@archlast/server 0.0.1

package/dist/services/invite.service.js

@@ -0,0 +1,216 @@
+"use strict";
+/**
+ * Invite Service
+ *
+ * Business logic for invite management extracted from HTTP controllers.
+ * Handles creating, accepting, declining, and revoking tenant invites.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InviteError = void 0;
+exports.createInviteService = createInviteService;
+const cuid2_1 = require("@paralleldrive/cuid2");
+const schema_js_1 = require("../auth/system/schema.js");
+// ============================================================================
+// Errors
+// ============================================================================
+class InviteError extends Error {
+    statusCode;
+    constructor(message, statusCode = 400) {
+        super(message);
+        this.statusCode = statusCode;
+        this.name = "InviteError";
+    }
+}
+exports.InviteError = InviteError;
+// ============================================================================
+// Service Factory
+// ============================================================================
+function createInviteService() {
+    /**
+     * List current user's pending invites
+     */
+    async function listUserInvites(options) {
+        const { userId, userEmail, db } = options;
+        const invites = await db
+            .query(schema_js_1.AUTH_COLLECTIONS.invites)
+            .where({ email: userEmail, status: "pending" })
+            .findMany();
+        // Enrich with tenant info
+        return await Promise.all(invites.map(async (invite) => {
+            const tenant = await db.get(schema_js_1.AUTH_COLLECTIONS.tenants, invite.tenantId);
+            return {
+                _id: invite._id,
+                tenantId: invite.tenantId,
+                tenantName: tenant?.name || "Unknown",
+                role: invite.role,
+                createdAt: invite.createdAt,
+                expiresAt: invite.expiresAt,
+            };
+        }));
+    }
+    /**
+     * List invites for a tenant
+     */
+    async function listTenantInvites(options) {
+        const { tenantId, requesterUserId, db } = options;
+        // Check membership
+        const membership = await db
+            .query(schema_js_1.AUTH_COLLECTIONS.memberships)
+            .where({ tenantId, userId: requesterUserId })
+            .findFirst();
+        if (!membership) {
+            throw new InviteError("Not a member of this tenant", 403);
+        }
+        const invites = await db
+            .query(schema_js_1.AUTH_COLLECTIONS.invites)
+            .where({ tenantId })
+            .findMany();
+        return invites.map((invite) => ({
+            _id: invite._id,
+            tenantId: invite.tenantId,
+            email: invite.email,
+            role: invite.role,
+            permissions: invite.permissions,
+            status: invite.status,
+            invitedBy: invite.invitedBy,
+            createdAt: invite.createdAt,
+            expiresAt: invite.expiresAt,
+        }));
+    }
+    /**
+     * Create invite for tenant
+     */
+    async function createInvite(options) {
+        const { tenantId, email, role, permissions, requesterUserId, origin, db, emailService, } = options;
+        // Check membership with admin/owner role
+        const membership = await db
+            .query(schema_js_1.AUTH_COLLECTIONS.memberships)
+            .where({ tenantId, userId: requesterUserId })
+            .findFirst();
+        if (!membership || !["owner", "admin"].includes(membership.role)) {
+            throw new InviteError("Insufficient permissions", 403);
+        }
+        const normalizedEmail = email.toLowerCase().trim();
+        const now = Date.now();
+        const expiresAt = now + 7 * 24 * 60 * 60 * 1000; // 7 days
+        const inviteId = (0, cuid2_1.createId)();
+        await db.insert(schema_js_1.AUTH_COLLECTIONS.invites, {
+            _id: inviteId,
+            tenantId,
+            email: normalizedEmail,
+            role: role || "member",
+            permissions: permissions || [],
+            status: "pending",
+            invitedBy: requesterUserId,
+            createdAt: now,
+            expiresAt,
+        });
+        // Send invite email
+        if (emailService) {
+            try {
+                const tenant = await db.get(schema_js_1.AUTH_COLLECTIONS.tenants, tenantId);
+                const inviteUrl = `${origin || process.env.ARCHLAST_PUBLIC_URL || "http://localhost:3000"}/invites`;
+                await emailService.send({
+                    to: normalizedEmail,
+                    subject: `You've been invited to join ${tenant?.name || "a workspace"}`,
+                    text: `You've been invited to join a workspace. Click here to accept: ${inviteUrl}`,
+                    html: `<p>You've been invited to join a workspace.</p><a href="${inviteUrl}">Accept Invite</a>`,
+                });
+            }
+            catch (error) {
+                // Log but don't fail
+            }
+        }
+        return {
+            success: true,
+            invite: {
+                _id: inviteId,
+                email: normalizedEmail,
+                role: role || "member",
+                expiresAt,
+            },
+        };
+    }
+    /**
+     * Accept an invite
+     */
+    async function acceptInvite(options) {
+        const { inviteId, userId, userEmail, db } = options;
+        const invite = await db.get(schema_js_1.AUTH_COLLECTIONS.invites, inviteId);
+        if (!invite) {
+            throw new InviteError("Invite not found", 404);
+        }
+        // Verify invite belongs to user
+        if (invite.email !== userEmail) {
+            throw new InviteError("Forbidden", 403);
+        }
+        // Check expiration
+        if (invite.expiresAt && invite.expiresAt < Date.now()) {
+            throw new InviteError("Invite expired", 400);
+        }
+        const now = Date.now();
+        // Create membership
+        await db.insert(schema_js_1.AUTH_COLLECTIONS.memberships, {
+            _id: (0, cuid2_1.createId)(),
+            tenantId: invite.tenantId,
+            userId,
+            role: invite.role || "member",
+            permissions: invite.permissions || [],
+            createdAt: now,
+            updatedAt: now,
+        });
+        // Mark invite as accepted
+        await db.update(schema_js_1.AUTH_COLLECTIONS.invites, inviteId, {
+            status: "accepted",
+            updatedAt: now,
+        });
+    }
+    /**
+     * Decline an invite
+     */
+    async function declineInvite(options) {
+        const { inviteId, userId, userEmail, db } = options;
+        const invite = await db.get(schema_js_1.AUTH_COLLECTIONS.invites, inviteId);
+        if (!invite) {
+            throw new InviteError("Invite not found", 404);
+        }
+        // Verify invite belongs to user
+        if (invite.email !== userEmail) {
+            throw new InviteError("Forbidden", 403);
+        }
+        await db.update(schema_js_1.AUTH_COLLECTIONS.invites, inviteId, {
+            status: "declined",
+            updatedAt: Date.now(),
+        });
+    }
+    /**
+     * Revoke an invite
+     */
+    async function revokeInvite(options) {
+        const { inviteId, requesterUserId, db } = options;
+        const invite = await db.get(schema_js_1.AUTH_COLLECTIONS.invites, inviteId);
+        if (!invite) {
+            throw new InviteError("Invite not found", 404);
+        }
+        // Check permission (inviter or tenant admin)
+        const membership = await db
+            .query(schema_js_1.AUTH_COLLECTIONS.memberships)
+            .where({ tenantId: invite.tenantId, userId: requesterUserId })
+            .findFirst();
+        const isInviter = invite.invitedBy === requesterUserId;
+        const isAdmin = membership && ["owner", "admin"].includes(membership.role);
+        if (!isInviter && !isAdmin) {
+            throw new InviteError("Insufficient permissions", 403);
+        }
+        await db.delete(schema_js_1.AUTH_COLLECTIONS.invites, inviteId);
+    }
+    return {
+        listUserInvites,
+        listTenantInvites,
+        createInvite,
+        acceptInvite,
+        declineInvite,
+        revokeInvite,
+    };
+}
+//# sourceMappingURL=invite.service.js.map

package/dist/services/invite.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invite.service.js","sourceRoot":"","sources":["../../src/services/invite.service.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAgHH,kDAsOC;AApVD,gDAAgD;AAEhD,wDAA4D;AA0F5D,+EAA+E;AAC/E,SAAS;AACT,+EAA+E;AAE/E,MAAa,WAAY,SAAQ,KAAK;IAGvB;IAFX,YACI,OAAe,EACR,aAAqB,GAAG;QAE/B,KAAK,CAAC,OAAO,CAAC,CAAC;QAFR,eAAU,GAAV,UAAU,CAAc;QAG/B,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC9B,CAAC;CACJ;AARD,kCAQC;AAED,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E,SAAgB,mBAAmB;IAC/B;;OAEG;IACH,KAAK,UAAU,eAAe,CAAC,OAA+B;QAC1D,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC;QAE1C,MAAM,OAAO,GAAG,MAAM,EAAE;aACnB,KAAK,CAAC,4BAAgB,CAAC,OAAO,CAAC;aAC/B,KAAK,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;aAC9C,QAAQ,EAAE,CAAC;QAEhB,0BAA0B;QAC1B,OAAO,MAAM,OAAO,CAAC,GAAG,CACpB,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAW,EAAE,EAAE;YAC9B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,4BAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YACvE,OAAO;gBACH,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,UAAU,EAAG,MAAc,EAAE,IAAI,IAAI,SAAS;gBAC9C,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;aAC9B,CAAC;QACN,CAAC,CAAC,CACL,CAAC;IACN,CAAC;IAED;;OAEG;IACH,KAAK,UAAU,iBAAiB,CAAC,OAAiC;QAC9D,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC;QAElD,mBAAmB;QACnB,MAAM,UAAU,GAAG,MAAM,EAAE;aACtB,KAAK,CAAC,4BAAgB,CAAC,WAAW,CAAC;aACnC,KAAK,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;aAC5C,SAAS,EAAE,CAAC;QAEjB,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,MAAM,IAAI,WAAW,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,EAAE;aACnB,KAAK,CAAC,4BAAgB,CAAC,OAAO,CAAC;aAC/B,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC;aACnB,QAAQ,EAAE,CAAC;QAEhB,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAW,EAAE,EAAE,CAAC,CAAC;YACjC,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;SAC9B,CAAC,CAAC,CAAC;IACR,CAAC;IAED;;OAEG;IACH,KAAK,UAAU,YAAY,CAAC,OAA4B;QACpD,MAAM,EACF,QAAQ,EACR,KAAK,EACL,IAAI,EACJ,WAAW,EACX,eAAe,EACf,MAAM,EACN,EAAE,EACF,YAAY,GACf,GAAG,OAAO,CAAC;QAEZ,yCAAyC;QACzC,MAAM,UAAU,GAAG,MAAM,EAAE;aACtB,KAAK,CAAC,4BAAgB,CAAC,WAAW,CAAC;aACnC,KAAK,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;aAC5C,SAAS,EAAE,CAAC;QAEjB,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAE,UAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,WAAW,CAAC,0BAA0B,EAAE,GAAG,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,eAAe,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QACnD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,GAAG,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,SAAS;QAE1D,MAAM,QAAQ,GAAG,IAAA,gBAAQ,GAAE,CAAC;QAC5B,MAAM,EAAE,CAAC,MAAM,CAAC,4BAAgB,CAAC,OAAO,EAAE;YACtC,GAAG,EAAE,QAAQ;YACb,QAAQ;YACR,KAAK,EAAE,eAAe;YACtB,IAAI,EAAE,IAAI,IAAI,QAAQ;YACtB,WAAW,EAAE,WAAW,IAAI,EAAE;YAC9B,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,eAAe;YAC1B,SAAS,EAAE,GAAG;YACd,SAAS;SACZ,CAAC,CAAC;QAEH,oBAAoB;QACpB,IAAI,YAAY,EAAE,CAAC;YACf,IAAI,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,4BAAgB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAChE,MAAM,SAAS,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,uBAAuB,UAAU,CAAC;gBAEpG,MAAM,YAAY,CAAC,IAAI,CAAC;oBACpB,EAAE,EAAE,eAAe;oBACnB,OAAO,EAAE,+BAAgC,MAAc,EAAE,IAAI,IAAI,aAAa,EAAE;oBAChF,IAAI,EAAE,kEAAkE,SAAS,EAAE;oBACnF,IAAI,EAAE,2DAA2D,SAAS,qBAAqB;iBAClG,CAAC,CAAC;YACP,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,qBAAqB;YACzB,CAAC;QACL,CAAC;QAED,OAAO;YACH,OAAO,EAAE,IAAI;YACb,MAAM,EAAE;gBACJ,GAAG,EAAE,QAAQ;gBACb,KAAK,EAAE,eAAe;gBACtB,IAAI,EAAE,IAAI,IAAI,QAAQ;gBACtB,SAAS;aACZ;SACJ,CAAC;IACN,CAAC;IAED;;OAEG;IACH,KAAK,UAAU,YAAY,CAAC,OAA4B;QACpD,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC;QAEpD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,4BAAgB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,IAAI,WAAW,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;QACnD,CAAC;QAED,gCAAgC;QAChC,IAAK,MAAc,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QAC5C,CAAC;QAED,mBAAmB;QACnB,IAAK,MAAc,CAAC,SAAS,IAAK,MAAc,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACtE,MAAM,IAAI,WAAW,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,oBAAoB;QACpB,MAAM,EAAE,CAAC,MAAM,CAAC,4BAAgB,CAAC,WAAW,EAAE;YAC1C,GAAG,EAAE,IAAA,gBAAQ,GAAE;YACf,QAAQ,EAAG,MAAc,CAAC,QAAQ;YAClC,MAAM;YACN,IAAI,EAAG,MAAc,CAAC,IAAI,IAAI,QAAQ;YACtC,WAAW,EAAG,MAAc,CAAC,WAAW,IAAI,EAAE;YAC9C,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACjB,CAAC,CAAC;QAEH,0BAA0B;QAC1B,MAAM,EAAE,CAAC,MAAM,CAAC,4BAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE;YAChD,MAAM,EAAE,UAAU;YAClB,SAAS,EAAE,GAAG;SACjB,CAAC,CAAC;IACP,CAAC;IAED;;OAEG;IACH,KAAK,UAAU,aAAa,CAAC,OAA6B;QACtD,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC;QAEpD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,4BAAgB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,IAAI,WAAW,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;QACnD,CAAC;QAED,gCAAgC;QAChC,IAAK,MAAc,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,EAAE,CAAC,MAAM,CAAC,4BAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE;YAChD,MAAM,EAAE,UAAU;YAClB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACxB,CAAC,CAAC;IACP,CAAC;IAED;;OAEG;IACH,KAAK,UAAU,YAAY,CAAC,OAA4B;QACpD,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC;QAElD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,4BAAgB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,IAAI,WAAW,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;QACnD,CAAC;QAED,6CAA6C;QAC7C,MAAM,UAAU,GAAG,MAAM,EAAE;aACtB,KAAK,CAAC,4BAAgB,CAAC,WAAW,CAAC;aACnC,KAAK,CAAC,EAAE,QAAQ,EAAG,MAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;aACtE,SAAS,EAAE,CAAC;QAEjB,MAAM,SAAS,GAAI,MAAc,CAAC,SAAS,KAAK,eAAe,CAAC;QAChE,MAAM,OAAO,GAAG,UAAU,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAE,UAAkB,CAAC,IAAI,CAAC,CAAC;QAEpF,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,WAAW,CAAC,0BAA0B,EAAE,GAAG,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,EAAE,CAAC,MAAM,CAAC,4BAAgB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED,OAAO;QACH,eAAe;QACf,iBAAiB;QACjB,YAAY;QACZ,YAAY;QACZ,aAAa;QACb,YAAY;KACf,CAAC;AACN,CAAC"}

package/dist/services/storage.service.d.ts

@@ -0,0 +1,79 @@
+/**
+ * Storage Service
+ *
+ * Business logic for file storage extracted from HTTP controllers.
+ * Handles file upload, download, signed URLs, and token verification.
+ */
+import type { IDatabaseClient } from "../db/interfaces.js";
+import type { StorageManager } from "../storage/manager.js";
+export interface StorageService {
+    upload(options: UploadOptions): Promise<{
+        id: string;
+    }>;
+    download(options: DownloadOptions): Promise<DownloadResult>;
+    getMetadata(options: GetFileOptions): Promise<FileMetadata>;
+    deleteFile(options: GetFileOptions): Promise<void>;
+    listFiles(options: ListFilesOptions): Promise<StorageItem[]>;
+    generateSignedUrl(options: SignedUrlOptions): string;
+    verifySignedToken(token: string, secret: string): TokenPayload | null;
+}
+export interface UploadOptions {
+    body: any;
+    contentType: string;
+    fileName?: string;
+    storage: StorageManager;
+}
+export interface DownloadOptions {
+    id: string;
+    storage: StorageManager;
+}
+export interface GetFileOptions {
+    id: string;
+    storage: StorageManager;
+}
+export interface ListFilesOptions {
+    limit: number;
+    offset: number;
+    storage: StorageManager;
+}
+export interface SignedUrlOptions {
+    id: string;
+    secret: string;
+    expiresInSeconds?: number;
+}
+export interface FileMetadata {
+    id: string;
+    size: number;
+    contentType: string;
+    fileName: string;
+}
+export interface DownloadResult {
+    data: ReadableStream;
+    contentType: string;
+    contentDisposition: string;
+    contentLength: number;
+}
+export interface StorageItem {
+    id: string;
+    size: number;
+    contentType: string;
+}
+export interface TokenPayload {
+    id: string;
+    exp: number;
+}
+export declare class StorageError extends Error {
+    statusCode: number;
+    constructor(message: string, statusCode?: number);
+}
+export declare function createStorageService(): StorageService;
+/**
+ * Require either admin auth OR regular user auth.
+ * Returns { type: 'admin', user } or { type: 'user', userId, tenantId } or null if unauthorized.
+ */
+export declare function requireAuthOrAdmin(rawDb: IDatabaseClient, request: Request): Promise<{
+    type: "admin" | "user";
+    userId: string;
+    tenantId?: string;
+} | null>;
+//# sourceMappingURL=storage.service.d.ts.map

package/dist/services/storage.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.service.d.ts","sourceRoot":"","sources":["../../src/services/storage.service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAY5D,MAAM,WAAW,cAAc;IAC3B,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACxD,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC5D,WAAW,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC5D,UAAU,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC7D,iBAAiB,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM,CAAC;IACrD,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAAC;CACzE;AAED,MAAM,WAAW,aAAa;IAC1B,IAAI,EAAE,GAAG,CAAC;IACV,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,cAAc,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,cAAc,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,cAAc,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,cAAc,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,YAAY;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC3B,IAAI,EAAE,cAAc,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,WAAW;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;CACf;AAMD,qBAAa,YAAa,SAAQ,KAAK;IAGxB,UAAU,EAAE,MAAM;gBADzB,OAAO,EAAE,MAAM,EACR,UAAU,GAAE,MAAY;CAKtC;AAMD,wBAAgB,oBAAoB,IAAI,cAAc,CAuIrD;AAMD;;;GAGG;AACH,wBAAsB,kBAAkB,CACpC,KAAK,EAAE,eAAe,EACtB,OAAO,EAAE,OAAO,GACjB,OAAO,CAAC;IAAE,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CA8B/E"}

package/dist/services/storage.service.js

@@ -0,0 +1,209 @@
+"use strict";
+/**
+ * Storage Service
+ *
+ * Business logic for file storage extracted from HTTP controllers.
+ * Handles file upload, download, signed URLs, and token verification.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.StorageError = void 0;
+exports.createStorageService = createStorageService;
+exports.requireAuthOrAdmin = requireAuthOrAdmin;
+const crypto_1 = require("crypto");
+const http_js_1 = require("../utils/http.js");
+const role_helpers_js_1 = require("../auth/role-helpers.js");
+const context_helper_js_1 = require("../http/context-helper.js");
+const constants_js_1 = require("../auth/system/constants.js");
+const cookies_js_1 = require("../auth/system/cookies.js");
+// ============================================================================
+// Errors
+// ============================================================================
+class StorageError extends Error {
+    statusCode;
+    constructor(message, statusCode = 400) {
+        super(message);
+        this.statusCode = statusCode;
+        this.name = "StorageError";
+    }
+}
+exports.StorageError = StorageError;
+// ============================================================================
+// Service Factory
+// ============================================================================
+function createStorageService() {
+    /**
+     * Upload a file
+     */
+    async function upload(options) {
+        const { body, contentType, fileName, storage } = options;
+        let buffer;
+        if (body instanceof ArrayBuffer) {
+            buffer = Buffer.from(body);
+        }
+        else if (body instanceof Blob) {
+            buffer = Buffer.from(await body.arrayBuffer());
+        }
+        else if (typeof body === "object" &&
+            body &&
+            "buffer" in body &&
+            "byteLength" in body) {
+            buffer = Buffer.from(body);
+        }
+        else if (typeof body === "string") {
+            buffer = Buffer.from(body);
+        }
+        else {
+            buffer = Buffer.from(body);
+        }
+        const opts = {
+            contentType,
+            fileName: fileName || "upload",
+        };
+        const id = await storage.storeWithName(buffer, opts);
+        return { id };
+    }
+    /**
+     * Download file
+     */
+    async function download(options) {
+        const { id, storage } = options;
+        const data = await storage.open(id);
+        if (!data) {
+            throw new StorageError("File not found", 404);
+        }
+        const meta = await storage.getMetadata(id);
+        const fileName = await storage.getFileName(id);
+        const ext = meta?.contentType ? (0, http_js_1.getExtensionFromMimeType)(meta.contentType) : "";
+        const filename = fileName || `${id}${ext}`;
+        return {
+            data,
+            contentType: meta?.contentType || "application/octet-stream",
+            contentDisposition: (0, http_js_1.createContentDisposition)(filename),
+            contentLength: meta?.size ?? 0,
+        };
+    }
+    /**
+     * Get file metadata
+     */
+    async function getMetadata(options) {
+        const { id, storage } = options;
+        const meta = await storage.getMetadata(id);
+        if (!meta) {
+            throw new StorageError("File not found", 404);
+        }
+        const fileName = await storage.getFileName(id);
+        return {
+            id,
+            size: meta.size,
+            contentType: meta.contentType ?? "application/octet-stream",
+            fileName: fileName ?? "",
+        };
+    }
+    /**
+     * Delete file
+     */
+    async function deleteFile(options) {
+        const { id, storage } = options;
+        const meta = await storage.getMetadata(id);
+        if (!meta) {
+            throw new StorageError("File not found", 404);
+        }
+        await storage.delete(id);
+    }
+    /**
+     * List files
+     */
+    async function listFiles(options) {
+        const { limit, offset, storage } = options;
+        const items = await storage.list({ limit, offset });
+        return items.map((item) => ({
+            id: item.id,
+            size: item.size,
+            contentType: item.contentType ?? "application/octet-stream",
+        }));
+    }
+    /**
+     * Generate signed URL
+     */
+    function generateSignedUrl(options) {
+        const { id, secret, expiresInSeconds } = options;
+        const expiresIn = expiresInSeconds || 300; // Default 5 minutes
+        const token = signStorageToken(id, secret, expiresIn);
+        return `/_storage/download?token=${token}`;
+    }
+    /**
+     * Verify signed token
+     */
+    function verifySignedToken(token, secret) {
+        return verifyStorageToken(token, secret);
+    }
+    return {
+        upload,
+        download,
+        getMetadata,
+        deleteFile,
+        listFiles,
+        generateSignedUrl,
+        verifySignedToken,
+    };
+}
+// ============================================================================
+// Auth Helper
+// ============================================================================
+/**
+ * Require either admin auth OR regular user auth.
+ * Returns { type: 'admin', user } or { type: 'user', userId, tenantId } or null if unauthorized.
+ */
+async function requireAuthOrAdmin(rawDb, request) {
+    const headers = Object.fromEntries(request.headers.entries());
+    // 1. Try Better-Auth admin first (unified admin authentication)
+    const adminAuth = await (0, role_helpers_js_1.requireAdmin)((0, context_helper_js_1.getBetterAuth)(), request);
+    if (adminAuth) {
+        return { type: "admin", userId: adminAuth.user.id };
+    }
+    // 2. Fallback to regular user auth via authResolver
+    const authResolver = (0, context_helper_js_1.getAuthResolver)();
+    const appId = headers["x-archlast-app-id"];
+    const cookieName = appId ? `${constants_js_1.AUTH_COOKIE_NAME}_${appId}` : constants_js_1.AUTH_COOKIE_NAME;
+    const cookies = (0, cookies_js_1.parseCookieHeader)(headers.cookie ?? "");
+    const token = cookies[cookieName] ?? null;
+    const auth = await authResolver.resolve({
+        token: token ?? undefined,
+        cookies,
+        headers: {
+            cookie: headers.cookie ?? "",
+            authorization: headers.authorization ?? "",
+        },
+    });
+    if (auth.isAuthenticated && auth.userId) {
+        return { type: "user", userId: auth.userId, tenantId: auth.tenantId ?? undefined };
+    }
+    return null;
+}
+// ============================================================================
+// Signing Helpers
+// ============================================================================
+function signStorageToken(id, secret, expiresIn) {
+    const exp = Math.floor(Date.now() / 1000) + expiresIn;
+    const payload = Buffer.from(JSON.stringify({ id, exp })).toString("base64url");
+    const signature = (0, crypto_1.createHmac)("sha256", secret).update(payload).digest("base64url");
+    return `${payload}.${signature}`;
+}
+function verifyStorageToken(token, secret) {
+    try {
+        const [payload, signature] = token.split(".");
+        if (!payload || !signature)
+            return null;
+        const expectedSignature = (0, crypto_1.createHmac)("sha256", secret).update(payload).digest("base64url");
+        if (signature !== expectedSignature)
+            return null;
+        const decoded = JSON.parse(Buffer.from(payload, "base64url").toString());
+        if (decoded.exp < Math.floor(Date.now() / 1000))
+            return null;
+        return decoded;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=storage.service.js.map

package/dist/services/storage.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.service.js","sourceRoot":"","sources":["../../src/services/storage.service.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAkGH,oDAuIC;AAUD,gDAiCC;AAlRD,mCAAoC;AAIpC,8CAAsF;AACtF,6DAAuD;AACvD,iEAA2E;AAC3E,8DAA+D;AAC/D,0DAA8D;AAsE9D,+EAA+E;AAC/E,SAAS;AACT,+EAA+E;AAE/E,MAAa,YAAa,SAAQ,KAAK;IAGxB;IAFX,YACI,OAAe,EACR,aAAqB,GAAG;QAE/B,KAAK,CAAC,OAAO,CAAC,CAAC;QAFR,eAAU,GAAV,UAAU,CAAc;QAG/B,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC/B,CAAC;CACJ;AARD,oCAQC;AAED,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E,SAAgB,oBAAoB;IAChC;;OAEG;IACH,KAAK,UAAU,MAAM,CAAC,OAAsB;QACxC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QAEzD,IAAI,MAAc,CAAC;QAEnB,IAAI,IAAI,YAAY,WAAW,EAAE,CAAC;YAC9B,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;aAAM,IAAI,IAAI,YAAY,IAAI,EAAE,CAAC;YAC9B,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACnD,CAAC;aAAM,IACH,OAAO,IAAI,KAAK,QAAQ;YACxB,IAAI;YACJ,QAAQ,IAAI,IAAI;YAChB,YAAY,IAAI,IAAI,EACtB,CAAC;YACC,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAW,CAAC,CAAC;QACtC,CAAC;aAAM,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;aAAM,CAAC;YACJ,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAW,CAAC,CAAC;QACtC,CAAC;QAED,MAAM,IAAI,GAAyB;YAC/B,WAAW;YACX,QAAQ,EAAE,QAAQ,IAAI,QAAQ;SACjC,CAAC;QAEF,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAErD,OAAO,EAAE,EAAE,EAAE,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,KAAK,UAAU,QAAQ,CAAC,OAAwB;QAC5C,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QAEhC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,MAAM,IAAI,YAAY,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAE/C,MAAM,GAAG,GAAG,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,IAAA,kCAAwB,EAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,MAAM,QAAQ,GAAG,QAAQ,IAAI,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;QAE3C,OAAO;YACH,IAAI;YACJ,WAAW,EAAE,IAAI,EAAE,WAAW,IAAI,0BAA0B;YAC5D,kBAAkB,EAAE,IAAA,kCAAwB,EAAC,QAAQ,CAAC;YACtD,aAAa,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;SACjC,CAAC;IACN,CAAC;IAED;;OAEG;IACH,KAAK,UAAU,WAAW,CAAC,OAAuB;QAC9C,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QAEhC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,MAAM,IAAI,YAAY,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAE/C,OAAO;YACH,EAAE;YACF,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,0BAA0B;YAC3D,QAAQ,EAAE,QAAQ,IAAI,EAAE;SAC3B,CAAC;IACN,CAAC;IAED;;OAEG;IACH,KAAK,UAAU,UAAU,CAAC,OAAuB;QAC7C,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QAEhC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,MAAM,IAAI,YAAY,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,KAAK,UAAU,SAAS,CAAC,OAAyB;QAC9C,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QAC3C,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACpD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACxB,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,0BAA0B;SAC9D,CAAC,CAAC,CAAC;IACR,CAAC;IAED;;OAEG;IACH,SAAS,iBAAiB,CAAC,OAAyB;QAChD,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC;QACjD,MAAM,SAAS,GAAG,gBAAgB,IAAI,GAAG,CAAC,CAAC,oBAAoB;QAC/D,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QACtD,OAAO,4BAA4B,KAAK,EAAE,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,SAAS,iBAAiB,CAAC,KAAa,EAAE,MAAc;QACpD,OAAO,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO;QACH,MAAM;QACN,QAAQ;QACR,WAAW;QACX,UAAU;QACV,SAAS;QACT,iBAAiB;QACjB,iBAAiB;KACpB,CAAC;AACN,CAAC;AAED,+EAA+E;AAC/E,cAAc;AACd,+EAA+E;AAE/E;;;GAGG;AACI,KAAK,UAAU,kBAAkB,CACpC,KAAsB,EACtB,OAAgB;IAEhB,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAE9D,gEAAgE;IAChE,MAAM,SAAS,GAAG,MAAM,IAAA,8BAAY,EAAC,IAAA,iCAAa,GAAE,EAAE,OAAO,CAAC,CAAC;IAC/D,IAAI,SAAS,EAAE,CAAC;QACZ,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;IACxD,CAAC;IAED,oDAAoD;IACpD,MAAM,YAAY,GAAG,IAAA,mCAAe,GAAE,CAAC;IACvC,MAAM,KAAK,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,+BAAgB,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,+BAAgB,CAAC;IAC7E,MAAM,OAAO,GAAG,IAAA,8BAAiB,EAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC;IAE1C,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC;QACpC,KAAK,EAAE,KAAK,IAAI,SAAS;QACzB,OAAO;QACP,OAAO,EAAE;YACL,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE;YAC5B,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,EAAE;SAC7C;KACJ,CAAC,CAAC;IAEH,IAAI,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACtC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,SAAS,EAAE,CAAC;IACvF,CAAC;IAED,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E,SAAS,gBAAgB,CAAC,EAAU,EAAE,MAAc,EAAE,SAAiB;IACnE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC;IACtD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC/E,MAAM,SAAS,GAAG,IAAA,mBAAU,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACnF,OAAO,GAAG,OAAO,IAAI,SAAS,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa,EAAE,MAAc;IACrD,IAAI,CAAC;QACD,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QAExC,MAAM,iBAAiB,GAAG,IAAA,mBAAU,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC3F,IAAI,SAAS,KAAK,iBAAiB;YAAE,OAAO,IAAI,CAAC;QAEjD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACzE,IAAI,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAE7D,OAAO,OAAO,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC"}

package/dist/services/system.service.d.ts

@@ -0,0 +1,60 @@
+/**
+ * System Service
+ *
+ * Business logic for system operations extracted from HTTP controllers.
+ * Handles deployment, delta deployment, revalidation, and file pulling.
+ */
+export interface SystemService {
+    getDeploymentManifest(options: GetDeploymentManifestOptions): any;
+    deploy(options: DeployOptions): Promise<DeployResult>;
+    deltaDeploy(options: DeltaDeployOptions): Promise<DeployResult>;
+    revalidate(options: RevalidateOptions): Promise<void>;
+    pullDeploymentFiles(options: PullDeploymentFilesOptions): PullResult;
+}
+export interface GetDeploymentManifestOptions {
+    deploymentHandler: any;
+}
+export interface DeployOptions {
+    deploymentHandler: any;
+    ipcClient: any;
+    logger: any;
+    deploymentData: any;
+}
+export interface DeltaDeployOptions {
+    deploymentHandler: any;
+    ipcClient: any;
+    logger: any;
+    deploymentData: any;
+}
+export interface RevalidateOptions {
+    db: any;
+    engine: any;
+    wsHandler: any;
+    queries: string[];
+    keys: string[];
+}
+export interface PullDeploymentFilesOptions {
+    deploymentHandler: any;
+    filesParam?: string;
+    metaOnly: boolean;
+    changesOnly: boolean;
+    localHashesParam?: string;
+}
+export interface DeployResult {
+    success: boolean;
+    functions: number;
+    schema: boolean;
+    errors?: string[];
+    deploymentType?: string;
+}
+export interface PullResult {
+    ok: boolean;
+    files?: any[];
+    metadata?: any;
+}
+export declare class SystemError extends Error {
+    statusCode: number;
+    constructor(message: string, statusCode?: number);
+}
+export declare function createSystemService(): SystemService;
+//# sourceMappingURL=system.service.d.ts.map

package/dist/services/system.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"system.service.d.ts","sourceRoot":"","sources":["../../src/services/system.service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,MAAM,WAAW,aAAa;IAC1B,qBAAqB,CAAC,OAAO,EAAE,4BAA4B,GAAG,GAAG,CAAC;IAClE,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACtD,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAChE,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,mBAAmB,CAAC,OAAO,EAAE,0BAA0B,GAAG,UAAU,CAAC;CACxE;AAED,MAAM,WAAW,4BAA4B;IACzC,iBAAiB,EAAE,GAAG,CAAC;CAC1B;AAED,MAAM,WAAW,aAAa;IAC1B,iBAAiB,EAAE,GAAG,CAAC;IACvB,SAAS,EAAE,GAAG,CAAC;IACf,MAAM,EAAE,GAAG,CAAC;IACZ,cAAc,EAAE,GAAG,CAAC;CACvB;AAED,MAAM,WAAW,kBAAkB;IAC/B,iBAAiB,EAAE,GAAG,CAAC;IACvB,SAAS,EAAE,GAAG,CAAC;IACf,MAAM,EAAE,GAAG,CAAC;IACZ,cAAc,EAAE,GAAG,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAC9B,EAAE,EAAE,GAAG,CAAC;IACR,MAAM,EAAE,GAAG,CAAC;IACZ,SAAS,EAAE,GAAG,CAAC;IACf,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,0BAA0B;IACvC,iBAAiB,EAAE,GAAG,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,OAAO,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAID,MAAM,WAAW,YAAY;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,UAAU;IACvB,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC;IACd,QAAQ,CAAC,EAAE,GAAG,CAAC;CAClB;AAMD,qBAAa,WAAY,SAAQ,KAAK;IAGvB,UAAU,EAAE,MAAM;gBADzB,OAAO,EAAE,MAAM,EACR,UAAU,GAAE,MAAY;CAKtC;AAMD,wBAAgB,mBAAmB,IAAI,aAAa,CA6KnD"}