gazetta 0.6.0 → 0.8.0

package/dist/admin-api/routes/archive.js

@@ -0,0 +1,540 @@
+/**
+ * Archive / unarchive / purge routes for pages + fragments.
+ *
+ * Per `design-soft-delete.md`'s Cut 5 lock and the implementation
+ * grilling Q1 (one `archive.ts` module mounting both kinds): the
+ * lifecycle is the same shape for pages and fragments; the only
+ * axis that differs is the manifest filename + ItemRef source.
+ * Co-locating keeps "what does the archive lifecycle do?" answerable
+ * by reading one file.
+ *
+ * # The six routes
+ *
+ *   POST   /api/pages/:name/archive       (capability: delete:pages)
+ *   POST   /api/pages/:name/unarchive     (capability: edit:pages)
+ *   DELETE /api/pages/:name/purge         (capability: delete:pages)
+ *   POST   /api/fragments/:name/archive   (capability: delete:fragments)
+ *   POST   /api/fragments/:name/unarchive (capability: edit:fragments)
+ *   DELETE /api/fragments/:name/purge     (capability: delete:fragments)
+ *
+ * Capability assignment per implementation Q6 (locked F1): archive +
+ * purge are delete-class; unarchive is edit-class. Symmetric authority
+ * (delete-class to remove from production; edit-class to bring back).
+ *
+ * # Direct write, own pipeline (Q2 lock B1)
+ *
+ * Archive is a lifecycle event, not a content edit. Don't reuse the
+ * PUT pipeline — it would fire `beforeSave` / `afterSave` hooks built
+ * for content saves and run save-delta validation against the full
+ * schema. Archive flips a manifest field; the audit `action` is
+ * `archive` / `unarchive` / `purge`, NOT `save`.
+ *
+ * # Existing dep-sidecars untouched on archive (Q3 lock C1)
+ *
+ * Archived items keep their `asset-refs` and `fragment-deps` sidecars.
+ * An archive still references its assets / fragments — that's why an
+ * asset-purge attempt finds it. Tearing down on archive (and rebuilding
+ * on unarchive) would silently break refs whenever an asset got purged
+ * during the archive window. Tear-down happens on PURGE only.
+ *
+ * # `archive-aliases` reverse index (Cut 5a)
+ *
+ * Cut 5a shipped `archive-aliases.ts` — a per-edge sidecar at
+ * `.gazetta/alias-targets/{aliasTarget}/{encoded-source-item}`. The
+ * archive route writes it on archive-with-aliasOf; the purge route
+ * reads it (via `readArchivesAliasing`) for the alias-pointers part of
+ * the purge-blocked check. Per `team-preferences.md` rule 24: at the
+ * 5K-page envelope, walking every manifest to find aliases is ~30s on
+ * cloud; the sidecar is ~5ms `readDir`. Same pattern as `asset-refs`.
+ *
+ * # Purge-blocked: one 409 with both arrays (Q4 lock D1)
+ *
+ *   { code: 'DELETE_BLOCKED', aliases: [...], liveRefs: [...] }
+ *
+ * One 409, both arrays present. Surfaces every blocker in one
+ * round-trip; lets the author resolve in any order. UI gets one panel
+ * to render. Empty array when that class isn't blocking.
+ *
+ * # `?force=true` bypass (Q5 lock E1)
+ *
+ * Bypasses BOTH alias-pointers AND live-refs. One mental model — "I am
+ * an operator overriding the safety check." Audit records what was
+ * bypassed (`metadata.bypassedAliases` + `metadata.bypassedRefs`) so
+ * forensics finds what broke. Validators surface dangling aliases on
+ * the next save (P3); render emits 404 / errors on broken refs.
+ *
+ * # SOLID lenses
+ *
+ *   - SRP: this module owns the archive lifecycle. Doesn't touch the
+ *     PUT pipeline (Q2 B1); doesn't touch dep-sidecars on archive
+ *     (Q3 C1). Each function answers one question.
+ *   - DIP: routes consume `SourceContextResolver` like every other
+ *     route module; archive primitives consume the typed `ItemKind`
+ *     parameter rather than branching on URL shape inside helpers.
+ */
+import { Hono } from 'hono';
+import { join } from 'node:path';
+import { loadSiteFromSource } from '../source-context.js';
+import { recordWrite } from '../../history-recorder.js';
+import { requireCapability } from '../middleware/capability.js';
+import { readArchivesAliasing, rebuildArchiveAliases } from '../../archive-aliases.js';
+import { rebuildAssetRefs } from '../../assets/asset-deps.js';
+import { rebuildFragmentDeps, readDepsForFragment } from '../../fragment-deps.js';
+import { ArchiveRequestSchema, SetAliasRequestSchema, } from '../schemas/archive.js';
+import { archiveReviewMetadata, buildAutoWithdrawEvent, stripReviewStateForRestore } from './archive-review.js';
+export const PAGE_HANDLE = {
+    refSource: 'page',
+    scopeKind: 'page',
+    filename: 'page.json',
+    label: 'Page',
+};
+export const FRAGMENT_HANDLE = {
+    refSource: 'fragment',
+    scopeKind: 'fragment',
+    filename: 'fragment.json',
+    label: 'Fragment',
+};
+export function archiveRoutes(resolve, opts = {}) {
+    const app = new Hono();
+    const scanner = opts.scanner ?? null;
+    // ─── Pages ────────────────────────────────────────────────────────
+    app.post('/api/pages/:name/archive', requireCapability('delete:pages'), c => handleArchive(c, resolve, PAGE_HANDLE, scanner));
+    app.post('/api/pages/:name/unarchive', requireCapability('edit:pages'), c => handleUnarchive(c, resolve, PAGE_HANDLE, scanner));
+    app.delete('/api/pages/:name/purge', requireCapability('delete:pages'), c => handlePurge(c, resolve, PAGE_HANDLE, scanner));
+    // Cut 12 — edit an archive's aliasOf (set / drop) from the
+    // purge-blocked resolution modal. Capability `edit:` since this is
+    // a content-state edit, not destruction (symmetric with unarchive).
+    app.patch('/api/pages/:name/alias', requireCapability('edit:pages'), c => handleSetAlias(c, resolve, PAGE_HANDLE, scanner));
+    // ─── Fragments ────────────────────────────────────────────────────
+    app.post('/api/fragments/:name/archive', requireCapability('delete:fragments'), c => handleArchive(c, resolve, FRAGMENT_HANDLE, scanner));
+    app.post('/api/fragments/:name/unarchive', requireCapability('edit:fragments'), c => handleUnarchive(c, resolve, FRAGMENT_HANDLE, scanner));
+    app.delete('/api/fragments/:name/purge', requireCapability('delete:fragments'), c => handlePurge(c, resolve, FRAGMENT_HANDLE, scanner));
+    app.patch('/api/fragments/:name/alias', requireCapability('edit:fragments'), c => handleSetAlias(c, resolve, FRAGMENT_HANDLE, scanner));
+    return app;
+}
+/**
+ * Fire-and-forget: notify the scanner that a manifest write happened
+ * for `handle.scopeKind` named `name`. Mirrors `manifest-save.ts`'s
+ * scanner.rescan() call site shape.
+ */
+function notifyScanner(scanner, handle, name) {
+    if (!scanner)
+        return;
+    const root = handle.scopeKind === 'page' ? 'pages' : 'fragments';
+    const itemPath = `${root}/${name}/${handle.filename}`;
+    void scanner.rescan({
+        kind: 'manifest',
+        item: { kind: handle.scopeKind, name, itemPath },
+    });
+}
+// ─── Archive ───────────────────────────────────────────────────────────
+export async function handleArchive(c, resolve, handle, scanner = null) {
+    const name = c.req.param('name');
+    if (!name)
+        return c.json({ error: 'Missing name parameter' }, 400);
+    const source = await resolve(c.req.query('target'));
+    const site = await loadSiteFromSource(source);
+    const manifest = lookupManifest(site, handle, name);
+    if (!manifest)
+        return c.json({ error: `${handle.label} "${name}" not found` }, 404);
+    // Schema-validate body — same MCP discipline as other admin-API
+    // routes. `aliasOf` is optional; absence = pure soft-delete.
+    let body = {};
+    try {
+        body = await c.req.json();
+    }
+    catch {
+        // Empty body is fine (archive without aliasOf). Hono returns null
+        // for empty body, JSON.parse throws on empty string — catch and
+        // fall through.
+    }
+    const parsed = ArchiveRequestSchema.safeParse(body ?? {});
+    if (!parsed.success) {
+        return c.json({
+            error: 'Invalid request body',
+            issues: parsed.error.issues.map(i => ({ path: i.path.join('.'), message: i.message })),
+        }, 400);
+    }
+    const aliasOf = parsed.data.aliasOf;
+    const force = c.req.query('force') === 'true';
+    // P8 (save-handler check per design-soft-delete.md Q11): refuse
+    // archive without aliasOf when live refs exist. Pure soft-delete
+    // (no aliasOf) renders 410 / fragment-render error — silently
+    // breaking any live reference. Author resolves by setting aliasOf
+    // OR removing live refs. Admin `?force=true` bypasses; audit
+    // records the bypass per Q5 E1 lock.
+    //
+    // Only fragments can be referenced from other items today (pages
+    // can't be embedded). Pages get the check trivially-pass.
+    if (!aliasOf && !force && manifest.archived !== true) {
+        const liveRefs = await collectLiveRefs(source, handle, site, name);
+        if (liveRefs.length > 0) {
+            const blocked = { code: 'ARCHIVE_HAS_LIVE_REFS', liveRefs };
+            return c.json(blocked, 409);
+        }
+    }
+    // Already archived? Idempotent — return current state. Avoids
+    // double-emitting the audit event and double-writing the sidecar.
+    if (manifest.archived === true) {
+        const response = {
+            ok: true,
+            name,
+            archivedAt: manifest.archivedAt ?? new Date().toISOString(),
+            ...(manifest.aliasOf ? { aliasOf: manifest.aliasOf } : {}),
+        };
+        return c.json(response);
+    }
+    // Build the post-archive manifest. Per Q1 lock A1: archive fields
+    // are additive on the existing manifest; content + components stay
+    // intact so unarchive restores them as-is.
+    const principal = c.var.principal;
+    const archivedAt = new Date().toISOString();
+    const archived = {
+        ...manifest,
+        archived: true,
+        archivedAt,
+        archivedBy: principal.id,
+    };
+    if (aliasOf)
+        archived.aliasOf = aliasOf;
+    await writeManifest(source, handle, name, archived, manifest);
+    // Write the archive-aliases sidecar (Cut 5a). The relation's
+    // `extract` returns `{aliasOf}` only when archived === true AND
+    // aliasOf is a non-empty string — so this call is correct whether
+    // aliasOf was passed or not.
+    const itemRef = { source: handle.refSource, name };
+    await rebuildArchiveAliases(source.contentRoot, itemRef, manifest, archived);
+    // Existing dep-sidecars (asset-refs, fragment-deps) are NOT touched
+    // here per Q3 lock C1. The archive still references its assets +
+    // fragments; that's why a future asset-purge will find the archive
+    // and refuse cleanly. Tear-down happens on PURGE only.
+    await Promise.all([
+        source.cache.invalidatePrefix(`${handle.scopeKind}s:`),
+        handle.scopeKind === 'fragment' ? source.cache.invalidatePrefix('pages:') : Promise.resolve(),
+    ]);
+    // Audit metadata captures aliasOf and (when force bypass) the live
+    // refs the operator overrode — forensics finds the broken refs
+    // through the bypass list per Q5 E1 audit shape.
+    // Cut 14: also capture priorReviewState if the item was in a non-
+    // draft review state (forward-compat with review-workflow).
+    const archiveMetadata = { ...archiveReviewMetadata(manifest) };
+    if (aliasOf)
+        archiveMetadata.aliasOf = aliasOf;
+    if (force) {
+        archiveMetadata.forced = true;
+        const bypassedRefs = await collectLiveRefs(source, handle, site, name);
+        if (bypassedRefs.length > 0)
+            archiveMetadata.bypassedRefs = bypassedRefs;
+    }
+    // Cut 14: when archiving an item in `pending-review`, emit the
+    // synthetic `review-withdraw` event FIRST per design-soft-delete.md
+    // Q9 N-A.2. Approved state (no synthetic withdraw) is captured via
+    // priorReviewState on the archive event itself. Pre-review-workflow,
+    // this returns null and is a no-op.
+    const withdrawEvent = buildAutoWithdrawEvent(manifest, { kind: handle.scopeKind, name });
+    if (withdrawEvent) {
+        await c.var.audit.record(withdrawEvent);
+    }
+    await c.var.audit.record({
+        action: 'archive',
+        outcome: 'success',
+        scope: { kind: handle.scopeKind, name },
+        metadata: Object.keys(archiveMetadata).length > 0 ? archiveMetadata : undefined,
+    });
+    // Background-stage validators (P1, P5) re-run on the archived item.
+    // Fire-and-forget per `manifest-save.ts` shape; the scanner emits
+    // its own SSE event when the pass completes.
+    notifyScanner(scanner, handle, name);
+    const response = { ok: true, name, archivedAt, ...(aliasOf ? { aliasOf } : {}) };
+    return c.json(response);
+}
+// ─── Unarchive ─────────────────────────────────────────────────────────
+async function handleUnarchive(c, resolve, handle, scanner = null) {
+    const name = c.req.param('name');
+    if (!name)
+        return c.json({ error: 'Missing name parameter' }, 400);
+    const source = await resolve(c.req.query('target'));
+    const site = await loadSiteFromSource(source);
+    const manifest = lookupManifest(site, handle, name);
+    if (!manifest)
+        return c.json({ error: `${handle.label} "${name}" not found` }, 404);
+    // Already live? Idempotent — same rationale as archive's idempotent
+    // branch.
+    if (manifest.archived !== true) {
+        const response = { ok: true, name };
+        return c.json(response);
+    }
+    // Strip the archive fields. Per Q6 lock D1: unarchive = flip the bit.
+    // Content + components unchanged from archive time.
+    // Cut 14: also strip `reviewState` per design-soft-delete.md Q9 N-B.1
+    // (restore always to draft). Pre-review-workflow this is a no-op.
+    const restored = stripReviewStateForRestore(stripArchiveFields(manifest));
+    await writeManifest(source, handle, name, restored, manifest);
+    // Tear down the archive-aliases sidecar — `extract` on a live manifest
+    // returns the empty set, so the diff cleans up.
+    const itemRef = { source: handle.refSource, name };
+    await rebuildArchiveAliases(source.contentRoot, itemRef, manifest, restored);
+    await Promise.all([
+        source.cache.invalidatePrefix(`${handle.scopeKind}s:`),
+        handle.scopeKind === 'fragment' ? source.cache.invalidatePrefix('pages:') : Promise.resolve(),
+    ]);
+    await c.var.audit.record({
+        action: 'unarchive',
+        outcome: 'success',
+        scope: { kind: handle.scopeKind, name },
+    });
+    // Background-stage validators re-run on the restored item — clears
+    // stale archive-related issues from the scanner cache.
+    notifyScanner(scanner, handle, name);
+    const response = { ok: true, name };
+    return c.json(response);
+}
+// ─── Set alias (Cut 12) ────────────────────────────────────────────────
+/**
+ * Edit an existing archive's `aliasOf` field. Set to a string to
+ * point at a different live target; set to null to drop the alias
+ * (pure soft-delete).
+ *
+ * Per Cut 12 grilling Q4 D1'': dedicated PATCH endpoint matches the
+ * archive route family pattern. Only valid on archived items — live
+ * items return 409 since their `aliasOf` is meaningless.
+ *
+ * Audit: emits `archive` action with `metadata.aliasEdited: true` so
+ * forensics can distinguish alias-edits from initial archives.
+ */
+async function handleSetAlias(c, resolve, handle, scanner = null) {
+    const name = c.req.param('name');
+    if (!name)
+        return c.json({ error: 'Missing name parameter' }, 400);
+    const source = await resolve(c.req.query('target'));
+    const site = await loadSiteFromSource(source);
+    const manifest = lookupManifest(site, handle, name);
+    if (!manifest)
+        return c.json({ error: `${handle.label} "${name}" not found` }, 404);
+    if (manifest.archived !== true) {
+        return c.json({ error: `${handle.label} "${name}" is not archived; cannot set alias on a live item` }, 409);
+    }
+    // Schema-validate body. `aliasOf: null` is the canonical "drop" form.
+    let raw;
+    try {
+        raw = await c.req.json();
+    }
+    catch {
+        return c.json({ error: 'Invalid JSON body' }, 400);
+    }
+    const parsed = SetAliasRequestSchema.safeParse(raw);
+    if (!parsed.success) {
+        return c.json({
+            error: 'Invalid request body',
+            issues: parsed.error.issues.map(i => ({ path: i.path.join('.'), message: i.message })),
+        }, 400);
+    }
+    const { aliasOf } = parsed.data;
+    // Idempotent — return the current state when the alias didn't change.
+    if (manifest.aliasOf === (aliasOf ?? undefined)) {
+        const response = { ok: true, name, ...(aliasOf ? { aliasOf } : {}) };
+        return c.json(response);
+    }
+    // Build the updated manifest. Drop aliasOf when null; set when string.
+    const updated = { ...manifest };
+    if (aliasOf === null)
+        delete updated.aliasOf;
+    else
+        updated.aliasOf = aliasOf;
+    await writeManifest(source, handle, name, updated, manifest);
+    // Update the archive-aliases sidecar — extract sees the new aliasOf
+    // (or empty set when dropped) and the diff handles add/remove.
+    const itemRef = { source: handle.refSource, name };
+    await rebuildArchiveAliases(source.contentRoot, itemRef, manifest, updated);
+    await Promise.all([
+        source.cache.invalidatePrefix(`${handle.scopeKind}s:`),
+        handle.scopeKind === 'fragment' ? source.cache.invalidatePrefix('pages:') : Promise.resolve(),
+    ]);
+    await c.var.audit.record({
+        action: 'archive',
+        outcome: 'success',
+        scope: { kind: handle.scopeKind, name },
+        metadata: {
+            aliasEdited: true,
+            ...(aliasOf ? { aliasOf } : { aliasDropped: true }),
+        },
+    });
+    // Re-validate after alias edit — P5 (`aliasof-points-to-archived`)
+    // and P2 (`dangling-alias`) depend on the manifest's aliasOf field.
+    notifyScanner(scanner, handle, name);
+    const response = { ok: true, name, ...(aliasOf ? { aliasOf } : {}) };
+    return c.json(response);
+}
+// ─── Purge ─────────────────────────────────────────────────────────────
+export async function handlePurge(c, resolve, handle, scanner = null) {
+    const name = c.req.param('name');
+    if (!name)
+        return c.json({ error: 'Missing name parameter' }, 400);
+    const force = c.req.query('force') === 'true';
+    const source = await resolve(c.req.query('target'));
+    const site = await loadSiteFromSource(source);
+    const manifest = lookupManifest(site, handle, name);
+    if (!manifest)
+        return c.json({ error: `${handle.label} "${name}" not found` }, 404);
+    // Per Q4 lock D1: refuse on aliases AND live refs (one 409 with
+    // both arrays). `?force=true` bypasses both per Q5 lock E1; admin
+    // role gate is enforced by `requireCapability('delete:*')` paired
+    // with the audit metadata recording what was bypassed.
+    const aliases = await collectAliases(source, name);
+    const liveRefs = await collectLiveRefs(source, handle, site, name);
+    if (!force && (aliases.length > 0 || liveRefs.length > 0)) {
+        const blocked = { code: 'DELETE_BLOCKED', aliases, liveRefs };
+        return c.json(blocked, 409);
+    }
+    // History first per pages.ts/fragments.ts pattern: the recorder's
+    // first call scans pre-purge to build the baseline, then captures
+    // the post-purge state. Writing first would lose the baseline.
+    const itemDir = source.contentRoot.path(`${handle.scopeKind}s`, name);
+    const manifestPath = join(itemDir, handle.filename);
+    if (source.history) {
+        await recordWrite({
+            history: source.history,
+            contentRoot: source.contentRoot,
+            operation: 'save',
+            items: [{ path: source.contentRoot.relative(manifestPath), content: null }],
+        });
+    }
+    await source.storage.rm(itemDir);
+    // Tear down dep-sidecars — purge IS edge removal. Asset-refs +
+    // fragment-deps go away; archive-aliases tears down too. Per-locale
+    // variants share the directory, but we tear down their sidecars
+    // separately so the per-locale ItemRef variants are explicit.
+    const itemRef = { source: handle.refSource, name };
+    const teardowns = [
+        rebuildArchiveAliases(source.contentRoot, itemRef, manifest, null),
+        rebuildAssetRefs(source.contentRoot, itemRef, manifest, null),
+        rebuildFragmentDeps(source.contentRoot, itemRef, manifest, null),
+    ];
+    // Locale variants from the loader (when the item had any).
+    const variantManifests = collectLocaleVariants(site, handle, name);
+    for (const [loc, variant] of variantManifests) {
+        const ref = { source: handle.refSource, name, locale: loc };
+        teardowns.push(rebuildArchiveAliases(source.contentRoot, ref, variant, null), rebuildAssetRefs(source.contentRoot, ref, variant, null), rebuildFragmentDeps(source.contentRoot, ref, variant, null));
+    }
+    await Promise.all(teardowns);
+    await Promise.all([
+        source.cache.invalidatePrefix(`${handle.scopeKind}s:`),
+        handle.scopeKind === 'fragment' ? source.cache.invalidatePrefix('pages:') : Promise.resolve(),
+    ]);
+    // Audit metadata captures the bypass when `?force=true` cleared
+    // blockers — per Q8 audit shape (Q5 E1 lock). Forensics finds the
+    // broken refs / dangling aliases by querying the bypass arrays.
+    const metadata = {};
+    if (manifest.archived === true) {
+        if (manifest.archivedAt)
+            metadata.archivedAt = manifest.archivedAt;
+        if (manifest.archivedBy)
+            metadata.archivedBy = manifest.archivedBy;
+    }
+    if (force) {
+        metadata.forced = true;
+        if (aliases.length > 0)
+            metadata.bypassedAliases = aliases;
+        if (liveRefs.length > 0)
+            metadata.bypassedRefs = liveRefs;
+    }
+    await c.var.audit.record({
+        action: 'purge',
+        outcome: 'success',
+        scope: { kind: handle.scopeKind, name },
+        metadata: Object.keys(metadata).length > 0 ? metadata : undefined,
+    });
+    // Item is gone — scanner clears any cached issues for this path.
+    notifyScanner(scanner, handle, name);
+    const response = { ok: true, name };
+    return c.json(response);
+}
+// ─── Helpers ──────────────────────────────────────────────────────────
+function lookupManifest(site, handle, name) {
+    return handle.scopeKind === 'page' ? site.pages.get(name) : site.fragments.get(name);
+}
+function collectLocaleVariants(site, handle, name) {
+    const localeEntry = handle.scopeKind === 'page' ? site.pageLocales.get(name) : site.fragmentLocales.get(name);
+    if (!localeEntry)
+        return [];
+    return [...localeEntry.locales.entries()];
+}
+async function writeManifest(source, handle, name, manifest, preManifest) {
+    const itemDir = source.contentRoot.path(`${handle.scopeKind}s`, name);
+    const manifestPath = join(itemDir, handle.filename);
+    const serialized = JSON.stringify(stripDirAndRoute(manifest, preManifest, handle), null, 2) + '\n';
+    // History record before write (same rationale as PUT handler).
+    if (source.history) {
+        await recordWrite({
+            history: source.history,
+            contentRoot: source.contentRoot,
+            operation: 'save',
+            items: [{ path: source.contentRoot.relative(manifestPath), content: serialized }],
+        });
+    }
+    await source.storage.writeFile(manifestPath, serialized);
+}
+/**
+ * Pages have a derived `route` field on the in-memory manifest (from
+ * the directory name). Fragments don't carry serializable extras here.
+ * The on-disk `page.json` only stores fields the author authors —
+ * `route` and `dir` are runtime projections from the loader.
+ */
+function stripDirAndRoute(manifest, preManifest, _handle) {
+    const stripped = { ...manifest };
+    delete stripped.route;
+    delete stripped.dir;
+    // Preserve any author-stored fields not in our typed shape — copy
+    // anything in preManifest that we didn't already include.
+    void preManifest;
+    return stripped;
+}
+function stripArchiveFields(manifest) {
+    const restored = { ...manifest };
+    delete restored.archived;
+    delete restored.archivedAt;
+    delete restored.archivedBy;
+    delete restored.aliasOf;
+    return restored;
+}
+/**
+ * Read every archive whose `aliasOf` points at `name`. Per Cut 5a's
+ * sidecar pattern this is one `readDir`; at the 5K-page envelope
+ * that's sub-millisecond on filesystem and ~5ms on cloud — well
+ * under the admin SLA per `team-preferences.md` rule 24.
+ */
+async function collectAliases(source, name) {
+    const refs = await readArchivesAliasing(source.contentRoot, name);
+    // ItemRef.source is `'page' | 'fragment'`; both are valid kinds
+    // for the AliasPointer. Locale variants don't show up in this
+    // index because the alias-aware renderer resolves at the bare
+    // name — locale variants share their parent's archive state.
+    return refs
+        .filter(r => r.source === 'page' || r.source === 'fragment')
+        .map(r => ({ kind: r.source, name: r.name }));
+}
+/**
+ * Collect live (non-archived) page/fragment refs for the target name.
+ * Fragment scope: walk `fragment-deps` reverse-dep sidecars; discard
+ * any referencing item that is itself archived (those are aliased,
+ * not live). Page scope: pages aren't fragment-referenced, but pages
+ * CAN be aliased by other archives (collected separately above).
+ */
+async function collectLiveRefs(source, handle, site, name) {
+    if (handle.scopeKind !== 'fragment')
+        return [];
+    const refs = await readDepsForFragment(source.contentRoot, name);
+    const live = [];
+    for (const ref of refs) {
+        if (ref.source !== 'page' && ref.source !== 'fragment')
+            continue;
+        const referrer = ref.source === 'page' ? site.pages.get(ref.name) : site.fragments.get(ref.name);
+        if (!referrer)
+            continue;
+        if (referrer.archived === true)
+            continue;
+        live.push({ kind: ref.source, name: ref.name });
+    }
+    return live;
+}
+//# sourceMappingURL=archive.js.map

package/dist/admin-api/routes/archive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive.js","sourceRoot":"","sources":["../../../src/admin-api/routes/archive.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyEG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAE3B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAA;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAG/D,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAA;AACtF,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAA;AAC7D,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AACjF,OAAO,EAIL,oBAAoB,EAKpB,qBAAqB,GAEtB,MAAM,uBAAuB,CAAA;AAE9B,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAA;AAe/G,MAAM,CAAC,MAAM,WAAW,GAAe;IACrC,SAAS,EAAE,MAAM;IACjB,SAAS,EAAE,MAAM;IACjB,QAAQ,EAAE,WAAW;IACrB,KAAK,EAAE,MAAM;CACd,CAAA;AAED,MAAM,CAAC,MAAM,eAAe,GAAe;IACzC,SAAS,EAAE,UAAU;IACrB,SAAS,EAAE,UAAU;IACrB,QAAQ,EAAE,eAAe;IACzB,KAAK,EAAE,UAAU;CAClB,CAAA;AAmBD,MAAM,UAAU,aAAa,CAAC,OAA8B,EAAE,OAA6B,EAAE;IAC3F,MAAM,GAAG,GAAG,IAAI,IAAI,EAAY,CAAA;IAChC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAA;IAEpC,qEAAqE;IACrE,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE,iBAAiB,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,EAAE,CAC1E,aAAa,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAChD,CAAA;IACD,GAAG,CAAC,IAAI,CAAC,4BAA4B,EAAE,iBAAiB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,EAAE,CAC1E,eAAe,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAClD,CAAA;IACD,GAAG,CAAC,MAAM,CAAC,wBAAwB,EAAE,iBAAiB,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,EAAE,CAC1E,WAAW,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAC9C,CAAA;IACD,2DAA2D;IAC3D,mEAAmE;IACnE,oEAAoE;IACpE,GAAG,CAAC,KAAK,CAAC,wBAAwB,EAAE,iBAAiB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,EAAE,CACvE,cAAc,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CACjD,CAAA;IAED,qEAAqE;IACrE,GAAG,CAAC,IAAI,CAAC,8BAA8B,EAAE,iBAAiB,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,EAAE,CAClF,aAAa,CAAC,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,CAAC,CACpD,CAAA;IACD,GAAG,CAAC,IAAI,CAAC,gCAAgC,EAAE,iBAAiB,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,EAAE,CAClF,eAAe,CAAC,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,CAAC,CACtD,CAAA;IACD,GAAG,CAAC,MAAM,CAAC,4BAA4B,EAAE,iBAAiB,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,EAAE,CAClF,WAAW,CAAC,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,CAAC,CAClD,CAAA;IACD,GAAG,CAAC,KAAK,CAAC,4BAA4B,EAAE,iBAAiB,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,EAAE,CAC/E,cAAc,CAAC,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,CAAC,CACrD,CAAA;IAED,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CACpB,OAAuE,EACvE,MAAkB,EAClB,IAAY;IAEZ,IAAI,CAAC,OAAO;QAAE,OAAM;IACpB,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAA;IAChE,MAAM,QAAQ,GAAG,GAAG,IAAI,IAAI,IAAI,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAA;IACrD,KAAK,OAAO,CAAC,MAAM,CAAC;QAClB,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE;KACjD,CAAC,CAAA;AACJ,CAAC;AAED,0EAA0E;AAE1E,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,CAAoB,EACpB,OAA8B,EAC9B,MAAkB,EAClB,UAA0E,IAAI;IAE9E,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAChC,IAAI,CAAC,IAAI;QAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,GAAG,CAAC,CAAA;IAClE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAA;IACnD,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAA;IAE7C,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;IACnD,IAAI,CAAC,QAAQ;QAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,KAAK,KAAK,IAAI,aAAa,EAAE,EAAE,GAAG,CAAC,CAAA;IAEnF,gEAAgE;IAChE,6DAA6D;IAC7D,IAAI,IAAI,GAAY,EAAE,CAAA;IACtB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAA;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,kEAAkE;QAClE,gEAAgE;QAChE,gBAAgB;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;IACzD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,CAAC,IAAI,CACX;YACE,KAAK,EAAE,sBAAsB;YAC7B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;SACvF,EACD,GAAG,CACJ,CAAA;IACH,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAA;IACnC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,MAAM,CAAA;IAE7C,gEAAgE;IAChE,iEAAiE;IACjE,8DAA8D;IAC9D,kEAAkE;IAClE,6DAA6D;IAC7D,qCAAqC;IACrC,EAAE;IACF,iEAAiE;IACjE,0DAA0D;IAC1D,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QACrD,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;QAClE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,OAAO,GAAuB,EAAE,IAAI,EAAE,uBAAuB,EAAE,QAAQ,EAAE,CAAA;YAC/E,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;QAC7B,CAAC;IACH,CAAC;IAED,8DAA8D;IAC9D,kEAAkE;IAClE,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAoB;YAChC,EAAE,EAAE,IAAI;YACR,IAAI;YACJ,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC3D,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3D,CAAA;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACzB,CAAC;IAED,kEAAkE;IAClE,mEAAmE;IACnE,2CAA2C;IAC3C,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAA;IACjC,MAAM,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAC3C,MAAM,QAAQ,GAAsB;QAClC,GAAG,QAAQ;QACX,QAAQ,EAAE,IAAI;QACd,UAAU;QACV,UAAU,EAAE,SAAS,CAAC,EAAE;KACzB,CAAA;IACD,IAAI,OAAO;QAAE,QAAQ,CAAC,OAAO,GAAG,OAAO,CAAA;IAEvC,MAAM,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAA;IAE7D,6DAA6D;IAC7D,gEAAgE;IAChE,kEAAkE;IAClE,6BAA6B;IAC7B,MAAM,OAAO,GAAY,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,CAAA;IAC3D,MAAM,qBAAqB,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAA;IAE5E,oEAAoE;IACpE,iEAAiE;IACjE,mEAAmE;IACnE,uDAAuD;IAEvD,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,SAAS,IAAI,CAAC;QACtD,MAAM,CAAC,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE;KAC9F,CAAC,CAAA;IACF,mEAAmE;IACnE,+DAA+D;IAC/D,iDAAiD;IACjD,kEAAkE;IAClE,4DAA4D;IAC5D,MAAM,eAAe,GAA4B,EAAE,GAAG,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAA;IACvF,IAAI,OAAO;QAAE,eAAe,CAAC,OAAO,GAAG,OAAO,CAAA;IAC9C,IAAI,KAAK,EAAE,CAAC;QACV,eAAe,CAAC,MAAM,GAAG,IAAI,CAAA;QAC7B,MAAM,YAAY,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;QACtE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;YAAE,eAAe,CAAC,YAAY,GAAG,YAAY,CAAA;IAC1E,CAAC;IACD,+DAA+D;IAC/D,oEAAoE;IACpE,mEAAmE;IACnE,qEAAqE;IACrE,oCAAoC;IACpC,MAAM,aAAa,GAAG,sBAAsB,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACxF,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;IACzC,CAAC;IACD,MAAM,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;QACvB,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,SAAS;QAClB,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE;QACvC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS;KAChF,CAAC,CAAA;IACF,oEAAoE;IACpE,kEAAkE;IAClE,6CAA6C;IAC7C,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;IAEpC,MAAM,QAAQ,GAAoB,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;IACjG,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;AACzB,CAAC;AAED,0EAA0E;AAE1E,KAAK,UAAU,eAAe,CAC5B,CAAoB,EACpB,OAA8B,EAC9B,MAAkB,EAClB,UAA0E,IAAI;IAE9E,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAChC,IAAI,CAAC,IAAI;QAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,GAAG,CAAC,CAAA;IAClE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAA;IACnD,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAA;IAE7C,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;IACnD,IAAI,CAAC,QAAQ;QAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,KAAK,KAAK,IAAI,aAAa,EAAE,EAAE,GAAG,CAAC,CAAA;IAEnF,oEAAoE;IACpE,UAAU;IACV,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAsB,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;QACtD,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACzB,CAAC;IAED,sEAAsE;IACtE,oDAAoD;IACpD,sEAAsE;IACtE,kEAAkE;IAClE,MAAM,QAAQ,GAAsB,0BAA0B,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAA;IAE5F,MAAM,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAA;IAE7D,uEAAuE;IACvE,gDAAgD;IAChD,MAAM,OAAO,GAAY,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,CAAA;IAC3D,MAAM,qBAAqB,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAA;IAE5E,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,SAAS,IAAI,CAAC;QACtD,MAAM,CAAC,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE;KAC9F,CAAC,CAAA;IACF,MAAM,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;QACvB,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE,SAAS;QAClB,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE;KACxC,CAAC,CAAA;IACF,mEAAmE;IACnE,uDAAuD;IACvD,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;IAEpC,MAAM,QAAQ,GAAsB,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IACtD,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;AACzB,CAAC;AAED,0EAA0E;AAE1E;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,cAAc,CAC3B,CAAoB,EACpB,OAA8B,EAC9B,MAAkB,EAClB,UAA0E,IAAI;IAE9E,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAChC,IAAI,CAAC,IAAI;QAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,GAAG,CAAC,CAAA;IAClE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAA;IACnD,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAA;IAE7C,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;IACnD,IAAI,CAAC,QAAQ;QAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,KAAK,KAAK,IAAI,aAAa,EAAE,EAAE,GAAG,CAAC,CAAA;IAEnF,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC/B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,KAAK,KAAK,IAAI,oDAAoD,EAAE,EAAE,GAAG,CAAC,CAAA;IAC7G,CAAC;IAED,sEAAsE;IACtE,IAAI,GAAY,CAAA;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAA;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,GAAG,CAAC,CAAA;IACpD,CAAC;IACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;IACnD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,CAAC,IAAI,CACX;YACE,KAAK,EAAE,sBAAsB;YAC7B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;SACvF,EACD,GAAG,CACJ,CAAA;IACH,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,CAAA;IAE/B,sEAAsE;IACtE,IAAI,QAAQ,CAAC,OAAO,KAAK,CAAC,OAAO,IAAI,SAAS,CAAC,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAqB,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;QACtF,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACzB,CAAC;IAED,uEAAuE;IACvE,MAAM,OAAO,GAAsB,EAAE,GAAG,QAAQ,EAAE,CAAA;IAClD,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC,OAAO,CAAA;;QACvC,OAAO,CAAC,OAAO,GAAG,OAAO,CAAA;IAE9B,MAAM,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAA;IAE5D,oEAAoE;IACpE,+DAA+D;IAC/D,MAAM,OAAO,GAAY,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,CAAA;IAC3D,MAAM,qBAAqB,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;IAE3E,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,SAAS,IAAI,CAAC;QACtD,MAAM,CAAC,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE;KAC9F,CAAC,CAAA;IACF,MAAM,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;QACvB,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,SAAS;QAClB,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE;QACvC,QAAQ,EAAE;YACR,WAAW,EAAE,IAAI;YACjB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;SACpD;KACF,CAAC,CAAA;IACF,mEAAmE;IACnE,oEAAoE;IACpE,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;IAEpC,MAAM,QAAQ,GAAqB,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;IACtF,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;AACzB,CAAC;AAED,0EAA0E;AAE1E,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,CAAoB,EACpB,OAA8B,EAC9B,MAAkB,EAClB,UAA0E,IAAI;IAE9E,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAChC,IAAI,CAAC,IAAI;QAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,GAAG,CAAC,CAAA;IAClE,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,MAAM,CAAA;IAC7C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAA;IACnD,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAA;IAE7C,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;IACnD,IAAI,CAAC,QAAQ;QAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,KAAK,KAAK,IAAI,aAAa,EAAE,EAAE,GAAG,CAAC,CAAA;IAEnF,gEAAgE;IAChE,kEAAkE;IAClE,kEAAkE;IAClE,uDAAuD;IACvD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAClD,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;IAElE,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;QAC1D,MAAM,OAAO,GAAiB,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAA;QAC3E,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IAC7B,CAAC;IAED,kEAAkE;IAClE,kEAAkE;IAClE,+DAA+D;IAC/D,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,SAAS,GAAG,EAAE,IAAI,CAAC,CAAA;IACrE,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;IACnD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,WAAW,CAAC;YAChB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,SAAS,EAAE,MAAM;YACjB,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;SAC5E,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,CAAA;IAEhC,+DAA+D;IAC/D,oEAAoE;IACpE,gEAAgE;IAChE,8DAA8D;IAC9D,MAAM,OAAO,GAAY,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,CAAA;IAC3D,MAAM,SAAS,GAAoB;QACjC,qBAAqB,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC;QAClE,gBAAgB,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC;QAC7D,mBAAmB,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC;KACjE,CAAA;IACD,2DAA2D;IAC3D,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;IAClE,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,gBAAgB,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAY,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;QACpE,SAAS,CAAC,IAAI,CACZ,qBAAqB,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,EAC7D,gBAAgB,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,EACxD,mBAAmB,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAC5D,CAAA;IACH,CAAC;IACD,MAAM,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IAE5B,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,SAAS,IAAI,CAAC;QACtD,MAAM,CAAC,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE;KAC9F,CAAC,CAAA;IAEF,gEAAgE;IAChE,kEAAkE;IAClE,gEAAgE;IAChE,MAAM,QAAQ,GAA4B,EAAE,CAAA;IAC5C,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC/B,IAAI,QAAQ,CAAC,UAAU;YAAE,QAAQ,CAAC,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAA;QAClE,IAAI,QAAQ,CAAC,UAAU;YAAE,QAAQ,CAAC,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAA;IACpE,CAAC;IACD,IAAI,KAAK,EAAE,CAAC;QACV,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAA;QACtB,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,QAAQ,CAAC,eAAe,GAAG,OAAO,CAAA;QAC1D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,QAAQ,CAAC,YAAY,GAAG,QAAQ,CAAA;IAC3D,CAAC;IACD,MAAM,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;QACvB,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,SAAS;QAClB,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE;QACvC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;KAClE,CAAC,CAAA;IACF,iEAAiE;IACjE,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;IAEpC,MAAM,QAAQ,GAAkB,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IAClD,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;AACzB,CAAC;AAED,yEAAyE;AAEzE,SAAS,cAAc,CACrB,IAAyC,EACzC,MAAkB,EAClB,IAAY;IAEZ,OAAO,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;AACtF,CAAC;AAED,SAAS,qBAAqB,CAC5B,IAAyC,EACzC,MAAkB,EAClB,IAAY;IAEZ,MAAM,WAAW,GAAG,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC7G,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,CAAA;IAC3B,OAAO,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;AAC3C,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,MAAoD,EACpD,MAAkB,EAClB,IAAY,EACZ,QAA2B,EAC3B,WAA4C;IAE5C,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,SAAS,GAAG,EAAE,IAAI,CAAC,CAAA;IACrE,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;IACnD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAA;IAElG,+DAA+D;IAC/D,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,WAAW,CAAC;YAChB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,SAAS,EAAE,MAAM;YACjB,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;SAClF,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,EAAE,UAAU,CAAC,CAAA;AAC1D,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CACvB,QAA2B,EAC3B,WAA4C,EAC5C,OAAmB;IAEnB,MAAM,QAAQ,GAAG,EAAE,GAAG,QAAQ,EAAiD,CAAA;IAC/E,OAAO,QAAQ,CAAC,KAAK,CAAA;IACrB,OAAO,QAAQ,CAAC,GAAG,CAAA;IACnB,kEAAkE;IAClE,0DAA0D;IAC1D,KAAK,WAAW,CAAA;IAChB,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,SAAS,kBAAkB,CAAC,QAA2B;IACrD,MAAM,QAAQ,GAAG,EAAE,GAAG,QAAQ,EAAiD,CAAA;IAC/E,OAAO,QAAQ,CAAC,QAAQ,CAAA;IACxB,OAAO,QAAQ,CAAC,UAAU,CAAA;IAC1B,OAAO,QAAQ,CAAC,UAAU,CAAA;IAC1B,OAAO,QAAQ,CAAC,OAAO,CAAA;IACvB,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,cAAc,CAC3B,MAAoD,EACpD,IAAY;IAEZ,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,CAAA;IACjE,gEAAgE;IAChE,8DAA8D;IAC9D,8DAA8D;IAC9D,6DAA6D;IAC7D,OAAO,IAAI;SACR,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC;SAC3D,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAA6B,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;AACxE,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,eAAe,CAC5B,MAAoD,EACpD,MAAkB,EAClB,IAAyC,EACzC,IAAY;IAEZ,IAAI,MAAM,CAAC,SAAS,KAAK,UAAU;QAAE,OAAO,EAAE,CAAA;IAC9C,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,CAAA;IAChE,MAAM,IAAI,GAAc,EAAE,CAAA;IAC1B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU;YAAE,SAAQ;QAChE,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAChG,IAAI,CAAC,QAAQ;YAAE,SAAQ;QACvB,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI;YAAE,SAAQ;QACxC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;IACjD,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/admin-api/routes/assets.d.ts

@@ -0,0 +1,21 @@
+/**
+ * HTTP routes for `/api/assets*`.
+ *
+ * Thin adapters. Each handler:
+ *   1. resolves the active target's source context,
+ *   2. delegates to the appropriate asset-domain operation,
+ *   3. maps success to the HTTP response,
+ *   4. delegates error-to-response translation to `respondWithAssetError`.
+ *
+ * No validation, storage, or orchestration logic in here — the asset
+ * domain owns all of that (see `src/assets/`).
+ */
+import { Hono } from 'hono';
+import type { SourceContextResolver } from '../source-context.js';
+import type { AuditEnv } from '../middleware/audit.js';
+import { type HookRegistry } from '../../hooks/index.js';
+export interface AssetRoutesOptions {
+    hooks?: HookRegistry;
+}
+export declare function assetRoutes(resolve: SourceContextResolver, opts?: AssetRoutesOptions): Hono<AuditEnv, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=assets.d.ts.map

package/dist/admin-api/routes/assets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assets.d.ts","sourceRoot":"","sources":["../../../src/admin-api/routes/assets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAgB3B,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AAEjE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAA;AACtD,OAAO,EAML,KAAK,YAAY,EAElB,MAAM,sBAAsB,CAAA;AAG7B,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,EAAE,YAAY,CAAA;CACrB;AAoCD,wBAAgB,WAAW,CAAC,OAAO,EAAE,qBAAqB,EAAE,IAAI,GAAE,kBAAuB,yDA8gBxF"}