t5de-catalog: store and serve community product files

A Go server that takes product uploads with hub upload tokens, checks them by t5de-api's pack rules, stores files by sha256, registers revisions with the hub (POST /api/v1/catalog/revisions), and serves files with immutable caching; files used only by adult revisions need an adult access token. Contract: t5de-hub's docs/products.md. Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-10-29 18:59:16 -07:00
commit 8742829e77
@@ -0,0 +1,12 @@
+# t5de-catalog
+
+T5DE's catalog server (see README.md). Part of T5DE; the contract with the hub is t5de-hub's `docs/products.md`
+(git.t5de.dev/t5de/t5de-hub, usually checked out beside this one), product file rules are t5de-api's `pack`
+package (`docs/pack.md`).
+
+## Rules
+
+- Never commit IMVU's files: tests make their product files in code (a minimal `index.xml`, fake textures).
+- Never commit secrets (catalog keys, tokens).
+- Commits: author "dhkatz <dev@t5de.dev>"; never the user's real name or email.
+- Follow `docs/products.md` exactly; change it there (in t5de-hub) first if the contract needs to change.