@endora-commerce/mod-assets-library 0.0.0-stage → 0.100.0

package/dist/backend/services/storage/local-fs-adapter.d.ts

@@ -0,0 +1,59 @@
+import { type ReadStream } from 'node:fs';
+import type { StorageAdapter, StorageAdapterSelfCheck, StorageNewLocatorInput, StoragePutInput, StorageResolveUrlInput, StorageResolveUrlOutput } from './storage-adapter.js';
+import type { HmacSigner } from '../hmac.js';
+export interface LocalFsAdapterOptions {
+    /** Filesystem root that holds every asset. */
+    baseDir: string;
+    /**
+     * Public-facing URL prefix (no trailing slash), from
+     * `assets.local.public_url_base`. Blank on every deployment that never set
+     * it — see {@link LocalFsAdapterOptions.publicApiBaseUrl}.
+     */
+    publicUrlBase: string;
+    /**
+     * This deployment's resolved public API origin — D-223's fallback base, used
+     * when `publicUrlBase` is blank.
+     *
+     * **Required rather than optional.** An omission here is a host-relative URL
+     * inside an e-mail, a push payload or a partner's feed, which is precisely
+     * the silent, safe-path-is-the-tested-path shape this module removed once
+     * before (feature 072, T092, `requireAdmin`).
+     */
+    publicApiBaseUrl: string;
+    /** TTL for private URL signatures, in seconds. */
+    privateUrlTtlSec: number;
+    /** HMAC signer for private URLs. */
+    signer: HmacSigner;
+    /** Now-source — injectable for tests. */
+    now?: () => Date;
+}
+export declare class LocalFsStorageAdapter implements StorageAdapter {
+    private readonly opts;
+    readonly code: "local";
+    /**
+     * The origin-and-prefix every URL this adapter builds starts with, decided
+     * once at construction: the operator's configured base when there is one,
+     * this deployment's public API origin when there is not (D-223).
+     */
+    private readonly publicBase;
+    constructor(opts: LocalFsAdapterOptions);
+    selfCheck(): Promise<StorageAdapterSelfCheck>;
+    newLocator(input: StorageNewLocatorInput): string;
+    put(input: StoragePutInput): Promise<void>;
+    resolveUrl(input: StorageResolveUrlInput): Promise<StorageResolveUrlOutput>;
+    open(input: {
+        locator: string;
+    }): Promise<ReadStream>;
+    delete(input: {
+        locator: string;
+    }): Promise<void>;
+    /**
+     * Visibility on local-FS is enforced per-request by routes.public.ts (it
+     * reads the asset's current visibility live and demands a token for
+     * private). No server-side state to flip — no-op.
+     */
+    setVisibility(): Promise<void>;
+    private toAbsolute;
+}
+export declare function parseAssetIdFromLocator(locator: string): string;
+//# sourceMappingURL=local-fs-adapter.d.ts.map

package/dist/backend/services/storage/local-fs-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-fs-adapter.d.ts","sourceRoot":"","sources":["../../../../src/backend/services/storage/local-fs-adapter.ts"],"names":[],"mappings":"AAcA,OAAO,EAAoB,KAAK,UAAU,EAAE,MAAM,SAAS,CAAC;AAM5D,OAAO,KAAK,EACV,cAAc,EACd,uBAAuB,EACvB,sBAAsB,EACtB,eAAe,EACf,sBAAsB,EACtB,uBAAuB,EACxB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAO7C,MAAM,WAAW,qBAAqB;IACpC,8CAA8C;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;;;;;;;OAQG;IACH,gBAAgB,EAAE,MAAM,CAAC;IACzB,kDAAkD;IAClD,gBAAgB,EAAE,MAAM,CAAC;IACzB,oCAAoC;IACpC,MAAM,EAAE,UAAU,CAAC;IACnB,yCAAyC;IACzC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,qBAAa,qBAAsB,YAAW,cAAc;IAU9C,OAAO,CAAC,QAAQ,CAAC,IAAI;IATjC,QAAQ,CAAC,IAAI,EAAG,OAAO,CAAU;IAEjC;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;gBAEP,IAAI,EAAE,qBAAqB;IASlD,SAAS,IAAI,OAAO,CAAC,uBAAuB,CAAC;IAenD,UAAU,CAAC,KAAK,EAAE,sBAAsB,GAAG,MAAM;IAI3C,GAAG,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IA0B1C,UAAU,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAmB3E,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,CAAC;IAWrD,MAAM,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAevD;;;;OAIG;IACG,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IAIpC,OAAO,CAAC,UAAU;CAQnB;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAY/D"}

package/dist/backend/services/storage/local-fs-adapter.js

@@ -0,0 +1,153 @@
+// Local filesystem storage adapter. Files live under a configurable base
+// directory (settings: `assets.local.baseDir`, default `var/assets`) using
+// the sharded path scheme from research.md R5.
+//
+// Public URLs are stable (`<base>/assets/file/<assetId>`), served by
+// routes.public.ts. Private URLs append `?token=<hmac>&exp=<unix>` validated by
+// the same route.
+//
+// `<base>` is absolute since D-223: `assets.local.public_url_base` when the
+// operator set one, this deployment's resolved public API origin when they did
+// not. It used to be the empty string in the second case, which made every URL
+// this adapter produced host-relative and left four composition-root sites and
+// two frontend helpers compensating for it, disagreeing.
+import { createReadStream } from 'node:fs';
+import { mkdir, rename, stat, unlink, access, constants as fsConstants } from 'node:fs/promises';
+import { dirname, join, isAbsolute } from 'node:path';
+import { pipeline } from 'node:stream/promises';
+import { createWriteStream } from 'node:fs';
+import { computeLocator } from './locator.js';
+import { resolvePublicUrlBase } from './public-url-base.js';
+import { BackendUnavailableError, ConfigurationError, LocatorMissingError, } from './errors.js';
+export class LocalFsStorageAdapter {
+    opts;
+    code = 'local';
+    /**
+     * The origin-and-prefix every URL this adapter builds starts with, decided
+     * once at construction: the operator's configured base when there is one,
+     * this deployment's public API origin when there is not (D-223).
+     */
+    publicBase;
+    constructor(opts) {
+        this.opts = opts;
+        if (!isAbsolute(opts.baseDir)) {
+            // Resolve relative to process cwd at construction time so we never
+            // accidentally write outside the configured tree.
+            this.opts = { ...opts, baseDir: join(process.cwd(), opts.baseDir) };
+        }
+        this.publicBase = resolvePublicUrlBase(opts.publicUrlBase, opts.publicApiBaseUrl);
+    }
+    async selfCheck() {
+        try {
+            await access(this.opts.baseDir, fsConstants.W_OK | fsConstants.R_OK);
+            const s = await stat(this.opts.baseDir);
+            if (!s.isDirectory()) {
+                return { ok: false, reason: `Base path is not a directory: ${this.opts.baseDir}` };
+            }
+            return { ok: true };
+        }
+        catch (e) {
+            // ENOENT → try to create it; that's a recoverable misconfig.
+            const reason = e instanceof Error ? e.message : String(e);
+            return { ok: false, reason };
+        }
+    }
+    newLocator(input) {
+        return computeLocator(input);
+    }
+    async put(input) {
+        if (!input.locator)
+            throw new LocatorMissingError('LocalFsStorageAdapter.put: empty locator');
+        const abs = this.toAbsolute(input.locator);
+        await mkdir(dirname(abs), { recursive: true });
+        const tmp = `${abs}.tmp-${process.pid}-${Date.now()}`;
+        try {
+            await pipeline(input.stream, createWriteStream(tmp));
+        }
+        catch (e) {
+            // Best-effort cleanup of the temp file.
+            try {
+                await unlink(tmp);
+            }
+            catch { /* ignore */ }
+            throw new BackendUnavailableError(`LocalFsStorageAdapter.put: failed writing ${input.locator}`, e);
+        }
+        try {
+            await rename(tmp, abs);
+        }
+        catch (e) {
+            try {
+                await unlink(tmp);
+            }
+            catch { /* ignore */ }
+            throw new BackendUnavailableError(`LocalFsStorageAdapter.put: failed renaming temp into place at ${input.locator}`, e);
+        }
+    }
+    async resolveUrl(input) {
+        const assetId = parseAssetIdFromLocator(input.locator);
+        const base = this.publicBase;
+        if (input.visibility === 'public') {
+            return { url: `${base}/assets/file/${assetId}`, expiresAt: null };
+        }
+        const ttl = input.ttlSec ?? this.opts.privateUrlTtlSec;
+        if (!Number.isInteger(ttl) || ttl <= 0) {
+            throw new ConfigurationError(`LocalFsStorageAdapter.resolveUrl: invalid TTL ${ttl}`);
+        }
+        const now = this.opts.now ?? (() => new Date());
+        const exp = Math.floor(now().getTime() / 1000) + ttl;
+        const token = this.opts.signer.sign({ assetId, exp });
+        return {
+            url: `${base}/assets/file/${assetId}?token=${token}&exp=${exp}`,
+            expiresAt: new Date(exp * 1000),
+        };
+    }
+    async open(input) {
+        const abs = this.toAbsolute(input.locator);
+        try {
+            // stat first so a missing file produces a recognizable error path.
+            await stat(abs);
+        }
+        catch (e) {
+            throw new BackendUnavailableError(`LocalFsStorageAdapter.open: missing file ${abs}`, e);
+        }
+        return createReadStream(abs);
+    }
+    async delete(input) {
+        const abs = this.toAbsolute(input.locator);
+        try {
+            await unlink(abs);
+        }
+        catch (e) {
+            // ENOENT is treated as failure here — the worker (FR-031) needs the
+            // backend to confirm removal; if the file is already gone we still
+            // need an explicit signal. Caller decides whether that's recoverable.
+            throw new BackendUnavailableError(`LocalFsStorageAdapter.delete: cannot remove ${abs}`, e);
+        }
+    }
+    /**
+     * Visibility on local-FS is enforced per-request by routes.public.ts (it
+     * reads the asset's current visibility live and demands a token for
+     * private). No server-side state to flip — no-op.
+     */
+    async setVisibility() {
+        /* no-op */
+    }
+    toAbsolute(locator) {
+        if (locator.startsWith('/')) {
+            throw new LocatorMissingError(`LocalFsStorageAdapter: locator must be relative, got "${locator}"`);
+        }
+        return join(this.opts.baseDir, locator);
+    }
+}
+export function parseAssetIdFromLocator(locator) {
+    // Locators produced by computeLocator look like `aa/bb/<uuid>.<ext>`.
+    // We extract the basename's UUID portion (everything before the first dot).
+    const last = locator.split('/').pop() ?? '';
+    const dotIdx = last.indexOf('.');
+    const id = dotIdx >= 0 ? last.slice(0, dotIdx) : last;
+    if (id.length < 4) {
+        throw new LocatorMissingError(`parseAssetIdFromLocator: cannot extract asset id from "${locator}"`);
+    }
+    return id;
+}
+//# sourceMappingURL=local-fs-adapter.js.map

package/dist/backend/services/storage/local-fs-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-fs-adapter.js","sourceRoot":"","sources":["../../../../src/backend/services/storage/local-fs-adapter.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,2EAA2E;AAC3E,+CAA+C;AAC/C,EAAE;AACF,qEAAqE;AACrE,gFAAgF;AAChF,kBAAkB;AAClB,EAAE;AACF,4EAA4E;AAC5E,+EAA+E;AAC/E,+EAA+E;AAC/E,+EAA+E;AAC/E,yDAAyD;AAEzD,OAAO,EAAE,gBAAgB,EAAmB,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,IAAI,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACjG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAU5C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE5D,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AA6BrB,MAAM,OAAO,qBAAqB;IAUH;IATpB,IAAI,GAAG,OAAgB,CAAC;IAEjC;;;;OAIG;IACc,UAAU,CAAS;IAEpC,YAA6B,IAA2B;QAA3B,SAAI,GAAJ,IAAI,CAAuB;QACtD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,mEAAmE;YACnE,kDAAkD;YAClD,IAAI,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACtE,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,oBAAoB,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACpF,CAAC;IAED,KAAK,CAAC,SAAS;QACb,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;YACrE,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACxC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;gBACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;YACrF,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,6DAA6D;YAC7D,MAAM,MAAM,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC1D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,UAAU,CAAC,KAA6B;QACtC,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAsB;QAC9B,IAAI,CAAC,KAAK,CAAC,OAAO;YAAE,MAAM,IAAI,mBAAmB,CAAC,0CAA0C,CAAC,CAAC;QAC9F,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,GAAG,GAAG,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACtD,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,wCAAwC;YACxC,IAAI,CAAC;gBAAC,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YACjD,MAAM,IAAI,uBAAuB,CAC/B,6CAA6C,KAAK,CAAC,OAAO,EAAE,EAC5D,CAAC,CACF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC;gBAAC,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YACjD,MAAM,IAAI,uBAAuB,CAC/B,iEAAiE,KAAK,CAAC,OAAO,EAAE,EAChF,CAAC,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAA6B;QAC5C,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC;QAC7B,IAAI,KAAK,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YAClC,OAAO,EAAE,GAAG,EAAE,GAAG,IAAI,gBAAgB,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACpE,CAAC;QACD,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,kBAAkB,CAAC,iDAAiD,GAAG,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC;QACrD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QACtD,OAAO;YACL,GAAG,EAAE,GAAG,IAAI,gBAAgB,OAAO,UAAU,KAAK,QAAQ,GAAG,EAAE;YAC/D,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC;SAChC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAA0B;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC;YACH,mEAAmE;YACnE,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,uBAAuB,CAAC,4CAA4C,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1F,CAAC;QACD,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAA0B;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,oEAAoE;YACpE,mEAAmE;YACnE,sEAAsE;YACtE,MAAM,IAAI,uBAAuB,CAC/B,+CAA+C,GAAG,EAAE,EACpD,CAAC,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,aAAa;QACjB,WAAW;IACb,CAAC;IAEO,UAAU,CAAC,OAAe;QAChC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,mBAAmB,CAC3B,yDAAyD,OAAO,GAAG,CACpE,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;CACF;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACrD,sEAAsE;IACtE,4EAA4E;IAC5E,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtD,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClB,MAAM,IAAI,mBAAmB,CAC3B,0DAA0D,OAAO,GAAG,CACrE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/backend/services/storage/locator.d.ts

@@ -0,0 +1,5 @@
+export declare function computeLocator(input: {
+    assetId: string;
+    originalFilename: string;
+}): string;
+//# sourceMappingURL=locator.d.ts.map

package/dist/backend/services/storage/locator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"locator.d.ts","sourceRoot":"","sources":["../../../../src/backend/services/storage/locator.ts"],"names":[],"mappings":"AAMA,wBAAgB,cAAc,CAAC,KAAK,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAU3F"}

package/dist/backend/services/storage/locator.js

@@ -0,0 +1,16 @@
+// Pure helper: shard the asset UUID into a directory path of the form
+// `<aa>/<bb>/<assetId>.<ext>` so neither the local-FS leaf directories nor
+// the cloud bucket key space ever bunches up. See research.md R5.
+import { extname } from 'node:path';
+export function computeLocator(input) {
+    const id = input.assetId.toLowerCase();
+    if (id.length < 4) {
+        throw new Error(`computeLocator: assetId too short ("${input.assetId}")`);
+    }
+    const aa = id.slice(0, 2);
+    const bb = id.slice(2, 4);
+    const rawExt = extname(input.originalFilename).slice(1);
+    const ext = rawExt.length > 0 ? rawExt : 'bin';
+    return `${aa}/${bb}/${id}.${ext}`;
+}
+//# sourceMappingURL=locator.js.map

package/dist/backend/services/storage/locator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"locator.js","sourceRoot":"","sources":["../../../../src/backend/services/storage/locator.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,2EAA2E;AAC3E,kEAAkE;AAElE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,MAAM,UAAU,cAAc,CAAC,KAAoD;IACjF,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;IACvC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,uCAAuC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1B,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;IAC/C,OAAO,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,CAAC;AACpC,CAAC"}

package/dist/backend/services/storage/object-storage-port.d.ts

@@ -0,0 +1,46 @@
+import type { ObjectStorageBackendCode, ObjectStoragePort, ObjectStore } from '@endora-commerce/contracts';
+import type { StorageAdapter } from './storage-adapter.js';
+/**
+ * `objectStoragePort` — the byte store this module's storage configuration
+ * already describes, published for the modules that store their own objects in
+ * it (`specs/110-instance-repository/` T118c).
+ *
+ * It is a **mapping and nothing else**: the in-process `StorageAdapter` SPI
+ * cannot be published as it stands, three ways, and each of the three is what
+ * one line of this file answers.
+ *
+ *  1. `put` and `open` name `NodeJS.ReadableStream`, and `@endora-commerce/contracts`
+ *     is compiled by `@endora-commerce/admin-kit` with `types: ["vite/client"]`
+ *     — no `@types/node`, so naming that namespace fails a consumer's build.
+ *     {@link AssetUploadStream} and {@link AssetByteStream} are the structural
+ *     shapes that survive it, and `Readable.from` is the one line that bridges
+ *     the write direction. The read direction needs no bridge: a Node stream
+ *     already satisfies the structural shape.
+ *  2. `setVisibility?` is **optional**, which D-97.3 refuses outright on a
+ *     published port — `lazyPort`'s proxy answers every property with a
+ *     function, so feature detection through one is impossible by construction.
+ *     It is absent here, and not by omission: an object a consumer stores under
+ *     its own prefix is written `private` and served by that consumer's own
+ *     route, so there is no visibility to flip.
+ *  3. `getForBackend` answered `StorageAdapter | LegacyAssetResolver`, and both
+ *     consumers of the byte surface probed for `open` at the call site to find
+ *     out which they had. Here it is **total**: `legacy` is not an object store
+ *     — it is a resolver for pre-013 rows whose URL this platform did not issue
+ *     — so it is not in {@link ObjectStorageBackendCode} and there is no branch
+ *     left to probe for.
+ *
+ * `newLocator`, `resolveUrl` and `selfCheck` are absent for the same reason:
+ * they are the *library's* questions. A consumer of this port computes its own
+ * locator under its own prefix, serves its objects itself, and has no
+ * administrative screen to report a backend's health on.
+ */
+export declare class ObjectStorageAdapter implements ObjectStoragePort {
+    private readonly registry;
+    constructor(registry: {
+        getActive(): Promise<StorageAdapter>;
+        getForBackend(backend: ObjectStorageBackendCode): Promise<StorageAdapter>;
+    });
+    getActive(): Promise<ObjectStore>;
+    getForBackend(backend: ObjectStorageBackendCode): Promise<ObjectStore>;
+}
+//# sourceMappingURL=object-storage-port.d.ts.map

package/dist/backend/services/storage/object-storage-port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"object-storage-port.d.ts","sourceRoot":"","sources":["../../../../src/backend/services/storage/object-storage-port.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAEV,wBAAwB,EACxB,iBAAiB,EAEjB,WAAW,EACZ,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,qBAAa,oBAAqB,YAAW,iBAAiB;IAE1D,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE;QACzB,SAAS,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;QACrC,aAAa,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;KAC3E;IAGG,SAAS,IAAI,OAAO,CAAC,WAAW,CAAC;IAIjC,aAAa,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,WAAW,CAAC;CAG7E"}

package/dist/backend/services/storage/object-storage-port.js

@@ -0,0 +1,78 @@
+import { Readable } from 'node:stream';
+/**
+ * `objectStoragePort` — the byte store this module's storage configuration
+ * already describes, published for the modules that store their own objects in
+ * it (`specs/110-instance-repository/` T118c).
+ *
+ * It is a **mapping and nothing else**: the in-process `StorageAdapter` SPI
+ * cannot be published as it stands, three ways, and each of the three is what
+ * one line of this file answers.
+ *
+ *  1. `put` and `open` name `NodeJS.ReadableStream`, and `@endora-commerce/contracts`
+ *     is compiled by `@endora-commerce/admin-kit` with `types: ["vite/client"]`
+ *     — no `@types/node`, so naming that namespace fails a consumer's build.
+ *     {@link AssetUploadStream} and {@link AssetByteStream} are the structural
+ *     shapes that survive it, and `Readable.from` is the one line that bridges
+ *     the write direction. The read direction needs no bridge: a Node stream
+ *     already satisfies the structural shape.
+ *  2. `setVisibility?` is **optional**, which D-97.3 refuses outright on a
+ *     published port — `lazyPort`'s proxy answers every property with a
+ *     function, so feature detection through one is impossible by construction.
+ *     It is absent here, and not by omission: an object a consumer stores under
+ *     its own prefix is written `private` and served by that consumer's own
+ *     route, so there is no visibility to flip.
+ *  3. `getForBackend` answered `StorageAdapter | LegacyAssetResolver`, and both
+ *     consumers of the byte surface probed for `open` at the call site to find
+ *     out which they had. Here it is **total**: `legacy` is not an object store
+ *     — it is a resolver for pre-013 rows whose URL this platform did not issue
+ *     — so it is not in {@link ObjectStorageBackendCode} and there is no branch
+ *     left to probe for.
+ *
+ * `newLocator`, `resolveUrl` and `selfCheck` are absent for the same reason:
+ * they are the *library's* questions. A consumer of this port computes its own
+ * locator under its own prefix, serves its objects itself, and has no
+ * administrative screen to report a backend's health on.
+ */
+export class ObjectStorageAdapter {
+    registry;
+    constructor(registry) {
+        this.registry = registry;
+    }
+    async getActive() {
+        return wrap(await this.registry.getActive());
+    }
+    async getForBackend(backend) {
+        return wrap(await this.registry.getForBackend(backend));
+    }
+}
+function wrap(adapter) {
+    // `code` is `StorageBackendCode` on the SPI and `legacy` is unrepresentable
+    // here: `getActive` builds one of the three real backends and throws on
+    // anything else, and `getForBackend` is overloaded so that the legacy arm is
+    // reachable only for the literal `'legacy'`, which this port cannot name.
+    const code = adapter.code;
+    return {
+        code,
+        async put(input) {
+            await adapter.put({
+                locator: input.locator,
+                mimeType: input.mimeType,
+                visibility: input.visibility,
+                // The one bridge, and it is here rather than in the caller because the
+                // caller is the one that must not name `node:stream`'s types across a
+                // package boundary. A Node `Readable` passed in comes back out of
+                // `Readable.from` as itself in every practical sense — it is iterated,
+                // not copied.
+                stream: Readable.from(input.stream),
+                sizeBytes: input.sizeBytes,
+            });
+        },
+        async open(input) {
+            return adapter.open(input);
+        },
+        async delete(input) {
+            await adapter.delete(input);
+        },
+    };
+}
+//# sourceMappingURL=object-storage-port.js.map

package/dist/backend/services/storage/object-storage-port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"object-storage-port.js","sourceRoot":"","sources":["../../../../src/backend/services/storage/object-storage-port.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAUvC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,OAAO,oBAAoB;IAEZ;IADnB,YACmB,QAGhB;QAHgB,aAAQ,GAAR,QAAQ,CAGxB;IACA,CAAC;IAEJ,KAAK,CAAC,SAAS;QACb,OAAO,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAAiC;QACnD,OAAO,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1D,CAAC;CACF;AAED,SAAS,IAAI,CAAC,OAAuB;IACnC,4EAA4E;IAC5E,wEAAwE;IACxE,6EAA6E;IAC7E,0EAA0E;IAC1E,MAAM,IAAI,GAAG,OAAO,CAAC,IAAgC,CAAC;IACtD,OAAO;QACL,IAAI;QACJ,KAAK,CAAC,GAAG,CAAC,KAA4B;YACpC,MAAM,OAAO,CAAC,GAAG,CAAC;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,uEAAuE;gBACvE,sEAAsE;gBACtE,kEAAkE;gBAClE,uEAAuE;gBACvE,cAAc;gBACd,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;gBACnC,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,KAA0B;YACnC,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,KAA0B;YACrC,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/backend/services/storage/public-url-base.d.ts

@@ -0,0 +1,50 @@
+/**
+ * The base every public asset URL this module produces is built on — D-223.
+ *
+ * **`assets_library` resolves the public API origin itself and every URL it
+ * produces is absolute.** One question used to have five answers in this tree:
+ * `absolutizePublicUrl` at two composition-root sites reading
+ * `BACKEND_PUBLIC_URL` first, `configuredPublicApiBaseUrl` plus a hand-written
+ * join at a third reading `PUBLIC_API_BASE_URL` first and silently skipping
+ * signed URLs, nothing at all at a fourth, and a helper in each of the two
+ * frontends. Every one of them existed to compensate for a setting documented
+ * as *"leave blank to use the request host"* — correct only for a browser on
+ * the API host, and wrong for an e-mail, a push payload, a partner's feed
+ * reader and a storefront on another origin. The module that builds the URL is
+ * the only party that knows which adapter produced it and whether it is signed,
+ * so it is the one that decides.
+ *
+ * **The fallback lives in the adapter's construction and not in the setting's
+ * default** (D-223, rejected alternative three): a setting default cannot read
+ * the environment at manifest-declaration time, and an operator who set the
+ * value explicitly must keep winning.
+ */
+/**
+ * Make one asset URL absolute against `apiOrigin`.
+ *
+ * Everything after the path travels untouched, which is the property the signed
+ * local-FS form depends on: `?token=…&exp=…` is validated over the asset id and
+ * the expiry, so a rebase that rewrote the query would produce a 403 rather
+ * than an image. An empty origin returns the URL unchanged — there is nothing
+ * to build on, and a wrong-but-plausible origin is worse than a relative URL.
+ */
+export declare function absolutizeAssetUrl(url: string, apiOrigin: string): string;
+/**
+ * The public URL base an adapter serves from, in the one precedence order every
+ * adapter in this module uses:
+ *
+ *  1. the operator's configured base, when it names its own origin — it wins,
+ *     always, which is D-223's third rejected alternative stated as code;
+ *  2. the operator's configured base, when it is a path — rebased onto the
+ *     resolved API origin, so a configured value cannot make the result
+ *     relative either;
+ *  3. blank — the caller's own default, which for the cloud adapters is the
+ *     bucket's absolute origin and for local-FS is the API origin itself.
+ *
+ * A blank `assets.s3.public_base_url` therefore keeps resolving to the bucket
+ * rather than to this API: substituting the API origin there would point every
+ * image at a host that does not serve the bytes. D-223's invariant is that the
+ * URL is absolute, and the cloud adapters' own defaults already are.
+ */
+export declare function resolvePublicUrlBase(configured: string | undefined, apiOrigin: string): string;
+//# sourceMappingURL=public-url-base.d.ts.map

package/dist/backend/services/storage/public-url-base.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-url-base.d.ts","sourceRoot":"","sources":["../../../../src/backend/services/storage/public-url-base.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAYH;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAKzE;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,SAAS,EAAE,MAAM,GAChB,MAAM,CAIR"}

package/dist/backend/services/storage/public-url-base.js

@@ -0,0 +1,70 @@
+/**
+ * The base every public asset URL this module produces is built on — D-223.
+ *
+ * **`assets_library` resolves the public API origin itself and every URL it
+ * produces is absolute.** One question used to have five answers in this tree:
+ * `absolutizePublicUrl` at two composition-root sites reading
+ * `BACKEND_PUBLIC_URL` first, `configuredPublicApiBaseUrl` plus a hand-written
+ * join at a third reading `PUBLIC_API_BASE_URL` first and silently skipping
+ * signed URLs, nothing at all at a fourth, and a helper in each of the two
+ * frontends. Every one of them existed to compensate for a setting documented
+ * as *"leave blank to use the request host"* — correct only for a browser on
+ * the API host, and wrong for an e-mail, a push payload, a partner's feed
+ * reader and a storefront on another origin. The module that builds the URL is
+ * the only party that knows which adapter produced it and whether it is signed,
+ * so it is the one that decides.
+ *
+ * **The fallback lives in the adapter's construction and not in the setting's
+ * default** (D-223, rejected alternative three): a setting default cannot read
+ * the environment at manifest-declaration time, and an operator who set the
+ * value explicitly must keep winning.
+ */
+/** A URL that already names its own origin — a scheme, or protocol-relative. */
+function namesItsOwnOrigin(url) {
+    return url.startsWith('//') || /^[a-z][a-z\d+.-]*:/i.test(url);
+}
+/** Drop the trailing slashes every caller here concatenates a path onto. */
+function withoutTrailingSlash(value) {
+    return value.replace(/\/+$/, '');
+}
+/**
+ * Make one asset URL absolute against `apiOrigin`.
+ *
+ * Everything after the path travels untouched, which is the property the signed
+ * local-FS form depends on: `?token=…&exp=…` is validated over the asset id and
+ * the expiry, so a rebase that rewrote the query would produce a 403 rather
+ * than an image. An empty origin returns the URL unchanged — there is nothing
+ * to build on, and a wrong-but-plausible origin is worse than a relative URL.
+ */
+export function absolutizeAssetUrl(url, apiOrigin) {
+    if (url === '' || namesItsOwnOrigin(url))
+        return url;
+    const origin = withoutTrailingSlash(apiOrigin.trim());
+    if (origin === '')
+        return url;
+    return url.startsWith('/') ? `${origin}${url}` : `${origin}/${url}`;
+}
+/**
+ * The public URL base an adapter serves from, in the one precedence order every
+ * adapter in this module uses:
+ *
+ *  1. the operator's configured base, when it names its own origin — it wins,
+ *     always, which is D-223's third rejected alternative stated as code;
+ *  2. the operator's configured base, when it is a path — rebased onto the
+ *     resolved API origin, so a configured value cannot make the result
+ *     relative either;
+ *  3. blank — the caller's own default, which for the cloud adapters is the
+ *     bucket's absolute origin and for local-FS is the API origin itself.
+ *
+ * A blank `assets.s3.public_base_url` therefore keeps resolving to the bucket
+ * rather than to this API: substituting the API origin there would point every
+ * image at a host that does not serve the bytes. D-223's invariant is that the
+ * URL is absolute, and the cloud adapters' own defaults already are.
+ */
+export function resolvePublicUrlBase(configured, apiOrigin) {
+    const trimmed = (configured ?? '').trim();
+    if (trimmed === '')
+        return withoutTrailingSlash(apiOrigin.trim());
+    return withoutTrailingSlash(absolutizeAssetUrl(trimmed, apiOrigin));
+}
+//# sourceMappingURL=public-url-base.js.map

package/dist/backend/services/storage/public-url-base.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-url-base.js","sourceRoot":"","sources":["../../../../src/backend/services/storage/public-url-base.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,gFAAgF;AAChF,SAAS,iBAAiB,CAAC,GAAW;IACpC,OAAO,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACjE,CAAC;AAED,4EAA4E;AAC5E,SAAS,oBAAoB,CAAC,KAAa;IACzC,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACnC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAW,EAAE,SAAiB;IAC/D,IAAI,GAAG,KAAK,EAAE,IAAI,iBAAiB,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IACrD,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;IACtD,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,GAAG,CAAC;IAC9B,OAAO,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,GAAG,EAAE,CAAC;AACtE,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,oBAAoB,CAClC,UAA8B,EAC9B,SAAiB;IAEjB,MAAM,OAAO,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1C,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,oBAAoB,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;IAClE,OAAO,oBAAoB,CAAC,kBAAkB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;AACtE,CAAC"}

package/dist/backend/services/storage/s3-adapter.d.ts

@@ -0,0 +1,50 @@
+import type { StorageAdapter, StorageAdapterSelfCheck, StorageNewLocatorInput, StoragePutInput, StorageResolveUrlInput, StorageResolveUrlOutput } from './storage-adapter.js';
+export interface S3AdapterConfig {
+    bucket: string;
+    region: string;
+    accessKeyId: string;
+    secretAccessKey: string;
+    endpoint?: string;
+    prefix?: string;
+    /**
+     * `assets.s3.public_base_url` — a CDN or a custom domain in front of the
+     * bucket. Blank means "serve from the bucket's own origin", which is already
+     * absolute; see {@link S3AdapterConfig.publicApiBaseUrl}.
+     */
+    publicBaseUrl?: string;
+    /**
+     * This deployment's resolved public API origin — D-223's fallback base.
+     *
+     * It is consulted here for one case: a `publicBaseUrl` the operator wrote as
+     * a **path** (`/media`), which would otherwise make this adapter produce a
+     * host-relative URL. A *blank* one keeps resolving to the bucket, because
+     * pointing an S3 object at this API's origin would name a host that does not
+     * serve those bytes — D-223's invariant is that the URL is absolute, and the
+     * bucket URL already is.
+     */
+    publicApiBaseUrl: string;
+    privateUrlTtlSec: number;
+}
+export declare class S3StorageAdapter implements StorageAdapter {
+    private readonly cfg;
+    readonly code: "s3";
+    private readonly client;
+    /** The absolute base public object URLs are built on — decided once (D-223). */
+    private readonly publicBase;
+    constructor(cfg: S3AdapterConfig);
+    selfCheck(): Promise<StorageAdapterSelfCheck>;
+    newLocator(input: StorageNewLocatorInput): string;
+    put(input: StoragePutInput): Promise<void>;
+    resolveUrl(input: StorageResolveUrlInput): Promise<StorageResolveUrlOutput>;
+    open(input: {
+        locator: string;
+    }): Promise<NodeJS.ReadableStream>;
+    delete(input: {
+        locator: string;
+    }): Promise<void>;
+    setVisibility(input: {
+        locator: string;
+        visibility: 'public' | 'private';
+    }): Promise<void>;
+}
+//# sourceMappingURL=s3-adapter.d.ts.map

package/dist/backend/services/storage/s3-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3-adapter.d.ts","sourceRoot":"","sources":["../../../../src/backend/services/storage/s3-adapter.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EACV,cAAc,EACd,uBAAuB,EACvB,sBAAsB,EACtB,eAAe,EACf,sBAAsB,EACtB,uBAAuB,EACxB,MAAM,sBAAsB,CAAC;AAS9B,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;;;OASG;IACH,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,qBAAa,gBAAiB,YAAW,cAAc;IAMzC,OAAO,CAAC,QAAQ,CAAC,GAAG;IALhC,QAAQ,CAAC,IAAI,EAAG,IAAI,CAAU;IAC9B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAW;IAClC,gFAAgF;IAChF,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;gBAEP,GAAG,EAAE,eAAe;IAwB3C,SAAS,IAAI,OAAO,CAAC,uBAAuB,CAAC;IAUnD,UAAU,CAAC,KAAK,EAAE,sBAAsB,GAAG,MAAM;IAM3C,GAAG,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAqB1C,UAAU,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAgB3E,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC;IAUhE,MAAM,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAajD,aAAa,CAAC,KAAK,EAAE;QACzB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,QAAQ,GAAG,SAAS,CAAC;KAClC,GAAG,OAAO,CAAC,IAAI,CAAC;CAgBlB"}