@coffer-org/plugin-documents 1.4.2 → 2.0.0

package/dist/personal_document/index.js

@@ -6,7 +6,7 @@ export default defineShelf({
     label: 'documents.personal_document.label',
     icon: 'lucide:id-card',
     views: {
-        table: ['owner', 'type', 'surname', 'expires'],
+        list: { fields: ['owner', 'type', 'surname', 'expires'] },
     },
     fields: [
         field.title({ key: 'name', label: 'core.fields.name' }),

package/dist/schema.js

@@ -6401,7 +6401,7 @@ function relation(raw) {
 		},
 		relation: {
 			library: raw.options.library,
-			type: raw.options.shelf
+			shelf: raw.options.shelf
 		},
 		...multi && { json: true },
 		zod: optionalize(s, required)
@@ -6781,15 +6781,44 @@ function period(raw) {
 		zod: optionalize(s, required)
 	});
 }
+/** Keys a file entry may carry. Everything else is rejected — see fileEntryIssue. */
+var FILE_KEYS = /* @__PURE__ */ new Set([
+	"name",
+	"mime",
+	"size"
+]);
+/** Keys that mean "the author pasted a remote address" — the one mistake worth naming. */
+var FILE_URL_KEYS = [
+	"url",
+	"src",
+	"href",
+	"link"
+];
+/**
+* A file entry points at a file already uploaded to the server: `{ name }`, where
+* name is the bare filename returned by POST /api/upload. Anything else — a remote
+* URL, an extra key, a path — is refused here, so a record can never hold a
+* reference the server cannot serve. `mime`/`size` are accepted (legacy payloads
+* and the web uploader send them) but the server overwrites them from disk.
+* Returns a vmsg code, or null when the entry is well-formed.
+*/
+function fileEntryIssue(it) {
+	if (typeof it !== "object" || it === null || Array.isArray(it)) return "file_structure";
+	const rec = it;
+	if (FILE_URL_KEYS.some((k) => k in rec)) return "file_remote_url";
+	const name = rec["name"];
+	if (typeof name !== "string" || name === "") return "file_structure";
+	if (name.includes("://") || name.startsWith("//")) return "file_remote_url";
+	if (/[\\/]/.test(name) || name.includes("..")) return "file_name";
+	for (const k of Object.keys(rec)) if (!FILE_KEYS.has(k)) return "file_unknown_key";
+	if (rec["mime"] !== void 0 && typeof rec["mime"] !== "string") return "file_structure";
+	if (rec["size"] !== void 0 && typeof rec["size"] !== "number") return "file_structure";
+	return null;
+}
 function makeFile(kind, raw) {
 	const o = normalizeOpts(raw);
 	const required = o.required ?? false;
 	const multiple = o.multiple ?? false;
-	const rowSchema = object({
-		name: string$1().min(1),
-		mime: string$1().optional(),
-		size: number$1().optional()
-	});
 	const s = unknown().superRefine((raw, ctx) => {
 		if (typeof raw === "string") try {
 			JSON.parse(raw);
@@ -6802,12 +6831,15 @@ function makeFile(kind, raw) {
 		}
 		const parsed = jsonValue(raw);
 		const items = Array.isArray(parsed) ? parsed : [parsed];
-		for (const it of items) if (!rowSchema.safeParse(it).success) {
-			ctx.addIssue({
-				code: ZodIssueCode.custom,
-				message: vmsg("file_structure")
-			});
-			return;
+		for (const it of items) {
+			const code = fileEntryIssue(it);
+			if (code) {
+				ctx.addIssue({
+					code: ZodIssueCode.custom,
+					message: vmsg(code)
+				});
+				return;
+			}
 		}
 	});
 	return wrapKey(o, {
@@ -7738,7 +7770,7 @@ function defineShelf(m) {
 	const keys = fieldEntries(m.fields).map(([k]) => k);
 	const dup = keys.find((k, i) => keys.indexOf(k) !== i);
 	if (dup) throw new Error(`[shelf] ${m.library}/${m.shelf}: duplicate key '${dup}'`);
-	if (m.standalone !== false && !m.views?.table?.length) console.warn(`[shelf] ${m.library}/${m.shelf}: standalone shelf without an explicit views.table`);
+	if (m.standalone !== false && !m.views?.list?.fields?.length) console.warn(`[shelf] ${m.library}/${m.shelf}: standalone shelf without an explicit views.list`);
 	return m;
 }
 //#endregion
@@ -7748,12 +7780,12 @@ var personal_document_default = defineShelf({
 	library: "documents",
 	label: "documents.personal_document.label",
 	icon: "lucide:id-card",
-	views: { table: [
+	views: { list: { fields: [
 		"owner",
 		"type",
 		"surname",
 		"expires"
-	] },
+	] } },
 	fields: [
 		field.title({
 			key: "name",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coffer-org/plugin-documents",
-  "version": "1.4.2",
+  "version": "2.0.0",
   "type": "module",
   "engines": {
     "node": ">=24"
@@ -25,9 +25,9 @@
     "postpack": "node ../../scripts/swap-exports.mjs src"
   },
   "dependencies": {
-    "@coffer-org/plugin-people": "^1.4.0",
-    "@coffer-org/sdk": "^1.5.0",
-    "@coffer-org/server": "^1.8.0"
+    "@coffer-org/plugin-people": "^2.0.0",
+    "@coffer-org/sdk": "^2.0.0",
+    "@coffer-org/server": "^2.0.1"
   },
   "coffer": {
     "schema": "dist/schema.js"