@aotter/mantle-runtime 0.0.11-alpha.11

package/dist/usecase/dto/render/PreviewEntryRequest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PreviewEntryRequest.d.ts","sourceRoot":"","sources":["../../../../src/usecase/dto/render/PreviewEntryRequest.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEpE;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B;;sBAEkB;IAClB,QAAQ,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC;IACnD;;;;;;;iDAO6C;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B"}

package/dist/usecase/dto/render/PreviewEntryRequest.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=PreviewEntryRequest.js.map

package/dist/usecase/dto/render/PreviewEntryRequest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PreviewEntryRequest.js","sourceRoot":"","sources":["../../../../src/usecase/dto/render/PreviewEntryRequest.ts"],"names":[],"mappings":""}

package/dist/usecase/dto/render/RenderEntryLiveRequest.d.ts

@@ -0,0 +1,17 @@
+import type { ContentState, SiteConfig } from "@aotter/mantle-spec";
+/**
+ * Request DTO for `RenderEntryLiveUseCase` — renders a single entry
+ * from current DB state on demand (no KV read), returning either the
+ * full HTML doc or `null` if no matching entry / no registered
+ * template.
+ */
+export interface RenderEntryLiveRequest {
+    readonly collection: string;
+    readonly slug: string;
+    readonly locale: string;
+    readonly site: SiteConfig;
+    /** Defaults to `"published"`. Pass other states for preview /
+     *  archived rendering. */
+    readonly status?: ContentState;
+}
+//# sourceMappingURL=RenderEntryLiveRequest.d.ts.map

package/dist/usecase/dto/render/RenderEntryLiveRequest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RenderEntryLiveRequest.d.ts","sourceRoot":"","sources":["../../../../src/usecase/dto/render/RenderEntryLiveRequest.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEpE;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B;8BAC0B;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC"}

package/dist/usecase/dto/render/RenderEntryLiveRequest.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=RenderEntryLiveRequest.js.map

package/dist/usecase/dto/render/RenderEntryLiveRequest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RenderEntryLiveRequest.js","sourceRoot":"","sources":["../../../../src/usecase/dto/render/RenderEntryLiveRequest.ts"],"names":[],"mappings":""}

package/dist/usecase/dto/render/RenderListLiveRequest.d.ts

@@ -0,0 +1,11 @@
+import type { SiteConfig } from "@aotter/mantle-spec";
+/**
+ * Request DTO for `RenderListLiveUseCase` — renders a collection's
+ * list page from current DB state on demand (no KV read).
+ */
+export interface RenderListLiveRequest {
+    readonly collection: string;
+    readonly locale: string;
+    readonly site: SiteConfig;
+}
+//# sourceMappingURL=RenderListLiveRequest.d.ts.map

package/dist/usecase/dto/render/RenderListLiveRequest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RenderListLiveRequest.d.ts","sourceRoot":"","sources":["../../../../src/usecase/dto/render/RenderListLiveRequest.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEtD;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;CAC3B"}

package/dist/usecase/dto/render/RenderListLiveRequest.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=RenderListLiveRequest.js.map

package/dist/usecase/dto/render/RenderListLiveRequest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RenderListLiveRequest.js","sourceRoot":"","sources":["../../../../src/usecase/dto/render/RenderListLiveRequest.ts"],"names":[],"mappings":""}

package/dist/usecase/dto/render/index.d.ts

@@ -0,0 +1,7 @@
+export * from "./ComposeLlmsTxtRequest.js";
+export * from "./ComposeSitemapRequest.js";
+export * from "./RenderEntryLiveRequest.js";
+export * from "./RenderListLiveRequest.js";
+export * from "./PreviewEntryRequest.js";
+export * from "./ComposeEntrySeoMetaRequest.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/usecase/dto/render/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/usecase/dto/render/index.ts"],"names":[],"mappings":"AAAA,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,0BAA0B,CAAC;AACzC,cAAc,iCAAiC,CAAC"}

package/dist/usecase/dto/render/index.js

@@ -0,0 +1,7 @@
+export * from "./ComposeLlmsTxtRequest.js";
+export * from "./ComposeSitemapRequest.js";
+export * from "./RenderEntryLiveRequest.js";
+export * from "./RenderListLiveRequest.js";
+export * from "./PreviewEntryRequest.js";
+export * from "./ComposeEntrySeoMetaRequest.js";
+//# sourceMappingURL=index.js.map

package/dist/usecase/dto/render/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/usecase/dto/render/index.ts"],"names":[],"mappings":"AAAA,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,0BAA0B,CAAC;AACzC,cAAc,iCAAiC,CAAC"}

package/dist/usecase/dto/view/ExecuteViewRequest.d.ts

@@ -0,0 +1,16 @@
+import type { ViewManifest } from "@aotter/mantle-spec";
+import type { HandlerContext } from "../../../domain/model/HandlerContext.js";
+import type { CompileViewOptions } from "../../../domain/service/ViewSqlCompiler.js";
+export interface ExecuteViewRequest {
+    readonly view: ViewManifest;
+    readonly pathPrefix?: string;
+    readonly options?: CompileViewOptions;
+    /** Caller identity for `requires.auth.all` evaluation. Required when
+     *  `view.spec.requires` is present; the use case returns
+     *  `UNAUTHENTICATED` if missing. Adapters constructing public
+     *  (unauthenticated) Views may pass a guest context
+     *  (`{ user: null, staff: null, ... }`) — predicate evaluation will
+     *  fail closed on any `ctx.user` / `ctx.staff` requirement. */
+    readonly ctx?: HandlerContext;
+}
+//# sourceMappingURL=ExecuteViewRequest.d.ts.map

package/dist/usecase/dto/view/ExecuteViewRequest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExecuteViewRequest.d.ts","sourceRoot":"","sources":["../../../../src/usecase/dto/view/ExecuteViewRequest.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AAC9E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4CAA4C,CAAC;AAErF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,kBAAkB,CAAC;IACtC;;;;;mEAK+D;IAC/D,QAAQ,CAAC,GAAG,CAAC,EAAE,cAAc,CAAC;CAC/B"}

package/dist/usecase/dto/view/ExecuteViewRequest.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ExecuteViewRequest.js.map

package/dist/usecase/dto/view/ExecuteViewRequest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExecuteViewRequest.js","sourceRoot":"","sources":["../../../../src/usecase/dto/view/ExecuteViewRequest.ts"],"names":[],"mappings":""}

package/dist/usecase/dto/view/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./ExecuteViewRequest.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/usecase/dto/view/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/usecase/dto/view/index.ts"],"names":[],"mappings":"AAAA,cAAc,yBAAyB,CAAC"}

package/dist/usecase/dto/view/index.js

@@ -0,0 +1,2 @@
+export * from "./ExecuteViewRequest.js";
+//# sourceMappingURL=index.js.map

package/dist/usecase/dto/view/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/usecase/dto/view/index.ts"],"names":[],"mappings":"AAAA,cAAc,yBAAyB,CAAC"}

package/dist/usecase/index.d.ts

@@ -0,0 +1,16 @@
+/**
+ * `usecase/` — application services orchestrating domain logic. Each
+ * use case is a class with constructor-injected ports + clock + idgen,
+ * accepts a request DTO, returns a response DTO. No infrastructure
+ * dependencies (no I/O, no DB driver, no FS) — those live in
+ * `infrastructure/`.
+ */
+export * from "./dto/index.js";
+export * from "./content/index.js";
+export * from "./procedure/index.js";
+export * from "./view/index.js";
+export * from "./boot/index.js";
+export * from "./lifecycle/index.js";
+export * from "./render/index.js";
+export * from "./media/index.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/usecase/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/usecase/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC"}

package/dist/usecase/index.js

@@ -0,0 +1,16 @@
+/**
+ * `usecase/` — application services orchestrating domain logic. Each
+ * use case is a class with constructor-injected ports + clock + idgen,
+ * accepts a request DTO, returns a response DTO. No infrastructure
+ * dependencies (no I/O, no DB driver, no FS) — those live in
+ * `infrastructure/`.
+ */
+export * from "./dto/index.js";
+export * from "./content/index.js";
+export * from "./procedure/index.js";
+export * from "./view/index.js";
+export * from "./boot/index.js";
+export * from "./lifecycle/index.js";
+export * from "./render/index.js";
+export * from "./media/index.js";
+//# sourceMappingURL=index.js.map

package/dist/usecase/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/usecase/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC"}

package/dist/usecase/lifecycle/RunDeferredHookUseCase.d.ts

@@ -0,0 +1,26 @@
+import type { LifecycleHookRunner } from "../../domain/port/LifecycleHookRunner.js";
+import type { RunDeferredHookRequest } from "../dto/lifecycle/index.js";
+/**
+ * Consume side of the deferred after-hook path. Adapter queue
+ * consumers (CF Workers `queue(batch, env)` for Workers Queues, etc.)
+ * deserialize each `DeferredHookEnvelope` and call this use case with
+ * a fresh per-invocation `env` binding bag.
+ *
+ * Reconstructs a `HandlerContext` mirroring the original firing
+ * context's identity (user / staff snapshot from the envelope), with
+ * `env` filled by the consume invocation. `waitUntil` is intentionally
+ * absent — the consume invocation owns its own request lifetime, and
+ * chaining another fire-and-forget here would just reintroduce the
+ * durability gap the deferred path closes.
+ *
+ * Errors from the underlying hook surface per the Trigger's
+ * `errorPolicy`. The adapter is expected to translate a throw into
+ * the platform's retry signal (e.g. `message.retry()` on CF Queues)
+ * so the hook eventually succeeds or hits the dead-letter queue.
+ */
+export declare class RunDeferredHookUseCase {
+    private readonly hooks;
+    constructor(hooks: LifecycleHookRunner);
+    execute(request: RunDeferredHookRequest): Promise<void>;
+}
+//# sourceMappingURL=RunDeferredHookUseCase.d.ts.map

package/dist/usecase/lifecycle/RunDeferredHookUseCase.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RunDeferredHookUseCase.d.ts","sourceRoot":"","sources":["../../../src/usecase/lifecycle/RunDeferredHookUseCase.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AACpF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAExE;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,sBAAsB;IACrB,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,mBAAmB;IAEjD,OAAO,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;CAoB9D"}

package/dist/usecase/lifecycle/RunDeferredHookUseCase.js

@@ -0,0 +1,44 @@
+/**
+ * Consume side of the deferred after-hook path. Adapter queue
+ * consumers (CF Workers `queue(batch, env)` for Workers Queues, etc.)
+ * deserialize each `DeferredHookEnvelope` and call this use case with
+ * a fresh per-invocation `env` binding bag.
+ *
+ * Reconstructs a `HandlerContext` mirroring the original firing
+ * context's identity (user / staff snapshot from the envelope), with
+ * `env` filled by the consume invocation. `waitUntil` is intentionally
+ * absent — the consume invocation owns its own request lifetime, and
+ * chaining another fire-and-forget here would just reintroduce the
+ * durability gap the deferred path closes.
+ *
+ * Errors from the underlying hook surface per the Trigger's
+ * `errorPolicy`. The adapter is expected to translate a throw into
+ * the platform's retry signal (e.g. `message.retry()` on CF Queues)
+ * so the hook eventually succeeds or hits the dead-letter queue.
+ */
+export class RunDeferredHookUseCase {
+    hooks;
+    constructor(hooks) {
+        this.hooks = hooks;
+    }
+    async execute(request) {
+        const { envelope, env } = request;
+        const ctx = {
+            user: envelope.ctxSnapshot?.userId
+                ? { id: envelope.ctxSnapshot.userId }
+                : null,
+            staff: envelope.ctxSnapshot?.staffId && envelope.ctxSnapshot.staffRole
+                ? { id: envelope.ctxSnapshot.staffId, role: envelope.ctxSnapshot.staffRole }
+                : null,
+            env,
+        };
+        await this.hooks.run({
+            hook: envelope.hook,
+            schema: envelope.schema,
+            entry: envelope.entry,
+            ctx,
+            originalInput: envelope.originalInput,
+        });
+    }
+}
+//# sourceMappingURL=RunDeferredHookUseCase.js.map

package/dist/usecase/lifecycle/RunDeferredHookUseCase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RunDeferredHookUseCase.js","sourceRoot":"","sources":["../../../src/usecase/lifecycle/RunDeferredHookUseCase.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,sBAAsB;IACJ;IAA7B,YAA6B,KAA0B;QAA1B,UAAK,GAAL,KAAK,CAAqB;IAAG,CAAC;IAE3D,KAAK,CAAC,OAAO,CAAC,OAA+B;QAC3C,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;QAClC,MAAM,GAAG,GAAmB;YAC1B,IAAI,EAAE,QAAQ,CAAC,WAAW,EAAE,MAAM;gBAChC,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,WAAW,CAAC,MAAM,EAAE;gBACrC,CAAC,CAAC,IAAI;YACR,KAAK,EACH,QAAQ,CAAC,WAAW,EAAE,OAAO,IAAI,QAAQ,CAAC,WAAW,CAAC,SAAS;gBAC7D,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,WAAW,CAAC,SAAS,EAAE;gBAC5E,CAAC,CAAC,IAAI;YACV,GAAG;SACJ,CAAC;QACF,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,GAAG;YACH,aAAa,EAAE,QAAQ,CAAC,aAAa;SACtC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/usecase/lifecycle/RunLifecycleHooksUseCase.d.ts

@@ -0,0 +1,38 @@
+import { type ProcedureManifest } from "@aotter/mantle-spec";
+import type { LifecycleHookRunner, RunLifecycleHookRequest } from "../../domain/port/LifecycleHookRunner.js";
+import type { TriggerIndex } from "../../domain/service/TriggerIndex.js";
+import type { InvokeProcedureRequest, InvokeProcedureResponse } from "../dto/procedure/index.js";
+/**
+ * `RunLifecycleHooksUseCase` — implements the `LifecycleHookRunner`
+ * port. Resolves matching Triggers via `TriggerIndex`, dispatches each
+ * to its target Procedure through the injected invoker (so input
+ * validation, auth, output validation all reuse the shared pipeline),
+ * and applies per-Trigger `errorPolicy`.
+ *
+ * The invoker is taken as a function rather than a concrete class so
+ * this use case does NOT import from a sibling under `usecase/` —
+ * `usecase → usecase` coupling would bypass the port boundary.
+ * Assembly root passes `(req) => invokeProcedure.execute(req)`.
+ *
+ * Defaults from the parser-locked grammar (POC ADR-0014):
+ *   - before_*: errorPolicy default `abort` — handler failure throws
+ *     a `DiagnosticError` and the chokepoint decorator cancels the
+ *     mutation.
+ *   - after_*: errorPolicy default `continue` — handler failure is
+ *     logged via `console.error` and swallowed; the mutation already
+ *     succeeded. Author override (`errorPolicy: continue` on a
+ *     before_* hook) is honored.
+ *
+ * `Trigger.errorPolicy: 'abort'` on after_* is parser-rejected, so the
+ * use case never has to reconcile that combination.
+ */
+export type InvokeProcedureFn = (request: InvokeProcedureRequest) => Promise<InvokeProcedureResponse>;
+export declare class RunLifecycleHooksUseCase implements LifecycleHookRunner {
+    private readonly triggers;
+    private readonly proceduresByName;
+    private readonly invoke;
+    constructor(triggers: TriggerIndex, proceduresByName: ReadonlyMap<string, ProcedureManifest>, invoke: InvokeProcedureFn);
+    run(request: RunLifecycleHookRequest): Promise<void>;
+    private runOne;
+}
+//# sourceMappingURL=RunLifecycleHooksUseCase.d.ts.map

package/dist/usecase/lifecycle/RunLifecycleHooksUseCase.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RunLifecycleHooksUseCase.d.ts","sourceRoot":"","sources":["../../../src/usecase/lifecycle/RunLifecycleHooksUseCase.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,iBAAiB,EAEvB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,KAAK,EACV,mBAAmB,EACnB,uBAAuB,EACxB,MAAM,0CAA0C,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAC;AACzE,OAAO,KAAK,EACV,sBAAsB,EACtB,uBAAuB,EACxB,MAAM,2BAA2B,CAAC;AAEnC;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAC9B,OAAO,EAAE,sBAAsB,KAC5B,OAAO,CAAC,uBAAuB,CAAC,CAAC;AAEtC,qBAAa,wBAAyB,YAAW,mBAAmB;IAEhE,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAFN,QAAQ,EAAE,YAAY,EACtB,gBAAgB,EAAE,WAAW,CAAC,MAAM,EAAE,iBAAiB,CAAC,EACxD,MAAM,EAAE,iBAAiB;IAGtC,GAAG,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC;YAU5C,MAAM;CAuDrB"}

package/dist/usecase/lifecycle/RunLifecycleHooksUseCase.js

@@ -0,0 +1,67 @@
+import { DiagnosticError, runtimeDiagnostic, } from "@aotter/mantle-spec";
+export class RunLifecycleHooksUseCase {
+    triggers;
+    proceduresByName;
+    invoke;
+    constructor(triggers, proceduresByName, invoke) {
+        this.triggers = triggers;
+        this.proceduresByName = proceduresByName;
+        this.invoke = invoke;
+    }
+    async run(request) {
+        const matching = this.triggers.forHook(request.schema, request.hook);
+        if (matching.length === 0)
+            return;
+        const isBefore = request.hook.startsWith("before_");
+        for (const trigger of matching) {
+            await this.runOne(trigger, request, isBefore);
+        }
+    }
+    async runOne(trigger, request, isBefore) {
+        const procedure = this.proceduresByName.get(trigger.spec.target.procedure);
+        if (!procedure) {
+            // Boot validator should have caught this; defense-in-depth.
+            throw new DiagnosticError(runtimeDiagnostic({
+                code: "TRIGGER_TARGET_PROCEDURE_UNKNOWN",
+                severity: "error",
+                path: `manifest:Trigger/${trigger.metadata.name}#/spec/target/procedure`,
+                value: trigger.spec.target.procedure,
+                expected: "name of a declared Procedure",
+                message: `Lifecycle Trigger '${trigger.metadata.name}' targets unknown Procedure '${trigger.spec.target.procedure}'.`,
+            }));
+        }
+        const event = {
+            hook: request.hook,
+            schema: request.schema,
+            entry: request.entry,
+        };
+        const ctxWithEvent = { ...request.ctx, event };
+        const declared = trigger.spec.source.kind === "lifecycle"
+            ? trigger.spec.source.errorPolicy
+            : undefined;
+        const policy = declared ?? (isBefore ? "abort" : "continue");
+        const input = request.originalInput ?? request.entry?.data ?? {};
+        let result;
+        try {
+            result = await this.invoke({
+                procedure,
+                input,
+                ctx: ctxWithEvent,
+                pathPrefix: `lifecycle:Trigger/${trigger.metadata.name}->${procedure.metadata.name}`,
+            });
+        }
+        catch (err) {
+            if (policy === "abort")
+                throw err;
+            console.error(`[lifecycle] after_* hook ${trigger.metadata.name} threw`, err);
+            return;
+        }
+        if (result.ok)
+            return;
+        if (policy === "abort") {
+            throw new DiagnosticError(result.diagnostic);
+        }
+        console.error(`[lifecycle] hook ${trigger.metadata.name} returned diagnostic`, result.diagnostic);
+    }
+}
+//# sourceMappingURL=RunLifecycleHooksUseCase.js.map

package/dist/usecase/lifecycle/RunLifecycleHooksUseCase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RunLifecycleHooksUseCase.js","sourceRoot":"","sources":["../../../src/usecase/lifecycle/RunLifecycleHooksUseCase.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,iBAAiB,GAGlB,MAAM,qBAAqB,CAAC;AAwC7B,MAAM,OAAO,wBAAwB;IAEhB;IACA;IACA;IAHnB,YACmB,QAAsB,EACtB,gBAAwD,EACxD,MAAyB;QAFzB,aAAQ,GAAR,QAAQ,CAAc;QACtB,qBAAgB,GAAhB,gBAAgB,CAAwC;QACxD,WAAM,GAAN,MAAM,CAAmB;IACzC,CAAC;IAEJ,KAAK,CAAC,GAAG,CAAC,OAAgC;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACrE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAElC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACpD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,MAAM,CAClB,OAAwB,EACxB,OAAgC,EAChC,QAAiB;QAEjB,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3E,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,4DAA4D;YAC5D,MAAM,IAAI,eAAe,CACvB,iBAAiB,CAAC;gBAChB,IAAI,EAAE,kCAAkC;gBACxC,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,oBAAoB,OAAO,CAAC,QAAQ,CAAC,IAAI,yBAAyB;gBACxE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS;gBACpC,QAAQ,EAAE,8BAA8B;gBACxC,OAAO,EAAE,sBAAsB,OAAO,CAAC,QAAQ,CAAC,IAAI,gCAAgC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI;aACtH,CAAC,CACH,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAA0B;YACnC,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC;QACF,MAAM,YAAY,GAAmB,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC;QAE/D,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW;YACvD,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW;YACjC,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,MAAM,GAAG,QAAQ,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAE7D,MAAM,KAAK,GAAG,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC;QACjE,IAAI,MAA+B,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC;gBACzB,SAAS;gBACT,KAAK;gBACL,GAAG,EAAE,YAAY;gBACjB,UAAU,EAAE,qBAAqB,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE;aACrF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,MAAM,KAAK,OAAO;gBAAE,MAAM,GAAG,CAAC;YAClC,OAAO,CAAC,KAAK,CAAC,4BAA4B,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,EAAE,GAAG,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QACD,IAAI,MAAM,CAAC,EAAE;YAAE,OAAO;QACtB,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YACvB,MAAM,IAAI,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,CAAC,KAAK,CACX,oBAAoB,OAAO,CAAC,QAAQ,CAAC,IAAI,sBAAsB,EAC/D,MAAM,CAAC,UAAU,CAClB,CAAC;IACJ,CAAC;CACF"}

package/dist/usecase/lifecycle/index.d.ts

@@ -0,0 +1,3 @@
+export { RunLifecycleHooksUseCase, type InvokeProcedureFn, } from "./RunLifecycleHooksUseCase.js";
+export { RunDeferredHookUseCase } from "./RunDeferredHookUseCase.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/usecase/lifecycle/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/usecase/lifecycle/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,KAAK,iBAAiB,GACvB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC"}

package/dist/usecase/lifecycle/index.js

@@ -0,0 +1,3 @@
+export { RunLifecycleHooksUseCase, } from "./RunLifecycleHooksUseCase.js";
+export { RunDeferredHookUseCase } from "./RunDeferredHookUseCase.js";
+//# sourceMappingURL=index.js.map

package/dist/usecase/lifecycle/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/usecase/lifecycle/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,GAEzB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC"}

package/dist/usecase/media/CommitMediaUploadUseCase.d.ts

@@ -0,0 +1,15 @@
+import type { Clock } from "../../domain/port/Clock.js";
+import type { KvCache } from "../../domain/port/KvCache.js";
+import type { MediaAsset, MediaStorage } from "../../domain/port/MediaStorage.js";
+import type { CommitMediaUploadRequest } from "../dto/media/index.js";
+export declare class CommitMediaUploadUseCase {
+    private readonly storage;
+    private readonly kv;
+    private readonly clock;
+    private readonly opts;
+    constructor(storage: MediaStorage, kv: KvCache, clock: Clock, opts?: {
+        readonly maxBytes?: number;
+    });
+    execute(request: CommitMediaUploadRequest): Promise<MediaAsset>;
+}
+//# sourceMappingURL=CommitMediaUploadUseCase.d.ts.map

package/dist/usecase/media/CommitMediaUploadUseCase.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CommitMediaUploadUseCase.d.ts","sourceRoot":"","sources":["../../../src/usecase/media/CommitMediaUploadUseCase.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AAClF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAUtE,qBAAa,wBAAwB;IAEjC,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAHJ,OAAO,EAAE,YAAY,EACrB,EAAE,EAAE,OAAO,EACX,KAAK,EAAE,KAAK,EACZ,IAAI,GAAE;QAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAO;IAGtD,OAAO,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,UAAU,CAAC;CA8BtE"}

package/dist/usecase/media/CommitMediaUploadUseCase.js

@@ -0,0 +1,43 @@
+import { DiagnosticError } from "@aotter/mantle-spec";
+import { mediaUploadExpiredDiagnostic, } from "./diagnostics.js";
+import { DEFAULT_MAX_BYTES, PENDING_UPLOAD_KV_PREFIX, } from "./mediaAllowlist.js";
+export class CommitMediaUploadUseCase {
+    storage;
+    kv;
+    clock;
+    opts;
+    constructor(storage, kv, clock, opts = {}) {
+        this.storage = storage;
+        this.kv = kv;
+        this.clock = clock;
+        this.opts = opts;
+    }
+    async execute(request) {
+        const opPath = "usecase/CommitMediaUpload";
+        const kvKey = `${PENDING_UPLOAD_KV_PREFIX}${request.uploadId}`;
+        const raw = await this.kv.get(kvKey);
+        if (!raw) {
+            throw new DiagnosticError(mediaUploadExpiredDiagnostic(opPath, request.uploadId));
+        }
+        const record = JSON.parse(raw);
+        const adapterCap = this.opts.maxBytes ?? DEFAULT_MAX_BYTES;
+        // Per-upload ceiling: tighter of (caller-declared at create) vs
+        // (adapter-wide cap). Defends against an adapter that accepted a
+        // larger PUT than the use case minted the URL for.
+        const maxBytes = Math.min(adapterCap, record.expectedSize);
+        const asset = await this.storage.commitUpload({
+            uploadId: request.uploadId,
+            storageKey: record.storageKey,
+            expectedMimeType: record.expectedMimeType,
+            maxBytes,
+            alt: request.alt,
+            caption: request.caption,
+            checksum: request.checksum,
+            now: this.clock.now(),
+        });
+        // Best-effort cleanup. KV TTL covers us if delete fails.
+        await this.kv.delete(kvKey).catch(() => undefined);
+        return asset;
+    }
+}
+//# sourceMappingURL=CommitMediaUploadUseCase.js.map

package/dist/usecase/media/CommitMediaUploadUseCase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CommitMediaUploadUseCase.js","sourceRoot":"","sources":["../../../src/usecase/media/CommitMediaUploadUseCase.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAKtD,OAAO,EACL,4BAA4B,GAC7B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,iBAAiB,EACjB,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAG7B,MAAM,OAAO,wBAAwB;IAEhB;IACA;IACA;IACA;IAJnB,YACmB,OAAqB,EACrB,EAAW,EACX,KAAY,EACZ,OAAuC,EAAE;QAHzC,YAAO,GAAP,OAAO,CAAc;QACrB,OAAE,GAAF,EAAE,CAAS;QACX,UAAK,GAAL,KAAK,CAAO;QACZ,SAAI,GAAJ,IAAI,CAAqC;IACzD,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,OAAiC;QAC7C,MAAM,MAAM,GAAG,2BAA2B,CAAC;QAC3C,MAAM,KAAK,GAAG,GAAG,wBAAwB,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC/D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,eAAe,CAAC,4BAA4B,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAwB,CAAC;QACtD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,iBAAiB,CAAC;QAC3D,gEAAgE;QAChE,iEAAiE;QACjE,mDAAmD;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;QAE3D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;YAC5C,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,QAAQ;YACR,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;SACtB,CAAC,CAAC;QAEH,yDAAyD;QACzD,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAEnD,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/usecase/media/CreateMediaUploadUseCase.d.ts

@@ -0,0 +1,18 @@
+import type { Clock } from "../../domain/port/Clock.js";
+import type { KvCache } from "../../domain/port/KvCache.js";
+import type { MediaStorage } from "../../domain/port/MediaStorage.js";
+import type { SiteConfigRepository } from "../../domain/port/SiteConfigRepository.js";
+import type { CreateMediaUploadRequest, CreateMediaUploadResponse } from "../dto/media/index.js";
+export declare class CreateMediaUploadUseCase {
+    private readonly storage;
+    private readonly kv;
+    private readonly clock;
+    private readonly siteConfig;
+    private readonly opts;
+    constructor(storage: MediaStorage, kv: KvCache, clock: Clock, siteConfig: SiteConfigRepository, opts?: {
+        readonly allowSvg: boolean;
+        readonly maxBytes?: number;
+    });
+    execute(request: CreateMediaUploadRequest): Promise<CreateMediaUploadResponse>;
+}
+//# sourceMappingURL=CreateMediaUploadUseCase.d.ts.map

package/dist/usecase/media/CreateMediaUploadUseCase.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateMediaUploadUseCase.d.ts","sourceRoot":"","sources":["../../../src/usecase/media/CreateMediaUploadUseCase.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACtE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,KAAK,EACV,wBAAwB,EACxB,yBAAyB,EAC1B,MAAM,uBAAuB,CAAC;AAiB/B,qBAAa,wBAAwB;IAEjC,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAJJ,OAAO,EAAE,YAAY,EACrB,EAAE,EAAE,OAAO,EACX,KAAK,EAAE,KAAK,EACZ,UAAU,EAAE,oBAAoB,EAChC,IAAI,GAAE;QAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAE9E;IAGG,OAAO,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,yBAAyB,CAAC;CAkErF"}

package/dist/usecase/media/CreateMediaUploadUseCase.js

@@ -0,0 +1,71 @@
+import { DiagnosticError } from "@aotter/mantle-spec";
+import { mediaMimeRejectedDiagnostic, mediaPurposeRejectedDiagnostic, mediaSizeExceededDiagnostic, mediaSvgRejectedDiagnostic, } from "./diagnostics.js";
+import { DEFAULT_MAX_BYTES, MEDIA_SVG_MIME, PENDING_UPLOAD_KV_PREFIX, PENDING_UPLOAD_KV_TTL_SECONDS, UPLOAD_URL_TTL_SECONDS, isAllowedMime, } from "./mediaAllowlist.js";
+export class CreateMediaUploadUseCase {
+    storage;
+    kv;
+    clock;
+    siteConfig;
+    opts;
+    constructor(storage, kv, clock, siteConfig, opts = {
+        allowSvg: false,
+    }) {
+        this.storage = storage;
+        this.kv = kv;
+        this.clock = clock;
+        this.siteConfig = siteConfig;
+        this.opts = opts;
+    }
+    async execute(request) {
+        const opPath = "usecase/CreateMediaUpload";
+        const maxBytes = this.opts.maxBytes ?? DEFAULT_MAX_BYTES;
+        // Fail-closed purpose enforcement (#262). Empty `media.purposes` —
+        // either undeclared or operator-cleared — disables uploads entirely
+        // at this layer; the MCP tool catalog + admin endpoint also gate on
+        // the same condition for cleaner UX. Reading per request rather
+        // than snapshotting at boot lets operator edits via the admin
+        // Settings page take effect without a redeploy.
+        const declared = await this.siteConfig.readMediaPurposes();
+        if (declared.length === 0 || !request.purpose || !declared.includes(request.purpose)) {
+            throw new DiagnosticError(mediaPurposeRejectedDiagnostic(opPath, request.purpose, declared));
+        }
+        if (request.mimeType === MEDIA_SVG_MIME && !this.opts.allowSvg) {
+            throw new DiagnosticError(mediaSvgRejectedDiagnostic(opPath));
+        }
+        if (!isAllowedMime(request.mimeType, this.opts.allowSvg)) {
+            throw new DiagnosticError(mediaMimeRejectedDiagnostic(opPath, request.mimeType));
+        }
+        // Enforce the ceiling before minting a presigned URL — see
+        // CreateMediaUploadRequest.byteSize for the WHY.
+        if (request.byteSize > maxBytes) {
+            throw new DiagnosticError(mediaSizeExceededDiagnostic(opPath, request.byteSize, maxBytes));
+        }
+        const now = this.clock.now();
+        const expiresAt = now + UPLOAD_URL_TTL_SECONDS * 1000;
+        const capability = await this.storage.createUpload({
+            filename: request.filename,
+            mimeType: request.mimeType,
+            byteSize: request.byteSize,
+            maxBytes,
+            purpose: request.purpose,
+            now,
+            expiresAt,
+        });
+        const record = {
+            storageKey: capability.storageKey,
+            expectedMimeType: request.mimeType,
+            expectedSize: request.byteSize,
+            expiresAt: capability.expiresAt,
+            createdAt: now,
+        };
+        await this.kv.put(`${PENDING_UPLOAD_KV_PREFIX}${capability.uploadId}`, JSON.stringify(record), { expirationTtl: PENDING_UPLOAD_KV_TTL_SECONDS });
+        return {
+            uploadId: capability.uploadId,
+            uploadUrl: capability.uploadUrl,
+            method: capability.method,
+            requiredHeaders: capability.requiredHeaders,
+            expiresAt: capability.expiresAt,
+        };
+    }
+}
+//# sourceMappingURL=CreateMediaUploadUseCase.js.map

package/dist/usecase/media/CreateMediaUploadUseCase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateMediaUploadUseCase.js","sourceRoot":"","sources":["../../../src/usecase/media/CreateMediaUploadUseCase.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAStD,OAAO,EACL,2BAA2B,EAC3B,8BAA8B,EAC9B,2BAA2B,EAC3B,0BAA0B,GAC3B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,wBAAwB,EACxB,6BAA6B,EAC7B,sBAAsB,EACtB,aAAa,GACd,MAAM,qBAAqB,CAAC;AAG7B,MAAM,OAAO,wBAAwB;IAEhB;IACA;IACA;IACA;IACA;IALnB,YACmB,OAAqB,EACrB,EAAW,EACX,KAAY,EACZ,UAAgC,EAChC,OAAmE;QAClF,QAAQ,EAAE,KAAK;KAChB;QANgB,YAAO,GAAP,OAAO,CAAc;QACrB,OAAE,GAAF,EAAE,CAAS;QACX,UAAK,GAAL,KAAK,CAAO;QACZ,eAAU,GAAV,UAAU,CAAsB;QAChC,SAAI,GAAJ,IAAI,CAEpB;IACA,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,OAAiC;QAC7C,MAAM,MAAM,GAAG,2BAA2B,CAAC;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,iBAAiB,CAAC;QAEzD,mEAAmE;QACnE,oEAAoE;QACpE,oEAAoE;QACpE,gEAAgE;QAChE,8DAA8D;QAC9D,gDAAgD;QAChD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC;QAC3D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACrF,MAAM,IAAI,eAAe,CACvB,8BAA8B,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAClE,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,KAAK,cAAc,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC/D,MAAM,IAAI,eAAe,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,eAAe,CAAC,2BAA2B,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QACnF,CAAC;QACD,2DAA2D;QAC3D,iDAAiD;QACjD,IAAI,OAAO,CAAC,QAAQ,GAAG,QAAQ,EAAE,CAAC;YAChC,MAAM,IAAI,eAAe,CACvB,2BAA2B,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAChE,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,GAAG,GAAG,sBAAsB,GAAG,IAAI,CAAC;QAEtD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;YACjD,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ;YACR,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,GAAG;YACH,SAAS;SACV,CAAC,CAAC;QAEH,MAAM,MAAM,GAAwB;YAClC,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,gBAAgB,EAAE,OAAO,CAAC,QAAQ;YAClC,YAAY,EAAE,OAAO,CAAC,QAAQ;YAC9B,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,SAAS,EAAE,GAAG;SACf,CAAC;QAEF,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CACf,GAAG,wBAAwB,GAAG,UAAU,CAAC,QAAQ,EAAE,EACnD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EACtB,EAAE,aAAa,EAAE,6BAA6B,EAAE,CACjD,CAAC;QAEF,OAAO;YACL,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,eAAe,EAAE,UAAU,CAAC,eAAe;YAC3C,SAAS,EAAE,UAAU,CAAC,SAAS;SAChC,CAAC;IACJ,CAAC;CACF"}

package/dist/usecase/media/PendingUploadRecord.d.ts

@@ -0,0 +1,17 @@
+/** KV record persisted by `CreateMediaUploadUseCase` and read by
+ *  `CommitMediaUploadUseCase`. Stored under
+ *  `${PENDING_UPLOAD_KV_PREFIX}${uploadId}` with a TTL set to
+ *  `PENDING_UPLOAD_KV_TTL_SECONDS`. */
+export interface PendingUploadRecord {
+    readonly storageKey: string;
+    readonly expectedMimeType: string;
+    /** Caller-declared byte size, persisted at create time so commit can
+     *  enforce a tight per-upload ceiling instead of just the adapter-
+     *  wide `maxBytes`. Adapter ultimately verifies actual stored bytes
+     *  ≤ commit-supplied maxBytes — `CommitMediaUploadUseCase` passes
+     *  `min(adapterCap, record.expectedSize)`. */
+    readonly expectedSize: number;
+    readonly expiresAt: number;
+    readonly createdAt: number;
+}
+//# sourceMappingURL=PendingUploadRecord.d.ts.map

package/dist/usecase/media/PendingUploadRecord.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PendingUploadRecord.d.ts","sourceRoot":"","sources":["../../../src/usecase/media/PendingUploadRecord.ts"],"names":[],"mappings":"AAAA;;;uCAGuC;AACvC,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC;;;;kDAI8C;IAC9C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B"}

package/dist/usecase/media/PendingUploadRecord.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=PendingUploadRecord.js.map

package/dist/usecase/media/PendingUploadRecord.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PendingUploadRecord.js","sourceRoot":"","sources":["../../../src/usecase/media/PendingUploadRecord.ts"],"names":[],"mappings":""}

package/dist/usecase/media/diagnostics.d.ts

@@ -0,0 +1,15 @@
+import { type Diagnostic } from "@aotter/mantle-spec";
+export declare function mediaNotConfiguredDiagnostic(opPath: string): Diagnostic;
+export declare function mediaMimeRejectedDiagnostic(opPath: string, mime: string): Diagnostic;
+export declare function mediaSvgRejectedDiagnostic(opPath: string): Diagnostic;
+export declare function mediaSizeExceededDiagnostic(opPath: string, byteSize: number, maxBytes: number): Diagnostic;
+export declare function mediaUploadExpiredDiagnostic(opPath: string, uploadId: string): Diagnostic;
+export declare function mediaObjectNotFoundDiagnostic(opPath: string, uploadId: string): Diagnostic;
+/** Caller supplied a `purpose` that this deployment did not declare in
+ *  `siteDefaults.media.purposes`. Fail-closed per #262: alpha has no
+ *  production consumers, so there is no warn-and-allow compatibility
+ *  mode — undeclared purposes are always rejected. The `expected`
+ *  field carries the declared set so agents can self-correct without
+ *  another round trip. */
+export declare function mediaPurposeRejectedDiagnostic(opPath: string, purpose: string | undefined, declared: readonly string[]): Diagnostic;
+//# sourceMappingURL=diagnostics.d.ts.map