studiograph 1.3.48-next.236 → 1.3.48-next.237

package/dist/cli/commands/admin/migrate-asset-owners.d.ts

@@ -17,9 +17,10 @@
  *   - Orphan-owner rows (owner entity already deleted) home to the repo like
  *     any other row — they surface as library assets, never deleted.
  *   - Verification: COUNT(*) of remaining entity-owned rows must be 0 after a
- *     real run; a non-zero count exits 1. The same query (run per workspace)
- *     gates the P1.5 dead-code delete (cleanupOwnedAssets, keepAssets, the
- *     free-standing route guards).
+ *     real run; a non-zero count exits 1. (This query originally gated the
+ *     P1.5 dead-code delete, which has landed — uploads now structurally
+ *     refuse entity owners, so this command is the one-time repair for rows
+ *     that predate P1.)
  *
  * Per-workspace: run on each serving instance (assets.db is volume-local),
  * like `admin migrate-assets`.

package/dist/cli/commands/admin/migrate-asset-owners.js

@@ -17,9 +17,10 @@
  *   - Orphan-owner rows (owner entity already deleted) home to the repo like
  *     any other row — they surface as library assets, never deleted.
  *   - Verification: COUNT(*) of remaining entity-owned rows must be 0 after a
- *     real run; a non-zero count exits 1. The same query (run per workspace)
- *     gates the P1.5 dead-code delete (cleanupOwnedAssets, keepAssets, the
- *     free-standing route guards).
+ *     real run; a non-zero count exits 1. (This query originally gated the
+ *     P1.5 dead-code delete, which has landed — uploads now structurally
+ *     refuse entity owners, so this command is the one-time repair for rows
+ *     that predate P1.)
  *
  * Per-workspace: run on each serving instance (assets.db is volume-local),
  * like `admin migrate-assets`.

package/dist/cli/commands/admin/migrate-asset-owners.js.map

@@ -1 +1 @@
-{"version":3,"file":"migrate-asset-owners.js","sourceRoot":"","sources":["../../../../src/cli/commands/admin/migrate-asset-owners.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAqBtE;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,UAA6B,EAC7B,MAAe,EACf,UAAwB;IAExB,MAAM,SAAS,GAAG,UAAU,CAAC,oBAAoB,EAAE,CAAC;IACpD,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC/D,MAAM,YAAY,GAAG,UAAU;QAC7B,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1E,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,yBAAyB,EAAE,CAAC;IACtE,uEAAuE;IACvE,2EAA2E;IAC3E,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC;IACvE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;AACxE,CAAC;AAED,MAAM,CAAC,MAAM,8BAA8B,GAAG,IAAI,OAAO,CAAC,sBAAsB,CAAC;KAC9E,WAAW,CAAC,8FAA8F,CAAC;KAC3G,MAAM,CAAC,WAAW,EAAE,uEAAuE,CAAC;KAC5F,MAAM,CAAC,KAAK,EAAE,IAA0B,EAAE,EAAE;IAC3C,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC;IAEjF,MAAM,SAAS,GAAG,IAAI,SAAS,EAAE,CAAC;IAClC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7B,KAAK,CAAC,4DAA4D,CAAC,CAAC;QACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,CAAC;IAC5C,MAAM,OAAO,GAAY,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;IAC5G,MAAM,EAAE,GAAG,IAAI,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,EAAE,CAAC,aAAa,EAAE,CAAC;IAEtC,MAAM,MAAM,GAAG,sBAAsB,CACnC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAClE,CAAC;IACF,UAAU,CAAC,KAAK,EAAE,CAAC;IAEnB,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,GAAG,CAAC,IAAI,CACN,4CAA4C;YAC5C,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC/E,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,GAAG,CAAC,IAAI,CACN,qEAAqE;YACrE,gCAAgC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjE,CAAC;IACJ,CAAC;IACD,GAAG,CAAC,IAAI,CACN,4BAA4B,MAAM,CAAC,WAAW,IAAI;QAClD,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,yBAAyB,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,IAAI;QAC9H,8DAA8D,MAAM,CAAC,SAAS,EAAE,CACjF,CAAC;IAEF,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,KAAK,CAAC,EAAE,CAAC;QAC3C,KAAK,CAAC,wBAAwB,MAAM,CAAC,SAAS,mEAAmE,CAAC,CAAC;QACnH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,MAAM;QACf,CAAC,CAAC,wCAAwC;QAC1C,CAAC,CAAC,wBAAwB,MAAM,CAAC,SAAS,oDAAoD,CAAC,CAAC;AACpG,CAAC,CAAC,CAAC"}
+{"version":3,"file":"migrate-asset-owners.js","sourceRoot":"","sources":["../../../../src/cli/commands/admin/migrate-asset-owners.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAqBtE;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,UAA6B,EAC7B,MAAe,EACf,UAAwB;IAExB,MAAM,SAAS,GAAG,UAAU,CAAC,oBAAoB,EAAE,CAAC;IACpD,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC/D,MAAM,YAAY,GAAG,UAAU;QAC7B,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1E,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,yBAAyB,EAAE,CAAC;IACtE,uEAAuE;IACvE,2EAA2E;IAC3E,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC;IACvE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;AACxE,CAAC;AAED,MAAM,CAAC,MAAM,8BAA8B,GAAG,IAAI,OAAO,CAAC,sBAAsB,CAAC;KAC9E,WAAW,CAAC,8FAA8F,CAAC;KAC3G,MAAM,CAAC,WAAW,EAAE,uEAAuE,CAAC;KAC5F,MAAM,CAAC,KAAK,EAAE,IAA0B,EAAE,EAAE;IAC3C,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC;IAEjF,MAAM,SAAS,GAAG,IAAI,SAAS,EAAE,CAAC;IAClC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7B,KAAK,CAAC,4DAA4D,CAAC,CAAC;QACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,CAAC;IAC5C,MAAM,OAAO,GAAY,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;IAC5G,MAAM,EAAE,GAAG,IAAI,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,EAAE,CAAC,aAAa,EAAE,CAAC;IAEtC,MAAM,MAAM,GAAG,sBAAsB,CACnC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAClE,CAAC;IACF,UAAU,CAAC,KAAK,EAAE,CAAC;IAEnB,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,GAAG,CAAC,IAAI,CACN,4CAA4C;YAC5C,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC/E,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,GAAG,CAAC,IAAI,CACN,qEAAqE;YACrE,gCAAgC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjE,CAAC;IACJ,CAAC;IACD,GAAG,CAAC,IAAI,CACN,4BAA4B,MAAM,CAAC,WAAW,IAAI;QAClD,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,yBAAyB,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,IAAI;QAC9H,8DAA8D,MAAM,CAAC,SAAS,EAAE,CACjF,CAAC;IAEF,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,KAAK,CAAC,EAAE,CAAC;QAC3C,KAAK,CAAC,wBAAwB,MAAM,CAAC,SAAS,mEAAmE,CAAC,CAAC;QACnH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,MAAM;QACf,CAAC,CAAC,wCAAwC;QAC1C,CAAC,CAAC,wBAAwB,MAAM,CAAC,SAAS,oDAAoD,CAAC,CAAC;AACpG,CAAC,CAAC,CAAC"}

package/dist/core/graph.d.ts

@@ -8,7 +8,7 @@ import { GitService, GitUser } from '../services/git.js';
 import { MarkdownDocument } from '../services/markdown.js';
 import type { BodyWriteCoordinator, BodyWriteResult } from '../server/body-write-coordinator.js';
 import { AssetService, AssetInfo, AssetRecord, AssetConfig, type AssetUploadResult } from '../services/assets/index.js';
-import type { AssetIndexService } from '../services/assets/asset-index-service.js';
+import { type AssetIndexService } from '../services/assets/asset-index-service.js';
 import { EntityType, type EntityData, type DatasetRow } from './validation.js';
 import { SchemaRegistry } from './schema-registry.js';
 import { type DatasetFilter } from '../services/csv-service.js';
@@ -518,9 +518,7 @@ export declare class BaseGraphManager {
     }): Promise<{
         committed: boolean;
     }>;
-    delete(entityType: EntityType, entityId: string, commitMessage?: string, user?: GitUser, opts?: {
-        keepAssets?: boolean;
-    }): Promise<void>;
+    delete(entityType: EntityType, entityId: string, commitMessage?: string, user?: GitUser): Promise<void>;
     /**
      * Rename an entity (change its ID). Preserves all data, content, and source_ref.
      * Uses git mv for clean history. Updates entity_id in frontmatter.
@@ -847,17 +845,11 @@ export declare class BaseGraphManager {
     opts?: {
         uploaderUserId?: string | null;
         /**
-         * The recorded owner — ALWAYS pass a free-standing one. Under
-         * assets-referenced-not-owned (P1), every asset is a library citizen
-         * (`owner_type ∈ {folder, workspace}`); entries only reference assets
-         * via the immutable URL. Every production caller passes
-         * `{ type: 'folder', id: repo }` (or workspace). When set,
-         * `(entityType, entityId)` are ignored for ownership.
-         *
-         * The legacy default (omit `owner` → entity-owned row keyed on the
-         * args above) survives ONLY for transitional tests of pre-migration
-         * rows; no production path may rely on it. Flip the default to
-         * folder-homing in P1.5 when the entity-owned machinery is deleted.
+         * The recorded owner. MUST be free-standing (`owner_type ∈ {folder,
+         * workspace}`) — assets are library citizens; entries only reference
+         * them via the immutable URL, never own them. Defaults to this graph's
+         * folder (`{ type: 'folder', id: repo }`); a non-free-standing owner
+         * throws. `(entityType, entityId)` are never used for ownership.
          */
         owner?: {
             type: string;
@@ -872,20 +864,11 @@ export declare class BaseGraphManager {
     setAssetIndex(index: AssetIndexService | undefined): void;
     /** The asset ownership index, if wired. */
     getAssetIndex(): AssetIndexService | undefined;
-    /**
-     * Remove every immutable-keyed asset owned by (entityType, entityId): the
-     * blob + its index row. TRANSITIONAL (assets-referenced-not-owned P1):
-     * entry deletion keeps assets, so this runs only on an explicit
-     * `keepAssets: false`, which no caller passes. Deleted in P1.5 once the
-     * owner migration verifies zero entity-owned rows. Blob errors are
-     * non-fatal (markdown is the system of record). No-op without an index.
-     */
-    private cleanupOwnedAssets;
     /** Delete a single index-tracked asset by its immutable id: blob + index row.
-     *  The asset-manager delete path for free-standing (folder/workspace-owned)
-     *  assets, which have no owning entity to route an entity-coordinate delete
-     *  through. Blob errors are non-fatal (the index row is the manager's source
-     *  of truth, same as cleanupOwnedAssets). No-op without an index/service. */
+     *  THE asset delete path (assets-referenced-not-owned: deleting an entry
+     *  never deletes assets, so deliberate asset deletion is always by-id).
+     *  Blob errors are non-fatal (the index row is the manager's source of
+     *  truth). No-op without an index/service. */
     deleteAssetById(assetId: string, filename: string): Promise<void>;
     /** Re-point the owning coordinates of every asset owned by an entity, with
      *  no blob movement (keys are immutable). Used by rename (ownerId),

package/dist/core/graph.js

@@ -10,6 +10,7 @@ import { createHash, randomUUID } from 'node:crypto';
 import { GitService } from '../services/git.js';
 import { MarkdownService } from '../services/markdown.js';
 import { AssetService, publicUrlFor, publicUrlForAssetId } from '../services/assets/index.js';
+import { FREE_STANDING_OWNER_TYPES } from '../services/assets/asset-index-service.js';
 import { ENTITY_SCHEMAS, EntityBaseSchema, PLURAL_TO_SINGULAR, RESERVED_ENTITY_TYPES, assertValidTaskDates } from './validation.js';
 import { isInternalField } from './schema-registry.js';
 import { CSVService } from '../services/csv-service.js';
@@ -1041,7 +1042,7 @@ export class BaseGraphManager {
         await transaction.commit(options.user ?? this.gitUser, options.commitMessage);
         return { committed: true };
     }
-    async delete(entityType, entityId, commitMessage, user, opts) {
+    async delete(entityType, entityId, commitMessage, user) {
         // Verify entity exists
         const existing = this.get(entityType, entityId);
         // Delete the flat entity file
@@ -1071,17 +1072,9 @@ export class BaseGraphManager {
             const message = commitMessage || commitMsg.deleted(this.commitRef(entityType, entityId, existing.data?.name));
             await transaction.commit(user ?? this.gitUser, message);
         }
-        // Assets-referenced-not-owned (P1): deleting an entry KEEPS its assets.
-        // Assets are library citizens (folder/workspace-homed); entries only
-        // reference them, so entry deletion never destroys binaries. `keepAssets`
-        // now defaults ON — cleanup runs only on an explicit `keepAssets: false`,
-        // which no caller passes; the flag + cleanupOwnedAssets stay as a
-        // transitional net and are deleted in P1.5 once the owner migration
-        // verifies zero entity-owned rows across workspaces.
-        if (opts?.keepAssets === false) {
-            // Immutable-keyed assets owned by this entity (any type) via the index.
-            await this.cleanupOwnedAssets(entityType, entityId);
-        }
+        // Assets are never deleted here: assets are library citizens (folder/
+        // workspace-homed) that entries only REFERENCE, so entry deletion never
+        // destroys binaries. Deliberate asset deletion is by-id (deleteAssetById).
         // Remove from vector index (fire-and-forget, non-fatal). Tracked on
         // the service so a leaking error stream is visible at /api/health.
         if (this.vectorService) {
@@ -2622,19 +2615,23 @@ export class BaseGraphManager {
         }
         // Immutable-key path: generate a permanent assetId, store under
         // {assetId}/{filename}, and record authoritative ownership in the index.
-        // The owning entity (entityType, entityId) is metadata only — renaming or
+        // The (entityType, entityId) args never shape ownership — renaming or
         // retyping the entity never moves the blob. `keyPrefix` is irrelevant here
         // (it only shaped the legacy {prefix}/{id} key).
         if (this.assetIndex) {
+            // The model invariant is structural: no caller can mint an entity-owned
+            // row. Omitting `owner` homes the asset to this graph's folder.
+            const owner = opts?.owner ?? { type: 'folder', id: this.repoName };
+            if (!FREE_STANDING_OWNER_TYPES.has(owner.type)) {
+                throw new Error(`Asset owner must be free-standing (folder or workspace), got "${owner.type}" — entries reference assets, they never own them.`);
+            }
             const assetId = randomUUID();
             const info = await this.assetService.uploadByAssetId(assetId, filename, buffer);
             this.assetIndex.put({
                 assetId,
                 repo: this.repoName,
-                // Free-standing owner override (folder/workspace) when supplied, else
-                // the embedding entity (current/default behavior for editor embeds).
-                ownerType: opts?.owner?.type ?? entityType,
-                ownerId: opts?.owner?.id ?? entityId,
+                ownerType: owner.type,
+                ownerId: owner.id,
                 filename: info.filename,
                 contentType: info.contentType,
                 mediaType: info.mediaType,
@@ -2667,36 +2664,11 @@ export class BaseGraphManager {
     getAssetIndex() {
         return this.assetIndex;
     }
-    /**
-     * Remove every immutable-keyed asset owned by (entityType, entityId): the
-     * blob + its index row. TRANSITIONAL (assets-referenced-not-owned P1):
-     * entry deletion keeps assets, so this runs only on an explicit
-     * `keepAssets: false`, which no caller passes. Deleted in P1.5 once the
-     * owner migration verifies zero entity-owned rows. Blob errors are
-     * non-fatal (markdown is the system of record). No-op without an index.
-     */
-    async cleanupOwnedAssets(entityType, entityId) {
-        if (!this.assetIndex || !this.assetService)
-            return;
-        for (const row of this.assetIndex.listByOwner(this.repoName, entityType, entityId)) {
-            try {
-                await this.assetService.deleteByAssetId(row.assetId, row.filename);
-            }
-            catch (err) {
-                console.warn(`[asset] delete blob ${row.assetId} failed: ${err?.message ?? err}`);
-            }
-            this.assetIndex.delete(row.assetId);
-            // Reap the caption index-state row too (assetId-keyed). Without this an
-            // entity-owned image's state row outlives its blob + assets.db row and
-            // accumulates in the LanceDB side table (read in full on every sweep).
-            void this.vectorService?.deleteIndexStateSafe(row.assetId);
-        }
-    }
     /** Delete a single index-tracked asset by its immutable id: blob + index row.
-     *  The asset-manager delete path for free-standing (folder/workspace-owned)
-     *  assets, which have no owning entity to route an entity-coordinate delete
-     *  through. Blob errors are non-fatal (the index row is the manager's source
-     *  of truth, same as cleanupOwnedAssets). No-op without an index/service. */
+     *  THE asset delete path (assets-referenced-not-owned: deleting an entry
+     *  never deletes assets, so deliberate asset deletion is always by-id).
+     *  Blob errors are non-fatal (the index row is the manager's source of
+     *  truth). No-op without an index/service. */
     async deleteAssetById(assetId, filename) {
         if (!this.assetIndex || !this.assetService)
             return;