@bagelink/vue 1.15.668 → 1.17.2

package/dist/types/BagelForm.d.ts

@@ -98,6 +98,8 @@ export interface UploadInputValueObject {
     src?: string;
 }
 export interface UploadInputProps extends BagelInputShellProps {
+    /** Opt-in stable reference output; defaults to legacy path-key behavior. */
+    assetMode?: boolean;
     id?: string;
     name?: string;
     label?: string;
@@ -106,7 +108,7 @@ export interface UploadInputProps extends BagelInputShellProps {
      * Path-key string(s). Legacy/migrated records may also provide an image object
      * (e.g. `{ imageURL, imageName, extension, altText }`); it is normalized internally.
      */
-    modelValue?: string | string[] | UploadInputValueObject | (string | UploadInputValueObject)[];
+    modelValue?: string | string[] | UploadInputValueObject | import('../assets').AssetReference | (string | UploadInputValueObject | import('../assets').AssetReference)[];
     /** Optional upload handler. When omitted, the shared file-storage uploader is used. */
     upload?: (file: File) => Promise<string>;
     width?: string;

package/dist/types/BagelForm.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"BagelForm.d.ts","sourceRoot":"","sources":["../../src/types/BagelForm.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAC/D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAA;AACzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAA;AACxE,OAAO,KAAK,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AAC/E,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,KAAK,CAAA;AAIhC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAA;AAErF,UAAU,MAAM;IAAG,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,GAAG,CAAA;CAAE;AAI9C,MAAM,MAAM,KAAK,CAChB,CAAC,EACD,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAC1C,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;AAG9C,KAAK,mBAAmB,CAAC,CAAC,IAAI;KAC5B,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,GAChD,GAAG,CAAC,GAAG,MAAM,IAAI,MAAM,EAAE,GACzB,KAAK;CACR,CAAC,MAAM,CAAC,CAAC,CAAA;AAGV,MAAM,MAAM,IAAI,CAAC,CAAC,EAAE,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAC9D,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,KAAK,CAAC,GAAG,CAAC,GAC3C,kBAAkB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAChC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,mBAAmB,CAAC,CAAC,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,MAAM,cAAc,MAAM,EAAE,CAAA;AAErF,uFAAuF;AACvF,MAAM,MAAM,QAAQ,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IACtC,OAAO,SAAS,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,OAAO,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AAElD,sEAAsE;AACtE,MAAM,MAAM,aAAa,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAC3C,CAAC,SAAS,MAAM,GACf,CAAC,SAAS,MAAM,CAAC,GAChB,CAAC,CAAC,CAAC,CAAC,GACJ,GAAG,GACJ,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AAIlB,MAAM,MAAM,cAAc,GACrB,MAAM,GACP,MAAM,GACN,OAAO,GACP,SAAS,GACT;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;CAAE,CAAA;AAE1B,MAAM,MAAM,WAAW,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,CAC/C,KAAK,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EAC1B,GAAG,CAAC,EAAE,CAAC,KACH,cAAc,CAAA;AAEnB,MAAM,WAAW,UAAU,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC;IAC/C,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,GAAG,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;CACjD;AAED,MAAM,MAAM,YAAY,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IACxC,MAAM,GACP,CACC;IACD,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,GAAG,MAAM,CAAA;CACtB,GACC,MAAM,GACN,MAAM,GACN,OAAO,GACP;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;CAAE,CACxB,EAAE,GACD,CAAC,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,GAC/F,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;AAElF,MAAM,MAAM,OAAO,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IACnC,MAAM,GACP,OAAO,GACP,CAAC,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,OAAO,CAAC,CAAA;AAEzD,MAAM,MAAM,YAAY,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,CAChD,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EACzB,OAAO,CAAC,EAAE,CAAC,KACP,MAAM,GAAG,SAAS,CAAA;AAEvB,MAAM,MAAM,WAAW,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,CAC/C,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EACzB,OAAO,CAAC,EAAE,CAAC,KACP,GAAG,CAAA;AAER,MAAM,MAAM,QAAQ,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,CAC5C,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EACzB,OAAO,CAAC,EAAE,CAAC,KACP,OAAO,CAAA;AAIZ,MAAM,MAAM,OAAO,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE;IACnD,GAAG,CAAC,EAAE,CAAC,CAAA;IACP,KAAK,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;CAC3B,KAAK,KAAK,CAAA;AAEX,MAAM,WAAW,YAAY,CAC5B,CAAC,EACD,EAAE,SAAS,YAAY,GAAG,mBAAmB;IAE7C,GAAG,EAAE,GAAG,CAAA;IACR,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,CAAA;IACzB,KAAK,CAAC,EAAE,GAAG,CAAA;IACX,GAAG,CAAC,EAAE,GAAG,CAAA;IACT,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC3B,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,IAAI,CAAA;IAC1C,SAAS,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,GAAG,CAAA;IAC3C,QAAQ,CAAC,EAAE,YAAY,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;CAChC;AAGD,KAAK,mBAAmB,CAAC,CAAC,EAAE,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAAI;KAC3E,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,cAAc,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;CAC5C,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;AAEd,MAAM,MAAM,WAAW,CACtB,CAAC,EACD,CAAC,SAAS,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,EACrB,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAC1C,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,GAAG,mBAAmB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AAEpG,MAAM,WAAW,cAAc,CAC9B,CAAC,EACD,CAAC,SAAS,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,EACrB,EAAE,SAAS,YAAY,GAAG,mBAAmB;IAE7C,KAAK,CAAC,EAAE,MAAM,GAAG,GAAG,CAAA;IACpB,IAAI,CAAC,EAAE,CAAC,CAAA;IACR,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,OAAO,CAAC,EAAE,cAAc,GAAG,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC5C,OAAO,CAAC,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC1B,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC9B,UAAU,CAAC,EAAE,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;IAC9C,OAAO,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;KAAE,CAAA;IAC9D,cAAc,CAAC,EAAE,GAAG,CAAA;IACpB,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACrB,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACtB,WAAW,CAAC,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC/B,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC3B,UAAU,CAAC,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;CAC/B;AAED,MAAM,MAAM,KAAK,CAChB,CAAC,EACD,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAC1C,mBAAmB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AAE9B,MAAM,MAAM,WAAW,CACtB,CAAC,EACD,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAC1C,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AAEtC,MAAM,MAAM,cAAc,CACzB,CAAC,EACD,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAC1C,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAA;AAI/D,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,EAAE,YAAY,CAAC;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,EAAE,MAAM,CAAC,CAAA;IAC3D,WAAW,CAAC,EAAE,MAAM,GAAG,CAAA;CACvB;AAED,qFAAqF;AACrF,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;CACZ;AAED,MAAM,WAAW,gBAAiB,SAAQ,oBAAoB;IAC7D,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,sBAAsB,GAAG,CAAC,MAAM,GAAG,sBAAsB,CAAC,EAAE,CAAA;IAC7F,uFAAuF;IACvF,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IACxC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IACxB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,+DAA+D;IAC/D,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,KAAK,CAAC,EAAE,UAAU,GAAG,OAAO,CAAA;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,aAAa,CAAA;IAC1C,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,0FAA0F;IAC1F,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IAC1B,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;CAChC"}
+{"version":3,"file":"BagelForm.d.ts","sourceRoot":"","sources":["../../src/types/BagelForm.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAC/D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAA;AACzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAA;AACxE,OAAO,KAAK,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AAC/E,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,KAAK,CAAA;AAIhC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAA;AAErF,UAAU,MAAM;IAAG,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,GAAG,CAAA;CAAE;AAI9C,MAAM,MAAM,KAAK,CAChB,CAAC,EACD,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAC1C,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;AAG9C,KAAK,mBAAmB,CAAC,CAAC,IAAI;KAC5B,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,GAChD,GAAG,CAAC,GAAG,MAAM,IAAI,MAAM,EAAE,GACzB,KAAK;CACR,CAAC,MAAM,CAAC,CAAC,CAAA;AAGV,MAAM,MAAM,IAAI,CAAC,CAAC,EAAE,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAC9D,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,KAAK,CAAC,GAAG,CAAC,GAC3C,kBAAkB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAChC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,mBAAmB,CAAC,CAAC,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,MAAM,cAAc,MAAM,EAAE,CAAA;AAErF,uFAAuF;AACvF,MAAM,MAAM,QAAQ,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IACtC,OAAO,SAAS,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,OAAO,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AAElD,sEAAsE;AACtE,MAAM,MAAM,aAAa,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAC3C,CAAC,SAAS,MAAM,GACf,CAAC,SAAS,MAAM,CAAC,GAChB,CAAC,CAAC,CAAC,CAAC,GACJ,GAAG,GACJ,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AAIlB,MAAM,MAAM,cAAc,GACrB,MAAM,GACP,MAAM,GACN,OAAO,GACP,SAAS,GACT;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;CAAE,CAAA;AAE1B,MAAM,MAAM,WAAW,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,CAC/C,KAAK,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EAC1B,GAAG,CAAC,EAAE,CAAC,KACH,cAAc,CAAA;AAEnB,MAAM,WAAW,UAAU,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC;IAC/C,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,GAAG,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;CACjD;AAED,MAAM,MAAM,YAAY,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IACxC,MAAM,GACP,CACC;IACD,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,GAAG,MAAM,CAAA;CACtB,GACC,MAAM,GACN,MAAM,GACN,OAAO,GACP;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;CAAE,CACxB,EAAE,GACD,CAAC,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,GAC/F,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;AAElF,MAAM,MAAM,OAAO,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IACnC,MAAM,GACP,OAAO,GACP,CAAC,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,OAAO,CAAC,CAAA;AAEzD,MAAM,MAAM,YAAY,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,CAChD,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EACzB,OAAO,CAAC,EAAE,CAAC,KACP,MAAM,GAAG,SAAS,CAAA;AAEvB,MAAM,MAAM,WAAW,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,CAC/C,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EACzB,OAAO,CAAC,EAAE,CAAC,KACP,GAAG,CAAA;AAER,MAAM,MAAM,QAAQ,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,CAC5C,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EACzB,OAAO,CAAC,EAAE,CAAC,KACP,OAAO,CAAA;AAIZ,MAAM,MAAM,OAAO,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE;IACnD,GAAG,CAAC,EAAE,CAAC,CAAA;IACP,KAAK,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;CAC3B,KAAK,KAAK,CAAA;AAEX,MAAM,WAAW,YAAY,CAC5B,CAAC,EACD,EAAE,SAAS,YAAY,GAAG,mBAAmB;IAE7C,GAAG,EAAE,GAAG,CAAA;IACR,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,CAAA;IACzB,KAAK,CAAC,EAAE,GAAG,CAAA;IACX,GAAG,CAAC,EAAE,GAAG,CAAA;IACT,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC3B,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,IAAI,CAAA;IAC1C,SAAS,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,GAAG,CAAA;IAC3C,QAAQ,CAAC,EAAE,YAAY,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;CAChC;AAGD,KAAK,mBAAmB,CAAC,CAAC,EAAE,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAAI;KAC3E,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,cAAc,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;CAC5C,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;AAEd,MAAM,MAAM,WAAW,CACtB,CAAC,EACD,CAAC,SAAS,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,EACrB,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAC1C,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,GAAG,mBAAmB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AAEpG,MAAM,WAAW,cAAc,CAC9B,CAAC,EACD,CAAC,SAAS,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,EACrB,EAAE,SAAS,YAAY,GAAG,mBAAmB;IAE7C,KAAK,CAAC,EAAE,MAAM,GAAG,GAAG,CAAA;IACpB,IAAI,CAAC,EAAE,CAAC,CAAA;IACR,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,OAAO,CAAC,EAAE,cAAc,GAAG,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC5C,OAAO,CAAC,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC1B,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC9B,UAAU,CAAC,EAAE,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;IAC9C,OAAO,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;KAAE,CAAA;IAC9D,cAAc,CAAC,EAAE,GAAG,CAAA;IACpB,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACrB,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACtB,WAAW,CAAC,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC/B,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC3B,UAAU,CAAC,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;CAC/B;AAED,MAAM,MAAM,KAAK,CAChB,CAAC,EACD,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAC1C,mBAAmB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AAE9B,MAAM,MAAM,WAAW,CACtB,CAAC,EACD,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAC1C,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AAEtC,MAAM,MAAM,cAAc,CACzB,CAAC,EACD,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAC1C,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAA;AAI/D,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,EAAE,YAAY,CAAC;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,EAAE,MAAM,CAAC,CAAA;IAC3D,WAAW,CAAC,EAAE,MAAM,GAAG,CAAA;CACvB;AAED,qFAAqF;AACrF,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;CACZ;AAED,MAAM,WAAW,gBAAiB,SAAQ,oBAAoB;IAC7D,4EAA4E;IAC5E,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,sBAAsB,GAAG,OAAO,WAAW,EAAE,cAAc,GAAG,CAAC,MAAM,GAAG,sBAAsB,GAAG,OAAO,WAAW,EAAE,cAAc,CAAC,EAAE,CAAA;IACvK,uFAAuF;IACvF,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IACxC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IACxB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,+DAA+D;IAC/D,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,KAAK,CAAC,EAAE,UAAU,GAAG,OAAO,CAAA;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,aAAa,CAAA;IAC1C,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,0FAA0F;IAC1F,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IAC1B,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;CAChC"}

package/package.json

@@ -1,106 +1,105 @@
 {
-	"name": "@bagelink/vue",
-	"type": "module",
-	"version": "1.15.668",
-	"description": "Bagel core sdk packages",
-	"author": {
-		"name": "Bagel Studio",
-		"email": "hi@bagelstudio.co.il"
-	},
-	"license": "MIT",
-	"homepage": "https://github.com/bageldb/bagelink/tree/master/packages/vue#readme",
-	"repository": {
-		"type": "git",
-		"url": "git+https://github.com/bageldb/bagelink.git",
-		"directory": "packages/vue"
-	},
-	"bugs": "https://github.com/bageldb/bagelink/issues",
-	"keywords": [],
-	"sideEffects": [
-		"**/*.css"
-	],
-	"exports": {
-		"./tsconfig.json": "./tsconfig.json",
-		"./package.json": "./package.json",
-		"./src": "./src/index.ts",
-		"./src/components": "./src/components/index.ts",
-		"./src/utils": "./src/utils/index.ts",
-		"./src/types": "./src/types/index.ts",
-		".": {
-			"types": "./dist/index.d.ts",
-			"require": "./dist/index.cjs",
-			"import": "./dist/index.mjs"
-		},
-		"./style.css": "./dist/style.css",
-		"./styles/core.css": "./dist/core.css",
-		"./styles/admin.css": "./dist/style.css",
-		"./styles/fonts/admin.css": "./dist/admin.css",
-		"./styles/fonts/ploni.css": "./dist/ploni.css",
-		"./*": "./*"
-	},
-	"main": "./dist/index.cjs",
-	"module": "./dist/index.mjs",
-	"types": "./dist/index.d.ts",
-	"typesVersions": {
-		"*": {
-			"*": [
-				"./dist/*",
-				"./dist/index.d.ts"
-			]
-		}
-	},
-	"bin": {
-		"experimentalGenTypedRoutes": "./bin/experimentalGenTypedRoutes.ts"
-	},
-	"files": [
-		"dist",
-		"src",
-		"./vite.config.ts",
-		"bin/experimentalGenTypedRoutes.ts"
-	],
-	"devDependencies": {
-		"@types/leaflet": "^1.9.22",
-		"@types/signature_pad": "^4.0.0",
-		"vue": "^3.5.43",
-		"vue-component-type-helpers": "^2.2.12"
-	},
-	"peerDependencies": {
-		"@bagelink/sdk": "*",
-		"type-fest": "^4",
-		"vue": "*",
-		"vue-component-type-helpers": ">=2.2.10",
-		"vue-draggable-next": "^2.2.1",
-		"vue-router": "*"
-	},
-	"peerDependenciesMeta": {
-		"vue-draggable-next": {
-			"optional": true
-		}
-	},
-	"scripts": {
-		"prepublishOnly": "pnpm build",
-		"dev": "tsx watch src/index.ts",
-		"build": "vite build && pnpm verify:css",
-		"verify:css": "tsx scripts/verify-css-build.ts",
-		"gen:cheatsheet": "tsx scripts/gen-cheatsheet.ts",
-		"start": "tsx src/index.ts"
-	},
-	"publishConfig": {
-		"access": "public"
-	},
-	"dependencies": {
-		"@floating-ui/dom": "^1.8.0",
-		"@oddbird/popover-polyfill": "^0.6.1",
-		"@vueuse/core": "^13.9.0",
-		"@zxcvbn-ts/core": "^3.0.4",
-		"axios": "^1.20.0",
-		"floating-vue": "^5.4.0",
-		"libphonenumber-js": "^1.13.14",
-		"page-flip": "^2.0.7",
-		"pdfjs-dist": "^6.3.289",
-		"signature_pad": "^5.1.4",
-		"swiper": "^12.2.0",
-		"vue-i18n": "^11.4.12",
-		"vue-toastification": "^2.0.0-rc.5"
-	}
-}
+  "name": "@bagelink/vue",
+  "type": "module",
+  "version": "1.17.2",
+  "description": "Bagel core sdk packages",
+  "author": {
+    "name": "Bagel Studio",
+    "email": "hi@bagelstudio.co.il"
+  },
+  "license": "MIT",
+  "homepage": "https://github.com/bageldb/bagelink/tree/master/packages/vue#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/bageldb/bagelink.git",
+    "directory": "packages/vue"
+  },
+  "bugs": "https://github.com/bageldb/bagelink/issues",
+  "keywords": [],
+  "sideEffects": [
+    "**/*.css"
+  ],
+  "exports": {
+    "./tsconfig.json": "./tsconfig.json",
+    "./package.json": "./package.json",
+    "./src": "./src/index.ts",
+    "./src/components": "./src/components/index.ts",
+    "./src/utils": "./src/utils/index.ts",
+    "./src/types": "./src/types/index.ts",
+    ".": {
+      "types": "./dist/index.d.ts",
+      "require": "./dist/index.cjs",
+      "import": "./dist/index.mjs"
+    },
+    "./style.css": "./dist/style.css",
+    "./styles/core.css": "./dist/core.css",
+    "./styles/admin.css": "./dist/style.css",
+    "./styles/fonts/admin.css": "./dist/admin.css",
+    "./styles/fonts/ploni.css": "./dist/ploni.css",
+    "./*": "./*"
+  },
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.ts",
+  "typesVersions": {
+    "*": {
+      "*": [
+        "./dist/*",
+        "./dist/index.d.ts"
+      ]
+    }
+  },
+  "bin": {
+    "experimentalGenTypedRoutes": "./bin/experimentalGenTypedRoutes.ts"
+  },
+  "files": [
+    "dist",
+    "src",
+    "./vite.config.ts",
+    "bin/experimentalGenTypedRoutes.ts"
+  ],
+  "devDependencies": {
+    "@types/leaflet": "^1.9.22",
+    "@types/signature_pad": "^4.0.0",
+    "vue": "^3.5.43",
+    "vue-component-type-helpers": "^2.2.12"
+  },
+  "peerDependencies": {
+    "@bagelink/sdk": "*",
+    "type-fest": "^4",
+    "vue": "*",
+    "vue-component-type-helpers": ">=2.2.10",
+    "vue-draggable-next": "^2.2.1",
+    "vue-router": "*"
+  },
+  "peerDependenciesMeta": {
+    "vue-draggable-next": {
+      "optional": true
+    }
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@floating-ui/dom": "^1.8.0",
+    "@oddbird/popover-polyfill": "^0.6.1",
+    "@vueuse/core": "^13.9.0",
+    "@zxcvbn-ts/core": "^3.0.4",
+    "axios": "^1.20.0",
+    "floating-vue": "^5.4.0",
+    "libphonenumber-js": "^1.13.14",
+    "page-flip": "^2.0.7",
+    "pdfjs-dist": "^6.3.289",
+    "signature_pad": "^5.1.4",
+    "swiper": "^12.2.0",
+    "vue-i18n": "^11.4.12",
+    "vue-toastification": "^2.0.0-rc.5"
+  },
+  "scripts": {
+    "dev": "tsx watch src/index.ts",
+    "build": "vite build && pnpm verify:css",
+    "verify:css": "tsx scripts/verify-css-build.ts",
+    "gen:cheatsheet": "tsx scripts/gen-cheatsheet.ts",
+    "start": "tsx src/index.ts"
+  }
+}

package/src/assetTransport.test.ts

@@ -0,0 +1,125 @@
+import { describe, expect, it, vi } from 'vitest'
+import { configureAssetClient, createAssetHttpTransport, type AssetFetch } from './assetTransport'
+import { createAssetClient } from './assets'
+import type { ApiTransport } from '@bagelink/sdk'
+import { createApp, ref } from 'vue'
+
+const session = { asset_id: 'a', version_id: 'v', upload_id: 'u', status: 'ready' }
+const json = (value: unknown, status = 200) => new Response(JSON.stringify(value), { status })
+const signal = () => new AbortController().signal
+
+describe('asset REST transport', () => {
+	it('reuses authenticated transport and synchronously invalidates on tenant changes', async () => {
+		const request = vi.fn().mockImplementation(() => new Promise(() => {}))
+		const transport = { axios: { defaults: { baseURL: 'https://api.example/api' }, request } } as unknown as ApiTransport
+		const sessionKey = ref('account:tenant-a')
+		const assets = configureAssetClient({ transport, sessionKey })
+		createApp({}).use(assets)
+		const result = assets.client.resolve({ asset_id: 'a', representation: 'website' })
+		const rejected = expect(result).rejects.toMatchObject({ name: 'AbortError' })
+		await Promise.resolve()
+		expect(request.mock.calls[0]![0].url).toBe('assets/resolve')
+		expect(JSON.parse(request.mock.calls[0]![0].data).references[0].representation).toBe('website')
+		sessionKey.value = 'account:tenant-b'
+		await rejected
+		expect(request.mock.calls[0]![0].signal.aborted).toBe(true)
+	})
+
+	it('publishes only explicit image purposes with stable version-pinned URLs', async () => {
+		const fetcher = vi.fn<AssetFetch>().mockResolvedValue(json({
+			asset_id: 'a', version_id: 'v', published: true, name: 'photo',
+			representations: ['website', 'social'].map(representation => ({
+				representation, url: `/assets/a/public/v/${representation}`, media_type: 'image/jpeg', size: 42,
+			})),
+		}))
+		const transport = createAssetHttpTransport({ baseURL: 'https://api.example', fetch: fetcher })
+		const result = await transport.publish({ asset_id: 'a', version_id: 'v' })
+		expect(JSON.parse(String(fetcher.mock.calls[0]![1]?.body))).toEqual({
+			published: true, version_id: 'v', representations: ['website', 'social'],
+		})
+		expect(result.representations[1]?.url).toBe('https://api.example/assets/a/public/v/social')
+	})
+
+	it('rejects private grant URLs returned by publication', async () => {
+		const fetcher = vi.fn<AssetFetch>().mockResolvedValue(json({
+			asset_id: 'a', version_id: 'v', published: true,
+			representations: [{ representation: 'website', url: '/assets/a/content?token=secret' }],
+		}))
+		await expect(createAssetHttpTransport({ baseURL: 'https://api.example', fetch: fetcher })
+			.publish({ asset_id: 'a', version_id: 'v' })).rejects.toThrow('Invalid public')
+	})
+
+	it('starts a session and sends unchanged raw bytes, returning pinned references', async () => {
+		const fetcher = vi.fn<AssetFetch>().mockResolvedValueOnce(json(session)).mockResolvedValueOnce(json(session))
+		const transport = createAssetHttpTransport({ baseURL: 'https://api.example/api', fetch: fetcher })
+		const file = new File(['original'], 'test.heic')
+		expect(await transport.upload(file, signal())).toEqual({ asset_id: 'a', version_id: 'v' })
+		expect(String(fetcher.mock.calls[0]![0])).toBe('https://api.example/api/assets/uploads')
+		expect(fetcher.mock.calls[0]![1]?.body).toBe('{"name":"test.heic"}')
+		expect(fetcher.mock.calls[1]![1]?.body).toBe(file)
+		expect(new Headers(fetcher.mock.calls[1]![1]?.headers).get('Content-Type')).toBe('application/octet-stream')
+	})
+
+	it('fails closed for rejected completion and HTTP errors', async () => {
+		const fetcher = vi.fn<AssetFetch>().mockResolvedValueOnce(json(session))
+			.mockResolvedValueOnce(json({ ...session, status: 'rejected' })).mockResolvedValueOnce(json({}, 403))
+		const transport = createAssetHttpTransport({ baseURL: 'https://api.example', fetch: fetcher })
+		await expect(transport.upload(new File(['x'], 'x'), signal())).rejects.toThrow('not ready')
+		await expect(transport.resolve([{ asset_id: 'a' }], signal())).rejects.toThrow('(403)')
+	})
+
+	it('chunks 101 references and resolves relative URLs against the API origin', async () => {
+		const fetcher = vi.fn<AssetFetch>(async (_url, init) => {
+			const { references } = JSON.parse(String(init?.body)) as { references: { asset_id: string }[] }
+			return json({ items: references.map(reference => ({
+				...reference, version_id: 'v', representation: 'original',
+				url: '/assets/content?token=secret', expires_at: new Date(Date.now() + 60000).toISOString(),
+			})) })
+		})
+		const transport = createAssetHttpTransport({ baseURL: 'https://api.example', fetch: fetcher })
+		const items = await transport.resolve(Array.from({ length: 101 }, (_, i) => ({ asset_id: String(i) })), signal())
+		expect(fetcher.mock.calls.map(call => JSON.parse(String(call[1]?.body)).references.length)).toEqual([50, 50, 1])
+		expect(items).toHaveLength(101)
+		expect(items[0]?.url).toBe('https://api.example/assets/content?token=secret')
+	})
+
+	it('rejects untrusted delivery origins', async () => {
+		const fetcher = vi.fn<AssetFetch>().mockResolvedValue(json({ items: [{
+			asset_id: 'a', version_id: 'v', representation: 'original', url: '//evil.example/file',
+		}] }))
+		await expect(createAssetHttpTransport({ baseURL: 'https://api.example', fetch: fetcher })
+			.resolve([{ asset_id: 'a' }], signal())).rejects.toThrow('Untrusted')
+	})
+
+	it('does not PUT if session creation fails', async () => {
+		const fetcher = vi.fn<AssetFetch>().mockResolvedValueOnce(json({}, 503))
+		const transport = createAssetHttpTransport({ baseURL: 'https://api.example', fetch: fetcher })
+		await expect(transport.upload(new File(['x'], 'x'), signal())).rejects.toThrow('(503)')
+		expect(fetcher).toHaveBeenCalledTimes(1)
+	})
+
+	it('does not complete an upload after session cancellation', async () => {
+		let finish!: (response: Response) => void
+		const fetcher = vi.fn<AssetFetch>().mockImplementationOnce(() => new Promise(resolve => { finish = resolve }))
+		const client = createAssetClient(createAssetHttpTransport({ baseURL: 'https://api.example', fetch: fetcher }))
+		const promise = client.upload(new File(['x'], 'x'))
+		client.clearSession()
+		finish(json(session))
+		await expect(promise).rejects.toMatchObject({ name: 'AbortError' })
+		expect(fetcher).toHaveBeenCalledTimes(1)
+	})
+
+	it('session cleanup aborts the HTTP request', async () => {
+		let requestSignal: AbortSignal | null | undefined
+		const fetcher = vi.fn<AssetFetch>((_url, init) => {
+			requestSignal = init?.signal
+			return new Promise((_resolve, reject) => requestSignal?.addEventListener('abort', () => reject(requestSignal?.reason)))
+		})
+		const client = createAssetClient(createAssetHttpTransport({ baseURL: 'https://api.example', fetch: fetcher }))
+		const promise = client.resolve({ asset_id: 'a' })
+		await Promise.resolve()
+		client.clearSession()
+		await expect(promise).rejects.toMatchObject({ name: 'AbortError' })
+		expect(requestSignal?.aborted).toBe(true)
+	})
+})

package/src/assetTransport.ts

@@ -0,0 +1,164 @@
+import { createAssetClient, ASSET_CLIENT_KEY, type AssetDelivery, type AssetTransport, type AssetReference, type AssetPurpose } from './assets'
+import type { ApiTransport } from '@bagelink/sdk'
+import { watch, toValue, type App, type MaybeRefOrGetter } from 'vue'
+
+export type AssetFetch = (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>
+
+export interface AssetHttpOptions {
+	/** Absolute API base, optionally with a path prefix. */
+	baseURL: string
+	headers?: () => HeadersInit
+	fetch?: AssetFetch
+	credentials?: RequestCredentials
+	/** Explicitly trusted delivery origins besides the API origin. */
+	deliveryOrigins?: string[]
+	/** Reuse the app's authenticated axios instance, including tenant interceptors. */
+	apiTransport?: ApiTransport
+}
+
+interface UploadResponse {
+	asset_id: string
+	version_id: string
+	upload_id: string
+	status: string
+}
+interface DeliveryResponse extends AssetDelivery {
+	asset_id: string
+	representation: string
+}
+
+/** Concrete REST adapter, separate from generated SDK namespaces. */
+export function createAssetHttpTransport(options: AssetHttpOptions): AssetTransport & {
+	publish(reference: Required<AssetReference>, signal?: AbortSignal): Promise<AssetPublication>
+} {
+	const base = new URL(options.baseURL.endsWith('/') ? options.baseURL : `${options.baseURL}/`)
+	if (!['http:', 'https:'].includes(base.protocol) || base.username || base.password) throw new Error('Invalid API base')
+	const trusted = new Set([base.origin, ...(options.deliveryOrigins ?? []).map(origin => new URL(origin).origin)])
+	const request = options.fetch ?? globalThis.fetch
+	async function send<T>(path: string, init: RequestInit, signal: AbortSignal): Promise<T> {
+		signal.throwIfAborted()
+		const headers = new Headers(options.headers?.())
+		new Headers(init.headers).forEach((value, key) => headers.set(key, value))
+		if (options.apiTransport) {
+			const requestHeaders: Record<string, string> = {}
+			headers.forEach((value, key) => { requestHeaders[key] = value })
+			const response = await options.apiTransport.axios.request<T>({
+				url: `assets/${path}`, method: init.method, data: init.body,
+				headers: requestHeaders, signal,
+			})
+			signal.throwIfAborted()
+			return response.data
+		}
+		const response = await request(new URL(`assets/${path}`, base), {
+			...init, headers, signal, credentials: options.credentials ?? 'include', cache: 'no-store', redirect: 'error',
+		})
+		signal.throwIfAborted()
+		if (!response.ok) throw new Error(`Asset request failed (${response.status})`)
+		return await response.json() as T
+	}
+	return {
+		async publish(reference: Required<AssetReference>, signal = new AbortController().signal): Promise<AssetPublication> {
+			const result = await send<AssetPublication>(`${encodeURIComponent(reference.asset_id)}/publication`, {
+				method: 'PUT', headers: { 'Content-Type': 'application/json' },
+				body: JSON.stringify({ published: true, version_id: reference.version_id, representations: ['website', 'social'] }),
+			}, signal)
+			if (result.asset_id !== reference.asset_id || result.version_id !== reference.version_id || !result.published) {
+				throw new Error('Mismatched asset publication')
+			}
+			for (const purpose of ['website', 'social'] as const) {
+				const item = result.representations.find(item => item.representation === purpose)
+				if (!item) throw new Error('Incomplete asset publication')
+				const url = new URL(item.url, base)
+				const suffix = `/assets/${encodeURIComponent(reference.asset_id)}/public/${encodeURIComponent(reference.version_id)}/${purpose}`
+				if (!trusted.has(url.origin) || !['http:', 'https:'].includes(url.protocol)
+					|| url.username || url.password || url.search || url.hash || !url.pathname.endsWith(suffix)) {
+					throw new Error('Invalid public asset URL')
+				}
+				item.url = url.href
+			}
+			return result
+		},
+		async upload(file, signal) {
+			const started = await send<UploadResponse>('uploads', {
+				method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ name: file.name }),
+			}, signal)
+			if (!started.upload_id || !started.asset_id || !started.version_id) throw new Error('Invalid upload session')
+			const completed = await send<UploadResponse>(`uploads/${encodeURIComponent(started.upload_id)}`, {
+				method: 'PUT', headers: { 'Content-Type': 'application/octet-stream' }, body: file,
+			}, signal)
+			if (completed.status !== 'ready' || completed.asset_id !== started.asset_id
+				|| completed.version_id !== started.version_id || completed.upload_id !== started.upload_id) {
+				throw new Error('Asset upload is not ready')
+			}
+			return { asset_id: completed.asset_id, version_id: completed.version_id }
+		},
+		async resolve(references, signal) {
+			const result: AssetDelivery[] = []
+			for (let offset = 0; offset < references.length; offset += 50) {
+				const chunk = references.slice(offset, offset + 50)
+				const response = await send<{ items: DeliveryResponse[] }>('resolve', {
+					method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ references: chunk }),
+				}, signal)
+				if (!Array.isArray(response.items) || response.items.length !== chunk.length) throw new Error('Incomplete delivery response')
+				for (const reference of chunk) {
+					const item = response.items.find(candidate => candidate.asset_id === reference.asset_id
+						&& (!reference.version_id || candidate.version_id === reference.version_id)
+						&& candidate.representation === (reference.representation ?? 'original'))
+					if (!item) throw new Error('Mismatched delivery response')
+					const url = new URL(item.url, base)
+					if (!['http:', 'https:'].includes(url.protocol) || url.username || url.password
+						|| !trusted.has(url.origin)) throw new Error('Untrusted asset delivery URL')
+					result.push({ url: url.href, version_id: item.version_id, expires_at: item.expires_at })
+				}
+			}
+			return result
+		},
+	}
+}
+
+/** Public URLs are deliberately separate from expiring private deliveries. */
+export interface AssetPublication {
+	asset_id: string
+	name: string
+	version_id: string
+	published: boolean
+	representations: { representation: AssetPurpose; url: string; media_type: string; size: number }[]
+}
+
+export interface ConfigureAssetClientOptions {
+	transport: ApiTransport
+	/** Existing reactive identity/session + tenant key. Never inferred from auth globals. */
+	sessionKey: MaybeRefOrGetter<string | undefined>
+	deliveryOrigins?: string[]
+}
+
+/** Vue plugin; owns its session watcher and clears on app teardown. */
+export function configureAssetClient(options: ConfigureAssetClientOptions) {
+	const baseURL = options.transport.axios.defaults.baseURL
+	if (!baseURL) throw new Error('Asset transport needs an API baseURL')
+	const transport = createAssetHttpTransport({
+		baseURL: new URL(baseURL, typeof location === 'undefined' ? undefined : location.origin).href,
+		apiTransport: options.transport, deliveryOrigins: options.deliveryOrigins,
+	})
+	const client = createAssetClient(transport)
+	const publications = new Set<AbortController>()
+	const clearSession = () => {
+		client.clearSession()
+		for (const controller of publications) controller.abort()
+		publications.clear()
+	}
+	return {
+		client,
+		async publish(reference: Required<AssetReference>) {
+			const controller = new AbortController()
+			publications.add(controller)
+			try { return await transport.publish(reference, controller.signal) }
+			finally { publications.delete(controller) }
+		},
+		install(app: App) {
+			app.provide(ASSET_CLIENT_KEY, client)
+			const stop = watch(() => toValue(options.sessionKey), clearSession, { flush: 'sync' })
+			app.onUnmount(() => { stop(); clearSession() })
+		},
+	}
+}