gazetta 0.6.0 → 0.7.0

package/dist/assets/errors.d.ts

@@ -0,0 +1,241 @@
+/**
+ * Typed errors for the asset domain.
+ *
+ * Every asset-domain failure is one of these classes — never a plain
+ * `new Error('not implemented')`. Callers pattern-match on the class to
+ * decide what to do (HTTP status, CLI exit code, retry policy, user
+ * message). Subclassing keeps the public error taxonomy small and stable.
+ *
+ * The `code` property is the machine-readable identifier. Messages are
+ * human-readable and may include path/name details; tests should match
+ * on `code`, not on message text.
+ */
+export type AssetErrorCode = 'ASSET_VALIDATION_FAILED' | 'ASSET_MIME_MISMATCH' | 'ASSET_SIZE_EXCEEDED' | 'ASSET_NAME_INVALID' | 'ASSET_NAME_RESERVED' | 'ASSET_PATH_TRAVERSAL' | 'ASSET_STORAGE_FAILURE' | 'ASSET_MANIFEST_CORRUPT' | 'ASSET_MANIFEST_NOT_FOUND' | 'ASSET_IN_USE' | 'ASSET_MIME_UNSUPPORTED' | 'ASSET_KIND_MISMATCH' | 'ASSET_NAME_COLLISION' | 'ASSET_VARIANT_GENERATION_FAILED' | 'ASSET_PREPROCESS_FAILED';
+/**
+ * `AssetRef` is owned by `./refs.ts` (single source of truth, Zod
+ * schema + inferred type). Re-exported here for the error class that
+ * carries refs as structured data. Other consumers import from `./refs`
+ * directly.
+ */
+export type { AssetRef } from './refs.js';
+import type { AssetRef } from './refs.js';
+/**
+ * Every asset error maps to exactly one HTTP status. Declaring it on the
+ * class — not in every route handler — means adding a new error subclass
+ * requires no route-handler changes (OCP). Kept as a type union rather
+ * than `number` so that a typo at the class level fails to compile.
+ */
+export type AssetErrorHttpStatus = 400 | 404 | 409 | 500;
+/**
+ * JSON body shape for `AssetError.toResponseBody()`. Every response body
+ * has at least `{ code, message }`; structured subclasses (AssetInUseError,
+ * AssetValidationError) override `toResponseBody()` to attach extra fields.
+ *
+ * The admin client's Zod schemas (`admin-api/schemas/assets.ts`) parse the
+ * body into typed responses; drift between server serialization and client
+ * parsing is a compile-time error.
+ */
+export interface AssetErrorResponseBody {
+    readonly code: AssetErrorCode;
+    readonly message: string;
+    readonly [extra: string]: unknown;
+}
+export declare abstract class AssetError extends Error {
+    abstract readonly code: AssetErrorCode;
+    /** HTTP status this error maps to at the transport boundary. */
+    abstract readonly httpStatus: AssetErrorHttpStatus;
+    constructor(message: string);
+    /**
+     * Serialize this error to a JSON response body. Default shape is
+     * `{ code, message }`; subclasses override to add structured data.
+     * Transport-boundary polymorphism — no `instanceof` chain needed at
+     * the route mapper.
+     */
+    toResponseBody(): AssetErrorResponseBody;
+}
+/**
+ * Upload-validation failure hierarchy.
+ *
+ * Each concrete reason a candidate can be rejected is its own class. No
+ * god-class taking a polymorphic `code` argument — the class itself is
+ * the reason. Benefits (SOLID):
+ *
+ *   - SRP: each class has one reason to change.
+ *   - OCP: adding a new validation reason = new class, no edits to
+ *     existing ones; the httpStatus (400) is inherited.
+ *   - LSP: every subclass fully honors `AssetValidationError` — an
+ *     `instanceof AssetValidationError` check still groups them.
+ *   - ISP: callers that only care about "was this input-invalid?" match
+ *     the base class; callers that branch on specific reasons use the
+ *     concrete subclass.
+ *
+ * The `AssetValidationError` base stays as the umbrella for callers that
+ * treat all input-validation failures uniformly (HTTP always maps to 400).
+ */
+export declare abstract class AssetValidationError extends AssetError {
+    readonly httpStatus: 400;
+}
+/** Asset name failed character / length rules. */
+export declare class AssetNameInvalidError extends AssetValidationError {
+    readonly name: string;
+    readonly code: "ASSET_NAME_INVALID";
+    constructor(name: string, message: string);
+}
+/** Asset name attempted path traversal (`..`, leading `/`, backslash). */
+export declare class AssetPathTraversalError extends AssetValidationError {
+    readonly name: string;
+    readonly code: "ASSET_PATH_TRAVERSAL";
+    constructor(name: string);
+}
+/** Asset name collides with a reserved prefix or suffix. */
+export declare class AssetNameReservedError extends AssetValidationError {
+    readonly name: string;
+    readonly reservedToken: string;
+    readonly position: 'prefix' | 'suffix';
+    readonly code: "ASSET_NAME_RESERVED";
+    constructor(name: string, reservedToken: string, position: 'prefix' | 'suffix');
+}
+/** Asset bytes exceed the configured size limit, or claimed size is zero. */
+export declare class AssetSizeExceededError extends AssetValidationError {
+    readonly claimedSize: number;
+    readonly maxBytes: number;
+    readonly code: "ASSET_SIZE_EXCEEDED";
+    constructor(claimedSize: number, maxBytes: number);
+}
+/**
+ * Sniffed MIME is absent or not in the allowlist. The class owns its own
+ * message construction — no caller passes a pre-baked string. Two distinct
+ * failure reasons share the same `code` because they're the same error
+ * semantically ("the MIME isn't usable"): distinguishable by inspecting
+ * `sniffedMime === null` vs set.
+ */
+export declare class AssetMimeMismatchError extends AssetValidationError {
+    readonly sniffedMime: string | null;
+    readonly allowedMimes: readonly string[];
+    readonly code: "ASSET_MIME_MISMATCH";
+    constructor(sniffedMime: string | null, allowedMimes: readonly string[]);
+}
+/** Wraps an underlying storage-layer failure during an asset operation. */
+export declare class AssetStorageError extends AssetError {
+    readonly operation: 'read' | 'write' | 'delete' | 'stat';
+    readonly path: string;
+    readonly code: "ASSET_STORAGE_FAILURE";
+    readonly httpStatus: 500;
+    constructor(operation: 'read' | 'write' | 'delete' | 'stat', path: string, cause: unknown);
+}
+/** Manifest JSON couldn't be parsed. */
+export declare class AssetManifestCorruptError extends AssetError {
+    readonly code: "ASSET_MANIFEST_CORRUPT";
+    readonly httpStatus: 500;
+    constructor(path: string, cause: unknown);
+}
+/** Manifest file missing — asset name doesn't exist on this target. */
+export declare class AssetManifestNotFoundError extends AssetError {
+    readonly code: "ASSET_MANIFEST_NOT_FOUND";
+    readonly httpStatus: 404;
+    constructor(name: string);
+}
+/**
+ * Delete was attempted on an asset that pages or fragments still reference.
+ * The design doc's delete-blocked contract: surface the usage list so the
+ * author can rewrite refs or pick a replacement. `refs` is attached as
+ * structured data — HTTP layer serializes it into the 409 response body.
+ */
+export declare class AssetInUseError extends AssetError {
+    readonly assetName: string;
+    readonly refs: readonly AssetRef[];
+    readonly code: "ASSET_IN_USE";
+    readonly httpStatus: 409;
+    constructor(assetName: string, refs: readonly AssetRef[]);
+    toResponseBody(): AssetErrorResponseBody;
+}
+/**
+ * Manifest MIME has no known extension mapping, so path enumeration
+ * can't be completed. Operations that need the full path set (delete,
+ * rename, GC) can't proceed. Distinct from validation failure (the
+ * manifest is fine — we just don't know how to lay out bytes for this
+ * MIME) and from storage failure (nothing failed I/O).
+ *
+ * In practice, reaching this means a new kind was added without
+ * extending `url.ts#extFromMime` — the type points at exactly what
+ * needs a fix.
+ */
+export declare class AssetMimeUnsupportedError extends AssetError {
+    readonly mime: string;
+    readonly assetName: string;
+    readonly code: "ASSET_MIME_UNSUPPORTED";
+    readonly httpStatus: 500;
+    constructor(mime: string, assetName: string);
+}
+/**
+ * Responsive-variant generation failed during upload ingest. The original
+ * bytes passed MIME sniffing and dimension extraction but sharp could not
+ * resize them — usually means truncation, corruption, or a decompression-
+ * bomb that sharp declined to decode. The ingest pipeline rolls back the
+ * main-bytes write on this error so the upload fails atomically. HTTP
+ * 400 (client-correctable: re-upload a non-broken image).
+ *
+ * Distinct from `AssetMimeMismatchError` (MIME-sniff rejection) because
+ * the file may be a legitimate JPEG/PNG on paper — we only discovered
+ * the problem once sharp tried to do real work with the pixels.
+ */
+export declare class AssetVariantGenerationError extends AssetError {
+    readonly assetName: string;
+    readonly code: "ASSET_VARIANT_GENERATION_FAILED";
+    readonly httpStatus: 400;
+    constructor(assetName: string, cause: unknown);
+}
+/**
+ * Format-specific preprocessing failed during ingest. Today: SVG
+ * sanitization (DOMPurify rejected the input as malformed XML or it
+ * carried oversized embedded base64). Future: HEIC→JPEG transcode,
+ * EXIF-orientation flatten, animated-GIF frame extraction.
+ *
+ * 400 because the input is the problem (client-correctable). The
+ * specific reason is on `reason` so route handlers / clients can
+ * branch on it. `format` (the MIME) lets clients show the right
+ * remediation copy.
+ */
+export declare class AssetPreprocessError extends AssetError {
+    readonly format: string;
+    readonly reason: string;
+    readonly code: "ASSET_PREPROCESS_FAILED";
+    readonly httpStatus: 400;
+    constructor(format: string, reason: string, cause?: unknown);
+    toResponseBody(): AssetErrorResponseBody;
+}
+/**
+ * Rename was attempted to a name that's already taken by another asset.
+ * Per design-media.md → Rename: copying onto an existing asset would
+ * silently merge two distinct assets into one — the operation refuses
+ * instead. Authors who genuinely want to merge use replace-and-delete
+ * (different verb, explicit kind-compat check). HTTP 409.
+ */
+export declare class AssetNameCollisionError extends AssetError {
+    readonly newName: string;
+    readonly code: "ASSET_NAME_COLLISION";
+    readonly httpStatus: 409;
+    constructor(newName: string);
+    toResponseBody(): AssetErrorResponseBody;
+}
+/**
+ * Replace was attempted between two assets whose kinds (or within
+ * `embedded`, MIME categories) don't match. Per design-media.md →
+ * Delete semantics: "same kind (embedded ↔ embedded, downloadable ↔
+ * downloadable). Within embedded, cross-subtype is blocked
+ * (image ≠ video)."
+ *
+ * Carries structured fields so the UI can render a specific message
+ * ("image → video not allowed") without parsing the human message.
+ */
+export declare class AssetKindMismatchError extends AssetError {
+    readonly oldKind: string;
+    readonly oldMimeCategory: string;
+    readonly newKind: string;
+    readonly newMimeCategory: string;
+    readonly code: "ASSET_KIND_MISMATCH";
+    readonly httpStatus: 409;
+    constructor(oldKind: string, oldMimeCategory: string, newKind: string, newMimeCategory: string);
+    toResponseBody(): AssetErrorResponseBody;
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/assets/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/assets/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,MAAM,cAAc,GACtB,yBAAyB,GACzB,qBAAqB,GACrB,qBAAqB,GACrB,oBAAoB,GACpB,qBAAqB,GACrB,sBAAsB,GACtB,uBAAuB,GACvB,wBAAwB,GACxB,0BAA0B,GAC1B,cAAc,GACd,wBAAwB,GACxB,qBAAqB,GACrB,sBAAsB,GACtB,iCAAiC,GACjC,yBAAyB,CAAA;AAE7B;;;;;GAKG;AACH,YAAY,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAEzC;;;;;GAKG;AACH,MAAM,MAAM,oBAAoB,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAA;AAExD;;;;;;;;GAQG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IAExB,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAA;CAClC;AAED,8BAAsB,UAAW,SAAQ,KAAK;IAC5C,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;IACtC,gEAAgE;IAChE,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAA;gBAEtC,OAAO,EAAE,MAAM;IAK3B;;;;;OAKG;IACH,cAAc,IAAI,sBAAsB;CAGzC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,8BAAsB,oBAAqB,SAAQ,UAAU;IAC3D,QAAQ,CAAC,UAAU,EAAG,GAAG,CAAS;CACnC;AAED,kDAAkD;AAClD,qBAAa,qBAAsB,SAAQ,oBAAoB;aAG3C,IAAI,EAAE,MAAM;IAF9B,QAAQ,CAAC,IAAI,EAAG,oBAAoB,CAAS;gBAE3B,IAAI,EAAE,MAAM,EAC5B,OAAO,EAAE,MAAM;CAIlB;AAED,0EAA0E;AAC1E,qBAAa,uBAAwB,SAAQ,oBAAoB;aAEnC,IAAI,EAAE,MAAM;IADxC,QAAQ,CAAC,IAAI,EAAG,sBAAsB,CAAS;gBACnB,IAAI,EAAE,MAAM;CAGzC;AAED,4DAA4D;AAC5D,qBAAa,sBAAuB,SAAQ,oBAAoB;aAG5C,IAAI,EAAE,MAAM;aACZ,aAAa,EAAE,MAAM;aACrB,QAAQ,EAAE,QAAQ,GAAG,QAAQ;IAJ/C,QAAQ,CAAC,IAAI,EAAG,qBAAqB,CAAS;gBAE5B,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,QAAQ,GAAG,QAAQ;CAIhD;AAED,6EAA6E;AAC7E,qBAAa,sBAAuB,SAAQ,oBAAoB;aAG5C,WAAW,EAAE,MAAM;aACnB,QAAQ,EAAE,MAAM;IAHlC,QAAQ,CAAC,IAAI,EAAG,qBAAqB,CAAS;gBAE5B,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM;CAQnC;AAED;;;;;;GAMG;AACH,qBAAa,sBAAuB,SAAQ,oBAAoB;aAG5C,WAAW,EAAE,MAAM,GAAG,IAAI;aAC1B,YAAY,EAAE,SAAS,MAAM,EAAE;IAHjD,QAAQ,CAAC,IAAI,EAAG,qBAAqB,CAAS;gBAE5B,WAAW,EAAE,MAAM,GAAG,IAAI,EAC1B,YAAY,EAAE,SAAS,MAAM,EAAE;CAIlD;AAQD,2EAA2E;AAC3E,qBAAa,iBAAkB,SAAQ,UAAU;aAI7B,SAAS,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM;aAC/C,IAAI,EAAE,MAAM;IAJ9B,QAAQ,CAAC,IAAI,EAAG,uBAAuB,CAAS;IAChD,QAAQ,CAAC,UAAU,EAAG,GAAG,CAAS;gBAEhB,SAAS,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,EAC/C,IAAI,EAAE,MAAM,EAC5B,KAAK,EAAE,OAAO;CAIjB;AAED,wCAAwC;AACxC,qBAAa,yBAA0B,SAAQ,UAAU;IACvD,QAAQ,CAAC,IAAI,EAAG,wBAAwB,CAAS;IACjD,QAAQ,CAAC,UAAU,EAAG,GAAG,CAAS;gBACtB,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO;CAGzC;AAED,uEAAuE;AACvE,qBAAa,0BAA2B,SAAQ,UAAU;IACxD,QAAQ,CAAC,IAAI,EAAG,0BAA0B,CAAS;IACnD,QAAQ,CAAC,UAAU,EAAG,GAAG,CAAS;gBACtB,IAAI,EAAE,MAAM;CAGzB;AAED;;;;;GAKG;AACH,qBAAa,eAAgB,SAAQ,UAAU;aAI3B,SAAS,EAAE,MAAM;aACjB,IAAI,EAAE,SAAS,QAAQ,EAAE;IAJ3C,QAAQ,CAAC,IAAI,EAAG,cAAc,CAAS;IACvC,QAAQ,CAAC,UAAU,EAAG,GAAG,CAAS;gBAEhB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,SAAS,QAAQ,EAAE;IAKlC,cAAc,IAAI,sBAAsB;CASlD;AAED;;;;;;;;;;GAUG;AACH,qBAAa,yBAA0B,SAAQ,UAAU;aAIrC,IAAI,EAAE,MAAM;aACZ,SAAS,EAAE,MAAM;IAJnC,QAAQ,CAAC,IAAI,EAAG,wBAAwB,CAAS;IACjD,QAAQ,CAAC,UAAU,EAAG,GAAG,CAAS;gBAEhB,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM;CAIpC;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,2BAA4B,SAAQ,UAAU;aAIvC,SAAS,EAAE,MAAM;IAHnC,QAAQ,CAAC,IAAI,EAAG,iCAAiC,CAAS;IAC1D,QAAQ,CAAC,UAAU,EAAG,GAAG,CAAS;gBAEhB,SAAS,EAAE,MAAM,EACjC,KAAK,EAAE,OAAO;CAIjB;AAED;;;;;;;;;;GAUG;AACH,qBAAa,oBAAqB,SAAQ,UAAU;aAIhC,MAAM,EAAE,MAAM;aACd,MAAM,EAAE,MAAM;IAJhC,QAAQ,CAAC,IAAI,EAAG,yBAAyB,CAAS;IAClD,QAAQ,CAAC,UAAU,EAAG,GAAG,CAAS;gBAEhB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EAC9B,KAAK,CAAC,EAAE,OAAO;IAMR,cAAc,IAAI,sBAAsB;CAOlD;AAED;;;;;;GAMG;AACH,qBAAa,uBAAwB,SAAQ,UAAU;aAGzB,OAAO,EAAE,MAAM;IAF3C,QAAQ,CAAC,IAAI,EAAG,sBAAsB,CAAS;IAC/C,QAAQ,CAAC,UAAU,EAAG,GAAG,CAAS;gBACN,OAAO,EAAE,MAAM;IAIlC,cAAc,IAAI,sBAAsB;CAMlD;AAED;;;;;;;;;GASG;AACH,qBAAa,sBAAuB,SAAQ,UAAU;aAIlC,OAAO,EAAE,MAAM;aACf,eAAe,EAAE,MAAM;aACvB,OAAO,EAAE,MAAM;aACf,eAAe,EAAE,MAAM;IANzC,QAAQ,CAAC,IAAI,EAAG,qBAAqB,CAAS;IAC9C,QAAQ,CAAC,UAAU,EAAG,GAAG,CAAS;gBAEhB,OAAO,EAAE,MAAM,EACf,eAAe,EAAE,MAAM,EACvB,OAAO,EAAE,MAAM,EACf,eAAe,EAAE,MAAM;IAOhC,cAAc,IAAI,sBAAsB;CASlD"}

package/dist/assets/errors.js

@@ -0,0 +1,300 @@
+/**
+ * Typed errors for the asset domain.
+ *
+ * Every asset-domain failure is one of these classes — never a plain
+ * `new Error('not implemented')`. Callers pattern-match on the class to
+ * decide what to do (HTTP status, CLI exit code, retry policy, user
+ * message). Subclassing keeps the public error taxonomy small and stable.
+ *
+ * The `code` property is the machine-readable identifier. Messages are
+ * human-readable and may include path/name details; tests should match
+ * on `code`, not on message text.
+ */
+export class AssetError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = this.constructor.name;
+    }
+    /**
+     * Serialize this error to a JSON response body. Default shape is
+     * `{ code, message }`; subclasses override to add structured data.
+     * Transport-boundary polymorphism — no `instanceof` chain needed at
+     * the route mapper.
+     */
+    toResponseBody() {
+        return { code: this.code, message: this.message };
+    }
+}
+/**
+ * Upload-validation failure hierarchy.
+ *
+ * Each concrete reason a candidate can be rejected is its own class. No
+ * god-class taking a polymorphic `code` argument — the class itself is
+ * the reason. Benefits (SOLID):
+ *
+ *   - SRP: each class has one reason to change.
+ *   - OCP: adding a new validation reason = new class, no edits to
+ *     existing ones; the httpStatus (400) is inherited.
+ *   - LSP: every subclass fully honors `AssetValidationError` — an
+ *     `instanceof AssetValidationError` check still groups them.
+ *   - ISP: callers that only care about "was this input-invalid?" match
+ *     the base class; callers that branch on specific reasons use the
+ *     concrete subclass.
+ *
+ * The `AssetValidationError` base stays as the umbrella for callers that
+ * treat all input-validation failures uniformly (HTTP always maps to 400).
+ */
+export class AssetValidationError extends AssetError {
+    httpStatus = 400;
+}
+/** Asset name failed character / length rules. */
+export class AssetNameInvalidError extends AssetValidationError {
+    name;
+    code = 'ASSET_NAME_INVALID';
+    constructor(name, message) {
+        super(message);
+        this.name = name;
+    }
+}
+/** Asset name attempted path traversal (`..`, leading `/`, backslash). */
+export class AssetPathTraversalError extends AssetValidationError {
+    name;
+    code = 'ASSET_PATH_TRAVERSAL';
+    constructor(name) {
+        super(`Asset name contains path traversal: ${name}`);
+        this.name = name;
+    }
+}
+/** Asset name collides with a reserved prefix or suffix. */
+export class AssetNameReservedError extends AssetValidationError {
+    name;
+    reservedToken;
+    position;
+    code = 'ASSET_NAME_RESERVED';
+    constructor(name, reservedToken, position) {
+        super(`Asset name reserved (${position} "${reservedToken}"): ${name}`);
+        this.name = name;
+        this.reservedToken = reservedToken;
+        this.position = position;
+    }
+}
+/** Asset bytes exceed the configured size limit, or claimed size is zero. */
+export class AssetSizeExceededError extends AssetValidationError {
+    claimedSize;
+    maxBytes;
+    code = 'ASSET_SIZE_EXCEEDED';
+    constructor(claimedSize, maxBytes) {
+        super(claimedSize <= 0
+            ? 'Asset size must be greater than 0'
+            : `Asset exceeds size limit (${claimedSize} bytes > ${maxBytes} bytes)`);
+        this.claimedSize = claimedSize;
+        this.maxBytes = maxBytes;
+    }
+}
+/**
+ * Sniffed MIME is absent or not in the allowlist. The class owns its own
+ * message construction — no caller passes a pre-baked string. Two distinct
+ * failure reasons share the same `code` because they're the same error
+ * semantically ("the MIME isn't usable"): distinguishable by inspecting
+ * `sniffedMime === null` vs set.
+ */
+export class AssetMimeMismatchError extends AssetValidationError {
+    sniffedMime;
+    allowedMimes;
+    code = 'ASSET_MIME_MISMATCH';
+    constructor(sniffedMime, allowedMimes) {
+        super(buildMimeMismatchMessage(sniffedMime, allowedMimes));
+        this.sniffedMime = sniffedMime;
+        this.allowedMimes = allowedMimes;
+    }
+}
+function buildMimeMismatchMessage(sniffedMime, allowedMimes) {
+    const allowed = allowedMimes.length > 0 ? ` (allowed: ${allowedMimes.join(', ')})` : '';
+    if (sniffedMime === null)
+        return `Could not detect MIME type from bytes${allowed}`;
+    return `MIME "${sniffedMime}" not allowed${allowed}`;
+}
+/** Wraps an underlying storage-layer failure during an asset operation. */
+export class AssetStorageError extends AssetError {
+    operation;
+    path;
+    code = 'ASSET_STORAGE_FAILURE';
+    httpStatus = 500;
+    constructor(operation, path, cause) {
+        super(`Storage ${operation} failed for ${path}: ${cause?.message ?? cause}`);
+        this.operation = operation;
+        this.path = path;
+    }
+}
+/** Manifest JSON couldn't be parsed. */
+export class AssetManifestCorruptError extends AssetError {
+    code = 'ASSET_MANIFEST_CORRUPT';
+    httpStatus = 500;
+    constructor(path, cause) {
+        super(`Asset manifest corrupt at ${path}: ${cause?.message ?? cause}`);
+    }
+}
+/** Manifest file missing — asset name doesn't exist on this target. */
+export class AssetManifestNotFoundError extends AssetError {
+    code = 'ASSET_MANIFEST_NOT_FOUND';
+    httpStatus = 404;
+    constructor(name) {
+        super(`Asset not found: ${name}`);
+    }
+}
+/**
+ * Delete was attempted on an asset that pages or fragments still reference.
+ * The design doc's delete-blocked contract: surface the usage list so the
+ * author can rewrite refs or pick a replacement. `refs` is attached as
+ * structured data — HTTP layer serializes it into the 409 response body.
+ */
+export class AssetInUseError extends AssetError {
+    assetName;
+    refs;
+    code = 'ASSET_IN_USE';
+    httpStatus = 409;
+    constructor(assetName, refs) {
+        super(`Asset "${assetName}" is still referenced by ${refs.length} item(s)`);
+        this.assetName = assetName;
+        this.refs = refs;
+    }
+    toResponseBody() {
+        // Spread the base `{ code, message }` so future base-class fields
+        // (e.g. a request id) flow through automatically.
+        return {
+            ...super.toResponseBody(),
+            assetName: this.assetName,
+            refs: this.refs,
+        };
+    }
+}
+/**
+ * Manifest MIME has no known extension mapping, so path enumeration
+ * can't be completed. Operations that need the full path set (delete,
+ * rename, GC) can't proceed. Distinct from validation failure (the
+ * manifest is fine — we just don't know how to lay out bytes for this
+ * MIME) and from storage failure (nothing failed I/O).
+ *
+ * In practice, reaching this means a new kind was added without
+ * extending `url.ts#extFromMime` — the type points at exactly what
+ * needs a fix.
+ */
+export class AssetMimeUnsupportedError extends AssetError {
+    mime;
+    assetName;
+    code = 'ASSET_MIME_UNSUPPORTED';
+    httpStatus = 500;
+    constructor(mime, assetName) {
+        super(`MIME "${mime}" has no extension mapping (asset "${assetName}")`);
+        this.mime = mime;
+        this.assetName = assetName;
+    }
+}
+/**
+ * Responsive-variant generation failed during upload ingest. The original
+ * bytes passed MIME sniffing and dimension extraction but sharp could not
+ * resize them — usually means truncation, corruption, or a decompression-
+ * bomb that sharp declined to decode. The ingest pipeline rolls back the
+ * main-bytes write on this error so the upload fails atomically. HTTP
+ * 400 (client-correctable: re-upload a non-broken image).
+ *
+ * Distinct from `AssetMimeMismatchError` (MIME-sniff rejection) because
+ * the file may be a legitimate JPEG/PNG on paper — we only discovered
+ * the problem once sharp tried to do real work with the pixels.
+ */
+export class AssetVariantGenerationError extends AssetError {
+    assetName;
+    code = 'ASSET_VARIANT_GENERATION_FAILED';
+    httpStatus = 400;
+    constructor(assetName, cause) {
+        super(`Could not generate responsive variants for "${assetName}": ${cause?.message ?? cause}`);
+        this.assetName = assetName;
+    }
+}
+/**
+ * Format-specific preprocessing failed during ingest. Today: SVG
+ * sanitization (DOMPurify rejected the input as malformed XML or it
+ * carried oversized embedded base64). Future: HEIC→JPEG transcode,
+ * EXIF-orientation flatten, animated-GIF frame extraction.
+ *
+ * 400 because the input is the problem (client-correctable). The
+ * specific reason is on `reason` so route handlers / clients can
+ * branch on it. `format` (the MIME) lets clients show the right
+ * remediation copy.
+ */
+export class AssetPreprocessError extends AssetError {
+    format;
+    reason;
+    code = 'ASSET_PREPROCESS_FAILED';
+    httpStatus = 400;
+    constructor(format, reason, cause) {
+        const detail = cause instanceof Error ? `: ${cause.message}` : '';
+        super(`Preprocessing ${format} failed (${reason})${detail}`);
+        this.format = format;
+        this.reason = reason;
+    }
+    toResponseBody() {
+        return {
+            ...super.toResponseBody(),
+            format: this.format,
+            reason: this.reason,
+        };
+    }
+}
+/**
+ * Rename was attempted to a name that's already taken by another asset.
+ * Per design-media.md → Rename: copying onto an existing asset would
+ * silently merge two distinct assets into one — the operation refuses
+ * instead. Authors who genuinely want to merge use replace-and-delete
+ * (different verb, explicit kind-compat check). HTTP 409.
+ */
+export class AssetNameCollisionError extends AssetError {
+    newName;
+    code = 'ASSET_NAME_COLLISION';
+    httpStatus = 409;
+    constructor(newName) {
+        super(`Asset name already in use: ${newName}`);
+        this.newName = newName;
+    }
+    toResponseBody() {
+        return {
+            ...super.toResponseBody(),
+            newName: this.newName,
+        };
+    }
+}
+/**
+ * Replace was attempted between two assets whose kinds (or within
+ * `embedded`, MIME categories) don't match. Per design-media.md →
+ * Delete semantics: "same kind (embedded ↔ embedded, downloadable ↔
+ * downloadable). Within embedded, cross-subtype is blocked
+ * (image ≠ video)."
+ *
+ * Carries structured fields so the UI can render a specific message
+ * ("image → video not allowed") without parsing the human message.
+ */
+export class AssetKindMismatchError extends AssetError {
+    oldKind;
+    oldMimeCategory;
+    newKind;
+    newMimeCategory;
+    code = 'ASSET_KIND_MISMATCH';
+    httpStatus = 409;
+    constructor(oldKind, oldMimeCategory, newKind, newMimeCategory) {
+        super(`Replacement asset kind/category mismatch: old=${oldKind}/${oldMimeCategory}, new=${newKind}/${newMimeCategory}`);
+        this.oldKind = oldKind;
+        this.oldMimeCategory = oldMimeCategory;
+        this.newKind = newKind;
+        this.newMimeCategory = newMimeCategory;
+    }
+    toResponseBody() {
+        return {
+            ...super.toResponseBody(),
+            oldKind: this.oldKind,
+            oldMimeCategory: this.oldMimeCategory,
+            newKind: this.newKind,
+            newMimeCategory: this.newMimeCategory,
+        };
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/assets/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/assets/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAoDH,MAAM,OAAgB,UAAW,SAAQ,KAAK;IAK5C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAA;IACnC,CAAC;IAED;;;;;OAKG;IACH,cAAc;QACZ,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAA;IACnD,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,OAAgB,oBAAqB,SAAQ,UAAU;IAClD,UAAU,GAAG,GAAY,CAAA;CACnC;AAED,kDAAkD;AAClD,MAAM,OAAO,qBAAsB,SAAQ,oBAAoB;IAG3C;IAFT,IAAI,GAAG,oBAA6B,CAAA;IAC7C,YACkB,IAAY,EAC5B,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAA;QAHE,SAAI,GAAJ,IAAI,CAAQ;IAI9B,CAAC;CACF;AAED,0EAA0E;AAC1E,MAAM,OAAO,uBAAwB,SAAQ,oBAAoB;IAEnC;IADnB,IAAI,GAAG,sBAA+B,CAAA;IAC/C,YAA4B,IAAY;QACtC,KAAK,CAAC,uCAAuC,IAAI,EAAE,CAAC,CAAA;QAD1B,SAAI,GAAJ,IAAI,CAAQ;IAExC,CAAC;CACF;AAED,4DAA4D;AAC5D,MAAM,OAAO,sBAAuB,SAAQ,oBAAoB;IAG5C;IACA;IACA;IAJT,IAAI,GAAG,qBAA8B,CAAA;IAC9C,YACkB,IAAY,EACZ,aAAqB,EACrB,QAA6B;QAE7C,KAAK,CAAC,wBAAwB,QAAQ,KAAK,aAAa,OAAO,IAAI,EAAE,CAAC,CAAA;QAJtD,SAAI,GAAJ,IAAI,CAAQ;QACZ,kBAAa,GAAb,aAAa,CAAQ;QACrB,aAAQ,GAAR,QAAQ,CAAqB;IAG/C,CAAC;CACF;AAED,6EAA6E;AAC7E,MAAM,OAAO,sBAAuB,SAAQ,oBAAoB;IAG5C;IACA;IAHT,IAAI,GAAG,qBAA8B,CAAA;IAC9C,YACkB,WAAmB,EACnB,QAAgB;QAEhC,KAAK,CACH,WAAW,IAAI,CAAC;YACd,CAAC,CAAC,mCAAmC;YACrC,CAAC,CAAC,6BAA6B,WAAW,YAAY,QAAQ,SAAS,CAC1E,CAAA;QAPe,gBAAW,GAAX,WAAW,CAAQ;QACnB,aAAQ,GAAR,QAAQ,CAAQ;IAOlC,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,sBAAuB,SAAQ,oBAAoB;IAG5C;IACA;IAHT,IAAI,GAAG,qBAA8B,CAAA;IAC9C,YACkB,WAA0B,EAC1B,YAA+B;QAE/C,KAAK,CAAC,wBAAwB,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,CAAA;QAH1C,gBAAW,GAAX,WAAW,CAAe;QAC1B,iBAAY,GAAZ,YAAY,CAAmB;IAGjD,CAAC;CACF;AAED,SAAS,wBAAwB,CAAC,WAA0B,EAAE,YAA+B;IAC3F,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;IACvF,IAAI,WAAW,KAAK,IAAI;QAAE,OAAO,wCAAwC,OAAO,EAAE,CAAA;IAClF,OAAO,SAAS,WAAW,gBAAgB,OAAO,EAAE,CAAA;AACtD,CAAC;AAED,2EAA2E;AAC3E,MAAM,OAAO,iBAAkB,SAAQ,UAAU;IAI7B;IACA;IAJT,IAAI,GAAG,uBAAgC,CAAA;IACvC,UAAU,GAAG,GAAY,CAAA;IAClC,YACkB,SAA+C,EAC/C,IAAY,EAC5B,KAAc;QAEd,KAAK,CAAC,WAAW,SAAS,eAAe,IAAI,KAAM,KAAe,EAAE,OAAO,IAAI,KAAK,EAAE,CAAC,CAAA;QAJvE,cAAS,GAAT,SAAS,CAAsC;QAC/C,SAAI,GAAJ,IAAI,CAAQ;IAI9B,CAAC;CACF;AAED,wCAAwC;AACxC,MAAM,OAAO,yBAA0B,SAAQ,UAAU;IAC9C,IAAI,GAAG,wBAAiC,CAAA;IACxC,UAAU,GAAG,GAAY,CAAA;IAClC,YAAY,IAAY,EAAE,KAAc;QACtC,KAAK,CAAC,6BAA6B,IAAI,KAAM,KAAe,EAAE,OAAO,IAAI,KAAK,EAAE,CAAC,CAAA;IACnF,CAAC;CACF;AAED,uEAAuE;AACvE,MAAM,OAAO,0BAA2B,SAAQ,UAAU;IAC/C,IAAI,GAAG,0BAAmC,CAAA;IAC1C,UAAU,GAAG,GAAY,CAAA;IAClC,YAAY,IAAY;QACtB,KAAK,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAA;IACnC,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,eAAgB,SAAQ,UAAU;IAI3B;IACA;IAJT,IAAI,GAAG,cAAuB,CAAA;IAC9B,UAAU,GAAG,GAAY,CAAA;IAClC,YACkB,SAAiB,EACjB,IAAyB;QAEzC,KAAK,CAAC,UAAU,SAAS,4BAA4B,IAAI,CAAC,MAAM,UAAU,CAAC,CAAA;QAH3D,cAAS,GAAT,SAAS,CAAQ;QACjB,SAAI,GAAJ,IAAI,CAAqB;IAG3C,CAAC;IAEQ,cAAc;QACrB,kEAAkE;QAClE,kDAAkD;QAClD,OAAO;YACL,GAAG,KAAK,CAAC,cAAc,EAAE;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAA;IACH,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,OAAO,yBAA0B,SAAQ,UAAU;IAIrC;IACA;IAJT,IAAI,GAAG,wBAAiC,CAAA;IACxC,UAAU,GAAG,GAAY,CAAA;IAClC,YACkB,IAAY,EACZ,SAAiB;QAEjC,KAAK,CAAC,SAAS,IAAI,sCAAsC,SAAS,IAAI,CAAC,CAAA;QAHvD,SAAI,GAAJ,IAAI,CAAQ;QACZ,cAAS,GAAT,SAAS,CAAQ;IAGnC,CAAC;CACF;AAED;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,2BAA4B,SAAQ,UAAU;IAIvC;IAHT,IAAI,GAAG,iCAA0C,CAAA;IACjD,UAAU,GAAG,GAAY,CAAA;IAClC,YACkB,SAAiB,EACjC,KAAc;QAEd,KAAK,CAAC,+CAA+C,SAAS,MAAO,KAAe,EAAE,OAAO,IAAI,KAAK,EAAE,CAAC,CAAA;QAHzF,cAAS,GAAT,SAAS,CAAQ;IAInC,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,OAAO,oBAAqB,SAAQ,UAAU;IAIhC;IACA;IAJT,IAAI,GAAG,yBAAkC,CAAA;IACzC,UAAU,GAAG,GAAY,CAAA;IAClC,YACkB,MAAc,EACd,MAAc,EAC9B,KAAe;QAEf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QACjE,KAAK,CAAC,iBAAiB,MAAM,YAAY,MAAM,IAAI,MAAM,EAAE,CAAC,CAAA;QAL5C,WAAM,GAAN,MAAM,CAAQ;QACd,WAAM,GAAN,MAAM,CAAQ;IAKhC,CAAC;IAEQ,cAAc;QACrB,OAAO;YACL,GAAG,KAAK,CAAC,cAAc,EAAE;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAA;IACH,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,uBAAwB,SAAQ,UAAU;IAGzB;IAFnB,IAAI,GAAG,sBAA+B,CAAA;IACtC,UAAU,GAAG,GAAY,CAAA;IAClC,YAA4B,OAAe;QACzC,KAAK,CAAC,8BAA8B,OAAO,EAAE,CAAC,CAAA;QADpB,YAAO,GAAP,OAAO,CAAQ;IAE3C,CAAC;IAEQ,cAAc;QACrB,OAAO;YACL,GAAG,KAAK,CAAC,cAAc,EAAE;YACzB,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAA;IACH,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,sBAAuB,SAAQ,UAAU;IAIlC;IACA;IACA;IACA;IANT,IAAI,GAAG,qBAA8B,CAAA;IACrC,UAAU,GAAG,GAAY,CAAA;IAClC,YACkB,OAAe,EACf,eAAuB,EACvB,OAAe,EACf,eAAuB;QAEvC,KAAK,CACH,iDAAiD,OAAO,IAAI,eAAe,SAAS,OAAO,IAAI,eAAe,EAAE,CACjH,CAAA;QAPe,YAAO,GAAP,OAAO,CAAQ;QACf,oBAAe,GAAf,eAAe,CAAQ;QACvB,YAAO,GAAP,OAAO,CAAQ;QACf,oBAAe,GAAf,eAAe,CAAQ;IAKzC,CAAC;IAEQ,cAAc;QACrB,OAAO;YACL,GAAG,KAAK,CAAC,cAAc,EAAE;YACzB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,eAAe,EAAE,IAAI,CAAC,eAAe;SACtC,CAAA;IACH,CAAC;CACF"}

package/dist/assets/find-refs.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Find every reference to a given asset across a site's pages and
+ * fragments (including locale variants).
+ *
+ * Single responsibility: site-wide orchestration. Loads the site,
+ * iterates every manifest, delegates the per-manifest walk to
+ * `scan-manifest-for-asset.ts`, concatenates results.
+ *
+ * Scan-on-demand model (v1 simplification):
+ * - The design doc calls for an incremental `.refs/` index written on
+ *   every save. That's a separate feature — its writer will import
+ *   `scanManifestForAsset` directly (single-manifest granularity) and
+ *   update the sidecar files, rather than calling this function.
+ * - For v1, delete-check and usage-panel reads use this full scan. O(site
+ *   content size) per call, fine up to a few thousand pages.
+ */
+import type { SiteManifest, StorageProvider } from '../types.js';
+import type { AssetRef } from './refs.js';
+export interface FindRefsInput {
+    storage: StorageProvider;
+    /** Path prefix applied to storage operations (content root). */
+    siteDir: string;
+    /** The asset name to find references to. */
+    assetName: string;
+    /**
+     * Optional project-level site manifest. Passed through to `loadSite` so
+     * scans work in contexts where the target doesn't have its own site.yaml.
+     */
+    manifest?: SiteManifest;
+}
+/**
+ * Find every page or fragment manifest that references `assetName`. One
+ * entry per match — a manifest that references the asset twice produces
+ * two entries with different `componentPath` values.
+ */
+export declare function findAssetRefs(input: FindRefsInput): Promise<AssetRef[]>;
+//# sourceMappingURL=find-refs.d.ts.map

package/dist/assets/find-refs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"find-refs.d.ts","sourceRoot":"","sources":["../../src/assets/find-refs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAIhE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAEzC,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,eAAe,CAAA;IACxB,gEAAgE;IAChE,OAAO,EAAE,MAAM,CAAA;IACf,4CAA4C;IAC5C,SAAS,EAAE,MAAM,CAAA;IACjB;;;OAGG;IACH,QAAQ,CAAC,EAAE,YAAY,CAAA;CACxB;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CA6B7E"}

package/dist/assets/find-refs.js

@@ -0,0 +1,35 @@
+import { createContentRoot } from '../content-root.js';
+import { allFragmentEntries, allPageEntries, loadSite } from '../site-loader.js';
+import { scanManifestForAsset } from './scan-manifest-for-asset.js';
+/**
+ * Find every page or fragment manifest that references `assetName`. One
+ * entry per match — a manifest that references the asset twice produces
+ * two entries with different `componentPath` values.
+ */
+export async function findAssetRefs(input) {
+    const contentRoot = createContentRoot(input.storage, input.siteDir);
+    const site = await loadSite({ contentRoot, manifest: input.manifest });
+    const refs = [];
+    for (const { name, page, locale } of allPageEntries(site)) {
+        refs.push(...scanManifestForAsset({
+            manifest: page,
+            manifestPath: localeManifestPath('pages', name, 'page', locale),
+            source: 'page',
+            assetName: input.assetName,
+        }));
+    }
+    for (const { name, fragment, locale } of allFragmentEntries(site)) {
+        refs.push(...scanManifestForAsset({
+            manifest: fragment,
+            manifestPath: localeManifestPath('fragments', name, 'fragment', locale),
+            source: 'fragment',
+            assetName: input.assetName,
+        }));
+    }
+    return refs;
+}
+function localeManifestPath(root, itemName, baseName, locale) {
+    const file = locale ? `${baseName}.${locale}.json` : `${baseName}.json`;
+    return `${root}/${itemName}/${file}`;
+}
+//# sourceMappingURL=find-refs.js.map

package/dist/assets/find-refs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"find-refs.js","sourceRoot":"","sources":["../../src/assets/find-refs.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAChF,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAA;AAgBnE;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAoB;IACtD,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IACnE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAA;IAEtE,MAAM,IAAI,GAAe,EAAE,CAAA;IAE3B,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC,IAAI,CACP,GAAG,oBAAoB,CAAC;YACtB,QAAQ,EAAE,IAAI;YACd,YAAY,EAAE,kBAAkB,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/D,MAAM,EAAE,MAAM;YACd,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CACH,CAAA;IACH,CAAC;IAED,KAAK,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;QAClE,IAAI,CAAC,IAAI,CACP,GAAG,oBAAoB,CAAC;YACtB,QAAQ,EAAE,QAAQ;YAClB,YAAY,EAAE,kBAAkB,CAAC,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC;YACvE,MAAM,EAAE,UAAU;YAClB,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CACH,CAAA;IACH,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,kBAAkB,CACzB,IAA2B,EAC3B,QAAgB,EAChB,QAA6B,EAC7B,MAA0B;IAE1B,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,QAAQ,OAAO,CAAA;IACvE,OAAO,GAAG,IAAI,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAA;AACtC,CAAC"}

package/dist/assets/hash.d.ts

@@ -0,0 +1,13 @@
+/** Length of the hex prefix embedded in asset URLs. Matches the doc's `{hash8}`. */
+export declare const ASSET_HASH_LENGTH = 8;
+/** Hash a complete byte buffer — convenience wrapper for tests and small payloads. */
+export declare function hashBytes(bytes: Uint8Array): string;
+/**
+ * Hash a byte stream as it flows through. Consumes the stream. Returns the
+ * 8-char hex prefix once the stream ends.
+ *
+ * For upload pipelines that need to both hash and persist bytes, tee the
+ * source stream and pass one branch here, the other to storage.
+ */
+export declare function hashStream(stream: ReadableStream<Uint8Array>): Promise<string>;
+//# sourceMappingURL=hash.d.ts.map

package/dist/assets/hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.d.ts","sourceRoot":"","sources":["../../src/assets/hash.ts"],"names":[],"mappings":"AAiBA,oFAAoF;AACpF,eAAO,MAAM,iBAAiB,IAAI,CAAA;AAElC,sFAAsF;AACtF,wBAAgB,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAGnD;AAED;;;;;;GAMG;AACH,wBAAsB,UAAU,CAAC,MAAM,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CASpF"}