@bagelink/vue 1.16.0 → 1.17.2

package/dist/types/BagelForm.d.ts

@@ -98,6 +98,8 @@ export interface UploadInputValueObject {
     src?: string;
 }
 export interface UploadInputProps extends BagelInputShellProps {
+    /** Opt-in stable reference output; defaults to legacy path-key behavior. */
+    assetMode?: boolean;
     id?: string;
     name?: string;
     label?: string;
@@ -106,7 +108,7 @@ export interface UploadInputProps extends BagelInputShellProps {
      * Path-key string(s). Legacy/migrated records may also provide an image object
      * (e.g. `{ imageURL, imageName, extension, altText }`); it is normalized internally.
      */
-    modelValue?: string | string[] | UploadInputValueObject | (string | UploadInputValueObject)[];
+    modelValue?: string | string[] | UploadInputValueObject | import('../assets').AssetReference | (string | UploadInputValueObject | import('../assets').AssetReference)[];
     /** Optional upload handler. When omitted, the shared file-storage uploader is used. */
     upload?: (file: File) => Promise<string>;
     width?: string;

package/dist/types/BagelForm.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"BagelForm.d.ts","sourceRoot":"","sources":["../../src/types/BagelForm.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAC/D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAA;AACzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAA;AACxE,OAAO,KAAK,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AAC/E,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,KAAK,CAAA;AAIhC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAA;AAErF,UAAU,MAAM;IAAG,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,GAAG,CAAA;CAAE;AAI9C,MAAM,MAAM,KAAK,CAChB,CAAC,EACD,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAC1C,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;AAG9C,KAAK,mBAAmB,CAAC,CAAC,IAAI;KAC5B,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,GAChD,GAAG,CAAC,GAAG,MAAM,IAAI,MAAM,EAAE,GACzB,KAAK;CACR,CAAC,MAAM,CAAC,CAAC,CAAA;AAGV,MAAM,MAAM,IAAI,CAAC,CAAC,EAAE,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAC9D,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,KAAK,CAAC,GAAG,CAAC,GAC3C,kBAAkB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAChC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,mBAAmB,CAAC,CAAC,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,MAAM,cAAc,MAAM,EAAE,CAAA;AAErF,uFAAuF;AACvF,MAAM,MAAM,QAAQ,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IACtC,OAAO,SAAS,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,OAAO,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AAElD,sEAAsE;AACtE,MAAM,MAAM,aAAa,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAC3C,CAAC,SAAS,MAAM,GACf,CAAC,SAAS,MAAM,CAAC,GAChB,CAAC,CAAC,CAAC,CAAC,GACJ,GAAG,GACJ,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AAIlB,MAAM,MAAM,cAAc,GACrB,MAAM,GACP,MAAM,GACN,OAAO,GACP,SAAS,GACT;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;CAAE,CAAA;AAE1B,MAAM,MAAM,WAAW,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,CAC/C,KAAK,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EAC1B,GAAG,CAAC,EAAE,CAAC,KACH,cAAc,CAAA;AAEnB,MAAM,WAAW,UAAU,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC;IAC/C,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,GAAG,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;CACjD;AAED,MAAM,MAAM,YAAY,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IACxC,MAAM,GACP,CACC;IACD,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,GAAG,MAAM,CAAA;CACtB,GACC,MAAM,GACN,MAAM,GACN,OAAO,GACP;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;CAAE,CACxB,EAAE,GACD,CAAC,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,GAC/F,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;AAElF,MAAM,MAAM,OAAO,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IACnC,MAAM,GACP,OAAO,GACP,CAAC,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,OAAO,CAAC,CAAA;AAEzD,MAAM,MAAM,YAAY,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,CAChD,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EACzB,OAAO,CAAC,EAAE,CAAC,KACP,MAAM,GAAG,SAAS,CAAA;AAEvB,MAAM,MAAM,WAAW,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,CAC/C,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EACzB,OAAO,CAAC,EAAE,CAAC,KACP,GAAG,CAAA;AAER,MAAM,MAAM,QAAQ,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,CAC5C,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EACzB,OAAO,CAAC,EAAE,CAAC,KACP,OAAO,CAAA;AAIZ,MAAM,MAAM,OAAO,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE;IACnD,GAAG,CAAC,EAAE,CAAC,CAAA;IACP,KAAK,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;CAC3B,KAAK,KAAK,CAAA;AAEX,MAAM,WAAW,YAAY,CAC5B,CAAC,EACD,EAAE,SAAS,YAAY,GAAG,mBAAmB;IAE7C,GAAG,EAAE,GAAG,CAAA;IACR,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,CAAA;IACzB,KAAK,CAAC,EAAE,GAAG,CAAA;IACX,GAAG,CAAC,EAAE,GAAG,CAAA;IACT,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC3B,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,IAAI,CAAA;IAC1C,SAAS,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,GAAG,CAAA;IAC3C,QAAQ,CAAC,EAAE,YAAY,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;CAChC;AAGD,KAAK,mBAAmB,CAAC,CAAC,EAAE,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAAI;KAC3E,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,cAAc,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;CAC5C,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;AAEd,MAAM,MAAM,WAAW,CACtB,CAAC,EACD,CAAC,SAAS,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,EACrB,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAC1C,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,GAAG,mBAAmB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AAEpG,MAAM,WAAW,cAAc,CAC9B,CAAC,EACD,CAAC,SAAS,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,EACrB,EAAE,SAAS,YAAY,GAAG,mBAAmB;IAE7C,KAAK,CAAC,EAAE,MAAM,GAAG,GAAG,CAAA;IACpB,IAAI,CAAC,EAAE,CAAC,CAAA;IACR,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,OAAO,CAAC,EAAE,cAAc,GAAG,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC5C,OAAO,CAAC,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC1B,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC9B,UAAU,CAAC,EAAE,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;IAC9C,OAAO,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;KAAE,CAAA;IAC9D,cAAc,CAAC,EAAE,GAAG,CAAA;IACpB,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACrB,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACtB,WAAW,CAAC,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC/B,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC3B,UAAU,CAAC,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;CAC/B;AAED,MAAM,MAAM,KAAK,CAChB,CAAC,EACD,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAC1C,mBAAmB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AAE9B,MAAM,MAAM,WAAW,CACtB,CAAC,EACD,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAC1C,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AAEtC,MAAM,MAAM,cAAc,CACzB,CAAC,EACD,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAC1C,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAA;AAI/D,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,EAAE,YAAY,CAAC;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,EAAE,MAAM,CAAC,CAAA;IAC3D,WAAW,CAAC,EAAE,MAAM,GAAG,CAAA;CACvB;AAED,qFAAqF;AACrF,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;CACZ;AAED,MAAM,WAAW,gBAAiB,SAAQ,oBAAoB;IAC7D,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,sBAAsB,GAAG,CAAC,MAAM,GAAG,sBAAsB,CAAC,EAAE,CAAA;IAC7F,uFAAuF;IACvF,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IACxC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IACxB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,+DAA+D;IAC/D,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,KAAK,CAAC,EAAE,UAAU,GAAG,OAAO,CAAA;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,aAAa,CAAA;IAC1C,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,0FAA0F;IAC1F,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IAC1B,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;CAChC"}
+{"version":3,"file":"BagelForm.d.ts","sourceRoot":"","sources":["../../src/types/BagelForm.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAC/D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAA;AACzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAA;AACxE,OAAO,KAAK,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AAC/E,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,KAAK,CAAA;AAIhC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAA;AAErF,UAAU,MAAM;IAAG,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,GAAG,CAAA;CAAE;AAI9C,MAAM,MAAM,KAAK,CAChB,CAAC,EACD,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAC1C,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;AAG9C,KAAK,mBAAmB,CAAC,CAAC,IAAI;KAC5B,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,GAChD,GAAG,CAAC,GAAG,MAAM,IAAI,MAAM,EAAE,GACzB,KAAK;CACR,CAAC,MAAM,CAAC,CAAC,CAAA;AAGV,MAAM,MAAM,IAAI,CAAC,CAAC,EAAE,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAC9D,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,KAAK,CAAC,GAAG,CAAC,GAC3C,kBAAkB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAChC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,mBAAmB,CAAC,CAAC,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,MAAM,cAAc,MAAM,EAAE,CAAA;AAErF,uFAAuF;AACvF,MAAM,MAAM,QAAQ,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IACtC,OAAO,SAAS,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,OAAO,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AAElD,sEAAsE;AACtE,MAAM,MAAM,aAAa,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAC3C,CAAC,SAAS,MAAM,GACf,CAAC,SAAS,MAAM,CAAC,GAChB,CAAC,CAAC,CAAC,CAAC,GACJ,GAAG,GACJ,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AAIlB,MAAM,MAAM,cAAc,GACrB,MAAM,GACP,MAAM,GACN,OAAO,GACP,SAAS,GACT;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;CAAE,CAAA;AAE1B,MAAM,MAAM,WAAW,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,CAC/C,KAAK,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EAC1B,GAAG,CAAC,EAAE,CAAC,KACH,cAAc,CAAA;AAEnB,MAAM,WAAW,UAAU,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC;IAC/C,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,GAAG,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;CACjD;AAED,MAAM,MAAM,YAAY,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IACxC,MAAM,GACP,CACC;IACD,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,GAAG,MAAM,CAAA;CACtB,GACC,MAAM,GACN,MAAM,GACN,OAAO,GACP;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;CAAE,CACxB,EAAE,GACD,CAAC,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,GAC/F,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;AAElF,MAAM,MAAM,OAAO,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IACnC,MAAM,GACP,OAAO,GACP,CAAC,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,OAAO,CAAC,CAAA;AAEzD,MAAM,MAAM,YAAY,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,CAChD,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EACzB,OAAO,CAAC,EAAE,CAAC,KACP,MAAM,GAAG,SAAS,CAAA;AAEvB,MAAM,MAAM,WAAW,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,CAC/C,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EACzB,OAAO,CAAC,EAAE,CAAC,KACP,GAAG,CAAA;AAER,MAAM,MAAM,QAAQ,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,CAC5C,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EACzB,OAAO,CAAC,EAAE,CAAC,KACP,OAAO,CAAA;AAIZ,MAAM,MAAM,OAAO,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE;IACnD,GAAG,CAAC,EAAE,CAAC,CAAA;IACP,KAAK,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;CAC3B,KAAK,KAAK,CAAA;AAEX,MAAM,WAAW,YAAY,CAC5B,CAAC,EACD,EAAE,SAAS,YAAY,GAAG,mBAAmB;IAE7C,GAAG,EAAE,GAAG,CAAA;IACR,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,CAAA;IACzB,KAAK,CAAC,EAAE,GAAG,CAAA;IACX,GAAG,CAAC,EAAE,GAAG,CAAA;IACT,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC3B,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,IAAI,CAAA;IAC1C,SAAS,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,GAAG,CAAA;IAC3C,QAAQ,CAAC,EAAE,YAAY,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;CAChC;AAGD,KAAK,mBAAmB,CAAC,CAAC,EAAE,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAAI;KAC3E,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,cAAc,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;CAC5C,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;AAEd,MAAM,MAAM,WAAW,CACtB,CAAC,EACD,CAAC,SAAS,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,EACrB,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAC1C,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,GAAG,mBAAmB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AAEpG,MAAM,WAAW,cAAc,CAC9B,CAAC,EACD,CAAC,SAAS,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,EACrB,EAAE,SAAS,YAAY,GAAG,mBAAmB;IAE7C,KAAK,CAAC,EAAE,MAAM,GAAG,GAAG,CAAA;IACpB,IAAI,CAAC,EAAE,CAAC,CAAA;IACR,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,OAAO,CAAC,EAAE,cAAc,GAAG,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC5C,OAAO,CAAC,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC1B,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC9B,UAAU,CAAC,EAAE,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;IAC9C,OAAO,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;KAAE,CAAA;IAC9D,cAAc,CAAC,EAAE,GAAG,CAAA;IACpB,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACrB,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACtB,WAAW,CAAC,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC/B,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC3B,UAAU,CAAC,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;CAC/B;AAED,MAAM,MAAM,KAAK,CAChB,CAAC,EACD,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAC1C,mBAAmB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AAE9B,MAAM,MAAM,WAAW,CACtB,CAAC,EACD,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAC1C,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AAEtC,MAAM,MAAM,cAAc,CACzB,CAAC,EACD,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAC1C,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAA;AAI/D,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,EAAE,YAAY,CAAC;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,EAAE,MAAM,CAAC,CAAA;IAC3D,WAAW,CAAC,EAAE,MAAM,GAAG,CAAA;CACvB;AAED,qFAAqF;AACrF,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;CACZ;AAED,MAAM,WAAW,gBAAiB,SAAQ,oBAAoB;IAC7D,4EAA4E;IAC5E,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,sBAAsB,GAAG,OAAO,WAAW,EAAE,cAAc,GAAG,CAAC,MAAM,GAAG,sBAAsB,GAAG,OAAO,WAAW,EAAE,cAAc,CAAC,EAAE,CAAA;IACvK,uFAAuF;IACvF,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IACxC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IACxB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,+DAA+D;IAC/D,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,KAAK,CAAC,EAAE,UAAU,GAAG,OAAO,CAAA;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,aAAa,CAAA;IAC1C,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,0FAA0F;IAC1F,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IAC1B,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;CAChC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@bagelink/vue",
   "type": "module",
-  "version": "1.16.0",
+  "version": "1.17.2",
   "description": "Bagel core sdk packages",
   "author": {
     "name": "Bagel Studio",

package/src/assetTransport.test.ts

@@ -0,0 +1,125 @@
+import { describe, expect, it, vi } from 'vitest'
+import { configureAssetClient, createAssetHttpTransport, type AssetFetch } from './assetTransport'
+import { createAssetClient } from './assets'
+import type { ApiTransport } from '@bagelink/sdk'
+import { createApp, ref } from 'vue'
+
+const session = { asset_id: 'a', version_id: 'v', upload_id: 'u', status: 'ready' }
+const json = (value: unknown, status = 200) => new Response(JSON.stringify(value), { status })
+const signal = () => new AbortController().signal
+
+describe('asset REST transport', () => {
+	it('reuses authenticated transport and synchronously invalidates on tenant changes', async () => {
+		const request = vi.fn().mockImplementation(() => new Promise(() => {}))
+		const transport = { axios: { defaults: { baseURL: 'https://api.example/api' }, request } } as unknown as ApiTransport
+		const sessionKey = ref('account:tenant-a')
+		const assets = configureAssetClient({ transport, sessionKey })
+		createApp({}).use(assets)
+		const result = assets.client.resolve({ asset_id: 'a', representation: 'website' })
+		const rejected = expect(result).rejects.toMatchObject({ name: 'AbortError' })
+		await Promise.resolve()
+		expect(request.mock.calls[0]![0].url).toBe('assets/resolve')
+		expect(JSON.parse(request.mock.calls[0]![0].data).references[0].representation).toBe('website')
+		sessionKey.value = 'account:tenant-b'
+		await rejected
+		expect(request.mock.calls[0]![0].signal.aborted).toBe(true)
+	})
+
+	it('publishes only explicit image purposes with stable version-pinned URLs', async () => {
+		const fetcher = vi.fn<AssetFetch>().mockResolvedValue(json({
+			asset_id: 'a', version_id: 'v', published: true, name: 'photo',
+			representations: ['website', 'social'].map(representation => ({
+				representation, url: `/assets/a/public/v/${representation}`, media_type: 'image/jpeg', size: 42,
+			})),
+		}))
+		const transport = createAssetHttpTransport({ baseURL: 'https://api.example', fetch: fetcher })
+		const result = await transport.publish({ asset_id: 'a', version_id: 'v' })
+		expect(JSON.parse(String(fetcher.mock.calls[0]![1]?.body))).toEqual({
+			published: true, version_id: 'v', representations: ['website', 'social'],
+		})
+		expect(result.representations[1]?.url).toBe('https://api.example/assets/a/public/v/social')
+	})
+
+	it('rejects private grant URLs returned by publication', async () => {
+		const fetcher = vi.fn<AssetFetch>().mockResolvedValue(json({
+			asset_id: 'a', version_id: 'v', published: true,
+			representations: [{ representation: 'website', url: '/assets/a/content?token=secret' }],
+		}))
+		await expect(createAssetHttpTransport({ baseURL: 'https://api.example', fetch: fetcher })
+			.publish({ asset_id: 'a', version_id: 'v' })).rejects.toThrow('Invalid public')
+	})
+
+	it('starts a session and sends unchanged raw bytes, returning pinned references', async () => {
+		const fetcher = vi.fn<AssetFetch>().mockResolvedValueOnce(json(session)).mockResolvedValueOnce(json(session))
+		const transport = createAssetHttpTransport({ baseURL: 'https://api.example/api', fetch: fetcher })
+		const file = new File(['original'], 'test.heic')
+		expect(await transport.upload(file, signal())).toEqual({ asset_id: 'a', version_id: 'v' })
+		expect(String(fetcher.mock.calls[0]![0])).toBe('https://api.example/api/assets/uploads')
+		expect(fetcher.mock.calls[0]![1]?.body).toBe('{"name":"test.heic"}')
+		expect(fetcher.mock.calls[1]![1]?.body).toBe(file)
+		expect(new Headers(fetcher.mock.calls[1]![1]?.headers).get('Content-Type')).toBe('application/octet-stream')
+	})
+
+	it('fails closed for rejected completion and HTTP errors', async () => {
+		const fetcher = vi.fn<AssetFetch>().mockResolvedValueOnce(json(session))
+			.mockResolvedValueOnce(json({ ...session, status: 'rejected' })).mockResolvedValueOnce(json({}, 403))
+		const transport = createAssetHttpTransport({ baseURL: 'https://api.example', fetch: fetcher })
+		await expect(transport.upload(new File(['x'], 'x'), signal())).rejects.toThrow('not ready')
+		await expect(transport.resolve([{ asset_id: 'a' }], signal())).rejects.toThrow('(403)')
+	})
+
+	it('chunks 101 references and resolves relative URLs against the API origin', async () => {
+		const fetcher = vi.fn<AssetFetch>(async (_url, init) => {
+			const { references } = JSON.parse(String(init?.body)) as { references: { asset_id: string }[] }
+			return json({ items: references.map(reference => ({
+				...reference, version_id: 'v', representation: 'original',
+				url: '/assets/content?token=secret', expires_at: new Date(Date.now() + 60000).toISOString(),
+			})) })
+		})
+		const transport = createAssetHttpTransport({ baseURL: 'https://api.example', fetch: fetcher })
+		const items = await transport.resolve(Array.from({ length: 101 }, (_, i) => ({ asset_id: String(i) })), signal())
+		expect(fetcher.mock.calls.map(call => JSON.parse(String(call[1]?.body)).references.length)).toEqual([50, 50, 1])
+		expect(items).toHaveLength(101)
+		expect(items[0]?.url).toBe('https://api.example/assets/content?token=secret')
+	})
+
+	it('rejects untrusted delivery origins', async () => {
+		const fetcher = vi.fn<AssetFetch>().mockResolvedValue(json({ items: [{
+			asset_id: 'a', version_id: 'v', representation: 'original', url: '//evil.example/file',
+		}] }))
+		await expect(createAssetHttpTransport({ baseURL: 'https://api.example', fetch: fetcher })
+			.resolve([{ asset_id: 'a' }], signal())).rejects.toThrow('Untrusted')
+	})
+
+	it('does not PUT if session creation fails', async () => {
+		const fetcher = vi.fn<AssetFetch>().mockResolvedValueOnce(json({}, 503))
+		const transport = createAssetHttpTransport({ baseURL: 'https://api.example', fetch: fetcher })
+		await expect(transport.upload(new File(['x'], 'x'), signal())).rejects.toThrow('(503)')
+		expect(fetcher).toHaveBeenCalledTimes(1)
+	})
+
+	it('does not complete an upload after session cancellation', async () => {
+		let finish!: (response: Response) => void
+		const fetcher = vi.fn<AssetFetch>().mockImplementationOnce(() => new Promise(resolve => { finish = resolve }))
+		const client = createAssetClient(createAssetHttpTransport({ baseURL: 'https://api.example', fetch: fetcher }))
+		const promise = client.upload(new File(['x'], 'x'))
+		client.clearSession()
+		finish(json(session))
+		await expect(promise).rejects.toMatchObject({ name: 'AbortError' })
+		expect(fetcher).toHaveBeenCalledTimes(1)
+	})
+
+	it('session cleanup aborts the HTTP request', async () => {
+		let requestSignal: AbortSignal | null | undefined
+		const fetcher = vi.fn<AssetFetch>((_url, init) => {
+			requestSignal = init?.signal
+			return new Promise((_resolve, reject) => requestSignal?.addEventListener('abort', () => reject(requestSignal?.reason)))
+		})
+		const client = createAssetClient(createAssetHttpTransport({ baseURL: 'https://api.example', fetch: fetcher }))
+		const promise = client.resolve({ asset_id: 'a' })
+		await Promise.resolve()
+		client.clearSession()
+		await expect(promise).rejects.toMatchObject({ name: 'AbortError' })
+		expect(requestSignal?.aborted).toBe(true)
+	})
+})

package/src/assetTransport.ts

@@ -0,0 +1,164 @@
+import { createAssetClient, ASSET_CLIENT_KEY, type AssetDelivery, type AssetTransport, type AssetReference, type AssetPurpose } from './assets'
+import type { ApiTransport } from '@bagelink/sdk'
+import { watch, toValue, type App, type MaybeRefOrGetter } from 'vue'
+
+export type AssetFetch = (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>
+
+export interface AssetHttpOptions {
+	/** Absolute API base, optionally with a path prefix. */
+	baseURL: string
+	headers?: () => HeadersInit
+	fetch?: AssetFetch
+	credentials?: RequestCredentials
+	/** Explicitly trusted delivery origins besides the API origin. */
+	deliveryOrigins?: string[]
+	/** Reuse the app's authenticated axios instance, including tenant interceptors. */
+	apiTransport?: ApiTransport
+}
+
+interface UploadResponse {
+	asset_id: string
+	version_id: string
+	upload_id: string
+	status: string
+}
+interface DeliveryResponse extends AssetDelivery {
+	asset_id: string
+	representation: string
+}
+
+/** Concrete REST adapter, separate from generated SDK namespaces. */
+export function createAssetHttpTransport(options: AssetHttpOptions): AssetTransport & {
+	publish(reference: Required<AssetReference>, signal?: AbortSignal): Promise<AssetPublication>
+} {
+	const base = new URL(options.baseURL.endsWith('/') ? options.baseURL : `${options.baseURL}/`)
+	if (!['http:', 'https:'].includes(base.protocol) || base.username || base.password) throw new Error('Invalid API base')
+	const trusted = new Set([base.origin, ...(options.deliveryOrigins ?? []).map(origin => new URL(origin).origin)])
+	const request = options.fetch ?? globalThis.fetch
+	async function send<T>(path: string, init: RequestInit, signal: AbortSignal): Promise<T> {
+		signal.throwIfAborted()
+		const headers = new Headers(options.headers?.())
+		new Headers(init.headers).forEach((value, key) => headers.set(key, value))
+		if (options.apiTransport) {
+			const requestHeaders: Record<string, string> = {}
+			headers.forEach((value, key) => { requestHeaders[key] = value })
+			const response = await options.apiTransport.axios.request<T>({
+				url: `assets/${path}`, method: init.method, data: init.body,
+				headers: requestHeaders, signal,
+			})
+			signal.throwIfAborted()
+			return response.data
+		}
+		const response = await request(new URL(`assets/${path}`, base), {
+			...init, headers, signal, credentials: options.credentials ?? 'include', cache: 'no-store', redirect: 'error',
+		})
+		signal.throwIfAborted()
+		if (!response.ok) throw new Error(`Asset request failed (${response.status})`)
+		return await response.json() as T
+	}
+	return {
+		async publish(reference: Required<AssetReference>, signal = new AbortController().signal): Promise<AssetPublication> {
+			const result = await send<AssetPublication>(`${encodeURIComponent(reference.asset_id)}/publication`, {
+				method: 'PUT', headers: { 'Content-Type': 'application/json' },
+				body: JSON.stringify({ published: true, version_id: reference.version_id, representations: ['website', 'social'] }),
+			}, signal)
+			if (result.asset_id !== reference.asset_id || result.version_id !== reference.version_id || !result.published) {
+				throw new Error('Mismatched asset publication')
+			}
+			for (const purpose of ['website', 'social'] as const) {
+				const item = result.representations.find(item => item.representation === purpose)
+				if (!item) throw new Error('Incomplete asset publication')
+				const url = new URL(item.url, base)
+				const suffix = `/assets/${encodeURIComponent(reference.asset_id)}/public/${encodeURIComponent(reference.version_id)}/${purpose}`
+				if (!trusted.has(url.origin) || !['http:', 'https:'].includes(url.protocol)
+					|| url.username || url.password || url.search || url.hash || !url.pathname.endsWith(suffix)) {
+					throw new Error('Invalid public asset URL')
+				}
+				item.url = url.href
+			}
+			return result
+		},
+		async upload(file, signal) {
+			const started = await send<UploadResponse>('uploads', {
+				method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ name: file.name }),
+			}, signal)
+			if (!started.upload_id || !started.asset_id || !started.version_id) throw new Error('Invalid upload session')
+			const completed = await send<UploadResponse>(`uploads/${encodeURIComponent(started.upload_id)}`, {
+				method: 'PUT', headers: { 'Content-Type': 'application/octet-stream' }, body: file,
+			}, signal)
+			if (completed.status !== 'ready' || completed.asset_id !== started.asset_id
+				|| completed.version_id !== started.version_id || completed.upload_id !== started.upload_id) {
+				throw new Error('Asset upload is not ready')
+			}
+			return { asset_id: completed.asset_id, version_id: completed.version_id }
+		},
+		async resolve(references, signal) {
+			const result: AssetDelivery[] = []
+			for (let offset = 0; offset < references.length; offset += 50) {
+				const chunk = references.slice(offset, offset + 50)
+				const response = await send<{ items: DeliveryResponse[] }>('resolve', {
+					method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ references: chunk }),
+				}, signal)
+				if (!Array.isArray(response.items) || response.items.length !== chunk.length) throw new Error('Incomplete delivery response')
+				for (const reference of chunk) {
+					const item = response.items.find(candidate => candidate.asset_id === reference.asset_id
+						&& (!reference.version_id || candidate.version_id === reference.version_id)
+						&& candidate.representation === (reference.representation ?? 'original'))
+					if (!item) throw new Error('Mismatched delivery response')
+					const url = new URL(item.url, base)
+					if (!['http:', 'https:'].includes(url.protocol) || url.username || url.password
+						|| !trusted.has(url.origin)) throw new Error('Untrusted asset delivery URL')
+					result.push({ url: url.href, version_id: item.version_id, expires_at: item.expires_at })
+				}
+			}
+			return result
+		},
+	}
+}
+
+/** Public URLs are deliberately separate from expiring private deliveries. */
+export interface AssetPublication {
+	asset_id: string
+	name: string
+	version_id: string
+	published: boolean
+	representations: { representation: AssetPurpose; url: string; media_type: string; size: number }[]
+}
+
+export interface ConfigureAssetClientOptions {
+	transport: ApiTransport
+	/** Existing reactive identity/session + tenant key. Never inferred from auth globals. */
+	sessionKey: MaybeRefOrGetter<string | undefined>
+	deliveryOrigins?: string[]
+}
+
+/** Vue plugin; owns its session watcher and clears on app teardown. */
+export function configureAssetClient(options: ConfigureAssetClientOptions) {
+	const baseURL = options.transport.axios.defaults.baseURL
+	if (!baseURL) throw new Error('Asset transport needs an API baseURL')
+	const transport = createAssetHttpTransport({
+		baseURL: new URL(baseURL, typeof location === 'undefined' ? undefined : location.origin).href,
+		apiTransport: options.transport, deliveryOrigins: options.deliveryOrigins,
+	})
+	const client = createAssetClient(transport)
+	const publications = new Set<AbortController>()
+	const clearSession = () => {
+		client.clearSession()
+		for (const controller of publications) controller.abort()
+		publications.clear()
+	}
+	return {
+		client,
+		async publish(reference: Required<AssetReference>) {
+			const controller = new AbortController()
+			publications.add(controller)
+			try { return await transport.publish(reference, controller.signal) }
+			finally { publications.delete(controller) }
+		},
+		install(app: App) {
+			app.provide(ASSET_CLIENT_KEY, client)
+			const stop = watch(() => toValue(options.sessionKey), clearSession, { flush: 'sync' })
+			app.onUnmount(() => { stop(); clearSession() })
+		},
+	}
+}

package/src/assets.test.ts

@@ -0,0 +1,123 @@
+// @vitest-environment happy-dom
+import { describe, expect, it, vi } from 'vitest'
+import { createAssetClient, ASSET_CLIENT_KEY, useAssetDelivery, type AssetDelivery, type AssetTransport } from './assets'
+import { mount } from '@vue/test-utils'
+import { defineComponent, nextTick } from 'vue'
+
+const delivery = (version_id = 'v1'): AssetDelivery => ({
+	url: 'https://delivery.example/private',
+	expires_at: new Date(Date.now() + 60_000).toISOString(),
+	version_id,
+})
+
+function setup() {
+	const resolve = vi.fn<AssetTransport['resolve']>(async references => references.map(() => delivery()))
+	const upload = vi.fn<AssetTransport['upload']>(async () => ({ asset_id: 'a', version_id: 'v1' }))
+	return { resolve, upload, client: createAssetClient({ resolve, upload }) }
+}
+
+describe('asset client', () => {
+	it('keeps the displayed URL while refreshing, but clears immediately on session change', async () => {
+		vi.useFakeTimers()
+		const { client, resolve } = setup()
+		let finish!: (value: AssetDelivery[]) => void
+		let state!: ReturnType<typeof useAssetDelivery>
+		const component = mount(defineComponent({
+			setup() { state = useAssetDelivery(() => ({ asset_id: 'a' })); return () => null },
+		}), { global: { provide: { [ASSET_CLIENT_KEY as symbol]: client } } })
+		try {
+			await vi.advanceTimersByTimeAsync(0)
+			expect(state.url.value).toBe(delivery().url)
+			resolve.mockImplementationOnce(() => new Promise(done => { finish = done }))
+			await vi.advanceTimersByTimeAsync(48_000)
+			expect(resolve).toHaveBeenCalledTimes(2)
+			expect(state.url.value).toBe(delivery().url)
+			client.clearSession()
+			expect(state.url.value).toBeUndefined()
+			finish([delivery()])
+			await nextTick()
+			expect(state.url.value).toBeUndefined()
+		} finally {
+			component.unmount()
+			vi.useRealTimers()
+		}
+	})
+
+	it('deduplicates in-flight requests without sharing subscriber cancellation', async () => {
+		const { client, resolve } = setup()
+		let finish!: (value: AssetDelivery[]) => void
+		resolve.mockImplementationOnce(() => new Promise(done => { finish = done }))
+		const controller = new AbortController()
+		const first = client.resolve({ asset_id: 'a' }, controller.signal)
+		const rejected = expect(first).rejects.toMatchObject({ name: 'AbortError' })
+		await Promise.resolve()
+		const second = client.resolve({ asset_id: 'a', representation: 'original' })
+		controller.abort()
+		await rejected
+		expect(resolve.mock.calls[0]![1].aborted).toBe(false)
+		finish([delivery()])
+		await expect(second).resolves.toMatchObject({ version_id: 'v1' })
+		expect(resolve).toHaveBeenCalledTimes(1)
+	})
+
+	it('aborts unused requests and starts fresh after a session change', async () => {
+		const { client, resolve } = setup()
+		resolve.mockImplementationOnce(() => new Promise(() => {}))
+		const first = client.resolve({ asset_id: 'a' })
+		const rejected = expect(first).rejects.toMatchObject({ name: 'AbortError' })
+		await Promise.resolve()
+		client.clearSession()
+		await rejected
+		expect(resolve.mock.calls[0]![1].aborted).toBe(true)
+		await expect(client.resolve({ asset_id: 'a' })).resolves.toMatchObject({ version_id: 'v1' })
+		expect(resolve).toHaveBeenCalledTimes(2)
+	})
+
+	it('batches same-turn resolutions and preserves pins', async () => {
+		const { client, resolve } = setup()
+		await Promise.all([client.resolve({ asset_id: 'a', version_id: 'v1' }), client.resolve({ asset_id: 'b' })])
+		expect(resolve).toHaveBeenCalledTimes(1)
+		expect(resolve.mock.calls[0]![0][0]).toEqual({ asset_id: 'a', version_id: 'v1' })
+	})
+
+	it('does not cache grants between calls', async () => {
+		const { client, resolve } = setup()
+		await client.resolve({ asset_id: 'a' })
+		await client.resolve({ asset_id: 'a' })
+		expect(resolve).toHaveBeenCalledTimes(2)
+	})
+
+	it('rejects expired grants and mismatched pinned versions', async () => {
+		const { client, resolve } = setup()
+		await expect(client.resolve({ asset_id: 'a', version_id: 'v2' })).rejects.toThrow('Invalid asset delivery')
+		resolve.mockResolvedValueOnce([{ ...delivery(), expires_at: '2000-01-01T00:00:00Z' }])
+		await expect(client.resolve({ asset_id: 'a' })).rejects.toThrow('Invalid asset delivery')
+	})
+
+	it('cancels queued requests on session change', async () => {
+		const { client, resolve } = setup()
+		const request = client.resolve({ asset_id: 'a' })
+		client.clearSession()
+		await expect(request).rejects.toMatchObject({ name: 'AbortError' })
+		expect(resolve).not.toHaveBeenCalled()
+	})
+
+	it('rejects stale in-flight results even if transport ignores abort', async () => {
+		const { client, resolve } = setup()
+		let finish!: (value: AssetDelivery[]) => void
+		resolve.mockImplementationOnce(() => new Promise(done => { finish = done }))
+		const request = client.resolve({ asset_id: 'a' })
+		await Promise.resolve()
+		client.clearSession()
+		finish([delivery()])
+		await expect(request).rejects.toMatchObject({ name: 'AbortError' })
+	})
+
+	it('does not dispatch already-cancelled requests', async () => {
+		const { client, resolve } = setup()
+		const controller = new AbortController()
+		controller.abort()
+		await expect(client.resolve({ asset_id: 'a' }, controller.signal)).rejects.toMatchObject({ name: 'AbortError' })
+		expect(resolve).not.toHaveBeenCalled()
+	})
+})