smoodly 0.0.27 → 0.0.28

package/dist/admin/shell/EntryForm.js

@@ -35,8 +35,8 @@ import { entrySourceLocale, entryTitle, localizedFieldKeys } from "./entries-lis
 import { useAdminHref } from "./base.js";
 import { localeFromUrl, writeLocaleToUrl } from "../editor/locale-url.js";
 import { navigate, useLeaveGuard } from "./router.js";
-import { LIVE_URL_CONFIRM, liveUrlChanges } from "./live-url.js";
-import { confirm, DISCARD_CONFIRM } from "../ui/confirm.js";
+import { LIVE_URL_CONFIRM, LIVE_URL_OPTION, liveUrlChanges } from "./live-url.js";
+import { confirm, confirmWithOption, DISCARD_CONFIRM } from "../ui/confirm.js";
 import { draftToken } from "../../draft-token.js";
 import { isStale, staleInfoOf } from "./stale.js";
 import { StaleBanner } from "../ui/StaleBanner.js";
@@ -53,6 +53,7 @@ export function EntryForm({ ops, registry, collection, id }) {
     const [record, setRecord] = useState(null);
     const [fields, setFields] = useState(null);
     const [urls, setUrls] = useState({});
+    const [redirects, setRedirects] = useState({});
     const [parentLocales, setParentLocales] = useState(registry.locales.supported);
     const [notice, setNotice] = useState(null);
     const [fieldErrors, setFieldErrors] = useState({});
@@ -75,6 +76,8 @@ export function EntryForm({ ops, registry, collection, id }) {
     recordRef.current = record;
     /** The slug the editor already confirmed as a live-URL change, so the next autosave does not ask again. */
     const confirmedSlug = useRef(null);
+    /** The confirm's "Redirect the old address" answer for the save that follows it (spec 2026-09-26 redirects §6). */
+    const redirectRef = useRef(true);
     // The page editor's controller: debounced, retrying, flushable (spec 2026-09-14 §3).
     /** The token of the row on screen — what every guarded op sends (spec 2026-09-26 concurrency §1). */
     const token = () => { const row = recordRef.current?.locales[locale]; return row ? draftToken(row) : null; };
@@ -93,15 +96,19 @@ export function EntryForm({ ops, registry, collection, id }) {
             if (next !== confirmedSlug.current && liveUrlChanges({ status: row?.status, from: stored, to: next })) {
                 const current = recordRef.current;
                 const subject = current && meta ? { name: entryTitle(current, meta, registry, locale), path: slugPrefix && stored ? `${slugPrefix}${stored}` : null } : undefined;
-                if (await confirm({ ...LIVE_URL_CONFIRM, subject }))
+                const { yes, checked } = await confirmWithOption({ ...LIVE_URL_CONFIRM, option: { ...LIVE_URL_OPTION }, subject });
+                if (yes) {
                     confirmedSlug.current = next;
+                    redirectRef.current = checked;
+                }
                 else {
                     value = { ...value, slug: stored };
                     setFields((f) => ({ ...(f ?? {}), slug: stored }));
                 }
             }
-            const r = await ops.entries.save(collection, id, locale, value, token());
+            const r = await ops.entries.save(collection, id, locale, value, token(), { redirect: redirectRef.current });
             if (r.ok) {
+                redirectRef.current = true;
                 setRecord(r.data);
                 presence?.announce(target, r.data.locales[locale]?.draftSavedAt ?? null);
             }
@@ -140,6 +147,7 @@ export function EntryForm({ ops, registry, collection, id }) {
                 setRecord(r.data.record);
                 setFields(r.data.fields);
                 setUrls(r.data.urls);
+                setRedirects(r.data.redirects);
                 setParentLocales(r.data.parentLocales);
             }
             else
@@ -412,5 +420,5 @@ export function EntryForm({ ops, registry, collection, id }) {
                             },
                             { label: heading },
                         ] }) }), right: _jsxs(_Fragment, { children: [(touched || saveState === "error") && _jsx(SaveIndicator, { state: saveState, pending: dirty }), urls[locale] && (_jsx(LinkButton, { icon: true, href: urls[locale], target: "_blank", rel: "noreferrer", "aria-label": "View live", title: "View live \u2014 opens the site route. While the admin's draft-mode cookie is on, this shows the DRAFT \u2014 open it in a private window to see what visitors see.", children: _jsx(Eye, { size: 16, strokeWidth: 1.5, "aria-hidden": "true" }) })), _jsx(PublishControl, { status: status, pending: dirty || saveState !== "saved", busy: busy, flash: published, disabled: !row, onPublish: () => { void publish(); }, onUnpublish: () => { void unpublish(); }, onDiscard: () => { void discard(); }, onHistory: () => { void openHistory(); } })] }) }), history && row && (_jsx(HistoryModal, { rows: history, draftId: row.draftVersionId, onSelect: (v) => { void loadSnapshot(v); }, onClose: () => setHistory(null), onRestore: restore, render: (versionId) => snapshot?.id === versionId ? (_jsx("fieldset", { disabled: true, className: "sm-history__form", children: Object.entries(meta.fields).map(([key, d]) => (_jsx(FieldWidget, { fieldKey: key, descriptor: d, value: snapshot.fields[key], refOptions: refTargets[key] ? refOptions[refTargets[key]] : undefined, prefix: d.type === "slug" ? slugPrefix : undefined, onChange: () => { } }, key))) })) : _jsx("p", { className: "sm-hint", style: { padding: 16 }, children: "Loading\u2026" }) })), _jsx(PresenceLine, { names: editorsOf(others, target), noun: "entry" }), stale && _jsx(StaleBanner, { info: stale, onReload: loadTheirs }), _jsxs("div", { className: "sm-editor", inert: stale ? true : undefined, children: [_jsxs("div", { className: "sm-form", ref: formRef, children: [notice && (_jsxs(Banner, { tone: notice.tone, onDismiss: () => setNotice(null), children: [_jsx("p", { style: { margin: 0 }, children: notice.text }), _jsx(FieldErrorList, { fields: notice.fields ?? [], onReveal: (path) => { if (formRef.current)
-                                            revealField(formRef.current, path); } })] })), absent ? (_jsxs("div", { style: { display: "flex", flexDirection: "column", gap: 12 }, children: [_jsxs("p", { children: ["This entry doesn't exist in ", locale, " yet. Adding it copies the ", entrySourceLocale(record, registry), " fields as the first ", locale, " draft."] }), _jsxs("div", { style: { display: "flex", gap: 8 }, children: [_jsxs(Button, { onClick: () => void doAddLocale(locale), disabled: adding || !parentLocales.includes(locale), title: parentLocales.includes(locale) ? undefined : `add ${locale} to the parent first`, children: ["Add ", locale] }), _jsxs(Button, { variant: "secondary", onClick: () => { void switchLocale(entrySourceLocale(record, registry)); }, children: ["Back to ", entrySourceLocale(record, registry)] })] })] })) : fields !== null ? (Object.entries(meta.fields).map(widget)) : !notice && _jsx("p", { style: { color: "var(--text-muted)" }, children: "Loading\u2026" })] }), _jsx(ResizeHandle, {}), _jsxs("aside", { className: "sm-inspector", children: [record && row && (_jsxs("div", { className: "sm-card", children: [_jsx(SectionLabel, { children: "Document info" }), _jsx(InfoRow, { label: "Created", value: relativeTime(record.createdAt) }), _jsx(InfoRow, { label: "Updated", value: updatedLine(row.updatedAt, row.updatedBy) }), multilingual && _jsx(InfoRow, { label: "Languages", value: Object.keys(record.locales).join(", ") }), _jsx(InfoRow, { label: "ID", value: id, mono: true })] })), record && (_jsxs("div", { className: "sm-card", children: [multilingual && row && Object.keys(record.locales).length > 1 && (_jsxs(Button, { variant: "secondary", onClick: () => void doRemoveLocale(), children: ["Remove from ", locale] })), _jsx(Button, { variant: "danger", onClick: destroy, children: "Delete" })] }))] })] })] }));
+                                            revealField(formRef.current, path); } })] })), absent ? (_jsxs("div", { style: { display: "flex", flexDirection: "column", gap: 12 }, children: [_jsxs("p", { children: ["This entry doesn't exist in ", locale, " yet. Adding it copies the ", entrySourceLocale(record, registry), " fields as the first ", locale, " draft."] }), _jsxs("div", { style: { display: "flex", gap: 8 }, children: [_jsxs(Button, { onClick: () => void doAddLocale(locale), disabled: adding || !parentLocales.includes(locale), title: parentLocales.includes(locale) ? undefined : `add ${locale} to the parent first`, children: ["Add ", locale] }), _jsxs(Button, { variant: "secondary", onClick: () => { void switchLocale(entrySourceLocale(record, registry)); }, children: ["Back to ", entrySourceLocale(record, registry)] })] })] })) : fields !== null ? (Object.entries(meta.fields).map(widget)) : !notice && _jsx("p", { style: { color: "var(--text-muted)" }, children: "Loading\u2026" })] }), _jsx(ResizeHandle, {}), _jsxs("aside", { className: "sm-inspector", children: [record && row && (_jsxs("div", { className: "sm-card", children: [_jsx(SectionLabel, { children: "Document info" }), _jsx(InfoRow, { label: "Created", value: relativeTime(record.createdAt) }), _jsx(InfoRow, { label: "Updated", value: updatedLine(row.updatedAt, row.updatedBy) }), (redirects[locale] ?? []).length > 0 && _jsx(InfoRow, { label: "Redirects from", value: redirects[locale].join(", "), mono: true }), multilingual && _jsx(InfoRow, { label: "Languages", value: Object.keys(record.locales).join(", ") }), _jsx(InfoRow, { label: "ID", value: id, mono: true })] })), record && (_jsxs("div", { className: "sm-card", children: [multilingual && row && Object.keys(record.locales).length > 1 && (_jsxs(Button, { variant: "secondary", onClick: () => void doRemoveLocale(), children: ["Remove from ", locale] })), _jsx(Button, { variant: "danger", onClick: destroy, children: "Delete" })] }))] })] })] }));
 }

package/dist/admin/shell/IconRail.d.ts

@@ -3,7 +3,7 @@ export declare function IconRail({ registry, active, email, settings, onSignOut
     registry: AdminRegistry;
     active: string;
     email?: string;
-    /** Whether the Settings tile shows — `can(role, "settings")` in the shell. */
+    /** Whether the Settings tile shows — once the role is known, in the shell (every member has a Settings page). */
     settings?: boolean;
     onSignOut: () => void;
 }): import("react").JSX.Element;

package/dist/admin/shell/IconRail.js

@@ -10,8 +10,9 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 // Collections — one rail item whose flyout lists every collection — then
 // Media, Globals (the global content items, when the registry has any;
 // the route is /globals), and Settings (the Settings area, spec
-// 2026-09-25; the route is /settings; admins only, so the shell passes
-// `settings` false for an editor). The user avatar is pinned to the bottom and opens the same
+// 2026-09-25; the route is /settings; every member has a page there since
+// Redirects, 2026-09-26, so the shell passes `settings` once the role is
+// known). The user avatar is pinned to the bottom and opens the same
 // flyout with the theme toggle and Sign out, which the old nav's footer
 // held.
 //

package/dist/admin/shell/PagesList.js

@@ -68,9 +68,10 @@ export function PagesList({ ops, registry }) {
                 return;
             // A published page under a new parent is a new live URL (members management §5).
             const current = row.record.locales[locale];
-            if (!(await confirmLiveUrl({ status: current?.status, from: row.parentId ?? "", to: projection.parentId ?? "" }, { name: row.title, path: row.path })))
+            const live = await confirmLiveUrl({ status: current?.status, from: row.parentId ?? "", to: projection.parentId ?? "" }, { name: row.title, path: row.path });
+            if (!live.ok)
                 return;
-            const ok = await run(() => ops.pages.move(row.id, { parentId: projection.parentId, index: projection.index }));
+            const ok = await run(() => ops.pages.move(row.id, { parentId: projection.parentId, index: projection.index, redirect: live.redirect }));
             if (!ok)
                 throw new Error("move refused");
         },
@@ -150,9 +151,10 @@ export function PagesList({ ops, registry }) {
         // The site root's slug is the config's homePageSlug — title only there.
         if (row.isHome)
             return attempt(() => ops.pages.rename(row.id, { locale, title: values.title }));
-        if (!(await confirmLiveUrl({ status: current.status, from: current.slug, to: values.slug }, { name: row.title, path: row.path })))
+        const live = await confirmLiveUrl({ status: current.status, from: current.slug, to: values.slug }, { name: row.title, path: row.path });
+        if (!live.ok)
             return null;
-        return attempt(() => ops.pages.rename(row.id, { locale, title: values.title, slug: values.slug }));
+        return attempt(() => ops.pages.rename(row.id, { locale, title: values.title, slug: values.slug, redirect: live.redirect }));
     };
     const addLocale = async (row) => {
         const from = sourceLocaleOf(row.record, registry);

package/dist/admin/shell/RedirectsPage.d.ts

@@ -0,0 +1,11 @@
+import type { AdminOps, RedirectItem } from "../ops.ts";
+import type { AdminRegistry } from "../serialize.ts";
+export declare function RedirectsPage({ ops, registry, initial }: {
+    ops: AdminOps;
+    registry: AdminRegistry;
+    /** Static-markup tests: the rows without a load. */
+    initial?: {
+        locale: string;
+        items: RedirectItem[];
+    } | null;
+}): import("react").JSX.Element;

package/dist/admin/shell/RedirectsPage.js

@@ -0,0 +1,75 @@
+"use client";
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+// Settings › Redirects (spec 2026-09-26 redirects §6): the active
+// locale's redirect rows — old address → the target's title (opens its
+// editor) and current URL — with Add redirect and a row menu whose one
+// item removes the row after a confirm. Every member, as renaming is.
+import { useEffect, useState } from "react";
+import { ActionMenu } from "../ui/ActionMenu.js";
+import { LocalePicker } from "../ui/LocaleSwitcher.js";
+import { confirm } from "../ui/confirm.js";
+import { Banner, Button } from "../ui/primitives.js";
+import { AddRedirectModal } from "./AddRedirectModal.js";
+import { useAdminHref } from "./base.js";
+import { ErrorPane } from "./ErrorPane.js";
+import { ListView } from "./ListView.js";
+import { RouteLink } from "./RouteLink.js";
+import { rememberLocale, rememberedLocale } from "./locale-memory.js";
+import { REMOVE_REDIRECT_CONFIRM, editorHref } from "./redirects-list.js";
+export function RedirectsPage({ ops, registry, initial = null }) {
+    const adminHref = useAdminHref();
+    const multilingual = registry.locales.supported.length > 1;
+    const [locale, setLocale] = useState(initial?.locale ?? rememberedLocale(registry.locales));
+    const [items, setItems] = useState(initial?.items ?? null);
+    const [error, setError] = useState(null);
+    const [notice, setNotice] = useState(null);
+    const [adding, setAdding] = useState(null);
+    const load = (l) => ops.redirects.list(l)
+        .then((r) => (r.ok ? setItems(r.data) : setError(r.message)))
+        .catch(() => setError("Couldn't reach the server."));
+    useEffect(() => { if (!initial)
+        void load(locale); }, [ops, locale, initial]); // eslint-disable-line react-hooks/exhaustive-deps
+    const pickLocale = (next) => { rememberLocale(next); setLocale(next); setItems(null); };
+    const openAdd = async () => {
+        const r = await ops.redirects.targets(locale);
+        if (!r.ok) {
+            setNotice({ tone: "error", text: r.message });
+            return;
+        }
+        setAdding(r.data);
+    };
+    const add = async (path, target) => {
+        const r = await ops.redirects.add(locale, path, target);
+        if (!r.ok)
+            return r.message;
+        setAdding(null);
+        setNotice({ tone: "ok", text: `${path} now redirects.` });
+        void load(locale);
+        return null;
+    };
+    const remove = async (item) => {
+        if (!(await confirm({ ...REMOVE_REDIRECT_CONFIRM, subject: { name: item.title, path: item.path } })))
+            return;
+        const r = await ops.redirects.remove(locale, item.path);
+        if (!r.ok) {
+            setNotice({ tone: "error", text: r.message });
+            return;
+        }
+        setNotice(null); // an earlier "now redirects" must not outlive the row
+        void load(locale);
+    };
+    if (error)
+        return _jsx(ErrorPane, { message: error });
+    return (_jsxs(_Fragment, { children: [_jsx(ListView, { title: "Redirects", titleTrailing: multilingual && _jsx(LocalePicker, { locales: registry.locales.supported, value: locale, onChange: pickLocale }), actions: _jsx(Button, { onClick: () => void openAdd(), children: "Add redirect" }), notice: notice && _jsx(Banner, { tone: notice.tone, onDismiss: () => setNotice(null), children: notice.text }), columns: [
+                    { label: "Old address", width: "minmax(200px,1fr)" },
+                    { label: "Redirects to", width: "minmax(200px,1fr)" },
+                    { label: "", width: "48px" },
+                ], rows: (items ?? []).map((item) => ({
+                    key: item.path,
+                    cells: [
+                        _jsx("code", { children: item.path }),
+                        _jsxs("span", { style: { display: "flex", gap: 8, alignItems: "baseline", minWidth: 0 }, children: [_jsx(RouteLink, { href: adminHref(editorHref(item, locale)), children: item.title }), item.currentPath ? _jsx("code", { children: item.currentPath }) : _jsxs("span", { className: "sm-hint", children: ["not published in ", locale] })] }),
+                        _jsx(ActionMenu, { label: "Redirect actions", small: true, items: [{ label: "Remove redirect", danger: true, run: () => void remove(item) }] }),
+                    ],
+                })), empty: items === null ? "Loading…" : `No redirects in ${locale}` }), adding && _jsx(AddRedirectModal, { locale: locale, registry: registry, targets: adding, onClose: () => setAdding(null), onAdd: add })] }));
+}

package/dist/admin/shell/SettingsView.d.ts

@@ -1,7 +1,9 @@
-import { type MemberRole } from "../../permissions.ts";
+import type { MemberRole } from "../../permissions.ts";
 import type { AdminOps } from "../ops.ts";
-export declare function SettingsView({ ops, tail, role, userId }: {
+import type { AdminRegistry } from "../serialize.ts";
+export declare function SettingsView({ ops, registry, tail, role, userId }: {
     ops: AdminOps;
+    registry: AdminRegistry;
     tail: string | undefined;
     /** The caller's role from `members.me`; null while it loads. */
     role: MemberRole | null;

package/dist/admin/shell/SettingsView.js

@@ -4,31 +4,35 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 // The Settings area (spec 2026-09-25 §5): a 200px secondary nav at the
 // left of the main column, its card starting where the page's card starts (no heading since 2026-09-26) —
 // then the page with its own top bar. The head segment alone replaces
-// itself with the default page, so Back skips the empty URL. An unknown
-// page is the shell's Not found pane. Admins only (members management
-// §2): an editor gets the error pane, and until the role is known the
-// area is loading. Members is the only page (the Roles table moved into
-// the invite modal's role descriptions; API Keys never had contents).
+// itself with the role's first page, so Back skips the empty URL. An
+// unknown page is the shell's Not found pane. Each page names its
+// capability (settings.ts): Members is for admins (members management
+// §2) and an editor opening it gets the error pane; Redirects (spec
+// 2026-09-26 redirects §6) is for every member. Until the role is known
+// the area is loading.
 import { useEffect } from "react";
-import { can } from "../../permissions.js";
 import { useAdminHref } from "./base.js";
 import { ErrorPane } from "./ErrorPane.js";
 import { MembersPage } from "./MembersPage.js";
+import { RedirectsPage } from "./RedirectsPage.js";
 import { RouteLink } from "./RouteLink.js";
 import { navigate } from "./router.js";
-import { DEFAULT_SETTINGS_PAGE, SETTINGS_PAGES, settingsPage } from "./settings.js";
-export function SettingsView({ ops, tail, role, userId }) {
+import { defaultSettingsPage, settingsPage, visibleSettingsPages } from "./settings.js";
+export function SettingsView({ ops, registry, tail, role, userId }) {
     const adminHref = useAdminHref();
     const page = settingsPage(tail);
     useEffect(() => {
-        if (tail === undefined)
-            void navigate(adminHref(`/settings/${DEFAULT_SETTINGS_PAGE}`), { replace: true });
-    }, [tail, adminHref]);
+        if (tail === undefined && role !== null)
+            void navigate(adminHref(`/settings/${defaultSettingsPage(role)}`), { replace: true });
+    }, [tail, role, adminHref]);
     if (role === null)
         return _jsx("div", { className: "sm-empty", children: "Loading\u2026" });
-    if (!can(role, "settings"))
-        return _jsx(ErrorPane, { message: "Settings are for admins." });
+    const visible = visibleSettingsPages(role);
+    if (tail === undefined)
+        return _jsx("div", { className: "sm-empty", children: "Loading\u2026" });
     if (!page)
         return _jsx(ErrorPane, { message: "Not found." });
-    return (_jsxs("div", { className: "sm-settings", children: [_jsx("nav", { className: "sm-settings__nav", "aria-label": "Settings", children: SETTINGS_PAGES.map((p) => (_jsx(RouteLink, { className: "sm-settings__link", href: adminHref(`/settings/${p.id}`), "aria-current": p.id === page ? "page" : undefined, children: p.title }, p.id))) }), _jsx("section", { className: "sm-settings__page", children: _jsx(MembersPage, { ops: ops, userId: userId }) })] }));
+    if (!visible.some((p) => p.id === page))
+        return _jsx(ErrorPane, { message: "Settings are for admins." });
+    return (_jsxs("div", { className: "sm-settings", children: [_jsx("nav", { className: "sm-settings__nav", "aria-label": "Settings", children: visible.map((p) => (_jsx(RouteLink, { className: "sm-settings__link", href: adminHref(`/settings/${p.id}`), "aria-current": p.id === page ? "page" : undefined, children: p.title }, p.id))) }), _jsx("section", { className: "sm-settings__page", children: page === "members" ? _jsx(MembersPage, { ops: ops, userId: userId }) : _jsx(RedirectsPage, { ops: ops, registry: registry }) })] }));
 }

package/dist/admin/shell/live-url.d.ts

@@ -1,10 +1,18 @@
 import { type ConfirmOptions, type ConfirmSubject } from "../ui/confirm.ts";
 export declare const LIVE_URL_CONFIRM: Omit<ConfirmOptions, "subject">;
+/** The rider (spec 2026-09-26 redirects §1): on by default, the editor unticks to let the old address go dark. */
+export declare const LIVE_URL_OPTION: {
+    readonly label: "Redirect the old address";
+    readonly checked: true;
+};
 /** `from` null = there was no URL part to change (a new row, a collection without a path). */
 export declare function liveUrlChanges(input: {
     status: "draft" | "published" | undefined;
     from: string | null;
     to: string | null;
 }): boolean;
-/** Resolves true when the change may go ahead: not a live change, or confirmed. */
-export declare function confirmLiveUrl(input: Parameters<typeof liveUrlChanges>[0], subject?: ConfirmSubject): Promise<boolean>;
+/** `ok` false = cancelled. `redirect` is the checkbox (true when no question was asked: the store's default). */
+export declare function confirmLiveUrl(input: Parameters<typeof liveUrlChanges>[0], subject?: ConfirmSubject): Promise<{
+    ok: boolean;
+    redirect: boolean;
+}>;

package/dist/admin/shell/live-url.js

@@ -3,17 +3,22 @@
 // published page's parent. Whoever the role — the mistake is the same.
 // Asked in the admin's own dialog (ui/confirm.ts); the subject chip names
 // the record and the URL part that is about to change.
-import { confirm } from "../ui/confirm.js";
+import { confirmWithOption } from "../ui/confirm.js";
 export const LIVE_URL_CONFIRM = {
     title: "Change the live URL?",
-    body: "This is published. Old links to it stop working until a redirect exists, and Smoodly has none yet.",
+    body: "This is published. With a redirect, visitors and search engines who open the old address are sent to the new one.",
     confirmLabel: "Change URL",
 };
+/** The rider (spec 2026-09-26 redirects §1): on by default, the editor unticks to let the old address go dark. */
+export const LIVE_URL_OPTION = { label: "Redirect the old address", checked: true };
 /** `from` null = there was no URL part to change (a new row, a collection without a path). */
 export function liveUrlChanges(input) {
     return input.status === "published" && input.from !== null && input.to !== input.from;
 }
-/** Resolves true when the change may go ahead: not a live change, or confirmed. */
+/** `ok` false = cancelled. `redirect` is the checkbox (true when no question was asked: the store's default). */
 export async function confirmLiveUrl(input, subject) {
-    return !liveUrlChanges(input) || confirm({ ...LIVE_URL_CONFIRM, subject });
+    if (!liveUrlChanges(input))
+        return { ok: true, redirect: true };
+    const { yes, checked } = await confirmWithOption({ ...LIVE_URL_CONFIRM, option: { ...LIVE_URL_OPTION }, subject });
+    return { ok: yes, redirect: checked };
 }

package/dist/admin/shell/members-list.js

@@ -2,7 +2,7 @@ import { normalizeRole } from "../../permissions.js";
 export const roleLabel = (role) => (role ? role[0].toUpperCase() + role.slice(1) : "");
 /** What each role may do, in one line — the invite modal's radio descriptions (permissions.ts decides). */
 export const ROLE_DESCRIPTION = {
-    editor: "Edits, publishes and deletes content and media.",
+    editor: "Edits, publishes and deletes content and media, and manages redirects.",
     admin: "Everything an editor can, and Settings: invites, re-roles and removes members.",
 };
 export function memberRows(members, opts) {

package/dist/admin/shell/redirects-list.d.ts

@@ -0,0 +1,12 @@
+import type { PathTarget } from "../../paths.ts";
+import type { RedirectTargetItem } from "../ops.ts";
+import type { ComboOption } from "../ui/combo-box.ts";
+import type { ConfirmOptions } from "../ui/confirm.ts";
+export declare const targetOptions: (targets: RedirectTargetItem[]) => ComboOption[];
+export declare function parseTargetValue(value: string): PathTarget | null;
+/** Admin-relative (the caller applies adminHref). */
+export declare const editorHref: (item: {
+    target: PathTarget;
+    collection: string | null;
+}, locale: string) => string;
+export declare const REMOVE_REDIRECT_CONFIRM: Omit<ConfirmOptions, "subject">;

package/dist/admin/shell/redirects-list.js

@@ -0,0 +1,15 @@
+export const targetOptions = (targets) => targets.map((t) => ({ value: `${t.target.kind}:${t.target.id}`, label: `${t.title} · ${t.path}` }));
+export function parseTargetValue(value) {
+    const m = /^(page|entry):(.+)$/.exec(value);
+    return m ? { kind: m[1], id: m[2] } : null;
+}
+/** Admin-relative (the caller applies adminHref). */
+export const editorHref = (item, locale) => item.target.kind === "page"
+    ? `/pages/${encodeURIComponent(item.target.id)}?locale=${encodeURIComponent(locale)}`
+    : `/${item.collection}/${encodeURIComponent(item.target.id)}?locale=${encodeURIComponent(locale)}`;
+export const REMOVE_REDIRECT_CONFIRM = {
+    title: "Remove this redirect?",
+    body: "Visitors who open the old address get a Not found page. Browsers that already followed the redirect may keep going to the new address for a while.",
+    confirmLabel: "Remove redirect",
+    destructive: true,
+};

package/dist/admin/shell/settings.d.ts

@@ -1,9 +1,18 @@
+import { type MemberRole } from "../../permissions.ts";
 export declare const SETTINGS_PAGES: readonly [{
     readonly id: "members";
     readonly title: "Members";
+    readonly capability: "settings";
+}, {
+    readonly id: "redirects";
+    readonly title: "Redirects";
+    readonly capability: "content.write";
 }];
-export type SettingsPageId = (typeof SETTINGS_PAGES)[number]["id"];
-export declare const DEFAULT_SETTINGS_PAGE: SettingsPageId;
-/** The page for the segment after /settings: the default for none, null for an unknown one. */
+export type SettingsPage = (typeof SETTINGS_PAGES)[number];
+export type SettingsPageId = SettingsPage["id"];
+/** The pages this role may open, in nav order. Every member has content.write, so the area is never empty. */
+export declare const visibleSettingsPages: (role: MemberRole) => readonly SettingsPage[];
+export declare const defaultSettingsPage: (role: MemberRole) => SettingsPageId;
+/** The page for the segment after /settings; null for none or an unknown one. */
 export declare function settingsPage(tail: string | undefined): SettingsPageId | null;
 export declare function settingsTitle(page: SettingsPageId): string;

package/dist/admin/shell/settings.js

@@ -1,15 +1,19 @@
-// The Settings area's pages (spec 2026-09-25 §5; narrowed 2026-09-25 to
-// Members alone — Roles and API Keys dropped, see DESIGN.md §2): ids are
-// URL segments under /settings, titles are what the secondary nav and
-// each top bar show. Pure, so routing is testable without React.
+// The Settings area's pages (spec 2026-09-25 §5; Roles and API Keys
+// dropped 2026-09-25, Redirects added 2026-09-26 §6): ids are URL
+// segments under /settings, titles are what the secondary nav and each
+// top bar show, and each page names the capability that opens it —
+// Members for admins, Redirects for every member, as renaming is. Pure,
+// so routing is testable without React.
+import { can } from "../../permissions.js";
 export const SETTINGS_PAGES = [
-    { id: "members", title: "Members" },
+    { id: "members", title: "Members", capability: "settings" },
+    { id: "redirects", title: "Redirects", capability: "content.write" },
 ];
-export const DEFAULT_SETTINGS_PAGE = "members";
-/** The page for the segment after /settings: the default for none, null for an unknown one. */
+/** The pages this role may open, in nav order. Every member has content.write, so the area is never empty. */
+export const visibleSettingsPages = (role) => SETTINGS_PAGES.filter((p) => can(role, p.capability));
+export const defaultSettingsPage = (role) => visibleSettingsPages(role)[0].id;
+/** The page for the segment after /settings; null for none or an unknown one. */
 export function settingsPage(tail) {
-    if (tail === undefined)
-        return DEFAULT_SETTINGS_PAGE;
     return SETTINGS_PAGES.some((p) => p.id === tail) ? tail : null;
 }
 export function settingsTitle(page) {

package/dist/admin/ui/ConfirmDialog.d.ts

@@ -2,7 +2,7 @@ import { type ReactElement } from "react";
 import { type ConfirmOptions } from "./confirm.ts";
 export declare function ConfirmDialog({ options, onAnswer }: {
     options: ConfirmOptions;
-    onAnswer(yes: boolean): void;
+    onAnswer(yes: boolean, checked?: boolean): void;
 }): ReactElement;
 /** Renders the pending question, once, from the shell. */
 export declare function ConfirmHost(): ReactElement | null;

package/dist/admin/ui/ConfirmDialog.js

@@ -10,16 +10,17 @@ import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-run
 // <ConfirmHost/> renders the pending question from ui/confirm.ts, once,
 // from the shell; the dialog itself is a plain component so a test can
 // render it statically.
-import { useId, useSyncExternalStore } from "react";
+import { useId, useState, useSyncExternalStore } from "react";
 import { DialogCard } from "./Dialog.js";
 import { Button } from "./primitives.js";
 import { pendingConfirm, subscribeConfirm } from "./confirm.js";
 export function ConfirmDialog({ options, onAnswer }) {
-    const { title, body, confirmLabel, cancelLabel = "Cancel", destructive = false, subject } = options;
+    const { title, body, confirmLabel, cancelLabel = "Cancel", destructive = false, subject, option } = options;
+    const [checked, setChecked] = useState(option?.checked ?? false);
     const uid = useId();
     const bodyId = `sm-confirm-body${uid}`;
     const cancel = () => onAnswer(false);
-    return (_jsxs(DialogCard, { title: title, role: "alertdialog", describedBy: body ? bodyId : undefined, onClose: cancel, className: "sm-confirm", actions: _jsxs(_Fragment, { children: [_jsx(Button, { variant: "secondary", autoFocus: destructive, onClick: cancel, children: cancelLabel }), _jsx(Button, { variant: destructive ? "destructive" : "primary", autoFocus: !destructive, onClick: () => onAnswer(true), children: confirmLabel })] }), children: [body && _jsx("p", { className: "sm-dialog__body", id: bodyId, children: body }), subject && (_jsxs("div", { className: "sm-dialog__context", children: [_jsx("strong", { children: subject.name }), subject.path && _jsx("code", { children: subject.path })] }))] }));
+    return (_jsxs(DialogCard, { title: title, role: "alertdialog", describedBy: body ? bodyId : undefined, onClose: cancel, className: "sm-confirm", actions: _jsxs(_Fragment, { children: [_jsx(Button, { variant: "secondary", autoFocus: destructive, onClick: cancel, children: cancelLabel }), _jsx(Button, { variant: destructive ? "destructive" : "primary", autoFocus: !destructive, onClick: () => onAnswer(true, checked), children: confirmLabel })] }), children: [body && _jsx("p", { className: "sm-dialog__body", id: bodyId, children: body }), option && (_jsxs("label", { className: "sm-choice sm-confirm__option", children: [_jsx("input", { type: "checkbox", checked: checked, onChange: (e) => setChecked(e.target.checked) }), _jsx("span", { children: option.label })] })), subject && (_jsxs("div", { className: "sm-dialog__context", children: [_jsx("strong", { children: subject.name }), subject.path && _jsx("code", { children: subject.path })] }))] }));
 }
 /** Renders the pending question, once, from the shell. */
 export function ConfirmHost() {

package/dist/admin/ui/confirm.d.ts

@@ -17,16 +17,27 @@ export type ConfirmOptions = {
     destructive?: boolean;
     /** The context chip repeating the subject; omit when there is no single subject. */
     subject?: ConfirmSubject;
+    /** A yes/no rider under the body — "Redirect the old address" (spec 2026-09-26 redirects §6); `checked` is its initial state. */
+    option?: {
+        label: string;
+        checked: boolean;
+    };
+};
+export type ConfirmAnswer = {
+    yes: boolean;
+    checked: boolean;
 };
 export type ConfirmRequest = {
     id: number;
     options: ConfirmOptions;
-    answer(yes: boolean): void;
+    answer(yes: boolean, checked?: boolean): void;
 };
 /** The Discard changes question, shared by the page editor and the entry and global forms (publish flow §4). */
 export declare const DISCARD_CONFIRM: Omit<ConfirmOptions, "subject">;
+/** Ask; resolves with the answer and the option's final state once the dialog closes. */
+export declare function confirmWithOption(options: ConfirmOptions): Promise<ConfirmAnswer>;
 /** Ask; resolves with the answer once the dialog closes. */
-export declare function confirm(options: ConfirmOptions): Promise<boolean>;
+export declare const confirm: (options: ConfirmOptions) => Promise<boolean>;
 /** The question being asked, if any — the head of the queue. */
 export declare const pendingConfirm: () => ConfirmRequest | null;
 /** For useSyncExternalStore: fires on every queue change. */

package/dist/admin/ui/confirm.js

@@ -20,29 +20,33 @@ let queue = [];
 let seq = 0;
 const notify = () => { for (const fn of listeners)
     fn(); };
-/** Ask; resolves with the answer once the dialog closes. */
-export function confirm(options) {
+/** Ask; resolves with the answer and the option's final state once the dialog closes. */
+export function confirmWithOption(options) {
+    const initial = options.option?.checked ?? false;
     if (listeners.size === 0) {
         const text = [options.title, options.body].filter(Boolean).join("\n\n");
-        return Promise.resolve(typeof window !== "undefined" && typeof window.confirm === "function" ? window.confirm(text) : false);
+        const yes = typeof window !== "undefined" && typeof window.confirm === "function" ? window.confirm(text) : false;
+        return Promise.resolve({ yes, checked: initial });
     }
     return new Promise((resolve) => {
         const id = ++seq;
         const request = {
             id,
             options,
-            answer(yes) {
+            answer(yes, checked = initial) {
                 if (!queue.some((r) => r.id === id))
                     return; // answered already
                 queue = queue.filter((r) => r.id !== id);
                 notify();
-                resolve(yes);
+                resolve({ yes, checked });
             },
         };
         queue = [...queue, request];
         notify();
     });
 }
+/** Ask; resolves with the answer once the dialog closes. */
+export const confirm = (options) => confirmWithOption(options).then((a) => a.yes);
 /** The question being asked, if any — the head of the queue. */
 export const pendingConfirm = () => queue[0] ?? null;
 /** For useSyncExternalStore: fires on every queue change. */

package/dist/admin/ui/theme.js

@@ -1152,6 +1152,9 @@ body:has(.sm-admin){margin:0}
 }
 .sm-dialog__context strong{font-weight:500;color:var(--text);flex:1;min-width:0;overflow:hidden;text-overflow:ellipsis;font-size:var(--text-md)}
 .sm-dialog__context code{font-family:var(--font-mono);flex:none}
+.sm-confirm__option{margin-top:4px;font-size:var(--text-md);color:var(--text)}
+.sm-redirects-from{display:flex;flex-direction:column;gap:4px}
+.sm-redirects-from code{font-size:var(--text-sm)}
 /* A form dialog's fields: white fields on the white card get the tile tone instead. */
 .sm-dialog__form{display:flex;flex-direction:column;gap:14px}
 .sm-dialog__form .sm-input,.sm-dialog__form .sm-select,.sm-dialog__form .sm-inputwrap{background:var(--surface)}

package/dist/entry-store.d.ts

@@ -2,9 +2,9 @@ import type { CollectionSchema, EntryOrder } from "./collections.ts";
 import type { GlobalSchema } from "./global.ts";
 import { type RefEdge, type SectionLike } from "./refs.ts";
 import { MemoryRefIndex } from "./ref-index.ts";
-import { type PathIndex } from "./path-index.ts";
+import { type PathHit, type PathIndex } from "./path-index.ts";
 import { type DraftToken } from "./draft-token.ts";
-import { type LocaleSet, type PathTarget } from "./paths.ts";
+import { type LocaleSet } from "./paths.ts";
 export type EntryLocale = {
     /** The entry's segment in this locale; null claims no URL. */
     slug: string | null;
@@ -107,7 +107,10 @@ export interface EntryStore {
     }): Promise<Record<string, Record<string, unknown>>>;
     /** Replaces the merged fields for `locale`: shared keys on the node
      * (every locale sees them), localized keys and the slug on the row. */
-    update(collection: string, id: string, locale: string, fields: Record<string, unknown>, by?: string, expected?: DraftToken | null): Promise<EntryRecord>;
+    /** `redirect` (default true) keeps a published row's old address as a redirect when the slug changes (spec 2026-09-26 redirects §1). */
+    update(collection: string, id: string, locale: string, fields: Record<string, unknown>, by?: string, expected?: DraftToken | null, options?: {
+        redirect?: boolean;
+    }): Promise<EntryRecord>;
     setStatus(collection: string, id: string, locale: string, status: "draft" | "published", by?: string, expected?: DraftToken | null): Promise<EntryRecord>;
     /** The live row goes back to what is published: the published snapshot's fields
      *  (shared and localized, split as on save — the slug is never versioned) written over
@@ -143,6 +146,8 @@ export interface EntryStore {
     move(collection: string, id: string, to: {
         parentId: string | null;
         index?: number;
+    }, options?: {
+        redirect?: boolean;
     }): Promise<EntryRecord>;
     /** Rewrite manual order to 1..N for the given ids, one batched pass. */
     reorder(collection: string, orderedIds: string[]): Promise<void>;
@@ -153,8 +158,10 @@ export interface EntryStore {
         sourceKind: string;
         sourceId: string;
     }[]>;
-    resolvePath(locale: string, path: string): Promise<PathTarget | null>;
+    resolvePath(locale: string, path: string): Promise<PathHit | null>;
     pathsOf(collection: string, id: string): Promise<Record<string, string>>;
+    /** locale → this entry's old addresses. */
+    redirectsOf(collection: string, id: string): Promise<Record<string, string[]>>;
 }
 export declare function schemaOf(collections: CollectionSchema<any>[], name: string): CollectionSchema<any>;
 /** A global item is a collection with exactly one entry (spec 2026-09-07). */
@@ -271,7 +278,9 @@ export declare class MemoryEntryStore implements EntryStore {
     getMany(collection: string, ids: string[], locale: string, options?: {
         status?: "published";
     }): Promise<Record<string, Record<string, unknown>>>;
-    update(collection: string, id: string, locale: string, fields: Record<string, unknown>, by?: string, expected?: DraftToken | null): Promise<EntryRecord>;
+    update(collection: string, id: string, locale: string, fields: Record<string, unknown>, by?: string, expected?: DraftToken | null, options?: {
+        redirect?: boolean;
+    }): Promise<EntryRecord>;
     setStatus(collection: string, id: string, locale: string, status: "draft" | "published", by?: string, expected?: DraftToken | null): Promise<EntryRecord>;
     discardDraft(collection: string, id: string, locale: string, by?: string, expected?: DraftToken | null): Promise<EntryRecord>;
     addLocale(collection: string, id: string, locale: string, options: AddEntryLocaleOptions, by?: string): Promise<EntryRecord>;
@@ -282,6 +291,8 @@ export declare class MemoryEntryStore implements EntryStore {
     move(collection: string, id: string, to: {
         parentId: string | null;
         index?: number;
+    }, options?: {
+        redirect?: boolean;
     }): Promise<EntryRecord>;
     delete(collection: string, id: string): Promise<void>;
     reorder(collection: string, orderedIds: string[]): Promise<void>;
@@ -290,6 +301,7 @@ export declare class MemoryEntryStore implements EntryStore {
         sourceKind: string;
         sourceId: string;
     }[]>;
-    resolvePath(locale: string, path: string): Promise<PathTarget | null>;
+    resolvePath(locale: string, path: string): Promise<PathHit | null>;
     pathsOf(collection: string, id: string): Promise<{}>;
+    redirectsOf(collection: string, id: string): Promise<Record<string, string[]>>;
 }