@murumets-ee/yhikas-sync 0.92.0 → 0.94.0

package/dist/index.d.mts

@@ -1,768 +1,9 @@
-import { i as resolveYhikasSyncConfig, n as YhikasSyncConfig, r as YhikasSyncConfigError, t as ResolvedYhikasSyncConfig } from "./config-CHVLiXZf.mjs";
+import { $ as EN_LOCALE, A as secondaryLocaleOf, B as roomTypesResponseSchema, C as ProjectedRow, D as projectLegalDocuments, E as SkippedRow, F as SiteNoticeRow, G as PlanDiffInput, H as siteNoticeRowSchema, I as legalDocumentRowSchema, J as stableHash, K as SanityFloor, L as legalDocumentsResponseSchema, M as MultilingualText, N as RoomTypeRow, O as projectRoomTypes, P as SiteInfoResponse, Q as DECLARED_VAT_TREATMENT, R as multilingualTextSchema, S as HtmlSanitizer, T as ProjectionResult, U as DiffPlan, V as siteInfoResponseSchema, W as LocalRow, X as BASE_URL_ENV_VAR, Y as API_KEY_ENV_VAR, Z as DECLARED_CURRENCY, _ as SyncEntityClient, a as YhikasRoomPageRecordError, at as SITE_INFO_RESOURCE, b as applyPlan, c as ROOM_PAGE_ORIGINS, ct as SyncResource, d as RoomPageRefusalKind, dt as YHIKAS_SYNC_PLUGIN_NAME, et as ET_LOCALE, f as yhikasRoomPagesTable, g as ApplyPlanInput, h as ApplyCounts, i as RoomPageRegistry, it as SITE_INFO_KEY, j as LegalDocumentRow, k as projectSiteInfo, l as ROOM_PAGE_REFUSAL_KINDS, lt as WATCHDOG_JOB_NAME, m as toSyncEntityClient, n as RoomPageRecord, nt as MAX_SITE_NOTICES, o as createRoomPageRegistry, ot as SYNC_JOB_NAME, p as AdminClientLike, q as planDiff, r as RoomPageRefusal, rt as ROOM_TYPES_RESOURCE, s as ROOM_PAGE_CLAIM_LEASE_MS, st as SYNC_RESOURCES, t as ROOM_PAGE_READ_CHUNK, tt as LEGAL_DOCUMENTS_RESOURCE, u as RoomPageOrigin, ut as YHIKAS_SYNC_ACTOR_ID, v as SyncLogger, w as ProjectionOptions, x as readLocalRows, y as YhikasApplyPartialError, z as roomTypeRowSchema } from "./room-page-registry-CnqXH_Ls.mjs";
+import { a as RoomPageDraft, c as YhikasSyncConfigError, d as isPublishedRoomType, f as roomTypeForPageFrom, g as isRoomOffer, h as RoomOfferPredicate, i as RoomPageBlock, l as resolveYhikasSyncConfig, m as RoomOfferCandidate, n as ResolvedRoomPagesConfig, o as YhikasRoomPagesConfig, p as AREA_PRICED_UNIT_NAMES, r as ResolvedYhikasSyncConfig, s as YhikasSyncConfig, t as PAGE_SLUG_PATTERN, u as RoomTypeForPage } from "./config-DM3zAAhm.mjs";
 import { Behavior } from "@murumets-ee/entity";
-import { z } from "zod";
-import { ToolkitApp } from "@murumets-ee/core";
+import { PgColumn } from "drizzle-orm/pg-core";
+import { LiveFactSpec, LiveFreshness, LiveItem, LiveSourceSpec } from "@murumets-ee/blocks/schema";
 
-//#region src/constants.d.ts
-/**
- * Names, identifiers and stated numbers for the yhikas-admin sync.
- *
- * Pure module — no imports, no side effects. Both the jiti-loaded plugin entry
- * and the worker-side job modules read from here, so nothing in this file may
- * reach a `server-only` module.
- */
-/** Plugin name, as it appears in `app.plugins` and `Plugin.requires`. */
-declare const YHIKAS_SYNC_PLUGIN_NAME = "@murumets-ee/yhikas-sync";
-/**
- * The synthetic actor every sync write is attributed to.
- *
- * Not `'cli'`. `auditable()` records this in `created_by`/`updated_by`, so a
- * human reading the audit log can tell a sync write from an operator running a
- * `lumi` command — and the machine-written guard (see `entities/guard.ts`) can
- * refuse every other writer by name. Fits `varchar(255)`; user ids in this
- * codebase are varchar, never uuid.
- */
-declare const YHIKAS_SYNC_ACTOR_ID = "yhikas-sync";
-/**
- * Job names. `JOB_NAME_RE` in `@murumets-ee/queue` is
- * `/^[a-zA-Z0-9:_-]{1,128}$/` — colons are the `plugin:action` separator and
- * dots are rejected outright.
- */
-declare const SYNC_JOB_NAME = "yhikas-sync:pull";
-declare const WATCHDOG_JOB_NAME = "yhikas-sync:staleness-watchdog";
-/**
- * The three resources in scope.
- *
- * `site_info` was deliberately absent until 2026-08-11 (D027). PR 05 left it
- * out on a MEASUREMENT — `site_info`/`site_notice` appear only in
- * yhikas-admin's `src/db/schema.ts` and its public route, with no admin UI, no
- * server action, no seed and no internal consumer — from which the plan
- * concluded that no rows existed and a sync would pull nothing.
- *
- * Measured against production on 2026-08-11 (R028), that premise had expired:
- * the route answers 200 with populated reception hours and two live notices.
- * The rows were written outside the app. Hardcoding them in the rebuilt site
- * would therefore have frozen live data, not stood in for an empty upstream.
- */
-declare const ROOM_TYPES_RESOURCE = "room_types";
-declare const LEGAL_DOCUMENTS_RESOURCE = "legal_documents";
-declare const SITE_INFO_RESOURCE = "site_info";
-declare const SYNC_RESOURCES: readonly ["room_types", "legal_documents", "site_info"];
-type SyncResource = (typeof SYNC_RESOURCES)[number];
-/**
- * The business key of the one `yhikas_site_info` row.
- *
- * Upstream `site_info` is a singleton and its notices carry no id or code of
- * their own — only `{text, isActive, order}` — so there is no natural key to
- * diff N rows on. Modelling it as ONE row with a constant key keeps the whole
- * package on a single identity story (`code`, `type`, and now `key`), and
- * keeps the notices ordered without inventing an identity that upstream would
- * not preserve across an edit.
- */
-declare const SITE_INFO_KEY = "default";
-/**
- * Locale codes. Upstream `MultilingualText` is `{ en, et }` and the lumi codes
- * are identical, so there is no mapping to configure — inventing one would be
- * a seam for a second customer this package does not have (N1).
- */
-declare const ET_LOCALE = "et";
-declare const EN_LOCALE = "en";
-/**
- * Currency and VAT treatment, DECLARED here because they are not data upstream
- * (R009 §6 / R013): `room_type` has no currency column and no tax column, and
- * VAT is computed at invoice time against Merit article codes, never stored.
- * Stating them makes a mis-entered source value render as a visibly wrong
- * number against a declared unit rather than as a plausible one.
- *
- * The third semantic — the period — stays encoded in the field NAME
- * (`monthlyRent` / `dailyRent`), because one row carries two different periods
- * and a single `period` column could only be wrong about one of them.
- */
-declare const DECLARED_CURRENCY = "EUR";
-/** `net` = the amount excludes VAT. */
-declare const DECLARED_VAT_TREATMENT = "net";
-/**
- * Hard ceiling on ticker items. A ticker is a marquee: past a couple of dozen
- * entries nobody reads the tail, and an unbounded array from upstream would
- * ride into a JSONB column and out onto every page of the site.
- */
-declare const MAX_SITE_NOTICES = 25;
-/**
- * Env var carrying the sync's OWN bearer credential — deliberately not the
- * site's `PUBLIC_SITE_API_KEY`. The upstream limiter buckets on
- * `sha256(key).slice(0,16)` rather than on the caller IP (there is no
- * `x-forwarded-for` over the Docker-internal path), so sharing a key means
- * sharing one 60/min bucket, and revoking one credential would blind both.
- */
-declare const API_KEY_ENV_VAR = "YHIKAS_SYNC_API_KEY";
-declare const BASE_URL_ENV_VAR = "YHIKAS_ADMIN_BASE_URL";
-//#endregion
-//#region src/diff.d.ts
-/** One local row, reduced to what the diff needs. */
-interface LocalRow {
-  readonly id: string;
-  /** The business key this row was synced under. */
-  readonly key: string;
-  readonly status: string;
-  /**
-   * `null` on a row whose last sync did not complete — the hash is written
-   * LAST, after every other write for the row succeeded, so a null (or stale)
-   * hash is exactly the signal that the row needs redoing.
-   */
-  readonly sourceHash: string | null;
-  /** Preserved across updates so it keeps meaning "first published". */
-  readonly publishedAt: Date | null;
-}
-interface DiffPlan<T> {
-  /** Upstream rows with no local counterpart. */
-  readonly create: readonly T[];
-  /** Local rows whose hash differs, OR whose status drifted from `published`. */
-  readonly update: readonly {
-    readonly local: LocalRow;
-    readonly row: T;
-  }[];
-  /** Local rows already identical and already published — no write at all. */
-  readonly unchanged: readonly LocalRow[];
-  /** Published locally, absent upstream. Unpublished, never deleted (D016). */
-  readonly retire: readonly LocalRow[];
-}
-interface SanityFloor {
-  /** Refuse a snapshot larger than this rather than truncating it. */
-  readonly maxRows: number;
-  /** Refuse a run retiring more than this fraction of published rows. */
-  readonly maxRetireFraction: number;
-  /** The fraction rule applies only once at least this many rows are published. */
-  readonly minRowsForFraction: number;
-}
-interface PlanDiffInput<T> {
-  readonly resource: SyncResource;
-  readonly upstream: readonly T[];
-  readonly local: readonly LocalRow[];
-  readonly keyOf: (row: T) => string;
-  readonly hashOf: (row: T) => string;
-  readonly floor: SanityFloor;
-}
-/**
- * Stable content hash of an upstream row.
- *
- * Keys are sorted so the hash does not depend on JSON property order, which no
- * part of the HTTP stack guarantees. `undefined` and `null` are distinguished
- * because a null price is meaningful data here, not an absence.
- */
-declare function stableHash(value: unknown): string;
-/**
- * Compare an authoritative upstream snapshot against local state.
- *
- * **The caller must not invoke this with a snapshot that did not fully
- * succeed.** That guard lives one level up, in the client: a non-2xx, a
- * timeout or a body failing the wire schema throws before the differ is ever
- * reached, so a partial response can never present as an absence here. This
- * function's own guards are for a snapshot that IS authoritative but whose
- * shape makes acting on it reckless.
- *
- * @throws {YhikasSyncRefusedError} for any of the D016 refusals. Every one of
- *   them aborts before a single write, so a refused run leaves local content
- *   exactly as it was — which is the first of PR 05's three obligatory
- *   negative tests.
- */
-declare function planDiff<T>(input: PlanDiffInput<T>): DiffPlan<T>;
-//#endregion
-//#region src/upstream/wire.d.ts
-/**
- * `MultilingualText` — a Postgres `json` column, so it arrives as a nested
- * object and is never stringified.
- *
- * NOT `.strict()`: unknown keys are stripped rather than rejected, so adding a
- * third language upstream degrades to "the sync ignores it" instead of "every
- * run fails".
- *
- * 🔴 **Each locale key is nullable AND optional, and that is the load-bearing
- * clause** (F058, cross-referenced to upstream F031). The column is declared
- * `json(...).notNull()` — and **notNull covers the OBJECT, not its keys**. There
- * is no CHECK constraint, and two of the four public columns
- * (`room_type.name`, `legal_document.title`) have no upstream validation at all:
- * the write is a raw `formData.get(…) as string`, which is `null` the moment a
- * field is absent. So `{"et":"Tuba","en":null}` — and `{"et":"Tuba"}` — are rows
- * yhikas-admin accepts today, through its ordinary admin UI.
- *
- * Requiring both keys would fail the ENTIRE response for one such row, so 32
- * room types would stop syncing because one lacks an English name — every six
- * hours, until somebody edited it upstream. That is exactly the blast-radius
- * mistake `legalDocumentRowSchema.slug` documents below and deliberately
- * avoided; a missing translation belongs at one row, and `projection.ts` is
- * where it is decided (the locale is suppressed, or the row is skipped with a
- * reason).
- *
- * What is NOT relaxed, on purpose:
- *
- * - **The object itself stays required.** A missing translation is DATA; a
- *   missing FIELD is a renamed column or a changed envelope. The consequence of
- *   tolerating one is caught either way — `assertSomethingSurvived` refuses a
- *   snapshot in which no row survived — but refusing here NAMES it
- *   (`title: Required`) instead of reporting 32 identical "no 'et' title
- *   upstream" skips and leaving the reader to infer the cause.
- * - **A non-string value is still a shape violation.** `{"en":42}` would
- *   otherwise be written as a name.
- *
- * Note the asymmetry this leaves, deliberately: a RENAMED key (`et_EE`) is
- * indistinguishable from two absent ones, because unknown keys are stripped by
- * design so a third language degrades gracefully. That case falls through to
- * `assertSomethingSurvived`, which is exactly what it is for.
- */
-declare const multilingualTextSchema: z.ZodObject<{
-  et: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-  en: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-}, "strip", z.ZodTypeAny, {
-  et?: string | null | undefined;
-  en?: string | null | undefined;
-}, {
-  et?: string | null | undefined;
-  en?: string | null | undefined;
-}>;
-type MultilingualText = z.infer<typeof multilingualTextSchema>;
-/**
- * One `room_type` row.
- *
- * `depositAmount` / `discountedDepositAmount` are absent by design. Upstream
- * ships them as hardcoded `null` with no backing column; validating them as
- * `z.null()` would turn the day someone adds the column into a hard sync
- * failure. Deposits are unbuilt admin-side work, not something the sync can
- * surface.
- */
-declare const roomTypeRowSchema: z.ZodObject<{
-  code: z.ZodString;
-  name: z.ZodObject<{
-    et: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-    en: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-  }, "strip", z.ZodTypeAny, {
-    et?: string | null | undefined;
-    en?: string | null | undefined;
-  }, {
-    et?: string | null | undefined;
-    en?: string | null | undefined;
-  }>;
-  totalArea: z.ZodNullable<z.ZodString>;
-  livingArea: z.ZodNullable<z.ZodString>;
-  commonArea: z.ZodNullable<z.ZodString>;
-  capacity: z.ZodNullable<z.ZodNumber>;
-  monthlyRent: z.ZodNullable<z.ZodString>;
-  discountedRent: z.ZodNullable<z.ZodString>;
-  dailyRent: z.ZodNullable<z.ZodString>;
-  placesOccupied: z.ZodNullable<z.ZodNumber>;
-}, "strip", z.ZodTypeAny, {
-  code: string;
-  name: {
-    et?: string | null | undefined;
-    en?: string | null | undefined;
-  };
-  totalArea: string | null;
-  livingArea: string | null;
-  commonArea: string | null;
-  capacity: number | null;
-  placesOccupied: number | null;
-  monthlyRent: string | null;
-  dailyRent: string | null;
-  discountedRent: string | null;
-}, {
-  code: string;
-  name: {
-    et?: string | null | undefined;
-    en?: string | null | undefined;
-  };
-  totalArea: string | null;
-  livingArea: string | null;
-  commonArea: string | null;
-  capacity: number | null;
-  placesOccupied: number | null;
-  monthlyRent: string | null;
-  dailyRent: string | null;
-  discountedRent: string | null;
-}>;
-type RoomTypeRow = z.infer<typeof roomTypeRowSchema>;
-/**
- * One active `legal_document` row.
- *
- * `type` is `text().notNull().unique()` upstream — NOT a pgEnum, and there is
- * no TS union anywhere. The five values seeded today are closed by convention
- * only and the admin UI can mint a sixth, so this validates the SHAPE of the
- * business key and never its membership in a list. A whitelist here would turn
- * a new upstream document into a hard sync failure.
- */
-declare const legalDocumentRowSchema: z.ZodObject<{
-  type: z.ZodString;
-  title: z.ZodObject<{
-    et: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-    en: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-  }, "strip", z.ZodTypeAny, {
-    et?: string | null | undefined;
-    en?: string | null | undefined;
-  }, {
-    et?: string | null | undefined;
-    en?: string | null | undefined;
-  }>;
-  /**
-   * Accepted as free text HERE, and screened per-row in the projection.
-   *
-   * Upstream derives it from an unvalidated free-text form field
-   * (`type.toLowerCase().replace(/_/g, '-')`), so an Estonian title yields an
-   * Estonian slug — `üldtingimused` — and a title with a space yields a slug
-   * with a space. A character-class regex on the RESPONSE schema would fail
-   * `legalDocumentsResponseSchema` for the whole payload, so one newly
-   * authored document would take the entire resource offline every six hours
-   * until someone edited it upstream. The blast radius belongs at one row.
-   */
-  slug: z.ZodString;
-  htmlContentEt: z.ZodString;
-  htmlContentEn: z.ZodString;
-  order: z.ZodNumber;
-}, "strip", z.ZodTypeAny, {
-  type: string;
-  slug: string;
-  title: {
-    et?: string | null | undefined;
-    en?: string | null | undefined;
-  };
-  order: number;
-  htmlContentEt: string;
-  htmlContentEn: string;
-}, {
-  type: string;
-  slug: string;
-  title: {
-    et?: string | null | undefined;
-    en?: string | null | undefined;
-  };
-  order: number;
-  htmlContentEt: string;
-  htmlContentEn: string;
-}>;
-type LegalDocumentRow = z.infer<typeof legalDocumentRowSchema>;
-/**
- * `success: z.literal(true)` is the load-bearing clause, not decoration.
- *
- * Every upstream failure path sets `success: false` — 401 (missing header,
- * wrong scheme, wrong key, AND an unset server-side key: all four
- * indistinguishable, deny-by-default through one branch), 429, and 500. No
- * route returns 200 with a degraded body. So the discriminator is `success`,
- * never array length, and a snapshot that fails this schema can never be
- * mistaken for an authoritative empty one.
- */
-declare const roomTypesResponseSchema: z.ZodObject<{
-  success: z.ZodLiteral<true>;
-  roomTypes: z.ZodArray<z.ZodObject<{
-    code: z.ZodString;
-    name: z.ZodObject<{
-      et: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-      en: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-    }, "strip", z.ZodTypeAny, {
-      et?: string | null | undefined;
-      en?: string | null | undefined;
-    }, {
-      et?: string | null | undefined;
-      en?: string | null | undefined;
-    }>;
-    totalArea: z.ZodNullable<z.ZodString>;
-    livingArea: z.ZodNullable<z.ZodString>;
-    commonArea: z.ZodNullable<z.ZodString>;
-    capacity: z.ZodNullable<z.ZodNumber>;
-    monthlyRent: z.ZodNullable<z.ZodString>;
-    discountedRent: z.ZodNullable<z.ZodString>;
-    dailyRent: z.ZodNullable<z.ZodString>;
-    placesOccupied: z.ZodNullable<z.ZodNumber>;
-  }, "strip", z.ZodTypeAny, {
-    code: string;
-    name: {
-      et?: string | null | undefined;
-      en?: string | null | undefined;
-    };
-    totalArea: string | null;
-    livingArea: string | null;
-    commonArea: string | null;
-    capacity: number | null;
-    placesOccupied: number | null;
-    monthlyRent: string | null;
-    dailyRent: string | null;
-    discountedRent: string | null;
-  }, {
-    code: string;
-    name: {
-      et?: string | null | undefined;
-      en?: string | null | undefined;
-    };
-    totalArea: string | null;
-    livingArea: string | null;
-    commonArea: string | null;
-    capacity: number | null;
-    placesOccupied: number | null;
-    monthlyRent: string | null;
-    dailyRent: string | null;
-    discountedRent: string | null;
-  }>, "many">;
-}, "strip", z.ZodTypeAny, {
-  success: true;
-  roomTypes: {
-    code: string;
-    name: {
-      et?: string | null | undefined;
-      en?: string | null | undefined;
-    };
-    totalArea: string | null;
-    livingArea: string | null;
-    commonArea: string | null;
-    capacity: number | null;
-    placesOccupied: number | null;
-    monthlyRent: string | null;
-    dailyRent: string | null;
-    discountedRent: string | null;
-  }[];
-}, {
-  success: true;
-  roomTypes: {
-    code: string;
-    name: {
-      et?: string | null | undefined;
-      en?: string | null | undefined;
-    };
-    totalArea: string | null;
-    livingArea: string | null;
-    commonArea: string | null;
-    capacity: number | null;
-    placesOccupied: number | null;
-    monthlyRent: string | null;
-    dailyRent: string | null;
-    discountedRent: string | null;
-  }[];
-}>;
-declare const legalDocumentsResponseSchema: z.ZodObject<{
-  success: z.ZodLiteral<true>;
-  documents: z.ZodArray<z.ZodObject<{
-    type: z.ZodString;
-    title: z.ZodObject<{
-      et: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-      en: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-    }, "strip", z.ZodTypeAny, {
-      et?: string | null | undefined;
-      en?: string | null | undefined;
-    }, {
-      et?: string | null | undefined;
-      en?: string | null | undefined;
-    }>;
-    /**
-     * Accepted as free text HERE, and screened per-row in the projection.
-     *
-     * Upstream derives it from an unvalidated free-text form field
-     * (`type.toLowerCase().replace(/_/g, '-')`), so an Estonian title yields an
-     * Estonian slug — `üldtingimused` — and a title with a space yields a slug
-     * with a space. A character-class regex on the RESPONSE schema would fail
-     * `legalDocumentsResponseSchema` for the whole payload, so one newly
-     * authored document would take the entire resource offline every six hours
-     * until someone edited it upstream. The blast radius belongs at one row.
-     */
-    slug: z.ZodString;
-    htmlContentEt: z.ZodString;
-    htmlContentEn: z.ZodString;
-    order: z.ZodNumber;
-  }, "strip", z.ZodTypeAny, {
-    type: string;
-    slug: string;
-    title: {
-      et?: string | null | undefined;
-      en?: string | null | undefined;
-    };
-    order: number;
-    htmlContentEt: string;
-    htmlContentEn: string;
-  }, {
-    type: string;
-    slug: string;
-    title: {
-      et?: string | null | undefined;
-      en?: string | null | undefined;
-    };
-    order: number;
-    htmlContentEt: string;
-    htmlContentEn: string;
-  }>, "many">;
-}, "strip", z.ZodTypeAny, {
-  success: true;
-  documents: {
-    type: string;
-    slug: string;
-    title: {
-      et?: string | null | undefined;
-      en?: string | null | undefined;
-    };
-    order: number;
-    htmlContentEt: string;
-    htmlContentEn: string;
-  }[];
-}, {
-  success: true;
-  documents: {
-    type: string;
-    slug: string;
-    title: {
-      et?: string | null | undefined;
-      en?: string | null | undefined;
-    };
-    order: number;
-    htmlContentEt: string;
-    htmlContentEn: string;
-  }[];
-}>;
-/**
- * One `site_notice` — a ticker item.
- *
- * No id, no code, no timestamp: `{text, isActive, order}` is the whole row as
- * the route serves it. That absence is why `site_info` is modelled as one
- * local row carrying an ordered list rather than as N diffable rows — there is
- * no key an edit upstream would preserve.
- *
- * `isActive` is honoured HERE rather than assumed: the route returns inactive
- * notices too, and a ticker that shows a retired notice is worse than one that
- * shows nothing.
- */
-declare const siteNoticeRowSchema: z.ZodObject<{
-  text: z.ZodObject<{
-    et: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-    en: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-  }, "strip", z.ZodTypeAny, {
-    et?: string | null | undefined;
-    en?: string | null | undefined;
-  }, {
-    et?: string | null | undefined;
-    en?: string | null | undefined;
-  }>;
-  isActive: z.ZodBoolean;
-  order: z.ZodNumber;
-}, "strip", z.ZodTypeAny, {
-  text: {
-    et?: string | null | undefined;
-    en?: string | null | undefined;
-  };
-  order: number;
-  isActive: boolean;
-}, {
-  text: {
-    et?: string | null | undefined;
-    en?: string | null | undefined;
-  };
-  order: number;
-  isActive: boolean;
-}>;
-type SiteNoticeRow = z.infer<typeof siteNoticeRowSchema>;
-/**
- * `/api/public/site-info` — reception hours plus the notice ticker.
- *
- * 🔴 **This envelope cannot express "not configured yet".** The route answers
- * `200 { success: true, receptionHours: {et:'',en:''}, notices: [] }` when no
- * row exists, which is byte-identical to an operator having deliberately
- * cleared everything (F015). The other two resources have no such hole —
- * theirs discriminate on `success` and on array length against a local
- * snapshot.
- *
- * The schema is therefore NOT where that is solved, and deliberately so: the
- * shape is valid either way. `projectSiteInfo` refuses an all-empty payload as
- * unusable (D027), which is the only place that has the standing to decide
- * that a well-formed response is not authoritative. Upstream's later
- * `updatedAt` / `noticeCount` are not declared here, so zod strips them; why
- * they are not needed is on `projectSiteInfo`.
- */
-declare const siteInfoResponseSchema: z.ZodObject<{
-  success: z.ZodLiteral<true>;
-  receptionHours: z.ZodObject<{
-    et: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-    en: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-  }, "strip", z.ZodTypeAny, {
-    et?: string | null | undefined;
-    en?: string | null | undefined;
-  }, {
-    et?: string | null | undefined;
-    en?: string | null | undefined;
-  }>;
-  notices: z.ZodArray<z.ZodObject<{
-    text: z.ZodObject<{
-      et: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-      en: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-    }, "strip", z.ZodTypeAny, {
-      et?: string | null | undefined;
-      en?: string | null | undefined;
-    }, {
-      et?: string | null | undefined;
-      en?: string | null | undefined;
-    }>;
-    isActive: z.ZodBoolean;
-    order: z.ZodNumber;
-  }, "strip", z.ZodTypeAny, {
-    text: {
-      et?: string | null | undefined;
-      en?: string | null | undefined;
-    };
-    order: number;
-    isActive: boolean;
-  }, {
-    text: {
-      et?: string | null | undefined;
-      en?: string | null | undefined;
-    };
-    order: number;
-    isActive: boolean;
-  }>, "many">;
-}, "strip", z.ZodTypeAny, {
-  receptionHours: {
-    et?: string | null | undefined;
-    en?: string | null | undefined;
-  };
-  notices: {
-    text: {
-      et?: string | null | undefined;
-      en?: string | null | undefined;
-    };
-    order: number;
-    isActive: boolean;
-  }[];
-  success: true;
-}, {
-  receptionHours: {
-    et?: string | null | undefined;
-    en?: string | null | undefined;
-  };
-  notices: {
-    text: {
-      et?: string | null | undefined;
-      en?: string | null | undefined;
-    };
-    order: number;
-    isActive: boolean;
-  }[];
-  success: true;
-}>;
-type SiteInfoResponse = z.infer<typeof siteInfoResponseSchema>;
-//#endregion
-//#region src/projection.d.ts
-/** Injected at the seam; see the module docblock for why it is not imported. */
-type HtmlSanitizer = (html: string) => string;
-interface ProjectionOptions {
-  /** The locale whose values live on the base entity row. `et` or `en`. */
-  readonly defaultLocale: string;
-}
-interface ProjectedRow {
-  /** The business key — `room_type.code` or `legal_document.type`. */
-  readonly key: string;
-  /** Base-row fields, including the default locale's values for translatable fields. */
-  readonly base: Record<string, unknown>;
-  /**
-   * Translatable values for the non-default locale, or `null` when that
-   * locale's text is empty upstream. `null` means "unpublish that locale",
-   * never "write an empty string".
-   */
-  readonly secondary: Record<string, unknown> | null;
-  readonly hash: string;
-}
-interface SkippedRow {
-  readonly key: string;
-  readonly reason: string;
-}
-interface ProjectionResult {
-  readonly projected: readonly ProjectedRow[];
-  readonly skipped: readonly SkippedRow[];
-}
-/** The locale that is NOT the base row's. */
-declare function secondaryLocaleOf(defaultLocale: string): string;
-declare function projectRoomTypes(rows: readonly RoomTypeRow[], options: ProjectionOptions): ProjectionResult;
-declare function projectLegalDocuments(rows: readonly LegalDocumentRow[], options: ProjectionOptions, sanitize: HtmlSanitizer): ProjectionResult;
-/**
- * Reception hours + the notice ticker → the one `yhikas_site_info` row.
- *
- * ## 🔴 The refusal is the point of this function
- *
- * `/api/public/site-info` answers `200 { success: true, receptionHours:
- * {et:'',en:''}, notices: [] }` when no upstream row exists. That is
- * byte-identical to an operator having deliberately cleared both, and it is the
- * state the endpoint is in whenever nobody has filled it in (F015). The other
- * two resources have no equivalent hole — theirs discriminate on `success` and
- * on array length against a local snapshot.
- *
- * The shipped `empty-snapshot` floor cannot cover it, and the reason is
- * structural rather than an oversight: that rule is a row-COUNT test, and this
- * resource always projects exactly one row. The count is 1 whether the row says
- * anything or not, so the floor never fires and an all-empty payload would be
- * applied as an authoritative blanking — emptying the ticker and the hours on
- * every page of the site, silently, six hours after upstream hiccupped.
- *
- * So emptiness is restated here as a CONTENT test: if the default locale has
- * neither hours nor a single active notice, the payload is refused as
- * unusable. Local content is left exactly as it was and the failure arms the
- * staleness watchdog, which is the same posture as an unreachable endpoint —
- * because epistemically it is the same situation.
- *
- * Note what is NOT refused: hours with no notices, or notices with no hours.
- * Both are ordinary states of a real dormitory, and refusing them would make
- * the guard fire on exactly the operator action it exists to protect.
- *
- * ## Why upstream's `updatedAt: null` is not read (F015, decided 2026-09-29)
- *
- * yhikas-admin now answers `updatedAt: null` when both of its tables are
- * empty, which looks like the missing "never configured" signal. It adds
- * nothing this refusal does not already know. Upstream enforces a database
- * CHECK that every `site_info.receptionHours` from a row has both locales
- * non-blank; the empty `{et:'',en:''}` is a value the route FABRICATES when no
- * row exists (its `PUBLIC_API.md`, "The one exception"). So once the
- * constraints are deployed, "deliberately cleared" is not a state an operator
- * can produce: empty hours can only mean no row, and every all-empty response
- * is already "never configured". Reading the null would split one case into
- * one case. It would also make the guard depend on a field an older
- * deployment omits — an absent key, not an error. So the content test stays
- * the single rule, and it holds whether or not the field is present.
- */
-declare function projectSiteInfo(response: SiteInfoResponse, options: ProjectionOptions): ProjectionResult;
-//#endregion
-//#region src/apply.d.ts
-/**
- * The `AdminClient` surface the sync uses, structurally.
- *
- * Declared rather than imported so the apply logic is unit-testable with a
- * fake — CI runs unit tests only, with no database, so a design that could
- * only be exercised by an integration test would in practice be exercised by
- * nothing.
- */
-interface SyncEntityClient {
-  findMany(options: {
-    limit: number;
-  }): Promise<Record<string, unknown>[]>;
-  create(data: Record<string, unknown>): Promise<Record<string, unknown>>;
-  update(id: string, data: Record<string, unknown>): Promise<Record<string, unknown>>;
-  updateForLocale(id: string, data: Record<string, unknown>, locale: string): Promise<Record<string, unknown>>;
-  deleteTranslation(id: string, locale: string): Promise<void>;
-}
-interface SyncLogger {
-  info(obj: Record<string, unknown>, msg: string): void;
-  warn(obj: Record<string, unknown>, msg: string): void;
-  error(obj: Record<string, unknown>, msg: string): void;
-}
-interface ApplyCounts {
-  created: number;
-  updated: number;
-  retired: number;
-  unchanged: number;
-  failed: number;
-}
-/** Thrown when at least one row failed; carries the counts that were achieved. */
-declare class YhikasApplyPartialError extends Error {
-  readonly counts: ApplyCounts;
-  constructor(resource: SyncResource, counts: ApplyCounts);
-}
-declare function readLocalRows(client: SyncEntityClient, keyField: string, limit: number): Promise<LocalRow[]>;
-interface ApplyPlanInput {
-  readonly resource: SyncResource;
-  readonly plan: DiffPlan<ProjectedRow>;
-  readonly client: SyncEntityClient;
-  /** The locale that is NOT on the base row — the one whose publish state is toggled. */
-  readonly secondaryLocale: string;
-  readonly logger: SyncLogger;
-}
-declare function applyPlan(input: ApplyPlanInput): Promise<ApplyCounts>;
-//#endregion
 //#region src/entities/guard.d.ts
 /** Thrown when a writer other than the sync tries to mutate synced content. */
 declare class YhikasSyncedContentReadOnlyError extends Error {
@@ -776,132 +17,6 @@ declare class YhikasSyncedContentReadOnlyError extends Error {
  */
 declare function machineWritten<N extends string>(entityName: N): Behavior<Record<never, never>, `yhikas-sync:machine-written:${N}`>;
 //#endregion
-//#region src/entities/index.d.ts
-/**
- * The entities this plugin syncs — ONE list, consumed by the plugin's
- * declaration and by the contract tests.
- *
- * Adding `site_info` turned twelve tests red across two files, every one of
- * them because a resource or entity had been re-listed by hand somewhere. This
- * export exists so the next one cannot: `plugin.ts` spreads it into
- * `server.entities`, and `contract.test.ts` iterates it, so a fourth entity is
- * covered by both the moment it is added here.
- */
-declare const SYNCED_ENTITIES: readonly [import("@murumets-ee/entity").Entity<{
-  id: import("@murumets-ee/entity").IdField;
-} & import("@murumets-ee/entity").AuditableFields & import("@murumets-ee/entity").PublishableFields & Record<never, never> & {
-  code: import("@murumets-ee/entity").TextField & {
-    readonly required: true;
-    readonly unique: true;
-    readonly indexed: true;
-    readonly maxLength: 190;
-  };
-  name: import("@murumets-ee/entity").TextField & {
-    readonly required: true;
-    readonly translatable: true;
-  };
-  totalArea: import("@murumets-ee/entity").TextField & {
-    readonly maxLength: 32;
-  };
-  livingArea: import("@murumets-ee/entity").TextField & {
-    readonly maxLength: 32;
-  };
-  commonArea: import("@murumets-ee/entity").TextField & {
-    readonly maxLength: 32;
-  };
-  capacity: import("@murumets-ee/entity").NumberField & {
-    readonly integer: true;
-  };
-  placesOccupied: import("@murumets-ee/entity").NumberField & {
-    readonly integer: true;
-  };
-  monthlyRent: import("@murumets-ee/entity").TextField & {
-    readonly maxLength: 32;
-  };
-  discountedMonthlyRent: import("@murumets-ee/entity").TextField & {
-    readonly maxLength: 32;
-  };
-  dailyRent: import("@murumets-ee/entity").TextField & {
-    readonly maxLength: 32;
-  };
-  currency: import("@murumets-ee/entity").TextField & {
-    readonly required: true;
-    readonly maxLength: 3;
-    readonly default: "EUR";
-  };
-  vatTreatment: import("@murumets-ee/entity").SelectField & {
-    options: readonly ["net", "gross"];
-  } & {
-    readonly options: readonly ["net", "gross"];
-    readonly required: true;
-    readonly default: "net";
-  };
-  hasEnglish: import("@murumets-ee/entity").BooleanField & {
-    readonly required: true;
-    readonly default: false;
-  };
-  sourceHash: import("@murumets-ee/entity").TextField & {
-    readonly maxLength: 64;
-  };
-}, "yhikas_room_type", [import("@murumets-ee/entity").Behavior<import("@murumets-ee/entity").AuditableFields, string>, import("@murumets-ee/entity").Behavior<import("@murumets-ee/entity").PublishableFields, "publishable">, import("@murumets-ee/entity").Behavior<Record<never, never>, "yhikas-sync:machine-written:yhikas_room_type">]>, import("@murumets-ee/entity").Entity<{
-  id: import("@murumets-ee/entity").IdField;
-} & import("@murumets-ee/entity").AuditableFields & import("@murumets-ee/entity").PublishableFields & Record<never, never> & {
-  type: import("@murumets-ee/entity").TextField & {
-    readonly required: true;
-    readonly unique: true;
-    readonly indexed: true;
-    readonly maxLength: 190;
-  };
-  title: import("@murumets-ee/entity").TextField & {
-    readonly required: true;
-    readonly translatable: true;
-  };
-  sourceSlug: import("@murumets-ee/entity").TextField & {
-    readonly required: true;
-    readonly indexed: true;
-    readonly maxLength: 190;
-  };
-  body: import("@murumets-ee/entity").RichTextField & {
-    readonly required: true;
-    readonly translatable: true;
-  };
-  order: import("@murumets-ee/entity").NumberField & {
-    readonly integer: true;
-    readonly required: true;
-    readonly default: 0;
-  };
-  hasEnglish: import("@murumets-ee/entity").BooleanField & {
-    readonly required: true;
-    readonly default: false;
-  };
-  sourceHash: import("@murumets-ee/entity").TextField & {
-    readonly maxLength: 64;
-  };
-}, "yhikas_legal_document", [import("@murumets-ee/entity").Behavior<import("@murumets-ee/entity").AuditableFields, string>, import("@murumets-ee/entity").Behavior<import("@murumets-ee/entity").PublishableFields, "publishable">, import("@murumets-ee/entity").Behavior<Record<never, never>, "yhikas-sync:machine-written:yhikas_legal_document">]>, import("@murumets-ee/entity").Entity<{
-  id: import("@murumets-ee/entity").IdField;
-} & import("@murumets-ee/entity").AuditableFields & import("@murumets-ee/entity").PublishableFields & Record<never, never> & {
-  key: import("@murumets-ee/entity").TextField & {
-    readonly required: true;
-    readonly unique: true;
-    readonly indexed: true;
-    readonly maxLength: 32;
-  };
-  receptionHours: import("@murumets-ee/entity").TextField & {
-    readonly translatable: true;
-    readonly maxLength: 500;
-  };
-  notices: import("@murumets-ee/entity").JsonField & {
-    readonly translatable: true;
-  };
-  hasEnglish: import("@murumets-ee/entity").BooleanField & {
-    readonly default: false;
-    readonly required: true;
-  };
-  sourceHash: import("@murumets-ee/entity").TextField & {
-    readonly maxLength: 64;
-  };
-}, "yhikas_site_info", [import("@murumets-ee/entity").Behavior<import("@murumets-ee/entity").AuditableFields, string>, import("@murumets-ee/entity").Behavior<import("@murumets-ee/entity").PublishableFields, "publishable">, import("@murumets-ee/entity").Behavior<Record<never, never>, "yhikas-sync:machine-written:yhikas_site_info">]>];
-//#endregion
 //#region src/entities/legal-document.d.ts
 /**
  * `yhikas_legal_document` — the local projection of yhikas-admin's
@@ -1118,6 +233,122 @@ declare const YhikasRoomType: import("@murumets-ee/entity").Entity<{
   };
 }, "yhikas_room_type", [import("@murumets-ee/entity").Behavior<import("@murumets-ee/entity").AuditableFields, string>, import("@murumets-ee/entity").Behavior<import("@murumets-ee/entity").PublishableFields, "publishable">, import("@murumets-ee/entity").Behavior<Record<never, never>, "yhikas-sync:machine-written:yhikas_room_type">]>;
 //#endregion
+//#region src/entities/index.d.ts
+declare const SYNCED_ENTITIES: readonly [import("@murumets-ee/entity").Entity<{
+  id: import("@murumets-ee/entity").IdField;
+} & import("@murumets-ee/entity").AuditableFields & import("@murumets-ee/entity").PublishableFields & Record<never, never> & {
+  code: import("@murumets-ee/entity").TextField & {
+    readonly required: true;
+    readonly unique: true;
+    readonly indexed: true;
+    readonly maxLength: 190;
+  };
+  name: import("@murumets-ee/entity").TextField & {
+    readonly required: true;
+    readonly translatable: true;
+  };
+  totalArea: import("@murumets-ee/entity").TextField & {
+    readonly maxLength: 32;
+  };
+  livingArea: import("@murumets-ee/entity").TextField & {
+    readonly maxLength: 32;
+  };
+  commonArea: import("@murumets-ee/entity").TextField & {
+    readonly maxLength: 32;
+  };
+  capacity: import("@murumets-ee/entity").NumberField & {
+    readonly integer: true;
+  };
+  placesOccupied: import("@murumets-ee/entity").NumberField & {
+    readonly integer: true;
+  };
+  monthlyRent: import("@murumets-ee/entity").TextField & {
+    readonly maxLength: 32;
+  };
+  discountedMonthlyRent: import("@murumets-ee/entity").TextField & {
+    readonly maxLength: 32;
+  };
+  dailyRent: import("@murumets-ee/entity").TextField & {
+    readonly maxLength: 32;
+  };
+  currency: import("@murumets-ee/entity").TextField & {
+    readonly required: true;
+    readonly maxLength: 3;
+    readonly default: "EUR";
+  };
+  vatTreatment: import("@murumets-ee/entity").SelectField & {
+    options: readonly ["net", "gross"];
+  } & {
+    readonly options: readonly ["net", "gross"];
+    readonly required: true;
+    readonly default: "net";
+  };
+  hasEnglish: import("@murumets-ee/entity").BooleanField & {
+    readonly required: true;
+    readonly default: false;
+  };
+  sourceHash: import("@murumets-ee/entity").TextField & {
+    readonly maxLength: 64;
+  };
+}, "yhikas_room_type", [import("@murumets-ee/entity").Behavior<import("@murumets-ee/entity").AuditableFields, string>, import("@murumets-ee/entity").Behavior<import("@murumets-ee/entity").PublishableFields, "publishable">, import("@murumets-ee/entity").Behavior<Record<never, never>, "yhikas-sync:machine-written:yhikas_room_type">]>, import("@murumets-ee/entity").Entity<{
+  id: import("@murumets-ee/entity").IdField;
+} & import("@murumets-ee/entity").AuditableFields & import("@murumets-ee/entity").PublishableFields & Record<never, never> & {
+  type: import("@murumets-ee/entity").TextField & {
+    readonly required: true;
+    readonly unique: true;
+    readonly indexed: true;
+    readonly maxLength: 190;
+  };
+  title: import("@murumets-ee/entity").TextField & {
+    readonly required: true;
+    readonly translatable: true;
+  };
+  sourceSlug: import("@murumets-ee/entity").TextField & {
+    readonly required: true;
+    readonly indexed: true;
+    readonly maxLength: 190;
+  };
+  body: import("@murumets-ee/entity").RichTextField & {
+    readonly required: true;
+    readonly translatable: true;
+  };
+  order: import("@murumets-ee/entity").NumberField & {
+    readonly integer: true;
+    readonly required: true;
+    readonly default: 0;
+  };
+  hasEnglish: import("@murumets-ee/entity").BooleanField & {
+    readonly required: true;
+    readonly default: false;
+  };
+  sourceHash: import("@murumets-ee/entity").TextField & {
+    readonly maxLength: 64;
+  };
+}, "yhikas_legal_document", [import("@murumets-ee/entity").Behavior<import("@murumets-ee/entity").AuditableFields, string>, import("@murumets-ee/entity").Behavior<import("@murumets-ee/entity").PublishableFields, "publishable">, import("@murumets-ee/entity").Behavior<Record<never, never>, "yhikas-sync:machine-written:yhikas_legal_document">]>, import("@murumets-ee/entity").Entity<{
+  id: import("@murumets-ee/entity").IdField;
+} & import("@murumets-ee/entity").AuditableFields & import("@murumets-ee/entity").PublishableFields & Record<never, never> & {
+  key: import("@murumets-ee/entity").TextField & {
+    readonly required: true;
+    readonly unique: true;
+    readonly indexed: true;
+    readonly maxLength: 32;
+  };
+  receptionHours: import("@murumets-ee/entity").TextField & {
+    readonly translatable: true;
+    readonly maxLength: 500;
+  };
+  notices: import("@murumets-ee/entity").JsonField & {
+    readonly translatable: true;
+  };
+  hasEnglish: import("@murumets-ee/entity").BooleanField & {
+    readonly default: false;
+    readonly required: true;
+  };
+  sourceHash: import("@murumets-ee/entity").TextField & {
+    readonly maxLength: 64;
+  };
+}, "yhikas_site_info", [import("@murumets-ee/entity").Behavior<import("@murumets-ee/entity").AuditableFields, string>, import("@murumets-ee/entity").Behavior<import("@murumets-ee/entity").PublishableFields, "publishable">, import("@murumets-ee/entity").Behavior<Record<never, never>, "yhikas-sync:machine-written:yhikas_site_info">]>];
+//#endregion
 //#region src/entities/site-info.d.ts
 /**
  * `yhikas_site_info` — reception hours and the notice ticker, as ONE row.
@@ -1208,18 +439,105 @@ declare const YhikasSiteInfo: import("@murumets-ee/entity").Entity<{
   };
 }, "yhikas_site_info", [import("@murumets-ee/entity").Behavior<import("@murumets-ee/entity").AuditableFields, string>, import("@murumets-ee/entity").Behavior<import("@murumets-ee/entity").PublishableFields, "publishable">, import("@murumets-ee/entity").Behavior<Record<never, never>, "yhikas-sync:machine-written:yhikas_site_info">]>;
 //#endregion
-//#region src/entity-client.d.ts
-/** The `AdminClient` methods the adapter forwards, structurally. */
-type AdminClientLike = ReturnType<ToolkitApp['getClient']>;
+//#region src/room-pages.d.ts
+/** The most pages one run creates. The rest are created on later runs. */
+declare const MAX_ROOM_PAGES_PER_RUN = 20;
+/** The page entity, as the drafts read and write it. */
+interface RoomPageWriter {
+  /** Pages whose default-locale slug is `slug`, at most `limit`. */
+  findBySlug(slug: string, limit: number): Promise<readonly {
+    readonly id: string;
+    readonly parent: string | null;
+  }[]>;
+  /** The children of `parentId` whose default-locale slug is one of `slugs`: slug → page id. */
+  findChildren(parentId: string, slugs: readonly string[]): Promise<ReadonlyMap<string, string>>;
+  /** Create a DRAFT page in the default locale; answers its id. */
+  createDraft(page: {
+    readonly slug: string;
+    readonly parentId: string;
+    readonly title: string;
+    readonly layout: RoomPageDraft['layout'];
+  }): Promise<string>;
+  /** Write one non-default locale's title, tree and slug. Never touches status. */
+  writeLocale(id: string, locale: string, page: {
+    readonly slug: string;
+    readonly title: string;
+    readonly layout: RoomPageDraft['layout'];
+  }): Promise<void>;
+}
+/** The synced room types, as the drafts read them. */
+interface RoomTypeReader {
+  /**
+   * PUBLISHED room types in `locale` (name in that locale), at most `limit`;
+   * only those with a code in `codes` when it is given.
+   */
+  published(locale: string, options: {
+    readonly limit: number;
+    readonly codes?: readonly string[];
+  }): Promise<readonly RoomTypeForPage[]>;
+  /** Which of these row ids are room types, published or not. Asked only about a path conflict. */
+  existingIds(ids: readonly string[]): Promise<ReadonlySet<string>>;
+}
+interface RoomPageDraftDeps {
+  readonly config: ResolvedRoomPagesConfig;
+  readonly rooms: RoomTypeReader;
+  readonly pages: RoomPageWriter;
+  readonly registry: RoomPageRegistry;
+  readonly logger: SyncLogger;
+  /** The app's real default locale — the base row's language. */
+  readonly defaultLocale: string;
+  /** Every enabled content locale, the default included. */
+  readonly locales: readonly string[];
+  /** The most room types read in one query — the sync's snapshot ceiling (`maxRowsPerResource`). */
+  readonly maxRows: number;
+  readonly now?: () => Date;
+  /** This run's claim token. Default: a random UUID. */
+  readonly token?: string;
+  /** Override {@link MAX_ROOM_PAGES_PER_RUN} — tests only. */
+  readonly maxPerRun?: number;
+}
+interface RoomPageSkip {
+  readonly code: string;
+  readonly reason: string;
+}
+interface RoomPageDraftSummary {
+  /** Codes a draft page was created for this run. */
+  readonly created: readonly string[];
+  /** Codes whose page already existed under the parent, now recorded. */
+  readonly found: readonly string[];
+  /**
+   * Codes whose page a CRASHED run created before recording it — found by
+   * slug with that run's claim still on the row, and recorded as `created`
+   * so the dashboard still lists them as waiting.
+   */
+  readonly recovered: readonly string[];
+  /** Refused codes left out of this run because their last refusal is too recent. */
+  readonly backedOff: number;
+  /** Codes not acted on this run, with why. Retried next run. */
+  readonly skipped: readonly RoomPageSkip[];
+  /** Codes over the per-run cap, left for the next run. */
+  readonly deferred: number;
+  /** Non-default locale writes that failed (`code:locale`) — the page exists and stays recorded. */
+  readonly localeFailures: readonly string[];
+  /** Why nothing was done at all, when nothing was. */
+  readonly halted?: 'nothing-pending' | 'no-parent' | 'ambiguous-parent';
+}
+/** A code as a page slug: lowercased; `undefined` when it cannot be one. */
+declare function roomPageSlug(code: string): string | undefined;
+/**
+ * Why the page entity refused a room's page, for the dashboard. A path held by
+ * a `yhikas_room_type` row is named as such, because its fix is specific: the
+ * room type's OLD URL row, left in the path index from before `roomPages`,
+ * still holds the address the page needs.
+ */
+declare function classifyRefusal(err: unknown, rooms: RoomTypeReader): Promise<RoomPageRefusal>;
 /**
- * @param defaultLocale The app's REAL default locale — resolved from
- *   `@murumets-ee/content`, never configured. It is passed explicitly on every
- *   `updateForLocale` call and is not optional, because
- *   `elevateRequestContext` deliberately strips `locale`/`defaultLocale` from
- *   the context it builds, and `updateForLocale` THROWS when it can resolve
- *   the default locale from neither the options nor the context.
+ * Create the missing draft pages. Throws only for a failure of its own reads
+ * (rooms, registry, the parent lookup) — the caller logs it; per-room failures
+ * are caught, logged, kept on the registry row for the dashboard and reported
+ * in the summary.
  */
-declare function toSyncEntityClient(client: AdminClientLike, defaultLocale: string): SyncEntityClient;
+declare function createRoomPageDrafts(deps: RoomPageDraftDeps): Promise<RoomPageDraftSummary>;
 //#endregion
 //#region src/sync-state-table.d.ts
 /**
@@ -1366,6 +684,141 @@ type SyncStateClient = ReturnType<typeof yhikasSyncStateTable.makeClient>;
 declare function truncateError(message: string): string;
 declare function createSyncStateStore(client: SyncStateClient): SyncStateStore;
 //#endregion
+//#region src/room-facts.d.ts
+/** The answer `resolve` gives — a record of facts per room type code. */
+type LiveAnswer = Awaited<ReturnType<LiveSourceSpec['resolve']>>;
+/** The fact names this source answers. */
+declare const ROOM_FACT_NAMES: readonly ["monthly", "discounted", "daily", "places", "area"];
+type RoomFactName = (typeof ROOM_FACT_NAMES)[number];
+/** What a room answers — declared, so the panel offers them as checkboxes. */
+declare const ROOM_FACTS: readonly LiveFactSpec[];
+/** The library field a facts source is granted by default — `liveFacts.values`. */
+declare const DEFAULT_ROOM_FACT_FIELDS: readonly string[];
+/**
+ * A stored decimal string as a number, or `undefined` — never `NaN`, never a
+ * negative, never a fabricated 0 for a missing value.
+ */
+declare function decimalOf(raw: string | null): number | undefined;
+/** One room type's facts — only the values it actually has. */
+declare function roomFactsOf(room: RoomTypeForPage): Partial<Record<RoomFactName, number>>;
+/** The pure half of `resolve`: the answer for `keys`, given the published rows. Unknown keys are absent. */
+declare function roomFactsFrom(rooms: readonly RoomTypeForPage[], keys: readonly string[]): LiveAnswer;
+/** The picker's items: offered rooms, by code, at most {@link MAX_ITEMS}. */
+declare function roomFactItemsFrom(rooms: readonly RoomTypeForPage[], offered: RoomOfferPredicate): readonly LiveItem[];
+/**
+ * A queue schedule as English words — `'@every 6h'` → `'every 6 hours'` —
+ * plus a translation key when the catalogue has one for it. A cron expression
+ * is named as such: its meaning is not worth a parser here.
+ */
+declare function cadenceOf(schedule: string): {
+  readonly text: string;
+  readonly key?: string;
+};
+interface YhikasRoomFactsOptions {
+  /** The source's English name in the panel. Default `'Room facts'`. */
+  readonly label?: string;
+  /**
+   * yhikas-admin's PUBLIC `https:` base URL — the panel links to
+   * `${adminUrl}/admin/toad`, where room prices are changed (yhikas-admin has
+   * no page per room). Omitted: no link.
+   */
+  readonly adminUrl?: string;
+  /**
+   * The sync's schedule, for "synced every 6 hours". Default: the registered
+   * sync plugin's own `schedule` — read when the panel asks, so the provenance
+   * cannot drift from the job that actually runs — else `@every 6h`.
+   */
+  readonly schedule?: string;
+  /**
+   * The staleness window. Default: the registered sync plugin's own
+   * `staleAfterMs`, else 24 h — so the facts go stale exactly when the
+   * watchdog alerts.
+   */
+  readonly staleAfterMs?: number;
+  /** Which rooms the picker lists. Default: the sync's `roomPages.offered`, else {@link isRoomOffer}. */
+  readonly offered?: RoomOfferPredicate;
+  /**
+   * Library fields this source may also be bound to — see
+   * `LiveSourceSpec.fields`. Default {@link DEFAULT_ROOM_FACT_FIELDS}: the
+   * library Facts block's `values`, so a site binds a room page's facts with
+   * no further wiring. Pass `[]` to grant none.
+   */
+  readonly fields?: readonly string[];
+}
+/** The part of the registered sync plugin's config the facts read. */
+interface RegisteredSyncConfig {
+  readonly schedule: string;
+  readonly staleAfterMs: number;
+  readonly roomPages?: {
+    readonly offered: RoomOfferPredicate;
+  } | undefined;
+}
+/** What the factory reads at RUN time — injectable, so each part is testable without an app. */
+interface RoomFactsRuntime {
+  /** Published room types through the caller's own client. */
+  readonly rooms: () => Promise<RoomTypeReader>;
+  /** The sync state, for freshness. */
+  readonly syncState: () => Promise<readonly SyncStateRecord[]>;
+  /**
+   * The registered sync plugin's resolved config, when it is registered.
+   * Synchronous: `provenance` is a plain property the canvas reads without
+   * awaiting.
+   */
+  readonly syncConfig: () => RegisteredSyncConfig | undefined;
+  readonly now: () => Date;
+}
+/** Room types' freshness, from the sync state — stale past the window, or never synced. */
+declare function roomTypesFreshness(records: readonly SyncStateRecord[], now: Date, staleAfterMs: number): LiveFreshness;
+/**
+ * The synced room types as a live facts source. Keys are room type `code`s.
+ *
+ * Throws only for a structurally invalid `adminUrl` — at config load, where
+ * the message can name the knob.
+ */
+declare function yhikasRoomFacts(options?: YhikasRoomFactsOptions, runtime?: RoomFactsRuntime): LiveSourceSpec;
+//#endregion
+//#region src/room-page-record.d.ts
+/**
+ * `recordRoomPage(code, pageId)` — for a site's own migration or seeder that
+ * wrote a room's page itself: records that the room HAS its page, so the sync
+ * never creates a draft for it (`yhikas_room_pages`, origin `registered`).
+ *
+ * Never overwrites: a code already recorded keeps its first page. Server-side
+ * only — call it from a seeder or a `lumi` command, never from a route that
+ * forwards request input.
+ */
+/**
+ * @returns `true` when recorded; `false` when the code already has a page, or
+ *   a sync run is creating one right now (its claim is fresh).
+ */
+declare function recordRoomPage(code: string, pageId: string): Promise<boolean>;
+//#endregion
+//#region src/room-pages-adapters.d.ts
+/**
+ * One column of an entity table, by field name — or a loud error naming it.
+ *
+ * `getTable()` is typed `PgTableWithColumns<any>`: an entity's columns are
+ * generated at runtime, so their names are not in the type. Narrowed here with
+ * drizzle's own `is()` (which survives duplicated module instances, unlike
+ * `instanceof`) instead of trusting an `any`. For the page entity, `slug`
+ * comes from `sluggable()` and `parent` from `pathParent()`; a page entity
+ * without either cannot hold room pages, and says so.
+ */
+declare function columnOf(table: Readonly<Record<string, unknown>>, entity: string, field: string): PgColumn;
+/**
+ * Published room types, read through the CALLER's client — the job's (as the
+ * sync actor) or a render's (as the visitor). An unpublished row — the sync's
+ * way of retiring a room — is never answered, here or by the status filter in
+ * SQL: both, because the reader is the one place a draft price could leak.
+ */
+declare function toRoomTypeReader(client: AdminClientLike, defaultLocale?: string): RoomTypeReader;
+/**
+ * The page entity, for the drafts. Writes go through `AdminClient` — hooks,
+ * validation, the path guard, audit — as the job's own identity; nothing here
+ * elevates.
+ */
+declare function toRoomPageWriter(client: AdminClientLike, defaultLocale: string, logger?: SyncLogger): RoomPageWriter;
+//#endregion
 //#region src/upstream/client.d.ts
 interface YhikasUpstreamClientOptions {
   /** Origin of the yhikas-admin deployment. Must be http or https. */
@@ -1408,6 +861,13 @@ interface SyncRunDeps {
   readonly floor: SanityFloor;
   /** Injectable so tests are not order-dependent on the wall clock. */
   readonly now?: () => Date;
+  /**
+   * Runs once, after every resource has been attempted, when ROOM TYPES
+   * synced successfully — the room-page drafts (`roomPages`). Whatever it
+   * throws is logged and swallowed: the prices are already current, and a page
+   * that cannot be written must never fail, retry or alert the sync.
+   */
+  readonly afterRoomTypesSynced?: () => Promise<void>;
 }
 interface ResourceOutcome {
   readonly resource: SyncResource;
@@ -1499,5 +959,5 @@ declare function assessStaleness(records: readonly SyncStateRecord[], now: Date,
  */
 declare function assertNotStale(records: readonly SyncStateRecord[], now: Date, staleAfterMs: number): ResourceStaleness[];
 //#endregion
-export { API_KEY_ENV_VAR, type AdminClientLike, type ApplyCounts, type ApplyPlanInput, BASE_URL_ENV_VAR, DECLARED_CURRENCY, DECLARED_VAT_TREATMENT, type DiffPlan, EN_LOCALE, ET_LOCALE, type HtmlSanitizer, LEGAL_DOCUMENTS_RESOURCE, type LegalDocumentRow, type LocalRow, MAX_SITE_NOTICES, type MultilingualText, type PlanDiffInput, type ProjectedRow, type ProjectionOptions, type ProjectionResult, ROOM_TYPES_RESOURCE, type ResolvedYhikasSyncConfig, type ResourceOutcome, type ResourceStaleness, type RoomTypeRow, SITE_INFO_KEY, SITE_INFO_RESOURCE, SYNCED_ENTITIES, SYNC_JOB_NAME, SYNC_RESOURCES, type SanityFloor, type SiteInfoResponse, type SiteNoticeRow, type SkippedRow, type SyncEntityClient, type SyncLogger, type SyncResource, type SyncRunDeps, type SyncRunSummary, type SyncStateRecord, type SyncStateStore, type UpstreamFailureKind, VAT_TREATMENTS, WATCHDOG_JOB_NAME, YHIKAS_LEGAL_DOCUMENT_ENTITY, YHIKAS_ROOM_TYPE_ENTITY, YHIKAS_SITE_INFO_ENTITY, YHIKAS_SYNC_ACTOR_ID, YHIKAS_SYNC_PLUGIN_NAME, YhikasApplyPartialError, YhikasLegalDocument, YhikasRoomType, YhikasSiteInfo, type YhikasSyncConfig, YhikasSyncConfigError, YhikasSyncRefusedError, YhikasSyncRunError, YhikasSyncStaleError, YhikasSyncedContentReadOnlyError, YhikasUpstreamClient, type YhikasUpstreamClientOptions, YhikasUpstreamError, applyPlan, assertNotStale, assessStaleness, createSyncStateStore, legalDocumentRowSchema, legalDocumentsResponseSchema, machineWritten, multilingualTextSchema, planDiff, projectLegalDocuments, projectRoomTypes, projectSiteInfo, readLocalRows, resolveYhikasSyncConfig, roomTypeRowSchema, roomTypesResponseSchema, runYhikasSync, secondaryLocaleOf, siteInfoResponseSchema, siteNoticeRowSchema, stableHash, toSyncEntityClient, truncateError, yhikasSyncStateTable };
+export { API_KEY_ENV_VAR, AREA_PRICED_UNIT_NAMES, type AdminClientLike, type ApplyCounts, type ApplyPlanInput, BASE_URL_ENV_VAR, DECLARED_CURRENCY, DECLARED_VAT_TREATMENT, DEFAULT_ROOM_FACT_FIELDS, type DiffPlan, EN_LOCALE, ET_LOCALE, type HtmlSanitizer, LEGAL_DOCUMENTS_RESOURCE, type LegalDocumentRow, type LocalRow, MAX_ROOM_PAGES_PER_RUN, MAX_SITE_NOTICES, type MultilingualText, PAGE_SLUG_PATTERN, type PlanDiffInput, type ProjectedRow, type ProjectionOptions, type ProjectionResult, ROOM_FACTS, ROOM_FACT_NAMES, ROOM_PAGE_CLAIM_LEASE_MS, ROOM_PAGE_ORIGINS, ROOM_PAGE_READ_CHUNK, ROOM_PAGE_REFUSAL_KINDS, ROOM_TYPES_RESOURCE, type RegisteredSyncConfig, type ResolvedRoomPagesConfig, type ResolvedYhikasSyncConfig, type ResourceOutcome, type ResourceStaleness, type RoomFactName, type RoomFactsRuntime, type RoomOfferCandidate, type RoomOfferPredicate, type RoomPageBlock, type RoomPageDraft, type RoomPageDraftDeps, type RoomPageDraftSummary, type RoomPageOrigin, type RoomPageRecord, type RoomPageRefusal, type RoomPageRefusalKind, type RoomPageRegistry, type RoomPageSkip, type RoomPageWriter, type RoomTypeForPage, type RoomTypeReader, type RoomTypeRow, SITE_INFO_KEY, SITE_INFO_RESOURCE, SYNCED_ENTITIES, SYNC_JOB_NAME, SYNC_RESOURCES, type SanityFloor, type SiteInfoResponse, type SiteNoticeRow, type SkippedRow, type SyncEntityClient, type SyncLogger, type SyncResource, type SyncRunDeps, type SyncRunSummary, type SyncStateRecord, type SyncStateStore, type UpstreamFailureKind, VAT_TREATMENTS, WATCHDOG_JOB_NAME, YHIKAS_LEGAL_DOCUMENT_ENTITY, YHIKAS_ROOM_TYPE_ENTITY, YHIKAS_SITE_INFO_ENTITY, YHIKAS_SYNC_ACTOR_ID, YHIKAS_SYNC_PLUGIN_NAME, YhikasApplyPartialError, YhikasLegalDocument, type YhikasRoomFactsOptions, YhikasRoomPageRecordError, type YhikasRoomPagesConfig, YhikasRoomType, YhikasSiteInfo, type YhikasSyncConfig, YhikasSyncConfigError, YhikasSyncRefusedError, YhikasSyncRunError, YhikasSyncStaleError, YhikasSyncedContentReadOnlyError, YhikasUpstreamClient, type YhikasUpstreamClientOptions, YhikasUpstreamError, applyPlan, assertNotStale, assessStaleness, cadenceOf, classifyRefusal, columnOf, createRoomPageDrafts, createRoomPageRegistry, createSyncStateStore, decimalOf, isPublishedRoomType, isRoomOffer, legalDocumentRowSchema, legalDocumentsResponseSchema, machineWritten, multilingualTextSchema, planDiff, projectLegalDocuments, projectRoomTypes, projectSiteInfo, readLocalRows, recordRoomPage, resolveYhikasSyncConfig, roomFactItemsFrom, roomFactsFrom, roomFactsOf, roomPageSlug, roomTypeForPageFrom, roomTypeRowSchema, roomTypesFreshness, roomTypesResponseSchema, runYhikasSync, secondaryLocaleOf, siteInfoResponseSchema, siteNoticeRowSchema, stableHash, toRoomPageWriter, toRoomTypeReader, toSyncEntityClient, truncateError, yhikasRoomFacts, yhikasRoomPagesTable, yhikasSyncStateTable };
 //# sourceMappingURL=index.d.mts.map