@fungi.computer/darkroom 0.4.0 → 0.5.0

package/README.md

@@ -113,9 +113,8 @@ save fails. An ambiguous provider execution is never silently dispatched again.
 
 Declare `metering: "unmetered"` when your host pays its provider directly. A
 metered host supplies idempotent `admit` and `settle` functions plus its own
-`refusalMessages` for insufficient credit, daily limits and denied spending.
-Quotes are estimates. Your metering owner decides the customer price and
-settlement.
+`refusalMessages` for insufficient credit and denied spending. Quotes are
+estimates. Your metering owner decides the customer price and settlement.
 
 A recognized provider safety refusal returns HTTP 400 with
 `code: "SAFETY_FILTER_REFUSED"`, `stage: "provider"`, and `retryable: false`.

package/dist/cloudflare.d.ts

@@ -3,4 +3,5 @@ export { createWorkersAiMediaProvider, type MediaAiPort, } from "./cloudflare/pr
 export type { MediaAiResult } from "./index.js";
 export { createImagesReferenceFitter, createImagesViewFitter, type MediaImagePort, } from "./cloudflare/reference-images.js";
 export { MediaOperationOwner } from "./media-operation-owner.js";
+export type { MediaShareSource } from "./media-operation-owner.js";
 export type { MediaOperationContext, MediaOperationStorage, MediaOperationBucket, MediaOperationObject, } from "./media-operation-storage.js";

package/dist/execution-error.d.ts

@@ -51,7 +51,7 @@ export declare class MediaSafetyFilterRefusal extends MediaExecutionError {
     constructor(options?: MediaExecutionErrorOptions);
 }
 /** Why the host's billing owner refused to admit a new generation. */
-export type MediaBillingRefusalCode = "insufficient_credits" | "daily_limit_reached" | "denied";
+export type MediaBillingRefusalCode = "insufficient_credits" | "denied";
 /** A definitive billing refusal before dispatch; nothing was generated or charged. */
 export declare class MediaBillingRefusal extends Error {
     /** Bounded refusal or failure reason. */

package/dist/media-operation-do.d.ts

@@ -20,6 +20,8 @@ export declare class MediaOperationDO extends DurableObject<MediaOperationCloudf
     protected mediaProvider(): MediaProvider | undefined;
     /** {@inheritDoc MediaOperationOwner.read} */
     read(...input: Parameters<MediaOperationOwner["read"]>): ReturnType<MediaOperationOwner["read"]>;
+    /** {@inheritDoc MediaOperationOwner.readShare} */
+    readShare(...input: Parameters<MediaOperationOwner["readShare"]>): ReturnType<MediaOperationOwner["readShare"]>;
     /** {@inheritDoc MediaOperationOwner.preflightErasure} */
     preflightErasure(...input: Parameters<MediaOperationOwner["preflightErasure"]>): ReturnType<MediaOperationOwner["preflightErasure"]>;
     /** {@inheritDoc MediaOperationOwner.erase} */

package/dist/media-operation-do.js

@@ -38,6 +38,10 @@ export class MediaOperationDO extends DurableObject {
     read(...input) {
         return this.owner.read(...input);
     }
+    /** {@inheritDoc MediaOperationOwner.readShare} */
+    readShare(...input) {
+        return this.owner.readShare(...input);
+    }
     /** {@inheritDoc MediaOperationOwner.preflightErasure} */
     preflightErasure(...input) {
         return this.owner.preflightErasure(...input);

package/dist/media-operation-owner.d.ts

@@ -94,6 +94,31 @@ export type MediaOperationProjection = Readonly<{
     /** Last transition timestamp in milliseconds since the epoch. */
     updatedAt: number;
 }>;
+/** What a host needs to serve one shared output: never references or receipts. */
+export type MediaShareSource = Readonly<{
+    /** Retry identity of the generation; a Print's id. */
+    requestId: string;
+    /** The person whose request generated it. */
+    actorUserId: string;
+    /** Retained exact provider bytes in the host's artifacts bucket. */
+    outputKey: string;
+    /** Media type of the retained bytes. */
+    contentType: string;
+    /** Length of the retained bytes. */
+    bytes: number;
+    /** Whether the output is a still image or a video. */
+    kind: "image" | "video";
+    /** The generation prompt, as sent to the model. */
+    prompt: string;
+    /** Catalog model identifier. */
+    model: string;
+    /** Requested width in pixels. */
+    width: number;
+    /** Requested height in pixels. */
+    height: number;
+    /** Video length in whole seconds; null for an image. */
+    durationSeconds: number | null;
+}>;
 /** An admission or claim decision with a safe operation projection. */
 export type MediaOperationDecision = Readonly<{
     /** Admission or claim outcome. */
@@ -160,6 +185,13 @@ export declare class MediaOperationOwner {
     private readRecord;
     /** Read the safe persisted operation projection, or null before admission or after erasure. */
     read(): MediaOperationProjection | null;
+    /**
+     * A settled operation's retained output and recipe, for a host that lets
+     * its owner share it publicly. Null before success or for another namespace,
+     * so a share can never reach another Team's output. References are never
+     * included.
+     */
+    readShare(namespace: string): MediaShareSource | null;
     /** Check host namespace, request identity and inactivity before erasure. */
     preflightErasure(namespace: string, requestId: string): MediaErasurePreflight;
     /** Erase inactive output and local storage, then retain the durable erasure marker. */

package/dist/media-operation-owner.js

@@ -348,6 +348,32 @@ export class MediaOperationOwner {
         const record = this.readRecord();
         return record === null ? null : this.project(record);
     }
+    /**
+     * A settled operation's retained output and recipe, for a host that lets
+     * its owner share it publicly. Null before success or for another namespace,
+     * so a share can never reach another Team's output. References are never
+     * included.
+     */
+    readShare(namespace) {
+        const record = this.readRecord();
+        if (record?.namespace !== namespace ||
+            record.state !== "succeeded" ||
+            record.output === null)
+            return null;
+        return Object.freeze({
+            requestId: record.requestId,
+            actorUserId: record.actorUserId,
+            outputKey: record.output.key,
+            contentType: outputMime(record.output.format),
+            bytes: record.output.bytes,
+            kind: record.output.format === "mp4" ? "video" : "image",
+            prompt: record.input.prompt,
+            model: record.input.model,
+            width: record.input.width,
+            height: record.input.height,
+            durationSeconds: record.input.durationSeconds ?? null,
+        });
+    }
     /** Check host namespace, request identity and inactivity before erasure. */
     preflightErasure(namespace, requestId) {
         if (this.ctx.id.name !== `media:${requestId}`)

package/docs/api/cloudflare.md

@@ -110,6 +110,43 @@ erasure.
 `string`; `bytes`: `number`; `format`: `string`; `costMilliunits`: `number`; \}
 \| `null`; `createdAt`: `number`; `updatedAt`: `number`; \}\> \| `null`
 
+##### readShare()
+
+```ts
+readShare(...input):
+  | Readonly<{
+  requestId: string;
+  actorUserId: string;
+  outputKey: string;
+  contentType: string;
+  bytes: number;
+  kind: "image" | "video";
+  prompt: string;
+  model: string;
+  width: number;
+  height: number;
+  durationSeconds: number | null;
+}>
+  | null;
+```
+
+A settled operation's retained output and recipe, for a host that lets its owner
+share it publicly. Null before success or for another namespace, so a share can
+never reach another Team's output. References are never included.
+
+###### Parameters
+
+| Parameter  | Type         | Description |
+| ---------- | ------------ | ----------- |
+| ...`input` | \[`string`\] | -           |
+
+###### Returns
+
+\| `Readonly`\<\{ `requestId`: `string`; `actorUserId`: `string`; `outputKey`:
+`string`; `contentType`: `string`; `bytes`: `number`; `kind`: `"image"` \|
+`"video"`; `prompt`: `string`; `model`: `string`; `width`: `number`; `height`:
+`number`; `durationSeconds`: `number` \| `null`; \}\> \| `null`
+
 ##### preflightErasure()
 
 ```ts
@@ -572,6 +609,28 @@ type MediaOperationCloudflareEnvironment = MediaOperationEnvironment &
 
 Retention storage and native background provider bindings for the operation DO.
 
+---
+
+### MediaShareSource
+
+```ts
+type MediaShareSource = Readonly<{
+  requestId: string;
+  actorUserId: string;
+  outputKey: string;
+  contentType: string;
+  bytes: number;
+  kind: "image" | "video";
+  prompt: string;
+  model: string;
+  width: number;
+  height: number;
+  durationSeconds: number | null;
+}>;
+```
+
+What a host needs to serve one shared output: never references or receipts.
+
 ## Functions
 
 ### createWorkersAiMediaProvider()

package/docs/api/server.md

@@ -207,6 +207,43 @@ erasure.
 `string`; `bytes`: `number`; `format`: `string`; `costMilliunits`: `number`; \}
 \| `null`; `createdAt`: `number`; `updatedAt`: `number`; \}\> \| `null`
 
+##### readShare()
+
+```ts
+readShare(namespace):
+  | Readonly<{
+  requestId: string;
+  actorUserId: string;
+  outputKey: string;
+  contentType: string;
+  bytes: number;
+  kind: "image" | "video";
+  prompt: string;
+  model: string;
+  width: number;
+  height: number;
+  durationSeconds: number | null;
+}>
+  | null;
+```
+
+A settled operation's retained output and recipe, for a host that lets its owner
+share it publicly. Null before success or for another namespace, so a share can
+never reach another Team's output. References are never included.
+
+###### Parameters
+
+| Parameter   | Type     |
+| ----------- | -------- |
+| `namespace` | `string` |
+
+###### Returns
+
+\| `Readonly`\<\{ `requestId`: `string`; `actorUserId`: `string`; `outputKey`:
+`string`; `contentType`: `string`; `bytes`: `number`; `kind`: `"image"` \|
+`"video"`; `prompt`: `string`; `model`: `string`; `width`: `number`; `height`:
+`number`; `durationSeconds`: `number` \| `null`; \}\> \| `null`
+
 ##### preflightErasure()
 
 ```ts
@@ -798,8 +835,7 @@ Private cause plus an independently decoded, safe provider diagnostic.
 ### MediaBillingRefusalCode
 
 ```ts
-type MediaBillingRefusalCode =
-  "insufficient_credits" | "daily_limit_reached" | "denied";
+type MediaBillingRefusalCode = "insufficient_credits" | "denied";
 ```
 
 Why the host's billing owner refused to admit a new generation.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fungi.computer/darkroom",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "author": "Levi <levi@technomancy.dev>",
   "description": "Media generation, durable output retention and provenance with host-owned authority and billing",
   "type": "module",
@@ -59,7 +59,7 @@
     "exifreader": "4.46.0",
     "@fungi.computer/ts-webp": "0.1.6",
     "@xmldom/xmldom": "0.9.12",
-    "@fungi.computer/agar": "0.6.0",
+    "@fungi.computer/agar": "0.7.0",
     "@fungi.computer/capnweb": "0.12.0"
   },
   "devDependencies": {