@shapio/client 0.2.0

package/dist/index-BpSg5A3V.d.ts

@@ -0,0 +1,2768 @@
+import { ChangeSummary, ClassifiedChange, DefinitionInput, LocaleDefinition, LockFile, SchemaChange, SchemaDefinition, SyncDecision, ValidationIssue } from "@shapio/schema";
+//#region src/request.d.ts
+/** Fetch's `credentials` mode (spelled out: the DOM lib type is not available to Node consumers). */
+type FetchCredentials = 'omit' | 'same-origin' | 'include';
+type RequestOptions = {
+  method?: string;
+  body?: unknown;
+  signal?: AbortSignal;
+};
+type RequestFn = <T>(path: string, options?: RequestOptions) => Promise<T>;
+//#endregion
+//#region src/admin/contentTypes.d.ts
+/**
+ * Admin content API shapes (package E, `apps/api/src/routes/admin/content/**` and
+ * `routes/schemas/content.ts`). Entry `data` is keyed by API keys; its shape is the model's, known only at
+ * runtime. Dates are ISO-8601 strings.
+ */
+/** `modified`: published, and the draft has changed since (or holds autosaved work). */
+type EntryStatus = 'draft' | 'published' | 'modified';
+/** Field values keyed by API key. Admin reads return media fields as asset views; writes take asset IDs. */
+type EntryData = Record<string, unknown>;
+type EntryLocaleState = {
+  locale: string;
+  /** The draft version: send it back as `expectedVersion` when saving this locale. */
+  version: number;
+  status: EntryStatus;
+  publishedAt: string | null;
+  /** The published version's shared (non-localized) fields are older than the draft's (ADR 0004). */
+  sharedOutdated: boolean;
+};
+/** One entry's draft in one locale, with every locale's status. */
+type AdminEntry = {
+  id: string;
+  /** The model's API key. */
+  model: string;
+  locale: string;
+  version: number;
+  revisionId: string;
+  status: EntryStatus;
+  /** Saved without full validation (autosave or duplicate): Save or Publish validates it. */
+  autosaved: boolean;
+  createdAt: string;
+  updatedAt: string;
+  publishedAt: string | null;
+  data: EntryData;
+  /** Locales that have a draft of this entry. */
+  locales: EntryLocaleState[];
+  /** Other published locales whose live shared values are older than their drafts. */
+  sharedOutdatedLocales: string[];
+};
+/** The admin who created an entry (null for entries created by API tokens, app users or imports). */
+type EntryAuthor = {
+  id: string;
+  name: string;
+};
+/** One locale's status of a list item (localized models). */
+type EntryLocaleStatus = {
+  locale: string;
+  status: EntryStatus;
+};
+type AdminEntryListItem = {
+  id: string;
+  locale: string;
+  version: number;
+  status: EntryStatus;
+  autosaved: boolean;
+  createdAt: string;
+  updatedAt: string;
+  data: EntryData;
+  author: EntryAuthor | null;
+  /** Localized models only: every locale the entry has a version in, with its status. */
+  locales?: EntryLocaleStatus[];
+};
+type ContentPagination = {
+  page: number;
+  pageSize: number;
+  total: number;
+  pageCount: number;
+};
+type AdminEntryPage = {
+  items: AdminEntryListItem[];
+  pagination: ContentPagination;
+  /** The locale the list was read in. */
+  locale: string;
+};
+/** Operators of the content query compiler (`apps/api/src/content/compiler/types.ts`). */
+type ContentFilterOperator = '$eq' | '$ne' | '$in' | '$nin' | '$lt' | '$lte' | '$gt' | '$gte' | '$contains' | '$notContains' | '$containsi' | '$startsWith' | '$endsWith' | '$null' | '$notNull';
+/** A scalar operand; `$in`/`$nin` take a list, `$null`/`$notNull` take `true`. */
+type ContentFilterValue = string | number | boolean | ReadonlyArray<string | number | boolean>;
+/**
+ * A filter tree, serialised with brackets: `{ title: { $eq: 'A' } }` → `filters[title][$eq]=A`. Field keys are
+ * API keys (or `id`, `createdAt`, `updatedAt`); `$and`/`$or` take lists of trees, `$not` one tree.
+ */
+type ContentFilter = {
+  [key: string]: Partial<Record<ContentFilterOperator, ContentFilterValue>> | ContentFilterValue | ContentFilter | readonly ContentFilter[];
+};
+type ContentSort = {
+  field: string;
+  direction: 'asc' | 'desc';
+};
+type ContentListQuery = {
+  filters?: ContentFilter;
+  sort?: readonly ContentSort[];
+  page?: number;
+  pageSize?: number;
+  /** Free-text search over the model's title field. */
+  q?: string;
+  locale?: string;
+  /** Top-level fields to return (API keys); all readable fields when absent. */
+  fields?: readonly string[];
+  /** Relation paths to expand, e.g. `author` or `author.company`. */
+  populate?: readonly string[];
+  /** Admin list only: entries in this status (in the locale the list is read in). */
+  status?: EntryStatus;
+  /** Admin list only: entries created by this admin user (ID). */
+  author?: string;
+};
+type CreateEntryInput = {
+  locale?: string;
+  data?: EntryData;
+  /** Publish the new entry's locale in the same transaction. */
+  publish?: boolean;
+};
+type UpdateEntryInput = {
+  locale?: string;
+  /** The draft version the editor loaded; null creates the entry's version in this locale. */
+  expectedVersion: number | null;
+  /** Changed fields only: a field set to null is cleared, absent fields are kept. */
+  data?: EntryData;
+  /** Autosave: moves the draft head only (no revision) and does not enforce `required`. */
+  autosave?: boolean;
+};
+/** Publish or unpublish these locales atomically (the request's default locale when omitted). */
+type EntryLocalesInput = {
+  locales?: string[];
+};
+type RevisionSummary = {
+  id: string;
+  locale: string;
+  /** Why the revision exists: `create`, `save`, `restore`, `localize`, `publish`... */
+  reason: string;
+  schemaRevisionId: string;
+  authorType: string;
+  authorId: string | null;
+  parentRevisionId: string | null;
+  createdAt: string;
+};
+type RevisionDetail = RevisionSummary & {
+  data: EntryData;
+};
+/** One problem with a content value (422 CONTENT_INVALID `details.issues`). */
+type ContentIssue = {
+  path: string;
+  code: string;
+  message: string;
+};
+/** An entry that still points at the one being deleted (409 ENTRY_REFERENCED `details.referrers`). */
+type EntryReferrer = {
+  entryId: string;
+  modelId: string;
+  locale: string;
+  state: string;
+};
+/** A custom field editor module the server serves (from the project's `shapio.config` and `extensions/editors`). */
+type EditorManifestItem = {
+  /** File name in `extensions/editors/`, e.g. `star-rating.js`. */
+  file: string;
+  /** Path to import the module from, relative to the server's base URL. */
+  path: string;
+  /** Content hash: changes whenever the file changes (cache busting). */
+  hash: string;
+};
+type EditorManifest = {
+  items: EditorManifestItem[];
+};
+//#endregion
+//#region src/deliveryTypes.d.ts
+/**
+ * The delivery API (`/api/content/:routeKey`): published content as sites and apps read it. `routeKey` is a
+ * collection's plural API ID (`articles`) or a singleton's API ID (`homepage`).
+ */
+type DeliveryListQuery = Omit<ContentListQuery, 'status' | 'author'> & {
+  /** Read the publication snapshot N (`GET /api/snapshots/current` gives the newest) instead of now. */
+  snapshot?: number;
+};
+type DeliveryGetQuery = Pick<DeliveryListQuery, 'locale' | 'fields' | 'populate' | 'snapshot'>;
+type DeliveryMeta = {
+  locale: string;
+  snapshot: number;
+};
+type DeliveryPagination = {
+  page: number;
+  pageSize: number;
+  total: number;
+  pageCount: number;
+};
+type DeliveryList<T = Record<string, unknown>> = {
+  data: T[];
+  meta: DeliveryMeta & {
+    pagination: DeliveryPagination;
+  };
+};
+type DeliveryItem<T = Record<string, unknown>> = {
+  data: T;
+  meta: DeliveryMeta;
+};
+//#endregion
+//#region src/admin/sitesTypes.d.ts
+/** A site: the tenant of content, media, tokens, change sets and snapshots (sites plan §H). */
+type Site = {
+  id: string;
+  /** Lower case, starts with a letter; fixed once created. Sent as `Shapio-Site` or `?site=`. */
+  key: string;
+  name: string;
+  /** Requests that name no site go to the primary site. Exactly one; it cannot be deleted. */
+  isPrimary: boolean;
+  version: number;
+  createdAt: string;
+  updatedAt: string;
+};
+type SiteSummary = Pick<Site, 'id' | 'key' | 'name' | 'isPrimary'>;
+/** A site as webhook payloads and views name it. */
+type SiteRef = Pick<Site, 'id' | 'key'>;
+type CreateSiteInput = {
+  key: string;
+  name: string;
+};
+/** Only the name changes; `expectedVersion` guards against concurrent edits (409 `VERSION_CONFLICT`). */
+type UpdateSiteInput = {
+  expectedVersion: number;
+  name: string;
+};
+/**
+ * The app roles a site binds: `public` applies to anonymous callers, `authenticated` to every signed-in app
+ * user of the site. A new site binds nothing (deny by default).
+ */
+type SiteAppRoles = {
+  siteId: string;
+  public: string[];
+  authenticated: string[];
+};
+type SetSiteAppRolesInput = {
+  public: string[];
+  authenticated: string[];
+};
+//#endregion
+//#region src/admin/usageTypes.d.ts
+/** Field usage from delivery traffic (`GET /api/admin/usage/fields`, apps/api/src/routes/admin/usage). */
+type UsageSelection = 'explicit' | 'implicit';
+type FieldUsageQuery = {
+  modelId: string;
+  /** Days counted, today included (default 7; capped at USAGE_RETENTION_DAYS). */
+  days?: number;
+};
+type FieldPrincipalUsage = {
+  /** `token:<id>`, `app_users` or `anonymous`. */
+  principalKey: string;
+  /** The API token's name (tokens only, while the token exists). */
+  tokenName?: string;
+  reads: number;
+  lastReadAt: string;
+  /** `implicit`: every read asked for the whole model (no field selection). */
+  selection: UsageSelection;
+};
+type ModelFieldUsage = {
+  /** A field ID, or `<relation field ID>.<target field ID>` for a populated relation's field. */
+  fieldPath: string;
+  /** API keys along the path in the current schema (`author.name`); null when a field no longer exists. */
+  apiKeyPath: string | null;
+  reads: number;
+  lastReadAt: string;
+  principals: FieldPrincipalUsage[];
+};
+type PrincipalUsageSummary = {
+  principalKey: string;
+  tokenName?: string;
+  /** Delivery requests over all models in the window. */
+  requests: number;
+  lastReadAt: string;
+  /** The snapshot this principal last pinned with `snapshot`; null when it reads live content. */
+  lastSnapshot: number | null;
+};
+type FieldUsageResponse = {
+  /** False when USAGE_TRACKING is off (nothing new is counted). */
+  tracking: boolean;
+  modelId: string;
+  days: number;
+  /** First day counted (UTC, `YYYY-MM-DD`). */
+  since: string;
+  fields: ModelFieldUsage[];
+  principals: PrincipalUsageSummary[];
+};
+//#endregion
+//#region src/admin/publishingTypes.d.ts
+type Page<T> = {
+  items: T[];
+  nextCursor: string | null;
+};
+declare const JOB_STATUSES: readonly ["pending", "running", "succeeded", "dead"];
+type JobStatus = (typeof JOB_STATUSES)[number];
+type Job = {
+  id: string;
+  type: string;
+  status: JobStatus;
+  attempts: number;
+  maxAttempts: number;
+  /** When it runs next (pending) or ran last. */
+  runAt: string;
+  idempotencyKey: string | null;
+  lockedBy: string | null;
+  lockedUntil: string | null;
+  /** Payload and result with secret-looking values replaced by `[redacted]`. */
+  payload: unknown;
+  result: unknown;
+  /** Progress a long job saved (e.g. an import's phase and counts); null when it saved none. */
+  progress: unknown;
+  lastError: string | null;
+  createdAt: string;
+  updatedAt: string;
+  finishedAt: string | null;
+};
+type JobQuery = {
+  status?: JobStatus;
+  type?: string;
+  cursor?: string;
+  limit?: number;
+};
+type JobSummary = {
+  counts: Record<JobStatus, number>;
+  types: string[];
+};
+declare const PUBLICATION_ACTIONS: readonly ["publish", "unpublish"];
+type PublicationAction = (typeof PUBLICATION_ACTIONS)[number];
+declare const SCHEDULE_STATUSES: readonly ["scheduled", "done", "failed", "cancelled"];
+type ScheduleStatus = (typeof SCHEDULE_STATUSES)[number];
+type ScheduledPublication = {
+  id: string;
+  entryId: string;
+  modelId: string;
+  /** Null when the model no longer exists. */
+  modelKey: string | null;
+  locale: string;
+  action: PublicationAction;
+  runAt: string;
+  status: ScheduleStatus;
+  error: string | null;
+  /** Publication sequence the change was published at (once done). */
+  snapshot: number | null;
+  createdBy: string | null;
+  createdAt: string;
+  executedAt: string | null;
+};
+type ScheduleQuery = {
+  status?: ScheduleStatus;
+  entryId?: string;
+  cursor?: string;
+  limit?: number;
+};
+type CreateScheduleInput = {
+  modelKey: string;
+  entryId: string;
+  /** Omit for non-localized models (and for the default locale). */
+  locale?: string;
+  action: PublicationAction;
+  runAt: string;
+};
+type WebhookEventType = {
+  type: string;
+  group: string;
+};
+type WebhookDeliveryStatus = 'pending' | 'retrying' | 'succeeded' | 'dead';
+type Webhook = {
+  id: string;
+  name: string;
+  url: string;
+  /** Event types or `group.*` patterns. */
+  events: string[];
+  enabled: boolean;
+  allowPrivateNetwork: boolean;
+  maxAttempts: number;
+  /** The site whose events it receives; null for a network-wide webhook (every site's events). */
+  site: SiteRef | null;
+  lastDelivery: {
+    status: WebhookDeliveryStatus;
+    at: string;
+  } | null;
+  createdBy: string | null;
+  createdAt: string;
+  updatedAt: string;
+  version: number;
+};
+type CreateWebhookInput = {
+  name: string;
+  url: string;
+  events: string[];
+  enabled?: boolean;
+  allowPrivateNetwork?: boolean;
+  maxAttempts?: number;
+  /** A network-wide webhook (every site's events); otherwise it belongs to the request's site. */
+  network?: boolean;
+};
+/** A webhook's site is fixed once created. */
+type UpdateWebhookInput = Partial<Omit<CreateWebhookInput, 'network'>> & {
+  expectedVersion: number;
+};
+/** The JSON body every webhook delivery sends (signed; verify it with `verifyWebhookSignature`). */
+type WebhookEventBody = {
+  id: string;
+  type: string;
+  createdAt: string;
+  /** The site the event is about; null for events about no site (network-wide). */
+  site: SiteRef | null;
+  data: unknown;
+};
+/** `secret` is shown once: on creation and after rotation. */
+type WebhookWithSecret = {
+  webhook: Webhook;
+  secret: string;
+};
+type WebhookAttempt = {
+  attempt: number;
+  at: string;
+  durationMs: number;
+  request: {
+    method: string;
+    url: string;
+    headers: Record<string, string>;
+  };
+  /** Null when no response arrived (refused, timeout, blocked by the network policy). */
+  response: {
+    status: number;
+    headers: Record<string, string>;
+    body: string;
+    truncated: boolean;
+  } | null;
+  error: string | null;
+};
+type WebhookDelivery = {
+  id: string;
+  webhookId: string;
+  eventId: string | null;
+  eventType: string;
+  isTest: boolean;
+  status: WebhookDeliveryStatus;
+  attempts: number;
+  lastResponseStatus: number | null;
+  lastError: string | null;
+  payload: unknown;
+  attemptLog: WebhookAttempt[];
+  createdAt: string;
+  updatedAt: string;
+  deliveredAt: string | null;
+};
+declare const DEPLOYMENT_PROVIDERS: readonly ["generic_webhook", "cloudflare_pages", "vercel", "netlify", "github"];
+type DeploymentProvider = (typeof DEPLOYMENT_PROVIDERS)[number];
+declare const DEPLOYMENT_TRIGGERS: readonly ["publish", "change_set", "schema", "manual"];
+type DeploymentTriggerPolicy = (typeof DEPLOYMENT_TRIGGERS)[number];
+declare const DEPLOYMENT_RUN_STATUSES: readonly ["queued", "triggered", "building", "deployed", "failed", "unknown"];
+type DeploymentRunStatus = (typeof DEPLOYMENT_RUN_STATUSES)[number];
+type DeploymentRunTrigger = 'publish' | 'change_set' | 'schema' | 'manual' | 'retry';
+/**
+ * Provider settings (not secret). Generic: `{ url }`. Cloudflare Pages: `{ accountId, projectName }`.
+ * GitHub: `{ owner, repo, branch, mode: 'commit' | 'pull_request', directory }`.
+ */
+type DeploymentSettings = Record<string, string>;
+/**
+ * Secret names per provider. Generic: `signingSecret` (generated when omitted). Cloudflare Pages:
+ * `deployHookUrl`, `apiToken`. GitHub: `token`. Values are write-only. A value of `${ENV:VAR_NAME}`
+ * makes the server read the secret from that environment variable instead of storing it.
+ */
+type DeploymentSecretsInput = Record<string, string>;
+/** Which secrets are set; values never leave the server. `envVar`: read from this environment variable. */
+type DeploymentSecretState = Record<string, {
+  set: boolean;
+  envVar: string | null;
+}>;
+type DeploymentTimelineEvent = {
+  status: DeploymentRunStatus;
+  at: string;
+  source: 'shapio' | 'callback' | 'provider';
+  message: string | null;
+};
+type DeploymentRun = {
+  id: string;
+  connectionId: string;
+  connectionName: string;
+  provider: DeploymentProvider;
+  status: DeploymentRunStatus;
+  trigger: DeploymentRunTrigger;
+  /** Publication sequence the run was triggered at (`?snapshot=` on delivery). */
+  snapshot: number | null;
+  schemaVersion: number | null;
+  retryOf: string | null;
+  providerRef: string | null;
+  logUrl: string | null;
+  siteUrl: string | null;
+  error: string | null;
+  /** False for providers that cannot report completion without callbacks (shown as "completion unknown"). */
+  completionReported: boolean;
+  timeline: DeploymentTimelineEvent[];
+  triggeredAt: string | null;
+  finishedAt: string | null;
+  createdAt: string;
+  updatedAt: string;
+};
+type DeploymentConnection = {
+  id: string;
+  name: string;
+  provider: DeploymentProvider;
+  settings: DeploymentSettings;
+  secrets: DeploymentSecretState;
+  previewUrlTemplate: string | null;
+  /** Preview tokens issued for this connection show exactly what this delivery role reads. */
+  deliveryRoleId: string | null;
+  triggerPolicy: DeploymentTriggerPolicy[];
+  debounceSeconds: number;
+  allowPrivateNetwork: boolean;
+  enabled: boolean;
+  /** Where the site posts signed build callbacks (generic webhook connections). */
+  callbackUrl: string;
+  latestRun: DeploymentRun | null;
+  /** The newest deployed run by snapshot: what the site is serving, as far as Shapio knows. */
+  currentRun: DeploymentRun | null;
+  createdBy: string | null;
+  createdAt: string;
+  updatedAt: string;
+  version: number;
+};
+type CreateDeploymentConnectionInput = {
+  name: string;
+  provider: DeploymentProvider;
+  settings: DeploymentSettings;
+  secrets: DeploymentSecretsInput;
+  previewUrlTemplate?: string | null;
+  triggerPolicy: DeploymentTriggerPolicy[];
+  debounceSeconds?: number;
+  allowPrivateNetwork?: boolean;
+  enabled?: boolean;
+  deliveryRoleId?: string | null;
+};
+type UpdateDeploymentConnectionInput = Partial<Omit<CreateDeploymentConnectionInput, 'provider'>> & {
+  expectedVersion: number;
+};
+/** `generatedSecrets` holds secrets Shapio generated (the generic signing secret), shown once. */
+type DeploymentConnectionCreated = {
+  connection: DeploymentConnection;
+  generatedSecrets: Record<string, string>;
+};
+type ConnectionTestResult = {
+  ok: boolean;
+  checks: Array<{
+    name: string;
+    ok: boolean;
+    message: string;
+  }>;
+};
+type DeploymentRunQuery = {
+  connectionId?: string;
+  cursor?: string;
+  limit?: number;
+};
+type PreviewToken = {
+  id: string;
+  tokenPrefix: string;
+  modelId: string;
+  modelKey: string | null;
+  entryId: string | null;
+  locale: string | null;
+  connectionId: string | null;
+  /** Fields follow this delivery role (within the creator's access); null = the public fields. */
+  deliveryRoleId: string | null;
+  createdBy: string;
+  expiresAt: string;
+  revokedAt: string | null;
+  lastUsedAt: string | null;
+  createdAt: string;
+};
+type CreatePreviewTokenInput = {
+  modelKey: string;
+  entryId?: string;
+  locale?: string;
+  /** Default 1 hour, at most 30 days. */
+  ttlSeconds?: number;
+  connectionId?: string;
+  /** Defaults to the connection's delivery role. */
+  deliveryRoleId?: string;
+};
+/** `token` is shown once. `url` is rendered from the connection's preview URL template (null without one). */
+type PreviewTokenCreated = {
+  token: string;
+  previewToken: PreviewToken;
+  url: string | null;
+};
+type OpenPreviewInput = {
+  modelKey: string;
+  entryId: string;
+  locale?: string;
+  /** Defaults to the first enabled connection with a preview URL template. */
+  connectionId?: string;
+};
+/** What the entry form's Preview button opens. `apiUrl` is the preview read endpoint for this entry. */
+type OpenPreviewResult = {
+  /** The token's ID (revoke it when the preview closes). */
+  id: string;
+  url: string | null;
+  apiUrl: string;
+  token: string;
+  expiresAt: string;
+  connectionId: string | null;
+};
+/** A connection the site's previews open on (names and origins only). */
+type PreviewTarget = {
+  connectionId: string;
+  name: string;
+  /** null when the preview URL template's origin depends on a variable. */
+  origin: string | null;
+  /** Whether the admin can show it in its preview frame. */
+  framable: boolean;
+};
+//#endregion
+//#region src/admin/schemaTypes.d.ts
+/**
+ * Schema registry API shapes (package D), mirroring the TypeBox route schemas in
+ * apps/api/src/routes/admin/{models,components,schema,locales}/** and routes/schemas/schemaRegistry.ts.
+ */
+/** `/api/admin/models` serves collections and singletons; `/api/admin/components` serves components. */
+type DefinitionCategory = 'model' | 'component';
+type ActiveDefinition = {
+  definition: SchemaDefinition;
+  /** Per-definition version: send it back as `expectedVersion` when changing the definition. */
+  version: number;
+  hash: string;
+  revisionId: string;
+  activatedAt: string;
+};
+/** A list item: the active definition and the change still running for it, if any. */
+type DefinitionListItem = ActiveDefinition & {
+  pendingChange: {
+    id: string;
+    status: SchemaChangeStatus;
+  } | null;
+};
+type SchemaChangeStatus = 'pending' | 'running' | 'activated' | 'failed' | 'cancelled';
+/** A planned change whose prerequisites run as jobs before the new revision activates. */
+type SchemaChangeJob = {
+  id: string;
+  targetType: string;
+  targetId: string;
+  status: SchemaChangeStatus;
+  fromRevisionId: string | null;
+  toRevisionId: string | null;
+  jobId: string | null;
+  /** Why a failed change failed, e.g. `{ reason, invalidCount, sampleEntryIds }`. */
+  error: unknown;
+  createdAt: string;
+  updatedAt: string;
+  finishedAt: string | null;
+};
+type DefinitionDetail = ActiveDefinition & {
+  pendingChange: SchemaChangeJob | null;
+};
+/** A prerequisite or follow-up step of a plan (see apps/api/src/schema/planner/steps.ts). */
+type PlanStep = {
+  kind: string;
+  fieldId?: string;
+  modelId?: string;
+  ownerId?: string;
+} & Record<string, unknown>;
+type ChangePlan = {
+  definitionId: string;
+  kind: SchemaDefinition['kind'];
+  apiKey: string;
+  operation: 'create' | 'update' | 'delete';
+  fromVersion: number | null;
+  changes: ClassifiedChange[];
+  summary: ChangeSummary;
+  affectedModelIds: string[];
+  prerequisites: PlanStep[];
+  followUps: PlanStep[];
+  issues: ValidationIssue[];
+};
+type PlanStepImpact = {
+  key: string;
+  kind: string;
+  affectedHeads: number;
+  invalidHeads?: number;
+};
+type PlanImpact = {
+  /** Entry heads (every locale and state) of the affected models. */
+  affectedHeads: number;
+  steps: PlanStepImpact[];
+};
+type PlanPreview = {
+  plan: ChangePlan;
+  impact: PlanImpact;
+};
+type ChangeOutcome = {
+  status: 'activated' | 'unchanged' | 'pending';
+  definitionId: string;
+  version?: number | null;
+  schemaVersion?: number;
+  /** Set when `status` is `pending`: poll `schema.change(changeId)`. */
+  changeId?: string;
+  toVersion?: number | null;
+};
+/** What the definition endpoints accept: authored input, or a normalized definition (always valid input). */
+type DefinitionPayload = DefinitionInput | SchemaDefinition;
+type Acknowledgement = {
+  acknowledgeBreaking?: boolean;
+  acknowledgeDestructive?: boolean;
+};
+type CreateDefinitionInput = {
+  definition: DefinitionPayload;
+} & Acknowledgement;
+type UpdateDefinitionInput = {
+  definition: DefinitionPayload;
+  expectedVersion: number;
+} & Acknowledgement;
+type PlanUpdateInput = {
+  definition: DefinitionPayload;
+  expectedVersion: number;
+};
+type DefinitionRevision = {
+  id: string;
+  version: number;
+  hash: string;
+  parentRevisionId: string | null;
+  createdByType: string;
+  createdById: string | null;
+  createdAt: string;
+};
+type SchemaSummaryItem = {
+  id: string;
+  kind: SchemaDefinition['kind'];
+  apiKey: string;
+  label: string;
+  version: number;
+  hash: string;
+};
+type SchemaSummary = {
+  schemaVersion: number;
+  defaultLocale: string;
+  definitions: SchemaSummaryItem[];
+};
+/** The opt-in read-only lock (ADR 0002): when on, only `shapio schema apply` changes the schema. */
+type SchemaSettings = {
+  readOnly: boolean;
+  readOnlyReason: string | null;
+  updatedAt: string;
+};
+type UpdateSchemaSettingsInput = {
+  readOnly: boolean;
+  readOnlyReason?: string | null;
+};
+type Locale = LocaleDefinition;
+type CreateLocaleInput = {
+  code: string;
+  label: string;
+  fallbacks?: string[];
+};
+type UpdateLocaleInput = {
+  label: string;
+  fallbacks?: string[];
+};
+type SetDefaultLocaleResult = {
+  code: string;
+  changed: boolean;
+};
+type DeleteLocaleResult = {
+  code: string;
+  affectedHeads: number;
+};
+//#endregion
+//#region src/admin/changeSetTypes.d.ts
+/**
+ * Change sets and snapshots (developer-face plan §5), mirroring the TypeBox route schemas in
+ * apps/api/src/routes/admin/{changeSets,snapshots}/schemas.ts. Dates are ISO-8601 strings.
+ */
+declare const CHANGE_SET_STATUSES: readonly ["open", "scheduled", "shipping", "shipped", "failed", "discarded"];
+type ChangeSetStatus = (typeof CHANGE_SET_STATUSES)[number];
+/** While `shipping`: preparing (prerequisite dry runs, index builds) or activating (the final transaction). */
+type ShipPhase = 'preparing' | 'activating';
+type ChangeSetSource = 'manual' | 'release' | 'restore' | 'builder' | 'assist';
+type ChangeSetItemStatus = 'pending' | 'done' | 'failed';
+type SchemaOperation = 'create' | 'update' | 'delete';
+type ChangeSetActor = {
+  type: 'admin' | 'token' | 'system';
+  id: string | null;
+  name: string | null;
+};
+/** Why a ship failed, and the item that stopped it (null when not tied to one item). */
+type ChangeSetError = {
+  code: string;
+  message: string;
+  itemId: string | null;
+  details?: unknown;
+};
+type ChangeSetEntryItem = {
+  id: string;
+  kind: 'entry';
+  position: number;
+  entryId: string;
+  modelId: string;
+  modelKey: string | null;
+  title: string | null;
+  locale: string;
+  action: PublicationAction;
+  /** Restore items publish this exact revision instead of the current draft. */
+  sourceRevisionId: string | null;
+  status: ChangeSetItemStatus;
+  error: string | null;
+};
+type ChangeSetSchemaItem = {
+  id: string;
+  kind: 'schema';
+  position: number;
+  draftId: string;
+  definitionId: string;
+  category: DefinitionCategory;
+  apiKey: string;
+  operation: SchemaOperation;
+  /** The active version the draft was based on; null for a new definition. */
+  baseVersion: number | null;
+  draftVersion: number;
+  status: ChangeSetItemStatus;
+  error: string | null;
+};
+type ChangeSetItem = ChangeSetEntryItem | ChangeSetSchemaItem;
+type ChangeSetSummary = {
+  id: string;
+  title: string;
+  description: string;
+  status: ChangeSetStatus;
+  shipPhase: ShipPhase | null;
+  source: ChangeSetSource;
+  restoreOfSnapshot: number | null;
+  scheduledFor: string | null;
+  /** Connection whose deploy is triggered (pinned to the shipped snapshot) after the set ships. */
+  deploymentConnectionId: string | null;
+  deploymentRunId: string | null;
+  shippedAt: string | null;
+  /** The publication snapshot the set went live in. */
+  shippedSnapshot: number | null;
+  schemaVersionAfter: number | null;
+  error: ChangeSetError | null;
+  entryItemCount: number;
+  schemaItemCount: number;
+  createdBy: ChangeSetActor;
+  createdAt: string;
+  updatedAt: string;
+  version: number;
+};
+type ChangeSet = ChangeSetSummary & {
+  items: ChangeSetItem[];
+};
+type ChangeSetQuery = {
+  /** Comma-separated statuses; default: everything except `discarded`. */
+  status?: string;
+  cursor?: string;
+  limit?: number;
+};
+type CreateChangeSetInput = {
+  title: string;
+  description?: string;
+  /** `builder`: a one-item set the model builder ships at once ("Review & ship now"). Default `manual`. */
+  source?: 'manual' | 'builder';
+};
+type UpdateChangeSetInput = {
+  title?: string;
+  description?: string;
+  deploymentConnectionId?: string | null;
+  expectedVersion: number;
+};
+type AddChangeSetEntryInput = {
+  modelKey: string;
+  entryId: string;
+  /** Omit for non-localized models (and for the default locale). */
+  locale?: string;
+  action: PublicationAction;
+};
+type SchemaDraft = {
+  id: string;
+  changeSetId: string;
+  definitionId: string;
+  category: DefinitionCategory;
+  operation: SchemaOperation;
+  baseVersion: number | null;
+  /** Null when the draft deletes the definition. */
+  definition: SchemaDefinition | null;
+  version: number;
+  updatedBy: ChangeSetActor;
+  createdAt: string;
+  updatedAt: string;
+};
+type PutSchemaDraftInput = {
+  category: DefinitionCategory;
+  /** The whole proposed definition, or null to delete the definition when the set ships. */
+  definition: DefinitionPayload | null;
+  /** The active version the edit is based on (null: a new definition). */
+  baseVersion: number | null;
+  /** The draft row version the caller saw; omit when creating the draft. */
+  expectedDraftVersion?: number;
+};
+type FieldDiff = {
+  fieldId: string;
+  apiKey: string;
+  label: string;
+  before: unknown;
+  after: unknown;
+};
+type ReviewIssue = {
+  path: string;
+  code: string;
+  message: string;
+};
+type ReviewEntryItem = {
+  itemId: string;
+  entryId: string;
+  modelId: string;
+  modelKey: string | null;
+  title: string | null;
+  locale: string;
+  action: PublicationAction;
+  sourceRevisionId: string | null;
+  /** Send back in `ship.itemVersions` (strict ship). Null when the item does not publish the draft. */
+  draftVersion: number | null;
+  liveState: 'unpublished' | 'published' | 'modified' | 'missing';
+  fields: FieldDiff[];
+  issues: ReviewIssue[];
+};
+type ReviewSchemaItem = {
+  itemId: string;
+  draftId: string;
+  definitionId: string;
+  category: DefinitionCategory;
+  apiKey: string;
+  operation: SchemaOperation;
+  baseVersion: number | null;
+  activeVersion: number | null;
+  /** The active version moved since the draft was based on it: shipping refuses until it is rebased. */
+  stale: boolean;
+  plan: ChangePlan | null;
+  impact: PlanImpact | null;
+  issues: ReviewIssue[];
+  alsoChangedIn: Array<{
+    id: string;
+    title: string;
+  }>;
+};
+declare const NOT_RESTORABLE_REASONS: readonly ["entry_deleted", "model_missing", "publishing_disabled", "localization_changed", "locale_missing", "invalid", "unique_conflict"];
+type NotRestorableReason = (typeof NOT_RESTORABLE_REASONS)[number];
+type NotRestorable = {
+  entryId: string;
+  modelId: string;
+  modelKey: string | null;
+  locale: string;
+  reason: NotRestorableReason;
+  detail: string;
+};
+type FieldConsumer = {
+  /** `token:<id>`, `app_users` or `anonymous`. */
+  principalKey: string;
+  label: string | null;
+  reads: number;
+  lastReadAt: string | null;
+  /** `implicit`: the reader requested the whole model (no field selection). */
+  selection: 'explicit' | 'implicit';
+};
+type FieldConsumers = {
+  modelId: string;
+  fieldId: string;
+  apiKey: string;
+  consumers: FieldConsumer[];
+};
+type ChangeSetReview = {
+  changeSet: ChangeSet;
+  entries: ReviewEntryItem[];
+  schema: ReviewSchemaItem[];
+  notRestorable: NotRestorable[];
+  consumers: FieldConsumers[];
+  usageDays: number;
+  checks: {
+    breaking: boolean;
+    destructive: boolean;
+    blocking: ReviewIssue[];
+    warnings: ReviewIssue[];
+  };
+  /** Fixed notices, e.g. `NEW_FIELDS_AFTER_SHIP`. */
+  notices: string[];
+};
+type ShipChangeSetInput = {
+  expectedVersion: number;
+  acknowledgeBreaking?: boolean;
+  acknowledgeDestructive?: boolean;
+  /** Draft versions the review showed; a moved draft makes the ship refuse with 409 CHANGE_SET_STALE. */
+  itemVersions?: Array<{
+    itemId: string;
+    draftVersion: number;
+  }>;
+};
+type ScheduleChangeSetInput = {
+  at: string;
+  expectedVersion: number;
+  acknowledgeBreaking?: boolean;
+  acknowledgeDestructive?: boolean;
+};
+type ChangeSetTimelineEvent = {
+  at: string;
+  kind: string;
+  actor: ChangeSetActor | null;
+  message: string | null;
+  snapshot: number | null;
+  deploymentRunId: string | null;
+  /** `item.changedAfterReview`: the entry whose draft moved between review and a scheduled ship. */
+  item: {
+    entryId: string;
+    locale: string;
+    fromVersion: number;
+    toVersion: number;
+  } | null;
+};
+type UnassignedEntry = {
+  entryId: string;
+  modelId: string;
+  modelKey: string | null;
+  title: string | null;
+  locale: string;
+  status: 'draft' | 'modified';
+  updatedAt: string;
+};
+declare const SNAPSHOT_SOURCES: readonly ["publish", "unpublish", "delete", "schedule", "change_set", "schema", "conversion", "import", "legacy"];
+type SnapshotSource = (typeof SNAPSHOT_SOURCES)[number];
+type Snapshot = {
+  seq: number;
+  schemaVersion: number | null;
+  source: SnapshotSource;
+  changeSetId: string | null;
+  changeSetTitle: string | null;
+  actor: {
+    type: string;
+    id: string | null;
+  };
+  changedEntries: number;
+  deploymentRuns: Array<{
+    id: string;
+    connectionId: string;
+    status: DeploymentRunStatus;
+  }>;
+  createdAt: string;
+};
+type SnapshotPage = Page<Snapshot> & {
+  current: number;
+};
+type SnapshotQuery = {
+  cursor?: string;
+  limit?: number;
+};
+//#endregion
+//#region src/admin/types.d.ts
+/**
+ * Admin identity API shapes (package B, build plan §4.B), mirroring the TypeBox route schemas in
+ * apps/api/src/routes/admin/** and routes/schemas/adminIdentity.ts. JSON is camelCase; timestamps are ISO-8601.
+ */
+type AdminUserStatus = 'active' | 'disabled';
+/** A role held on one site, or on every site (`siteId` null). */
+type RoleAssignment = {
+  roleId: string;
+  siteId: string | null;
+};
+type AdminUser = {
+  id: string;
+  email: string;
+  name: string;
+  status: AdminUserStatus;
+  /** Where each role applies. */
+  assignments: RoleAssignment[];
+  /** Deprecated: the distinct roles of `assignments`, on any site. */
+  roleIds: string[];
+  lastLoginAt: string | null;
+  createdAt: string;
+  updatedAt: string;
+};
+declare const CONTENT_ACTIONS: readonly ["read", "create", "update", "delete", "publish", "schemaManage"];
+type ContentAction = (typeof CONTENT_ACTIONS)[number];
+/**
+ * Network actions: about the whole instance. Only roles assigned on every site grant them, so a role held
+ * on one site never reaches the network.
+ */
+declare const NETWORK_ACTIONS: readonly ["schema.create", "users.manage", "roles.manage", "audit.read", "sites.manage"];
+type NetworkAction = (typeof NETWORK_ACTIONS)[number];
+/** Site actions: about one site's library, tokens and publishing. */
+declare const SITE_ACTIONS: readonly ["tokens.manage", "media.read", "media.write", "media.manage", "publishing.manage", "webhooks.manage", "deployments.manage", "deployments.trigger", "changes.manage", "changes.ship"];
+type SiteAction = (typeof SITE_ACTIONS)[number];
+/** Actions not scoped to a model: network actions and site actions. */
+declare const GLOBAL_ACTIONS: readonly ["schema.create", "users.manage", "roles.manage", "tokens.manage", "audit.read", "sites.manage", "media.read", "media.write", "media.manage", "publishing.manage", "webhooks.manage", "deployments.manage", "deployments.trigger", "changes.manage", "changes.ship"];
+type GlobalAction = (typeof GLOBAL_ACTIONS)[number];
+type PermissionAction = ContentAction | GlobalAction;
+type RoleSummary = {
+  id: string;
+  key: string;
+  name: string;
+};
+/** Returned whenever a session starts (setup, login, accepting an invitation). */
+type SessionStarted = {
+  user: AdminUser;
+  csrfToken: string;
+};
+type MeResponse = {
+  user: AdminUser;
+  roles: RoleSummary[];
+  /** The site this response is about: the request's `Shapio-Site`, else the primary site. */
+  site: SiteSummary;
+  /** Every site this admin holds a role on (all of them for a role assigned on every site). */
+  sites: SiteSummary[];
+  /** Network actions (roles assigned on every site only). */
+  networkPermissions: NetworkAction[];
+  /** Site actions on the request's site. */
+  sitePermissions: SiteAction[];
+  /** `networkPermissions` and `sitePermissions` together. */
+  globalPermissions: GlobalAction[];
+  /** Content actions per model ID on the request's site (models without any action are left out). */
+  modelPermissions: Record<string, ContentAction[]>;
+  /** How the server sends email: `console` writes it to the server log (no real delivery is set up). */
+  emailDelivery: EmailDelivery;
+  csrfToken: string;
+};
+type EmailDelivery = 'console' | 'smtp';
+type SetupStatusResponse = {
+  /** No admin exists yet. */
+  required: boolean;
+  /** SETUP_REQUIRE_TOKEN is set: setup also needs the one-time token from the server log. */
+  requiresToken: boolean;
+};
+/** `token` is needed only when the server requires it (`requiresToken`); otherwise it is ignored. */
+type SetupInput = {
+  token?: string;
+  email: string;
+  name: string;
+  password: string;
+};
+type LoginInput = {
+  email: string;
+  password: string;
+};
+type CsrfResponse = {
+  csrfToken: string;
+};
+type UpdateProfileInput = {
+  name: string;
+};
+type ChangePasswordInput = {
+  currentPassword: string;
+  newPassword: string;
+};
+type PasswordResetRequestInput = {
+  email: string;
+};
+type PasswordResetConfirmInput = {
+  token: string;
+  password: string;
+};
+type AcceptInvitationInput = {
+  token: string;
+  name: string;
+  password: string;
+};
+type InspectInvitationResponse = {
+  email: string;
+  expiresAt: string;
+};
+type AdminSession = {
+  id: string;
+  current: boolean;
+  ip: string | null;
+  userAgent: string | null;
+  createdAt: string;
+  lastSeenAt: string;
+  expiresAt: string;
+};
+type Invitation = {
+  id: string;
+  email: string;
+  /** The role assignments the invitee gets on accepting. */
+  assignments: RoleAssignment[];
+  /** Deprecated: the distinct roles of `assignments`. */
+  roleIds: string[];
+  invitedBy: string | null;
+  expiresAt: string;
+  createdAt: string;
+};
+/** A fresh accept link, shown once; issuing it makes earlier links (emailed or copied) stop working. */
+type InvitationLink = {
+  acceptUrl: string;
+  expiresAt: string;
+};
+/**
+ * Either `assignments` or (deprecated) `roleIds`, meaning those roles on every site; never both. Updating
+ * either replaces every assignment.
+ */
+type AssignmentsInput = {
+  assignments: RoleAssignment[];
+  roleIds?: never;
+} | {
+  roleIds: string[];
+  assignments?: never;
+};
+type InviteUserInput = {
+  email: string;
+} & AssignmentsInput;
+type UpdateAdminUserInput = {
+  name?: string;
+  status?: AdminUserStatus;
+} & (AssignmentsInput | {
+  assignments?: never;
+  roleIds?: never;
+});
+type RoleKind = 'admin' | 'delivery';
+type RoleCondition = 'ownedByPrincipal';
+type RolePermission = {
+  action: PermissionAction;
+  /** `null` grants the action on every model (and is required for global actions). */
+  modelId: string | null;
+  condition: RoleCondition | null;
+  /** `null` = every field; otherwise only these stable field IDs. */
+  fieldIds: string[] | null;
+};
+type Role = {
+  id: string;
+  key: string;
+  name: string;
+  description: string;
+  kind: RoleKind;
+  isSystem: boolean;
+  /** Optimistic-concurrency version: send it back as `expectedVersion` on update. */
+  version: number;
+  permissions: RolePermission[];
+  createdAt: string;
+  updatedAt: string;
+};
+type CreateRoleInput = {
+  key: string;
+  name: string;
+  description?: string;
+  kind?: RoleKind;
+  permissions: RolePermission[];
+};
+type UpdateRoleInput = {
+  expectedVersion: number;
+  name?: string;
+  description?: string;
+  permissions?: RolePermission[];
+};
+type ApiToken = {
+  id: string;
+  name: string;
+  /** First characters of the token (`shp_` + 6), for telling tokens apart. */
+  tokenPrefix: string;
+  roleId: string;
+  scope: RoleKind;
+  /** The token's site; null for a network admin token (its role applies on every site). */
+  siteId: string | null;
+  createdBy: string | null;
+  expiresAt: string | null;
+  lastUsedAt: string | null;
+  revokedAt: string | null;
+  createdAt: string;
+};
+type CreateApiTokenInput = {
+  name: string;
+  roleId: string;
+  expiresAt?: string | null;
+  /**
+   * A network admin token (every site and network actions; needs `users.manage`). Omitted: a network token
+   * when the creator may create one, else a token of the request's site. Delivery tokens are always per site.
+   */
+  network?: boolean;
+};
+/** `token` is the plain secret, returned once at creation and never again. */
+type CreatedApiToken = {
+  token: string;
+  apiToken: ApiToken;
+};
+type AuditActorType = 'admin' | 'app_user' | 'token' | 'anonymous' | 'system';
+type AuditEvent = {
+  id: string;
+  occurredAt: string;
+  actorType: AuditActorType;
+  actorId: string | null;
+  /** The acting admin's (or app user's) display name, when the actor is a known account. */
+  actorName: string | null;
+  actorEmail: string | null;
+  action: string;
+  targetType: string | null;
+  targetId: string | null;
+  outcome: 'success' | 'failure';
+  requestId: string | null;
+  ip: string | null;
+  metadata: unknown;
+};
+/** Newest first, cursor-paginated. */
+type AuditQuery = {
+  cursor?: string;
+  limit?: number;
+  actorType?: AuditActorType;
+  actorId?: string;
+  action?: string;
+  actionPrefix?: string;
+  targetType?: string;
+  targetId?: string;
+  outcome?: 'success' | 'failure';
+  from?: string;
+  to?: string;
+};
+type AuditPage = {
+  items: AuditEvent[];
+  nextCursor: string | null;
+};
+//#endregion
+//#region src/admin/appUsersTypes.d.ts
+type AdminAppUser = {
+  id: string;
+  email: string;
+  name: string;
+  confirmed: boolean;
+  blocked: boolean;
+  /** False for accounts that only sign in with an OAuth provider. */
+  hasPassword: boolean;
+  /** OAuth providers linked to the account (`google`, `github`). */
+  providers: string[];
+  /** Custom app roles; `authenticated` applies to every app user implicitly. */
+  roleIds: string[];
+  lastLoginAt: string | null;
+  createdAt: string;
+  updatedAt: string;
+};
+/** Newest first, cursor-paginated; `search` matches email or name. */
+type AppUserQuery = {
+  search?: string;
+  cursor?: string;
+  limit?: number;
+};
+type AppUserPage = {
+  items: AdminAppUser[];
+  nextCursor: string | null;
+};
+type UpdateAppUserInput = {
+  blocked?: boolean;
+  roleIds?: string[];
+};
+/** What app roles may grant: content actions only. */
+declare const APP_CONTENT_ACTIONS: readonly ["read", "create", "update", "delete", "publish"];
+type AppContentAction = (typeof APP_CONTENT_ACTIONS)[number];
+/** Built-in app role keys: `public` applies to anonymous callers, `authenticated` to every app user. */
+declare const BUILT_IN_APP_ROLE_KEYS: readonly ["public", "authenticated"];
+type AppRolePermission = {
+  action: AppContentAction;
+  /** `null` grants the action on every model, including ones created later. */
+  modelId: string | null;
+  condition: RoleCondition | null;
+  /** `null` = every public field; otherwise exactly these stable field IDs (non-public ones included). */
+  fieldIds: string[] | null;
+};
+type AppRole = {
+  id: string;
+  key: string;
+  name: string;
+  description: string;
+  isSystem: boolean;
+  version: number;
+  permissions: AppRolePermission[];
+  userCount: number;
+  createdAt: string;
+  updatedAt: string;
+};
+type CreateAppRoleInput = {
+  key: string;
+  name: string;
+  description?: string;
+  permissions: AppRolePermission[];
+};
+/** Built-in roles accept `permissions` only. */
+type UpdateAppRoleInput = {
+  expectedVersion: number;
+  name?: string;
+  description?: string;
+  permissions?: AppRolePermission[];
+};
+//#endregion
+//#region src/admin/mediaTypes.d.ts
+/** Media library types (package G, `apps/api/src/routes/admin/media/schemas.ts`). Dates are ISO-8601 strings. */
+type MediaVisibility = 'public' | 'private';
+type MediaAssetStatus = 'processing' | 'ready' | 'failed';
+type MediaVariantStatus = 'pending' | 'ready' | 'failed';
+type MediaStorageDriver = 'local' | 's3';
+type MediaFocalPoint = {
+  x: number;
+  y: number;
+};
+type MediaVariant = {
+  name: string;
+  width: number | null;
+  height: number | null;
+  format: string;
+  mimeType: string;
+  sizeBytes: number | null;
+  status: MediaVariantStatus;
+  /** Present once the variant is ready. */
+  url: string | null;
+};
+type MediaAsset = {
+  id: string;
+  folderId: string | null;
+  filename: string;
+  mimeType: string;
+  sizeBytes: number;
+  width: number | null;
+  height: number | null;
+  checksumSha256: string | null;
+  alt: string;
+  caption: string;
+  focalPoint: MediaFocalPoint | null;
+  visibility: MediaVisibility;
+  /** `processing` until the checksum, dimensions and variants are done. */
+  status: MediaAssetStatus;
+  processingError: string | null;
+  storageDriver: MediaStorageDriver;
+  /** Stable for public assets; signed and expiring (`urlExpiresAt`) for private ones. */
+  url: string;
+  urlExpiresAt: string | null;
+  variants: MediaVariant[];
+  createdBy: string | null;
+  createdAt: string;
+  updatedAt: string;
+  version: number;
+};
+type MediaAssetQuery = {
+  /** A folder ID, or `root` for assets in no folder. Omit for every folder. */
+  folder?: string;
+  /** `image/png` or `image/*`. */
+  mimeType?: string;
+  search?: string;
+  cursor?: string;
+  limit?: number;
+};
+type MediaAssetPage = {
+  items: MediaAsset[];
+  nextCursor: string | null;
+};
+type UpdateMediaAssetInput = {
+  expectedVersion: number;
+  alt?: string;
+  caption?: string;
+  filename?: string;
+  focalPoint?: MediaFocalPoint | null;
+  folderId?: string | null;
+  /** Needs `media.manage`. */
+  visibility?: MediaVisibility;
+};
+type MoveMediaAssetsInput = {
+  assetIds: string[];
+  folderId: string | null;
+};
+type MoveMediaAssetsResult = {
+  moved: string[];
+  skipped: string[];
+};
+type MediaUsage = {
+  entryId: string;
+  modelId: string;
+  fieldId: string;
+  locale: string;
+  state: 'draft' | 'published';
+  since: string;
+};
+type MediaUsagePage = {
+  items: MediaUsage[];
+  total: number;
+};
+type MediaFolder = {
+  id: string;
+  parentId: string | null;
+  name: string;
+  assetCount: number;
+  version: number;
+  createdAt: string;
+  updatedAt: string;
+};
+type CreateMediaFolderInput = {
+  name: string;
+  parentId?: string | null;
+};
+type UpdateMediaFolderInput = {
+  expectedVersion: number;
+  name?: string;
+  parentId?: string | null;
+};
+type CreateUploadInput = {
+  filename: string;
+  mimeType: string;
+  sizeBytes: number;
+  folderId?: string | null;
+  visibility?: MediaVisibility;
+};
+type ReplaceUploadInput = {
+  filename: string;
+  mimeType: string;
+  sizeBytes: number;
+};
+/**
+ * Step 1 of an upload. Send the file as `multipart/form-data` to `upload.url`: every entry of `fields`
+ * first, then the file as `fileField` (see `buildUploadForm`). The same for every storage driver: the URL
+ * is either the bucket (presigned POST) or Shapio's own upload route. Then call `uploads.confirm`.
+ */
+type UploadGrant = {
+  grantId: string;
+  assetId: string;
+  expiresAt: string;
+  maxSizeBytes: number;
+  upload: {
+    method: 'POST';
+    url: string;
+    fields: Record<string, string>;
+    fileField: 'file';
+  };
+};
+//#endregion
+//#region src/admin/schemaSyncTypes.d.ts
+/**
+ * Schema sync (`/api/admin/schema/export|apply`, ADR 0002): the pull format `shapio schema pull` writes and
+ * the three-way apply `shapio schema apply` sends. Shared by the CLI and @shapio/mcp.
+ */
+type SchemaExport = {
+  schemaVersion: number;
+  definitions: Array<{
+    definition: SchemaDefinition;
+    version: number;
+    hash: string;
+  }>;
+};
+type SchemaSyncResult = {
+  definitionId: string;
+  apiKey: string;
+  kind: SchemaDefinition['kind'];
+  decision: SyncDecision;
+  changes: SchemaChange[];
+  outcome?: 'activated' | 'pending' | 'skipped';
+  version?: number | null;
+  changeId?: string;
+  plan?: {
+    summary?: {
+      breaking?: boolean;
+      destructive?: boolean;
+      prerequisites?: string[];
+    };
+  };
+};
+type SchemaApplyResult = {
+  schemaVersion: number;
+  dryRun: boolean;
+  results: SchemaSyncResult[];
+};
+type SchemaApplyInput = {
+  /** Definition files as read (untrusted JSON; the server parses and validates them). */
+  definitions: unknown[];
+  /** The lock file the files came from: the versions the local copy is based on. */
+  base: LockFile;
+  prune: boolean;
+  dryRun: boolean;
+  acknowledgeBreaking: boolean;
+  acknowledgeDestructive: boolean;
+};
+//#endregion
+//#region src/snapshotTypes.d.ts
+/** Publication snapshots for delivery callers (`/api/snapshots`, apps/api/src/routes/snapshots). */
+type SnapshotChangeKind = 'published' | 'updated' | 'unpublished';
+type SnapshotChangesQuery = {
+  from: number;
+  /** Defaults to the current snapshot. */
+  to?: number;
+  /** `nextCursor` of the previous page. */
+  after?: string;
+  /** Entries per page (default 100, at most 500). */
+  limit?: number;
+};
+type SnapshotChange = {
+  id: string;
+  modelId: string;
+  /** The model's API ID. */
+  modelKey: string;
+  /** The delivery route key (`/api/content/<routeKey>`). */
+  routeKey: string;
+  /** From the revision live at `to` (at `from` when unpublished); null without a readable title. */
+  title: string | null;
+  /** The cover image's media asset ID, when the model has a readable cover. */
+  coverMediaId: string | null;
+  locales: Array<{
+    locale: string;
+    change: SnapshotChangeKind;
+    /** The revision live at `to`, or at `from` for `unpublished`. */
+    revisionId: string | null;
+  }>;
+};
+type SnapshotChangesPage = {
+  from: number;
+  to: number;
+  /** Schema version recorded with each end; when they differ, rebuild the affected models. */
+  schemaVersions: {
+    from: number | null;
+    to: number | null;
+  };
+  items: SnapshotChange[];
+  nextCursor: string | null;
+};
+type CurrentSnapshot = {
+  snapshot: number;
+  schemaVersion: number;
+  publishedAt: string | null;
+};
+//#endregion
+//#region src/types.d.ts
+type HealthResponse = {
+  status: 'ok';
+};
+type CheckStatus = 'ok' | 'failing';
+type ReadyResponse = {
+  status: 'ready';
+  checks: {
+    database: CheckStatus;
+    migrations: CheckStatus;
+  };
+};
+type VersionResponse = {
+  name: 'shapio';
+  version: string;
+  node: string;
+};
+//#endregion
+//#region src/client.d.ts
+type ShapioClientOptions = {
+  /** Base URL of the Shapio server including any BASE_PATH, e.g. `https://cms.example.com/cms`. */
+  baseUrl: string;
+  /** API token sent as a bearer token. */
+  token?: string;
+  /** Defaults to the global fetch; injectable for tests and custom agents. */
+  fetch?: typeof globalThis.fetch;
+  /** Fetch credentials mode. The admin uses `same-origin` so its session cookie is sent. */
+  credentials?: FetchCredentials;
+  /** Extra headers computed per request (the admin's CSRF token). */
+  headers?: () => Readonly<Record<string, string>>;
+  /**
+   * The site key (multi-site instances). Delivery reads send it as `?site=`, every other request as the
+   * `Shapio-Site` header. Leave it out to use the token's site, else the primary site. A site token only
+   * ever reads its own site: naming another one is refused (403 `SITE_MISMATCH`).
+   */
+  site?: string;
+};
+declare const createClient: ({ baseUrl, token, fetch, credentials, headers, site }: ShapioClientOptions) => {
+  /**
+   * Any Shapio route, e.g. the delivery API. Delivery paths use the model's route key: a collection's
+   * plural API ID (`request('/api/content/articles')`, `/api/content/articles/<id>`), a singleton's API ID
+   * (`/api/content/homepage`). The admin API (`admin.*`) always uses the singular API ID.
+   */
+  request: RequestFn;
+  system: {
+    health: (signal?: AbortSignal) => Promise<HealthResponse>;
+    ready: (signal?: AbortSignal) => Promise<ReadyResponse>;
+    version: (signal?: AbortSignal) => Promise<VersionResponse>;
+  };
+  /** Published content (the delivery API), typed by the caller. */
+  delivery: {
+    list: <T = Record<string, unknown>>(routeKey: string, query?: DeliveryListQuery) => Promise<DeliveryList<T>>;
+    singleton: <T = Record<string, unknown>>(apiKey: string, query?: DeliveryGetQuery) => Promise<DeliveryItem<T>>;
+    get: <T = Record<string, unknown>>(routeKey: string, id: string, query?: DeliveryGetQuery) => Promise<DeliveryItem<T>>;
+  };
+  admin: {
+    assist: {
+      status: () => Promise<AssistStatus>;
+      altText: (body: AltTextInput) => Promise<AltTextResult>;
+      summarize: (body: SummarizeInput) => Promise<AssistTextResult>;
+      translate: (body: TranslateInput) => Promise<TranslateResult>;
+      rewrite: (body: RewriteInput) => Promise<AssistTextResult>;
+      schemaDraft: (body: SchemaDraftInput) => Promise<SchemaDraftResult>;
+      proposeContentOps: (body: ContentOpsInput) => Promise<{
+        runId: string;
+      }>;
+      contentOpsRun: (runId: string) => Promise<ContentOpsRun>;
+    };
+    sites: {
+      list: () => Promise<Site[]>;
+      get: (id: string) => Promise<Site>;
+      create: (body: CreateSiteInput) => Promise<Site>;
+      update: (id: string, body: UpdateSiteInput) => Promise<Site>;
+      remove: (id: string) => Promise<void>;
+      appRoles: {
+        get: (id: string) => Promise<SiteAppRoles>;
+        set: (id: string, body: SetSiteAppRolesInput) => Promise<SiteAppRoles>;
+      };
+    };
+    usage: {
+      fields: (query: FieldUsageQuery) => Promise<FieldUsageResponse>;
+    };
+    changeSets: {
+      list: (query?: ChangeSetQuery) => Promise<Page<ChangeSetSummary>>;
+      get: (id: string) => Promise<ChangeSet>;
+      create: (body: CreateChangeSetInput) => Promise<ChangeSet>;
+      update: (id: string, body: UpdateChangeSetInput) => Promise<ChangeSet>;
+      discard: (id: string) => Promise<ChangeSet>;
+      addEntry: (id: string, body: AddChangeSetEntryInput) => Promise<ChangeSet>;
+      removeItem: (id: string, itemId: string) => Promise<ChangeSet>;
+      getSchemaDraft: (id: string, definitionId: string) => Promise<SchemaDraft>;
+      putSchemaDraft: (id: string, definitionId: string, body: PutSchemaDraftInput) => Promise<SchemaDraft>;
+      removeSchemaDraft: (id: string, definitionId: string) => Promise<ChangeSet>;
+      review: (id: string) => Promise<ChangeSetReview>;
+      ship: (id: string, body: ShipChangeSetInput) => Promise<ChangeSet>;
+      schedule: (id: string, body: ScheduleChangeSetInput) => Promise<ChangeSet>;
+      unschedule: (id: string) => Promise<ChangeSet>;
+      timeline: (id: string) => Promise<ChangeSetTimelineEvent[]>;
+      unassigned: (query?: {
+        cursor?: string;
+        limit?: number;
+      }) => Promise<Page<UnassignedEntry>>;
+    };
+    snapshots: {
+      list: (query?: SnapshotQuery) => Promise<SnapshotPage>;
+      get: (seq: number) => Promise<Snapshot>;
+      restore: (seq: number) => Promise<ChangeSet>;
+    };
+    appUsers: {
+      list: (query?: AppUserQuery) => Promise<AppUserPage>;
+      get: (id: string) => Promise<AdminAppUser>;
+      update: (id: string, body: UpdateAppUserInput) => Promise<AdminAppUser>;
+      remove: (id: string) => Promise<void>;
+      resendConfirmation: (id: string) => Promise<void>;
+    };
+    appRoles: {
+      list: () => Promise<AppRole[]>;
+      get: (id: string) => Promise<AppRole>;
+      create: (body: CreateAppRoleInput) => Promise<AppRole>;
+      update: (id: string, body: UpdateAppRoleInput) => Promise<AppRole>;
+      remove: (id: string) => Promise<void>;
+    };
+    jobs: {
+      list: (query?: JobQuery) => Promise<Page<Job>>;
+      summary: () => Promise<JobSummary>;
+      get: (id: string) => Promise<Job>;
+      retry: (id: string) => Promise<Job>;
+    };
+    schedules: {
+      list: (query?: ScheduleQuery) => Promise<Page<ScheduledPublication>>;
+      create: (body: CreateScheduleInput) => Promise<ScheduledPublication>;
+      cancel: (id: string) => Promise<void>;
+    };
+    webhooks: {
+      list: () => Promise<Webhook[]>;
+      events: () => Promise<WebhookEventType[]>;
+      get: (id: string) => Promise<Webhook>;
+      create: (body: CreateWebhookInput) => Promise<WebhookWithSecret>;
+      update: (id: string, body: UpdateWebhookInput) => Promise<Webhook>;
+      remove: (id: string) => Promise<void>;
+      rotateSecret: (id: string) => Promise<WebhookWithSecret>;
+      test: (id: string) => Promise<WebhookDelivery>;
+      deliveries: (id: string, query?: {
+        cursor?: string;
+        limit?: number;
+      }) => Promise<Page<WebhookDelivery>>;
+      redeliver: (id: string, deliveryId: string) => Promise<WebhookDelivery>;
+    };
+    deployments: {
+      connections: {
+        list: () => Promise<DeploymentConnection[]>;
+        get: (id: string) => Promise<DeploymentConnection>;
+        create: (body: CreateDeploymentConnectionInput) => Promise<DeploymentConnectionCreated>;
+        update: (id: string, body: UpdateDeploymentConnectionInput) => Promise<DeploymentConnection>;
+        remove: (id: string) => Promise<void>;
+        test: (id: string) => Promise<ConnectionTestResult>;
+        trigger: (id: string) => Promise<DeploymentRun>;
+      };
+      runs: {
+        list: (query?: DeploymentRunQuery) => Promise<Page<DeploymentRun>>;
+        get: (id: string) => Promise<DeploymentRun>;
+        retry: (id: string) => Promise<DeploymentRun>;
+      };
+    };
+    preview: {
+      tokens: {
+        list: (query?: {
+          entryId?: string;
+        }) => Promise<PreviewToken[]>;
+        create: (body: CreatePreviewTokenInput) => Promise<PreviewTokenCreated>;
+        revoke: (id: string) => Promise<void>;
+      };
+      targets: () => Promise<PreviewTarget[]>;
+      open: (body: OpenPreviewInput) => Promise<OpenPreviewResult>;
+    };
+    preflight: {
+      run: (modelKey: string, id: string, body?: PreflightInput) => Promise<PreflightResponse>;
+    };
+    contentHealth: {
+      list: (query?: ContentHealthQuery) => Promise<ContentHealthPage>;
+      summary: () => Promise<ContentHealthSummary>;
+    };
+    presence: {
+      heartbeat: (modelKey: string, id: string, body: PresenceHeartbeatInput) => Promise<EntryPresence>;
+      entry: (modelKey: string, id: string) => Promise<EntryPresence>;
+      model: (modelKey: string) => Promise<ModelPresence>;
+      leave: (modelKey: string, id: string, tabId: string) => Promise<void>;
+    };
+    contentCounts: {
+      list: () => Promise<ContentCounts>;
+    };
+    content: {
+      list: (modelKey: string, query?: ContentListQuery) => Promise<AdminEntryPage>;
+      get: (modelKey: string, id: string, { locale }?: {
+        locale?: string;
+      }) => Promise<AdminEntry>;
+      create: (modelKey: string, body: CreateEntryInput) => Promise<AdminEntry>;
+      update: (modelKey: string, id: string, body: UpdateEntryInput) => Promise<AdminEntry>;
+      remove: (modelKey: string, id: string) => Promise<void>;
+      duplicate: (modelKey: string, id: string) => Promise<AdminEntry>;
+      publish: (modelKey: string, id: string, body?: EntryLocalesInput) => Promise<AdminEntry>;
+      unpublish: (modelKey: string, id: string, body?: EntryLocalesInput) => Promise<AdminEntry>;
+      revisions: (modelKey: string, id: string, { locale }?: {
+        locale?: string;
+      }) => Promise<RevisionSummary[]>;
+      revision: (modelKey: string, id: string, revisionId: string) => Promise<RevisionDetail>;
+      restore: (modelKey: string, id: string, revisionId: string, expectedVersion: number) => Promise<AdminEntry>;
+    };
+    extensions: {
+      editors: () => Promise<EditorManifest>;
+    };
+    media: {
+      folders: {
+        list: () => Promise<MediaFolder[]>;
+        create: (body: CreateMediaFolderInput) => Promise<MediaFolder>;
+        update: (id: string, body: UpdateMediaFolderInput) => Promise<MediaFolder>;
+        remove: (id: string) => Promise<void>;
+      };
+      assets: {
+        list: (query?: MediaAssetQuery) => Promise<MediaAssetPage>;
+        get: (id: string) => Promise<MediaAsset>;
+        update: (id: string, body: UpdateMediaAssetInput) => Promise<MediaAsset>;
+        remove: (id: string, { force }?: {
+          force?: boolean;
+        }) => Promise<void>;
+        move: (body: MoveMediaAssetsInput) => Promise<MoveMediaAssetsResult>;
+        usage: (id: string) => Promise<MediaUsagePage>;
+        replace: (id: string, body: ReplaceUploadInput) => Promise<UploadGrant>;
+      };
+      uploads: {
+        create: (body: CreateUploadInput) => Promise<UploadGrant>;
+        confirm: (grantId: string) => Promise<MediaAsset>;
+      };
+    };
+    models: {
+      list: () => Promise<DefinitionListItem[]>;
+      get: (id: string) => Promise<DefinitionDetail>;
+      create: (body: CreateDefinitionInput) => Promise<ChangeOutcome>;
+      planCreate: (definition: DefinitionPayload) => Promise<PlanPreview>;
+      update: (id: string, body: UpdateDefinitionInput) => Promise<ChangeOutcome>;
+      planUpdate: (id: string, body: PlanUpdateInput) => Promise<PlanPreview>;
+      remove: (id: string, expectedVersion: number) => Promise<ChangeOutcome>;
+      revisions: (id: string) => Promise<DefinitionRevision[]>;
+      changes: (id: string) => Promise<SchemaChangeJob[]>;
+    };
+    components: {
+      list: () => Promise<DefinitionListItem[]>;
+      get: (id: string) => Promise<DefinitionDetail>;
+      create: (body: CreateDefinitionInput) => Promise<ChangeOutcome>;
+      planCreate: (definition: DefinitionPayload) => Promise<PlanPreview>;
+      update: (id: string, body: UpdateDefinitionInput) => Promise<ChangeOutcome>;
+      planUpdate: (id: string, body: PlanUpdateInput) => Promise<PlanPreview>;
+      remove: (id: string, expectedVersion: number) => Promise<ChangeOutcome>;
+      revisions: (id: string) => Promise<DefinitionRevision[]>;
+      changes: (id: string) => Promise<SchemaChangeJob[]>;
+    };
+    schema: {
+      summary: () => Promise<SchemaSummary>;
+      change: (changeId: string) => Promise<SchemaChangeJob>;
+      export: () => Promise<SchemaExport>;
+      apply: (body: SchemaApplyInput) => Promise<SchemaApplyResult>;
+      settings: () => Promise<SchemaSettings>;
+      updateSettings: (body: UpdateSchemaSettingsInput) => Promise<SchemaSettings>;
+    };
+    locales: {
+      list: () => Promise<import("@shapio/schema").LocaleDefinition[]>;
+      create: (body: CreateLocaleInput) => Promise<import("@shapio/schema").LocaleDefinition>;
+      update: (code: string, body: UpdateLocaleInput) => Promise<import("@shapio/schema").LocaleDefinition>;
+      setDefault: (code: string, acknowledgeBreaking: boolean) => Promise<SetDefaultLocaleResult>;
+      remove: (code: string, acknowledgeDestructive: boolean) => Promise<DeleteLocaleResult>;
+    };
+    setup: {
+      status: () => Promise<SetupStatusResponse>;
+      complete: (body: SetupInput) => Promise<SessionStarted>;
+    };
+    auth: {
+      csrf: () => Promise<CsrfResponse>;
+      login: (body: LoginInput) => Promise<SessionStarted>;
+      logout: () => Promise<void>;
+      me: () => Promise<MeResponse>;
+      updateProfile: (body: UpdateProfileInput) => Promise<AdminUser>;
+      changePassword: (body: ChangePasswordInput) => Promise<CsrfResponse>;
+      requestPasswordReset: (body: PasswordResetRequestInput) => Promise<void>;
+      confirmPasswordReset: (body: PasswordResetConfirmInput) => Promise<void>;
+    };
+    sessions: {
+      list: () => Promise<AdminSession[]>;
+      revoke: (id: string) => Promise<void>;
+    };
+    users: {
+      list: () => Promise<AdminUser[]>;
+      get: (id: string) => Promise<AdminUser>;
+      update: (id: string, body: UpdateAdminUserInput) => Promise<AdminUser>;
+      remove: (id: string) => Promise<void>;
+      revokeSessions: (id: string) => Promise<void>;
+    };
+    invitations: {
+      list: () => Promise<Invitation[]>;
+      create: (body: InviteUserInput) => Promise<Invitation>;
+      revoke: (id: string) => Promise<void>;
+      link: (id: string) => Promise<InvitationLink>;
+      inspect: (token: string) => Promise<InspectInvitationResponse>;
+      accept: (body: AcceptInvitationInput) => Promise<SessionStarted>;
+    };
+    roles: {
+      list: () => Promise<Role[]>;
+      get: (id: string) => Promise<Role>;
+      create: (body: CreateRoleInput) => Promise<Role>;
+      update: (id: string, body: UpdateRoleInput) => Promise<Role>;
+      remove: (id: string) => Promise<void>;
+    };
+    tokens: {
+      list: () => Promise<ApiToken[]>;
+      create: (body: CreateApiTokenInput) => Promise<CreatedApiToken>;
+      revoke: (id: string) => Promise<void>;
+    };
+    audit: {
+      list: (query?: AuditQuery) => Promise<AuditPage>;
+    };
+  };
+  /** Publication snapshots and the diff between two (incremental builds). */
+  snapshots: {
+    current: () => Promise<CurrentSnapshot>;
+    changes: (query: SnapshotChangesQuery) => Promise<SnapshotChangesPage>;
+    allChanges: (query: Omit<SnapshotChangesQuery, "after">) => Promise<{
+      from: number;
+      to: number;
+      schemaVersions: {
+        from: number | null;
+        to: number | null;
+      };
+      items: SnapshotChange[];
+    }>;
+  };
+  /** End users of your sites and apps: sign-up, sign-in, tokens, OAuth. */
+  appAuth: {
+    register: (body: AppRegisterInput) => Promise<AppRegisterResult>;
+    login: (body: AppLoginInput) => Promise<AppSession>;
+    refresh: (refreshToken: string) => Promise<AppSession>;
+    logout: (refreshToken: string) => Promise<void>;
+    me: () => Promise<AppUser>;
+    updateMe: (body: {
+      name: string;
+    }) => Promise<AppUser>;
+    changePassword: (body: AppChangePasswordInput) => Promise<AppSession>;
+    deleteMe: (body?: {
+      password?: string;
+    }) => Promise<void>;
+    confirmEmail: (token: string) => Promise<void>;
+    resendConfirmation: (email: string) => Promise<void>;
+    requestPasswordReset: (email: string) => Promise<void>;
+    confirmPasswordReset: (body: {
+      token: string;
+      password: string;
+    }) => Promise<void>;
+    providers: () => Promise<AppOAuthProvider[]>;
+    oauthStartUrl: (provider: AppOAuthProvider, redirectTo: string, codeChallenge: string) => string;
+    exchangeCode: (code: string, codeVerifier: string) => Promise<AppSession>;
+  };
+};
+type ShapioClient = ReturnType<typeof createClient>;
+//#endregion
+//#region src/errors.d.ts
+/** The body every Shapio endpoint returns on failure. */
+type ShapioErrorBody = {
+  error: {
+    code: string;
+    message: string;
+    details?: unknown;
+  };
+};
+/** Thrown for any non-2xx response. `code` is Shapio's error code, or `HTTP_<status>` if the body had none. */
+declare class ShapioApiError extends Error {
+  readonly status: number;
+  readonly code: string;
+  readonly details: unknown;
+  constructor(status: number, body: unknown);
+}
+//#endregion
+//#region src/admin/assistTypes.d.ts
+/** Editor assists (plan agentic-ecosystem §A0). Agents propose, people ship: nothing here publishes. */
+type AssistProvider = 'anthropic' | 'openai' | 'openai-compatible';
+type AssistUsage = {
+  month: string;
+  runs: number;
+  inputTokens: number;
+  outputTokens: number;
+};
+/** `usage` only for admins with `changes.manage`; provider and model only while assist is on. */
+type AssistStatus = {
+  enabled: boolean;
+  provider?: AssistProvider;
+  model?: string;
+  usage?: AssistUsage;
+};
+type AltTextInput = {
+  assetId: string;
+  locale?: string;
+};
+type AltTextResult = {
+  alt: string;
+  model: string;
+};
+/** A model-written text; `truncated` when it was cut to the field's or the request's limit. */
+type AssistTextResult = {
+  text: string;
+  truncated: boolean;
+  model: string;
+};
+type SummarizeInput = {
+  modelKey: string;
+  entryId: string;
+  locale?: string;
+  fieldApiKey: string;
+};
+type TranslateInput = {
+  modelKey: string;
+  entryId: string;
+  from: string;
+  to: string;
+};
+type AssistIssue = {
+  path: string;
+  code: string;
+  message: string;
+};
+/** `data` is in the editor's save format: save it as the `to` locale's draft. */
+type TranslateResult = {
+  data: Record<string, unknown>;
+  issues: AssistIssue[];
+  model: string;
+};
+type RewriteInput = {
+  text: string;
+  instruction: string;
+  maxLength?: number;
+};
+type SchemaDraftInput = {
+  description: string;
+};
+/** New definitions with new stable IDs, in save order (references first). Nothing is written. */
+type SchemaDraftResult = {
+  definitions: SchemaDefinition[];
+  model: string;
+};
+declare const CONTENT_OPS_RULES: readonly ["altMissing", "localeMissing"];
+type ContentOpsRule = (typeof CONTENT_OPS_RULES)[number];
+type ContentOpsInput = {
+  rule: ContentOpsRule;
+  modelKey?: string;
+  fromLocale?: string;
+};
+type ContentOpsStatus = 'queued' | 'running' | 'succeeded' | 'failed';
+/** One library asset's proposed alt text; apply it with the media update at `assetVersion`. */
+type AltProposal = {
+  assetId: string;
+  filename: string;
+  currentAlt: string | null;
+  proposedAlt: string;
+  assetVersion: number;
+  findingCount: number;
+};
+/** A finding the run left alone, and why (an error code or a reason such as `publishesOnSave`). */
+type ContentOpsSkip = {
+  key: string;
+  entryId?: string;
+  assetId?: string;
+  locale?: string;
+  reason: string;
+  detail?: unknown;
+};
+type ContentOpsWritten = {
+  entryId: string;
+  modelKey: string;
+  locale: string;
+  version: number;
+};
+type AltMissingResult = {
+  rule: 'altMissing';
+  proposals: AltProposal[];
+  skipped: ContentOpsSkip[];
+};
+/** The drafts were written into the change set `changeSetId` (null when nothing was written). */
+type LocaleMissingResult = {
+  rule: 'localeMissing';
+  changeSetId: string | null;
+  fromLocale: string;
+  written: ContentOpsWritten[];
+  skipped: ContentOpsSkip[];
+};
+type ContentOpsResult = AltMissingResult | LocaleMissingResult;
+type ContentOpsRun = {
+  runId: string;
+  rule: ContentOpsRule;
+  status: ContentOpsStatus;
+  model: string;
+  createdAt: string;
+  finishedAt: string | null;
+  error: {
+    code: string;
+  } | null;
+  /** Once succeeded (null before, or partial progress while running). */
+  result: ContentOpsResult | null;
+};
+//#endregion
+//#region src/admin/editingTypes.d.ts
+/**
+ * Shapes of the entry document's endpoints (editor experience, E0b): publish pre-flight, content health
+ * findings, presence and per-model counts. Sentences are never sent: the admin builds them from `rule` and
+ * `params` with its translations.
+ */
+/** Health rules evaluated per entry (`apps/api/src/services/contentHealth.ts`). */
+declare const HEALTH_RULES: readonly ["requiredEmpty", "altMissing", "localeMissing", "relationMissing", "relationUnpublished", "uniqueConflict", "staleDraft", "unpublishedChanges"];
+type HealthRule = (typeof HEALTH_RULES)[number];
+/** Pre-flight adds the publish checks that are not health rules: validator issues and missing media. */
+type PreflightRule = HealthRule | 'invalid' | 'mediaMissing';
+type CheckSeverity = 'error' | 'warning';
+/** Values a sentence needs (field ID, asset ID, locale, counts…). */
+type CheckParams = Record<string, string | number | null>;
+type PreflightCheck = {
+  rule: PreflightRule;
+  /** Errors block publishing; warnings are informational. */
+  severity: CheckSeverity;
+  /** JSON pointer (API keys) of the value to fix, e.g. `/body` or `/sections/2/title`. */
+  path?: string;
+  /** The validator's issue code, for `invalid` and `requiredEmpty` errors. */
+  code?: string;
+  params: CheckParams;
+};
+type PreflightLocale = {
+  locale: string;
+  /** No error-severity check: publishing this locale is expected to succeed. */
+  ready: boolean;
+  checks: PreflightCheck[];
+};
+type PreflightInput = {
+  locales?: string[];
+};
+type PreflightResponse = {
+  locales: PreflightLocale[];
+  /** Checks about the entry as a whole, not one locale (e.g. a configured locale not started yet). */
+  entry: PreflightCheck[];
+};
+/** A finding of the health engine, open until its rule passes again. */
+type ContentHealthFinding = {
+  id: string;
+  entryId: string;
+  modelId: string;
+  modelKey: string;
+  /** The entry's title in the finding's locale (or the default locale), when readable. */
+  entryTitle: string | null;
+  /** `*` for a finding about the entry as a whole. */
+  locale: string;
+  rule: HealthRule;
+  /** Distinguishes several findings of one rule on one entry (e.g. two images without alt text). */
+  subject: string;
+  severity: CheckSeverity;
+  path?: string;
+  params: CheckParams;
+  firstSeenAt: string;
+  lastSeenAt: string;
+};
+type ContentHealthQuery = {
+  rule?: HealthRule;
+  modelKey?: string;
+  cursor?: string;
+  limit?: number;
+};
+type ContentHealthPage = {
+  items: ContentHealthFinding[];
+  nextCursor: string | null;
+};
+type ContentHealthSummary = {
+  rules: {
+    rule: HealthRule;
+    count: number;
+  }[];
+};
+/** Someone with the entry open. */
+type PresencePerson = {
+  userId: string;
+  name: string;
+  /** The locale they are editing, when the model is localized. */
+  locale: string | null;
+  /** When this tab started editing. */
+  since: string;
+  /** The caller's own other tab (the calling tab itself is never listed). */
+  you: boolean;
+};
+type PresenceHeartbeatInput = {
+  /** A random ID per browser tab, so two tabs of one person are counted apart. */
+  tabId: string;
+  locale?: string | null;
+};
+type EntryPresence = {
+  people: PresencePerson[];
+};
+type ModelPresence = {
+  entries: {
+    entryId: string;
+    people: PresencePerson[];
+  }[];
+};
+type ContentCount = {
+  modelId: string;
+  modelKey: string;
+  total: number;
+};
+type ContentCounts = {
+  counts: ContentCount[];
+};
+//#endregion
+//#region src/admin/paths.d.ts
+/** Every admin route the client calls (packages B, D, F and G, `apps/api/src/routes/admin/**`). */
+declare const ADMIN_PATHS: {
+  readonly setup: "/api/admin/setup";
+  readonly csrf: "/api/admin/auth/csrf";
+  readonly login: "/api/admin/auth/login";
+  readonly logout: "/api/admin/auth/logout";
+  readonly me: "/api/admin/auth/me";
+  readonly password: "/api/admin/auth/me/password";
+  readonly sessions: "/api/admin/auth/sessions";
+  readonly passwordReset: "/api/admin/auth/password-reset";
+  readonly passwordResetConfirm: "/api/admin/auth/password-reset/confirm";
+  readonly users: "/api/admin/users";
+  readonly invitations: "/api/admin/invitations";
+  readonly inspectInvitation: "/api/admin/invitations/inspect";
+  readonly acceptInvitation: "/api/admin/invitations/accept";
+  readonly roles: "/api/admin/roles";
+  readonly tokens: "/api/admin/tokens";
+  readonly audit: "/api/admin/audit";
+  readonly models: "/api/admin/models";
+  readonly components: "/api/admin/components";
+  readonly schema: "/api/admin/schema";
+  readonly schemaChanges: "/api/admin/schema/changes";
+  readonly schemaExport: "/api/admin/schema/export";
+  readonly schemaApply: "/api/admin/schema/apply";
+  readonly schemaSettings: "/api/admin/schema/settings";
+  readonly locales: "/api/admin/locales";
+  readonly mediaFolders: "/api/admin/media/folders";
+  readonly mediaAssets: "/api/admin/media/assets";
+  readonly mediaUploads: "/api/admin/media/uploads";
+  readonly appUsers: "/api/admin/app-users";
+  readonly appRoles: "/api/admin/app-roles";
+  readonly content: "/api/admin/content";
+  readonly contentCounts: "/api/admin/content-counts";
+  readonly contentHealth: "/api/admin/content-health";
+  readonly presence: "/api/admin/presence";
+  readonly editorManifest: "/api/admin/extensions/editors";
+  readonly jobs: "/api/admin/jobs";
+  readonly schedules: "/api/admin/publishing/schedules";
+  readonly changeSets: "/api/admin/change-sets";
+  readonly snapshots: "/api/admin/snapshots";
+  readonly webhooks: "/api/admin/webhooks";
+  readonly deploymentConnections: "/api/admin/deployments/connections";
+  readonly deploymentRuns: "/api/admin/deployments/runs";
+  readonly preview: "/api/admin/preview";
+  readonly previewTokens: "/api/admin/preview/tokens";
+};
+//#endregion
+//#region src/admin/sites.d.ts
+declare const SITES_PATHS: {
+  readonly sites: "/api/admin/sites";
+};
+/** The admin API header that names the site a site-scoped request is about (default: the primary site). */
+declare const SITE_HEADER = "shapio-site";
+//#endregion
+//#region src/admin/contentQuery.d.ts
+declare const toContentQueryString: (query?: ContentListQuery) => string;
+//#endregion
+//#region src/admin/media.d.ts
+/** The form for step 2 of an upload: the grant's fields in order, then the file. */
+declare const buildUploadForm: (grant: UploadGrant, file: Blob, filename: string) => FormData;
+/**
+ * Where to send a grant's bytes. Shapio's own upload route (local storage) is addressed through the base URL
+ * the caller already talks to, which keeps it reachable when PUBLIC_URL differs from that address (the
+ * admin's dev server, a proxy, a container network). Bucket URLs (presigned POST) are used as given.
+ */
+declare const resolveUploadUrl: (grant: UploadGrant, apiBaseUrl: string) => string;
+//#endregion
+//#region src/admin/assist.d.ts
+declare const ASSIST_PATHS: {
+  readonly status: "/api/admin/assist/status";
+  readonly altText: "/api/admin/assist/alt-text";
+  readonly summarize: "/api/admin/assist/summarize";
+  readonly translate: "/api/admin/assist/translate";
+  readonly rewrite: "/api/admin/assist/rewrite";
+  readonly schemaDraft: "/api/admin/assist/schema/draft";
+  readonly contentOpsPropose: "/api/admin/assist/content-ops/propose";
+  readonly contentOps: "/api/admin/assist/content-ops";
+};
+//#endregion
+//#region src/admin/index.d.ts
+/**
+ * Admin endpoints: identity (setup, auth, sessions, users, invitations, roles, tokens, audit) and the schema
+ * registry (models, components, schema, locales), the media library and content.
+ */
+declare const createAdminApi: (request: RequestFn) => {
+  assist: {
+    status: () => Promise<AssistStatus>;
+    altText: (body: AltTextInput) => Promise<AltTextResult>;
+    summarize: (body: SummarizeInput) => Promise<AssistTextResult>;
+    translate: (body: TranslateInput) => Promise<TranslateResult>;
+    rewrite: (body: RewriteInput) => Promise<AssistTextResult>;
+    schemaDraft: (body: SchemaDraftInput) => Promise<SchemaDraftResult>;
+    proposeContentOps: (body: ContentOpsInput) => Promise<{
+      runId: string;
+    }>;
+    contentOpsRun: (runId: string) => Promise<ContentOpsRun>;
+  };
+  sites: {
+    list: () => Promise<Site[]>;
+    get: (id: string) => Promise<Site>;
+    create: (body: CreateSiteInput) => Promise<Site>;
+    update: (id: string, body: UpdateSiteInput) => Promise<Site>;
+    remove: (id: string) => Promise<void>;
+    appRoles: {
+      get: (id: string) => Promise<SiteAppRoles>;
+      set: (id: string, body: SetSiteAppRolesInput) => Promise<SiteAppRoles>;
+    };
+  };
+  usage: {
+    fields: (query: FieldUsageQuery) => Promise<FieldUsageResponse>;
+  };
+  changeSets: {
+    list: (query?: ChangeSetQuery) => Promise<Page<ChangeSetSummary>>;
+    get: (id: string) => Promise<ChangeSet>;
+    create: (body: CreateChangeSetInput) => Promise<ChangeSet>;
+    update: (id: string, body: UpdateChangeSetInput) => Promise<ChangeSet>;
+    discard: (id: string) => Promise<ChangeSet>;
+    addEntry: (id: string, body: AddChangeSetEntryInput) => Promise<ChangeSet>;
+    removeItem: (id: string, itemId: string) => Promise<ChangeSet>;
+    getSchemaDraft: (id: string, definitionId: string) => Promise<SchemaDraft>;
+    putSchemaDraft: (id: string, definitionId: string, body: PutSchemaDraftInput) => Promise<SchemaDraft>;
+    removeSchemaDraft: (id: string, definitionId: string) => Promise<ChangeSet>;
+    review: (id: string) => Promise<ChangeSetReview>;
+    ship: (id: string, body: ShipChangeSetInput) => Promise<ChangeSet>;
+    schedule: (id: string, body: ScheduleChangeSetInput) => Promise<ChangeSet>;
+    unschedule: (id: string) => Promise<ChangeSet>;
+    timeline: (id: string) => Promise<ChangeSetTimelineEvent[]>;
+    unassigned: (query?: {
+      cursor?: string;
+      limit?: number;
+    }) => Promise<Page<UnassignedEntry>>;
+  };
+  snapshots: {
+    list: (query?: SnapshotQuery) => Promise<SnapshotPage>;
+    get: (seq: number) => Promise<Snapshot>;
+    restore: (seq: number) => Promise<ChangeSet>;
+  };
+  appUsers: {
+    list: (query?: AppUserQuery) => Promise<AppUserPage>;
+    get: (id: string) => Promise<AdminAppUser>;
+    update: (id: string, body: UpdateAppUserInput) => Promise<AdminAppUser>;
+    remove: (id: string) => Promise<void>;
+    resendConfirmation: (id: string) => Promise<void>;
+  };
+  appRoles: {
+    list: () => Promise<AppRole[]>;
+    get: (id: string) => Promise<AppRole>;
+    create: (body: CreateAppRoleInput) => Promise<AppRole>;
+    update: (id: string, body: UpdateAppRoleInput) => Promise<AppRole>;
+    remove: (id: string) => Promise<void>;
+  };
+  jobs: {
+    list: (query?: JobQuery) => Promise<Page<Job>>;
+    summary: () => Promise<JobSummary>;
+    get: (id: string) => Promise<Job>;
+    retry: (id: string) => Promise<Job>;
+  };
+  schedules: {
+    list: (query?: ScheduleQuery) => Promise<Page<ScheduledPublication>>;
+    create: (body: CreateScheduleInput) => Promise<ScheduledPublication>;
+    cancel: (id: string) => Promise<void>;
+  };
+  webhooks: {
+    list: () => Promise<Webhook[]>;
+    events: () => Promise<WebhookEventType[]>;
+    get: (id: string) => Promise<Webhook>;
+    create: (body: CreateWebhookInput) => Promise<WebhookWithSecret>;
+    update: (id: string, body: UpdateWebhookInput) => Promise<Webhook>;
+    remove: (id: string) => Promise<void>;
+    rotateSecret: (id: string) => Promise<WebhookWithSecret>;
+    test: (id: string) => Promise<WebhookDelivery>;
+    deliveries: (id: string, query?: {
+      cursor?: string;
+      limit?: number;
+    }) => Promise<Page<WebhookDelivery>>;
+    redeliver: (id: string, deliveryId: string) => Promise<WebhookDelivery>;
+  };
+  deployments: {
+    connections: {
+      list: () => Promise<DeploymentConnection[]>;
+      get: (id: string) => Promise<DeploymentConnection>;
+      create: (body: CreateDeploymentConnectionInput) => Promise<DeploymentConnectionCreated>;
+      update: (id: string, body: UpdateDeploymentConnectionInput) => Promise<DeploymentConnection>;
+      remove: (id: string) => Promise<void>;
+      test: (id: string) => Promise<ConnectionTestResult>;
+      trigger: (id: string) => Promise<DeploymentRun>;
+    };
+    runs: {
+      list: (query?: DeploymentRunQuery) => Promise<Page<DeploymentRun>>;
+      get: (id: string) => Promise<DeploymentRun>;
+      retry: (id: string) => Promise<DeploymentRun>;
+    };
+  };
+  preview: {
+    tokens: {
+      list: (query?: {
+        entryId?: string;
+      }) => Promise<PreviewToken[]>;
+      create: (body: CreatePreviewTokenInput) => Promise<PreviewTokenCreated>;
+      revoke: (id: string) => Promise<void>;
+    };
+    targets: () => Promise<PreviewTarget[]>;
+    open: (body: OpenPreviewInput) => Promise<OpenPreviewResult>;
+  };
+  preflight: {
+    run: (modelKey: string, id: string, body?: PreflightInput) => Promise<PreflightResponse>;
+  };
+  contentHealth: {
+    list: (query?: ContentHealthQuery) => Promise<ContentHealthPage>;
+    summary: () => Promise<ContentHealthSummary>;
+  };
+  presence: {
+    heartbeat: (modelKey: string, id: string, body: PresenceHeartbeatInput) => Promise<EntryPresence>;
+    entry: (modelKey: string, id: string) => Promise<EntryPresence>;
+    model: (modelKey: string) => Promise<ModelPresence>;
+    leave: (modelKey: string, id: string, tabId: string) => Promise<void>;
+  };
+  contentCounts: {
+    list: () => Promise<ContentCounts>;
+  };
+  content: {
+    list: (modelKey: string, query?: ContentListQuery) => Promise<AdminEntryPage>;
+    get: (modelKey: string, id: string, { locale }?: {
+      locale?: string;
+    }) => Promise<AdminEntry>;
+    create: (modelKey: string, body: CreateEntryInput) => Promise<AdminEntry>;
+    update: (modelKey: string, id: string, body: UpdateEntryInput) => Promise<AdminEntry>;
+    remove: (modelKey: string, id: string) => Promise<void>;
+    duplicate: (modelKey: string, id: string) => Promise<AdminEntry>;
+    publish: (modelKey: string, id: string, body?: EntryLocalesInput) => Promise<AdminEntry>;
+    unpublish: (modelKey: string, id: string, body?: EntryLocalesInput) => Promise<AdminEntry>;
+    revisions: (modelKey: string, id: string, { locale }?: {
+      locale?: string;
+    }) => Promise<RevisionSummary[]>;
+    revision: (modelKey: string, id: string, revisionId: string) => Promise<RevisionDetail>;
+    restore: (modelKey: string, id: string, revisionId: string, expectedVersion: number) => Promise<AdminEntry>;
+  };
+  extensions: {
+    editors: () => Promise<EditorManifest>;
+  };
+  media: {
+    folders: {
+      list: () => Promise<MediaFolder[]>;
+      create: (body: CreateMediaFolderInput) => Promise<MediaFolder>;
+      update: (id: string, body: UpdateMediaFolderInput) => Promise<MediaFolder>;
+      remove: (id: string) => Promise<void>;
+    };
+    assets: {
+      list: (query?: MediaAssetQuery) => Promise<MediaAssetPage>;
+      get: (id: string) => Promise<MediaAsset>;
+      update: (id: string, body: UpdateMediaAssetInput) => Promise<MediaAsset>;
+      remove: (id: string, { force }?: {
+        force?: boolean;
+      }) => Promise<void>;
+      move: (body: MoveMediaAssetsInput) => Promise<MoveMediaAssetsResult>;
+      usage: (id: string) => Promise<MediaUsagePage>;
+      replace: (id: string, body: ReplaceUploadInput) => Promise<UploadGrant>;
+    };
+    uploads: {
+      create: (body: CreateUploadInput) => Promise<UploadGrant>;
+      confirm: (grantId: string) => Promise<MediaAsset>;
+    };
+  };
+  models: {
+    list: () => Promise<DefinitionListItem[]>;
+    get: (id: string) => Promise<DefinitionDetail>;
+    create: (body: CreateDefinitionInput) => Promise<ChangeOutcome>;
+    planCreate: (definition: DefinitionPayload) => Promise<PlanPreview>;
+    update: (id: string, body: UpdateDefinitionInput) => Promise<ChangeOutcome>;
+    planUpdate: (id: string, body: PlanUpdateInput) => Promise<PlanPreview>;
+    remove: (id: string, expectedVersion: number) => Promise<ChangeOutcome>;
+    revisions: (id: string) => Promise<DefinitionRevision[]>;
+    changes: (id: string) => Promise<SchemaChangeJob[]>;
+  };
+  components: {
+    list: () => Promise<DefinitionListItem[]>;
+    get: (id: string) => Promise<DefinitionDetail>;
+    create: (body: CreateDefinitionInput) => Promise<ChangeOutcome>;
+    planCreate: (definition: DefinitionPayload) => Promise<PlanPreview>;
+    update: (id: string, body: UpdateDefinitionInput) => Promise<ChangeOutcome>;
+    planUpdate: (id: string, body: PlanUpdateInput) => Promise<PlanPreview>;
+    remove: (id: string, expectedVersion: number) => Promise<ChangeOutcome>;
+    revisions: (id: string) => Promise<DefinitionRevision[]>;
+    changes: (id: string) => Promise<SchemaChangeJob[]>;
+  };
+  schema: {
+    summary: () => Promise<SchemaSummary>;
+    change: (changeId: string) => Promise<SchemaChangeJob>;
+    export: () => Promise<SchemaExport>;
+    apply: (body: SchemaApplyInput) => Promise<SchemaApplyResult>;
+    settings: () => Promise<SchemaSettings>;
+    updateSettings: (body: UpdateSchemaSettingsInput) => Promise<SchemaSettings>;
+  };
+  locales: {
+    list: () => Promise<import("@shapio/schema").LocaleDefinition[]>;
+    create: (body: CreateLocaleInput) => Promise<import("@shapio/schema").LocaleDefinition>;
+    update: (code: string, body: UpdateLocaleInput) => Promise<import("@shapio/schema").LocaleDefinition>;
+    setDefault: (code: string, acknowledgeBreaking: boolean) => Promise<SetDefaultLocaleResult>;
+    remove: (code: string, acknowledgeDestructive: boolean) => Promise<DeleteLocaleResult>;
+  };
+  setup: {
+    status: () => Promise<SetupStatusResponse>;
+    complete: (body: SetupInput) => Promise<SessionStarted>;
+  };
+  auth: {
+    csrf: () => Promise<CsrfResponse>;
+    login: (body: LoginInput) => Promise<SessionStarted>;
+    logout: () => Promise<void>;
+    me: () => Promise<MeResponse>;
+    updateProfile: (body: UpdateProfileInput) => Promise<AdminUser>;
+    /** The session is rotated: the response carries the new session's CSRF token. */
+    changePassword: (body: ChangePasswordInput) => Promise<CsrfResponse>;
+    requestPasswordReset: (body: PasswordResetRequestInput) => Promise<void>;
+    confirmPasswordReset: (body: PasswordResetConfirmInput) => Promise<void>;
+  };
+  sessions: {
+    list: () => Promise<AdminSession[]>;
+    revoke: (id: string) => Promise<void>;
+  };
+  users: {
+    list: () => Promise<AdminUser[]>;
+    get: (id: string) => Promise<AdminUser>;
+    update: (id: string, body: UpdateAdminUserInput) => Promise<AdminUser>;
+    remove: (id: string) => Promise<void>;
+    revokeSessions: (id: string) => Promise<void>;
+  };
+  invitations: {
+    list: () => Promise<Invitation[]>;
+    create: (body: InviteUserInput) => Promise<Invitation>;
+    revoke: (id: string) => Promise<void>;
+    /** A fresh link to send by hand; any earlier link for this invitation stops working. */
+    link: (id: string) => Promise<InvitationLink>;
+    /** Public: the token travels in the body, never in a URL the server logs. */
+    inspect: (token: string) => Promise<InspectInvitationResponse>;
+    accept: (body: AcceptInvitationInput) => Promise<SessionStarted>;
+  };
+  roles: {
+    list: () => Promise<Role[]>;
+    get: (id: string) => Promise<Role>;
+    create: (body: CreateRoleInput) => Promise<Role>;
+    update: (id: string, body: UpdateRoleInput) => Promise<Role>;
+    remove: (id: string) => Promise<void>;
+  };
+  tokens: {
+    list: () => Promise<ApiToken[]>;
+    create: (body: CreateApiTokenInput) => Promise<CreatedApiToken>;
+    revoke: (id: string) => Promise<void>;
+  };
+  audit: {
+    list: (query?: AuditQuery) => Promise<AuditPage>;
+  };
+};
+type AdminApi = ReturnType<typeof createAdminApi>;
+//#endregion
+//#region src/delivery.d.ts
+declare const DELIVERY_PATH = "/api/content";
+/**
+ * Published content, typed by the caller (`delivery.list<Article>('articles', { locale: 'fr', snapshot })`).
+ * A collection is read with `list` (a page) and `get` (one entry); a singleton with `singleton`.
+ */
+declare const createDeliveryApi: (request: RequestFn) => {
+  list: <T = Record<string, unknown>>(routeKey: string, query?: DeliveryListQuery) => Promise<DeliveryList<T>>;
+  singleton: <T = Record<string, unknown>>(apiKey: string, query?: DeliveryGetQuery) => Promise<DeliveryItem<T>>;
+  get: <T = Record<string, unknown>>(routeKey: string, id: string, query?: DeliveryGetQuery) => Promise<DeliveryItem<T>>;
+};
+type DeliveryApi = ReturnType<typeof createDeliveryApi>;
+//#endregion
+//#region src/site.d.ts
+/** Delivery reads name their site with `?site=`; everything else with the `Shapio-Site` header. */
+declare const SITE_QUERY_PARAMETER = "site";
+//#endregion
+//#region src/webhooks.d.ts
+/**
+ * Verifying Shapio's signed webhooks and deploy triggers on the receiving side (a site's revalidate route,
+ * a build hook). The scheme is the server's (`apps/api/src/publishing/signature.ts`):
+ * `X-Shapio-Signature: v1=<hex HMAC-SHA256(secret, "<timestamp>.<raw body>")>` with
+ * `X-Shapio-Timestamp: <unix seconds>`; several comma-separated `v1=` values are accepted (secret rotation).
+ * Uses Web Crypto, so it runs in Node, edge runtimes and browsers alike.
+ */
+declare const WEBHOOK_SIGNATURE_HEADER = "x-shapio-signature";
+declare const WEBHOOK_TIMESTAMP_HEADER = "x-shapio-timestamp";
+declare const WEBHOOK_EVENT_HEADER = "x-shapio-event";
+/** Requests signed further from now than this are rejected (replay protection). */
+declare const WEBHOOK_TOLERANCE_SECONDS = 300;
+type WebhookSignatureInput = {
+  /** The webhook's or connection's signing secret. */
+  secret: string;
+  /** The `X-Shapio-Signature` header. */
+  signature: string | null | undefined;
+  /** The `X-Shapio-Timestamp` header. */
+  timestamp: string | null | undefined;
+  /** The raw request body, exactly as received (not re-serialised JSON). */
+  body: string;
+  /** Defaults to the current time. */
+  now?: Date;
+  /** Defaults to WEBHOOK_TOLERANCE_SECONDS. */
+  toleranceSeconds?: number;
+};
+type WebhookSignatureCheck = {
+  ok: true;
+} | {
+  ok: false;
+  reason: string;
+};
+/** Checks a Shapio signature; `{ ok: false, reason }` says why it was refused (never throws for bad input). */
+declare const verifyWebhookSignature: ({ secret, signature, timestamp, body, now, toleranceSeconds }: WebhookSignatureInput) => Promise<WebhookSignatureCheck>;
+//#endregion
+//#region src/appAuth/types.d.ts
+/**
+ * App-user authentication (package I), mirroring apps/api/src/routes/app-auth/schemas.ts. For the sites and
+ * apps built on Shapio: their end users sign up, sign in and manage their accounts here.
+ */
+type AppUser = {
+  id: string;
+  email: string;
+  name: string;
+  confirmed: boolean;
+  hasPassword: boolean;
+  providers: string[];
+  createdAt: string;
+  lastLoginAt: string | null;
+};
+/** Send `accessToken` as `Authorization: Bearer …`; trade `refreshToken` for a new pair before it expires. */
+type AppSession = {
+  user: AppUser;
+  accessToken: string;
+  tokenType: 'Bearer';
+  /** Access-token lifetime in seconds. */
+  expiresIn: number;
+  /** Single use: each refresh returns the next one. Presenting a used one signs the session out. */
+  refreshToken: string;
+  refreshTokenExpiresAt: string;
+};
+type AppRegisterInput = {
+  email: string;
+  password: string;
+  name?: string;
+};
+/**
+ * Signed in at once (HTTP 201), or, when the instance requires a confirmed email, `{ confirmationRequired:
+ * true }` (HTTP 202): "check your email". That answer is the same whether or not the address already had an
+ * account, so it never reveals who is registered.
+ */
+type AppRegisterResult = {
+  confirmationRequired: false;
+  user: AppUser;
+  session: AppSession;
+} | {
+  confirmationRequired: true;
+};
+type AppLoginInput = {
+  email: string;
+  password: string;
+};
+type AppChangePasswordInput = {
+  currentPassword?: string;
+  newPassword: string;
+};
+type AppOAuthProvider = 'google' | 'github';
+//#endregion
+//#region src/appAuth/index.d.ts
+declare const APP_AUTH_PATHS: {
+  readonly register: "/api/app-auth/register";
+  readonly login: "/api/app-auth/login";
+  readonly refresh: "/api/app-auth/refresh";
+  readonly logout: "/api/app-auth/logout";
+  readonly me: "/api/app-auth/me";
+  readonly password: "/api/app-auth/me/password";
+  readonly confirmEmail: "/api/app-auth/confirm-email";
+  readonly resendConfirmation: "/api/app-auth/confirm-email/resend";
+  readonly passwordReset: "/api/app-auth/password-reset";
+  readonly passwordResetConfirm: "/api/app-auth/password-reset/confirm";
+  readonly providers: "/api/app-auth/providers";
+  readonly oauthExchange: "/api/app-auth/oauth/exchange";
+};
+/**
+ * App-user endpoints. Calls that act as the signed-in user need a client created with `token: accessToken`.
+ * `baseUrl` is the client's base URL, used to build the OAuth start link the browser navigates to.
+ */
+declare const createAppAuthApi: (request: RequestFn, baseUrl: string) => {
+  register: (body: AppRegisterInput) => Promise<AppRegisterResult>;
+  login: (body: AppLoginInput) => Promise<AppSession>;
+  refresh: (refreshToken: string) => Promise<AppSession>;
+  /**
+   * Signs the account out everywhere: this login's refresh tokens are revoked, and every access token the
+   * account holds (on any device) is refused from the next request. Other logins recover with their own
+   * refresh token.
+   */
+  logout: (refreshToken: string) => Promise<void>;
+  /** The signed-in user. Answers 401 once the account logged out anywhere, changed its password or was blocked. */
+  me: () => Promise<AppUser>;
+  updateMe: (body: {
+    name: string;
+  }) => Promise<AppUser>;
+  /** Returns a new session; every other sign-in of the account is revoked. */
+  changePassword: (body: AppChangePasswordInput) => Promise<AppSession>;
+  deleteMe: (body?: {
+    password?: string;
+  }) => Promise<void>;
+  /** The token from the `#token=` fragment of the confirmation link. */
+  confirmEmail: (token: string) => Promise<void>;
+  resendConfirmation: (email: string) => Promise<void>;
+  requestPasswordReset: (email: string) => Promise<void>;
+  confirmPasswordReset: (body: {
+    token: string;
+    password: string;
+  }) => Promise<void>;
+  providers: () => Promise<AppOAuthProvider[]>;
+  /**
+   * Where to send the browser to sign in with a provider. `codeChallenge` comes from `createPkcePair()`;
+   * keep its `codeVerifier` until the browser returns. It comes back to `redirectTo` (an allowed return URL,
+   * by default an origin listed in CORS_ORIGINS) with `?code=` (pass it to `exchangeCode`) or `?error=`.
+   */
+  oauthStartUrl: (provider: AppOAuthProvider, redirectTo: string, codeChallenge: string) => string;
+  /** Trades the one-time code for a session. A wrong verifier spends the code: start the sign-in again. */
+  exchangeCode: (code: string, codeVerifier: string) => Promise<AppSession>;
+};
+type AppAuthApi = ReturnType<typeof createAppAuthApi>;
+//#endregion
+//#region src/appAuth/pkce.d.ts
+/**
+ * PKCE (RFC 7636) for the app side of Shapio's OAuth sign-in: the app keeps the verifier (e.g. in
+ * sessionStorage) and sends the S256 challenge with the start link; the one-time code it gets back is only
+ * exchanged together with that verifier. Uses Web Crypto, so it works in browsers and Node alike.
+ */
+type AppPkcePair = {
+  codeVerifier: string;
+  codeChallenge: string;
+};
+/** The S256 challenge of a verifier: base64url(SHA-256(verifier)). */
+declare const codeChallengeOf: (codeVerifier: string) => Promise<string>;
+/** A fresh verifier (32 random bytes, 43 characters) and its S256 challenge. */
+declare const createPkcePair: () => Promise<AppPkcePair>;
+//#endregion
+export { AltTextResult as $, UpdateDeploymentConnectionInput as $i, SetupInput as $n, DefinitionRevision as $r, MoveMediaAssetsResult as $t, ADMIN_PATHS as A, ContentFilter as Aa, DeploymentRunTrigger as Ai, CsrfResponse as An, ReviewSchemaItem as Ar, SnapshotChange as At, HEALTH_RULES as B, EntryAuthor as Ba, JobSummary as Bi, NETWORK_ACTIONS as Bn, SnapshotSource as Br, MediaAsset as Bt, AdminApi as C, DeliveryList as Ca, DEPLOYMENT_TRIGGERS as Ci, AuditQuery as Cn, FieldDiff as Cr, ShapioClientOptions as Ct, toContentQueryString as D, AdminEntry as Da, DeploymentRun as Di, CreateApiTokenInput as Dn, PutSchemaDraftInput as Dr, ReadyResponse as Dt, resolveUploadUrl as E, DeliveryPagination as Ea, DeploymentProvider as Ei, ContentAction as En, NotRestorableReason as Er, HealthResponse as Et, ContentHealthFinding as F, ContentPagination as Fa, DeploymentTriggerPolicy as Fi, Invitation as Fn, ShipChangeSetInput as Fr, SchemaApplyResult as Ft, PreflightLocale as G, EntryReferrer as Ga, PreviewTarget as Gi, Role as Gn, ChangeOutcome as Gr, MediaFolder as Gt, ModelPresence as H, EntryLocaleState as Ha, OpenPreviewResult as Hi, PasswordResetConfirmInput as Hn, UpdateChangeSetInput as Hr, MediaAssetQuery as Ht, ContentHealthPage as I, ContentSort as Ia, JOB_STATUSES as Ii, InvitationLink as In, ShipPhase as Ir, SchemaExport as It, PresenceHeartbeatInput as J, RevisionSummary as Ja, PublicationAction as Ji, RoleKind as Jn, CreateLocaleInput as Jr, MediaUsagePage as Jt, PreflightResponse as K, EntryStatus as Ka, PreviewToken as Ki, RoleAssignment as Kn, ChangePlan as Kr, MediaStorageDriver as Kt, ContentHealthQuery as L, CreateEntryInput as La, Job as Li, InviteUserInput as Ln, Snapshot as Lr, SchemaSyncResult as Lt, CheckSeverity as M, ContentFilterValue as Ma, DeploymentSecretsInput as Mi, GLOBAL_ACTIONS as Mn, ScheduleChangeSetInput as Mr, SnapshotChangesPage as Mt, ContentCount as N, ContentIssue as Na, DeploymentSettings as Ni, GlobalAction as Nn, SchemaDraft as Nr, SnapshotChangesQuery as Nt, SITES_PATHS as O, AdminEntryListItem as Oa, DeploymentRunQuery as Oi, CreateRoleInput as On, ReviewEntryItem as Or, VersionResponse as Ot, ContentCounts as P, ContentListQuery as Pa, DeploymentTimelineEvent as Pi, InspectInvitationResponse as Pn, SchemaOperation as Pr, SchemaApplyInput as Pt, AltTextInput as Q, ScheduledPublication as Qi, SessionStarted as Qn, DefinitionPayload as Qr, MoveMediaAssetsInput as Qt, ContentHealthSummary as R, EditorManifest as Ra, JobQuery as Ri, LoginInput as Rn, SnapshotPage as Rr, CreateMediaFolderInput as Rt, DeliveryApi as S, DeliveryItem as Sa, DEPLOYMENT_RUN_STATUSES as Si, AuditPage as Sn, FieldConsumers as Sr, ShapioClient as St, buildUploadForm as T, DeliveryMeta as Ta, DeploymentConnectionCreated as Ti, ChangePasswordInput as Tn, NotRestorable as Tr, CheckStatus as Tt, PreflightCheck as U, EntryLocaleStatus as Ua, PUBLICATION_ACTIONS as Ui, PasswordResetRequestInput as Un, Acknowledgement as Ur, MediaAssetStatus as Ut, HealthRule as V, EntryData as Va, OpenPreviewInput as Vi, NetworkAction as Vn, UnassignedEntry as Vr, MediaAssetPage as Vt, PreflightInput as W, EntryLocalesInput as Wa, Page as Wi, PermissionAction as Wn, ActiveDefinition as Wr, MediaFocalPoint as Wt, AltMissingResult as X, RequestFn as Xa, ScheduleQuery as Xi, RoleSummary as Xn, DefinitionDetail as Xr, MediaVariantStatus as Xt, PresencePerson as Y, UpdateEntryInput as Ya, SCHEDULE_STATUSES as Yi, RolePermission as Yn, DefinitionCategory as Yr, MediaVariant as Yt, AltProposal as Z, RequestOptions as Za, ScheduleStatus as Zi, SITE_ACTIONS as Zn, DefinitionListItem as Zr, MediaVisibility as Zt, WebhookSignatureCheck as _, SiteAppRoles as _a, CreateDeploymentConnectionInput as _i, AdminUser as _n, ChangeSetStatus as _r, SummarizeInput as _t, AppAuthApi as a, WebhookEventBody as aa, PlanStepImpact as ai, AdminAppUser as an, AddChangeSetEntryInput as ar, CONTENT_OPS_RULES as at, SITE_QUERY_PARAMETER as b, UpdateSiteInput as ba, CreateWebhookInput as bi, AuditActorType as bn, CreateChangeSetInput as br, ShapioApiError as bt, AppOAuthProvider as c, FieldPrincipalUsage as ca, SchemaChangeStatus as ci, AppRolePermission as cn, ChangeSetActor as cr, ContentOpsRule as ct, AppSession as d, ModelFieldUsage as da, SchemaSummaryItem as di, BUILT_IN_APP_ROLE_KEYS as dn, ChangeSetItem as dr, ContentOpsStatus as dt, UpdateWebhookInput as ea, DeleteLocaleResult as ei, ReplaceUploadInput as en, SetupStatusResponse as er, AssistIssue as et, AppUser as f, PrincipalUsageSummary as fa, SetDefaultLocaleResult as fi, CreateAppRoleInput as fn, ChangeSetItemStatus as fr, ContentOpsWritten as ft, WEBHOOK_TOLERANCE_SECONDS as g, Site as ga, ConnectionTestResult as gi, AdminSession as gn, ChangeSetSource as gr, SchemaDraftResult as gt, WEBHOOK_TIMESTAMP_HEADER as h, SetSiteAppRolesInput as ha, UpdateSchemaSettingsInput as hi, AcceptInvitationInput as hn, ChangeSetSchemaItem as hr, SchemaDraftInput as ht, APP_AUTH_PATHS as i, WebhookDeliveryStatus as ia, PlanStep as ii, APP_CONTENT_ACTIONS as in, UpdateRoleInput as ir, AssistUsage as it, CheckParams as j, ContentFilterOperator as ja, DeploymentSecretState as ji, EmailDelivery as jn, SNAPSHOT_SOURCES as jr, SnapshotChangeKind as jt, SITE_HEADER as k, AdminEntryPage as ka, DeploymentRunStatus as ki, CreatedApiToken as kn, ReviewIssue as kr, CurrentSnapshot as kt, AppRegisterInput as l, FieldUsageQuery as la, SchemaSettings as li, AppUserPage as ln, ChangeSetEntryItem as lr, ContentOpsRun as lt, WEBHOOK_SIGNATURE_HEADER as m, CreateSiteInput as ma, UpdateLocaleInput as mi, UpdateAppUserInput as mn, ChangeSetReview as mr, RewriteInput as mt, codeChallengeOf as n, WebhookAttempt as na, PlanImpact as ni, UpdateMediaFolderInput as nn, UpdateAdminUserInput as nr, AssistStatus as nt, AppChangePasswordInput as o, WebhookEventType as oa, PlanUpdateInput as oi, AppContentAction as on, CHANGE_SET_STATUSES as or, ContentOpsInput as ot, WEBHOOK_EVENT_HEADER as p, UsageSelection as pa, UpdateDefinitionInput as pi, UpdateAppRoleInput as pn, ChangeSetQuery as pr, LocaleMissingResult as pt, PreflightRule as q, RevisionDetail as qa, PreviewTokenCreated as qi, RoleCondition as qn, CreateDefinitionInput as qr, MediaUsage as qt, createPkcePair as r, WebhookDelivery as ra, PlanPreview as ri, UploadGrant as rn, UpdateProfileInput as rr, AssistTextResult as rt, AppLoginInput as s, WebhookWithSecret as sa, SchemaChangeJob as si, AppRole as sn, ChangeSet as sr, ContentOpsResult as st, AppPkcePair as t, Webhook as ta, Locale as ti, UpdateMediaAssetInput as tn, SiteAction as tr, AssistProvider as tt, AppRegisterResult as u, FieldUsageResponse as ua, SchemaSummary as ui, AppUserQuery as un, ChangeSetError as ur, ContentOpsSkip as ut, WebhookSignatureInput as v, SiteRef as va, CreatePreviewTokenInput as vi, AdminUserStatus as vn, ChangeSetSummary as vr, TranslateInput as vt, ASSIST_PATHS as w, DeliveryListQuery as wa, DeploymentConnection as wi, CONTENT_ACTIONS as wn, NOT_RESTORABLE_REASONS as wr, createClient as wt, DELIVERY_PATH as x, DeliveryGetQuery as xa, DEPLOYMENT_PROVIDERS as xi, AuditEvent as xn, FieldConsumer as xr, ShapioErrorBody as xt, verifyWebhookSignature as y, SiteSummary as ya, CreateScheduleInput as yi, ApiToken as yn, ChangeSetTimelineEvent as yr, TranslateResult as yt, EntryPresence as z, EditorManifestItem as za, JobStatus as zi, MeResponse as zn, SnapshotQuery as zr, CreateUploadInput as zt };
+//# sourceMappingURL=index-BpSg5A3V.d.ts.map