@sentropic/artifacts 0.2.3 → 0.2.5

package/dist/server/summary.d.ts

@@ -0,0 +1,39 @@
+import { type ArtifactAcl } from './access.js';
+export declare function artifactSummary(input: {
+    artifactId: string;
+    acl: ArtifactAcl;
+    actorId: string;
+    state: string;
+    current?: {
+        releaseId: string;
+        manifest: string;
+    };
+    urls?: (artifactId: string, releaseId: string) => {
+        stableUrl: string;
+        pinnedUrl: string;
+    };
+    approved?: (principalId: string) => boolean;
+}): {
+    permissions: {
+        read: boolean;
+        source: boolean;
+        write: boolean;
+        manage: boolean;
+    };
+    icon?: string | null | undefined;
+    description?: string | undefined;
+    title?: string | undefined;
+    artifactId: string;
+    bindingName: string | null;
+    ownerId: string;
+    storageScopeId: string | undefined;
+    state: string;
+    isPublic: boolean;
+    withdrawn: boolean;
+    createdAt: string | null;
+    updatedAt: string | null;
+    currentReleaseId: string | null;
+    digest: string | null;
+    stableUrl: string | null;
+    pinnedUrl: string | null;
+};

package/dist/server/summary.js

@@ -0,0 +1,17 @@
+import { parseManifest } from '../codecs.js';
+import { evaluateAccess } from './access.js';
+export function artifactSummary(input) {
+    const { artifactId, acl, actorId, state, current } = input;
+    const urls = input.urls?.(artifactId, current?.releaseId ?? '');
+    const owner = acl.ownerId === actorId;
+    return { artifactId, bindingName: acl.bindingName ?? null, ownerId: acl.ownerId,
+        storageScopeId: acl.storageScopeId, state, isPublic: acl.isPublic, withdrawn: state === 'withdrawn',
+        createdAt: acl.createdAt ?? null, updatedAt: acl.updatedAt ?? null,
+        currentReleaseId: current?.releaseId ?? null, digest: current ? parseManifest(current.manifest).digest ?? null : null,
+        stableUrl: urls?.stableUrl ?? null, pinnedUrl: current ? urls?.pinnedUrl ?? null : null,
+        ...(acl.title === undefined ? {} : { title: acl.title }),
+        ...(acl.description === undefined ? {} : { description: acl.description }),
+        ...(acl.icon === undefined ? {} : { icon: acl.icon }),
+        permissions: { read: evaluateAccess(acl, actorId, 'read', input.approved),
+            source: evaluateAccess(acl, actorId, 'source', input.approved), write: owner, manage: owner } };
+}

package/migrations/0004_terminal_controls.sql

@@ -0,0 +1,47 @@
+-- Terminal deletion retains the identity and receipts; physical purge remains host policy.
+ALTER TABLE artifacts.artifacts ADD COLUMN IF NOT EXISTS terminal_deleted_at TIMESTAMPTZ;
+ALTER TABLE artifacts.artifacts ADD COLUMN IF NOT EXISTS updated_at TIMESTAMPTZ;
+-- Defaults affect new identities only; historical modification times remain unknown.
+ALTER TABLE artifacts.artifacts ALTER COLUMN updated_at SET DEFAULT now();
+
+CREATE OR REPLACE FUNCTION artifacts.reject_terminal_restore() RETURNS trigger LANGUAGE plpgsql AS $$
+BEGIN
+  IF TG_OP = 'DELETE' THEN
+    IF OLD.terminal_deleted_at IS NOT NULL THEN RAISE EXCEPTION 'terminal artifact' USING ERRCODE = '23514'; END IF;
+    RETURN OLD;
+  END IF;
+  IF OLD.terminal_deleted_at IS NOT NULL AND
+    (NEW.terminal_deleted_at IS DISTINCT FROM OLD.terminal_deleted_at OR NEW.lifecycle_state NOT IN ('deleted', 'purged')
+      OR NEW.renewed_at IS DISTINCT FROM OLD.renewed_at) THEN
+    RAISE EXCEPTION 'terminal artifact' USING ERRCODE = '23514';
+  END IF;
+  RETURN NEW;
+END $$;
+DROP TRIGGER IF EXISTS terminal_restore_guard ON artifacts.artifacts;
+CREATE TRIGGER terminal_restore_guard BEFORE UPDATE ON artifacts.artifacts
+FOR EACH ROW EXECUTE FUNCTION artifacts.reject_terminal_restore();
+DROP TRIGGER IF EXISTS terminal_identity_guard ON artifacts.artifacts;
+CREATE TRIGGER terminal_identity_guard BEFORE DELETE ON artifacts.artifacts
+FOR EACH ROW EXECUTE FUNCTION artifacts.reject_terminal_restore();
+
+CREATE OR REPLACE FUNCTION artifacts.reject_terminal_publication() RETURNS trigger LANGUAGE plpgsql AS $$
+BEGIN
+  PERFORM id FROM artifacts.artifacts WHERE id = NEW.artifact_id AND terminal_deleted_at IS NULL FOR KEY SHARE;
+  IF NOT FOUND THEN RAISE EXCEPTION 'terminal artifact' USING ERRCODE = '23514'; END IF;
+  RETURN NEW;
+END $$;
+DROP TRIGGER IF EXISTS terminal_release_guard ON artifacts.releases;
+CREATE TRIGGER terminal_release_guard BEFORE INSERT ON artifacts.releases
+FOR EACH ROW EXECUTE FUNCTION artifacts.reject_terminal_publication();
+
+CREATE OR REPLACE FUNCTION artifacts.record_publication_update() RETURNS trigger LANGUAGE plpgsql AS $$
+BEGIN
+  UPDATE artifacts.artifacts SET updated_at = NEW.created_at WHERE id = NEW.artifact_id;
+  RETURN NEW;
+END $$;
+DROP TRIGGER IF EXISTS publication_updated_at ON artifacts.releases;
+CREATE TRIGGER publication_updated_at AFTER INSERT ON artifacts.releases
+FOR EACH ROW EXECUTE FUNCTION artifacts.record_publication_update();
+DROP TRIGGER IF EXISTS terminal_pointer_guard ON artifacts.artifact_current;
+CREATE TRIGGER terminal_pointer_guard BEFORE INSERT OR UPDATE ON artifacts.artifact_current
+FOR EACH ROW EXECUTE FUNCTION artifacts.reject_terminal_publication();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sentropic/artifacts",
-  "version": "0.2.3",
+  "version": "0.2.5",
   "description": "Generic configurable artifacts MCP and artifact service: StorageScope/Artifact/Binding/Release model, canonical manifests, object authorization, idempotent intents (spec-v8 §9).",
   "type": "module",
   "license": "MIT",
@@ -45,6 +45,10 @@
       "types": "./dist/adapters/postgres-activation.d.ts",
       "import": "./dist/adapters/postgres-activation.js"
     },
+    "./adapters/postgres-activation/vectors": {
+      "types": "./dist/adapters/postgres-activation-vectors.d.ts",
+      "import": "./dist/adapters/postgres-activation-vectors.js"
+    },
     "./sql/*": "./sql/*",
     "./migrations/*": "./migrations/*",
     "./server/ports": {
@@ -99,6 +103,18 @@
       "types": "./dist/server/sources.d.ts",
       "import": "./dist/server/sources.js"
     },
+    "./server/source-read": {
+      "types": "./dist/server/source-read.d.ts",
+      "import": "./dist/server/source-read.js"
+    },
+    "./server/management": {
+      "types": "./dist/server/management.d.ts",
+      "import": "./dist/server/management.js"
+    },
+    "./adapters/postgres-management": {
+      "types": "./dist/adapters/postgres-management.d.ts",
+      "import": "./dist/adapters/postgres-management.js"
+    },
     "./server/fork": {
       "types": "./dist/server/fork.d.ts",
       "import": "./dist/server/fork.js"
@@ -177,6 +193,7 @@
     "docs/migration-l6.md",
     "examples/radar-commit-setup.ts",
     "README.md",
+    "CHANGELOG.md",
     "LICENSE"
   ],
   "publishConfig": {