V111 PDF library tables + #511/#512/#515 follow-ups

[mdon]

Summary

Adds V111 — four new tables backing phoenix_kit_catalogue's PDF
library (per-upload row + per-file extraction state + content-addressed
page-text dedup + composite-PK page join), enables pg_trgm. Plus a
one-line clarification to <.file_upload>'s progress label
(Uploading… instead of bare percentage) so consumers — MediaBrowser
and the new catalogue PDF library — surface unambiguous client→server
upload state. Plus PR follow-ups for #511 / #512 / #515 with all
remaining live findings closed.

Pairs with BeamLabEU/phoenix_kit_catalogue#24 (the consumer of V111).

PR follow-up(s)

• PR Tighten Integrations to strict-UUID + V107 endpoint UNIQUE index + V106 follow-up + provider registry expansion #511 (9a6b9fe9 review-only stub → 8a5a393b + c6c4a89e +
  0447564c actual fixes) — 3 of 4 doc/code fixes from the original
  CLAUDE_REVIEW had already landed pre-existing; this batch closes
  the remaining live items:

  • MED Updated the comments in users_live html file, and added Modules link in dashboard. #2 — Microsoft 365 OAuth had hardcoded /common/ tenant;
    single-tenant operators got AADSTS50194. Added tenant_id setup
    field with common default + generic interpolate_url/3 helper
    in OAuth that substitutes {key} placeholders from
    integration_data (zero impact on Google / OpenRouter / Mistral
    / DeepSeek). Three pinning tests added.
  • NIT Config refactoring #10 — verify_oauth_state/2 now returns {:error, :state_mismatch} on missing stored state (was lenient :ok
    from a pre-PR-511 flow that's gone).
  • NIT Add live data updates system for admin panels and comprehensive session management system for admin interface #6 — IntegrationPicker removed the conn.name == \"default\" substitution that contradicted PR Tighten Integrations to strict-UUID + V107 endpoint UNIQUE index + V106 follow-up + provider registry expansion #511's own
    moduledoc ("Names are pure user-chosen labels with no system
    semantics"). Always renders the user-chosen name + provider
    badge.
  • All FOLLOW_UPs at
    dev_docs/pull_requests/2026/511-strict-uuid-integrations-v107/.

• PR Add V108 + drag-and-drop core + PR #506 review follow-up #512 (09ee467d stub) — all 6 reviewer findings (5 NITPICKs

  • 1 LOW) addressed pre-existing in code/docs. FOLLOW_UP.md records
    the audit; Open: None.

• PR Add ensure_current/2 helper + V110 language column on doc templates #515 (9a6b9fe9 stub) — reviewer's own post-merge follow-up
  commit landed pre-existing (Runner.runner_opts/1 + tests +
  Return contract docs + @version 1.7.105). FOLLOW_UP.md records
  the audit; Open: None.

V111 — PDF library tables (31bd0cb2)

Four tables, all idempotent create_if_not_exists patterns matching
recent V108–V110 style:

• phoenix_kit_cat_pdfs — thin per-upload row. file_uuid FK to
  phoenix_kit_files(uuid) ON DELETE RESTRICT (catalogue manages
  file lifecycle; core prune can't remove a file referenced by a
  live catalogue row). Soft-delete via status sentinel
  (active / trashed) + trashed_at. Two uploads of identical
  content (different filenames) → two rows sharing one phoenix_kit_files
  row + one extraction.
• phoenix_kit_cat_pdf_extractions — keyed by file_uuid PK.
  Worker state machine + page_count + extracted_at +
  error_message. Cascades on file hard delete.
• phoenix_kit_cat_pdf_page_contents — content-addressed dedup
  cache. PK on content_hash (SHA-256 of normalized page text).
  GIN trigram index lives here so the search index doesn't grow
  with cross-PDF duplication.
• phoenix_kit_cat_pdf_pages — composite PK (file_uuid, page_number) + content_hash FK to the dedup cache.

Enables pg_trgm extension. @current_version bumped 110 → 111.
Doc-block in postgres.ex updated.

<.file_upload>\"Uploading…\" progress label (31bd0cb2)

One-line tweak: the entry-progress <span> in
PhoenixKitWeb.Components.Core.FileUpload's full_upload/1 variant
now reads Uploading… {entry.progress}% instead of the bare
percentage. entry.progress is always client→server upload progress
(Phoenix LV convention), so the wording is universally accurate.
MediaBrowser (the only existing consumer) and the new catalogue
PDF library uploads inherit the clarified label.

Verification

mix test test/phoenix_kit/integrations/oauth_test.exs # 21 / 21
mix test test/phoenix_kit/migration_test.exs # all green

V111 verified to apply cleanly via PhoenixKit.Migration.ensure_current/2
on the catalogue's parent test DB (the Applying PhoenixKit V110→V111
log line in the boot output).

Test plan

• OAuth interpolation tests pin the M365 tenant fix (3 new tests)
• Backwards-compat: existing OAuth tests unchanged behavior
• Migration applies idempotently on already-current DBs
• mix precommit clean end-to-end (running phx.server on the
  shared dev DB blocks an ad-hoc full-suite run from this branch
  this session)
• V111 marker correct on both up/1 ('111') and down/1
  ('110') per the workspace's marker-comment review rule

Open

None across the three follow-ups. The integration_picker divergence
question (NIT #6) was resolved in code rather than docs after a
discussion: the substitution itself was the bug, not the missing
doc note.