@endora-commerce/mod-assets-library 0.0.0-stage → 0.100.0

package/dist/manifest.d.ts

@@ -0,0 +1,185 @@
+/** Module-lifecycle manifest (feature 018). */
+export declare const manifest: {
+    id: string;
+    name: string;
+    version: string;
+    dependencies: string[];
+    description?: string | undefined;
+    acknowledgedDependencies?: {
+        moduleId: string;
+        port: string;
+        reason: string;
+    }[] | undefined;
+    nonBindingDependencies?: {
+        moduleId: string;
+        name: string;
+        kind: "contributes-to" | "degrades-without" | "refuses-without";
+        reason: string;
+        whenAbsent?: string | undefined;
+    }[] | undefined;
+    activation?: {
+        settingCode: string;
+        default: boolean;
+    } | {
+        nonDeactivatable: true;
+        reason: string;
+    } | undefined;
+    settings?: {
+        moduleCode: string;
+        groups: {
+            code: string;
+            name: string;
+            salesChannelCodes?: string[] | undefined;
+            isSystemProtected?: boolean | undefined;
+        }[];
+        settings: {
+            code: string;
+            name: string;
+            valueType: "string" | "number" | "boolean" | "json" | "string_list" | "secret" | "credential_ref";
+            defaultValue: unknown;
+            description?: string | undefined;
+            groupCode?: string | undefined;
+            previousDefaultValues?: unknown[] | undefined;
+            salesChannelCodes?: string[] | undefined;
+            enumOptions?: string[] | undefined;
+            configurationType?: string | undefined;
+            hidden?: boolean | undefined;
+        }[];
+    } | undefined;
+    i18n?: {
+        bundlesDir: string;
+    } | undefined;
+    docs?: false | {
+        dir: string;
+    } | undefined;
+    demo?: false | {
+        summary: string;
+        seed: (context: import("@endora-commerce/contracts").ModuleDemoContext<never>) => Promise<import("@endora-commerce/contracts").DemoSeedResult>;
+        reset: (context: import("@endora-commerce/contracts").ModuleDemoContext<never>) => Promise<import("@endora-commerce/contracts").DemoResetResult>;
+        after?: readonly string[] | undefined;
+        package?: string | undefined;
+    } | undefined;
+    actions?: {
+        id: string;
+        labelKey: string;
+        icon: "Plus" | "Sparkles" | "Settings" | "Search" | "Boxes" | "Layers" | "Menu" | "PlusCircle" | "PlusSquare" | "FilePlus" | "FolderPlus" | "Upload" | "FileUp" | "CloudUpload" | "Download" | "FileDown" | "FileText" | "BookOpen" | "Rss" | "Package" | "Tag" | "ShoppingCart" | "Receipt" | "CreditCard" | "Users" | "UserPlus" | "Inbox" | "ListChecks" | "ClipboardList" | "Image" | "Video" | "LayoutDashboard" | "PanelLeft" | "KeyRound" | "ShieldCheck" | "Edit" | "Archive" | "Box" | "Truck" | "CircleDollarSign" | "Activity" | "LineChart" | "Smartphone" | "Webhook" | "Scale" | "PlugZap" | "PercentDiamond" | "Newspaper" | "Languages" | "Eraser" | "Warehouse" | "TrendingDown" | "Bell" | "PackageOpen" | "Building2" | "Store" | "ClipboardCheck";
+        targetRoute: string;
+        keywords: string[];
+        weight: number;
+        descriptionKey?: string | undefined;
+        requiredPermission?: string | undefined;
+    }[] | undefined;
+    permissions?: {
+        code: string;
+        label: string;
+        module?: string | undefined;
+        description?: string | undefined;
+        requires?: string[] | undefined;
+    }[] | undefined;
+    transactionalEmails?: {
+        code: string;
+        name: string;
+        variables: {
+            key: string;
+            label: string;
+            sampleValue?: string | undefined;
+            description?: string | undefined;
+        }[];
+        description?: string | undefined;
+        group?: string | undefined;
+    }[] | undefined;
+    capabilities?: string[] | undefined;
+    exclusiveCapabilities?: {
+        key: string;
+        errorCode: string;
+    }[] | undefined;
+    errorCodes?: {
+        code: string;
+        tokens?: string[] | undefined;
+    }[] | undefined;
+    blocks?: {
+        name: string;
+        labelKey: string;
+        category: string;
+        contexts: ("invoice" | "email" | "cms" | "newsletter")[];
+        fields: Record<string, {
+            type: "number" | "object" | "array" | "text" | "textarea" | "select" | "radio" | "external" | "uuid" | "richtext";
+            label?: string | undefined;
+            required?: boolean | undefined;
+            options?: {
+                label: string;
+                value: string | number;
+            }[] | undefined;
+            refKind?: string | undefined;
+        }>;
+        descriptionKey?: string | undefined;
+        defaultProps?: Record<string, unknown> | undefined;
+        responsiveFields?: string[] | undefined;
+        previewIcon?: string | undefined;
+        weight?: number | undefined;
+    }[] | undefined;
+    blockCategories?: {
+        key: string;
+        titleKey: string;
+        contexts: ("invoice" | "email" | "cms" | "newsletter")[];
+        weight?: number | undefined;
+        visible?: boolean | undefined;
+    }[] | undefined;
+    env?: {
+        name: string;
+        describes: {
+            en: string;
+            pl: string;
+        };
+        requirement: {
+            kind: "required";
+        } | {
+            kind: "requiredWhen";
+            input: string;
+            equals: string;
+        } | {
+            kind: "optional";
+            without: {
+                en: string;
+                pl: string;
+            };
+        };
+        secret: boolean;
+        generable: boolean;
+        owner: {
+            kind: "platform";
+        } | {
+            kind: "application";
+            application: "admin" | "backend" | "storefront";
+        } | {
+            kind: "module";
+            moduleId: string;
+        };
+        consumers: ("admin" | "backend" | "storefront")[];
+        addressOf: "admin" | "backend" | "storefront" | null;
+    }[] | undefined;
+};
+/** Legacy export retained for backward compatibility. */
+export declare const assetsLibraryManifest: {
+    moduleCode: string;
+    groups: {
+        code: string;
+        name: string;
+        salesChannelCodes?: string[] | undefined;
+        isSystemProtected?: boolean | undefined;
+    }[];
+    settings: {
+        code: string;
+        name: string;
+        valueType: "string" | "number" | "boolean" | "json" | "string_list" | "secret" | "credential_ref";
+        defaultValue: unknown;
+        description?: string | undefined;
+        groupCode?: string | undefined;
+        previousDefaultValues?: unknown[] | undefined;
+        salesChannelCodes?: string[] | undefined;
+        enumOptions?: string[] | undefined;
+        configurationType?: string | undefined;
+        hidden?: boolean | undefined;
+    }[];
+};
+//# sourceMappingURL=manifest.d.ts.map

package/dist/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AA2GA,+CAA+C;AAC/C,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkInB,CAAC;AAEH,yDAAyD;AACzD,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;CAAW,CAAC"}

package/dist/manifest.js

@@ -0,0 +1,229 @@
+import { defineModuleManifest, defineModuleSettingsManifest, } from '@endora-commerce/contracts';
+/**
+ * Built-in manifest for the Assets Library — feature 013 / research.md R13.
+ * The Settings reconciler picks this up at boot and creates one DB row per
+ * setting under the `storage` group. The active adapter and per-adapter
+ * configuration are read by `AdapterRegistry` on demand.
+ *
+ * Limitation (v1): the Settings schema currently lacks a `redactedRead` flag,
+ * so credentials (`assets.s3.secretAccessKey`, `assets.gcs.serviceAccountJson`)
+ * are stored plaintext. FR-022 asked for masking parity with existing
+ * sensitive settings — there is no existing mechanism to inherit. A follow-up
+ * change to spec 004's manifest schema will add `redactedRead`; until then,
+ * operators must restrict admin Settings access to trusted users.
+ */
+const settings = defineModuleSettingsManifest({
+    moduleCode: 'assets_library',
+    groups: [
+        {
+            code: 'storage',
+            name: 'Storage',
+            // Empty salesChannelCodes ⇒ applies to every channel; assets are platform-global.
+        },
+    ],
+    settings: [
+        // — adapter selection
+        {
+            code: 'assets.storage.adapter',
+            name: 'Active storage adapter',
+            groupCode: 'storage',
+            valueType: 'string',
+            defaultValue: 'local',
+            description: 'One of {local, s3, gcs}. Switching affects new uploads only.',
+        },
+        // — Local FS
+        {
+            code: 'assets.local.base_dir',
+            name: 'Local FS — base directory',
+            groupCode: 'storage',
+            valueType: 'string',
+            defaultValue: 'var/assets',
+        },
+        // — S3
+        { code: 'assets.s3.bucket', name: 'S3 — bucket', groupCode: 'storage', valueType: 'string', defaultValue: '' },
+        { code: 'assets.s3.region', name: 'S3 — region', groupCode: 'storage', valueType: 'string', defaultValue: '' },
+        { code: 'assets.s3.access_key_id', name: 'S3 — access key id', groupCode: 'storage', valueType: 'string', defaultValue: '' },
+        { code: 'assets.s3.secret_access_key', name: 'S3 — secret access key (sensitive)', groupCode: 'storage', valueType: 'string', defaultValue: '' },
+        { code: 'assets.s3.endpoint', name: 'S3 — custom endpoint (optional)', groupCode: 'storage', valueType: 'string', defaultValue: '' },
+        { code: 'assets.s3.prefix', name: 'S3 — key prefix (optional)', groupCode: 'storage', valueType: 'string', defaultValue: '' },
+        { code: 'assets.s3.public_base_url', name: 'S3 — public CDN base URL (optional)', groupCode: 'storage', valueType: 'string', defaultValue: '' },
+        // — GCS
+        { code: 'assets.gcs.bucket', name: 'GCS — bucket', groupCode: 'storage', valueType: 'string', defaultValue: '' },
+        { code: 'assets.gcs.service_account_json', name: 'GCS — service-account JSON (sensitive)', groupCode: 'storage', valueType: 'string', defaultValue: '' },
+        { code: 'assets.gcs.prefix', name: 'GCS — object prefix (optional)', groupCode: 'storage', valueType: 'string', defaultValue: '' },
+        { code: 'assets.gcs.public_base_url', name: 'GCS — public CDN base URL (optional)', groupCode: 'storage', valueType: 'string', defaultValue: '' },
+        // — upload constraints
+        {
+            code: 'assets.allowed_file_types',
+            name: 'Allowed file types (extensions/MIME; * = any)',
+            groupCode: 'storage',
+            valueType: 'string_list',
+            defaultValue: ['*'],
+        },
+        {
+            code: 'assets.max_file_size_mb',
+            name: 'Max file size (MB; 0 = no cap)',
+            groupCode: 'storage',
+            valueType: 'number',
+            defaultValue: 0,
+        },
+        // — visibility / lifecycle
+        {
+            code: 'assets.private_url_ttl_sec',
+            name: 'Private signed-URL TTL (seconds)',
+            groupCode: 'storage',
+            valueType: 'number',
+            defaultValue: 300,
+        },
+        {
+            code: 'assets.soft_delete_retention_days',
+            name: 'Soft-delete retention before hard-delete (days)',
+            groupCode: 'storage',
+            valueType: 'number',
+            defaultValue: 30,
+        },
+        {
+            code: 'assets.local.public_url_base',
+            name: 'Local FS — public URL base (no trailing slash)',
+            groupCode: 'storage',
+            valueType: 'string',
+            defaultValue: '',
+            description: 'Public-facing URL prefix for /assets/file/:assetId — a CDN or the public hostname a ' +
+                'reverse proxy serves. Leave blank to build every URL on this deployment\'s public API ' +
+                'origin (PUBLIC_API_BASE_URL).',
+        },
+    ],
+});
+/** Module-lifecycle manifest (feature 018). */
+export const manifest = defineModuleManifest({
+    id: 'assets_library',
+    name: 'Assets Library',
+    description: 'Storage adapter registry (local / S3 / GCS), asset upload, and reference tracking.',
+    version: '1.0.0',
+    /**
+     * What this module needs from the environment (`specs/117-instance-bring-up/`
+     * FR-002). Only what it **owns**: its reads of platform-owned names are
+     * satisfied by `packages/platform/src/env/index.ts`.
+     *
+     * Why each of these is not a Setting is its entry in
+     * `backend/scripts/ledgers/module-environment-inputs/assets_library.ts`.
+     */
+    env: [
+        {
+            name: 'ASSETS_LIBRARY_HMAC_KEY',
+            describes: {
+                en: 'The signing key that makes an asset download link valid, and unforgeable by anyone who has not got it.',
+                pl: 'Klucz podpisujący, dzięki któremu link do pobrania zasobu jest ważny i nie do podrobienia bez jego znajomości.',
+            },
+            requirement: { kind: 'required' },
+            secret: true,
+            generable: true,
+            owner: { kind: 'module', moduleId: 'assets_library' },
+            consumers: ['backend'],
+            addressOf: null,
+        },
+    ],
+    // `auth` owns the `requireAdmin` port the admin routes are gated by; the
+    // edge became real with the conversion (feature 072, T092), which also made
+    // the gate non-optional.
+    dependencies: ['auth'],
+    settings,
+    // Feature 074 (Constitution XVII), test C3 — platform primitive. This module
+    // had no activation declaration at all, which resolved as "always activated"
+    // and read as an omission. Media storage carries no independent business
+    // decision: product images, CMS media and e-mail assets all resolve here, and
+    // "we do not want files" is not something a client chooses — it is something
+    // a deployment does by mistake.
+    /**
+     * Nothing to demonstrate of its own (feature 113, T224 — contract §1.2).
+     *
+     * The demo shop does hold ~500 assets, and not one of them is this module's
+     * demo data: every one is minted inside a loop over `catalog`'s products and
+     * its id handed straight to `product_assets`, `gallery_items`,
+     * `gallery_item_labels` or `product_attachments`. An asset with no product to
+     * belong to would demonstrate nothing, and an asset that has one is two
+     * modules' rows in one statement — a composition step (§5.1), and one whose
+     * filename and generated image are derived from the product it hangs off.
+     *
+     * `false` rather than absent, because the two are different states: this is a
+     * decision that the module owes nothing, not a module nobody has looked at.
+     */
+    demo: false,
+    activation: {
+        nonDeactivatable: true,
+        reason: 'Media storage. Product images, CMS media and e-mail assets all resolve here, and "we ' +
+            'do not want files" is not a business decision.',
+    },
+    /**
+     * The fifteen error codes this module owns — feature 090 Phase 3
+     * (`specs/090-module-owned-error-codes/contracts/error-code-declaration.md`
+     * §1.1). This is where each sentence is looked up from: `errors.<CODE>` in
+     * this module's own `i18n/{en,pl}.json`, which holds all fifteen in both
+     * languages and no sixteenth.
+     *
+     * The list is answer-preserving, not a judgement (§6.2 and §6.5): it is
+     * exactly what the prefix chain in `@endora-commerce/mod-i18n` routes here
+     * today, copied from the frozen capture at
+     * `backend/test/fixtures/error-code-routing/chain-answers.ts` rather than
+     * re-derived. Re-routing a code to a better owner is
+     * `specs/082-error-code-ownership/rulings.md` §9's remaining work and is
+     * deliberately not done here.
+     *
+     * **One code a reader will look for here and not find.**
+     * `ASSET_KIND_NOT_SUPPORTED` carries this module's own `ASSET_` prefix and is
+     * `catalog`'s: the chain's `CATALOG_MISC_ERROR_CODES` set names it thirty
+     * lines before the `ASSET_` rule is reached, so the prefix never runs on it.
+     * `catalog` declares it and holds its sentence in that module's bundle. Read
+     * from the chain's source it looks like ours; read from its answer — the only
+     * reading that matches what a client receives today — it is not.
+     *
+     * **This module's list and this module's `throw`s are two different sets, in
+     * both directions**, because ownership follows the domain noun and never the
+     * thrower (D-95.2). Going one way, `ASSET_STORAGE_MISCONFIGURED` is declared
+     * here, is written in both languages, and has **no raise site anywhere in the
+     * tree** — nothing routes to it, so its two sentences are unreachable today.
+     * That is neither this merge request's to fix nor a finding any check makes
+     * (`check:error-translations`' `unreachable` asks the other question: a
+     * sentence written where the chain does not route). Going the other way, the
+     * two codes this module raises and does not own are `INTERNAL` and
+     * `VALIDATION_FAILED`, both the platform's.
+     *
+     * **No `tokens`, and it is derived rather than assumed.** The envelope's
+     * `refusalToken` (`packages/platform/src/http/error-envelope.ts`) reads
+     * exactly one member of `details` — `code`, and only when `details` is an
+     * object — as the tail of `errors.<CODE>.<token>`. All twenty-nine raises of
+     * these codes were enumerated over `packages` and `backend/src` rather than
+     * over this package alone (runbook §5): twenty-seven pass no fourth argument
+     * at all, and the two that do — `ASSET_REFERENCED` in
+     * `assets-library.service.ts` and in `folders.service.ts` — pass the
+     * Zod-style **array** of `{ path, issue }` pairs, which `refusalToken`
+     * refuses by construction. The bundle agrees from the other direction: it
+     * holds fifteen `errors.<CODE>` keys and not one `errors.<CODE>.<token>`.
+     */
+    errorCodes: [
+        { code: 'ASSET_ACCESS_DENIED' },
+        { code: 'ASSET_FILE_MISSING' },
+        { code: 'ASSET_FOLDER_CYCLE' },
+        { code: 'ASSET_FOLDER_NAME_CONFLICT' },
+        { code: 'ASSET_FOLDER_NOT_EMPTY' },
+        { code: 'ASSET_FOLDER_NOT_FOUND' },
+        { code: 'ASSET_GONE' },
+        { code: 'ASSET_LEGACY_LOCATOR_CANNOT_HARDEN' },
+        { code: 'ASSET_NOT_FOUND' },
+        { code: 'ASSET_REFERENCED' },
+        { code: 'ASSET_STORAGE_MISCONFIGURED' },
+        { code: 'ASSET_STORAGE_UNAVAILABLE' },
+        { code: 'ASSET_UPLOAD_NO_FILE' },
+        { code: 'ASSET_UPLOAD_TOO_LARGE' },
+        { code: 'ASSET_UPLOAD_TYPE_NOT_ALLOWED' },
+    ],
+    i18n: { bundlesDir: 'i18n' },
+    docs: { dir: 'docs' },
+    permissions: [
+        { code: 'assets.read', label: 'Browse assets library' },
+        { code: 'assets.write', label: 'Upload and manage assets' },
+    ],
+});
+/** Legacy export retained for backward compatibility. */
+export const assetsLibraryManifest = settings;
+//# sourceMappingURL=manifest.js.map

package/dist/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,4BAA4B,GAC7B,MAAM,4BAA4B,CAAC;AAEpC;;;;;;;;;;;;GAYG;AACH,MAAM,QAAQ,GAAG,4BAA4B,CAAC;IAC5C,UAAU,EAAE,gBAAgB;IAC5B,MAAM,EAAE;QACN;YACE,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,SAAS;YACf,kFAAkF;SACnF;KACF;IACD,QAAQ,EAAE;QACR,sBAAsB;QACtB;YACE,IAAI,EAAE,wBAAwB;YAC9B,IAAI,EAAE,wBAAwB;YAC9B,SAAS,EAAE,SAAS;YACpB,SAAS,EAAE,QAAQ;YACnB,YAAY,EAAE,OAAO;YACrB,WAAW,EAAE,8DAA8D;SAC5E;QAED,aAAa;QACb;YACE,IAAI,EAAE,uBAAuB;YAC7B,IAAI,EAAE,2BAA2B;YACjC,SAAS,EAAE,SAAS;YACpB,SAAS,EAAE,QAAQ;YACnB,YAAY,EAAE,YAAY;SAC3B;QAED,OAAO;QACP,EAAE,IAAI,EAAE,kBAAkB,EAAY,IAAI,EAAE,aAAa,EAA6B,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE;QACnJ,EAAE,IAAI,EAAE,kBAAkB,EAAY,IAAI,EAAE,aAAa,EAA6B,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE;QACnJ,EAAE,IAAI,EAAE,yBAAyB,EAAK,IAAI,EAAE,oBAAoB,EAAsB,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE;QACnJ,EAAE,IAAI,EAAE,6BAA6B,EAAE,IAAI,EAAE,oCAAoC,EAAK,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE;QACnJ,EAAE,IAAI,EAAE,oBAAoB,EAAU,IAAI,EAAE,iCAAiC,EAAS,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE;QACnJ,EAAE,IAAI,EAAE,kBAAkB,EAAY,IAAI,EAAE,4BAA4B,EAAc,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE;QACnJ,EAAE,IAAI,EAAE,2BAA2B,EAAG,IAAI,EAAE,qCAAqC,EAAK,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE;QAEnJ,QAAQ;QACR,EAAE,IAAI,EAAE,mBAAmB,EAAiB,IAAI,EAAE,cAAc,EAA2B,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE;QACxJ,EAAE,IAAI,EAAE,iCAAiC,EAAG,IAAI,EAAE,wCAAwC,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE;QACzJ,EAAE,IAAI,EAAE,mBAAmB,EAAiB,IAAI,EAAE,gCAAgC,EAAU,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE;QACzJ,EAAE,IAAI,EAAE,4BAA4B,EAAQ,IAAI,EAAE,sCAAsC,EAAI,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE;QAEzJ,uBAAuB;QACvB;YACE,IAAI,EAAE,2BAA2B;YACjC,IAAI,EAAE,+CAA+C;YACrD,SAAS,EAAE,SAAS;YACpB,SAAS,EAAE,aAAa;YACxB,YAAY,EAAE,CAAC,GAAG,CAAC;SACpB;QACD;YACE,IAAI,EAAE,yBAAyB;YAC/B,IAAI,EAAE,gCAAgC;YACtC,SAAS,EAAE,SAAS;YACpB,SAAS,EAAE,QAAQ;YACnB,YAAY,EAAE,CAAC;SAChB;QAED,2BAA2B;QAC3B;YACE,IAAI,EAAE,4BAA4B;YAClC,IAAI,EAAE,kCAAkC;YACxC,SAAS,EAAE,SAAS;YACpB,SAAS,EAAE,QAAQ;YACnB,YAAY,EAAE,GAAG;SAClB;QACD;YACE,IAAI,EAAE,mCAAmC;YACzC,IAAI,EAAE,iDAAiD;YACvD,SAAS,EAAE,SAAS;YACpB,SAAS,EAAE,QAAQ;YACnB,YAAY,EAAE,EAAE;SACjB;QACD;YACE,IAAI,EAAE,8BAA8B;YACpC,IAAI,EAAE,gDAAgD;YACtD,SAAS,EAAE,SAAS;YACpB,SAAS,EAAE,QAAQ;YACnB,YAAY,EAAE,EAAE;YAChB,WAAW,EACT,sFAAsF;gBACtF,wFAAwF;gBACxF,+BAA+B;SAClC;KACF;CACF,CAAC,CAAC;AAEH,+CAA+C;AAC/C,MAAM,CAAC,MAAM,QAAQ,GAAG,oBAAoB,CAAC;IAC3C,EAAE,EAAE,gBAAgB;IACpB,IAAI,EAAE,gBAAgB;IACtB,WAAW,EACT,oFAAoF;IACtF,OAAO,EAAE,OAAO;IAChB;;;;;;;OAOG;IACH,GAAG,EAAE;QACH;YACE,IAAI,EAAE,yBAAyB;YAC/B,SAAS,EAAE;gBACT,EAAE,EAAE,wGAAwG;gBAC5G,EAAE,EAAE,gHAAgH;aACrH;YACD,WAAW,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;YACjC,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,IAAI;YACf,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,gBAAgB,EAAE;YACrD,SAAS,EAAE,CAAC,SAAS,CAAC;YACtB,SAAS,EAAE,IAAI;SAChB;KACF;IACD,yEAAyE;IACzE,4EAA4E;IAC5E,yBAAyB;IACzB,YAAY,EAAE,CAAC,MAAM,CAAC;IACtB,QAAQ;IACR,6EAA6E;IAC7E,6EAA6E;IAC7E,yEAAyE;IACzE,8EAA8E;IAC9E,6EAA6E;IAC7E,gCAAgC;IAChC;;;;;;;;;;;;;OAaG;IACH,IAAI,EAAE,KAAK;IACX,UAAU,EAAE;QACV,gBAAgB,EAAE,IAAI;QACtB,MAAM,EACJ,uFAAuF;YACvF,gDAAgD;KACnD;IACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6CG;IACH,UAAU,EAAE;QACV,EAAE,IAAI,EAAE,qBAAqB,EAAE;QAC/B,EAAE,IAAI,EAAE,oBAAoB,EAAE;QAC9B,EAAE,IAAI,EAAE,oBAAoB,EAAE;QAC9B,EAAE,IAAI,EAAE,4BAA4B,EAAE;QACtC,EAAE,IAAI,EAAE,wBAAwB,EAAE;QAClC,EAAE,IAAI,EAAE,wBAAwB,EAAE;QAClC,EAAE,IAAI,EAAE,YAAY,EAAE;QACtB,EAAE,IAAI,EAAE,oCAAoC,EAAE;QAC9C,EAAE,IAAI,EAAE,iBAAiB,EAAE;QAC3B,EAAE,IAAI,EAAE,kBAAkB,EAAE;QAC5B,EAAE,IAAI,EAAE,6BAA6B,EAAE;QACvC,EAAE,IAAI,EAAE,2BAA2B,EAAE;QACrC,EAAE,IAAI,EAAE,sBAAsB,EAAE;QAChC,EAAE,IAAI,EAAE,wBAAwB,EAAE;QAClC,EAAE,IAAI,EAAE,+BAA+B,EAAE;KAC1C;IACD,IAAI,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE;IAC5B,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE;IACrB,WAAW,EAAE;QACX,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,uBAAuB,EAAE;QACvD,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,0BAA0B,EAAE;KAC5D;CACF,CAAC,CAAC;AAEH,yDAAyD;AACzD,MAAM,CAAC,MAAM,qBAAqB,GAAG,QAAQ,CAAC"}

package/dist/migrations/20260505T102206_assets_library_init.d.ts

@@ -0,0 +1,35 @@
+import { Migration } from '@mikro-orm/migrations';
+/**
+ * Assets Library — feature 013 / data-model.md.
+ *
+ * Schema changes:
+ *   - new `asset_folders` table (organisational tree for the Library page).
+ *   - eight new columns on the existing `assets` table:
+ *       folder_id, visibility, label, storage_backend, storage_locator,
+ *       pending_cleanup, purge_after_at, mime_type_overridden.
+ *   - new `categories.main_image_asset_id` FK column.
+ *
+ * It also created a GIN index on `cms_pages.body`, so reference-protection's
+ * JSONB-path scan stays fast (research R10), until
+ * `specs/120-migration-closure-bridge-ownership/` Phase 3. `cms_pages` is
+ * `cms`' table and this module does not declare `cms` — nor could it, `cms`
+ * declaring `assets_library` — so under D-226 the index moved to
+ * `Migration20260912T125709CmsPageBodyAssetRefIndex`, verbatim and
+ * `if not exists`. An instance that omits `cms` no longer has this migration
+ * indexing a table nothing builds; the index itself is unchanged, and the
+ * reference scan that needs it is unaffected.
+ *
+ * Backfill:
+ *   - every pre-existing assets row is mapped to storage_backend='local'
+ *     with storage_locator=storage_url.
+ *   - rows whose pre-013 storage_url is an absolute URL are tagged
+ *     storage_backend='legacy' (read-only escape hatch — research R11).
+ *
+ * The legacy `storage_url` column is left in place for one release; new
+ * code reads `storage_locator` exclusively.
+ */
+export declare class Migration20260505T102206AssetsLibraryInit extends Migration {
+    up(): Promise<void>;
+    down(): Promise<void>;
+}
+//# sourceMappingURL=20260505T102206_assets_library_init.d.ts.map

package/dist/migrations/20260505T102206_assets_library_init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"20260505T102206_assets_library_init.d.ts","sourceRoot":"","sources":["../../src/migrations/20260505T102206_assets_library_init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAElD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,qBAAa,yCAA0C,SAAQ,SAAS;IACvD,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC;IA0FnB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CA+BrC"}

package/dist/migrations/20260505T102206_assets_library_init.js

@@ -0,0 +1,132 @@
+import { Migration } from '@mikro-orm/migrations';
+/**
+ * Assets Library — feature 013 / data-model.md.
+ *
+ * Schema changes:
+ *   - new `asset_folders` table (organisational tree for the Library page).
+ *   - eight new columns on the existing `assets` table:
+ *       folder_id, visibility, label, storage_backend, storage_locator,
+ *       pending_cleanup, purge_after_at, mime_type_overridden.
+ *   - new `categories.main_image_asset_id` FK column.
+ *
+ * It also created a GIN index on `cms_pages.body`, so reference-protection's
+ * JSONB-path scan stays fast (research R10), until
+ * `specs/120-migration-closure-bridge-ownership/` Phase 3. `cms_pages` is
+ * `cms`' table and this module does not declare `cms` — nor could it, `cms`
+ * declaring `assets_library` — so under D-226 the index moved to
+ * `Migration20260912T125709CmsPageBodyAssetRefIndex`, verbatim and
+ * `if not exists`. An instance that omits `cms` no longer has this migration
+ * indexing a table nothing builds; the index itself is unchanged, and the
+ * reference scan that needs it is unaffected.
+ *
+ * Backfill:
+ *   - every pre-existing assets row is mapped to storage_backend='local'
+ *     with storage_locator=storage_url.
+ *   - rows whose pre-013 storage_url is an absolute URL are tagged
+ *     storage_backend='legacy' (read-only escape hatch — research R11).
+ *
+ * The legacy `storage_url` column is left in place for one release; new
+ * code reads `storage_locator` exclusively.
+ */
+export class Migration20260505T102206AssetsLibraryInit extends Migration {
+    async up() {
+        // --- asset_folders ---------------------------------------------------
+        this.addSql(`
+      create table "asset_folders" (
+        "id" uuid not null,
+        "parent_id" uuid null,
+        "name" varchar(160) not null,
+        "position" integer not null default 0,
+        "created_at" timestamptz not null,
+        "updated_at" timestamptz not null,
+        constraint "asset_folders_pkey" primary key ("id"),
+        constraint "asset_folders_parent_fk" foreign key ("parent_id")
+          references "asset_folders" ("id") on delete restrict,
+        constraint "asset_folders_no_self_parent" check ("id" <> "parent_id")
+      );
+    `);
+        this.addSql('create index "asset_folders_parent_position_index" on "asset_folders" ("parent_id", "position");');
+        // Case-insensitive uniqueness of (parent_id, name). NULL parent_id is
+        // coalesced to the all-zero UUID so the constraint also covers root.
+        this.addSql(`
+      create unique index "asset_folders_unique_name_per_parent"
+        on "asset_folders" (
+          coalesce("parent_id", '00000000-0000-0000-0000-000000000000'::uuid),
+          lower("name")
+        );
+    `);
+        // --- assets: extended columns ----------------------------------------
+        this.addSql(`alter table "assets"
+      add column "folder_id" uuid null,
+      add column "visibility" varchar(7) not null default 'public',
+      add column "label" text null,
+      add column "storage_backend" varchar(8) not null default 'local',
+      add column "storage_locator" varchar(2048) not null default '',
+      add column "pending_cleanup" boolean not null default false,
+      add column "purge_after_at" timestamptz null,
+      add column "mime_type_overridden" boolean not null default false;
+    `);
+        this.addSql(`
+      alter table "assets"
+        add constraint "assets_folder_fk" foreign key ("folder_id")
+          references "asset_folders" ("id") on delete set null,
+        add constraint "assets_visibility_check"
+          check ("visibility" in ('public','private')),
+        add constraint "assets_storage_backend_check"
+          check ("storage_backend" in ('local','s3','gcs','legacy'));
+    `);
+        this.addSql('create index "assets_folder_visible_index" on "assets" ("folder_id", "deleted_at", "created_at" desc);');
+        this.addSql('create index "assets_pending_cleanup_index" on "assets" ("pending_cleanup") where "pending_cleanup" = true;');
+        this.addSql('create index "assets_purge_due_index" on "assets" ("purge_after_at") where "deleted_at" is not null and "purge_after_at" is not null;');
+        this.addSql('create index "assets_storage_backend_index" on "assets" ("storage_backend", "deleted_at");');
+        // --- categories.main_image_asset_id ----------------------------------
+        this.addSql(`alter table "categories"
+      add column "main_image_asset_id" uuid null,
+      add constraint "categories_main_image_fk" foreign key ("main_image_asset_id")
+        references "assets" ("id") on delete set null;
+    `);
+        this.addSql('create index "categories_main_image_asset_id_index" on "categories" ("main_image_asset_id");');
+        // --- backfill --------------------------------------------------------
+        // Pass 1: copy storage_url into storage_locator for every row that
+        // still has the column-default empty string.
+        this.addSql(`
+      update "assets"
+      set "storage_locator" = "storage_url"
+      where "storage_locator" = '';
+    `);
+        // Pass 2: rows whose pre-013 storage_url is an absolute URL are
+        // routed through the runtime 'legacy' adapter. This preserves their
+        // public URL verbatim — see research.md R11.
+        this.addSql(`
+      update "assets"
+      set "storage_backend" = 'legacy'
+      where "storage_locator" ~ '^https?://';
+    `);
+    }
+    async down() {
+        this.addSql('alter table "categories" drop constraint if exists "categories_main_image_fk";');
+        this.addSql('drop index if exists "categories_main_image_asset_id_index";');
+        this.addSql('alter table "categories" drop column if exists "main_image_asset_id";');
+        this.addSql('drop index if exists "assets_storage_backend_index";');
+        this.addSql('drop index if exists "assets_purge_due_index";');
+        this.addSql('drop index if exists "assets_pending_cleanup_index";');
+        this.addSql('drop index if exists "assets_folder_visible_index";');
+        this.addSql('alter table "assets" drop constraint if exists "assets_storage_backend_check";');
+        this.addSql('alter table "assets" drop constraint if exists "assets_visibility_check";');
+        this.addSql('alter table "assets" drop constraint if exists "assets_folder_fk";');
+        this.addSql(`alter table "assets"
+      drop column if exists "mime_type_overridden",
+      drop column if exists "purge_after_at",
+      drop column if exists "pending_cleanup",
+      drop column if exists "storage_locator",
+      drop column if exists "storage_backend",
+      drop column if exists "label",
+      drop column if exists "visibility",
+      drop column if exists "folder_id";
+    `);
+        this.addSql('drop index if exists "asset_folders_unique_name_per_parent";');
+        this.addSql('drop index if exists "asset_folders_parent_position_index";');
+        this.addSql('drop table if exists "asset_folders" cascade;');
+    }
+}
+//# sourceMappingURL=20260505T102206_assets_library_init.js.map

package/dist/migrations/20260505T102206_assets_library_init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"20260505T102206_assets_library_init.js","sourceRoot":"","sources":["../../src/migrations/20260505T102206_assets_library_init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAElD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,OAAO,yCAA0C,SAAQ,SAAS;IAC7D,KAAK,CAAC,EAAE;QACf,wEAAwE;QACxE,IAAI,CAAC,MAAM,CAAC;;;;;;;;;;;;;KAaX,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CACT,kGAAkG,CACnG,CAAC;QACF,sEAAsE;QACtE,qEAAqE;QACrE,IAAI,CAAC,MAAM,CAAC;;;;;;KAMX,CAAC,CAAC;QAEH,wEAAwE;QACxE,IAAI,CAAC,MAAM,CAAC;;;;;;;;;KASX,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC;;;;;;;;KAQX,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CACT,wGAAwG,CACzG,CAAC;QACF,IAAI,CAAC,MAAM,CACT,6GAA6G,CAC9G,CAAC;QACF,IAAI,CAAC,MAAM,CACT,uIAAuI,CACxI,CAAC;QACF,IAAI,CAAC,MAAM,CACT,4FAA4F,CAC7F,CAAC;QAEF,wEAAwE;QACxE,IAAI,CAAC,MAAM,CAAC;;;;KAIX,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CACT,8FAA8F,CAC/F,CAAC;QAEF,wEAAwE;QACxE,mEAAmE;QACnE,6CAA6C;QAC7C,IAAI,CAAC,MAAM,CAAC;;;;KAIX,CAAC,CAAC;QACH,gEAAgE;QAChE,oEAAoE;QACpE,6CAA6C;QAC7C,IAAI,CAAC,MAAM,CAAC;;;;KAIX,CAAC,CAAC;IACL,CAAC;IAEQ,KAAK,CAAC,IAAI;QACjB,IAAI,CAAC,MAAM,CACT,gFAAgF,CACjF,CAAC;QACF,IAAI,CAAC,MAAM,CACT,8DAA8D,CAC/D,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,uEAAuE,CAAC,CAAC;QAErF,IAAI,CAAC,MAAM,CAAC,sDAAsD,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,gDAAgD,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,sDAAsD,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,qDAAqD,CAAC,CAAC;QACnE,IAAI,CAAC,MAAM,CAAC,gFAAgF,CAAC,CAAC;QAC9F,IAAI,CAAC,MAAM,CAAC,2EAA2E,CAAC,CAAC;QACzF,IAAI,CAAC,MAAM,CAAC,oEAAoE,CAAC,CAAC;QAClF,IAAI,CAAC,MAAM,CAAC;;;;;;;;;KASX,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,8DAA8D,CAAC,CAAC;QAC5E,IAAI,CAAC,MAAM,CAAC,6DAA6D,CAAC,CAAC;QAC3E,IAAI,CAAC,MAAM,CAAC,+CAA+C,CAAC,CAAC;IAC/D,CAAC;CACF"}

package/dist/migrations/index.d.ts

@@ -0,0 +1,27 @@
+/**
+ * The `./migrations` subpath — every migration class this module owns, as one
+ * ordered `migrations` array.
+ *
+ * The array is what the platform reads when this module is **installed**:
+ * `src/packages/package-runtime.ts` takes `exported['migrations']` and refuses
+ * the package outright when it is absent (D-168).
+ *
+ * Listed in ascending timestamp, which is the order of this module's own
+ * migrations and of nothing else (feature 081): a manifest `dependencies` array
+ * is the only thing ordering this block against another module's.
+ *
+ * The **named** exports stay beside the array, and the asymmetry with
+ * `./backend` — which publishes an array and no named class (D-168) — is
+ * deliberate. `db/migrations-registry.generated.ts` imports each class by name
+ * from this specifier, and a migration class name is contract in a way an entity
+ * class name is not: `mikro_orm_migrations` persists it, so it is a string every
+ * already-migrated database holds.
+ *
+ * A class that is in neither the array nor the barrel is a migration that does
+ * not run: `migration:pending` reports nothing pending and the first symptom is
+ * a query against a table nobody created.
+ */
+import { Migration20260505T102206AssetsLibraryInit } from './20260505T102206_assets_library_init.js';
+export declare const migrations: (typeof Migration20260505T102206AssetsLibraryInit)[];
+export { Migration20260505T102206AssetsLibraryInit, };
+//# sourceMappingURL=index.d.ts.map

package/dist/migrations/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/migrations/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,yCAAyC,EAAE,MAAM,0CAA0C,CAAC;AAErG,eAAO,MAAM,UAAU,sDAEtB,CAAC;AAEF,OAAO,EACL,yCAAyC,GAC1C,CAAC"}