@haneinfo/attachments 0.0.0-stage → 0.1.0

package/dist/storage.js

@@ -0,0 +1,239 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.S3FileStorage = exports.defaultS3ClientFactory = exports.LocalFileStorage = void 0;
+exports.validateStorageKey = validateStorageKey;
+const node_fs_1 = require("node:fs");
+const promises_1 = require("node:fs/promises");
+const node_path_1 = __importDefault(require("node:path"));
+const node_stream_1 = require("node:stream");
+const promises_2 = require("node:stream/promises");
+function validateStorageKey(key) {
+    if (!/^[a-zA-Z0-9_-]+(?:\/[a-zA-Z0-9_-]+)*$/.test(key))
+        throw new Error('Invalid storage key');
+}
+class LocalFileStorage {
+    constructor(root) {
+        this.root = node_path_1.default.resolve(root);
+    }
+    async target(key, create = false) {
+        validateStorageKey(key);
+        const target = node_path_1.default.resolve(this.root, key);
+        if (!target.startsWith(`${this.root}${node_path_1.default.sep}`))
+            throw new Error('Storage key escapes root');
+        if (create)
+            await (0, promises_1.mkdir)(this.root, { recursive: true });
+        // Refuse symlink/junction components, including existing leaf objects.
+        let current = this.root;
+        for (const part of key.split('/')) {
+            current = node_path_1.default.join(current, part);
+            try {
+                if ((await (0, promises_1.lstat)(current)).isSymbolicLink())
+                    throw new Error('Storage links are forbidden');
+            }
+            catch (error) {
+                if (error.code !== 'ENOENT')
+                    throw error;
+            }
+        }
+        if (create) {
+            await (0, promises_1.mkdir)(node_path_1.default.dirname(target), { recursive: true });
+            const resolvedRoot = await (0, promises_1.realpath)(this.root);
+            const parent = await (0, promises_1.realpath)(node_path_1.default.dirname(target));
+            if (parent !== resolvedRoot && !parent.startsWith(`${resolvedRoot}${node_path_1.default.sep}`))
+                throw new Error('Storage path escapes root');
+        }
+        return target;
+    }
+    async put(key, stream, options = {}) {
+        const target = await this.target(key, true);
+        let size = 0;
+        const count = new node_stream_1.Transform({
+            transform(chunk, _encoding, callback) {
+                size += chunk.length;
+                callback(null, chunk);
+            },
+        });
+        let opened = false;
+        const output = (0, node_fs_1.createWriteStream)(target, { flags: 'wx', mode: 0o600 });
+        output.once('open', () => {
+            opened = true;
+        });
+        try {
+            await (0, promises_2.pipeline)(stream, count, output, { signal: options.signal });
+            return { size };
+        }
+        catch (error) {
+            if (opened)
+                await (0, promises_1.rm)(target, { force: true });
+            throw error;
+        }
+    }
+    async get(key) {
+        const target = await this.target(key);
+        await (0, promises_1.stat)(target);
+        return (0, node_fs_1.createReadStream)(target);
+    }
+    async delete(key) {
+        await (0, promises_1.rm)(await this.target(key), { force: true });
+    }
+    async exists(key) {
+        try {
+            return (await (0, promises_1.stat)(await this.target(key))).isFile();
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                return false;
+            throw error;
+        }
+    }
+}
+exports.LocalFileStorage = LocalFileStorage;
+/** Variable imports keep the SDK optional, including in local-driver builds. */
+const defaultS3ClientFactory = async (config) => {
+    let sdk;
+    let storage;
+    try {
+        sdk = await Promise.resolve().then(() => __importStar(require('@aws-sdk/client-s3')));
+        storage = await Promise.resolve().then(() => __importStar(require('@aws-sdk/lib-storage')));
+    }
+    catch {
+        throw new Error('S3 attachments require optional peers @aws-sdk/client-s3 and @aws-sdk/lib-storage');
+    }
+    const accessKeyId = process.env.ATTACHMENTS_S3_ACCESS_KEY_ID;
+    const secretAccessKey = process.env.ATTACHMENTS_S3_SECRET_ACCESS_KEY;
+    if (!accessKeyId || !secretAccessKey)
+        throw new Error('S3 attachments require ATTACHMENTS_S3_ACCESS_KEY_ID and ATTACHMENTS_S3_SECRET_ACCESS_KEY');
+    const client = new sdk.S3Client({
+        ...config,
+        credentials: {
+            accessKeyId,
+            secretAccessKey,
+            sessionToken: process.env.ATTACHMENTS_S3_SESSION_TOKEN,
+        },
+    });
+    return {
+        client,
+        command: (kind, input) => {
+            const args = input;
+            if (kind === 'get')
+                return new sdk.GetObjectCommand(args);
+            if (kind === 'head')
+                return new sdk.HeadObjectCommand(args);
+            return new sdk.DeleteObjectCommand(args);
+        },
+        upload: (params) => new storage.Upload({
+            client,
+            params: params,
+            queueSize: 1,
+            partSize: 5 * 1024 * 1024,
+            leavePartsOnError: false,
+        }),
+    };
+};
+exports.defaultS3ClientFactory = defaultS3ClientFactory;
+class S3FileStorage {
+    constructor(config, deps) {
+        this.config = config;
+        this.deps = deps;
+    }
+    static async create(config, factory = exports.defaultS3ClientFactory) {
+        return new S3FileStorage(config, await factory(config));
+    }
+    input(key) {
+        validateStorageKey(key);
+        return { Bucket: this.config.bucket, Key: key };
+    }
+    async put(key, stream, options = {}) {
+        let size = 0;
+        const count = new node_stream_1.Transform({
+            transform(chunk, _encoding, callback) {
+                size += chunk.length;
+                callback(null, chunk);
+            },
+        });
+        const upload = this.deps.upload({
+            ...this.input(key),
+            Body: count,
+            ContentType: options.contentType,
+        });
+        const abort = () => {
+            void upload.abort().catch(() => { });
+        };
+        options.signal?.addEventListener('abort', abort, { once: true });
+        try {
+            await Promise.all([(0, promises_2.pipeline)(stream, count, { signal: options.signal }), upload.done()]);
+            return { size };
+        }
+        catch (error) {
+            stream.destroy();
+            count.destroy();
+            await upload.abort().catch(() => { });
+            throw error;
+        }
+        finally {
+            options.signal?.removeEventListener('abort', abort);
+        }
+    }
+    async get(key) {
+        const { Body } = await this.deps.client.send(this.deps.command('get', this.input(key)));
+        if (!(Body instanceof node_stream_1.Readable))
+            throw new Error('S3 returned no Node readable stream');
+        return Body;
+    }
+    async delete(key) {
+        await this.deps.client.send(this.deps.command('delete', this.input(key)));
+    }
+    async exists(key) {
+        try {
+            await this.deps.client.send(this.deps.command('head', this.input(key)));
+            return true;
+        }
+        catch (error) {
+            const e = error;
+            if (e.$metadata?.httpStatusCode === 404 || e.name === 'NotFound' || e.name === 'NoSuchKey')
+                return false;
+            throw error;
+        }
+    }
+    onModuleDestroy() {
+        this.deps.client.destroy?.();
+    }
+}
+exports.S3FileStorage = S3FileStorage;
+//# sourceMappingURL=storage.js.map

package/dist/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../src/storage.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAQA,gDAEC;AAVD,qCAA8D;AAC9D,+CAAoE;AACpE,0DAA6B;AAC7B,6CAAkD;AAClD,mDAAgD;AAIhD,SAAgB,kBAAkB,CAAC,GAAW;IAC5C,IAAI,CAAC,uCAAuC,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;AACjG,CAAC;AAED,MAAa,gBAAgB;IAE3B,YAAY,IAAY;QACtB,IAAI,CAAC,IAAI,GAAG,mBAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IACO,KAAK,CAAC,MAAM,CAAC,GAAW,EAAE,MAAM,GAAG,KAAK;QAC9C,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACxB,MAAM,MAAM,GAAG,mBAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,IAAI,GAAG,mBAAI,CAAC,GAAG,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC/F,IAAI,MAAM;YAAE,MAAM,IAAA,gBAAK,EAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,uEAAuE;QACvE,IAAI,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;QACxB,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAClC,OAAO,GAAG,mBAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACnC,IAAI,CAAC;gBACH,IAAI,CAAC,MAAM,IAAA,gBAAK,EAAC,OAAO,CAAC,CAAC,CAAC,cAAc,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YAC9F,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAC;YACtE,CAAC;QACH,CAAC;QACD,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,IAAA,gBAAK,EAAC,mBAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACvD,MAAM,YAAY,GAAG,MAAM,IAAA,mBAAQ,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,MAAM,IAAA,mBAAQ,EAAC,mBAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YACpD,IAAI,MAAM,KAAK,YAAY,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,YAAY,GAAG,mBAAI,CAAC,GAAG,EAAE,CAAC;gBAC7E,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,MAAgB,EAAE,UAAoC,EAAE;QAC7E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5C,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,MAAM,KAAK,GAAG,IAAI,uBAAS,CAAC;YAC1B,SAAS,CAAC,KAAa,EAAE,SAAS,EAAE,QAAQ;gBAC1C,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;gBACrB,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACxB,CAAC;SACF,CAAC,CAAC;QACH,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,MAAM,MAAM,GAAG,IAAA,2BAAiB,EAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;YACvB,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,IAAA,mBAAQ,EAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YAClE,OAAO,EAAE,IAAI,EAAE,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,MAAM;gBAAE,MAAM,IAAA,aAAE,EAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9C,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,IAAA,eAAI,EAAC,MAAM,CAAC,CAAC;QACnB,OAAO,IAAA,0BAAgB,EAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,MAAM,IAAA,aAAE,EAAC,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,IAAA,eAAI,EAAC,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC;YACrE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF;AAnED,4CAmEC;AAcD,gFAAgF;AACzE,MAAM,sBAAsB,GAAoB,KAAK,EAAE,MAAM,EAAE,EAAE;IACtE,IAAI,GAAwC,CAAC;IAC7C,IAAI,OAA8C,CAAC;IACnD,IAAI,CAAC;QACH,GAAG,GAAG,wDAAa,oBAAoB,GAAC,CAAC;QACzC,OAAO,GAAG,wDAAa,sBAAsB,GAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,mFAAmF,CACpF,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC;IAC7D,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC;IACrE,IAAI,CAAC,WAAW,IAAI,CAAC,eAAe;QAClC,MAAM,IAAI,KAAK,CACb,0FAA0F,CAC3F,CAAC;IACJ,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC;QAC9B,GAAG,MAAM;QACT,WAAW,EAAE;YACX,WAAW;YACX,eAAe;YACf,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,4BAA4B;SACvD;KACF,CAAC,CAAC;IACH,OAAO;QACL,MAAM;QACN,OAAO,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YACvB,MAAM,IAAI,GAAG,KAAwC,CAAC;YACtD,IAAI,IAAI,KAAK,KAAK;gBAAE,OAAO,IAAI,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAC1D,IAAI,IAAI,KAAK,MAAM;gBAAE,OAAO,IAAI,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAC5D,OAAO,IAAI,GAAG,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC;QACD,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CACjB,IAAI,OAAO,CAAC,MAAM,CAAC;YACjB,MAAM;YACN,MAAM,EAAE,MAAyD;YACjE,SAAS,EAAE,CAAC;YACZ,QAAQ,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;YACzB,iBAAiB,EAAE,KAAK;SACzB,CAAC;KACL,CAAC;AACJ,CAAC,CAAC;AA1CW,QAAA,sBAAsB,0BA0CjC;AAEF,MAAa,aAAa;IACxB,YACmB,MAAiB,EACjB,IAAoB;QADpB,WAAM,GAAN,MAAM,CAAW;QACjB,SAAI,GAAJ,IAAI,CAAgB;IACpC,CAAC;IACJ,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAiB,EAAE,UAA2B,8BAAsB;QACtF,OAAO,IAAI,aAAa,CAAC,MAAM,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1D,CAAC;IACO,KAAK,CAAC,GAAW;QACvB,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACxB,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;IAClD,CAAC;IACD,KAAK,CAAC,GAAG,CACP,GAAW,EACX,MAAgB,EAChB,UAA0D,EAAE;QAE5D,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,MAAM,KAAK,GAAG,IAAI,uBAAS,CAAC;YAC1B,SAAS,CAAC,KAAa,EAAE,SAAS,EAAE,QAAQ;gBAC1C,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;gBACrB,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACxB,CAAC;SACF,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;YAC9B,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YAClB,IAAI,EAAE,KAAK;YACX,WAAW,EAAE,OAAO,CAAC,WAAW;SACjC,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,GAAG,EAAE;YACjB,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACtC,CAAC,CAAC;QACF,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAA,mBAAQ,EAAC,MAAM,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACxF,OAAO,EAAE,IAAI,EAAE,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,KAAK,CAAC,OAAO,EAAE,CAAC;YAChB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACrC,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACxF,IAAI,CAAC,CAAC,IAAI,YAAY,sBAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACxF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5E,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACxE,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,GAAG,KAAmE,CAAC;YAC9E,IAAI,CAAC,CAAC,SAAS,EAAE,cAAc,KAAK,GAAG,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW;gBACxF,OAAO,KAAK,CAAC;YACf,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IACD,eAAe;QACb,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;IAC/B,CAAC;CACF;AAnED,sCAmEC"}

package/dist/store.d.ts

@@ -0,0 +1,61 @@
+import type { StateMachineStore } from '@haneinfo/state-machine';
+export declare const ATTACHMENTS_STORE: unique symbol;
+export declare const ATTACHMENTS_CONFIG: unique symbol;
+export declare const ATTACHMENTS_CLOCK: unique symbol;
+export declare const SCAN_JOB = "attachments.scan";
+export declare const CLEANUP_JOB = "attachments.cleanup";
+export interface AttachmentRecord {
+    id: string;
+    instanceId: string;
+    fileName: string;
+    declaredContentType: string;
+    detectedContentType: string;
+    size: bigint;
+    sha256: string;
+    storageKey: string;
+    status: 'READY' | 'PENDING_SCAN' | 'REJECTED';
+    uploadedBy: string;
+    createdAt: Date;
+    deletedAt: Date | null;
+    deletedBy: string | null;
+}
+export interface GarbageRecord {
+    storageKey: string;
+    notBefore: Date;
+}
+type Args = Record<string, unknown>;
+export interface AttachmentClient {
+    attachment: {
+        create(args: Args): Promise<AttachmentRecord>;
+        findUnique(args: Args): Promise<AttachmentRecord | null>;
+        findMany(args: Args): Promise<AttachmentRecord[]>;
+        count(args: Args): Promise<number>;
+        update(args: Args): Promise<AttachmentRecord>;
+        deleteMany(args: Args): Promise<{
+            count: number;
+        }>;
+    };
+    attachmentGarbage: {
+        create(args: Args): Promise<GarbageRecord>;
+        findMany(args: Args): Promise<GarbageRecord[]>;
+        deleteMany(args: Args): Promise<{
+            count: number;
+        }>;
+    };
+    backgroundJob: {
+        findFirst(args: Args): Promise<unknown>;
+    };
+    $queryRawUnsafe<T>(sql: string, ...values: unknown[]): Promise<T>;
+}
+interface Database extends AttachmentClient {
+    $transaction<T>(work: (tx: AttachmentClient) => Promise<T>, options?: Args): Promise<T>;
+}
+export declare class AttachmentsStore {
+    readonly instances: StateMachineStore;
+    readonly db: Database;
+    constructor(prisma: unknown, instances: StateMachineStore);
+    run<T>(tx: unknown, work: (client: AttachmentClient, tx: unknown) => Promise<T>): Promise<T>;
+    lock(client: AttachmentClient, id: string): Promise<AttachmentRecord | null>;
+}
+export {};
+//# sourceMappingURL=store.d.ts.map

package/dist/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../src/store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,eAAO,MAAM,iBAAiB,eAA2C,CAAC;AAC1E,eAAO,MAAM,kBAAkB,eAA4C,CAAC;AAC5E,eAAO,MAAM,iBAAiB,eAA2C,CAAC;AAC1E,eAAO,MAAM,QAAQ,qBAAqB,CAAC;AAC3C,eAAO,MAAM,WAAW,wBAAwB,CAAC;AAEjD,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,OAAO,GAAG,cAAc,GAAG,UAAU,CAAC;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AACD,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,IAAI,CAAC;CACjB;AACD,KAAK,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AACpC,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE;QACV,MAAM,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC9C,UAAU,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;QACzD,QAAQ,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAClD,KAAK,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC9C,UAAU,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC;YAAE,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACpD,CAAC;IACF,iBAAiB,EAAE;QACjB,MAAM,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;QAC3C,QAAQ,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;QAC/C,UAAU,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC;YAAE,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACpD,CAAC;IACF,aAAa,EAAE;QAAE,SAAS,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;KAAE,CAAC;IAC3D,eAAe,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CACnE;AACD,UAAU,QAAS,SAAQ,gBAAgB;IACzC,YAAY,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,gBAAgB,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CACzF;AACD,qBAAa,gBAAgB;IAIzB,QAAQ,CAAC,SAAS,EAAE,iBAAiB;IAHvC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC;gBAEpB,MAAM,EAAE,OAAO,EACN,SAAS,EAAE,iBAAiB;IAIvC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,gBAAgB,EAAE,EAAE,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC;IAKzE,IAAI,CAAC,MAAM,EAAE,gBAAgB,EAAE,EAAE,EAAE,MAAM;CAIhD"}

package/dist/store.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AttachmentsStore = exports.CLEANUP_JOB = exports.SCAN_JOB = exports.ATTACHMENTS_CLOCK = exports.ATTACHMENTS_CONFIG = exports.ATTACHMENTS_STORE = void 0;
+exports.ATTACHMENTS_STORE = Symbol.for('haneinfo.attachments.store');
+exports.ATTACHMENTS_CONFIG = Symbol.for('haneinfo.attachments.config');
+exports.ATTACHMENTS_CLOCK = Symbol.for('haneinfo.attachments.clock');
+exports.SCAN_JOB = 'attachments.scan';
+exports.CLEANUP_JOB = 'attachments.cleanup';
+class AttachmentsStore {
+    constructor(prisma, instances) {
+        this.instances = instances;
+        this.db = prisma;
+    }
+    run(tx, work) {
+        return tx
+            ? work(tx, tx)
+            : this.db.$transaction((client) => work(client, client));
+    }
+    async lock(client, id) {
+        await client.$queryRawUnsafe('SELECT id FROM attachments WHERE id = $1 FOR UPDATE', id);
+        return client.attachment.findUnique({ where: { id } });
+    }
+}
+exports.AttachmentsStore = AttachmentsStore;
+//# sourceMappingURL=store.js.map

package/dist/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../src/store.ts"],"names":[],"mappings":";;;AAEa,QAAA,iBAAiB,GAAG,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;AAC7D,QAAA,kBAAkB,GAAG,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;AAC/D,QAAA,iBAAiB,GAAG,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;AAC7D,QAAA,QAAQ,GAAG,kBAAkB,CAAC;AAC9B,QAAA,WAAW,GAAG,qBAAqB,CAAC;AA0CjD,MAAa,gBAAgB;IAE3B,YACE,MAAe,EACN,SAA4B;QAA5B,cAAS,GAAT,SAAS,CAAmB;QAErC,IAAI,CAAC,EAAE,GAAG,MAAkB,CAAC;IAC/B,CAAC;IACD,GAAG,CAAI,EAAW,EAAE,IAA2D;QAC7E,OAAO,EAAE;YACP,CAAC,CAAC,IAAI,CAAC,EAAsB,EAAE,EAAE,CAAC;YAClC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,MAAwB,EAAE,EAAU;QAC7C,MAAM,MAAM,CAAC,eAAe,CAAC,qDAAqD,EAAE,EAAE,CAAC,CAAC;QACxF,OAAO,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACzD,CAAC;CACF;AAjBD,4CAiBC"}

package/dist/validation.d.ts

@@ -0,0 +1,29 @@
+import { createReadStream } from 'node:fs';
+import { type Readable } from 'node:stream';
+import { type ResolvedAttachmentsConfig } from './config';
+export declare const STAGING_ROOT: string;
+export declare const mimeTypes: Record<string, string>;
+export declare function cleanFileName(raw: string): {
+    fileName: string;
+    extension: string;
+};
+export declare function downloadHeaders(record: {
+    fileName: string;
+    detectedContentType: string;
+    size: bigint | number;
+}): {
+    'Content-Disposition': string;
+    'X-Content-Type-Options': string;
+    'Cache-Control': string;
+    'Content-Type': string;
+    'Content-Length': string;
+};
+export declare function stageUpload(stream: Readable, id: string, extension: string, config: ResolvedAttachmentsConfig, signal: AbortSignal): Promise<{
+    file: string;
+    size: number;
+    sha256: string;
+    detectedContentType: string;
+}>;
+export declare function cleanupStaging(before: Date, limit: number): Promise<number>;
+export { createReadStream };
+//# sourceMappingURL=validation.d.ts.map

package/dist/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../src/validation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAqB,MAAM,SAAS,CAAC;AAI9D,OAAO,EAAE,KAAK,QAAQ,EAAa,MAAM,aAAa,CAAC;AAIvD,OAAO,EAAmB,KAAK,yBAAyB,EAAE,MAAM,UAAU,CAAC;AAE3E,eAAO,MAAM,YAAY,QAAyD,CAAC;AAqCnF,eAAO,MAAM,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAW5C,CAAC;AAEF,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM;;;EAkCxC;AACD,wBAAgB,eAAe,CAAC,MAAM,EAAE;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;CACvB;;;;;;EAYA;AA4HD,wBAAsB,WAAW,CAC/B,MAAM,EAAE,QAAQ,EAChB,EAAE,EAAE,MAAM,EACV,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,yBAAyB,EACjC,MAAM,EAAE,WAAW;;;;;GAyDpB;AAED,wBAAsB,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,mBAc/D;AACD,OAAO,EAAE,gBAAgB,EAAE,CAAC"}