test: define acl and import backend contracts

src/lib/import-backend-contract.test.ts

@@ -0,0 +1,24 @@
+import { existsSync, readFileSync } from "node:fs";
+import { describe, expect, it } from "vitest";
+
+const ROUTES = [
+  "badges", "badges/edit", "clone", "clone/batch", "clone/icon",
+  "clothing", "clothing/batch", "clothing/sets", "clothing/sets/batch",
+  "effects", "effects/batch", "furni", "furni/batch", "furni/batch-regen",
+  "furni/nitro-editor", "furni/resync", "pets", "pets/batch", "pets/icon",
+  "repair", "repair/audit",
+];
+
+describe("admin import backend contract", () => {
+  it.each(ROUTES)("provides and guards /api/admin/import/%s", (route) => {
+    const path = `src/app/api/admin/import/${route}/route.ts`;
+    expect(existsSync(path), path).toBe(true);
+    const source = readFileSync(path, "utf8");
+    expect(source, path).toContain("PERMS.ASSETS_IMPORT");
+  });
+
+  it("does not leave import actions as successful no-op stubs", () => {
+    const source = readFileSync("src/actions/import-furni.ts", "utf8");
+    expect(source).not.toContain("deleted: 0, remaining: 0");
+  });
+});