gazetta 0.6.0 → 0.8.0

package/dist/admin-api/routes/system.d.ts

@@ -0,0 +1,23 @@
+import { Hono } from 'hono';
+import type { SourceContextResolver } from '../source-context.js';
+/**
+ * System routes — operational diagnostics for the admin process.
+ *
+ * `GET /api/system/cache/stats` returns the current snapshot of the
+ * resolved source's `AdminCache`. Operators (or external monitoring)
+ * pull this on demand; the periodic structured log emitted from
+ * `admin-api/index.ts` covers passive observability via log
+ * aggregators.
+ *
+ * # Why per-source, not process-global
+ *
+ * Per `design-cache.md` Gap 3, each `SourceContext` carries its own
+ * `AdminCache` instance scoped via `forSite()`. Different targets
+ * (read via `?target=...`) get different caches. The route mirrors
+ * the rest of admin-api: every endpoint resolves a source from the
+ * `?target=` query, so stats follow the same convention. Operators
+ * monitoring "cache health" pick a target the same way they pick
+ * one for `/api/pages`.
+ */
+export declare function systemRoutes(resolve: SourceContextResolver): Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=system.d.ts.map

package/dist/admin-api/routes/system.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"system.d.ts","sourceRoot":"","sources":["../../../src/admin-api/routes/system.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAI3B,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AAGjE;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,qBAAqB,8EAkG1D"}

package/dist/admin-api/routes/system.js

@@ -0,0 +1,115 @@
+import { Hono } from 'hono';
+import { streamSSE } from 'hono/streaming';
+import { requireCapability } from '../middleware/capability.js';
+/**
+ * System routes — operational diagnostics for the admin process.
+ *
+ * `GET /api/system/cache/stats` returns the current snapshot of the
+ * resolved source's `AdminCache`. Operators (or external monitoring)
+ * pull this on demand; the periodic structured log emitted from
+ * `admin-api/index.ts` covers passive observability via log
+ * aggregators.
+ *
+ * # Why per-source, not process-global
+ *
+ * Per `design-cache.md` Gap 3, each `SourceContext` carries its own
+ * `AdminCache` instance scoped via `forSite()`. Different targets
+ * (read via `?target=...`) get different caches. The route mirrors
+ * the rest of admin-api: every endpoint resolves a source from the
+ * `?target=` query, so stats follow the same convention. Operators
+ * monitoring "cache health" pick a target the same way they pick
+ * one for `/api/pages`.
+ */
+export function systemRoutes(resolve) {
+    const app = new Hono();
+    app.get('/api/system/cache/stats', requireCapability('configure:site'), async (c) => {
+        const source = await resolve(c.req.query('target'));
+        // `stats()` is optional on the AdminCache contract — providers
+        // that don't expose it return a minimum-floor zero snapshot so
+        // the response shape stays stable across providers.
+        const stats = (await source.cache.stats?.()) ?? { hits: 0, misses: 0, size: 0 };
+        const body = stats;
+        return c.json(body);
+    });
+    /**
+     * Server-Sent Events stream of cache invalidations on the resolved
+     * source's cache. Powers the L4→L6 cascade per `design-cache.md`'s
+     * "Offline composition" section: server-side L4 invalidations
+     * trigger SSE broadcast; browser-side L6 caches subscribe and
+     * invalidate their entries in response.
+     *
+     * Subscribers receive the consumer-facing prefix (e.g., `pages:`)
+     * — the version-prefix and per-site scope are stripped by the
+     * forSite wrapper before the event reaches the route.
+     *
+     * Cleanup: stream.onAbort fires when the client disconnects (tab
+     * close, navigation, network drop). The subscribe disposer
+     * detaches the handler from the cache so we don't leak between
+     * connections.
+     *
+     * # Reconnect contract — clients must reset their cache
+     *
+     * The stream does NOT emit event IDs (`SSEMessage.id`), so the
+     * standard EventSource `Last-Event-ID` reconnect mechanism has
+     * nothing to anchor on. Servers can't replay missed events.
+     * Clients reconnecting must assume "I may have missed any
+     * invalidation that happened during the gap" and reset their own
+     * cache state. Per `design-offline.md`'s reconnect strategy: full
+     * local cache reset is the simplest correctness mechanism.
+     *
+     * # Multi-instance scope (v1)
+     *
+     * The stream forwards invalidations from THIS instance's cache
+     * only. With v1's `MemoryCache`, there's no cross-instance fan-out;
+     * when `RedisCache` ships, its `subscribe()` will deliver cross-
+     * instance events via Redis pub/sub and this route forwards them
+     * unchanged.
+     */
+    app.get('/api/system/cache/invalidations', requireCapability('configure:site'), async (c) => {
+        const source = await resolve(c.req.query('target'));
+        return streamSSE(c, async (stream) => {
+            // Buffer events between MemoryCache's synchronous emit and our
+            // async stream.writeSSE. If the client is slow to read, events
+            // accumulate here rather than blocking the invalidation that
+            // triggered them. Unbounded in v1 — admin invalidation volume
+            // is low; bound + drop-oldest lands when concrete pain surfaces.
+            const queue = [];
+            let resolveWaiter = null;
+            const dispose = source.cache.subscribe(event => {
+                queue.push(event);
+                if (resolveWaiter) {
+                    const r = resolveWaiter;
+                    resolveWaiter = null;
+                    r();
+                }
+            });
+            stream.onAbort(() => {
+                dispose();
+                if (resolveWaiter) {
+                    const r = resolveWaiter;
+                    resolveWaiter = null;
+                    r();
+                }
+            });
+            // Send a comment immediately so the client's EventSource
+            // transitions to OPEN — useful for tests that wait on
+            // readyState before triggering invalidations.
+            await stream.writeSSE({ data: '', event: 'ready' });
+            while (!stream.aborted) {
+                if (queue.length === 0) {
+                    await new Promise(resolve => {
+                        resolveWaiter = resolve;
+                    });
+                    continue;
+                }
+                const event = queue.shift();
+                await stream.writeSSE({
+                    event: 'invalidation',
+                    data: JSON.stringify(event),
+                });
+            }
+        });
+    });
+    return app;
+}
+//# sourceMappingURL=system.js.map

package/dist/admin-api/routes/system.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system.js","sourceRoot":"","sources":["../../../src/admin-api/routes/system.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAI1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAE/D;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,YAAY,CAAC,OAA8B;IACzD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;IAEtB,GAAG,CAAC,GAAG,CAAC,yBAAyB,EAAE,iBAAiB,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;QAChF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAA;QACnD,+DAA+D;QAC/D,+DAA+D;QAC/D,oDAAoD;QACpD,MAAM,KAAK,GAAe,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAA;QAC3F,MAAM,IAAI,GAAuB,KAAK,CAAA;QACtC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACrB,CAAC,CAAC,CAAA;IAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiCG;IACH,GAAG,CAAC,GAAG,CAAC,iCAAiC,EAAE,iBAAiB,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;QACxF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAA;QACnD,OAAO,SAAS,CAAC,CAAC,EAAE,KAAK,EAAC,MAAM,EAAC,EAAE;YACjC,+DAA+D;YAC/D,+DAA+D;YAC/D,6DAA6D;YAC7D,8DAA8D;YAC9D,iEAAiE;YACjE,MAAM,KAAK,GAAwB,EAAE,CAAA;YACrC,IAAI,aAAa,GAAwB,IAAI,CAAA;YAE7C,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE;gBAC7C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;gBACjB,IAAI,aAAa,EAAE,CAAC;oBAClB,MAAM,CAAC,GAAG,aAAa,CAAA;oBACvB,aAAa,GAAG,IAAI,CAAA;oBACpB,CAAC,EAAE,CAAA;gBACL,CAAC;YACH,CAAC,CAAC,CAAA;YAEF,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE;gBAClB,OAAO,EAAE,CAAA;gBACT,IAAI,aAAa,EAAE,CAAC;oBAClB,MAAM,CAAC,GAAG,aAAa,CAAA;oBACvB,aAAa,GAAG,IAAI,CAAA;oBACpB,CAAC,EAAE,CAAA;gBACL,CAAC;YACH,CAAC,CAAC,CAAA;YAEF,yDAAyD;YACzD,sDAAsD;YACtD,8CAA8C;YAC9C,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;YAEnD,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACvB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACvB,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE;wBAChC,aAAa,GAAG,OAAO,CAAA;oBACzB,CAAC,CAAC,CAAA;oBACF,SAAQ;gBACV,CAAC;gBACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAG,CAAA;gBAC5B,MAAM,MAAM,CAAC,QAAQ,CAAC;oBACpB,KAAK,EAAE,cAAc;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;iBAC5B,CAAC,CAAA;YACJ,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/admin-api/routes/templates.d.ts

@@ -1,4 +1,14 @@
 import { Hono } from 'hono';
 import type { SourceContextResolver } from '../source-context.js';
-export declare function templateRoutes(resolve: SourceContextResolver, templatesDir?: string, adminDir?: string, production?: boolean): Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
+import type { ValidationScanner } from '../../validation/scanner.js';
+export interface TemplateRoutesOptions {
+    /**
+     * Validation scanner — used by `GET /api/templates/:name/impact` to
+     * project the template's per-item issues. When omitted, the impact
+     * endpoint reports all clean (no issues), which matches the
+     * "validation disabled" boot path.
+     */
+    scanner?: ValidationScanner | null;
+}
+export declare function templateRoutes(resolve: SourceContextResolver, templatesDir?: string, adminDir?: string, production?: boolean, opts?: TemplateRoutesOptions): Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
 //# sourceMappingURL=templates.d.ts.map

package/dist/admin-api/routes/templates.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"templates.d.ts","sourceRoot":"","sources":["../../../src/admin-api/routes/templates.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAK3B,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AAIjE,wBAAgB,cAAc,CAC5B,OAAO,EAAE,qBAAqB,EAC9B,YAAY,CAAC,EAAE,MAAM,EACrB,QAAQ,CAAC,EAAE,MAAM,EACjB,UAAU,CAAC,EAAE,OAAO,8EA6DrB"}
+{"version":3,"file":"templates.d.ts","sourceRoot":"","sources":["../../../src/admin-api/routes/templates.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAK3B,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AAGjE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAKpE,MAAM,WAAW,qBAAqB;IACpC;;;;;OAKG;IACH,OAAO,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAA;CACnC;AAED,wBAAgB,cAAc,CAC5B,OAAO,EAAE,qBAAqB,EAC9B,YAAY,CAAC,EAAE,MAAM,EACrB,QAAQ,CAAC,EAAE,MAAM,EACjB,UAAU,CAAC,EAAE,OAAO,EACpB,IAAI,GAAE,qBAA0B,8EA2FjC"}

package/dist/admin-api/routes/templates.js

@@ -3,8 +3,11 @@ import { join } from 'node:path';
 import { z } from 'zod';
 import { loadTemplate, hasEditorFile } from '../../template-loader.js';
 import { createFilesystemProvider } from '../../providers/filesystem.js';
+import { loadSiteFromSource } from '../source-context.js';
+import { requireCapability } from '../middleware/capability.js';
+import { computeTemplateImpact } from '../../validation/template-impact.js';
 const EDITOR_EXTENSIONS = ['.tsx', '.ts'];
-export function templateRoutes(resolve, templatesDir, adminDir, production) {
+export function templateRoutes(resolve, templatesDir, adminDir, production, opts = {}) {
     const app = new Hono();
     // Templates and admin live at project level, outside target content storage.
     // Read them via a cwd-rooted filesystem provider and absolute paths.
@@ -20,7 +23,7 @@ export function templateRoutes(resolve, templatesDir, adminDir, production) {
         const fieldsBaseUrl = production ? '/admin/fields' : `/admin/@fs/${fieldsDir}`;
         return { tplDir, editorsDir, fieldsBaseUrl };
     }
-    app.get('/api/templates', async (c) => {
+    app.get('/api/templates', requireCapability('read:pages'), async (c) => {
         const { tplDir } = await dirs(c);
         if (!(await storage.exists(tplDir)))
             return c.json([]);
@@ -28,7 +31,7 @@ export function templateRoutes(resolve, templatesDir, adminDir, production) {
         const templates = entries.filter(e => e.isDirectory).map(e => ({ name: e.name }));
         return c.json(templates);
     });
-    app.get('/api/templates/:name/schema', async (c) => {
+    app.get('/api/templates/:name/schema', requireCapability('read:pages'), async (c) => {
         const name = c.req.param('name');
         const { tplDir, editorsDir, fieldsBaseUrl } = await dirs(c);
         try {
@@ -58,6 +61,36 @@ export function templateRoutes(resolve, templatesDir, adminDir, production) {
             return c.json({ error: `Failed to load schema for template "${name}": ${err.message}` }, 500);
         }
     });
+    /**
+     * GET /api/templates/:name/impact — Validation Cut 6.
+     *
+     * Returns the items (pages + fragments) that use this template, along
+     * with their issues from the background scanner. Powers the
+     * DevPlayground "Impact" tab + the toolbar banner's view-impact link.
+     *
+     * The walk recurses into nested inline components (a page that doesn't
+     * top-level-use the template but contains a deep inline component
+     * with that template still appears in the impact list — its
+     * schema-conformance issues land on the item).
+     *
+     * `scanner` is optional. When validation is disabled (or not yet
+     * built at boot), every item appears with `issues: []` — accurate
+     * since no validation ran.
+     */
+    app.get('/api/templates/:name/impact', requireCapability('read:pages'), async (c) => {
+        const name = c.req.param('name');
+        const source = await resolve(c.req.query('target'));
+        let site;
+        try {
+            site = await loadSiteFromSource(source);
+        }
+        catch (err) {
+            return c.json({ error: `Failed to load site: ${err.message}` }, 500);
+        }
+        const issuesFor = (path) => opts.scanner?.issuesFor(path) ?? [];
+        const impact = computeTemplateImpact(site, name, issuesFor);
+        return c.json(impact);
+    });
     return app;
 }
 //# sourceMappingURL=templates.js.map

package/dist/admin-api/routes/templates.js.map

@@ -1 +1 @@
-{"version":3,"file":"templates.js","sourceRoot":"","sources":["../../../src/admin-api/routes/templates.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AACtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAA;AAGxE,MAAM,iBAAiB,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;AAEzC,MAAM,UAAU,cAAc,CAC5B,OAA8B,EAC9B,YAAqB,EACrB,QAAiB,EACjB,UAAoB;IAEpB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;IACtB,6EAA6E;IAC7E,qEAAqE;IACrE,MAAM,OAAO,GAAG,wBAAwB,EAAE,CAAA;IAE1C,KAAK,UAAU,IAAI,CAAC,CAAyB;QAC3C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAA;QACnD,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,CAAA;QACjC,MAAM,MAAM,GAAG,YAAY,IAAI,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC,CAAA;QAChE,MAAM,MAAM,GAAG,QAAQ,IAAI,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,CAAA;QACxD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;QAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;QACxC,uDAAuD;QACvD,MAAM,aAAa,GAAG,UAAU,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,cAAc,SAAS,EAAE,CAAA;QAC9E,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,CAAA;IAC9C,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;QAClC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAA;QAChC,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAEtD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAC7C,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;QACjF,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,GAAG,CAAC,6BAA6B,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;QAC/C,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAChC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAA;QAE3D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YACxD,MAAM,UAAU,GAAG,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,MAAmB,CAAC,CAAA;YAC7D,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,CAAA;YAEhE,IAAI,SAA6B,CAAA;YACjC,IAAI,SAAS,EAAE,CAAC;gBACd,IAAI,UAAU,EAAE,CAAC;oBACf,8BAA8B;oBAC9B,SAAS,GAAG,kBAAkB,IAAI,KAAK,CAAA;gBACzC,CAAC;qBAAM,CAAC;oBACN,gCAAgC;oBAChC,KAAK,MAAM,GAAG,IAAI,iBAAiB,EAAE,CAAC;wBACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,GAAG,IAAI,GAAG,GAAG,EAAE,CAAC,CAAA;wBAClD,IAAI,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;4BACnC,SAAS,GAAG,cAAc,QAAQ,EAAE,CAAA;4BACpC,MAAK;wBACP,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAED,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,GAAI,UAAsC,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAA;QACpG,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uCAAuC,IAAI,MAAO,GAAa,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QAC1G,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,OAAO,GAAG,CAAA;AACZ,CAAC"}
+{"version":3,"file":"templates.js","sourceRoot":"","sources":["../../../src/admin-api/routes/templates.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AACtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAA;AAExE,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAE/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAA;AAE3E,MAAM,iBAAiB,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;AAYzC,MAAM,UAAU,cAAc,CAC5B,OAA8B,EAC9B,YAAqB,EACrB,QAAiB,EACjB,UAAoB,EACpB,OAA8B,EAAE;IAEhC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;IACtB,6EAA6E;IAC7E,qEAAqE;IACrE,MAAM,OAAO,GAAG,wBAAwB,EAAE,CAAA;IAE1C,KAAK,UAAU,IAAI,CAAC,CAAyB;QAC3C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAA;QACnD,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,CAAA;QACjC,MAAM,MAAM,GAAG,YAAY,IAAI,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC,CAAA;QAChE,MAAM,MAAM,GAAG,QAAQ,IAAI,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,CAAA;QACxD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;QAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;QACxC,uDAAuD;QACvD,MAAM,aAAa,GAAG,UAAU,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,cAAc,SAAS,EAAE,CAAA;QAC9E,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,CAAA;IAC9C,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,YAAY,CAAC,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;QACnE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAA;QAChC,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAEtD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAC7C,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;QACjF,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,GAAG,CAAC,6BAA6B,EAAE,iBAAiB,CAAC,YAAY,CAAC,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;QAChF,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAChC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAA;QAE3D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YACxD,MAAM,UAAU,GAAG,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,MAAmB,CAAC,CAAA;YAC7D,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,CAAA;YAEhE,IAAI,SAA6B,CAAA;YACjC,IAAI,SAAS,EAAE,CAAC;gBACd,IAAI,UAAU,EAAE,CAAC;oBACf,8BAA8B;oBAC9B,SAAS,GAAG,kBAAkB,IAAI,KAAK,CAAA;gBACzC,CAAC;qBAAM,CAAC;oBACN,gCAAgC;oBAChC,KAAK,MAAM,GAAG,IAAI,iBAAiB,EAAE,CAAC;wBACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,GAAG,IAAI,GAAG,GAAG,EAAE,CAAC,CAAA;wBAClD,IAAI,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;4BACnC,SAAS,GAAG,cAAc,QAAQ,EAAE,CAAA;4BACpC,MAAK;wBACP,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAED,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,GAAI,UAAsC,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAA;QACpG,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uCAAuC,IAAI,MAAO,GAAa,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QAC1G,CAAC;IACH,CAAC,CAAC,CAAA;IAEF;;;;;;;;;;;;;;;OAeG;IACH,GAAG,CAAC,GAAG,CAAC,6BAA6B,EAAE,iBAAiB,CAAC,YAAY,CAAC,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;QAChF,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAChC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAA;QACnD,IAAI,IAAyC,CAAA;QAC7C,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAA;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAyB,GAAa,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QACjF,CAAC;QACD,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;QACvE,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAA;QAC3D,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACvB,CAAC,CAAC,CAAA;IAEF,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/admin-api/routes/validation.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Background validation API (Cut 2).
+ *
+ * - `GET /api/validation/issues` — current accumulated issues from the
+ *   per-instance scanner. Reads from the in-memory store; doesn't trigger
+ *   a scan.
+ *
+ * The peer SSE channel (`/__validation`) lives at the outer Hono app —
+ * see `mountValidationSse()` below. This mirrors `/__reload`'s placement:
+ * SSE channels sit at the outer app's root so dev-mode browsers reach them
+ * without going through Vite's middleware (which would 404 anything not
+ * matched by Vite's `proxy` config).
+ *
+ * Per `design-validation-implementation.md` Cut 2 + open question 5 (SSE
+ * channel locked to its own path so cache invalidations + validation
+ * events don't share a route).
+ *
+ * # SOLID lenses
+ *
+ * - SRP: route maps scanner state to HTTP. Doesn't run validators, doesn't
+ *   trigger scans.
+ * - DIP: depends on `ValidationScanner` interface; tests pass a fake.
+ * - ISP: scanner exposes a narrow read surface (`allIssues` + `subscribe`);
+ *   the route consumes only what it needs.
+ */
+import { Hono } from 'hono';
+import type { ValidationScanner } from '../../validation/scanner.js';
+export interface ValidationRoutesOptions {
+    /** Scanner instance shared across all routes. May be null when validation isn't enabled. */
+    scanner: ValidationScanner | null;
+}
+export declare function validationRoutes(opts: ValidationRoutesOptions): Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
+/**
+ * Mount `GET /__validation` SSE channel on the outer Hono app. The browser
+ * EventSource opens this URL at the root (not under `/admin/`), matching
+ * the pattern `/__reload` already follows. Production (`gazetta serve`)
+ * pass `null` for `scanner` to mount a stub that never emits events —
+ * keeps the client's EventSource open so it doesn't reconnect-spam.
+ *
+ * The drawer subscribes once at admin boot. On every event, it re-fetches
+ * `/api/validation/issues` to pick up the latest set. Two-step (event +
+ * re-fetch) instead of pushing the full diff in the event payload because
+ * the issue set is small (~tens to hundreds of items at envelope) and a
+ * fresh GET is simpler than diff reconciliation client-side.
+ */
+export declare function mountValidationSse(app: Hono, scanner: ValidationScanner | null): void;
+//# sourceMappingURL=validation.d.ts.map

package/dist/admin-api/routes/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../src/admin-api/routes/validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAE3B,OAAO,KAAK,EAAa,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAE/E,MAAM,WAAW,uBAAuB;IACtC,4FAA4F;IAC5F,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAAA;CAClC;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,uBAAuB,8EAc7D;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,iBAAiB,GAAG,IAAI,GAAG,IAAI,CAoErF"}

package/dist/admin-api/routes/validation.js

@@ -0,0 +1,120 @@
+/**
+ * Background validation API (Cut 2).
+ *
+ * - `GET /api/validation/issues` — current accumulated issues from the
+ *   per-instance scanner. Reads from the in-memory store; doesn't trigger
+ *   a scan.
+ *
+ * The peer SSE channel (`/__validation`) lives at the outer Hono app —
+ * see `mountValidationSse()` below. This mirrors `/__reload`'s placement:
+ * SSE channels sit at the outer app's root so dev-mode browsers reach them
+ * without going through Vite's middleware (which would 404 anything not
+ * matched by Vite's `proxy` config).
+ *
+ * Per `design-validation-implementation.md` Cut 2 + open question 5 (SSE
+ * channel locked to its own path so cache invalidations + validation
+ * events don't share a route).
+ *
+ * # SOLID lenses
+ *
+ * - SRP: route maps scanner state to HTTP. Doesn't run validators, doesn't
+ *   trigger scans.
+ * - DIP: depends on `ValidationScanner` interface; tests pass a fake.
+ * - ISP: scanner exposes a narrow read surface (`allIssues` + `subscribe`);
+ *   the route consumes only what it needs.
+ */
+import { Hono } from 'hono';
+import { streamSSE } from 'hono/streaming';
+export function validationRoutes(opts) {
+    const app = new Hono();
+    /**
+     * GET /api/validation/issues — current issues. Returns an empty list when
+     * no scanner is configured (validation disabled or pre-scan boot).
+     */
+    app.get('/api/validation/issues', c => {
+        if (!opts.scanner)
+            return c.json({ issues: [], total: 0 });
+        const issues = opts.scanner.allIssues();
+        return c.json({ issues, total: issues.length });
+    });
+    return app;
+}
+/**
+ * Mount `GET /__validation` SSE channel on the outer Hono app. The browser
+ * EventSource opens this URL at the root (not under `/admin/`), matching
+ * the pattern `/__reload` already follows. Production (`gazetta serve`)
+ * pass `null` for `scanner` to mount a stub that never emits events —
+ * keeps the client's EventSource open so it doesn't reconnect-spam.
+ *
+ * The drawer subscribes once at admin boot. On every event, it re-fetches
+ * `/api/validation/issues` to pick up the latest set. Two-step (event +
+ * re-fetch) instead of pushing the full diff in the event payload because
+ * the issue set is small (~tens to hundreds of items at envelope) and a
+ * fresh GET is simpler than diff reconciliation client-side.
+ */
+export function mountValidationSse(app, scanner) {
+    app.get('/__validation', async (c) => {
+        return streamSSE(c, async (stream) => {
+            const queue = [];
+            let resolveWaiter = null;
+            const dispose = scanner?.subscribe(event => {
+                queue.push(event);
+                if (resolveWaiter) {
+                    const r = resolveWaiter;
+                    resolveWaiter = null;
+                    r();
+                }
+            });
+            stream.onAbort(() => {
+                dispose?.();
+                if (resolveWaiter) {
+                    const r = resolveWaiter;
+                    resolveWaiter = null;
+                    r();
+                }
+            });
+            // Open-frame: clients (EventSource) transition to OPEN on first byte.
+            await stream.writeSSE({ data: '', event: 'ready' });
+            while (!stream.aborted) {
+                if (queue.length === 0) {
+                    await new Promise(resolve => {
+                        resolveWaiter = resolve;
+                    });
+                    continue;
+                }
+                const event = queue.shift();
+                // Always emit the generic "issues updated" event so the
+                // site-health drawer + tree dots stay current regardless
+                // of the trigger.
+                await stream.writeSSE({
+                    event: 'validation-issues-updated',
+                    data: JSON.stringify(event),
+                });
+                // Cut 6 — emit a distinct `template-changed` event in
+                // addition when the rescan was triggered by a template
+                // edit. The TemplateChangedBanner consumes this to surface
+                // the developer-focused "did I break anything?" UI without
+                // forcing every SSE listener to filter by cause.kind.
+                if (event.cause?.kind === 'template') {
+                    // Surface the affected-item count alongside the name.
+                    // "Affected" = items where the post-rescan state has at
+                    // least one issue from `schema-conformance` (the
+                    // validator that's sensitive to template-shape changes).
+                    // Computed by the scanner state via the optional
+                    // `affectedCount` field — when undefined (older callers),
+                    // banner shows the name without a count.
+                    const affectedItemCount = event.cause.affectedItemCount;
+                    await stream.writeSSE({
+                        event: 'template-changed',
+                        data: JSON.stringify({
+                            name: event.cause.name,
+                            affectedItemCount,
+                            durationMs: event.durationMs,
+                        }),
+                    });
+                }
+            }
+        });
+    });
+}
+//# sourceMappingURL=validation.js.map

package/dist/admin-api/routes/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../src/admin-api/routes/validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAQ1C,MAAM,UAAU,gBAAgB,CAAC,IAA6B;IAC5D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;IAEtB;;;OAGG;IACH,GAAG,CAAC,GAAG,CAAC,wBAAwB,EAAE,CAAC,CAAC,EAAE;QACpC,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;QAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAA;QACvC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAS,EAAE,OAAiC;IAC7E,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;QACjC,OAAO,SAAS,CAAC,CAAC,EAAE,KAAK,EAAC,MAAM,EAAC,EAAE;YACjC,MAAM,KAAK,GAAgB,EAAE,CAAA;YAC7B,IAAI,aAAa,GAAwB,IAAI,CAAA;YAE7C,MAAM,OAAO,GAAG,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE;gBACzC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;gBACjB,IAAI,aAAa,EAAE,CAAC;oBAClB,MAAM,CAAC,GAAG,aAAa,CAAA;oBACvB,aAAa,GAAG,IAAI,CAAA;oBACpB,CAAC,EAAE,CAAA;gBACL,CAAC;YACH,CAAC,CAAC,CAAA;YAEF,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE;gBAClB,OAAO,EAAE,EAAE,CAAA;gBACX,IAAI,aAAa,EAAE,CAAC;oBAClB,MAAM,CAAC,GAAG,aAAa,CAAA;oBACvB,aAAa,GAAG,IAAI,CAAA;oBACpB,CAAC,EAAE,CAAA;gBACL,CAAC;YACH,CAAC,CAAC,CAAA;YAEF,sEAAsE;YACtE,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;YAEnD,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACvB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACvB,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE;wBAChC,aAAa,GAAG,OAAO,CAAA;oBACzB,CAAC,CAAC,CAAA;oBACF,SAAQ;gBACV,CAAC;gBACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAG,CAAA;gBAC5B,wDAAwD;gBACxD,yDAAyD;gBACzD,kBAAkB;gBAClB,MAAM,MAAM,CAAC,QAAQ,CAAC;oBACpB,KAAK,EAAE,2BAA2B;oBAClC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;iBAC5B,CAAC,CAAA;gBACF,sDAAsD;gBACtD,uDAAuD;gBACvD,2DAA2D;gBAC3D,2DAA2D;gBAC3D,sDAAsD;gBACtD,IAAI,KAAK,CAAC,KAAK,EAAE,IAAI,KAAK,UAAU,EAAE,CAAC;oBACrC,sDAAsD;oBACtD,wDAAwD;oBACxD,iDAAiD;oBACjD,yDAAyD;oBACzD,iDAAiD;oBACjD,0DAA0D;oBAC1D,yCAAyC;oBACzC,MAAM,iBAAiB,GAAG,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAA;oBACvD,MAAM,MAAM,CAAC,QAAQ,CAAC;wBACpB,KAAK,EAAE,kBAAkB;wBACzB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BACnB,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI;4BACtB,iBAAiB;4BACjB,UAAU,EAAE,KAAK,CAAC,UAAU;yBAC7B,CAAC;qBACH,CAAC,CAAA;gBACJ,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/admin-api/schemas/archive.d.ts

@@ -0,0 +1,124 @@
+/**
+ * Zod schemas for /api/{pages,fragments}/:name/{archive,unarchive,purge}
+ * routes — single source of truth for request/response shapes per
+ * MCP discipline (see feature-design-process.md non-foundational
+ * disciplines + testing-plan.md Priority 3.2).
+ *
+ * The 409 purge-blocked response carries a structured resolution
+ * body (per design-soft-delete.md Q4 H1 lock) that the admin UI
+ * consumes to drive the resolve modal.
+ */
+import { z } from 'zod';
+/**
+ * POST /api/{kind}/:name/archive body. `aliasOf` is optional —
+ * absent means pure soft-delete (the runtime emits 410 Gone for
+ * pages and the renderer throws ArchivedNoAliasError for fragments).
+ */
+export declare const ArchiveRequestSchema: z.ZodObject<{
+    aliasOf: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type ArchiveRequest = z.infer<typeof ArchiveRequestSchema>;
+/** Standard ok response with the archived item's name. */
+export declare const ArchiveResponseSchema: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    name: z.ZodString;
+    archivedAt: z.ZodString;
+    aliasOf: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type ArchiveResponse = z.infer<typeof ArchiveResponseSchema>;
+export declare const UnarchiveResponseSchema: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    name: z.ZodString;
+}, z.core.$strip>;
+export type UnarchiveResponse = z.infer<typeof UnarchiveResponseSchema>;
+/** Reference one alias-pointer in a 409 DELETE_BLOCKED body. */
+export declare const AliasPointerSchema: z.ZodObject<{
+    kind: z.ZodEnum<{
+        page: "page";
+        fragment: "fragment";
+    }>;
+    name: z.ZodString;
+}, z.core.$strip>;
+export type AliasPointer = z.infer<typeof AliasPointerSchema>;
+/** Reference one live ref in a 409 DELETE_BLOCKED body. */
+export declare const LiveRefSchema: z.ZodObject<{
+    kind: z.ZodEnum<{
+        page: "page";
+        fragment: "fragment";
+    }>;
+    name: z.ZodString;
+}, z.core.$strip>;
+export type LiveRef = z.infer<typeof LiveRefSchema>;
+/**
+ * 409 response body when purge is blocked by aliases or live refs.
+ * Per design-soft-delete.md Q4 H1: refusal returns this structured
+ * shape so the admin UI can drive the resolve modal (re-target
+ * aliases / drop alias / cascade-purge / resolve refs / try again).
+ */
+export declare const PurgeBlockedSchema: z.ZodObject<{
+    code: z.ZodLiteral<"DELETE_BLOCKED">;
+    aliases: z.ZodArray<z.ZodObject<{
+        kind: z.ZodEnum<{
+            page: "page";
+            fragment: "fragment";
+        }>;
+        name: z.ZodString;
+    }, z.core.$strip>>;
+    liveRefs: z.ZodArray<z.ZodObject<{
+        kind: z.ZodEnum<{
+            page: "page";
+            fragment: "fragment";
+        }>;
+        name: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type PurgeBlocked = z.infer<typeof PurgeBlockedSchema>;
+export declare const PurgeResponseSchema: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    name: z.ZodString;
+}, z.core.$strip>;
+export type PurgeResponse = z.infer<typeof PurgeResponseSchema>;
+/**
+ * 409 body when an archive-without-aliasOf is attempted on an item
+ * that still has live refs (P8 save-handler check per
+ * design-soft-delete.md Q11). Refusal preserves the invariant that
+ * archived-no-alias items render 410 — which would silently break
+ * any live reference. Author resolves by either setting `aliasOf`
+ * on the archive request OR removing live refs first. Admin
+ * `?force=true` bypasses with audit metadata recording the bypass.
+ */
+export declare const ArchiveHasLiveRefsSchema: z.ZodObject<{
+    code: z.ZodLiteral<"ARCHIVE_HAS_LIVE_REFS">;
+    liveRefs: z.ZodArray<z.ZodObject<{
+        kind: z.ZodEnum<{
+            page: "page";
+            fragment: "fragment";
+        }>;
+        name: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type ArchiveHasLiveRefs = z.infer<typeof ArchiveHasLiveRefsSchema>;
+/**
+ * Body for PATCH /api/{kind}/:name/alias. Edits an existing
+ * archive's `aliasOf` field — set to a string to point at a live
+ * target, or `null` to drop the alias (pure soft-delete).
+ *
+ * Used by Cut 12's purge-blocked resolution modal: when archives
+ * point at a name the author wants to purge, the modal offers
+ * "Drop alias" (aliasOf: null) per design-soft-delete.md Q4 H1.
+ *
+ * Only valid on archived items; live items' aliasOf is meaningless
+ * (the field is implicitly stripped on unarchive). Returns 409 when
+ * called on a live item.
+ */
+export declare const SetAliasRequestSchema: z.ZodObject<{
+    aliasOf: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type SetAliasRequest = z.infer<typeof SetAliasRequestSchema>;
+export declare const SetAliasResponseSchema: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    name: z.ZodString;
+    aliasOf: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type SetAliasResponse = z.infer<typeof SetAliasResponseSchema>;
+//# sourceMappingURL=archive.d.ts.map

package/dist/admin-api/schemas/archive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive.d.ts","sourceRoot":"","sources":["../../../src/admin-api/schemas/archive.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB;;;;GAIG;AACH,eAAO,MAAM,oBAAoB;;iBAI/B,CAAA;AACF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAA;AAEjE,0DAA0D;AAC1D,eAAO,MAAM,qBAAqB;;;;;iBAKhC,CAAA;AACF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAA;AAEnE,eAAO,MAAM,uBAAuB;;;iBAGlC,CAAA;AACF,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAA;AAEvE,gEAAgE;AAChE,eAAO,MAAM,kBAAkB;;;;;;iBAG7B,CAAA;AACF,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAA;AAE7D,2DAA2D;AAC3D,eAAO,MAAM,aAAa;;;;;;iBAGxB,CAAA;AACF,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAA;AAEnD;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;iBAI7B,CAAA;AACF,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAA;AAE7D,eAAO,MAAM,mBAAmB;;;iBAG9B,CAAA;AACF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAE/D;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;iBAGnC,CAAA;AACF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAA;AAEzE;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,qBAAqB;;iBAGhC,CAAA;AACF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAA;AAEnE,eAAO,MAAM,sBAAsB;;;;iBAIjC,CAAA;AACF,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAA"}