  input order of `selected` so the screen reports them in the order the user picked. */
+export interface BulkDeletePlan {
+    deletable: string[];
+    skipped: BulkDeleteSkip[];
+}
+/**
+ * Partition `selected` against a strict usage index and the media manifest.
+ *
+ * A hash with one or more usage rows is skipped 'still-referenced', carrying those rows for the
+ * where-used. A hash with no usage row and no committed manifest row is skipped 'uncommitted', since
+ * there is nothing committed to delete. A hash with no usage row and a committed manifest row is
+ * deletable. The input order of `selected` is preserved in both output arrays.
+ */
+export declare function planBulkDelete(selected: string[], index: UsageIndex, manifest: MediaManifest): BulkDeletePlan;

package/dist/media/bulk-delete-plan.js

@@ -0,0 +1,25 @@
+/**
+ * Partition `selected` against a strict usage index and the media manifest.
+ *
+ * A hash with one or more usage rows is skipped 'still-referenced', carrying those rows for the
+ * where-used. A hash with no usage row and no committed manifest row is skipped 'uncommitted', since
+ * there is nothing committed to delete. A hash with no usage row and a committed manifest row is
+ * deletable. The input order of `selected` is preserved in both output arrays.
+ */
+export function planBulkDelete(selected, index, manifest) {
+    const deletable = [];
+    const skipped = [];
+    for (const hash of selected) {
+        const usage = index.get(hash);
+        if (usage && usage.length > 0) {
+            skipped.push({ hash, reason: 'still-referenced', usage });
+        }
+        else if (manifest[hash]) {
+            deletable.push(hash);
+        }
+        else {
+            skipped.push({ hash, reason: 'uncommitted', usage: [] });
+        }
+    }
+    return { deletable, skipped };
+}

package/dist/media/orphan-scan.d.ts

@@ -0,0 +1,37 @@
+import { type ReconcileResult } from './reconcile.js';
+import type { MediaManifest } from './manifest.js';
+import type { UsageEntry, UsageIndex } from './usage.js';
+/** A purgeable orphan: a stored R2 key with no manifest row, plus the 16-hex hash parsed from it. */
+export interface OrphanByteRow {
+    /** The full R2 object key, e.g. "media/ff/ffffffffffffffff.webp". */
+    key: string;
+    /** The 16-hex content hash parsed from the key. */
+    hash: string;
+}
+/** A broken reference: a manifest row whose bytes are gone. Read-only, since purging it would drop a
+ *  still-referenced asset's record; the screen shows where it is used so an operator can re-ingest. */
+export interface BrokenRefRow {
+    /** The 16-hex content hash of the manifest row whose bytes are missing. */
+    hash: string;
+    /** The manifest row's display slug, or '' when the row is somehow absent. */
+    slug: string;
+    /** Where the asset is referenced, from the usage index. Empty when no reference was found. */
+    usage: UsageEntry[];
+}
+/** The scan surface model: the two row sets the Library renders. */
+export interface OrphanScan {
+    orphanedBytes: OrphanByteRow[];
+    brokenRefs: BrokenRefRow[];
+}
+/**
+ * Project a reconcile read plus the usage index into the scan surface model.
+ *
+ * `orphanedBytes` come from `reconcile.orphanedObjects`: each key is parsed to its hash via the
+ * shared media-key grammar, and a key that does not match (so it is not a content-addressed media
+ * object) is skipped. A key whose hash the usage index references is also skipped: it is referenced
+ * on main or some open branch, so its bytes are in use, not orphaned. `brokenRefs` come from
+ * `reconcile.missingObjects`: each hash carries its
+ * manifest slug (falling back to '' when the row is absent) and its where-used rows from the index
+ * (an empty list when no reference was found). Both directions keep their input order.
+ */
+export declare function buildOrphanScan(reconcile: ReconcileResult, manifest: MediaManifest, index: UsageIndex): OrphanScan;

package/dist/media/orphan-scan.js

@@ -0,0 +1,42 @@
+// cairn-cms: the orphan-scan projection, the pure model behind the admin Media Library's scan
+// surface. It folds reconcileMedia's two directions together with the usage index into the two rows
+// the screen renders: the purgeable byte-rows and the read-only broken-reference rows (manifest rows
+// whose bytes are gone). It only projects; no path here reads R2, the manifest, or git. The module
+// is engine-internal and on no public subpath.
+//
+// An orphaned byte is a stored R2 object whose hash has NO manifest row AND appears in NO usage row,
+// so it is referenced nowhere across main and every open branch. Reconcile only checks main's
+// manifest, so a branch-only upload (bytes in R2, manifest row only on the open cairn/* branch) gets
+// flagged as an orphaned object even though a colleague's in-progress draft references it. The byte
+// purge is irreversible, so we intersect reconcile's verdict with the strict cross-branch usage
+// index here: any hash the index references is in use and is dropped from orphanedBytes, which keeps
+// a live draft's bytes from ever reaching the purge surface.
+import { MEDIA_KEY_RE } from './reconcile.js';
+/**
+ * Project a reconcile read plus the usage index into the scan surface model.
+ *
+ * `orphanedBytes` come from `reconcile.orphanedObjects`: each key is parsed to its hash via the
+ * shared media-key grammar, and a key that does not match (so it is not a content-addressed media
+ * object) is skipped. A key whose hash the usage index references is also skipped: it is referenced
+ * on main or some open branch, so its bytes are in use, not orphaned. `brokenRefs` come from
+ * `reconcile.missingObjects`: each hash carries its
+ * manifest slug (falling back to '' when the row is absent) and its where-used rows from the index
+ * (an empty list when no reference was found). Both directions keep their input order.
+ */
+export function buildOrphanScan(reconcile, manifest, index) {
+    const orphanedBytes = [];
+    for (const key of reconcile.orphanedObjects) {
+        const hash = MEDIA_KEY_RE.exec(key)?.[1];
+        if (hash === undefined)
+            continue;
+        if (index.has(hash))
+            continue;
+        orphanedBytes.push({ key, hash });
+    }
+    const brokenRefs = reconcile.missingObjects.map((hash) => ({
+        hash,
+        slug: manifest[hash]?.slug ?? '',
+        usage: index.get(hash) ?? [],
+    }));
+    return { orphanedBytes, brokenRefs };
+}

package/dist/media/reconcile.d.ts

@@ -1,4 +1,7 @@
 import type { MediaManifest } from './manifest.js';
+/** A stored media object key parses to its short hash via `media/<aa>/<shortHash>.<ext>`. Exported so
+ *  the orphan-scan projection derives the same hash from an orphaned key without a second grammar. */
+export declare const MEDIA_KEY_RE: RegExp;
 /** What a reconcile read found in either direction. `orphanedObjects` are stored R2 keys whose hash
  *  has no manifest row; `missingObjects` are manifest hashes with no stored object. */
 export interface ReconcileResult {

package/dist/media/reconcile.js

@@ -1,6 +1,7 @@
 import { log } from '../log/index.js';
-/** A stored media object key parses to its short hash via `media/<aa>/<shortHash>.<ext>`. */
-const MEDIA_KEY_RE = /^media\/[0-9a-f]{2}\/([0-9a-f]{16})\.[a-z0-9]{1,5}$/;
+/** A stored media object key parses to its short hash via `media/<aa>/<shortHash>.<ext>`. Exported so
+ *  the orphan-scan projection derives the same hash from an orphaned key without a second grammar. */
+export const MEDIA_KEY_RE = /^media\/[0-9a-f]{2}\/([0-9a-f]{16})\.[a-z0-9]{1,5}$/;
 /** The pure core: compare the stored R2 keys against the manifest's content-hash keys and report
  *  both orphan directions. A stored key that does not match the media-key grammar is ignored, since
  *  it is not a content-addressed media object this reconcile owns. */

package/dist/sveltekit/cairn-admin.d.ts

@@ -86,6 +86,9 @@ export declare function createCairnAdmin(runtime: CairnRuntime, deps?: CairnAdmi
         mediaReplace: (event: AdminEvent) => Promise<import("@sveltejs/kit").ActionFailure<unknown>>;
         mediaAltPreview: (event: AdminEvent) => Promise<import("./content-routes.js").MediaAltPreviewPlan | import("@sveltejs/kit").ActionFailure<unknown>>;
         mediaAltPropagate: (event: AdminEvent) => Promise<import("@sveltejs/kit").ActionFailure<unknown>>;
+        mediaBulkDelete: (event: AdminEvent) => Promise<import("./content-routes.js").MediaBulkDeleteResult | import("@sveltejs/kit").ActionFailure<unknown>>;
+        mediaOrphanScan: (event: AdminEvent) => Promise<import("../media/orphan-scan.js").OrphanScan | import("@sveltejs/kit").ActionFailure<unknown>>;
+        mediaPurge: (event: AdminEvent) => Promise<import("./content-routes.js").MediaOrphanPurgeResult | import("@sveltejs/kit").ActionFailure<unknown>>;
         publishAll: (event: AdminEvent) => Promise<never>;
         addEditor: (event: AdminEvent) => Promise<import("@sveltejs/kit").ActionFailure<{
             error: string;

package/dist/sveltekit/cairn-admin.js

@@ -134,6 +134,12 @@ export function createCairnAdmin(runtime, deps = {}) {
         mediaReplace: viewAction(['media'], (event) => content.mediaReplaceApply(contentEvent(event, {}))),
         mediaAltPreview: viewAction(['media'], (event) => content.mediaAltPreview(contentEvent(event, {}))),
         mediaAltPropagate: viewAction(['media'], (event) => content.mediaAltApply(contentEvent(event, {}))),
+        // Pass C library actions: a multi-select bulk delete, the on-demand orphan scan, and the
+        // irreversible byte purge. The component posts to `?/mediaBulkDelete`, `?/mediaOrphanScan`, and
+        // `?/mediaPurge` (the purge key is short of its content method name). All gate on the media view.
+        mediaBulkDelete: viewAction(['media'], (event) => content.mediaBulkDelete(contentEvent(event, {}))),
+        mediaOrphanScan: viewAction(['media'], (event) => content.mediaOrphanScan(contentEvent(event, {}))),
+        mediaPurge: viewAction(['media'], (event) => content.mediaPurgeOrphans(contentEvent(event, {}))),
         publishAll: viewAction(authedViews, (event) => content.publishAllAction(contentEvent(event, {}))),
         addEditor: viewAction(['editors'], (event) => editors.addEditorAction(event)),
         removeEditor: viewAction(['editors'], (event) => editors.removeEditorAction(event)),

package/dist/sveltekit/content-routes.d.ts

@@ -4,8 +4,10 @@ import { type LinkTarget, type InboundLink } from '../content/manifest.js';
 import type { MediaEntry } from '../media/manifest.js';
 import type { MediaLibrary, MediaLibraryEntry } from '../media/library-entry.js';
 import type { UsageEntry } from '../media/usage.js';
+import { type OrphanScan } from '../media/orphan-scan.js';
 import type { RepointPlacement, AltPlacement } from '../content/media-rewrite.js';
 import type { BranchRef } from '../media/rewrite-plan.js';
+import type { BulkDeleteSkip } from '../media/bulk-delete-plan.js';
 import type { CookieJar, EventBase } from './types.js';
 import type { CairnRuntime, FrontmatterField, ResolvedPreview } from '../content/types.js';
 import type { Role } from '../auth/types.js';
@@ -135,9 +137,10 @@ export interface MediaLibraryData {
      *  redirected commit conflict never overwrite each other. */
     error: string | null;
     /** The success flash a redirected action carries: `deleted` from `?deleted=1`, `updated` from
-     *  `?updated=1`, `replaced` from `?replaced=1`, `altPropagated` from `?altPropagated=1`, null
-     *  otherwise. The component renders a polite success strip for each. */
-    flash: 'deleted' | 'updated' | 'replaced' | 'altPropagated' | null;
+     *  `?updated=1`, `replaced` from `?replaced=1`, `altPropagated` from `?altPropagated=1`,
+     *  `bulkDeleted` from `?bulkDeleted=1`, `orphansPurged` from `?orphansPurged=1`, null otherwise.
+     *  The component renders a polite success strip for each. */
+    flash: 'deleted' | 'updated' | 'replaced' | 'altPropagated' | 'bulkDeleted' | 'orphansPurged' | null;
     /** A redirected action's conflict error read from `?error=` (a commit-conflict bounce). Kept in
      *  its own slot rather than the degraded-load `error` above, so the two never collide. */
     flashError: string | null;
@@ -212,6 +215,33 @@ export interface MediaReplaceFailure {
 export interface MediaAltPropagateFailure {
     error: string;
 }
+/** A refused media bulk delete or orphan purge: `fail(503)` for the fail-closed strict-usage refusal
+ *  (the whole batch refuses) or media-off / a missing bucket binding. The per-item outcomes ride the
+ *  returned summary, not a fail. */
+export interface MediaBulkFailure {
+    error: string;
+}
+/** The bulk-delete outcome the component renders: the deleted hashes, the skipped rows from the
+ *  partition (with their reason and where-used), and any per-object R2 delete failure. Admin-internal,
+ *  not on the package subpath, so no reference page. */
+export interface MediaBulkDeleteResult {
+    deleted: string[];
+    skipped: BulkDeleteSkip[];
+    failed: {
+        hash: string;
+        error: string;
+    }[];
+}
+/** The orphan-purge outcome: the purged R2 keys, the keys skipped because their hash was claimed by a
+ *  manifest row since the scan, and any per-object delete failure. Admin-internal, no reference page. */
+export interface MediaOrphanPurgeResult {
+    purged: string[];
+    skippedClaimed: string[];
+    failed: {
+        key: string;
+        error: string;
+    }[];
+}
 /** One entry the replace preview will rewrite, enriched with its display title and permalink from the
  *  content manifest (the planner's PlannedEntry carries neither). The screen lists these as the
  *  confirm dialog's where-touched preview, and the apply re-derives its own plan rather than trusting
@@ -275,7 +305,7 @@ export interface MediaAltPreviewPlan {
  *  keys identify which guard refused. The media refusals ride here too, so the Media Library's one
  *  `form` prop carries a `?/mediaDelete`, `?/mediaUpdate`, `?/mediaReplace`, or `?/mediaAltPropagate`
  *  refusal without a second type. */
-export type ContentFormFailure = Partial<SaveFailure & DeleteRefusal & RenameFailure & MediaDeleteRefusal & MediaUpdateFailure & MediaReplaceFailure & MediaAltPropagateFailure>;
+export type ContentFormFailure = Partial<SaveFailure & DeleteRefusal & RenameFailure & MediaDeleteRefusal & MediaUpdateFailure & MediaReplaceFailure & MediaAltPropagateFailure & MediaBulkFailure>;
 /** The successful upload's response (`uploadAction`). The server-owned `record` rides the editor's
  *  optimistic client state and commits with the entry at Save (the upload itself commits nothing).
  *  `reused` is true when identical bytes were already stored, so the second upload did no second put;
@@ -302,6 +332,9 @@ export declare function createContentRoutes(runtime: CairnRuntime, deps?: Conten
     renameAction: (event: ContentEvent) => Promise<ReturnType<typeof fail> | never>;
     uploadAction: (event: ContentEvent) => Promise<ReturnType<typeof fail> | UploadResult>;
     mediaDeleteAction: (event: ContentEvent) => Promise<ReturnType<typeof fail> | never>;
+    mediaBulkDelete: (event: ContentEvent) => Promise<ReturnType<typeof fail> | MediaBulkDeleteResult>;
+    mediaOrphanScan: (event: ContentEvent) => Promise<ReturnType<typeof fail> | OrphanScan>;
+    mediaPurgeOrphans: (event: ContentEvent) => Promise<ReturnType<typeof fail> | MediaOrphanPurgeResult>;
     mediaUpdateAction: (event: ContentEvent) => Promise<ReturnType<typeof fail> | never>;
     mediaReplacePreview: (event: ContentEvent) => Promise<ReturnType<typeof fail> | MediaReplacePreviewPlan>;
     mediaReplaceApply: (event: ContentEvent) => Promise<ReturnType<typeof fail> | never>;