gazetta 0.6.0 → 0.7.0

package/dist/assets/ingest.js

@@ -0,0 +1,308 @@
+import { recordWrite } from '../history-recorder.js';
+import { rmIgnoreMissing } from '../providers/_rm-ignore-missing.js';
+import { runAnalyzers } from './analyze.js';
+import { AssetMimeMismatchError, AssetStorageError, AssetVariantGenerationError } from './errors.js';
+import { ASSET_HASH_LENGTH, hashBytes } from './hash.js';
+import { extractImageDimensions } from './image-metadata.js';
+import { assetBytesPath, assetVariantBytesPath, manifestPath, writeManifest } from './manifest.js';
+import { sniffMimeFromStream } from './mime-sniff.js';
+import { validateUpload } from './validate.js';
+import { runPreprocessors } from './preprocess.js';
+import { generateVariants } from './variants.js';
+/**
+ * Ext-from-MIME for the v1 allowlist. Image: JPEG, PNG, SVG, GIF.
+ * Audio: MP3, WAV, FLAC, Opus, AAC, M4A, OGG. Wide rollout extends
+ * this map and the parallel `extFromMime` in `url.ts`.
+ */
+const EXT_BY_MIME = {
+    // Images
+    'image/jpeg': 'jpg',
+    'image/png': 'png',
+    'image/svg+xml': 'svg',
+    'image/gif': 'gif',
+    // Audio
+    'audio/mpeg': 'mp3',
+    'audio/wav': 'wav',
+    'audio/x-wav': 'wav',
+    'audio/flac': 'flac',
+    'audio/x-flac': 'flac',
+    'audio/ogg': 'ogg',
+    'audio/opus': 'opus',
+    'audio/aac': 'aac',
+    'audio/mp4': 'm4a',
+    'audio/x-m4a': 'm4a',
+};
+/**
+ * Ingest an asset. On success, bytes are persisted at
+ * `{assetsRoot}/{name}-{hash}.{ext}` and the manifest at
+ * `{assetsRoot}/{name}.asset.json`.
+ *
+ * Throws:
+ * - `AssetValidationError` — name, size, or MIME failed policy
+ * - `AssetStorageError` — storage write failed
+ */
+export async function ingestAsset(input) {
+    // Collect bytes once so we can sniff, hash, measure, and persist from the
+    // same buffer without re-consuming the source stream.
+    const initialBuffer = await collectBytes(input.bytes);
+    // Sniff MIME. file-type needs a web stream; build one from the buffer.
+    const { mime, ext } = await sniffMimeFromStream(byteStreamFrom(initialBuffer));
+    // Validate name + size + MIME against the per-target policy. Size
+    // is checked pre-preprocess: the cap protects against worker body
+    // limits + storage exhaustion at the request boundary, before any
+    // transformation happens. SVG sanitization can shrink the bytes,
+    // but a 100 MB SVG-of-doom should be rejected at the door, not
+    // after we've parsed it.
+    validateUpload({ name: input.requestedName, claimedSize: initialBuffer.byteLength, sniffedMime: mime }, input.policy);
+    // Format-specific preprocessing — SVG sanitization today; HEIC
+    // transcode, EXIF orientation, animated-GIF poster extraction,
+    // etc. plug in via the `UploadPreprocessor` interface. Ingest
+    // doesn't know which preprocessors are registered or what they do
+    // (DIP / OCP — adding a format = new module + register, no edits
+    // here). Failures throw `AssetPreprocessError` (HTTP 400).
+    const { bytes: buffer } = await runPreprocessors(initialBuffer, mime, input.preprocessors);
+    const size = buffer.byteLength;
+    // Extension is derived from the sniffed MIME (we ignore the client-sent
+    // extension in the requested name — the validator already stripped it).
+    const bytesExt = ext ?? EXT_BY_MIME[mime ?? ''] ?? '';
+    if (!bytesExt) {
+        throw new AssetMimeMismatchError(mime, []);
+    }
+    const hash = hashBytes(buffer);
+    if (hash.length !== ASSET_HASH_LENGTH) {
+        throw new AssetStorageError('write', input.requestedName, new Error('unexpected hash length'));
+    }
+    const canonicalName = baseName(input.requestedName);
+    // Format-specific analysis — width/height for static images, plus
+    // animated detection + first-frame poster extraction for animated.
+    // Analyzers contribute manifest fields (`width`, `height`,
+    // `animated`, `frames`, `duration`, `poster`) and optional
+    // supplementary byte files (animated images add a `-poster.png`).
+    // Pluggable via `input.analyzers`; defaults handle JPEG / PNG /
+    // GIF / animated WebP / animated AVIF.
+    const analysis = (mime ?? '').startsWith('image/') && mime !== 'image/svg+xml'
+        ? await runAnalyzers({ bytes: buffer, assetName: canonicalName, hash, ext: bytesExt, mime: mime ?? '' }, input.analyzers)
+        : {
+            manifestPatch: undefined,
+            supplementaryFiles: undefined,
+        };
+    // SVG dims still come from the legacy inline path — sharp handles
+    // SVG via libvips but the post-sanitize bytes need their own pass
+    // and analyzers skip SVG by design (`staticImageAnalyzer.matches`
+    // excludes it). One day SVG dims could move into a dedicated SVG
+    // analyzer; not today.
+    const svgDims = mime === 'image/svg+xml' ? await extractImageDimensions(buffer) : null;
+    // Generate variants in memory before we touch storage. Vector
+    // formats (SVG) and animated images skip variants — they don't
+    // ladder-resize correctly. The rule lives in `shouldGenerateVariants`
+    // for testability + extension.
+    const generatedVariants = [];
+    if (shouldGenerateVariants(mime, analysis.manifestPatch?.animated)) {
+        try {
+            const generated = await generateVariants(buffer);
+            generatedVariants.push(...generated);
+        }
+        catch (err) {
+            throw new AssetVariantGenerationError(canonicalName, err);
+        }
+    }
+    // Compose the manifest in memory. Variant paths come from the same
+    // `assetVariantBytesPath` helper used at write time — single source of
+    // truth so the manifest's `variants[i].path` always matches the
+    // on-disk filename.
+    const manifestVariants = generatedVariants.map(v => ({
+        width: v.width,
+        path: assetVariantBytesPath(canonicalName, hash, bytesExt, v.width),
+        size: v.bytes.byteLength,
+    }));
+    const bytesRel = assetBytesPath(canonicalName, hash, bytesExt);
+    const bytesPath = `${input.assetsRoot}/${bytesRel}`;
+    const manifest = {
+        version: 1,
+        name: canonicalName,
+        kind: 'embedded',
+        source: 'internal',
+        mime: mime ?? 'application/octet-stream',
+        size,
+        hash,
+        // Width/height come from analyzer for non-SVG, from the legacy
+        // inline path for SVG. Analyzer takes precedence when present.
+        width: analysis.manifestPatch?.width ?? svgDims?.width ?? null,
+        height: analysis.manifestPatch?.height ?? svgDims?.height ?? null,
+        variants: manifestVariants,
+        alt: input.alt,
+        // Spread analyzer-contributed enrichment fields (animated, frames,
+        // duration, poster). Only present when the analyzer set them, so
+        // the manifest doesn't carry undefined values for static assets.
+        ...(analysis.manifestPatch?.animated !== undefined ? { animated: analysis.manifestPatch.animated } : {}),
+        ...(analysis.manifestPatch?.frames !== undefined ? { frames: analysis.manifestPatch.frames } : {}),
+        ...(analysis.manifestPatch?.duration !== undefined ? { duration: analysis.manifestPatch.duration } : {}),
+        ...(analysis.manifestPatch?.poster !== undefined ? { poster: analysis.manifestPatch.poster } : {}),
+        uploadedAt: new Date().toISOString(),
+        uploadedBy: input.uploadedBy,
+    };
+    const manifestRelPath = manifestPath(canonicalName);
+    const manifestSerialized = `${JSON.stringify(manifest, null, 2)}\n`;
+    // Resolve absolute paths for the supplementary files contributed by
+    // the analyzer (animated poster today). Used in both the history
+    // items list and the write loop.
+    const supplementaryFiles = (analysis.supplementaryFiles ?? []).map(f => ({
+        abs: `${input.assetsRoot}/${f.path}`,
+        bytes: f.bytes,
+    }));
+    // Record history BEFORE any writes. Mirrors the replace.ts pattern:
+    // recorder's first-time baseline scan must see pre-op state. Items
+    // include the manifest (text), primary bytes (binary), every variant
+    // (binary), and any analyzer-contributed supplementary files (e.g.
+    // animated-image posters) — the snapshot covers the full asset.
+    if (input.history) {
+        if (!input.contentRoot) {
+            throw new Error('ingestAsset: history requires contentRoot');
+        }
+        const items = [
+            { path: `${input.assetsRoot}/${manifestRelPath}`, content: manifestSerialized },
+            { path: bytesPath, content: buffer },
+            ...generatedVariants.map(v => ({
+                path: `${input.assetsRoot}/${assetVariantBytesPath(canonicalName, hash, bytesExt, v.width)}`,
+                content: v.bytes,
+            })),
+            ...supplementaryFiles.map(f => ({ path: f.abs, content: f.bytes })),
+        ];
+        await recordWrite({
+            history: input.history,
+            contentRoot: input.contentRoot,
+            operation: 'save',
+            author: input.author,
+            items,
+            message: `Upload ${canonicalName}`,
+        });
+    }
+    // Persist primary bytes.
+    try {
+        await input.storage.writeStream(bytesPath, byteStreamFrom(buffer));
+    }
+    catch (err) {
+        throw new AssetStorageError('write', bytesPath, err);
+    }
+    // Persist variants. Failures roll back primary bytes + previously
+    // written variants so partial uploads don't leak orphans on disk.
+    const writtenPaths = [bytesPath];
+    for (const v of generatedVariants) {
+        const relPath = assetVariantBytesPath(canonicalName, hash, bytesExt, v.width);
+        const absPath = `${input.assetsRoot}/${relPath}`;
+        try {
+            await input.storage.writeStream(absPath, byteStreamFrom(v.bytes));
+        }
+        catch (err) {
+            await rollback(input.storage, writtenPaths);
+            throw new AssetStorageError('write', absPath, err);
+        }
+        writtenPaths.push(absPath);
+    }
+    // Persist supplementary files (e.g. animated poster). Same rollback
+    // discipline — failures unwind every byte file written so far.
+    for (const f of supplementaryFiles) {
+        try {
+            await input.storage.writeStream(f.abs, byteStreamFrom(f.bytes));
+        }
+        catch (err) {
+            await rollback(input.storage, writtenPaths);
+            throw new AssetStorageError('write', f.abs, err);
+        }
+        writtenPaths.push(f.abs);
+    }
+    // Write manifest last — it's the visible "asset exists" record.
+    try {
+        await writeManifest(input.storage, input.assetsRoot, manifest);
+    }
+    catch (err) {
+        await rollback(input.storage, writtenPaths);
+        throw err;
+    }
+    return { manifest, bytesPath };
+}
+/**
+ * Roll back a partially-committed upload by removing every path we
+ * committed before the failure. Best-effort; each `rm` is idempotent
+ * (`rmIgnoreMissing`) so a subsequent retry won't be confused by
+ * leftovers. Rollback errors are swallowed — the caller's original
+ * error is what matters; a rollback failure becomes an orphan byte
+ * file that GC will reclaim later.
+ *
+ * Takes an absolute-path list rather than composing paths itself —
+ * caller (who already has the pieces) knows; this helper stays a
+ * dumb loop of `rmIgnoreMissing`.
+ */
+async function rollback(storage, paths) {
+    for (const path of paths) {
+        try {
+            await rmIgnoreMissing(storage, path);
+        }
+        catch {
+            /* best-effort */
+        }
+    }
+}
+/**
+ * Whether to generate responsive variants for this asset. Three rules:
+ *
+ *   1. Non-image MIMEs don't get variants (no ladder concept)
+ *   2. SVG is vector — scales on the browser
+ *   3. Animated images can't be ladder-resized correctly without
+ *      full transcoding (sharp's resize on a multi-frame source
+ *      flattens to the first frame)
+ *
+ * Pure function — the rules live in one place for testability +
+ * single-source-of-truth as new format-specific opt-outs land.
+ */
+function shouldGenerateVariants(mime, animated) {
+    if (!mime || !mime.startsWith('image/'))
+        return false;
+    if (mime === 'image/svg+xml')
+        return false;
+    if (animated === true)
+        return false;
+    return true;
+}
+/**
+ * Strip any trailing extension from a user-supplied name. The canonical
+ * asset name is extension-free; extensions live on the byte filename
+ * (`{name}-{hash}.{ext}`). Derives the same base name regardless of what
+ * the client sent.
+ */
+function baseName(requested) {
+    const dot = requested.lastIndexOf('.');
+    return dot > 0 ? requested.slice(0, dot) : requested;
+}
+/** Collect a byte stream into a single Uint8Array. */
+async function collectBytes(stream) {
+    const reader = stream.getReader();
+    const parts = [];
+    let total = 0;
+    while (true) {
+        const { value, done } = await reader.read();
+        if (done)
+            break;
+        if (value) {
+            parts.push(value);
+            total += value.byteLength;
+        }
+    }
+    const out = new Uint8Array(total);
+    let offset = 0;
+    for (const p of parts) {
+        out.set(p, offset);
+        offset += p.byteLength;
+    }
+    return out;
+}
+/** Wrap a Uint8Array as a one-shot ReadableStream. */
+function byteStreamFrom(bytes) {
+    return new ReadableStream({
+        start(controller) {
+            controller.enqueue(bytes);
+            controller.close();
+        },
+    });
+}
+//# sourceMappingURL=ingest.js.map

package/dist/assets/ingest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingest.js","sourceRoot":"","sources":["../../src/assets/ingest.ts"],"names":[],"mappings":"AA4BA,OAAO,EAAE,WAAW,EAAoB,MAAM,wBAAwB,CAAA;AAGtE,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAA;AACpE,OAAO,EAAE,YAAY,EAAuB,MAAM,cAAc,CAAA;AAChE,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAA;AACpG,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AAC5D,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAClG,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AACrD,OAAO,EAAqB,cAAc,EAAE,MAAM,eAAe,CAAA;AACjE,OAAO,EAAE,gBAAgB,EAA2B,MAAM,iBAAiB,CAAA;AAC3E,OAAO,EAAE,gBAAgB,EAAyB,MAAM,eAAe,CAAA;AAEvE;;;;GAIG;AACH,MAAM,WAAW,GAA2B;IAC1C,SAAS;IACT,YAAY,EAAE,KAAK;IACnB,WAAW,EAAE,KAAK;IAClB,eAAe,EAAE,KAAK;IACtB,WAAW,EAAE,KAAK;IAClB,QAAQ;IACR,YAAY,EAAE,KAAK;IACnB,WAAW,EAAE,KAAK;IAClB,aAAa,EAAE,KAAK;IACpB,YAAY,EAAE,MAAM;IACpB,cAAc,EAAE,MAAM;IACtB,WAAW,EAAE,KAAK;IAClB,YAAY,EAAE,MAAM;IACpB,WAAW,EAAE,KAAK;IAClB,WAAW,EAAE,KAAK;IAClB,aAAa,EAAE,KAAK;CACrB,CAAA;AAwDD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAkB;IAClD,0EAA0E;IAC1E,sDAAsD;IACtD,MAAM,aAAa,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAErD,uEAAuE;IACvE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,mBAAmB,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,CAAA;IAE9E,kEAAkE;IAClE,kEAAkE;IAClE,kEAAkE;IAClE,iEAAiE;IACjE,+DAA+D;IAC/D,yBAAyB;IACzB,cAAc,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,aAAa,EAAE,WAAW,EAAE,aAAa,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;IAErH,+DAA+D;IAC/D,+DAA+D;IAC/D,8DAA8D;IAC9D,kEAAkE;IAClE,iEAAiE;IACjE,2DAA2D;IAC3D,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,gBAAgB,CAAC,aAAa,EAAE,IAAI,EAAE,KAAK,CAAC,aAAa,CAAC,CAAA;IAC1F,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAA;IAE9B,wEAAwE;IACxE,wEAAwE;IACxE,MAAM,QAAQ,GAAG,GAAG,IAAI,WAAW,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,EAAE,CAAA;IACrD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,sBAAsB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IAC5C,CAAC;IAED,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAA;IAC9B,IAAI,IAAI,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;QACtC,MAAM,IAAI,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,EAAE,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAA;IAChG,CAAC;IAED,MAAM,aAAa,GAAG,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;IAEnD,kEAAkE;IAClE,mEAAmE;IACnE,2DAA2D;IAC3D,2DAA2D;IAC3D,kEAAkE;IAClE,gEAAgE;IAChE,uCAAuC;IACvC,MAAM,QAAQ,GACZ,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,IAAI,KAAK,eAAe;QAC3D,CAAC,CAAC,MAAM,YAAY,CAChB,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,EAAE,EAClF,KAAK,CAAC,SAAS,CAChB;QACH,CAAC,CAAC;YACE,aAAa,EAAE,SAAS;YACxB,kBAAkB,EAAE,SAAuE;SAC5F,CAAA;IAEP,kEAAkE;IAClE,kEAAkE;IAClE,kEAAkE;IAClE,iEAAiE;IACjE,uBAAuB;IACvB,MAAM,OAAO,GAAG,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,MAAM,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAEtF,8DAA8D;IAC9D,+DAA+D;IAC/D,sEAAsE;IACtE,+BAA+B;IAC/B,MAAM,iBAAiB,GAAuB,EAAE,CAAA;IAChD,IAAI,sBAAsB,CAAC,IAAI,EAAE,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,EAAE,CAAC;QACnE,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAA;YAChD,iBAAiB,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,CAAA;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,2BAA2B,CAAC,aAAa,EAAE,GAAG,CAAC,CAAA;QAC3D,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,uEAAuE;IACvE,gEAAgE;IAChE,oBAAoB;IACpB,MAAM,gBAAgB,GAAmB,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACnE,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,IAAI,EAAE,qBAAqB,CAAC,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC;QACnE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU;KACzB,CAAC,CAAC,CAAA;IACH,MAAM,QAAQ,GAAG,cAAc,CAAC,aAAa,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;IAC9D,MAAM,SAAS,GAAG,GAAG,KAAK,CAAC,UAAU,IAAI,QAAQ,EAAE,CAAA;IACnD,MAAM,QAAQ,GAAkB;QAC9B,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,UAAU;QAClB,IAAI,EAAE,IAAI,IAAI,0BAA0B;QACxC,IAAI;QACJ,IAAI;QACJ,+DAA+D;QAC/D,+DAA+D;QAC/D,KAAK,EAAE,QAAQ,CAAC,aAAa,EAAE,KAAK,IAAI,OAAO,EAAE,KAAK,IAAI,IAAI;QAC9D,MAAM,EAAE,QAAQ,CAAC,aAAa,EAAE,MAAM,IAAI,OAAO,EAAE,MAAM,IAAI,IAAI;QACjE,QAAQ,EAAE,gBAAgB;QAC1B,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,mEAAmE;QACnE,iEAAiE;QACjE,iEAAiE;QACjE,GAAG,CAAC,QAAQ,CAAC,aAAa,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxG,GAAG,CAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClG,GAAG,CAAC,QAAQ,CAAC,aAAa,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxG,GAAG,CAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClG,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAA;IACD,MAAM,eAAe,GAAG,YAAY,CAAC,aAAa,CAAC,CAAA;IACnD,MAAM,kBAAkB,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAA;IAEnE,oEAAoE;IACpE,iEAAiE;IACjE,iCAAiC;IACjC,MAAM,kBAAkB,GAAG,CAAC,QAAQ,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACvE,GAAG,EAAE,GAAG,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,EAAE;QACpC,KAAK,EAAE,CAAC,CAAC,KAAK;KACf,CAAC,CAAC,CAAA;IAEH,oEAAoE;IACpE,mEAAmE;IACnE,qEAAqE;IACrE,mEAAmE;IACnE,gEAAgE;IAChE,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;QAC9D,CAAC;QACD,MAAM,KAAK,GAAkB;YAC3B,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,UAAU,IAAI,eAAe,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE;YAC/E,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE;YACpC,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC7B,IAAI,EAAE,GAAG,KAAK,CAAC,UAAU,IAAI,qBAAqB,CAAC,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE;gBAC5F,OAAO,EAAE,CAAC,CAAC,KAAK;aACjB,CAAC,CAAC;YACH,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;SACpE,CAAA;QACD,MAAM,WAAW,CAAC;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,SAAS,EAAE,MAAM;YACjB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK;YACL,OAAO,EAAE,UAAU,aAAa,EAAE;SACnC,CAAC,CAAA;IACJ,CAAC;IAED,yBAAyB;IACzB,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAA;IACpE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,iBAAiB,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,CAAA;IACtD,CAAC;IAED,kEAAkE;IAClE,kEAAkE;IAClE,MAAM,YAAY,GAAa,CAAC,SAAS,CAAC,CAAA;IAC1C,KAAK,MAAM,CAAC,IAAI,iBAAiB,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,qBAAqB,CAAC,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAA;QAC7E,MAAM,OAAO,GAAG,GAAG,KAAK,CAAC,UAAU,IAAI,OAAO,EAAE,CAAA;QAChD,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;QACnE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;YAC3C,MAAM,IAAI,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,CAAA;QACpD,CAAC;QACD,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC5B,CAAC;IAED,oEAAoE;IACpE,+DAA+D;IAC/D,KAAK,MAAM,CAAC,IAAI,kBAAkB,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;QACjE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;YAC3C,MAAM,IAAI,iBAAiB,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QAClD,CAAC;QACD,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;IAC1B,CAAC;IAED,gEAAgE;IAChE,IAAI,CAAC;QACH,MAAM,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;IAChE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;QAC3C,MAAM,GAAG,CAAA;IACX,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAA;AAChC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,QAAQ,CAAC,OAAwB,EAAE,KAAwB;IACxE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,sBAAsB,CAAC,IAA+B,EAAE,QAA6B;IAC5F,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAA;IACrD,IAAI,IAAI,KAAK,eAAe;QAAE,OAAO,KAAK,CAAA;IAC1C,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IACnC,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;GAKG;AACH,SAAS,QAAQ,CAAC,SAAiB;IACjC,MAAM,GAAG,GAAG,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;IACtC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AACtD,CAAC;AAED,sDAAsD;AACtD,KAAK,UAAU,YAAY,CAAC,MAAkC;IAC5D,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAA;IACjC,MAAM,KAAK,GAAiB,EAAE,CAAA;IAC9B,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;QAC3C,IAAI,IAAI;YAAE,MAAK;QACf,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACjB,KAAK,IAAI,KAAK,CAAC,UAAU,CAAA;QAC3B,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAA;IACjC,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;QAClB,MAAM,IAAI,CAAC,CAAC,UAAU,CAAA;IACxB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,sDAAsD;AACtD,SAAS,cAAc,CAAC,KAAiB;IACvC,OAAO,IAAI,cAAc,CAAC;QACxB,KAAK,CAAC,UAAU;YACd,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;YACzB,UAAU,CAAC,KAAK,EAAE,CAAA;QACpB,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/assets/kind-compat.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Asset-kind compatibility for replace operations.
+ *
+ * Per design-media.md → Delete semantics:
+ *   "Replace compatibility: same kind (embedded ↔ embedded,
+ *    downloadable ↔ downloadable). Within embedded, cross-subtype is
+ *    blocked (image ≠ video). Same kind + different MIME is allowed
+ *    (JPEG → PNG, PDF → DOCX)."
+ *
+ * Single responsibility: decide "can asset B replace asset A?" — pure,
+ * no I/O. Callers (replace, future rename) use this to validate
+ * compatibility before rewriting refs.
+ */
+import type { AssetManifest } from '../schema/types.js';
+/**
+ * The coarse MIME category used for compatibility within `embedded`.
+ * We're not asking "same MIME" (PNG → JPEG is fine); we're asking
+ * "same rendering contract" (image tags can't swap with video tags).
+ */
+export declare function mimeCategory(mime: string): string;
+export interface CompatCheck {
+    readonly compatible: boolean;
+    readonly oldKind: string;
+    readonly oldMimeCategory: string;
+    readonly newKind: string;
+    readonly newMimeCategory: string;
+}
+/**
+ * Is `newAsset` a valid replacement for `oldAsset`? Returns a result
+ * object either way — callers can branch on `compatible` and pass the
+ * detail fields into the typed error when it's false.
+ */
+export declare function checkKindCompat(oldAsset: AssetManifest, newAsset: AssetManifest): CompatCheck;
+//# sourceMappingURL=kind-compat.d.ts.map

package/dist/assets/kind-compat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kind-compat.d.ts","sourceRoot":"","sources":["../../src/assets/kind-compat.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAEvD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAIjD;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAA;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;CACjC;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE,aAAa,GAAG,WAAW,CAgB7F"}

package/dist/assets/kind-compat.js

@@ -0,0 +1,33 @@
+/**
+ * The coarse MIME category used for compatibility within `embedded`.
+ * We're not asking "same MIME" (PNG → JPEG is fine); we're asking
+ * "same rendering contract" (image tags can't swap with video tags).
+ */
+export function mimeCategory(mime) {
+    // "image/jpeg" → "image"; "video/mp4" → "video"; "application/pdf" → "application"
+    const slash = mime.indexOf('/');
+    return slash === -1 ? mime : mime.slice(0, slash);
+}
+/**
+ * Is `newAsset` a valid replacement for `oldAsset`? Returns a result
+ * object either way — callers can branch on `compatible` and pass the
+ * detail fields into the typed error when it's false.
+ */
+export function checkKindCompat(oldAsset, newAsset) {
+    const oldCat = mimeCategory(oldAsset.mime);
+    const newCat = mimeCategory(newAsset.mime);
+    // Compatible when kind matches AND mime-category matches. The MIME
+    // check is only meaningful within `embedded` (that's where the
+    // image/video/audio distinction lives), but applying it to
+    // `downloadable` and `font` is harmless — all PDFs share the
+    // "application" category, all fonts share "font", etc.
+    const compatible = oldAsset.kind === newAsset.kind && oldCat === newCat;
+    return {
+        compatible,
+        oldKind: oldAsset.kind,
+        oldMimeCategory: oldCat,
+        newKind: newAsset.kind,
+        newMimeCategory: newCat,
+    };
+}
+//# sourceMappingURL=kind-compat.js.map

package/dist/assets/kind-compat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kind-compat.js","sourceRoot":"","sources":["../../src/assets/kind-compat.ts"],"names":[],"mappings":"AAeA;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,mFAAmF;IACnF,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAC/B,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;AACnD,CAAC;AAUD;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,QAAuB,EAAE,QAAuB;IAC9E,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;IAC1C,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;IAC1C,mEAAmE;IACnE,+DAA+D;IAC/D,2DAA2D;IAC3D,6DAA6D;IAC7D,uDAAuD;IACvD,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,IAAI,MAAM,KAAK,MAAM,CAAA;IACvE,OAAO;QACL,UAAU;QACV,OAAO,EAAE,QAAQ,CAAC,IAAI;QACtB,eAAe,EAAE,MAAM;QACvB,OAAO,EAAE,QAAQ,CAAC,IAAI;QACtB,eAAe,EAAE,MAAM;KACxB,CAAA;AACH,CAAC"}

package/dist/assets/list.d.ts

@@ -0,0 +1,46 @@
+/**
+ * List operation — enumerate assets on a target.
+ *
+ * Reads every `*.asset.json` manifest in the `assets/` directory and returns
+ * a summary of each. Summary shape is the minimum the library UI needs —
+ * full manifests are fetched on-demand by the detail pane.
+ *
+ * Separate from `manifest.ts` because:
+ * - manifest.ts owns read/write of a single manifest
+ * - list.ts owns enumeration (which is directory-scan, corrupt-manifest
+ *   handling, and summary projection — not shared with single-manifest I/O)
+ *
+ * Corrupt-manifest resilience: one bad manifest doesn't break the whole
+ * listing. Corrupt entries are logged and omitted. The UI showing an
+ * "assets: 42" badge shouldn't fail because one JSON file has a stray
+ * comma — that's a bug-in-authoring, not a bug in the CMS.
+ */
+import type { StorageProvider } from '../types.js';
+import type { AssetManifest, AssetSummary } from '../schema/types.js';
+export type { AssetSummary };
+/**
+ * Project a full manifest to its library-list summary shape. Override
+ * locale/theme lists are passed in by the caller — `toSummary` is pure
+ * and doesn't do I/O. Single-asset GET passes empty arrays + an
+ * optional override-discovery pass; the bulk list passes pre-bucketed
+ * results from the directory scan.
+ */
+export declare function toSummary(manifest: AssetManifest, overrideLocales?: readonly string[], overrideThemes?: readonly string[]): AssetSummary;
+export interface ListAssetsInput {
+    storage: StorageProvider;
+    /** Path prefix for assets (typically `"assets"`). */
+    assetsRoot: string;
+}
+/**
+ * List every asset on the target. Returns an empty array when the `assets/`
+ * directory doesn't exist — this is valid for a target that's never received
+ * any assets (same "empty is fine" policy as pages/fragments).
+ *
+ * Override-locale/theme detection happens in the same directory scan —
+ * no extra I/O. We bucket every `*.asset.json` file by its asset name;
+ * default manifests get loaded into summaries, and locale/theme variant
+ * filenames contribute to the parent asset's `overrideLocales` /
+ * `overrideThemes` lists.
+ */
+export declare function listAssets(input: ListAssetsInput): Promise<AssetSummary[]>;
+//# sourceMappingURL=list.d.ts.map

package/dist/assets/list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../src/assets/list.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAKrE,YAAY,EAAE,YAAY,EAAE,CAAA;AAE5B;;;;;;GAMG;AACH,wBAAgB,SAAS,CACvB,QAAQ,EAAE,aAAa,EACvB,eAAe,GAAE,SAAS,MAAM,EAAO,EACvC,cAAc,GAAE,SAAS,MAAM,EAAO,GACrC,YAAY,CAqBd;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,eAAe,CAAA;IACxB,qDAAqD;IACrD,UAAU,EAAE,MAAM,CAAA;CACnB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAiDhF"}

package/dist/assets/list.js

@@ -0,0 +1,102 @@
+import { AssetStorageError } from './errors.js';
+import { parseManifestFilename } from './manifest-filename.js';
+import { readManifest } from './manifest.js';
+/**
+ * Project a full manifest to its library-list summary shape. Override
+ * locale/theme lists are passed in by the caller — `toSummary` is pure
+ * and doesn't do I/O. Single-asset GET passes empty arrays + an
+ * optional override-discovery pass; the bulk list passes pre-bucketed
+ * results from the directory scan.
+ */
+export function toSummary(manifest, overrideLocales = [], overrideThemes = []) {
+    return {
+        name: manifest.name,
+        kind: manifest.kind,
+        mime: manifest.mime,
+        size: manifest.size,
+        hash: manifest.hash,
+        width: manifest.width,
+        height: manifest.height,
+        alt: manifest.alt,
+        // Project focalPoint when set; library cards use it for thumbnail
+        // positioning, detail pane uses it as the editor's initial value.
+        ...(manifest.focalPoint !== undefined ? { focalPoint: manifest.focalPoint } : {}),
+        // Animated indicator + poster — surfaces the multi-frame state to
+        // the admin without forcing a separate detail-pane fetch.
+        ...(manifest.animated !== undefined ? { animated: manifest.animated } : {}),
+        ...(manifest.poster !== undefined ? { poster: manifest.poster } : {}),
+        uploadedAt: manifest.uploadedAt,
+        overrideLocales: [...overrideLocales].sort(),
+        overrideThemes: [...overrideThemes].sort(),
+    };
+}
+/**
+ * List every asset on the target. Returns an empty array when the `assets/`
+ * directory doesn't exist — this is valid for a target that's never received
+ * any assets (same "empty is fine" policy as pages/fragments).
+ *
+ * Override-locale/theme detection happens in the same directory scan —
+ * no extra I/O. We bucket every `*.asset.json` file by its asset name;
+ * default manifests get loaded into summaries, and locale/theme variant
+ * filenames contribute to the parent asset's `overrideLocales` /
+ * `overrideThemes` lists.
+ */
+export async function listAssets(input) {
+    let entries;
+    try {
+        entries = await input.storage.readDir(input.assetsRoot);
+    }
+    catch (err) {
+        // Missing directory — valid state (no assets yet). Any other error is real.
+        if (isDirectoryMissing(err))
+            return [];
+        throw new AssetStorageError('read', input.assetsRoot, err);
+    }
+    // Bucket entries by asset name in one pass: identify the default
+    // manifest filenames and collect each asset's locale/theme variants
+    // alongside. The variants are detected via parseManifestFilename —
+    // same parser used by enumerateAssetStoragePaths, so the two paths
+    // can't drift on what counts as a valid override filename.
+    const defaultNames = [];
+    const overridesByAsset = new Map();
+    for (const entry of entries) {
+        if (entry.isDirectory)
+            continue;
+        const parsed = parseManifestFilename(entry.name);
+        if (!parsed)
+            continue;
+        if (parsed.selector === null) {
+            defaultNames.push(parsed.assetName);
+            continue;
+        }
+        const bucket = overridesByAsset.get(parsed.assetName) ?? { locales: [], themes: [] };
+        const locale = parsed.selector.get('locale');
+        const theme = parsed.selector.get('theme');
+        if (locale !== undefined && !bucket.locales.includes(locale))
+            bucket.locales.push(locale);
+        if (theme !== undefined && !bucket.themes.includes(theme))
+            bucket.themes.push(theme);
+        overridesByAsset.set(parsed.assetName, bucket);
+    }
+    const summaries = [];
+    for (const assetName of defaultNames) {
+        try {
+            const manifest = await readManifest(input.storage, input.assetsRoot, assetName);
+            const overrides = overridesByAsset.get(assetName) ?? { locales: [], themes: [] };
+            summaries.push(toSummary(manifest, overrides.locales, overrides.themes));
+        }
+        catch (err) {
+            // Don't fail the whole listing on one corrupt/missing manifest.
+            // eslint-disable-next-line no-console
+            console.warn(`[assets-list] Skipping ${assetName}: ${err.message}`);
+        }
+    }
+    // Most-recent first — default sort for the library's "recently uploaded" view.
+    summaries.sort((a, b) => (a.uploadedAt > b.uploadedAt ? -1 : 1));
+    return summaries;
+}
+function isDirectoryMissing(err) {
+    const msg = err?.message ?? '';
+    return msg.includes('Directory not found') || msg.includes('ENOENT');
+}
+//# sourceMappingURL=list.js.map

package/dist/assets/list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../../src/assets/list.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAI5C;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CACvB,QAAuB,EACvB,kBAAqC,EAAE,EACvC,iBAAoC,EAAE;IAEtC,OAAO;QACL,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,kEAAkE;QAClE,kEAAkE;QAClE,GAAG,CAAC,QAAQ,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,kEAAkE;QAClE,0DAA0D;QAC1D,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,eAAe,EAAE,CAAC,GAAG,eAAe,CAAC,CAAC,IAAI,EAAE;QAC5C,cAAc,EAAE,CAAC,GAAG,cAAc,CAAC,CAAC,IAAI,EAAE;KAC3C,CAAA;AACH,CAAC;AAQD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAsB;IACrD,IAAI,OAAsD,CAAA;IAC1D,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IACzD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,4EAA4E;QAC5E,IAAI,kBAAkB,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,CAAA;QACtC,MAAM,IAAI,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;IAC5D,CAAC;IAED,iEAAiE;IACjE,oEAAoE;IACpE,mEAAmE;IACnE,mEAAmE;IACnE,2DAA2D;IAC3D,MAAM,YAAY,GAAa,EAAE,CAAA;IACjC,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAmD,CAAA;IACnF,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,WAAW;YAAE,SAAQ;QAC/B,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAChD,IAAI,CAAC,MAAM;YAAE,SAAQ;QACrB,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC7B,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;YACnC,SAAQ;QACV,CAAC;QACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;QACpF,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAC1C,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACzF,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpF,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;IAChD,CAAC;IAED,MAAM,SAAS,GAAmB,EAAE,CAAA;IACpC,KAAK,MAAM,SAAS,IAAI,YAAY,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;YAC/E,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;YAChF,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAA;QAC1E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,gEAAgE;YAChE,sCAAsC;YACtC,OAAO,CAAC,IAAI,CAAC,0BAA0B,SAAS,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAA;QAChF,CAAC;IACH,CAAC;IAED,+EAA+E;IAC/E,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAChE,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAY;IACtC,MAAM,GAAG,GAAI,GAAa,EAAE,OAAO,IAAI,EAAE,CAAA;IACzC,OAAO,GAAG,CAAC,QAAQ,CAAC,qBAAqB,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;AACtE,CAAC"}

package/dist/assets/manifest-default.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Default-manifest I/O + validation.
+ *
+ * Single responsibility: read, validate, and narrow a `{name}.asset.json`
+ * file into an `AssetManifest`. Counterpart to `manifest-locale.ts` which
+ * handles `{name}.asset.{...}.json` locale variants.
+ *
+ * # Kind-discriminated validation
+ *
+ * Today's `AssetManifest` type carries a `kind: 'embedded' | 'downloadable'
+ * | 'font'` discriminator but the three kinds share the same field set —
+ * ingest writes everything as `kind: 'embedded'` (the v1 slice). Step 17
+ * adds kind-specific fields (font: `cssName`/`format`/`weight`/`style`;
+ * downloadable: `title`). When those land, this validator is the one
+ * place that enforces "if kind is X, fields A/B/C must be present."
+ *
+ * Today's per-kind contract is uniform — all three kinds require the
+ * same field set. That's fine: this validator's structure is
+ * kind-discriminated even when the current rules don't yet diverge.
+ * Adding a kind-specific check later is one entry in the rules table,
+ * not a refactor.
+ *
+ * # Why a separate module from manifest.ts
+ *
+ * `manifest.ts` owns shared filename composition (`manifestPath`,
+ * `assetBytesPath`, etc.) used by both default and locale paths. This
+ * module owns default-side I/O + validation specifically. The split
+ * means `manifest-locale.ts` doesn't have to depend on the default
+ * validation rules and vice versa.
+ */
+import type { StorageProvider } from '../types.js';
+import type { AssetManifest } from '../schema/types.js';
+/**
+ * Read a default asset manifest from storage. Throws:
+ *   - `AssetManifestNotFoundError` when the manifest file doesn't exist
+ *   - `AssetManifestCorruptError` when it exists but doesn't validate
+ *   - `AssetStorageError` on any other storage failure
+ *
+ * Default manifests are required (vs. locale manifests which are optional);
+ * an asset that has no `{name}.asset.json` doesn't exist.
+ */
+export declare function readDefaultManifest(storage: StorageProvider, assetsRoot: string, assetName: string): Promise<AssetManifest>;
+/**
+ * Type guard: narrow a parsed-JSON value to `AssetManifest`.
+ *
+ * Validation order:
+ *   1. Common identity fields (version, name, kind, source)
+ *   2. Per-kind required field rules (today: same set across kinds; the
+ *      switch is in place for step 17's kind-specific divergence)
+ *   3. Common metadata fields (alt, uploadedAt, uploadedBy)
+ *
+ * Returns `false` on any failure — callers translate to
+ * `AssetManifestCorruptError` for I/O paths.
+ */
+export declare function isDefaultManifest(candidate: unknown): candidate is AssetManifest;
+//# sourceMappingURL=manifest-default.d.ts.map

package/dist/assets/manifest-default.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-default.d.ts","sourceRoot":"","sources":["../../src/assets/manifest-default.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,KAAK,EAAa,aAAa,EAAgB,MAAM,oBAAoB,CAAA;AAIhF;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,eAAe,EACxB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,aAAa,CAAC,CA2BxB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,OAAO,GAAG,SAAS,IAAI,aAAa,CAkChF"}