Product registry: catalogs, revisions, product info and libraries

The hub registers catalogs (hidden until a moderator approves them), hands out upload tokens, and records the revisions catalogs register after validating uploads: numbered, never changed, signed by the hub (its own Ed25519 key, published at /.well-known/t5de-keys.json). Creators edit product info (descriptions cleaned by an allowlist) and can retract revisions. People get products into their library, optionally staying on a revision; the proxy asks which revision to load and where. Contract in docs/products.md. Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-10-29 18:53:52 -07:00
1 parent 7fea63fc4f
commit b4f6fce9df
@@ -14,10 +14,13 @@
  "dependencies": {
    "@t5de/db": "workspace:*",
    "better-auth": "1.7.14",
-    "elysia": "1.4.30"
+    "elysia": "1.4.30",
+    "jose": "6.2.14",
+    "sanitize-html": "2.18.1"
  },
  "devDependencies": {
    "@types/bun": "^1.4.4",
+    "@types/sanitize-html": "^2.16.2",
    "typescript": "^7.0.2"
  }
 }