smoodly 0.0.33 → 0.0.34

package/dist/admin/ops-impl.js

@@ -1,11 +1,12 @@
 import { entryErrors, entryFieldsIn, entryTitleIn } from "../entry-store.js";
-import { isSegment } from "../paths.js";
+import { chainOf, isSegment, pagePathIn } from "../paths.js";
+import { servedAnchor } from "../anchors.js";
 import { distinctTags } from "../tags.js";
 import { can, isMemberRole, normalizeRole } from "../permissions.js";
 import { ASSET_COLLECTION } from "../media.js";
 import { adminHref, adminSlugTaken, isAdminSlug } from "../admin-path.js";
 import { affectedTargets, collectionTag, entryTag, pageTag, pagesTreeTag, globalTag } from "../revalidate.js";
-import { ensureFixedNodes, fixedNodeOf } from "./fixed-nodes.js";
+import { ensureFixedNodes, fixedNodeOf, fixedNodeSpecs } from "./fixed-nodes.js";
 import { ensureGlobalItems } from "./global-items.js";
 import { SLUG_GRAMMAR_MESSAGE, validateCustomNode, validateFields, validateNode } from "./validate.js";
 import { serializeAdminConfig } from "./serialize.js";
@@ -16,7 +17,7 @@ import { CUSTOM_NODE_TYPE, customSchema } from "../custom/index.js";
 import { SETTINGS_KEY, CSS_KEY } from "../global.js";
 import { withDefaults } from "../field-defaults.js";
 import { elementSchemas } from "../richtext-walk.js";
-import { REDIRECT_PATH_MESSAGE, redirectPathProblem } from "./redirect-path.js";
+import { REDIRECT_PATH_MESSAGE, normalizeRedirectPath, redirectPathProblem } from "./redirect-path.js";
 import { SCHEMA_VERSION } from "../schema-version.js";
 import { draftToken, isDraftToken, StaleDraftError } from "../draft-token.js";
 const ok = (data) => ({ ok: true, data });
@@ -306,6 +307,66 @@ export function createAdminOps(deps) {
             ? err("blocked", `smoodly: pages cannot be created under "${nameOf(parent)}" — the "${fixed.collection}" collection owns that URL space.`)
             : null;
     };
+    /** Who wins a path in a locale over a node hanging on `own` — its chain root's owner key, `''` in the editors'
+     *  tree (spec 2026-09-29 anchored paths §5): the longest code address the path is or lies below, as the index
+     *  serves it (§2). Null when that is the node's own anchor, or the editors' tree. */
+    const ownerOf = (path, locale, own = "") => {
+        const served = servedAnchor(config.anchors, locale, path);
+        return served === "" || served === own ? null : fixedNodeSpecs(config).find((s) => s.key === served) ?? null;
+    };
+    const pathOpts = { locales: config.locales, homePageSlug: config.homePageSlug, addresses: config.addresses };
+    /** A record's own anchor: its chain root's owner key, `''` in the editors' tree. */
+    const anchorOf = async (record) => {
+        let r = record;
+        while (r.parentId !== null) {
+            const up = await pages.getPage(r.parentId);
+            if (!up)
+                break;
+            r = up;
+        }
+        return r.fixed ?? "";
+    };
+    /** The refusal for a write that would put the node or its subtree where another code address wins (spec 2026-09-29
+     *  anchored paths §5): the tree after `change`, derived in memory, checked against the config. Only a path the write
+     *  changes counts: a page already hidden in one locale may still be renamed in another, or off the address. */
+    const landsOnCode = async (id, change) => {
+        const before = await pages.listPages();
+        const was = new Map(before.map((r) => [r.id, r]));
+        const all = before.map((r) => (r.id === id ? change(r) : r));
+        const byId = new Map(all.map((r) => [r.id, r]));
+        // A move into its own subtree is a cycle here; the store refuses it with its own message.
+        for (let up = byId.get(id).parentId; up !== null; up = byId.get(up)?.parentId ?? null)
+            if (up === id)
+                return null;
+        const inSubtree = (r) => r.id === id || (r.parentId !== null && byId.has(r.parentId) && inSubtree(byId.get(r.parentId)));
+        for (const node of all.filter(inSubtree)) {
+            const own = chainOf(node, (x) => byId.get(x))[0].fixed ?? "";
+            for (const locale of Object.keys(node.locales)) {
+                const path = pagePathIn(node, (x) => byId.get(x), locale, pathOpts);
+                if (path === null || path === pagePathIn(was.get(node.id), (x) => was.get(x), locale, pathOpts))
+                    continue;
+                const owner = ownerOf(path, locale, own);
+                if (owner)
+                    return belongsTo(path, owner);
+            }
+        }
+        return null;
+    };
+    const belongsTo = (path, owner) => err("validation", `smoodly: "${path}" belongs to the ${owner.title} ${owner.collection ? "collection" : "page"}.`);
+    /** A parent where another code address wins — a page that sits there, hidden (§4) — takes no new children. */
+    const insideCode = async (parent) => {
+        const own = await anchorOf(parent);
+        for (const [locale, path] of Object.entries(await pages.pathsOf(parent.id))) {
+            const owner = ownerOf(path, locale, own);
+            if (owner)
+                return belongsTo(`/${owner.segments[locale]}`, owner);
+        }
+        return null;
+    };
+    /** A record whose owner no registration names any more: deleting it is all that is open (§5). */
+    const orphan = (record) => record.fixed && !fixedNodeOf(record, config)
+        ? err("blocked", `smoodly: "${nameOf(record)}" is no longer in code — delete it, or register it again.`)
+        : null;
     const guard = async (work) => {
         try {
             return await work();
@@ -314,6 +375,8 @@ export function createAdminOps(deps) {
             return classify(e);
         }
     };
+    /** Where a new child may not go: a collection's record, a record no longer in code, a page where a code address wins. */
+    const parentGuard = async (parent) => mountGuard(parent) ?? orphan(parent) ?? (await insideCode(parent));
     return {
         pages: {
             list: () => guard(async () => ok(await ensureFixedNodes(pages, config))),
@@ -351,17 +414,26 @@ export function createAdminOps(deps) {
                         return err("validation", `smoodly: page type "${input.template}" is fixed — Smoodly creates that page for you.`);
                     }
                 }
+                let parentPath = "";
+                let own = "";
                 if (input.parentId !== null) {
                     const parent = await pages.getPage(input.parentId);
                     if (!parent)
                         return err("not_found", `smoodly: no page "${input.parentId}".`);
-                    const blocked = mountGuard(parent);
+                    const blocked = await parentGuard(parent);
                     if (blocked)
                         return blocked;
+                    parentPath = (await pages.pathsOf(parent.id))[input.locale];
+                    own = await anchorOf(parent);
                 }
-                else {
-                    // A root create competes with the code-owned slugs: make sure they exist first.
-                    await ensureFixedNodes(pages, config);
+                // A code address is code's whether or not its record has landed yet (spec 2026-09-29 anchored paths §5).
+                if (parentPath !== undefined) {
+                    // A root on the home slug serves "/" (isHomeNode), where a registered home page wins.
+                    const home = input.parentId === null && input.locale === def && input.slug === config.homePageSlug;
+                    const path = home ? "/" : `${parentPath}/${input.slug}`;
+                    const owner = ownerOf(path, input.locale, own);
+                    if (owner)
+                        return belongsTo(path, owner);
                 }
                 const created = await pages.createPage({
                     locale: input.locale, slug: input.slug, template: input.template, parentId: input.parentId,
@@ -446,6 +518,9 @@ export function createAdminOps(deps) {
                     return err("not_found", `smoodly: no page "${id}".`);
                 if (!record.locales[locale])
                     return err("not_found", `smoodly: page "${id}" does not exist in locale "${locale}".`);
+                const gone = orphan(record);
+                if (gone)
+                    return gone;
                 if (isHomeNode(record))
                     return err("blocked", `smoodly: "${nameOf(record)}" is the site root — it cannot be unpublished.`);
                 if (fixedNodeOf(record, config))
@@ -513,7 +588,8 @@ export function createAdminOps(deps) {
                 if (fixedNodeOf(record, config)) {
                     return err("blocked", `smoodly: "${nameOf(record)}" is owned by code — remove the registration to remove it.`);
                 }
-                if (isHomeNode(record))
+                // A home page no longer in code may go too (§5): the registration that serves "/" now lands after it.
+                if (isHomeNode(record) && !orphan(record))
                     return err("blocked", `smoodly: "${nameOf(record)}" is the site root — it cannot be deleted.`);
                 await pages.deletePage(id);
                 // The cached unit is keyed by (locale, path) but tagged by the id
@@ -526,6 +602,9 @@ export function createAdminOps(deps) {
                 const record = await pages.getPage(id);
                 if (!record)
                     return err("not_found", `smoodly: no page "${id}".`);
+                const gone = orphan(record);
+                if (gone)
+                    return gone;
                 if (fixedNodeOf(record, config))
                     return owned(record, "rename it in the registration");
                 if (isHomeNode(record) && patch.slug !== undefined) {
@@ -536,6 +615,12 @@ export function createAdminOps(deps) {
                     return unsupported;
                 if (record.parentId === null && patch.slug !== undefined && adminSlug(patch.slug))
                     return slugTaken();
+                if (patch.slug !== undefined) {
+                    const slug = patch.slug;
+                    const lands = await landsOnCode(id, (r) => r.locales[patch.locale] ? { ...r, locales: { ...r.locales, [patch.locale]: { ...r.locales[patch.locale], slug } } } : r);
+                    if (lands)
+                        return lands;
+                }
                 const { redirect, ...rest } = patch;
                 const renamed = await pages.rename(id, rest, by, { redirect: redirect ?? true });
                 // Every descendant's path changed with this segment; the parent
@@ -548,6 +633,9 @@ export function createAdminOps(deps) {
                 const record = await pages.getPage(id);
                 if (!record)
                     return err("not_found", `smoodly: no page "${id}".`);
+                const gone = orphan(record);
+                if (gone)
+                    return gone;
                 if (to.parentId === null && Object.values(record.locales).some((row) => adminSlug(row.slug)))
                     return slugTaken();
                 if (to.parentId !== null) {
@@ -560,10 +648,16 @@ export function createAdminOps(deps) {
                     const parent = await pages.getPage(to.parentId);
                     if (!parent)
                         return err("not_found", `smoodly: no page "${to.parentId}".`);
-                    const blocked = mountGuard(parent);
+                    // A reorder among a holding page's children is no new placement.
+                    const blocked = to.parentId === record.parentId ? null : await parentGuard(parent);
                     if (blocked)
                         return blocked;
                 }
+                if (to.parentId !== record.parentId) {
+                    const lands = await landsOnCode(id, (r) => ({ ...r, parentId: to.parentId }));
+                    if (lands)
+                        return lands;
+                }
                 const { redirect, ...dest } = to;
                 const moved = await pages.move(id, dest, { redirect: redirect ?? true });
                 expirePages([...(await subtreeIds(id)), record.parentId, moved.parentId]);
@@ -574,6 +668,9 @@ export function createAdminOps(deps) {
                 const record = await pages.getPage(id);
                 if (!record)
                     return err("not_found", `smoodly: no page "${id}".`);
+                const gone = orphan(record);
+                if (gone)
+                    return gone;
                 const fixed = fixedNodeOf(record, config);
                 if (fixed?.collection) {
                     return err("blocked", `smoodly: "${nameOf(record)}" is the "${fixed.collection}" collection's mount — its index page is a fixed registration.`);
@@ -592,8 +689,16 @@ export function createAdminOps(deps) {
                 const unsupported = supportedLocale(locale) ?? supportedLocale(options?.from);
                 if (unsupported)
                     return unsupported;
-                if (!(await pages.getPage(id)))
+                const record = await pages.getPage(id);
+                if (!record)
                     return err("not_found", `smoodly: no page "${id}".`);
+                const gone = orphan(record);
+                if (gone)
+                    return gone;
+                // The new locale copies the source's slug: it may not land where code wins the address (spec 2026-09-29 anchored paths §5).
+                const lands = await landsOnCode(id, (r) => r.locales[options.from] && !r.locales[locale] ? { ...r, locales: { ...r.locales, [locale]: r.locales[options.from] } } : r);
+                if (lands)
+                    return lands;
                 // A new locale is a draft: nothing public changes but the tree listing (spec 2026-09-11 §2).
                 const added = await pages.addLocale(id, locale, { from: options.from }, by);
                 expireTree();
@@ -606,6 +711,9 @@ export function createAdminOps(deps) {
                 const record = await pages.getPage(id);
                 if (!record)
                     return err("not_found", `smoodly: no page "${id}".`);
+                const gone = orphan(record);
+                if (gone)
+                    return gone;
                 if (fixedNodeOf(record, config))
                     return owned(record, "it exists in every locale");
                 if (isHomeNode(record))
@@ -1072,7 +1180,8 @@ export function createAdminOps(deps) {
                 }
                 return ok(out.sort((a, b) => a.path.localeCompare(b.path)));
             }),
-            add: (locale, path, target) => guard(async () => {
+            add: (locale, typed, target) => guard(async () => {
+                const path = normalizeRedirectPath(typed);
                 const unsupported = supportedLocale(locale);
                 if (unsupported)
                     return unsupported;
@@ -1094,7 +1203,7 @@ export function createAdminOps(deps) {
                 const unsupported = supportedLocale(locale);
                 if (unsupported)
                     return unsupported;
-                await pages.removeRedirect(locale, path);
+                await pages.removeRedirect(locale, path); // the stored address, as list gave it
                 return ok(null);
             }),
         },

package/dist/admin/redirect-path.d.ts

@@ -1,3 +1,6 @@
+/** The one stored form of an old address (the renderer decodes a request the same way):
+ *  a pasted `/s%C3%A4%C3%A4` and a typed `/sää` are one row. Checked after this. */
+export declare const normalizeRedirectPath: (path: string) => string;
 export type RedirectPathProblem = "empty" | "leading-slash" | "root" | "trailing-slash" | "double-slash" | "whitespace" | "query-or-hash" | "admin" | "extension";
 export declare const REDIRECT_PATH_MESSAGE: Record<RedirectPathProblem, string>;
 export declare function redirectPathProblem(path: string, opts: {

package/dist/admin/redirect-path.js

@@ -1,3 +1,12 @@
+// The old-address check for a redirect by hand (spec 2026-09-26
+// redirects §5). Pure: the Add dialog asks it for instant feedback and
+// the op asks it again. The shape is "a path the catch-all will see":
+// segments need not be slugs — old sites had capitals, dots and
+// underscores — but nothing here may be unreachable by construction.
+import { decodeSegment } from "../paths.js";
+/** The one stored form of an old address (the renderer decodes a request the same way):
+ *  a pasted `/s%C3%A4%C3%A4` and a typed `/sää` are one row. Checked after this. */
+export const normalizeRedirectPath = (path) => path.split("/").map(decodeSegment).join("/");
 export const REDIRECT_PATH_MESSAGE = {
     empty: "Enter the old address.",
     "leading-slash": "Start with a slash: /old-address.",

package/dist/admin/serialize.d.ts

@@ -1,4 +1,5 @@
 import type { ResolvedConfig } from "../config.ts";
+import type { Addresses } from "../addresses.ts";
 import type { Descriptor } from "../fields.ts";
 import type { ZonePolicy } from "../zones.ts";
 export type AdminField = Record<string, unknown> & {
@@ -80,6 +81,8 @@ export type AdminRegistry = {
     css: boolean;
     /** Which slug the site root serves. */
     homePageSlug: string;
+    /** Code-owned addresses by owner key (spec 2026-09-29 nested paths §3). */
+    addresses: Addresses;
     /** How deep editors may nest pages; 1 = flat. */
     pageDepth: number;
     /** Upload limits, so a widget can refuse a file before the round trip. */

package/dist/admin/serialize.js

@@ -106,6 +106,7 @@ export function serializeAdminConfig(config) {
         locales: config.locales,
         ...(config.timeZone !== undefined ? { timeZone: config.timeZone } : {}),
         homePageSlug: config.homePageSlug,
+        addresses: config.addresses,
         pageDepth: config.pageDepth,
         media: { maxSize: config.media.maxSize, accept: [...config.media.accept] },
         adminPath: config.admin.path,

package/dist/admin/shell/AddRedirectModal.js

@@ -5,7 +5,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 // before the op repeats the check, and the target — one type-ahead over
 // every page and routed entry live in the locale, "Title · /path".
 import { useState } from "react";
-import { REDIRECT_PATH_MESSAGE, redirectPathProblem } from "../redirect-path.js";
+import { REDIRECT_PATH_MESSAGE, normalizeRedirectPath, redirectPathProblem } from "../redirect-path.js";
 import { Combobox } from "../ui/Combobox.js";
 import { Modal } from "../ui/Modal.js";
 import { Banner, Button, Field } from "../ui/primitives.js";
@@ -15,7 +15,7 @@ export function AddRedirectModal({ locale, registry, targets, onClose, onAdd })
     const [target, setTarget] = useState(null);
     const [error, setError] = useState(null);
     const [busy, setBusy] = useState(false);
-    const problem = redirectPathProblem(path, { adminPath: registry.adminPath, multilingual: registry.locales.supported.length > 1 });
+    const problem = redirectPathProblem(normalizeRedirectPath(path), { adminPath: registry.adminPath, multilingual: registry.locales.supported.length > 1 });
     const picked = target ? targets.find((t) => t.target.kind === target.kind && t.target.id === target.id) : undefined;
     const submit = async (e) => {
         e.preventDefault();

package/dist/admin/shell/PagesList.js

@@ -9,7 +9,7 @@ import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-run
 // absent from the selected locale is dimmed and offers "Add <locale>".
 import { useCallback, useEffect, useState } from "react";
 import { ListView } from "./ListView.js";
-import { canDragRow, openTemplates, pagesTreeRows, projectDrop, sourceLocaleOf, subtreeHeight } from "./pages-tree.js";
+import { canDragRow, codeAddressNote, openTemplates, pagesTreeRows, projectDrop, sourceLocaleOf, subtreeHeight } from "./pages-tree.js";
 import { Button, StatusBadge } from "../ui/primitives.js";
 import { statusLabel } from "../ui/status-label.js";
 import { LocalePicker } from "../ui/LocaleSwitcher.js";
@@ -68,7 +68,7 @@ export function PagesList({ ops, registry }) {
                 return;
             // A published page under a new parent is a new live URL (members management §5).
             const current = row.record.locales[locale];
-            const live = await confirmLiveUrl({ status: current?.status, from: row.parentId ?? "", to: projection.parentId ?? "" }, { name: row.title, path: row.path });
+            const live = await confirmLiveUrl({ status: current?.status, from: row.parentId ?? "", to: projection.parentId ?? "" }, { name: row.title, path: row.path }, codeAddressNote(row.path, registry, locale));
             if (!live.ok)
                 return;
             const ok = await run(() => ops.pages.move(row.id, { parentId: projection.parentId, index: projection.index, redirect: live.redirect }));
@@ -151,7 +151,7 @@ export function PagesList({ ops, registry }) {
         // The site root's slug is the config's homePageSlug — title only there.
         if (row.isHome)
             return attempt(() => ops.pages.rename(row.id, { locale, title: values.title }));
-        const live = await confirmLiveUrl({ status: current.status, from: current.slug, to: values.slug }, { name: row.title, path: row.path });
+        const live = await confirmLiveUrl({ status: current.status, from: current.slug, to: values.slug }, { name: row.title, path: row.path }, codeAddressNote(row.path, registry, locale));
         if (!live.ok)
             return null;
         return attempt(() => ops.pages.rename(row.id, { locale, title: values.title, slug: values.slug, redirect: live.redirect }));
@@ -196,8 +196,16 @@ export function PagesList({ ops, registry }) {
     };
     const menuItems = (row) => {
         const items = [];
+        // A record no longer in code (spec 2026-09-29 nested paths §5): deleting it is all that is open.
+        if (row.orphan) {
+            if (!row.hasChildren)
+                items.push({ label: "Delete", run: () => destroy(row) });
+            return items;
+        }
         if (!row.present) {
-            items.push({ label: `Add ${locale}`, run: () => addLocale(row) });
+            // A code-owned record absent here waits for its address in this locale (an editor's page holds it, §5).
+            if (!row.fixed)
+                items.push({ label: `Add ${locale}`, run: () => addLocale(row) });
             return items;
         }
         if (row.canHaveChildren && !noOpen)
@@ -221,8 +229,10 @@ export function PagesList({ ops, registry }) {
     // Only a mount with no index page has nowhere else to go, so it opens
     // the collection list. The collection itself lives on the rail.
     const onRow = (row) => {
-        if (!row.present)
-            addLocale(row);
+        if (!row.present) {
+            if (!row.orphan && !row.fixed)
+                addLocale(row);
+        }
         else if (row.template !== null)
             openEditor(row.id);
         else if (row.kind === "mount" && row.collection)
@@ -249,11 +259,18 @@ export function PagesList({ ops, registry }) {
                         key: row.id,
                         onClick: () => onRow(row),
                         cells: [
-                            _jsxs("span", { className: row.hasChildren ? "sm-cell sm-cell--tree sm-cell--parent" : "sm-cell sm-cell--tree", style: { paddingLeft: depth * 20, ...dim }, children: [_jsx("button", { type: "button", className: "sm-chevron", "aria-label": row.expanded ? "Collapse" : "Expand", "aria-expanded": row.hasChildren ? row.expanded : undefined, style: { visibility: row.hasChildren ? "visible" : "hidden" }, onClick: (e) => { e.stopPropagation(); toggle(row.id); }, onKeyDown: (e) => e.stopPropagation(), children: row.expanded ? "▾" : "▸" }), _jsx("span", { style: { overflow: "hidden", textOverflow: "ellipsis", whiteSpace: "nowrap" }, children: row.title }), _jsx(LockIcon, { names: editorsOf(others, { kind: "page", id: row.id, locale }) })] }, "t"),
-                            row.present
-                                ? _jsx("span", { className: "sm-cell sm-cell--mono", children: row.path }, "p")
-                                : _jsxs("span", { className: "sm-cell sm-cell--muted", children: ["not in ", locale, " \u2014 click to add"] }, "p"),
-                            _jsx("span", { className: "sm-cell sm-cell--muted", style: dim, children: row.templateTitle }, "k"),
+                            _jsxs("span", { className: row.hasChildren ? "sm-cell sm-cell--tree sm-cell--parent" : "sm-cell sm-cell--tree", style: { paddingLeft: depth * 20, ...dim }, children: [_jsx("button", { type: "button", className: "sm-chevron", "aria-label": row.expanded ? "Collapse" : "Expand", "aria-expanded": row.hasChildren ? row.expanded : undefined, style: { visibility: row.hasChildren ? "visible" : "hidden" }, onClick: (e) => { e.stopPropagation(); toggle(row.id); }, onKeyDown: (e) => e.stopPropagation(), children: row.expanded ? "▾" : "▸" }), row.conflict
+                                        ? (
+                                        // An editor's page on a code address (spec 2026-09-29 nested paths §5): the notice under its title.
+                                        // One line in the fixed-height row; the whole notice on hover.
+                                        _jsxs("span", { style: { display: "flex", flexDirection: "column", minWidth: 0 }, children: [_jsx("span", { style: { overflow: "hidden", textOverflow: "ellipsis", whiteSpace: "nowrap" }, children: row.title }), _jsx("span", { className: "sm-cell--warn", title: row.conflict, children: row.conflict })] }))
+                                        : _jsx("span", { style: { overflow: "hidden", textOverflow: "ellipsis", whiteSpace: "nowrap" }, children: row.title }), _jsx(LockIcon, { names: editorsOf(others, { kind: "page", id: row.id, locale }) })] }, "t"),
+                            row.orphan
+                                ? _jsx("span", { className: "sm-cell sm-cell--muted", children: "\u2014" }, "p")
+                                : row.present
+                                    ? _jsx("span", { className: "sm-cell sm-cell--mono", children: row.path }, "p")
+                                    : _jsx("span", { className: "sm-cell sm-cell--muted", children: row.fixed ? `not in ${locale}` : `not in ${locale} — click to add` }, "p"),
+                            _jsx("span", { className: "sm-cell sm-cell--muted", style: dim, children: row.orphan ? "No longer in code" : row.templateTitle }, "k"),
                             row.status
                                 ? _jsx(StatusBadge, { status: statusLabel(row.status) }, "s")
                                 : _jsx("span", { className: "sm-cell sm-cell--muted", children: "\u2014" }, "s"),
@@ -264,7 +281,7 @@ export function PagesList({ ops, registry }) {
                         position: "absolute",
                         left: Math.max(12, Math.min(menu.x - 280, window.innerWidth - 312)),
                         top: Math.min(menu.y + 8, Math.max(12, window.innerHeight - 300)),
-                    }, children: [items.map((item) => (_jsx("button", { type: "button", className: "sm-picker__item", onClick: () => { setMenu(null); item.run(); }, children: item.label }, item.label))), items.length === 0 && (_jsx("p", { style: { color: "var(--text-muted)", padding: 10 }, children: "Owned by code \u2014 nothing to change here." }))] }) })), dialog?.kind === "new" && (_jsx(PageFormDialog, { title: dialog.node === "page" ? (dialog.parentId ? "New subpage" : "New page") : (dialog.parentId ? "New subpath" : "New path"), submitLabel: dialog.node === "page" ? "Create page" : "Create path", fields: { title: true, slug: true, template: dialog.node === "page" }, templates: creatable, parentPath: dialog.parentId ? (rows.find((r) => r.id === dialog.parentId)?.path ?? "/") : "/", onClose: closeDialog, onSubmit: (values) => submitDialog(values).then((message) => { if (message === null)
+                    }, children: [items.map((item) => (_jsx("button", { type: "button", className: "sm-picker__item", onClick: () => { setMenu(null); item.run(); }, children: item.label }, item.label))), items.length === 0 && (_jsx("p", { style: { color: "var(--text-muted)", padding: 10 }, children: menu?.row.orphan ? "No longer in code — move its child pages out, then delete it." : "Owned by code — nothing to change here." }))] }) })), dialog?.kind === "new" && (_jsx(PageFormDialog, { title: dialog.node === "page" ? (dialog.parentId ? "New subpage" : "New page") : (dialog.parentId ? "New subpath" : "New path"), submitLabel: dialog.node === "page" ? "Create page" : "Create path", fields: { title: true, slug: true, template: dialog.node === "page" }, templates: creatable, parentPath: dialog.parentId ? (rows.find((r) => r.id === dialog.parentId)?.path ?? "/") : "/", onClose: closeDialog, onSubmit: (values) => submitDialog(values).then((message) => { if (message === null)
                     closeDialog(); return message; }) })), dialog?.kind === "template" && (_jsx(PageFormDialog, { title: "Add page here", submitLabel: "Add page", fields: { template: true }, templates: creatable, onClose: closeDialog, onSubmit: (values) => submitDialog(values).then((message) => { if (message === null)
                     closeDialog(); return message; }) })), dialog?.kind === "rename" && (_jsx(PageFormDialog, { title: "Rename page", submitLabel: "Rename", fields: { title: true, slug: !dialog.row.isHome }, initial: { title: dialog.row.record.locales[locale]?.title ?? "", slug: dialog.row.record.locales[locale]?.slug ?? "" }, parentPath: dialog.row.isHome ? undefined : parentPathOf(dialog.row.path), onClose: closeDialog, onSubmit: (values) => submitDialog(values).then((message) => { if (message === null)
                     closeDialog(); return message; }) }))] }));

package/dist/admin/shell/live-url.d.ts

@@ -12,7 +12,9 @@ export declare function liveUrlChanges(input: {
     to: string | null;
 }): boolean;
 /** `ok` false = cancelled. `redirect` is the checkbox (true when no question was asked: the store's default). */
-export declare function confirmLiveUrl(input: Parameters<typeof liveUrlChanges>[0], subject?: ConfirmSubject): Promise<{
+export declare function confirmLiveUrl(input: Parameters<typeof liveUrlChanges>[0], subject?: ConfirmSubject, 
+/** A line after the body: the code addresses below the page that stay put (spec 2026-09-29 nested paths §3). */
+note?: string): Promise<{
     ok: boolean;
     redirect: boolean;
 }>;

package/dist/admin/shell/live-url.js

@@ -16,9 +16,12 @@ export function liveUrlChanges(input) {
     return input.status === "published" && input.from !== null && input.to !== input.from;
 }
 /** `ok` false = cancelled. `redirect` is the checkbox (true when no question was asked: the store's default). */
-export async function confirmLiveUrl(input, subject) {
+export async function confirmLiveUrl(input, subject, 
+/** A line after the body: the code addresses below the page that stay put (spec 2026-09-29 nested paths §3). */
+note) {
     if (!liveUrlChanges(input))
         return { ok: true, redirect: true };
-    const { yes, checked } = await confirmWithOption({ ...LIVE_URL_CONFIRM, option: { ...LIVE_URL_OPTION }, subject });
+    const body = note ? `${LIVE_URL_CONFIRM.body} ${note}` : LIVE_URL_CONFIRM.body;
+    const { yes, checked } = await confirmWithOption({ ...LIVE_URL_CONFIRM, body, option: { ...LIVE_URL_OPTION }, subject });
     return { ok: yes, redirect: checked };
 }

package/dist/admin/shell/pages-tree.d.ts

@@ -1,20 +1,21 @@
 import type { PageLocale, PageRecord } from "../../store.ts";
 import type { AdminCollection, AdminPageTemplate, AdminRegistry } from "../serialize.ts";
 import type { Projection } from "../ui/useSortable.ts";
-type NodeLike = {
-    parentId: string | null;
-    locales: Record<string, {
-        slug: string;
-    }>;
-};
 /** Registrations editors may create pages against: fixed ones are
  *  materialized by Smoodly, never offered. */
 export declare function openTemplates(templates: AdminPageTemplate[]): AdminPageTemplate[];
-/** The collection a ROOT record is the mount of, if any — known from the
- *  registry, never from a column (spec 2026-09-05 §4). */
-export declare function mountOf(record: NodeLike, registry: AdminRegistry): AdminCollection | null;
-/** Fixed pages and mounts: never renamed, moved, deleted or stripped of a locale by editors. */
-export declare function isFixedNode(record: NodeLike, registry: AdminRegistry): boolean;
+/** The collection a record is the address of — by owner, never by slug, while code still gives
+ *  it an address (spec 2026-09-29 nested paths §3). */
+export declare function mountOf(record: {
+    fixed?: string | null;
+}, registry: AdminRegistry): AdminCollection | null;
+/** Fixed pages and mounts: owned by a registration that still exists. Never renamed, moved,
+ *  deleted or stripped of a locale by editors. */
+export declare function isFixedNode(record: {
+    fixed?: string | null;
+}, registry: AdminRegistry): boolean;
+/** The rename/move confirm's extra line (spec 2026-09-29 nested paths §3): code addresses below a page stay put. */
+export declare function codeAddressNote(path: string | null, registry: AdminRegistry, locale: string): string | undefined;
 /** A node's title for display in a locale it may not exist in: its own,
  *  else the default locale's, else any. Display only — never content. */
 export declare function displayTitle(record: PageRecord, locale: string, registry: AdminRegistry): string;
@@ -46,6 +47,10 @@ export type PagesTreeRow = {
     kind: "page" | "folder" | "mount";
     collection: string | null;
     fixed: boolean;
+    /** The notice on an editor's page that sits on a code address in this locale (spec 2026-09-29 nested paths §5). */
+    conflict: string | null;
+    /** A code-owned record no registration names any more: it has no path and may only be deleted. */
+    orphan: boolean;
     /** The record serving "/" — never moved or deleted, and its default-locale slug is the config's. */
     isHome: boolean;
     template: string | null;
@@ -58,8 +63,9 @@ export declare function pagesTreeRows(records: PageRecord[], registry: AdminRegi
 export type TreeProjection = Projection;
 /** Every row drags: root order is the listing's order, nothing code owns.
  *  Fixed nodes and the home page stay at the root — projectDrop refuses
- *  them any deeper slot, the move op refuses any other parent. */
-export declare const canDragRow: (_row: PagesTreeRow) => boolean;
+ *  them any deeper slot, the move op refuses any other parent. A record
+ *  no longer in code does not move at all: deleting it is all that is open. */
+export declare const canDragRow: (row: PagesTreeRow) => boolean;
 /** Whether a row may only reorder among the root siblings. */
 export declare const rootOnly: (row: PagesTreeRow) => boolean;
 /** Levels below a node: 0 for a leaf. From the records, because the
@@ -78,4 +84,3 @@ export declare function subtreeHeight(records: {
  * code-owned or the site root.
  */
 export declare function projectDrop(rows: PagesTreeRow[], from: number, slot: number, xDrift: number, height: number, pageDepth: number, indent?: number): TreeProjection | null;
-export {};

package/dist/admin/shell/pages-tree.js

@@ -6,26 +6,54 @@
 // an "Add" action. The shell is not DOM-tested; every decision that
 // matters lives here.
 import { buildPageTree } from "../../paths.js";
+import { ownerCollection, pageKey } from "../../addresses.js";
 /** Registrations editors may create pages against: fixed ones are
  *  materialized by Smoodly, never offered. */
 export function openTemplates(templates) {
     return templates.filter((t) => t.slug === undefined);
 }
-/** The default-locale slug that identifies a ROOT node to the registry;
- *  a root that exists in another locale only is never code-owned. */
-const rootSlug = (record, registry) => record.parentId === null ? record.locales[registry.locales.default]?.slug : undefined;
-/** The collection a ROOT record is the mount of, if any — known from the
- *  registry, never from a column (spec 2026-09-05 §4). */
+/** The collection a record is the address of — by owner, never by slug, while code still gives
+ *  it an address (spec 2026-09-29 nested paths §3). */
 export function mountOf(record, registry) {
-    const slug = rootSlug(record, registry);
-    if (slug === undefined)
-        return null;
-    return registry.collections.find((c) => c.path?.[registry.locales.default] === slug) ?? null;
+    const name = record.fixed && registry.addresses[record.fixed] ? ownerCollection(record.fixed) : null;
+    return name === null ? null : registry.collections.find((c) => c.name === name) ?? null;
 }
-/** Fixed pages and mounts: never renamed, moved, deleted or stripped of a locale by editors. */
+/** Fixed pages and mounts: owned by a registration that still exists. Never renamed, moved,
+ *  deleted or stripped of a locale by editors. */
 export function isFixedNode(record, registry) {
-    const slug = rootSlug(record, registry);
-    return slug !== undefined && (registry.pages.some((t) => t.slug === slug) || mountOf(record, registry) !== null);
+    return !!record.fixed && registry.addresses[record.fixed] !== undefined;
+}
+/** Who owns `path` in a locale: a code address other than the home page's, which serves "/". */
+function ownerAt(path, registry, locale) {
+    for (const [key, segments] of Object.entries(registry.addresses)) {
+        const address = segments[locale];
+        if (address === undefined || segments[registry.locales.default] === registry.homePageSlug || `/${address}` !== path)
+            continue;
+        const collection = ownerCollection(key);
+        const title = collection
+            ? registry.collections.find((c) => c.name === collection)?.title ?? collection
+            : registry.pages.find((p) => pageKey(p.name) === key)?.title ?? key;
+        return { key, label: collection ? `the ${title} collection` : `the ${title} page` };
+    }
+    return null;
+}
+/** The notice on a page that sits on another code address, which visitors get instead (spec 2026-09-29 anchored paths §4). */
+function conflictNote(path, registry, locale) {
+    if (path === null)
+        return null;
+    const owner = ownerAt(path, registry, locale);
+    if (!owner)
+        return null;
+    return `${path} is set in code for ${owner.label}, so visitors don't see this page. Rename or move it.`;
+}
+/** The rename/move confirm's extra line (spec 2026-09-29 nested paths §3): code addresses below a page stay put. */
+export function codeAddressNote(path, registry, locale) {
+    if (path === null)
+        return undefined;
+    const below = Object.values(registry.addresses)
+        .map((s) => s[locale])
+        .filter((a) => a !== undefined && `/${a}`.startsWith(`${path}/`));
+    return below.length === 0 ? undefined : below.map((a) => `/${a} stays where it is — it is set in code.`).join(" ");
 }
 /** A node's title for display in a locale it may not exist in: its own,
  *  else the default locale's, else any. Display only — never content. */
@@ -54,7 +82,7 @@ export function localeStatusOf(row) {
     return row.publishedVersionId === row.draftVersionId ? "published" : "draft edits";
 }
 export function pagesTreeRows(records, registry, locale, collapsed) {
-    const opts = { locales: registry.locales, homePageSlug: registry.homePageSlug };
+    const opts = { locales: registry.locales, homePageSlug: registry.homePageSlug, addresses: registry.addresses };
     const templateTitle = (name) => registry.pages.find((t) => t.name === name)?.title ?? name;
     const rows = [];
     const walk = (nodes, depth, parentId) => {
@@ -65,6 +93,7 @@ export function pagesTreeRows(records, registry, locale, collapsed) {
             const mount = mountOf(r, registry);
             const isHome = r.parentId === null && r.locales[registry.locales.default]?.slug === registry.homePageSlug;
             const expanded = !collapsed.has(r.id);
+            const orphan = !!r.fixed && registry.addresses[r.fixed] === undefined;
             rows.push({
                 id: r.id,
                 parentId,
@@ -80,6 +109,8 @@ export function pagesTreeRows(records, registry, locale, collapsed) {
                 kind: mount ? "mount" : r.template === null ? "folder" : "page",
                 collection: mount?.name ?? null,
                 fixed: isFixedNode(r, registry),
+                conflict: r.fixed ? null : conflictNote(node.path, registry, locale),
+                orphan,
                 isHome,
                 template: r.template,
                 templateTitle: mount
@@ -87,7 +118,8 @@ export function pagesTreeRows(records, registry, locale, collapsed) {
                     : r.template === null ? "Path" : templateTitle(r.template),
                 status: !row || r.template === null ? null : localeStatusOf(row),
                 // A child needs its parent in the locale (the parent rule), so an absent node offers none.
-                canHaveChildren: present && !mount && !isHome && depth + 1 < registry.pageDepth,
+                // A record no longer in code has no URL to give a child (spec 2026-09-29 nested paths §5).
+                canHaveChildren: present && !mount && !isHome && !orphan && depth + 1 < registry.pageDepth,
                 record: r,
             });
             if (expanded)
@@ -99,8 +131,9 @@ export function pagesTreeRows(records, registry, locale, collapsed) {
 }
 /** Every row drags: root order is the listing's order, nothing code owns.
  *  Fixed nodes and the home page stay at the root — projectDrop refuses
- *  them any deeper slot, the move op refuses any other parent. */
-export const canDragRow = (_row) => true;
+ *  them any deeper slot, the move op refuses any other parent. A record
+ *  no longer in code does not move at all: deleting it is all that is open. */
+export const canDragRow = (row) => !row.orphan;
 /** Whether a row may only reorder among the root siblings. */
 export const rootOnly = (row) => row.fixed || row.isHome;
 /** Levels below a node: 0 for a leaf. From the records, because the