canopycms 0.0.67-int.90 → 0.0.67

package/dist/api/schema.js

@@ -1,11 +1,6 @@
 /**
  * Schema API - endpoints for managing collection structure.
  *
- * Provides CRUD operations for:
- * - Collections (create, read, update, delete)
- * - Entry types (add, update, remove)
- * - Ordering (update item order within collections)
- *
  * All mutations require Admin group membership.
  * Schema changes are branch-specific (like content edits).
  */
@@ -107,9 +102,6 @@ function toWireFlatSchema(items, registry) {
         };
     });
 }
-// ============================================================================
-// Zod Schemas for Params
-// ============================================================================
 const branchParamsSchema = z.object({
     branch: branchNameSchema,
 });
@@ -130,9 +122,6 @@ const updateEntryTypeBodySchema = updateEntryTypeInputSchema;
 const updateOrderBodySchema = z.object({
     order: z.array(z.string()),
 });
-// ============================================================================
-// Helper Functions
-// ============================================================================
 /**
  * Get a SchemaOps instance for a branch
  */
@@ -147,28 +136,16 @@ async function getSchemaOps(ctx, branchName) {
     return { store, branchRoot: context.branchRoot };
 }
 /**
- * `collectionPath` (C5, August 2026 baseline review follow-up): this used to
- * decode the catch-all param itself, because http/router.ts's matchRoute did
- * not decode catch-all segments at all - only `:param` ones. matchRoute now
- * decodes every matched param exactly once, uniformly for `:param` and
- * catch-all alike, and `collectionParamsSchema`'s `logicalPathSchema`
- * already re-validates that single decoded value for traversal before this
- * handler ever runs. Decoding again here would be a second, unauthorized
- * decode pass on an already-decoded value - exactly the "double-encoding
- * smuggles a traversal sequence" hazard this function's own re-validation
- * was written to defend against, just relocated. This is now a passthrough;
- * kept as a named function (rather than inlined at each call site) so a
- * future re-validation need has one place to add it back.
+ * `collectionPath` is already decoded exactly once by matchRoute (uniformly for `:param` and
+ * catch-all segments) and re-validated for traversal by `collectionParamsSchema`'s
+ * `logicalPathSchema` before this handler runs. Decoding it again here would be a second,
+ * unauthorized decode pass — the "double-encoding smuggles a traversal sequence" hazard this
+ * function exists to guard against. A passthrough today; kept as a named function so a future
+ * re-validation need has one place to add it back.
  */
 function decodeCollectionPath(collectionPath) {
     return { ok: true, path: collectionPath };
 }
-// ============================================================================
-// Handlers
-// ============================================================================
-/**
- * GET /:branch/schema - Get full schema tree
- */
 const getSchemaHandler = async (gc, ctx, _req, _params) => {
     const { branchContext } = gc;
     return {
@@ -180,10 +157,6 @@ const getSchemaHandler = async (gc, ctx, _req, _params) => {
         },
     };
 };
-/**
- * GET /:branch/schema/collection/...collectionPath - Get single collection details
- * Note: Uses 'collection' (singular) with catch-all to support paths with slashes
- */
 const getCollectionHandler = async (gc, ctx, req, params) => {
     const { branchContext } = gc;
     const decodedPath = decodeCollectionPath(params.collectionPath);
@@ -246,9 +219,6 @@ const getCollectionHandler = async (gc, ctx, req, params) => {
         data: { collection, entryTypesWithUsage },
     };
 };
-/**
- * POST /:branch/schema/collections - Create collection
- */
 const createCollectionHandler = async (_gc, ctx, req, params, body) => {
     const storeResult = await getSchemaOps(ctx, params.branch);
     if ('error' in storeResult) {
@@ -273,10 +243,6 @@ const createCollectionHandler = async (_gc, ctx, req, params, body) => {
         };
     }
 };
-/**
- * PATCH /:branch/schema/collection/...collectionPath - Update collection
- * Note: Uses 'collection' (singular) with catch-all to support paths with slashes
- */
 const updateCollectionHandler = async (_gc, ctx, req, params, body) => {
     const storeResult = await getSchemaOps(ctx, params.branch);
     if ('error' in storeResult) {
@@ -306,10 +272,6 @@ const updateCollectionHandler = async (_gc, ctx, req, params, body) => {
         };
     }
 };
-/**
- * DELETE /:branch/schema/collection/...collectionPath - Delete collection
- * Note: Uses 'collection' (singular) with catch-all to support paths with slashes
- */
 const deleteCollectionHandler = async (_gc, ctx, req, params) => {
     const storeResult = await getSchemaOps(ctx, params.branch);
     if ('error' in storeResult) {
@@ -339,10 +301,6 @@ const deleteCollectionHandler = async (_gc, ctx, req, params) => {
         };
     }
 };
-/**
- * POST /:branch/schema/entry-types/...collectionPath - Add entry type
- * Note: Restructured URL with catch-all at end to support paths with slashes
- */
 const addEntryTypeHandler = async (_gc, ctx, req, params, body) => {
     const storeResult = await getSchemaOps(ctx, params.branch);
     if ('error' in storeResult) {
@@ -372,10 +330,6 @@ const addEntryTypeHandler = async (_gc, ctx, req, params, body) => {
         };
     }
 };
-/**
- * PATCH /:branch/schema/entry-types/:entryTypeName/...collectionPath - Update entry type
- * Note: Restructured URL with entry type name before catch-all path
- */
 const updateEntryTypeHandler = async (_gc, ctx, req, params, body) => {
     const storeResult = await getSchemaOps(ctx, params.branch);
     if ('error' in storeResult) {
@@ -386,13 +340,10 @@ const updateEntryTypeHandler = async (_gc, ctx, req, params, body) => {
         return { ok: false, status: 400, error: decodedPath.error };
     }
     const collectionPath = decodedPath.path;
-    // Note: the breaking-change usage guard (blocking format/schema changes
-    // while entries still use this type) used to live here, checked BEFORE
-    // calling the store. It moved into SchemaOps.updateEntryType itself so the
-    // usage count is read under the same schema lock that guards the write —
-    // otherwise a concurrent write could land a new entry between this
-    // handler's count and its call to the store (TOCTOU). See
-    // schema-store.ts's updateEntryTypeInner.
+    // The breaking-change usage guard (blocking format/schema changes while entries still use this
+    // type) lives in SchemaOps.updateEntryType, not here: the usage count must be read under the
+    // same schema lock that guards the write, or a concurrent write could land a new entry between
+    // this handler's count and the store call (TOCTOU). See schema-store.ts's updateEntryTypeInner.
     try {
         await storeResult.store.updateEntryType(collectionPath, params.entryTypeName, body);
         return {
@@ -412,10 +363,6 @@ const updateEntryTypeHandler = async (_gc, ctx, req, params, body) => {
         };
     }
 };
-/**
- * DELETE /:branch/schema/entry-types/:entryTypeName/...collectionPath - Remove entry type
- * Note: Restructured URL with entry type name before catch-all path
- */
 const removeEntryTypeHandler = async (_gc, ctx, req, params) => {
     const storeResult = await getSchemaOps(ctx, params.branch);
     if ('error' in storeResult) {
@@ -445,10 +392,6 @@ const removeEntryTypeHandler = async (_gc, ctx, req, params) => {
         };
     }
 };
-/**
- * PATCH /:branch/schema/order/...collectionPath - Update item order
- * Note: Restructured URL with catch-all at end to support paths with slashes
- */
 const updateOrderHandler = async (_gc, ctx, req, params, body) => {
     const storeResult = await getSchemaOps(ctx, params.branch);
     if ('error' in storeResult) {
@@ -478,9 +421,6 @@ const updateOrderHandler = async (_gc, ctx, req, params, body) => {
         };
     }
 };
-/**
- * POST /:branch/schema/invalidate-cache - Invalidate schema cache (for debugging/manual refresh)
- */
 const invalidateSchemaCacheHandler = async (gc, ctx, _req, _params) => {
     const { branchContext } = gc;
     try {
@@ -502,11 +442,9 @@ const invalidateSchemaCacheHandler = async (gc, ctx, _req, _params) => {
         };
     }
 };
-// ============================================================================
-// Route Definitions
-// ============================================================================
 /**
  * GET /:branch/schema - Get full schema
+ * @internal Exported for tests.
  */
 export const getSchema = defineEndpoint({
     namespace: 'schema',
@@ -523,6 +461,7 @@ export const getSchema = defineEndpoint({
 /**
  * GET /:branch/schema/collection/...collectionPath - Get single collection
  * Note: Uses 'collection' (singular) with catch-all to support paths with slashes
+ * @internal Exported for tests.
  */
 export const getCollection = defineEndpoint({
     namespace: 'schema',
@@ -538,6 +477,7 @@ export const getCollection = defineEndpoint({
 });
 /**
  * POST /:branch/schema/collections - Create collection
+ * @internal Exported for tests.
  */
 export const createCollection = defineEndpoint({
     namespace: 'schema',
@@ -560,6 +500,7 @@ export const createCollection = defineEndpoint({
 /**
  * PATCH /:branch/schema/collection/...collectionPath - Update collection
  * Note: Uses 'collection' (singular) with catch-all to support paths with slashes
+ * @internal Exported for tests.
  */
 export const updateCollection = defineEndpoint({
     namespace: 'schema',
@@ -578,6 +519,7 @@ export const updateCollection = defineEndpoint({
 /**
  * DELETE /:branch/schema/collection/...collectionPath - Delete collection
  * Note: Uses 'collection' (singular) with catch-all to support paths with slashes
+ * @internal Exported for tests.
  */
 export const deleteCollection = defineEndpoint({
     namespace: 'schema',
@@ -594,6 +536,7 @@ export const deleteCollection = defineEndpoint({
 /**
  * POST /:branch/schema/entry-types/...collectionPath - Add entry type
  * Note: Restructured URL with catch-all at end to support paths with slashes
+ * @internal Exported for tests.
  */
 export const addEntryType = defineEndpoint({
     namespace: 'schema',
@@ -612,6 +555,7 @@ export const addEntryType = defineEndpoint({
 /**
  * PATCH /:branch/schema/entry-types/:entryTypeName/...collectionPath - Update entry type
  * Note: Restructured URL with entry type name before catch-all path
+ * @internal Exported for tests.
  */
 export const updateEntryType = defineEndpoint({
     namespace: 'schema',
@@ -630,6 +574,7 @@ export const updateEntryType = defineEndpoint({
 /**
  * DELETE /:branch/schema/entry-types/:entryTypeName/...collectionPath - Remove entry type
  * Note: Restructured URL with entry type name before catch-all path
+ * @internal Exported for tests.
  */
 export const removeEntryType = defineEndpoint({
     namespace: 'schema',
@@ -646,6 +591,7 @@ export const removeEntryType = defineEndpoint({
 /**
  * PATCH /:branch/schema/order/...collectionPath - Update item order
  * Note: Restructured URL with catch-all at end to support paths with slashes
+ * @internal Exported for tests.
  */
 export const updateOrder = defineEndpoint({
     namespace: 'schema',
@@ -664,7 +610,7 @@ export const updateOrder = defineEndpoint({
 /**
  * POST /:branch/schema/invalidate-cache - Invalidate schema cache
  */
-export const invalidateSchemaCache = defineEndpoint({
+const invalidateSchemaCache = defineEndpoint({
     namespace: 'schema',
     name: 'invalidateSchemaCache',
     method: 'POST',

package/dist/api/settings-helpers.js

@@ -7,11 +7,10 @@ import { sanitizeErrorMessage } from '../utils/error.js';
 export async function getSettingsBranchContext(ctx) {
     const mode = ctx.services.config.mode;
     const strategy = operatingStrategy(mode);
-    // Determine which branch name to use (for git operations). Pass the whole
-    // config (not a hand-picked subset) so deploymentName flows through too -
-    // omitting it here used to make this always compute the mode-default
-    // settings branch, ignoring any deploymentName/CANOPYCMS_DEPLOYMENT_NAME
-    // resolution (see resolveDeploymentName in operating-mode/deployment-name.ts).
+    // Pass the whole config, not a hand-picked subset, so deploymentName flows
+    // through (see resolveDeploymentName in operating-mode/deployment-name.ts)
+    // -- a subset silently computes the mode-default settings branch instead,
+    // ignoring any deploymentName/CANOPYCMS_DEPLOYMENT_NAME resolution.
     const branchName = strategy.getSettingsBranchName(ctx.services.config);
     // Both prod and dev use a separate settings branch
     const settingsRoot = await ctx.services.getSettingsBranchRoot();

package/dist/api/types.d.ts

@@ -11,16 +11,11 @@ export interface ApiContext {
      * Load a branch context for the requested branch name.
      * Can be backed by BranchRegistry + BranchMetadataFileManager.
      *
-     * @param branchName - Name of the branch to load
-     * @param options - Optional configuration
      * @param options.loadSchema - If true, loads per-branch schema into context.flatSchema
      */
     getBranchContext: (branchName: string, options?: {
         loadSchema?: boolean;
     }) => Promise<BranchContext | null>;
-    /**
-     * Auth plugin for user/group search (optional)
-     */
     authPlugin?: AuthPlugin;
 }
 export interface ApiRequest<TBody = unknown> {

package/dist/api/user.js

@@ -1,6 +1,5 @@
 import { defineEndpoint } from './route-builder.js';
 /**
- * Get current user info
  * This is a PUBLIC endpoint - no special permissions required
  */
 const getUserInfoHandler = async (ctx, req) => {
@@ -14,10 +13,6 @@ const getUserInfoHandler = async (ctx, req) => {
         },
     };
 };
-/**
- * Get current user information
- * GET /whoami
- */
 const getUserInfo = defineEndpoint({
     namespace: 'user',
     name: 'whoami',

package/dist/api/validators.d.ts

@@ -3,74 +3,31 @@
  *
  * These schemas validate incoming strings from HTTP requests
  * and cast them to branded types for type-safe handling in API handlers.
- *
- * Usage:
- * ```ts
- * import { branchNameSchema, logicalPathSchema } from './validators.js'
- *
- * const paramsSchema = z.object({
- *   branch: branchNameSchema,
- *   path: logicalPathSchema,
- * })
- *
- * // TypeScript infers branded types automatically
- * const params = paramsSchema.parse(req.params)
- * // params.branch is BranchName (not string)
- * // params.path is LogicalPath (not string)
- * ```
  */
 import { z } from 'zod';
 import { type BranchName, type LogicalPath, type ContentId, type Slug } from '../paths/index.js';
 import { type PermissionPath } from '../authorization/index.js';
 /**
- * Zod schema for BranchName - validates git branch naming rules and brands.
- *
- * Validates:
- * - No empty strings
- * - No double dots (..)
- * - No leading/trailing slashes
- * - No spaces
- * - No leading/trailing dots
- * - No @{ sequences
+ * Zod schema for BranchName: validates and brands a branch-name string via `parseBranchName`
+ * (paths/validation.ts), so handlers receive a `BranchName`, not a bare `string`.
  */
 export declare const branchNameSchema: z.ZodType<BranchName>;
 /**
- * Zod schema for LogicalPath - validates and brands logical content paths.
- *
- * Validates:
- * - No empty strings
- * - No path traversal sequences (..)
- * - Not a physical path (no embedded content IDs)
+ * Zod schema for LogicalPath: validates and brands via `parseLogicalPath` (paths/validation.ts),
+ * which blocks path-traversal sequences and physical-path shapes, so handlers get a
+ * `LogicalPath`, not a bare `string`.
  */
 export declare const logicalPathSchema: z.ZodType<LogicalPath>;
 /**
- * Zod schema for ContentId - validates 12-char Base58 IDs.
- *
- * Validates:
- * - Exactly 12 characters
- * - Base58 alphabet only (no 0, O, I, l)
+ * Zod schema for ContentId: validates and brands a 12-char Base58 ID via `parseContentId`
+ * (paths/validation.ts), so handlers get a `ContentId`, not a bare `string`.
  */
 export declare const contentIdSchema: z.ZodType<ContentId>;
 /**
- * Zod schema for Slug - validates entry and collection slugs.
- *
- * Validates:
- * - No path separators (/ or \)
- * - Starts with lowercase letter or number
- * - Only lowercase letters, numbers, and hyphens
- * - Max 64 characters
+ * Zod schema for Slug: validates and brands via `parseSlug` (paths/validation.ts), so handlers
+ * get a `Slug`, not a bare `string`.
  */
 export declare const slugSchema: z.ZodType<Slug>;
-/**
- * Zod schema for PermissionPath - validates permission rule paths.
- *
- * SECURITY: Prevents path traversal attacks in permission rules.
- *
- * Validates:
- * - No path traversal sequences (..)
- * - No leading/trailing slashes
- * - No consecutive slashes
- */
 /**
  * Common params schema for endpoints that accept a branch name path parameter.
  * Shared across branch-status, branch-review, branch-withdraw, comments, and branch handlers.
@@ -86,6 +43,11 @@ export declare const branchParamSchema: z.ZodObject<{
         readonly __brand: "BranchName";
     };
 }>;
+/**
+ * Zod schema for PermissionPath: validates and brands via `parsePermissionPath`
+ * (authorization/validation.ts), so handlers get a `PermissionPath`, not a bare `string`.
+ * SECURITY: this is what blocks path traversal (`..`) in permission-rule paths.
+ */
 export declare const permissionPathSchema: z.ZodType<PermissionPath>;
 /**
  * Zod schema for boolean GET query params. HTTP query strings always arrive as

package/dist/api/validators.js

@@ -3,35 +3,13 @@
  *
  * These schemas validate incoming strings from HTTP requests
  * and cast them to branded types for type-safe handling in API handlers.
- *
- * Usage:
- * ```ts
- * import { branchNameSchema, logicalPathSchema } from './validators.js'
- *
- * const paramsSchema = z.object({
- *   branch: branchNameSchema,
- *   path: logicalPathSchema,
- * })
- *
- * // TypeScript infers branded types automatically
- * const params = paramsSchema.parse(req.params)
- * // params.branch is BranchName (not string)
- * // params.path is LogicalPath (not string)
- * ```
  */
 import { z } from 'zod';
 import { parseBranchName, parseLogicalPath, parseContentId, parseSlug, } from '../paths/index.js';
 import { parsePermissionPath } from '../authorization/index.js';
 /**
- * Zod schema for BranchName - validates git branch naming rules and brands.
- *
- * Validates:
- * - No empty strings
- * - No double dots (..)
- * - No leading/trailing slashes
- * - No spaces
- * - No leading/trailing dots
- * - No @{ sequences
+ * Zod schema for BranchName: validates and brands a branch-name string via `parseBranchName`
+ * (paths/validation.ts), so handlers receive a `BranchName`, not a bare `string`.
  */
 export const branchNameSchema = z
     .string()
@@ -48,12 +26,9 @@ export const branchNameSchema = z
     return result.name;
 });
 /**
- * Zod schema for LogicalPath - validates and brands logical content paths.
- *
- * Validates:
- * - No empty strings
- * - No path traversal sequences (..)
- * - Not a physical path (no embedded content IDs)
+ * Zod schema for LogicalPath: validates and brands via `parseLogicalPath` (paths/validation.ts),
+ * which blocks path-traversal sequences and physical-path shapes, so handlers get a
+ * `LogicalPath`, not a bare `string`.
  */
 export const logicalPathSchema = z
     .string()
@@ -70,11 +45,8 @@ export const logicalPathSchema = z
     return result.path;
 });
 /**
- * Zod schema for ContentId - validates 12-char Base58 IDs.
- *
- * Validates:
- * - Exactly 12 characters
- * - Base58 alphabet only (no 0, O, I, l)
+ * Zod schema for ContentId: validates and brands a 12-char Base58 ID via `parseContentId`
+ * (paths/validation.ts), so handlers get a `ContentId`, not a bare `string`.
  */
 export const contentIdSchema = z.string().transform((val, ctx) => {
     const result = parseContentId(val);
@@ -88,13 +60,8 @@ export const contentIdSchema = z.string().transform((val, ctx) => {
     return result.id;
 });
 /**
- * Zod schema for Slug - validates entry and collection slugs.
- *
- * Validates:
- * - No path separators (/ or \)
- * - Starts with lowercase letter or number
- * - Only lowercase letters, numbers, and hyphens
- * - Max 64 characters
+ * Zod schema for Slug: validates and brands via `parseSlug` (paths/validation.ts), so handlers
+ * get a `Slug`, not a bare `string`.
  */
 export const slugSchema = z
     .string()
@@ -110,16 +77,6 @@ export const slugSchema = z
     }
     return result.slug;
 });
-/**
- * Zod schema for PermissionPath - validates permission rule paths.
- *
- * SECURITY: Prevents path traversal attacks in permission rules.
- *
- * Validates:
- * - No path traversal sequences (..)
- * - No leading/trailing slashes
- * - No consecutive slashes
- */
 /**
  * Common params schema for endpoints that accept a branch name path parameter.
  * Shared across branch-status, branch-review, branch-withdraw, comments, and branch handlers.
@@ -127,6 +84,11 @@ export const slugSchema = z
 export const branchParamSchema = z.object({
     branch: branchNameSchema,
 });
+/**
+ * Zod schema for PermissionPath: validates and brands via `parsePermissionPath`
+ * (authorization/validation.ts), so handlers get a `PermissionPath`, not a bare `string`.
+ * SECURITY: this is what blocks path traversal (`..`) in permission-rule paths.
+ */
 export const permissionPathSchema = z
     .string()
     .min(1)

package/dist/assets/asset-prefixes.d.ts

@@ -1,13 +1,9 @@
 /**
- * The five S3/local bucket-prefix strings (see keys.ts's module doc for the
- * full layout: asset-originals/, asset-staging/, asset-meta/, assets/t/,
- * assets/).
+ * The five S3/local bucket-prefix strings (see keys.ts's module doc for the full layout).
  *
- * Split into its own dependency-free file so client-safe, isomorphic modules
- * (transform-directives.ts, asset-url.ts) can import the prefix strings
- * directly without pulling keys.ts's `node:crypto` import (used only by
- * `hashBytes`) into a browser bundle. keys.ts re-exports `ASSET_PREFIXES`
- * from here so existing imports of it from './keys.js' keep working unchanged.
+ * Split into its own dependency-free file so isomorphic modules (transform-directives.ts,
+ * asset-url.ts) can import the prefixes without pulling keys.ts's `node:crypto` import into a
+ * browser bundle. keys.ts re-exports `ASSET_PREFIXES` from here for existing importers.
  */
 export declare const ASSET_PREFIXES: {
     readonly originals: "asset-originals";

package/dist/assets/asset-prefixes.js

@@ -1,13 +1,9 @@
 /**
- * The five S3/local bucket-prefix strings (see keys.ts's module doc for the
- * full layout: asset-originals/, asset-staging/, asset-meta/, assets/t/,
- * assets/).
+ * The five S3/local bucket-prefix strings (see keys.ts's module doc for the full layout).
  *
- * Split into its own dependency-free file so client-safe, isomorphic modules
- * (transform-directives.ts, asset-url.ts) can import the prefix strings
- * directly without pulling keys.ts's `node:crypto` import (used only by
- * `hashBytes`) into a browser bundle. keys.ts re-exports `ASSET_PREFIXES`
- * from here so existing imports of it from './keys.js' keep working unchanged.
+ * Split into its own dependency-free file so isomorphic modules (transform-directives.ts,
+ * asset-url.ts) can import the prefixes without pulling keys.ts's `node:crypto` import into a
+ * browser bundle. keys.ts re-exports `ASSET_PREFIXES` from here for existing importers.
  */
 export const ASSET_PREFIXES = {
     originals: 'asset-originals',

package/dist/assets/asset-src.d.ts

@@ -1,35 +1,18 @@
 /**
- * Compute the root-relative public URL for an asset's meta. Shared helper -
- * both the API layer (list/finalize responses) and later PRs (structured
- * image field, MediaLibrary, `assetUrl()`) build URLs through this so the
- * URL shape is defined in exactly one place.
+ * Compute the root-relative public URL for an asset's meta.
  *
  * svg/pdf: served statically from the public object finalize wrote
  * (`assets/{hash32}/{slug}.{ext}`, via keys.ts's `publicKey`).
  *
  * raster: served through the transform layer using the `orig` (identity)
- * directive. The transform engine itself is PR 4's job, but the URL shape is
- * decided now (rather than switching every raster URL over once transforms
- * ship) so content written by this PR stays valid without a migration.
+ * directive.
  *
  * Always root-relative, and this is the value that gets STORED in content.
  * Content moves between branches and environments, so a stored src must not
  * name an origin or a deployment prefix - it names only the asset's position
- * in the `/assets` URL space.
- *
- * Prefixing is a separate, render-time concern: `assetUrl()`'s `baseUrl` option
- * (assets/asset-url.ts) puts the mount point in front, and is the ONLY place a
- * prefix is applied. Do not confuse the two:
- *
- * - `assetSrc()` (here)        -> stored, always root-relative, no prefix ever.
- * - `assetUrl(ref, {baseUrl})` -> rendered, prefix applied, never written back.
- *
- * `media.publicBaseUrl` is one source of that render-time prefix (the editor's,
- * for when the editor is served from a different origin) - it is config for
- * display, not a property of the asset.
+ * in the `/assets` URL space. Prefixing it for display is `assetUrl()`'s
+ * render-time job - see asset-url.ts.
  */
-import { IDENTITY_TRANSFORM_DIRECTIVE } from './transform-directives.js';
 import type { AssetMeta } from './types.js';
-/** Re-exported for existing importers (assets/index.ts barrel) - the value now lives in transform-directives.ts, PR 4's pure directive module, so it's reachable without pulling keys.ts's node:crypto import into client bundles. */
-export { IDENTITY_TRANSFORM_DIRECTIVE };
+/** Re-exported for existing importers (assets/index.ts barrel) - the value now lives in transform-directives.ts, so it's reachable without pulling keys.ts's node:crypto import into client bundles. */
 export declare function assetSrc(meta: Pick<AssetMeta, 'hash32' | 'slug' | 'ext' | 'kind'>): string;

package/dist/assets/asset-src.js

@@ -1,37 +1,21 @@
 /**
- * Compute the root-relative public URL for an asset's meta. Shared helper -
- * both the API layer (list/finalize responses) and later PRs (structured
- * image field, MediaLibrary, `assetUrl()`) build URLs through this so the
- * URL shape is defined in exactly one place.
+ * Compute the root-relative public URL for an asset's meta.
  *
  * svg/pdf: served statically from the public object finalize wrote
  * (`assets/{hash32}/{slug}.{ext}`, via keys.ts's `publicKey`).
  *
  * raster: served through the transform layer using the `orig` (identity)
- * directive. The transform engine itself is PR 4's job, but the URL shape is
- * decided now (rather than switching every raster URL over once transforms
- * ship) so content written by this PR stays valid without a migration.
+ * directive.
  *
  * Always root-relative, and this is the value that gets STORED in content.
  * Content moves between branches and environments, so a stored src must not
  * name an origin or a deployment prefix - it names only the asset's position
- * in the `/assets` URL space.
- *
- * Prefixing is a separate, render-time concern: `assetUrl()`'s `baseUrl` option
- * (assets/asset-url.ts) puts the mount point in front, and is the ONLY place a
- * prefix is applied. Do not confuse the two:
- *
- * - `assetSrc()` (here)        -> stored, always root-relative, no prefix ever.
- * - `assetUrl(ref, {baseUrl})` -> rendered, prefix applied, never written back.
- *
- * `media.publicBaseUrl` is one source of that render-time prefix (the editor's,
- * for when the editor is served from a different origin) - it is config for
- * display, not a property of the asset.
+ * in the `/assets` URL space. Prefixing it for display is `assetUrl()`'s
+ * render-time job - see asset-url.ts.
  */
 import { ASSET_PREFIXES } from './asset-prefixes.js';
 import { IDENTITY_TRANSFORM_DIRECTIVE } from './transform-directives.js';
-/** Re-exported for existing importers (assets/index.ts barrel) - the value now lives in transform-directives.ts, PR 4's pure directive module, so it's reachable without pulling keys.ts's node:crypto import into client bundles. */
-export { IDENTITY_TRANSFORM_DIRECTIVE };
+/** Re-exported for existing importers (assets/index.ts barrel) - the value now lives in transform-directives.ts, so it's reachable without pulling keys.ts's node:crypto import into client bundles. */
 export function assetSrc(meta) {
     if (meta.kind === 'svg' || meta.kind === 'pdf') {
         return `/${ASSET_PREFIXES.public}/${meta.hash32}/${meta.slug}.${meta.ext}`;

package/dist/assets/factory.d.ts

@@ -2,8 +2,7 @@
  * Instantiate the configured AssetStore from a site's `media` config.
  *
  * This is the one place that turns the (currently-unconsumed) `media` config
- * into a real store — see .claude/future-tasks/assets-media-system.md for why
- * this was previously dead configuration.
+ * into a real store — see .claude/future-tasks/resolved/assets-media-system.md.
  */
 import type { MediaConfig } from '../config/types.js';
 import type { AssetStore } from './types.js';