@sentropic/artifacts 0.2.5 → 0.2.6

package/dist/server/versions.js

@@ -0,0 +1,39 @@
+import { ArtifactOperationError } from './failures.js';
+const order = (a, b) => a.createdAt.localeCompare(b.createdAt) || a.releaseId.localeCompare(b.releaseId);
+/** A cursor fixes the release boundary and is bound to the authorized artifact and scope. */
+export async function artifactVersions(input) {
+    const releases = [...input.releases].sort((a, b) => order(b, a));
+    let snapshot = releases[0];
+    let after;
+    if (input.cursor !== undefined) {
+        try {
+            const parsed = JSON.parse(Buffer.from(input.cursor, 'base64url').toString('utf8'));
+            const position = (value) => value && typeof value.createdAt === 'string' &&
+                typeof value.releaseId === 'string' && releases.some(release => order(release, value) === 0);
+            if (parsed.artifactId !== input.artifactId || parsed.storageScopeId !== input.storageScopeId ||
+                !position(parsed.snapshot) || !position(parsed.after) || order(parsed.after, parsed.snapshot) > 0)
+                throw new Error();
+            snapshot = parsed.snapshot;
+            after = parsed.after;
+        }
+        catch {
+            throw new ArtifactOperationError('invalid_request');
+        }
+    }
+    const available = releases.filter(release => snapshot && order(release, snapshot) <= 0 &&
+        (!after || order(release, after) < 0));
+    const page = available.slice(0, input.limit ?? 20);
+    const versions = await Promise.all(page.map(async (release) => {
+        const state = await input.state(release.releaseId);
+        return { releaseId: release.releaseId, createdAt: release.createdAt, state,
+            authorPrincipalId: release.authorPrincipalId ?? null, parentReleaseId: release.parentReleaseId ?? null,
+            revertedFromReleaseId: release.revertedFromReleaseId ?? null, digest: release.manifestDigest,
+            isCurrent: release.releaseId === input.currentReleaseId,
+            pinnedUrl: state === 'purged' ? null : input.urls?.(input.artifactId, release.releaseId).pinnedUrl ?? null };
+    }));
+    const last = page.at(-1);
+    const position = (value) => ({ createdAt: value.createdAt, releaseId: value.releaseId });
+    return { artifactId: input.artifactId, currentReleaseId: input.currentReleaseId, versions,
+        nextCursor: last && available.length > page.length ? Buffer.from(JSON.stringify({ artifactId: input.artifactId,
+            storageScopeId: input.storageScopeId, snapshot: position(snapshot), after: position(last) })).toString('base64url') : null };
+}

package/docs/migration-l6.md

@@ -108,7 +108,14 @@ claim completion. Do not pass a raw pool to transaction-scoped deletion claims.
 ## Durable state and failures
 
 Stop old writers before enabling the new composition. Apply migrations
-`0001_artifacts.sql`, `0002_lifecycle.sql` and additive `0003_coordinator.sql`.
+`0001_artifacts.sql`, `0002_lifecycle.sql`, additive `0003_coordinator.sql`,
+`0004_terminal_controls.sql`, and `0005_metadata.sql` (metadata and release lineage).
+Preserve the existing host journal prefix, including activation assets, on upgrades.
+
+R2 bindings explicitly select `profileRevisionId`, `requireExpectedCurrentReleaseId`
+and `resultEnvelopeVersion`. The compatible p0b profile keeps full-bundle publication
+and root results. The CAS switchover can keep result version 1; activate part 1 only
+after qualification of result version 2. IMMO owns both switchovers and activation.
 Preserve historical rows and objects. Supply `legacyRecords`, using
 `createPostgresLegacyArtifactRecords(pool)` for PostgreSQL. An empty inventory
 reader is appropriate only for a verified fresh store.

package/migrations/0005_metadata.sql

@@ -0,0 +1,14 @@
+-- Parity P0 — artifact display metadata (title/description/icon).
+--
+-- Additive upgrade after 0004_terminal_controls: no column is dropped or narrowed, existing
+-- rows keep working (default '{}' preserves "no metadata" semantics). The host
+-- applies this file through its existing migration journal.
+
+ALTER TABLE artifacts.artifacts
+  ADD COLUMN IF NOT EXISTS metadata JSONB NOT NULL DEFAULT '{}'::jsonb;
+
+-- Historical authors and lineage remain unknown; populate these on new commits only.
+ALTER TABLE artifacts.releases
+  ADD COLUMN IF NOT EXISTS author_principal_id TEXT,
+  ADD COLUMN IF NOT EXISTS parent_release_id UUID,
+  ADD COLUMN IF NOT EXISTS reverted_from_release_id UUID;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sentropic/artifacts",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "description": "Generic configurable artifacts MCP and artifact service: StorageScope/Artifact/Binding/Release model, canonical manifests, object authorization, idempotent intents (spec-v8 §9).",
   "type": "module",
   "license": "MIT",
@@ -208,7 +208,7 @@
   },
   "peerDependencies": {
     "@aws-sdk/client-s3": "^3.980.0",
-    "@sentropic/mcp-platform": ">=0.3.0 <0.5.0",
+    "@sentropic/mcp-platform": ">=0.4.1 <0.5.0",
     "pg": "^8.12.0"
   },
   "peerDependenciesMeta": {