@riverbankcms/sdk 0.136.0 → 0.138.0

package/dist/_dts/api/src/siteInfrastructure.d.ts

@@ -9,6 +9,7 @@
  * flow that owns each operation.
  */
 import type { UploadIntentContract } from "./media";
+import type { CreateManagementKeyBodyInput, CreateSiteApiKeyBodyInput, CreateSitePreviewKeyBodyInput, RevokeManagementKeyBodyInput } from "./schemas/site-api-keys";
 export type WebhookEndpointRecord = {
     id: string;
     name: string;
@@ -230,10 +231,12 @@ export type ListSiteApiKeysResponse = {
     previewKeys: readonly PreviewKeyRecord[];
     managementKeys: ApiKeyRecord[];
 };
-export type CreateSiteApiKeyRequest = {
-    name: string;
-    environment?: "live" | "test";
-};
+/**
+ * Derived from `createSiteApiKeyBodySchema`'s `z.input`, so the wire contract
+ * cannot drift from what the route actually accepts. `environment` is optional
+ * here and required on the parsed side because the schema defaults it.
+ */
+export type CreateSiteApiKeyRequest = CreateSiteApiKeyBodyInput;
 export type CreateSiteApiKeyResponse = {
     key: string;
     keyId: string;
@@ -245,6 +248,8 @@ export type RevokeSiteApiKeyResponse = {
 export type ListSitePreviewKeysResponse = {
     previewKeys: readonly PreviewKeyRecord[];
 };
+/** Derived from `createSitePreviewKeyBodySchema`'s `z.input`. */
+export type CreateSitePreviewKeyRequest = CreateSitePreviewKeyBodyInput;
 export type CreateSitePreviewKeyResponse = {
     key: string;
     keyId: string;
@@ -266,13 +271,15 @@ export type ManagementKeyRecord = {
 export type ListManagementKeysResponse = {
     managementKeys: ManagementKeyRecord[];
 };
-export type CreateManagementKeyRequest = {
-    name?: string;
-    /** Defaults to 'write' when omitted (preserves prior all-access behavior). */
-    accessMode?: ManagementKeyAccessMode;
-    /** Optional ISO timestamp; must be in the future. Null/omitted = never expires. */
-    expiresAt?: string | null;
-};
+/**
+ * Derived from `createManagementKeyBodySchema`'s `z.input`.
+ *
+ * `accessMode` defaults to `'write'` when omitted (preserving the prior
+ * all-access behaviour) and an omitted or null `expiresAt` means the key never
+ * expires — both are service-side normalisation rather than schema defaults, so
+ * the two sides of this schema are the same type.
+ */
+export type CreateManagementKeyRequest = CreateManagementKeyBodyInput;
 export type CreateManagementKeyResponse = {
     key: string;
     keyId: string;
@@ -282,9 +289,8 @@ export type CreateManagementKeyResponse = {
     expiresAt: string | null;
     message: string;
 };
-export type RevokeManagementKeyRequest = {
-    keyId: string;
-};
+/** Derived from `revokeManagementKeyBodySchema`'s `z.input`. */
+export type RevokeManagementKeyRequest = RevokeManagementKeyBodyInput;
 export type RevokeManagementKeyResponse = {
     message: string;
 };
@@ -320,15 +326,17 @@ export type BackupAccessImportResult = {
         }>;
     };
 };
+export type BackupImportTableCounts = {
+    created: number;
+    updated: number;
+    skipped: number;
+    failed: number;
+};
 export type BackupImportResponse = {
     ok: boolean;
     siteId?: string;
     dryRun?: boolean;
-    counts?: Record<string, {
-        created: number;
-        updated: number;
-        failed: number;
-    }>;
+    counts?: Record<string, BackupImportTableCounts>;
     warnings?: string[];
     errors?: Array<{
         table: string;
@@ -341,8 +349,8 @@ export type BackupImportResponse = {
     details?: unknown;
 };
 export type BackupPreviewResponse = {
-    ok: boolean;
-    manifest?: {
+    ok: true;
+    manifest: {
         siteId: string;
         siteSlug: string;
         siteTitle: string;
@@ -357,9 +365,7 @@ export type BackupPreviewResponse = {
         mediaCount: number;
         mediaBytes: number;
     };
-    storagePath?: string;
-    error?: string;
-    code?: string;
+    storagePath: string;
 };
 export type CreateBackupUploadUrlRequest = {
     filename: string;
@@ -440,22 +446,16 @@ export type ImportBackupAsNewSiteRequest = {
     title?: string;
 };
 export type ImportBackupAsNewSiteResponse = {
-    ok: boolean;
-    siteId?: string;
-    slug?: string;
-    title?: string;
-    counts?: Record<string, {
-        created: number;
-        updated: number;
-        failed: number;
-    }>;
-    warnings?: string[];
-    errors?: Array<{
+    ok: true;
+    siteId: string;
+    slug: string;
+    title: string;
+    counts: Record<string, BackupImportTableCounts>;
+    warnings: string[];
+    errors: Array<{
         table: string;
         id: string;
         error: string;
     }>;
-    error?: string;
-    code?: string;
 };
 export {};

package/dist/_dts/api/src/siteManagementEndpoints.d.ts

@@ -1,6 +1,9 @@
 import type { FooterCompositionV1, PublicProfile, RectificationHistoryPropagationPlan, RectificationIdentityBoundary, RectificationIssueUrl, RectificationSurface } from '../../core/src/index';
 import type { CamelizeKeys, DbRow, DbJson } from '../../db/src/index';
 import type { APIEndpoint } from './apiEndpointTypes';
+import type { CustomDomainConnectionSnapshot, DomainHostingStatus } from './domainConnection';
+import type { AdminListAllowedDomainsQueryOutput } from './schemas/admin-allowed-domains';
+import type { AdminListAxiomLogsQueryOutput, AdminListErrorLogsQueryOutput, AdminListSupabaseLogsQueryOutput, AdminListVercelLogsQueryOutput } from './schemas/admin-observability-logs';
 import type { AcceptAdminInviteRequest, AcceptAdminInviteResponse, AcceptSiteInvitationRequest, AcceptSiteInvitationResponse, AddCustomDomainRequest, AddCustomDomainResponse, AdminChangePlanRequest, AdminChangePlanResponse, AdminDeleteUserResponse, AuthInviteContinueRequest, AuthInviteContinueResponse, AuthInviteRegisterRequest, AuthInviteRegisterResponse, AuthResetCompleteRequest, AuthResetCompleteResponse, AuthSubmissionResult, BulkOperationResult, ChangePlanRequest, ChangePlanResponse, CreateAdminInviteRequest, CreateAdminInviteResponse, CreateAdminUserRequest, CreateAdminUserResponse, CreateAllowedDomainRequest, CreateAllowedDomainResponse, DeleteAllowedDomainResponse, DomainConfigResult, DomainSearchResultResponse, CurrentUserPractitionerLinkResponse, InviteSiteMemberRequest, InviteSiteMemberResponse, LinkCurrentUserPractitionerRequest, ListAdminInvitesResponse, ListAllowedDomainsResponse, ListSiteMembersResponse, LookupSiteDomainRequest, LookupSiteDomainResponse, MfaBackupCodesOverviewResponse, MfaBackupCodesRotateResponse, MfaOverviewResponse, MfaPhoneChallengeRequest, MfaPhoneChallengeResponse, MfaPhoneEnrollRequest, MfaPhoneEnrollResponse, MfaPhoneVerifyRequest, MfaTotpActivateRequest, MfaTotpEnrollResponse, MfaTotpVerifyRequest, MfaTotpVerifyResponse, ReauthSubmissionResult, RegisterDomainRequestPayload, RegisterDomainResponse, RegistrarBooleanMutationRequest, RegistrarLifecycleResponse, RegistrarRenewalPostureResponse, RegisterSiteDomainRequest, RegisterSiteDomainResponse, RemoveSiteMemberResponse, RevokeAdminInviteResponse, RevokeSiteInvitationResponse, ResendSiteInvitationResponse, SetHomepageRequest, SetHomepageResponse, SiteDomainContactPayload, SiteDomainRecord, TransferSiteOwnershipRequest, TransferSiteOwnershipResponse, UpdateSiteMemberRoleRequest, UpdateSiteMemberRoleResponse } from './accessAdmin';
 import type { AdminRoleMutationResponse, RevokeAdminRoleRequest, StartImpersonationRequest, StartImpersonationResponse, StopImpersonationRequest, StopImpersonationResponse, UpsertAdminRoleRequest } from './admin/types';
 import type { AccountRevokeSessionsBody, AccountRevokeSessionsResponse, AccountUpdatePasswordBody, AccountUpdatePasswordResponse, CreateManualSiteRequest, CreateManualSiteResponse } from './siteOperations';
@@ -431,16 +434,7 @@ export type SiteManagementAPIEndpoints = {
             correct: boolean;
             error?: string;
         } | null;
-        vercel: {
-            verified: boolean;
-            verification?: Array<{
-                type: string;
-                domain: string;
-                value: string;
-                reason: string;
-            }>;
-            error?: string;
-        };
+        hosting: DomainHostingStatus;
         vercelRecords: Array<{
             id: string;
             slug: string;
@@ -474,10 +468,7 @@ export type SiteManagementAPIEndpoints = {
     verifyDomainDns: APIEndpoint<never, {
         domainId: string;
     }, {
-        vercel?: {
-            verified: boolean;
-            error?: string;
-        };
+        hosting: DomainHostingStatus;
         resend?: {
             success: boolean;
             error?: string;
@@ -507,13 +498,10 @@ export type SiteManagementAPIEndpoints = {
     retryDomainVercel: APIEndpoint<never, {
         domainId: string;
     }, {
-        verified: boolean;
-        verification?: Array<{
-            type: string;
-            domain: string;
-            value: string;
-            reason: string;
-        }>;
+        connection: CustomDomainConnectionSnapshot | null;
+        registeredOwnership: Extract<DomainHostingStatus, {
+            kind: 'registered';
+        }> | null;
     }>;
     retryDomainResend: APIEndpoint<never, {
         domainId: string;
@@ -703,28 +691,20 @@ export type SiteManagementAPIEndpoints = {
         inviteId: string;
     }, RevokeAdminInviteResponse>;
     adminCreateUser: APIEndpoint<CreateAdminUserRequest, never, CreateAdminUserResponse>;
+    /**
+     * `force` is modelled here rather than derived: the schema transforms the
+     * four accepted wire spellings into this boolean, so neither `z.input` nor
+     * `z.output` is the caller's type. `schemas/admin-users.ts` explains it and
+     * `schemas/admin-users.typetest.ts` checks this shape against the schema.
+     */
     adminDeleteUser: APIEndpoint<never, {
         userId: string;
         force?: boolean;
     }, AdminDeleteUserResponse>;
-    adminListAxiomLogs: APIEndpoint<never, {
-        tail?: number;
-        mode?: 'all' | 'errors' | 'warnings';
-        since?: string;
-        until?: string;
-        search?: string;
-        dataset?: string;
-    }, {
+    adminListAxiomLogs: APIEndpoint<never, AdminListAxiomLogsQueryOutput, {
         entries: Record<string, unknown>[];
     }>;
-    adminListErrorLogs: APIEndpoint<never, {
-        tail?: number;
-        mode?: 'errors' | 'warnings';
-        since?: string;
-        until?: string;
-        search?: string;
-        source?: string[];
-    }, {
+    adminListErrorLogs: APIEndpoint<never, AdminListErrorLogsQueryOutput, {
         entries: Record<string, unknown>[];
     }>;
     adminListRetentionJobRuns: APIEndpoint<never, {
@@ -816,30 +796,31 @@ export type SiteManagementAPIEndpoints = {
             failed: number;
         };
     }>;
-    adminListSupabaseLogs: APIEndpoint<never, {
-        tail?: number;
-        mode?: 'all' | 'errors' | 'warnings';
-        since?: string;
-        until?: string;
-        search?: string;
-        source?: string;
-    }, {
+    adminListSupabaseLogs: APIEndpoint<never, AdminListSupabaseLogsQueryOutput, {
         entries: Record<string, unknown>[];
     }>;
-    adminListVercelLogs: APIEndpoint<never, {
-        tail?: number;
-        mode?: 'all' | 'errors' | 'warnings';
-        since?: string;
-        until?: string;
-        search?: string;
+    /**
+     * `dataset` is the one field here that is NOT derived from the schema: the
+     * route's query schema has no such field, so it is stripped on arrival, and
+     * the service reads the Vercel dataset from the environment instead. Removing
+     * it would narrow a published optional field, which is a contract decision of
+     * its own rather than part of a schema migration, so it stays recorded here
+     * and in `schemas/admin-observability-logs.ts`.
+     */
+    adminListVercelLogs: APIEndpoint<never, AdminListVercelLogsQueryOutput & {
         dataset?: string;
     }, {
         entries: Record<string, unknown>[];
     }>;
-    adminListAllowedDomains: APIEndpoint<never, {
-        tenantId?: string | null;
-    }, ListAllowedDomainsResponse>;
+    adminListAllowedDomains: APIEndpoint<never, AdminListAllowedDomainsQueryOutput, ListAllowedDomainsResponse>;
     adminAddAllowedDomain: APIEndpoint<CreateAllowedDomainRequest, never, CreateAllowedDomainResponse>;
+    /**
+     * `domainId` is a *path* parameter (`/admin/allowed-domains/{domainId}`), not a
+     * query one — `apiCallParams`' `PathParams` is what puts it in the client's
+     * `params`, and this declaration adds nothing to the encoded shape. It is left
+     * in place because removing it is a contract edit rather than part of a schema
+     * migration; see `schemas/admin-allowed-domains.ts` and its typetest.
+     */
     adminDeleteAllowedDomain: APIEndpoint<never, {
         domainId: string;
     }, DeleteAllowedDomainResponse>;

package/dist/_dts/api/src/siteOnboarding.d.ts

@@ -292,7 +292,7 @@ export type MacadamiaOnboardingFirstOfferingKind = "class" | "course" | "worksho
 export type MacadamiaOnboardingFirstOfferingDeliveryMode = "in_person" | "online" | "both";
 export type MacadamiaOnboardingFirstOfferingScheduleMode = "weekly" | "one_off";
 export type MacadamiaOnboardingWeekday = "monday" | "tuesday" | "wednesday" | "thursday" | "friday" | "saturday" | "sunday";
-export type MacadamiaOnboardingCourseSession = {
+export type MacadamiaOnboardingEventSession = {
     clientId: string;
     startDate: string;
     startTime: string;
@@ -322,7 +322,7 @@ export type MacadamiaOnboardingFirstOffering = {
     priceType: "free" | "paid";
     priceAmount: number | null;
     capacity: number | null;
-    sessions: MacadamiaOnboardingCourseSession[];
+    sessions: MacadamiaOnboardingEventSession[];
 } | {
     kind: "workshop" | "retreat" | "performance";
     title: string;
@@ -368,7 +368,7 @@ export type MacadamiaOnboardingDraftFirstOffering = {
     priceType: "free" | "paid" | null;
     priceAmount: number | null;
     capacity: number | null;
-    sessions: MacadamiaOnboardingCourseSession[];
+    sessions: MacadamiaOnboardingEventSession[];
 } | {
     kind: "workshop" | "retreat" | "performance";
     title: string;

package/dist/_dts/api/src/sitePlatformEndpoints.d.ts

@@ -5,13 +5,14 @@ import type { AdminCreateSiteRequest, AdminCreateSiteResponse, AdminDeletePriceO
 import type { ListCustomBlocksResponse, CreateCustomBlockRequest, CreateCustomBlockResponse, DeleteCustomBlockResponse, GetCustomBlockResponse, SdkWorkflowRunStatusCallbackRequest, SdkWorkflowRunStatusCallbackResponse, UpdateCustomBlockRequest, UpdateCustomBlockResponse } from './contentRuntime';
 import type { ContentTypeRecord, CreateContentTypeRequest, CreateContentTypeResponse, DeleteContentTypeResponse, DuplicateContentTypeResponse, ListContentTypesResponse, UpdateContentTypeRequest, UpdateContentTypeResponse } from './contentTypes';
 import type { CheckRedirectQuery, CheckRedirectResponse, CreateRedirectRuleRequest, CreateRedirectRuleResponse, DeleteRedirectRuleResponse, ListRedirectRulesResponse } from './redirects';
-import type { CreateManagementKeyRequest, CreateManagementKeyResponse, CreateSiteApiKeyRequest, CreateSiteApiKeyResponse, CreateSitePreviewKeyResponse, CreateWebhookRequest, CreateWebhookResponse, DeleteBackupUploadRequest, DeleteBackupUploadResponse, DeleteWebhookResponse, GetSiteApiKeyAccessLogsResponse, ListSitePreviewKeysResponse, GetWebhookResponse, ImportBackupAsNewSiteRequest, ImportBackupAsNewSiteResponse, ImportSiteBackupRequest, ListManagementKeysResponse, ListSiteApiKeysResponse, ListWebhooksResponse, RevokeManagementKeyRequest, RevokeManagementKeyResponse, RevokeSiteApiKeyResponse, SdkDeploymentHealthResponse, SetupSdkDeploymentRevalidationWebhookRequest, SetupSdkDeploymentRevalidationWebhookResponse, SetupSdkRevalidationWebhookRequest, SetupSdkRevalidationWebhookResponse, UpdateWebhookRequest, UpdateWebhookResponse, BackupImportResponse, BackupPreviewRequest, BackupPreviewResponse, CreateBackupUploadUrlRequest, CreateBackupUploadUrlResponse } from './siteInfrastructure';
+import type { CreateManagementKeyRequest, CreateManagementKeyResponse, CreateSiteApiKeyRequest, CreateSiteApiKeyResponse, CreateSitePreviewKeyRequest, CreateSitePreviewKeyResponse, CreateWebhookRequest, CreateWebhookResponse, DeleteBackupUploadRequest, DeleteBackupUploadResponse, DeleteWebhookResponse, GetSiteApiKeyAccessLogsResponse, ListSitePreviewKeysResponse, GetWebhookResponse, ImportBackupAsNewSiteRequest, ImportBackupAsNewSiteResponse, ImportSiteBackupRequest, ListManagementKeysResponse, ListSiteApiKeysResponse, ListWebhooksResponse, RevokeManagementKeyRequest, RevokeManagementKeyResponse, RevokeSiteApiKeyResponse, SdkDeploymentHealthResponse, SetupSdkDeploymentRevalidationWebhookRequest, SetupSdkDeploymentRevalidationWebhookResponse, SetupSdkRevalidationWebhookRequest, SetupSdkRevalidationWebhookResponse, UpdateWebhookRequest, UpdateWebhookResponse, BackupImportResponse, BackupPreviewRequest, BackupPreviewResponse, CreateBackupUploadUrlRequest, CreateBackupUploadUrlResponse } from './siteInfrastructure';
 import type { GetSiteInspirationAnalysisResponse, ListSiteInspirationAnalysesResponse } from './siteGeneration';
 import type { ListGscPropertiesAdminResponse, AuthStatusResponse, CronAppointmentRemindersResponse, CronBillingStatusResponse, CronEventFeedbackEmailsResponse, CronEventOccurrencesResponse, CronEventRemindersResponse, CronMediaJobsQuery, CronMediaJobsResponse, CronNewsletterSendResponse, CronPaymentReconciliationResponse, CronSeoIngestResponse, CronWaitlistExpiryResponse } from './siteOperations';
 import type { ApplySiteStyleSelectionBody, ApplySiteStyleSelectionResponse } from './siteRuntimeEndpoints';
-import type { ManagementMediaAsset, MediaResolveResponse, PushSdkConfigRequest, PushSdkConfigResponse, SdkAddEventOccurrenceRequest, SdkBackfillIdentifiersResult, SdkEventOccurrenceResponse, SdkGetEntryResponse, SdkGetEventCategoryResponse, SdkGetEventResponse, SdkGetFormResponse, SdkGetPageBlockResponse, SdkPatchPageBlockBody, SdkPatchPageBlockResponse, SdkGetVenueResponse, SdkListEntriesResponse, SdkListEventCategoriesResponse, SdkListEventOccurrencesResponse, SdkListEventsResponse, SdkListFormsResponse, SdkListVenuesResponse, SdkMediaFinalizeUploadResponse, SdkMediaUploadUrlResponse, SdkPageResponse, SdkEntryUpsertSlotBlock, SdkPublishOrUnpublishEntryResponse, SdkPullContentTypesResponse, SdkCatalogThemeResponse, SdkCatalogBlocksResponse, SdkCatalogContentTypesResponse, SdkCapabilitiesResponse, SdkCommandApplicationResult, SdkConfigureBookingVerticalRequest, SdkConfigureBookingVerticalResponse, SdkDemoContentResponse, SdkDeleteResponse, SdkPullEntriesAllResponse, SdkPullEntriesByTypeResponse, SdkPullEntriesResponse, SdkPullEventCategoriesResponse, SdkPullEventsResponse, SdkPullFooterResponse, SdkPullFormSchema, SdkPullFormsResponse, SdkPullFormSettings, SdkPullDraftsResponse, SdkPullNavigationResponse, SdkPullPagesResponse, SdkPullSettings, SdkPullSettingsResponse, SdkPullSiteInfoResponse, SdkPullThemeResponse, SdkPullVenue, SdkPullVenuesResponse, SdkUpdateSettingsResponse, SdkUpdateEventOccurrenceRequest, SdkUpsertBlockResponse, SdkUpsertEntryResponse, SdkUpsertPageResponse, SdkUpsertEventCategoryResponse, SdkUpsertEventResponse, SdkUpsertFooterResponse, SdkUpsertFormResponse, SdkUpsertNavigationMenuResponse, SdkUpsertThemeResponse, SdkUpsertVenueResponse } from './sdkContracts';
-import type { SdkThemeWire } from './sdkThemeWire';
+import type { ManagementMediaAsset, MediaResolveResponse, PushSdkConfigRequest, PushSdkConfigResponse, SdkAddEventOccurrenceRequest, SdkBackfillIdentifiersResult, SdkEventOccurrenceResponse, SdkGetEntryResponse, SdkGetEventCategoryResponse, SdkGetEventResponse, SdkGetFormResponse, SdkGetPageBlockResponse, SdkPatchPageBlockBody, SdkPatchPageBlockResponse, SdkGetVenueResponse, SdkListEntriesResponse, SdkListEventCategoriesResponse, SdkListEventOccurrencesResponse, SdkListEventsResponse, SdkListFormsResponse, SdkListVenuesResponse, SdkMediaFinalizeUploadResponse, SdkMediaDeleteApplyResponse, SdkMediaDeletePreviewResponse, SdkMediaDownloadResponse, SdkMediaListResponse, SdkMediaUploadUrlResponse, SdkPageResponse, SdkEntryUpsertSlotBlock, SdkPublishOrUnpublishEntryResponse, SdkPullContentTypesResponse, SdkCatalogThemeResponse, SdkCatalogBlocksResponse, SdkCatalogContentTypesResponse, SdkCapabilitiesResponse, SdkCommandApplicationResult, SdkConfigureBookingVerticalRequest, SdkConfigureBookingVerticalResponse, SdkDemoContentResponse, SdkDeleteResponse, SdkPullEntriesAllResponse, SdkPullEntriesByTypeResponse, SdkPullEntriesResponse, SdkPullEventCategoriesResponse, SdkPullEventsResponse, SdkPullFooterResponse, SdkPullFormSchema, SdkPullFormsResponse, SdkPullFormSettings, SdkPullDraftsResponse, SdkPullNavigationResponse, SdkPullPagesResponse, SdkPullSettings, SdkPullSettingsResponse, SdkPullSiteInfoResponse, SdkPullThemeResponse, SdkPullVenue, SdkPullVenuesResponse, SdkUpdateSettingsResponse, SdkUpdateEventOccurrenceRequest, SdkUpsertBlockResponse, SdkUpsertEntryResponse, SdkUpsertPageResponse, SdkUpsertEventCategoryResponse, SdkUpsertEventResponse, SdkUpsertFooterResponse, SdkUpsertFormResponse, SdkUpsertNavigationMenuResponse, SdkUpsertThemeResponse, SdkUpsertVenueResponse } from './sdkContracts';
+import type { SdkThemeWireWithoutHeader } from './sdkThemeWire';
 import type { SdkEventUpsertBody } from './sdk-event-upsert';
+import type { SdkEntryPaginationQueryInput } from './schemas/sdk-entries';
 import type { StripeConnectDisconnectResponse, StripeConnectStartResponse, StripeConnectStatusResponse, UpdateStripeAutomaticTaxRequest } from './billing';
 import type { NavigationLinkInput } from './navigation/types';
 export type SdkUpsertNavigationItemInput = Readonly<{
@@ -75,9 +76,7 @@ export type SitePlatformAPIEndpoints = {
     listSitePreviewKeys: APIEndpoint<never, {
         siteId: string;
     }, ListSitePreviewKeysResponse>;
-    createSitePreviewKey: APIEndpoint<{
-        name: string;
-    }, {
+    createSitePreviewKey: APIEndpoint<CreateSitePreviewKeyRequest, {
         siteId: string;
     }, CreateSitePreviewKeyResponse>;
     getSiteApiKeyAccessLogs: APIEndpoint<never, {
@@ -148,6 +147,24 @@ export type SitePlatformAPIEndpoints = {
     }, {
         siteId: string;
     }, MediaResolveResponse>;
+    sdkMediaList: APIEndpoint<never, {
+        siteId: string;
+        search?: string;
+        limit?: number;
+        offset?: number;
+    }, SdkMediaListResponse>;
+    sdkMediaDownload: APIEndpoint<never, {
+        siteId: string;
+        identifier: string;
+    }, SdkMediaDownloadResponse>;
+    sdkMediaDeletePreview: APIEndpoint<never, {
+        siteId: string;
+        identifier: string;
+    }, SdkMediaDeletePreviewResponse>;
+    sdkMediaDeleteApply: APIEndpoint<never, {
+        siteId: string;
+        identifier: string;
+    }, SdkMediaDeleteApplyResponse>;
     sdkMediaUploadUrl: APIEndpoint<{
         filename: string;
         bytes: number;
@@ -223,17 +240,18 @@ export type SitePlatformAPIEndpoints = {
     sdkPullEvents: APIEndpoint<never, {
         siteId: string;
     }, SdkPullEventsResponse>;
+    /**
+     * `page`/`limit` both coerce and default in `schemas/sdk-entries.ts`, so neither
+     * side of that schema is the caller's type; `SdkEntryPaginationQueryInput` is
+     * the modelled contract, and `sdk-entries.typetest.ts` holds the schema to it.
+     */
     sdkPullEntries: APIEndpoint<never, {
         siteId: string;
-        page?: number;
-        limit?: number;
-    }, SdkPullEntriesResponse>;
+    } & SdkEntryPaginationQueryInput, SdkPullEntriesResponse>;
     sdkPullEntriesByType: APIEndpoint<never, {
         siteId: string;
         type: string;
-        page?: number;
-        limit?: number;
-    }, SdkPullEntriesByTypeResponse>;
+    } & SdkEntryPaginationQueryInput, SdkPullEntriesByTypeResponse>;
     sdkPullEntriesAll: APIEndpoint<never, {
         siteId: string;
     }, SdkPullEntriesAllResponse>;
@@ -317,7 +335,13 @@ export type SitePlatformAPIEndpoints = {
     }, SdkDeleteResponse>;
     sdkUpsertTheme: APIEndpoint<Readonly<{
         kind: 'update';
-        theme: SdkThemeWire;
+        /**
+         * The theme minus its header (#1318 Phase 4d, D17). The server compiles
+         * `theme.header` from the site's stored selection and header
+         * preferences and is its only author; a body carrying header bytes is
+         * rejected rather than silently stripped.
+         */
+        theme: SdkThemeWireWithoutHeader;
         themeId?: string;
         selectionId?: string;
     }> | Readonly<{
@@ -467,9 +491,7 @@ export type SitePlatformAPIEndpoints = {
     sdkListEntries: APIEndpoint<never, {
         siteId: string;
         contentType: string;
-        page?: number;
-        limit?: number;
-    }, SdkListEntriesResponse>;
+    } & SdkEntryPaginationQueryInput, SdkListEntriesResponse>;
     sdkGetEntry: APIEndpoint<never, {
         siteId: string;
         contentType: string;

package/dist/_dts/api/src/siteRuntimeEndpoints.d.ts

@@ -2,16 +2,23 @@ import type { BackgroundOverride, SystemCustomizeFacetSelection, Theme } from '.
 import type { ListMediaAssetsResult, MediaAssetWithLabels } from '@riverbankcms/media-storage-supabase';
 import type { FooterNavigationLayout } from '../../core/src/index';
 import type { DbJson } from '../../db/src/index';
-import type { PageDesignEditorReadModel, PageDesignIntent, AppearancePresetId, BoundaryOptionId, DesignBlockId, FooterLookId, HeaderLayoutId, HeaderLayoutStyleSelection, HeaderStyleId, LayoutVariantKey, SiteStyleId } from '../../theme-core/src/site-styles/index';
+import type { PageDesignEditorReadModel, PageDesignIntent, AppearancePresetId, BoundaryOptionId, DesignBlockId, FooterLookId, HeaderLayoutId, HeaderLayoutStyleSelection, HeaderPreferences, HeaderQuickControlPreferences, HeaderStyleId, LayoutVariantKey, SiteStyleId } from '../../theme-core/src/site-styles/index';
 import type { ButtonStyleSelection } from '../../theme-core/src/buttons/index';
 import type { APIEndpoint } from './apiEndpointTypes';
 import type { AnalyticsReportQuery, AnalyticsReportResponse } from './analytics';
-import type { CreateMediaAssetBody, MediaAssetResponse, MediaAssetFileFilterContract, MediaBulkDeleteResponse, MediaClassifyJobResponse, MediaJobSummaryResponse, MediaLabelSummary, MediaSettingsResponse } from './media';
+import type { CreateMediaAssetBody, MediaAssetResponse, MediaAssetFileFilterContract, MediaBulkDeleteResponse, MediaDeleteResponse, MediaClassifyJobResponse, MediaJobSummaryResponse, MediaLabelSummary, MediaSettingsResponse } from './media';
 import type { MediaUsageCheckResponse } from './shared-contracts';
-import type { BlockWithContentResponse, BlockListItem, ContentEntryListStage, EntryPageContentSlotsResponse, PageSurfaceContentSlotsResponse, ListPublishedEntriesResponse, PageDraftRecord, PublishedBlockBaseline, PublishedContentEntryPreviewResponse, PublishedPostPreviewResponse, SdkBlockContent, SdkRuntimeContentByPathResponse, SdkRouteDecisionResponse, SdkRouteOutcomeResponse, SdkTemplate, SiteBySlugResponse, ThemeGenerationTurn, ThemePreferencesRecord, ThemeRow } from './contentRuntime';
+import type { BlockWithContentResponse, BlockListItem, ContentEntryListStage, EntryPageContentSlotsResponse, PageSurfaceContentSlotsResponse, ListPublishedEntriesResponse, PageDraftRecord, PublishedBlockBaseline, PublishedContentEntryPreviewResponse, PublishedPostPreviewResponse, SdkBlockContent, SdkRuntimeContentByPathResponse, SdkRouteDecisionResponse, SdkRouteOutcomeResponse, SdkTemplate, SiteBySlugResponse, ThemePreferencesRecord } from './contentRuntime';
 import type { GetVersionHistoryResponse, ListVersionHistoryResponse, RestoreVersionHistoryRequest, RestoreVersionHistoryResponse, VersionHistoryListQuery } from './contentVersionHistory';
 import type { CreateMediaUploadUrlRequest, CreateMediaUploadUrlResponse, CreateSiteLogoUploadUrlRequest, CreateSiteLogoUploadUrlResponse, MediaUploadFinalizeRequest, UploadSiteLogoRequest } from './siteInfrastructure';
 import type { DevToolsGetSiteRoleDowngradeQuery, DevToolsImpersonationResponse, DevToolsSeedResponse, DevToolsSetSiteRoleDowngradeRequest, SiteRoleDowngradeState } from './siteOperations';
+/**
+ * A theme body with no header. The server compiles `theme.header` from the
+ * row's intent and is its only author (#1318 Phase 4d).
+ */
+export type ThemeWithoutHeader = Omit<Theme, 'header'> & Readonly<{
+    header?: never;
+}>;
 /** Partial persisted selections for the Style configurator and site chrome. */
 export type SiteThemeSelectionsPayload = {
     buttonStyleSelection?: ButtonStyleSelection | null;
@@ -70,7 +77,17 @@ export type SaveSiteChromeSelectionBody = Readonly<{
     surface: 'header';
     layoutId: HeaderLayoutId;
     styleId: HeaderStyleId;
-    theme: Theme;
+    /**
+     * The header intent this save expresses, and the whole of what this
+     * surface sends (#1318 Phase 4d).
+     *
+     * The compiled `theme` that used to ride alongside it is gone. The server
+     * compiles the header from `(layoutId, styleId, preferences)` against the
+     * persisted row and is its sole author; the rest of the theme is the
+     * row's own and is not the client's to restate. The save response returns
+     * the theme the server persisted, which is what the client reconciles to.
+     */
+    preferences: HeaderQuickControlPreferences;
     themeId?: string | null;
     selectionId?: string | null;
     baseSelectionUpdatedAt?: string | null;
@@ -92,6 +109,11 @@ export type SaveSiteChromeSelectionResponse = Readonly<{
     theme: Theme;
     headerLayoutId: HeaderLayoutId;
     headerStyleId: HeaderStyleId;
+    /**
+     * The intent as persisted. `null` while the Phase 4c backfill is outstanding
+     * and this save did not write one — absent, not "the defaults".
+     */
+    headerPreferences: HeaderPreferences | null;
     footerLookId: FooterLookId | null;
 }>;
 export type PageDesignRevisionToken = {
@@ -191,17 +213,6 @@ export type SiteRuntimeAPIEndpoints = {
         mode?: 'manual';
         entryIds?: string;
     }, ListPublishedEntriesResponse>;
-    createTheme: APIEndpoint<{
-        site_id: string;
-    }, never, {
-        output: ThemeGenerationTurn[];
-        text: string[] | null;
-    }>;
-    generateThemes: APIEndpoint<{
-        site_id: string;
-    }, never, {
-        themes: ThemeRow[];
-    }>;
     extractThemeFromInspiration: APIEndpoint<{
         urls: string[];
     }, never, {
@@ -217,7 +228,16 @@ export type SiteRuntimeAPIEndpoints = {
         source: 'extracted' | 'fallback';
     }>;
     saveSiteTheme: APIEndpoint<{
-        theme: Theme;
+        /**
+         * The theme minus its header (#1318 Phase 4d, D17).
+         *
+         * `header` is compiled server-side from the row's stored selection and
+         * `header_preferences`, so a body cannot carry header bytes at all. This
+         * was the last path by which hand-written header fields reached
+         * persistence, and leaving it open would have made the single-authority
+         * claim untrue. `headerSelection` still names the selection to compile.
+         */
+        theme: ThemeWithoutHeader;
         themeId?: string | null;
         selectionId?: string | null;
         overrides?: Record<string, unknown> | null;
@@ -369,7 +389,7 @@ export type SiteRuntimeAPIEndpoints = {
         cascadeLabels?: boolean;
     }, {
         assetId: string;
-    }, void>;
+    }, MediaDeleteResponse>;
     mediaBulkDelete: APIEndpoint<{
         assetIds: string[];
         deleteObjects?: boolean;

package/dist/_dts/api/src/types.d.ts

@@ -1,5 +1,5 @@
 import type { CamelizeKeys, DbDatabase, DbRow } from "../../db/src/index";
-export type { AccessPolicyContract, AccessPolicyTag, AmbientBackgroundRole, CreateMediaAssetBody, EntitledCustomerAccessScopeContract, FileKindContract, FileKindTag, FileUseContract, FileUseTag, ImageFileFormat, MediaAssetResponse, MediaAssetFileFilterContract, MediaBulkDeleteAssetFailure, MediaBulkDeleteResponse, MediaClassifyJobResponse, MediaJobSummaryResponse, MediaLabelSummary, MediaSettingsResponse, RenderableFileKindTag, SiteBackgroundAssetUse, StorageClass, UploadIntentContract, UploadIntentTag, } from "./media";
+export type { AccessPolicyContract, AccessPolicyTag, AmbientBackgroundRole, CreateMediaAssetBody, EntitledCustomerAccessScopeContract, FileKindContract, FileKindTag, FileUseContract, FileUseTag, ImageFileFormat, MediaAssetResponse, MediaAssetFileFilterContract, MediaBulkDeleteAssetFailure, MediaBulkDeleteResponse, MediaDeleteResponse, MediaDeleteWarning, MediaClassifyJobResponse, MediaJobSummaryResponse, MediaLabelSummary, MediaSettingsResponse, RenderableFileKindTag, SiteBackgroundAssetUse, StorageClass, UploadIntentContract, UploadIntentTag, } from "./media";
 export type { AnalyticsPreset, AnalyticsReferrer, AnalyticsReportFilters, AnalyticsReportQuery, AnalyticsReportResponse, AnalyticsSeriesPoint, AnalyticsTopPage, AnalyticsTotals, } from "./analytics";
 export type { AIChatMessage, AiBriefTurn, JsonPrimitive, JsonValue, MediaUsageCheckItem, MediaUsageCheckResponse, MediaUsageLocation, } from "./shared-contracts";
 export type * from "./accessAdmin";
@@ -19,7 +19,7 @@ export type * from "./commercePortalEndpoints";
 export type * from "./communications";
 export type * from "./contentRuntime";
 export type * from "./contentVersionHistory";
-export type * from './wholeSeriesOfferings';
+export type * from './wholeSeriesRuns';
 export type * from "./mailchimpIntegration";
 export type * from "./participantMessaging";
 export type * from "./publicExperienceEndpoints";

package/dist/_dts/api/src/{wholeSeriesOfferings.d.ts → wholeSeriesRuns.d.ts}

@@ -1,5 +1,4 @@
-import type { BookingPaymentOptionsSource, BookingPaymentTermsConfig, BookingPricing, BookingPricingInput, WaitlistOverride } from './bookingConfig';
-import type { PublicTeamMemberSummary } from './teamMembers';
+import type { BookingPricing, WaitlistOverride } from './bookingConfig';
 export type { WholeSeriesRunCancellationSettlement } from './eventManagementContracts';
 /**
  * Whole-series Event contracts
@@ -10,9 +9,9 @@ export type { WholeSeriesRunCancellationSettlement } from './eventManagementCont
  * Note: Do NOT use these API types as validation schemas. They document wire
  * contracts while the owning services validate and normalize inputs.
  */
-export type WholeSeriesOfferingStatus = 'draft' | 'active' | 'cancelled' | 'archived' | 'completed';
-export type WholeSeriesOfferingMutableStatus = Exclude<WholeSeriesOfferingStatus, 'completed'>;
-export type WholeSeriesRunRecord = {
+export type WholeSeriesRunStatus = 'draft' | 'active' | 'cancelled' | 'archived' | 'completed';
+export type WholeSeriesRunMutableStatus = Exclude<WholeSeriesRunStatus, 'completed'>;
+export type WholeSeriesRunSeriesRecord = {
     id: string;
     title: string;
     slug: string;
@@ -25,7 +24,7 @@ export type WholeSeriesRunRecord = {
     mainHostStaffMemberId?: string | null;
     status: string;
 };
-export type WholeSeriesOfferingRecord = {
+export type WholeSeriesRunRecord = {
     id: string;
     siteId: string;
     seriesId: string;
@@ -33,76 +32,21 @@ export type WholeSeriesOfferingRecord = {
     enrollmentCapacity: number | null;
     acceptsMemberships: boolean;
     waitlistMode: WaitlistOverride;
-    pricing: BookingPricing;
-    currency: string;
-    paymentTerms: BookingPaymentTermsConfig;
-    status: WholeSeriesOfferingStatus;
+    bookingOffer: BookingPricing;
+    status: WholeSeriesRunStatus;
     createdAt: string;
     updatedAt: string;
-    series: WholeSeriesRunRecord;
+    series: WholeSeriesRunSeriesRecord;
     sessionsCount: number;
     /** Total registrations for this run (all statuses, including cancelled/waitlist). */
     enrollmentsCount: number;
     /** Seat-holding enrollments (enrolled, pending_payment, completed). */
     enrolledCount: number;
 };
-export type PublicWholeSeriesSession = {
-    id: string;
-    startsAt: string;
-    endsAt: string;
-    timeZone: string;
-    capacityOverride?: number | null;
-    overrides?: Record<string, unknown> | null;
-};
-export type PublicWholeSeriesVenue = {
-    id: string;
-    name: string;
-    address: string | null;
-};
-export type PublicWholeSeriesOfferingDetails = {
-    eventSeriesId: string;
-    eventOfferingId: string;
-    title: string;
-    slug: string;
-    description: unknown;
-    deliveryMode: 'in_person' | 'online' | 'hybrid';
-    waitlistEnabled: boolean;
-    requireGuestDetails: boolean;
-    teamMembers?: PublicTeamMemberSummary[];
-    enrollmentOpen: boolean;
-    pricing: BookingPricing;
-    currency: string;
-    paymentTerms: BookingPaymentTermsConfig;
-    enrollmentCapacity: number | null;
-    acceptsMemberships: boolean;
-    status: string;
-    sessionsCount: number;
-    enrolledCount: number;
-    availableSpots: number | null;
-    sessions: PublicWholeSeriesSession[];
-    venue: PublicWholeSeriesVenue | null;
-    firstSessionAt: string | null;
-    lastSessionAt: string | null;
-};
-export type UpdateWholeSeriesOfferingRequest = {
-    enrollmentCapacity?: number | null;
-    acceptsMemberships?: boolean;
-    waitlistMode?: WaitlistOverride;
-    pricing?: BookingPricingInput;
-    paymentTerms?: BookingPaymentTermsConfig;
-    paymentOptionsSource?: BookingPaymentOptionsSource;
-    title?: string;
-    venueId?: string | null;
-    capacity?: number | null;
-    formId?: string | null;
-    eventCategoryId?: string | null;
-    staffMemberIds?: string[];
-    mainHostStaffMemberId?: string | null;
-};
-export type UpdateWholeSeriesOfferingResponse = {
-    offering: WholeSeriesOfferingRecord;
+export type UpdateWholeSeriesRunResponse = {
+    run: WholeSeriesRunRecord;
 };
-export type DeleteWholeSeriesOfferingResponse = {
+export type DeleteWholeSeriesRunResponse = {
     message: string;
 };
 export type DeleteEventOfferingResponse = {