@selvajs/platform 0.17.0-beta.3 → 0.18.0

package/dist/platformProjects/interface.d.ts

@@ -1,31 +1,24 @@
 import type { RequestContext } from '../context.js';
 import type { PlatformProjectGrant } from './types.js';
 /**
- * Grants for `platform`-visibility projects. Enables `instance_admin` to
- * grant orgs or individual users view-only or view+solve access without
- * creating project membership rows.
+ * Grants for `platform`-visibility projects. Lets `instance_admin` grant orgs
+ * or individual users view-only or view+solve access without creating
+ * project membership rows.
  *
  * All deletes are hard-deletes — grants have no downstream references and
  * revocation is immediate.
  */
 export interface IPlatformProjectGrantStore {
     listByProject(ctx: RequestContext, projectId: string): Promise<PlatformProjectGrant[]>;
-    /**
-     * Grants for many projects in a single query. Keys are the requested
-     * `projectIds`; a project with no grants maps to an empty array.
-     */
+    /** Keys are the requested `projectIds`; a project with no grants maps to an empty array. */
     listByProjects(ctx: RequestContext, projectIds: readonly string[]): Promise<Map<string, PlatformProjectGrant[]>>;
     create(ctx: RequestContext, grant: PlatformProjectGrant): Promise<void>;
     delete(ctx: RequestContext, id: string): Promise<void>;
-    /**
-     * Cascade hook: drop every grant for a project. Called by `deleteProject`.
-     * No-op when none exist.
-     */
+    /** Cascade hook called by `deleteProject`. */
     deleteByProject(ctx: RequestContext, projectId: string): Promise<void>;
     /**
-     * Cascade hook: drop every org grant whose `granteeId === orgId`. Called by
-     * `deleteOrg`. User grants are identity-scoped and remain. No-op when none
-     * exist.
+     * Cascade hook called by `deleteOrg`: drops every org grant whose
+     * `granteeId === orgId`. User grants are identity-scoped and remain.
      */
     deleteByGranteeOrg(ctx: RequestContext, orgId: string): Promise<void>;
 }

package/dist/platformProjects/interface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"interface.d.ts","sourceRoot":"","sources":["../../src/platformProjects/interface.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEvD;;;;;;;GAOG;AACH,MAAM,WAAW,0BAA0B;IAC1C,aAAa,CAAC,GAAG,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC;IACvF;;;OAGG;IACH,cAAc,CACb,GAAG,EAAE,cAAc,EACnB,UAAU,EAAE,SAAS,MAAM,EAAE,GAC3B,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC;IAChD,MAAM,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxE,MAAM,CAAC,GAAG,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD;;;OAGG;IACH,eAAe,CAAC,GAAG,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE;;;;OAIG;IACH,kBAAkB,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtE"}
+{"version":3,"file":"interface.d.ts","sourceRoot":"","sources":["../../src/platformProjects/interface.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEvD;;;;;;;GAOG;AACH,MAAM,WAAW,0BAA0B;IAC1C,aAAa,CAAC,GAAG,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC;IACvF,4FAA4F;IAC5F,cAAc,CACb,GAAG,EAAE,cAAc,EACnB,UAAU,EAAE,SAAS,MAAM,EAAE,GAC3B,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC;IAChD,MAAM,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxE,MAAM,CAAC,GAAG,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,8CAA8C;IAC9C,eAAe,CAAC,GAAG,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE;;;OAGG;IACH,kBAAkB,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtE"}

package/dist/platformProjects/types.d.ts

@@ -5,16 +5,13 @@ export type PlatformProjectGranteeType = 'org' | 'user';
  *
  * - `granteeType: 'org'`  → applies to all members of that org
  * - `granteeType: 'user'` → applies to that specific user regardless of org
- * - `canSolve: false`     → schema fetch / view only; submit-solve is blocked
- * - `canSolve: true`      → view + solve
- *
- * Grants are hard-deleted on revocation — no soft-delete.
  */
 export interface PlatformProjectGrant {
     id: string;
     projectId: string;
     granteeType: PlatformProjectGranteeType;
     granteeId: string;
+    /** false = view/schema only; true = view + solve. */
     canSolve: boolean;
     createdBy: string;
     createdAt: string;

package/dist/platformProjects/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/platformProjects/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,0BAA0B,GAAG,KAAK,GAAG,MAAM,CAAC;AAExD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,oBAAoB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,0BAA0B,CAAC;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CAClB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/platformProjects/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,0BAA0B,GAAG,KAAK,GAAG,MAAM,CAAC;AAExD;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,0BAA0B,CAAC;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,qDAAqD;IACrD,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CAClB"}

package/dist/projects/interface.d.ts

@@ -12,31 +12,26 @@ export interface IProjectStore {
     getProjectBySlug(ctx: RequestContext, orgId: string, slug: string): Promise<Project | null>;
     createProject(ctx: RequestContext, project: Project): Promise<void>;
     updateProject(ctx: RequestContext, id: string, patch: Partial<Pick<Project, 'name' | 'slug' | 'description' | 'visibility' | 'autoJoinOnUpload'>>): Promise<void>;
-    /**
-     * Soft-delete the project. Cascades to project members and definitions.
-     * Definition versions and share links cascade through the definition delete.
-     */
+    /** Soft-delete. Cascades to project members and definitions (and, through the definition delete, to definition versions and share links). */
     deleteProject(ctx: RequestContext, id: string): Promise<void>;
     /**
-     * Reactivate a previously soft-deleted project identified by its org + slug.
-     * Clears `deleted_at` and reactivates the owner's `project_members` row.
-     * Returns the live project, or `null` if no tombstone with that slug exists.
+     * Reactivates a soft-deleted project by org + slug: clears `deleted_at`
+     * and reactivates the owner's `project_members` row. Returns `null` if no
+     * tombstone with that slug exists.
      *
-     * Use this when `createProject` fails with a duplicate-key error on a slug
-     * that was soft-deleted — the unconditional unique constraint blocks creation
-     * even though `getProjectBySlug` returns null for tombstones.
+     * Use this when `createProject` hits a duplicate-key error on a
+     * soft-deleted slug — the unique constraint isn't conditional, so it
+     * blocks creation even though `getProjectBySlug` returns null for tombstones.
      */
     reactivateProject(ctx: RequestContext, orgId: string, slug: string): Promise<Project | null>;
     listProjectMembers(ctx: RequestContext, projectId: string, opts?: ListOptions): Promise<Page<ProjectMember>>;
     getProjectMember(ctx: RequestContext, projectId: string, userId: string): Promise<ProjectMember | null>;
     /**
-     * One user's membership row across many projects, in a single query.
-     *
-     * The access rules consult a membership row per project, so evaluating
-     * `canView` over a project list otherwise costs one round-trip per project.
-     * Keys are the requested `projectIds`; a project the user is not a member of
-     * maps to `null` rather than being absent, so callers can distinguish
-     * "checked, not a member" from "never asked".
+     * One user's membership row across many projects, in a single query —
+     * avoids one round-trip per project when evaluating `canView` over a list.
+     * Keys are the requested `projectIds`; a project the user isn't a member of
+     * maps to `null` rather than being absent, distinguishing "checked, not a
+     * member" from "never asked".
      */
     getProjectMembersFor(ctx: RequestContext, projectIds: readonly string[], userId: string): Promise<Map<string, ProjectMember | null>>;
     addProjectMember(ctx: RequestContext, member: ProjectMember): Promise<void>;

package/dist/projects/interface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"interface.d.ts","sourceRoot":"","sources":["../../src/projects/interface.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AACzD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD;;;GAGG;AACH,MAAM,WAAW,aAAa;IAE7B,YAAY,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7F,UAAU,CAAC,GAAG,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACrE,gBAAgB,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAC5F,aAAa,CAAC,GAAG,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpE,aAAa,CACZ,GAAG,EAAE,cAAc,EACnB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,OAAO,CACb,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,aAAa,GAAG,YAAY,GAAG,kBAAkB,CAAC,CAClF,GACC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB;;;OAGG;IACH,aAAa,CAAC,GAAG,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D;;;;;;;;OAQG;IACH,iBAAiB,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAG7F,kBAAkB,CACjB,GAAG,EAAE,cAAc,EACnB,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE,WAAW,GAChB,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IAChC,gBAAgB,CACf,GAAG,EAAE,cAAc,EACnB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,GACZ,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IACjC;;;;;;;;OAQG;IACH,oBAAoB,CACnB,GAAG,EAAE,cAAc,EACnB,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,MAAM,EAAE,MAAM,GACZ,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC;IAC9C,gBAAgB,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5E,uBAAuB,CACtB,GAAG,EAAE,cAAc,EACnB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,WAAW,GACf,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,mBAAmB,CAAC,GAAG,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3F"}
+{"version":3,"file":"interface.d.ts","sourceRoot":"","sources":["../../src/projects/interface.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AACzD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD;;;GAGG;AACH,MAAM,WAAW,aAAa;IAE7B,YAAY,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7F,UAAU,CAAC,GAAG,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACrE,gBAAgB,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAC5F,aAAa,CAAC,GAAG,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpE,aAAa,CACZ,GAAG,EAAE,cAAc,EACnB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,OAAO,CACb,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,aAAa,GAAG,YAAY,GAAG,kBAAkB,CAAC,CAClF,GACC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,6IAA6I;IAC7I,aAAa,CAAC,GAAG,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D;;;;;;;;OAQG;IACH,iBAAiB,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAG7F,kBAAkB,CACjB,GAAG,EAAE,cAAc,EACnB,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE,WAAW,GAChB,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IAChC,gBAAgB,CACf,GAAG,EAAE,cAAc,EACnB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,GACZ,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IACjC;;;;;;OAMG;IACH,oBAAoB,CACnB,GAAG,EAAE,cAAc,EACnB,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,MAAM,EAAE,MAAM,GACZ,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC;IAC9C,gBAAgB,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5E,uBAAuB,CACtB,GAAG,EAAE,cAAc,EACnB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,WAAW,GACf,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,mBAAmB,CAAC,GAAG,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3F"}

package/dist/shareLinks/interface.d.ts

@@ -9,22 +9,19 @@ import type { ShareLink } from './types.js';
  * Reads filter `revokedAt IS NULL` defensively.
  */
 export interface IShareLinkStore {
-    /** Insert a new link. Caller has already hashed the raw token. */
+    /** Caller has already hashed the raw token. */
     create(ctx: RequestContext, link: ShareLink): Promise<void>;
     /** Newest first by `createdAt`. Excludes revoked links. */
     listByDefinition(ctx: RequestContext, definitionId: string, opts?: ListOptions): Promise<Page<ShareLink>>;
     getById(ctx: RequestContext, id: string): Promise<ShareLink | null>;
-    /**
-     * Lookup by HMAC hash. Returns null when the link doesn't exist OR is
-     * revoked OR its parent definition is soft-deleted.
-     */
+    /** Returns null when the link doesn't exist, is revoked, or its parent definition is soft-deleted. */
     getByTokenHash(ctx: RequestContext, tokenHash: string): Promise<ShareLink | null>;
     /** Soft-delete (set `revokedAt`). Idempotent. */
     revoke(ctx: RequestContext, id: string): Promise<void>;
     /**
-     * Atomic check-and-increment. Returns the new `solveCount`, or null when
-     * the cap was reached. MUST be a single statement — read-then-write races
-     * under load. `null` maxSolves means uncapped.
+     * Atomic check-and-increment; must be a single statement, since
+     * read-then-write races under load. Returns the new `solveCount`, or
+     * null when the cap was reached. `null` maxSolves means uncapped.
      */
     tryIncrementSolveCount(ctx: RequestContext, id: string): Promise<number | null>;
 }

package/dist/shareLinks/interface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"interface.d.ts","sourceRoot":"","sources":["../../src/shareLinks/interface.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC/B,kEAAkE;IAClE,MAAM,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,2DAA2D;IAC3D,gBAAgB,CACf,GAAG,EAAE,cAAc,EACnB,YAAY,EAAE,MAAM,EACpB,IAAI,CAAC,EAAE,WAAW,GAChB,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IACpE;;;OAGG;IACH,cAAc,CAAC,GAAG,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAClF,iDAAiD;IACjD,MAAM,CAAC,GAAG,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD;;;;OAIG;IACH,sBAAsB,CAAC,GAAG,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAChF"}
+{"version":3,"file":"interface.d.ts","sourceRoot":"","sources":["../../src/shareLinks/interface.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC/B,+CAA+C;IAC/C,MAAM,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,2DAA2D;IAC3D,gBAAgB,CACf,GAAG,EAAE,cAAc,EACnB,YAAY,EAAE,MAAM,EACpB,IAAI,CAAC,EAAE,WAAW,GAChB,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IACpE,sGAAsG;IACtG,cAAc,CAAC,GAAG,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAClF,iDAAiD;IACjD,MAAM,CAAC,GAAG,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD;;;;OAIG;IACH,sBAAsB,CAAC,GAAG,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAChF"}

package/dist/shareLinks/schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../src/shareLinks/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;GAGG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;iBAWrC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC"}
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../src/shareLinks/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;GAGG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;iBAOrC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC"}

package/dist/shareLinks/schemas.js

@@ -8,12 +8,8 @@ export const CreateShareLinkInputSchema = z.object({
     channel: DefinitionChannelSchema.default('live'),
     name: z.string().max(128).optional(),
     allowSolve: z.boolean().default(true),
-    /**
-     * Null explicitly removes the cap. Omitted = apply default — null is the
-     * minter's deliberate "uncap" choice.
-     */
+    /** Null is the minter's deliberate "uncap" choice; omitted applies the default cap. */
     maxSolves: z.number().int().min(1).nullable().optional(),
-    /** Optional ISO timestamp. Resolution compares to `now()`. */
     expiresAt: z.iso.datetime().nullable().optional()
 });
 //# sourceMappingURL=schemas.js.map

package/dist/shareLinks/schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../src/shareLinks/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAEpE;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,OAAO,EAAE,uBAAuB,CAAC,OAAO,CAAC,MAAM,CAAC;IAChD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACpC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACrC;;;OAGG;IACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACxD,8DAA8D;IAC9D,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC"}
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../src/shareLinks/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAEpE;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,OAAO,EAAE,uBAAuB,CAAC,OAAO,CAAC,MAAM,CAAC;IAChD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACpC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACrC,uFAAuF;IACvF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACxD,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC"}

package/dist/shareLinks/types.d.ts

@@ -1,26 +1,25 @@
 import type { DefinitionChannel } from '../definitions/types.js';
 /**
  * Per-definition token granting access to one (definitionId, channel)
- * without an account. The raw token is HMAC-hashed at rest; `tokenHash` is
- * the stored value. The plaintext token is shown to the minter exactly once.
+ * without an account. The plaintext token is shown to the minter exactly
+ * once; `tokenHash` is the HMAC stored at rest.
  */
 export interface ShareLink {
     id: string;
     definitionId: string;
     channel: DefinitionChannel;
-    /** HMAC of the raw token. Lookup hashes the supplied token, then matches. */
     tokenHash: string;
-    /** Optional UX label, e.g. "Demo for Acme". */
+    /** e.g. "Demo for Acme". */
     name?: string;
     createdBy: string;
     createdAt: string;
     /** Null = never expires. */
     expiresAt?: string | null;
-    /** Non-null = revoked. Resolution checks IS NULL. */
+    /** Non-null = revoked. */
     revokedAt?: string | null;
     /** false = view/schema only; true = solve allowed. */
     allowSolve: boolean;
-    /** Per-link cap. Null = unlimited. */
+    /** Null = unlimited. */
     maxSolves?: number | null;
     solveCount: number;
 }

package/dist/shareLinks/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/shareLinks/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAEjE;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,iBAAiB,CAAC;IAC3B,6EAA6E;IAC7E,SAAS,EAAE,MAAM,CAAC;IAClB,+CAA+C;IAC/C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,4BAA4B;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,qDAAqD;IACrD,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,sDAAsD;IACtD,UAAU,EAAE,OAAO,CAAC;IACpB,sCAAsC;IACtC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,OAAO,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/shareLinks/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAEjE;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,iBAAiB,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,4BAA4B;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,4BAA4B;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,0BAA0B;IAC1B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,sDAAsD;IACtD,UAAU,EAAE,OAAO,CAAC;IACpB,wBAAwB;IACxB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,OAAO,CAAC"}

package/dist/shareLinks/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/shareLinks/types.ts"],"names":[],"mappings":"AA4BA;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/shareLinks/types.ts"],"names":[],"mappings":"AA2BA;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,CAAC"}

package/dist/solveCache/interface.d.ts

@@ -4,75 +4,61 @@ import type { RequestContext } from '../context.js';
  * inputKey)` where `inputKey` is a wide (SHA-256) hash of the transformed input
  * tree plus the solve-affecting config subset. A hit skips compute entirely.
  *
- * No backend ships today — see {@link ISolveResultCache} for why the interface
- * outlived the in-process implementation that used to sit behind it.
+ * Design contract:
  *
- * Design contract (decided 2026-07-11):
- *
- * - **Async from day one.** The memory backend returns promises too, so no call
- *   site changes shape when a network store (Redis) arrives later.
- * - **Entries are opaque bytes** — the pre-gzipped response envelope (R6) plus a
- *   small metadata header. The backend never inspects them; memory stores the
- *   same buffer Redis would, so a hit stays near-CPU-free in either backend and
- *   there is no serialization drift between impls.
+ * - **Async from day one.** The in-memory backend returns promises too, so a
+ *   network store (Redis) drops in later without any call site changing shape.
+ * - **Entries are opaque bytes** — the pre-gzipped response envelope plus a
+ *   small metadata header. The backend never inspects them, so a hit stays
+ *   near-CPU-free in either backend and there's no serialization drift between
+ *   implementations.
  * - **Best-effort.** `get` may miss at any time (restart, eviction, network
- *   blip); `set` may silently drop. Correctness NEVER depends on cache presence —
- *   this is what makes backends interchangeable and what makes the
- *   no-TTL/versionId keying safe under any eviction policy.
+ *   blip); `set` may silently drop. Correctness never depends on cache presence
+ *   — this is what makes the no-TTL/versionId keying safe under any eviction
+ *   policy.
  * - **Per-definition quota, passed at write time.** `set` carries
- *   `maxEntriesForDefinition` so the backend holds no policy, only data. Eviction
- *   is LRU *within* the definition: a slider-heavy definition churns only its own
- *   entries, not everyone else's.
- * - **Version keying = no invalidation.** Publishing mints a new `versionId` →
- *   fresh keyspace; rollback re-hits old entries; there is nothing to invalidate.
+ *   `maxEntriesForDefinition` so the backend holds no policy, only data.
+ *   Eviction is LRU *within* the definition: a slider-heavy definition churns
+ *   only its own entries, not everyone else's.
+ * - **Version keying means no invalidation.** Publishing mints a new
+ *   `versionId` → fresh keyspace; rollback re-hits old entries; there's
+ *   nothing to invalidate.
  */
 /** The parts that address a cached solve. All four are folded into the stored key. */
 export interface SolveCacheKey {
     /**
-     * Owning org (defense-in-depth against cross-tenant reads). Null for
-     * remote-URL solves that have no org — those are not cached (the app passes
-     * the cache hook only for org-scoped live-channel solves).
+     * Owning org (defense-in-depth against cross-tenant reads). Always a real
+     * org, never null — the app only builds a `SolveCacheKey` for org-scoped
+     * live-channel solves; remote-URL solves (no org) never reach this path.
      */
     orgId: string;
     /** The definition guid — the quota scope. */
     definitionId: string;
-    /** The immutable version id — no TTL needed, so entries never go stale. */
+    /** The immutable version id. */
     versionId: string;
-    /**
-     * Wide hash of the transformed input tree + solve-affecting config subset
-     * (SHA-256 hex; see the pipeline's key builder). This is the only part that
-     * varies per solve of a given version.
-     */
+    /** SHA-256 hex hash of the transformed input tree + solve-affecting config subset. */
     inputKey: string;
 }
 /** Options for a write; carries the per-definition quota so the backend stays stateless. */
 export interface SolveCacheSetOptions {
     /**
-     * Max cached entries this definition may retain. The backend evicts
-     * LRU-within-definition down to this count on write. A definition's quota is
-     * `solveCacheLimit` on the definition record; a caller must not call `set` when
-     * the resolved quota is `0` (caching off), so this is always `>= 1`.
+     * Max cached entries this definition may retain (`solveCacheLimit` on the
+     * definition record). Always `>= 1` — callers must not call `set` when the
+     * resolved quota is `0` (caching off).
      */
     maxEntriesForDefinition: number;
 }
 /**
- * Durable solve-result cache — the seam a SHARED backend mounts on.
- *
- * There is deliberately no implementation today. The in-process one that used to
- * live behind this interface was redundant: it was a `Map` in the same heap as
- * the scheduler's own response cache, which is consulted first, so it could only
- * ever serve what that cache had already evicted. It was deleted; this interface
- * was not, because it is the piece that is correct for scaling.
+ * Durable solve-result cache — the seam a shared backend mounts on.
  *
- * The reason to keep it: the app runs on `adapter-node`, one long-lived process,
- * so in-process caches work well for a single instance. Run N instances behind a
- * proxy and every in-process hit rate divides by N. When that day comes the answer
- * is Redis behind this interface — async from day one, opaque bytes, best-effort
- * by contract, so a network backend drops in without any call site changing shape.
+ * No implementation ships today: the app runs on `adapter-node`, one
+ * long-lived process, where in-process caching already works. Run N instances
+ * behind a proxy and the in-process hit rate divides by N — that's when Redis
+ * mounts here.
  *
- * Implementations MUST NOT throw — both methods are best-effort on the hot path
- * of every live solve. A backend failure resolves as a miss (`get`) or a silent
- * drop (`set`); it never becomes a request error.
+ * Implementations must not throw — both methods sit on the hot path of every
+ * live solve. A backend failure resolves as a miss (`get`) or a silent drop
+ * (`set`); it never becomes a request error.
  */
 export interface ISolveResultCache {
     /**

package/dist/solveCache/interface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"interface.d.ts","sourceRoot":"","sources":["../../src/solveCache/interface.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,sFAAsF;AACtF,MAAM,WAAW,aAAa;IAC7B;;;;OAIG;IACH,KAAK,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,YAAY,EAAE,MAAM,CAAC;IACrB,2EAA2E;IAC3E,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,QAAQ,EAAE,MAAM,CAAC;CACjB;AAED,4FAA4F;AAC5F,MAAM,WAAW,oBAAoB;IACpC;;;;;OAKG;IACH,uBAAuB,EAAE,MAAM,CAAC;CAChC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,iBAAiB;IACjC;;;OAGG;IACH,GAAG,CAAC,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IACzE;;;OAGG;IACH,GAAG,CACF,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,aAAa,EAClB,KAAK,EAAE,UAAU,EACjB,IAAI,EAAE,oBAAoB,GACxB,OAAO,CAAC,IAAI,CAAC,CAAC;CACjB;AAED;;;;GAIG;AACH,qBAAa,oBAAqB,YAAW,iBAAiB;IACvD,GAAG,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAG1E,GAAG,CACR,IAAI,EAAE,cAAc,EACpB,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,UAAU,EAClB,KAAK,EAAE,oBAAoB,GACzB,OAAO,CAAC,IAAI,CAAC;CAChB"}
+{"version":3,"file":"interface.d.ts","sourceRoot":"","sources":["../../src/solveCache/interface.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,sFAAsF;AACtF,MAAM,WAAW,aAAa;IAC7B;;;;OAIG;IACH,KAAK,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,YAAY,EAAE,MAAM,CAAC;IACrB,gCAAgC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,sFAAsF;IACtF,QAAQ,EAAE,MAAM,CAAC;CACjB;AAED,4FAA4F;AAC5F,MAAM,WAAW,oBAAoB;IACpC;;;;OAIG;IACH,uBAAuB,EAAE,MAAM,CAAC;CAChC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,iBAAiB;IACjC;;;OAGG;IACH,GAAG,CAAC,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IACzE;;;OAGG;IACH,GAAG,CACF,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,aAAa,EAClB,KAAK,EAAE,UAAU,EACjB,IAAI,EAAE,oBAAoB,GACxB,OAAO,CAAC,IAAI,CAAC,CAAC;CACjB;AAED;;;;GAIG;AACH,qBAAa,oBAAqB,YAAW,iBAAiB;IACvD,GAAG,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAG1E,GAAG,CACR,IAAI,EAAE,cAAc,EACpB,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,UAAU,EAClB,KAAK,EAAE,oBAAoB,GACzB,OAAO,CAAC,IAAI,CAAC;CAChB"}

package/dist/solveCache/interface.js.map

@@ -1 +1 @@
-{"version":3,"file":"interface.js","sourceRoot":"","sources":["../../src/solveCache/interface.ts"],"names":[],"mappings":"AAkGA;;;;GAIG;AACH,MAAM,OAAO,oBAAoB;IAChC,KAAK,CAAC,GAAG,CAAC,IAAoB,EAAE,IAAmB;QAClD,OAAO,IAAI,CAAC;IACb,CAAC;IACD,KAAK,CAAC,GAAG,CACR,IAAoB,EACpB,IAAmB,EACnB,MAAkB,EAClB,KAA2B,IACV,CAAC;CACnB"}
+{"version":3,"file":"interface.js","sourceRoot":"","sources":["../../src/solveCache/interface.ts"],"names":[],"mappings":"AAoFA;;;;GAIG;AACH,MAAM,OAAO,oBAAoB;IAChC,KAAK,CAAC,GAAG,CAAC,IAAoB,EAAE,IAAmB;QAClD,OAAO,IAAI,CAAC;IACb,CAAC;IACD,KAAK,CAAC,GAAG,CACR,IAAoB,EACpB,IAAmB,EACnB,MAAkB,EAClB,KAA2B,IACV,CAAC;CACnB"}

package/dist/storage/assetClasses.d.ts

@@ -1,18 +1,12 @@
 /**
- * How a stored asset is allowed to be read. This is a property of the asset
- * *class* (its path prefix), never of the individual file — so a logo and a
- * pricing sheet differ only in which class they belong to, and adding a new
- * asset type is one entry in {@link ASSET_CLASSES} rather than a new route.
+ * How a stored asset is allowed to be read. A property of the asset *class*
+ * (its path prefix), never of the individual file — a new asset type is one
+ * entry in {@link ASSET_CLASSES} rather than a new route.
  *
- * - `public`  — anyone, including logged-out visitors. Served with no auth via
- *   a CDN/public bucket (Supabase) or a shape-gated proxy branch (local). Used
- *   for branding (logo, favicon) that appears on viewer headers and login pages.
- * - `org`     — members of the owning org only. The route resolves the orgId
- *   from the path and runs an org-membership check. Used for org-private docs
- *   (e.g. pricing sheets) once they exist.
- * - `project` — members of the owning project only. The route resolves the
- *   definition guid → its project and runs the project-view check. Used for
- *   definition cover images and other per-definition blobs.
+ * - `public`  — anyone, including logged-out visitors (branding: logo, favicon).
+ * - `org`     — members of the owning org only; route resolves orgId from the path.
+ * - `project` — members of the owning project only; route resolves the
+ *   definition guid to its project (cover images, per-definition blobs).
  */
 export type AssetVisibility = 'public' | 'org' | 'project';
 /**
@@ -37,21 +31,19 @@ export interface AssetMatch {
     readonly scopeId: string | null;
 }
 /**
- * The closed registry of servable asset classes. Order matters only for
- * readability — patterns are mutually exclusive by prefix. Anything that
- * matches no class is unservable (the route 404s), which keeps the proxy
- * default-deny: a new blob type is opt-in by adding an entry here.
+ * The closed registry of servable asset classes. Patterns are mutually
+ * exclusive by prefix, order doesn't matter. Anything matching no class is
+ * unservable (the route 404s) — default-deny, so a new blob type is opt-in.
  */
 export declare const ASSET_CLASSES: readonly AssetClass[];
 /**
- * Classify a storage path into its asset class and scope id, or null when no
- * class matches (or the path is unsafe). Callers — `getPublicUrl` (to pick CDN
- * vs proxy) and the serving route (to pick the auth check) — consult this so
- * URL generation and authorization never drift apart.
+ * Classifies a storage path into its asset class and scope id, or null when
+ * no class matches (or the path is unsafe). `getPublicUrl` and the serving
+ * route both consult this so URL generation and authorization never drift
+ * apart.
  *
- * For `org-branding` the orgId is captured as group 1 but the class is public,
- * so `scopeId` is reported as the captured id only when the class actually
- * authorizes against it (`scope !== 'none'`); public classes report null.
+ * `scopeId` is null for `scope: 'none'` classes even when the pattern
+ * captures an id (e.g. `org-branding` captures orgId but is public).
  */
 export declare function classifyAssetPath(storagePath: string): AssetMatch | null;
 /** True when the path belongs to a `public` asset class (CDN-servable, no auth). */

package/dist/storage/assetClasses.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"assetClasses.d.ts","sourceRoot":"","sources":["../../src/storage/assetClasses.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,KAAK,GAAG,SAAS,CAAC;AAE3D;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,KAAK,GAAG,SAAS,CAAC;AAEpD,MAAM,WAAW,UAAU;IAC1B,kEAAkE;IAClE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,UAAU;IAC1B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,uEAAuE;IACvE,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAoBD;;;;;GAKG;AACH,eAAO,MAAM,aAAa,EAAE,SAAS,UAAU,EAqB9C,CAAC;AAoBF;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAQxE;AAED,oFAAoF;AACpF,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAE9D"}
+{"version":3,"file":"assetClasses.d.ts","sourceRoot":"","sources":["../../src/storage/assetClasses.ts"],"names":[],"mappings":"AAGA;;;;;;;;;GASG;AACH,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,KAAK,GAAG,SAAS,CAAC;AAE3D;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,KAAK,GAAG,SAAS,CAAC;AAEpD,MAAM,WAAW,UAAU;IAC1B,kEAAkE;IAClE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,UAAU;IAC1B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,uEAAuE;IACvE,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAiBD;;;;GAIG;AACH,eAAO,MAAM,aAAa,EAAE,SAAS,UAAU,EAqB9C,CAAC;AAkBF;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAQxE;AAED,oFAAoF;AACpF,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAE9D"}

package/dist/storage/assetClasses.js

@@ -1,23 +1,19 @@
 import { ALL_ORG_ASSET_KINDS } from '../organizations/schemas.js';
 import { COVER_IMAGE_EXTENSIONS } from '../definitions/types.js';
-// Org branding kinds (logo, favicon, …) are the public set. Built from the
-// schema enum so adding a kind there extends this pattern automatically.
+// Built from the schema enum so a new branding kind extends this pattern automatically.
 const BRANDING_KINDS = ALL_ORG_ASSET_KINDS.join('|');
-// Cover extensions are derived from the canonical `COVER_IMAGE_EXTENSIONS`
-// (definitions/types.ts) — strip the leading dot and escape so adding a new
-// cover format there propagates here instead of silently 404ing legit covers.
+// Derived from COVER_IMAGE_EXTENSIONS so a new cover format propagates here
+// instead of silently 404ing legit covers.
 const COVER_EXTS = COVER_IMAGE_EXTENSIONS.map((ext) => ext.replace(/^\./, '').replace(/[.*+?^${}()|[\]\\]/g, '\\$&')).join('|');
-// Reusable segment alphabets. `SAFE_SEGMENT` mirrors the `assertSafeKey`
-// alphabet in the path helpers (traversal/empty segments are rejected
-// separately by `hasUnsafeSegment`); `GUID` is the canonical definition guid
-// shape — kept in sync with `UUID_REGEX` in definitions/schemas.ts.
+// SAFE_SEGMENT mirrors the assertSafeKey alphabet in the path helpers
+// (traversal/empty segments are rejected separately by hasUnsafeSegment);
+// GUID is kept in sync with UUID_REGEX in definitions/schemas.ts.
 const SAFE_SEGMENT = String.raw `[A-Za-z0-9._-]+`;
 const GUID = String.raw `[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}`;
 /**
- * The closed registry of servable asset classes. Order matters only for
- * readability — patterns are mutually exclusive by prefix. Anything that
- * matches no class is unservable (the route 404s), which keeps the proxy
- * default-deny: a new blob type is opt-in by adding an entry here.
+ * The closed registry of servable asset classes. Patterns are mutually
+ * exclusive by prefix, order doesn't matter. Anything matching no class is
+ * unservable (the route 404s) — default-deny, so a new blob type is opt-in.
  */
 export const ASSET_CLASSES = [
     {
@@ -40,14 +36,12 @@ export const ASSET_CLASSES = [
     }
 ];
 /**
- * Reject any path that contains a traversal, empty, or backslash segment
- * *before* it can match a class. The class patterns use a permissive segment
- * alphabet (`[A-Za-z0-9._-]+`) so dotted ids and filenames work, but that
- * alphabet also admits a bare `.` or `..` *as a whole segment* — which would
- * let `orgs/../branding/logo.webp` classify as public branding with `..`
- * captured as the orgId. This mirrors `assertSafeKey` in the path builders:
- * the registry is the read-side gate, those are the write-side gate, and both
- * forbid the same segments so a path that can't be *written* can't be *read*.
+ * Rejects traversal, empty, or backslash segments before a path can match a
+ * class. The permissive segment alphabet (`[A-Za-z0-9._-]+`) admits a bare
+ * `.` or `..` as a whole segment, which would otherwise let
+ * `orgs/../branding/logo.webp` classify as public branding with `..`
+ * captured as the orgId. Mirrors `assertSafeKey` on the write side, so a path
+ * that can't be written can't be read either.
  */
 function hasUnsafeSegment(storagePath) {
     if (storagePath.includes('\\'))
@@ -59,14 +53,13 @@ function hasUnsafeSegment(storagePath) {
     return false;
 }
 /**
- * Classify a storage path into its asset class and scope id, or null when no
- * class matches (or the path is unsafe). Callers — `getPublicUrl` (to pick CDN
- * vs proxy) and the serving route (to pick the auth check) — consult this so
- * URL generation and authorization never drift apart.
+ * Classifies a storage path into its asset class and scope id, or null when
+ * no class matches (or the path is unsafe). `getPublicUrl` and the serving
+ * route both consult this so URL generation and authorization never drift
+ * apart.
  *
- * For `org-branding` the orgId is captured as group 1 but the class is public,
- * so `scopeId` is reported as the captured id only when the class actually
- * authorizes against it (`scope !== 'none'`); public classes report null.
+ * `scopeId` is null for `scope: 'none'` classes even when the pattern
+ * captures an id (e.g. `org-branding` captures orgId but is public).
  */
 export function classifyAssetPath(storagePath) {
     if (hasUnsafeSegment(storagePath))

package/dist/storage/assetClasses.js.map

@@ -1 +1 @@
-{"version":3,"file":"assetClasses.js","sourceRoot":"","sources":["../../src/storage/assetClasses.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AA4CjE,2EAA2E;AAC3E,yEAAyE;AACzE,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAErD,2EAA2E;AAC3E,4EAA4E;AAC5E,8EAA8E;AAC9E,MAAM,UAAU,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACrD,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAC7D,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEZ,yEAAyE;AACzE,sEAAsE;AACtE,6EAA6E;AAC7E,oEAAoE;AACpE,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAA,iBAAiB,CAAC;AACjD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAA,8DAA8D,CAAC;AAEtF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,aAAa,GAA0B;IACnD;QACC,EAAE,EAAE,cAAc;QAClB,UAAU,EAAE,QAAQ;QACpB,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,IAAI,MAAM,CAClB,MAAM,CAAC,GAAG,CAAA,WAAW,YAAY,mBAAmB,cAAc,UAAU,CAC5E;KACD;IACD;QACC,EAAE,EAAE,aAAa;QACjB,UAAU,EAAE,KAAK;QACjB,KAAK,EAAE,KAAK;QACZ,OAAO,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,WAAW,YAAY,eAAe,YAAY,GAAG,CAAC;KACpF;IACD;QACC,EAAE,EAAE,kBAAkB;QACtB,UAAU,EAAE,SAAS;QACrB,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,kBAAkB,IAAI,gBAAgB,UAAU,IAAI,EAAE,GAAG,CAAC;KACxF;CACD,CAAC;AAEF;;;;;;;;;GASG;AACH,SAAS,gBAAgB,CAAC,WAAmB;IAC5C,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,KAAK,MAAM,OAAO,IAAI,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9C,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;IACxE,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,WAAmB;IACpD,IAAI,gBAAgB,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxC,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC;IAC9E,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,iBAAiB,CAAC,WAAmB;IACpD,OAAO,iBAAiB,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC;AACtE,CAAC"}
+{"version":3,"file":"assetClasses.js","sourceRoot":"","sources":["../../src/storage/assetClasses.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAsCjE,wFAAwF;AACxF,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAErD,4EAA4E;AAC5E,2CAA2C;AAC3C,MAAM,UAAU,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACrD,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAC7D,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEZ,sEAAsE;AACtE,0EAA0E;AAC1E,kEAAkE;AAClE,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAA,iBAAiB,CAAC;AACjD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAA,8DAA8D,CAAC;AAEtF;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAA0B;IACnD;QACC,EAAE,EAAE,cAAc;QAClB,UAAU,EAAE,QAAQ;QACpB,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,IAAI,MAAM,CAClB,MAAM,CAAC,GAAG,CAAA,WAAW,YAAY,mBAAmB,cAAc,UAAU,CAC5E;KACD;IACD;QACC,EAAE,EAAE,aAAa;QACjB,UAAU,EAAE,KAAK;QACjB,KAAK,EAAE,KAAK;QACZ,OAAO,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,WAAW,YAAY,eAAe,YAAY,GAAG,CAAC;KACpF;IACD;QACC,EAAE,EAAE,kBAAkB;QACtB,UAAU,EAAE,SAAS;QACrB,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,kBAAkB,IAAI,gBAAgB,UAAU,IAAI,EAAE,GAAG,CAAC;KACxF;CACD,CAAC;AAEF;;;;;;;GAOG;AACH,SAAS,gBAAgB,CAAC,WAAmB;IAC5C,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,KAAK,MAAM,OAAO,IAAI,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9C,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;IACxE,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,WAAmB;IACpD,IAAI,gBAAgB,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxC,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC;IAC9E,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,iBAAiB,CAAC,WAAmB;IACpD,OAAO,iBAAiB,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC;AACtE,CAAC"}

package/dist/storage/cacheBust.d.ts

@@ -1,21 +1,19 @@
 /**
- * Append a cache-busting token to a stored-asset URL.
+ * Appends a cache-busting token to a stored-asset URL.
  *
- * Mutable blobs are overwritten **in place** (`IStorageProvider.put` is upsert),
- * so a re-upload keeps the same storage path — and therefore the same public
- * URL. A browser/CDN that cached the old bytes under that URL keeps serving them
- * until the TTL expires, which reads as "the replace didn't work". Appending a
- * token that changes only when the content changes gives each new version a
- * distinct URL (forcing a refetch) while letting unchanged assets stay cached.
+ * `IStorageProvider.put` upserts, so a re-upload keeps the same storage path
+ * and public URL — a browser/CDN caching the old bytes under that URL keeps
+ * serving them past the TTL, which reads as "the replace didn't work."
+ * Appending a token that only changes with the content gives each version a
+ * distinct URL, forcing a refetch, while unchanged assets stay cached.
  *
- * Generic over asset kind: the caller supplies the token from whatever it has
- * that tracks the blob's version — a content hash, the owning record's
- * `updatedAt`, a version counter. The serving route ignores the query string
- * (SvelteKit's `[...path]` param never includes it), so this is purely a
- * client-cache key and needs no route support.
+ * Generic over asset kind — pass whatever tracks the blob's version (content
+ * hash, `updatedAt`, a counter). The serving route ignores the query string
+ * (SvelteKit's `[...path]` param never includes it), so this needs no route
+ * support.
  *
- * Empty/whitespace tokens are dropped (returns the URL unchanged) so a missing
- * token degrades to "no cache-bust" rather than `?v=`.
+ * Empty/whitespace tokens return the URL unchanged, so a missing token
+ * degrades to "no cache-bust" rather than `?v=`.
  */
 export declare function withCacheBust(url: string, token: string | number | undefined | null): string;
 //# sourceMappingURL=cacheBust.d.ts.map

package/dist/storage/cacheBust.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cacheBust.d.ts","sourceRoot":"","sources":["../../src/storage/cacheBust.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,CAM5F"}
+{"version":3,"file":"cacheBust.d.ts","sourceRoot":"","sources":["../../src/storage/cacheBust.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,CAM5F"}