@beechcms/core 0.8.1 → 0.9.0

package/dist/media/file-types.js

@@ -61,6 +61,7 @@ const OLE_DOCUMENT_DEFINITION = {
     isBinary: true,
     magicBytes: [...OLE_MAGIC],
     matchSignature: matchOleSignature,
+    signatureFamily: 'OLE2 container',
 };
 /** Common shared definition for OpenXML Office files. */
 const OPENXML_DOCUMENT_DEFINITION = {
@@ -68,6 +69,7 @@ const OPENXML_DOCUMENT_DEFINITION = {
     isBinary: true,
     magicBytes: [0x50, 0x4B, 0x03, 0x04],
     matchSignature: matchZipSignature,
+    signatureFamily: 'ZIP container',
 };
 /**
  * Single source of truth registry for all supported file types in BeechCMS.
@@ -97,6 +99,7 @@ export const SUPPORTED_FILE_TYPES = {
         category: 'image',
         isBinary: true,
         magicBytes: [0x47, 0x49, 0x46, 0x38],
+        minSignatureLength: 6,
         matchSignature: (bytes) => bytes.length >= 6 &&
             bytes[0] === 0x47 && bytes[1] === 0x49 && bytes[2] === 0x46 && bytes[3] === 0x38 &&
             (bytes[4] === 0x37 || bytes[4] === 0x39) && bytes[5] === 0x61,
@@ -108,6 +111,7 @@ export const SUPPORTED_FILE_TYPES = {
         category: 'image',
         isBinary: true,
         magicBytes: [0x52, 0x49, 0x46, 0x46],
+        minSignatureLength: 12,
         matchSignature: (bytes) => bytes.length >= 12 &&
             bytes[0] === 0x52 && bytes[1] === 0x49 && bytes[2] === 0x46 && bytes[3] === 0x46 &&
             bytes[8] === 0x57 && bytes[9] === 0x45 && bytes[10] === 0x42 && bytes[11] === 0x50,
@@ -119,6 +123,7 @@ export const SUPPORTED_FILE_TYPES = {
         category: 'image',
         isBinary: true,
         magicBytes: [0x66, 0x74, 0x79, 0x70],
+        minSignatureLength: 12,
         matchSignature: (bytes) => {
             if (bytes.length < 12)
                 return false;
@@ -222,6 +227,7 @@ export const SUPPORTED_FILE_TYPES = {
         isBinary: true,
         magicBytes: [0x50, 0x4B, 0x03, 0x04],
         matchSignature: matchZipSignature,
+        signatureFamily: 'ZIP container',
     },
     '7z': {
         extension: '7z',
@@ -238,6 +244,7 @@ export const SUPPORTED_FILE_TYPES = {
         category: 'archive',
         isBinary: true,
         magicBytes: [0x75, 0x73, 0x74, 0x61, 0x72], // 'ustar'
+        minSignatureLength: 512,
         matchSignature: (bytes) => {
             if (bytes.length < 512)
                 return false;
@@ -297,6 +304,8 @@ export function getFileTypeByExtension(ext) {
     if (!ext)
         return undefined;
     const normalised = ext.replace(/^\./, '').toLowerCase().trim();
+    if (!Object.hasOwn(SUPPORTED_FILE_TYPES, normalised))
+        return undefined;
     return SUPPORTED_FILE_TYPES[normalised];
 }
 /**
@@ -311,6 +320,17 @@ export function getFileTypeByMime(mime) {
     const normalised = mime.split(';')[0].trim().toLowerCase();
     return Object.values(SUPPORTED_FILE_TYPES).find((def) => def.mimeTypes.some((m) => m.toLowerCase() === normalised));
 }
+/**
+ * Canonicalizes a declared MIME type to its registered primary form (e.g. 'image/jpg' -> 'image/jpeg').
+ * Unrecognized MIME types pass through unchanged (lowercased, parameters stripped).
+ *
+ * @param mime - The declared MIME string (e.g. 'image/jpg' or 'image/png; charset=utf-8').
+ * @returns The canonical primary MIME type, or the normalised input if unrecognized.
+ */
+export function canonicalizeMime(mime) {
+    const normalised = mime.split(';')[0].trim().toLowerCase();
+    return getFileTypeByMime(normalised)?.primaryMime ?? normalised;
+}
 /**
  * Extracts a lowercase file extension from a URL string or query parameters.
  *
@@ -320,10 +340,10 @@ export function getFileTypeByMime(mime) {
 export function extensionFromUrl(url) {
     try {
         const parsed = new URL(url);
-        const path = parsed.pathname;
-        const dot = path.lastIndexOf('.');
-        if (dot >= 0 && dot < path.length - 1) {
-            return path.slice(dot + 1).toLowerCase();
+        const segment = parsed.pathname.slice(parsed.pathname.lastIndexOf('/') + 1);
+        const dot = segment.lastIndexOf('.');
+        if (dot >= 0 && dot < segment.length - 1) {
+            return segment.slice(dot + 1).toLowerCase();
         }
         const param = parsed.searchParams.get('fm') || parsed.searchParams.get('format') || parsed.searchParams.get('ext');
         if (param && /^[a-z0-9]+$/i.test(param)) {

package/dist/media/magic-bytes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"magic-bytes.d.ts","sourceRoot":"","sources":["../../src/media/magic-bytes.ts"],"names":[],"mappings":"AAWA;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,qEAAqE;IACrE,KAAK,EAAE,OAAO,CAAA;IACd,mEAAmE;IACnE,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,8DAA8D;IAC9D,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAiBD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,WAAW,GAAG,UAAU,EAChC,YAAY,EAAE,MAAM,GACnB,0BAA0B,CAgD5B"}
+{"version":3,"file":"magic-bytes.d.ts","sourceRoot":"","sources":["../../src/media/magic-bytes.ts"],"names":[],"mappings":"AAWA;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,qEAAqE;IACrE,KAAK,EAAE,OAAO,CAAA;IACd,mEAAmE;IACnE,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,8DAA8D;IAC9D,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAkBD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,WAAW,GAAG,UAAU,EAChC,YAAY,EAAE,MAAM,GACnB,0BAA0B,CA0D5B"}

package/dist/media/magic-bytes.js

@@ -2,18 +2,19 @@
 // Copyright (c) 2024–2026 Flavio De Musso
 import { SUPPORTED_FILE_TYPES, getFileTypeByMime, BLOCKED_IMAGE_MIME_TYPES, matchesFileSignature, } from './file-types.js';
 /**
- * Iterates across supported binary definitions to find any matching file signature.
+ * Finds the binary formats matching the buffer, one per distinct MIME type.
  *
  * @param bytes - The raw byte buffer to analyze.
- * @returns The matching FileTypeDefinition if recognized, or undefined.
+ * @returns Matching definitions (empty if unrecognized).
  */
-function detectBinaryType(bytes) {
+function detectBinaryTypes(bytes) {
+    const matches = new Map();
     for (const def of Object.values(SUPPORTED_FILE_TYPES)) {
-        if (def.isBinary && matchesFileSignature(def, bytes)) {
-            return def;
+        if (def.isBinary && !matches.has(def.primaryMime) && matchesFileSignature(def, bytes)) {
+            matches.set(def.primaryMime, def);
         }
     }
-    return undefined;
+    return [...matches.values()];
 }
 /**
  * Validates that an uploaded file's binary content matches its declared MIME type,
@@ -45,7 +46,7 @@ export function verifyMagicBytes(buffer, declaredMime) {
         return { valid: true, detectedMime: declaredDef.primaryMime };
     }
     // If buffer is smaller than the minimum bytes needed for initial signature inspection (typically 4, or 2-3 for short signatures)
-    const minInspectionLength = Math.min(4, declaredDef.magicBytes?.length ?? 4);
+    const minInspectionLength = declaredDef.minSignatureLength ?? Math.min(4, declaredDef.magicBytes?.length ?? 4);
     if (bytes.length < minInspectionLength) {
         return { valid: false, error: 'File buffer too small for signature inspection' };
     }
@@ -54,13 +55,22 @@ export function verifyMagicBytes(buffer, declaredMime) {
         return { valid: true, detectedMime: declaredDef.primaryMime };
     }
     // Signature mismatch: check if it matches another known binary signature
-    const detectedDef = detectBinaryType(bytes);
-    if (detectedDef) {
+    const detected = detectBinaryTypes(bytes);
+    if (detected.length === 1) {
+        const [detectedDef] = detected;
         return {
             valid: false,
             detectedMime: detectedDef.primaryMime,
             error: `Signature mismatch: file is ${detectedDef.extension.toUpperCase()} but declared as ${declaredMime}`,
         };
     }
+    if (detected.length > 1) {
+        // Shared signature: exact format unknowable
+        const family = detected[0].signatureFamily ?? 'shared-signature format';
+        return {
+            valid: false,
+            error: `Signature mismatch: file is a ${family} but declared as ${declaredMime}`,
+        };
+    }
     return { valid: false, error: `Unrecognized file signature for declared MIME ${declaredMime}` };
 }

package/dist/media/media-transform.d.ts

@@ -71,18 +71,22 @@ export declare function isTransformableMime(mime: string | null | undefined): bo
  * side would exceed `maxDimension` — the pathological-aspect-ratio guard of brief §4. Never truncates.
  */
 export declare function deriveScaleOutput(presetWidth: number, source: MediaDimensions, maxDimension: number): MediaDimensions | null;
-/** Identity of a preset's *definition*, so redefining a name never reuses an old variant. */
-export declare function mediaPresetSignature(preset: MediaPreset): string;
+/**
+ * Identity of a preset's *definition*, so redefining a name never reuses an old variant.
+ * A scale preset's validity depends on the effective dimension ceiling (its height derives from the
+ * source), so the ceiling is part of its identity; a crop preset is validated at catalog build.
+ */
+export declare function mediaPresetSignature(preset: MediaPreset, maxDimension: number): string;
 /** Precondition: `isTransformableMime(sourceMime)` is true. */
 export declare function buildImageTransformSpec(preset: MediaPreset, request: MediaTransformRequest, sourceMime: string): ImageTransformSpec;
 /**
  * Strong ETag of a variant: source identity (key + size — keys are never overwritten) plus the
- * canonical request plus the preset definition. Format: `"mv1-<32 hex>"`.
+ * canonical request plus the preset definition (and the ceiling for scale presets). Format: `"mv1-<32 hex>"`.
  */
 export declare function computeMediaVariantEtag(source: {
     readonly key: string;
     readonly size: number;
-}, request: MediaTransformRequest, preset: MediaPreset): Promise<string>;
+}, request: MediaTransformRequest, preset: MediaPreset, maxDimension: number): Promise<string>;
 /** RFC 9110 §13.1.2: `*` matches; otherwise weak comparison against a comma-separated list. */
 export declare function ifNoneMatchMatches(header: string | null | undefined, etag: string | null | undefined): boolean;
 //# sourceMappingURL=media-transform.d.ts.map

package/dist/media/media-transform.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"media-transform.d.ts","sourceRoot":"","sources":["../../src/media/media-transform.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,eAAe,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAElG,4GAA4G;AAC5G,eAAO,MAAM,2BAA2B,OAAO,CAAA;AAC/C,mFAAmF;AACnF,eAAO,MAAM,4BAA4B,OAAO,CAAA;AAEhD,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,MAAM,GAAG,MAAM,CAAA;AAC5D,MAAM,MAAM,YAAY,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAA;AAEpD,eAAO,MAAM,oBAAoB,EAAE,SAAS,iBAAiB,EAAiC,CAAA;AAC9F,eAAO,MAAM,eAAe,EAAE,SAAS,YAAY,EAA8B,CAAA;AACjF,eAAO,MAAM,oBAAoB,EAAE,iBAA8B,CAAA;AACjE,eAAO,MAAM,qBAAqB,EAAE,YAAuB,CAAA;AAC3D,mEAAmE;AACnE,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAoD,CAAA;AAE5H,MAAM,MAAM,WAAW,GACnB;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC1E;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAA;AAEtD,MAAM,MAAM,kBAAkB,GAAG,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;AAEjE,eAAO,MAAM,0BAA0B,yEAA0E,CAAA;AAEjH,eAAO,MAAM,qBAAqB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAOtE,CAAA;AAEF,iHAAiH;AACjH,eAAO,MAAM,8BAA8B,EAAE,SAAS,eAAe,EAA2D,CAAA;AAEhI,iGAAiG;AACjG,eAAO,MAAM,gCAAgC,EAAE,SAAS,MAAM,EAA8C,CAAA;AAE5G,MAAM,MAAM,uBAAuB,GAC/B,uBAAuB,GACvB,wBAAwB,GACxB,uBAAuB,GACvB,sBAAsB,GACtB,uBAAuB,GACvB,sBAAsB,GACtB,yBAAyB,GACzB,0BAA0B,CAAA;AAE9B,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAA;IAClC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAA;CAC/B;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACzB;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAA;CAAE,GACpE;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAA;CAAE,CAAA;AAE3E,4GAA4G;AAC5G,qBAAa,uBAAwB,SAAQ,KAAK;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM;gBAAd,MAAM,EAAE,MAAM;CAIpC;AAOD;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,eAAe,GAAG,mBAAmB,CAqBrF;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,qBAAqB,GAAG,MAAM,CAKnF;AAsCD;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,GAAG,kBAAkB,CAoBpG;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAG5E;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAM5H;AAED,6FAA6F;AAC7F,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAEhE;AAED,+DAA+D;AAC/D,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,GAAG,kBAAkB,CAUnI;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EACvD,OAAO,EAAE,qBAAqB,EAC9B,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,MAAM,CAAC,CAGjB;AAED,+FAA+F;AAC/F,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAO9G"}
+{"version":3,"file":"media-transform.d.ts","sourceRoot":"","sources":["../../src/media/media-transform.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,eAAe,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAElG,4GAA4G;AAC5G,eAAO,MAAM,2BAA2B,OAAO,CAAA;AAC/C,mFAAmF;AACnF,eAAO,MAAM,4BAA4B,OAAO,CAAA;AAEhD,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,MAAM,GAAG,MAAM,CAAA;AAC5D,MAAM,MAAM,YAAY,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAA;AAEpD,eAAO,MAAM,oBAAoB,EAAE,SAAS,iBAAiB,EAAiC,CAAA;AAC9F,eAAO,MAAM,eAAe,EAAE,SAAS,YAAY,EAA8B,CAAA;AACjF,eAAO,MAAM,oBAAoB,EAAE,iBAA8B,CAAA;AACjE,eAAO,MAAM,qBAAqB,EAAE,YAAuB,CAAA;AAC3D,mEAAmE;AACnE,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAoD,CAAA;AAE5H,MAAM,MAAM,WAAW,GACnB;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC1E;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAA;AAEtD,MAAM,MAAM,kBAAkB,GAAG,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;AAEjE,eAAO,MAAM,0BAA0B,yEAA0E,CAAA;AAEjH,eAAO,MAAM,qBAAqB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAOtE,CAAA;AAEF,iHAAiH;AACjH,eAAO,MAAM,8BAA8B,EAAE,SAAS,eAAe,EAA2D,CAAA;AAEhI,iGAAiG;AACjG,eAAO,MAAM,gCAAgC,EAAE,SAAS,MAAM,EAA8C,CAAA;AAE5G,MAAM,MAAM,uBAAuB,GAC/B,uBAAuB,GACvB,wBAAwB,GACxB,uBAAuB,GACvB,sBAAsB,GACtB,uBAAuB,GACvB,sBAAsB,GACtB,yBAAyB,GACzB,0BAA0B,CAAA;AAE9B,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAA;IAClC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAA;CAC/B;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACzB;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAA;CAAE,GACpE;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAA;CAAE,CAAA;AAE3E,4GAA4G;AAC5G,qBAAa,uBAAwB,SAAQ,KAAK;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM;gBAAd,MAAM,EAAE,MAAM;CAIpC;AAOD;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,eAAe,GAAG,mBAAmB,CAqBrF;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,qBAAqB,GAAG,MAAM,CAKnF;AAsCD;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,GAAG,kBAAkB,CAoBpG;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAG5E;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAM5H;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAEtF;AAED,+DAA+D;AAC/D,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,GAAG,kBAAkB,CAUnI;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EACvD,OAAO,EAAE,qBAAqB,EAC9B,MAAM,EAAE,WAAW,EACnB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,MAAM,CAAC,CAGjB;AAED,+FAA+F;AAC/F,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAO9G"}

package/dist/media/media-transform.js

@@ -157,9 +157,13 @@ export function deriveScaleOutput(presetWidth, source, maxDimension) {
         : { width: presetWidth, height: Math.max(1, Math.round((source.height * presetWidth) / source.width)) };
     return output.width > maxDimension || output.height > maxDimension ? null : output;
 }
-/** Identity of a preset's *definition*, so redefining a name never reuses an old variant. */
-export function mediaPresetSignature(preset) {
-    return preset.kind === 'crop' ? `crop:${preset.width}x${preset.height}` : `scale:${preset.width}`;
+/**
+ * Identity of a preset's *definition*, so redefining a name never reuses an old variant.
+ * A scale preset's validity depends on the effective dimension ceiling (its height derives from the
+ * source), so the ceiling is part of its identity; a crop preset is validated at catalog build.
+ */
+export function mediaPresetSignature(preset, maxDimension) {
+    return preset.kind === 'crop' ? `crop:${preset.width}x${preset.height}` : `scale:${preset.width}@${maxDimension}`;
 }
 /** Precondition: `isTransformableMime(sourceMime)` is true. */
 export function buildImageTransformSpec(preset, request, sourceMime) {
@@ -175,10 +179,10 @@ export function buildImageTransformSpec(preset, request, sourceMime) {
 }
 /**
  * Strong ETag of a variant: source identity (key + size — keys are never overwritten) plus the
- * canonical request plus the preset definition. Format: `"mv1-<32 hex>"`.
+ * canonical request plus the preset definition (and the ceiling for scale presets). Format: `"mv1-<32 hex>"`.
  */
-export async function computeMediaVariantEtag(source, request, preset) {
-    const digest = await sha256hex(`${source.key}\n${source.size}\n${canonicalMediaTransformQuery(request)}\n${mediaPresetSignature(preset)}`);
+export async function computeMediaVariantEtag(source, request, preset, maxDimension) {
+    const digest = await sha256hex(`${source.key}\n${source.size}\n${canonicalMediaTransformQuery(request)}\n${mediaPresetSignature(preset, maxDimension)}`);
     return `"mv1-${digest.slice(0, 32)}"`;
 }
 /** RFC 9110 §13.1.2: `*` matches; otherwise weak comparison against a comma-separated list. */

package/dist/media/media.repository.d.ts

@@ -14,6 +14,11 @@ export interface MediaRepository {
      * Tracks a new file upload in the database.
      */
     trackUpload(media: Omit<MediaObject, 'created_at'>): Promise<void>;
+    /**
+     * Registers a file and counts its bytes toward total storage in one atomic step.
+     * Returns false, counting nothing, when the key is already registered.
+     */
+    registerUpload(media: Omit<MediaObject, 'created_at'>): Promise<boolean>;
     /**
      * Retrieves tracking info for a file by its key.
      */

package/dist/media/media.repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"media.repository.d.ts","sourceRoot":"","sources":["../../src/media/media.repository.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEnE;;OAEG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAEnD;;OAEG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEpC;;OAEG;IACH,IAAI,CAAC,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAEnG;;OAEG;IACH,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE/C;;OAEG;IACH,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE/C;;OAEG;IACH,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEzC;;OAEG;IACH,eAAe,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CACpC"}
+{"version":3,"file":"media.repository.d.ts","sourceRoot":"","sources":["../../src/media/media.repository.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEnE;;;OAGG;IACH,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEzE;;OAEG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAEnD;;OAEG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEpC;;OAEG;IACH,IAAI,CAAC,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAEnG;;OAEG;IACH,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE/C;;OAEG;IACH,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE/C;;OAEG;IACH,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEzC;;OAEG;IACH,eAAe,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CACpC"}

package/dist/notifications/notification-service.d.ts

@@ -13,9 +13,9 @@ export declare const createNotificationSchema: z.ZodObject<{
     title: z.ZodString;
     message: z.ZodString;
     type: z.ZodOptional<z.ZodEnum<{
+        success: "success";
         error: "error";
         info: "info";
-        success: "success";
         warning: "warning";
     }>>;
 }, z.core.$strip>;

package/dist/notifications/notification.repository.d.ts

@@ -16,6 +16,14 @@ export interface NotificationRecord {
     isRead: boolean;
     createdAt: number;
 }
+/** Input of {@link INotificationRepository.create}. */
+export type CreateNotificationRecord = Omit<NotificationRecord, 'id' | 'createdAt' | 'isRead'> & {
+    /**
+     * Stable identifier of the upstream event (e.g. a QStash message id). Creating twice with the
+     * same key stores one notification, so at-least-once delivery cannot inflate the inbox.
+     */
+    dedupeKey?: string;
+};
 export interface NotificationStats {
     totalCount: number;
     latestCreatedAt: number;
@@ -40,9 +48,10 @@ export interface INotificationRepository {
     /**
      * Insert a new notification and return its generated id so callers (e.g.
      * the public form submission flow) can correlate the notification with the
-     * triggering request.
+     * triggering request. With `dedupeKey`, a repeated key stores nothing and returns the id of the
+     * notification the first call created.
      */
-    create(record: Omit<NotificationRecord, 'id' | 'createdAt' | 'isRead'>): Promise<string>;
+    create(record: CreateNotificationRecord): Promise<string>;
     markRead(notificationId: string): Promise<void>;
     markUnread(notificationId: string): Promise<void>;
     markAllRead(): Promise<void>;

package/dist/notifications/notification.repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"notification.repository.d.ts","sourceRoot":"","sources":["../../src/notifications/notification.repository.ts"],"names":[],"mappings":"AAGA;;;;;;;;GAQG;AAEH,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAA;AAEvE,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,gBAAgB,CAAA;IACtB,MAAM,EAAE,OAAO,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAA;IAClB,eAAe,EAAE,MAAM,CAAA;IACvB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,uBAAuB;IACtC;;;;;OAKG;IACH,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAA;IAElD;;;;;;OAMG;IACH,KAAK,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAAA;IAEnC;;;;OAIG;IACH,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,kBAAkB,EAAE,IAAI,GAAG,WAAW,GAAG,QAAQ,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAExF,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/C,UAAU,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACjD,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5B,MAAM,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC9C"}
+{"version":3,"file":"notification.repository.d.ts","sourceRoot":"","sources":["../../src/notifications/notification.repository.ts"],"names":[],"mappings":"AAGA;;;;;;;;GAQG;AAEH,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAA;AAEvE,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,gBAAgB,CAAA;IACtB,MAAM,EAAE,OAAO,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,uDAAuD;AACvD,MAAM,MAAM,wBAAwB,GAAG,IAAI,CAAC,kBAAkB,EAAE,IAAI,GAAG,WAAW,GAAG,QAAQ,CAAC,GAAG;IAC/F;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,CAAA;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAA;IAClB,eAAe,EAAE,MAAM,CAAA;IACvB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,uBAAuB;IACtC;;;;;OAKG;IACH,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAA;IAElD;;;;;;OAMG;IACH,KAAK,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAAA;IAEnC;;;;;OAKG;IACH,MAAM,CAAC,MAAM,EAAE,wBAAwB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAEzD,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/C,UAAU,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACjD,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5B,MAAM,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC9C"}

package/dist/oauth/authorization-code.repository.d.ts

@@ -19,15 +19,20 @@ export interface IOAuthAuthorizationCodeRepository {
     /** Persists a new single-use authorization code. Hash only, never plaintext. */
     save(record: NewAuthorizationCode): Promise<void>;
     /**
-     * Returns the code regardless of its consumed state, provided it is unexpired.
-     * Callers MUST inspect `consumedAt`: a non-null value means replay, which
-     * requires cascade revocation via IOAuthTokenRepository.revokeByAuthorizationCode.
+     * Returns the code regardless of its consumed OR expired state — replay must be
+     * detectable even after the 60s TTL, since tokens derived from the code outlive it
+     * by 30 days. Callers MUST inspect `consumedAt` (replay signal, requires cascade
+     * revocation via IOAuthTokenRepository.revokeByAuthorizationCode) and `expiresAt`
+     * separately (an unconsumed-but-expired code is simply invalid, nothing to revoke).
      */
-    findByHash(codeHash: string, nowTimestamp: number): Promise<AuthorizationCodeRecord | null>;
+    findByHash(codeHash: string): Promise<AuthorizationCodeRecord | null>;
     /**
      * Atomically marks the code consumed. Returns true only for the first caller;
-     * every subsequent call returns false, which is the replay signal.
+     * every subsequent call returns false, which is the replay signal. Expiry is
+     * enforced here — redemption, unlike replay detection, must respect the TTL.
      */
     consumeByHash(codeHash: string, nowTimestamp: number): Promise<boolean>;
+    /** Invalidates every unconsumed code issued to a (client, user) pair, e.g. on consent revoke. */
+    invalidateByClientAndUser(clientId: string, userId: string): Promise<number>;
 }
 //# sourceMappingURL=authorization-code.repository.d.ts.map

package/dist/oauth/authorization-code.repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authorization-code.repository.d.ts","sourceRoot":"","sources":["../../src/oauth/authorization-code.repository.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAE7C,MAAM,WAAW,oBAAoB;IACnC,2EAA2E;IAC3E,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,UAAU,EAAE,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;IACnB,aAAa,EAAE,MAAM,CAAA;IACrB,wEAAwE;IACxE,mBAAmB,EAAE,MAAM,CAAA;IAC3B,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,uBAAwB,SAAQ,oBAAoB;IACnE,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1B;AAED,MAAM,WAAW,iCAAiC;IAChD,gFAAgF;IAChF,IAAI,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEjD;;;;OAIG;IACH,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAA;IAE3F;;;OAGG;IACH,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACxE"}
+{"version":3,"file":"authorization-code.repository.d.ts","sourceRoot":"","sources":["../../src/oauth/authorization-code.repository.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAE7C,MAAM,WAAW,oBAAoB;IACnC,2EAA2E;IAC3E,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,UAAU,EAAE,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;IACnB,aAAa,EAAE,MAAM,CAAA;IACrB,wEAAwE;IACxE,mBAAmB,EAAE,MAAM,CAAA;IAC3B,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,uBAAwB,SAAQ,oBAAoB;IACnE,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1B;AAED,MAAM,WAAW,iCAAiC;IAChD,gFAAgF;IAChF,IAAI,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEjD;;;;;;OAMG;IACH,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAA;IAErE;;;;OAIG;IACH,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAEvE,iGAAiG;IACjG,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;CAC7E"}

package/dist/oauth/pkce.d.ts

@@ -3,7 +3,7 @@
  * per OAuth 2.1, so no weak fallback configuration can ever exist.
  */
 /** The only accepted code challenge method. */
-export declare const PKCE_CHALLENGE_METHOD: 'S256';
+export declare const PKCE_CHALLENGE_METHOD: "S256";
 export type PkceChallengeMethod = typeof PKCE_CHALLENGE_METHOD;
 /** Minimum / maximum code_verifier length, RFC 7636 §4.1. */
 export declare const PKCE_VERIFIER_MIN_LENGTH = 43;

package/dist/oauth/role-guard.d.ts

@@ -1,32 +1,51 @@
 import type { OAuthScope } from './scopes.js';
+import type { EffectivePermissions } from '../rbac/types.js';
 /** Outcome of a role arbitration. `deniedScopes` is empty when fully granted. */
 export interface ScopeGrantDecision {
     grantedScopes: OAuthScope[];
     deniedScopes: OAuthScope[];
 }
 /**
- * Arbitrates which of the requested scopes a given user role may grant.
+ * Arbitrates which of the requested scopes a given caller may grant.
  *
  * This is the ONLY place role-based authorization may live in the OAuth flow.
- * `/oauth/authorize` and `/oauth/token` must never branch on `role` themselves,
- * so introducing a real role system later requires swapping the implementation
- * bound in repositoryMiddleware and nothing else.
+ * `/oauth/authorize` and `/oauth/token` must never branch on authority themselves.
+ *
+ * The parameter is the caller's RESOLVED authority, not a role string: the role
+ * string is the pre-RBAC vocabulary and is on its way out.
  */
 export interface IRoleGuard {
     /**
-     * @param role - The resource owner's role claim, or undefined when absent.
+     * @param effective - The resource owner's effective permissions, already folded.
      * @param requestedScopes - Scopes the client asked for, already validated.
      */
-    arbitrate(role: string | undefined, requestedScopes: readonly OAuthScope[]): Promise<ScopeGrantDecision>;
+    arbitrate(effective: EffectivePermissions, requestedScopes: readonly OAuthScope[]): Promise<ScopeGrantDecision>;
 }
 /**
- * Stub guard for the pre-roles world: grants every requested scope to every role.
+ * Stub guard: grants every requested scope to every caller.
  *
- * This permissiveness is EXPLICIT and directly tested, not an accidental default.
- * When the roles feature lands, replace this binding with a real adapter; the
- * behaviour change will then be visible as a failing test here, by design.
+ * Retained as the explicit, directly-tested permissive baseline and as the test
+ * double for suites that are not exercising arbitration. It is NO LONGER the
+ * production binding — `repositoryMiddleware` binds {@link PermissionRoleGuard}.
  */
 export declare class AllowAllRoleGuard implements IRoleGuard {
-    arbitrate(_role: string | undefined, requestedScopes: readonly OAuthScope[]): Promise<ScopeGrantDecision>;
+    arbitrate(_effective: EffectivePermissions, requestedScopes: readonly OAuthScope[]): Promise<ScopeGrantDecision>;
+}
+/**
+ * Production guard: only a platform-wide administrator may delegate authority to an
+ * OAuth/MCP client.
+ *
+ * Every OAuth scope in this system (`schema:read`, `schema:write`) drives seed-schema
+ * tooling, which brief §2 keeps OUT of the dashboard permission axis entirely — there is
+ * deliberately no `manage_seeds` permission to map onto. So the question this guard
+ * answers is not "which seed?" but "may this account hand platform authority to a
+ * client at all?", and the marker for that is holding `manage_users` at
+ * {@link GLOBAL_SCOPE} — the same SuperAdmin marker the last-global-admin guard uses.
+ *
+ * A seed-scoped collaborator therefore cannot mint an MCP token, no matter which
+ * scopes the client requests. Denial is all-or-nothing: there is no partial grant.
+ */
+export declare class PermissionRoleGuard implements IRoleGuard {
+    arbitrate(effective: EffectivePermissions, requestedScopes: readonly OAuthScope[]): Promise<ScopeGrantDecision>;
 }
 //# sourceMappingURL=role-guard.d.ts.map

package/dist/oauth/role-guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"role-guard.d.ts","sourceRoot":"","sources":["../../src/oauth/role-guard.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAE7C,iFAAiF;AACjF,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,UAAU,EAAE,CAAA;IAC3B,YAAY,EAAE,UAAU,EAAE,CAAA;CAC3B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,UAAU;IACzB;;;OAGG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,eAAe,EAAE,SAAS,UAAU,EAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;CACzG;AAED;;;;;;GAMG;AACH,qBAAa,iBAAkB,YAAW,UAAU;IAC5C,SAAS,CACb,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,eAAe,EAAE,SAAS,UAAU,EAAE,GACrC,OAAO,CAAC,kBAAkB,CAAC,CAE7B;CACF"}
+{"version":3,"file":"role-guard.d.ts","sourceRoot":"","sources":["../../src/oauth/role-guard.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAE7C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAE5D,iFAAiF;AACjF,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,UAAU,EAAE,CAAA;IAC3B,YAAY,EAAE,UAAU,EAAE,CAAA;CAC3B;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,UAAU;IACzB;;;OAGG;IACH,SAAS,CACP,SAAS,EAAE,oBAAoB,EAC/B,eAAe,EAAE,SAAS,UAAU,EAAE,GACrC,OAAO,CAAC,kBAAkB,CAAC,CAAA;CAC/B;AAED;;;;;;GAMG;AACH,qBAAa,iBAAkB,YAAW,UAAU;IAC5C,SAAS,CACb,UAAU,EAAE,oBAAoB,EAChC,eAAe,EAAE,SAAS,UAAU,EAAE,GACrC,OAAO,CAAC,kBAAkB,CAAC;CAG/B;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,mBAAoB,YAAW,UAAU;IAC9C,SAAS,CACb,SAAS,EAAE,oBAAoB,EAC/B,eAAe,EAAE,SAAS,UAAU,EAAE,GACrC,OAAO,CAAC,kBAAkB,CAAC;CAM/B"}

package/dist/oauth/role-guard.js

@@ -1,14 +1,36 @@
 // SPDX-License-Identifier: MIT
 // Copyright (c) 2024–2026 Flavio De Musso
 /**
- * Stub guard for the pre-roles world: grants every requested scope to every role.
+ * Stub guard: grants every requested scope to every caller.
  *
- * This permissiveness is EXPLICIT and directly tested, not an accidental default.
- * When the roles feature lands, replace this binding with a real adapter; the
- * behaviour change will then be visible as a failing test here, by design.
+ * Retained as the explicit, directly-tested permissive baseline and as the test
+ * double for suites that are not exercising arbitration. It is NO LONGER the
+ * production binding — `repositoryMiddleware` binds {@link PermissionRoleGuard}.
  */
 export class AllowAllRoleGuard {
-    async arbitrate(_role, requestedScopes) {
+    async arbitrate(_effective, requestedScopes) {
+        return { grantedScopes: [...requestedScopes], deniedScopes: [] };
+    }
+}
+/**
+ * Production guard: only a platform-wide administrator may delegate authority to an
+ * OAuth/MCP client.
+ *
+ * Every OAuth scope in this system (`schema:read`, `schema:write`) drives seed-schema
+ * tooling, which brief §2 keeps OUT of the dashboard permission axis entirely — there is
+ * deliberately no `manage_seeds` permission to map onto. So the question this guard
+ * answers is not "which seed?" but "may this account hand platform authority to a
+ * client at all?", and the marker for that is holding `manage_users` at
+ * {@link GLOBAL_SCOPE} — the same SuperAdmin marker the last-global-admin guard uses.
+ *
+ * A seed-scoped collaborator therefore cannot mint an MCP token, no matter which
+ * scopes the client requests. Denial is all-or-nothing: there is no partial grant.
+ */
+export class PermissionRoleGuard {
+    async arbitrate(effective, requestedScopes) {
+        if (!effective.global.has('manage_users')) {
+            return { grantedScopes: [], deniedScopes: [...requestedScopes] };
+        }
         return { grantedScopes: [...requestedScopes], deniedScopes: [] };
     }
 }

package/dist/oauth/scopes.d.ts

@@ -9,7 +9,7 @@
  * `beech_schema_plan` is deliberately classified as READ: despite the imperative
  * name it is a dry-run that computes a migration plan and mutates nothing.
  */
-export declare const OAUTH_SCOPES: readonly ['schema:read', 'schema:write'];
+export declare const OAUTH_SCOPES: readonly ["schema:read", "schema:write"];
 export type OAuthScope = (typeof OAUTH_SCOPES)[number];
 /** Narrows an arbitrary string to a known scope. */
 export declare function isOAuthScope(value: string): value is OAuthScope;

package/dist/oauth/scopes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scopes.d.ts","sourceRoot":"","sources":["../../src/oauth/scopes.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;GAUG;AACH,eAAO,MAAM,YAAY,YAAI,aAAa,EAAE,cAAc,CAAU,CAAA;AAEpE,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAA;AAEtD,oDAAoD;AACpD,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,UAAU,CAE/D;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,EAAE,GAAG,IAAI,CAMjE;AAED,yEAAyE;AACzE,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,GAAG,MAAM,CAElE;AAED,oEAAoE;AACpE,wBAAgB,aAAa,CAC3B,SAAS,EAAE,SAAS,UAAU,EAAE,EAChC,OAAO,EAAE,SAAS,UAAU,EAAE,GAC7B,OAAO,CAET"}
+{"version":3,"file":"scopes.d.ts","sourceRoot":"","sources":["../../src/oauth/scopes.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;GAUG;AACH,eAAO,MAAM,YAAY,0CAA2C,CAAA;AAEpE,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAA;AAEtD,oDAAoD;AACpD,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,UAAU,CAE/D;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,EAAE,GAAG,IAAI,CAMjE;AAED,yEAAyE;AACzE,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,GAAG,MAAM,CAElE;AAED,oEAAoE;AACpE,wBAAgB,aAAa,CAC3B,SAAS,EAAE,SAAS,UAAU,EAAE,EAChC,OAAO,EAAE,SAAS,UAAU,EAAE,GAC7B,OAAO,CAET"}

package/dist/oauth/token.repository.d.ts

@@ -27,6 +27,8 @@ export interface IOAuthTokenRepository {
     save(record: NewOAuthToken): Promise<void>;
     /** Finds an unexpired, unrevoked token by hash and type. */
     findActiveByHash(tokenHash: string, tokenType: OAuthTokenType, nowTimestamp: number): Promise<OAuthTokenRecord | null>;
+    /** Finds a token by hash and type in any state (expired or revoked included). */
+    findByHash(tokenHash: string, tokenType: OAuthTokenType): Promise<OAuthTokenRecord | null>;
     /** Revokes a single token. False when already revoked or absent. */
     revokeByHash(tokenHash: string, nowTimestamp: number): Promise<boolean>;
     /**

package/dist/oauth/token.repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"token.repository.d.ts","sourceRoot":"","sources":["../../src/oauth/token.repository.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAE7C,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,SAAS,CAAA;AAEjD,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAA;IACV,6EAA6E;IAC7E,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,cAAc,CAAA;IACzB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,UAAU,EAAE,CAAA;IACnB,uFAAuF;IACvF,qBAAqB,EAAE,MAAM,CAAA;IAC7B,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,gBAAiB,SAAQ,aAAa;IACrD,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,UAAU,EAAE,CAAA;IACnB,wEAAwE;IACxE,YAAY,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE1C,4DAA4D;IAC5D,gBAAgB,CACd,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,cAAc,EACzB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAA;IAEnC,oEAAoE;IACpE,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAEvE;;;;OAIG;IACH,yBAAyB,CAAC,qBAAqB,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAE/F;;;OAGG;IACH,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAElG,qFAAqF;IACrF,4BAA4B,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAAA;CACvG"}
+{"version":3,"file":"token.repository.d.ts","sourceRoot":"","sources":["../../src/oauth/token.repository.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAE7C,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,SAAS,CAAA;AAEjD,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAA;IACV,6EAA6E;IAC7E,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,cAAc,CAAA;IACzB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,UAAU,EAAE,CAAA;IACnB,uFAAuF;IACvF,qBAAqB,EAAE,MAAM,CAAA;IAC7B,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,gBAAiB,SAAQ,aAAa;IACrD,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,UAAU,EAAE,CAAA;IACnB,wEAAwE;IACxE,YAAY,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE1C,4DAA4D;IAC5D,gBAAgB,CACd,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,cAAc,EACzB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAA;IAEnC,iFAAiF;IACjF,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAA;IAE1F,oEAAoE;IACpE,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAEvE;;;;OAIG;IACH,yBAAyB,CAAC,qBAAqB,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAE/F;;;OAGG;IACH,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAElG,qFAAqF;IACrF,4BAA4B,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAAA;CACvG"}

package/dist/queue/queue.interface.d.ts

@@ -12,7 +12,8 @@ export interface QueueMessage<T = unknown> {
 }
 /**
  * Execution context handed to every job. Botanical Invariant: jobs receive the
- * engine-mediated repository, NEVER a raw D1Database. `env` is a read-only,
+ * engine-mediated repository, NEVER a raw D1Database, and the engine-mediated
+ * queue port, NEVER a raw transport binding. `env` is a read-only,
  * stringly-typed view of bindings/secrets for things like fetch targets — it
  * deliberately does not expose `DB`.
  */
@@ -21,6 +22,13 @@ export interface JobContext {
     bucket: BeechBucket;
     clock: IClock;
     idGenerator: IIdGenerator;
+    /**
+     * Producer port, so a job can schedule its own successor. Required for cursor-style
+     * jobs that process a bounded slice per invocation, persist their offset and re-enqueue
+     * (bulk import): without it a handler would have to reach into `env` for the raw QUEUE
+     * binding, which is exactly the transport coupling `repository` exists to prevent for D1.
+     */
+    queue: IQueueService;
     env: Record<string, string | undefined>;
 }
 /** A single background worker. Receives the decoded payload + context. */

package/dist/queue/queue.interface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"queue.interface.d.ts","sourceRoot":"","sources":["../../src/queue/queue.interface.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAA;AACzE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AACvD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAA;AAE7D;;;GAGG;AACH,MAAM,WAAW,YAAY,CAAC,CAAC,GAAG,OAAO;IACvC,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,CAAC,CAAA;CACX;AAED;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,iBAAiB,CAAA;IAC7B,MAAM,EAAE,WAAW,CAAA;IACnB,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,YAAY,CAAA;IACzB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;CACxC;AAED,0EAA0E;AAC1E,MAAM,MAAM,UAAU,CAAC,CAAC,GAAG,OAAO,IAAI,CACpC,OAAO,EAAE,CAAC,EACV,OAAO,EAAE,UAAU,KAChB,OAAO,CAAC,IAAI,CAAC,CAAA;AAElB,0DAA0D;AAC1D,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAA;AAEzD;;;;;;;;;GASG;AACH,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACvD"}
+{"version":3,"file":"queue.interface.d.ts","sourceRoot":"","sources":["../../src/queue/queue.interface.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAA;AACzE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AACvD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAA;AAE7D;;;GAGG;AACH,MAAM,WAAW,YAAY,CAAC,CAAC,GAAG,OAAO;IACvC,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,CAAC,CAAA;CACX;AAED;;;;;;GAMG;AACH,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,iBAAiB,CAAA;IAC7B,MAAM,EAAE,WAAW,CAAA;IACnB,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,YAAY,CAAA;IACzB;;;;;OAKG;IACH,KAAK,EAAE,aAAa,CAAA;IACpB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;CACxC;AAED,0EAA0E;AAC1E,MAAM,MAAM,UAAU,CAAC,CAAC,GAAG,OAAO,IAAI,CACpC,OAAO,EAAE,CAAC,EACV,OAAO,EAAE,UAAU,KAChB,OAAO,CAAC,IAAI,CAAC,CAAA;AAElB,0DAA0D;AAC1D,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAA;AAEzD;;;;;;;;;GASG;AACH,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACvD"}

package/dist/queue/queue.stub.d.ts

@@ -1,5 +1,5 @@
 import type { IQueueService } from './queue.interface.js';
-/** Safe no-op producer (e.g. unit tests that don't assert on enqueue). */
+/** Drops messages without a transport. */
 export declare class NoOpQueueService implements IQueueService {
     enqueue<T>(_name: string, _payload: T): Promise<boolean>;
 }

package/dist/queue/queue.stub.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"queue.stub.d.ts","sourceRoot":"","sources":["../../src/queue/queue.stub.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AAEzD,0EAA0E;AAC1E,qBAAa,gBAAiB,YAAW,aAAa;IAC9C,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAG7D;CACF"}
+{"version":3,"file":"queue.stub.d.ts","sourceRoot":"","sources":["../../src/queue/queue.stub.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AAEzD,0CAA0C;AAC1C,qBAAa,gBAAiB,YAAW,aAAa;IAC9C,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;CAG/D"}

package/dist/queue/queue.stub.js

@@ -1,9 +1,8 @@
 // SPDX-License-Identifier: MIT
 // Copyright (c) 2024–2026 Flavio De Musso
-/** Safe no-op producer (e.g. unit tests that don't assert on enqueue). */
+/** Drops messages without a transport. */
 export class NoOpQueueService {
     async enqueue(_name, _payload) {
-        // intentionally empty; reports success since there is nothing to fail
-        return true;
+        return false;
     }
 }

package/dist/queue/scheduler.stub.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scheduler.stub.d.ts","sourceRoot":"","sources":["../../src/queue/scheduler.stub.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAE1D,qBAAa,aAAc,YAAW,UAAU;IAC9C,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,CAE1C;CACF"}
+{"version":3,"file":"scheduler.stub.d.ts","sourceRoot":"","sources":["../../src/queue/scheduler.stub.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAE1D,qBAAa,aAAc,YAAW,UAAU;IAC9C,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI;CAG5C"}

package/dist/rate-limit/token-bucket-rate-limiter.d.ts

@@ -5,6 +5,8 @@ export interface TokenBucketOptions {
     refillRatePerSecond?: number;
     clock?: IClock;
     maxIdleTimeSeconds?: number;
+    maxBuckets?: number;
+    pruneIntervalSeconds?: number;
 }
 export declare class TokenBucketRateLimiter implements IRateLimiter {
     private readonly buckets;
@@ -12,8 +14,13 @@ export declare class TokenBucketRateLimiter implements IRateLimiter {
     private readonly refillRatePerSecond;
     private readonly clock;
     private readonly maxIdleTimeSeconds;
+    private readonly maxBuckets;
+    private readonly pruneIntervalSeconds;
+    private lastPruneTimestamp;
     constructor(options?: TokenBucketOptions);
+    private static readonly MAX_EVICTION_SCAN;
     private pruneExpiredBuckets;
+    private evictRefilledBucket;
     checkLimit(key: string): Promise<RateLimitResult>;
     reset(): void;
 }

package/dist/rate-limit/token-bucket-rate-limiter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"token-bucket-rate-limiter.d.ts","sourceRoot":"","sources":["../../src/rate-limit/token-bucket-rate-limiter.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACtE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAQhD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED,qBAAa,sBAAuB,YAAW,YAAY;IACzD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiC;IACzD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAQ;IACjC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAQ;IAC5C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAQ;IAC9B,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAQ;IAE3C,YAAY,OAAO,CAAC,EAAE,kBAAkB,EAMvC;IAED,OAAO,CAAC,mBAAmB;IASrB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAoCtD;IAED,KAAK,IAAI,IAAI,CAEZ;CACF"}
+{"version":3,"file":"token-bucket-rate-limiter.d.ts","sourceRoot":"","sources":["../../src/rate-limit/token-bucket-rate-limiter.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACtE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAQhD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,oBAAoB,CAAC,EAAE,MAAM,CAAA;CAC9B;AAED,qBAAa,sBAAuB,YAAW,YAAY;IACzD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiC;IACzD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAQ;IACjC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAQ;IAC5C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAQ;IAC9B,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAQ;IAC3C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAQ;IACnC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAQ;IAC7C,OAAO,CAAC,kBAAkB,CAAI;gBAElB,OAAO,CAAC,EAAE,kBAAkB;IAcxC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAK;IAE9C,OAAO,CAAC,mBAAmB;IA4B3B,OAAO,CAAC,mBAAmB;IAsBrB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAqDvD,KAAK,IAAI,IAAI;CAId"}