@igstack/app-catalog-backend-core 0.15.0 → 0.16.0

package/dist/modules/assets/screenshotRestController.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"screenshotRestController.mjs","names":[],"sources":["../../../src/modules/assets/screenshotRestController.ts"],"sourcesContent":["import type { Request, Response, Router } from 'express'\nimport sharp from 'sharp'\nimport { getDbClient } from '../../db'\n\nexport interface ScreenshotRestControllerConfig {\n  /**\n   * Base path for screenshot endpoints (e.g., '/api/screenshots')\n   */\n  basePath: string\n}\n\n/**\n * Registers REST endpoints for screenshot retrieval\n *\n * Endpoints:\n * - GET {basePath}/app/:appId - Get all screenshots for an app\n * - GET {basePath}/:id - Get screenshot binary by ID\n * - GET {basePath}/:id/metadata - Get screenshot metadata only\n */\nexport function registerScreenshotRestController(\n  router: Router,\n  config: ScreenshotRestControllerConfig,\n): void {\n  const { basePath } = config\n\n  // Get all screenshots for an app\n  router.get(\n    `${basePath}/app/:appSlug`,\n    async (req: Request, res: Response) => {\n      try {\n        const { appSlug } = req.params\n\n        const prisma = getDbClient()\n\n        // Find app by slug\n        const app = await prisma.dbResource.findUnique({\n          where: { slug: appSlug },\n          select: { screenshotIds: true },\n        })\n\n        if (!app) {\n          res.status(404).json({ error: 'App not found' })\n          return\n        }\n\n        // Fetch all screenshots for the app, then sort by screenshotIds order\n        const results = await prisma.dbAsset.findMany({\n          where: {\n            id: { in: app.screenshotIds },\n            assetType: 'screenshot',\n          },\n          select: {\n            id: true,\n            name: true,\n            mimeType: true,\n            fileSize: true,\n            width: true,\n            height: true,\n            createdAt: true,\n          },\n        })\n\n        const screenshots = app.screenshotIds\n          .map((id) => results.find((r) => r.id === id))\n          .filter((r) => r !== undefined)\n\n        res.json(screenshots)\n      } catch (error) {\n        console.error('Error fetching app screenshots:', error)\n        res.status(500).json({ error: 'Failed to fetch screenshots' })\n      }\n    },\n  )\n\n  // Get first screenshot for an app (convenience endpoint)\n  router.get(\n    `${basePath}/app/:appSlug/first`,\n    async (req: Request, res: Response) => {\n      try {\n        const { appSlug } = req.params\n\n        const prisma = getDbClient()\n\n        // Find app by slug\n        const app = await prisma.dbResource.findUnique({\n          where: { slug: appSlug },\n          select: { screenshotIds: true },\n        })\n\n        if (!app || app.screenshotIds.length === 0) {\n          res.status(404).json({ error: 'No screenshots found' })\n          return\n        }\n\n        // Fetch first screenshot\n        const screenshot = await prisma.dbAsset.findUnique({\n          where: { id: app.screenshotIds[0] },\n          select: {\n            id: true,\n            name: true,\n            mimeType: true,\n            fileSize: true,\n            width: true,\n            height: true,\n            createdAt: true,\n          },\n        })\n\n        if (!screenshot) {\n          res.status(404).json({ error: 'Screenshot not found' })\n          return\n        }\n\n        res.json(screenshot)\n      } catch (error) {\n        console.error('Error fetching first screenshot:', error)\n        res.status(500).json({ error: 'Failed to fetch screenshot' })\n      }\n    },\n  )\n\n  // Get screenshot binary by ID\n  router.get(`${basePath}/:id`, async (req: Request, res: Response) => {\n    try {\n      const { id } = req.params\n      const sizeParam = req.query.size as string | undefined\n      const targetSize = sizeParam ? parseInt(sizeParam, 10) : undefined\n\n      const prisma = getDbClient()\n      const screenshot = await prisma.dbAsset.findUnique({\n        where: { id },\n        select: {\n          content: true,\n          mimeType: true,\n          name: true,\n        },\n      })\n\n      if (!screenshot) {\n        res.status(404).json({ error: 'Screenshot not found' })\n        return\n      }\n\n      let content: Uint8Array | Buffer = screenshot.content\n\n      // Resize if size parameter provided\n      if (targetSize && targetSize > 0) {\n        try {\n          content = await sharp(screenshot.content)\n            .resize(targetSize, targetSize, {\n              fit: 'inside',\n              withoutEnlargement: true,\n            })\n            .toBuffer()\n        } catch (resizeError) {\n          console.error('Error resizing screenshot:', resizeError)\n          // Fall back to original if resize fails\n        }\n      }\n\n      // Set appropriate headers\n      res.setHeader('Content-Type', screenshot.mimeType)\n      res.setHeader(\n        'Content-Disposition',\n        `inline; filename=\"${screenshot.name}\"`,\n      )\n      res.setHeader('Cache-Control', 'public, max-age=86400') // Cache for 1 day\n\n      // Send binary content\n      res.send(content)\n    } catch (error) {\n      console.error('Error fetching screenshot:', error)\n      res.status(500).json({ error: 'Failed to fetch screenshot' })\n    }\n  })\n\n  // Get screenshot metadata only (no binary content)\n  router.get(\n    `${basePath}/:id/metadata`,\n    async (req: Request, res: Response) => {\n      try {\n        const { id } = req.params\n\n        const prisma = getDbClient()\n        const screenshot = await prisma.dbAsset.findUnique({\n          where: { id },\n          select: {\n            id: true,\n            name: true,\n            mimeType: true,\n            fileSize: true,\n            width: true,\n            height: true,\n            createdAt: true,\n            updatedAt: true,\n          },\n        })\n\n        if (!screenshot) {\n          res.status(404).json({ error: 'Screenshot not found' })\n          return\n        }\n\n        res.json(screenshot)\n      } catch (error) {\n        console.error('Error fetching screenshot metadata:', error)\n        res.status(500).json({ error: 'Failed to fetch screenshot metadata' })\n      }\n    },\n  )\n}\n"],"mappings":";;;;;;;;;;;;AAmBA,SAAgB,iCACd,QACA,QACM;CACN,MAAM,EAAE,aAAa;AAGrB,QAAO,IACL,GAAG,SAAS,gBACZ,OAAO,KAAc,QAAkB;AACrC,MAAI;GACF,MAAM,EAAE,YAAY,IAAI;GAExB,MAAM,SAAS,aAAa;GAG5B,MAAM,MAAM,MAAM,OAAO,WAAW,WAAW;IAC7C,OAAO,EAAE,MAAM,SAAS;IACxB,QAAQ,EAAE,eAAe,MAAM;IAChC,CAAC;AAEF,OAAI,CAAC,KAAK;AACR,QAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,iBAAiB,CAAC;AAChD;;GAIF,MAAM,UAAU,MAAM,OAAO,QAAQ,SAAS;IAC5C,OAAO;KACL,IAAI,EAAE,IAAI,IAAI,eAAe;KAC7B,WAAW;KACZ;IACD,QAAQ;KACN,IAAI;KACJ,MAAM;KACN,UAAU;KACV,UAAU;KACV,OAAO;KACP,QAAQ;KACR,WAAW;KACZ;IACF,CAAC;GAEF,MAAM,cAAc,IAAI,cACrB,KAAK,OAAO,QAAQ,MAAM,MAAM,EAAE,OAAO,GAAG,CAAC,CAC7C,QAAQ,MAAM,MAAM,OAAU;AAEjC,OAAI,KAAK,YAAY;WACd,OAAO;AACd,WAAQ,MAAM,mCAAmC,MAAM;AACvD,OAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,+BAA+B,CAAC;;GAGnE;AAGD,QAAO,IACL,GAAG,SAAS,sBACZ,OAAO,KAAc,QAAkB;AACrC,MAAI;GACF,MAAM,EAAE,YAAY,IAAI;GAExB,MAAM,SAAS,aAAa;GAG5B,MAAM,MAAM,MAAM,OAAO,WAAW,WAAW;IAC7C,OAAO,EAAE,MAAM,SAAS;IACxB,QAAQ,EAAE,eAAe,MAAM;IAChC,CAAC;AAEF,OAAI,CAAC,OAAO,IAAI,cAAc,WAAW,GAAG;AAC1C,QAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,wBAAwB,CAAC;AACvD;;GAIF,MAAM,aAAa,MAAM,OAAO,QAAQ,WAAW;IACjD,OAAO,EAAE,IAAI,IAAI,cAAc,IAAI;IACnC,QAAQ;KACN,IAAI;KACJ,MAAM;KACN,UAAU;KACV,UAAU;KACV,OAAO;KACP,QAAQ;KACR,WAAW;KACZ;IACF,CAAC;AAEF,OAAI,CAAC,YAAY;AACf,QAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,wBAAwB,CAAC;AACvD;;AAGF,OAAI,KAAK,WAAW;WACb,OAAO;AACd,WAAQ,MAAM,oCAAoC,MAAM;AACxD,OAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,8BAA8B,CAAC;;GAGlE;AAGD,QAAO,IAAI,GAAG,SAAS,OAAO,OAAO,KAAc,QAAkB;AACnE,MAAI;GACF,MAAM,EAAE,OAAO,IAAI;GACnB,MAAM,YAAY,IAAI,MAAM;GAC5B,MAAM,aAAa,YAAY,SAAS,WAAW,GAAG,GAAG;GAGzD,MAAM,aAAa,MADJ,aAAa,CACI,QAAQ,WAAW;IACjD,OAAO,EAAE,IAAI;IACb,QAAQ;KACN,SAAS;KACT,UAAU;KACV,MAAM;KACP;IACF,CAAC;AAEF,OAAI,CAAC,YAAY;AACf,QAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,wBAAwB,CAAC;AACvD;;GAGF,IAAI,UAA+B,WAAW;AAG9C,OAAI,cAAc,aAAa,EAC7B,KAAI;AACF,cAAU,MAAM,MAAM,WAAW,QAAQ,CACtC,OAAO,YAAY,YAAY;KAC9B,KAAK;KACL,oBAAoB;KACrB,CAAC,CACD,UAAU;YACN,aAAa;AACpB,YAAQ,MAAM,8BAA8B,YAAY;;AAM5D,OAAI,UAAU,gBAAgB,WAAW,SAAS;AAClD,OAAI,UACF,uBACA,qBAAqB,WAAW,KAAK,GACtC;AACD,OAAI,UAAU,iBAAiB,wBAAwB;AAGvD,OAAI,KAAK,QAAQ;WACV,OAAO;AACd,WAAQ,MAAM,8BAA8B,MAAM;AAClD,OAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,8BAA8B,CAAC;;GAE/D;AAGF,QAAO,IACL,GAAG,SAAS,gBACZ,OAAO,KAAc,QAAkB;AACrC,MAAI;GACF,MAAM,EAAE,OAAO,IAAI;GAGnB,MAAM,aAAa,MADJ,aAAa,CACI,QAAQ,WAAW;IACjD,OAAO,EAAE,IAAI;IACb,QAAQ;KACN,IAAI;KACJ,MAAM;KACN,UAAU;KACV,UAAU;KACV,OAAO;KACP,QAAQ;KACR,WAAW;KACX,WAAW;KACZ;IACF,CAAC;AAEF,OAAI,CAAC,YAAY;AACf,QAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,wBAAwB,CAAC;AACvD;;AAGF,OAAI,KAAK,WAAW;WACb,OAAO;AACd,WAAQ,MAAM,uCAAuC,MAAM;AAC3D,OAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,uCAAuC,CAAC;;GAG3E"}
+{"version":3,"file":"screenshotRestController.mjs","names":[],"sources":["../../../src/modules/assets/screenshotRestController.ts"],"sourcesContent":["import type { Request, Response, Router } from 'express'\nimport sharp from 'sharp'\nimport { getDbClient } from '../../db'\nimport { isNotModified, setRevalidatingCacheHeaders } from './assetCache'\n\nexport interface ScreenshotRestControllerConfig {\n  /**\n   * Base path for screenshot endpoints (e.g., '/api/screenshots')\n   */\n  basePath: string\n}\n\n/**\n * Registers REST endpoints for screenshot retrieval\n *\n * Endpoints:\n * - GET {basePath}/app/:appId - Get all screenshots for an app\n * - GET {basePath}/:id - Get screenshot binary by ID\n * - GET {basePath}/:id/metadata - Get screenshot metadata only\n */\nexport function registerScreenshotRestController(\n  router: Router,\n  config: ScreenshotRestControllerConfig,\n): void {\n  const { basePath } = config\n\n  // Get all screenshots for an app\n  router.get(\n    `${basePath}/app/:appSlug`,\n    async (req: Request, res: Response) => {\n      try {\n        const { appSlug } = req.params\n\n        const prisma = getDbClient()\n\n        // Find app by slug\n        const app = await prisma.dbResource.findUnique({\n          where: { slug: appSlug },\n          select: { screenshotIds: true },\n        })\n\n        if (!app) {\n          res.status(404).json({ error: 'App not found' })\n          return\n        }\n\n        // Fetch all screenshots for the app, then sort by screenshotIds order\n        const results = await prisma.dbAsset.findMany({\n          where: {\n            id: { in: app.screenshotIds },\n            assetType: 'screenshot',\n          },\n          select: {\n            id: true,\n            name: true,\n            mimeType: true,\n            fileSize: true,\n            width: true,\n            height: true,\n            createdAt: true,\n          },\n        })\n\n        const screenshots = app.screenshotIds\n          .map((id) => results.find((r) => r.id === id))\n          .filter((r) => r !== undefined)\n\n        res.json(screenshots)\n      } catch (error) {\n        console.error('Error fetching app screenshots:', error)\n        res.status(500).json({ error: 'Failed to fetch screenshots' })\n      }\n    },\n  )\n\n  // Get first screenshot for an app (convenience endpoint)\n  router.get(\n    `${basePath}/app/:appSlug/first`,\n    async (req: Request, res: Response) => {\n      try {\n        const { appSlug } = req.params\n\n        const prisma = getDbClient()\n\n        // Find app by slug\n        const app = await prisma.dbResource.findUnique({\n          where: { slug: appSlug },\n          select: { screenshotIds: true },\n        })\n\n        if (!app || app.screenshotIds.length === 0) {\n          res.status(404).json({ error: 'No screenshots found' })\n          return\n        }\n\n        // Fetch first screenshot\n        const screenshot = await prisma.dbAsset.findUnique({\n          where: { id: app.screenshotIds[0] },\n          select: {\n            id: true,\n            name: true,\n            mimeType: true,\n            fileSize: true,\n            width: true,\n            height: true,\n            createdAt: true,\n          },\n        })\n\n        if (!screenshot) {\n          res.status(404).json({ error: 'Screenshot not found' })\n          return\n        }\n\n        res.json(screenshot)\n      } catch (error) {\n        console.error('Error fetching first screenshot:', error)\n        res.status(500).json({ error: 'Failed to fetch screenshot' })\n      }\n    },\n  )\n\n  // Get screenshot binary by ID\n  router.get(`${basePath}/:id`, async (req: Request, res: Response) => {\n    try {\n      const { id } = req.params\n      const sizeParam = req.query.size as string | undefined\n      const targetSize = sizeParam ? parseInt(sizeParam, 10) : undefined\n\n      const prisma = getDbClient()\n      const screenshot = await prisma.dbAsset.findUnique({\n        where: { id },\n        select: {\n          content: true,\n          mimeType: true,\n          name: true,\n          checksum: true,\n        },\n      })\n\n      if (!screenshot) {\n        res.status(404).json({ error: 'Screenshot not found' })\n        return\n      }\n\n      // Answered before resizing, so an unchanged screenshot costs no image work.\n      const etag = setRevalidatingCacheHeaders(\n        res,\n        screenshot.checksum,\n        targetSize && targetSize > 0 ? `s${targetSize}` : undefined,\n      )\n      if (isNotModified(req, etag)) {\n        res.status(304).end()\n        return\n      }\n\n      let content: Uint8Array | Buffer = screenshot.content\n\n      // Resize if size parameter provided\n      if (targetSize && targetSize > 0) {\n        try {\n          content = await sharp(screenshot.content)\n            .resize(targetSize, targetSize, {\n              fit: 'inside',\n              withoutEnlargement: true,\n            })\n            .toBuffer()\n        } catch (resizeError) {\n          console.error('Error resizing screenshot:', resizeError)\n          // Fall back to original if resize fails\n        }\n      }\n\n      // Set appropriate headers\n      res.setHeader('Content-Type', screenshot.mimeType)\n      res.setHeader(\n        'Content-Disposition',\n        `inline; filename=\"${screenshot.name}\"`,\n      )\n\n      // Send binary content\n      res.send(content)\n    } catch (error) {\n      console.error('Error fetching screenshot:', error)\n      res.status(500).json({ error: 'Failed to fetch screenshot' })\n    }\n  })\n\n  // Get screenshot metadata only (no binary content)\n  router.get(\n    `${basePath}/:id/metadata`,\n    async (req: Request, res: Response) => {\n      try {\n        const { id } = req.params\n\n        const prisma = getDbClient()\n        const screenshot = await prisma.dbAsset.findUnique({\n          where: { id },\n          select: {\n            id: true,\n            name: true,\n            mimeType: true,\n            fileSize: true,\n            width: true,\n            height: true,\n            createdAt: true,\n            updatedAt: true,\n          },\n        })\n\n        if (!screenshot) {\n          res.status(404).json({ error: 'Screenshot not found' })\n          return\n        }\n\n        res.json(screenshot)\n      } catch (error) {\n        console.error('Error fetching screenshot metadata:', error)\n        res.status(500).json({ error: 'Failed to fetch screenshot metadata' })\n      }\n    },\n  )\n}\n"],"mappings":";;;;;;;;;;;;;AAoBA,SAAgB,iCACd,QACA,QACM;CACN,MAAM,EAAE,aAAa;AAGrB,QAAO,IACL,GAAG,SAAS,gBACZ,OAAO,KAAc,QAAkB;AACrC,MAAI;GACF,MAAM,EAAE,YAAY,IAAI;GAExB,MAAM,SAAS,aAAa;GAG5B,MAAM,MAAM,MAAM,OAAO,WAAW,WAAW;IAC7C,OAAO,EAAE,MAAM,SAAS;IACxB,QAAQ,EAAE,eAAe,MAAM;IAChC,CAAC;AAEF,OAAI,CAAC,KAAK;AACR,QAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,iBAAiB,CAAC;AAChD;;GAIF,MAAM,UAAU,MAAM,OAAO,QAAQ,SAAS;IAC5C,OAAO;KACL,IAAI,EAAE,IAAI,IAAI,eAAe;KAC7B,WAAW;KACZ;IACD,QAAQ;KACN,IAAI;KACJ,MAAM;KACN,UAAU;KACV,UAAU;KACV,OAAO;KACP,QAAQ;KACR,WAAW;KACZ;IACF,CAAC;GAEF,MAAM,cAAc,IAAI,cACrB,KAAK,OAAO,QAAQ,MAAM,MAAM,EAAE,OAAO,GAAG,CAAC,CAC7C,QAAQ,MAAM,MAAM,OAAU;AAEjC,OAAI,KAAK,YAAY;WACd,OAAO;AACd,WAAQ,MAAM,mCAAmC,MAAM;AACvD,OAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,+BAA+B,CAAC;;GAGnE;AAGD,QAAO,IACL,GAAG,SAAS,sBACZ,OAAO,KAAc,QAAkB;AACrC,MAAI;GACF,MAAM,EAAE,YAAY,IAAI;GAExB,MAAM,SAAS,aAAa;GAG5B,MAAM,MAAM,MAAM,OAAO,WAAW,WAAW;IAC7C,OAAO,EAAE,MAAM,SAAS;IACxB,QAAQ,EAAE,eAAe,MAAM;IAChC,CAAC;AAEF,OAAI,CAAC,OAAO,IAAI,cAAc,WAAW,GAAG;AAC1C,QAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,wBAAwB,CAAC;AACvD;;GAIF,MAAM,aAAa,MAAM,OAAO,QAAQ,WAAW;IACjD,OAAO,EAAE,IAAI,IAAI,cAAc,IAAI;IACnC,QAAQ;KACN,IAAI;KACJ,MAAM;KACN,UAAU;KACV,UAAU;KACV,OAAO;KACP,QAAQ;KACR,WAAW;KACZ;IACF,CAAC;AAEF,OAAI,CAAC,YAAY;AACf,QAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,wBAAwB,CAAC;AACvD;;AAGF,OAAI,KAAK,WAAW;WACb,OAAO;AACd,WAAQ,MAAM,oCAAoC,MAAM;AACxD,OAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,8BAA8B,CAAC;;GAGlE;AAGD,QAAO,IAAI,GAAG,SAAS,OAAO,OAAO,KAAc,QAAkB;AACnE,MAAI;GACF,MAAM,EAAE,OAAO,IAAI;GACnB,MAAM,YAAY,IAAI,MAAM;GAC5B,MAAM,aAAa,YAAY,SAAS,WAAW,GAAG,GAAG;GAGzD,MAAM,aAAa,MADJ,aAAa,CACI,QAAQ,WAAW;IACjD,OAAO,EAAE,IAAI;IACb,QAAQ;KACN,SAAS;KACT,UAAU;KACV,MAAM;KACN,UAAU;KACX;IACF,CAAC;AAEF,OAAI,CAAC,YAAY;AACf,QAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,wBAAwB,CAAC;AACvD;;AASF,OAAI,cAAc,KALL,4BACX,KACA,WAAW,UACX,cAAc,aAAa,IAAI,IAAI,eAAe,OACnD,CAC2B,EAAE;AAC5B,QAAI,OAAO,IAAI,CAAC,KAAK;AACrB;;GAGF,IAAI,UAA+B,WAAW;AAG9C,OAAI,cAAc,aAAa,EAC7B,KAAI;AACF,cAAU,MAAM,MAAM,WAAW,QAAQ,CACtC,OAAO,YAAY,YAAY;KAC9B,KAAK;KACL,oBAAoB;KACrB,CAAC,CACD,UAAU;YACN,aAAa;AACpB,YAAQ,MAAM,8BAA8B,YAAY;;AAM5D,OAAI,UAAU,gBAAgB,WAAW,SAAS;AAClD,OAAI,UACF,uBACA,qBAAqB,WAAW,KAAK,GACtC;AAGD,OAAI,KAAK,QAAQ;WACV,OAAO;AACd,WAAQ,MAAM,8BAA8B,MAAM;AAClD,OAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,8BAA8B,CAAC;;GAE/D;AAGF,QAAO,IACL,GAAG,SAAS,gBACZ,OAAO,KAAc,QAAkB;AACrC,MAAI;GACF,MAAM,EAAE,OAAO,IAAI;GAGnB,MAAM,aAAa,MADJ,aAAa,CACI,QAAQ,WAAW;IACjD,OAAO,EAAE,IAAI;IACb,QAAQ;KACN,IAAI;KACJ,MAAM;KACN,UAAU;KACV,UAAU;KACV,OAAO;KACP,QAAQ;KACR,WAAW;KACX,WAAW;KACZ;IACF,CAAC;AAEF,OAAI,CAAC,YAAY;AACf,QAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,wBAAwB,CAAC;AACvD;;AAGF,OAAI,KAAK,WAAW;WACb,OAAO;AACd,WAAQ,MAAM,uCAAuC,MAAM;AAC3D,OAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,uCAAuC,CAAC;;GAG3E"}

package/dist/modules/assets/upsertAsset.mjs

@@ -7,7 +7,13 @@ async function upsertAsset({ prisma, buffer, name, originalFilename, assetType }
 		originalFilename
 	});
 	const existing = await prisma.dbAsset.findUnique({ where: { name } });
-	if (existing) return existing.id;
+	if (existing) {
+		if (existing.mimeType !== mimeType) await prisma.dbAsset.update({
+			where: { id: existing.id },
+			data: { mimeType }
+		});
+		return existing.id;
+	}
 	return (await prisma.dbAsset.create({ data: {
 		name,
 		checksum,

package/dist/modules/assets/upsertAsset.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"upsertAsset.mjs","names":[],"sources":["../../../src/modules/assets/upsertAsset.ts"],"sourcesContent":["import { parseAssetMeta } from './assetUtils'\nimport type { AssetType, PrismaClient } from '../../generated/prisma/client'\n\nexport interface UpsertAssetParams {\n  prisma: PrismaClient\n  buffer: Buffer\n  name: string\n  originalFilename: string\n  assetType: AssetType\n}\n\nexport async function upsertAsset({\n  prisma,\n  buffer,\n  name,\n  originalFilename,\n  assetType,\n}: UpsertAssetParams) {\n  const { checksum, fileSize, width, height, mimeType } = await parseAssetMeta({\n    buffer,\n    originalFilename,\n  })\n\n  // If an asset with the same checksum already exists, reuse it instead of storing duplicate binary.\n  const existing = await prisma.dbAsset.findUnique({\n    where: { name },\n  })\n\n  if (existing) {\n    return existing.id\n  }\n\n  const asset = await prisma.dbAsset.create({\n    data: {\n      name,\n      checksum,\n      assetType,\n      content: new Uint8Array(buffer),\n      mimeType,\n      fileSize,\n      width,\n      height,\n    },\n  })\n  return asset.id\n}\n"],"mappings":";;;AAWA,eAAsB,YAAY,EAChC,QACA,QACA,MACA,kBACA,aACoB;CACpB,MAAM,EAAE,UAAU,UAAU,OAAO,QAAQ,aAAa,MAAM,eAAe;EAC3E;EACA;EACD,CAAC;CAGF,MAAM,WAAW,MAAM,OAAO,QAAQ,WAAW,EAC/C,OAAO,EAAE,MAAM,EAChB,CAAC;AAEF,KAAI,SACF,QAAO,SAAS;AAelB,SAZc,MAAM,OAAO,QAAQ,OAAO,EACxC,MAAM;EACJ;EACA;EACA;EACA,SAAS,IAAI,WAAW,OAAO;EAC/B;EACA;EACA;EACA;EACD,EACF,CAAC,EACW"}
+{"version":3,"file":"upsertAsset.mjs","names":[],"sources":["../../../src/modules/assets/upsertAsset.ts"],"sourcesContent":["import { parseAssetMeta } from './assetUtils'\nimport type { AssetType, PrismaClient } from '../../generated/prisma/client'\n\nexport interface UpsertAssetParams {\n  prisma: PrismaClient\n  buffer: Buffer\n  name: string\n  originalFilename: string\n  assetType: AssetType\n}\n\nexport async function upsertAsset({\n  prisma,\n  buffer,\n  name,\n  originalFilename,\n  assetType,\n}: UpsertAssetParams) {\n  const { checksum, fileSize, width, height, mimeType } = await parseAssetMeta({\n    buffer,\n    originalFilename,\n  })\n\n  // If an asset with the same checksum already exists, reuse it instead of storing duplicate binary.\n  const existing = await prisma.dbAsset.findUnique({\n    where: { name },\n  })\n\n  if (existing) {\n    // Reusing the stored binary must not keep a mimeType we no longer derive:\n    // rows written by an older, wrong derivation would never be corrected.\n    if (existing.mimeType !== mimeType) {\n      await prisma.dbAsset.update({\n        where: { id: existing.id },\n        data: { mimeType },\n      })\n    }\n    return existing.id\n  }\n\n  const asset = await prisma.dbAsset.create({\n    data: {\n      name,\n      checksum,\n      assetType,\n      content: new Uint8Array(buffer),\n      mimeType,\n      fileSize,\n      width,\n      height,\n    },\n  })\n  return asset.id\n}\n"],"mappings":";;;AAWA,eAAsB,YAAY,EAChC,QACA,QACA,MACA,kBACA,aACoB;CACpB,MAAM,EAAE,UAAU,UAAU,OAAO,QAAQ,aAAa,MAAM,eAAe;EAC3E;EACA;EACD,CAAC;CAGF,MAAM,WAAW,MAAM,OAAO,QAAQ,WAAW,EAC/C,OAAO,EAAE,MAAM,EAChB,CAAC;AAEF,KAAI,UAAU;AAGZ,MAAI,SAAS,aAAa,SACxB,OAAM,OAAO,QAAQ,OAAO;GAC1B,OAAO,EAAE,IAAI,SAAS,IAAI;GAC1B,MAAM,EAAE,UAAU;GACnB,CAAC;AAEJ,SAAO,SAAS;;AAelB,SAZc,MAAM,OAAO,QAAQ,OAAO,EACxC,MAAM;EACJ;EACA;EACA;EACA,SAAS,IAAI,WAAW,OAAO;EAC/B;EACA;EACA;EACA;EACD,EACF,CAAC,EACW"}

package/dist/modules/icons/iconRestController.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"iconRestController.d.mts","names":[],"sources":["../../../src/modules/icons/iconRestController.ts"],"mappings":";;;UAsBiB,wBAAA;;AAAjB;;EAIE,QAAA;AAAA;;AAWF;;;;;;;iBAAgB,0BAAA,CACd,MAAA,EAAQ,MAAA,EACR,MAAA,EAAQ,wBAAA"}
+{"version":3,"file":"iconRestController.d.mts","names":[],"sources":["../../../src/modules/icons/iconRestController.ts"],"mappings":";;;UA0BiB,wBAAA;;AAAjB;;EAIE,QAAA;AAAA;;AAWF;;;;;;;iBAAgB,0BAAA,CACd,MAAA,EAAQ,MAAA,EACR,MAAA,EAAQ,wBAAA"}

package/dist/modules/icons/iconRestController.mjs

@@ -1,5 +1,6 @@
 import { getDbClient } from "../../db/client.mjs";
 import { getExtensionFromFilename, getExtensionFromMimeType } from "./iconUtils.mjs";
+import { isNotModified, setRevalidatingCacheHeaders } from "../assets/assetCache.mjs";
 import { createHash } from "node:crypto";
 import multer from "multer";
 
@@ -71,16 +72,20 @@ function registerIconRestController(router, config) {
 				select: {
 					content: true,
 					mimeType: true,
-					name: true
+					name: true,
+					checksum: true
 				}
 			});
 			if (!icon) {
 				res.status(404).json({ error: "Icon not found" });
 				return;
 			}
+			if (isNotModified(req, setRevalidatingCacheHeaders(res, icon.checksum))) {
+				res.status(304).end();
+				return;
+			}
 			res.setHeader("Content-Type", icon.mimeType);
 			res.setHeader("Content-Disposition", `inline; filename="${icon.name}"`);
-			res.setHeader("Cache-Control", "public, max-age=86400");
 			res.send(icon.content);
 		} catch (error) {
 			console.error("Error fetching icon:", error);

package/dist/modules/icons/iconRestController.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"iconRestController.mjs","names":[],"sources":["../../../src/modules/icons/iconRestController.ts"],"sourcesContent":["import type { Request, Response, Router } from 'express'\nimport multer from 'multer'\nimport { createHash } from 'node:crypto'\nimport { getDbClient } from '../../db'\nimport { getExtensionFromFilename, getExtensionFromMimeType } from './iconUtils'\n\n// Configure multer for memory storage\nconst upload = multer({\n  storage: multer.memoryStorage(),\n  limits: {\n    fileSize: 10 * 1024 * 1024, // 10MB limit\n  },\n  fileFilter: (_req, file, cb) => {\n    // Accept images only\n    if (!file.mimetype.startsWith('image/')) {\n      cb(new Error('Only image files are allowed'))\n      return\n    }\n    cb(null, true)\n  },\n})\n\nexport interface IconRestControllerConfig {\n  /**\n   * Base path for icon endpoints (e.g., '/api/icons')\n   */\n  basePath: string\n}\n\n/**\n * Registers REST endpoints for icon upload and retrieval\n *\n * Endpoints:\n * - POST {basePath}/upload - Upload a new icon (multipart/form-data with 'icon' field and 'name' field)\n * - GET {basePath}/:id - Get icon binary by ID\n * - GET {basePath}/:id/metadata - Get icon metadata only\n */\nexport function registerIconRestController(\n  router: Router,\n  config: IconRestControllerConfig,\n): void {\n  const { basePath } = config\n\n  // Upload endpoint - accepts multipart/form-data\n  router.post(\n    `${basePath}/upload`,\n    upload.single('icon'),\n    async (req: Request, res: Response) => {\n      try {\n        if (!req.file) {\n          res.status(400).json({ error: 'No file uploaded' })\n          return\n        }\n\n        let name = req.body['name'] as string\n        if (!name) {\n          res.status(400).json({ error: 'Name is required' })\n          return\n        }\n\n        // Extract extension from original filename or derive from MIME type\n        const extension =\n          getExtensionFromFilename(req.file.originalname) ||\n          getExtensionFromMimeType(req.file.mimetype)\n\n        // Add extension to name if not already present\n        if (!name.includes('.')) {\n          name = `${name}.${extension}`\n        }\n\n        const prisma = getDbClient()\n        const checksum = createHash('sha256')\n          .update(req.file.buffer)\n          .digest('hex')\n        const icon = await prisma.dbAsset.create({\n          data: {\n            name,\n            assetType: 'icon',\n            content: new Uint8Array(req.file.buffer),\n            mimeType: req.file.mimetype,\n            fileSize: req.file.size,\n            checksum,\n          },\n        })\n\n        res.status(201).json({\n          id: icon.id,\n          name: icon.name,\n          mimeType: icon.mimeType,\n          fileSize: icon.fileSize,\n          createdAt: icon.createdAt,\n        })\n      } catch (error) {\n        console.error('Error uploading icon:', error)\n        res.status(500).json({ error: 'Failed to upload icon' })\n      }\n    },\n  )\n\n  // Get icon binary by name (e.g., /api/icons/jira.svg)\n  router.get(`${basePath}/:name`, async (req: Request, res: Response) => {\n    try {\n      const { name } = req.params\n\n      const prisma = getDbClient()\n      const icon = await prisma.dbAsset.findFirst({\n        where: {\n          name,\n          assetType: 'icon',\n        },\n        select: {\n          content: true,\n          mimeType: true,\n          name: true,\n        },\n      })\n\n      if (!icon) {\n        res.status(404).json({ error: 'Icon not found' })\n        return\n      }\n\n      // Set appropriate headers\n      res.setHeader('Content-Type', icon.mimeType)\n      res.setHeader('Content-Disposition', `inline; filename=\"${icon.name}\"`)\n      res.setHeader('Cache-Control', 'public, max-age=86400') // Cache for 1 day\n\n      // Send binary content\n      res.send(icon.content)\n    } catch (error) {\n      console.error('Error fetching icon:', error)\n      res.status(500).json({ error: 'Failed to fetch icon' })\n    }\n  })\n\n  // Get icon metadata only (no binary content)\n  router.get(\n    `${basePath}/:name/metadata`,\n    async (req: Request, res: Response) => {\n      try {\n        const { name } = req.params\n\n        const prisma = getDbClient()\n        const icon = await prisma.dbAsset.findFirst({\n          where: {\n            name,\n            assetType: 'icon',\n          },\n          select: {\n            id: true,\n            name: true,\n            mimeType: true,\n            fileSize: true,\n            createdAt: true,\n            updatedAt: true,\n          },\n        })\n\n        if (!icon) {\n          res.status(404).json({ error: 'Icon not found' })\n          return\n        }\n\n        res.json(icon)\n      } catch (error) {\n        console.error('Error fetching icon metadata:', error)\n        res.status(500).json({ error: 'Failed to fetch icon metadata' })\n      }\n    },\n  )\n}\n"],"mappings":";;;;;;AAOA,MAAM,SAAS,OAAO;CACpB,SAAS,OAAO,eAAe;CAC/B,QAAQ,EACN,UAAU,KAAK,OAAO,MACvB;CACD,aAAa,MAAM,MAAM,OAAO;AAE9B,MAAI,CAAC,KAAK,SAAS,WAAW,SAAS,EAAE;AACvC,sBAAG,IAAI,MAAM,+BAA+B,CAAC;AAC7C;;AAEF,KAAG,MAAM,KAAK;;CAEjB,CAAC;;;;;;;;;AAiBF,SAAgB,2BACd,QACA,QACM;CACN,MAAM,EAAE,aAAa;AAGrB,QAAO,KACL,GAAG,SAAS,UACZ,OAAO,OAAO,OAAO,EACrB,OAAO,KAAc,QAAkB;AACrC,MAAI;AACF,OAAI,CAAC,IAAI,MAAM;AACb,QAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,oBAAoB,CAAC;AACnD;;GAGF,IAAI,OAAO,IAAI,KAAK;AACpB,OAAI,CAAC,MAAM;AACT,QAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,oBAAoB,CAAC;AACnD;;GAIF,MAAM,YACJ,yBAAyB,IAAI,KAAK,aAAa,IAC/C,yBAAyB,IAAI,KAAK,SAAS;AAG7C,OAAI,CAAC,KAAK,SAAS,IAAI,CACrB,QAAO,GAAG,KAAK,GAAG;GAGpB,MAAM,SAAS,aAAa;GAC5B,MAAM,WAAW,WAAW,SAAS,CAClC,OAAO,IAAI,KAAK,OAAO,CACvB,OAAO,MAAM;GAChB,MAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,EACvC,MAAM;IACJ;IACA,WAAW;IACX,SAAS,IAAI,WAAW,IAAI,KAAK,OAAO;IACxC,UAAU,IAAI,KAAK;IACnB,UAAU,IAAI,KAAK;IACnB;IACD,EACF,CAAC;AAEF,OAAI,OAAO,IAAI,CAAC,KAAK;IACnB,IAAI,KAAK;IACT,MAAM,KAAK;IACX,UAAU,KAAK;IACf,UAAU,KAAK;IACf,WAAW,KAAK;IACjB,CAAC;WACK,OAAO;AACd,WAAQ,MAAM,yBAAyB,MAAM;AAC7C,OAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,yBAAyB,CAAC;;GAG7D;AAGD,QAAO,IAAI,GAAG,SAAS,SAAS,OAAO,KAAc,QAAkB;AACrE,MAAI;GACF,MAAM,EAAE,SAAS,IAAI;GAGrB,MAAM,OAAO,MADE,aAAa,CACF,QAAQ,UAAU;IAC1C,OAAO;KACL;KACA,WAAW;KACZ;IACD,QAAQ;KACN,SAAS;KACT,UAAU;KACV,MAAM;KACP;IACF,CAAC;AAEF,OAAI,CAAC,MAAM;AACT,QAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,kBAAkB,CAAC;AACjD;;AAIF,OAAI,UAAU,gBAAgB,KAAK,SAAS;AAC5C,OAAI,UAAU,uBAAuB,qBAAqB,KAAK,KAAK,GAAG;AACvE,OAAI,UAAU,iBAAiB,wBAAwB;AAGvD,OAAI,KAAK,KAAK,QAAQ;WACf,OAAO;AACd,WAAQ,MAAM,wBAAwB,MAAM;AAC5C,OAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,wBAAwB,CAAC;;GAEzD;AAGF,QAAO,IACL,GAAG,SAAS,kBACZ,OAAO,KAAc,QAAkB;AACrC,MAAI;GACF,MAAM,EAAE,SAAS,IAAI;GAGrB,MAAM,OAAO,MADE,aAAa,CACF,QAAQ,UAAU;IAC1C,OAAO;KACL;KACA,WAAW;KACZ;IACD,QAAQ;KACN,IAAI;KACJ,MAAM;KACN,UAAU;KACV,UAAU;KACV,WAAW;KACX,WAAW;KACZ;IACF,CAAC;AAEF,OAAI,CAAC,MAAM;AACT,QAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,kBAAkB,CAAC;AACjD;;AAGF,OAAI,KAAK,KAAK;WACP,OAAO;AACd,WAAQ,MAAM,iCAAiC,MAAM;AACrD,OAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,iCAAiC,CAAC;;GAGrE"}
+{"version":3,"file":"iconRestController.mjs","names":[],"sources":["../../../src/modules/icons/iconRestController.ts"],"sourcesContent":["import type { Request, Response, Router } from 'express'\nimport multer from 'multer'\nimport { createHash } from 'node:crypto'\nimport { getDbClient } from '../../db'\nimport { getExtensionFromFilename, getExtensionFromMimeType } from './iconUtils'\nimport {\n  isNotModified,\n  setRevalidatingCacheHeaders,\n} from '../assets/assetCache'\n\n// Configure multer for memory storage\nconst upload = multer({\n  storage: multer.memoryStorage(),\n  limits: {\n    fileSize: 10 * 1024 * 1024, // 10MB limit\n  },\n  fileFilter: (_req, file, cb) => {\n    // Accept images only\n    if (!file.mimetype.startsWith('image/')) {\n      cb(new Error('Only image files are allowed'))\n      return\n    }\n    cb(null, true)\n  },\n})\n\nexport interface IconRestControllerConfig {\n  /**\n   * Base path for icon endpoints (e.g., '/api/icons')\n   */\n  basePath: string\n}\n\n/**\n * Registers REST endpoints for icon upload and retrieval\n *\n * Endpoints:\n * - POST {basePath}/upload - Upload a new icon (multipart/form-data with 'icon' field and 'name' field)\n * - GET {basePath}/:id - Get icon binary by ID\n * - GET {basePath}/:id/metadata - Get icon metadata only\n */\nexport function registerIconRestController(\n  router: Router,\n  config: IconRestControllerConfig,\n): void {\n  const { basePath } = config\n\n  // Upload endpoint - accepts multipart/form-data\n  router.post(\n    `${basePath}/upload`,\n    upload.single('icon'),\n    async (req: Request, res: Response) => {\n      try {\n        if (!req.file) {\n          res.status(400).json({ error: 'No file uploaded' })\n          return\n        }\n\n        let name = req.body['name'] as string\n        if (!name) {\n          res.status(400).json({ error: 'Name is required' })\n          return\n        }\n\n        // Extract extension from original filename or derive from MIME type\n        const extension =\n          getExtensionFromFilename(req.file.originalname) ||\n          getExtensionFromMimeType(req.file.mimetype)\n\n        // Add extension to name if not already present\n        if (!name.includes('.')) {\n          name = `${name}.${extension}`\n        }\n\n        const prisma = getDbClient()\n        const checksum = createHash('sha256')\n          .update(req.file.buffer)\n          .digest('hex')\n        const icon = await prisma.dbAsset.create({\n          data: {\n            name,\n            assetType: 'icon',\n            content: new Uint8Array(req.file.buffer),\n            mimeType: req.file.mimetype,\n            fileSize: req.file.size,\n            checksum,\n          },\n        })\n\n        res.status(201).json({\n          id: icon.id,\n          name: icon.name,\n          mimeType: icon.mimeType,\n          fileSize: icon.fileSize,\n          createdAt: icon.createdAt,\n        })\n      } catch (error) {\n        console.error('Error uploading icon:', error)\n        res.status(500).json({ error: 'Failed to upload icon' })\n      }\n    },\n  )\n\n  // Get icon binary by name (e.g., /api/icons/jira.svg)\n  router.get(`${basePath}/:name`, async (req: Request, res: Response) => {\n    try {\n      const { name } = req.params\n\n      const prisma = getDbClient()\n      const icon = await prisma.dbAsset.findFirst({\n        where: {\n          name,\n          assetType: 'icon',\n        },\n        select: {\n          content: true,\n          mimeType: true,\n          name: true,\n          checksum: true,\n        },\n      })\n\n      if (!icon) {\n        res.status(404).json({ error: 'Icon not found' })\n        return\n      }\n\n      const etag = setRevalidatingCacheHeaders(res, icon.checksum)\n      if (isNotModified(req, etag)) {\n        res.status(304).end()\n        return\n      }\n\n      // Set appropriate headers\n      res.setHeader('Content-Type', icon.mimeType)\n      res.setHeader('Content-Disposition', `inline; filename=\"${icon.name}\"`)\n\n      // Send binary content\n      res.send(icon.content)\n    } catch (error) {\n      console.error('Error fetching icon:', error)\n      res.status(500).json({ error: 'Failed to fetch icon' })\n    }\n  })\n\n  // Get icon metadata only (no binary content)\n  router.get(\n    `${basePath}/:name/metadata`,\n    async (req: Request, res: Response) => {\n      try {\n        const { name } = req.params\n\n        const prisma = getDbClient()\n        const icon = await prisma.dbAsset.findFirst({\n          where: {\n            name,\n            assetType: 'icon',\n          },\n          select: {\n            id: true,\n            name: true,\n            mimeType: true,\n            fileSize: true,\n            createdAt: true,\n            updatedAt: true,\n          },\n        })\n\n        if (!icon) {\n          res.status(404).json({ error: 'Icon not found' })\n          return\n        }\n\n        res.json(icon)\n      } catch (error) {\n        console.error('Error fetching icon metadata:', error)\n        res.status(500).json({ error: 'Failed to fetch icon metadata' })\n      }\n    },\n  )\n}\n"],"mappings":";;;;;;;AAWA,MAAM,SAAS,OAAO;CACpB,SAAS,OAAO,eAAe;CAC/B,QAAQ,EACN,UAAU,KAAK,OAAO,MACvB;CACD,aAAa,MAAM,MAAM,OAAO;AAE9B,MAAI,CAAC,KAAK,SAAS,WAAW,SAAS,EAAE;AACvC,sBAAG,IAAI,MAAM,+BAA+B,CAAC;AAC7C;;AAEF,KAAG,MAAM,KAAK;;CAEjB,CAAC;;;;;;;;;AAiBF,SAAgB,2BACd,QACA,QACM;CACN,MAAM,EAAE,aAAa;AAGrB,QAAO,KACL,GAAG,SAAS,UACZ,OAAO,OAAO,OAAO,EACrB,OAAO,KAAc,QAAkB;AACrC,MAAI;AACF,OAAI,CAAC,IAAI,MAAM;AACb,QAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,oBAAoB,CAAC;AACnD;;GAGF,IAAI,OAAO,IAAI,KAAK;AACpB,OAAI,CAAC,MAAM;AACT,QAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,oBAAoB,CAAC;AACnD;;GAIF,MAAM,YACJ,yBAAyB,IAAI,KAAK,aAAa,IAC/C,yBAAyB,IAAI,KAAK,SAAS;AAG7C,OAAI,CAAC,KAAK,SAAS,IAAI,CACrB,QAAO,GAAG,KAAK,GAAG;GAGpB,MAAM,SAAS,aAAa;GAC5B,MAAM,WAAW,WAAW,SAAS,CAClC,OAAO,IAAI,KAAK,OAAO,CACvB,OAAO,MAAM;GAChB,MAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,EACvC,MAAM;IACJ;IACA,WAAW;IACX,SAAS,IAAI,WAAW,IAAI,KAAK,OAAO;IACxC,UAAU,IAAI,KAAK;IACnB,UAAU,IAAI,KAAK;IACnB;IACD,EACF,CAAC;AAEF,OAAI,OAAO,IAAI,CAAC,KAAK;IACnB,IAAI,KAAK;IACT,MAAM,KAAK;IACX,UAAU,KAAK;IACf,UAAU,KAAK;IACf,WAAW,KAAK;IACjB,CAAC;WACK,OAAO;AACd,WAAQ,MAAM,yBAAyB,MAAM;AAC7C,OAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,yBAAyB,CAAC;;GAG7D;AAGD,QAAO,IAAI,GAAG,SAAS,SAAS,OAAO,KAAc,QAAkB;AACrE,MAAI;GACF,MAAM,EAAE,SAAS,IAAI;GAGrB,MAAM,OAAO,MADE,aAAa,CACF,QAAQ,UAAU;IAC1C,OAAO;KACL;KACA,WAAW;KACZ;IACD,QAAQ;KACN,SAAS;KACT,UAAU;KACV,MAAM;KACN,UAAU;KACX;IACF,CAAC;AAEF,OAAI,CAAC,MAAM;AACT,QAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,kBAAkB,CAAC;AACjD;;AAIF,OAAI,cAAc,KADL,4BAA4B,KAAK,KAAK,SAAS,CAChC,EAAE;AAC5B,QAAI,OAAO,IAAI,CAAC,KAAK;AACrB;;AAIF,OAAI,UAAU,gBAAgB,KAAK,SAAS;AAC5C,OAAI,UAAU,uBAAuB,qBAAqB,KAAK,KAAK,GAAG;AAGvE,OAAI,KAAK,KAAK,QAAQ;WACf,OAAO;AACd,WAAQ,MAAM,wBAAwB,MAAM;AAC5C,OAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,wBAAwB,CAAC;;GAEzD;AAGF,QAAO,IACL,GAAG,SAAS,kBACZ,OAAO,KAAc,QAAkB;AACrC,MAAI;GACF,MAAM,EAAE,SAAS,IAAI;GAGrB,MAAM,OAAO,MADE,aAAa,CACF,QAAQ,UAAU;IAC1C,OAAO;KACL;KACA,WAAW;KACZ;IACD,QAAQ;KACN,IAAI;KACJ,MAAM;KACN,UAAU;KACV,UAAU;KACV,WAAW;KACX,WAAW;KACZ;IACF,CAAC;AAEF,OAAI,CAAC,MAAM;AACT,QAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,kBAAkB,CAAC;AACjD;;AAGF,OAAI,KAAK,KAAK;WACP,OAAO;AACd,WAAQ,MAAM,iCAAiC,MAAM;AACrD,OAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,iCAAiC,CAAC;;GAGrE"}

package/dist/modules/lighthouseKeeper/tools.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"tools.d.mts","names":[],"sources":["../../../src/modules/lighthouseKeeper/tools.ts"],"mappings":";;;;;;AA0BA;;iBAAgB,uBAAA,CACd,cAAA,EAAgB,gBAAA,GACf,MAAA,SAAe,IAAA;;;;;cAuEL,4BAAA"}
+{"version":3,"file":"tools.d.mts","names":[],"sources":["../../../src/modules/lighthouseKeeper/tools.ts"],"mappings":";;;;;;AAwBA;;iBAAgB,uBAAA,CACd,cAAA,EAAgB,gBAAA,GACf,MAAA,SAAe,IAAA;;;;;cAwEL,4BAAA"}

package/dist/modules/lighthouseKeeper/tools.mjs

@@ -1,6 +1,4 @@
-import { PrismaClient } from "../../generated/prisma/client.mjs";
-import { PrismaPg } from "@prisma/adapter-pg";
-import pg from "pg";
+import { createCorePrismaClient } from "../../db/client.mjs";
 import { z } from "zod";
 
 //#region src/modules/lighthouseKeeper/tools.ts
@@ -14,8 +12,10 @@ function getDatabaseUrl(config) {
 * These tools allow the AI to fetch and inspect app information.
 */
 function createAppCatalogAITools(databaseConfig) {
-	const databaseUrl = getDatabaseUrl(databaseConfig);
-	const prisma = new PrismaClient({ adapter: new PrismaPg(new pg.Pool({ connectionString: databaseUrl })) });
+	const { client: prisma } = createCorePrismaClient({
+		connectionString: getDatabaseUrl(databaseConfig),
+		configuredSchema: "url" in databaseConfig ? void 0 : databaseConfig.schema
+	});
 	return { getAppCard: {
 		description: "Fetch complete app catalog card information by ID. Returns title, description, tags, access request details, links, and all other app metadata.",
 		inputSchema: z.object({ slug: z.string().describe("The app slug to fetch") }),

package/dist/modules/lighthouseKeeper/tools.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"tools.mjs","names":[],"sources":["../../../src/modules/lighthouseKeeper/tools.ts"],"sourcesContent":["import type { Tool } from 'ai'\nimport { z } from 'zod'\nimport { PrismaClient } from '../../generated/prisma/client'\nimport { PrismaPg } from '@prisma/adapter-pg'\nimport pg from 'pg'\nimport type { AcDatabaseConfig } from '../../middleware/types.js'\n\n// ============================================================================\n// Database URL Helper\n// ============================================================================\n\nfunction getDatabaseUrl(config: AcDatabaseConfig): string {\n  if ('url' in config) return config.url\n  const { host, port, database, username, password, schema } = config\n  const schemaParam = schema ? `?schema=${schema}` : ''\n  return `postgresql://${username}:${password}@${host}:${port}/${database}${schemaParam}`\n}\n\n// ============================================================================\n// AI Tools for App Catalog\n// ============================================================================\n\n/**\n * Create AI tools for working with app catalog cards.\n * These tools allow the AI to fetch and inspect app information.\n */\nexport function createAppCatalogAITools(\n  databaseConfig: AcDatabaseConfig,\n): Record<string, Tool> {\n  const databaseUrl = getDatabaseUrl(databaseConfig)\n  const pool = new pg.Pool({ connectionString: databaseUrl })\n  const adapter = new PrismaPg(pool)\n  const prisma = new PrismaClient({ adapter })\n\n  const getAppCardSchema = z.object({\n    slug: z.string().describe('The app slug to fetch'),\n  })\n\n  type GetAppCardInput = z.infer<typeof getAppCardSchema>\n\n  const getAppCard: Tool<GetAppCardInput, unknown> = {\n    description:\n      'Fetch complete app catalog card information by ID. Returns title, description, tags, access request details, links, and all other app metadata.',\n    inputSchema: getAppCardSchema,\n    execute: async ({ slug }: { slug: string }) => {\n      try {\n        const app = await prisma.dbResource.findUnique({\n          where: { slug },\n          include: {\n            sourceRefs: true,\n          },\n        })\n\n        if (!app) {\n          return { error: `App not found with slug: ${slug}` }\n        }\n\n        // Return structured card data\n        return {\n          success: true,\n          card: {\n            id: app.id,\n            slug: app.slug,\n            displayName: app.displayName,\n            description: app.description,\n            teams: app.teams,\n            tags: app.tags,\n            appUrl: app.appUrl,\n            links: app.links,\n            iconName: app.iconName,\n            sources: app.sourceRefs.map((ref) => ref.url),\n            notes: app.notes,\n            accessRequest: app.accessRequest,\n            deprecated: app.deprecated,\n            createdAt: app.createdAt,\n            updatedAt: app.updatedAt,\n          },\n        }\n      } catch (error) {\n        return {\n          error: error instanceof Error ? error.message : 'Failed to fetch app',\n        }\n      }\n    },\n  }\n\n  return {\n    getAppCard,\n  }\n}\n\n// ============================================================================\n// System Prompt\n// ============================================================================\n\n/**\n * Default system prompt for AI working with app catalog cards.\n * Use this when configuring lighthouseKeeper for card updates.\n */\nexport const APP_CATALOG_AI_SYSTEM_PROMPT = `You are an assistant that helps update app catalog cards based on information from provided links.\n\nWhen given a link and an app ID:\n1. Use getAppCard to fetch the current card information\n2. Analyze the provided link for relevant information\n3. Output a new card structure with updated information based on the link\n\nReturn the updated card as a structured JSON object matching the card format:\n- displayName: App title\n- description: Full description\n- tags: Array of tags\n- teams: Array of team names\n- appUrl: Main application URL\n- links: Array of {url, title} objects for related links\n- sources: Array of source URLs (documentation, Confluence pages, etc.)\n- accessRequest: Object with approvalMethodSlug, comments, requestPrompt, postApprovalInstructions, roles, approverPersonSlugs, urls\n- notes: Additional notes\n- deprecated: Optional deprecation info with type, replacementSlug, comment\n\nDo NOT save the card to the database. Only output the updated structure.`\n"],"mappings":";;;;;;AAWA,SAAS,eAAe,QAAkC;AACxD,KAAI,SAAS,OAAQ,QAAO,OAAO;CACnC,MAAM,EAAE,MAAM,MAAM,UAAU,UAAU,UAAU,WAAW;AAE7D,QAAO,gBAAgB,SAAS,GAAG,SAAS,GAAG,KAAK,GAAG,KAAK,GAAG,WAD3C,SAAS,WAAW,WAAW;;;;;;AAYrD,SAAgB,wBACd,gBACsB;CACtB,MAAM,cAAc,eAAe,eAAe;CAGlD,MAAM,SAAS,IAAI,aAAa,EAAE,SADlB,IAAI,SADP,IAAI,GAAG,KAAK,EAAE,kBAAkB,aAAa,CAAC,CACzB,EACS,CAAC;AAsD5C,QAAO,EACL,YA/CiD;EACjD,aACE;EACF,aATuB,EAAE,OAAO,EAChC,MAAM,EAAE,QAAQ,CAAC,SAAS,wBAAwB,EACnD,CAAC;EAQA,SAAS,OAAO,EAAE,WAA6B;AAC7C,OAAI;IACF,MAAM,MAAM,MAAM,OAAO,WAAW,WAAW;KAC7C,OAAO,EAAE,MAAM;KACf,SAAS,EACP,YAAY,MACb;KACF,CAAC;AAEF,QAAI,CAAC,IACH,QAAO,EAAE,OAAO,4BAA4B,QAAQ;AAItD,WAAO;KACL,SAAS;KACT,MAAM;MACJ,IAAI,IAAI;MACR,MAAM,IAAI;MACV,aAAa,IAAI;MACjB,aAAa,IAAI;MACjB,OAAO,IAAI;MACX,MAAM,IAAI;MACV,QAAQ,IAAI;MACZ,OAAO,IAAI;MACX,UAAU,IAAI;MACd,SAAS,IAAI,WAAW,KAAK,QAAQ,IAAI,IAAI;MAC7C,OAAO,IAAI;MACX,eAAe,IAAI;MACnB,YAAY,IAAI;MAChB,WAAW,IAAI;MACf,WAAW,IAAI;MAChB;KACF;YACM,OAAO;AACd,WAAO,EACL,OAAO,iBAAiB,QAAQ,MAAM,UAAU,uBACjD;;;EAGN,EAIA;;;;;;AAWH,MAAa,+BAA+B"}
+{"version":3,"file":"tools.mjs","names":[],"sources":["../../../src/modules/lighthouseKeeper/tools.ts"],"sourcesContent":["import type { Tool } from 'ai'\nimport { z } from 'zod'\nimport { createCorePrismaClient } from '../../db/client'\nimport type { AcDatabaseConfig } from '../../middleware/types.js'\n\n// ============================================================================\n// Database URL Helper\n// ============================================================================\n\nfunction getDatabaseUrl(config: AcDatabaseConfig): string {\n  if ('url' in config) return config.url\n  const { host, port, database, username, password, schema } = config\n  const schemaParam = schema ? `?schema=${schema}` : ''\n  return `postgresql://${username}:${password}@${host}:${port}/${database}${schemaParam}`\n}\n\n// ============================================================================\n// AI Tools for App Catalog\n// ============================================================================\n\n/**\n * Create AI tools for working with app catalog cards.\n * These tools allow the AI to fetch and inspect app information.\n */\nexport function createAppCatalogAITools(\n  databaseConfig: AcDatabaseConfig,\n): Record<string, Tool> {\n  const { client: prisma } = createCorePrismaClient({\n    connectionString: getDatabaseUrl(databaseConfig),\n    configuredSchema:\n      'url' in databaseConfig ? undefined : databaseConfig.schema,\n  })\n\n  const getAppCardSchema = z.object({\n    slug: z.string().describe('The app slug to fetch'),\n  })\n\n  type GetAppCardInput = z.infer<typeof getAppCardSchema>\n\n  const getAppCard: Tool<GetAppCardInput, unknown> = {\n    description:\n      'Fetch complete app catalog card information by ID. Returns title, description, tags, access request details, links, and all other app metadata.',\n    inputSchema: getAppCardSchema,\n    execute: async ({ slug }: { slug: string }) => {\n      try {\n        const app = await prisma.dbResource.findUnique({\n          where: { slug },\n          include: {\n            sourceRefs: true,\n          },\n        })\n\n        if (!app) {\n          return { error: `App not found with slug: ${slug}` }\n        }\n\n        // Return structured card data\n        return {\n          success: true,\n          card: {\n            id: app.id,\n            slug: app.slug,\n            displayName: app.displayName,\n            description: app.description,\n            teams: app.teams,\n            tags: app.tags,\n            appUrl: app.appUrl,\n            links: app.links,\n            iconName: app.iconName,\n            sources: app.sourceRefs.map((ref) => ref.url),\n            notes: app.notes,\n            accessRequest: app.accessRequest,\n            deprecated: app.deprecated,\n            createdAt: app.createdAt,\n            updatedAt: app.updatedAt,\n          },\n        }\n      } catch (error) {\n        return {\n          error: error instanceof Error ? error.message : 'Failed to fetch app',\n        }\n      }\n    },\n  }\n\n  return {\n    getAppCard,\n  }\n}\n\n// ============================================================================\n// System Prompt\n// ============================================================================\n\n/**\n * Default system prompt for AI working with app catalog cards.\n * Use this when configuring lighthouseKeeper for card updates.\n */\nexport const APP_CATALOG_AI_SYSTEM_PROMPT = `You are an assistant that helps update app catalog cards based on information from provided links.\n\nWhen given a link and an app ID:\n1. Use getAppCard to fetch the current card information\n2. Analyze the provided link for relevant information\n3. Output a new card structure with updated information based on the link\n\nReturn the updated card as a structured JSON object matching the card format:\n- displayName: App title\n- description: Full description\n- tags: Array of tags\n- teams: Array of team names\n- appUrl: Main application URL\n- links: Array of {url, title} objects for related links\n- sources: Array of source URLs (documentation, Confluence pages, etc.)\n- accessRequest: Object with approvalMethodSlug, comments, requestPrompt, postApprovalInstructions, roles, approverPersonSlugs, urls\n- notes: Additional notes\n- deprecated: Optional deprecation info with type, replacementSlug, comment\n\nDo NOT save the card to the database. Only output the updated structure.`\n"],"mappings":";;;;AASA,SAAS,eAAe,QAAkC;AACxD,KAAI,SAAS,OAAQ,QAAO,OAAO;CACnC,MAAM,EAAE,MAAM,MAAM,UAAU,UAAU,UAAU,WAAW;AAE7D,QAAO,gBAAgB,SAAS,GAAG,SAAS,GAAG,KAAK,GAAG,KAAK,GAAG,WAD3C,SAAS,WAAW,WAAW;;;;;;AAYrD,SAAgB,wBACd,gBACsB;CACtB,MAAM,EAAE,QAAQ,WAAW,uBAAuB;EAChD,kBAAkB,eAAe,eAAe;EAChD,kBACE,SAAS,iBAAiB,SAAY,eAAe;EACxD,CAAC;AAsDF,QAAO,EACL,YA/CiD;EACjD,aACE;EACF,aATuB,EAAE,OAAO,EAChC,MAAM,EAAE,QAAQ,CAAC,SAAS,wBAAwB,EACnD,CAAC;EAQA,SAAS,OAAO,EAAE,WAA6B;AAC7C,OAAI;IACF,MAAM,MAAM,MAAM,OAAO,WAAW,WAAW;KAC7C,OAAO,EAAE,MAAM;KACf,SAAS,EACP,YAAY,MACb;KACF,CAAC;AAEF,QAAI,CAAC,IACH,QAAO,EAAE,OAAO,4BAA4B,QAAQ;AAItD,WAAO;KACL,SAAS;KACT,MAAM;MACJ,IAAI,IAAI;MACR,MAAM,IAAI;MACV,aAAa,IAAI;MACjB,aAAa,IAAI;MACjB,OAAO,IAAI;MACX,MAAM,IAAI;MACV,QAAQ,IAAI;MACZ,OAAO,IAAI;MACX,UAAU,IAAI;MACd,SAAS,IAAI,WAAW,KAAK,QAAQ,IAAI,IAAI;MAC7C,OAAO,IAAI;MACX,eAAe,IAAI;MACnB,YAAY,IAAI;MAChB,WAAW,IAAI;MACf,WAAW,IAAI;MAChB;KACF;YACM,OAAO;AACd,WAAO,EACL,OAAO,iBAAiB,QAAQ,MAAM,UAAU,uBACjD;;;EAGN,EAIA;;;;;;AAWH,MAAa,+BAA+B"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@igstack/app-catalog-backend-core",
-  "version": "0.15.0",
+  "version": "0.16.0",
   "description": "Backend core library for App Catalog",
   "homepage": "https://github.com/lislon/app-catalog",
   "repository": {
@@ -45,8 +45,8 @@
     "tsyringe": "^4.10.0",
     "yaml": "^2.8.0",
     "zod": "^4.3.5",
-    "@igstack/app-catalog-shared-core": "0.15.0",
-    "@igstack/app-catalog-table-sync": "0.15.0"
+    "@igstack/app-catalog-shared-core": "0.16.0",
+    "@igstack/app-catalog-table-sync": "0.16.0"
   },
   "devDependencies": {
     "@tanstack/vite-config": "^0.4.3",
@@ -73,7 +73,7 @@
   "engines": {
     "node": ">=24"
   },
-  "gitHead": "e021e223f8da284a81e2204908587d55b2f87b6a",
+  "gitHead": "8ef46d75c527a6d4a00965f7529e000c03cf0bc6",
   "scripts": {
     "build": "tsdown",
     "build:lenient": "tsdown",

package/src/__tests__/assetMime.test.ts

@@ -0,0 +1,74 @@
+import { describe, expect, it, vi } from 'vitest'
+import { parseAssetMeta } from '../modules/assets/assetUtils'
+import { upsertAsset } from '../modules/assets/upsertAsset'
+import type { PrismaClient } from '../generated/prisma/client'
+
+const SVG = Buffer.from(
+  '<svg xmlns="http://www.w3.org/2000/svg" width="32" height="32"><rect width="32" height="32" fill="#123456"/></svg>',
+)
+
+describe('parseAssetMeta mime derivation', () => {
+  it('serves SVG as image/svg+xml, not the invalid image/svg', async () => {
+    const meta = await parseAssetMeta({
+      buffer: SVG,
+      originalFilename: 'example-icon.svg',
+    })
+
+    expect(meta.mimeType).toBe('image/svg+xml')
+  })
+})
+
+describe('upsertAsset mimeType repair', () => {
+  const fakePrisma = (existing: { id: string; mimeType: string } | null) => {
+    const update = vi.fn().mockResolvedValue(existing)
+    const create = vi.fn().mockResolvedValue({ id: 'created' })
+    const prisma = {
+      dbAsset: {
+        findUnique: vi.fn().mockResolvedValue(existing),
+        update,
+        create,
+      },
+    } as unknown as PrismaClient
+
+    return { prisma, update, create }
+  }
+
+  it('rewrites a stale mimeType on an already-stored asset', async () => {
+    const { prisma, update } = fakePrisma({
+      id: 'existing',
+      mimeType: 'image/svg',
+    })
+
+    const id = await upsertAsset({
+      prisma,
+      buffer: SVG,
+      name: 'example-icon',
+      originalFilename: 'example-icon.svg',
+      assetType: 'icon',
+    })
+
+    expect(id).toBe('existing')
+    expect(update).toHaveBeenCalledWith({
+      where: { id: 'existing' },
+      data: { mimeType: 'image/svg+xml' },
+    })
+  })
+
+  it('leaves an already-correct asset untouched', async () => {
+    const { prisma, update } = fakePrisma({
+      id: 'existing',
+      mimeType: 'image/svg+xml',
+    })
+
+    const id = await upsertAsset({
+      prisma,
+      buffer: SVG,
+      name: 'example-icon',
+      originalFilename: 'example-icon.svg',
+      assetType: 'icon',
+    })
+
+    expect(id).toBe('existing')
+    expect(update).not.toHaveBeenCalled()
+  })
+})

package/src/__tests__/dbSchema.test.ts

@@ -0,0 +1,129 @@
+/**
+ * Unit tests for schema-per-branch DB isolation (#44).
+ * Tests the logic that maps DB_SCHEMA env → pg pool options.
+ */
+import { afterEach, beforeEach, describe, expect, it } from 'vitest'
+import {
+  buildPgSchemaOptions,
+  resolveDbSchema,
+  verifyDbSchema,
+} from '../db/client'
+
+const original = process.env.DB_SCHEMA
+
+beforeEach(() => {
+  // The helper reads the env directly, so each case states its own world.
+  delete process.env.DB_SCHEMA
+})
+
+afterEach(() => {
+  if (original === undefined) delete process.env.DB_SCHEMA
+  else process.env.DB_SCHEMA = original
+})
+
+describe('DB_SCHEMA schema-per-branch isolation (#44)', () => {
+  it('returns empty object when DB_SCHEMA is unset (public schema implicit)', () => {
+    expect(buildPgSchemaOptions(undefined)).toEqual({})
+  })
+
+  it('returns empty object when DB_SCHEMA is empty string', () => {
+    expect(buildPgSchemaOptions('')).toEqual({})
+  })
+
+  it('sets search_path on the pool when DB_SCHEMA is set', () => {
+    expect(buildPgSchemaOptions('preview_feat-my-branch')).toEqual({
+      options: '-c search_path=preview_feat-my-branch',
+    })
+  })
+
+  it('handles schema names with underscores and hyphens', () => {
+    const result = buildPgSchemaOptions('preview_feature-123')
+    expect(result).toEqual({ options: '-c search_path=preview_feature-123' })
+  })
+
+  it('falls back to DB_SCHEMA when no schema is passed', () => {
+    // The middleware pool has no schema in its config when it is given a plain
+    // url, so the env var is the only thing standing between a preview env and
+    // the shared `public` tables.
+    process.env.DB_SCHEMA = 'preview_from-env'
+    expect(buildPgSchemaOptions()).toEqual({
+      options: '-c search_path=preview_from-env',
+    })
+  })
+
+  it('lets DB_SCHEMA override a schema from the app config', () => {
+    // The deployment knows it is a preview; the config server does not, and its
+    // baked `public` would otherwise undo the isolation.
+    process.env.DB_SCHEMA = 'preview_from-env'
+    expect(buildPgSchemaOptions('public')).toEqual({
+      options: '-c search_path=preview_from-env',
+    })
+  })
+
+  it('uses the configured schema when DB_SCHEMA is unset', () => {
+    expect(buildPgSchemaOptions('public')).toEqual({
+      options: '-c search_path=public',
+    })
+  })
+})
+
+describe('resolveDbSchema', () => {
+  it('is undefined when nothing configures a schema', () => {
+    expect(resolveDbSchema()).toBeUndefined()
+    expect(resolveDbSchema('')).toBeUndefined()
+  })
+
+  it('prefers DB_SCHEMA over the configured schema', () => {
+    process.env.DB_SCHEMA = 'preview_from-env'
+    expect(resolveDbSchema('public')).toBe('preview_from-env')
+  })
+
+  it('falls back to the configured schema', () => {
+    expect(resolveDbSchema('public')).toBe('public')
+  })
+})
+
+describe('verifyDbSchema fail-fast (#82)', () => {
+  const poolReturning = (schema: string | null) =>
+    ({
+      query: async () => ({ rows: [{ schema }] }),
+    }) as unknown as Parameters<typeof verifyDbSchema>[0]
+
+  it('stays quiet for a deployment with no isolation to verify', async () => {
+    await expect(
+      verifyDbSchema(poolReturning('public')),
+    ).resolves.toBeUndefined()
+  })
+
+  it('passes when the database resolves the expected schema', async () => {
+    process.env.DB_SCHEMA = 'preview_feat-my-branch'
+    await expect(
+      verifyDbSchema(poolReturning('preview_feat-my-branch')),
+    ).resolves.toBeUndefined()
+  })
+
+  it('checks a deployment isolated by config alone, without DB_SCHEMA', async () => {
+    await expect(
+      verifyDbSchema(poolReturning('public'), 'preview_feat-my-branch'),
+    ).rejects.toThrow(/current_schema\(\) to "public"/)
+  })
+
+  it('accepts the name Postgres kept when the schema is over 63 bytes', async () => {
+    // CREATE SCHEMA and search_path truncate identically, so a long branch slug
+    // is still isolated - failing it here would crash-loop a healthy preview env.
+    const long = 'preview_' + 'b'.repeat(70)
+    process.env.DB_SCHEMA = long
+    await expect(
+      verifyDbSchema(poolReturning(long.slice(0, 63))),
+    ).resolves.toBeUndefined()
+  })
+
+  it('throws when a missing schema falls the connection through to public', async () => {
+    // Postgres skips a search_path entry that does not exist, which would let a
+    // preview env quietly read and overwrite the shared catalog.
+    process.env.DB_SCHEMA = 'preview_feat-my-branch'
+    await expect(verifyDbSchema(poolReturning('public'))).rejects.toThrow(
+      /current_schema\(\) to "public"/,
+    )
+  })
+})

package/src/__tests__/dbSchemaAdapter.test.ts

@@ -0,0 +1,118 @@
+/**
+ * Regression tests for preview-env schema isolation (#82).
+ *
+ * A `search_path` on the pool is not enough: Prisma 7 driver adapters qualify
+ * every table name with the schema the adapter reports, so a preview env whose
+ * adapter reports nothing reads and writes `public` no matter what the pool's
+ * `current_schema()` says. These tests pin the schema all the way to the
+ * `PrismaPg` constructor for every core call site.
+ */
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+
+const poolCtor = vi.fn()
+const adapterCtor = vi.fn()
+
+vi.mock('pg', () => ({
+  default: {
+    Pool: class {
+      constructor(config: unknown) {
+        poolCtor(config)
+      }
+    },
+  },
+}))
+
+vi.mock('@prisma/adapter-pg', () => ({
+  PrismaPg: class {
+    constructor(pool: unknown, options: unknown) {
+      adapterCtor(pool, options)
+    }
+  },
+}))
+
+vi.mock('../generated/prisma/client', () => ({
+  PrismaClient: class {
+    $connect = vi.fn()
+    $disconnect = vi.fn()
+  },
+}))
+
+const original = process.env.DB_SCHEMA
+const originalUrl = process.env.AC_CORE_DATABASE_URL
+
+beforeEach(() => {
+  vi.resetModules()
+  poolCtor.mockClear()
+  adapterCtor.mockClear()
+  process.env.DB_SCHEMA = 'preview_feat-my-branch'
+})
+
+afterEach(() => {
+  if (original === undefined) delete process.env.DB_SCHEMA
+  else process.env.DB_SCHEMA = original
+  if (originalUrl === undefined) delete process.env.AC_CORE_DATABASE_URL
+  else process.env.AC_CORE_DATABASE_URL = originalUrl
+})
+
+const adapterSchema = () => adapterCtor.mock.calls[0]?.[1]
+const poolOptions = () =>
+  (poolCtor.mock.calls[0]?.[0] as { options?: string } | undefined)?.options
+
+describe('preview-env schema reaches the Prisma adapter (#82)', () => {
+  it('getDbClient() passes DB_SCHEMA to the adapter, not just the pool', async () => {
+    process.env.AC_CORE_DATABASE_URL = 'postgresql://u:p@h:5432/db'
+    const { getDbClient } = await import('../db/client')
+
+    getDbClient()
+
+    expect(poolOptions()).toBe('-c search_path=preview_feat-my-branch')
+    expect(adapterSchema()).toEqual({ schema: 'preview_feat-my-branch' })
+  })
+
+  it('the middleware pool - the one the app uses - carries the schema too', async () => {
+    const { AcDatabaseManager } = await import('../middleware/database')
+
+    new AcDatabaseManager({
+      host: 'h',
+      port: 5432,
+      database: 'db',
+      username: 'u',
+      password: 'p',
+      schema: 'public',
+    }).getClient()
+
+    expect(poolOptions()).toBe('-c search_path=preview_feat-my-branch')
+    expect(adapterSchema()).toEqual({ schema: 'preview_feat-my-branch' })
+  })
+
+  it('the AI tools client reads the preview schema, not the shared catalog', async () => {
+    const { createAppCatalogAITools } =
+      await import('../modules/lighthouseKeeper/tools')
+
+    createAppCatalogAITools({
+      host: 'h',
+      port: 5432,
+      database: 'db',
+      username: 'u',
+      password: 'p',
+      schema: 'public',
+    })
+
+    expect(poolOptions()).toBe('-c search_path=preview_feat-my-branch')
+    expect(adapterSchema()).toEqual({ schema: 'preview_feat-my-branch' })
+  })
+
+  it('leaves the adapter schema unset when DB_SCHEMA is not configured', async () => {
+    delete process.env.DB_SCHEMA
+    process.env.AC_CORE_DATABASE_URL = 'postgresql://u:p@h:5432/db'
+    const { getDbClient } = await import('../db/client')
+
+    getDbClient()
+
+    expect(poolOptions()).toBeUndefined()
+    // Not toEqual({ schema: undefined }) - that also passes for {}, and an
+    // explicit undefined is what keeps the adapter on its own default.
+    expect(adapterSchema()).toHaveProperty('schema', undefined)
+    expect(adapterSchema()?.schema).toBeUndefined()
+  })
+})

package/src/__tests__/iconCache.test.ts

@@ -0,0 +1,81 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import { registerIconRestController } from '../modules/icons/iconRestController'
+import * as dbClient from '../db/client'
+import type { PrismaClient } from '../generated/prisma/client'
+import type { Request, Response, Router } from 'express'
+
+const ICON = {
+  content: Buffer.from('<svg xmlns="http://www.w3.org/2000/svg"/>'),
+  mimeType: 'image/svg+xml',
+  name: 'example-icon',
+  checksum: 'abc123',
+}
+
+/**
+ * Captures the `GET {basePath}/:name` handler the controller registers, so the
+ * test can drive it directly instead of standing up an HTTP server.
+ */
+const captureBinaryHandler = () => {
+  let handler!: (req: Request, res: Response) => Promise<void>
+  const router = {
+    get: (path: string, fn: (req: Request, res: Response) => Promise<void>) => {
+      if (path === '/api/icons/:name') handler = fn
+    },
+    post: () => {},
+  } as unknown as Router
+
+  registerIconRestController(router, { basePath: '/api/icons' })
+  return handler
+}
+
+const fakeRes = () => {
+  const headers: Record<string, string> = {}
+  const res = {
+    setHeader: (k: string, v: string) => {
+      headers[k] = v
+    },
+    status: vi.fn().mockReturnThis(),
+    json: vi.fn().mockReturnThis(),
+    send: vi.fn().mockReturnThis(),
+    end: vi.fn().mockReturnThis(),
+    sendStatus: vi.fn().mockReturnThis(),
+  }
+  return { res: res as unknown as Response, headers, spy: res }
+}
+
+describe('icon binary caching', () => {
+  beforeEach(() => {
+    vi.spyOn(dbClient, 'getDbClient').mockReturnValue({
+      dbAsset: { findFirst: vi.fn().mockResolvedValue(ICON) },
+    } as unknown as PrismaClient)
+  })
+
+  it('requires revalidation so a replaced icon is not masked by a stale cache', async () => {
+    const handler = captureBinaryHandler()
+    const { res, headers } = fakeRes()
+
+    await handler(
+      { params: { name: 'example-icon' }, headers: {} } as unknown as Request,
+      res,
+    )
+
+    expect(headers['Cache-Control']).toBe('public, max-age=0, must-revalidate')
+    expect(headers['ETag']).toBe(`"${ICON.checksum}"`)
+  })
+
+  it('answers a matching If-None-Match with 304 and no body', async () => {
+    const handler = captureBinaryHandler()
+    const { res, spy } = fakeRes()
+
+    await handler(
+      {
+        params: { name: 'example-icon' },
+        headers: { 'if-none-match': `"${ICON.checksum}"` },
+      } as unknown as Request,
+      res,
+    )
+
+    expect(spy.status).toHaveBeenCalledWith(304)
+    expect(spy.send).not.toHaveBeenCalled()
+  })
+})