feat(cms): recover drafts and failed imports with verified UI workflows

src/lib/services/furni-import.ts

@@ -20,6 +20,7 @@ import {
 	getFurnitureDataWritePaths,
 	removeFurniEntry,
 } from "@/lib/services/furni-data";
+import { diagnosticAssetUrl } from "@/lib/services/furniture-source-assets";
 import {
 	lookupOfficialHabboFurni,
 	type OfficialHabboFurniEntry,
@@ -707,6 +708,7 @@ export async function importSingleFurni(params: {
 			? Promise.resolve(true)
 			: tryDownloadCandidates(iconUrls, iconPath, "png", (detail) => {
 					iconFailure = detail;
+					warnings.push(`Icon download failed: ${detail}`);
 				}),
 		params.providedNitro || (params.preserveAssets && existsSync(nitroPath))
 			? Promise.resolve(false)
@@ -714,6 +716,7 @@ export async function importSingleFurni(params: {
 				? Promise.resolve(true)
 				: tryDownloadCandidates(swfUrls, swfPath, "swf", (detail) => {
 						swfFailure = detail;
+						warnings.push(`SWF download failed: ${detail}`);
 					}),
 	]);
 	let iconOk = iconOkResult;
@@ -729,6 +732,10 @@ export async function importSingleFurni(params: {
 		const nitroUrl = `${sourceNitroBaseUrl}/${encodeURIComponent(safeNitroName)}.nitro`;
 		const dl = await downloadFile(nitroUrl, nitroPath, { validate: "nitro" });
 		if (dl.ok) nitroDownloadOk = true;
+		else
+			warnings.push(
+				`Nitro download failed: ${diagnosticAssetUrl(nitroUrl)}: ${dl.error ?? "unknown cause"}`,
+			);
 	}
 
 	// ── Icon fallback: extract from SWF if download failed ────────────

src/lib/services/furni-job-store.test.ts

@@ -201,3 +201,44 @@ it("paginates timestamp ties without duplicates and excludes other owners", asyn
 	);
 	expect(first.jobs.length + second.jobs.length).toBe(3);
 });
+it("attaches recovery files only to safe failed items and preserves retry history", async () => {
+	const s = await store();
+	const original: ImportJob = {
+		...job(),
+		state: "completed",
+		items: [
+			{
+				id: 1,
+				classname: "chair",
+				name: "Chair",
+				description: "",
+				type: "flooritem",
+				revision: 1,
+				category: "",
+				state: "failed",
+			},
+			{
+				id: 2,
+				classname: "lamp",
+				name: "Lamp",
+				description: "",
+				type: "flooritem",
+				revision: 1,
+				category: "",
+				state: "done",
+			},
+		],
+	};
+	await s.create(original);
+	await expect(s.retry(original.id, 4, { lamp: randomUUID() })).rejects.toThrow(
+		"not eligible",
+	);
+	const attachmentId = randomUUID();
+	const child = await s.retry(original.id, 4, { chair: attachmentId });
+	expect(child?.items).toHaveLength(1);
+	expect(child?.items[0].attachmentId).toBe(attachmentId);
+	expect((await s.read(original.id)).items[0].attachmentId).toBeUndefined();
+	await expect(
+		s.retry(original.id, 4, { chair: randomUUID() }),
+	).rejects.toThrow("latest retry");
+});

src/lib/services/furni-job-store.ts

@@ -74,7 +74,11 @@ export class ImportJobStore {
 			});
 		return this.read(id);
 	}
-	async retry(id: string, userId: number): Promise<ImportJob | null> {
+	async retry(
+		id: string,
+		userId: number,
+		attachments: Record<string, string> = {},
+	): Promise<ImportJob | null> {
 		const original = await this.read(id).catch((error) => {
 			if (error.code === "ENOENT") return null;
 			throw error;
@@ -82,11 +86,23 @@ export class ImportJobStore {
 		if (!original || original.userId !== userId) return null;
 		const items = retryableJobItems(original);
 		if (!items.length) return null;
+		const entries = Object.entries(attachments);
+		if (
+			entries.length &&
+			(original.syncKind ||
+				entries.some(
+					([classname]) =>
+						!items.some(
+							(item) => item.classname === classname && item.state === "failed",
+						),
+				))
+		)
+			throw Error("Furniture is not eligible for attachment recovery");
 		// A parent produces one durable child, including concurrent and uncertain responses.
 		const hex = createHash("sha256").update(`retry:${id}`).digest("hex");
 		const retryId = `${hex.slice(0, 8)}-${hex.slice(8, 12)}-4${hex.slice(13, 16)}-8${hex.slice(17, 20)}-${hex.slice(20, 32)}`;
 		const now = new Date().toISOString();
-		return this.create({
+		const child = await this.create({
 			...original,
 			id: retryId,
 			retryOf: id,
@@ -97,10 +113,24 @@ export class ImportJobStore {
 			items: items.map(
 				({ error: _error, warnings: _warnings, itemId: _itemId, ...item }) => ({
 					...item,
+					...(Object.hasOwn(attachments, item.classname)
+						? { attachmentId: attachments[item.classname] }
+						: {}),
 					state: "pending",
 				}),
 			),
 		});
+		if (
+			entries.some(
+				([classname, attachmentId]) =>
+					child.items.find((item) => item.classname === classname)
+						?.attachmentId !== attachmentId,
+			)
+		)
+			throw Error(
+				"Recovery already started. Use the latest retry in the history.",
+			);
+		return child;
 	}
 	async page(options: { userId: number; limit: number; before?: string }) {
 		const limit = Math.min(30, Math.max(1, options.limit));

src/lib/services/furniture-source-assets.test.ts

@@ -74,3 +74,54 @@ describe("source asset preflight", () => {
 		expect(fetchMock).toHaveBeenCalledTimes(1);
 	});
 });
+
+const item = {
+	id: 1,
+	classname: "chair",
+	name: "Chair",
+	description: "",
+	type: "flooritem",
+	revision: 123,
+	category: "other",
+};
+
+it("reports every missing filename and HTTP reason without credentials", async () => {
+	vi.stubGlobal(
+		"fetch",
+		vi.fn().mockResolvedValue(new Response(null, { status: 404 })),
+	);
+	const result = await inspectSourceAssets(item, [], {
+		nitroBaseUrl: "https://user:[email protected]/private?token=secret",
+	} as never);
+	expect(result.state).toBe("missing");
+	expect(result.attempts).toHaveLength(2);
+	expect(result.attempts?.[1]).toMatchObject({
+		file: "chair.swf",
+		reason: "http",
+		status: 404,
+	});
+	expect(JSON.stringify(result)).not.toContain("secret");
+});
+it("keeps network and blocked sources unknown rather than calling them missing", async () => {
+	vi.stubGlobal(
+		"fetch",
+		vi.fn().mockRejectedValue(new Error("https://secret.test/?token=secret")),
+	);
+	const result = await inspectSourceAssets({ ...item, revision: 124 }, []);
+	expect(result.state).toBe("unknown");
+	expect(result.attempts?.[0].reason).toBe("network");
+	expect(JSON.stringify(result)).not.toContain("secret");
+});
+it("distinguishes HTML responses from valid assets", async () => {
+	vi.stubGlobal(
+		"fetch",
+		vi
+			.fn()
+			.mockResolvedValue(
+				new Response(null, { headers: { "content-type": "text/html" } }),
+			),
+	);
+	const result = await inspectSourceAssets({ ...item, revision: 125 }, []);
+	expect(result.attempts?.[0].reason).toBe("invalidResponse");
+	expect(result.state).toBe("unknown");
+});