@columnus/shared 0.1.55 → 0.1.56

package/dist/apiProfile.d.ts

@@ -172,6 +172,11 @@ export declare const apiTableAccessSchema: z.ZodObject<{
     }>>;
     /** Scan ceiling for Read/guest list plans; callers may only lower. Not applied to Sync/Resync. */
     maxScanLimit: z.ZodOptional<z.ZodNumber>;
+    /**
+     * Media source scope for the fixed `columnus_assets` source. Omit for all
+     * live Media; an empty list intentionally grants no Media assets.
+     */
+    assetProfiles: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
 }, "strip", z.ZodTypeAny, {
     table: string;
     read: boolean;
@@ -219,6 +224,7 @@ export declare const apiTableAccessSchema: z.ZodObject<{
         } | undefined;
     } | undefined;
     maxScanLimit?: number | undefined;
+    assetProfiles?: string[] | undefined;
 }, {
     table: string;
     read: boolean;
@@ -266,6 +272,7 @@ export declare const apiTableAccessSchema: z.ZodObject<{
         } | undefined;
     } | undefined;
     maxScanLimit?: number | undefined;
+    assetProfiles?: string[] | undefined;
 }>;
 export type ApiTableAccess = z.infer<typeof apiTableAccessSchema>;
 export declare const apiProfileSnapshotSchema: z.ZodObject<{
@@ -446,6 +453,11 @@ export declare const apiProfileSnapshotSchema: z.ZodObject<{
         }>>;
         /** Scan ceiling for Read/guest list plans; callers may only lower. Not applied to Sync/Resync. */
         maxScanLimit: z.ZodOptional<z.ZodNumber>;
+        /**
+         * Media source scope for the fixed `columnus_assets` source. Omit for all
+         * live Media; an empty list intentionally grants no Media assets.
+         */
+        assetProfiles: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     }, "strip", z.ZodTypeAny, {
         table: string;
         read: boolean;
@@ -493,6 +505,7 @@ export declare const apiProfileSnapshotSchema: z.ZodObject<{
             } | undefined;
         } | undefined;
         maxScanLimit?: number | undefined;
+        assetProfiles?: string[] | undefined;
     }, {
         table: string;
         read: boolean;
@@ -540,6 +553,7 @@ export declare const apiProfileSnapshotSchema: z.ZodObject<{
             } | undefined;
         } | undefined;
         maxScanLimit?: number | undefined;
+        assetProfiles?: string[] | undefined;
     }>, "many">>;
     autoAcceptProposals: z.ZodOptional<z.ZodBoolean>;
     apiVersion: z.ZodNumber;
@@ -598,6 +612,7 @@ export declare const apiProfileSnapshotSchema: z.ZodObject<{
             } | undefined;
         } | undefined;
         maxScanLimit?: number | undefined;
+        assetProfiles?: string[] | undefined;
     }[] | undefined;
     autoAcceptProposals?: boolean | undefined;
 }, {
@@ -654,6 +669,7 @@ export declare const apiProfileSnapshotSchema: z.ZodObject<{
             } | undefined;
         } | undefined;
         maxScanLimit?: number | undefined;
+        assetProfiles?: string[] | undefined;
     }[] | undefined;
     autoAcceptProposals?: boolean | undefined;
 }>;
@@ -836,6 +852,11 @@ export declare const apiProfilesSchema: z.ZodArray<z.ZodObject<{
         }>>;
         /** Scan ceiling for Read/guest list plans; callers may only lower. Not applied to Sync/Resync. */
         maxScanLimit: z.ZodOptional<z.ZodNumber>;
+        /**
+         * Media source scope for the fixed `columnus_assets` source. Omit for all
+         * live Media; an empty list intentionally grants no Media assets.
+         */
+        assetProfiles: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     }, "strip", z.ZodTypeAny, {
         table: string;
         read: boolean;
@@ -883,6 +904,7 @@ export declare const apiProfilesSchema: z.ZodArray<z.ZodObject<{
             } | undefined;
         } | undefined;
         maxScanLimit?: number | undefined;
+        assetProfiles?: string[] | undefined;
     }, {
         table: string;
         read: boolean;
@@ -930,6 +952,7 @@ export declare const apiProfilesSchema: z.ZodArray<z.ZodObject<{
             } | undefined;
         } | undefined;
         maxScanLimit?: number | undefined;
+        assetProfiles?: string[] | undefined;
     }>, "many">>;
     autoAcceptProposals: z.ZodOptional<z.ZodBoolean>;
     apiVersion: z.ZodNumber;
@@ -988,6 +1011,7 @@ export declare const apiProfilesSchema: z.ZodArray<z.ZodObject<{
             } | undefined;
         } | undefined;
         maxScanLimit?: number | undefined;
+        assetProfiles?: string[] | undefined;
     }[] | undefined;
     autoAcceptProposals?: boolean | undefined;
 }, {
@@ -1044,6 +1068,7 @@ export declare const apiProfilesSchema: z.ZodArray<z.ZodObject<{
             } | undefined;
         } | undefined;
         maxScanLimit?: number | undefined;
+        assetProfiles?: string[] | undefined;
     }[] | undefined;
     autoAcceptProposals?: boolean | undefined;
 }>, "many">;
@@ -1051,6 +1076,8 @@ export declare const apiProfilesSchema: z.ZodArray<z.ZodObject<{
 export declare function editorAccessEnabled(access: ApiTableAccess): boolean;
 /** The profile's access entry for `table`, if any. */
 export declare function findTableAccess(tableAccess: readonly ApiTableAccess[] | undefined, table: string): ApiTableAccess | undefined;
+/** Normalize legacy `tables` profiles into the current per-source access shape. */
+export declare function profileTableAccesses(profile: Pick<ApiProfileSnapshot, "tables" | "tableAccess">): readonly ApiTableAccess[];
 /**
  * Fail if any patch table lacks current `editorAccess: true` on the profile.
  * Single source for the editor write gate: the component enforces it on write,
@@ -1061,6 +1088,18 @@ export declare function assertPatchesHaveEditorAccess(profile: Pick<ApiProfileSn
 }[]): void;
 /** Tables opted into push sync. Sync is deliberately opt-in, including legacy profiles. */
 export declare function syncEnabledTables(profile: Pick<ApiProfileSnapshot, "tableAccess">): string[];
+/** Minimal root Media projection needed to decide API/Sync membership. */
+export type AssetScopeSnapshot = {
+    isDeleted?: unknown;
+    wipedAt?: unknown;
+    profileSlugs?: unknown;
+};
+/**
+ * Media is readable only while live. An omitted profile allowlist means all
+ * live Media; an explicit empty list is useful for disabling the source while
+ * retaining a draft access row.
+ */
+export declare function assetMatchesProfileScope(asset: AssetScopeSnapshot | null | undefined, assetProfiles: readonly string[] | undefined): boolean;
 export type ResolvedApiToken = {
     tokenId: string;
     profileId: string;

package/dist/apiProfile.js

@@ -4167,7 +4167,12 @@ var apiTableAccessSchema = external_exports.object({
    */
   rowQuery: clampQuerySchema.optional(),
   /** Scan ceiling for Read/guest list plans; callers may only lower. Not applied to Sync/Resync. */
-  maxScanLimit: external_exports.number().int().positive().optional()
+  maxScanLimit: external_exports.number().int().positive().optional(),
+  /**
+   * Media source scope for the fixed `columnus_assets` source. Omit for all
+   * live Media; an empty list intentionally grants no Media assets.
+   */
+  assetProfiles: external_exports.array(external_exports.string().min(1)).max(100).optional()
 });
 var apiProfileSnapshotSchema = external_exports.object({
   id: external_exports.string(),
@@ -4186,6 +4191,9 @@ function editorAccessEnabled(access) {
 function findTableAccess(tableAccess, table) {
   return tableAccess?.find((entry) => entry.table === table);
 }
+function profileTableAccesses(profile) {
+  return profile.tableAccess ?? profile.tables.map((table) => ({ table, read: true }));
+}
 function assertPatchesHaveEditorAccess(profile, patches) {
   const byTable = new Map((profile.tableAccess ?? []).map((access) => [access.table, access]));
   for (const patch of patches) {
@@ -4204,7 +4212,16 @@ function syncEnabledTables(profile) {
   }
   return [...tables];
 }
+function assetMatchesProfileScope(asset, assetProfiles) {
+  if (!asset || asset.isDeleted === true || asset.wipedAt !== void 0) return false;
+  if (assetProfiles === void 0) return true;
+  if (assetProfiles.length === 0) return false;
+  const profileSet = new Set(assetProfiles);
+  return Array.isArray(asset.profileSlugs) && asset.profileSlugs.some(
+    (profile) => typeof profile === "string" && profileSet.has(profile)
+  );
+}
 
-export { apiProfileSnapshotSchema, apiProfilesSchema, apiTableAccessSchema, assertPatchesHaveEditorAccess, editorAccessEnabled, findTableAccess, syncEnabledTables };
+export { apiProfileSnapshotSchema, apiProfilesSchema, apiTableAccessSchema, assertPatchesHaveEditorAccess, assetMatchesProfileScope, editorAccessEnabled, findTableAccess, profileTableAccesses, syncEnabledTables };
 //# sourceMappingURL=apiProfile.js.map
 //# sourceMappingURL=apiProfile.js.map