@gettersethya/mira 0.1.0-alpha.10

package/dist/src/http/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/http/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAI/B;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,GAA4D,EACA,EAAE,CAC9D,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE;IACpB,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CACnB,MAAM,CAAC,IAAI,CACT,kBAAkB,CAAC,UAAU,CAC3B,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,wBAAwB,CAAC,CAAC,UAAU,GAAG,EAAE,EACxE,EAAE,MAAM,EAAE,GAAY,EAAE,CACzB,CACF;IACH,cAAc,EAAE,GAAG,EAAE,CACnB,MAAM,CAAC,IAAI,CACT,kBAAkB,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,GAAY,EAAE,CAAC,CAChF;IACH,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CACrB,MAAM,CAAC,IAAI,CACT,kBAAkB,CAAC,UAAU,CAC3B,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAChD,EAAE,MAAM,EAAE,GAAY,EAAE,CACzB,CACF;IACH,aAAa,EAAE,GAAG,EAAE,CAClB,MAAM,CAAC,IAAI,CACT,kBAAkB,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,GAAY,EAAE,CAAC,CAChF;IACH,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,CACtB,MAAM,CAAC,IAAI,CACT,kBAAkB,CAAC,UAAU,CAC3B,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAC5C,EAAE,MAAM,EAAE,GAAY,EAAE,CACzB,CACF;IACH,QAAQ,EAAE,GAAG,EAAE,CACb,MAAM,CAAC,IAAI,CACT,kBAAkB,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAY,EAAE,CAAC,CACrF;CACJ,CAAC,CAAA"}

package/dist/src/http/file-serve.d.ts

@@ -0,0 +1,10 @@
+import { HttpRouter, HttpServerRequest, HttpServerResponse } from "@effect/platform";
+import { Effect } from "effect";
+import type { AnyCollectionDef } from "@gettersethya/mira-client";
+import { Repository } from "../repository/repository.js";
+import { FileStorage } from "../storage/storage.js";
+import { ThumbnailService } from "../thumbnail/types.js";
+import { AppConfig } from "../config/index.js";
+export type FileServeServices = Repository | FileStorage | ThumbnailService | AppConfig;
+export declare function makeFileServeRoute(collections: ReadonlyArray<AnyCollectionDef>): Effect.Effect<HttpServerResponse.HttpServerResponse, never, FileServeServices | HttpServerRequest.HttpServerRequest | HttpRouter.RouteContext>;
+//# sourceMappingURL=file-serve.d.ts.map

package/dist/src/http/file-serve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-serve.d.ts","sourceRoot":"","sources":["../../../src/http/file-serve.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACpF,OAAO,EAAS,MAAM,EAAoB,MAAM,QAAQ,CAAA;AACxD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AAGjE,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAA;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAClD,OAAO,EAAE,gBAAgB,EAAkB,MAAM,sBAAsB,CAAA;AACvE,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAI7C,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,WAAW,GAAG,gBAAgB,GAAG,SAAS,CAAA;AAmCvF,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,aAAa,CAAC,gBAAgB,CAAC,GAC3C,MAAM,CAAC,MAAM,CACd,kBAAkB,CAAC,kBAAkB,EACrC,KAAK,EACL,iBAAiB,GAAG,iBAAiB,CAAC,iBAAiB,GAAG,UAAU,CAAC,YAAY,CAClF,CA+BA"}

package/dist/src/http/file-serve.js

@@ -0,0 +1,159 @@
+import { HttpRouter, HttpServerRequest, HttpServerResponse } from "@effect/platform";
+import { Chunk, Effect, Redacted, Stream } from "effect";
+import { andWhere, idClause, resolveCtxPlaceholders } from "../collection-service/where.js";
+import { Repository } from "../repository/repository.js";
+import { FileStorage } from "../storage/storage.js";
+import { ThumbnailService, parseThumbSpec } from "../thumbnail/types.js";
+import { AppConfig } from "../config/index.js";
+import { enforcerForAction } from "../rule/enforcer.js";
+import { verifyFileToken } from "./auth.js";
+const MIME_MAP = {
+    jpg: "image/jpeg",
+    jpeg: "image/jpeg",
+    png: "image/png",
+    gif: "image/gif",
+    webp: "image/webp",
+    avif: "image/avif",
+    svg: "image/svg+xml",
+    pdf: "application/pdf",
+    txt: "text/plain",
+    html: "text/html",
+    css: "text/css",
+    js: "application/javascript",
+    json: "application/json",
+    mp4: "video/mp4",
+    mp3: "audio/mpeg",
+    wav: "audio/wav",
+    bin: "application/octet-stream"
+};
+function mimeFromKey(key) {
+    const ext = key.split(".").pop()?.toLowerCase() ?? "";
+    return MIME_MAP[ext] ?? "application/octet-stream";
+}
+function getQueryParam(req, name) {
+    const queryStr = req.url.includes("?") ? req.url.split("?")[1] : "";
+    return new URLSearchParams(queryStr).get(name) ?? undefined;
+}
+export function makeFileServeRoute(collections) {
+    const collectionMap = new Map(collections.map((c) => [c.name, c]));
+    return Effect.flatMap(HttpRouter.RouteContext, (routeCtx) => {
+        const colName = routeCtx.params["collection"];
+        const recordId = routeCtx.params["id"];
+        const filename = routeCtx.params["filename"];
+        if (colName === undefined || recordId === undefined || filename === undefined) {
+            return Effect.succeed(HttpServerResponse.unsafeJson({ error: "not_found" }, { status: 404 }));
+        }
+        const collection = collectionMap.get(colName);
+        if (collection === undefined) {
+            return Effect.succeed(HttpServerResponse.unsafeJson({ error: "not_found", message: `Unknown collection "${colName}"` }, { status: 404 }));
+        }
+        return Effect.flatMap(HttpServerRequest.HttpServerRequest, (req) => Effect.catchAllCause(serveFile(collection, recordId, filename, req), () => Effect.succeed(HttpServerResponse.unsafeJson({ error: "internal" }, { status: 500 }))));
+    });
+}
+function serveFile(collection, recordId, filename, req) {
+    return Effect.gen(function* () {
+        const config = yield* AppConfig;
+        const jwtSecret = Redacted.value(config.jwtSecret);
+        const repo = yield* Repository;
+        const fileStorage = yield* FileStorage;
+        const thumbSvc = yield* ThumbnailService;
+        // Step 2: fetch record directly (no rule enforcement yet)
+        const rows = yield* repo
+            .viewFilter(collection.name, { where: idClause(recordId) })
+            .pipe(Effect.orElseSucceed(() => []));
+        if (rows.length === 0) {
+            return HttpServerResponse.unsafeJson({ error: "not_found" }, { status: 404 });
+        }
+        const record = rows[0];
+        // Step 3: find the file field whose stored value equals `filename`
+        let fieldName;
+        let fieldProp;
+        for (const [k, prop] of Object.entries(collection.schema.properties)) {
+            if (prop["x-kind"] === "file" && record[k] === filename) {
+                fieldName = k;
+                fieldProp = prop;
+                break;
+            }
+        }
+        if (fieldName === undefined || fieldProp === undefined) {
+            return HttpServerResponse.unsafeJson({ error: "not_found" }, { status: 404 });
+        }
+        // Step 4: protected field — verify token and enforce view rule
+        if (fieldProp["x-protected"] === true) {
+            const tokenParam = getQueryParam(req, "token");
+            if (tokenParam === undefined) {
+                return HttpServerResponse.unsafeJson({ error: "forbidden" }, { status: 403 });
+            }
+            const tokenPayload = yield* verifyFileToken(tokenParam, jwtSecret).pipe(Effect.orElseSucceed(() => null));
+            if (tokenPayload === null || tokenPayload.filecol !== collection.name) {
+                return HttpServerResponse.unsafeJson({ error: "forbidden" }, { status: 403 });
+            }
+            // Reconstruct auth context from file token sub + col
+            const authRows = yield* repo
+                .viewFilter(tokenPayload.col, { where: idClause(tokenPayload.sub) })
+                .pipe(Effect.orElseSucceed(() => []));
+            if (authRows.length === 0) {
+                return HttpServerResponse.unsafeJson({ error: "forbidden" }, { status: 403 });
+            }
+            const ctx = {
+                auth: { collection: tokenPayload.col, record: authRows[0] },
+                headers: {},
+                query: {}
+            };
+            // Enforce the collection's view rule against the specific record
+            const ruleResult = enforcerForAction(collection.schema, "view");
+            if (ruleResult === null) {
+                return HttpServerResponse.unsafeJson({ error: "forbidden" }, { status: 403 });
+            }
+            const ruleWhere = yield* resolveCtxPlaceholders(ruleResult, ctx, collection.name, "view").pipe(Effect.catchTag("ForbiddenError", () => Effect.succeed(null)));
+            if (ruleWhere === null) {
+                return HttpServerResponse.unsafeJson({ error: "forbidden" }, { status: 403 });
+            }
+            const allowed = yield* repo
+                .viewFilter(collection.name, { where: andWhere(ruleWhere, idClause(recordId)) })
+                .pipe(Effect.orElseSucceed(() => []));
+            if (allowed.length === 0) {
+                return HttpServerResponse.unsafeJson({ error: "forbidden" }, { status: 403 });
+            }
+        }
+        // Steps 5-8: derive MIME, handle thumbnail with persistent cache, serve bytes
+        const mimeType = mimeFromKey(filename);
+        const rawThumb = getQueryParam(req, "thumb");
+        const thumbSpec = rawThumb !== undefined ? parseThumbSpec(rawThumb) : null;
+        let bytes;
+        if (thumbSpec !== null && rawThumb !== undefined && thumbSvc.supported(mimeType)) {
+            const cacheKey = `_thumbs/${filename}/${rawThumb}`;
+            const hit = yield* fileStorage.exists(cacheKey).pipe(Effect.orElseSucceed(() => false));
+            if (hit) {
+                bytes = yield* fileStorage.read(cacheKey).pipe(Effect.orDie);
+            }
+            else {
+                const original = yield* fileStorage.read(filename).pipe(Effect.catchTag("FileStorageNotFound", () => Effect.succeed(null)), Effect.orDie);
+                if (original === null) {
+                    return HttpServerResponse.unsafeJson({ error: "not_found" }, { status: 404 });
+                }
+                // On thumb error fall back to original rather than returning an error
+                const resized = yield* thumbSvc
+                    .resize(original, mimeType, thumbSpec)
+                    .pipe(Effect.orElse(() => Effect.succeed(original)));
+                // Best-effort: persist the thumbnail for future requests
+                yield* fileStorage
+                    .upload(cacheKey, Stream.fromChunk(Chunk.of(resized)), mimeType)
+                    .pipe(Effect.orElse(() => Effect.void));
+                bytes = resized;
+            }
+        }
+        else {
+            const result = yield* fileStorage.read(filename).pipe(Effect.catchTag("FileStorageNotFound", () => Effect.succeed(null)), Effect.orDie);
+            if (result === null) {
+                return HttpServerResponse.unsafeJson({ error: "not_found" }, { status: 404 });
+            }
+            bytes = result;
+        }
+        return HttpServerResponse.uint8Array(bytes, {
+            status: 200,
+            headers: { "content-type": mimeType }
+        });
+    }).pipe(Effect.orDie);
+}
+//# sourceMappingURL=file-serve.js.map

package/dist/src/http/file-serve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-serve.js","sourceRoot":"","sources":["../../../src/http/file-serve.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACpF,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAExD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAA;AAE1F,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAA;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAClD,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACvE,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAI3C,MAAM,QAAQ,GAA2B;IACvC,GAAG,EAAE,YAAY;IACjB,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,WAAW;IAChB,IAAI,EAAE,YAAY;IAClB,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,eAAe;IACpB,GAAG,EAAE,iBAAiB;IACtB,GAAG,EAAE,YAAY;IACjB,IAAI,EAAE,WAAW;IACjB,GAAG,EAAE,UAAU;IACf,EAAE,EAAE,wBAAwB;IAC5B,IAAI,EAAE,kBAAkB;IACxB,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,YAAY;IACjB,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,0BAA0B;CAChC,CAAA;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAA;IACrD,OAAO,QAAQ,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAA;AACpD,CAAC;AAED,SAAS,aAAa,CACpB,GAAwC,EACxC,IAAY;IAEZ,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IACnE,OAAO,IAAI,eAAe,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,SAAS,CAAA;AAC7D,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,WAA4C;IAM5C,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAElE,OAAO,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC,QAAQ,EAAE,EAAE;QAC1D,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;QAC7C,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACtC,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;QAE5C,IAAI,OAAO,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC9E,OAAO,MAAM,CAAC,OAAO,CACnB,kBAAkB,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CACvE,CAAA;QACH,CAAC;QACD,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAC7C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,MAAM,CAAC,OAAO,CACnB,kBAAkB,CAAC,UAAU,CAC3B,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,uBAAuB,OAAO,GAAG,EAAE,EAClE,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CACF,CAAA;QACH,CAAC;QAED,OAAO,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,iBAAiB,EAAE,CAAC,GAAG,EAAE,EAAE,CACjE,MAAM,CAAC,aAAa,CAClB,SAAS,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC,EAC9C,GAAG,EAAE,CACH,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CACxF,CACF,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,SAAS,CAChB,UAA4B,EAC5B,QAAgB,EAChB,QAAgB,EAChB,GAAwC;IAExC,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,SAAS,CAAA;QAC/B,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QAClD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,CAAA;QAC9B,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,WAAW,CAAA;QACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAA;QAExC,0DAA0D;QAC1D,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI;aACrB,UAAU,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;aAC1D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;QAEvC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,kBAAkB,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;QAC/E,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QAEtB,mEAAmE;QACnE,IAAI,SAA6B,CAAA;QACjC,IAAI,SAAoE,CAAA;QACxE,KAAK,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YACrE,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACxD,SAAS,GAAG,CAAC,CAAA;gBACb,SAAS,GAAG,IAAI,CAAA;gBAChB,MAAK;YACP,CAAC;QACH,CAAC;QAED,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YACvD,OAAO,kBAAkB,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;QAC/E,CAAC;QAED,+DAA+D;QAC/D,IAAI,SAAS,CAAC,aAAa,CAAC,KAAK,IAAI,EAAE,CAAC;YACtC,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;YAC9C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,OAAO,kBAAkB,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;YAC/E,CAAC;YAED,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,IAAI,CACrE,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CACjC,CAAA;YACD,IAAI,YAAY,KAAK,IAAI,IAAI,YAAY,CAAC,OAAO,KAAK,UAAU,CAAC,IAAI,EAAE,CAAC;gBACtE,OAAO,kBAAkB,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;YAC/E,CAAC;YAED,qDAAqD;YACrD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,IAAI;iBACzB,UAAU,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;iBACnE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;YAEvC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,OAAO,kBAAkB,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;YAC/E,CAAC;YAED,MAAM,GAAG,GAAe;gBACtB,IAAI,EAAE,EAAE,UAAU,EAAE,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE;gBAC3D,OAAO,EAAE,EAAE;gBACX,KAAK,EAAE,EAAE;aACV,CAAA;YAED,iEAAiE;YACjE,MAAM,UAAU,GAAG,iBAAiB,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;YAC/D,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;gBACxB,OAAO,kBAAkB,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;YAC/E,CAAC;YAED,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,sBAAsB,CAC7C,UAAU,EACV,GAAG,EACH,UAAU,CAAC,IAAI,EACf,MAAM,CACP,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAErE,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;gBACvB,OAAO,kBAAkB,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;YAC/E,CAAC;YAED,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,IAAI;iBACxB,UAAU,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;iBAC/E,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;YAEvC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO,kBAAkB,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;YAC/E,CAAC;QACH,CAAC;QAED,8EAA8E;QAC9E,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAA;QACtC,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;QAC5C,MAAM,SAAS,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAE1E,IAAI,KAAiB,CAAA;QAErB,IAAI,SAAS,KAAK,IAAI,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjF,MAAM,QAAQ,GAAG,WAAW,QAAQ,IAAI,QAAQ,EAAE,CAAA;YAClD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA;YAEvF,IAAI,GAAG,EAAE,CAAC;gBACR,KAAK,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YAC9D,CAAC;iBAAM,CAAC;gBACN,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CACrD,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAClE,MAAM,CAAC,KAAK,CACb,CAAA;gBACD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;oBACtB,OAAO,kBAAkB,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;gBAC/E,CAAC;gBAED,sEAAsE;gBACtE,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,QAAQ;qBAC5B,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC;qBACrC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;gBAEtD,yDAAyD;gBACzD,KAAK,CAAC,CAAC,WAAW;qBACf,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,QAAQ,CAAC;qBAC/D,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;gBAEzC,KAAK,GAAG,OAAO,CAAA;YACjB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CACnD,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAClE,MAAM,CAAC,KAAK,CACb,CAAA;YACD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,OAAO,kBAAkB,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;YAC/E,CAAC;YACD,KAAK,GAAG,MAAM,CAAA;QAChB,CAAC;QAED,OAAO,kBAAkB,CAAC,UAAU,CAAC,KAAK,EAAE;YAC1C,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE;SACtC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACvB,CAAC"}

package/dist/src/http/file-token.d.ts

@@ -0,0 +1,7 @@
+import { HttpRouter, HttpServerRequest, HttpServerResponse } from "@effect/platform";
+import { Effect } from "effect";
+import type { AnyCollectionDef } from "@gettersethya/mira-client";
+import { Repository } from "../repository/repository.js";
+import { AppConfig } from "../config/index.js";
+export declare function makeFileTokenRoute(collections: ReadonlyArray<AnyCollectionDef>): Effect.Effect<HttpServerResponse.HttpServerResponse, never, Repository | AppConfig | HttpServerRequest.HttpServerRequest | HttpRouter.RouteContext>;
+//# sourceMappingURL=file-token.d.ts.map

package/dist/src/http/file-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-token.d.ts","sourceRoot":"","sources":["../../../src/http/file-token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACpF,OAAO,EAAE,MAAM,EAAoB,MAAM,QAAQ,CAAA;AACjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAA;AAEvD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAkB7C,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,aAAa,CAAC,gBAAgB,CAAC,GAC3C,MAAM,CAAC,MAAM,CACd,kBAAkB,CAAC,kBAAkB,EACrC,KAAK,EACL,UAAU,GAAG,SAAS,GAAG,iBAAiB,CAAC,iBAAiB,GAAG,UAAU,CAAC,YAAY,CACvF,CAUA"}

package/dist/src/http/file-token.js

@@ -0,0 +1,57 @@
+import { HttpServerRequest, HttpServerResponse } from "@effect/platform";
+import { Effect, Redacted, Schema } from "effect";
+import { Repository } from "../repository/repository.js";
+import { idClause } from "../collection-service/where.js";
+import { AppConfig } from "../config/index.js";
+import { signFileToken, verifyJwt } from "./auth.js";
+const TokenRequestSchema = Schema.Struct({
+    collection: Schema.String
+});
+function extractToken(req) {
+    const auth = req.headers["authorization"];
+    if (typeof auth === "string") {
+        const m = auth.match(/^Bearer\s+(.+)$/i);
+        if (m !== null)
+            return m[1];
+    }
+    return req.cookies["mira_token"] ?? null;
+}
+export function makeFileTokenRoute(collections) {
+    const collectionMap = new Map(collections.map((c) => [c.name, c]));
+    return Effect.flatMap(HttpServerRequest.HttpServerRequest, (req) => Effect.catchAllCause(issueToken(req, collectionMap), () => Effect.succeed(HttpServerResponse.unsafeJson({ error: "internal" }, { status: 500 }))));
+}
+function issueToken(req, collectionMap) {
+    return Effect.gen(function* () {
+        const config = yield* AppConfig;
+        const jwtSecret = Redacted.value(config.jwtSecret);
+        // Require auth token from Bearer header or mira_token cookie
+        const rawToken = extractToken(req);
+        if (rawToken === null) {
+            return HttpServerResponse.unsafeJson({ error: "unauthorized" }, { status: 401 });
+        }
+        const authPayload = yield* verifyJwt(rawToken, jwtSecret).pipe(Effect.orElseSucceed(() => null));
+        if (authPayload === null) {
+            return HttpServerResponse.unsafeJson({ error: "unauthorized" }, { status: 401 });
+        }
+        // Verify the auth user still exists
+        const repo = yield* Repository;
+        const authRows = yield* repo
+            .viewFilter(authPayload.col, { where: idClause(authPayload.sub) })
+            .pipe(Effect.orElseSucceed(() => []));
+        if (authRows.length === 0) {
+            return HttpServerResponse.unsafeJson({ error: "unauthorized" }, { status: 401 });
+        }
+        // Parse body for target collection
+        const body = yield* req.json.pipe(Effect.flatMap(Schema.decodeUnknown(TokenRequestSchema)), Effect.orElseSucceed(() => null));
+        if (body === null) {
+            return HttpServerResponse.unsafeJson({ error: "validation_failed", issues: ["collection is required"] }, { status: 422 });
+        }
+        if (!collectionMap.has(body.collection)) {
+            return HttpServerResponse.unsafeJson({ error: "not_found", message: `Unknown collection "${body.collection}"` }, { status: 404 });
+        }
+        const fileToken = yield* signFileToken({ sub: authPayload.sub, col: authPayload.col, filecol: body.collection }, jwtSecret).pipe(Effect.orDie);
+        const expiresAt = Date.now() + 5 * 60 * 1000;
+        return HttpServerResponse.unsafeJson({ token: fileToken, expiresAt }, { status: 200 });
+    }).pipe(Effect.orDie);
+}
+//# sourceMappingURL=file-token.js.map

package/dist/src/http/file-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-token.js","sourceRoot":"","sources":["../../../src/http/file-token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACpF,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAEjD,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAA;AACvD,OAAO,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAA;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAC7C,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAEpD,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC;IACvC,UAAU,EAAE,MAAM,CAAC,MAAM;CAC1B,CAAC,CAAA;AAEF,SAAS,YAAY,CACnB,GAAwC;IAExC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAA;IACzC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAA;QACxC,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAA;IAC7B,CAAC;IACD,OAAO,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,IAAI,CAAA;AAC1C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,WAA4C;IAM5C,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAElE,OAAO,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,iBAAiB,EAAE,CAAC,GAAG,EAAE,EAAE,CACjE,MAAM,CAAC,aAAa,CAClB,UAAU,CAAC,GAAG,EAAE,aAAa,CAAC,EAC9B,GAAG,EAAE,CACH,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CACxF,CACF,CAAA;AACH,CAAC;AAED,SAAS,UAAU,CACjB,GAAwC,EACxC,aAA4C;IAE5C,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,SAAS,CAAA;QAC/B,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QAElD,6DAA6D;QAC7D,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAA;QAClC,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,OAAO,kBAAkB,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;QAClF,CAAC;QAED,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,IAAI,CAC5D,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CACjC,CAAA;QACD,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzB,OAAO,kBAAkB,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;QAClF,CAAC;QAED,oCAAoC;QACpC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,CAAA;QAC9B,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,IAAI;aACzB,UAAU,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;aACjE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;QAEvC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,kBAAkB,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;QAClF,CAAC;QAED,mCAAmC;QACnC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAC/B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAC,EACxD,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CACjC,CAAA;QACD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,OAAO,kBAAkB,CAAC,UAAU,CAClC,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAClE,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACxC,OAAO,kBAAkB,CAAC,UAAU,CAClC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,uBAAuB,IAAI,CAAC,UAAU,GAAG,EAAE,EAC1E,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;QACH,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,aAAa,CACpC,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,EACxE,SAAS,CACV,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAEpB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAA;QAE5C,OAAO,kBAAkB,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IACxF,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACvB,CAAC"}

package/dist/src/http/files.d.ts

@@ -0,0 +1,11 @@
+import { HttpServerRequest } from "@effect/platform";
+import { Effect } from "effect";
+import { CryptoService } from "../crypto/index.js";
+import type { CollectionSchema } from "@gettersethya/mira-client";
+import { ValidationError } from "../collection-service/errors.js";
+import { FileStorage } from "../storage/storage.js";
+export declare const makeFileKey: (originalFilename: string) => Effect.Effect<string, never, CryptoService>;
+export declare function processMultipartUpload(request: HttpServerRequest.HttpServerRequest, schema: CollectionSchema, collectionName: string): Effect.Effect<{
+    [x: string]: string;
+}, import("../storage/storage.js").FileStorageError | ValidationError, CryptoService | FileStorage>;
+//# sourceMappingURL=files.d.ts.map

package/dist/src/http/files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../../../src/http/files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAEpD,OAAO,EAAE,MAAM,EAAU,MAAM,QAAQ,CAAA;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAA;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAElD,eAAO,MAAM,WAAW,GAAI,kBAAkB,MAAM,gDAOhD,CAAA;AAoBJ,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,iBAAiB,CAAC,iBAAiB,EAC5C,MAAM,EAAE,gBAAgB,EACxB,cAAc,EAAE,MAAM;;mGAiFvB"}

package/dist/src/http/files.js

@@ -0,0 +1,85 @@
+import * as Multipart from "@effect/platform/Multipart";
+import { Effect, Stream } from "effect";
+import { CryptoService } from "../crypto/index.js";
+import { ValidationError } from "../collection-service/errors.js";
+import { FileStorage } from "../storage/storage.js";
+export const makeFileKey = (originalFilename) => Effect.gen(function* () {
+    const crypto = yield* CryptoService;
+    const uuid = yield* crypto.randomUUID();
+    const dotIdx = originalFilename.lastIndexOf(".");
+    const ext = dotIdx !== -1 ? originalFilename.slice(dotIdx + 1) : "bin";
+    return `${uuid}.${ext}`;
+});
+function withSizeLimit(stream, maxSize, field, collection) {
+    return stream.pipe(Stream.mapAccumEffect(0, (total, chunk) => {
+        const next = total + chunk.byteLength;
+        if (next > maxSize) {
+            return Effect.fail(new ValidationError({
+                collection,
+                issues: [`File on field "${field}" exceeds maximum size of ${maxSize} bytes`]
+            }));
+        }
+        const pair = [next, chunk];
+        return Effect.succeed(pair);
+    }));
+}
+export function processMultipartUpload(request, schema, collectionName) {
+    return Effect.gen(function* () {
+        const ct = request.headers["content-type"] ?? "";
+        if (!ct.includes("multipart/form-data")) {
+            return yield* new ValidationError({
+                collection: collectionName,
+                issues: ["Expected multipart/form-data content type"]
+            });
+        }
+        const fields = {};
+        const fileKeys = {};
+        const fileStorage = yield* FileStorage;
+        yield* Stream.runForEach(request.multipartStream.pipe(Stream.mapError((e) => new ValidationError({
+            collection: collectionName,
+            issues: [`Multipart parse error: ${e.message}`]
+        }))), (part) => Effect.gen(function* () {
+            if (Multipart.isFile(part)) {
+                const prop = schema.properties[part.key];
+                if (prop === undefined) {
+                    return yield* new ValidationError({
+                        collection: collectionName,
+                        issues: [`Field "${part.key}" does not exist on collection "${collectionName}"`]
+                    });
+                }
+                if (prop["x-kind"] !== "file") {
+                    return yield* new ValidationError({
+                        collection: collectionName,
+                        issues: [`Field "${part.key}" is not a file field`]
+                    });
+                }
+                const allowedMimes = prop["x-mimeTypes"];
+                if (allowedMimes !== undefined && allowedMimes.length > 0 && !allowedMimes.includes(part.contentType)) {
+                    return yield* new ValidationError({
+                        collection: collectionName,
+                        issues: [
+                            `File on field "${part.key}" has unsupported MIME type "${part.contentType}". Allowed: ${allowedMimes.join(", ")}`
+                        ]
+                    });
+                }
+                const key = yield* makeFileKey(part.name);
+                const mappedContent = part.content.pipe(Stream.mapError((e) => new ValidationError({
+                    collection: collectionName,
+                    issues: [`Failed to read file "${part.key}": ${e.message}`]
+                })));
+                const uploadStream = prop["x-maxSize"] !== undefined
+                    ? withSizeLimit(mappedContent, prop["x-maxSize"], part.key, collectionName)
+                    : mappedContent;
+                yield* fileStorage
+                    .upload(key, uploadStream, part.contentType)
+                    .pipe(Effect.onError(() => fileStorage.delete(key).pipe(Effect.orElse(() => Effect.void))));
+                fileKeys[part.key] = key;
+            }
+            else if (Multipart.isField(part)) {
+                fields[part.key] = part.value;
+            }
+        }));
+        return { ...fields, ...fileKeys };
+    });
+}
+//# sourceMappingURL=files.js.map

package/dist/src/http/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../../../src/http/files.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,SAAS,MAAM,4BAA4B,CAAA;AACvD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAEjD,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAA;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAElD,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,gBAAwB,EAAE,EAAE,CACtD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,aAAa,CAAA;IACnC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,CAAA;IACvC,MAAM,MAAM,GAAG,gBAAgB,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;IAChD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;IACtE,OAAO,GAAG,IAAI,IAAI,GAAG,EAAE,CAAA;AACzB,CAAC,CAAC,CAAA;AAEJ,SAAS,aAAa,CAAI,MAAoC,EAAE,OAAe,EAAE,KAAa,EAAE,UAAkB;IAChH,OAAO,MAAM,CAAC,IAAI,CAChB,MAAM,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACxC,MAAM,IAAI,GAAG,KAAK,GAAG,KAAK,CAAC,UAAU,CAAA;QACrC,IAAI,IAAI,GAAG,OAAO,EAAE,CAAC;YACnB,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,eAAe,CAAC;gBAClB,UAAU;gBACV,MAAM,EAAE,CAAC,kBAAkB,KAAK,6BAA6B,OAAO,QAAQ,CAAC;aAC9E,CAAC,CACH,CAAA;QACH,CAAC;QACD,MAAM,IAAI,GAAkC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QACzD,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7B,CAAC,CAAC,CACH,CAAA;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,OAA4C,EAC5C,MAAwB,EACxB,cAAsB;IAEtB,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzB,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAA;QAChD,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;YACxC,OAAO,KAAK,CAAC,CAAC,IAAI,eAAe,CAAC;gBAChC,UAAU,EAAE,cAAc;gBAC1B,MAAM,EAAE,CAAC,2CAA2C,CAAC;aACtD,CAAC,CAAA;QACJ,CAAC;QAED,MAAM,MAAM,GAA2B,EAAE,CAAA;QACzC,MAAM,QAAQ,GAA2B,EAAE,CAAA;QAC3C,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,WAAW,CAAA;QAEtC,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CACtB,OAAO,CAAC,eAAe,CAAC,IAAI,CAC1B,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,EAAE,EAAE,CACJ,IAAI,eAAe,CAAC;YAClB,UAAU,EAAE,cAAc;YAC1B,MAAM,EAAE,CAAC,0BAA0B,CAAC,CAAC,OAAO,EAAE,CAAC;SAChD,CAAC,CACL,CACF,EACD,CAAC,IAAI,EAAE,EAAE,CACP,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;gBACxC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;oBACvB,OAAO,KAAK,CAAC,CAAC,IAAI,eAAe,CAAC;wBAChC,UAAU,EAAE,cAAc;wBAC1B,MAAM,EAAE,CAAC,UAAU,IAAI,CAAC,GAAG,mCAAmC,cAAc,GAAG,CAAC;qBACjF,CAAC,CAAA;gBACJ,CAAC;gBACD,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,MAAM,EAAE,CAAC;oBAC9B,OAAO,KAAK,CAAC,CAAC,IAAI,eAAe,CAAC;wBAChC,UAAU,EAAE,cAAc;wBAC1B,MAAM,EAAE,CAAC,UAAU,IAAI,CAAC,GAAG,uBAAuB,CAAC;qBACpD,CAAC,CAAA;gBACJ,CAAC;gBAED,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,CAAA;gBACxC,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;oBACtG,OAAO,KAAK,CAAC,CAAC,IAAI,eAAe,CAAC;wBAChC,UAAU,EAAE,cAAc;wBAC1B,MAAM,EAAE;4BACN,kBAAkB,IAAI,CAAC,GAAG,gCAAgC,IAAI,CAAC,WAAW,eAAe,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;yBACnH;qBACF,CAAC,CAAA;gBACJ,CAAC;gBAED,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBACzC,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CACrC,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,EAAE,EAAE,CACJ,IAAI,eAAe,CAAC;oBAClB,UAAU,EAAE,cAAc;oBAC1B,MAAM,EAAE,CAAC,wBAAwB,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;iBAC5D,CAAC,CACL,CACF,CAAA;gBAED,MAAM,YAAY,GAChB,IAAI,CAAC,WAAW,CAAC,KAAK,SAAS;oBAC7B,CAAC,CAAC,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC;oBAC3E,CAAC,CAAC,aAAa,CAAA;gBAEnB,KAAK,CAAC,CAAC,WAAW;qBACf,MAAM,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC;qBAC3C,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;gBAE7F,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;YAC1B,CAAC;iBAAM,IAAI,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAA;YAC/B,CAAC;QACH,CAAC,CAAC,CACL,CAAA;QAED,OAAO,EAAE,GAAG,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAA;IACnC,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/src/http/index.d.ts

@@ -0,0 +1,11 @@
+export { makeCollectionRouter } from "./router.js";
+export { catchCollectionErrors } from "./errors.js";
+export { processMultipartUpload, makeFileKey } from "./files.js";
+export { makeFileServeRoute } from "./file-serve.js";
+export type { FileServeServices } from "./file-serve.js";
+export { makeFileTokenRoute } from "./file-token.js";
+export { AuthService, hashPassword, verifyPassword, signJwt, verifyJwt, signFileToken, verifyFileToken } from "./auth.js";
+export type { JwtPayload, FileTokenPayload } from "./auth.js";
+export { HttpServerFactory } from "./server-factory.js";
+export { telemetryLogsRoute, telemetrySpansRoute } from "./telemetry-routes.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/src/http/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/http/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AACnD,OAAO,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AACpD,YAAY,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AACpD,OAAO,EACL,WAAW,EACX,YAAY,EACZ,cAAc,EACd,OAAO,EACP,SAAS,EACT,aAAa,EACb,eAAe,EAChB,MAAM,WAAW,CAAA;AAClB,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAA;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA"}

package/dist/src/http/index.js

@@ -0,0 +1,9 @@
+export { makeCollectionRouter } from "./router.js";
+export { catchCollectionErrors } from "./errors.js";
+export { processMultipartUpload, makeFileKey } from "./files.js";
+export { makeFileServeRoute } from "./file-serve.js";
+export { makeFileTokenRoute } from "./file-token.js";
+export { AuthService, hashPassword, verifyPassword, signJwt, verifyJwt, signFileToken, verifyFileToken } from "./auth.js";
+export { HttpServerFactory } from "./server-factory.js";
+export { telemetryLogsRoute, telemetrySpansRoute } from "./telemetry-routes.js";
+//# sourceMappingURL=index.js.map

package/dist/src/http/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/http/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AACnD,OAAO,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AAEpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AACpD,OAAO,EACL,WAAW,EACX,YAAY,EACZ,cAAc,EACd,OAAO,EACP,SAAS,EACT,aAAa,EACb,eAAe,EAChB,MAAM,WAAW,CAAA;AAElB,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA"}

package/dist/src/http/ip-middleware.d.ts

@@ -0,0 +1,4 @@
+import { HttpApp, HttpServerRequest } from "@effect/platform";
+import { Effect } from "effect";
+export declare const ipAnnotationMiddleware: <E, R>(app: HttpApp.Default<E, R>) => Effect.Effect<import("@effect/platform/HttpServerResponse").HttpServerResponse, E, HttpServerRequest.HttpServerRequest | R>;
+//# sourceMappingURL=ip-middleware.d.ts.map

package/dist/src/http/ip-middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ip-middleware.d.ts","sourceRoot":"","sources":["../../../src/http/ip-middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACtE,OAAO,EAAE,MAAM,EAAU,MAAM,QAAQ,CAAA;AAYvC,eAAO,MAAM,sBAAsB,GAAI,CAAC,EAAE,CAAC,EAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,gIAgBnE,CAAA"}

package/dist/src/http/ip-middleware.js

@@ -0,0 +1,24 @@
+import { Headers, HttpServerRequest } from "@effect/platform";
+import { Effect, Option } from "effect";
+function extractClientIp(headers) {
+    const forwarded = Headers.get(headers, "x-forwarded-for");
+    if (Option.isSome(forwarded)) {
+        const first = forwarded.value.split(",")[0].trim();
+        if (first.length > 0)
+            return first;
+    }
+    const realIp = Headers.get(headers, "x-real-ip");
+    return Option.isSome(realIp) ? realIp.value.trim() : undefined;
+}
+export const ipAnnotationMiddleware = (app) => Effect.gen(function* () {
+    const request = yield* HttpServerRequest.HttpServerRequest;
+    const ip = extractClientIp(request.headers);
+    yield* Effect.currentSpan.pipe(Effect.tap((span) => Effect.sync(() => {
+        span.attribute("auth.collection", "");
+        if (ip !== undefined) {
+            span.attribute("http.client_ip", ip ?? "");
+        }
+    })), Effect.ignore);
+    return yield* app;
+});
+//# sourceMappingURL=ip-middleware.js.map

package/dist/src/http/ip-middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ip-middleware.js","sourceRoot":"","sources":["../../../src/http/ip-middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAW,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACtE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAEvC,SAAS,eAAe,CAAC,OAAwB;IAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAA;IACzD,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QAClD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAA;IACpC,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;IAChD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;AAChE,CAAC;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAO,GAA0B,EAAE,EAAE,CACzE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,iBAAiB,CAAA;IAC1D,MAAM,EAAE,GAAG,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAC3C,KAAK,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAC5B,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAClB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;QACf,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAA;QACrC,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;QAC5C,CAAC;IACH,CAAC,CAAC,CACH,EACD,MAAM,CAAC,MAAM,CACd,CAAA;IACD,OAAO,KAAK,CAAC,CAAC,GAAG,CAAA;AACnB,CAAC,CAAC,CAAA"}

package/dist/src/http/params.d.ts

@@ -0,0 +1,15 @@
+import { Effect } from "effect";
+import type { CollectionSchema } from "@gettersethya/mira-client";
+import { ValidationError } from "../collection-service/errors.js";
+import type { FilterNode } from "@gettersethya/mira-client";
+import type { SortOrder } from "../repository/types.js";
+import type { RequestCtx } from "../collection-service/context.js";
+export declare function parseFilterParam(query: RequestCtx["query"], schema: CollectionSchema, collectionName: string): Effect.Effect<FilterNode | null, ValidationError>;
+export declare function parseSortParam(query: RequestCtx["query"], schema: CollectionSchema): SortOrder | null;
+export declare function parsePaginationParam(query: RequestCtx["query"]): {
+    cursor: number | null;
+    limit: number;
+};
+export declare function parseSelectParam(query: RequestCtx["query"]): ReadonlyArray<string> | null;
+export declare function parseExpandParam(query: RequestCtx["query"]): ReadonlyArray<string> | null;
+//# sourceMappingURL=params.d.ts.map

package/dist/src/http/params.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"params.d.ts","sourceRoot":"","sources":["../../../src/http/params.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC/B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAA;AAEhE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAC3D,OAAO,KAAK,EAAE,SAAS,EAAe,MAAM,uBAAuB,CAAA;AACnE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAA;AAEjE,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,EAC1B,MAAM,EAAE,gBAAgB,EACxB,cAAc,EAAE,MAAM,GACrB,MAAM,CAAC,MAAM,CAAC,UAAU,GAAG,IAAI,EAAE,eAAe,CAAC,CAoBnD;AAED,wBAAgB,cAAc,CAC5B,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,EAC1B,MAAM,EAAE,gBAAgB,GACvB,SAAS,GAAG,IAAI,CAMlB;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,GACzB;IAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAM1C;AAED,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,GACzB,aAAa,CAAC,MAAM,CAAC,GAAG,IAAI,CAI9B;AAED,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,GACzB,aAAa,CAAC,MAAM,CAAC,GAAG,IAAI,CAI9B"}

package/dist/src/http/params.js

@@ -0,0 +1,48 @@
+import { Schema } from "effect";
+import { Effect } from "effect";
+import { ValidationError } from "../collection-service/errors.js";
+import { FilterNodeSchema } from "@gettersethya/mira-client";
+export function parseFilterParam(query, schema, collectionName) {
+    const raw = typeof query["filter"] === "string" ? query["filter"] : null;
+    if (raw === null)
+        return Effect.succeed(null);
+    return Effect.gen(function* () {
+        const parsed = yield* Effect.try({
+            try: () => JSON.parse(raw),
+            catch: () => new ValidationError({ collection: collectionName, issues: ["filter: invalid JSON"] })
+        });
+        const decoded = yield* Schema.decodeUnknown(FilterNodeSchema)(parsed).pipe(Effect.mapError((e) => new ValidationError({
+            collection: collectionName,
+            issues: [`filter: schema mismatch: ${e.message}`]
+        })));
+        return decoded;
+    });
+}
+export function parseSortParam(query, schema) {
+    const sortField = typeof query["sort"] === "string" ? query["sort"] : null;
+    if (sortField === null || !schema.properties[sortField])
+        return null;
+    const rawOrder = typeof query["order"] === "string" ? query["order"] : null;
+    const direction = rawOrder === "desc" ? "desc" : "asc";
+    return { field: sortField, direction };
+}
+export function parsePaginationParam(query) {
+    const rawCursor = typeof query["after"] === "string" ? Number(query["after"]) : NaN;
+    const rawLimit = typeof query["limit"] === "string" ? Number(query["limit"]) : NaN;
+    const cursor = !Number.isNaN(rawCursor) && rawCursor >= 0 ? Math.floor(rawCursor) : null;
+    const limit = !Number.isNaN(rawLimit) && rawLimit >= 1 ? Math.min(Math.floor(rawLimit), 100) : 30;
+    return { cursor, limit };
+}
+export function parseSelectParam(query) {
+    const raw = typeof query["select"] === "string" ? query["select"] : null;
+    if (raw === null)
+        return null;
+    return raw.split(",").map((s) => s.trim()).filter((s) => s.length > 0);
+}
+export function parseExpandParam(query) {
+    const raw = typeof query["expand"] === "string" ? query["expand"] : null;
+    if (raw === null)
+        return null;
+    return raw.split(",").map((s) => s.trim()).filter((s) => s.length > 0);
+}
+//# sourceMappingURL=params.js.map

package/dist/src/http/params.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"params.js","sourceRoot":"","sources":["../../../src/http/params.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE/B,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAA;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AAK5D,MAAM,UAAU,gBAAgB,CAC9B,KAA0B,EAC1B,MAAwB,EACxB,cAAsB;IAEtB,MAAM,GAAG,GAAG,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACxE,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAE7C,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YAC/B,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YAC1B,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,eAAe,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,sBAAsB,CAAC,EAAE,CAAC;SACnG,CAAC,CAAA;QAEF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CACxE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CACpB,IAAI,eAAe,CAAC;YAClB,UAAU,EAAE,cAAc;YAC1B,MAAM,EAAE,CAAC,4BAA4B,CAAC,CAAC,OAAO,EAAE,CAAC;SAClD,CAAC,CACH,CACF,CAAA;QACD,OAAO,OAAO,CAAA;IAChB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,KAA0B,EAC1B,MAAwB;IAExB,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC1E,IAAI,SAAS,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAA;IACpE,MAAM,QAAQ,GAAG,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC3E,MAAM,SAAS,GAAG,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAA;IACtD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,CAAA;AACxC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,KAA0B;IAE1B,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;IACnF,MAAM,QAAQ,GAAI,OAAO,KAAK,CAAC,OAAO,CAAC,KAAM,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC,GAAG,CAAA;IACrF,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACxF,MAAM,KAAK,GAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAK,QAAQ,IAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IACpG,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,KAA0B;IAE1B,MAAM,GAAG,GAAG,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACxE,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC7B,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;AACxE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,KAA0B;IAE1B,MAAM,GAAG,GAAG,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACxE,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC7B,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;AACxE,CAAC"}

package/dist/src/http/router.d.ts

@@ -0,0 +1,11 @@
+import { HttpRouter } from "@effect/platform";
+import type { AnyCollectionDef } from "@gettersethya/mira-client";
+import { CollectionService } from "../collection-service/collection-service.js";
+import { Repository } from "../repository/repository.js";
+import { FileStorage } from "../storage/storage.js";
+import { ThumbnailService } from "../thumbnail/types.js";
+import { AppConfig } from "../config/index.js";
+import { CryptoService } from "../crypto/index.js";
+import { AuthService } from "./auth.js";
+export declare function makeCollectionRouter(collections: ReadonlyArray<AnyCollectionDef>): HttpRouter.HttpRouter<never, CryptoService | AuthService | FileStorage | Repository | CollectionService | ThumbnailService | AppConfig>;
+//# sourceMappingURL=router.d.ts.map

package/dist/src/http/router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../../src/http/router.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAyC,MAAM,kBAAkB,CAAA;AAEpF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,4CAA4C,CAAA;AAG9E,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAA;AAEvD,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACjD,OAAO,EAAE,WAAW,EAAoD,MAAM,WAAW,CAAA;AAkFzF,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,aAAa,CAAC,gBAAgB,CAAC,2IAgVhF"}