gazetta 0.6.0 → 0.8.0

package/dist/pages/create.js

@@ -0,0 +1,117 @@
+/**
+ * Page Create — POST handler logic for `/api/pages`.
+ *
+ * Different from `savePage`:
+ *   - No etag precheck (nothing to compare against; new page)
+ *   - No locale variant lookup (creates the default Page Manifest)
+ *   - Name conflict resolution per `design-soft-delete.md` Q5 I3:
+ *     - Live name in use → typed `LIVE_CONFLICT` outcome
+ *     - Archived name in use, no `?onConflict` flag → typed
+ *       `ARCHIVED_CONFLICT` outcome with archive details
+ *     - Archived name in use, with mode → delegate to
+ *       `resolveArchivedNameConflict` (restore / replace / moveAside)
+ *   - Folder creation (`storage.mkdir(pageDir)`)
+ *   - Initial sidecar wiring (`rebuildAssetRefs` /
+ *     `rebuildFragmentDeps` against `null` → empty manifest)
+ *   - Cache invalidation (`pages:`)
+ *
+ * Same as `savePage` for the post-resolution-or-create write itself —
+ * eventually creates pass through `saveManifestCore` once the
+ * "before is null" path lands. v1 keeps the create-time path
+ * separate because it doesn't need validators / hooks / scanner /
+ * audit-on-failure (a new empty page has no validation surface to
+ * exercise yet).
+ *
+ * Per Q6 lock: separate `createPage` instead of folding into
+ * `savePage` — Create has its own pre-write phase (conflict prompt,
+ * mkdir, route derive) that update doesn't. Branchy A would merge
+ * two distinct intents.
+ */
+import { join } from 'node:path';
+import { resolveArchivedNameConflict, } from '../admin-api/archived-name-conflict.js';
+import { rebuildAssetRefs } from '../assets/asset-deps.js';
+import { rebuildFragmentDeps } from '../fragment-deps.js';
+import { loadSiteFromSource } from '../admin-api/source-context.js';
+/**
+ * Create a Page. Wraps the conflict-resolution decision tree + the
+ * fresh-create write path. Routes project the typed `CreatePageResult`
+ * to HTTP (200 / 400 / 409).
+ */
+export async function createPage(input) {
+    const { source, name, template, content, onConflict, principal, audit } = input;
+    const { storage } = source;
+    const pageDir = source.contentRoot.path('pages', name);
+    const manifestPath = join(pageDir, 'page.json');
+    // Conflict path — manifest already exists at the target name.
+    if (await storage.exists(manifestPath)) {
+        const site = await loadSiteFromSource(source);
+        const existing = site.pages.get(name);
+        const isArchived = existing?.archived === true;
+        if (!isArchived) {
+            return { ok: false, code: 'LIVE_CONFLICT', name };
+        }
+        // Archived conflict, no resolution flag → return structured
+        // body so the client can prompt the author per Q5 I3.
+        if (!onConflict) {
+            return {
+                ok: false,
+                code: 'ARCHIVED_CONFLICT',
+                archive: {
+                    kind: 'page',
+                    name,
+                    ...(existing?.archivedAt ? { archivedAt: existing.archivedAt } : {}),
+                    ...(existing?.archivedBy ? { archivedBy: existing.archivedBy } : {}),
+                    ...(existing?.aliasOf ? { aliasOf: existing.aliasOf } : {}),
+                },
+            };
+        }
+        // Archived conflict + mode → delegate to the resolver.
+        const result = await resolveArchivedNameConflict({
+            source,
+            kind: 'page',
+            name,
+            existing: existing,
+            mode: onConflict,
+            newTemplate: template,
+            newContent: content,
+            actorId: principal.id,
+        });
+        if (result.kind === 'invalid-mode') {
+            return { ok: false, code: 'INVALID_CONFLICT_MODE', mode: onConflict };
+        }
+        // Audit one event per logical mode — mirror existing route shape.
+        const action = result.kind === 'restored' ? 'unarchive' : result.kind === 'replaced' ? 'archive' : 'rename';
+        await audit.record({
+            // The audit recorder's typed shape limits action to save-flow values;
+            // the resolver's audit events use the soft-delete vocabulary. Cast
+            // through `unknown` keeps the recorder shape narrow without forcing a
+            // wider union into the save pipeline's contract.
+            action: action,
+            outcome: 'success',
+            scope: { kind: 'page', name },
+            metadata: { onConflict },
+        });
+        await source.cache.invalidatePrefix('pages:');
+        return { ok: true, name, resolution: result.kind };
+    }
+    // Fresh create path — no existing manifest at the target name.
+    await storage.mkdir(pageDir);
+    const manifest = {
+        template,
+        content: content ?? { title: name },
+        components: [],
+    };
+    await storage.writeFile(manifestPath, `${JSON.stringify(manifest, null, 2)}\n`);
+    // Sidecar wiring — fresh manifest has empty components[] so the
+    // diff against null is mostly a no-op today; wires the dep tracking
+    // for the moment templates ship initial content with `_asset` or
+    // `@fragment` refs.
+    const item = { source: 'page', name };
+    await Promise.all([
+        rebuildAssetRefs(source.contentRoot, item, null, manifest),
+        rebuildFragmentDeps(source.contentRoot, item, null, manifest),
+    ]);
+    await source.cache.invalidatePrefix('pages:');
+    return { ok: true, name };
+}
+//# sourceMappingURL=create.js.map

package/dist/pages/create.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create.js","sourceRoot":"","sources":["../../src/pages/create.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EACL,2BAA2B,GAG5B,MAAM,wCAAwC,CAAA;AAE/C,OAAO,EAAE,gBAAgB,EAAgB,MAAM,yBAAyB,CAAA;AACxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAA;AA8EnE;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAsB;IACrD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,KAAK,CAAA;IAC/E,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAA;IAC1B,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;IACtD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;IAE/C,8DAA8D;IAC9D,IAAI,MAAM,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAA;QAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACrC,MAAM,UAAU,GAAG,QAAQ,EAAE,QAAQ,KAAK,IAAI,CAAA;QAE9C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,CAAA;QACnD,CAAC;QAED,4DAA4D;QAC5D,sDAAsD;QACtD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE;oBACP,IAAI,EAAE,MAAM;oBACZ,IAAI;oBACJ,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpE,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpE,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC5D;aACF,CAAA;QACH,CAAC;QAED,uDAAuD;QACvD,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAAC;YAC/C,MAAM;YACN,IAAI,EAAE,MAAM;YACZ,IAAI;YACJ,QAAQ,EAAE,QAA0C;YACpD,IAAI,EAAE,UAAsC;YAC5C,WAAW,EAAE,QAAQ;YACrB,UAAU,EAAE,OAAO;YACnB,OAAO,EAAE,SAAS,CAAC,EAAE;SACtB,CAAC,CAAA;QACF,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YACnC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,UAAU,EAAE,CAAA;QACvE,CAAC;QACD,kEAAkE;QAClE,MAAM,MAAM,GACV,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAA;QAC9F,MAAM,KAAK,CAAC,MAAM,CAAC;YACjB,sEAAsE;YACtE,mEAAmE;YACnE,sEAAsE;YACtE,iDAAiD;YACjD,MAAM,EAAE,MAA2B;YACnC,OAAO,EAAE,SAAS;YAClB,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;YAC7B,QAAQ,EAAE,EAAE,UAAU,EAAE;SACzB,CAAC,CAAA;QACF,MAAM,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAA;QAC7C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,CAAA;IACpD,CAAC;IAED,+DAA+D;IAC/D,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAC5B,MAAM,QAAQ,GAAG;QACf,QAAQ;QACR,OAAO,EAAE,OAAO,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE;QACnC,UAAU,EAAE,EAAe;KAC5B,CAAA;IACD,MAAM,OAAO,CAAC,SAAS,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;IAE/E,gEAAgE;IAChE,oEAAoE;IACpE,iEAAiE;IACjE,oBAAoB;IACpB,MAAM,IAAI,GAAY,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;IAC9C,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,gBAAgB,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC;QAC1D,mBAAmB,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC;KAC9D,CAAC,CAAA;IACF,MAAM,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAA;IAC7C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;AAC3B,CAAC"}

package/dist/pages/publish.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Page Publish — kind-specific wrapper around `publishItemCore`.
+ *
+ * Owns the bits unique to Page publishes:
+ *   - Render-mode resolution from target.type + archive state:
+ *     - archived → 'archive-marker' regardless of target type
+ *     - target.type === 'esi' → 'page-rendered' (ESI placeholders)
+ *     - target.type === 'static' → 'page-static' (full-bake)
+ *     - target.type === 'dynamic' → 'page-static' (static fallback;
+ *       dynamic origin handles per-request render)
+ *   - Page-cache config flow-through (target → page → spine renderer
+ *     reads it for the cache-control comment)
+ *
+ * Everything downstream — archive precheck, render dispatch, storage
+ * I/O, sidecar writes, cleanup — is `publishItemCore`'s spine.
+ *
+ * Per Q3 lock: two fns + shared core. The 5 page-vs-fragment diffs
+ * (mode resolution, page-cache, sidecar pub-state, etc.) live here in
+ * one file the reader can scan top-to-bottom.
+ */
+import { type PublishItemResult, type PublishRenderMode, type PublishTarget } from '../publish-item.js';
+import type { ContentRoot } from '../content-root.js';
+import type { Site } from '../site-loader.js';
+/**
+ * Inputs to `publishPage`. Routes / CLI / orchestrator destructure
+ * their context and pass the parts the pipeline needs.
+ */
+export interface PublishPageInput {
+    /** Page name (folder name under `pages/`). */
+    readonly name: string;
+    /** Locale variant being published; undefined = default locale. */
+    readonly locale?: string;
+    /** Loaded site (caller does `loadSite()` once for the publish run). */
+    readonly site: Site;
+    /** Source content root (typically not used by core today; reserved for hooks). */
+    readonly sourceRoot: ContentRoot;
+    /** Target context (storage, type, optional manifestHash, seo, cache). */
+    readonly target: PublishTarget;
+}
+/**
+ * Resolve the render mode for a page on a target. Pure dispatch
+ * function — exported for tests + per-kind reuse.
+ */
+export declare function resolvePageRenderMode(page: {
+    archived?: boolean;
+}, targetType: PublishTarget['type']): PublishRenderMode;
+/**
+ * Publish a page to a target. Wraps `publishItemCore` with the
+ * page-specific mode resolution. Returns one of `PublishItemResult`'s
+ * typed variants — caller projects to wire shape (HTTP / SSE / CLI
+ * stdout / aggregate result).
+ *
+ * Caller responsibilities (handled by per-run orchestrator in Cut 5):
+ *   - Capability check (`requireCapability('publish:...')`)
+ *   - Template scan + loadSite (shared across run)
+ *   - Per-target init + capability gates
+ */
+export declare function publishPage(input: PublishPageInput): Promise<PublishItemResult>;
+//# sourceMappingURL=publish.d.ts.map

package/dist/pages/publish.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish.d.ts","sourceRoot":"","sources":["../../src/pages/publish.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,EAAmB,KAAK,iBAAiB,EAAE,KAAK,iBAAiB,EAAE,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAA;AACxH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAA;AAE7C;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,8CAA8C;IAC9C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,kEAAkE;IAClE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,uEAAuE;IACvE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAA;IACnB,kFAAkF;IAClF,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAA;IAChC,yEAAyE;IACzE,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAA;CAC/B;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,EAC5B,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,GAChC,iBAAiB,CAcnB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAsBrF"}

package/dist/pages/publish.js

@@ -0,0 +1,78 @@
+/**
+ * Page Publish — kind-specific wrapper around `publishItemCore`.
+ *
+ * Owns the bits unique to Page publishes:
+ *   - Render-mode resolution from target.type + archive state:
+ *     - archived → 'archive-marker' regardless of target type
+ *     - target.type === 'esi' → 'page-rendered' (ESI placeholders)
+ *     - target.type === 'static' → 'page-static' (full-bake)
+ *     - target.type === 'dynamic' → 'page-static' (static fallback;
+ *       dynamic origin handles per-request render)
+ *   - Page-cache config flow-through (target → page → spine renderer
+ *     reads it for the cache-control comment)
+ *
+ * Everything downstream — archive precheck, render dispatch, storage
+ * I/O, sidecar writes, cleanup — is `publishItemCore`'s spine.
+ *
+ * Per Q3 lock: two fns + shared core. The 5 page-vs-fragment diffs
+ * (mode resolution, page-cache, sidecar pub-state, etc.) live here in
+ * one file the reader can scan top-to-bottom.
+ */
+import { isArchived } from '../archive-helpers.js';
+import { publishItemCore } from '../publish-item.js';
+/**
+ * Resolve the render mode for a page on a target. Pure dispatch
+ * function — exported for tests + per-kind reuse.
+ */
+export function resolvePageRenderMode(page, targetType) {
+    // Archive precheck wins regardless of target type. The spine's
+    // archive-marker renderer body-skips and emits the marker line so
+    // the worker reads first 200 bytes and short-circuits to 301/410
+    // per design-soft-delete.md Q10.
+    if (isArchived(page))
+        return 'archive-marker';
+    // ESI mode: pages compose ESI placeholders for `@fragment` refs
+    // at request time on a worker-served target.
+    if (targetType === 'esi')
+        return 'page-rendered';
+    // Static + dynamic targets bake the full page. Dynamic targets'
+    // origin handles per-request rendering for dynamic FRAGMENTS only;
+    // pages themselves still get a static fallback (per
+    // design-rendering.md compatibility matrix).
+    return 'page-static';
+}
+/**
+ * Publish a page to a target. Wraps `publishItemCore` with the
+ * page-specific mode resolution. Returns one of `PublishItemResult`'s
+ * typed variants — caller projects to wire shape (HTTP / SSE / CLI
+ * stdout / aggregate result).
+ *
+ * Caller responsibilities (handled by per-run orchestrator in Cut 5):
+ *   - Capability check (`requireCapability('publish:...')`)
+ *   - Template scan + loadSite (shared across run)
+ *   - Per-target init + capability gates
+ */
+export async function publishPage(input) {
+    const page = input.site.pages.get(input.name);
+    if (!page) {
+        return {
+            kind: 'page',
+            name: input.name,
+            locale: input.locale,
+            ok: false,
+            code: 'NOT_FOUND',
+            reason: `Page "${input.name}" not found in source`,
+        };
+    }
+    const mode = resolvePageRenderMode(page, input.target.type);
+    return publishItemCore({
+        kind: 'page',
+        name: input.name,
+        locale: input.locale,
+        mode,
+        site: input.site,
+        sourceRoot: input.sourceRoot,
+        target: input.target,
+    });
+}
+//# sourceMappingURL=publish.js.map

package/dist/pages/publish.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish.js","sourceRoot":"","sources":["../../src/pages/publish.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAClD,OAAO,EAAE,eAAe,EAAsE,MAAM,oBAAoB,CAAA;AAqBxH;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,IAA4B,EAC5B,UAAiC;IAEjC,+DAA+D;IAC/D,kEAAkE;IAClE,iEAAiE;IACjE,iCAAiC;IACjC,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,gBAAgB,CAAA;IAC7C,gEAAgE;IAChE,6CAA6C;IAC7C,IAAI,UAAU,KAAK,KAAK;QAAE,OAAO,eAAe,CAAA;IAChD,gEAAgE;IAChE,mEAAmE;IACnE,oDAAoD;IACpD,6CAA6C;IAC7C,OAAO,aAAa,CAAA;AACtB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAuB;IACvD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC7C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,SAAS,KAAK,CAAC,IAAI,uBAAuB;SACnD,CAAA;IACH,CAAC;IACD,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAC3D,OAAO,eAAe,CAAC;QACrB,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,IAAI;QACJ,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAA;AACJ,CAAC"}

package/dist/pages/save.d.ts

@@ -0,0 +1,97 @@
+/**
+ * Page Save — kind-specific wrapper around `saveManifestCore`.
+ *
+ * Owns the bits unique to Page Manifest writes:
+ *   - Locale resolution (default vs `page.{locale}.json` variant)
+ *     using `site.pages` + `site.pageLocales`
+ *   - Component-ID auto-assignment via `ensureComponentIds`
+ *   - Filename composition (`page.json` vs `page.{locale}.json`)
+ *   - Manifest assembly (template/content/components/metadata, plus
+ *     route preservation for locale variants)
+ *   - The `route` field in `etagExtras` (folder-derived; not stored
+ *     in the file but part of the etag projection chain per
+ *     `design-offline.md` Q3)
+ *   - Per-kind cache prefix `pages:`
+ *
+ * Everything downstream — etag check, validators, beforeSave hooks,
+ * history, write, sidecars, cache invalidate, audit, afterSave hooks,
+ * scanner — is `saveManifestCore`'s spine. This wrapper is the
+ * Page-flavored thin entry point routes (and the future CLI / plugin
+ * routes) call.
+ *
+ * Per Q3 lock: two fns + shared core. The 5 page-specific diffs
+ * (route field, locale lookup in `site.pages`, page-cache prefix,
+ * filename, route preservation in locale variants) live here in
+ * one file the reader can scan top-to-bottom.
+ */
+import { type SaveAuditRecorder, type SaveResult, type SavePrincipal, type SaveSourceWiring } from '../manifest-save.js';
+import type { PageManifest } from '../types.js';
+import type { Site } from '../site-loader.js';
+import type { ValidatorRegistry } from '../validation/registry.js';
+import type { ValidationScanner } from '../validation/scanner.js';
+import type { HookFiringEmitter, HookRegistry } from '../hooks/index.js';
+/**
+ * Inputs to `savePage`. Routes destructure their request and pass
+ * the parts the pipeline needs; CLI / plugin callers do the same
+ * without an HTTP shell. Returns one of `SaveResult`'s typed
+ * variants — caller projects to HTTP (200 / 409) or CLI exit code.
+ */
+export interface SavePageInput {
+    /** Page name (folder name under `pages/`). */
+    readonly name: string;
+    /** BCP-47 locale when saving a Locale Variant; undefined for default. */
+    readonly locale?: string;
+    /** Incoming manifest body (template/content/components/metadata). */
+    readonly body: Partial<PageManifest> & Record<string, unknown>;
+    /** Optional save-etag for concurrency check. */
+    readonly ifMatch?: string;
+    /** Loaded site (caller does `loadSiteFromSource(source)` once). */
+    readonly site: Site;
+    /** Source wiring (cache, history, storage, contentRoot, manifest, targetName). */
+    readonly source: SaveSourceWiring;
+    /** Authenticated principal driving this save. */
+    readonly principal: SavePrincipal;
+    /** Audit recorder bound to the request. */
+    readonly audit: SaveAuditRecorder;
+    /** Validator registry built once at admin boot. */
+    readonly validators: ValidatorRegistry;
+    /** Hook registry; absent when no hooks contributed. */
+    readonly hooks?: HookRegistry;
+    /** Audit-firing emitter for hook dispatch. */
+    readonly hookAuditEmit?: HookFiringEmitter;
+    /** Background scanner; absent when scanner not enabled. */
+    readonly scanner?: ValidationScanner;
+    /** Per-request correlation id; fresh UUID when absent. */
+    readonly requestId?: string;
+}
+/**
+ * Page-name-not-found error. The route projects this to a 404; the
+ * pipeline can't compose the full save without a `before` manifest
+ * (etag check, validators, sidecar diffs all need it). Distinct
+ * from the typed `SaveResult` variants because absence-of-target is
+ * a route-level precondition, not a save-pipeline outcome.
+ */
+export declare class PageNotFoundError extends Error {
+    readonly name: string;
+    constructor(name: string);
+}
+/**
+ * Invalid locale code per `isValidLocale`. Routes project to 400.
+ */
+export declare class InvalidLocaleError extends Error {
+    readonly raw: string;
+    constructor(raw: string);
+}
+/**
+ * Save a Page Manifest. Wraps `saveManifestCore` with the Page-specific
+ * resolution + assembly. Throws `PageNotFoundError` / `InvalidLocaleError`
+ * for route-level preconditions; returns `SaveResult` for save outcomes.
+ *
+ * Caller responsibilities:
+ *   - Capability check (`requireCapability('edit:pages')`) before calling
+ *   - HTTP projection of `SaveResult` (200 success, 409 STALE /
+ *     VALIDATION_FAILED / HOOK_CANCELLED with appropriate body shape)
+ *   - Setting the `ETag` response header on success from `result.etag`
+ */
+export declare function savePage(input: SavePageInput): Promise<SaveResult>;
+//# sourceMappingURL=save.d.ts.map

package/dist/pages/save.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"save.d.ts","sourceRoot":"","sources":["../../src/pages/save.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAKH,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACtB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAA;AAC7C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAClE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AACjE,OAAO,KAAK,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAExE;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,8CAA8C;IAC9C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,yEAAyE;IACzE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,qEAAqE;IACrE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC9D,gDAAgD;IAChD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,mEAAmE;IACnE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAA;IACnB,kFAAkF;IAClF,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAA;IACjC,iDAAiD;IACjD,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAA;IACjC,2CAA2C;IAC3C,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAA;IACjC,mDAAmD;IACnD,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAA;IACtC,uDAAuD;IACvD,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,CAAA;IAC7B,8CAA8C;IAC9C,QAAQ,CAAC,aAAa,CAAC,EAAE,iBAAiB,CAAA;IAC1C,2DAA2D;IAC3D,QAAQ,CAAC,OAAO,CAAC,EAAE,iBAAiB,CAAA;IACpC,0DAA0D;IAC1D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED;;;;;;GAMG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;aACd,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM;CAIzC;AAED;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;aACf,GAAG,EAAE,MAAM;gBAAX,GAAG,EAAE,MAAM;CAIxC;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC,CAqExE"}

package/dist/pages/save.js

@@ -0,0 +1,138 @@
+/**
+ * Page Save — kind-specific wrapper around `saveManifestCore`.
+ *
+ * Owns the bits unique to Page Manifest writes:
+ *   - Locale resolution (default vs `page.{locale}.json` variant)
+ *     using `site.pages` + `site.pageLocales`
+ *   - Component-ID auto-assignment via `ensureComponentIds`
+ *   - Filename composition (`page.json` vs `page.{locale}.json`)
+ *   - Manifest assembly (template/content/components/metadata, plus
+ *     route preservation for locale variants)
+ *   - The `route` field in `etagExtras` (folder-derived; not stored
+ *     in the file but part of the etag projection chain per
+ *     `design-offline.md` Q3)
+ *   - Per-kind cache prefix `pages:`
+ *
+ * Everything downstream — etag check, validators, beforeSave hooks,
+ * history, write, sidecars, cache invalidate, audit, afterSave hooks,
+ * scanner — is `saveManifestCore`'s spine. This wrapper is the
+ * Page-flavored thin entry point routes (and the future CLI / plugin
+ * routes) call.
+ *
+ * Per Q3 lock: two fns + shared core. The 5 page-specific diffs
+ * (route field, locale lookup in `site.pages`, page-cache prefix,
+ * filename, route preservation in locale variants) live here in
+ * one file the reader can scan top-to-bottom.
+ */
+import { join } from 'node:path';
+import { ensureComponentIds } from '../component-ids.js';
+import { isValidLocale } from '../locale.js';
+import { saveManifestCore, } from '../manifest-save.js';
+/**
+ * Page-name-not-found error. The route projects this to a 404; the
+ * pipeline can't compose the full save without a `before` manifest
+ * (etag check, validators, sidecar diffs all need it). Distinct
+ * from the typed `SaveResult` variants because absence-of-target is
+ * a route-level precondition, not a save-pipeline outcome.
+ */
+export class PageNotFoundError extends Error {
+    name;
+    constructor(name) {
+        super(`Page "${name}" not found`);
+        this.name = name;
+        this.name = 'PageNotFoundError';
+    }
+}
+/**
+ * Invalid locale code per `isValidLocale`. Routes project to 400.
+ */
+export class InvalidLocaleError extends Error {
+    raw;
+    constructor(raw) {
+        super(`Invalid locale code: "${raw}"`);
+        this.raw = raw;
+        this.name = 'InvalidLocaleError';
+    }
+}
+/**
+ * Save a Page Manifest. Wraps `saveManifestCore` with the Page-specific
+ * resolution + assembly. Throws `PageNotFoundError` / `InvalidLocaleError`
+ * for route-level preconditions; returns `SaveResult` for save outcomes.
+ *
+ * Caller responsibilities:
+ *   - Capability check (`requireCapability('edit:pages')`) before calling
+ *   - HTTP projection of `SaveResult` (200 success, 409 STALE /
+ *     VALIDATION_FAILED / HOOK_CANCELLED with appropriate body shape)
+ *   - Setting the `ETag` response header on success from `result.etag`
+ */
+export async function savePage(input) {
+    // Locale validation — surface invalid codes as a typed error so
+    // routes can project to 400 without parsing the message. Mirrors
+    // pages.ts:292-294.
+    let locale;
+    if (input.locale !== undefined) {
+        if (!isValidLocale(input.locale))
+            throw new InvalidLocaleError(input.locale);
+        locale = input.locale.toLowerCase();
+    }
+    // Resolve the page to update — locale variant or default. Mirrors
+    // pages.ts:300-304. The default page MUST exist (creates go through
+    // a separate `createPage` entry point — Cut 5).
+    const defaultPage = input.site.pages.get(input.name);
+    if (!defaultPage)
+        throw new PageNotFoundError(input.name);
+    const localeVariant = locale ? input.site.pageLocales.get(input.name)?.locales.get(locale) : undefined;
+    const page = localeVariant ?? defaultPage;
+    // Component-ID auto-assignment. Existing IDs preserved; ID-less
+    // components get NanoIDs. Per `design-collaboration.md` IDs are the
+    // load-bearing anchor for inline comments — running this on every
+    // save migrates pre-existing pages without a separate migration
+    // step. Mirrors pages.ts:349.
+    const components = ensureComponentIds(input.body.components ?? page.components);
+    // Manifest assembly — body fields override page fields; route
+    // preserved for locale variants (so preview resolution works).
+    // Mirrors pages.ts:350-358.
+    const manifest = {
+        template: input.body.template ?? page.template,
+        content: input.body.content ?? page.content,
+        components,
+    };
+    if (input.body.metadata !== undefined)
+        manifest.metadata = input.body.metadata;
+    else if (page.metadata)
+        manifest.metadata = page.metadata;
+    // Locale variants store their route for preview resolution
+    if (locale && page.route)
+        manifest.route = page.route;
+    // Filename + path composition. Default → `page.json`; locale
+    // variant → `page.{locale}.json`. Both live in the default page's
+    // dir (locale variants don't get their own folder).
+    const filename = locale ? `page.${locale}.json` : 'page.json';
+    const manifestPath = join(defaultPage.dir, filename);
+    // Hand off to the spine. Page-specific extras:
+    //   - cacheInvalidatePrefixes: ['pages:'] only (Page Saves don't
+    //     dirty fragments)
+    //   - etagExtras: { route } — folder-derived, not stored in the
+    //     file but part of the etag projection chain
+    return saveManifestCore({
+        kind: 'page',
+        name: input.name,
+        locale,
+        manifest,
+        before: page,
+        manifestPath,
+        ifMatch: input.ifMatch,
+        site: input.site,
+        cacheInvalidatePrefixes: ['pages:'],
+        etagExtras: { route: page.route },
+        source: input.source,
+        audit: input.audit,
+        principal: input.principal,
+        hookAuditEmit: input.hookAuditEmit,
+        validators: input.validators,
+        hooks: input.hooks,
+        scanner: input.scanner,
+        requestId: input.requestId,
+    });
+}
+//# sourceMappingURL=save.js.map

package/dist/pages/save.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"save.js","sourceRoot":"","sources":["../../src/pages/save.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC5C,OAAO,EACL,gBAAgB,GAKjB,MAAM,qBAAqB,CAAA;AA0C5B;;;;;;GAMG;AACH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACd;IAA5B,YAA4B,IAAY;QACtC,KAAK,CAAC,SAAS,IAAI,aAAa,CAAC,CAAA;QADP,SAAI,GAAJ,IAAI,CAAQ;QAEtC,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAA;IACjC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IACf;IAA5B,YAA4B,GAAW;QACrC,KAAK,CAAC,yBAAyB,GAAG,GAAG,CAAC,CAAA;QADZ,QAAG,GAAH,GAAG,CAAQ;QAErC,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAA;IAClC,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,KAAoB;IACjD,gEAAgE;IAChE,iEAAiE;IACjE,oBAAoB;IACpB,IAAI,MAA0B,CAAA;IAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAC5E,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,CAAA;IACrC,CAAC;IAED,kEAAkE;IAClE,oEAAoE;IACpE,gDAAgD;IAChD,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACpD,IAAI,CAAC,WAAW;QAAE,MAAM,IAAI,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACzD,MAAM,aAAa,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACtG,MAAM,IAAI,GAAG,aAAa,IAAI,WAAW,CAAA;IAEzC,gEAAgE;IAChE,oEAAoE;IACpE,kEAAkE;IAClE,gEAAgE;IAChE,8BAA8B;IAC9B,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,CAAA;IAE/E,8DAA8D;IAC9D,+DAA+D;IAC/D,4BAA4B;IAC5B,MAAM,QAAQ,GAA4B;QACxC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ;QAC9C,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO;QAC3C,UAAU;KACX,CAAA;IACD,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS;QAAE,QAAQ,CAAC,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAA;SACzE,IAAI,IAAI,CAAC,QAAQ;QAAE,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAA;IACzD,2DAA2D;IAC3D,IAAI,MAAM,IAAI,IAAI,CAAC,KAAK;QAAE,QAAQ,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAA;IAErD,6DAA6D;IAC7D,kEAAkE;IAClE,oDAAoD;IACpD,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,MAAM,OAAO,CAAC,CAAC,CAAC,WAAW,CAAA;IAC7D,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IAEpD,+CAA+C;IAC/C,iEAAiE;IACjE,uBAAuB;IACvB,gEAAgE;IAChE,iDAAiD;IACjD,OAAO,gBAAgB,CAAC;QACtB,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM;QACN,QAAQ;QACR,MAAM,EAAE,IAA0C;QAClD,YAAY;QACZ,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,uBAAuB,EAAE,CAAC,QAAQ,CAAC;QACnC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;QACjC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CAAA;AACJ,CAAC"}

package/dist/providers/_atomic-write.d.ts

@@ -0,0 +1,9 @@
+export declare function atomicWriteString(path: string, content: string): Promise<void>;
+/**
+ * Atomic byte write — bytes-in, no string round-trip. Used by callers
+ * that have a buffer in hand (history blobs, bounded asset writes).
+ * Same write-then-rename guarantees as atomicWriteString.
+ */
+export declare function atomicWriteBytes(path: string, bytes: Uint8Array): Promise<void>;
+export declare function atomicWriteStream(path: string, stream: ReadableStream<Uint8Array>): Promise<void>;
+//# sourceMappingURL=_atomic-write.d.ts.map

package/dist/providers/_atomic-write.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_atomic-write.d.ts","sourceRoot":"","sources":["../../src/providers/_atomic-write.ts"],"names":[],"mappings":"AA+BA,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKpF;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAMrF;AAED,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBvG"}

package/dist/providers/_atomic-write.js

@@ -0,0 +1,72 @@
+/**
+ * Atomic file write policy for the filesystem provider.
+ *
+ * Both text and binary-stream writes use a write-then-rename strategy so
+ * readers mid-write never see a partial file:
+ *
+ * - Text (`atomicWriteString`): delegates to the `write-file-atomic` package
+ *   (same pattern everyone else in the Node ecosystem uses — sharp's internal
+ *   config, npm's lockfile writer, etc.).
+ * - Binary stream (`atomicWriteStream`): pipes the incoming stream into a
+ *   same-directory temp file, then renames onto the target. Temp is cleaned
+ *   up on pipeline failure.
+ *
+ * Atomicity guarantees:
+ * - POSIX `rename(2)` is atomic within a single filesystem. Node's
+ *   `fs.rename` delegates to it on POSIX systems.
+ * - Windows `MoveFileEx` with `MOVEFILE_REPLACE_EXISTING` is atomic on NTFS
+ *   when source and target are on the same volume — write-file-atomic (for
+ *   text) and our temp-path scheme (for streams) both place the temp file
+ *   in the same directory as the target to meet this requirement.
+ *
+ * This module is filesystem-specific. Cloud storage (R2, S3, Azure) has
+ * naturally atomic single-object PUT and does not need this policy.
+ */
+import { createWriteStream } from 'node:fs';
+import { mkdir, rename, rm } from 'node:fs/promises';
+import { dirname } from 'node:path';
+import { pipeline } from 'node:stream/promises';
+import writeFileAtomic from 'write-file-atomic';
+import { webReadableToNode } from './_stream-interop.js';
+export async function atomicWriteString(path, content) {
+    // Parent directory must exist before write-file-atomic creates its tempfile
+    // next to the target. Same contract as atomicWriteStream.
+    await mkdir(dirname(path), { recursive: true });
+    await writeFileAtomic(path, content, 'utf-8');
+}
+/**
+ * Atomic byte write — bytes-in, no string round-trip. Used by callers
+ * that have a buffer in hand (history blobs, bounded asset writes).
+ * Same write-then-rename guarantees as atomicWriteString.
+ */
+export async function atomicWriteBytes(path, bytes) {
+    await mkdir(dirname(path), { recursive: true });
+    // write-file-atomic accepts Buffer | Uint8Array directly; no encoding
+    // applied when the second arg is bytes. Wrap in Buffer for consistent
+    // typing across Node versions (Buffer extends Uint8Array).
+    await writeFileAtomic(path, Buffer.from(bytes.buffer, bytes.byteOffset, bytes.byteLength));
+}
+export async function atomicWriteStream(path, stream) {
+    // Parent directory must exist before createWriteStream can create the file.
+    // (`write-file-atomic` handles this for text; for streams we do it ourselves.)
+    await mkdir(dirname(path), { recursive: true });
+    const tmpPath = `${path}.${process.pid}.${Math.random().toString(36).slice(2)}.tmp`;
+    const writer = createWriteStream(tmpPath);
+    try {
+        await pipeline(webReadableToNode(stream), writer);
+    }
+    catch (err) {
+        // Clean up the temp file on pipeline failure; swallow rm errors
+        // (already-missing temp is fine).
+        await rm(tmpPath, { force: true }).catch(() => { });
+        throw err;
+    }
+    try {
+        await rename(tmpPath, path);
+    }
+    catch (err) {
+        await rm(tmpPath, { force: true }).catch(() => { });
+        throw err;
+    }
+}
+//# sourceMappingURL=_atomic-write.js.map

package/dist/providers/_atomic-write.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_atomic-write.js","sourceRoot":"","sources":["../../src/providers/_atomic-write.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAC3C,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAC/C,OAAO,eAAe,MAAM,mBAAmB,CAAA;AAC/C,OAAO,EAAE,iBAAiB,EAAiB,MAAM,sBAAsB,CAAA;AAEvE,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAY,EAAE,OAAe;IACnE,4EAA4E;IAC5E,0DAA0D;IAC1D,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/C,MAAM,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;AAC/C,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAAiB;IACpE,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/C,sEAAsE;IACtE,sEAAsE;IACtE,2DAA2D;IAC3D,MAAM,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAA;AAC5F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAY,EAAE,MAAkC;IACtF,4EAA4E;IAC5E,+EAA+E;IAC/E,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAE/C,MAAM,OAAO,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAA;IACnF,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAA;IAEzC,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,MAAkB,CAAC,CAAA;IAC/D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,gEAAgE;QAChE,kCAAkC;QAClC,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAClD,MAAM,GAAG,CAAA;IACX,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;IAC7B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAClD,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC"}

package/dist/providers/_rm-ignore-missing.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Storage adapter utility — idempotent remove via probe-then-delete.
+ *
+ * Uses `exists()` to determine whether the path is present, then `rm()`
+ * only when it is. This delegates the "is it missing?" decision to the
+ * provider's own `exists()` implementation — no cross-provider error-
+ * shape matching needed.
+ *
+ * Why probe-then-delete instead of try/catch:
+ * - `exists()` is already part of the StorageProvider contract and every
+ *   provider knows how to answer it correctly for its backend.
+ * - Matching raw error messages (`ENOENT`, `NoSuchKey`, etc.) across four
+ *   providers is fragile and accumulates drift as providers version.
+ * - A TOCTOU race (file deleted between probe and rm) just means `rm()`
+ *   throws, and the caller sees a real error — acceptable because the
+ *   race is vanishingly rare in our single-writer model (the admin is the
+ *   only writer on source content during v1).
+ *
+ * When the storage interface grows a typed `StorageNotFoundError`
+ * (separate PR — retrofit across all four providers + all existing `rm`
+ * callers), this helper becomes a one-liner try/catch. Until then, the
+ * probe is the honest abstraction boundary.
+ */
+import type { StorageProvider } from '../types.js';
+/**
+ * `rm(path)` that swallows "already missing" — probes with `exists()`
+ * first. Returns `true` if a file was actually removed, `false` if it
+ * was already gone. Callers that care can distinguish.
+ */
+export declare function rmIgnoreMissing(storage: StorageProvider, path: string): Promise<boolean>;
+//# sourceMappingURL=_rm-ignore-missing.d.ts.map

package/dist/providers/_rm-ignore-missing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_rm-ignore-missing.d.ts","sourceRoot":"","sources":["../../src/providers/_rm-ignore-missing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAElD;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAI9F"}