@jini-ai/admin 0.4.12 → 0.6.10

package/dist/seo/react/components/MediaRefField.d.ts

@@ -48,5 +48,5 @@ export interface MediaRefFieldProps {
      *  `useDialog` prop. Defaults to the real {@link useWiredMediaRefField}. */
     useField?: typeof useWiredMediaRefField;
 }
-export declare function MediaRefField({ locale, id, name, label, value, onChange, agentHandle: base, emptyHint, inherited, useField, }: MediaRefFieldProps, _optional?: Record<string, never>): import("react").JSX.Element;
+export declare function MediaRefField({ locale, id, name, label, value, onChange, agentHandle: base, emptyHint, inherited, useField, }: MediaRefFieldProps): import("react").JSX.Element;
 //# sourceMappingURL=MediaRefField.d.ts.map

package/dist/seo/react/components/MediaRefField.js

@@ -4,7 +4,7 @@ import { interpolate } from "@jini-ai/ui/i18n";
 import { MediaPickerBridge } from "./MediaPickerBridge.js";
 import { useSeoCopy } from "../hooks/SeoPorts.hooks.js";
 import { useWiredMediaRefField, useMediaRefPresentation, handleSpread } from "../hooks/MediaRefField.hooks.js";
-export function MediaRefField({ locale, id, name, label, value, onChange, agentHandle: base, emptyHint, inherited = false, useField = useWiredMediaRefField, }, _optional = {}) {
+export function MediaRefField({ locale, id, name, label, value, onChange, agentHandle: base, emptyHint, inherited = false, useField = useWiredMediaRefField, }) {
     const t = useSeoCopy();
     const { Picker = MediaPickerBridge } = useMediaRefPresentation({ value });
     const { pickerOpen, openPicker, closePicker, handleSelect, clear, previewUrl, file, accept, onPreviewLoad, onPreviewError } = useField({ value, onChange });
@@ -17,6 +17,23 @@ export function MediaRefField({ locale, id, name, label, value, onChange, agentH
        2026-10-15 (round 3): the text box is gone — for a library pick it only ever said a read-only
        "Selected image" ("i can't change it and looks useless"), so the row names the file instead and
        the picker is the one way in. The exact value still rides a hidden input for FormData saves. */
-    return (_jsxs("div", { className: "jini-field jini-media-ref-field", children: [_jsx("span", { className: "jini-field-label", id: labelId, children: label }), _jsxs("div", { className: "jini-media-ref-field-row", role: "group", "aria-labelledby": labelId, ...(base ? agentHandle({ handle: base }, { role: "region", label }) : {}), children: [file ? (_jsxs("span", { className: inherited ? "jini-media-ref-field-file jini-media-ref-field-file-inherited" : "jini-media-ref-field-file", children: [previewUrl ? _jsx("img", { className: "jini-media-ref-field-preview", src: previewUrl, alt: `${label} preview`, onLoad: onPreviewLoad, onError: onPreviewError }, previewUrl) : null, _jsx("span", { className: "jini-media-ref-field-name", title: file.name, children: inherited ? interpolate({ template: t({ locale: locale, key: inherited === 'content' ? "Using image from page content: {name}" : "Using site default: {name}", vars: { name: file.name } }), vars: { name: file.name } }) : file.name }), file.size && !inherited ? _jsx("span", { className: "jini-media-ref-field-size", children: file.size }) : null] })) : (emptyHint && _jsx("span", { className: "jini-media-ref-field-empty", children: emptyHint })), name ? _jsx("input", { type: "hidden", id: id, name: name, value: value }) : null, _jsxs("span", { className: "jini-media-ref-field-actions", children: [_jsx("button", { type: "button", className: "jini-btn jini-btn-secondary", onClick: openPicker, ...handleSpread({ ...(base === undefined ? {} : { base }), suffix: "choose", label: `Choose an image for: ${label}` }), children: t({ locale: locale, key: "Choose image" }) }), value && !inherited ? (_jsx("button", { type: "button", className: "jini-btn jini-btn-secondary", onClick: clear, ...handleSpread({ ...(base === undefined ? {} : { base }), suffix: "clear", label: `Remove the selected image for: ${label}` }), children: t({ locale: locale, key: "Remove" }) })) : null] })] }), pickerOpen ? (_jsx(Picker, { onSelect: handleSelect, onCancel: closePicker, accept: accept, agentHandle: base ? `${base}-dialog` : undefined })) : null] }));
+    return (_jsxs("div", { className: "jini-field jini-media-ref-field", children: [_jsx("span", { className: "jini-field-label", id: labelId, children: label }), _jsxs("div", { className: "jini-media-ref-field-row", role: "group", "aria-labelledby": labelId, ...(base ? agentHandle({ handle: base }, { role: "region", label }) : {}), children: [_jsx(MediaRefFile, { file: file, emptyHint: emptyHint, label: label, locale: locale, t: t, inherited: inherited, previewUrl: previewUrl, onPreviewLoad: onPreviewLoad, onPreviewError: onPreviewError }), name ? _jsx("input", { type: "hidden", id: id, name: name, value: value }) : null, _jsx(MediaRefActions, { label: label, locale: locale, t: t, base: base, value: value, inherited: inherited, openPicker: openPicker, clear: clear })] }), pickerOpen ? (_jsx(Picker, { onSelect: handleSelect, onCancel: closePicker, accept: accept, agentHandle: base ? `${base}-dialog` : undefined })) : null] }));
+}
+/** The chosen file: thumbnail, name (prefixed with its source when inherited) and, for an own
+ *  override, its pixel size. With no file, the field's empty hint (if any) takes the slot. */
+function MediaRefFile({ file, emptyHint, label, locale, t, inherited, previewUrl, onPreviewLoad, onPreviewError }) {
+    if (!file)
+        return emptyHint ? _jsx("span", { className: "jini-media-ref-field-empty", children: emptyHint }) : null;
+    return (_jsxs("span", { className: inherited ? "jini-media-ref-field-file jini-media-ref-field-file-inherited" : "jini-media-ref-field-file", children: [previewUrl ? _jsx("img", { className: "jini-media-ref-field-preview", src: previewUrl, alt: `${label} preview`, onLoad: onPreviewLoad, onError: onPreviewError }, previewUrl) : null, _jsx("span", { className: "jini-media-ref-field-name", title: file.name, children: inherited ? inheritedFileName({ name: file.name, inherited, locale, t }) : file.name }), file.size && !inherited ? _jsx("span", { className: "jini-media-ref-field-size", children: file.size }) : null] }));
+}
+/** "Using site default: {name}" or "Using image from page content: {name}", translated. */
+function inheritedFileName({ name, inherited, locale, t }, _optional = {}) {
+    const key = inherited === "content" ? "Using image from page content: {name}" : "Using site default: {name}";
+    return interpolate({ template: t({ locale, key, vars: { name } }), vars: { name } });
+}
+/** Choose (always) and Remove (only for an own value), grouped so they wrap as one unit. */
+function MediaRefActions({ label, locale, t, base, value, inherited, openPicker, clear }) {
+    const handleBase = base === undefined ? {} : { base };
+    return (_jsxs("span", { className: "jini-media-ref-field-actions", children: [_jsx("button", { type: "button", className: "jini-btn jini-btn-secondary", onClick: openPicker, ...handleSpread({ ...handleBase, suffix: "choose", label: `Choose an image for: ${label}` }), children: t({ locale, key: "Choose image" }) }), value && !inherited ? (_jsx("button", { type: "button", className: "jini-btn jini-btn-secondary", onClick: clear, ...handleSpread({ ...handleBase, suffix: "clear", label: `Remove the selected image for: ${label}` }), children: t({ locale, key: "Remove" }) })) : null] }));
 }
 //# sourceMappingURL=MediaRefField.js.map

package/dist/seo/react/hooks/MediaRefField.hooks.js

@@ -17,7 +17,9 @@ export function useMediaRefField({ value, onChange, api }, { t } = {}) {
     // One cached library read shared by every image field on the screen; only a library reference
     // needs it (a URL names itself), and a host without `listSeoMedia` falls back to the slug.
     const list = api.listSeoMedia;
-    const media = useFetchQuery({ key: SEO_KEYS.media, fetch: () => list ? list.call(api, {}) : Promise.resolve([]) }, { enabled: Boolean(list) && isStoredMediaRef({ value }) });
+    // `fetch` runs only while the query is enabled, which requires `list`: the fetch-query adapters
+    // never call a disabled read's fetch (not on mount, focus or prefix invalidation).
+    const media = useFetchQuery({ key: SEO_KEYS.media, fetch: () => list.call(api, {}) }, { enabled: Boolean(list) && isStoredMediaRef({ value }) });
     return {
         ...diagnostics,
         file: describeMediaRef({ value, media: media.data }, { width: naturalWidth, height: naturalHeight, t, extensionFor: extensionForMimeType }),

package/dist/seo/react/hooks/SeoPage.hooks.d.ts

@@ -29,7 +29,7 @@ export declare function useAnalyzePanel({ analysis }: {
     analysis: SeoEntryAnalysis;
 }, _optional?: Record<string, never>): {
     sortedIssues: import("../../../core/index.js").AdminSeoIssue[];
-    tone: "warning" | "success" | "failure";
+    tone: "failure" | "warning" | "success";
 };
 /** All seven defaults remain in one FormData submission; tabs never split this form. */
 export declare function useSeoDefaults({ save }: {

package/dist/seo/react/hooks/use-share-image-warning.hooks.js

@@ -17,20 +17,8 @@ export function useShareImageWarning({ value, previewUrl, api }, { t = key => ke
     const [inspection, setInspection] = useState(null);
     useEffect(() => {
         const inspect = api.inspectShareImage;
-        if (!previewUrl || !inspect)
+        if (!previewUrl || !inspect || !isBrowserSameOrigin({ url: previewUrl }))
             return;
-        // Browser origin, rather than the public site's alias: a cross-origin HEAD cannot establish
-        // that an otherwise loadable external image is missing when the server omits CORS headers.
-        const location = globalThis.location;
-        if (!location)
-            return;
-        try {
-            if (new URL(previewUrl, location.href).origin !== location.origin)
-                return;
-        }
-        catch {
-            return;
-        }
         const controller = new AbortController();
         let active = true;
         const timeout = setTimeout(() => {
@@ -39,17 +27,8 @@ export function useShareImageWarning({ value, previewUrl, api }, { t = key => ke
             setInspection({ url: previewUrl, error: { key: 'The share image check timed out after 10 seconds.' } });
         }, 10_000);
         inspect.call(api, { url: previewUrl }, { signal: controller.signal }).then(({ status, byteSize }) => {
-            if (!active)
-                return;
-            if (status === 404 || status === 410) {
-                setInspection({ url: previewUrl, error: { key: 'The share image is missing (HTTP {status}).', vars: { status } } });
-            }
-            else if (status < 200 || status >= 300) {
-                setInspection({ url: previewUrl, error: { key: 'The share image could not be checked (HTTP {status}).', vars: { status } } });
-            }
-            else {
-                setInspection({ url: previewUrl, byteSize });
-            }
+            if (active)
+                setInspection(inspectionFromResponse({ url: previewUrl, status, byteSize }));
         }).catch((error) => {
             if (!active)
                 return;
@@ -58,23 +37,58 @@ export function useShareImageWarning({ value, previewUrl, api }, { t = key => ke
         }).finally(() => { clearTimeout(timeout); });
         return () => { active = false; clearTimeout(timeout); controller.abort(); };
     }, [previewUrl, api]);
-    const source = decoded?.url === previewUrl ? decoded : null;
-    const checked = inspection?.url === previewUrl ? inspection : null;
-    const error = checked?.error;
+    const source = stateForUrl({ state: decoded, url: previewUrl });
+    const checked = stateForUrl({ state: inspection, url: previewUrl });
     return {
-        naturalWidth: source?.width, naturalHeight: source?.height,
-        warning: shareImageWarning({ value, previewUrl, width: source?.width, height: source?.height, previewFailed: source?.failed, byteSize: checked?.byteSize,
-            error: error ? interpolate({ template: t(error.key, error.vars), vars: error.vars ?? {} }) : undefined }, { t }),
+        naturalWidth: source.width, naturalHeight: source.height,
+        warning: shareImageWarning({ value, previewUrl, width: source.width, height: source.height, previewFailed: source.failed, byteSize: checked.byteSize,
+            error: translatedInspectionError({ error: checked.error }, { t }) }, { t }),
         onPreviewLoad: ({ currentTarget }) => {
-            const url = currentTarget.getAttribute('src');
-            if (url && url === currentUrl.current)
+            const url = currentPreviewSrc({ image: currentTarget, currentUrl: currentUrl.current });
+            if (url)
                 setDecoded({ url, width: currentTarget.naturalWidth, height: currentTarget.naturalHeight });
         },
         onPreviewError: ({ currentTarget }) => {
-            const url = currentTarget.getAttribute('src');
-            if (url && url === currentUrl.current)
+            const url = currentPreviewSrc({ image: currentTarget, currentUrl: currentUrl.current });
+            if (url)
                 setDecoded({ url, failed: true });
         },
     };
 }
+/** URL-keyed state for the current preview only; a prior choice's state reads as nothing known. */
+function stateForUrl({ state, url }, _optional = {}) {
+    return state?.url === url ? state : {};
+}
+/** Whether `url` resolves to the browser's own origin; `false` outside a browser or for an unparseable URL. */
+function isBrowserSameOrigin({ url }, _optional = {}) {
+    // Browser origin, rather than the public site's alias: a cross-origin HEAD cannot establish
+    // that an otherwise loadable external image is missing when the server omits CORS headers.
+    const location = globalThis.location;
+    if (!location)
+        return false;
+    try {
+        return new URL(url, location.href).origin === location.origin;
+    }
+    catch {
+        return false;
+    }
+}
+/** A HEAD response as inspection state: 404/410 is a missing file, any other non-2xx an unchecked
+ * one, and a 2xx carries the reported byte size. */
+function inspectionFromResponse({ url, status, byteSize }, _optional = {}) {
+    if (status === 404 || status === 410)
+        return { url, error: { key: 'The share image is missing (HTTP {status}).', vars: { status } } };
+    if (status < 200 || status >= 300)
+        return { url, error: { key: 'The share image could not be checked (HTTP {status}).', vars: { status } } };
+    return { url, byteSize };
+}
+/** The inspection error's copy, translated at render so a language switch re-renders it. */
+function translatedInspectionError({ error }, { t }) {
+    return error ? interpolate({ template: t(error.key, error.vars), vars: error.vars ?? {} }) : undefined;
+}
+/** The preview image's `src` when it is still the current selection's; `null` for a stale event. */
+function currentPreviewSrc({ image, currentUrl }, _optional = {}) {
+    const url = image.getAttribute('src');
+    return url && url === currentUrl ? url : null;
+}
 //# sourceMappingURL=use-share-image-warning.hooks.js.map

package/dist/seo/react/pages/SeoPage.d.ts

@@ -96,7 +96,7 @@ export interface SeoEntrySectionProps {
  *  and nothing else — the exact regression `deployment/HistoryTab.tsx`'s own comment records
  *  measuring live on its tab. It is also not a duplicate: the tab reads "Pages & posts" (what you
  *  pick from), the heading reads "Per-entry SEO" (what you are editing). */
-export declare function SeoEntrySection({ locale, useSeoEntrySectionHook }: SeoEntrySectionProps, _optional?: Record<string, never>): import("react").JSX.Element;
+export declare function SeoEntrySection({ locale, useSeoEntrySectionHook }: SeoEntrySectionProps): import("react").JSX.Element;
 /** What the two site-wide tab panels need from `useWiredSeo()`. Named as one object rather than
  *  passed as six loose props for the same reason `Roles.tsx`'s `RoleCreateFormController` documents:
  *  none of these is meaningful without the others, so naming the group is what lets a test hand a
@@ -118,7 +118,7 @@ export declare function SeoEntrySection({ locale, useSeoEntrySectionHook }: SeoE
  */
 export declare function SeoDefaultsTab({ controller }: {
     controller: SeoTabController;
-}, _optional?: Record<string, never>): import("react").JSX.Element;
+}): import("react").JSX.Element;
 /**
  * The "Sitemap" tab — the two sitemap actions, moved here verbatim, plus one line this screen never
  * had: whether a sitemap is being published at all.
@@ -138,7 +138,7 @@ export declare function SeoDefaultsTab({ controller }: {
  */
 export declare function SeoSitemapTab({ controller }: {
     controller: SeoTabController;
-}, _optional?: Record<string, never>): import("react").JSX.Element;
+}): import("react").JSX.Element;
 /** Dispatches the one active tab's panel as a flat if-chain — a plain function rather than a
  *  ternary written directly in `Seo`'s JSX, which would be counted against that component's own
  *  complexity. Same split `Deployment.tsx`'s `deploymentTabPanel` and `Sites.tsx`'s `sitesTabPanel`
@@ -157,7 +157,7 @@ export interface SeoProps {
         tab: string;
     }, optional?: Record<string, never>) => void) | undefined;
 }
-export declare function Seo({ tabId, onTabChange, useSeoHook }?: SeoProps, _optional?: Record<string, never>): import("react").JSX.Element;
+export declare function Seo({ tabId, onTabChange, useSeoHook }?: SeoProps): import("react").JSX.Element;
 export { Seo as SeoPage };
 export default Seo;
 //# sourceMappingURL=SeoPage.d.ts.map

package/dist/seo/react/pages/SeoPage.js

@@ -1,4 +1,4 @@
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 import { useAnalyzePanel, useSeoDefaults, useSeoTabs, seoTabPanel } from "../hooks/SeoPage.hooks.js";
 import { agentHandle } from "@jini-ai/agentic";
 import { TabBar } from "@jini-ai/ui/tab-strip";
@@ -82,6 +82,9 @@ function AnalyzePanel(props) {
 // no complexity benefit and a real loss of "one form, one place to read its fields."
 // 2026-10-15: now 27 — the X fields' placeholders (the live social preview value) add two more
 // flat `??` fallbacks of exactly that kind.
+// 2026-10-20: exemption retired under the ≤10/≤10 bar — the head row, the "Search appearance"
+// group, the "Social preview" group and its X disclosure are now their own components below, each
+// scoring ≤10. The fallback chains themselves are unchanged and still read in form order.
 function SeoEntryPanel({ locale, entryId, useSeoEntryPanelHook = useWiredSeoEntryPanel }) {
     const t = useSeoCopy();
     const { resolved, analysis, loadError, saving, saveError, notice, fieldValue, setField, save, touched, ogImageInherited = false } = useSeoEntryPanelHook({ entryId });
@@ -89,7 +92,24 @@ function SeoEntryPanel({ locale, entryId, useSeoEntryPanelHook = useWiredSeoEntr
         return _jsx("div", { className: "jini-notice jini-notice-error", children: loadError });
     if (!resolved)
         return _jsx("div", { className: "jini-notice", children: t({ locale: locale, key: "Loading entry SEO…" }) });
-    return (_jsxs("div", { className: "jini-seo-entry-panel", children: [_jsx("div", { className: "jini-seo-entry-head", children: _jsxs("div", { className: "jini-seo-entry-head-bar", children: [_jsx("h3", { children: t({ locale: locale, key: "Per-entry overrides" }) }), _jsx(InfoTip, { label: `${t({ locale: locale, key: "Fields show the currently-effective value (author override, or site default, or derived from the entry). Only fields you change here are saved as overrides." })} ${t({ locale: locale, key: "Empty a field and save to remove its override — the entry falls back to the site default." })}` }), _jsx("span", { className: "jini-seo-entry-head-actions", children: _jsx("button", { type: "button", className: "jini-btn", onClick: save, disabled: saving || Object.keys(touched).length === 0, ...agentHandle({ handle: "seo-entry-save-overrides" }, { role: "button", label: "Save this entry's SEO overrides" }), children: saving ? t({ locale: locale, key: "Saving…" }) : t({ locale: locale, key: "Save overrides" }) }) })] }) }), notice ? _jsx("div", { className: "jini-notice", children: notice }) : null, saveError ? (_jsx("div", { className: "jini-notice jini-notice-error", role: "alert", children: saveError })) : null, _jsxs("fieldset", { className: "jini-seo-entry-group", children: [_jsx("legend", { children: t({ locale: locale, key: "Search appearance" }) }), _jsxs("label", { children: [t({ locale: locale, key: "Title" }), _jsx("input", { className: "jini-input", value: fieldValue("title", resolved.title) ?? "", onChange: (e) => setField("title", e.target.value), ...agentHandle({ handle: "seo-entry-title" }, { role: "field", label: "This entry's SEO title override" }) })] }), _jsxs("label", { children: [t({ locale: locale, key: "Description" }), _jsx("textarea", { className: "jini-textarea", value: fieldValue("description", resolved.description ?? "") ?? "", onChange: (e) => setField("description", e.target.value), ...agentHandle({ handle: "seo-entry-description" }, { role: "field", label: "This entry's SEO description override" }) })] }), _jsxs("label", { children: [t({ locale: locale, key: "Canonical URL" }), _jsx("input", { className: "jini-input", value: fieldValue("canonical", resolved.canonical) ?? "", onChange: (e) => setField("canonical", e.target.value), ...agentHandle({ handle: "seo-entry-canonical" }, { role: "field", label: "This entry's canonical URL override" }) })] }), _jsxs("div", { className: "jini-seo-entry-checks", children: [_jsxs("label", { children: [_jsx("input", { className: "jini-input", type: "checkbox", checked: fieldValue("noindex", resolved.robots.noindex) ?? false, onChange: (e) => setField("noindex", e.target.checked), ...agentHandle({ handle: "seo-entry-noindex" }, { role: "checkbox", label: "Override this entry's robots noindex directive" }) }), t({ locale: locale, key: "Noindex" })] }), _jsxs("label", { children: [_jsx("input", { className: "jini-input", type: "checkbox", checked: fieldValue("nofollow", resolved.robots.nofollow) ?? false, onChange: (e) => setField("nofollow", e.target.checked), ...agentHandle({ handle: "seo-entry-nofollow" }, { role: "checkbox", label: "Override this entry's robots nofollow directive" }) }), t({ locale: locale, key: "Nofollow" })] })] })] }), _jsxs("fieldset", { className: "jini-seo-entry-group", children: [_jsxs("legend", { children: [t({ locale: locale, key: "Social preview" }), _jsx(InfoTip, { label: t({ locale: locale, key: "Used by Facebook, LinkedIn, Slack, Discord, iMessage, WhatsApp and X/Twitter" }) })] }), _jsxs("label", { children: [t({ locale: locale, key: "Preview title" }), _jsx("input", { className: "jini-input", value: fieldValue("ogTitle", resolved.openGraph.title) ?? "", onChange: (e) => setField("ogTitle", e.target.value), ...agentHandle({ handle: "seo-entry-og-title" }, { role: "field", label: "This entry's Open Graph title override" }) })] }), _jsxs("label", { children: [t({ locale: locale, key: "Preview description" }), _jsx("input", { className: "jini-input", value: fieldValue("ogDescription", resolved.openGraph.description ?? "") ?? "", onChange: (e) => setField("ogDescription", e.target.value), ...agentHandle({ handle: "seo-entry-og-description" }, { role: "field", label: "This entry's Open Graph description override" }) })] }), _jsx(MediaRefField, { locale: locale, id: "seo-entry-og-image", label: t({ locale: locale, key: "Preview image" }), value: fieldValue("ogImage", resolved.openGraph.imageRef ?? resolved.openGraph.image ?? "") ?? "", onChange: (value) => setField("ogImage", value), inherited: ogImageInherited, agentHandle: "seo-entry-og-image" }), _jsxs("details", { className: "jini-seo-x-disclosure", open: xIsCustomized({ meta: resolved }), children: [_jsx("summary", { children: t({ locale: locale, key: "Customize for X/Twitter (optional)" }) }), _jsxs("div", { className: "jini-seo-x-fields", children: [_jsxs("label", { children: [t({ locale: locale, key: "X/Twitter title" }), _jsx("input", { className: "jini-input", value: fieldValue("twitterTitle", xResolvedValue({ key: "twitterTitle", meta: resolved })) ?? "", placeholder: fieldValue("ogTitle", resolved.openGraph.title) ?? "", onChange: (e) => setField("twitterTitle", e.target.value), ...agentHandle({ handle: "seo-entry-twitter-title" }, { role: "field", label: "This entry's Twitter card title override" }) })] }), _jsxs("label", { children: [t({ locale: locale, key: "X/Twitter description" }), _jsx("input", { className: "jini-input", value: fieldValue("twitterDescription", xResolvedValue({ key: "twitterDescription", meta: resolved })) ?? "", placeholder: fieldValue("ogDescription", resolved.openGraph.description ?? "") ?? "", onChange: (e) => setField("twitterDescription", e.target.value), ...agentHandle({ handle: "seo-entry-twitter-description" }, { role: "field", label: "This entry's Twitter card description override" }) })] }), _jsx(MediaRefField, { locale: locale, id: "seo-entry-twitter-image", label: t({ locale: locale, key: "X/Twitter image" }), value: fieldValue("twitterImage", xResolvedValue({ key: "twitterImage", meta: resolved })) ?? "", emptyHint: t({ locale: locale, key: "Same as the preview image" }), onChange: (value) => setField("twitterImage", value), agentHandle: "seo-entry-twitter-image" })] })] })] }), analysis ? _jsx(AnalyzePanel, { locale: locale, analysis: analysis }) : null] }));
+    const fields = { locale, t, resolved, fieldValue, setField };
+    return (_jsxs("div", { className: "jini-seo-entry-panel", children: [_jsx(SeoEntryHead, { locale: locale, t: t, saving: saving, touched: touched, save: save }), notice ? _jsx("div", { className: "jini-notice", children: notice }) : null, saveError ? (_jsx("div", { className: "jini-notice jini-notice-error", role: "alert", children: saveError })) : null, _jsx(SeoEntrySearchFields, { ...fields }), _jsx(SeoEntrySocialFields, { ...fields, ogImageInherited: ogImageInherited }), analysis ? _jsx(AnalyzePanel, { locale: locale, analysis: analysis }) : null] }));
+}
+/** Sticky heading row: title, the ⓘ explanation and Save (disabled while saving or with nothing touched). */
+function SeoEntryHead({ locale, t, saving, touched, save }) {
+    return (_jsx(_Fragment, { children: _jsx("div", { className: "jini-seo-entry-head", children: _jsxs("div", { className: "jini-seo-entry-head-bar", children: [_jsx("h3", { children: t({ locale: locale, key: "Per-entry overrides" }) }), _jsx(InfoTip, { label: `${t({ locale: locale, key: "Fields show the currently-effective value (author override, or site default, or derived from the entry). Only fields you change here are saved as overrides." })} ${t({ locale: locale, key: "Empty a field and save to remove its override — the entry falls back to the site default." })}` }), _jsx("span", { className: "jini-seo-entry-head-actions", children: _jsx("button", { type: "button", className: "jini-btn", onClick: save, disabled: saving || Object.keys(touched).length === 0, ...agentHandle({ handle: "seo-entry-save-overrides" }, { role: "button", label: "Save this entry's SEO overrides" }), children: saving ? t({ locale: locale, key: "Saving…" }) : t({ locale: locale, key: "Save overrides" }) }) })] }) }) }));
+}
+/** "Search appearance": title, description, canonical URL and the two robots checkboxes. */
+function SeoEntrySearchFields({ locale, t, resolved, fieldValue, setField }) {
+    return (_jsx(_Fragment, { children: _jsxs("fieldset", { className: "jini-seo-entry-group", children: [_jsx("legend", { children: t({ locale: locale, key: "Search appearance" }) }), _jsxs("label", { children: [t({ locale: locale, key: "Title" }), _jsx("input", { className: "jini-input", value: fieldValue("title", resolved.title) ?? "", onChange: (e) => setField("title", e.target.value), ...agentHandle({ handle: "seo-entry-title" }, { role: "field", label: "This entry's SEO title override" }) })] }), _jsxs("label", { children: [t({ locale: locale, key: "Description" }), _jsx("textarea", { className: "jini-textarea", value: fieldValue("description", resolved.description ?? "") ?? "", onChange: (e) => setField("description", e.target.value), ...agentHandle({ handle: "seo-entry-description" }, { role: "field", label: "This entry's SEO description override" }) })] }), _jsxs("label", { children: [t({ locale: locale, key: "Canonical URL" }), _jsx("input", { className: "jini-input", value: fieldValue("canonical", resolved.canonical) ?? "", onChange: (e) => setField("canonical", e.target.value), ...agentHandle({ handle: "seo-entry-canonical" }, { role: "field", label: "This entry's canonical URL override" }) })] }), _jsxs("div", { className: "jini-seo-entry-checks", children: [_jsxs("label", { children: [_jsx("input", { className: "jini-input", type: "checkbox", checked: fieldValue("noindex", resolved.robots.noindex) ?? false, onChange: (e) => setField("noindex", e.target.checked), ...agentHandle({ handle: "seo-entry-noindex" }, { role: "checkbox", label: "Override this entry's robots noindex directive" }) }), t({ locale: locale, key: "Noindex" })] }), _jsxs("label", { children: [_jsx("input", { className: "jini-input", type: "checkbox", checked: fieldValue("nofollow", resolved.robots.nofollow) ?? false, onChange: (e) => setField("nofollow", e.target.checked), ...agentHandle({ handle: "seo-entry-nofollow" }, { role: "checkbox", label: "Override this entry's robots nofollow directive" }) }), t({ locale: locale, key: "Nofollow" })] })] })] }) }));
+}
+/** "Social preview": the Open Graph fields plus the optional X/Twitter disclosure. */
+function SeoEntrySocialFields({ locale, t, resolved, fieldValue, setField, ogImageInherited }) {
+    return (_jsx(_Fragment, { children: _jsxs("fieldset", { className: "jini-seo-entry-group", children: [_jsxs("legend", { children: [t({ locale: locale, key: "Social preview" }), _jsx(InfoTip, { label: t({ locale: locale, key: "Used by Facebook, LinkedIn, Slack, Discord, iMessage, WhatsApp and X/Twitter" }) })] }), _jsxs("label", { children: [t({ locale: locale, key: "Preview title" }), _jsx("input", { className: "jini-input", value: fieldValue("ogTitle", resolved.openGraph.title) ?? "", onChange: (e) => setField("ogTitle", e.target.value), ...agentHandle({ handle: "seo-entry-og-title" }, { role: "field", label: "This entry's Open Graph title override" }) })] }), _jsxs("label", { children: [t({ locale: locale, key: "Preview description" }), _jsx("input", { className: "jini-input", value: fieldValue("ogDescription", resolved.openGraph.description ?? "") ?? "", onChange: (e) => setField("ogDescription", e.target.value), ...agentHandle({ handle: "seo-entry-og-description" }, { role: "field", label: "This entry's Open Graph description override" }) })] }), _jsx(MediaRefField, { locale: locale, id: "seo-entry-og-image", label: t({ locale: locale, key: "Preview image" }), value: fieldValue("ogImage", resolved.openGraph.imageRef ?? resolved.openGraph.image ?? "") ?? "", onChange: (value) => setField("ogImage", value), inherited: ogImageInherited, agentHandle: "seo-entry-og-image" }), _jsx(SeoEntryXFields, { locale: locale, t: t, resolved: resolved, fieldValue: fieldValue, setField: setField })] }) }));
+}
+/** The X/Twitter disclosure inside "Social preview". */
+function SeoEntryXFields({ locale, t, resolved, fieldValue, setField }) {
+    return (_jsx(_Fragment, { children: _jsxs("details", { className: "jini-seo-x-disclosure", open: xIsCustomized({ meta: resolved }), children: [_jsx("summary", { children: t({ locale: locale, key: "Customize for X/Twitter (optional)" }) }), _jsxs("div", { className: "jini-seo-x-fields", children: [_jsxs("label", { children: [t({ locale: locale, key: "X/Twitter title" }), _jsx("input", { className: "jini-input", value: fieldValue("twitterTitle", xResolvedValue({ key: "twitterTitle", meta: resolved })) ?? "", placeholder: fieldValue("ogTitle", resolved.openGraph.title) ?? "", onChange: (e) => setField("twitterTitle", e.target.value), ...agentHandle({ handle: "seo-entry-twitter-title" }, { role: "field", label: "This entry's Twitter card title override" }) })] }), _jsxs("label", { children: [t({ locale: locale, key: "X/Twitter description" }), _jsx("input", { className: "jini-input", value: fieldValue("twitterDescription", xResolvedValue({ key: "twitterDescription", meta: resolved })) ?? "", placeholder: fieldValue("ogDescription", resolved.openGraph.description ?? "") ?? "", onChange: (e) => setField("twitterDescription", e.target.value), ...agentHandle({ handle: "seo-entry-twitter-description" }, { role: "field", label: "This entry's Twitter card description override" }) })] }), _jsx(MediaRefField, { locale: locale, id: "seo-entry-twitter-image", label: t({ locale: locale, key: "X/Twitter image" }), value: fieldValue("twitterImage", xResolvedValue({ key: "twitterImage", meta: resolved })) ?? "", emptyHint: t({ locale: locale, key: "Same as the preview image" }), onChange: (value) => setField("twitterImage", value), agentHandle: "seo-entry-twitter-image" })] })] }) }));
 }
 /** Section wrapper (REQ-06/07) — entry picker over the per-entry edit + analyze panels. This IS the
  *  "Pages & posts" tab panel; it kept its name and its markup, because nothing about it changed
@@ -101,7 +121,7 @@ function SeoEntryPanel({ locale, entryId, useSeoEntryPanelHook = useWiredSeoEntr
  *  and nothing else — the exact regression `deployment/HistoryTab.tsx`'s own comment records
  *  measuring live on its tab. It is also not a duplicate: the tab reads "Pages & posts" (what you
  *  pick from), the heading reads "Per-entry SEO" (what you are editing). */
-export function SeoEntrySection({ locale, useSeoEntrySectionHook = useSeoEntrySection }, _optional = {}) {
+export function SeoEntrySection({ locale, useSeoEntrySectionHook = useSeoEntrySection }) {
     const t = useSeoCopy();
     const { entryId, setEntryId } = useSeoEntrySectionHook();
     return (_jsx("div", { className: "jini-seo-panel jini-seo-panel--full jini-seo-entry-section", ...agentHandle({ handle: "seo-per-entry" }, {
@@ -128,7 +148,7 @@ export function SeoEntrySection({ locale, useSeoEntrySectionHook = useSeoEntrySe
  * inline `??`/`||` field reads — same fields, same fallbacks, same payload, just not written in the
  * `.tsx`.
  */
-export function SeoDefaultsTab({ controller }, _optional = {}) {
+export function SeoDefaultsTab({ controller }) {
     const t = useSeoCopy();
     const { locale, settings, saving, defaultOgImage, setDefaultOgImage } = controller;
     const { submit } = useSeoDefaults({ save: controller.save });
@@ -175,7 +195,7 @@ export function SeoDefaultsTab({ controller }, _optional = {}) {
  * It also has to exist at all — a `role="tab"` button is not in a screen reader's heading list, so
  * a panel with no `<h2>` leaves that reader nothing but the page `H1`.
  */
-export function SeoSitemapTab({ controller }, _optional = {}) {
+export function SeoSitemapTab({ controller }) {
     const t = useSeoCopy();
     const { locale, settings, saving, regenerateSitemap, openSitemapModal } = controller;
     return (_jsx("div", { className: "jini-seo-panel jini-seo-panel--full", ...agentHandle({ handle: "seo-sitemap" }, {
@@ -189,7 +209,7 @@ export function SeoSitemapTab({ controller }, _optional = {}) {
                                 label: "Open a modal showing the sitemap's URLs, or its raw XML",
                             }), children: t({ locale: locale, key: "View sitemap" }) })] })] }) }));
 }
-export function Seo({ tabId, onTabChange, useSeoHook = useWiredSeo } = {}, _optional = {}) {
+export function Seo({ tabId, onTabChange, useSeoHook = useWiredSeo } = {}) {
     const t = useSeoCopy();
     const { headerActions } = useSeoOptions();
     const { changeTab } = useSeoPageActions({ onTabChange });

package/dist/seo/rules.js

@@ -159,10 +159,15 @@ function parseMediaRefAssetId(ref) {
  * URLs and incomplete input remain editable. @complexity O(n) in value length; no I/O.
  */
 export function isStoredMediaRef({ value }, _optional = {}) {
-    const trimmed = typeof value === "string" ? value.trim() : "";
+    const trimmed = trimmedText(value);
     // A URL typed one character at a time reaches "https:/" before it reaches "https://".
     return !trimmed.includes(":/") && parseMediaRefAssetId(trimmed) !== null;
 }
+/** A field value trimmed, or `""` for a non-string — the `value` props arrive through `??` fallback
+ * chains that do not replace a wrong-typed result, and these rules never throw over one bad value. */
+function trimmedText(value) {
+    return typeof value === 'string' ? value.trim() : '';
+}
 const UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 /** What an image field shows for its value — the file's name and pixel size — in place of the raw
  * `{slug}:public` reference or URL (owner, 2026-10-15: a read-only "Selected image" box "looks
@@ -173,14 +178,25 @@ const UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{
  * @complexity O(m) over the media rows; no I/O.
  */
 export function describeMediaRef({ value, media }, { width, height, t = key => key, extensionFor } = {}) {
-    const trimmed = typeof value === 'string' ? value.trim() : '';
+    const trimmed = trimmedText(value);
     if (!trimmed)
         return null;
     const key = parseMediaRefAssetId(trimmed);
-    const row = key ? media?.find(item => item.id === key || item.slug === key) : undefined;
-    const name = row?.title ? withExtension({ name: row.title, extension: row.contentType && extensionFor ? extensionFor(row.contentType) : '' }) : fallbackMediaName({ key, value: trimmed, t });
+    const row = findMediaRow({ key, media });
+    const name = libraryFileName({ row }, { extensionFor }) ?? fallbackMediaName({ key, value: trimmed, t });
     return { name, size: pixelSize(row?.width ?? width, row?.height ?? height) };
 }
+/** The library row an id-or-slug reference names, when the host could list media at all. */
+function findMediaRow({ key, media }, _optional = {}) {
+    return key ? media?.find(item => item.id === key || item.slug === key) : undefined;
+}
+/** A titled library row's display name with its stored type's extension; `null` for no row or an
+ * untitled one, so the caller's fallback name applies. */
+function libraryFileName({ row }, { extensionFor } = {}) {
+    if (!row?.title)
+        return null;
+    return withExtension({ name: row.title, extension: row.contentType && extensionFor ? extensionFor(row.contentType) : '' });
+}
 /** A library title reads as a file name (owner, 2026-10-15: "it should be testing-page.png or
  * whatever the extension is"). No original upload name is stored, so the extension comes from the
  * stored bytes' type; a title that already ends in it is left alone. */
@@ -249,7 +265,7 @@ export function buildMediaRef({ item }, _optional = {}) {
  * @complexity O(1) — string parsing only, no I/O (the returned URL is a template; the browser
  * performs the actual fetch only once it is used as an `<img src>`). */
 export function resolveMediaRefPreviewUrl({ value, mediaOriginalUrl }, { siteOrigin } = {}) {
-    const trimmed = typeof value === "string" ? value.trim() : "";
+    const trimmed = trimmedText(value);
     if (!trimmed)
         return null;
     if (isAbsoluteMediaRef(trimmed)) {
@@ -280,14 +296,26 @@ function localRenditionAssetKey({ value, siteOrigin }, _optional = {}) {
  * @complexity O(n) in value/error length; fixed-count checks, no I/O.
  */
 export function shareImageWarning({ value, previewUrl, width, height, byteSize, error, previewFailed }, { t = key => key } = {}) {
-    if (typeof value !== 'string' || !value.trim())
+    const blocker = shareImageBlocker({ value, previewUrl, error, previewFailed }, { t });
+    if (blocker !== null)
+        return blocker;
+    const reasons = shareImageShortfalls({ width, height, byteSize }, { t });
+    return reasons.length ? reasons.join(' ') : null;
+}
+/** Why there is nothing to measure: no value, an unparseable one, a metadata error, or a failed
+ * decode — checked in that order. `null` when the image loaded and can be measured. */
+function shareImageBlocker({ value, previewUrl, error, previewFailed }, { t }) {
+    if (!trimmedText(value))
         return t('No share image is selected. Link previews may show no picture.');
     if (!previewUrl)
         return t('The share image reference is invalid. Choose an image or enter an absolute image URL.');
     if (error)
         return error;
-    if (previewFailed)
-        return t('The share image could not be loaded. Choose an available image.');
+    return previewFailed ? t('The share image could not be loaded. Choose an available image.') : null;
+}
+/** Each measured dimension or size below the share-card minimum, as its own sentence. An unknown
+ * measurement (`undefined`, or a `null` byte size) is never reported. */
+function shareImageShortfalls({ width, height, byteSize }, { t }) {
     const reasons = [];
     if (width !== undefined && width < 1200)
         reasons.push(interpolate({ template: t('The share image is only {width} px wide; use an image at least 1200 px wide.', { width }), vars: { width } }));
@@ -295,7 +323,7 @@ export function shareImageWarning({ value, previewUrl, width, height, byteSize,
         reasons.push(interpolate({ template: t('The share image is only {height} px tall; use an image at least 630 px tall.', { height }), vars: { height } }));
     if (byteSize !== undefined && byteSize !== null && byteSize < 5120)
         reasons.push(interpolate({ template: t('The share image is only {byteSize} bytes; use an image of at least 5 KB (5120 bytes).', { byteSize }), vars: { byteSize } }));
-    return reasons.length ? reasons.join(' ') : null;
+    return reasons;
 }
 /** One `FormData` field as a string, with the caller's fallback for an absent field. Its own named
  *  function purely so {@link buildSeoSettingsPatch} below stays readable at a glance: written
@@ -380,7 +408,8 @@ export function entryPickerOptions({ posts, pages }, { t = key => key } = {}) {
         return entries.map((entry) => ({
             value: entry.id, label: labelOf(entry), group,
             ...(entry.status && entry.status !== 'published' ? { badge: t(entry.status) } : {}),
-            ...((counts.get(labelOf(entry)) ?? 0) > 1 ? { detail: entry.slug || entry.id } : {}),
+            // Every label was counted above, so its count is at least 1 and "not exactly one" means a duplicate.
+            ...(counts.get(labelOf(entry)) !== 1 ? { detail: entry.slug || entry.id } : {}),
         }));
     };
     return [...rows(pages, t('Pages')), ...rows(posts, t('Posts'))];

package/dist/source-control/conformance/source-control-api.conformance.js

@@ -1,47 +1,77 @@
-/** Creates/deletes named test credentials: run only on a disposable authorized backend.
- * Supply connectionFields for providers with required fields beyond the canonical token. */
-export async function runSourceControlApiConformance({ api, providerId }, { connectionFields = {} } = {}) {
-    const checks = [], ids = [];
-    const assert = (ok, name) => { if (!ok)
-        throw new Error(`Source control conformance: ${name}`); checks.push(name); };
-    async function rejects(run, name) { let rejected = false; try {
-        await run();
+/** Records `name` as passed, or throws naming the provider and the failed check. */
+function pass({ run, ok, name }) {
+    if (!ok)
+        throw new Error(`Source control conformance failed for provider "${run.providerId}": ${name}`);
+    run.checks.push(name);
+}
+/** Passes `name` only when `attempt` rejects; the rejection reason itself is irrelevant to the contract. */
+async function refuses({ run, attempt, name }) {
+    let rejected = false;
+    try {
+        await attempt();
     }
     catch {
         rejected = true;
-    } assert(rejected, name); }
-    const connection = { ...connectionFields, providerId, token: 'conformance-only-token' };
+    }
+    pass({ run, ok: rejected, name });
+}
+async function checkCreate({ run }) {
+    const { api, providerId, connection } = run;
+    pass({ run, ok: (await api.providers({})).some(p => p.id === providerId), name: 'provider is listed' });
+    const first = await api.create({ label: 'conformance-first', connection });
+    run.ids.push(first.id);
+    pass({ run, ok: first.configured && !!first.id, name: 'create returns configured summary' });
+    pass({ run, ok: !('token' in first) && !('connection' in first), name: 'saved secrets never read back' });
+    pass({ run, ok: (await api.list({})).some(r => r.id === first.id), name: 'list contains created row' });
+    await refuses({ run, attempt: () => api.create({ label: 'conformance-first', connection }), name: 'duplicate label rejects' });
+    return first;
+}
+async function checkDefaultSlot({ run }) {
+    const { api, providerId, connection } = run;
+    const second = await api.create({ label: 'conformance-second', connection, isDefault: true });
+    run.ids.push(second.id);
+    const list = await api.list({});
+    pass({ run, ok: list.filter(r => r.providerId === providerId && r.isDefault).length === 1 && list.find(r => r.id === second.id)?.isDefault === true, name: 'server owns unique default slot' });
+}
+async function checkUpdates({ run, first }) {
+    const { api, providerId, connection } = run;
+    const renamed = await api.update({ id: first.id, patch: { label: 'conformance-renamed' } });
+    pass({ run, ok: renamed.label === 'conformance-renamed' && renamed.configured, name: 'metadata-only update preserves configured credential' });
+    pass({ run, ok: first.label === 'conformance-first', name: 'prior snapshots remain immutable' });
+    const replaced = await api.update({ id: first.id, patch: { connection } });
+    pass({ run, ok: replaced.id === first.id && replaced.label === renamed.label, name: 'replacement retains identity and label' });
+    await refuses({ run, attempt: () => api.update({ id: first.id, patch: { connection: { providerId, token: '' } } }), name: 'blank replacement rejects' });
+    return renamed;
+}
+async function checkAborts({ run, first, renamed }) {
+    const { api } = run;
+    const abort = new AbortController();
+    abort.abort();
+    await refuses({ run, attempt: () => api.list({}, { signal: abort.signal }), name: 'aborted list rejects' });
+    await refuses({ run, attempt: () => api.update({ id: first.id, patch: { label: 'bad' } }, { signal: abort.signal }), name: 'aborted write rejects' });
+    pass({ run, ok: (await api.list({})).find(r => r.id === first.id)?.label === renamed.label, name: 'aborted write has no effects' });
+}
+async function checkRemove({ run, first }) {
+    const { api } = run;
+    await api.remove({ id: first.id });
+    await api.remove({ id: first.id });
+    pass({ run, ok: !(await api.list({})).some(r => r.id === first.id), name: 'remove is idempotent' });
+    await refuses({ run, attempt: () => api.update({ id: first.id, patch: {} }), name: 'missing update rejects' });
+}
+/** Creates/deletes named test credentials: run only on a disposable authorized backend.
+ * Supply connectionFields for providers with required fields beyond the canonical token. */
+export async function runSourceControlApiConformance({ api, providerId }, { connectionFields = {} } = {}) {
+    const run = { api, providerId, connection: { ...connectionFields, providerId, token: 'conformance-only-token' }, ids: [], checks: [] };
     try {
-        assert((await api.providers({})).some(p => p.id === providerId), 'provider is listed');
-        const first = await api.create({ label: 'conformance-first', connection });
-        ids.push(first.id);
-        assert(first.configured && !!first.id, 'create returns configured summary');
-        assert(!('token' in first) && !('connection' in first), 'saved secrets never read back');
-        assert((await api.list({})).some(r => r.id === first.id), 'list contains created row');
-        await rejects(() => api.create({ label: 'conformance-first', connection }), 'duplicate label rejects');
-        const second = await api.create({ label: 'conformance-second', connection, isDefault: true });
-        ids.push(second.id);
-        const list = await api.list({});
-        assert(list.filter(r => r.providerId === providerId && r.isDefault).length === 1 && list.find(r => r.id === second.id)?.isDefault === true, 'server owns unique default slot');
-        const renamed = await api.update({ id: first.id, patch: { label: 'conformance-renamed' } });
-        assert(renamed.label === 'conformance-renamed' && renamed.configured, 'metadata-only update preserves configured credential');
-        assert(first.label === 'conformance-first', 'prior snapshots remain immutable');
-        const replaced = await api.update({ id: first.id, patch: { connection } });
-        assert(replaced.id === first.id && replaced.label === renamed.label, 'replacement retains identity and label');
-        await rejects(() => api.update({ id: first.id, patch: { connection: { providerId, token: '' } } }), 'blank replacement rejects');
-        const abort = new AbortController();
-        abort.abort();
-        await rejects(() => api.list({}, { signal: abort.signal }), 'aborted list rejects');
-        await rejects(() => api.update({ id: first.id, patch: { label: 'bad' } }, { signal: abort.signal }), 'aborted write rejects');
-        assert((await api.list({})).find(r => r.id === first.id)?.label === renamed.label, 'aborted write has no effects');
-        await api.remove({ id: first.id });
-        await api.remove({ id: first.id });
-        assert(!(await api.list({})).some(r => r.id === first.id), 'remove is idempotent');
-        await rejects(() => api.update({ id: first.id, patch: {} }), 'missing update rejects');
-        return Object.freeze(checks);
+        const first = await checkCreate({ run });
+        await checkDefaultSlot({ run });
+        const renamed = await checkUpdates({ run, first });
+        await checkAborts({ run, first, renamed });
+        await checkRemove({ run, first });
+        return Object.freeze(run.checks);
     }
     finally {
-        for (const id of ids)
+        for (const id of run.ids)
             await api.remove({ id });
     }
 }

package/dist/source-control/controllers/source-control.controller.js

@@ -1,5 +1,16 @@
 import { createControllerStore } from '../../core/module/controller-store.js';
 import { blankSourceControlDraft, sourceControlProviders, defaultSourceControlCredential, sourceControlReady, buildSourceControlConnection, sourceControlSummary, sourceControlErrorMessage } from '../rules.js';
+/** The provider and draft a save would submit, or null when the loaded state cannot accept a save for `providerId`. */
+function readySaveTarget({ state, providerId }) {
+    const draft = state.drafts[providerId] ?? blankSourceControlDraft({});
+    const info = sourceControlProviders({ providers: state.providers, credentials: state.credentials }).find(p => p.id === providerId);
+    return state.loaded && !draft.saving && info && sourceControlReady({ info, draft }) ? { info, draft } : null;
+}
+/** Replaces the row with `summary`'s id in place, or appends `summary` when it is new. */
+function spliceCredential({ credentials, summary }) {
+    // Preserve server order: the first row is the defensive default when no row is marked default.
+    return Object.freeze(credentials.some(c => c.id === summary.id) ? credentials.map(c => c.id === summary.id ? summary : c) : [...credentials, summary]);
+}
 export function createSourceControlController({ api, permissions = [] }, _optional = {}) {
     const grants = new Set(permissions), store = createControllerStore({ initial: { providers: [], credentials: [], drafts: {}, loading: false, loaded: false, error: null, catalogError: null } });
     let generation = 0, credentialRevision = 0;
@@ -35,22 +46,23 @@ export function createSourceControlController({ api, permissions = [] }, _option
         if (ticket === generation)
             store.set({ patch: { loading: false } });
     }
+    /** Replaces the provider's current default credential, or creates one labelled 'default'. */
+    function writeCredential({ current, connection }) {
+        return current ? api.update({ id: current.id, patch: { connection } }, { signal: store.signal }) : api.create({ label: 'default', connection }, { signal: store.signal });
+    }
     async function save({ providerId }, _optional = {}) {
-        const state = store.getSnapshot(), draft = state.drafts[providerId] ?? blankSourceControlDraft({});
-        const info = sourceControlProviders({ providers: state.providers, credentials: state.credentials }).find(p => p.id === providerId);
-        if (!canWrite() || !state.loaded || draft.saving || !info || !sourceControlReady({ info, draft }))
+        const state = store.getSnapshot(), target = canWrite() ? readySaveTarget({ state, providerId }) : null;
+        if (!target)
             return false;
-        const current = defaultSourceControlCredential({ credentials: state.credentials, providerId }), connection = buildSourceControlConnection({ info, draft });
+        const current = defaultSourceControlCredential({ credentials: state.credentials, providerId }), connection = buildSourceControlConnection(target);
         patchDraft(providerId, { saving: true, error: null });
         try {
-            const row = current ? await api.update({ id: current.id, patch: { connection } }, { signal: store.signal }) : await api.create({ label: 'default', connection }, { signal: store.signal });
+            const row = await writeCredential({ current, connection });
             if (store.signal.aborted)
                 return false;
             credentialRevision++;
             // One round trip per write: splice the summary, then erase accepted secret drafts immediately.
-            const credentials = store.getSnapshot().credentials, summary = sourceControlSummary({ row });
-            // Preserve server order: the first row is the defensive default when no row is marked default.
-            store.set({ patch: { credentials: Object.freeze(credentials.some(c => c.id === row.id) ? credentials.map(c => c.id === row.id ? summary : c) : [...credentials, summary]) } });
+            store.set({ patch: { credentials: spliceCredential({ credentials: store.getSnapshot().credentials, summary: sourceControlSummary({ row }) }) } });
             patchDraft(providerId, blankSourceControlDraft({}));
             return true;
         }