@ddd-ts-kit/kernel 0.8.0 → 0.9.0

package/dist/application/files/is-file-key.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Whether a key is one the storages accept: segments separated by `/`, each made of letters,
+ * digits, dots, hyphens and underscores and none starting with a dot, so a key can never climb
+ * out of its directory or prefix (`..`), be absolute, or hide a file.
+ */
+export declare function isFileKey(key: string): boolean;
+//# sourceMappingURL=is-file-key.d.ts.map

package/dist/application/files/is-file-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"is-file-key.d.ts","sourceRoot":"","sources":["../../../src/application/files/is-file-key.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAE9C"}

package/dist/application/files/is-file-key.js

@@ -0,0 +1,11 @@
+const SEGMENT = /^[A-Za-z0-9_-][A-Za-z0-9._-]*$/;
+const MAX_KEY_LENGTH = 1_024;
+/**
+ * Whether a key is one the storages accept: segments separated by `/`, each made of letters,
+ * digits, dots, hyphens and underscores and none starting with a dot, so a key can never climb
+ * out of its directory or prefix (`..`), be absolute, or hide a file.
+ */
+export function isFileKey(key) {
+    return key.length > 0 && key.length <= MAX_KEY_LENGTH && key.split('/').every((segment) => SEGMENT.test(segment));
+}
+//# sourceMappingURL=is-file-key.js.map

package/dist/application/files/is-file-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"is-file-key.js","sourceRoot":"","sources":["../../../src/application/files/is-file-key.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,GAAG,gCAAgC,CAAC;AACjD,MAAM,cAAc,GAAG,KAAK,CAAC;AAE7B;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,IAAI,cAAc,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AACpH,CAAC"}

package/dist/application/files/listed-file.d.ts

@@ -0,0 +1,7 @@
+/** One file of a listing: enough to decide what to purge, without a request per file. */
+export interface ListedFile {
+    readonly key: string;
+    readonly size: number;
+    readonly lastModified: Date;
+}
+//# sourceMappingURL=listed-file.d.ts.map

package/dist/application/files/listed-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"listed-file.d.ts","sourceRoot":"","sources":["../../../src/application/files/listed-file.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC;CAC7B"}

package/dist/application/files/listed-file.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=listed-file.js.map

package/dist/application/files/listed-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"listed-file.js","sourceRoot":"","sources":["../../../src/application/files/listed-file.ts"],"names":[],"mappings":""}

package/dist/application/files/max-signed-url-seconds.d.ts

@@ -0,0 +1,3 @@
+/** The longest a signed link may live: one hour. Five minutes is a sensible default for a download. */
+export declare const MAX_SIGNED_URL_SECONDS = 3600;
+//# sourceMappingURL=max-signed-url-seconds.d.ts.map

package/dist/application/files/max-signed-url-seconds.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"max-signed-url-seconds.d.ts","sourceRoot":"","sources":["../../../src/application/files/max-signed-url-seconds.ts"],"names":[],"mappings":"AAAA,uGAAuG;AACvG,eAAO,MAAM,sBAAsB,OAAQ,CAAC"}

package/dist/application/files/max-signed-url-seconds.js

@@ -0,0 +1,3 @@
+/** The longest a signed link may live: one hour. Five minutes is a sensible default for a download. */
+export const MAX_SIGNED_URL_SECONDS = 3_600;
+//# sourceMappingURL=max-signed-url-seconds.js.map

package/dist/application/files/max-signed-url-seconds.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"max-signed-url-seconds.js","sourceRoot":"","sources":["../../../src/application/files/max-signed-url-seconds.ts"],"names":[],"mappings":"AAAA,uGAAuG;AACvG,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,CAAC"}

package/dist/application/files/media-type-of.d.ts

@@ -0,0 +1,3 @@
+/** `Image/PNG; charset=binary` is `image/png`: the essence of a media type, which is what is compared. */
+export declare function mediaTypeOf(contentType: string): string;
+//# sourceMappingURL=media-type-of.d.ts.map

package/dist/application/files/media-type-of.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"media-type-of.d.ts","sourceRoot":"","sources":["../../../src/application/files/media-type-of.ts"],"names":[],"mappings":"AAAA,0GAA0G;AAC1G,wBAAgB,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEvD"}

package/dist/application/files/media-type-of.js

@@ -0,0 +1,5 @@
+/** `Image/PNG; charset=binary` is `image/png`: the essence of a media type, which is what is compared. */
+export function mediaTypeOf(contentType) {
+    return (contentType.split(';')[0] ?? '').trim().toLowerCase();
+}
+//# sourceMappingURL=media-type-of.js.map

package/dist/application/files/media-type-of.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"media-type-of.js","sourceRoot":"","sources":["../../../src/application/files/media-type-of.ts"],"names":[],"mappings":"AAAA,0GAA0G;AAC1G,MAAM,UAAU,WAAW,CAAC,WAAmB;IAC7C,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAChE,CAAC"}

package/dist/application/files/pending-upload-link.d.ts

@@ -0,0 +1,10 @@
+import type { PendingUpload } from './pending-upload.js';
+import type { SignedUpload } from './signed-upload.js';
+/** What `FileStaging.uploadUrl` answers: the request for the client, and the grant for the server to keep. */
+export interface PendingUploadLink {
+    /** Handed to the client. */
+    readonly link: SignedUpload;
+    /** Kept on the server, on the aggregate that awaits the file; never handed to the client to send back. */
+    readonly pending: PendingUpload;
+}
+//# sourceMappingURL=pending-upload-link.d.ts.map

package/dist/application/files/pending-upload-link.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-upload-link.d.ts","sourceRoot":"","sources":["../../../src/application/files/pending-upload-link.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,8GAA8G;AAC9G,MAAM,WAAW,iBAAiB;IAChC,4BAA4B;IAC5B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,0GAA0G;IAC1G,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;CACjC"}

package/dist/application/files/pending-upload-link.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=pending-upload-link.js.map

package/dist/application/files/pending-upload-link.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-upload-link.js","sourceRoot":"","sources":["../../../src/application/files/pending-upload-link.ts"],"names":[],"mappings":""}

package/dist/application/files/pending-upload.d.ts

@@ -0,0 +1,15 @@
+import type { ContentExpectation } from './content-expectation.js';
+/**
+ * What the server granted when it signed a link to upload a file straight to the storage: the
+ * key, the size cap and the media types. Recorded on the server, on the aggregate that awaits
+ * the file, by the command that signed the link; the command that confirms the upload reads it
+ * back from there, never from what the client sends, so a client can neither choose the key it
+ * confirms nor raise the cap.
+ */
+export interface PendingUpload extends ContentExpectation {
+    /** The final key, generated by `FileKeys`; the file waits under its staged key. */
+    readonly key: string;
+    /** In bytes: what `FileStaging.confirm` accepts at most. */
+    readonly maxBytes: number;
+}
+//# sourceMappingURL=pending-upload.d.ts.map

package/dist/application/files/pending-upload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-upload.d.ts","sourceRoot":"","sources":["../../../src/application/files/pending-upload.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAEnE;;;;;;GAMG;AACH,MAAM,WAAW,aAAc,SAAQ,kBAAkB;IACvD,mFAAmF;IACnF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,4DAA4D;IAC5D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B"}

package/dist/application/files/pending-upload.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=pending-upload.js.map

package/dist/application/files/pending-upload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-upload.js","sourceRoot":"","sources":["../../../src/application/files/pending-upload.ts"],"names":[],"mappings":""}

package/dist/application/files/put-options.d.ts

@@ -0,0 +1,7 @@
+export interface PutOptions {
+    /** The media type the content was verified to be. */
+    readonly mediaType: string;
+    /** Beyond it the write fails with `FILE_TOO_LARGE` and leaves nothing under the key. */
+    readonly maxBytes?: number;
+}
+//# sourceMappingURL=put-options.d.ts.map

package/dist/application/files/put-options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"put-options.d.ts","sourceRoot":"","sources":["../../../src/application/files/put-options.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,UAAU;IACzB,qDAAqD;IACrD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,wFAAwF;IACxF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B"}

package/dist/application/files/put-options.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=put-options.js.map

package/dist/application/files/put-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"put-options.js","sourceRoot":"","sources":["../../../src/application/files/put-options.ts"],"names":[],"mappings":""}

package/dist/application/files/received-file.d.ts

@@ -0,0 +1,15 @@
+import type { Readable } from 'node:stream';
+/**
+ * A file received from a client, still streaming: what a controller hands to a command, and the
+ * handler to `FileStaging.stage`. Nothing of it is trusted but its bytes, which the edge checks
+ * against the declared media type as they stream.
+ */
+export interface ReceivedFile {
+    /** The name the client gave: shown back to a person, never a key or a path. */
+    readonly fileName: string;
+    /** The media type the client declared, which the first bytes must prove. */
+    readonly mediaType: string;
+    /** The content, to consume once. It fails on its way with `FILE_TOO_LARGE` or `UNSUPPORTED_MEDIA_TYPE`. */
+    readonly stream: Readable;
+}
+//# sourceMappingURL=received-file.d.ts.map

package/dist/application/files/received-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"received-file.d.ts","sourceRoot":"","sources":["../../../src/application/files/received-file.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5C;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,+EAA+E;IAC/E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,2GAA2G;IAC3G,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;CAC3B"}

package/dist/application/files/received-file.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=received-file.js.map

package/dist/application/files/received-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"received-file.js","sourceRoot":"","sources":["../../../src/application/files/received-file.ts"],"names":[],"mappings":""}

package/dist/application/files/scan-verdict.d.ts

@@ -0,0 +1,8 @@
+/** What a `FileScanner` concludes: accepted, or refused with a stable reason (`INFECTED`, `ENCRYPTED_ARCHIVE`). */
+export type ScanVerdict = {
+    readonly accepted: true;
+} | {
+    readonly accepted: false;
+    readonly reason: string;
+};
+//# sourceMappingURL=scan-verdict.d.ts.map

package/dist/application/files/scan-verdict.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan-verdict.d.ts","sourceRoot":"","sources":["../../../src/application/files/scan-verdict.ts"],"names":[],"mappings":"AAAA,mHAAmH;AACnH,MAAM,MAAM,WAAW,GAAG;IAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC"}

package/dist/application/files/scan-verdict.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=scan-verdict.js.map

package/dist/application/files/scan-verdict.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan-verdict.js","sourceRoot":"","sources":["../../../src/application/files/scan-verdict.ts"],"names":[],"mappings":""}

package/dist/application/files/signature-of.d.ts

@@ -0,0 +1,3 @@
+/** The binary format the first bytes of a content announce, or `undefined` when none is recognised. */
+export declare function signatureOf(head: Uint8Array): string | undefined;
+//# sourceMappingURL=signature-of.d.ts.map

package/dist/application/files/signature-of.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature-of.d.ts","sourceRoot":"","sources":["../../../src/application/files/signature-of.ts"],"names":[],"mappings":"AAuBA,uGAAuG;AACvG,wBAAgB,WAAW,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,SAAS,CAGhE"}

package/dist/application/files/signature-of.js

@@ -0,0 +1,28 @@
+/** The leading bytes of the binary formats the kit recognises, written as latin1 strings. */
+const SIGNATURES = [
+    { mediaType: 'application/pdf', parts: [[0, '%PDF-']] },
+    { mediaType: 'image/png', parts: [[0, '\x89PNG\r\n\x1a\n']] },
+    { mediaType: 'image/jpeg', parts: [[0, '\xff\xd8\xff']] },
+    { mediaType: 'image/gif', parts: [[0, 'GIF8']] },
+    {
+        mediaType: 'image/webp',
+        parts: [
+            [0, 'RIFF'],
+            [8, 'WEBP'],
+        ],
+    },
+    { mediaType: 'application/zip', parts: [[0, 'PK\x03\x04']] },
+    { mediaType: 'application/gzip', parts: [[0, '\x1f\x8b']] },
+];
+/** The binary format the first bytes of a content announce, or `undefined` when none is recognised. */
+export function signatureOf(head) {
+    return SIGNATURES.find((signature) => signature.parts.every(([offset, bytes]) => startsWith(head, offset, bytes)))
+        ?.mediaType;
+}
+function startsWith(head, offset, bytes) {
+    if (head.length < offset + bytes.length) {
+        return false;
+    }
+    return Array.from({ length: bytes.length }, (_, index) => index).every((index) => head[offset + index] === bytes.charCodeAt(index));
+}
+//# sourceMappingURL=signature-of.js.map

package/dist/application/files/signature-of.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature-of.js","sourceRoot":"","sources":["../../../src/application/files/signature-of.ts"],"names":[],"mappings":"AAMA,6FAA6F;AAC7F,MAAM,UAAU,GAAyB;IACvC,EAAE,SAAS,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,EAAE;IACvD,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC,EAAE;IAC7D,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,EAAE;IACzD,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,EAAE;IAChD;QACE,SAAS,EAAE,YAAY;QACvB,KAAK,EAAE;YACL,CAAC,CAAC,EAAE,MAAM,CAAC;YACX,CAAC,CAAC,EAAE,MAAM,CAAC;SACZ;KACF;IACD,EAAE,SAAS,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,EAAE;IAC5D,EAAE,SAAS,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,EAAE;CAC5D,CAAC;AAEF,uGAAuG;AACvG,MAAM,UAAU,WAAW,CAAC,IAAgB;IAC1C,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QAChH,EAAE,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,UAAU,CAAC,IAAgB,EAAE,MAAc,EAAE,KAAa;IACjE,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,CACpE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAC5D,CAAC;AACJ,CAAC"}

package/dist/application/files/signed-download.d.ts

@@ -0,0 +1,6 @@
+import type { FileContent } from './file-content.js';
+/** A download a signed link granted: the file, and the name to offer the browser when one was signed. */
+export interface SignedDownload extends FileContent {
+    readonly fileName?: string;
+}
+//# sourceMappingURL=signed-download.d.ts.map

package/dist/application/files/signed-download.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signed-download.d.ts","sourceRoot":"","sources":["../../../src/application/files/signed-download.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD,yGAAyG;AACzG,MAAM,WAAW,cAAe,SAAQ,WAAW;IACjD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B"}

package/dist/application/files/signed-download.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=signed-download.js.map

package/dist/application/files/signed-download.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signed-download.js","sourceRoot":"","sources":["../../../src/application/files/signed-download.ts"],"names":[],"mappings":""}

package/dist/application/files/signed-upload.d.ts

@@ -0,0 +1,9 @@
+/** What a client needs to send a file straight to the storage: the request to make, and until when. */
+export interface SignedUpload {
+    readonly url: string;
+    readonly method: 'PUT';
+    /** To send as they are: the signature covers them. */
+    readonly headers: Readonly<Record<string, string>>;
+    readonly expiresAt: Date;
+}
+//# sourceMappingURL=signed-upload.d.ts.map

package/dist/application/files/signed-upload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signed-upload.d.ts","sourceRoot":"","sources":["../../../src/application/files/signed-upload.ts"],"names":[],"mappings":"AAAA,uGAAuG;AACvG,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;IACvB,sDAAsD;IACtD,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;CAC1B"}

package/dist/application/files/signed-upload.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=signed-upload.js.map

package/dist/application/files/signed-upload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signed-upload.js","sourceRoot":"","sources":["../../../src/application/files/signed-upload.ts"],"names":[],"mappings":""}

package/dist/application/files/signed-url.d.ts

@@ -0,0 +1,6 @@
+/** A link that grants one action on one file until it expires, without any other credential. */
+export interface SignedUrl {
+    readonly url: string;
+    readonly expiresAt: Date;
+}
+//# sourceMappingURL=signed-url.d.ts.map

package/dist/application/files/signed-url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signed-url.d.ts","sourceRoot":"","sources":["../../../src/application/files/signed-url.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;CAC1B"}

package/dist/application/files/signed-url.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=signed-url.js.map

package/dist/application/files/signed-url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signed-url.js","sourceRoot":"","sources":["../../../src/application/files/signed-url.ts"],"names":[],"mappings":""}

package/dist/application/files/staged-key-of.d.ts

@@ -0,0 +1,5 @@
+/** Where a file waits until the transaction that references it commits: nothing reads there, and no final key starts with it. */
+export declare const STAGING_PREFIX = "staging/";
+/** The staged key of a final key. */
+export declare function stagedKeyOf(key: string): string;
+//# sourceMappingURL=staged-key-of.d.ts.map

package/dist/application/files/staged-key-of.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"staged-key-of.d.ts","sourceRoot":"","sources":["../../../src/application/files/staged-key-of.ts"],"names":[],"mappings":"AAAA,iIAAiI;AACjI,eAAO,MAAM,cAAc,aAAa,CAAC;AAEzC,qCAAqC;AACrC,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE/C"}

package/dist/application/files/staged-key-of.js

@@ -0,0 +1,7 @@
+/** Where a file waits until the transaction that references it commits: nothing reads there, and no final key starts with it. */
+export const STAGING_PREFIX = 'staging/';
+/** The staged key of a final key. */
+export function stagedKeyOf(key) {
+    return `${STAGING_PREFIX}${key}`;
+}
+//# sourceMappingURL=staged-key-of.js.map

package/dist/application/files/staged-key-of.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"staged-key-of.js","sourceRoot":"","sources":["../../../src/application/files/staged-key-of.ts"],"names":[],"mappings":"AAAA,iIAAiI;AACjI,MAAM,CAAC,MAAM,cAAc,GAAG,UAAU,CAAC;AAEzC,qCAAqC;AACrC,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,OAAO,GAAG,cAAc,GAAG,GAAG,EAAE,CAAC;AACnC,CAAC"}

package/dist/application/files/stored-file.d.ts

@@ -0,0 +1,16 @@
+/**
+ * The reference to a file that an aggregate keeps, and all it keeps: the content lives in a
+ * `FileStorage`, never in the database. It names no provider, no bucket and no URL, so the
+ * connector can change without touching a row.
+ */
+export interface StoredFile {
+    /** Generated by the server (`FileKeys`), never taken from the user. */
+    readonly key: string;
+    /** In bytes. */
+    readonly size: number;
+    /** Verified on the content, not only on the name the client gave. */
+    readonly mediaType: string;
+    /** `sha256:<hex>` of the content, computed while it streamed. */
+    readonly checksum: string;
+}
+//# sourceMappingURL=stored-file.d.ts.map

package/dist/application/files/stored-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stored-file.d.ts","sourceRoot":"","sources":["../../../src/application/files/stored-file.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,uEAAuE;IACvE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,gBAAgB;IAChB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,qEAAqE;IACrE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,iEAAiE;IACjE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B"}

package/dist/application/files/stored-file.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=stored-file.js.map

package/dist/application/files/stored-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stored-file.js","sourceRoot":"","sources":["../../../src/application/files/stored-file.ts"],"names":[],"mappings":""}

package/dist/application/files/upload-url-options.d.ts

@@ -0,0 +1,12 @@
+export interface UploadUrlOptions {
+    /** Short: at most `MAX_SIGNED_URL_SECONDS`. */
+    readonly expiresInSeconds: number;
+    /** The media type the client must send, as the `content-type` the signature covers. */
+    readonly mediaType: string;
+    /**
+     * In bytes. The storages the application serves refuse a larger upload; a presigned link of
+     * an object store cannot cap it, so `FileStaging.confirm` checks it again in every case.
+     */
+    readonly maxBytes: number;
+}
+//# sourceMappingURL=upload-url-options.d.ts.map

package/dist/application/files/upload-url-options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload-url-options.d.ts","sourceRoot":"","sources":["../../../src/application/files/upload-url-options.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,gBAAgB;IAC/B,+CAA+C;IAC/C,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,uFAAuF;IACvF,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B"}

package/dist/application/files/upload-url-options.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=upload-url-options.js.map

package/dist/application/files/upload-url-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload-url-options.js","sourceRoot":"","sources":["../../../src/application/files/upload-url-options.ts"],"names":[],"mappings":""}

package/dist/application/ports/file-keys.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Names the files: a key is always generated on the server, never built from what a user sent
+ * (a file name, a path), so a request can neither choose where it writes nor guess another key.
+ */
+export declare abstract class FileKeys {
+    /** A new key under `area`, a key prefix of the project such as `appointment-documents`. */
+    abstract next(area: string): string;
+}
+//# sourceMappingURL=file-keys.d.ts.map

package/dist/application/ports/file-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-keys.d.ts","sourceRoot":"","sources":["../../../src/application/ports/file-keys.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,8BAAsB,QAAQ;IAK5B,2FAA2F;IAC3F,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;CACrC"}

package/dist/application/ports/file-keys.js

@@ -0,0 +1,10 @@
+/**
+ * Names the files: a key is always generated on the server, never built from what a user sent
+ * (a file name, a path), so a request can neither choose where it writes nor guess another key.
+ */
+export class FileKeys {
+    static {
+        Object.defineProperty(this, 'tokenKey', { value: 'kernel.FileKeys' });
+    }
+}
+//# sourceMappingURL=file-keys.js.map

package/dist/application/ports/file-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-keys.js","sourceRoot":"","sources":["../../../src/application/ports/file-keys.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,OAAgB,QAAQ;IAC5B;QACE,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;IACxE,CAAC;CAIF"}

package/dist/application/ports/file-scanner.d.ts

@@ -0,0 +1,13 @@
+import type { Readable } from 'node:stream';
+import type { ScanVerdict } from '../files/scan-verdict.js';
+import type { StoredFile } from '../files/stored-file.js';
+/**
+ * The check a file passes before it is accepted: an antivirus (ClamAV over its socket, a cloud
+ * scanning service), a parser that refuses a malformed document, a policy on archives. Called on
+ * the staged file, so a refused file is never visible. `open` reads the content again; a scanner
+ * that needs none of it does not call it.
+ */
+export declare abstract class FileScanner {
+    abstract scan(file: StoredFile, open: () => Promise<Readable>): Promise<ScanVerdict>;
+}
+//# sourceMappingURL=file-scanner.d.ts.map

package/dist/application/ports/file-scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-scanner.d.ts","sourceRoot":"","sources":["../../../src/application/ports/file-scanner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAE1D;;;;;GAKG;AACH,8BAAsB,WAAW;IAK/B,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;CACtF"}

package/dist/application/ports/file-scanner.js

@@ -0,0 +1,12 @@
+/**
+ * The check a file passes before it is accepted: an antivirus (ClamAV over its socket, a cloud
+ * scanning service), a parser that refuses a malformed document, a policy on archives. Called on
+ * the staged file, so a refused file is never visible. `open` reads the content again; a scanner
+ * that needs none of it does not call it.
+ */
+export class FileScanner {
+    static {
+        Object.defineProperty(this, 'tokenKey', { value: 'kernel.FileScanner' });
+    }
+}
+//# sourceMappingURL=file-scanner.js.map

package/dist/application/ports/file-scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-scanner.js","sourceRoot":"","sources":["../../../src/application/ports/file-scanner.ts"],"names":[],"mappings":"AAIA;;;;;GAKG;AACH,MAAM,OAAgB,WAAW;IAC/B;QACE,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAC3E,CAAC;CAGF"}

package/dist/application/ports/file-storage.d.ts

@@ -0,0 +1,40 @@
+import type { DownloadUrlOptions } from '../files/download-url-options.js';
+import type { FileContent } from '../files/file-content.js';
+import type { FileMetadata } from '../files/file-metadata.js';
+import type { FileSource } from '../files/file-source.js';
+import type { ListedFile } from '../files/listed-file.js';
+import type { PutOptions } from '../files/put-options.js';
+import type { SignedUpload } from '../files/signed-upload.js';
+import type { SignedUrl } from '../files/signed-url.js';
+import type { StoredFile } from '../files/stored-file.js';
+import type { UploadUrlOptions } from '../files/upload-url-options.js';
+/**
+ * Where the content of files lives: an object store, a directory, the memory of a test. Never
+ * the database, whose backups, replicas and memory are sized for rows. Content always streams in
+ * and out: no method takes or returns a whole file. A key that `isFileKey` refuses is refused
+ * with `INVALID_FILE_KEY` before anything is touched.
+ *
+ * A write is not part of a transaction: see `FileStaging` for the order that keeps the database
+ * and the storage consistent.
+ */
+export declare abstract class FileStorage {
+    /** Writes the content under the key, replacing what was there; rejects with `FILE_TOO_LARGE` beyond `maxBytes`, leaving nothing. */
+    abstract put(key: string, content: FileSource, options: PutOptions): Promise<StoredFile>;
+    /** The content as a stream, or `undefined` when nothing is stored under the key. */
+    abstract get(key: string): Promise<FileContent | undefined>;
+    /** What is known of the file without reading it, or `undefined`: how a caller asks whether it exists. */
+    abstract stat(key: string): Promise<FileMetadata | undefined>;
+    /** Removes the file; removing a file that is not there is not an error. */
+    abstract delete(key: string): Promise<void>;
+    /** Rejects with `FILE_NOT_FOUND` when nothing is stored under `from`. */
+    abstract copy(from: string, to: string): Promise<void>;
+    /** Rejects with `FILE_NOT_FOUND` when nothing is stored under `from`. */
+    abstract move(from: string, to: string): Promise<void>;
+    /** Every file whose key starts with the prefix, in no promised order. */
+    abstract list(prefix: string): AsyncIterable<ListedFile>;
+    /** A link that downloads the file until it expires. Signing does not check that the file exists. */
+    abstract signedDownloadUrl(key: string, options: DownloadUrlOptions): Promise<SignedUrl>;
+    /** A request that uploads one file under the key, straight to the storage, until it expires. */
+    abstract signedUploadUrl(key: string, options: UploadUrlOptions): Promise<SignedUpload>;
+}
+//# sourceMappingURL=file-storage.d.ts.map

package/dist/application/ports/file-storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-storage.d.ts","sourceRoot":"","sources":["../../../src/application/ports/file-storage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAEvE;;;;;;;;GAQG;AACH,8BAAsB,WAAW;IAK/B,oIAAoI;IACpI,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAEzF,oFAAoF;IACpF,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAAC;IAE5D,yGAAyG;IACzG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAAC;IAE9D,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE5C,yEAAyE;IACzE,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvD,yEAAyE;IACzE,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvD,yEAAyE;IACzE,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IAEzD,oGAAoG;IACpG,QAAQ,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAEzF,gGAAgG;IAChG,QAAQ,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CACzF"}

package/dist/application/ports/file-storage.js

@@ -0,0 +1,15 @@
+/**
+ * Where the content of files lives: an object store, a directory, the memory of a test. Never
+ * the database, whose backups, replicas and memory are sized for rows. Content always streams in
+ * and out: no method takes or returns a whole file. A key that `isFileKey` refuses is refused
+ * with `INVALID_FILE_KEY` before anything is touched.
+ *
+ * A write is not part of a transaction: see `FileStaging` for the order that keeps the database
+ * and the storage consistent.
+ */
+export class FileStorage {
+    static {
+        Object.defineProperty(this, 'tokenKey', { value: 'kernel.FileStorage' });
+    }
+}
+//# sourceMappingURL=file-storage.js.map

package/dist/application/ports/file-storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-storage.js","sourceRoot":"","sources":["../../../src/application/ports/file-storage.ts"],"names":[],"mappings":"AAWA;;;;;;;;GAQG;AACH,MAAM,OAAgB,WAAW;IAC/B;QACE,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAC3E,CAAC;CA4BF"}

package/dist/application/ports/served-file-storage.d.ts

@@ -0,0 +1,16 @@
+import type { FileSource } from '../files/file-source.js';
+import type { SignedDownload } from '../files/signed-download.js';
+import type { StoredFile } from '../files/stored-file.js';
+import { FileStorage } from './file-storage.js';
+/**
+ * A storage whose signed links point at the application itself, which must then answer them:
+ * the local directory of development and the memory of the tests. `signedFileRoutes` of
+ * `@ddd-ts-kit/http` mounts that answer. An object store answers its own links and is not one.
+ */
+export declare abstract class ServedFileStorage extends FileStorage {
+    /** The file a download link grants, or `undefined` for a link that is forged, expired or for another action. */
+    abstract openSigned(token: string): Promise<SignedDownload | undefined>;
+    /** Stores what an upload link grants, sent with the media type it was signed for; `undefined` when the link does not grant it. */
+    abstract acceptSigned(token: string, content: FileSource, mediaType: string): Promise<StoredFile | undefined>;
+}
+//# sourceMappingURL=served-file-storage.d.ts.map

package/dist/application/ports/served-file-storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"served-file-storage.d.ts","sourceRoot":"","sources":["../../../src/application/ports/served-file-storage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD;;;;GAIG;AACH,8BAAsB,iBAAkB,SAAQ,WAAW;IAKzD,gHAAgH;IAChH,QAAQ,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;IAExE,kIAAkI;IAClI,QAAQ,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC;CAC/G"}

package/dist/application/ports/served-file-storage.js

@@ -0,0 +1,12 @@
+import { FileStorage } from './file-storage.js';
+/**
+ * A storage whose signed links point at the application itself, which must then answer them:
+ * the local directory of development and the memory of the tests. `signedFileRoutes` of
+ * `@ddd-ts-kit/http` mounts that answer. An object store answers its own links and is not one.
+ */
+export class ServedFileStorage extends FileStorage {
+    static {
+        Object.defineProperty(this, 'tokenKey', { value: 'kernel.ServedFileStorage' });
+    }
+}
+//# sourceMappingURL=served-file-storage.js.map

package/dist/application/ports/served-file-storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"served-file-storage.js","sourceRoot":"","sources":["../../../src/application/ports/served-file-storage.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD;;;;GAIG;AACH,MAAM,OAAgB,iBAAkB,SAAQ,WAAW;IACzD;QACE,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;IACjF,CAAC;CAOF"}