@de-otio/trellis 0.4.0

package/dist/lib/notification-preferences-handler.js

@@ -0,0 +1,119 @@
+"use strict";
+/**
+ * Notification Preferences Handler
+ *
+ * Manages user notification preferences. CHILD users cannot edit
+ * their own preferences (must be managed by guardian).
+ * Part of Stream C: Notifications.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NotificationPreferencesHandler = void 0;
+const db_1 = require("../db");
+const logger_1 = require("./logger");
+const DEFAULT_PREFERENCES = {
+    dmEnabled: true,
+    followEnabled: true,
+    digestEnabled: true,
+    systemEnabled: true,
+};
+class NotificationPreferencesHandler {
+    /**
+     * Get notification preferences for a user.
+     * Returns defaults if no stored preferences exist.
+     */
+    async getPreferences(userId, env) {
+        const logger = logger_1.Logger.getInstance(env);
+        const db = (0, db_1.createPrisma)(env);
+        try {
+            const prefs = await db.notificationPreference.findUnique({
+                where: { userId },
+            });
+            const result = prefs
+                ? {
+                    dmEnabled: prefs.dmEnabled,
+                    followEnabled: prefs.followEnabled,
+                    digestEnabled: prefs.digestEnabled,
+                    systemEnabled: prefs.systemEnabled,
+                }
+                : DEFAULT_PREFERENCES;
+            return new Response(JSON.stringify(result), {
+                status: 200,
+                headers: { "content-type": "application/json" },
+            });
+        }
+        catch (error) {
+            logger.error("Error getting notification preferences:", error);
+            return new Response(JSON.stringify({ error: "Failed to get notification preferences" }), { status: 500, headers: { "content-type": "application/json" } });
+        }
+        finally {
+            await db.release();
+        }
+    }
+    /**
+     * Update notification preferences.
+     * CHILD users cannot edit their own preferences (403).
+     */
+    async updatePreferences(userId, ageTier, preferences, env) {
+        const logger = logger_1.Logger.getInstance(env);
+        const db = (0, db_1.createPrisma)(env);
+        try {
+            // CHILD cannot edit own preferences
+            if (ageTier === "CHILD") {
+                return new Response(JSON.stringify({
+                    error: "FORBIDDEN",
+                    message: "Child accounts cannot modify notification preferences",
+                }), { status: 403, headers: { "content-type": "application/json" } });
+            }
+            // Validate preference values are booleans
+            const validKeys = [
+                "dmEnabled",
+                "followEnabled",
+                "digestEnabled",
+                "systemEnabled",
+            ];
+            const updateData = {};
+            for (const key of validKeys) {
+                if (key in preferences) {
+                    const value = preferences[key];
+                    if (typeof value !== "boolean") {
+                        return new Response(JSON.stringify({
+                            error: "VALIDATION_ERROR",
+                            message: `Invalid value for ${key}: must be a boolean`,
+                        }), { status: 400, headers: { "content-type": "application/json" } });
+                    }
+                    updateData[key] = value;
+                }
+            }
+            if (Object.keys(updateData).length === 0) {
+                return new Response(JSON.stringify({
+                    error: "VALIDATION_ERROR",
+                    message: "No valid preference fields provided",
+                }), { status: 400, headers: { "content-type": "application/json" } });
+            }
+            const result = await db.notificationPreference.upsert({
+                where: { userId },
+                create: {
+                    userId,
+                    ...DEFAULT_PREFERENCES,
+                    ...updateData,
+                },
+                update: updateData,
+            });
+            return new Response(JSON.stringify({
+                dmEnabled: result.dmEnabled,
+                followEnabled: result.followEnabled,
+                digestEnabled: result.digestEnabled,
+                systemEnabled: result.systemEnabled,
+            }), { status: 200, headers: { "content-type": "application/json" } });
+        }
+        catch (error) {
+            logger.error("Error updating notification preferences:", error);
+            return new Response(JSON.stringify({ error: "Failed to update notification preferences" }), { status: 500, headers: { "content-type": "application/json" } });
+        }
+        finally {
+            await db.release();
+        }
+    }
+}
+exports.NotificationPreferencesHandler = NotificationPreferencesHandler;
+//# sourceMappingURL=notification-preferences-handler.js.map

package/dist/lib/notification-preferences-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification-preferences-handler.js","sourceRoot":"","sources":["../../src/lib/notification-preferences-handler.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;AAGH,8BAAqC;AACrC,qCAAkC;AASlC,MAAM,mBAAmB,GAAgC;IACvD,SAAS,EAAE,IAAI;IACf,aAAa,EAAE,IAAI;IACnB,aAAa,EAAE,IAAI;IACnB,aAAa,EAAE,IAAI;CACpB,CAAC;AAEF,MAAa,8BAA8B;IACzC;;;OAGG;IACH,KAAK,CAAC,cAAc,CAAC,MAAc,EAAE,GAAQ;QAC3C,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,EAAE,GAAG,IAAA,iBAAY,EAAC,GAAG,CAAC,CAAC;QAE7B,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,sBAAsB,CAAC,UAAU,CAAC;gBACvD,KAAK,EAAE,EAAE,MAAM,EAAE;aAClB,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,KAAK;gBAClB,CAAC,CAAC;oBACE,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;oBAClC,aAAa,EAAE,KAAK,CAAC,aAAa;oBAClC,aAAa,EAAE,KAAK,CAAC,aAAa;iBACnC;gBACH,CAAC,CAAC,mBAAmB,CAAC;YAExB,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE;gBAC1C,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAChD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,KAAK,CAAC,CAAC;YAC/D,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC,EACnE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,iBAAiB,CACrB,MAAc,EACd,OAAe,EACf,WAAiD,EACjD,GAAQ;QAER,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,EAAE,GAAG,IAAA,iBAAY,EAAC,GAAG,CAAC,CAAC;QAE7B,IAAI,CAAC;YACH,oCAAoC;YACpC,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;gBACxB,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;oBACb,KAAK,EAAE,WAAW;oBAClB,OAAO,EAAE,uDAAuD;iBACjE,CAAC,EACF,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;YAED,0CAA0C;YAC1C,MAAM,SAAS,GAA0C;gBACvD,WAAW;gBACX,eAAe;gBACf,eAAe;gBACf,eAAe;aAChB,CAAC;YAEF,MAAM,UAAU,GAA4B,EAAE,CAAC;YAC/C,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;gBAC5B,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC;oBACvB,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;oBAC/B,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;wBAC/B,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;4BACb,KAAK,EAAE,kBAAkB;4BACzB,OAAO,EAAE,qBAAqB,GAAG,qBAAqB;yBACvD,CAAC,EACF,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;oBACJ,CAAC;oBACD,UAAU,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;gBAC1B,CAAC;YACH,CAAC;YAED,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzC,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;oBACb,KAAK,EAAE,kBAAkB;oBACzB,OAAO,EAAE,qCAAqC;iBAC/C,CAAC,EACF,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,sBAAsB,CAAC,MAAM,CAAC;gBACpD,KAAK,EAAE,EAAE,MAAM,EAAE;gBACjB,MAAM,EAAE;oBACN,MAAM;oBACN,GAAG,mBAAmB;oBACtB,GAAG,UAAU;iBACd;gBACD,MAAM,EAAE,UAAU;aACnB,CAAC,CAAC;YAEH,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;gBACb,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,aAAa,EAAE,MAAM,CAAC,aAAa;aACpC,CAAC,EACF,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,0CAA0C,EAAE,KAAK,CAAC,CAAC;YAChE,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,2CAA2C,EAAE,CAAC,EACtE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;CACF;AA/HD,wEA+HC"}

package/dist/lib/openai-budget.d.ts

@@ -0,0 +1,45 @@
+/**
+ * OpenAI Request Budget
+ *
+ * Tracks OpenAI API calls per hour/day using atomic DynamoDB counters.
+ * When the budget is exceeded, returns false so callers can skip the API call.
+ * Fail-open: if DynamoDB is unavailable, allows the call through.
+ */
+export interface OpenAiBudgetConfig {
+    enabled: boolean;
+    maxRequestsPerHour: number;
+    maxRequestsPerDay: number;
+}
+export interface OpenAiBudgetStatus {
+    hourlyUsed: number;
+    hourlyLimit: number;
+    dailyUsed: number;
+    dailyLimit: number;
+    exceeded: boolean;
+}
+export declare class OpenAiBudget {
+    private config;
+    private logger;
+    constructor(config: OpenAiBudgetConfig);
+    /**
+     * Try to consume one OpenAI request from the budget.
+     * Returns true if the call is allowed, false if budget is exceeded.
+     * Fail-open: returns true on any DynamoDB error.
+     */
+    tryConsume(): Promise<boolean>;
+    /**
+     * Read-only status check for the health/admin endpoint.
+     * Does not increment counters.
+     */
+    getStatus(): Promise<OpenAiBudgetStatus>;
+    /**
+     * Atomically increment a counter in DynamoDB using ADD expression.
+     * Returns the post-increment value.
+     */
+    private atomicIncrement;
+    /**
+     * Read a counter value without incrementing.
+     */
+    private readCounter;
+}
+//# sourceMappingURL=openai-budget.d.ts.map

package/dist/lib/openai-budget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai-budget.d.ts","sourceRoot":"","sources":["../../src/lib/openai-budget.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAQH,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;CACnB;AASD,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,MAAM,CAAwB;gBAE1B,MAAM,EAAE,kBAAkB;IAItC;;;;OAIG;IACG,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC;IAoCpC;;;OAGG;IACG,SAAS,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAyC9C;;;OAGG;YACW,eAAe;IAoB7B;;OAEG;YACW,WAAW;CAe1B"}

package/dist/lib/openai-budget.js

@@ -0,0 +1,175 @@
+"use strict";
+/**
+ * OpenAI Request Budget
+ *
+ * Tracks OpenAI API calls per hour/day using atomic DynamoDB counters.
+ * When the budget is exceeded, returns false so callers can skip the API call.
+ * Fail-open: if DynamoDB is unavailable, allows the call through.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OpenAiBudget = void 0;
+const client_dynamodb_1 = require("@aws-sdk/client-dynamodb");
+const logger_1 = require("./logger");
+const dynamoClient = new client_dynamodb_1.DynamoDBClient({
+    region: process.env.AWS_REGION || "us-east-1",
+    ...(process.env.DYNAMODB_ENDPOINT ? { endpoint: process.env.DYNAMODB_ENDPOINT } : {}),
+});
+const TABLE_NAME = process.env.DYNAMODB_TABLE || `${process.env.STAGE || "dev"}-trellis`;
+class OpenAiBudget {
+    config;
+    logger = logger_1.Logger.getInstance();
+    constructor(config) {
+        this.config = config;
+    }
+    /**
+     * Try to consume one OpenAI request from the budget.
+     * Returns true if the call is allowed, false if budget is exceeded.
+     * Fail-open: returns true on any DynamoDB error.
+     */
+    async tryConsume() {
+        if (!this.config.enabled)
+            return true;
+        try {
+            const now = new Date();
+            const hourlyKey = `openai:hourly:${now.toISOString().slice(0, 13)}`;
+            const dailyKey = `openai:daily:${now.toISOString().slice(0, 10)}`;
+            // Atomically increment hourly counter
+            const hourlyCount = await this.atomicIncrement(hourlyKey, 7200);
+            if (hourlyCount > this.config.maxRequestsPerHour) {
+                this.logger.warn("[OpenAiBudget] Hourly budget exceeded", {
+                    hourlyCount,
+                    limit: this.config.maxRequestsPerHour,
+                });
+                return false;
+            }
+            // Atomically increment daily counter
+            const dailyCount = await this.atomicIncrement(dailyKey, 172800);
+            if (dailyCount > this.config.maxRequestsPerDay) {
+                this.logger.warn("[OpenAiBudget] Daily budget exceeded", {
+                    dailyCount,
+                    limit: this.config.maxRequestsPerDay,
+                });
+                return false;
+            }
+            return true;
+        }
+        catch (error) {
+            // Fail-open: if DynamoDB is down, allow the call
+            this.logger.warn("[OpenAiBudget] Counter error, failing open", { error });
+            return true;
+        }
+    }
+    /**
+     * Read-only status check for the health/admin endpoint.
+     * Does not increment counters.
+     */
+    async getStatus() {
+        if (!this.config.enabled) {
+            return {
+                hourlyUsed: 0,
+                hourlyLimit: this.config.maxRequestsPerHour,
+                dailyUsed: 0,
+                dailyLimit: this.config.maxRequestsPerDay,
+                exceeded: false,
+            };
+        }
+        try {
+            const now = new Date();
+            const hourlyKey = `openai:hourly:${now.toISOString().slice(0, 13)}`;
+            const dailyKey = `openai:daily:${now.toISOString().slice(0, 10)}`;
+            const [hourlyUsed, dailyUsed] = await Promise.all([
+                this.readCounter(hourlyKey),
+                this.readCounter(dailyKey),
+            ]);
+            return {
+                hourlyUsed,
+                hourlyLimit: this.config.maxRequestsPerHour,
+                dailyUsed,
+                dailyLimit: this.config.maxRequestsPerDay,
+                exceeded: hourlyUsed >= this.config.maxRequestsPerHour ||
+                    dailyUsed >= this.config.maxRequestsPerDay,
+            };
+        }
+        catch {
+            return {
+                hourlyUsed: 0,
+                hourlyLimit: this.config.maxRequestsPerHour,
+                dailyUsed: 0,
+                dailyLimit: this.config.maxRequestsPerDay,
+                exceeded: false,
+            };
+        }
+    }
+    /**
+     * Atomically increment a counter in DynamoDB using ADD expression.
+     * Returns the post-increment value.
+     */
+    async atomicIncrement(key, ttlSeconds) {
+        const result = await dynamoClient.send(new client_dynamodb_1.UpdateItemCommand({
+            TableName: TABLE_NAME,
+            Key: {
+                pk: { S: `costbudget:${key}` },
+                sk: { S: "v" },
+            },
+            UpdateExpression: "ADD #count :inc SET #ttl = if_not_exists(#ttl, :ttl)",
+            ExpressionAttributeNames: { "#count": "count", "#ttl": "ttl" },
+            ExpressionAttributeValues: {
+                ":inc": { N: "1" },
+                ":ttl": { N: String(Math.floor(Date.now() / 1000) + ttlSeconds) },
+            },
+            ReturnValues: "ALL_NEW",
+        }));
+        return parseInt(result.Attributes?.count?.N || "0", 10);
+    }
+    /**
+     * Read a counter value without incrementing.
+     */
+    async readCounter(key) {
+        const { GetItemCommand } = await Promise.resolve().then(() => __importStar(require("@aws-sdk/client-dynamodb")));
+        const result = await dynamoClient.send(new GetItemCommand({
+            TableName: TABLE_NAME,
+            Key: {
+                pk: { S: `costbudget:${key}` },
+                sk: { S: "v" },
+            },
+            ProjectionExpression: "#count",
+            ExpressionAttributeNames: { "#count": "count" },
+        }));
+        return parseInt(result.Item?.count?.N || "0", 10);
+    }
+}
+exports.OpenAiBudget = OpenAiBudget;
+//# sourceMappingURL=openai-budget.js.map

package/dist/lib/openai-budget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai-budget.js","sourceRoot":"","sources":["../../src/lib/openai-budget.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,8DAGkC;AAClC,qCAAkC;AAgBlC,MAAM,YAAY,GAAG,IAAI,gCAAc,CAAC;IACtC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,WAAW;IAC7C,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;CACtF,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,KAAK,UAAU,CAAC;AAEzF,MAAa,YAAY;IACf,MAAM,CAAqB;IAC3B,MAAM,GAAG,eAAM,CAAC,WAAW,EAAE,CAAC;IAEtC,YAAY,MAA0B;QACpC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAEtC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,SAAS,GAAG,iBAAiB,GAAG,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YACpE,MAAM,QAAQ,GAAG,gBAAgB,GAAG,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YAElE,sCAAsC;YACtC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAChE,IAAI,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;gBACjD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE;oBACxD,WAAW;oBACX,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB;iBACtC,CAAC,CAAC;gBACH,OAAO,KAAK,CAAC;YACf,CAAC;YAED,qCAAqC;YACrC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAChE,IAAI,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;gBAC/C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE;oBACvD,UAAU;oBACV,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB;iBACrC,CAAC,CAAC;gBACH,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,iDAAiD;YACjD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1E,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,SAAS;QACb,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO;gBACL,UAAU,EAAE,CAAC;gBACb,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB;gBAC3C,SAAS,EAAE,CAAC;gBACZ,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB;gBACzC,QAAQ,EAAE,KAAK;aAChB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,SAAS,GAAG,iBAAiB,GAAG,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YACpE,MAAM,QAAQ,GAAG,gBAAgB,GAAG,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YAElE,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBAChD,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC;gBAC3B,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC;aAC3B,CAAC,CAAC;YAEH,OAAO;gBACL,UAAU;gBACV,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB;gBAC3C,SAAS;gBACT,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB;gBACzC,QAAQ,EACN,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB;oBAC5C,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB;aAC7C,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,UAAU,EAAE,CAAC;gBACb,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB;gBAC3C,SAAS,EAAE,CAAC;gBACZ,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB;gBACzC,QAAQ,EAAE,KAAK;aAChB,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,eAAe,CAAC,GAAW,EAAE,UAAkB;QAC3D,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CACpC,IAAI,mCAAiB,CAAC;YACpB,SAAS,EAAE,UAAU;YACrB,GAAG,EAAE;gBACH,EAAE,EAAE,EAAE,CAAC,EAAE,cAAc,GAAG,EAAE,EAAE;gBAC9B,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE;aACf;YACD,gBAAgB,EAAE,sDAAsD;YACxE,wBAAwB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE;YAC9D,yBAAyB,EAAE;gBACzB,MAAM,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE;gBAClB,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,UAAU,CAAC,EAAE;aAClE;YACD,YAAY,EAAE,SAAS;SACxB,CAAC,CACH,CAAC;QACF,OAAO,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,WAAW,CAAC,GAAW;QACnC,MAAM,EAAE,cAAc,EAAE,GAAG,wDAAa,0BAA0B,GAAC,CAAC;QACpE,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CACpC,IAAI,cAAc,CAAC;YACjB,SAAS,EAAE,UAAU;YACrB,GAAG,EAAE;gBACH,EAAE,EAAE,EAAE,CAAC,EAAE,cAAc,GAAG,EAAE,EAAE;gBAC9B,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE;aACf;YACD,oBAAoB,EAAE,QAAQ;YAC9B,wBAAwB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE;SAChD,CAAC,CACH,CAAC;QACF,OAAO,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;IACpD,CAAC;CACF;AAxID,oCAwIC"}

package/dist/lib/orphaned-media-handler.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Orphaned Media Handler
+ *
+ * Manages orphaned media cleanup for optimistic image uploads.
+ * Provides functionality to mark media as orphaned and clean up old orphaned media.
+ */
+import type { Env } from "../env";
+export declare class OrphanedMediaHandler {
+    private logger;
+    constructor(env?: Env);
+    /**
+     * Mark a media file as orphaned
+     * Sets orphanedAt timestamp and attachedToPost to false
+     *
+     * Note: mediaId can be either a MediaFile.id or a contentHash
+     * We check both to handle the case where the media was just uploaded
+     * and the MediaFile record hasn't been created yet (async reconciliation)
+     */
+    markMediaAsOrphaned(mediaId: string, userId: string, region: string, env: Env): Promise<{
+        success: boolean;
+        error?: string;
+    }>;
+    /**
+     * Clean up orphaned media older than the grace period (24 hours)
+     * Soft deletes media by setting deletedAt timestamp
+     *
+     * Scalability features:
+     * - Processes in batches to avoid memory issues
+     * - Uses cursor-based pagination for large datasets
+     * - Continues on errors (doesn't fail entire job)
+     * - Respects Cloudflare Worker CPU time limits
+     */
+    cleanupOrphanedMedia(region: string, env: Env, options?: {
+        batchSize?: number;
+        maxBatches?: number;
+    }): Promise<{
+        cleanedCount: number;
+        scheduledForDeletion: string[];
+        hasMore: boolean;
+    }>;
+    /**
+     * Schedule R2 deletion for soft-deleted media
+     * Deletes media from R2 that has been soft-deleted for 7 days
+     *
+     * Scalability features:
+     * - Processes in batches to avoid memory issues
+     * - Continues on R2 errors (logs but doesn't fail)
+     * - Respects CPU time limits
+     */
+    scheduleR2Deletion(region: string, env: Env, options?: {
+        batchSize?: number;
+        maxBatches?: number;
+    }): Promise<{
+        deletedCount: number;
+        deletedKeys: number;
+        errors: number;
+        hasMore: boolean;
+    }>;
+}
+//# sourceMappingURL=orphaned-media-handler.d.ts.map

package/dist/lib/orphaned-media-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"orphaned-media-handler.d.ts","sourceRoot":"","sources":["../../src/lib/orphaned-media-handler.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AAGlC,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,MAAM,CAAS;gBAEX,GAAG,CAAC,EAAE,GAAG;IAIrB;;;;;;;OAOG;IACG,mBAAmB,CACvB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,GAAG,GACP,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IA6FhD;;;;;;;;;OASG;IACG,oBAAoB,CACxB,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,GAAG,EACR,OAAO,GAAE;QACP,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;KAChB,GACL,OAAO,CAAC;QACT,YAAY,EAAE,MAAM,CAAC;QACrB,oBAAoB,EAAE,MAAM,EAAE,CAAC;QAC/B,OAAO,EAAE,OAAO,CAAC;KAClB,CAAC;IA+MF;;;;;;;;OAQG;IACG,kBAAkB,CACtB,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,GAAG,EACR,OAAO,GAAE;QACP,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;KAChB,GACL,OAAO,CAAC;QACT,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,OAAO,CAAC;KAClB,CAAC;CA6MH"}