@capybara-hq/kernel 0.1.0-rc.1 → 0.1.0-rc.10

package/dist/conversations/attachments.service.js

@@ -1,7 +1,26 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
 import { randomUUID } from "node:crypto";
 import { IMAGE_MEDIA_TYPES, MEDIA_LIMITS, } from "@capybara-hq/plugin-sdk";
+import { Inject, Injectable } from "@nestjs/common";
 import { sql } from "kysely";
 import { ApiError } from "../errors.js";
+import { KernelConfigService } from "../infra/config/kernel-config.service.js";
+import { KernelDb } from "../infra/database/kernel-db.js";
+import { TransactionHost } from "../infra/database/transaction-host.js";
+import { Transactional } from "../infra/database/transactional.decorator.js";
+import { LockService } from "../infra/lock/lock.service.js";
+import { LockedCron } from "../infra/schedule/locked-cron.decorator.js";
+import { KERNEL_LOGGER } from "../infra/tokens.js";
+import { StorageService } from "../storage/storage.service.js";
+import { ConversationAccess } from "./access.js";
 /** 预签名上传的有效期（秒）。尽量短：表单在有效期内可被再次使用（内容替换由 etag 核对兜底）。 */
 export const ATTACHMENT_UPLOAD_TTL_SECONDS = 300;
 /** 下载跳转的预签名有效期（秒）；不短于 {@link ATTACHMENT_DOWNLOAD_CACHE_SECONDS}（浏览器缓存的跳转仍可用）。 */
@@ -21,15 +40,23 @@ export const MAX_PENDING_SKILL_PACKAGES = 5;
  * `POST /skills` 开始处理时再顺延这么久，处理期间不会被清理。
  */
 export const SKILL_PACKAGE_TTL_HOURS = 1;
+/** The image types an agent avatar upload may have (cropped square in the browser). */
+export const AGENT_AVATAR_CONTENT_TYPES = ["image/png", "image/jpeg", "image/webp"];
+/** The size limit of an agent avatar upload (bytes). */
+export const AGENT_AVATAR_MAX_BYTES = 2 * 1024 * 1024;
+/** Unfinished avatar uploads one account may have in an org (counted apart from other uploads). */
+export const MAX_PENDING_AGENT_AVATARS = 10;
+/** An avatar upload not saved into a profile expires (and is cleaned up) after this many hours. */
+export const AGENT_AVATAR_TTL_HOURS = 24;
+/** Download redirect lifetime of an avatar (seconds); also its `Cache-Control` max-age. */
+export const AGENT_AVATAR_DOWNLOAD_TTL_SECONDS = 300;
 /**
  * 技能包解出的文件在 `kernel/<orgId>/` 下的前缀：按上传 id，同一上传重试写到同一批键（幂等），
  * 并发处理同一上传也不会互相覆盖出不同内容。版本行记下这个前缀（`skill_versions.object_prefix`）。
  */
 export const skillFilesPrefix = (uploadId) => `skills/${uploadId}/`;
-/** 维护任务：清理过期未绑定的附件（任务名与 scheduler id 不含 `:`）。 */
+/** 周期任务：每小时清理过期未绑定的附件（`@LockedCron`）。 */
 export const ATTACHMENT_CLEANUP_JOB = "attachment-cleanup";
-export const ATTACHMENT_CLEANUP_SCHEDULER_ID = "attachment-cleanup-hourly";
-export const ATTACHMENT_CLEANUP_EVERY_MS = 3_600_000;
 /** 每批认领的行数。 */
 const CLEANUP_BATCH = 100;
 /** finalize 时读取开头多少字节核对文件签名。 */
@@ -39,7 +66,11 @@ const notFound = () => new ApiError("attachment.not_found", "Attachment not foun
 export const normalizeContentType = (ct) => (ct.split(";")[0] ?? "").trim().toLowerCase();
 const isImage = (ct) => IMAGE_MEDIA_TYPES.includes(ct);
 /** 对象键：只用附件 id，用户的文件名不进键。技能包另放 `skill-packages/<id>`。 */
-const objectKey = (id, purpose = "chat") => purpose === "chat" ? `attachments/${id}` : `skill-packages/${id}`;
+const objectKey = (id, purpose = "chat") => purpose === "chat"
+    ? `attachments/${id}`
+    : purpose === "agent-avatar"
+        ? `agent-avatars/${id}`
+        : `skill-packages/${id}`;
 const startsWith = (b, sig, at = 0) => sig.every((x, i) => b[at + i] === x);
 const ascii = (s) => [...s].map((c) => c.charCodeAt(0));
 /** 文件开头是否与声明的类型相符（图片与 PDF 看签名，文本不能含 NUL）。 */
@@ -77,26 +108,38 @@ async function readAll(body) {
  * 字节只在对象存储（`kernel/<orgId>/attachments/<id>`），日志里只有引用；构建模型请求时经 {@link fetchMedia} 取字节。
  * 无进程内状态，可多副本共用。
  */
-export class AttachmentsService {
-    d;
-    constructor(d) {
-        this.d = d;
+let AttachmentsService = class AttachmentsService {
+    db;
+    storage;
+    config;
+    access;
+    log;
+    txHost;
+    constructor(db, storage, config, 
+    /** viewer 能否访问该会话（与会话流相同的规则）。 */
+    access, log, txHost) {
+        this.db = db;
+        this.storage = storage;
+        this.config = config;
+        this.access = access;
+        this.log = log;
+        this.txHost = txHost;
     }
     /** 单个附件的大小上限：配置的 `maxBytes`，图片再受 `MEDIA_LIMITS.imageBytes` 限制。 */
     limitFor(contentType) {
-        const { maxBytes } = this.d.config().attachments;
+        const { maxBytes } = this.config.get().attachments;
         return Math.min(maxBytes, isImage(contentType) ? MEDIA_LIMITS.imageBytes : MEDIA_LIMITS.documentBytes);
     }
     /** 当前配置下的上限（不需要对象存储）。 */
     limits() {
-        const cfg = this.d.config().attachments;
+        const cfg = this.config.get().attachments;
         return {
             types: [...cfg.allowedTypes],
             maxBytes: Math.min(cfg.maxBytes, MEDIA_LIMITS.documentBytes),
             imageMaxBytes: Math.min(cfg.maxBytes, MEDIA_LIMITS.imageBytes),
             maxPerMessage: cfg.maxPerMessage,
             requestMediaBytes: cfg.requestMediaBytes,
-            available: this.d.storage.available,
+            available: this.storage.available,
         };
     }
     /**
@@ -106,20 +149,27 @@ export class AttachmentsService {
      * （软上限：并发登记可能略超）；没有对象存储 → `storage.unavailable`。
      */
     async create(orgId, accountId, input, purpose = "chat") {
-        this.d.storage.assertAvailable();
-        const cfg = this.d.config().attachments;
+        this.storage.assertAvailable();
+        const cfg = this.config.get().attachments;
         const contentType = normalizeContentType(input.contentType);
         const skill = purpose === "skill-package";
+        const avatar = purpose === "agent-avatar";
         if (skill
             ? contentType !== SKILL_PACKAGE_CONTENT_TYPE
-            : !cfg.allowedTypes.includes(contentType)) {
+            : avatar
+                ? !AGENT_AVATAR_CONTENT_TYPES.includes(contentType)
+                : !cfg.allowedTypes.includes(contentType)) {
             throw new ApiError("attachment.type_not_allowed", `Attachment type ${JSON.stringify(contentType)} is not allowed`);
         }
-        const limit = skill ? SKILL_PACKAGE_UPLOAD_MAX_BYTES : this.limitFor(contentType);
+        const limit = skill
+            ? SKILL_PACKAGE_UPLOAD_MAX_BYTES
+            : avatar
+                ? AGENT_AVATAR_MAX_BYTES
+                : this.limitFor(contentType);
         if (input.size > limit) {
             throw new ApiError("attachment.too_large", `Attachment is ${input.size} bytes, over the limit of ${limit} bytes`);
         }
-        const pending = await this.d.db
+        const pending = await this.db
             .selectFrom("attachments")
             .select((eb) => eb.fn.countAll().as("n"))
             .where("org_id", "=", orgId)
@@ -127,19 +177,27 @@ export class AttachmentsService {
             .where("status", "=", "pending")
             .where("purpose", "=", purpose)
             .executeTakeFirst();
-        const maxPending = skill ? MAX_PENDING_SKILL_PACKAGES : MAX_PENDING_ATTACHMENTS;
+        const maxPending = skill
+            ? MAX_PENDING_SKILL_PACKAGES
+            : avatar
+                ? MAX_PENDING_AGENT_AVATARS
+                : MAX_PENDING_ATTACHMENTS;
         if (Number(pending?.n ?? 0) >= maxPending) {
             throw new ApiError("attachment.too_many_pending", `Too many unfinished uploads (at most ${maxPending}); finish or wait for them first`);
         }
         const id = randomUUID();
         const key = objectKey(id, purpose);
-        const ttlHours = skill ? SKILL_PACKAGE_TTL_HOURS : cfg.unboundTtlHours;
-        const upload = await this.d.storage.kernel(orgId).presignPut(key, {
+        const ttlHours = skill
+            ? SKILL_PACKAGE_TTL_HOURS
+            : avatar
+                ? AGENT_AVATAR_TTL_HOURS
+                : cfg.unboundTtlHours;
+        const upload = await this.storage.kernel(orgId).presignPut(key, {
             contentType,
             maxSize: input.size,
             ttlSeconds: ATTACHMENT_UPLOAD_TTL_SECONDS,
         });
-        await this.d.db
+        await this.db
             .insertInto("attachments")
             .values({
             id,
@@ -167,8 +225,8 @@ export class AttachmentsService {
      * - 存储记录的类型或文件开头的签名与声明不符 → 删除对象，`attachment.type_not_allowed`。
      */
     async finalize(orgId, accountId, id) {
-        this.d.storage.assertAvailable();
-        const row = await this.d.db
+        this.storage.assertAvailable();
+        const row = await this.db
             .selectFrom("attachments")
             .select(["id", "name", "content_type", "size", "object_key", "status"])
             .where("id", "=", id)
@@ -186,7 +244,7 @@ export class AttachmentsService {
         };
         if (row.status === "ready")
             return view;
-        const store = this.d.storage.kernel(orgId);
+        const store = this.storage.kernel(orgId);
         const head = await store.head(row.object_key);
         if (!head) {
             throw new ApiError("attachment.not_ready", "The file has not been uploaded yet");
@@ -211,7 +269,7 @@ export class AttachmentsService {
         if (!sniffMatches(view.contentType, data.subarray(0, SNIFF_BYTES))) {
             await reject(new ApiError("attachment.type_not_allowed", `Uploaded file content is not ${view.contentType}`));
         }
-        await this.d.db
+        await this.db
             .updateTable("attachments")
             .set({ status: "ready", etag: got?.head.etag ?? head.etag ?? null, pages })
             .where("id", "=", id)
@@ -225,8 +283,8 @@ export class AttachmentsService {
      * （即使存储里的类型被改成 text/html 也不会在页面里渲染）；响应类型按 finalize 核对过的类型返回。
      */
     async downloadUrl(orgId, accountId, id) {
-        this.d.storage.assertAvailable();
-        const row = await this.d.db
+        this.storage.assertAvailable();
+        const row = await this.db
             .selectFrom("attachments")
             .select(["account_id", "conversation_id", "name", "content_type", "object_key", "etag"])
             .where("id", "=", id)
@@ -238,10 +296,10 @@ export class AttachmentsService {
             throw notFound();
         const allowed = row.conversation_id === null
             ? row.account_id === accountId
-            : await this.d.canAccessConversation(orgId, row.conversation_id, accountId);
+            : await this.access.isAccessible(orgId, row.conversation_id, accountId);
         if (!allowed)
             throw notFound();
-        const store = this.d.storage.kernel(orgId);
+        const store = this.storage.kernel(orgId);
         const head = await store.head(row.object_key);
         if (!head || !this.sameContent(row.etag, head.etag, { orgId, attachmentId: id })) {
             throw notFound();
@@ -258,7 +316,7 @@ export class AttachmentsService {
      * 绑定在该会话、已 ready 的附件（id 与原始文件名），按上传时间、id 排序（沙箱同步按这个顺序分配文件名）。
      */
     async listForConversation(orgId, conversationId) {
-        return this.d.db
+        return this.db
             .selectFrom("attachments")
             .select(["id", "name"])
             .where("org_id", "=", orgId)
@@ -274,7 +332,7 @@ export class AttachmentsService {
      * 大小或 etag 与 finalize 时不符 → null。其余错误（存储不可用等）照常抛出。调用方负责读完或取消 `body`。
      */
     async openForConversation(orgId, conversationId, attachmentId) {
-        const row = await this.d.db
+        const row = await this.db
             .selectFrom("attachments")
             .select(["name", "content_type", "object_key", "size", "etag"])
             .where("id", "=", attachmentId)
@@ -285,7 +343,7 @@ export class AttachmentsService {
             .executeTakeFirst();
         if (!row)
             return null;
-        const got = await this.d.storage.kernel(orgId).get(row.object_key);
+        const got = await this.storage.kernel(orgId).get(row.object_key);
         if (!got)
             return null;
         const size = Number(row.size);
@@ -304,9 +362,9 @@ export class AttachmentsService {
      * 后两种的 details 为 `[{ path: "files", message, attachmentId }]`，网页据此标出对应条目。
      * 已绑定到本会话的（重试）照常返回块。
      */
-    async bindForMessage(trx, orgId, conversationId, accountId, ids) {
+    async bindForMessage(orgId, conversationId, accountId, ids) {
         const unique = [...new Set(ids)];
-        const max = this.d.config().attachments.maxPerMessage;
+        const max = this.config.get().attachments.maxPerMessage;
         if (ids.length > max) {
             throw new ApiError("validation_failed", "Request validation failed", [
                 { path: "files", message: `At most ${max} files per message` },
@@ -319,6 +377,7 @@ export class AttachmentsService {
         }
         if (unique.length === 0)
             return [];
+        const trx = this.db.db;
         const rows = await trx
             .selectFrom("attachments")
             .select([
@@ -383,7 +442,7 @@ export class AttachmentsService {
     sameContent(recorded, current, where) {
         if (recorded === null || recorded === (current ?? null))
             return true;
-        this.d.log.warn("attachment content changed after finalize; treating it as unavailable", where);
+        this.log.warn("attachment content changed after finalize; treating it as unavailable", where);
         return false;
     }
     /**
@@ -393,7 +452,7 @@ export class AttachmentsService {
     async mediaInfo(orgId, conversationId, ids) {
         if (ids.length === 0)
             return new Map();
-        const rows = await this.d.db
+        const rows = await this.db
             .selectFrom("attachments")
             .select(["id", "size", "pages", "etag"])
             .where("org_id", "=", orgId)
@@ -413,7 +472,7 @@ export class AttachmentsService {
         const out = new Map();
         if (ids.length === 0)
             return out;
-        const rows = await this.d.db
+        const rows = await this.db
             .selectFrom("attachments")
             .select(["id", "content_type", "object_key", "size", "etag"])
             .where("org_id", "=", orgId)
@@ -423,7 +482,7 @@ export class AttachmentsService {
             .where("id", "in", [...ids])
             .execute();
         const byId = new Map(rows.map((r) => [r.id, r]));
-        const store = this.d.storage.kernel(orgId);
+        const store = this.storage.kernel(orgId);
         await Promise.all(ids.map(async (id) => {
             const r = byId.get(id);
             if (!r)
@@ -436,7 +495,7 @@ export class AttachmentsService {
             const where = { orgId, conversationId, attachmentId: id };
             if (got.head.size !== Number(r.size) || !this.sameContent(r.etag, got.head.etag, where)) {
                 if (got.head.size !== Number(r.size)) {
-                    this.d.log.warn("attachment size changed after finalize; treating it as unavailable", where);
+                    this.log.warn("attachment size changed after finalize; treating it as unavailable", where);
                 }
                 await got.body.cancel().catch(() => { });
                 return out.set(id, null);
@@ -455,8 +514,8 @@ export class AttachmentsService {
      * 对象已不在或内容与 finalize 时不符 → `attachment.not_found`。
      */
     async readSkillPackage(orgId, accountId, id) {
-        this.d.storage.assertAvailable();
-        const row = await this.d.db
+        this.storage.assertAvailable();
+        const row = await this.db
             .selectFrom("attachments")
             .select(["status", "purpose", sql `expires_at <= now()`.as("expired")])
             .where("id", "=", id)
@@ -468,7 +527,7 @@ export class AttachmentsService {
         }
         if (row.status === "pending")
             await this.finalize(orgId, accountId, id);
-        const live = await this.d.db
+        const live = await this.db
             .updateTable("attachments")
             .set({ expires_at: sql `now() + make_interval(hours => ${SKILL_PACKAGE_TTL_HOURS})` })
             .where("id", "=", id)
@@ -478,7 +537,7 @@ export class AttachmentsService {
             .executeTakeFirst();
         if (!live)
             throw notFound();
-        const got = await this.d.storage.kernel(orgId).get(live.object_key);
+        const got = await this.storage.kernel(orgId).get(live.object_key);
         if (!got)
             throw notFound();
         if (got.head.size !== Number(live.size) ||
@@ -492,7 +551,8 @@ export class AttachmentsService {
      * 在调用方事务里把技能包上传标记为已用掉（行锁；之后由清理任务删 zip，解出的文件因被版本引用而保留）。
      * 不是该账号的 ready 技能包（如已被并发的请求用掉）→ `attachment.not_found`。
      */
-    async consumeSkillPackage(trx, orgId, accountId, id) {
+    async consumeSkillPackage(orgId, accountId, id) {
+        const trx = this.db.db;
         const row = await trx
             .selectFrom("attachments")
             .select("status")
@@ -510,6 +570,99 @@ export class AttachmentsService {
             .where("id", "=", id)
             .execute();
     }
+    /**
+     * Makes an agent avatar upload ready to be saved into a profile (outside any transaction: it may
+     * read the object store): only the uploader, only the `agent-avatar` purpose, an image type, not
+     * expired and not yet used by another agent, else `attachment.not_found`. An upload still
+     * `pending` is finalized first (size, type and the image signature are checked). The expiry is
+     * extended so the cleanup job cannot delete it before {@link consumeAgentAvatar} runs.
+     */
+    async prepareAgentAvatar(orgId, accountId, id, agentId) {
+        this.storage.assertAvailable();
+        const row = await this.db
+            .selectFrom("attachments")
+            .select([
+            "status",
+            "purpose",
+            "content_type",
+            "agent_id",
+            sql `expires_at is not null and expires_at <= now()`.as("expired"),
+        ])
+            .where("id", "=", id)
+            .where("org_id", "=", orgId)
+            .where("account_id", "=", accountId)
+            .executeTakeFirst();
+        if (row?.purpose !== "agent-avatar" ||
+            row.status === "deleting" ||
+            row.expired ||
+            (row.agent_id !== null && row.agent_id !== agentId) ||
+            !AGENT_AVATAR_CONTENT_TYPES.includes(row.content_type)) {
+            throw notFound();
+        }
+        if (row.status === "pending")
+            await this.finalize(orgId, accountId, id);
+        await this.db
+            .updateTable("attachments")
+            .set({ expires_at: sql `now() + make_interval(hours => ${AGENT_AVATAR_TTL_HOURS})` })
+            .where("id", "=", id)
+            .where("status", "=", "ready")
+            .where("agent_id", "is", null)
+            .where("expires_at", "is not", null)
+            .execute();
+    }
+    /**
+     * In the caller's transaction, binds a ready avatar upload to `agentId` (row lock; the expiry is
+     * cleared, so the cleanup job keeps it while the profile uses it). An upload another agent
+     * already uses, or one that is not the account's ready avatar → `attachment.not_found`; saving
+     * the same upload to the same agent again is fine.
+     */
+    async consumeAgentAvatar(orgId, accountId, id, agentId) {
+        const trx = this.db.db;
+        const row = await trx
+            .selectFrom("attachments")
+            .select(["status", "agent_id"])
+            .where("id", "=", id)
+            .where("org_id", "=", orgId)
+            .where("account_id", "=", accountId)
+            .where("purpose", "=", "agent-avatar")
+            .forUpdate()
+            .executeTakeFirst();
+        if (row?.status !== "ready" || (row.agent_id !== null && row.agent_id !== agentId)) {
+            throw notFound();
+        }
+        await trx
+            .updateTable("attachments")
+            .set({ agent_id: agentId, expires_at: null })
+            .where("id", "=", id)
+            .execute();
+    }
+    /**
+     * A short-lived presigned GET (inline, with the checked image type) of the avatar upload bound
+     * to `agentId`; `null` when there is none or its object is gone or no longer the finalized one.
+     */
+    async agentAvatarUrl(orgId, agentId, id) {
+        this.storage.assertAvailable();
+        const row = await this.db
+            .selectFrom("attachments")
+            .select(["content_type", "object_key", "etag"])
+            .where("id", "=", id)
+            .where("org_id", "=", orgId)
+            .where("agent_id", "=", agentId)
+            .where("purpose", "=", "agent-avatar")
+            .where("status", "=", "ready")
+            .executeTakeFirst();
+        if (!row)
+            return null;
+        const store = this.storage.kernel(orgId);
+        const head = await store.head(row.object_key);
+        if (!head || !this.sameContent(row.etag, head.etag, { orgId, attachmentId: id }))
+            return null;
+        return store.presignGet(row.object_key, {
+            ttlSeconds: AGENT_AVATAR_DOWNLOAD_TTL_SECONDS,
+            disposition: "inline",
+            responseContentType: row.content_type,
+        });
+    }
     /**
      * 删除过期（`expires_at < now()`）且从未绑定到会话的附件：先把行认领为 `deleting`（`FOR UPDATE SKIP LOCKED`，
      * 多副本并发时互不重复），再删对象、删行。删对象失败的行保持 `deleting`，下次运行重试。
@@ -518,15 +671,15 @@ export class AttachmentsService {
      * 没有对象存储时什么也不做。返回删除的附件数。
      */
     async deleteExpired() {
-        if (!this.d.storage.available)
+        if (!this.storage.available)
             return 0;
         let deleted = 0;
         const failed = [];
         for (;;) {
-            const claimed = await this.d.db
+            const claimed = await this.db
                 .updateTable("attachments")
                 .set({ status: "deleting" })
-                .where("id", "in", this.d.db
+                .where("id", "in", this.db
                 .selectFrom("attachments")
                 .select("id")
                 .where("conversation_id", "is", null)
@@ -542,12 +695,12 @@ export class AttachmentsService {
                 return deleted;
             for (const r of claimed) {
                 try {
-                    const store = this.d.storage.kernel(r.org_id);
+                    const store = this.storage.kernel(r.org_id);
                     await store.delete(r.object_key);
                     if (r.purpose === "skill-package") {
                         // 解出的文件没被任何版本引用（处理中途失败、或从未用掉）才删
                         const prefix = skillFilesPrefix(r.id);
-                        const used = await this.d.db
+                        const used = await this.db
                             .selectFrom("skill_versions")
                             .select("skill_id")
                             .where("object_prefix", "=", prefix)
@@ -555,7 +708,7 @@ export class AttachmentsService {
                         if (!used)
                             await store.deletePrefix(prefix);
                     }
-                    await this.d.db
+                    await this.db
                         .deleteFrom("attachments")
                         .where("id", "=", r.id)
                         .where("conversation_id", "is", null)
@@ -564,7 +717,7 @@ export class AttachmentsService {
                 }
                 catch (err) {
                     failed.push(r.id);
-                    this.d.log.warn("cannot delete expired attachment; will retry", {
+                    this.log.warn("cannot delete expired attachment; will retry", {
                         orgId: r.org_id,
                         attachmentId: r.id,
                         err,
@@ -575,4 +728,49 @@ export class AttachmentsService {
                 return deleted;
         }
     }
-}
+};
+__decorate([
+    Transactional({ propagation: "mandatory" })
+], AttachmentsService.prototype, "bindForMessage", null);
+__decorate([
+    Transactional({ propagation: "mandatory" })
+], AttachmentsService.prototype, "consumeSkillPackage", null);
+__decorate([
+    Transactional({ propagation: "mandatory" })
+], AttachmentsService.prototype, "consumeAgentAvatar", null);
+AttachmentsService = __decorate([
+    Injectable(),
+    __param(0, Inject(KernelDb)),
+    __param(1, Inject(StorageService)),
+    __param(2, Inject(KernelConfigService)),
+    __param(3, Inject(ConversationAccess)),
+    __param(4, Inject(KERNEL_LOGGER)),
+    __param(5, Inject(TransactionHost))
+], AttachmentsService);
+export { AttachmentsService };
+/** The hourly cleanup of expired unbound attachments, once per tick across replicas. */
+let AttachmentCleanupJob = class AttachmentCleanupJob {
+    attachments;
+    lockService;
+    log;
+    constructor(attachments, lockService, log) {
+        this.attachments = attachments;
+        this.lockService = lockService;
+        this.log = log;
+    }
+    async run() {
+        const n = await this.attachments.deleteExpired();
+        if (n > 0)
+            this.log.info("expired attachments deleted", { count: n });
+    }
+};
+__decorate([
+    LockedCron("0 * * * *", { name: ATTACHMENT_CLEANUP_JOB })
+], AttachmentCleanupJob.prototype, "run", null);
+AttachmentCleanupJob = __decorate([
+    Injectable(),
+    __param(0, Inject(AttachmentsService)),
+    __param(1, Inject(LockService)),
+    __param(2, Inject(KERNEL_LOGGER))
+], AttachmentCleanupJob);
+export { AttachmentCleanupJob };