@coffer-org/plugin-documents 1.4.1 → 2.0.0

package/dist/person_identity/index.js

@@ -12,6 +12,7 @@ nationality — ISO alpha-2. variants — given/family name per language (field.
         field.keyed({
             key: 'variants',
             label: 'documents.person_identity.fields.variants',
+            icon: 'lucide:languages',
             by: field.select({ key: 'lang', label: 'documents.person_identity.variants.lang', options: 'languages' }),
             fields: [
                 field.string({ key: 'name', label: 'documents.person_identity.variants.name' }),

package/dist/personal_document/index.js

@@ -6,7 +6,7 @@ export default defineShelf({
     label: 'documents.personal_document.label',
     icon: 'lucide:id-card',
     views: {
-        table: ['owner', 'type', 'surname', 'expires'],
+        list: { fields: ['owner', 'type', 'surname', 'expires'] },
     },
     fields: [
         field.title({ key: 'name', label: 'core.fields.name' }),

package/dist/schema.js

@@ -5887,7 +5887,7 @@ function group(o) {
 		required: o.required,
 		unique: r.unique,
 		label: o.label,
-		icon: v.icon,
+		icon: o.icon,
 		display: v.display ?? "wrap",
 		kind: v.kind,
 		fixed: r.fixed,
@@ -5898,11 +5898,9 @@ function group(o) {
 function row(o) {
 	return group({
 		label: o.label,
+		icon: o.icon,
 		fields: o.fields,
-		view: {
-			...o.view,
-			display: "scroll"
-		}
+		view: { display: "scroll" }
 	});
 }
 /** Tabular collection (array of rows → <table>, aligned by columns). Sugar. */
@@ -5910,14 +5908,12 @@ function table(o) {
 	return group({
 		key: o.key,
 		label: o.label,
+		icon: o.icon,
 		fields: o.fields,
 		multiple: true,
 		required: o.required,
 		rules: o.rules,
-		view: {
-			...o.view,
-			display: "table"
-		}
+		view: { display: "table" }
 	});
 }
 /**
@@ -5933,11 +5929,9 @@ function sheet(o) {
 	});
 	return group({
 		label: o.label,
+		icon: o.icon,
 		fields: flat,
-		view: {
-			...o.view,
-			display: "sheet"
-		}
+		view: { display: "sheet" }
 	});
 }
 /**
@@ -5969,8 +5963,8 @@ function keyed(o) {
 	return {
 		...(o.container ?? group)({
 			label: o.label,
-			fields: [o.by, ...o.fields],
-			view: o.view
+			icon: o.icon,
+			fields: [o.by, ...o.fields]
 		}),
 		key: o.key,
 		multiple: true,
@@ -6407,7 +6401,7 @@ function relation(raw) {
 		},
 		relation: {
 			library: raw.options.library,
-			type: raw.options.shelf
+			shelf: raw.options.shelf
 		},
 		...multi && { json: true },
 		zod: optionalize(s, required)
@@ -6787,15 +6781,44 @@ function period(raw) {
 		zod: optionalize(s, required)
 	});
 }
+/** Keys a file entry may carry. Everything else is rejected — see fileEntryIssue. */
+var FILE_KEYS = /* @__PURE__ */ new Set([
+	"name",
+	"mime",
+	"size"
+]);
+/** Keys that mean "the author pasted a remote address" — the one mistake worth naming. */
+var FILE_URL_KEYS = [
+	"url",
+	"src",
+	"href",
+	"link"
+];
+/**
+* A file entry points at a file already uploaded to the server: `{ name }`, where
+* name is the bare filename returned by POST /api/upload. Anything else — a remote
+* URL, an extra key, a path — is refused here, so a record can never hold a
+* reference the server cannot serve. `mime`/`size` are accepted (legacy payloads
+* and the web uploader send them) but the server overwrites them from disk.
+* Returns a vmsg code, or null when the entry is well-formed.
+*/
+function fileEntryIssue(it) {
+	if (typeof it !== "object" || it === null || Array.isArray(it)) return "file_structure";
+	const rec = it;
+	if (FILE_URL_KEYS.some((k) => k in rec)) return "file_remote_url";
+	const name = rec["name"];
+	if (typeof name !== "string" || name === "") return "file_structure";
+	if (name.includes("://") || name.startsWith("//")) return "file_remote_url";
+	if (/[\\/]/.test(name) || name.includes("..")) return "file_name";
+	for (const k of Object.keys(rec)) if (!FILE_KEYS.has(k)) return "file_unknown_key";
+	if (rec["mime"] !== void 0 && typeof rec["mime"] !== "string") return "file_structure";
+	if (rec["size"] !== void 0 && typeof rec["size"] !== "number") return "file_structure";
+	return null;
+}
 function makeFile(kind, raw) {
 	const o = normalizeOpts(raw);
 	const required = o.required ?? false;
 	const multiple = o.multiple ?? false;
-	const rowSchema = object({
-		name: string$1().min(1),
-		mime: string$1().optional(),
-		size: number$1().optional()
-	});
 	const s = unknown().superRefine((raw, ctx) => {
 		if (typeof raw === "string") try {
 			JSON.parse(raw);
@@ -6808,12 +6831,15 @@ function makeFile(kind, raw) {
 		}
 		const parsed = jsonValue(raw);
 		const items = Array.isArray(parsed) ? parsed : [parsed];
-		for (const it of items) if (!rowSchema.safeParse(it).success) {
-			ctx.addIssue({
-				code: ZodIssueCode.custom,
-				message: vmsg("file_structure")
-			});
-			return;
+		for (const it of items) {
+			const code = fileEntryIssue(it);
+			if (code) {
+				ctx.addIssue({
+					code: ZodIssueCode.custom,
+					message: vmsg(code)
+				});
+				return;
+			}
 		}
 	});
 	return wrapKey(o, {
@@ -7744,7 +7770,7 @@ function defineShelf(m) {
 	const keys = fieldEntries(m.fields).map(([k]) => k);
 	const dup = keys.find((k, i) => keys.indexOf(k) !== i);
 	if (dup) throw new Error(`[shelf] ${m.library}/${m.shelf}: duplicate key '${dup}'`);
-	if (m.standalone !== false && !m.views?.table?.length) console.warn(`[shelf] ${m.library}/${m.shelf}: standalone shelf without an explicit views.table`);
+	if (m.standalone !== false && !m.views?.list?.fields?.length) console.warn(`[shelf] ${m.library}/${m.shelf}: standalone shelf without an explicit views.list`);
 	return m;
 }
 //#endregion
@@ -7754,12 +7780,12 @@ var personal_document_default = defineShelf({
 	library: "documents",
 	label: "documents.personal_document.label",
 	icon: "lucide:id-card",
-	views: { table: [
+	views: { list: { fields: [
 		"owner",
 		"type",
 		"surname",
 		"expires"
-	] },
+	] } },
 	fields: [
 		field.title({
 			key: "name",
@@ -7936,6 +7962,7 @@ nationality — ISO alpha-2. variants — given/family name per language (field.
 	}), field.keyed({
 		key: "variants",
 		label: "documents.person_identity.fields.variants",
+		icon: "lucide:languages",
 		by: field.select({
 			key: "lang",
 			label: "documents.person_identity.variants.lang",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coffer-org/plugin-documents",
-  "version": "1.4.1",
+  "version": "2.0.0",
   "type": "module",
   "engines": {
     "node": ">=24"
@@ -25,9 +25,9 @@
     "postpack": "node ../../scripts/swap-exports.mjs src"
   },
   "dependencies": {
-    "@coffer-org/plugin-people": "^1.4.0",
-    "@coffer-org/sdk": "^1.5.0",
-    "@coffer-org/server": "^1.8.0"
+    "@coffer-org/plugin-people": "^2.0.0",
+    "@coffer-org/sdk": "^2.0.0",
+    "@coffer-org/server": "^2.0.1"
   },
   "coffer": {
     "schema": "dist/schema.js"