@bagelink/vue 1.17.2 → 1.17.6

package/dist/types/BagelForm.d.ts

@@ -100,6 +100,8 @@ export interface UploadInputValueObject {
 export interface UploadInputProps extends BagelInputShellProps {
     /** Opt-in stable reference output; defaults to legacy path-key behavior. */
     assetMode?: boolean;
+    /** Asset delivery policy. Defaults to protected; website/media fields use public. */
+    assetVisibility?: import('../assets').AssetVisibility;
     id?: string;
     name?: string;
     label?: string;

package/dist/types/BagelForm.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"BagelForm.d.ts","sourceRoot":"","sources":["../../src/types/BagelForm.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAC/D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAA;AACzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAA;AACxE,OAAO,KAAK,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AAC/E,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,KAAK,CAAA;AAIhC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAA;AAErF,UAAU,MAAM;IAAG,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,GAAG,CAAA;CAAE;AAI9C,MAAM,MAAM,KAAK,CAChB,CAAC,EACD,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAC1C,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;AAG9C,KAAK,mBAAmB,CAAC,CAAC,IAAI;KAC5B,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,GAChD,GAAG,CAAC,GAAG,MAAM,IAAI,MAAM,EAAE,GACzB,KAAK;CACR,CAAC,MAAM,CAAC,CAAC,CAAA;AAGV,MAAM,MAAM,IAAI,CAAC,CAAC,EAAE,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAC9D,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,KAAK,CAAC,GAAG,CAAC,GAC3C,kBAAkB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAChC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,mBAAmB,CAAC,CAAC,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,MAAM,cAAc,MAAM,EAAE,CAAA;AAErF,uFAAuF;AACvF,MAAM,MAAM,QAAQ,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IACtC,OAAO,SAAS,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,OAAO,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AAElD,sEAAsE;AACtE,MAAM,MAAM,aAAa,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAC3C,CAAC,SAAS,MAAM,GACf,CAAC,SAAS,MAAM,CAAC,GAChB,CAAC,CAAC,CAAC,CAAC,GACJ,GAAG,GACJ,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AAIlB,MAAM,MAAM,cAAc,GACrB,MAAM,GACP,MAAM,GACN,OAAO,GACP,SAAS,GACT;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;CAAE,CAAA;AAE1B,MAAM,MAAM,WAAW,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,CAC/C,KAAK,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EAC1B,GAAG,CAAC,EAAE,CAAC,KACH,cAAc,CAAA;AAEnB,MAAM,WAAW,UAAU,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC;IAC/C,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,GAAG,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;CACjD;AAED,MAAM,MAAM,YAAY,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IACxC,MAAM,GACP,CACC;IACD,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,GAAG,MAAM,CAAA;CACtB,GACC,MAAM,GACN,MAAM,GACN,OAAO,GACP;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;CAAE,CACxB,EAAE,GACD,CAAC,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,GAC/F,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;AAElF,MAAM,MAAM,OAAO,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IACnC,MAAM,GACP,OAAO,GACP,CAAC,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,OAAO,CAAC,CAAA;AAEzD,MAAM,MAAM,YAAY,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,CAChD,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EACzB,OAAO,CAAC,EAAE,CAAC,KACP,MAAM,GAAG,SAAS,CAAA;AAEvB,MAAM,MAAM,WAAW,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,CAC/C,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EACzB,OAAO,CAAC,EAAE,CAAC,KACP,GAAG,CAAA;AAER,MAAM,MAAM,QAAQ,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,CAC5C,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EACzB,OAAO,CAAC,EAAE,CAAC,KACP,OAAO,CAAA;AAIZ,MAAM,MAAM,OAAO,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE;IACnD,GAAG,CAAC,EAAE,CAAC,CAAA;IACP,KAAK,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;CAC3B,KAAK,KAAK,CAAA;AAEX,MAAM,WAAW,YAAY,CAC5B,CAAC,EACD,EAAE,SAAS,YAAY,GAAG,mBAAmB;IAE7C,GAAG,EAAE,GAAG,CAAA;IACR,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,CAAA;IACzB,KAAK,CAAC,EAAE,GAAG,CAAA;IACX,GAAG,CAAC,EAAE,GAAG,CAAA;IACT,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC3B,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,IAAI,CAAA;IAC1C,SAAS,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,GAAG,CAAA;IAC3C,QAAQ,CAAC,EAAE,YAAY,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;CAChC;AAGD,KAAK,mBAAmB,CAAC,CAAC,EAAE,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAAI;KAC3E,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,cAAc,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;CAC5C,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;AAEd,MAAM,MAAM,WAAW,CACtB,CAAC,EACD,CAAC,SAAS,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,EACrB,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAC1C,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,GAAG,mBAAmB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AAEpG,MAAM,WAAW,cAAc,CAC9B,CAAC,EACD,CAAC,SAAS,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,EACrB,EAAE,SAAS,YAAY,GAAG,mBAAmB;IAE7C,KAAK,CAAC,EAAE,MAAM,GAAG,GAAG,CAAA;IACpB,IAAI,CAAC,EAAE,CAAC,CAAA;IACR,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,OAAO,CAAC,EAAE,cAAc,GAAG,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC5C,OAAO,CAAC,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC1B,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC9B,UAAU,CAAC,EAAE,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;IAC9C,OAAO,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;KAAE,CAAA;IAC9D,cAAc,CAAC,EAAE,GAAG,CAAA;IACpB,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACrB,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACtB,WAAW,CAAC,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC/B,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC3B,UAAU,CAAC,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;CAC/B;AAED,MAAM,MAAM,KAAK,CAChB,CAAC,EACD,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAC1C,mBAAmB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AAE9B,MAAM,MAAM,WAAW,CACtB,CAAC,EACD,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAC1C,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AAEtC,MAAM,MAAM,cAAc,CACzB,CAAC,EACD,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAC1C,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAA;AAI/D,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,EAAE,YAAY,CAAC;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,EAAE,MAAM,CAAC,CAAA;IAC3D,WAAW,CAAC,EAAE,MAAM,GAAG,CAAA;CACvB;AAED,qFAAqF;AACrF,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;CACZ;AAED,MAAM,WAAW,gBAAiB,SAAQ,oBAAoB;IAC7D,4EAA4E;IAC5E,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,sBAAsB,GAAG,OAAO,WAAW,EAAE,cAAc,GAAG,CAAC,MAAM,GAAG,sBAAsB,GAAG,OAAO,WAAW,EAAE,cAAc,CAAC,EAAE,CAAA;IACvK,uFAAuF;IACvF,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IACxC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IACxB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,+DAA+D;IAC/D,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,KAAK,CAAC,EAAE,UAAU,GAAG,OAAO,CAAA;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,aAAa,CAAA;IAC1C,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,0FAA0F;IAC1F,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IAC1B,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;CAChC"}
+{"version":3,"file":"BagelForm.d.ts","sourceRoot":"","sources":["../../src/types/BagelForm.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAC/D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAA;AACzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAA;AACxE,OAAO,KAAK,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AAC/E,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,KAAK,CAAA;AAIhC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAA;AAErF,UAAU,MAAM;IAAG,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,GAAG,CAAA;CAAE;AAI9C,MAAM,MAAM,KAAK,CAChB,CAAC,EACD,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAC1C,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;AAG9C,KAAK,mBAAmB,CAAC,CAAC,IAAI;KAC5B,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,GAChD,GAAG,CAAC,GAAG,MAAM,IAAI,MAAM,EAAE,GACzB,KAAK;CACR,CAAC,MAAM,CAAC,CAAC,CAAA;AAGV,MAAM,MAAM,IAAI,CAAC,CAAC,EAAE,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAC9D,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,KAAK,CAAC,GAAG,CAAC,GAC3C,kBAAkB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAChC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,mBAAmB,CAAC,CAAC,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,MAAM,cAAc,MAAM,EAAE,CAAA;AAErF,uFAAuF;AACvF,MAAM,MAAM,QAAQ,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IACtC,OAAO,SAAS,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,OAAO,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AAElD,sEAAsE;AACtE,MAAM,MAAM,aAAa,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAC3C,CAAC,SAAS,MAAM,GACf,CAAC,SAAS,MAAM,CAAC,GAChB,CAAC,CAAC,CAAC,CAAC,GACJ,GAAG,GACJ,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AAIlB,MAAM,MAAM,cAAc,GACrB,MAAM,GACP,MAAM,GACN,OAAO,GACP,SAAS,GACT;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;CAAE,CAAA;AAE1B,MAAM,MAAM,WAAW,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,CAC/C,KAAK,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EAC1B,GAAG,CAAC,EAAE,CAAC,KACH,cAAc,CAAA;AAEnB,MAAM,WAAW,UAAU,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC;IAC/C,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,GAAG,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;CACjD;AAED,MAAM,MAAM,YAAY,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IACxC,MAAM,GACP,CACC;IACD,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,GAAG,MAAM,CAAA;CACtB,GACC,MAAM,GACN,MAAM,GACN,OAAO,GACP;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;CAAE,CACxB,EAAE,GACD,CAAC,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,GAC/F,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;AAElF,MAAM,MAAM,OAAO,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IACnC,MAAM,GACP,OAAO,GACP,CAAC,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,OAAO,CAAC,CAAA;AAEzD,MAAM,MAAM,YAAY,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,CAChD,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EACzB,OAAO,CAAC,EAAE,CAAC,KACP,MAAM,GAAG,SAAS,CAAA;AAEvB,MAAM,MAAM,WAAW,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,CAC/C,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EACzB,OAAO,CAAC,EAAE,CAAC,KACP,GAAG,CAAA;AAER,MAAM,MAAM,QAAQ,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,CAC5C,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EACzB,OAAO,CAAC,EAAE,CAAC,KACP,OAAO,CAAA;AAIZ,MAAM,MAAM,OAAO,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE;IACnD,GAAG,CAAC,EAAE,CAAC,CAAA;IACP,KAAK,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;CAC3B,KAAK,KAAK,CAAA;AAEX,MAAM,WAAW,YAAY,CAC5B,CAAC,EACD,EAAE,SAAS,YAAY,GAAG,mBAAmB;IAE7C,GAAG,EAAE,GAAG,CAAA;IACR,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,CAAA;IACzB,KAAK,CAAC,EAAE,GAAG,CAAA;IACX,GAAG,CAAC,EAAE,GAAG,CAAA;IACT,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC3B,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,IAAI,CAAA;IAC1C,SAAS,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,GAAG,CAAA;IAC3C,QAAQ,CAAC,EAAE,YAAY,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;CAChC;AAGD,KAAK,mBAAmB,CAAC,CAAC,EAAE,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAAI;KAC3E,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,cAAc,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;CAC5C,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;AAEd,MAAM,MAAM,WAAW,CACtB,CAAC,EACD,CAAC,SAAS,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,EACrB,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAC1C,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,GAAG,mBAAmB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AAEpG,MAAM,WAAW,cAAc,CAC9B,CAAC,EACD,CAAC,SAAS,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,EACrB,EAAE,SAAS,YAAY,GAAG,mBAAmB;IAE7C,KAAK,CAAC,EAAE,MAAM,GAAG,GAAG,CAAA;IACpB,IAAI,CAAC,EAAE,CAAC,CAAA;IACR,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,OAAO,CAAC,EAAE,cAAc,GAAG,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC5C,OAAO,CAAC,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC1B,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC9B,UAAU,CAAC,EAAE,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;IAC9C,OAAO,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;KAAE,CAAA;IAC9D,cAAc,CAAC,EAAE,GAAG,CAAA;IACpB,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACrB,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACtB,WAAW,CAAC,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC/B,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC3B,UAAU,CAAC,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;CAC/B;AAED,MAAM,MAAM,KAAK,CAChB,CAAC,EACD,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAC1C,mBAAmB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AAE9B,MAAM,MAAM,WAAW,CACtB,CAAC,EACD,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAC1C,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AAEtC,MAAM,MAAM,cAAc,CACzB,CAAC,EACD,EAAE,SAAS,YAAY,GAAG,mBAAmB,IAC1C,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAA;AAI/D,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,EAAE,YAAY,CAAC;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,EAAE,MAAM,CAAC,CAAA;IAC3D,WAAW,CAAC,EAAE,MAAM,GAAG,CAAA;CACvB;AAED,qFAAqF;AACrF,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;CACZ;AAED,MAAM,WAAW,gBAAiB,SAAQ,oBAAoB;IAC7D,4EAA4E;IAC5E,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,qFAAqF;IACrF,eAAe,CAAC,EAAE,OAAO,WAAW,EAAE,eAAe,CAAA;IACrD,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,sBAAsB,GAAG,OAAO,WAAW,EAAE,cAAc,GAAG,CAAC,MAAM,GAAG,sBAAsB,GAAG,OAAO,WAAW,EAAE,cAAc,CAAC,EAAE,CAAA;IACvK,uFAAuF;IACvF,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IACxC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IACxB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,+DAA+D;IAC/D,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,KAAK,CAAC,EAAE,UAAU,GAAG,OAAO,CAAA;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,aAAa,CAAA;IAC1C,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,0FAA0F;IAC1F,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IAC1B,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;CAChC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@bagelink/vue",
   "type": "module",
-  "version": "1.17.2",
+  "version": "1.17.6",
   "description": "Bagel core sdk packages",
   "author": {
     "name": "Bagel Studio",

package/src/assetTransport.test.ts

@@ -4,56 +4,16 @@ import { createAssetClient } from './assets'
 import type { ApiTransport } from '@bagelink/sdk'
 import { createApp, ref } from 'vue'
 
-const session = { asset_id: 'a', version_id: 'v', upload_id: 'u', status: 'ready' }
+const session = { asset_id: 'a', upload_id: 'u', status: 'ready' }
 const json = (value: unknown, status = 200) => new Response(JSON.stringify(value), { status })
 const signal = () => new AbortController().signal
 
 describe('asset REST transport', () => {
-	it('reuses authenticated transport and synchronously invalidates on tenant changes', async () => {
-		const request = vi.fn().mockImplementation(() => new Promise(() => {}))
-		const transport = { axios: { defaults: { baseURL: 'https://api.example/api' }, request } } as unknown as ApiTransport
-		const sessionKey = ref('account:tenant-a')
-		const assets = configureAssetClient({ transport, sessionKey })
-		createApp({}).use(assets)
-		const result = assets.client.resolve({ asset_id: 'a', representation: 'website' })
-		const rejected = expect(result).rejects.toMatchObject({ name: 'AbortError' })
-		await Promise.resolve()
-		expect(request.mock.calls[0]![0].url).toBe('assets/resolve')
-		expect(JSON.parse(request.mock.calls[0]![0].data).references[0].representation).toBe('website')
-		sessionKey.value = 'account:tenant-b'
-		await rejected
-		expect(request.mock.calls[0]![0].signal.aborted).toBe(true)
-	})
-
-	it('publishes only explicit image purposes with stable version-pinned URLs', async () => {
-		const fetcher = vi.fn<AssetFetch>().mockResolvedValue(json({
-			asset_id: 'a', version_id: 'v', published: true, name: 'photo',
-			representations: ['website', 'social'].map(representation => ({
-				representation, url: `/assets/a/public/v/${representation}`, media_type: 'image/jpeg', size: 42,
-			})),
-		}))
-		const transport = createAssetHttpTransport({ baseURL: 'https://api.example', fetch: fetcher })
-		const result = await transport.publish({ asset_id: 'a', version_id: 'v' })
-		expect(JSON.parse(String(fetcher.mock.calls[0]![1]?.body))).toEqual({
-			published: true, version_id: 'v', representations: ['website', 'social'],
-		})
-		expect(result.representations[1]?.url).toBe('https://api.example/assets/a/public/v/social')
-	})
-
-	it('rejects private grant URLs returned by publication', async () => {
-		const fetcher = vi.fn<AssetFetch>().mockResolvedValue(json({
-			asset_id: 'a', version_id: 'v', published: true,
-			representations: [{ representation: 'website', url: '/assets/a/content?token=secret' }],
-		}))
-		await expect(createAssetHttpTransport({ baseURL: 'https://api.example', fetch: fetcher })
-			.publish({ asset_id: 'a', version_id: 'v' })).rejects.toThrow('Invalid public')
-	})
-
-	it('starts a session and sends unchanged raw bytes, returning pinned references', async () => {
+	it('starts a session and sends unchanged raw bytes, returning the public id', async () => {
 		const fetcher = vi.fn<AssetFetch>().mockResolvedValueOnce(json(session)).mockResolvedValueOnce(json(session))
 		const transport = createAssetHttpTransport({ baseURL: 'https://api.example/api', fetch: fetcher })
 		const file = new File(['original'], 'test.heic')
-		expect(await transport.upload(file, signal())).toEqual({ asset_id: 'a', version_id: 'v' })
+		expect(await transport.upload(file, signal())).toEqual({ asset_id: 'a' })
 		expect(String(fetcher.mock.calls[0]![0])).toBe('https://api.example/api/assets/uploads')
 		expect(fetcher.mock.calls[0]![1]?.body).toBe('{"name":"test.heic"}')
 		expect(fetcher.mock.calls[1]![1]?.body).toBe(file)
@@ -65,30 +25,7 @@ describe('asset REST transport', () => {
 			.mockResolvedValueOnce(json({ ...session, status: 'rejected' })).mockResolvedValueOnce(json({}, 403))
 		const transport = createAssetHttpTransport({ baseURL: 'https://api.example', fetch: fetcher })
 		await expect(transport.upload(new File(['x'], 'x'), signal())).rejects.toThrow('not ready')
-		await expect(transport.resolve([{ asset_id: 'a' }], signal())).rejects.toThrow('(403)')
-	})
-
-	it('chunks 101 references and resolves relative URLs against the API origin', async () => {
-		const fetcher = vi.fn<AssetFetch>(async (_url, init) => {
-			const { references } = JSON.parse(String(init?.body)) as { references: { asset_id: string }[] }
-			return json({ items: references.map(reference => ({
-				...reference, version_id: 'v', representation: 'original',
-				url: '/assets/content?token=secret', expires_at: new Date(Date.now() + 60000).toISOString(),
-			})) })
-		})
-		const transport = createAssetHttpTransport({ baseURL: 'https://api.example', fetch: fetcher })
-		const items = await transport.resolve(Array.from({ length: 101 }, (_, i) => ({ asset_id: String(i) })), signal())
-		expect(fetcher.mock.calls.map(call => JSON.parse(String(call[1]?.body)).references.length)).toEqual([50, 50, 1])
-		expect(items).toHaveLength(101)
-		expect(items[0]?.url).toBe('https://api.example/assets/content?token=secret')
-	})
-
-	it('rejects untrusted delivery origins', async () => {
-		const fetcher = vi.fn<AssetFetch>().mockResolvedValue(json({ items: [{
-			asset_id: 'a', version_id: 'v', representation: 'original', url: '//evil.example/file',
-		}] }))
-		await expect(createAssetHttpTransport({ baseURL: 'https://api.example', fetch: fetcher })
-			.resolve([{ asset_id: 'a' }], signal())).rejects.toThrow('Untrusted')
+		await expect(transport.upload(new File(['x'], 'x'), signal())).rejects.toThrow('(403)')
 	})
 
 	it('does not PUT if session creation fails', async () => {
@@ -98,28 +35,41 @@ describe('asset REST transport', () => {
 		expect(fetcher).toHaveBeenCalledTimes(1)
 	})
 
-	it('does not complete an upload after session cancellation', async () => {
+	it('configureAssetClient provides a client that builds public URLs', () => {
+		const transport = { axios: { defaults: { baseURL: 'https://api.example/api' }, request: vi.fn() } } as unknown as ApiTransport
+		const assets = configureAssetClient({ transport, deliveryBaseUrl: 'https://cdn.bgl.dev/auctentic' })
+		expect(assets.client.assetUrl({ asset_id: 'a' })).toBe('https://cdn.bgl.dev/auctentic/a')
+		expect(assets.client.assetUrl({ asset_id: 'a' }, 'website')).toBe('https://cdn.bgl.dev/auctentic/a?fmt=webp')
+		expect(assets.client.assetUrl({ asset_id: 'a' }, 'social')).toBe('https://cdn.bgl.dev/auctentic/a?w=1200&h=630&fmt=jpeg&fit=cover')
+	})
+
+	it('clears in-flight uploads on session change', async () => {
+		let requestSignal: AbortSignal | null | undefined
+		const fetcher = vi.fn<AssetFetch>((config: any) => {
+			requestSignal = config?.signal
+			return new Promise((_resolve, reject) => requestSignal?.addEventListener('abort', () => reject(requestSignal?.reason))
+			)
+		})
+		const transport = { axios: { defaults: { baseURL: 'https://api.example' }, request: fetcher } } as unknown as ApiTransport
+		const sessionKey = ref('a')
+		const assets = configureAssetClient({ transport, deliveryBaseUrl: 'https://cdn.bgl.dev/auctentic', sessionKey })
+		createApp({}).use(assets)
+		const promise = assets.client.upload(new File(['x'], 'x'))
+		sessionKey.value = 'b'
+		await expect(promise).rejects.toMatchObject({ name: 'AbortError' })
+		expect(requestSignal?.aborted).toBe(true)
+	})
+})
+
+describe('asset client upload cancellation', () => {
+	it('does not complete after clearSession', async () => {
 		let finish!: (response: Response) => void
 		const fetcher = vi.fn<AssetFetch>().mockImplementationOnce(() => new Promise(resolve => { finish = resolve }))
-		const client = createAssetClient(createAssetHttpTransport({ baseURL: 'https://api.example', fetch: fetcher }))
+		const client = createAssetClient(createAssetHttpTransport({ baseURL: 'https://api.example', fetch: fetcher }), 'https://cdn.bgl.dev/auctentic')
 		const promise = client.upload(new File(['x'], 'x'))
 		client.clearSession()
 		finish(json(session))
 		await expect(promise).rejects.toMatchObject({ name: 'AbortError' })
 		expect(fetcher).toHaveBeenCalledTimes(1)
 	})
-
-	it('session cleanup aborts the HTTP request', async () => {
-		let requestSignal: AbortSignal | null | undefined
-		const fetcher = vi.fn<AssetFetch>((_url, init) => {
-			requestSignal = init?.signal
-			return new Promise((_resolve, reject) => requestSignal?.addEventListener('abort', () => reject(requestSignal?.reason)))
-		})
-		const client = createAssetClient(createAssetHttpTransport({ baseURL: 'https://api.example', fetch: fetcher }))
-		const promise = client.resolve({ asset_id: 'a' })
-		await Promise.resolve()
-		client.clearSession()
-		await expect(promise).rejects.toMatchObject({ name: 'AbortError' })
-		expect(requestSignal?.aborted).toBe(true)
-	})
 })

package/src/assetTransport.ts

@@ -1,4 +1,4 @@
-import { createAssetClient, ASSET_CLIENT_KEY, type AssetDelivery, type AssetTransport, type AssetReference, type AssetPurpose } from './assets'
+import { createAssetClient, ASSET_CLIENT_KEY, type AssetTransport } from './assets'
 import type { ApiTransport } from '@bagelink/sdk'
 import { watch, toValue, type App, type MaybeRefOrGetter } from 'vue'
 
@@ -10,30 +10,20 @@ export interface AssetHttpOptions {
 	headers?: () => HeadersInit
 	fetch?: AssetFetch
 	credentials?: RequestCredentials
-	/** Explicitly trusted delivery origins besides the API origin. */
-	deliveryOrigins?: string[]
 	/** Reuse the app's authenticated axios instance, including tenant interceptors. */
 	apiTransport?: ApiTransport
 }
 
 interface UploadResponse {
 	asset_id: string
-	version_id: string
 	upload_id: string
 	status: string
 }
-interface DeliveryResponse extends AssetDelivery {
-	asset_id: string
-	representation: string
-}
 
-/** Concrete REST adapter, separate from generated SDK namespaces. */
-export function createAssetHttpTransport(options: AssetHttpOptions): AssetTransport & {
-	publish(reference: Required<AssetReference>, signal?: AbortSignal): Promise<AssetPublication>
-} {
+/** Concrete REST adapter. Public-by-default: upload only; display is a client-built URL. */
+export function createAssetHttpTransport(options: AssetHttpOptions): AssetTransport {
 	const base = new URL(options.baseURL.endsWith('/') ? options.baseURL : `${options.baseURL}/`)
 	if (!['http:', 'https:'].includes(base.protocol) || base.username || base.password) throw new Error('Invalid API base')
-	const trusted = new Set([base.origin, ...(options.deliveryOrigins ?? []).map(origin => new URL(origin).origin)])
 	const request = options.fetch ?? globalThis.fetch
 	async function send<T>(path: string, init: RequestInit, signal: AbortSignal): Promise<T> {
 		signal.throwIfAborted()
@@ -57,108 +47,52 @@ export function createAssetHttpTransport(options: AssetHttpOptions): AssetTransp
 		return await response.json() as T
 	}
 	return {
-		async publish(reference: Required<AssetReference>, signal = new AbortController().signal): Promise<AssetPublication> {
-			const result = await send<AssetPublication>(`${encodeURIComponent(reference.asset_id)}/publication`, {
-				method: 'PUT', headers: { 'Content-Type': 'application/json' },
-				body: JSON.stringify({ published: true, version_id: reference.version_id, representations: ['website', 'social'] }),
-			}, signal)
-			if (result.asset_id !== reference.asset_id || result.version_id !== reference.version_id || !result.published) {
-				throw new Error('Mismatched asset publication')
-			}
-			for (const purpose of ['website', 'social'] as const) {
-				const item = result.representations.find(item => item.representation === purpose)
-				if (!item) throw new Error('Incomplete asset publication')
-				const url = new URL(item.url, base)
-				const suffix = `/assets/${encodeURIComponent(reference.asset_id)}/public/${encodeURIComponent(reference.version_id)}/${purpose}`
-				if (!trusted.has(url.origin) || !['http:', 'https:'].includes(url.protocol)
-					|| url.username || url.password || url.search || url.hash || !url.pathname.endsWith(suffix)) {
-					throw new Error('Invalid public asset URL')
-				}
-				item.url = url.href
-			}
-			return result
-		},
-		async upload(file, signal) {
+		async upload(file, signal, uploadOptions) {
 			const started = await send<UploadResponse>('uploads', {
-				method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ name: file.name }),
+				method: 'POST',
+				headers: { 'Content-Type': 'application/json' },
+				body: JSON.stringify({
+					name: file.name,
+					visibility: uploadOptions?.visibility ?? 'protected',
+				}),
 			}, signal)
-			if (!started.upload_id || !started.asset_id || !started.version_id) throw new Error('Invalid upload session')
+			if (!started.upload_id || !started.asset_id) throw new Error('Invalid upload session')
 			const completed = await send<UploadResponse>(`uploads/${encodeURIComponent(started.upload_id)}`, {
 				method: 'PUT', headers: { 'Content-Type': 'application/octet-stream' }, body: file,
 			}, signal)
-			if (completed.status !== 'ready' || completed.asset_id !== started.asset_id
-				|| completed.version_id !== started.version_id || completed.upload_id !== started.upload_id) {
+			if (completed.status !== 'ready' || completed.asset_id !== started.asset_id) {
 				throw new Error('Asset upload is not ready')
 			}
-			return { asset_id: completed.asset_id, version_id: completed.version_id }
-		},
-		async resolve(references, signal) {
-			const result: AssetDelivery[] = []
-			for (let offset = 0; offset < references.length; offset += 50) {
-				const chunk = references.slice(offset, offset + 50)
-				const response = await send<{ items: DeliveryResponse[] }>('resolve', {
-					method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ references: chunk }),
-				}, signal)
-				if (!Array.isArray(response.items) || response.items.length !== chunk.length) throw new Error('Incomplete delivery response')
-				for (const reference of chunk) {
-					const item = response.items.find(candidate => candidate.asset_id === reference.asset_id
-						&& (!reference.version_id || candidate.version_id === reference.version_id)
-						&& candidate.representation === (reference.representation ?? 'original'))
-					if (!item) throw new Error('Mismatched delivery response')
-					const url = new URL(item.url, base)
-					if (!['http:', 'https:'].includes(url.protocol) || url.username || url.password
-						|| !trusted.has(url.origin)) throw new Error('Untrusted asset delivery URL')
-					result.push({ url: url.href, version_id: item.version_id, expires_at: item.expires_at })
-				}
-			}
-			return result
+			return { asset_id: completed.asset_id }
 		},
 	}
 }
 
-/** Public URLs are deliberately separate from expiring private deliveries. */
-export interface AssetPublication {
-	asset_id: string
-	name: string
-	version_id: string
-	published: boolean
-	representations: { representation: AssetPurpose; url: string; media_type: string; size: number }[]
-}
-
 export interface ConfigureAssetClientOptions {
 	transport: ApiTransport
-	/** Existing reactive identity/session + tenant key. Never inferred from auth globals. */
-	sessionKey: MaybeRefOrGetter<string | undefined>
-	deliveryOrigins?: string[]
+	/** Public CDN base, e.g. `https://cdn.bgl.dev/auctentic`. Used to build asset URLs. */
+	deliveryBaseUrl: string
+	/** Identity + tenant key; must change on logout and account/tenant switch. */
+	sessionKey?: MaybeRefOrGetter<string | undefined>
 }
 
-/** Vue plugin; owns its session watcher and clears on app teardown. */
+/** Vue plugin; provides the asset client and clears uploads on session change. */
 export function configureAssetClient(options: ConfigureAssetClientOptions) {
 	const baseURL = options.transport.axios.defaults.baseURL
 	if (!baseURL) throw new Error('Asset transport needs an API baseURL')
 	const transport = createAssetHttpTransport({
 		baseURL: new URL(baseURL, typeof location === 'undefined' ? undefined : location.origin).href,
-		apiTransport: options.transport, deliveryOrigins: options.deliveryOrigins,
+		apiTransport: options.transport,
 	})
-	const client = createAssetClient(transport)
-	const publications = new Set<AbortController>()
-	const clearSession = () => {
-		client.clearSession()
-		for (const controller of publications) controller.abort()
-		publications.clear()
-	}
+	const client = createAssetClient(transport, options.deliveryBaseUrl)
 	return {
 		client,
-		async publish(reference: Required<AssetReference>) {
-			const controller = new AbortController()
-			publications.add(controller)
-			try { return await transport.publish(reference, controller.signal) }
-			finally { publications.delete(controller) }
-		},
 		install(app: App) {
 			app.provide(ASSET_CLIENT_KEY, client)
-			const stop = watch(() => toValue(options.sessionKey), clearSession, { flush: 'sync' })
-			app.onUnmount(() => { stop(); clearSession() })
+			const stop = options.sessionKey
+				? watch(() => toValue(options.sessionKey), () => client.clearSession(), { flush: 'sync' })
+				: undefined
+			app.onUnmount(() => { stop?.(); client.clearSession() })
 		},
 	}
 }

package/src/assets.test.ts

@@ -1,123 +1,82 @@
 // @vitest-environment happy-dom
 import { describe, expect, it, vi } from 'vitest'
-import { createAssetClient, ASSET_CLIENT_KEY, useAssetDelivery, type AssetDelivery, type AssetTransport } from './assets'
+import { createAssetClient, ASSET_CLIENT_KEY, useAssetDelivery, useAssetUpload, type AssetTransport } from './assets'
 import { mount } from '@vue/test-utils'
 import { defineComponent, nextTick } from 'vue'
 
-const delivery = (version_id = 'v1'): AssetDelivery => ({
-	url: 'https://delivery.example/private',
-	expires_at: new Date(Date.now() + 60_000).toISOString(),
-	version_id,
-})
+const BASE = 'https://cdn.bgl.dev/auctentic'
 
-function setup() {
-	const resolve = vi.fn<AssetTransport['resolve']>(async references => references.map(() => delivery()))
-	const upload = vi.fn<AssetTransport['upload']>(async () => ({ asset_id: 'a', version_id: 'v1' }))
-	return { resolve, upload, client: createAssetClient({ resolve, upload }) }
+function makeClient(upload?: AssetTransport['upload']) {
+	const transport = { upload: upload ?? (async () => ({ asset_id: 'a' })) }
+	return createAssetClient(transport, BASE)
 }
 
 describe('asset client', () => {
-	it('keeps the displayed URL while refreshing, but clears immediately on session change', async () => {
-		vi.useFakeTimers()
-		const { client, resolve } = setup()
-		let finish!: (value: AssetDelivery[]) => void
-		let state!: ReturnType<typeof useAssetDelivery>
-		const component = mount(defineComponent({
-			setup() { state = useAssetDelivery(() => ({ asset_id: 'a' })); return () => null },
-		}), { global: { provide: { [ASSET_CLIENT_KEY as symbol]: client } } })
-		try {
-			await vi.advanceTimersByTimeAsync(0)
-			expect(state.url.value).toBe(delivery().url)
-			resolve.mockImplementationOnce(() => new Promise(done => { finish = done }))
-			await vi.advanceTimersByTimeAsync(48_000)
-			expect(resolve).toHaveBeenCalledTimes(2)
-			expect(state.url.value).toBe(delivery().url)
-			client.clearSession()
-			expect(state.url.value).toBeUndefined()
-			finish([delivery()])
-			await nextTick()
-			expect(state.url.value).toBeUndefined()
-		} finally {
-			component.unmount()
-			vi.useRealTimers()
-		}
+	it('builds deterministic public URLs per purpose', () => {
+		const client = makeClient()
+		expect(client.assetUrl({ asset_id: 'a' })).toBe(`${BASE}/a`)
+		expect(client.assetUrl({ asset_id: 'a' }, 'original')).toBe(`${BASE}/a`)
+		expect(client.assetUrl({ asset_id: 'a' }, 'website')).toBe(`${BASE}/a?fmt=webp`)
+		expect(client.assetUrl({ asset_id: 'a' }, 'social')).toBe(`${BASE}/a?w=1200&h=630&fmt=jpeg&fit=cover`)
 	})
 
-	it('deduplicates in-flight requests without sharing subscriber cancellation', async () => {
-		const { client, resolve } = setup()
-		let finish!: (value: AssetDelivery[]) => void
-		resolve.mockImplementationOnce(() => new Promise(done => { finish = done }))
-		const controller = new AbortController()
-		const first = client.resolve({ asset_id: 'a' }, controller.signal)
-		const rejected = expect(first).rejects.toMatchObject({ name: 'AbortError' })
-		await Promise.resolve()
-		const second = client.resolve({ asset_id: 'a', representation: 'original' })
-		controller.abort()
-		await rejected
-		expect(resolve.mock.calls[0]![1].aborted).toBe(false)
-		finish([delivery()])
-		await expect(second).resolves.toMatchObject({ version_id: 'v1' })
-		expect(resolve).toHaveBeenCalledTimes(1)
+	it('upload returns only the public id (version is ignored)', async () => {
+		const upload = vi.fn<AssetTransport['upload']>(async () => ({ asset_id: 'a', version_id: 'v1' }))
+		const client = makeClient(upload)
+		await expect(client.upload(new File(['x'], 'x'))).resolves.toEqual({ asset_id: 'a' })
 	})
 
-	it('aborts unused requests and starts fresh after a session change', async () => {
-		const { client, resolve } = setup()
-		resolve.mockImplementationOnce(() => new Promise(() => {}))
-		const first = client.resolve({ asset_id: 'a' })
-		const rejected = expect(first).rejects.toMatchObject({ name: 'AbortError' })
-		await Promise.resolve()
+	it('clearSession aborts in-flight uploads and bumps revision', async () => {
+		const upload = vi.fn<AssetTransport['upload']>((_f, signal) => new Promise((_resolve, reject) => {
+			signal.addEventListener('abort', () => reject(new DOMException('x', 'AbortError')))
+		}))
+		const client = makeClient(upload)
+		const before = client.revision
+		const promise = client.upload(new File(['x'], 'x'))
 		client.clearSession()
-		await rejected
-		expect(resolve.mock.calls[0]![1].aborted).toBe(true)
-		await expect(client.resolve({ asset_id: 'a' })).resolves.toMatchObject({ version_id: 'v1' })
-		expect(resolve).toHaveBeenCalledTimes(2)
-	})
-
-	it('batches same-turn resolutions and preserves pins', async () => {
-		const { client, resolve } = setup()
-		await Promise.all([client.resolve({ asset_id: 'a', version_id: 'v1' }), client.resolve({ asset_id: 'b' })])
-		expect(resolve).toHaveBeenCalledTimes(1)
-		expect(resolve.mock.calls[0]![0][0]).toEqual({ asset_id: 'a', version_id: 'v1' })
-	})
-
-	it('does not cache grants between calls', async () => {
-		const { client, resolve } = setup()
-		await client.resolve({ asset_id: 'a' })
-		await client.resolve({ asset_id: 'a' })
-		expect(resolve).toHaveBeenCalledTimes(2)
+		await expect(promise).rejects.toMatchObject({ name: 'AbortError' })
+		expect(client.revision).toBe(before + 1)
 	})
+})
 
-	it('rejects expired grants and mismatched pinned versions', async () => {
-		const { client, resolve } = setup()
-		await expect(client.resolve({ asset_id: 'a', version_id: 'v2' })).rejects.toThrow('Invalid asset delivery')
-		resolve.mockResolvedValueOnce([{ ...delivery(), expires_at: '2000-01-01T00:00:00Z' }])
-		await expect(client.resolve({ asset_id: 'a' })).rejects.toThrow('Invalid asset delivery')
+describe('useAssetDelivery (public URL resolution)', () => {
+	it('resolves an asset reference to its public URL without a network call', async () => {
+		const client = makeClient()
+		let state!: ReturnType<typeof useAssetDelivery>
+		mount(defineComponent({
+			setup() { state = useAssetDelivery(() => ({ asset_id: 'a', representation: 'preview' })); return () => null },
+		}), { global: { provide: { [ASSET_CLIENT_KEY as symbol]: client } } })
+		await nextTick()
+		expect(state.url.value).toBe(`${BASE}/a?fmt=webp`)
+		expect(state.error.value).toBe(false)
 	})
 
-	it('cancels queued requests on session change', async () => {
-		const { client, resolve } = setup()
-		const request = client.resolve({ asset_id: 'a' })
-		client.clearSession()
-		await expect(request).rejects.toMatchObject({ name: 'AbortError' })
-		expect(resolve).not.toHaveBeenCalled()
+	it('sets error when no client is provided', async () => {
+		let state!: ReturnType<typeof useAssetDelivery>
+		mount(defineComponent({
+			setup() { state = useAssetDelivery(() => ({ asset_id: 'a' })); return () => null },
+		}))
+		await nextTick()
+		expect(state.url.value).toBeUndefined()
+		expect(state.error.value).toBe(true)
 	})
+})
 
-	it('rejects stale in-flight results even if transport ignores abort', async () => {
-		const { client, resolve } = setup()
-		let finish!: (value: AssetDelivery[]) => void
-		resolve.mockImplementationOnce(() => new Promise(done => { finish = done }))
-		const request = client.resolve({ asset_id: 'a' })
-		await Promise.resolve()
-		client.clearSession()
-		finish([delivery()])
-		await expect(request).rejects.toMatchObject({ name: 'AbortError' })
+describe('useAssetUpload', () => {
+	it('rejects when no client is injected', async () => {
+		let upload!: ReturnType<typeof useAssetUpload>['upload']
+		mount(defineComponent({
+			setup() { upload = useAssetUpload().upload; return () => null },
+		}))
+		await expect(upload(new File(['x'], 'x'))).rejects.toThrow('Asset client is not configured')
 	})
 
-	it('does not dispatch already-cancelled requests', async () => {
-		const { client, resolve } = setup()
-		const controller = new AbortController()
-		controller.abort()
-		await expect(client.resolve({ asset_id: 'a' }, controller.signal)).rejects.toMatchObject({ name: 'AbortError' })
-		expect(resolve).not.toHaveBeenCalled()
+	it('uploads and returns the public reference', async () => {
+		const client = makeClient()
+		let upload!: ReturnType<typeof useAssetUpload>['upload']
+		mount(defineComponent({
+			setup() { upload = useAssetUpload().upload; return () => null },
+		}), { global: { provide: { [ASSET_CLIENT_KEY as symbol]: client } } })
+		await expect(upload(new File(['x'], 'x'))).resolves.toEqual({ asset_id: 'a' })
 	})
 })