@endora-commerce/mod-assets-library 0.0.0-stage → 0.100.0

package/dist/backend/services/assets-library.service.js

@@ -0,0 +1,261 @@
+// AssetsLibraryService — public facade. US1 fills upload / get / list /
+// patch / setVisibility / resolveUrl. US2 will fill softDelete / restore /
+// move. US3 brings cloud adapters online.
+import { ERROR_CODES } from '@endora-commerce/contracts';
+import { Asset } from '../entities/asset.entity.js';
+import { HttpError } from '@endora-commerce/platform/http';
+import { UploadPipeline } from './upload-pipeline.js';
+import { LegacyAssetCannotHardenError } from './storage/errors.js';
+import { recordAuditFromContext } from '@endora-commerce/platform/commands';
+export class NotImplementedYet extends Error {
+    name = 'NotImplementedYet';
+    constructor(method) {
+        super(`AssetsLibraryService.${method} is not implemented in this build (later phase / user story).`);
+    }
+}
+export class AssetsLibraryService {
+    deps;
+    pipeline;
+    constructor(deps) {
+        this.deps = deps;
+        this.pipeline = new UploadPipeline({
+            emFactory: deps.emFactory,
+            adapters: deps.adapters,
+            loadPolicy: deps.loadUploadPolicy,
+            ...(deps.auditLog ? { auditLog: deps.auditLog } : {}),
+        });
+    }
+    #audit(em, action, objectId, stateBefore, stateAfter) {
+        if (this.deps.auditLog) {
+            recordAuditFromContext(this.deps.auditLog, em, {
+                action,
+                objectType: 'asset',
+                objectId,
+                stateBefore,
+                stateAfter,
+            });
+        }
+    }
+    /** Upload entry point — runs the atomic put + insert + compensating-delete pipeline. */
+    async upload(input) {
+        const asset = await this.pipeline.run(input);
+        return this.detail(asset);
+    }
+    /** Resolve the serving URL for an asset by id (public or private). */
+    async resolveUrl(assetId, opts = {}) {
+        const em = this.deps.emFactory();
+        const a = await em.findOne(Asset, { id: assetId });
+        if (!a)
+            throw new HttpError(404, ERROR_CODES.ASSET_NOT_FOUND, `Asset ${assetId} not found.`);
+        const adapter = await this.deps.adapters.getForBackend(a.storageBackend);
+        return adapter.resolveUrl({
+            locator: a.storageLocator || a.storageUrl,
+            visibility: a.visibility,
+            ...(opts.ttlSec !== undefined ? { ttlSec: opts.ttlSec } : {}),
+        });
+    }
+    async getAsset(assetId) {
+        const em = this.deps.emFactory();
+        const a = await em.findOne(Asset, { id: assetId });
+        if (!a)
+            throw new HttpError(404, ERROR_CODES.ASSET_NOT_FOUND, `Asset ${assetId} not found.`);
+        return this.detail(a);
+    }
+    async listAssets(query) {
+        const em = this.deps.emFactory();
+        const limit = Math.min(Math.max(query.limit ?? 50, 1), 100);
+        // Build the predicate as an $and of independent clauses so the search OR
+        // (filename/label) does not collide with any other clause on a single
+        // top-level `$or` key.
+        const clauses = [];
+        if (query.folderId !== undefined)
+            clauses.push({ folderId: query.folderId });
+        if (query.visibility)
+            clauses.push({ visibility: query.visibility });
+        if (query.mime)
+            clauses.push({ mimeType: { $like: `${query.mime}%` } });
+        if (query.q) {
+            clauses.push({
+                $or: [
+                    { filename: { $ilike: `%${query.q}%` } },
+                    { label: { $ilike: `%${query.q}%` } },
+                ],
+            });
+        }
+        if (!query.includeDeleted)
+            clauses.push({ deletedAt: null });
+        const where = clauses.length > 0 ? { $and: clauses } : {};
+        // Offset-based pagination. The opaque cursor carries the next offset.
+        // Keyset pagination is not usable here: `createdAt` is stored with
+        // microsecond precision but a JS Date (and the ISO cursor) only carries
+        // milliseconds, so a keyset boundary on (createdAt, id) silently drops the
+        // rows that share a truncated instant. Offset over a total order
+        // (createdAt DESC, id DESC) is precision-independent and correct.
+        const offset = query.cursor ? (decodeCursor(query.cursor) ?? 0) : 0;
+        const rows = await em.find(Asset, where, {
+            orderBy: { createdAt: 'desc', id: 'desc' },
+            offset,
+            limit: limit + 1,
+        });
+        const overflow = rows.length > limit;
+        const page = overflow ? rows.slice(0, limit) : rows;
+        const nextCursor = overflow ? encodeCursor(offset + limit) : null;
+        const summaries = await Promise.all(page.map((a) => this.summary(a)));
+        return { data: summaries, nextCursor };
+    }
+    async patchAsset(assetId, patch) {
+        const em = this.deps.emFactory();
+        const a = await em.findOne(Asset, { id: assetId });
+        if (!a)
+            throw new HttpError(404, ERROR_CODES.ASSET_NOT_FOUND, `Asset ${assetId} not found.`);
+        if (patch.filename !== undefined)
+            a.filename = patch.filename;
+        if (patch.label !== undefined)
+            a.label = patch.label;
+        if (patch.altText !== undefined)
+            a.altText = patch.altText;
+        if (patch.mimeType !== undefined) {
+            a.mimeType = patch.mimeType;
+            a.mimeTypeOverridden = true;
+        }
+        if (patch.folderId !== undefined)
+            a.folderId = patch.folderId;
+        if (patch.visibility !== undefined && patch.visibility !== a.visibility) {
+            // Refuse to flip a `legacy` asset to private — we cannot sign URLs we
+            // didn't issue.
+            if (a.storageBackend === 'legacy' && patch.visibility === 'private') {
+                throw new HttpError(409, ERROR_CODES.ASSET_LEGACY_LOCATOR_CANNOT_HARDEN, 'Cannot mark a `legacy` asset as private — re-upload it through the active adapter first.');
+            }
+            const adapter = await this.deps.adapters.getForBackend(a.storageBackend);
+            // Cloud adapters update object ACLs; local FS no-ops (visibility is
+            // enforced by routes.public.ts on every request).
+            if ('setVisibility' in adapter && typeof adapter.setVisibility === 'function') {
+                try {
+                    await adapter.setVisibility({ locator: a.storageLocator || a.storageUrl, visibility: patch.visibility });
+                }
+                catch (err) {
+                    if (err instanceof LegacyAssetCannotHardenError) {
+                        throw new HttpError(409, ERROR_CODES.ASSET_LEGACY_LOCATOR_CANNOT_HARDEN, err.message);
+                    }
+                    throw err;
+                }
+            }
+            a.visibility = patch.visibility;
+        }
+        this.#audit(em, 'asset.update', a.id, null, { filename: a.filename, visibility: a.visibility });
+        await em.flush();
+        return this.detail(a);
+    }
+    async setVisibility(assetId, visibility) {
+        return this.patchAsset(assetId, { visibility });
+    }
+    // — US2 — soft-delete / restore / move ------------------------------------
+    async softDelete(assetId) {
+        const em = this.deps.emFactory();
+        const a = await em.findOne(Asset, { id: assetId });
+        if (!a)
+            throw new HttpError(404, ERROR_CODES.ASSET_NOT_FOUND, `Asset ${assetId} not found.`);
+        if (a.deletedAt) {
+            // Idempotent — return current state.
+            return { deletedAt: a.deletedAt, purgeAfterAt: a.purgeAfterAt };
+        }
+        // Reference protection (FR-030).
+        const refs = await this.deps.referenceRegistry.findReferences(assetId);
+        if (refs.length > 0) {
+            throw new HttpError(409, ERROR_CODES.ASSET_REFERENCED, `Asset is in use by ${refs.length} record(s); detach those first.`, refs.slice(0, 20).map((r) => ({
+                path: r.kind,
+                issue: r.label,
+            })));
+        }
+        const retentionDays = 30; // assets.soft_delete_retention_days; reads inline in US2.
+        const now = new Date();
+        a.deletedAt = now;
+        a.purgeAfterAt = new Date(now.getTime() + retentionDays * 24 * 60 * 60 * 1000);
+        this.#audit(em, 'asset.soft_delete', a.id, { filename: a.filename }, null);
+        await em.flush();
+        return { deletedAt: a.deletedAt, purgeAfterAt: a.purgeAfterAt };
+    }
+    async restore(assetId) {
+        const em = this.deps.emFactory();
+        const a = await em.findOne(Asset, { id: assetId });
+        if (!a)
+            throw new HttpError(404, ERROR_CODES.ASSET_NOT_FOUND, `Asset ${assetId} not found.`);
+        a.deletedAt = null;
+        a.purgeAfterAt = null;
+        a.pendingCleanup = false;
+        this.#audit(em, 'asset.restore', a.id, null, { filename: a.filename });
+        await em.flush();
+        return this.detail(a);
+    }
+    async move(assetId, folderId) {
+        const em = this.deps.emFactory();
+        const a = await em.findOne(Asset, { id: assetId });
+        if (!a)
+            throw new HttpError(404, ERROR_CODES.ASSET_NOT_FOUND, `Asset ${assetId} not found.`);
+        a.folderId = folderId;
+        this.#audit(em, 'asset.move', a.id, null, { folderId });
+        await em.flush();
+        return this.detail(a);
+    }
+    async moveMany(assetIds, folderId) {
+        const em = this.deps.emFactory();
+        const assets = await em.find(Asset, { id: { $in: assetIds } });
+        for (const a of assets)
+            a.folderId = folderId;
+        if (assets.length > 0) {
+            this.#audit(em, 'asset.move_many', folderId ?? 'root', null, {
+                folderId,
+                assetIds: assets.map((a) => a.id),
+            });
+        }
+        await em.flush();
+        return { movedCount: assets.length };
+    }
+    // — Serialization helpers --------------------------------------------------
+    async summary(a) {
+        const url = await this.resolveUrl(a.id);
+        return {
+            id: a.id,
+            folderId: a.folderId ?? null,
+            filename: a.filename,
+            label: a.label ?? null,
+            mimeType: a.mimeType,
+            sizeBytes: Number(a.sizeBytes),
+            visibility: a.visibility,
+            storageBackend: a.storageBackend,
+            url: url.url,
+            createdAt: a.createdAt.toISOString(),
+            updatedAt: a.updatedAt.toISOString(),
+            deletedAt: a.deletedAt ? a.deletedAt.toISOString() : null,
+            pendingCleanup: a.pendingCleanup,
+        };
+    }
+    async detail(a) {
+        const summary = await this.summary(a);
+        const references = await this.deps.referenceRegistry.findReferences(a.id);
+        return {
+            ...summary,
+            altText: a.altText ?? null,
+            references,
+        };
+    }
+}
+/** Encode a pagination offset as an opaque base64url cursor. */
+function encodeCursor(offset) {
+    return Buffer.from(`o:${offset}`, 'utf8').toString('base64url');
+}
+/** Decode an opaque cursor back into a non-negative offset, or null if invalid. */
+function decodeCursor(c) {
+    try {
+        const raw = Buffer.from(c, 'base64url').toString('utf8');
+        const m = raw.match(/^o:(\d+)$/);
+        if (!m)
+            return null;
+        const n = Number(m[1]);
+        return Number.isSafeInteger(n) && n >= 0 ? n : null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=assets-library.service.js.map

package/dist/backend/services/assets-library.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assets-library.service.js","sourceRoot":"","sources":["../../../src/backend/services/assets-library.service.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,2EAA2E;AAC3E,0CAA0C;AAG1C,OAAO,EAAE,WAAW,EAAuC,MAAM,4BAA4B,CAAC;AAC9F,OAAO,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAG3D,OAAO,EAAE,cAAc,EAAuC,MAAM,sBAAsB,CAAC;AAC3F,OAAO,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAG5E,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACxB,IAAI,GAAG,mBAAmB,CAAC;IAC7C,YAAY,MAAc;QACxB,KAAK,CACH,wBAAwB,MAAM,+DAA+D,CAC9F,CAAC;IACJ,CAAC;CACF;AAsBD,MAAM,OAAO,oBAAoB;IAGF;IAFZ,QAAQ,CAAiB;IAE1C,YAA6B,IAA8B;QAA9B,SAAI,GAAJ,IAAI,CAA0B;QACzD,IAAI,CAAC,QAAQ,GAAG,IAAI,cAAc,CAAC;YACjC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,gBAAgB;YACjC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CACJ,EAAiB,EACjB,MAAc,EACd,QAAgB,EAChB,WAA2C,EAC3C,UAA0C;QAE1C,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACvB,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE;gBAC7C,MAAM;gBACN,UAAU,EAAE,OAAO;gBACnB,QAAQ;gBACR,WAAW;gBACX,UAAU;aACX,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,wFAAwF;IACxF,KAAK,CAAC,MAAM,CAAC,KAAkB;QAC7B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC7C,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAED,sEAAsE;IACtE,KAAK,CAAC,UAAU,CACd,OAAe,EACf,OAA4B,EAAE;QAE9B,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,eAAe,EAAE,SAAS,OAAO,aAAa,CAAC,CAAC;QAC7F,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CACpD,CAAC,CAAC,cAAmD,CACtD,CAAC;QACF,OAAO,OAAO,CAAC,UAAU,CAAC;YACxB,OAAO,EAAE,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,UAAU;YACzC,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAe;QAC5B,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,eAAe,EAAE,SAAS,OAAO,aAAa,CAAC,CAAC;QAC7F,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAsB;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC5D,yEAAyE;QACzE,sEAAsE;QACtE,uBAAuB;QACvB,MAAM,OAAO,GAA8B,EAAE,CAAC;QAC9C,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7E,IAAI,KAAK,CAAC,UAAU;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;QACrE,IAAI,KAAK,CAAC,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;QACxE,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC;gBACX,GAAG,EAAE;oBACH,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBACxC,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;iBACtC;aACF,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,cAAc;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE7D,MAAM,KAAK,GAA4B,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAEnF,sEAAsE;QACtE,mEAAmE;QACnE,wEAAwE;QACxE,2EAA2E;QAC3E,iEAAiE;QACjE,kEAAkE;QAClE,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAEpE,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE;YACvC,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE;YAC1C,MAAM;YACN,KAAK,EAAE,KAAK,GAAG,CAAC;SACjB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACrC,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACpD,MAAM,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAClE,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,UAAU,CACd,OAAe,EACf,KAcC;QAED,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,eAAe,EAAE,SAAS,OAAO,aAAa,CAAC,CAAC;QAE7F,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;YAAE,CAAC,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAC9D,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;YAAE,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QACrD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;YAAE,CAAC,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAC3D,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACjC,CAAC,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;YAC5B,CAAC,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAC9B,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;YAAE,CAAC,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAE9D,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC;YACxE,sEAAsE;YACtE,gBAAgB;YAChB,IAAI,CAAC,CAAC,cAAc,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBACpE,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,kCAAkC,EAC9C,0FAA0F,CAC3F,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CACpD,CAAC,CAAC,cAAmD,CACtD,CAAC;YACF,oEAAoE;YACpE,kDAAkD;YAClD,IAAI,eAAe,IAAI,OAAO,IAAI,OAAO,OAAO,CAAC,aAAa,KAAK,UAAU,EAAE,CAAC;gBAC9E,IAAI,CAAC;oBACH,MAAM,OAAO,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;gBAC3G,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,GAAG,YAAY,4BAA4B,EAAE,CAAC;wBAChD,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,kCAAkC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;oBACxF,CAAC;oBACD,MAAM,GAAG,CAAC;gBACZ,CAAC;YACH,CAAC;YACD,CAAC,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;QAClC,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;QAChG,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAAe,EAAE,UAAgC;QACnE,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,4EAA4E;IAE5E,KAAK,CAAC,UAAU,CAAC,OAAe;QAC9B,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,eAAe,EAAE,SAAS,OAAO,aAAa,CAAC,CAAC;QAC7F,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;YAChB,qCAAqC;YACrC,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC,YAAoB,EAAE,CAAC;QAC1E,CAAC;QACD,iCAAiC;QACjC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QACvE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,gBAAgB,EAC5B,sBAAsB,IAAI,CAAC,MAAM,iCAAiC,EAClE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC5B,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,KAAK,EAAE,CAAC,CAAC,KAAK;aACf,CAAC,CAAC,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,aAAa,GAAG,EAAE,CAAC,CAAC,0DAA0D;QACpF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC;QAClB,CAAC,CAAC,YAAY,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC/E,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,mBAAmB,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;QAC3E,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAe;QAC3B,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,eAAe,EAAE,SAAS,OAAO,aAAa,CAAC,CAAC;QAC7F,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC,CAAC,YAAY,GAAG,IAAI,CAAC;QACtB,CAAC,CAAC,cAAc,GAAG,KAAK,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACvE,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,QAAuB;QACjD,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,eAAe,EAAE,SAAS,OAAO,aAAa,CAAC,CAAC;QAC7F,CAAC,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACtB,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QACxD,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,QAAkB,EAAE,QAAuB;QACxD,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC/D,KAAK,MAAM,CAAC,IAAI,MAAM;YAAE,CAAC,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAC9C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,iBAAiB,EAAE,QAAQ,IAAI,MAAM,EAAE,IAAI,EAAE;gBAC3D,QAAQ;gBACR,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IACvC,CAAC;IAED,6EAA6E;IAErE,KAAK,CAAC,OAAO,CAAC,CAAQ;QAC5B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxC,OAAO;YACL,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI;YAC5B,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI;YACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9B,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,cAAc,EAAE,CAAC,CAAC,cAAc;YAChC,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;YACpC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;YACpC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;YACzD,cAAc,EAAE,CAAC,CAAC,cAAc;SACjC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,CAAQ;QAC3B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC1E,OAAO;YACL,GAAG,OAAO;YACV,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI;YAC1B,UAAU;SACX,CAAC;IACJ,CAAC;CACF;AAED,gEAAgE;AAChE,SAAS,YAAY,CAAC,MAAc;IAClC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAClE,CAAC;AAED,mFAAmF;AACnF,SAAS,YAAY,CAAC,CAAS;IAC7B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACjC,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACpB,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvB,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/backend/services/cms-body-resolver.d.ts

@@ -0,0 +1,6 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { AssetEmbedResolution } from '@endora-commerce/contracts';
+import type { AssetsLibraryService } from './assets-library.service.js';
+export declare function findAssetRefIds(body: unknown, acc?: Set<string>): Set<string>;
+export declare function resolveAssetRefs(body: unknown, emFactory: () => EntityManager, service: AssetsLibraryService): Promise<Record<string, AssetEmbedResolution>>;
+//# sourceMappingURL=cms-body-resolver.d.ts.map

package/dist/backend/services/cms-body-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cms-body-resolver.d.ts","sourceRoot":"","sources":["../../../src/backend/services/cms-body-resolver.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAEvE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAExE,wBAAgB,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,GAAE,GAAG,CAAC,MAAM,CAAa,GAAG,GAAG,CAAC,MAAM,CAAC,CAcxF;AAED,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,OAAO,EACb,SAAS,EAAE,MAAM,aAAa,EAC9B,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC,CAkB/C"}

package/dist/backend/services/cms-body-resolver.js

@@ -0,0 +1,44 @@
+// CMS body asset-ref resolver — feature 013 / US6 / T095.
+//
+// Walks any JSON value, finds nodes with the shape
+//   { type: 'asset_ref', assetId: <uuid>, rendering?: ... }
+// and returns a denormalized map keyed by assetId so the storefront
+// CMS-page response can inline ready-to-render URLs alongside the body.
+import { Asset } from '../entities/asset.entity.js';
+export function findAssetRefIds(body, acc = new Set()) {
+    if (body === null || body === undefined)
+        return acc;
+    if (Array.isArray(body)) {
+        for (const item of body)
+            findAssetRefIds(item, acc);
+        return acc;
+    }
+    if (typeof body === 'object') {
+        const obj = body;
+        if (obj['type'] === 'asset_ref' && typeof obj['assetId'] === 'string') {
+            acc.add(obj['assetId']);
+        }
+        for (const v of Object.values(obj))
+            findAssetRefIds(v, acc);
+    }
+    return acc;
+}
+export async function resolveAssetRefs(body, emFactory, service) {
+    const ids = Array.from(findAssetRefIds(body));
+    if (ids.length === 0)
+        return {};
+    const em = emFactory();
+    const assets = await em.find(Asset, { id: { $in: ids }, deletedAt: null });
+    const resolutions = await Promise.all(assets.map(async (a) => {
+        const url = await service.resolveUrl(a.id);
+        return [a.id, {
+                url: url.url,
+                mimeType: a.mimeType,
+                filename: a.filename,
+                label: a.label ?? null,
+                visibility: a.visibility,
+            }];
+    }));
+    return Object.fromEntries(resolutions);
+}
+//# sourceMappingURL=cms-body-resolver.js.map

package/dist/backend/services/cms-body-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cms-body-resolver.js","sourceRoot":"","sources":["../../../src/backend/services/cms-body-resolver.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,EAAE;AACF,mDAAmD;AACnD,4DAA4D;AAC5D,oEAAoE;AACpE,wEAAwE;AAIxE,OAAO,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AAGpD,MAAM,UAAU,eAAe,CAAC,IAAa,EAAE,MAAmB,IAAI,GAAG,EAAE;IACzE,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC;IACpD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,KAAK,MAAM,IAAI,IAAI,IAAI;YAAE,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACpD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,IAA+B,CAAC;QAC5C,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,WAAW,IAAI,OAAO,GAAG,CAAC,SAAS,CAAC,KAAK,QAAQ,EAAE,CAAC;YACtE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;QAC1B,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;YAAE,eAAe,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAa,EACb,SAA8B,EAC9B,OAA6B;IAE7B,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9C,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,GAAG,CACnC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QACrB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3C,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;gBACZ,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI;gBACtB,UAAU,EAAE,CAAC,CAAC,UAAU;aACzB,CAAU,CAAC;IACd,CAAC,CAAC,CACH,CAAC;IACF,OAAO,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;AACzC,CAAC"}

package/dist/backend/services/folders.service.d.ts

@@ -0,0 +1,29 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import { type AssetFolder as AssetFolderDto } from '@endora-commerce/contracts';
+import type { AuditPort } from '@endora-commerce/platform/kernel';
+import type { AssetReferenceRegistry } from './reference-registry.js';
+export declare class FoldersService {
+    #private;
+    private readonly emFactory;
+    private readonly referenceRegistry;
+    private readonly auditLog?;
+    constructor(emFactory: () => EntityManager, referenceRegistry: AssetReferenceRegistry, auditLog?: AuditPort | undefined);
+    listFolderTree(): Promise<AssetFolderDto[]>;
+    createFolder(input: {
+        parentId: string | null;
+        name: string;
+    }): Promise<AssetFolderDto>;
+    patchFolder(id: string, patch: {
+        name?: string;
+        parentId?: string | null;
+        position?: number;
+    }): Promise<AssetFolderDto>;
+    deleteFolder(id: string, strategy: 'cancel' | 'moveContentsToParent' | 'deleteRecursively'): Promise<{
+        deletedFolderId: string;
+        softDeletedAssetIds?: string[];
+    }>;
+    private collectSubtreeAssetIds;
+    private collectSubtreeFolders;
+    private toDto;
+}
+//# sourceMappingURL=folders.service.d.ts.map

package/dist/backend/services/folders.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"folders.service.d.ts","sourceRoot":"","sources":["../../../src/backend/services/folders.service.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAe,KAAK,WAAW,IAAI,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAM7F,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAEtE,qBAAa,cAAc;;IAEvB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAFT,SAAS,EAAE,MAAM,aAAa,EAC9B,iBAAiB,EAAE,sBAAsB,EACzC,QAAQ,CAAC,EAAE,SAAS,YAAA;IAqBjC,cAAc,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IAqB3C,YAAY,CAAC,KAAK,EAAE;QAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,cAAc,CAAC;IAqCvF,WAAW,CACf,EAAE,EAAE,MAAM,EACV,KAAK,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GACpE,OAAO,CAAC,cAAc,CAAC;IAqDpB,YAAY,CAChB,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,QAAQ,GAAG,sBAAsB,GAAG,mBAAmB,GAChE,OAAO,CAAC;QAAE,eAAe,EAAE,MAAM,CAAC;QAAC,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;YAwEzD,sBAAsB;YAsBtB,qBAAqB;IAkBnC,OAAO,CAAC,KAAK;CAWd"}

package/dist/backend/services/folders.service.js

@@ -0,0 +1,231 @@
+// FoldersService — feature 013 / US2. Create, rename, move (with cycle
+// detection), delete (with `ifNonEmpty` strategies). Folders are pure
+// metadata; moving an asset between folders is a metadata-only update,
+// never a physical file move.
+import { ERROR_CODES } from '@endora-commerce/contracts';
+import { HttpError } from '@endora-commerce/platform/http';
+import { AssetFolder } from '../entities/asset-folder.entity.js';
+import { Asset } from '../entities/asset.entity.js';
+import { recordAuditFromContext } from '@endora-commerce/platform/commands';
+export class FoldersService {
+    emFactory;
+    referenceRegistry;
+    auditLog;
+    constructor(emFactory, referenceRegistry, auditLog) {
+        this.emFactory = emFactory;
+        this.referenceRegistry = referenceRegistry;
+        this.auditLog = auditLog;
+    }
+    #audit(em, action, objectId, stateBefore, stateAfter) {
+        if (this.auditLog) {
+            recordAuditFromContext(this.auditLog, em, {
+                action,
+                objectType: 'asset_folder',
+                objectId,
+                stateBefore,
+                stateAfter,
+            });
+        }
+    }
+    async listFolderTree() {
+        const em = this.emFactory();
+        const all = await em.find(AssetFolder, {}, { orderBy: { position: 'asc', id: 'asc' } });
+        const childrenByParent = new Map();
+        for (const f of all) {
+            const key = f.parentId ?? null;
+            const list = childrenByParent.get(key) ?? [];
+            list.push(f.id);
+            childrenByParent.set(key, list);
+        }
+        return all.map((f) => ({
+            id: f.id,
+            parentId: f.parentId ?? null,
+            name: f.name,
+            position: f.position,
+            childIds: childrenByParent.get(f.id) ?? [],
+            createdAt: f.createdAt.toISOString(),
+            updatedAt: f.updatedAt.toISOString(),
+        }));
+    }
+    async createFolder(input) {
+        const em = this.emFactory();
+        if (input.parentId) {
+            const parent = await em.findOne(AssetFolder, { id: input.parentId });
+            if (!parent) {
+                throw new HttpError(404, ERROR_CODES.ASSET_FOLDER_NOT_FOUND, `Parent folder ${input.parentId} not found.`);
+            }
+        }
+        // Compute next position among siblings.
+        const siblings = await em.find(AssetFolder, { parentId: input.parentId ?? null });
+        const position = siblings.reduce((m, s) => Math.max(m, s.position + 1), 0);
+        try {
+            const f = em.create(AssetFolder, {
+                parentId: input.parentId,
+                name: input.name,
+                position,
+            });
+            em.persist(f);
+            this.#audit(em, 'asset_folder.create', f.id, null, { name: f.name, parentId: f.parentId });
+            await em.flush();
+            return this.toDto(f, []);
+        }
+        catch (e) {
+            if (isUniqueViolation(e)) {
+                throw new HttpError(409, ERROR_CODES.ASSET_FOLDER_NAME_CONFLICT, `A folder named "${input.name}" already exists in this location.`);
+            }
+            throw e;
+        }
+    }
+    async patchFolder(id, patch) {
+        const em = this.emFactory();
+        const f = await em.findOne(AssetFolder, { id });
+        if (!f)
+            throw new HttpError(404, ERROR_CODES.ASSET_FOLDER_NOT_FOUND, `Folder ${id} not found.`);
+        if (patch.parentId !== undefined && patch.parentId !== f.parentId) {
+            // Cycle prevention: walk ancestors of the proposed parent.
+            if (patch.parentId !== null) {
+                if (patch.parentId === id) {
+                    throw new HttpError(422, ERROR_CODES.ASSET_FOLDER_CYCLE, 'A folder cannot be its own parent.');
+                }
+                const seen = new Set([id]);
+                let cursor = patch.parentId;
+                while (cursor) {
+                    if (seen.has(cursor)) {
+                        throw new HttpError(422, ERROR_CODES.ASSET_FOLDER_CYCLE, 'Cannot move a folder into its own subtree.');
+                    }
+                    seen.add(cursor);
+                    const next = await em.findOne(AssetFolder, { id: cursor });
+                    if (!next)
+                        break;
+                    cursor = next.parentId ?? null;
+                }
+            }
+            f.parentId = patch.parentId;
+        }
+        if (patch.name !== undefined)
+            f.name = patch.name;
+        if (patch.position !== undefined)
+            f.position = patch.position;
+        this.#audit(em, 'asset_folder.update', f.id, null, { name: f.name, parentId: f.parentId });
+        try {
+            await em.flush();
+        }
+        catch (e) {
+            if (isUniqueViolation(e)) {
+                throw new HttpError(409, ERROR_CODES.ASSET_FOLDER_NAME_CONFLICT, `A folder with this name already exists at the target location.`);
+            }
+            throw e;
+        }
+        const children = await em.find(AssetFolder, { parentId: f.id });
+        return this.toDto(f, children.map((c) => c.id));
+    }
+    async deleteFolder(id, strategy) {
+        const em = this.emFactory();
+        const f = await em.findOne(AssetFolder, { id });
+        if (!f)
+            throw new HttpError(404, ERROR_CODES.ASSET_FOLDER_NOT_FOUND, `Folder ${id} not found.`);
+        // Audit persists on `em`; only committed by the flush in whichever strategy
+        // branch actually deletes (a `cancel`/refs-blocked path throws before flush).
+        this.#audit(em, 'asset_folder.delete', f.id, { name: f.name, strategy }, null);
+        const childFolders = await em.find(AssetFolder, { parentId: id });
+        const directAssets = await em.find(Asset, { folderId: id });
+        if (strategy === 'cancel' && (childFolders.length > 0 || directAssets.length > 0)) {
+            throw new HttpError(409, ERROR_CODES.ASSET_FOLDER_NOT_EMPTY, `Folder is not empty (${childFolders.length} sub-folder(s), ${directAssets.length} asset(s)).`);
+        }
+        if (strategy === 'moveContentsToParent') {
+            for (const cf of childFolders)
+                cf.parentId = f.parentId ?? null;
+            for (const a of directAssets)
+                a.folderId = f.parentId ?? null;
+            await em.flush();
+            em.remove(f);
+            await em.flush();
+            return { deletedFolderId: id };
+        }
+        if (strategy === 'deleteRecursively') {
+            // Walk the subtree, gather every asset id, check refs all-or-nothing.
+            const subtreeIds = await this.collectSubtreeAssetIds(em, id);
+            if (subtreeIds.length > 0) {
+                const refs = await this.referenceRegistry.findReferencesMany(subtreeIds);
+                const blocking = [];
+                for (const [aid, list] of refs.entries()) {
+                    if (list.length > 0)
+                        blocking.push(aid);
+                }
+                if (blocking.length > 0) {
+                    throw new HttpError(409, ERROR_CODES.ASSET_REFERENCED, `Cannot delete folder: ${blocking.length} asset(s) in this subtree are still referenced.`, blocking.slice(0, 20).map((aid) => ({ path: 'assetId', issue: aid })));
+                }
+            }
+            // Soft-delete all assets in subtree.
+            const now = new Date();
+            const retentionDays = 30;
+            const purgeAt = new Date(now.getTime() + retentionDays * 24 * 60 * 60 * 1000);
+            for (const aid of subtreeIds) {
+                const a = await em.findOneOrFail(Asset, { id: aid });
+                a.deletedAt = now;
+                a.purgeAfterAt = purgeAt;
+            }
+            // Delete sub-folders bottom-up by setting parent_id NULL on every
+            // intermediate, then removing.
+            const folders = await this.collectSubtreeFolders(em, id);
+            for (const sub of folders) {
+                em.remove(sub);
+            }
+            em.remove(f);
+            await em.flush();
+            return { deletedFolderId: id, softDeletedAssetIds: subtreeIds };
+        }
+        // strategy === 'cancel' and folder is empty — straight delete.
+        em.remove(f);
+        await em.flush();
+        return { deletedFolderId: id };
+    }
+    async collectSubtreeAssetIds(em, rootId) {
+        const folderIds = [rootId];
+        const queue = [rootId];
+        while (queue.length > 0) {
+            const head = queue.shift();
+            const children = await em.find(AssetFolder, { parentId: head });
+            for (const c of children) {
+                folderIds.push(c.id);
+                queue.push(c.id);
+            }
+        }
+        const assets = await em.find(Asset, { folderId: { $in: folderIds }, deletedAt: null }, { fields: ['id'] });
+        return assets.map((a) => a.id);
+    }
+    async collectSubtreeFolders(em, rootId) {
+        const acc = [];
+        const queue = [rootId];
+        while (queue.length > 0) {
+            const head = queue.shift();
+            if (head !== rootId) {
+                const cur = await em.findOne(AssetFolder, { id: head });
+                if (cur)
+                    acc.push(cur);
+            }
+            const children = await em.find(AssetFolder, { parentId: head });
+            for (const c of children)
+                queue.push(c.id);
+        }
+        return acc;
+    }
+    toDto(f, childIds) {
+        return {
+            id: f.id,
+            parentId: f.parentId ?? null,
+            name: f.name,
+            position: f.position,
+            childIds,
+            createdAt: f.createdAt.toISOString(),
+            updatedAt: f.updatedAt.toISOString(),
+        };
+    }
+}
+function isUniqueViolation(e) {
+    return (e !== null &&
+        typeof e === 'object' &&
+        e.constructor?.name ===
+            'UniqueConstraintViolationException');
+}
+//# sourceMappingURL=folders.service.js.map

package/dist/backend/services/folders.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"folders.service.js","sourceRoot":"","sources":["../../../src/backend/services/folders.service.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,sEAAsE;AACtE,uEAAuE;AACvE,8BAA8B;AAG9B,OAAO,EAAE,WAAW,EAAsC,MAAM,4BAA4B,CAAC;AAE7F,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAC;AACjE,OAAO,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAI5E,MAAM,OAAO,cAAc;IAEN;IACA;IACA;IAHnB,YACmB,SAA8B,EAC9B,iBAAyC,EACzC,QAAoB;QAFpB,cAAS,GAAT,SAAS,CAAqB;QAC9B,sBAAiB,GAAjB,iBAAiB,CAAwB;QACzC,aAAQ,GAAR,QAAQ,CAAY;IACpC,CAAC;IAEJ,MAAM,CACJ,EAAiB,EACjB,MAAc,EACd,QAAgB,EAChB,WAA2C,EAC3C,UAA0C;QAE1C,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,sBAAsB,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE;gBACxC,MAAM;gBACN,UAAU,EAAE,cAAc;gBAC1B,QAAQ;gBACR,WAAW;gBACX,UAAU;aACX,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACxF,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA2B,CAAC;QAC5D,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC;YAC/B,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAC7C,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAChB,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACrB,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI;YAC5B,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,QAAQ,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE;YAC1C,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;YACpC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;SACrC,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAAgD;QACjE,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;YACrE,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,sBAAsB,EAClC,iBAAiB,KAAK,CAAC,QAAQ,aAAa,CAC7C,CAAC;YACJ,CAAC;QACH,CAAC;QACD,wCAAwC;QACxC,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAC;QAClF,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3E,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE;gBAC/B,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,QAAQ;aACT,CAAC,CAAC;YACH,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,qBAAqB,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC3F,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,0BAA0B,EACtC,mBAAmB,KAAK,CAAC,IAAI,oCAAoC,CAClE,CAAC;YACJ,CAAC;YACD,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CACf,EAAU,EACV,KAAqE;QAErE,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,sBAAsB,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;QAEhG,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;YAClE,2DAA2D;YAC3D,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;gBAC5B,IAAI,KAAK,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;oBAC1B,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,kBAAkB,EAC9B,oCAAoC,CACrC,CAAC;gBACJ,CAAC;gBACD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAS,CAAC,EAAE,CAAC,CAAC,CAAC;gBACnC,IAAI,MAAM,GAAkB,KAAK,CAAC,QAAQ,CAAC;gBAC3C,OAAO,MAAM,EAAE,CAAC;oBACd,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;wBACrB,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,kBAAkB,EAC9B,4CAA4C,CAC7C,CAAC;oBACJ,CAAC;oBACD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;oBACjB,MAAM,IAAI,GAAuB,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;oBAC/E,IAAI,CAAC,IAAI;wBAAE,MAAM;oBACjB,MAAM,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;gBACjC,CAAC;YACH,CAAC;YACD,CAAC,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAC9B,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QAClD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;YAAE,CAAC,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAE9D,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,qBAAqB,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3F,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QACnB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,0BAA0B,EACtC,gEAAgE,CACjE,CAAC;YACJ,CAAC;YACD,MAAM,CAAC,CAAC;QACV,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,EAAU,EACV,QAAiE;QAEjE,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,sBAAsB,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;QAChG,4EAA4E;QAC5E,8EAA8E;QAC9E,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,qBAAqB,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;QAE/E,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QAClE,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QAE5D,IAAI,QAAQ,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;YAClF,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,sBAAsB,EAClC,wBAAwB,YAAY,CAAC,MAAM,mBAAmB,YAAY,CAAC,MAAM,aAAa,CAC/F,CAAC;QACJ,CAAC;QAED,IAAI,QAAQ,KAAK,sBAAsB,EAAE,CAAC;YACxC,KAAK,MAAM,EAAE,IAAI,YAAY;gBAAE,EAAE,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC;YAChE,KAAK,MAAM,CAAC,IAAI,YAAY;gBAAE,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC;YAC9D,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;YACjB,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACb,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC;QACjC,CAAC;QAED,IAAI,QAAQ,KAAK,mBAAmB,EAAE,CAAC;YACrC,sEAAsE;YACtE,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAC7D,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;gBACzE,MAAM,QAAQ,GAAa,EAAE,CAAC;gBAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;oBACzC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;wBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC1C,CAAC;gBACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACxB,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,gBAAgB,EAC5B,yBAAyB,QAAQ,CAAC,MAAM,iDAAiD,EACzF,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CACtE,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,qCAAqC;YACrC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,aAAa,GAAG,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YAC9E,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;gBAC7B,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;gBACrD,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC;gBAClB,CAAC,CAAC,YAAY,GAAG,OAAO,CAAC;YAC3B,CAAC;YACD,kEAAkE;YAClE,+BAA+B;YAC/B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACzD,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;gBAC1B,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjB,CAAC;YACD,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACb,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO,EAAE,eAAe,EAAE,EAAE,EAAE,mBAAmB,EAAE,UAAU,EAAE,CAAC;QAClE,CAAC;QAED,+DAA+D;QAC/D,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACb,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC;IACjC,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAClC,EAAiB,EACjB,MAAc;QAEd,MAAM,SAAS,GAAa,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,KAAK,GAAa,CAAC,MAAM,CAAC,CAAC;QACjC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;YAC5B,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YAChE,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACzB,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACrB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAC1B,KAAK,EACL,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EACjD,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CACnB,CAAC;QACF,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACjC,CAAC;IAEO,KAAK,CAAC,qBAAqB,CACjC,EAAiB,EACjB,MAAc;QAEd,MAAM,GAAG,GAAkB,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAa,CAAC,MAAM,CAAC,CAAC;QACjC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;YAC5B,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACpB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;gBACxD,IAAI,GAAG;oBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YAChE,KAAK,MAAM,CAAC,IAAI,QAAQ;gBAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,KAAK,CAAC,CAAc,EAAE,QAAkB;QAC9C,OAAO;YACL,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI;YAC5B,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,QAAQ;YACR,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;YACpC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;SACrC,CAAC;IACJ,CAAC;CACF;AAED,SAAS,iBAAiB,CAAC,CAAU;IACnC,OAAO,CACL,CAAC,KAAK,IAAI;QACV,OAAO,CAAC,KAAK,QAAQ;QACpB,CAAyC,CAAC,WAAW,EAAE,IAAI;YAC1D,oCAAoC,CACvC,CAAC;AACJ,CAAC"}

package/dist/backend/services/hmac.d.ts

@@ -0,0 +1,28 @@
+export interface SignedTokenInput {
+    /** Asset id this token authorizes. */
+    assetId: string;
+    /** Unix-seconds expiry. */
+    exp: number;
+}
+export interface VerificationContext {
+    assetId: string;
+    /** The full token string from the URL. */
+    token: string;
+    /** The full exp value from the URL (seconds). */
+    exp: number;
+    /** Now (seconds since epoch). Injectable for tests. */
+    nowSec: number;
+}
+export declare class HmacSigner {
+    private readonly key;
+    constructor(key: Buffer);
+    static fromEnv(envKey?: string | undefined): HmacSigner;
+    sign(input: SignedTokenInput): string;
+    /**
+     * Returns true when `ctx.token` is a valid signature for
+     * (`ctx.assetId`, `ctx.exp`) and `ctx.exp >= ctx.nowSec`. Returns false on
+     * any failure (mismatch, expiry, malformed). Uses `timingSafeEqual`.
+     */
+    verify(ctx: VerificationContext): boolean;
+}
+//# sourceMappingURL=hmac.d.ts.map