@selvajs/platform 0.14.2 → 0.15.0-beta.1

package/dist/storage/assetClasses.js

@@ -0,0 +1,86 @@
+import { ALL_ORG_ASSET_KINDS } from '../organizations/schemas.js';
+import { COVER_IMAGE_EXTENSIONS } from '../definitions/types.js';
+// Org branding kinds (logo, favicon, …) are the public set. Built from the
+// schema enum so adding a kind there extends this pattern automatically.
+const BRANDING_KINDS = ALL_ORG_ASSET_KINDS.join('|');
+// Cover extensions are derived from the canonical `COVER_IMAGE_EXTENSIONS`
+// (definitions/types.ts) — strip the leading dot and escape so adding a new
+// cover format there propagates here instead of silently 404ing legit covers.
+const COVER_EXTS = COVER_IMAGE_EXTENSIONS.map((ext) => ext.replace(/^\./, '').replace(/[.*+?^${}()|[\]\\]/g, '\\$&')).join('|');
+// Reusable segment alphabets. `SAFE_SEGMENT` mirrors the `assertSafeKey`
+// alphabet in the path helpers (traversal/empty segments are rejected
+// separately by `hasUnsafeSegment`); `GUID` is the canonical definition guid
+// shape — kept in sync with `UUID_REGEX` in definitions/schemas.ts.
+const SAFE_SEGMENT = String.raw `[A-Za-z0-9._-]+`;
+const GUID = String.raw `[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}`;
+/**
+ * The closed registry of servable asset classes. Order matters only for
+ * readability — patterns are mutually exclusive by prefix. Anything that
+ * matches no class is unservable (the route 404s), which keeps the proxy
+ * default-deny: a new blob type is opt-in by adding an entry here.
+ */
+export const ASSET_CLASSES = [
+    {
+        id: 'org-branding',
+        visibility: 'public',
+        scope: 'none',
+        pattern: new RegExp(String.raw `^orgs\/(${SAFE_SEGMENT})\/branding\/(?:${BRANDING_KINDS})\.webp$`)
+    },
+    {
+        id: 'org-private',
+        visibility: 'org',
+        scope: 'org',
+        pattern: new RegExp(String.raw `^orgs\/(${SAFE_SEGMENT})\/private\/${SAFE_SEGMENT}$`)
+    },
+    {
+        id: 'definition-cover',
+        visibility: 'project',
+        scope: 'project',
+        pattern: new RegExp(String.raw `^definitions\/(${GUID})\/cover\.(?:${COVER_EXTS})$`, 'i')
+    }
+];
+/**
+ * Reject any path that contains a traversal, empty, or backslash segment
+ * *before* it can match a class. The class patterns use a permissive segment
+ * alphabet (`[A-Za-z0-9._-]+`) so dotted ids and filenames work, but that
+ * alphabet also admits a bare `.` or `..` *as a whole segment* — which would
+ * let `orgs/../branding/logo.webp` classify as public branding with `..`
+ * captured as the orgId. This mirrors `assertSafeKey` in the path builders:
+ * the registry is the read-side gate, those are the write-side gate, and both
+ * forbid the same segments so a path that can't be *written* can't be *read*.
+ */
+function hasUnsafeSegment(storagePath) {
+    if (storagePath.includes('\\'))
+        return true;
+    for (const segment of storagePath.split('/')) {
+        if (segment === '' || segment === '.' || segment === '..')
+            return true;
+    }
+    return false;
+}
+/**
+ * Classify a storage path into its asset class and scope id, or null when no
+ * class matches (or the path is unsafe). Callers — `getPublicUrl` (to pick CDN
+ * vs proxy) and the serving route (to pick the auth check) — consult this so
+ * URL generation and authorization never drift apart.
+ *
+ * For `org-branding` the orgId is captured as group 1 but the class is public,
+ * so `scopeId` is reported as the captured id only when the class actually
+ * authorizes against it (`scope !== 'none'`); public classes report null.
+ */
+export function classifyAssetPath(storagePath) {
+    if (hasUnsafeSegment(storagePath))
+        return null;
+    for (const cls of ASSET_CLASSES) {
+        const m = cls.pattern.exec(storagePath);
+        if (!m)
+            continue;
+        return { class: cls, scopeId: cls.scope === 'none' ? null : (m[1] ?? null) };
+    }
+    return null;
+}
+/** True when the path belongs to a `public` asset class (CDN-servable, no auth). */
+export function isPublicAssetPath(storagePath) {
+    return classifyAssetPath(storagePath)?.class.visibility === 'public';
+}
+//# sourceMappingURL=assetClasses.js.map

package/dist/storage/assetClasses.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assetClasses.js","sourceRoot":"","sources":["../../src/storage/assetClasses.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AA4CjE,2EAA2E;AAC3E,yEAAyE;AACzE,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAErD,2EAA2E;AAC3E,4EAA4E;AAC5E,8EAA8E;AAC9E,MAAM,UAAU,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACrD,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAC7D,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEZ,yEAAyE;AACzE,sEAAsE;AACtE,6EAA6E;AAC7E,oEAAoE;AACpE,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAA,iBAAiB,CAAC;AACjD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAA,8DAA8D,CAAC;AAEtF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,aAAa,GAA0B;IACnD;QACC,EAAE,EAAE,cAAc;QAClB,UAAU,EAAE,QAAQ;QACpB,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,IAAI,MAAM,CAClB,MAAM,CAAC,GAAG,CAAA,WAAW,YAAY,mBAAmB,cAAc,UAAU,CAC5E;KACD;IACD;QACC,EAAE,EAAE,aAAa;QACjB,UAAU,EAAE,KAAK;QACjB,KAAK,EAAE,KAAK;QACZ,OAAO,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,WAAW,YAAY,eAAe,YAAY,GAAG,CAAC;KACpF;IACD;QACC,EAAE,EAAE,kBAAkB;QACtB,UAAU,EAAE,SAAS;QACrB,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,kBAAkB,IAAI,gBAAgB,UAAU,IAAI,EAAE,GAAG,CAAC;KACxF;CACD,CAAC;AAEF;;;;;;;;;GASG;AACH,SAAS,gBAAgB,CAAC,WAAmB;IAC5C,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,KAAK,MAAM,OAAO,IAAI,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9C,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;IACxE,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,WAAmB;IACpD,IAAI,gBAAgB,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxC,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC;IAC9E,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,iBAAiB,CAAC,WAAmB;IACpD,OAAO,iBAAiB,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC;AACtE,CAAC"}

package/dist/storage/cacheBust.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Append a cache-busting token to a stored-asset URL.
+ *
+ * Mutable blobs are overwritten **in place** (`IStorageProvider.put` is upsert),
+ * so a re-upload keeps the same storage path — and therefore the same public
+ * URL. A browser/CDN that cached the old bytes under that URL keeps serving them
+ * until the TTL expires, which reads as "the replace didn't work". Appending a
+ * token that changes only when the content changes gives each new version a
+ * distinct URL (forcing a refetch) while letting unchanged assets stay cached.
+ *
+ * Generic over asset kind: the caller supplies the token from whatever it has
+ * that tracks the blob's version — a content hash, the owning record's
+ * `updatedAt`, a version counter. The serving route ignores the query string
+ * (SvelteKit's `[...path]` param never includes it), so this is purely a
+ * client-cache key and needs no route support.
+ *
+ * Empty/whitespace tokens are dropped (returns the URL unchanged) so a missing
+ * token degrades to "no cache-bust" rather than `?v=`.
+ */
+export declare function withCacheBust(url: string, token: string | number | undefined | null): string;
+//# sourceMappingURL=cacheBust.d.ts.map

package/dist/storage/cacheBust.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cacheBust.d.ts","sourceRoot":"","sources":["../../src/storage/cacheBust.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,CAM5F"}

package/dist/storage/cacheBust.js

@@ -0,0 +1,29 @@
+/**
+ * Append a cache-busting token to a stored-asset URL.
+ *
+ * Mutable blobs are overwritten **in place** (`IStorageProvider.put` is upsert),
+ * so a re-upload keeps the same storage path — and therefore the same public
+ * URL. A browser/CDN that cached the old bytes under that URL keeps serving them
+ * until the TTL expires, which reads as "the replace didn't work". Appending a
+ * token that changes only when the content changes gives each new version a
+ * distinct URL (forcing a refetch) while letting unchanged assets stay cached.
+ *
+ * Generic over asset kind: the caller supplies the token from whatever it has
+ * that tracks the blob's version — a content hash, the owning record's
+ * `updatedAt`, a version counter. The serving route ignores the query string
+ * (SvelteKit's `[...path]` param never includes it), so this is purely a
+ * client-cache key and needs no route support.
+ *
+ * Empty/whitespace tokens are dropped (returns the URL unchanged) so a missing
+ * token degrades to "no cache-bust" rather than `?v=`.
+ */
+export function withCacheBust(url, token) {
+    if (token === undefined || token === null)
+        return url;
+    const value = String(token).trim();
+    if (value === '')
+        return url;
+    const sep = url.includes('?') ? '&' : '?';
+    return `${url}${sep}v=${encodeURIComponent(value)}`;
+}
+//# sourceMappingURL=cacheBust.js.map

package/dist/storage/cacheBust.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cacheBust.js","sourceRoot":"","sources":["../../src/storage/cacheBust.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,KAAyC;IACnF,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC;IACtD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,GAAG,CAAC;IAC7B,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAC1C,OAAO,GAAG,GAAG,GAAG,GAAG,KAAK,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;AACrD,CAAC"}

package/dist/storage/image.d.ts

@@ -18,7 +18,12 @@ export interface TranscodeResult {
 }
 /** True if the input looks like an image to process — by content type or path extension. */
 export declare function isImageUpload(contentType: string | undefined, storagePath: string): boolean;
-/** Rewrite a path's extension to `.webp`. Unchanged if not a recognized image extension. */
+/**
+ * Rewrite a path's extension to `.webp`. Unchanged if not a recognized image
+ * extension. SVG is included: every upload (including SVG) is rasterized to
+ * WebP, so a `.svg` input is stored as `.webp` — no vector blob is ever
+ * persisted, which keeps the served bytes XSS-free without a sanitizer.
+ */
 export declare function toWebpPath(storagePath: string): string;
 /**
  * If the input is an image, transcode to WebP (capped + re-encoded) and

package/dist/storage/image.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"image.d.ts","sourceRoot":"","sources":["../../src/storage/image.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,eAAO,MAAM,eAAe,OAAO,CAAC;AACpC,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAErC,MAAM,WAAW,eAAe;IAC/B,IAAI,EAAE,UAAU,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,gEAAgE;IAChE,IAAI,EAAE,MAAM,CAAC;CACb;AAED,4FAA4F;AAC5F,wBAAgB,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAG3F;AAED,4FAA4F;AAC5F,wBAAgB,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAC3C,IAAI,EAAE,UAAU,EAChB,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,WAAW,EAAE,MAAM,GACjB,OAAO,CAAC,eAAe,CAAC,CAgB1B"}
+{"version":3,"file":"image.d.ts","sourceRoot":"","sources":["../../src/storage/image.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,eAAO,MAAM,eAAe,OAAO,CAAC;AACpC,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAErC,MAAM,WAAW,eAAe;IAC/B,IAAI,EAAE,UAAU,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,gEAAgE;IAChE,IAAI,EAAE,MAAM,CAAC;CACb;AAED,4FAA4F;AAC5F,wBAAgB,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAG3F;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAC3C,IAAI,EAAE,UAAU,EAChB,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,WAAW,EAAE,MAAM,GACjB,OAAO,CAAC,eAAe,CAAC,CAgB1B"}

package/dist/storage/image.js

@@ -14,11 +14,16 @@ export const IMAGE_WEBP_QUALITY = 85;
 export function isImageUpload(contentType, storagePath) {
     if (contentType?.startsWith('image/'))
         return true;
-    return /\.(webp|png|jpe?g|gif|bmp|tif?f)$/i.test(storagePath);
+    return /\.(webp|png|jpe?g|gif|bmp|tif?f|svg)$/i.test(storagePath);
 }
-/** Rewrite a path's extension to `.webp`. Unchanged if not a recognized image extension. */
+/**
+ * Rewrite a path's extension to `.webp`. Unchanged if not a recognized image
+ * extension. SVG is included: every upload (including SVG) is rasterized to
+ * WebP, so a `.svg` input is stored as `.webp` — no vector blob is ever
+ * persisted, which keeps the served bytes XSS-free without a sanitizer.
+ */
 export function toWebpPath(storagePath) {
-    return storagePath.replace(/\.(png|jpe?g|gif|bmp|tif?f)$/i, '.webp');
+    return storagePath.replace(/\.(png|jpe?g|gif|bmp|tif?f|svg)$/i, '.webp');
 }
 /**
  * If the input is an image, transcode to WebP (capped + re-encoded) and

package/dist/storage/image.js.map

@@ -1 +1 @@
-{"version":3,"file":"image.js","sourceRoot":"","sources":["../../src/storage/image.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC;AACpC,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AASrC,4FAA4F;AAC5F,MAAM,UAAU,aAAa,CAAC,WAA+B,EAAE,WAAmB;IACjF,IAAI,WAAW,EAAE,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,OAAO,oCAAoC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AAC/D,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,UAAU,CAAC,WAAmB;IAC7C,OAAO,WAAW,CAAC,OAAO,CAAC,+BAA+B,EAAE,OAAO,CAAC,CAAC;AACtE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC3C,IAAgB,EAChB,WAA+B,EAC/B,WAAmB;IAEnB,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC;QAC9C,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,IAAI,0BAA0B,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAC5F,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAC/C,MAAM,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC;SAC5D,IAAI,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;SACrC,QAAQ,EAAE,CAAC;IAEb,OAAO;QACN,IAAI,EAAE,IAAI,UAAU,CAAC,UAAU,CAAC;QAChC,WAAW,EAAE,YAAY;QACzB,IAAI,EAAE,UAAU,CAAC,WAAW,CAAC;KAC7B,CAAC;AACH,CAAC;AAGD,IAAI,WAAW,GAAmB,IAAI,CAAC;AAEvC,KAAK,UAAU,SAAS;IACvB,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IACpC,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,CAAoC,CAAC;QACvE,WAAW,GAAG,GAAG,CAAC,OAAO,IAAK,GAA0B,CAAC;QACzD,OAAO,WAAW,CAAC;IACpB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACd,sGAAsG,EACtG,EAAE,KAAK,EAAE,GAAY,EAAE,CACvB,CAAC;IACH,CAAC;AACF,CAAC"}
+{"version":3,"file":"image.js","sourceRoot":"","sources":["../../src/storage/image.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC;AACpC,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AASrC,4FAA4F;AAC5F,MAAM,UAAU,aAAa,CAAC,WAA+B,EAAE,WAAmB;IACjF,IAAI,WAAW,EAAE,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,OAAO,wCAAwC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AACnE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,WAAmB;IAC7C,OAAO,WAAW,CAAC,OAAO,CAAC,mCAAmC,EAAE,OAAO,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC3C,IAAgB,EAChB,WAA+B,EAC/B,WAAmB;IAEnB,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC;QAC9C,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,IAAI,0BAA0B,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAC5F,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAC/C,MAAM,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC;SAC5D,IAAI,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;SACrC,QAAQ,EAAE,CAAC;IAEb,OAAO;QACN,IAAI,EAAE,IAAI,UAAU,CAAC,UAAU,CAAC;QAChC,WAAW,EAAE,YAAY;QACzB,IAAI,EAAE,UAAU,CAAC,WAAW,CAAC;KAC7B,CAAC;AACH,CAAC;AAGD,IAAI,WAAW,GAAmB,IAAI,CAAC;AAEvC,KAAK,UAAU,SAAS;IACvB,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IACpC,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,CAAoC,CAAC;QACvE,WAAW,GAAG,GAAG,CAAC,OAAO,IAAK,GAA0B,CAAC;QACzD,OAAO,WAAW,CAAC;IACpB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACd,sGAAsG,EACtG,EAAE,KAAK,EAAE,GAAY,EAAE,CACvB,CAAC;IACH,CAAC;AACF,CAAC"}

package/dist/storage/index.d.ts

@@ -1,4 +1,7 @@
 export type { IStorageProvider } from './interface.js';
 export { IMAGE_MAX_WIDTH, IMAGE_WEBP_QUALITY, isImageUpload, toWebpPath, transcodeImageIfNeeded } from './image.js';
 export type { TranscodeResult } from './image.js';
+export { ASSET_CLASSES, classifyAssetPath, isPublicAssetPath } from './assetClasses.js';
+export type { AssetVisibility, AssetScope, AssetClass, AssetMatch } from './assetClasses.js';
+export { withCacheBust } from './cacheBust.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/storage/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/storage/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EACN,eAAe,EACf,kBAAkB,EAClB,aAAa,EACb,UAAU,EACV,sBAAsB,EACtB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/storage/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EACN,eAAe,EACf,kBAAkB,EAClB,aAAa,EACb,UAAU,EACV,sBAAsB,EACtB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACxF,YAAY,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC7F,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/storage/index.js

@@ -1,2 +1,4 @@
 export { IMAGE_MAX_WIDTH, IMAGE_WEBP_QUALITY, isImageUpload, toWebpPath, transcodeImageIfNeeded } from './image.js';
+export { ASSET_CLASSES, classifyAssetPath, isPublicAssetPath } from './assetClasses.js';
+export { withCacheBust } from './cacheBust.js';
 //# sourceMappingURL=index.js.map

package/dist/storage/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/storage/index.ts"],"names":[],"mappings":"AACA,OAAO,EACN,eAAe,EACf,kBAAkB,EAClB,aAAa,EACb,UAAU,EACV,sBAAsB,EACtB,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/storage/index.ts"],"names":[],"mappings":"AACA,OAAO,EACN,eAAe,EACf,kBAAkB,EAClB,aAAa,EACb,UAAU,EACV,sBAAsB,EACtB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAExF,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/testing/adapterSuite.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Adapter conformance suite for IDefinitionStore.
+ *
+ * The goal is to prove every adapter behaves identically from the consuming
+ * app's perspective — `ctx` scoping, `pending` filtering, `listStalePending`
+ * cutoff, history mutations, and error shapes.
+ *
+ * Runner-agnostic: callers inject a `{ describe, it, expect }` trio so this
+ * package stays test-framework free. For vitest or jest, pass the globals
+ * directly; for node:test, wrap them.
+ */
+import type { IDefinitionStore } from '../data/interface.js';
+export interface ConformanceRunner {
+    describe: (name: string, fn: () => void) => void;
+    it: (name: string, fn: () => Promise<void> | void) => void;
+    expect: <T>(actual: T) => {
+        toBe: (expected: T) => void;
+        toEqual: (expected: unknown) => void;
+        toBeNull: () => void;
+        toBeTruthy: () => void;
+        toContain: (expected: unknown) => void;
+    };
+}
+export interface DefinitionStoreConformanceOptions {
+    /** Name to show in the test output (e.g. "local-provider"). */
+    name: string;
+    /** Factory that returns a fresh, empty store per test. */
+    createStore: () => Promise<IDefinitionStore> | IDefinitionStore;
+    /** Test runner globals injected from the host package. */
+    runner: ConformanceRunner;
+}
+export declare function runDefinitionStoreConformance(opts: DefinitionStoreConformanceOptions): void;
+//# sourceMappingURL=adapterSuite.d.ts.map

package/dist/testing/adapterSuite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapterSuite.d.ts","sourceRoot":"","sources":["../../src/testing/adapterSuite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAM7D,MAAM,WAAW,iBAAiB;IACjC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,IAAI,KAAK,IAAI,CAAC;IACjD,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,IAAI,CAAC;IAC3D,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,KAAK;QACzB,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,IAAI,CAAC;QAC5B,OAAO,EAAE,CAAC,QAAQ,EAAE,OAAO,KAAK,IAAI,CAAC;QACrC,QAAQ,EAAE,MAAM,IAAI,CAAC;QACrB,UAAU,EAAE,MAAM,IAAI,CAAC;QACvB,SAAS,EAAE,CAAC,QAAQ,EAAE,OAAO,KAAK,IAAI,CAAC;KACvC,CAAC;CACF;AAED,MAAM,WAAW,iCAAiC;IACjD,+DAA+D;IAC/D,IAAI,EAAE,MAAM,CAAC;IACb,0DAA0D;IAC1D,WAAW,EAAE,MAAM,OAAO,CAAC,gBAAgB,CAAC,GAAG,gBAAgB,CAAC;IAChE,0DAA0D;IAC1D,MAAM,EAAE,iBAAiB,CAAC;CAC1B;AA4BD,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,iCAAiC,GAAG,IAAI,CA0J3F"}

package/dist/testing/adapterSuite.js

@@ -0,0 +1,166 @@
+/**
+ * Adapter conformance suite for IDefinitionStore.
+ *
+ * The goal is to prove every adapter behaves identically from the consuming
+ * app's perspective — `ctx` scoping, `pending` filtering, `listStalePending`
+ * cutoff, history mutations, and error shapes.
+ *
+ * Runner-agnostic: callers inject a `{ describe, it, expect }` trio so this
+ * package stays test-framework free. For vitest or jest, pass the globals
+ * directly; for node:test, wrap them.
+ */
+import { SYSTEM_CONTEXT } from '../context.js';
+function ctx(userId, permissions = ['platform_admin']) {
+    return { userId, permissions };
+}
+function record(overrides = {}) {
+    const now = new Date().toISOString();
+    return {
+        guid: overrides.guid ?? cryptoRandom(),
+        projectId: overrides.projectId ?? 'project-1',
+        ownerId: overrides.ownerId ?? 'user-1',
+        fileExt: overrides.fileExt ?? 'gh',
+        meta: overrides.meta ?? { displayName: 'Test' },
+        history: overrides.history ?? [],
+        maxHistory: overrides.maxHistory ?? 10,
+        status: overrides.status ?? 'ready',
+        createdAt: overrides.createdAt ?? now,
+        updatedAt: overrides.updatedAt ?? now,
+        ...overrides
+    };
+}
+// Minimal UUID-ish helper — good enough for tests, no crypto import needed.
+function cryptoRandom() {
+    return `test-${Math.random().toString(36).slice(2, 10)}`;
+}
+export function runDefinitionStoreConformance(opts) {
+    const { name, createStore, runner } = opts;
+    const { describe, it, expect } = runner;
+    describe(`IDefinitionStore conformance: ${name}`, () => {
+        it('create + get returns the record', async () => {
+            const store = await createStore();
+            const rec = record({ guid: 'g1' });
+            await store.create(ctx('u1'), rec);
+            const got = await store.get(ctx('u1'), 'g1');
+            expect(got?.guid).toBe('g1');
+        });
+        it('get returns null for missing guid', async () => {
+            const store = await createStore();
+            const got = await store.get(ctx('u1'), 'does-not-exist');
+            expect(got).toBeNull();
+        });
+        it('list filters pending by default', async () => {
+            const store = await createStore();
+            await store.create(ctx('u1'), record({ guid: 'r1', status: 'ready' }));
+            await store.create(ctx('u1'), record({ guid: 'p1', status: 'pending' }));
+            const page = await store.list(ctx('u1'));
+            const guids = page.items.map((r) => r.guid);
+            expect(guids).toContain('r1');
+            expect(guids.includes('p1')).toBe(false);
+        });
+        it('list with includePending returns pending too', async () => {
+            const store = await createStore();
+            await store.create(ctx('u1'), record({ guid: 'r1', status: 'ready' }));
+            await store.create(ctx('u1'), record({ guid: 'p1', status: 'pending' }));
+            const page = await store.list(ctx('u1'), { includePending: true });
+            const guids = page.items.map((r) => r.guid);
+            expect(guids).toContain('r1');
+            expect(guids).toContain('p1');
+        });
+        it('listByProject filters by projectId', async () => {
+            const store = await createStore();
+            await store.create(ctx('u1'), record({ guid: 'a', projectId: 'proj-a' }));
+            await store.create(ctx('u1'), record({ guid: 'b', projectId: 'proj-b' }));
+            const page = await store.listByProject(ctx('u1'), 'proj-a');
+            const guids = page.items.map((r) => r.guid);
+            expect(guids).toEqual(['a']);
+        });
+        it('update applies patch and bumps updatedAt', async () => {
+            const store = await createStore();
+            const created = record({ guid: 'u1', meta: { displayName: 'Old' } });
+            await store.create(ctx('u1'), created);
+            await store.update(ctx('u1'), 'u1', { meta: { displayName: 'New' } });
+            const got = await store.get(ctx('u1'), 'u1');
+            expect(got?.meta.displayName).toBe('New');
+            expect(got.updatedAt >= created.updatedAt).toBe(true);
+        });
+        it('update on missing guid throws ProviderError with status 404', async () => {
+            const store = await createStore();
+            let thrown;
+            try {
+                await store.update(ctx('u1'), 'nope', { meta: { displayName: 'X' } });
+            }
+            catch (err) {
+                thrown = err;
+            }
+            expect(thrown).toBeTruthy();
+            const e = thrown;
+            expect(e.status).toBe(404);
+        });
+        it('status flip pending → ready via update', async () => {
+            const store = await createStore();
+            await store.create(ctx('u1'), record({ guid: 'x', status: 'pending' }));
+            const beforeFlip = await store.list(ctx('u1'));
+            expect(beforeFlip.items.map((r) => r.guid).includes('x')).toBe(false);
+            await store.update(ctx('u1'), 'x', { status: 'ready' });
+            const afterFlip = await store.list(ctx('u1'));
+            expect(afterFlip.items.map((r) => r.guid)).toContain('x');
+        });
+        it('addHistoryEntry prepends entries (newest first)', async () => {
+            const store = await createStore();
+            await store.create(ctx('u1'), record({ guid: 'h', maxHistory: 0 }));
+            const e1 = { ref: 'r1', originalName: 'a.gh', archivedAt: '2024-01-01' };
+            const e2 = { ref: 'r2', originalName: 'b.gh', archivedAt: '2024-01-02' };
+            await store.addHistoryEntry(ctx('u1'), 'h', e1);
+            await store.addHistoryEntry(ctx('u1'), 'h', e2);
+            const got = await store.get(ctx('u1'), 'h');
+            expect(got.history.map((h) => h.ref)).toEqual(['r2', 'r1']);
+        });
+        it('removeHistoryEntry removes the matching ref', async () => {
+            const store = await createStore();
+            const entry = { ref: 'keep', originalName: 'a.gh', archivedAt: '2024-01-01' };
+            const drop = { ref: 'drop', originalName: 'b.gh', archivedAt: '2024-01-02' };
+            await store.create(ctx('u1'), record({ guid: 'h', history: [drop, entry] }));
+            await store.removeHistoryEntry(ctx('u1'), 'h', 'drop');
+            const got = await store.get(ctx('u1'), 'h');
+            expect(got.history.map((h) => h.ref)).toEqual(['keep']);
+        });
+        it('delete removes the record', async () => {
+            const store = await createStore();
+            await store.create(ctx('u1'), record({ guid: 'd' }));
+            await store.delete(ctx('u1'), 'd');
+            const got = await store.get(ctx('u1'), 'd');
+            expect(got).toBeNull();
+        });
+        it('listStalePending returns only pending + older than cutoff', async () => {
+            const store = await createStore();
+            const old = '2024-01-01T00:00:00.000Z';
+            const recent = new Date().toISOString();
+            await store.create(ctx('u1'), record({ guid: 'old-pending', status: 'pending', createdAt: old }));
+            await store.create(ctx('u1'), record({ guid: 'new-pending', status: 'pending', createdAt: recent }));
+            await store.create(ctx('u1'), record({ guid: 'old-ready', status: 'ready', createdAt: old }));
+            const cutoff = '2024-06-01T00:00:00.000Z';
+            const stale = await store.listStalePending(SYSTEM_CONTEXT, cutoff);
+            const guids = stale.map((r) => r.guid);
+            expect(guids).toContain('old-pending');
+            expect(guids.includes('new-pending')).toBe(false);
+            expect(guids.includes('old-ready')).toBe(false);
+        });
+        it('pagination respects limit and nextCursor', async () => {
+            const store = await createStore();
+            for (let i = 0; i < 5; i++) {
+                await store.create(ctx('u1'), record({ guid: `p${i}`, meta: { displayName: `N${i}` } }));
+            }
+            const first = await store.list(ctx('u1'), { limit: 2 });
+            expect(first.items.length).toBe(2);
+            expect(first.nextCursor).toBeTruthy();
+            const second = await store.list(ctx('u1'), { limit: 2, cursor: first.nextCursor });
+            expect(second.items.length).toBe(2);
+            const firstGuids = new Set(first.items.map((r) => r.guid));
+            for (const item of second.items) {
+                expect(firstGuids.has(item.guid)).toBe(false);
+            }
+        });
+    });
+}
+//# sourceMappingURL=adapterSuite.js.map

package/dist/testing/adapterSuite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapterSuite.js","sourceRoot":"","sources":["../../src/testing/adapterSuite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAwB/C,SAAS,GAAG,CAAC,MAAc,EAAE,cAA6C,CAAC,gBAAgB,CAAC;IAC3F,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,MAAM,CAAC,YAAuC,EAAE;IACxD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,OAAO;QACN,IAAI,EAAE,SAAS,CAAC,IAAI,IAAI,YAAY,EAAE;QACtC,SAAS,EAAE,SAAS,CAAC,SAAS,IAAI,WAAW;QAC7C,OAAO,EAAE,SAAS,CAAC,OAAO,IAAI,QAAQ;QACtC,OAAO,EAAE,SAAS,CAAC,OAAO,IAAI,IAAI;QAClC,IAAI,EAAE,SAAS,CAAC,IAAI,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE;QAC/C,OAAO,EAAE,SAAS,CAAC,OAAO,IAAI,EAAE;QAChC,UAAU,EAAE,SAAS,CAAC,UAAU,IAAI,EAAE;QACtC,MAAM,EAAE,SAAS,CAAC,MAAM,IAAI,OAAO;QACnC,SAAS,EAAE,SAAS,CAAC,SAAS,IAAI,GAAG;QACrC,SAAS,EAAE,SAAS,CAAC,SAAS,IAAI,GAAG;QACrC,GAAG,SAAS;KACZ,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,SAAS,YAAY;IACpB,OAAO,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,IAAuC;IACpF,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC3C,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAExC,QAAQ,CAAC,iCAAiC,IAAI,EAAE,EAAE,GAAG,EAAE;QACtD,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;YAChD,MAAM,KAAK,GAAG,MAAM,WAAW,EAAE,CAAC;YAClC,MAAM,GAAG,GAAG,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACnC,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;YACnC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;YAC7C,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;YAClD,MAAM,KAAK,GAAG,MAAM,WAAW,EAAE,CAAC;YAClC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,gBAAgB,CAAC,CAAC;YACzD,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;QACxB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;YAChD,MAAM,KAAK,GAAG,MAAM,WAAW,EAAE,CAAC;YAClC,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YACvE,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;YAEzE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;YACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC5C,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC9B,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC7D,MAAM,KAAK,GAAG,MAAM,WAAW,EAAE,CAAC;YAClC,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YACvE,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;YAEzE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;YACnE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC5C,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;YACnD,MAAM,KAAK,GAAG,MAAM,WAAW,EAAE,CAAC;YAClC,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;YAC1E,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;YAE1E,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;YAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC5C,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACzD,MAAM,KAAK,GAAG,MAAM,WAAW,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YACrE,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;YAEvC,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YACtE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;YAC7C,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1C,MAAM,CAAC,GAAI,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;YAC5E,MAAM,KAAK,GAAG,MAAM,WAAW,EAAE,CAAC;YAClC,IAAI,MAAe,CAAC;YACpB,IAAI,CAAC;gBACJ,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YACvE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,MAAM,GAAG,GAAG,CAAC;YACd,CAAC;YACD,MAAM,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,MAA6B,CAAC;YACxC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;YACvD,MAAM,KAAK,GAAG,MAAM,WAAW,EAAE,CAAC;YAClC,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;YAExE,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/C,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAEtE,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;YACxD,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;YAC9C,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;YAChE,MAAM,KAAK,GAAG,MAAM,WAAW,EAAE,CAAC;YAClC,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAEpE,MAAM,EAAE,GAAiB,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;YACvF,MAAM,EAAE,GAAiB,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;YACvF,MAAM,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YAChD,MAAM,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YAEhD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;YAC5C,MAAM,CAAC,GAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,KAAK,GAAG,MAAM,WAAW,EAAE,CAAC;YAClC,MAAM,KAAK,GAAiB,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;YAC5F,MAAM,IAAI,GAAiB,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;YAC3F,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YAE7E,MAAM,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;YACvD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;YAC5C,MAAM,CAAC,GAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;YAC1C,MAAM,KAAK,GAAG,MAAM,WAAW,EAAE,CAAC;YAClC,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;YACrD,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;YACnC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;YAC5C,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;QACxB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;YAC1E,MAAM,KAAK,GAAG,MAAM,WAAW,EAAE,CAAC;YAClC,MAAM,GAAG,GAAG,0BAA0B,CAAC;YACvC,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAExC,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;YAClG,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;YACrG,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;YAE9F,MAAM,MAAM,GAAG,0BAA0B,CAAC;YAC1C,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,gBAAgB,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;YACnE,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACvC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;YACvC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACzD,MAAM,KAAK,GAAG,MAAM,WAAW,EAAE,CAAC;YAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC5B,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YAC1F,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YACxD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACnC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,UAAU,EAAE,CAAC;YAEtC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;YACnF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACpC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3D,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/C,CAAC;QACF,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACJ,CAAC"}

package/dist/testing/suites/definitionStoreSuite.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"definitionStoreSuite.d.ts","sourceRoot":"","sources":["../../../src/testing/suites/definitionStoreSuite.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAKvE;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IACnC,qEAAqE;IACrE,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,yEAAyE;IACzE,SAAS,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAC3B,yFAAyF;IACzF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,8CAA8C;IAC9C,yBAAyB,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,iCAAiC;IACjD,+DAA+D;IAC/D,IAAI,EAAE,MAAM,CAAC;IACb,0DAA0D;IAC1D,WAAW,EAAE,MAAM,OAAO,CAAC,gBAAgB,CAAC,GAAG,gBAAgB,CAAC;IAChE;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,mBAAmB,CAAC,GAAG,mBAAmB,CAAC;IACvE;;;OAGG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;CACvB;AA0ED,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,iCAAiC,GAAG,IAAI,CAsc3F"}
+{"version":3,"file":"definitionStoreSuite.d.ts","sourceRoot":"","sources":["../../../src/testing/suites/definitionStoreSuite.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAKvE;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IACnC,qEAAqE;IACrE,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,yEAAyE;IACzE,SAAS,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAC3B,yFAAyF;IACzF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,8CAA8C;IAC9C,yBAAyB,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,iCAAiC;IACjD,+DAA+D;IAC/D,IAAI,EAAE,MAAM,CAAC;IACb,0DAA0D;IAC1D,WAAW,EAAE,MAAM,OAAO,CAAC,gBAAgB,CAAC,GAAG,gBAAgB,CAAC;IAChE;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,mBAAmB,CAAC,GAAG,mBAAmB,CAAC;IACvE;;;OAGG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;CACvB;AA2ED,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,iCAAiC,GAAG,IAAI,CAwjB3F"}

package/dist/testing/suites/definitionStoreSuite.js

@@ -38,6 +38,7 @@ function record(scope, overrides = {}) {
         displayName: overrides.displayName ?? 'Test',
         status: overrides.status ?? 'published',
         solveCount: overrides.solveCount ?? 0,
+        nextVersionNumber: overrides.nextVersionNumber ?? 2,
         liveVersionId: overrides.liveVersionId ?? null,
         draftVersionId: overrides.draftVersionId ?? null,
         createdAt: overrides.createdAt ?? now,
@@ -139,6 +140,23 @@ export function runDefinitionStoreConformance(opts) {
             expect(got?.displayName).toBe('New');
             expect(got.updatedAt >= created.updatedAt).toBe(true);
         });
+        it('solveCacheLimit round-trips: absent → inherit, set → value, null → cleared', async () => {
+            const store = await createStore();
+            const scope = await scopeFor();
+            const guid = makeUuid();
+            await store.create(ctx(scope.ownerId), record(scope, { guid }));
+            // Absent on create → undefined (inherit the global default).
+            expect((await store.get(ctx(scope.ownerId), guid))?.solveCacheLimit).toBeUndefined();
+            // Set a per-definition quota.
+            await store.update(ctx(scope.ownerId), guid, { solveCacheLimit: 25 });
+            expect((await store.get(ctx(scope.ownerId), guid))?.solveCacheLimit).toBe(25);
+            // 0 means "caching off" and must persist as 0 (distinct from absent/inherit).
+            await store.update(ctx(scope.ownerId), guid, { solveCacheLimit: 0 });
+            expect((await store.get(ctx(scope.ownerId), guid))?.solveCacheLimit).toBe(0);
+            // null clears back to inherit.
+            await store.update(ctx(scope.ownerId), guid, { solveCacheLimit: null });
+            expect((await store.get(ctx(scope.ownerId), guid))?.solveCacheLimit).toBeUndefined();
+        });
         it('update on missing guid throws ProviderError with status 404', async () => {
             const store = await createStore();
             const scope = await scopeFor();
@@ -185,6 +203,45 @@ export function runDefinitionStoreConformance(opts) {
             }
             expect(threw).toBe(false);
         });
+        it('reserveNextVersionNumber returns the record counter then advances it', async () => {
+            const store = await createStore();
+            const scope = await scopeFor();
+            const guid = makeUuid();
+            await store.create(ctx(scope.ownerId), record(scope, { guid, nextVersionNumber: 2 }));
+            const first = await store.reserveNextVersionNumber(ctx(scope.ownerId), guid);
+            const second = await store.reserveNextVersionNumber(ctx(scope.ownerId), guid);
+            expect(first).toBe(2);
+            expect(second).toBe(3);
+            // Counter persisted, never reused.
+            const got = await store.get(ctx(scope.ownerId), guid);
+            expect(got?.nextVersionNumber).toBe(4);
+        });
+        it('reserveNextVersionNumber mints a FRESH number after delete-latest (fileKeys never collide)', async () => {
+            // The whole reason the counter exists: max(existing)+1 reused a number
+            // after deleting the latest version, colliding the fileKey. The monotonic
+            // counter must hand out a number BEYOND any deleted version's.
+            const store = await createStore();
+            const scope = await scopeFor();
+            const guid = makeUuid();
+            await store.create(ctx(scope.ownerId), record(scope, { guid, nextVersionNumber: 2 }));
+            // Simulate an upload of v2 (reserve, create), then delete it.
+            const n2 = await store.reserveNextVersionNumber(ctx(scope.ownerId), guid);
+            expect(n2).toBe(2);
+            const v2 = version(guid, n2, scope.ownerId);
+            await store.createVersion(ctx(scope.ownerId), v2);
+            await store.deleteVersion(ctx(scope.ownerId), v2.id);
+            // The next reservation must be 3 — NOT 2 again — even though the highest
+            // surviving version number is now 1 (v1 was never created here; the point
+            // is the counter ignores the version list entirely).
+            const n3 = await store.reserveNextVersionNumber(ctx(scope.ownerId), guid);
+            expect(n3).toBe(3);
+            expect(n3).not.toBe(n2);
+        });
+        it('reserveNextVersionNumber throws for a missing definition', async () => {
+            const store = await createStore();
+            const scope = await scopeFor();
+            await expect(store.reserveNextVersionNumber(ctx(scope.ownerId), makeUuid())).rejects.toThrow();
+        });
         it('update advances updatedBy to the caller', async () => {
             const store = await createStore();
             const scope = await scopeFor();
@@ -398,6 +455,36 @@ export function runDefinitionStoreConformance(opts) {
             });
             expect(byProject.items.map((r) => r.guid)).not.toContain(guid);
         });
+        it('deleteByProject soft-deletes every definition in the project, leaving others', async () => {
+            const store = await createStore();
+            const scope = await scopeFor();
+            // Two published definitions in the target project, one in another —
+            // the cascade must tombstone the target project's and leave the rest.
+            const a = makeUuid();
+            const b = makeUuid();
+            const other = makeUuid();
+            await store.create(ctx(scope.ownerId), record(scope, { guid: a, projectId: scope.projectId, status: 'published' }));
+            await store.create(ctx(scope.ownerId), record(scope, { guid: b, projectId: scope.projectId, status: 'published' }));
+            await store.create(ctx(scope.ownerId), record(scope, { guid: other, projectId: scope.secondaryProjectId, status: 'published' }));
+            await store.deleteByProject(ctx(scope.ownerId), scope.projectId);
+            // Both target-project definitions gone from every read path…
+            expect(await store.get(ctx(scope.ownerId), a)).toBeNull();
+            expect(await store.get(ctx(scope.ownerId), b)).toBeNull();
+            const targetList = await store.listByProject(ctx(scope.ownerId), scope.projectId, {
+                limit: 500
+            });
+            expect(targetList.items).toHaveLength(0);
+            const all = await store.list(ctx(scope.ownerId), { limit: 500 });
+            expect(all.items.map((r) => r.guid)).not.toContain(a);
+            expect(all.items.map((r) => r.guid)).not.toContain(b);
+            // …but the other project's definition survives.
+            expect(await store.get(ctx(scope.ownerId), other)).not.toBeNull();
+        });
+        it('deleteByProject is a no-op when the project has no definitions', async () => {
+            const store = await createStore();
+            const scope = await scopeFor();
+            await expect(store.deleteByProject(ctx(scope.ownerId), scope.secondaryProjectId)).resolves.toBeUndefined();
+        });
         it('listPublic returns published records, not pending', async () => {
             const store = await createStore();
             const scope = await scopeFor();