@ampless/backend 1.0.0-alpha.34 → 1.0.0-alpha.36

package/dist/events/processor-trusted.js

@@ -9,6 +9,7 @@ import {
 } from "@aws-sdk/lib-dynamodb";
 import {
   formatPublicAssetUrl,
+  isValidPluginKey,
   validatePublicAssetKey
 } from "ampless";
 
@@ -57,7 +58,16 @@ function safeParse(s) {
 function createProcessorTrustedHandler(opts) {
   const trustedPlugins = (opts.plugins ?? []).filter(
     (p) => typeof p === "object" && p.trust_level === "trusted"
-  );
+  ).filter((p) => {
+    const ns = p.instanceId ?? p.name;
+    if (!isValidPluginKey(ns)) {
+      console.warn(
+        `[trusted-processor] plugin "${p.name}" (instanceId="${p.instanceId ?? "(none)"}") has invalid namespace "${ns}". Must match /^[a-zA-Z0-9_-]+$/. Plugin skipped \u2014 no hooks will run for it.`
+      );
+      return false;
+    }
+    return true;
+  });
   const seenNamespaces = /* @__PURE__ */ new Set();
   for (const plugin of trustedPlugins) {
     const ns = plugin.instanceId ?? plugin.name;

package/dist/functions/mcp-handler.js

@@ -368,6 +368,90 @@ async function uploadMedia(graphql, storage, args) {
   });
   return { media: data.createMedia, url: putResult.url };
 }
+var GET_BY_ID2 = (
+  /* GraphQL */
+  `
+  query GetMedia($mediaId: ID!) {
+    getMedia(mediaId: $mediaId) {
+      mediaId
+      src
+    }
+  }
+`
+);
+var GET_BY_SRC = (
+  /* GraphQL */
+  `
+  query GetMediaBySrc($src: String!) {
+    getMediaBySrc(src: $src) {
+      mediaId
+      src
+    }
+  }
+`
+);
+var DELETE = (
+  /* GraphQL */
+  `
+  mutation DeleteMedia($input: DeleteMediaInput!) {
+    deleteMedia(input: $input) {
+      mediaId
+    }
+  }
+`
+);
+var deleteMediaSchema = {
+  type: "object",
+  properties: {
+    mediaId: {
+      type: "string",
+      description: "Media row primary key (e.g. 'media-1714400000000-abc123' as returned by `upload_media`). Provide either `mediaId` or `src`; mediaId is the direct path."
+    },
+    src: {
+      type: "string",
+      description: "Full S3 key including `public/` (e.g. 'public/media/2026/05/1714400000000-photo.jpg'). Use when you only have the public URL \u2014 strip `/api/media/` and prepend `public/`. Provide either `mediaId` or `src`."
+    }
+  }
+};
+async function deleteMedia(graphql, storage, args) {
+  if (!args.mediaId && !args.src) {
+    throw new Error("delete_media: provide `mediaId` or `src`");
+  }
+  let mediaId;
+  let src;
+  if (args.mediaId) {
+    const data = await graphql.query(GET_BY_ID2, { mediaId: args.mediaId });
+    if (data.getMedia) {
+      mediaId = data.getMedia.mediaId;
+      src = data.getMedia.src;
+    }
+  } else {
+    const data = await graphql.query(GET_BY_SRC, { src: args.src });
+    if (data.getMediaBySrc) {
+      mediaId = data.getMediaBySrc.mediaId;
+      src = data.getMediaBySrc.src;
+    }
+  }
+  if (!mediaId) {
+    if (args.src) {
+      await storage.deleteObject(args.src);
+      return {
+        deleted: false,
+        reason: "media row not found; S3 object delete attempted (idempotent)",
+        src: args.src
+      };
+    }
+    return {
+      deleted: false,
+      reason: "media row not found for mediaId"
+    };
+  }
+  await storage.deleteObject(src);
+  await graphql.query(DELETE, {
+    input: { mediaId }
+  });
+  return { deleted: true, mediaId, src };
+}
 var getSchemaSchema = {
   type: "object",
   properties: {}
@@ -1275,6 +1359,17 @@ var tools = [
     inputSchema: uploadMediaSchema,
     handler: (args, ctx) => uploadMedia(ctx.graphql, ctx.storage(), args)
   },
+  {
+    name: "delete_media",
+    description: "Delete a media file: removes the S3 object and the Media row. Pass `mediaId` (from `upload_media`'s response) or `src` (full S3 key like `public/media/2026/05/...`). When only `src` is given, looks up the Media row via `getMediaBySrc`. S3 delete runs first, then the DDB row delete \u2014 both are idempotent so re-running converges on missing-key cases. Returns `{ deleted: false }` instead of throwing when no Media row matches; if `src` was supplied directly the S3 object is still removed (use this to sweep orphan files).",
+    inputSchema: deleteMediaSchema,
+    handler: (args, ctx) => deleteMedia(
+      ctx.graphql,
+      ctx.storage(),
+      args
+    ),
+    destructive: true
+  },
   {
     name: "get_schema",
     description: "Returns the CMS content schema (Post/Page/Media field shapes, format enum, notes). Useful as the first call to understand what fields are available.",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ampless/backend",
-  "version": "1.0.0-alpha.34",
+  "version": "1.0.0-alpha.36",
   "description": "Amplify Gen 2 backend factories for ampless: auth, data, storage, event processors, API key renewer",
   "license": "MIT",
   "type": "module",
@@ -65,8 +65,8 @@
     "@smithy/protocol-http": "^5.4.4",
     "@smithy/signature-v4": "^5.4.4",
     "fflate": "^0.8.3",
-    "ampless": "1.0.0-alpha.19",
-    "@ampless/mcp-server": "1.0.0-alpha.23"
+    "ampless": "1.0.0-alpha.20",
+    "@ampless/mcp-server": "1.0.0-alpha.25"
   },
   "peerDependencies": {
     "@aws-amplify/backend": "^1",