@kernhq/module-quire 0.13.1 → 0.15.0

package/dist/contract/router.d.ts

@@ -148,6 +148,91 @@ export declare const PublicSitemapEntry: z.ZodObject<{
     path: z.ZodString;
     lastModified: z.ZodISODateTime;
 }, z.core.$strip>;
+/**
+ * An export job, plus the one thing that cannot be stored on it: a link to the artefact.
+ *
+ * `downloadUrl` is minted per request and is null in every state but `done`. It is composed here
+ * rather than written into `export_jobs` because a signed storage URL is the object's key, so a
+ * stored one is both an address that leaks the workspace and file uuids and an address that stops
+ * working an hour later — and, worse, a fence applied once at the moment the job finished rather
+ * than every time somebody asks. A subtree export flattens pages of different readerships into one
+ * file, so the moment of the fetch is the moment that has to be checked.
+ */
+export declare const ExportJobDetail: z.ZodObject<{
+    id: z.ZodUUID;
+    workspaceId: z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">;
+    requestedBy: z.core.$ZodBranded<z.ZodUUID, "UserId", "out">;
+    scope: z.ZodEnum<{
+        page: "page";
+        subtree: "subtree";
+        space: "space";
+    }>;
+    targetId: z.ZodUUID;
+    format: z.ZodEnum<{
+        markdown: "markdown";
+        html: "html";
+        docx: "docx";
+        pdf: "pdf";
+    }>;
+    state: z.ZodEnum<{
+        queued: "queued";
+        running: "running";
+        done: "done";
+        failed: "failed";
+    }>;
+    fileId: z.ZodNullable<z.ZodUUID>;
+    error: z.ZodNullable<z.ZodString>;
+    counts: z.ZodObject<{
+        total: z.ZodDefault<z.ZodNumber>;
+        done: z.ZodDefault<z.ZodNumber>;
+        skipped: z.ZodDefault<z.ZodNumber>;
+        failed: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>;
+    createdAt: z.ZodISODateTime;
+    finishedAt: z.ZodNullable<z.ZodISODateTime>;
+    downloadUrl: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type ExportJobDetail = z.infer<typeof ExportJobDetail>;
+/**
+ * An import job **without its report**, which is the only shape a list can afford to carry.
+ *
+ * The report is one row per file, and a Notion export is thousands of files — so twenty jobs in a
+ * list is a response of megabytes to draw a table of dates and states. `get` carries the whole thing
+ * because that screen is somebody looking at one import and asking what happened to their files,
+ * which is the question the report exists to answer.
+ *
+ * Omitted rather than truncated on purpose. A report cut off at fifty rows is one that has quietly
+ * stopped being the complete account of the archive, and a person reading "23 skipped" beside a list
+ * of twelve would have no way to know which. Absent is a state a client can render; incomplete is not.
+ */
+export declare const ImportJobSummary: z.ZodObject<{
+    id: z.ZodUUID;
+    workspaceId: z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">;
+    error: z.ZodNullable<z.ZodString>;
+    createdAt: z.ZodISODateTime;
+    requestedBy: z.core.$ZodBranded<z.ZodUUID, "UserId", "out">;
+    targetId: z.ZodUUID;
+    state: z.ZodEnum<{
+        queued: "queued";
+        running: "running";
+        done: "done";
+        failed: "failed";
+    }>;
+    counts: z.ZodObject<{
+        total: z.ZodDefault<z.ZodNumber>;
+        done: z.ZodDefault<z.ZodNumber>;
+        skipped: z.ZodDefault<z.ZodNumber>;
+        failed: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>;
+    finishedAt: z.ZodNullable<z.ZodISODateTime>;
+    source: z.ZodEnum<{
+        markdown: "markdown";
+        notion: "notion";
+        confluence: "confluence";
+    }>;
+    sourceFileId: z.ZodUUID;
+}, z.core.$strip>;
+export type ImportJobSummary = z.infer<typeof ImportJobSummary>;
 /**
  * One picture from a published page, **as bytes rather than as an address**.
  *
@@ -200,6 +285,80 @@ export declare const PublicBasePath: z.ZodDefault<z.ZodString>;
  * segment starting with an underscore and no published page can be shadowed by this one.
  */
 export declare const PUBLIC_ASSET_SEGMENT = "__media";
+/**
+ * One row of the picker: a shipped starter, or a template somebody saved.
+ *
+ * The two are one list on purpose. A person choosing what to write does not care which of them came
+ * with Kern, so a screen that draws "Templates" and "Your templates" as separate sections is asking
+ * them to know something about our packaging — and it makes the override rule invisible, because a
+ * starter a workspace has edited would appear in the second list while its shipped twin sat in the
+ * first.
+ *
+ * **`id` is null for a shipped starter, and that is the whole shape of the compromise.** A starter is
+ * a constant in the module rather than a row in the customer's database — `migrations/0011` argues
+ * why at length — so there is no row for it to have an id, and `key` is what addresses it instead.
+ * `instantiate` therefore takes one of the two and refuses both.
+ *
+ * `name` and `description` arrive **already in the reader's language**. A starter's strings are a
+ * table in the module resolved against `principal.locale`, so a client renders whatever it is given
+ * and never has to know which entries are ours.
+ */
+export declare const TemplateChoice: z.ZodObject<{
+    id: z.ZodNullable<z.ZodUUID>;
+    key: z.ZodNullable<z.ZodString>;
+    builtIn: z.ZodBoolean;
+    kind: z.ZodEnum<{
+        page: "page";
+        space: "space";
+    }>;
+    spaceId: z.ZodNullable<z.ZodUUID>;
+    name: z.ZodString;
+    description: z.ZodString;
+    icon: z.ZodNullable<z.ZodString>;
+    variables: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        label: z.ZodString;
+        type: z.ZodEnum<{
+            number: "number";
+            date: "date";
+            text: "text";
+            select: "select";
+            user: "user";
+        }>;
+        options: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        default: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        required: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>>;
+    updatedAt: z.ZodNullable<z.ZodISODateTime>;
+}, z.core.$strip>;
+export type TemplateChoice = z.infer<typeof TemplateChoice>;
+/**
+ * What somebody typed into the form a template asked for.
+ *
+ * Strings whatever the variable's type, because substitution is textual: a `date` variable puts
+ * characters into a paragraph exactly as a `text` one does, and the type only ever decided which
+ * control the person was shown. Storing a number here would mean the server deciding how to format
+ * it, in a locale it would have to guess.
+ *
+ * A key naming no declared variable is ignored rather than refused — a client one release ahead is
+ * a normal thing during a rolling deploy, and refusing the whole page over a spare field is not.
+ */
+export declare const TemplateValues: z.ZodRecord<z.ZodString, z.ZodString>;
+/**
+ * What making something from a template produced.
+ *
+ * One shape for both kinds, rather than `Page` for one and `Space` for the other. The caller's next
+ * move is the same either way — open what was just made — and a union output would make every
+ * client branch on `kind` to find out where to navigate. `pageCount` is what the screen reports:
+ * a space template that made eleven pages should say so, because that is a lot of pages to have
+ * appeared in a sidebar without warning.
+ */
+export declare const TemplateResult: z.ZodObject<{
+    spaceId: z.ZodUUID;
+    pageId: z.ZodNullable<z.ZodUUID>;
+    pageCount: z.ZodNumber;
+}, z.core.$strip>;
+export type TemplateResult = z.infer<typeof TemplateResult>;
 export declare const quireContract: {
     readonly spaces: {
         readonly list: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
@@ -1443,9 +1602,9 @@ export declare const quireContract: {
                 type: z.ZodEnum<{
                     number: "number";
                     date: "date";
-                    email: "email";
                     text: "text";
                     select: "select";
+                    email: "email";
                     multi_select: "multi_select";
                     status: "status";
                     person: "person";
@@ -1467,9 +1626,9 @@ export declare const quireContract: {
                         label: z.ZodString;
                         colour: z.ZodDefault<z.ZodString>;
                         group: z.ZodOptional<z.ZodEnum<{
+                            done: "done";
                             todo: "todo";
                             doing: "doing";
-                            done: "done";
                         }>>;
                     }, z.core.$strip>>>;
                     format: z.ZodOptional<z.ZodString>;
@@ -1610,9 +1769,9 @@ export declare const quireContract: {
                 type: z.ZodEnum<{
                     number: "number";
                     date: "date";
-                    email: "email";
                     text: "text";
                     select: "select";
+                    email: "email";
                     multi_select: "multi_select";
                     status: "status";
                     person: "person";
@@ -1634,9 +1793,9 @@ export declare const quireContract: {
                         label: z.ZodString;
                         colour: z.ZodDefault<z.ZodString>;
                         group: z.ZodOptional<z.ZodEnum<{
+                            done: "done";
                             todo: "todo";
                             doing: "doing";
-                            done: "done";
                         }>>;
                     }, z.core.$strip>>>;
                     format: z.ZodOptional<z.ZodString>;
@@ -1843,9 +2002,9 @@ export declare const quireContract: {
                 type: z.ZodEnum<{
                     number: "number";
                     date: "date";
-                    email: "email";
                     text: "text";
                     select: "select";
+                    email: "email";
                     multi_select: "multi_select";
                     status: "status";
                     person: "person";
@@ -1867,9 +2026,9 @@ export declare const quireContract: {
                         label: z.ZodString;
                         colour: z.ZodDefault<z.ZodString>;
                         group: z.ZodOptional<z.ZodEnum<{
+                            done: "done";
                             todo: "todo";
                             doing: "doing";
-                            done: "done";
                         }>>;
                     }, z.core.$strip>>>;
                     format: z.ZodOptional<z.ZodString>;
@@ -2113,9 +2272,9 @@ export declare const quireContract: {
             type: z.ZodEnum<{
                 number: "number";
                 date: "date";
-                email: "email";
                 text: "text";
                 select: "select";
+                email: "email";
                 multi_select: "multi_select";
                 status: "status";
                 person: "person";
@@ -2137,9 +2296,9 @@ export declare const quireContract: {
                     label: z.ZodString;
                     colour: z.ZodDefault<z.ZodString>;
                     group: z.ZodOptional<z.ZodEnum<{
+                        done: "done";
                         todo: "todo";
                         doing: "doing";
-                        done: "done";
                     }>>;
                 }, z.core.$strip>>>;
                 format: z.ZodOptional<z.ZodString>;
@@ -2175,9 +2334,9 @@ export declare const quireContract: {
             type: z.ZodEnum<{
                 number: "number";
                 date: "date";
-                email: "email";
                 text: "text";
                 select: "select";
+                email: "email";
                 multi_select: "multi_select";
                 status: "status";
                 person: "person";
@@ -2199,9 +2358,9 @@ export declare const quireContract: {
                     label: z.ZodString;
                     colour: z.ZodDefault<z.ZodString>;
                     group: z.ZodOptional<z.ZodEnum<{
+                        done: "done";
                         todo: "todo";
                         doing: "doing";
-                        done: "done";
                     }>>;
                 }, z.core.$strip>>>;
                 format: z.ZodOptional<z.ZodString>;
@@ -2261,9 +2420,9 @@ export declare const quireContract: {
             type: z.ZodOptional<z.ZodEnum<{
                 number: "number";
                 date: "date";
-                email: "email";
                 text: "text";
                 select: "select";
+                email: "email";
                 multi_select: "multi_select";
                 status: "status";
                 person: "person";
@@ -2285,9 +2444,9 @@ export declare const quireContract: {
                     label: z.ZodString;
                     colour: z.ZodDefault<z.ZodString>;
                     group: z.ZodOptional<z.ZodEnum<{
+                        done: "done";
                         todo: "todo";
                         doing: "doing";
-                        done: "done";
                     }>>;
                 }, z.core.$strip>>>;
                 format: z.ZodOptional<z.ZodString>;
@@ -2324,9 +2483,9 @@ export declare const quireContract: {
             type: z.ZodEnum<{
                 number: "number";
                 date: "date";
-                email: "email";
                 text: "text";
                 select: "select";
+                email: "email";
                 multi_select: "multi_select";
                 status: "status";
                 person: "person";
@@ -2348,9 +2507,9 @@ export declare const quireContract: {
                     label: z.ZodString;
                     colour: z.ZodDefault<z.ZodString>;
                     group: z.ZodOptional<z.ZodEnum<{
+                        done: "done";
                         todo: "todo";
                         doing: "doing";
-                        done: "done";
                     }>>;
                 }, z.core.$strip>>>;
                 format: z.ZodOptional<z.ZodString>;
@@ -2421,9 +2580,9 @@ export declare const quireContract: {
             type: z.ZodEnum<{
                 number: "number";
                 date: "date";
-                email: "email";
                 text: "text";
                 select: "select";
+                email: "email";
                 multi_select: "multi_select";
                 status: "status";
                 person: "person";
@@ -2445,9 +2604,9 @@ export declare const quireContract: {
                     label: z.ZodString;
                     colour: z.ZodDefault<z.ZodString>;
                     group: z.ZodOptional<z.ZodEnum<{
+                        done: "done";
                         todo: "todo";
                         doing: "doing";
-                        done: "done";
                     }>>;
                 }, z.core.$strip>>>;
                 format: z.ZodOptional<z.ZodString>;
@@ -3400,35 +3559,73 @@ export declare const quireContract: {
             };
         }>, Record<never, never>>;
     };
-    readonly publishing: {
-        /** Make what is written now the version readers are served. Only meaningful for a `page`. */
-        readonly publish: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
-            workspaceId: z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">;
-            pageId: z.ZodUUID;
-            label: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-        }, z.core.$strip>, z.ZodObject<{
-            id: z.ZodUUID;
+    /**
+     * What somebody writes with: a page, or a whole space, saved so it can be made again.
+     *
+     * **The five starters Kern ships are constants in this module, not rows in a customer's
+     * database.** `migrations/0011_templates.sql` argues that at length; the consequences visible from
+     * here are three. `list` answers starters and rows in one list, with a row carrying a starter's
+     * `key` standing *in place of* that starter rather than beside it. A starter has no id, so
+     * `instantiate` takes `templateId` **or** `starterKey` and refuses both. And `get`, `update` and
+     * `remove` take an id, which means they are about rows only — a starter has nothing to fetch or
+     * delete, and "reset this one" is deleting the row that replaced it.
+     *
+     * Reading is `quire.space.view` and writing is `quire.space.manage`, exactly as `labels.*` next
+     * door, and for the same reason: a template is part of a space's furniture rather than one page's
+     * content. Changing it changes what everybody in the space is offered when they make a page, which
+     * is not a thing somebody who may edit one page should be able to do to everybody else's.
+     *
+     * `instantiate` is the exception and asks `quire.page.create`, because what it does is make a
+     * page. Somebody who may write in a space may use its templates; only somebody who configures the
+     * space may change them.
+     */
+    readonly templates: {
+        /**
+         * What may be made here: the starters, plus this workspace's own, with overrides applied.
+         *
+         * `spaceId` is the space being written into, and null asks the workspace-wide question — which
+         * is what the "New space" picker needs, because there is no space yet. With a space named, the
+         * answer is that space's templates *and* the workspace-wide ones: a template scoped to a space
+         * is an addition to what is offered there, never a replacement for what is offered everywhere.
+         *
+         * No body comes back. Thirty page documents to draw thirty names is thirty documents nobody
+         * reads — see `TemplateSummary`. `instantiate` is what reads one.
+         */
+        readonly list: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
             workspaceId: z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">;
-            spaceId: z.ZodUUID;
-            parentId: z.ZodNullable<z.ZodUUID>;
-            position: z.ZodString;
+            kind: z.ZodDefault<z.ZodEnum<{
+                page: "page";
+                space: "space";
+            }>>;
+            spaceId: z.ZodDefault<z.ZodNullable<z.ZodUUID>>;
+        }, z.core.$strip>, z.ZodArray<z.ZodObject<{
+            id: z.ZodNullable<z.ZodUUID>;
+            key: z.ZodNullable<z.ZodString>;
+            builtIn: z.ZodBoolean;
             kind: z.ZodEnum<{
                 page: "page";
-                live: "live";
-                database: "database";
+                space: "space";
             }>;
-            title: z.ZodString;
+            spaceId: z.ZodNullable<z.ZodUUID>;
+            name: z.ZodString;
+            description: z.ZodString;
             icon: z.ZodNullable<z.ZodString>;
-            coverUrl: z.ZodNullable<z.ZodString>;
-            publishedVersionId: z.ZodNullable<z.ZodUUID>;
-            hasUnpublishedChanges: z.ZodBoolean;
-            createdBy: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "UserId", "out">>;
-            updatedBy: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "UserId", "out">>;
-            createdAt: z.ZodISODateTime;
-            updatedAt: z.ZodISODateTime;
-            archivedAt: z.ZodNullable<z.ZodISODateTime>;
-            deletedAt: z.ZodNullable<z.ZodISODateTime>;
-        }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<Record<never, never>, {
+            variables: z.ZodArray<z.ZodObject<{
+                name: z.ZodString;
+                label: z.ZodString;
+                type: z.ZodEnum<{
+                    number: "number";
+                    date: "date";
+                    text: "text";
+                    select: "select";
+                    user: "user";
+                }>;
+                options: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                default: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                required: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strip>>;
+            updatedAt: z.ZodNullable<z.ZodISODateTime>;
+        }, z.core.$strip>>, import("@orpc/contract").MergedErrorMap<Record<never, never>, {
             BAD_REQUEST: {
                 data: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
             };
@@ -3451,32 +3648,46 @@ export declare const quireContract: {
                 }, z.core.$strip>;
             };
         }>, Record<never, never>>;
-        /** Throw the draft away and go back to what readers can already see. */
-        readonly revert: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+        /**
+         * One saved template, body and all — what the edit screen loads.
+         *
+         * Rows only. A starter has no row, and inventing an id for it would make every other procedure
+         * here have to tell the two kinds of id apart.
+         */
+        readonly get: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
             workspaceId: z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">;
-            pageId: z.ZodUUID;
+            templateId: z.ZodUUID;
         }, z.core.$strip>, z.ZodObject<{
             id: z.ZodUUID;
             workspaceId: z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">;
-            spaceId: z.ZodUUID;
-            parentId: z.ZodNullable<z.ZodUUID>;
-            position: z.ZodString;
+            spaceId: z.ZodNullable<z.ZodUUID>;
             kind: z.ZodEnum<{
                 page: "page";
-                live: "live";
-                database: "database";
+                space: "space";
             }>;
-            title: z.ZodString;
+            key: z.ZodNullable<z.ZodString>;
+            builtIn: z.ZodBoolean;
+            name: z.ZodString;
+            description: z.ZodString;
             icon: z.ZodNullable<z.ZodString>;
-            coverUrl: z.ZodNullable<z.ZodString>;
-            publishedVersionId: z.ZodNullable<z.ZodUUID>;
-            hasUnpublishedChanges: z.ZodBoolean;
+            doc: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+            variables: z.ZodArray<z.ZodObject<{
+                name: z.ZodString;
+                label: z.ZodString;
+                type: z.ZodEnum<{
+                    number: "number";
+                    date: "date";
+                    text: "text";
+                    select: "select";
+                    user: "user";
+                }>;
+                options: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                default: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                required: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strip>>;
             createdBy: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "UserId", "out">>;
-            updatedBy: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "UserId", "out">>;
             createdAt: z.ZodISODateTime;
             updatedAt: z.ZodISODateTime;
-            archivedAt: z.ZodNullable<z.ZodISODateTime>;
-            deletedAt: z.ZodNullable<z.ZodISODateTime>;
         }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<Record<never, never>, {
             BAD_REQUEST: {
                 data: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
@@ -3500,37 +3711,82 @@ export declare const quireContract: {
                 }, z.core.$strip>;
             };
         }>, Record<never, never>>;
-    };
-    /**
-     * Who has published what, from the inside. Every procedure here is authenticated and asks
-     * `quire.page.publish` about the **root page**, because that is the page whose subtree is being
-     * handed to the internet.
-     */
-    readonly publications: {
-        readonly list: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+        /**
+         * Save what is written now as a template.
+         *
+         * `sourceId` names the page for `kind: 'page'` and the **space** for `kind: 'space'`, the same
+         * shape as `exports.start`'s `targetId` and for the same reason: the two kinds have nothing in
+         * common to point at, and two nullable id fields would let a caller send both. The procedure is
+         * named for the common case; a space template reads the space's whole tree.
+         *
+         * `key` is what makes a starter editable at all. Passing one writes a row that **replaces** that
+         * starter in this workspace's picker; deleting the row brings the shipped one back, current and
+         * translated. One row per starter per workspace — the second is a conflict, not a second entry.
+         */
+        readonly createFromPage: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
             workspaceId: z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">;
-            spaceId: z.ZodUUID;
-        }, z.core.$strip>, z.ZodArray<z.ZodObject<{
+            kind: z.ZodDefault<z.ZodEnum<{
+                page: "page";
+                space: "space";
+            }>>;
+            sourceId: z.ZodUUID;
+            spaceId: z.ZodDefault<z.ZodNullable<z.ZodUUID>>;
+            name: z.ZodString;
+            description: z.ZodDefault<z.ZodString>;
+            icon: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            variables: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                name: z.ZodString;
+                label: z.ZodString;
+                type: z.ZodEnum<{
+                    number: "number";
+                    date: "date";
+                    text: "text";
+                    select: "select";
+                    user: "user";
+                }>;
+                options: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                default: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                required: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strip>>>;
+            key: z.ZodDefault<z.ZodNullable<z.ZodEnum<{
+                "meeting-notes": "meeting-notes";
+                "decision-record": "decision-record";
+                requirements: "requirements";
+                retrospective: "retrospective";
+                "how-to": "how-to";
+            }>>>;
+        }, z.core.$strip>, z.ZodObject<{
             id: z.ZodUUID;
             workspaceId: z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">;
-            rootPageId: z.ZodUUID;
-            includeDescendants: z.ZodBoolean;
-            slug: z.ZodString;
-            hasPassword: z.ZodBoolean;
-            expiresAt: z.ZodNullable<z.ZodISODateTime>;
-            seoTitle: z.ZodString;
-            seoDescription: z.ZodString;
-            ogImageUrl: z.ZodNullable<z.ZodString>;
-            indexable: z.ZodBoolean;
-            theme: z.ZodEnum<{
-                auto: "auto";
-                light: "light";
-                dark: "dark";
+            spaceId: z.ZodNullable<z.ZodUUID>;
+            kind: z.ZodEnum<{
+                page: "page";
+                space: "space";
             }>;
+            key: z.ZodNullable<z.ZodString>;
+            builtIn: z.ZodBoolean;
+            name: z.ZodString;
+            description: z.ZodString;
+            icon: z.ZodNullable<z.ZodString>;
+            doc: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+            variables: z.ZodArray<z.ZodObject<{
+                name: z.ZodString;
+                label: z.ZodString;
+                type: z.ZodEnum<{
+                    number: "number";
+                    date: "date";
+                    text: "text";
+                    select: "select";
+                    user: "user";
+                }>;
+                options: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                default: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                required: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strip>>;
             createdBy: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "UserId", "out">>;
             createdAt: z.ZodISODateTime;
             updatedAt: z.ZodISODateTime;
-        }, z.core.$strip>>, import("@orpc/contract").MergedErrorMap<Record<never, never>, {
+        }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<Record<never, never>, {
             BAD_REQUEST: {
                 data: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
             };
@@ -3553,26 +3809,64 @@ export declare const quireContract: {
                 }, z.core.$strip>;
             };
         }>, Record<never, never>>;
-        readonly get: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+        /**
+         * Rename it, re-scope it, change what it asks for — or replace its body with a page's.
+         *
+         * `sourceId` is three-valued like `publications.update`'s password: a page (or space) id takes
+         * the body from there again, and leaving the key out changes nothing. Without that, updating a
+         * template's name would be a separate act from updating its prose, and the second one would have
+         * no procedure at all.
+         */
+        readonly update: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
             workspaceId: z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">;
-            publicationId: z.ZodUUID;
+            templateId: z.ZodUUID;
+            name: z.ZodOptional<z.ZodString>;
+            description: z.ZodOptional<z.ZodString>;
+            icon: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            spaceId: z.ZodOptional<z.ZodNullable<z.ZodUUID>>;
+            variables: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                name: z.ZodString;
+                label: z.ZodString;
+                type: z.ZodEnum<{
+                    number: "number";
+                    date: "date";
+                    text: "text";
+                    select: "select";
+                    user: "user";
+                }>;
+                options: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                default: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                required: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strip>>>;
+            sourceId: z.ZodOptional<z.ZodUUID>;
         }, z.core.$strip>, z.ZodObject<{
             id: z.ZodUUID;
             workspaceId: z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">;
-            rootPageId: z.ZodUUID;
-            includeDescendants: z.ZodBoolean;
-            slug: z.ZodString;
-            hasPassword: z.ZodBoolean;
-            expiresAt: z.ZodNullable<z.ZodISODateTime>;
-            seoTitle: z.ZodString;
-            seoDescription: z.ZodString;
-            ogImageUrl: z.ZodNullable<z.ZodString>;
-            indexable: z.ZodBoolean;
-            theme: z.ZodEnum<{
-                auto: "auto";
-                light: "light";
-                dark: "dark";
+            spaceId: z.ZodNullable<z.ZodUUID>;
+            kind: z.ZodEnum<{
+                page: "page";
+                space: "space";
             }>;
+            key: z.ZodNullable<z.ZodString>;
+            builtIn: z.ZodBoolean;
+            name: z.ZodString;
+            description: z.ZodString;
+            icon: z.ZodNullable<z.ZodString>;
+            doc: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+            variables: z.ZodArray<z.ZodObject<{
+                name: z.ZodString;
+                label: z.ZodString;
+                type: z.ZodEnum<{
+                    number: "number";
+                    date: "date";
+                    text: "text";
+                    select: "select";
+                    user: "user";
+                }>;
+                options: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                default: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                required: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strip>>;
             createdBy: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "UserId", "out">>;
             createdAt: z.ZodISODateTime;
             updatedAt: z.ZodISODateTime;
@@ -3599,9 +3893,301 @@ export declare const quireContract: {
                 }, z.core.$strip>;
             };
         }>, Record<never, never>>;
-        readonly create: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+        /**
+         * Delete it. For a row that replaced a starter this is "reset": the shipped one comes back.
+         *
+         * Nothing made from a template is touched — a page is a page once it exists, and a template that
+         * took its pages with it would be a delete nobody could afford to press.
+         */
+        readonly remove: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
             workspaceId: z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">;
-            rootPageId: z.ZodUUID;
+            templateId: z.ZodUUID;
+        }, z.core.$strip>, z.ZodObject<{
+            ok: z.ZodLiteral<true>;
+        }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<Record<never, never>, {
+            BAD_REQUEST: {
+                data: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+            };
+            UNAUTHORIZED: {};
+            FORBIDDEN: {
+                data: z.ZodOptional<z.ZodObject<{
+                    permission: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+            };
+            NOT_FOUND: {};
+            CONFLICT: {
+                data: z.ZodOptional<z.ZodObject<{
+                    reason: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+            };
+            RATE_LIMITED: {};
+            MODULE_DISABLED: {
+                data: z.ZodObject<{
+                    module: z.ZodString;
+                }, z.core.$strip>;
+            };
+        }>, Record<never, never>>;
+        /**
+         * Make the thing: a page, or a whole space and its tree.
+         *
+         * Exactly one of `templateId` and `starterKey` — a starter is a constant with no id, and a
+         * union input would be a shape oRPC has to route. Both, or neither, is a bad request.
+         *
+         * `values` fills what the template declared. `{{date}}`, `{{time}}`, `{{author}}` and
+         * `{{space}}` are filled by the server from the request and are declared by nobody; a name the
+         * template never declared is left in the page as it was written, because deleting text somebody
+         * typed is worse than showing them a placeholder they can see and fix.
+         *
+         * Substitution happens **in text, never in JSON**. A value containing a quote, a brace or a
+         * newline is characters in a paragraph and cannot be anything else — see `services/templates.ts`.
+         */
+        readonly instantiate: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            workspaceId: z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">;
+            templateId: z.ZodDefault<z.ZodNullable<z.ZodUUID>>;
+            starterKey: z.ZodDefault<z.ZodNullable<z.ZodEnum<{
+                "meeting-notes": "meeting-notes";
+                "decision-record": "decision-record";
+                requirements: "requirements";
+                retrospective: "retrospective";
+                "how-to": "how-to";
+            }>>>;
+            spaceId: z.ZodDefault<z.ZodNullable<z.ZodUUID>>;
+            parentId: z.ZodDefault<z.ZodNullable<z.ZodUUID>>;
+            afterId: z.ZodDefault<z.ZodNullable<z.ZodUUID>>;
+            title: z.ZodDefault<z.ZodString>;
+            key: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            name: z.ZodDefault<z.ZodString>;
+            values: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+        }, z.core.$strip>, z.ZodObject<{
+            spaceId: z.ZodUUID;
+            pageId: z.ZodNullable<z.ZodUUID>;
+            pageCount: z.ZodNumber;
+        }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<Record<never, never>, {
+            BAD_REQUEST: {
+                data: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+            };
+            UNAUTHORIZED: {};
+            FORBIDDEN: {
+                data: z.ZodOptional<z.ZodObject<{
+                    permission: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+            };
+            NOT_FOUND: {};
+            CONFLICT: {
+                data: z.ZodOptional<z.ZodObject<{
+                    reason: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+            };
+            RATE_LIMITED: {};
+            MODULE_DISABLED: {
+                data: z.ZodObject<{
+                    module: z.ZodString;
+                }, z.core.$strip>;
+            };
+        }>, Record<never, never>>;
+    };
+    readonly publishing: {
+        /** Make what is written now the version readers are served. Only meaningful for a `page`. */
+        readonly publish: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            workspaceId: z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">;
+            pageId: z.ZodUUID;
+            label: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodUUID;
+            workspaceId: z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">;
+            spaceId: z.ZodUUID;
+            parentId: z.ZodNullable<z.ZodUUID>;
+            position: z.ZodString;
+            kind: z.ZodEnum<{
+                page: "page";
+                live: "live";
+                database: "database";
+            }>;
+            title: z.ZodString;
+            icon: z.ZodNullable<z.ZodString>;
+            coverUrl: z.ZodNullable<z.ZodString>;
+            publishedVersionId: z.ZodNullable<z.ZodUUID>;
+            hasUnpublishedChanges: z.ZodBoolean;
+            createdBy: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "UserId", "out">>;
+            updatedBy: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "UserId", "out">>;
+            createdAt: z.ZodISODateTime;
+            updatedAt: z.ZodISODateTime;
+            archivedAt: z.ZodNullable<z.ZodISODateTime>;
+            deletedAt: z.ZodNullable<z.ZodISODateTime>;
+        }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<Record<never, never>, {
+            BAD_REQUEST: {
+                data: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+            };
+            UNAUTHORIZED: {};
+            FORBIDDEN: {
+                data: z.ZodOptional<z.ZodObject<{
+                    permission: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+            };
+            NOT_FOUND: {};
+            CONFLICT: {
+                data: z.ZodOptional<z.ZodObject<{
+                    reason: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+            };
+            RATE_LIMITED: {};
+            MODULE_DISABLED: {
+                data: z.ZodObject<{
+                    module: z.ZodString;
+                }, z.core.$strip>;
+            };
+        }>, Record<never, never>>;
+        /** Throw the draft away and go back to what readers can already see. */
+        readonly revert: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            workspaceId: z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">;
+            pageId: z.ZodUUID;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodUUID;
+            workspaceId: z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">;
+            spaceId: z.ZodUUID;
+            parentId: z.ZodNullable<z.ZodUUID>;
+            position: z.ZodString;
+            kind: z.ZodEnum<{
+                page: "page";
+                live: "live";
+                database: "database";
+            }>;
+            title: z.ZodString;
+            icon: z.ZodNullable<z.ZodString>;
+            coverUrl: z.ZodNullable<z.ZodString>;
+            publishedVersionId: z.ZodNullable<z.ZodUUID>;
+            hasUnpublishedChanges: z.ZodBoolean;
+            createdBy: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "UserId", "out">>;
+            updatedBy: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "UserId", "out">>;
+            createdAt: z.ZodISODateTime;
+            updatedAt: z.ZodISODateTime;
+            archivedAt: z.ZodNullable<z.ZodISODateTime>;
+            deletedAt: z.ZodNullable<z.ZodISODateTime>;
+        }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<Record<never, never>, {
+            BAD_REQUEST: {
+                data: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+            };
+            UNAUTHORIZED: {};
+            FORBIDDEN: {
+                data: z.ZodOptional<z.ZodObject<{
+                    permission: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+            };
+            NOT_FOUND: {};
+            CONFLICT: {
+                data: z.ZodOptional<z.ZodObject<{
+                    reason: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+            };
+            RATE_LIMITED: {};
+            MODULE_DISABLED: {
+                data: z.ZodObject<{
+                    module: z.ZodString;
+                }, z.core.$strip>;
+            };
+        }>, Record<never, never>>;
+    };
+    /**
+     * Who has published what, from the inside. Every procedure here is authenticated and asks
+     * `quire.page.publish` about the **root page**, because that is the page whose subtree is being
+     * handed to the internet.
+     */
+    readonly publications: {
+        readonly list: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            workspaceId: z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">;
+            spaceId: z.ZodUUID;
+        }, z.core.$strip>, z.ZodArray<z.ZodObject<{
+            id: z.ZodUUID;
+            workspaceId: z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">;
+            rootPageId: z.ZodUUID;
+            includeDescendants: z.ZodBoolean;
+            slug: z.ZodString;
+            hasPassword: z.ZodBoolean;
+            expiresAt: z.ZodNullable<z.ZodISODateTime>;
+            seoTitle: z.ZodString;
+            seoDescription: z.ZodString;
+            ogImageUrl: z.ZodNullable<z.ZodString>;
+            indexable: z.ZodBoolean;
+            theme: z.ZodEnum<{
+                auto: "auto";
+                light: "light";
+                dark: "dark";
+            }>;
+            createdBy: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "UserId", "out">>;
+            createdAt: z.ZodISODateTime;
+            updatedAt: z.ZodISODateTime;
+        }, z.core.$strip>>, import("@orpc/contract").MergedErrorMap<Record<never, never>, {
+            BAD_REQUEST: {
+                data: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+            };
+            UNAUTHORIZED: {};
+            FORBIDDEN: {
+                data: z.ZodOptional<z.ZodObject<{
+                    permission: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+            };
+            NOT_FOUND: {};
+            CONFLICT: {
+                data: z.ZodOptional<z.ZodObject<{
+                    reason: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+            };
+            RATE_LIMITED: {};
+            MODULE_DISABLED: {
+                data: z.ZodObject<{
+                    module: z.ZodString;
+                }, z.core.$strip>;
+            };
+        }>, Record<never, never>>;
+        readonly get: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            workspaceId: z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">;
+            publicationId: z.ZodUUID;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodUUID;
+            workspaceId: z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">;
+            rootPageId: z.ZodUUID;
+            includeDescendants: z.ZodBoolean;
+            slug: z.ZodString;
+            hasPassword: z.ZodBoolean;
+            expiresAt: z.ZodNullable<z.ZodISODateTime>;
+            seoTitle: z.ZodString;
+            seoDescription: z.ZodString;
+            ogImageUrl: z.ZodNullable<z.ZodString>;
+            indexable: z.ZodBoolean;
+            theme: z.ZodEnum<{
+                auto: "auto";
+                light: "light";
+                dark: "dark";
+            }>;
+            createdBy: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "UserId", "out">>;
+            createdAt: z.ZodISODateTime;
+            updatedAt: z.ZodISODateTime;
+        }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<Record<never, never>, {
+            BAD_REQUEST: {
+                data: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+            };
+            UNAUTHORIZED: {};
+            FORBIDDEN: {
+                data: z.ZodOptional<z.ZodObject<{
+                    permission: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+            };
+            NOT_FOUND: {};
+            CONFLICT: {
+                data: z.ZodOptional<z.ZodObject<{
+                    reason: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+            };
+            RATE_LIMITED: {};
+            MODULE_DISABLED: {
+                data: z.ZodObject<{
+                    module: z.ZodString;
+                }, z.core.$strip>;
+            };
+        }>, Record<never, never>>;
+        readonly create: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            workspaceId: z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">;
+            rootPageId: z.ZodUUID;
             slug: z.ZodString;
             includeDescendants: z.ZodDefault<z.ZodBoolean>;
             password: z.ZodDefault<z.ZodNullable<z.ZodString>>;
@@ -3791,6 +4377,448 @@ export declare const quireContract: {
             };
         }>, Record<never, never>>;
     };
+    /**
+     * Taking work out: a page, a page and everything under it, or a whole space, as a file.
+     *
+     * Three procedures and no fourth, which is the shape worth explaining. There is no `download`:
+     * `get` carries a `downloadUrl` it mints as it answers, so the permission is checked on the
+     * request that fetches the file rather than baked into a link that outlives the check. And there
+     * is no `cancel`: a job either finishes or fails, both terminal, and a cancel that races a worker
+     * writing an artefact is a way to end up with an object nothing points at.
+     *
+     * **What the artefact contains is decided by the job, not by the caller.** `start` names a scope
+     * and a format; every page under that scope is then checked against the requester's own
+     * `quire.page.view`, and a page they may not read is left out and counted in `skipped`. So a
+     * subtree export by somebody with a page-scoped DENY is a smaller file, not a refusal — and
+     * `counts.skipped` is how they find out, which is the difference between an export that is quietly
+     * missing pages and one that says how many.
+     *
+     * `format: 'docx'` is declared in `ExportFormat` and refused by `start` today: see the note in
+     * `services/export.ts` for what makes a *correct* Word file more than a matter of effort, and why
+     * a refusal is better than a document that may not open.
+     */
+    readonly exports: {
+        /** Queue one. The answer is a row to watch, never the file — see the note above. */
+        readonly start: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            workspaceId: z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">;
+            scope: z.ZodEnum<{
+                page: "page";
+                subtree: "subtree";
+                space: "space";
+            }>;
+            targetId: z.ZodUUID;
+            format: z.ZodEnum<{
+                markdown: "markdown";
+                html: "html";
+                docx: "docx";
+                pdf: "pdf";
+            }>;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodUUID;
+            workspaceId: z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">;
+            requestedBy: z.core.$ZodBranded<z.ZodUUID, "UserId", "out">;
+            scope: z.ZodEnum<{
+                page: "page";
+                subtree: "subtree";
+                space: "space";
+            }>;
+            targetId: z.ZodUUID;
+            format: z.ZodEnum<{
+                markdown: "markdown";
+                html: "html";
+                docx: "docx";
+                pdf: "pdf";
+            }>;
+            state: z.ZodEnum<{
+                queued: "queued";
+                running: "running";
+                done: "done";
+                failed: "failed";
+            }>;
+            fileId: z.ZodNullable<z.ZodUUID>;
+            error: z.ZodNullable<z.ZodString>;
+            counts: z.ZodObject<{
+                total: z.ZodDefault<z.ZodNumber>;
+                done: z.ZodDefault<z.ZodNumber>;
+                skipped: z.ZodDefault<z.ZodNumber>;
+                failed: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strip>;
+            createdAt: z.ZodISODateTime;
+            finishedAt: z.ZodNullable<z.ZodISODateTime>;
+            downloadUrl: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<Record<never, never>, {
+            BAD_REQUEST: {
+                data: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+            };
+            UNAUTHORIZED: {};
+            FORBIDDEN: {
+                data: z.ZodOptional<z.ZodObject<{
+                    permission: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+            };
+            NOT_FOUND: {};
+            CONFLICT: {
+                data: z.ZodOptional<z.ZodObject<{
+                    reason: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+            };
+            RATE_LIMITED: {};
+            MODULE_DISABLED: {
+                data: z.ZodObject<{
+                    module: z.ZodString;
+                }, z.core.$strip>;
+            };
+        }>, Record<never, never>>;
+        /** Where it has got to, and — once it is `done` — a link that is good for a few minutes. */
+        readonly get: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            workspaceId: z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">;
+            jobId: z.ZodUUID;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodUUID;
+            workspaceId: z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">;
+            requestedBy: z.core.$ZodBranded<z.ZodUUID, "UserId", "out">;
+            scope: z.ZodEnum<{
+                page: "page";
+                subtree: "subtree";
+                space: "space";
+            }>;
+            targetId: z.ZodUUID;
+            format: z.ZodEnum<{
+                markdown: "markdown";
+                html: "html";
+                docx: "docx";
+                pdf: "pdf";
+            }>;
+            state: z.ZodEnum<{
+                queued: "queued";
+                running: "running";
+                done: "done";
+                failed: "failed";
+            }>;
+            fileId: z.ZodNullable<z.ZodUUID>;
+            error: z.ZodNullable<z.ZodString>;
+            counts: z.ZodObject<{
+                total: z.ZodDefault<z.ZodNumber>;
+                done: z.ZodDefault<z.ZodNumber>;
+                skipped: z.ZodDefault<z.ZodNumber>;
+                failed: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strip>;
+            createdAt: z.ZodISODateTime;
+            finishedAt: z.ZodNullable<z.ZodISODateTime>;
+            downloadUrl: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<Record<never, never>, {
+            BAD_REQUEST: {
+                data: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+            };
+            UNAUTHORIZED: {};
+            FORBIDDEN: {
+                data: z.ZodOptional<z.ZodObject<{
+                    permission: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+            };
+            NOT_FOUND: {};
+            CONFLICT: {
+                data: z.ZodOptional<z.ZodObject<{
+                    reason: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+            };
+            RATE_LIMITED: {};
+            MODULE_DISABLED: {
+                data: z.ZodObject<{
+                    module: z.ZodString;
+                }, z.core.$strip>;
+            };
+        }>, Record<never, never>>;
+        /**
+         * This person's own exports, newest first.
+         *
+         * Deliberately not the workspace's. Row-level security fences the tenant, which is not a privacy
+         * boundary, so the `requested_by` filter in the query is the only thing that keeps one person's
+         * export of the salary handbook out of everybody else's list — the same rule `favorites.list`
+         * and `recents.list` follow.
+         */
+        readonly list: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            workspaceId: z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">;
+            limit: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip>, z.ZodArray<z.ZodObject<{
+            id: z.ZodUUID;
+            workspaceId: z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">;
+            requestedBy: z.core.$ZodBranded<z.ZodUUID, "UserId", "out">;
+            scope: z.ZodEnum<{
+                page: "page";
+                subtree: "subtree";
+                space: "space";
+            }>;
+            targetId: z.ZodUUID;
+            format: z.ZodEnum<{
+                markdown: "markdown";
+                html: "html";
+                docx: "docx";
+                pdf: "pdf";
+            }>;
+            state: z.ZodEnum<{
+                queued: "queued";
+                running: "running";
+                done: "done";
+                failed: "failed";
+            }>;
+            fileId: z.ZodNullable<z.ZodUUID>;
+            error: z.ZodNullable<z.ZodString>;
+            counts: z.ZodObject<{
+                total: z.ZodDefault<z.ZodNumber>;
+                done: z.ZodDefault<z.ZodNumber>;
+                skipped: z.ZodDefault<z.ZodNumber>;
+                failed: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strip>;
+            createdAt: z.ZodISODateTime;
+            finishedAt: z.ZodNullable<z.ZodISODateTime>;
+        }, z.core.$strip>>, import("@orpc/contract").MergedErrorMap<Record<never, never>, {
+            BAD_REQUEST: {
+                data: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+            };
+            UNAUTHORIZED: {};
+            FORBIDDEN: {
+                data: z.ZodOptional<z.ZodObject<{
+                    permission: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+            };
+            NOT_FOUND: {};
+            CONFLICT: {
+                data: z.ZodOptional<z.ZodObject<{
+                    reason: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+            };
+            RATE_LIMITED: {};
+            MODULE_DISABLED: {
+                data: z.ZodObject<{
+                    module: z.ZodString;
+                }, z.core.$strip>;
+            };
+        }>, Record<never, never>>;
+    };
+    /**
+     * Getting work in: a Notion export, a Confluence export or a folder of Markdown, into one space.
+     *
+     * **The failure list is the feature.** A real export has files that will not map — an attachment,
+     * a `.csv` with no header, a page whose link points outside what was exported — and an import that
+     * silently drops forty pages is worse than one that refuses. So every file in the archive gets a
+     * row in `report` saying whether it became a page, was deliberately left out, or could not be read,
+     * and `counts.total` is exactly the number of rows: nothing in the archive goes unaccounted for.
+     *
+     * Three things follow from the archive being read whole before anything is written, and each is
+     * worth knowing before reading the handlers:
+     *
+     *   - **an import is all or nothing.** A zip that fails half way leaves the space exactly as it
+     *     was, because the plan is built in memory and written in one transaction;
+     *   - **links between imported pages are rewritten to Quire page ids**, which needs every id to
+     *     exist before any body is resolved — a link to a page further down the archive is the normal
+     *     case, not the exception. A link that resolves to nothing becomes plain text rather than a
+     *     dead link, and the report names the target it could not find;
+     *   - **a `.csv` becomes a database with typed columns**, guessed from the values and reported.
+     *
+     * `quire.page.import` is `dangerous`, as the tracker marks its own imports: this is the one thing
+     * in the module that writes hundreds of pages into a space in one act, and it is not undone by
+     * pressing something.
+     */
+    readonly imports: {
+        /**
+         * Queue one. The answer is a row to watch; nothing has been written to the space yet.
+         *
+         * `fileId` is an upload — a core file the browser has already put in place — and not the archive
+         * itself. A zip is up to a few hundred megabytes, which is a file to be uploaded and then named,
+         * never a request body.
+         */
+        readonly start: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            workspaceId: z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">;
+            spaceId: z.ZodUUID;
+            source: z.ZodEnum<{
+                markdown: "markdown";
+                notion: "notion";
+                confluence: "confluence";
+            }>;
+            fileId: z.ZodUUID;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodUUID;
+            workspaceId: z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">;
+            requestedBy: z.core.$ZodBranded<z.ZodUUID, "UserId", "out">;
+            source: z.ZodEnum<{
+                markdown: "markdown";
+                notion: "notion";
+                confluence: "confluence";
+            }>;
+            targetId: z.ZodUUID;
+            sourceFileId: z.ZodUUID;
+            state: z.ZodEnum<{
+                queued: "queued";
+                running: "running";
+                done: "done";
+                failed: "failed";
+            }>;
+            error: z.ZodNullable<z.ZodString>;
+            counts: z.ZodObject<{
+                total: z.ZodDefault<z.ZodNumber>;
+                done: z.ZodDefault<z.ZodNumber>;
+                skipped: z.ZodDefault<z.ZodNumber>;
+                failed: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strip>;
+            report: z.ZodArray<z.ZodObject<{
+                path: z.ZodString;
+                outcome: z.ZodEnum<{
+                    failed: "failed";
+                    skipped: "skipped";
+                    imported: "imported";
+                }>;
+                pageId: z.ZodDefault<z.ZodNullable<z.ZodUUID>>;
+                reason: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            }, z.core.$strip>>;
+            createdAt: z.ZodISODateTime;
+            finishedAt: z.ZodNullable<z.ZodISODateTime>;
+        }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<Record<never, never>, {
+            BAD_REQUEST: {
+                data: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+            };
+            UNAUTHORIZED: {};
+            FORBIDDEN: {
+                data: z.ZodOptional<z.ZodObject<{
+                    permission: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+            };
+            NOT_FOUND: {};
+            CONFLICT: {
+                data: z.ZodOptional<z.ZodObject<{
+                    reason: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+            };
+            RATE_LIMITED: {};
+            MODULE_DISABLED: {
+                data: z.ZodObject<{
+                    module: z.ZodString;
+                }, z.core.$strip>;
+            };
+        }>, Record<never, never>>;
+        /** Where it has got to, and — once it has finished — what happened to every file in it. */
+        readonly get: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            workspaceId: z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">;
+            jobId: z.ZodUUID;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodUUID;
+            workspaceId: z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">;
+            requestedBy: z.core.$ZodBranded<z.ZodUUID, "UserId", "out">;
+            source: z.ZodEnum<{
+                markdown: "markdown";
+                notion: "notion";
+                confluence: "confluence";
+            }>;
+            targetId: z.ZodUUID;
+            sourceFileId: z.ZodUUID;
+            state: z.ZodEnum<{
+                queued: "queued";
+                running: "running";
+                done: "done";
+                failed: "failed";
+            }>;
+            error: z.ZodNullable<z.ZodString>;
+            counts: z.ZodObject<{
+                total: z.ZodDefault<z.ZodNumber>;
+                done: z.ZodDefault<z.ZodNumber>;
+                skipped: z.ZodDefault<z.ZodNumber>;
+                failed: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strip>;
+            report: z.ZodArray<z.ZodObject<{
+                path: z.ZodString;
+                outcome: z.ZodEnum<{
+                    failed: "failed";
+                    skipped: "skipped";
+                    imported: "imported";
+                }>;
+                pageId: z.ZodDefault<z.ZodNullable<z.ZodUUID>>;
+                reason: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            }, z.core.$strip>>;
+            createdAt: z.ZodISODateTime;
+            finishedAt: z.ZodNullable<z.ZodISODateTime>;
+        }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<Record<never, never>, {
+            BAD_REQUEST: {
+                data: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+            };
+            UNAUTHORIZED: {};
+            FORBIDDEN: {
+                data: z.ZodOptional<z.ZodObject<{
+                    permission: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+            };
+            NOT_FOUND: {};
+            CONFLICT: {
+                data: z.ZodOptional<z.ZodObject<{
+                    reason: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+            };
+            RATE_LIMITED: {};
+            MODULE_DISABLED: {
+                data: z.ZodObject<{
+                    module: z.ZodString;
+                }, z.core.$strip>;
+            };
+        }>, Record<never, never>>;
+        /**
+         * This person's own imports, newest first, without their reports — see `ImportJobSummary`.
+         *
+         * Deliberately not the workspace's, for the same reason `exports.list` is not: row-level security
+         * fences the tenant, which is not a privacy boundary, so the `requested_by` filter in the query
+         * is the only thing that keeps one person's import out of everybody else's list.
+         */
+        readonly list: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            workspaceId: z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">;
+            limit: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip>, z.ZodArray<z.ZodObject<{
+            id: z.ZodUUID;
+            workspaceId: z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">;
+            error: z.ZodNullable<z.ZodString>;
+            createdAt: z.ZodISODateTime;
+            requestedBy: z.core.$ZodBranded<z.ZodUUID, "UserId", "out">;
+            targetId: z.ZodUUID;
+            state: z.ZodEnum<{
+                queued: "queued";
+                running: "running";
+                done: "done";
+                failed: "failed";
+            }>;
+            counts: z.ZodObject<{
+                total: z.ZodDefault<z.ZodNumber>;
+                done: z.ZodDefault<z.ZodNumber>;
+                skipped: z.ZodDefault<z.ZodNumber>;
+                failed: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strip>;
+            finishedAt: z.ZodNullable<z.ZodISODateTime>;
+            source: z.ZodEnum<{
+                markdown: "markdown";
+                notion: "notion";
+                confluence: "confluence";
+            }>;
+            sourceFileId: z.ZodUUID;
+        }, z.core.$strip>>, import("@orpc/contract").MergedErrorMap<Record<never, never>, {
+            BAD_REQUEST: {
+                data: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+            };
+            UNAUTHORIZED: {};
+            FORBIDDEN: {
+                data: z.ZodOptional<z.ZodObject<{
+                    permission: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+            };
+            NOT_FOUND: {};
+            CONFLICT: {
+                data: z.ZodOptional<z.ZodObject<{
+                    reason: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+            };
+            RATE_LIMITED: {};
+            MODULE_DISABLED: {
+                data: z.ZodObject<{
+                    module: z.ZodString;
+                }, z.core.$strip>;
+            };
+        }>, Record<never, never>>;
+    };
     /**
      * The signed-out surface. **This is the only part of Kern with no principal behind it.**
      *