@cogenta/core 0.1.0

package/dist/logger/redact.js

@@ -0,0 +1,96 @@
+/** What replaces a redacted value. Constant so tests and readers can match on it. */
+export const REDACTED = '[redacted]';
+/**
+ * Field names whose value is a credential, normalised to lowercase letters and
+ * digits so `API_KEY`, `x-api-key` and `apiKey` all collapse to `apikey`.
+ */
+const SECRET_KEYS = new Set([
+    'password',
+    'passwd',
+    'pass',
+    'secret',
+    'token',
+    'apikey',
+    'apisecret',
+    'accesstoken',
+    'refreshtoken',
+    'idtoken',
+    'bearer',
+    'authorization',
+    'auth',
+    'cookie',
+    'setcookie',
+    'session',
+    'sessionid',
+    'credential',
+    'credentials',
+    'privatekey',
+    'clientsecret',
+    'accesskey',
+    'accesskeyid',
+    'secretaccesskey',
+    'signature',
+    'dsn',
+]);
+/**
+ * Suffixes that make a compound name a secret: `llmApiKey`, `s3SecretAccessKey`.
+ * Deliberately not `key` on its own — `cacheKey` and `keyCount` are not secrets,
+ * and over-redacting makes logs useless, which is its own kind of failure.
+ */
+const SECRET_SUFFIXES = ['password', 'passwd', 'secret', 'apikey', 'accesstoken', 'refreshtoken'];
+/** Values that are credentials whatever the field is called. */
+const SECRET_VALUES = [
+    /sk-ant-[a-zA-Z0-9_-]{20,}/,
+    /\bsk-(proj-)?[a-zA-Z0-9]{32,}/,
+    /\b(AKIA|ASIA)[0-9A-Z]{16}\b/,
+    /\bgh[pousr]_[A-Za-z0-9]{30,}/,
+    /-----BEGIN (RSA |EC |OPENSSH |PGP )?PRIVATE KEY-----/,
+    /\beyJ[A-Za-z0-9_-]{10,}\.eyJ[A-Za-z0-9_-]{10,}\./,
+    /\bxox[abprs]-[A-Za-z0-9-]{10,}/,
+];
+/** Matches `<scheme>://<user>:<password>@<host>`, capturing the password alone. */
+const URL_CREDENTIALS = /^([a-z][a-z0-9+.-]*:\/\/[^:@\s/]+:)([^@\s/]+)(@)/i;
+const MAX_DEPTH = 8;
+function isSecretKey(key) {
+    const normalised = key.toLowerCase().replace(/[^a-z0-9]/g, '');
+    if (SECRET_KEYS.has(normalised))
+        return true;
+    return SECRET_SUFFIXES.some((suffix) => normalised.endsWith(suffix));
+}
+function redactString(value) {
+    if (SECRET_VALUES.some((pattern) => pattern.test(value)))
+        return REDACTED;
+    return value.replace(URL_CREDENTIALS, `$1${REDACTED}$3`);
+}
+function redactValue(value, depth, seen) {
+    if (typeof value === 'string')
+        return redactString(value);
+    if (value === null || typeof value !== 'object')
+        return value;
+    if (depth >= MAX_DEPTH)
+        return '[depth limit]';
+    if (seen.has(value))
+        return '[circular]';
+    seen.add(value);
+    if (Array.isArray(value))
+        return value.map((item) => redactValue(item, depth + 1, seen));
+    if (value instanceof Date)
+        return value.toISOString();
+    const output = {};
+    for (const [key, entry] of Object.entries(value)) {
+        output[key] = isSecretKey(key) ? REDACTED : redactValue(entry, depth + 1, seen);
+    }
+    return output;
+}
+/**
+ * Returns a copy of `fields` with credentials removed — by field name, by value
+ * shape, and inside connection strings.
+ *
+ * This is belt and braces on top of rule R7: secrets are not supposed to reach a
+ * log call in the first place. Defence in depth is warranted because a leaked
+ * key in a log file is discovered late, by someone else, and costs a rotation.
+ */
+export function redact(fields) {
+    return redactValue(fields, 0, new WeakSet());
+}
+//# sourceMappingURL=redact.js.map

package/dist/logger/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/logger/redact.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAA;AAEpC;;;GAGG;AACH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,UAAU;IACV,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,WAAW;IACX,aAAa;IACb,cAAc;IACd,SAAS;IACT,QAAQ;IACR,eAAe;IACf,MAAM;IACN,QAAQ;IACR,WAAW;IACX,SAAS;IACT,WAAW;IACX,YAAY;IACZ,aAAa;IACb,YAAY;IACZ,cAAc;IACd,WAAW;IACX,aAAa;IACb,iBAAiB;IACjB,WAAW;IACX,KAAK;CACN,CAAC,CAAA;AAEF;;;;GAIG;AACH,MAAM,eAAe,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,cAAc,CAAC,CAAA;AAEjG,gEAAgE;AAChE,MAAM,aAAa,GAAsB;IACvC,2BAA2B;IAC3B,+BAA+B;IAC/B,6BAA6B;IAC7B,8BAA8B;IAC9B,sDAAsD;IACtD,kDAAkD;IAClD,gCAAgC;CACjC,CAAA;AAED,mFAAmF;AACnF,MAAM,eAAe,GAAG,mDAAmD,CAAA;AAE3E,MAAM,SAAS,GAAG,CAAC,CAAA;AAEnB,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAA;IAC9D,IAAI,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAA;IAC5C,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;AACtE,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAA;IACzE,OAAO,KAAK,CAAC,OAAO,CAAC,eAAe,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAA;AAC1D,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,KAAa,EAAE,IAAqB;IACvE,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAA;IACzD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAE7D,IAAI,KAAK,IAAI,SAAS;QAAE,OAAO,eAAe,CAAA;IAC9C,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,YAAY,CAAA;IACxC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IAEf,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;IACxF,IAAI,KAAK,YAAY,IAAI;QAAE,OAAO,KAAK,CAAC,WAAW,EAAE,CAAA;IAErD,MAAM,MAAM,GAA4B,EAAE,CAAA;IAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAA;IACjF,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,MAAM,CAAoC,MAAS;IACjE,OAAO,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,OAAO,EAAE,CAA4B,CAAA;AACzE,CAAC"}

package/dist/logger/types.d.ts

@@ -0,0 +1,32 @@
+/** Ordered from most to least verbose. `silent` emits nothing at all. */
+export declare const LOG_LEVELS: readonly ['debug', 'info', 'warn', 'error', 'silent'];
+export type LogLevel = (typeof LOG_LEVELS)[number];
+/** Emitted levels only — `silent` is a threshold, never a record's level. */
+export type EmittedLogLevel = Exclude<LogLevel, 'silent'>;
+export type LogFields = Record<string, unknown>;
+/** One emitted line, as NDJSON. Structured; never a formatted sentence. */
+export interface LogRecord extends LogFields {
+    readonly time: string;
+    readonly level: EmittedLogLevel;
+    readonly msg: string;
+}
+/** Where a line goes. Injected, so tests capture instead of writing to stdout. */
+export type LogDestination = (line: string) => void;
+export interface Logger {
+    readonly level: LogLevel;
+    debug(message: string, fields?: LogFields): void;
+    info(message: string, fields?: LogFields): void;
+    warn(message: string, fields?: LogFields): void;
+    error(message: string, fields?: LogFields): void;
+    /** A logger that repeats `bindings` on every record. Never mutates its parent. */
+    child(bindings: LogFields): Logger;
+    isLevelEnabled(level: LogLevel): boolean;
+}
+export interface LoggerOptions {
+    readonly level?: LogLevel;
+    readonly destination?: LogDestination;
+    /** Injected so tests get stable timestamps. */
+    readonly clock?: () => Date;
+    readonly bindings?: LogFields;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/logger/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/logger/types.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,eAAO,MAAM,UAAU,YAAI,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAU,CAAA;AAE/E,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAA;AAElD,6EAA6E;AAC7E,MAAM,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;AAEzD,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAE/C,2EAA2E;AAC3E,MAAM,WAAW,SAAU,SAAQ,SAAS;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAA;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CACrB;AAED,kFAAkF;AAClF,MAAM,MAAM,cAAc,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;AAEnD,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAA;IACxB,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,CAAA;IAChD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,CAAA;IAC/C,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,CAAA;IAC/C,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,CAAA;IAChD,kFAAkF;IAClF,KAAK,CAAC,QAAQ,EAAE,SAAS,GAAG,MAAM,CAAA;IAClC,cAAc,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAA;CACzC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAA;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,cAAc,CAAA;IACrC,+CAA+C;IAC/C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAA;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAA;CAC9B"}

package/dist/logger/types.js

@@ -0,0 +1,3 @@
+/** Ordered from most to least verbose. `silent` emits nothing at all. */
+export const LOG_LEVELS = ['debug', 'info', 'warn', 'error', 'silent'];
+//# sourceMappingURL=types.js.map

package/dist/logger/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/logger/types.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAU,CAAA"}

package/dist/media/format-sniff.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Container sniffing, shared by the image pipeline (`@cogenta/render`) and
+ * the media upload route (`@cogenta/api`) — moved here, rather than
+ * duplicated or pulled in by depending on `@cogenta/render`, because
+ * `@cogenta/render` already depends on `@cogenta/core` and an upload route
+ * has no reason to pull in the render package's Astro/sharp integration just
+ * for four byte-signature checks.
+ *
+ * The format is read from the magic bytes, never from a filename or an
+ * uploaded `Content-Type` — both are attacker-controlled, and "upload a
+ * disguised file" is a named security test for the media library
+ * (L2-admin.md).
+ */
+export type SniffedImageFormat = 'avif' | 'webp' | 'jpeg' | 'png';
+/** The format, or `null` when this is not something the pipeline can decode. */
+export declare function sniffImageFormat(bytes: Uint8Array): SniffedImageFormat | null;
+/**
+ * A human name for bytes that were refused. Never echoes the bytes back: an
+ * error message is a place a payload can travel to.
+ */
+export declare function describeContainer(bytes: Uint8Array): string;
+//# sourceMappingURL=format-sniff.d.ts.map

package/dist/media/format-sniff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"format-sniff.d.ts","sourceRoot":"","sources":["../../src/media/format-sniff.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,CAAA;AA2BjE,gFAAgF;AAChF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,kBAAkB,GAAG,IAAI,CAQ7E;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAc3D"}

package/dist/media/format-sniff.js

@@ -0,0 +1,77 @@
+/**
+ * Container sniffing, shared by the image pipeline (`@cogenta/render`) and
+ * the media upload route (`@cogenta/api`) — moved here, rather than
+ * duplicated or pulled in by depending on `@cogenta/render`, because
+ * `@cogenta/render` already depends on `@cogenta/core` and an upload route
+ * has no reason to pull in the render package's Astro/sharp integration just
+ * for four byte-signature checks.
+ *
+ * The format is read from the magic bytes, never from a filename or an
+ * uploaded `Content-Type` — both are attacker-controlled, and "upload a
+ * disguised file" is a named security test for the media library
+ * (L2-admin.md).
+ */
+function starts(bytes, offset, ascii) {
+    if (bytes.length < offset + ascii.length)
+        return false;
+    for (let index = 0; index < ascii.length; index += 1) {
+        if (bytes[offset + index] !== ascii.charCodeAt(index))
+            return false;
+    }
+    return true;
+}
+function startsWithBytes(bytes, signature) {
+    if (bytes.length < signature.length)
+        return false;
+    return signature.every((byte, index) => bytes[index] === byte);
+}
+const PNG_SIGNATURE = [0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a];
+const JPEG_SIGNATURE = [0xff, 0xd8, 0xff];
+/** ISO base media brands that are AVIF, and the ones that are its HEIF cousins. */
+const AVIF_BRANDS = new Set(['avif', 'avis']);
+const HEIF_BRANDS = new Set(['heic', 'heix', 'hevc', 'hevx', 'mif1', 'msf1']);
+function brandOf(bytes) {
+    if (!starts(bytes, 4, 'ftyp') || bytes.length < 12)
+        return null;
+    return String.fromCharCode(bytes[8] ?? 0, bytes[9] ?? 0, bytes[10] ?? 0, bytes[11] ?? 0);
+}
+/** The format, or `null` when this is not something the pipeline can decode. */
+export function sniffImageFormat(bytes) {
+    if (startsWithBytes(bytes, PNG_SIGNATURE))
+        return 'png';
+    if (startsWithBytes(bytes, JPEG_SIGNATURE))
+        return 'jpeg';
+    if (starts(bytes, 0, 'RIFF') && starts(bytes, 8, 'WEBP'))
+        return 'webp';
+    const brand = brandOf(bytes);
+    if (brand !== null && AVIF_BRANDS.has(brand))
+        return 'avif';
+    return null;
+}
+/**
+ * A human name for bytes that were refused. Never echoes the bytes back: an
+ * error message is a place a payload can travel to.
+ */
+export function describeContainer(bytes) {
+    if (bytes.length === 0)
+        return 'an empty file';
+    if (starts(bytes, 0, 'GIF8'))
+        return 'a GIF';
+    if (starts(bytes, 0, 'BM'))
+        return 'a BMP';
+    if (startsWithBytes(bytes, [0x49, 0x49, 0x2a, 0x00]))
+        return 'a TIFF';
+    if (startsWithBytes(bytes, [0x4d, 0x4d, 0x00, 0x2a]))
+        return 'a TIFF';
+    if (starts(bytes, 0, '<svg') || starts(bytes, 0, '<?xml'))
+        return 'an SVG';
+    if (startsWithBytes(bytes, [0x25, 0x50, 0x44, 0x46]))
+        return 'a PDF';
+    const brand = brandOf(bytes);
+    if (brand !== null && HEIF_BRANDS.has(brand))
+        return 'a HEIF image';
+    if (brand !== null)
+        return `an ISO media file (brand "${brand}")`;
+    return 'not a recognised image';
+}
+//# sourceMappingURL=format-sniff.js.map

package/dist/media/format-sniff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"format-sniff.js","sourceRoot":"","sources":["../../src/media/format-sniff.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,SAAS,MAAM,CAAC,KAAiB,EAAE,MAAc,EAAE,KAAa;IAC9D,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACtD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAA;IACrE,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,eAAe,CAAC,KAAiB,EAAE,SAA4B;IACtE,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACjD,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAA;AAChE,CAAC;AAED,MAAM,aAAa,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;AACtE,MAAM,cAAc,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;AAEzC,mFAAmF;AACnF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;AAC7C,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;AAE7E,SAAS,OAAO,CAAC,KAAiB;IAChC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,IAAI,CAAA;IAC/D,OAAO,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;AAC1F,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,gBAAgB,CAAC,KAAiB;IAChD,IAAI,eAAe,CAAC,KAAK,EAAE,aAAa,CAAC;QAAE,OAAO,KAAK,CAAA;IACvD,IAAI,eAAe,CAAC,KAAK,EAAE,cAAc,CAAC;QAAE,OAAO,MAAM,CAAA;IACzD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,MAAM,CAAC;QAAE,OAAO,MAAM,CAAA;IAEvE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;IAC5B,IAAI,KAAK,KAAK,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAA;IAC3D,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAiB;IACjD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,eAAe,CAAA;IAC9C,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,MAAM,CAAC;QAAE,OAAO,OAAO,CAAA;IAC5C,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC;QAAE,OAAO,OAAO,CAAA;IAC1C,IAAI,eAAe,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAA;IACrE,IAAI,eAAe,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAA;IACrE,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,OAAO,CAAC;QAAE,OAAO,QAAQ,CAAA;IAC1E,IAAI,eAAe,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAAE,OAAO,OAAO,CAAA;IAEpE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;IAC5B,IAAI,KAAK,KAAK,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,cAAc,CAAA;IACnE,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,6BAA6B,KAAK,IAAI,CAAA;IAEjE,OAAO,wBAAwB,CAAA;AACjC,CAAC"}

package/dist/media/index.d.ts

@@ -0,0 +1,5 @@
+export { describeContainer, type SniffedImageFormat, sniffImageFormat } from './format-sniff.js';
+export { createDatabaseMediaStore, type DatabaseMediaStoreOptions } from './store.js';
+export type { CreateMediaInput, FocalPoint, ListMediaOptions, MediaAsset, MediaKind, MediaPage, MediaStore, UpdateMediaInput, } from './types.js';
+export { MEDIA_KINDS } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/media/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/media/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,KAAK,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AAChG,OAAO,EAAE,wBAAwB,EAAE,KAAK,yBAAyB,EAAE,MAAM,YAAY,CAAA;AACrF,YAAY,EACV,gBAAgB,EAChB,UAAU,EACV,gBAAgB,EAChB,UAAU,EACV,SAAS,EACT,SAAS,EACT,UAAU,EACV,gBAAgB,GACjB,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA"}

package/dist/media/index.js

@@ -0,0 +1,4 @@
+export { describeContainer, sniffImageFormat } from './format-sniff.js';
+export { createDatabaseMediaStore } from './store.js';
+export { MEDIA_KINDS } from './types.js';
+//# sourceMappingURL=index.js.map

package/dist/media/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/media/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAA2B,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AAChG,OAAO,EAAE,wBAAwB,EAAkC,MAAM,YAAY,CAAA;AAWrF,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA"}

package/dist/media/store.d.ts

@@ -0,0 +1,13 @@
+import { type DatabaseHandle } from '../db/index.js';
+import type { MediaStore } from './types.js';
+export interface DatabaseMediaStoreOptions {
+    readonly db: DatabaseHandle;
+}
+/**
+ * The media asset store: one SQL table, played against SQLite, Postgres and
+ * MySQL by the same contract — the same shape as the degraded job queue
+ * (`../queue/database.ts`), since a media library has no infrastructure
+ * dependency to fall back from in the first place (rule R1).
+ */
+export declare function createDatabaseMediaStore(options: DatabaseMediaStoreOptions): MediaStore;
+//# sourceMappingURL=store.d.ts.map

package/dist/media/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/media/store.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,cAAc,EAA0B,MAAM,gBAAgB,CAAA;AAE5E,OAAO,KAAK,EAMV,UAAU,EAEX,MAAM,YAAY,CAAA;AAMnB,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,EAAE,EAAE,cAAc,CAAA;CAC5B;AAuFD;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,yBAAyB,GAAG,UAAU,CA4JvF"}

package/dist/media/store.js

@@ -0,0 +1,211 @@
+import { randomUUID } from 'node:crypto';
+import { identifier, limit, sql } from '../db/index.js';
+import { CogentaError } from '../errors/index.js';
+const TABLE = 'cogenta_media';
+const DEFAULT_LIMIT = 50;
+const MAX_LIMIT = 200;
+function rowToAsset(row) {
+    return {
+        id: row.id,
+        kind: row.kind,
+        filename: row.filename,
+        mimeType: row.mime_type,
+        size: Number(row.size),
+        width: row.width === null ? null : Number(row.width),
+        height: row.height === null ? null : Number(row.height),
+        alt: row.alt,
+        decorative: row.decorative === true || row.decorative === 1,
+        decorativeJustification: row.decorative_justification,
+        focal: row.focal === null ? null : JSON.parse(row.focal),
+        storageKey: row.storage_key,
+        createdAt: row.created_at,
+        createdBy: row.created_by,
+    };
+}
+function notFound(id) {
+    return new CogentaError({
+        code: 'MEDIA_NOT_FOUND',
+        message: `No media asset with id "${id}".`,
+        hint: 'List media to find a valid id, or the asset may already have been deleted.',
+        details: { id },
+    });
+}
+/**
+ * A decorative asset carries no description (L2-admin.md's own rule: the
+ * decorative checkbox writes `alt=""`), and needs a reason a reviewer can
+ * read instead — an editor who cannot explain why an image is decorative is
+ * usually one who meant to write alt text and skipped it by accident.
+ */
+function validateAltPolicy(alt, decorative, justification) {
+    if (decorative) {
+        if (justification === null || justification.trim().length === 0) {
+            throw new CogentaError({
+                code: 'MEDIA_INVALID',
+                message: 'A decorative image needs a justification.',
+                hint: 'Say why the image carries no information a screen reader needs to announce.',
+            });
+        }
+        return;
+    }
+    if (alt.trim().length === 0) {
+        throw new CogentaError({
+            code: 'MEDIA_INVALID',
+            message: 'Alt text is required unless the image is marked decorative.',
+            hint: 'Describe what the image shows, or mark it decorative with a justification.',
+        });
+    }
+}
+function encodeCursor(row) {
+    return Buffer.from(`${row.createdAt}|${row.id}`, 'utf8').toString('base64url');
+}
+function decodeCursor(cursor) {
+    try {
+        const [createdAt, id] = Buffer.from(cursor, 'base64url').toString('utf8').split('|');
+        if (createdAt === undefined || id === undefined)
+            return null;
+        return { createdAt, id };
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * The media asset store: one SQL table, played against SQLite, Postgres and
+ * MySQL by the same contract — the same shape as the degraded job queue
+ * (`../queue/database.ts`), since a media library has no infrastructure
+ * dependency to fall back from in the first place (rule R1).
+ */
+export function createDatabaseMediaStore(options) {
+    const { db } = options;
+    const table = identifier(TABLE, db.dialect);
+    let ready = false;
+    async function ensureTable() {
+        if (ready)
+            return;
+        await db.query(sql `
+      create table if not exists ${table} (
+        id varchar(64) not null primary key,
+        kind varchar(16) not null,
+        filename varchar(512) not null,
+        mime_type varchar(255) not null,
+        size bigint not null,
+        width integer,
+        height integer,
+        alt text not null,
+        decorative boolean not null,
+        decorative_justification text,
+        focal text,
+        storage_key varchar(1024) not null,
+        created_at varchar(32) not null,
+        created_by varchar(255)
+      )`);
+        await db
+            .query(sql `create index ${identifier('cogenta_media_created', db.dialect)}
+            on ${table} (created_at, id)`)
+            .catch(() => undefined); // already there
+        ready = true;
+    }
+    return {
+        create: async (input) => {
+            await ensureTable();
+            const decorative = input.decorative ?? false;
+            const alt = decorative ? '' : input.alt;
+            const justification = decorative ? (input.decorativeJustification ?? null) : null;
+            validateAltPolicy(alt, decorative, justification);
+            const id = input.id ?? randomUUID();
+            const createdAt = new Date().toISOString();
+            await db.query(sql `
+        insert into ${table}
+          (id, kind, filename, mime_type, size, width, height, alt, decorative,
+           decorative_justification, focal, storage_key, created_at, created_by)
+        values
+          (${id}, ${input.kind}, ${input.filename}, ${input.mimeType}, ${input.size},
+           ${input.width ?? null}, ${input.height ?? null}, ${alt}, ${decorative},
+           ${justification}, ${input.focal === undefined || input.focal === null ? null : JSON.stringify(input.focal)},
+           ${input.storageKey}, ${createdAt}, ${input.createdBy ?? null})`);
+            return {
+                id,
+                kind: input.kind,
+                filename: input.filename,
+                mimeType: input.mimeType,
+                size: input.size,
+                width: input.width ?? null,
+                height: input.height ?? null,
+                alt,
+                decorative,
+                decorativeJustification: justification,
+                focal: input.focal ?? null,
+                storageKey: input.storageKey,
+                createdAt,
+                createdBy: input.createdBy ?? null,
+            };
+        },
+        get: async (id) => {
+            await ensureTable();
+            const result = await db.query(sql `select * from ${table} where id = ${id}`);
+            const row = result.rows[0];
+            return row === undefined ? null : rowToAsset(row);
+        },
+        list: async (listOptions = {}) => {
+            await ensureTable();
+            const pageSize = Math.min(listOptions.limit ?? DEFAULT_LIMIT, MAX_LIMIT);
+            const cursor = listOptions.cursor === undefined ? null : decodeCursor(listOptions.cursor);
+            const kindFilter = listOptions.kind === undefined ? sql `` : sql `and kind = ${listOptions.kind}`;
+            const cursorFilter = cursor === null
+                ? sql ``
+                : sql `and (created_at < ${cursor.createdAt}
+                 or (created_at = ${cursor.createdAt} and id < ${cursor.id}))`;
+            const result = await db.query(sql `
+        select * from ${table}
+        where 1 = 1 ${kindFilter} ${cursorFilter}
+        order by created_at desc, id desc
+        limit ${limit(pageSize + 1)}`);
+            const hasMore = result.rows.length > pageSize;
+            const page = result.rows.slice(0, pageSize).map(rowToAsset);
+            const last = page[page.length - 1];
+            return {
+                items: page,
+                hasMore,
+                nextCursor: hasMore && last !== undefined ? encodeCursor(last) : null,
+            };
+        },
+        update: async (id, input) => {
+            await ensureTable();
+            const existing = await db.query(sql `select * from ${table} where id = ${id}`);
+            const current = existing.rows[0];
+            if (current === undefined)
+                throw notFound(id);
+            const currentDecorative = current.decorative === true || current.decorative === 1;
+            const decorative = input.decorative ?? currentDecorative;
+            const alt = decorative ? '' : (input.alt ?? current.alt);
+            const justification = decorative
+                ? (input.decorativeJustification ?? current.decorative_justification)
+                : null;
+            validateAltPolicy(alt, decorative, justification);
+            const focal = input.focal === undefined
+                ? current.focal
+                : input.focal === null
+                    ? null
+                    : JSON.stringify(input.focal);
+            await db.query(sql `
+        update ${table}
+        set alt = ${alt},
+            decorative = ${decorative},
+            decorative_justification = ${justification},
+            focal = ${focal}
+        where id = ${id}`);
+            return rowToAsset({
+                ...current,
+                alt,
+                decorative,
+                decorative_justification: justification,
+                focal,
+            });
+        },
+        delete: async (id) => {
+            await ensureTable();
+            await db.query(sql `delete from ${table} where id = ${id}`);
+        },
+    };
+}
+//# sourceMappingURL=store.js.map

package/dist/media/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/media/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAuB,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAA;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAWjD,MAAM,KAAK,GAAG,eAAe,CAAA;AAC7B,MAAM,aAAa,GAAG,EAAE,CAAA;AACxB,MAAM,SAAS,GAAG,GAAG,CAAA;AAuBrB,SAAS,UAAU,CAAC,GAAa;IAC/B,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,GAAG,CAAC,IAA0B;QACpC,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;QACtB,KAAK,EAAE,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;QACpD,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;QACvD,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,UAAU,EAAE,GAAG,CAAC,UAAU,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,KAAK,CAAC;QAC3D,uBAAuB,EAAE,GAAG,CAAC,wBAAwB;QACrD,KAAK,EAAE,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAgB;QACxE,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,EAAU;IAC1B,OAAO,IAAI,YAAY,CAAC;QACtB,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,2BAA2B,EAAE,IAAI;QAC1C,IAAI,EAAE,4EAA4E;QAClF,OAAO,EAAE,EAAE,EAAE,EAAE;KAChB,CAAC,CAAA;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,GAAW,EAAE,UAAmB,EAAE,aAA4B;IACvF,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,aAAa,KAAK,IAAI,IAAI,aAAa,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,YAAY,CAAC;gBACrB,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,2CAA2C;gBACpD,IAAI,EAAE,6EAA6E;aACpF,CAAC,CAAA;QACJ,CAAC;QACD,OAAM;IACR,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,YAAY,CAAC;YACrB,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,6DAA6D;YACtE,IAAI,EAAE,4EAA4E;SACnF,CAAC,CAAA;IACJ,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,GAAsC;IAC1D,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;AAChF,CAAC;AAED,SAAS,YAAY,CAAC,MAAc;IAClC,IAAI,CAAC;QACH,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACpF,IAAI,SAAS,KAAK,SAAS,IAAI,EAAE,KAAK,SAAS;YAAE,OAAO,IAAI,CAAA;QAC5D,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAA;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAkC;IACzE,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAA;IACtB,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,CAAA;IAC3C,IAAI,KAAK,GAAG,KAAK,CAAA;IAEjB,KAAK,UAAU,WAAW;QACxB,IAAI,KAAK;YAAE,OAAM;QACjB,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;mCACa,KAAK;;;;;;;;;;;;;;;QAehC,CAAC,CAAA;QAEL,MAAM,EAAE;aACL,KAAK,CACJ,GAAG,CAAA,gBAAgB,UAAU,CAAC,uBAAuB,EAAE,EAAE,CAAC,OAAO,CAAC;iBACzD,KAAK,mBAAmB,CAClC;aACA,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA,CAAC,gBAAgB;QAE1C,KAAK,GAAG,IAAI,CAAA;IACd,CAAC;IAED,OAAO;QACL,MAAM,EAAE,KAAK,EAAE,KAAuB,EAAuB,EAAE;YAC7D,MAAM,WAAW,EAAE,CAAA;YAEnB,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,KAAK,CAAA;YAC5C,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAA;YACvC,MAAM,aAAa,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;YACjF,iBAAiB,CAAC,GAAG,EAAE,UAAU,EAAE,aAAa,CAAC,CAAA;YAEjD,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,IAAI,UAAU,EAAE,CAAA;YACnC,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;YAE1C,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;sBACF,KAAK;;;;aAId,EAAE,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,IAAI;aACtE,KAAK,CAAC,KAAK,IAAI,IAAI,KAAK,KAAK,CAAC,MAAM,IAAI,IAAI,KAAK,GAAG,KAAK,UAAU;aACnE,aAAa,KAAK,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC;aACxG,KAAK,CAAC,UAAU,KAAK,SAAS,KAAK,KAAK,CAAC,SAAS,IAAI,IAAI,GAAG,CAAC,CAAA;YAErE,OAAO;gBACL,EAAE;gBACF,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI;gBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI;gBAC5B,GAAG;gBACH,UAAU;gBACV,uBAAuB,EAAE,aAAa;gBACtC,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI;gBAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,SAAS;gBACT,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;aACnC,CAAA;QACH,CAAC;QAED,GAAG,EAAE,KAAK,EAAE,EAAU,EAA8B,EAAE;YACpD,MAAM,WAAW,EAAE,CAAA;YACnB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAW,GAAG,CAAA,iBAAiB,KAAK,eAAe,EAAE,EAAE,CAAC,CAAA;YACrF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAC1B,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;QACnD,CAAC;QAED,IAAI,EAAE,KAAK,EAAE,WAAW,GAAqB,EAAE,EAAsB,EAAE;YACrE,MAAM,WAAW,EAAE,CAAA;YAEnB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,IAAI,aAAa,EAAE,SAAS,CAAC,CAAA;YACxE,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;YAEzF,MAAM,UAAU,GACd,WAAW,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAA,EAAE,CAAC,CAAC,CAAC,GAAG,CAAA,cAAc,WAAW,CAAC,IAAI,EAAE,CAAA;YAC9E,MAAM,YAAY,GAChB,MAAM,KAAK,IAAI;gBACb,CAAC,CAAC,GAAG,CAAA,EAAE;gBACP,CAAC,CAAC,GAAG,CAAA,qBAAqB,MAAM,CAAC,SAAS;oCAChB,MAAM,CAAC,SAAS,aAAa,MAAM,CAAC,EAAE,IAAI,CAAA;YAExE,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAW,GAAG,CAAA;wBACzB,KAAK;sBACP,UAAU,IAAI,YAAY;;gBAEhC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,CAAC,CAAA;YAEhC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAA;YAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;YAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;YAElC,OAAO;gBACL,KAAK,EAAE,IAAI;gBACX,OAAO;gBACP,UAAU,EAAE,OAAO,IAAI,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;aACtE,CAAA;QACH,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,EAAU,EAAE,KAAuB,EAAuB,EAAE;YACzE,MAAM,WAAW,EAAE,CAAA;YACnB,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,KAAK,CAAW,GAAG,CAAA,iBAAiB,KAAK,eAAe,EAAE,EAAE,CAAC,CAAA;YACvF,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAChC,IAAI,OAAO,KAAK,SAAS;gBAAE,MAAM,QAAQ,CAAC,EAAE,CAAC,CAAA;YAE7C,MAAM,iBAAiB,GAAG,OAAO,CAAC,UAAU,KAAK,IAAI,IAAI,OAAO,CAAC,UAAU,KAAK,CAAC,CAAA;YACjF,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,iBAAiB,CAAA;YACxD,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAA;YACxD,MAAM,aAAa,GAAG,UAAU;gBAC9B,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,IAAI,OAAO,CAAC,wBAAwB,CAAC;gBACrE,CAAC,CAAC,IAAI,CAAA;YACR,iBAAiB,CAAC,GAAG,EAAE,UAAU,EAAE,aAAa,CAAC,CAAA;YAEjD,MAAM,KAAK,GACT,KAAK,CAAC,KAAK,KAAK,SAAS;gBACvB,CAAC,CAAC,OAAO,CAAC,KAAK;gBACf,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI;oBACpB,CAAC,CAAC,IAAI;oBACN,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YAEnC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;iBACP,KAAK;oBACF,GAAG;2BACI,UAAU;yCACI,aAAa;sBAChC,KAAK;qBACN,EAAE,EAAE,CAAC,CAAA;YAEpB,OAAO,UAAU,CAAC;gBAChB,GAAG,OAAO;gBACV,GAAG;gBACH,UAAU;gBACV,wBAAwB,EAAE,aAAa;gBACvC,KAAK;aACN,CAAC,CAAA;QACJ,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,EAAU,EAAiB,EAAE;YAC1C,MAAM,WAAW,EAAE,CAAA;YACnB,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA,eAAe,KAAK,eAAe,EAAE,EAAE,CAAC,CAAA;QAC5D,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/media/types.d.ts

@@ -0,0 +1,70 @@
+/** Where a media asset sits on the image on a page — never a crop, a hint the pipeline resizes and crops around. */
+export interface FocalPoint {
+    readonly x: number;
+    readonly y: number;
+}
+export declare const MEDIA_KINDS: readonly ['image', 'video', 'audio', 'file'];
+export type MediaKind = (typeof MEDIA_KINDS)[number];
+export interface MediaAsset {
+    readonly id: string;
+    readonly kind: MediaKind;
+    readonly filename: string;
+    readonly mimeType: string;
+    /** Bytes of the stored original. */
+    readonly size: number;
+    /** Known for `image`; null for kinds this store never probes dimensions on. */
+    readonly width: number | null;
+    readonly height: number | null;
+    /**
+     * Empty for a declared-decorative asset (L2-admin.md's own rule: the
+     * decorative checkbox writes `alt=""`, never an invented description).
+     */
+    readonly alt: string;
+    readonly decorative: boolean;
+    /** Why an editor marked it decorative — required exactly when `decorative` is true, kept for accessibility review, never rendered as `alt`. */
+    readonly decorativeJustification: string | null;
+    readonly focal: FocalPoint | null;
+    /** The `StorageDriver` key the original lives under. */
+    readonly storageKey: string;
+    readonly createdAt: string;
+    readonly createdBy: string | null;
+}
+export interface CreateMediaInput {
+    readonly id?: string;
+    readonly kind: MediaKind;
+    readonly filename: string;
+    readonly mimeType: string;
+    readonly size: number;
+    readonly width?: number | null;
+    readonly height?: number | null;
+    readonly alt: string;
+    readonly decorative?: boolean;
+    readonly decorativeJustification?: string | null;
+    readonly focal?: FocalPoint | null;
+    readonly storageKey: string;
+    readonly createdBy?: string | null;
+}
+export interface UpdateMediaInput {
+    readonly alt?: string;
+    readonly decorative?: boolean;
+    readonly decorativeJustification?: string | null;
+    readonly focal?: FocalPoint | null;
+}
+export interface ListMediaOptions {
+    readonly kind?: MediaKind;
+    readonly limit?: number;
+    readonly cursor?: string;
+}
+export interface MediaPage {
+    readonly items: readonly MediaAsset[];
+    readonly nextCursor: string | null;
+    readonly hasMore: boolean;
+}
+export interface MediaStore {
+    create(input: CreateMediaInput): Promise<MediaAsset>;
+    get(id: string): Promise<MediaAsset | null>;
+    list(options?: ListMediaOptions): Promise<MediaPage>;
+    update(id: string, input: UpdateMediaInput): Promise<MediaAsset>;
+    delete(id: string): Promise<void>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/media/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/media/types.ts"],"names":[],"mappings":"AAAA,oHAAoH;AACpH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,eAAO,MAAM,WAAW,YAAI,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAU,CAAA;AACvE,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAA;AAEpD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,oCAAoC;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,+EAA+E;IAC/E,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B;;;OAGG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAA;IAC5B,+IAA+I;IAC/I,QAAQ,CAAC,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/C,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,CAAA;IACjC,wDAAwD;IACxD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAClC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAA;IAC7B,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAChD,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,GAAG,IAAI,CAAA;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACnC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAA;IAC7B,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAChD,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,GAAG,IAAI,CAAA;CACnC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAA;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACzB;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,KAAK,EAAE,SAAS,UAAU,EAAE,CAAA;IACrC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAC1B;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;IACpD,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAA;IAC3C,IAAI,CAAC,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACpD,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;IAChE,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAClC"}

package/dist/media/types.js

@@ -0,0 +1,2 @@
+export const MEDIA_KINDS = ['image', 'video', 'audio', 'file'];
+//# sourceMappingURL=types.js.map

package/dist/media/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/media/types.ts"],"names":[],"mappings":"AAMA,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAU,CAAA"}

package/dist/migrations/index.d.ts

@@ -0,0 +1,4 @@
+export type { Migrator, MigratorOptions } from './migrator.js';
+export { createMigrator } from './migrator.js';
+export type { Migration, MigrationOutcome, MigrationRecord, MigrationStatus, RollbackOptions, RunOptions, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/migrations/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/migrations/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAC9C,YAAY,EACV,SAAS,EACT,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,eAAe,EACf,UAAU,GACX,MAAM,YAAY,CAAA"}

package/dist/migrations/index.js

@@ -0,0 +1,2 @@
+export { createMigrator } from './migrator.js';
+//# sourceMappingURL=index.js.map

package/dist/migrations/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/migrations/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA"}