feat(cms): recover drafts and failed imports with verified UI workflows

src/lib/services/furniture-source-assets.test.ts

@@ -74,3 +74,54 @@ describe("source asset preflight", () => {
 		expect(fetchMock).toHaveBeenCalledTimes(1);
 	});
 });
+
+const item = {
+	id: 1,
+	classname: "chair",
+	name: "Chair",
+	description: "",
+	type: "flooritem",
+	revision: 123,
+	category: "other",
+};
+
+it("reports every missing filename and HTTP reason without credentials", async () => {
+	vi.stubGlobal(
+		"fetch",
+		vi.fn().mockResolvedValue(new Response(null, { status: 404 })),
+	);
+	const result = await inspectSourceAssets(item, [], {
+		nitroBaseUrl: "https://user:[email protected]/private?token=secret",
+	} as never);
+	expect(result.state).toBe("missing");
+	expect(result.attempts).toHaveLength(2);
+	expect(result.attempts?.[1]).toMatchObject({
+		file: "chair.swf",
+		reason: "http",
+		status: 404,
+	});
+	expect(JSON.stringify(result)).not.toContain("secret");
+});
+it("keeps network and blocked sources unknown rather than calling them missing", async () => {
+	vi.stubGlobal(
+		"fetch",
+		vi.fn().mockRejectedValue(new Error("https://secret.test/?token=secret")),
+	);
+	const result = await inspectSourceAssets({ ...item, revision: 124 }, []);
+	expect(result.state).toBe("unknown");
+	expect(result.attempts?.[0].reason).toBe("network");
+	expect(JSON.stringify(result)).not.toContain("secret");
+});
+it("distinguishes HTML responses from valid assets", async () => {
+	vi.stubGlobal(
+		"fetch",
+		vi
+			.fn()
+			.mockResolvedValue(
+				new Response(null, { headers: { "content-type": "text/html" } }),
+			),
+	);
+	const result = await inspectSourceAssets({ ...item, revision: 125 }, []);
+	expect(result.attempts?.[0].reason).toBe("invalidResponse");
+	expect(result.state).toBe("unknown");
+});