@headless-lms/core 0.2.0 → 0.3.0

package/dist/assets/service.js

@@ -1,27 +1,59 @@
-import { noopLogger } from "../shared/logger.js";
-import { genId } from "../shared/id.js";
 import { assetEvents } from "./events.js";
+import { genId } from "../shared/id.js";
+import { ConflictError, ForbiddenError, InvalidInputError } from "../shared/errors.js";
+import { noopLogger } from "../shared/logger.js";
 //#region src/assets/service.ts
+const UNATTACHED_UPLOAD_GRACE_MS = 3600 * 1e3;
+const MEMBER_IMAGE_TYPE = /^image\/(png|jpeg|gif|webp|avif)$/i;
+const MEMBER_IMAGE_REFUSAL = "A member upload must be a PNG, JPEG, GIF, WebP or AVIF image";
+function isMemberImageType(contentType) {
+	return MEMBER_IMAGE_TYPE.test(contentType.trim());
+}
+function kindOf(contentType) {
+	const type = contentType.trim().toLowerCase();
+	if (type.startsWith("image/")) return "image";
+	if (type.startsWith("video/")) return "video";
+	if (type.startsWith("audio/")) return "audio";
+	return "document";
+}
 function orgPrefix(orgId) {
 	return `org/${orgId}/`;
 }
 function sanitizeFilename(filename) {
 	return (filename.split(/[\\/]/).pop() ?? "file").replace(/[^a-zA-Z0-9._-]/g, "_").slice(0, 120) || "file";
 }
+function storedKey(orgId, folder, id, filename) {
+	return `${orgPrefix(orgId)}${folder}/${id}/${sanitizeFilename(filename)}`;
+}
+function finalMemberKey(orgId, asset) {
+	return `${orgPrefix(orgId)}image/${asset.id}/${sanitizeFilename(asset.filename)}`;
+}
+function graceCutoff(now) {
+	return /* @__PURE__ */ new Date(now.getTime() - UNATTACHED_UPLOAD_GRACE_MS);
+}
 var AssetsServiceImpl = class {
 	storage;
 	repo;
 	uow;
+	memberImageMaxBytes;
+	downloadLinkExpirySeconds;
+	fileUrls;
 	logger;
 	constructor(params) {
+		if (!Number.isSafeInteger(params.memberImageMaxBytes) || params.memberImageMaxBytes <= 0) throw new Error(`invalid memberImageMaxBytes "${params.memberImageMaxBytes}" (expected a positive integer)`);
+		if (!Number.isSafeInteger(params.downloadLinkExpirySeconds) || params.downloadLinkExpirySeconds <= 0) throw new Error(`invalid downloadLinkExpirySeconds "${params.downloadLinkExpirySeconds}" (expected a positive integer)`);
 		this.storage = params.storage;
 		this.repo = params.repo;
 		this.uow = params.uow;
+		this.memberImageMaxBytes = params.memberImageMaxBytes;
+		this.downloadLinkExpirySeconds = params.downloadLinkExpirySeconds;
+		this.fileUrls = params.fileUrls;
 		this.logger = params.logger ?? noopLogger;
 	}
 	async requestUpload(orgId, input) {
 		const id = genId("asset");
-		const key = `${orgPrefix(orgId)}${input.kind}/${id}/${sanitizeFilename(input.filename)}`;
+		const kind = kindOf(input.contentType);
+		const key = storedKey(orgId, input.source === "member" ? "uploads" : kind, id, input.filename);
 		const presigned = await this.storage.presignUpload({
 			key,
 			contentType: input.contentType
@@ -32,7 +64,8 @@ var AssetsServiceImpl = class {
 				orgId,
 				id,
 				key,
-				kind: input.kind,
+				kind,
+				source: input.source,
 				filename: input.filename,
 				contentType: input.contentType,
 				size: 0,
@@ -50,83 +83,303 @@ var AssetsServiceImpl = class {
 		this.logger.info("asset upload requested", {
 			orgId,
 			assetId: id,
-			kind: input.kind
+			kind,
+			source: input.source
 		});
 		return {
-			asset,
+			asset: {
+				...asset,
+				url: null,
+				downloadUrl: null
+			},
 			uploadUrl: presigned.url,
 			method: "PUT",
 			expiresInSeconds: presigned.expiresInSeconds,
 			headers: presigned.headers
 		};
 	}
+	async requestMemberUpload(orgId, orgUserId, input) {
+		if (!isMemberImageType(input.contentType)) throw new InvalidInputError(MEMBER_IMAGE_REFUSAL);
+		return this.requestUpload(orgId, {
+			filename: input.filename,
+			contentType: input.contentType,
+			source: "member",
+			uploadedBy: orgUserId
+		});
+	}
 	async confirm(orgId, id) {
 		const asset = await this.repo.findById(orgId, id);
 		if (!asset) return null;
+		if (asset.source === "member") throw new ForbiddenError("Only the uploader can finalize a member upload");
+		const confirmed = await this.finalize(orgId, asset);
+		return confirmed ? this.view(confirmed) : null;
+	}
+	async confirmOwn(orgId, id, orgUserId) {
+		const asset = await this.repo.findById(orgId, id);
+		if (!asset || asset.source !== "member" || asset.uploadedBy !== orgUserId) {
+			this.logger.debug("upload confirm refused", {
+				orgId,
+				assetId: id,
+				orgUserId
+			});
+			return null;
+		}
+		const confirmed = await this.finalize(orgId, asset);
+		if (!confirmed) return null;
+		return confirmed.status === "ready" ? {
+			...confirmed,
+			url: this.fileUrls.memberUpload(confirmed.id),
+			downloadUrl: null
+		} : {
+			...confirmed,
+			url: null,
+			downloadUrl: null
+		};
+	}
+	async ownUploadFile(orgId, assetId, orgUserId) {
+		if (!await this.ownsImage(orgId, assetId, orgUserId)) {
+			this.logger.warn("upload file not served — not the uploader", {
+				orgId,
+				assetId,
+				orgUserId
+			});
+			return null;
+		}
+		return this.signFile(orgId, assetId);
+	}
+	async ownsImage(orgId, assetId, orgUserId) {
+		const asset = await this.repo.findById(orgId, assetId);
+		return asset !== null && asset.source === "member" && asset.kind === "image" && asset.status === "ready" && asset.uploadedBy === orgUserId;
+	}
+	async libraryAssetsAmong(orgId, assetIds) {
+		if (assetIds.length === 0) return [];
+		const rows = await this.repo.findByIds(orgId, [...new Set(assetIds)]);
+		const library = new Set(rows.filter((a) => a.source === "library" && a.status === "ready").map((a) => a.id));
+		return assetIds.filter((id) => library.has(id));
+	}
+	async list(orgId, query) {
+		const page = await this.repo.list(orgId, {
+			...query,
+			source: query.source ?? "library"
+		});
+		return {
+			...page,
+			rows: await Promise.all(page.rows.map((asset) => this.view(asset)))
+		};
+	}
+	async get(orgId, id) {
+		const asset = await this.repo.findById(orgId, id);
+		return asset ? this.view(asset) : null;
+	}
+	async readyFiles(orgId, assetIds) {
+		const ready = await this.readyAmong(orgId, assetIds);
+		return Object.fromEntries(ready.map((asset) => [asset.id, {
+			filename: asset.filename,
+			contentType: asset.contentType,
+			size: asset.size
+		}]));
+	}
+	async signFile(orgId, assetId, opts = {}) {
+		const [asset] = await this.readyAmong(orgId, [assetId]);
+		if (!asset) {
+			this.logger.warn("file not served — no ready asset", {
+				orgId,
+				assetId
+			});
+			return null;
+		}
+		return opts.saveAs === void 0 ? this.storage.presignDownload({ key: asset.key }) : this.storage.presignDownload({
+			key: asset.key,
+			downloadFilename: opts.saveAs,
+			expiresInSeconds: this.downloadLinkExpirySeconds
+		});
+	}
+	async libraryFile(orgId, assetId, opts) {
+		const asset = await this.repo.findById(orgId, assetId);
+		if (!asset || asset.source !== "library") {
+			this.logger.warn("library file not served — not a library asset", {
+				orgId,
+				assetId
+			});
+			return null;
+		}
+		return this.signFile(orgId, assetId, opts.download ? { saveAs: asset.filename } : {});
+	}
+	async remove(orgId, id) {
+		const asset = await this.repo.findById(orgId, id);
+		if (!asset) return false;
+		const removed = await this.discard(orgId, asset);
+		if (removed) this.logger.info("asset removed", {
+			orgId,
+			assetId: id
+		});
+		return removed;
+	}
+	async removeOwn(orgId, id, orgUserId) {
+		const asset = await this.repo.findById(orgId, id);
+		if (!asset || asset.source !== "member" || asset.uploadedBy !== orgUserId) return false;
+		return this.remove(orgId, id);
+	}
+	async hasUnattached(orgId, now) {
+		if (await this.repo.hasUnreferencedMemberUploads(orgId, graceCutoff(now))) return true;
+		return (await this.strayUploads(orgId, now)).length > 0;
+	}
+	async removeUnattached(orgId, now) {
+		const stale = await this.repo.listUnreferencedMemberUploads(orgId, graceCutoff(now));
+		let removed = 0;
+		let failed = 0;
+		for (const asset of stale) try {
+			if (await this.discard(orgId, asset)) removed += 1;
+		} catch (err) {
+			if (!(err instanceof ConflictError)) {
+				failed += 1;
+				this.logger.error("unattached upload not removed", {
+					orgId,
+					assetId: asset.id,
+					err
+				});
+			}
+		}
+		let stray = 0;
+		for (const key of await this.strayUploads(orgId, now)) try {
+			await this.storage.remove(key);
+			stray += 1;
+		} catch (err) {
+			failed += 1;
+			this.logger.warn("stray upload not removed", {
+				orgId,
+				err
+			});
+		}
+		if (removed > 0 || stray > 0 || failed > 0) this.logger.info("unattached uploads removed", {
+			orgId,
+			count: removed,
+			stray,
+			failed
+		});
+		return removed + stray;
+	}
+	async strayUploads(orgId, now) {
+		const cutoff = now.getTime() - this.storage.uploadExpirySeconds * 1e3;
+		const old = (await this.storage.list(`${orgPrefix(orgId)}uploads/`)).filter((o) => o.lastModified !== void 0 && Date.parse(o.lastModified) < cutoff).map((o) => o.key);
+		if (old.length === 0) return [];
+		const held = new Set(await this.repo.heldKeys(orgId, old));
+		return old.filter((key) => !held.has(key));
+	}
+	async finalize(orgId, asset) {
+		if (asset.status !== "pending") return asset;
+		if (asset.source === "member") return this.finalizeMember(orgId, asset);
 		const stat = await this.storage.stat(asset.key);
 		if (!stat) {
 			this.logger.debug("asset not yet uploaded", {
 				orgId,
-				assetId: id
+				assetId: asset.id
 			});
 			return asset;
 		}
-		const updated = await this.uow.run(async ({ assets, outbox }) => {
-			const updated = await assets.update(id, {
-				size: stat.size,
-				contentType: stat.contentType ?? asset.contentType,
-				status: "ready"
+		const contentType = stat.contentType ?? asset.contentType;
+		return await this.markReady(orgId, asset, {
+			key: asset.key,
+			kind: kindOf(contentType),
+			size: stat.size,
+			contentType
+		}) ?? this.repo.findById(orgId, asset.id);
+	}
+	async finalizeMember(orgId, asset) {
+		if (!await this.storage.stat(asset.key)) {
+			this.logger.debug("asset not yet uploaded", {
+				orgId,
+				assetId: asset.id
 			});
+			return asset;
+		}
+		const key = finalMemberKey(orgId, asset);
+		await this.storage.copy({
+			from: asset.key,
+			to: key
+		});
+		const stat = await this.storage.stat(key);
+		if (!stat) throw new Error("copied upload not found");
+		const contentType = asset.contentType;
+		const kind = kindOf(contentType);
+		const reason = !isMemberImageType(contentType) ? MEMBER_IMAGE_REFUSAL : stat.contentType !== void 0 && stat.contentType !== contentType ? "The uploaded file is not the declared type" : stat.size > this.memberImageMaxBytes ? "This image is too large" : null;
+		if (reason) {
+			await this.removeObject(orgId, asset.id, key);
+			await this.discard(orgId, asset);
+			this.logger.info("member upload refused", {
+				orgId,
+				assetId: asset.id,
+				reason
+			});
+			throw new InvalidInputError(reason);
+		}
+		const ready = await this.markReady(orgId, asset, {
+			key,
+			kind,
+			size: stat.size,
+			contentType
+		});
+		if (!ready) return this.repo.findById(orgId, asset.id);
+		await this.removeObject(orgId, asset.id, asset.key);
+		return ready;
+	}
+	async markReady(orgId, asset, patch) {
+		const updated = await this.uow.run(async ({ assets, outbox }) => {
+			const updated = await assets.markReady(orgId, asset.id, patch);
 			if (updated) await outbox.append([assetEvents.assetReady.make({
 				orgId,
 				data: updated
 			})]);
 			return updated;
 		});
-		this.logger.info("asset confirmed", {
+		if (updated) this.logger.info("asset confirmed", {
 			orgId,
-			assetId: id
+			assetId: asset.id
 		});
 		return updated;
 	}
-	list(orgId, query) {
-		return this.repo.list(orgId, query);
-	}
-	get(orgId, id) {
-		return this.repo.findById(orgId, id);
+	async readyAmong(orgId, assetIds) {
+		const ids = [...new Set(assetIds)];
+		if (ids.length === 0) return [];
+		return (await this.repo.findByIds(orgId, ids)).filter((asset) => asset.orgId === orgId && asset.status === "ready");
 	}
-	async requestDownload(orgId, id, filename, expiresInSeconds) {
-		const asset = await this.repo.findById(orgId, id);
-		if (!asset) return null;
+	view(asset) {
+		if (asset.source !== "library" || asset.status !== "ready") return {
+			...asset,
+			url: null,
+			downloadUrl: null
+		};
 		return {
-			url: await this.storage.presignDownload({
-				key: asset.key,
-				downloadFilename: filename ?? asset.filename,
-				...expiresInSeconds === void 0 ? {} : { expiresInSeconds }
-			}),
-			asset
+			...asset,
+			url: this.fileUrls.libraryFile(asset.id),
+			downloadUrl: this.fileUrls.libraryDownload(asset.id)
 		};
 	}
-	async remove(orgId, id) {
-		const asset = await this.repo.findById(orgId, id);
-		if (!asset) return false;
-		await this.storage.remove(asset.key);
+	async discard(orgId, asset) {
 		const deleted = await this.uow.run(async ({ assets, outbox }) => {
-			const deleted = await assets.delete(id);
+			const deleted = await assets.delete(orgId, asset.id);
 			if (deleted) await outbox.append([assetEvents.assetDeleted.make({
 				orgId,
 				data: asset
 			})]);
 			return deleted;
 		});
-		this.logger.info("asset removed", {
-			orgId,
-			assetId: id
-		});
+		if (deleted) await this.removeObject(orgId, asset.id, asset.key);
 		return deleted;
 	}
+	async removeObject(orgId, assetId, key) {
+		try {
+			await this.storage.remove(key);
+		} catch (error) {
+			this.logger.warn("stored object not removed", {
+				orgId,
+				assetId,
+				err: error
+			});
+		}
+	}
 };
 //#endregion
-export { AssetsServiceImpl };
+export { AssetsServiceImpl, MEMBER_IMAGE_TYPE, isMemberImageType, kindOf };
 
 //# sourceMappingURL=service.js.map

package/dist/assets/service.js.map

@@ -1 +1 @@
-{"version":3,"file":"service.js","names":[],"sources":["../../src/assets/service.ts"],"sourcesContent":["// assets context — service. Owns org-scoped key construction and the asset\n// lifecycle (register → upload → confirm → serve → remove); delegates the\n// actual object operations to the ObjectStorage port. Org isolation is enforced\n// by scoping every lookup to the caller's org (cross-org reads return null).\nimport { genId } from '../shared/id.js';\nimport type { Logger, ObjectStorage } from '../shared/ports.js';\nimport type {\n  Asset,\n  AssetsQuery,\n  DownloadTicket,\n  Page,\n  RequestUploadInput,\n  UploadTicket,\n} from './model.js';\nimport type { AssetsRepository, AssetsService, AssetsUnitOfWork } from './ports.js';\nimport { noopLogger } from '../shared/logger.js';\nimport { assetEvents } from './events.js';\n\nfunction orgPrefix(orgId: string): string {\n  return `org/${orgId}/`;\n}\n\nfunction sanitizeFilename(filename: string): string {\n  const base = filename.split(/[\\\\/]/).pop() ?? 'file';\n  return base.replace(/[^a-zA-Z0-9._-]/g, '_').slice(0, 120) || 'file';\n}\n\nexport type AssetsServiceParams = {\n  storage: ObjectStorage;\n  repo: AssetsRepository;\n  uow: AssetsUnitOfWork;\n  logger?: Logger;\n};\n\nexport class AssetsServiceImpl implements AssetsService {\n  private readonly storage: ObjectStorage;\n  private readonly repo: AssetsRepository;\n  private readonly uow: AssetsUnitOfWork;\n  private readonly logger: Logger;\n\n  constructor(params: AssetsServiceParams) {\n    this.storage = params.storage;\n    this.repo = params.repo;\n    this.uow = params.uow;\n    this.logger = params.logger ?? noopLogger;\n  }\n\n  async requestUpload(orgId: string, input: RequestUploadInput): Promise<UploadTicket> {\n    const id = genId('asset');\n    const key = `${orgPrefix(orgId)}${input.kind}/${id}/${sanitizeFilename(input.filename)}`;\n    const presigned = await this.storage.presignUpload({ key, contentType: input.contentType });\n    const now = new Date();\n    const asset = await this.uow.run(async ({ assets, outbox }) => {\n      const asset = await assets.insert(orgId, {\n        orgId,\n        id,\n        key,\n        kind: input.kind,\n        filename: input.filename,\n        contentType: input.contentType,\n        size: 0,\n        status: 'pending',\n        uploadedBy: input.uploadedBy,\n        createdAt: now,\n        updatedAt: now,\n      });\n      await outbox.append([assetEvents.assetCreated.make({ orgId, data: asset })]);\n      return asset;\n    });\n    this.logger.info('asset upload requested', { orgId, assetId: id, kind: input.kind });\n    return {\n      asset,\n      uploadUrl: presigned.url,\n      method: 'PUT',\n      expiresInSeconds: presigned.expiresInSeconds,\n      headers: presigned.headers,\n    };\n  }\n\n  async confirm(orgId: string, id: string): Promise<Asset | null> {\n    const asset = await this.repo.findById(orgId, id);\n    if (!asset) {\n      return null;\n    }\n    const stat = await this.storage.stat(asset.key);\n    if (!stat) {\n      this.logger.debug('asset not yet uploaded', { orgId, assetId: id });\n      return asset; // not uploaded yet — stays pending\n    }\n    const updated = await this.uow.run(async ({ assets, outbox }) => {\n      const updated = await assets.update(id, {\n        size: stat.size,\n        contentType: stat.contentType ?? asset.contentType,\n        status: 'ready',\n      });\n      if (updated) {\n        await outbox.append([assetEvents.assetReady.make({ orgId, data: updated })]);\n      }\n      return updated;\n    });\n    this.logger.info('asset confirmed', { orgId, assetId: id });\n    return updated;\n  }\n\n  list(orgId: string, query: AssetsQuery): Promise<Page<Asset>> {\n    return this.repo.list(orgId, query);\n  }\n\n  get(orgId: string, id: string): Promise<Asset | null> {\n    return this.repo.findById(orgId, id);\n  }\n\n  async requestDownload(\n    orgId: string,\n    id: string,\n    filename?: string,\n    expiresInSeconds?: number,\n  ): Promise<DownloadTicket | null> {\n    const asset = await this.repo.findById(orgId, id);\n    if (!asset) {\n      return null;\n    }\n    const url = await this.storage.presignDownload({\n      key: asset.key,\n      downloadFilename: filename ?? asset.filename,\n      ...(expiresInSeconds === undefined ? {} : { expiresInSeconds }),\n    });\n    return { url, asset };\n  }\n\n  async remove(orgId: string, id: string): Promise<boolean> {\n    const asset = await this.repo.findById(orgId, id);\n    if (!asset) {\n      return false;\n    }\n    await this.storage.remove(asset.key);\n    const deleted = await this.uow.run(async ({ assets, outbox }) => {\n      const deleted = await assets.delete(id);\n      if (deleted) {\n        await outbox.append([assetEvents.assetDeleted.make({ orgId, data: asset })]);\n      }\n      return deleted;\n    });\n    this.logger.info('asset removed', { orgId, assetId: id });\n    return deleted;\n  }\n}\n"],"mappings":";;;;AAkBA,SAAS,UAAU,OAAuB;CACxC,OAAO,OAAO,MAAM;AACtB;AAEA,SAAS,iBAAiB,UAA0B;CAElD,QADa,SAAS,MAAM,OAAO,CAAC,CAAC,IAAI,KAAK,OAAA,CAClC,QAAQ,oBAAoB,GAAG,CAAC,CAAC,MAAM,GAAG,GAAG,KAAK;AAChE;AASA,IAAa,oBAAb,MAAwD;CACtD;CACA;CACA;CACA;CAEA,YAAY,QAA6B;EACvC,KAAK,UAAU,OAAO;EACtB,KAAK,OAAO,OAAO;EACnB,KAAK,MAAM,OAAO;EAClB,KAAK,SAAS,OAAO,UAAU;CACjC;CAEA,MAAM,cAAc,OAAe,OAAkD;EACnF,MAAM,KAAK,MAAM,OAAO;EACxB,MAAM,MAAM,GAAG,UAAU,KAAK,IAAI,MAAM,KAAK,GAAG,GAAG,GAAG,iBAAiB,MAAM,QAAQ;EACrF,MAAM,YAAY,MAAM,KAAK,QAAQ,cAAc;GAAE;GAAK,aAAa,MAAM;EAAY,CAAC;EAC1F,MAAM,sBAAM,IAAI,KAAK;EACrB,MAAM,QAAQ,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,QAAQ,aAAa;GAC7D,MAAM,QAAQ,MAAM,OAAO,OAAO,OAAO;IACvC;IACA;IACA;IACA,MAAM,MAAM;IACZ,UAAU,MAAM;IAChB,aAAa,MAAM;IACnB,MAAM;IACN,QAAQ;IACR,YAAY,MAAM;IAClB,WAAW;IACX,WAAW;GACb,CAAC;GACD,MAAM,OAAO,OAAO,CAAC,YAAY,aAAa,KAAK;IAAE;IAAO,MAAM;GAAM,CAAC,CAAC,CAAC;GAC3E,OAAO;EACT,CAAC;EACD,KAAK,OAAO,KAAK,0BAA0B;GAAE;GAAO,SAAS;GAAI,MAAM,MAAM;EAAK,CAAC;EACnF,OAAO;GACL;GACA,WAAW,UAAU;GACrB,QAAQ;GACR,kBAAkB,UAAU;GAC5B,SAAS,UAAU;EACrB;CACF;CAEA,MAAM,QAAQ,OAAe,IAAmC;EAC9D,MAAM,QAAQ,MAAM,KAAK,KAAK,SAAS,OAAO,EAAE;EAChD,IAAI,CAAC,OACH,OAAO;EAET,MAAM,OAAO,MAAM,KAAK,QAAQ,KAAK,MAAM,GAAG;EAC9C,IAAI,CAAC,MAAM;GACT,KAAK,OAAO,MAAM,0BAA0B;IAAE;IAAO,SAAS;GAAG,CAAC;GAClE,OAAO;EACT;EACA,MAAM,UAAU,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,QAAQ,aAAa;GAC/D,MAAM,UAAU,MAAM,OAAO,OAAO,IAAI;IACtC,MAAM,KAAK;IACX,aAAa,KAAK,eAAe,MAAM;IACvC,QAAQ;GACV,CAAC;GACD,IAAI,SACF,MAAM,OAAO,OAAO,CAAC,YAAY,WAAW,KAAK;IAAE;IAAO,MAAM;GAAQ,CAAC,CAAC,CAAC;GAE7E,OAAO;EACT,CAAC;EACD,KAAK,OAAO,KAAK,mBAAmB;GAAE;GAAO,SAAS;EAAG,CAAC;EAC1D,OAAO;CACT;CAEA,KAAK,OAAe,OAA0C;EAC5D,OAAO,KAAK,KAAK,KAAK,OAAO,KAAK;CACpC;CAEA,IAAI,OAAe,IAAmC;EACpD,OAAO,KAAK,KAAK,SAAS,OAAO,EAAE;CACrC;CAEA,MAAM,gBACJ,OACA,IACA,UACA,kBACgC;EAChC,MAAM,QAAQ,MAAM,KAAK,KAAK,SAAS,OAAO,EAAE;EAChD,IAAI,CAAC,OACH,OAAO;EAOT,OAAO;GAAE,KAAA,MALS,KAAK,QAAQ,gBAAgB;IAC7C,KAAK,MAAM;IACX,kBAAkB,YAAY,MAAM;IACpC,GAAI,qBAAqB,KAAA,IAAY,CAAC,IAAI,EAAE,iBAAiB;GAC/D,CAAC;GACa;EAAM;CACtB;CAEA,MAAM,OAAO,OAAe,IAA8B;EACxD,MAAM,QAAQ,MAAM,KAAK,KAAK,SAAS,OAAO,EAAE;EAChD,IAAI,CAAC,OACH,OAAO;EAET,MAAM,KAAK,QAAQ,OAAO,MAAM,GAAG;EACnC,MAAM,UAAU,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,QAAQ,aAAa;GAC/D,MAAM,UAAU,MAAM,OAAO,OAAO,EAAE;GACtC,IAAI,SACF,MAAM,OAAO,OAAO,CAAC,YAAY,aAAa,KAAK;IAAE;IAAO,MAAM;GAAM,CAAC,CAAC,CAAC;GAE7E,OAAO;EACT,CAAC;EACD,KAAK,OAAO,KAAK,iBAAiB;GAAE;GAAO,SAAS;EAAG,CAAC;EACxD,OAAO;CACT;AACF"}
+{"version":3,"file":"service.js","names":[],"sources":["../../src/assets/service.ts"],"sourcesContent":["import { genId } from '../shared/id.js';\nimport type { Logger, ObjectStorage } from '../shared/ports.js';\nimport { ConflictError, ForbiddenError, InvalidInputError } from '../shared/errors.js';\nimport type {\n  Asset,\n  AssetKind,\n  AssetView,\n  AssetsQuery,\n  Page,\n  RequestUploadInput,\n  UploadTicket,\n} from './model.js';\nimport type {\n  AssetsRepository,\n  AssetsService,\n  AssetsUnitOfWork,\n  MemberUploadInput,\n  ReadyFile,\n} from './ports.js';\nimport type { FileUrls } from './file-urls.js';\nimport { noopLogger } from '../shared/logger.js';\nimport { assetEvents } from './events.js';\n\nconst UNATTACHED_UPLOAD_GRACE_MS = 60 * 60 * 1000;\n\nexport const MEMBER_IMAGE_TYPE = /^image\\/(png|jpeg|gif|webp|avif)$/i;\nconst MEMBER_IMAGE_REFUSAL = 'A member upload must be a PNG, JPEG, GIF, WebP or AVIF image';\n\nexport function isMemberImageType(contentType: string): boolean {\n  return MEMBER_IMAGE_TYPE.test(contentType.trim());\n}\n\nexport function kindOf(contentType: string): AssetKind {\n  const type = contentType.trim().toLowerCase();\n  if (type.startsWith('image/')) {\n    return 'image';\n  }\n  if (type.startsWith('video/')) {\n    return 'video';\n  }\n  if (type.startsWith('audio/')) {\n    return 'audio';\n  }\n  return 'document';\n}\n\nfunction orgPrefix(orgId: string): string {\n  return `org/${orgId}/`;\n}\n\nfunction sanitizeFilename(filename: string): string {\n  const base = filename.split(/[\\\\/]/).pop() ?? 'file';\n  return base.replace(/[^a-zA-Z0-9._-]/g, '_').slice(0, 120) || 'file';\n}\n\nfunction storedKey(orgId: string, folder: string, id: string, filename: string): string {\n  return `${orgPrefix(orgId)}${folder}/${id}/${sanitizeFilename(filename)}`;\n}\n\nfunction finalMemberKey(orgId: string, asset: Asset): string {\n  return `${orgPrefix(orgId)}image/${asset.id}/${sanitizeFilename(asset.filename)}`;\n}\n\nfunction graceCutoff(now: Date): Date {\n  return new Date(now.getTime() - UNATTACHED_UPLOAD_GRACE_MS);\n}\n\nexport type AssetsServiceParams = {\n  storage: ObjectStorage;\n  repo: AssetsRepository;\n  uow: AssetsUnitOfWork;\n  memberImageMaxBytes: number;\n  downloadLinkExpirySeconds: number;\n  fileUrls: FileUrls;\n  logger?: Logger;\n};\n\nexport class AssetsServiceImpl implements AssetsService {\n  private readonly storage: ObjectStorage;\n  private readonly repo: AssetsRepository;\n  private readonly uow: AssetsUnitOfWork;\n  private readonly memberImageMaxBytes: number;\n  private readonly downloadLinkExpirySeconds: number;\n  private readonly fileUrls: FileUrls;\n  private readonly logger: Logger;\n\n  constructor(params: AssetsServiceParams) {\n    if (!Number.isSafeInteger(params.memberImageMaxBytes) || params.memberImageMaxBytes <= 0) {\n      throw new Error(\n        `invalid memberImageMaxBytes \"${params.memberImageMaxBytes}\" (expected a positive integer)`,\n      );\n    }\n    if (\n      !Number.isSafeInteger(params.downloadLinkExpirySeconds) ||\n      params.downloadLinkExpirySeconds <= 0\n    ) {\n      throw new Error(\n        `invalid downloadLinkExpirySeconds \"${params.downloadLinkExpirySeconds}\" (expected a positive integer)`,\n      );\n    }\n    this.storage = params.storage;\n    this.repo = params.repo;\n    this.uow = params.uow;\n    this.memberImageMaxBytes = params.memberImageMaxBytes;\n    this.downloadLinkExpirySeconds = params.downloadLinkExpirySeconds;\n    this.fileUrls = params.fileUrls;\n    this.logger = params.logger ?? noopLogger;\n  }\n\n  async requestUpload(orgId: string, input: RequestUploadInput): Promise<UploadTicket> {\n    const id = genId('asset');\n    const kind = kindOf(input.contentType);\n    const folder = input.source === 'member' ? 'uploads' : kind;\n    const key = storedKey(orgId, folder, id, input.filename);\n    const presigned = await this.storage.presignUpload({ key, contentType: input.contentType });\n    const now = new Date();\n    const asset = await this.uow.run(async ({ assets, outbox }) => {\n      const asset = await assets.insert(orgId, {\n        orgId,\n        id,\n        key,\n        kind,\n        source: input.source,\n        filename: input.filename,\n        contentType: input.contentType,\n        size: 0,\n        status: 'pending',\n        uploadedBy: input.uploadedBy,\n        createdAt: now,\n        updatedAt: now,\n      });\n      await outbox.append([assetEvents.assetCreated.make({ orgId, data: asset })]);\n      return asset;\n    });\n    this.logger.info('asset upload requested', {\n      orgId,\n      assetId: id,\n      kind,\n      source: input.source,\n    });\n    return {\n      asset: { ...asset, url: null, downloadUrl: null },\n      uploadUrl: presigned.url,\n      method: 'PUT',\n      expiresInSeconds: presigned.expiresInSeconds,\n      headers: presigned.headers,\n    };\n  }\n\n  async requestMemberUpload(\n    orgId: string,\n    orgUserId: string,\n    input: MemberUploadInput,\n  ): Promise<UploadTicket> {\n    if (!isMemberImageType(input.contentType)) {\n      throw new InvalidInputError(MEMBER_IMAGE_REFUSAL);\n    }\n    return this.requestUpload(orgId, {\n      filename: input.filename,\n      contentType: input.contentType,\n      source: 'member',\n      uploadedBy: orgUserId,\n    });\n  }\n\n  async confirm(orgId: string, id: string): Promise<AssetView | null> {\n    const asset = await this.repo.findById(orgId, id);\n    if (!asset) {\n      return null;\n    }\n    if (asset.source === 'member') {\n      throw new ForbiddenError('Only the uploader can finalize a member upload');\n    }\n    const confirmed = await this.finalize(orgId, asset);\n    return confirmed ? this.view(confirmed) : null;\n  }\n\n  async confirmOwn(orgId: string, id: string, orgUserId: string): Promise<AssetView | null> {\n    const asset = await this.repo.findById(orgId, id);\n    if (!asset || asset.source !== 'member' || asset.uploadedBy !== orgUserId) {\n      this.logger.debug('upload confirm refused', { orgId, assetId: id, orgUserId });\n      return null;\n    }\n    const confirmed = await this.finalize(orgId, asset);\n    if (!confirmed) {\n      return null;\n    }\n    return confirmed.status === 'ready'\n      ? { ...confirmed, url: this.fileUrls.memberUpload(confirmed.id), downloadUrl: null }\n      : { ...confirmed, url: null, downloadUrl: null };\n  }\n\n  async ownUploadFile(orgId: string, assetId: string, orgUserId: string): Promise<string | null> {\n    if (!(await this.ownsImage(orgId, assetId, orgUserId))) {\n      this.logger.warn('upload file not served — not the uploader', { orgId, assetId, orgUserId });\n      return null;\n    }\n    return this.signFile(orgId, assetId);\n  }\n\n  async ownsImage(orgId: string, assetId: string, orgUserId: string): Promise<boolean> {\n    const asset = await this.repo.findById(orgId, assetId);\n    return (\n      asset !== null &&\n      asset.source === 'member' &&\n      asset.kind === 'image' &&\n      asset.status === 'ready' &&\n      asset.uploadedBy === orgUserId\n    );\n  }\n\n  async libraryAssetsAmong(orgId: string, assetIds: string[]): Promise<string[]> {\n    if (assetIds.length === 0) {\n      return [];\n    }\n    const rows = await this.repo.findByIds(orgId, [...new Set(assetIds)]);\n    const library = new Set(\n      rows.filter((a) => a.source === 'library' && a.status === 'ready').map((a) => a.id),\n    );\n    return assetIds.filter((id) => library.has(id));\n  }\n\n  async list(orgId: string, query: AssetsQuery): Promise<Page<AssetView>> {\n    const page = await this.repo.list(orgId, { ...query, source: query.source ?? 'library' });\n    return { ...page, rows: await Promise.all(page.rows.map((asset) => this.view(asset))) };\n  }\n\n  async get(orgId: string, id: string): Promise<AssetView | null> {\n    const asset = await this.repo.findById(orgId, id);\n    return asset ? this.view(asset) : null;\n  }\n\n  async readyFiles(orgId: string, assetIds: readonly string[]): Promise<Record<string, ReadyFile>> {\n    const ready = await this.readyAmong(orgId, assetIds);\n    return Object.fromEntries(\n      ready.map((asset) => [\n        asset.id,\n        { filename: asset.filename, contentType: asset.contentType, size: asset.size },\n      ]),\n    );\n  }\n\n  async signFile(\n    orgId: string,\n    assetId: string,\n    opts: { saveAs?: string } = {},\n  ): Promise<string | null> {\n    const [asset] = await this.readyAmong(orgId, [assetId]);\n    if (!asset) {\n      this.logger.warn('file not served — no ready asset', { orgId, assetId });\n      return null;\n    }\n    return opts.saveAs === undefined\n      ? this.storage.presignDownload({ key: asset.key })\n      : this.storage.presignDownload({\n          key: asset.key,\n          downloadFilename: opts.saveAs,\n          expiresInSeconds: this.downloadLinkExpirySeconds,\n        });\n  }\n\n  async libraryFile(\n    orgId: string,\n    assetId: string,\n    opts: { download: boolean },\n  ): Promise<string | null> {\n    const asset = await this.repo.findById(orgId, assetId);\n    if (!asset || asset.source !== 'library') {\n      this.logger.warn('library file not served — not a library asset', { orgId, assetId });\n      return null;\n    }\n    return this.signFile(orgId, assetId, opts.download ? { saveAs: asset.filename } : {});\n  }\n\n  async remove(orgId: string, id: string): Promise<boolean> {\n    const asset = await this.repo.findById(orgId, id);\n    if (!asset) {\n      return false;\n    }\n    const removed = await this.discard(orgId, asset);\n    if (removed) {\n      this.logger.info('asset removed', { orgId, assetId: id });\n    }\n    return removed;\n  }\n\n  async removeOwn(orgId: string, id: string, orgUserId: string): Promise<boolean> {\n    const asset = await this.repo.findById(orgId, id);\n    if (!asset || asset.source !== 'member' || asset.uploadedBy !== orgUserId) {\n      return false;\n    }\n    return this.remove(orgId, id);\n  }\n\n  async hasUnattached(orgId: string, now: Date): Promise<boolean> {\n    if (await this.repo.hasUnreferencedMemberUploads(orgId, graceCutoff(now))) {\n      return true;\n    }\n    return (await this.strayUploads(orgId, now)).length > 0;\n  }\n\n  async removeUnattached(orgId: string, now: Date): Promise<number> {\n    const stale = await this.repo.listUnreferencedMemberUploads(orgId, graceCutoff(now));\n    let removed = 0;\n    let failed = 0;\n    for (const asset of stale) {\n      try {\n        if (await this.discard(orgId, asset)) {\n          removed += 1;\n        }\n      } catch (err) {\n        if (!(err instanceof ConflictError)) {\n          failed += 1;\n          this.logger.error('unattached upload not removed', { orgId, assetId: asset.id, err });\n        }\n      }\n    }\n    let stray = 0;\n    for (const key of await this.strayUploads(orgId, now)) {\n      try {\n        await this.storage.remove(key);\n        stray += 1;\n      } catch (err) {\n        failed += 1;\n        this.logger.warn('stray upload not removed', { orgId, err });\n      }\n    }\n    if (removed > 0 || stray > 0 || failed > 0) {\n      this.logger.info('unattached uploads removed', { orgId, count: removed, stray, failed });\n    }\n    return removed + stray;\n  }\n\n  private async strayUploads(orgId: string, now: Date): Promise<string[]> {\n    const cutoff = now.getTime() - this.storage.uploadExpirySeconds * 1000;\n    const objects = await this.storage.list(`${orgPrefix(orgId)}uploads/`);\n    const old = objects\n      .filter((o) => o.lastModified !== undefined && Date.parse(o.lastModified) < cutoff)\n      .map((o) => o.key);\n    if (old.length === 0) {\n      return [];\n    }\n    const held = new Set(await this.repo.heldKeys(orgId, old));\n    return old.filter((key) => !held.has(key));\n  }\n\n  private async finalize(orgId: string, asset: Asset): Promise<Asset | null> {\n    if (asset.status !== 'pending') {\n      return asset;\n    }\n    if (asset.source === 'member') {\n      return this.finalizeMember(orgId, asset);\n    }\n    const stat = await this.storage.stat(asset.key);\n    if (!stat) {\n      this.logger.debug('asset not yet uploaded', { orgId, assetId: asset.id });\n      return asset;\n    }\n    const contentType = stat.contentType ?? asset.contentType;\n    const ready = await this.markReady(orgId, asset, {\n      key: asset.key,\n      kind: kindOf(contentType),\n      size: stat.size,\n      contentType,\n    });\n    return ready ?? this.repo.findById(orgId, asset.id);\n  }\n\n  private async finalizeMember(orgId: string, asset: Asset): Promise<Asset | null> {\n    if (!(await this.storage.stat(asset.key))) {\n      this.logger.debug('asset not yet uploaded', { orgId, assetId: asset.id });\n      return asset;\n    }\n    const key = finalMemberKey(orgId, asset);\n    await this.storage.copy({ from: asset.key, to: key });\n    const stat = await this.storage.stat(key);\n    if (!stat) {\n      throw new Error('copied upload not found');\n    }\n    const contentType = asset.contentType;\n    const kind = kindOf(contentType);\n    const reason = !isMemberImageType(contentType)\n      ? MEMBER_IMAGE_REFUSAL\n      : stat.contentType !== undefined && stat.contentType !== contentType\n        ? 'The uploaded file is not the declared type'\n        : stat.size > this.memberImageMaxBytes\n          ? 'This image is too large'\n          : null;\n    if (reason) {\n      await this.removeObject(orgId, asset.id, key);\n      await this.discard(orgId, asset);\n      this.logger.info('member upload refused', { orgId, assetId: asset.id, reason });\n      throw new InvalidInputError(reason);\n    }\n    const ready = await this.markReady(orgId, asset, { key, kind, size: stat.size, contentType });\n    if (!ready) {\n      return this.repo.findById(orgId, asset.id);\n    }\n    await this.removeObject(orgId, asset.id, asset.key);\n    return ready;\n  }\n\n  private async markReady(\n    orgId: string,\n    asset: Asset,\n    patch: Pick<Asset, 'key' | 'kind' | 'size' | 'contentType'>,\n  ): Promise<Asset | null> {\n    const updated = await this.uow.run(async ({ assets, outbox }) => {\n      const updated = await assets.markReady(orgId, asset.id, patch);\n      if (updated) {\n        await outbox.append([assetEvents.assetReady.make({ orgId, data: updated })]);\n      }\n      return updated;\n    });\n    if (updated) {\n      this.logger.info('asset confirmed', { orgId, assetId: asset.id });\n    }\n    return updated;\n  }\n\n  private async readyAmong(orgId: string, assetIds: readonly string[]): Promise<Asset[]> {\n    const ids = [...new Set(assetIds)];\n    if (ids.length === 0) {\n      return [];\n    }\n    const rows = await this.repo.findByIds(orgId, ids);\n    return rows.filter((asset) => asset.orgId === orgId && asset.status === 'ready');\n  }\n\n  private view(asset: Asset): AssetView {\n    if (asset.source !== 'library' || asset.status !== 'ready') {\n      return { ...asset, url: null, downloadUrl: null };\n    }\n    return {\n      ...asset,\n      url: this.fileUrls.libraryFile(asset.id),\n      downloadUrl: this.fileUrls.libraryDownload(asset.id),\n    };\n  }\n\n  private async discard(orgId: string, asset: Asset): Promise<boolean> {\n    const deleted = await this.uow.run(async ({ assets, outbox }) => {\n      const deleted = await assets.delete(orgId, asset.id);\n      if (deleted) {\n        await outbox.append([assetEvents.assetDeleted.make({ orgId, data: asset })]);\n      }\n      return deleted;\n    });\n    if (deleted) {\n      await this.removeObject(orgId, asset.id, asset.key);\n    }\n    return deleted;\n  }\n\n  private async removeObject(orgId: string, assetId: string, key: string): Promise<void> {\n    try {\n      await this.storage.remove(key);\n    } catch (error) {\n      this.logger.warn('stored object not removed', { orgId, assetId, err: error });\n    }\n  }\n}\n"],"mappings":";;;;;AAuBA,MAAM,6BAA6B,OAAU;AAE7C,MAAa,oBAAoB;AACjC,MAAM,uBAAuB;AAE7B,SAAgB,kBAAkB,aAA8B;CAC9D,OAAO,kBAAkB,KAAK,YAAY,KAAK,CAAC;AAClD;AAEA,SAAgB,OAAO,aAAgC;CACrD,MAAM,OAAO,YAAY,KAAK,CAAC,CAAC,YAAY;CAC5C,IAAI,KAAK,WAAW,QAAQ,GAC1B,OAAO;CAET,IAAI,KAAK,WAAW,QAAQ,GAC1B,OAAO;CAET,IAAI,KAAK,WAAW,QAAQ,GAC1B,OAAO;CAET,OAAO;AACT;AAEA,SAAS,UAAU,OAAuB;CACxC,OAAO,OAAO,MAAM;AACtB;AAEA,SAAS,iBAAiB,UAA0B;CAElD,QADa,SAAS,MAAM,OAAO,CAAC,CAAC,IAAI,KAAK,OAAA,CAClC,QAAQ,oBAAoB,GAAG,CAAC,CAAC,MAAM,GAAG,GAAG,KAAK;AAChE;AAEA,SAAS,UAAU,OAAe,QAAgB,IAAY,UAA0B;CACtF,OAAO,GAAG,UAAU,KAAK,IAAI,OAAO,GAAG,GAAG,GAAG,iBAAiB,QAAQ;AACxE;AAEA,SAAS,eAAe,OAAe,OAAsB;CAC3D,OAAO,GAAG,UAAU,KAAK,EAAE,QAAQ,MAAM,GAAG,GAAG,iBAAiB,MAAM,QAAQ;AAChF;AAEA,SAAS,YAAY,KAAiB;CACpC,uBAAO,IAAI,KAAK,IAAI,QAAQ,IAAI,0BAA0B;AAC5D;AAYA,IAAa,oBAAb,MAAwD;CACtD;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,QAA6B;EACvC,IAAI,CAAC,OAAO,cAAc,OAAO,mBAAmB,KAAK,OAAO,uBAAuB,GACrF,MAAM,IAAI,MACR,gCAAgC,OAAO,oBAAoB,gCAC7D;EAEF,IACE,CAAC,OAAO,cAAc,OAAO,yBAAyB,KACtD,OAAO,6BAA6B,GAEpC,MAAM,IAAI,MACR,sCAAsC,OAAO,0BAA0B,gCACzE;EAEF,KAAK,UAAU,OAAO;EACtB,KAAK,OAAO,OAAO;EACnB,KAAK,MAAM,OAAO;EAClB,KAAK,sBAAsB,OAAO;EAClC,KAAK,4BAA4B,OAAO;EACxC,KAAK,WAAW,OAAO;EACvB,KAAK,SAAS,OAAO,UAAU;CACjC;CAEA,MAAM,cAAc,OAAe,OAAkD;EACnF,MAAM,KAAK,MAAM,OAAO;EACxB,MAAM,OAAO,OAAO,MAAM,WAAW;EAErC,MAAM,MAAM,UAAU,OADP,MAAM,WAAW,WAAW,YAAY,MAClB,IAAI,MAAM,QAAQ;EACvD,MAAM,YAAY,MAAM,KAAK,QAAQ,cAAc;GAAE;GAAK,aAAa,MAAM;EAAY,CAAC;EAC1F,MAAM,sBAAM,IAAI,KAAK;EACrB,MAAM,QAAQ,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,QAAQ,aAAa;GAC7D,MAAM,QAAQ,MAAM,OAAO,OAAO,OAAO;IACvC;IACA;IACA;IACA;IACA,QAAQ,MAAM;IACd,UAAU,MAAM;IAChB,aAAa,MAAM;IACnB,MAAM;IACN,QAAQ;IACR,YAAY,MAAM;IAClB,WAAW;IACX,WAAW;GACb,CAAC;GACD,MAAM,OAAO,OAAO,CAAC,YAAY,aAAa,KAAK;IAAE;IAAO,MAAM;GAAM,CAAC,CAAC,CAAC;GAC3E,OAAO;EACT,CAAC;EACD,KAAK,OAAO,KAAK,0BAA0B;GACzC;GACA,SAAS;GACT;GACA,QAAQ,MAAM;EAChB,CAAC;EACD,OAAO;GACL,OAAO;IAAE,GAAG;IAAO,KAAK;IAAM,aAAa;GAAK;GAChD,WAAW,UAAU;GACrB,QAAQ;GACR,kBAAkB,UAAU;GAC5B,SAAS,UAAU;EACrB;CACF;CAEA,MAAM,oBACJ,OACA,WACA,OACuB;EACvB,IAAI,CAAC,kBAAkB,MAAM,WAAW,GACtC,MAAM,IAAI,kBAAkB,oBAAoB;EAElD,OAAO,KAAK,cAAc,OAAO;GAC/B,UAAU,MAAM;GAChB,aAAa,MAAM;GACnB,QAAQ;GACR,YAAY;EACd,CAAC;CACH;CAEA,MAAM,QAAQ,OAAe,IAAuC;EAClE,MAAM,QAAQ,MAAM,KAAK,KAAK,SAAS,OAAO,EAAE;EAChD,IAAI,CAAC,OACH,OAAO;EAET,IAAI,MAAM,WAAW,UACnB,MAAM,IAAI,eAAe,gDAAgD;EAE3E,MAAM,YAAY,MAAM,KAAK,SAAS,OAAO,KAAK;EAClD,OAAO,YAAY,KAAK,KAAK,SAAS,IAAI;CAC5C;CAEA,MAAM,WAAW,OAAe,IAAY,WAA8C;EACxF,MAAM,QAAQ,MAAM,KAAK,KAAK,SAAS,OAAO,EAAE;EAChD,IAAI,CAAC,SAAS,MAAM,WAAW,YAAY,MAAM,eAAe,WAAW;GACzE,KAAK,OAAO,MAAM,0BAA0B;IAAE;IAAO,SAAS;IAAI;GAAU,CAAC;GAC7E,OAAO;EACT;EACA,MAAM,YAAY,MAAM,KAAK,SAAS,OAAO,KAAK;EAClD,IAAI,CAAC,WACH,OAAO;EAET,OAAO,UAAU,WAAW,UACxB;GAAE,GAAG;GAAW,KAAK,KAAK,SAAS,aAAa,UAAU,EAAE;GAAG,aAAa;EAAK,IACjF;GAAE,GAAG;GAAW,KAAK;GAAM,aAAa;EAAK;CACnD;CAEA,MAAM,cAAc,OAAe,SAAiB,WAA2C;EAC7F,IAAI,CAAE,MAAM,KAAK,UAAU,OAAO,SAAS,SAAS,GAAI;GACtD,KAAK,OAAO,KAAK,6CAA6C;IAAE;IAAO;IAAS;GAAU,CAAC;GAC3F,OAAO;EACT;EACA,OAAO,KAAK,SAAS,OAAO,OAAO;CACrC;CAEA,MAAM,UAAU,OAAe,SAAiB,WAAqC;EACnF,MAAM,QAAQ,MAAM,KAAK,KAAK,SAAS,OAAO,OAAO;EACrD,OACE,UAAU,QACV,MAAM,WAAW,YACjB,MAAM,SAAS,WACf,MAAM,WAAW,WACjB,MAAM,eAAe;CAEzB;CAEA,MAAM,mBAAmB,OAAe,UAAuC;EAC7E,IAAI,SAAS,WAAW,GACtB,OAAO,CAAC;EAEV,MAAM,OAAO,MAAM,KAAK,KAAK,UAAU,OAAO,CAAC,GAAG,IAAI,IAAI,QAAQ,CAAC,CAAC;EACpE,MAAM,UAAU,IAAI,IAClB,KAAK,QAAQ,MAAM,EAAE,WAAW,aAAa,EAAE,WAAW,OAAO,CAAC,CAAC,KAAK,MAAM,EAAE,EAAE,CACpF;EACA,OAAO,SAAS,QAAQ,OAAO,QAAQ,IAAI,EAAE,CAAC;CAChD;CAEA,MAAM,KAAK,OAAe,OAA8C;EACtE,MAAM,OAAO,MAAM,KAAK,KAAK,KAAK,OAAO;GAAE,GAAG;GAAO,QAAQ,MAAM,UAAU;EAAU,CAAC;EACxF,OAAO;GAAE,GAAG;GAAM,MAAM,MAAM,QAAQ,IAAI,KAAK,KAAK,KAAK,UAAU,KAAK,KAAK,KAAK,CAAC,CAAC;EAAE;CACxF;CAEA,MAAM,IAAI,OAAe,IAAuC;EAC9D,MAAM,QAAQ,MAAM,KAAK,KAAK,SAAS,OAAO,EAAE;EAChD,OAAO,QAAQ,KAAK,KAAK,KAAK,IAAI;CACpC;CAEA,MAAM,WAAW,OAAe,UAAiE;EAC/F,MAAM,QAAQ,MAAM,KAAK,WAAW,OAAO,QAAQ;EACnD,OAAO,OAAO,YACZ,MAAM,KAAK,UAAU,CACnB,MAAM,IACN;GAAE,UAAU,MAAM;GAAU,aAAa,MAAM;GAAa,MAAM,MAAM;EAAK,CAC/E,CAAC,CACH;CACF;CAEA,MAAM,SACJ,OACA,SACA,OAA4B,CAAC,GACL;EACxB,MAAM,CAAC,SAAS,MAAM,KAAK,WAAW,OAAO,CAAC,OAAO,CAAC;EACtD,IAAI,CAAC,OAAO;GACV,KAAK,OAAO,KAAK,oCAAoC;IAAE;IAAO;GAAQ,CAAC;GACvE,OAAO;EACT;EACA,OAAO,KAAK,WAAW,KAAA,IACnB,KAAK,QAAQ,gBAAgB,EAAE,KAAK,MAAM,IAAI,CAAC,IAC/C,KAAK,QAAQ,gBAAgB;GAC3B,KAAK,MAAM;GACX,kBAAkB,KAAK;GACvB,kBAAkB,KAAK;EACzB,CAAC;CACP;CAEA,MAAM,YACJ,OACA,SACA,MACwB;EACxB,MAAM,QAAQ,MAAM,KAAK,KAAK,SAAS,OAAO,OAAO;EACrD,IAAI,CAAC,SAAS,MAAM,WAAW,WAAW;GACxC,KAAK,OAAO,KAAK,iDAAiD;IAAE;IAAO;GAAQ,CAAC;GACpF,OAAO;EACT;EACA,OAAO,KAAK,SAAS,OAAO,SAAS,KAAK,WAAW,EAAE,QAAQ,MAAM,SAAS,IAAI,CAAC,CAAC;CACtF;CAEA,MAAM,OAAO,OAAe,IAA8B;EACxD,MAAM,QAAQ,MAAM,KAAK,KAAK,SAAS,OAAO,EAAE;EAChD,IAAI,CAAC,OACH,OAAO;EAET,MAAM,UAAU,MAAM,KAAK,QAAQ,OAAO,KAAK;EAC/C,IAAI,SACF,KAAK,OAAO,KAAK,iBAAiB;GAAE;GAAO,SAAS;EAAG,CAAC;EAE1D,OAAO;CACT;CAEA,MAAM,UAAU,OAAe,IAAY,WAAqC;EAC9E,MAAM,QAAQ,MAAM,KAAK,KAAK,SAAS,OAAO,EAAE;EAChD,IAAI,CAAC,SAAS,MAAM,WAAW,YAAY,MAAM,eAAe,WAC9D,OAAO;EAET,OAAO,KAAK,OAAO,OAAO,EAAE;CAC9B;CAEA,MAAM,cAAc,OAAe,KAA6B;EAC9D,IAAI,MAAM,KAAK,KAAK,6BAA6B,OAAO,YAAY,GAAG,CAAC,GACtE,OAAO;EAET,QAAQ,MAAM,KAAK,aAAa,OAAO,GAAG,EAAA,CAAG,SAAS;CACxD;CAEA,MAAM,iBAAiB,OAAe,KAA4B;EAChE,MAAM,QAAQ,MAAM,KAAK,KAAK,8BAA8B,OAAO,YAAY,GAAG,CAAC;EACnF,IAAI,UAAU;EACd,IAAI,SAAS;EACb,KAAK,MAAM,SAAS,OAClB,IAAI;GACF,IAAI,MAAM,KAAK,QAAQ,OAAO,KAAK,GACjC,WAAW;EAEf,SAAS,KAAK;GACZ,IAAI,EAAE,eAAe,gBAAgB;IACnC,UAAU;IACV,KAAK,OAAO,MAAM,iCAAiC;KAAE;KAAO,SAAS,MAAM;KAAI;IAAI,CAAC;GACtF;EACF;EAEF,IAAI,QAAQ;EACZ,KAAK,MAAM,OAAO,MAAM,KAAK,aAAa,OAAO,GAAG,GAClD,IAAI;GACF,MAAM,KAAK,QAAQ,OAAO,GAAG;GAC7B,SAAS;EACX,SAAS,KAAK;GACZ,UAAU;GACV,KAAK,OAAO,KAAK,4BAA4B;IAAE;IAAO;GAAI,CAAC;EAC7D;EAEF,IAAI,UAAU,KAAK,QAAQ,KAAK,SAAS,GACvC,KAAK,OAAO,KAAK,8BAA8B;GAAE;GAAO,OAAO;GAAS;GAAO;EAAO,CAAC;EAEzF,OAAO,UAAU;CACnB;CAEA,MAAc,aAAa,OAAe,KAA8B;EACtE,MAAM,SAAS,IAAI,QAAQ,IAAI,KAAK,QAAQ,sBAAsB;EAElE,MAAM,OAAM,MADU,KAAK,QAAQ,KAAK,GAAG,UAAU,KAAK,EAAE,SAAS,EAAA,CAElE,QAAQ,MAAM,EAAE,iBAAiB,KAAA,KAAa,KAAK,MAAM,EAAE,YAAY,IAAI,MAAM,CAAC,CAClF,KAAK,MAAM,EAAE,GAAG;EACnB,IAAI,IAAI,WAAW,GACjB,OAAO,CAAC;EAEV,MAAM,OAAO,IAAI,IAAI,MAAM,KAAK,KAAK,SAAS,OAAO,GAAG,CAAC;EACzD,OAAO,IAAI,QAAQ,QAAQ,CAAC,KAAK,IAAI,GAAG,CAAC;CAC3C;CAEA,MAAc,SAAS,OAAe,OAAqC;EACzE,IAAI,MAAM,WAAW,WACnB,OAAO;EAET,IAAI,MAAM,WAAW,UACnB,OAAO,KAAK,eAAe,OAAO,KAAK;EAEzC,MAAM,OAAO,MAAM,KAAK,QAAQ,KAAK,MAAM,GAAG;EAC9C,IAAI,CAAC,MAAM;GACT,KAAK,OAAO,MAAM,0BAA0B;IAAE;IAAO,SAAS,MAAM;GAAG,CAAC;GACxE,OAAO;EACT;EACA,MAAM,cAAc,KAAK,eAAe,MAAM;EAO9C,OAAO,MANa,KAAK,UAAU,OAAO,OAAO;GAC/C,KAAK,MAAM;GACX,MAAM,OAAO,WAAW;GACxB,MAAM,KAAK;GACX;EACF,CAAC,KACe,KAAK,KAAK,SAAS,OAAO,MAAM,EAAE;CACpD;CAEA,MAAc,eAAe,OAAe,OAAqC;EAC/E,IAAI,CAAE,MAAM,KAAK,QAAQ,KAAK,MAAM,GAAG,GAAI;GACzC,KAAK,OAAO,MAAM,0BAA0B;IAAE;IAAO,SAAS,MAAM;GAAG,CAAC;GACxE,OAAO;EACT;EACA,MAAM,MAAM,eAAe,OAAO,KAAK;EACvC,MAAM,KAAK,QAAQ,KAAK;GAAE,MAAM,MAAM;GAAK,IAAI;EAAI,CAAC;EACpD,MAAM,OAAO,MAAM,KAAK,QAAQ,KAAK,GAAG;EACxC,IAAI,CAAC,MACH,MAAM,IAAI,MAAM,yBAAyB;EAE3C,MAAM,cAAc,MAAM;EAC1B,MAAM,OAAO,OAAO,WAAW;EAC/B,MAAM,SAAS,CAAC,kBAAkB,WAAW,IACzC,uBACA,KAAK,gBAAgB,KAAA,KAAa,KAAK,gBAAgB,cACrD,+CACA,KAAK,OAAO,KAAK,sBACf,4BACA;EACR,IAAI,QAAQ;GACV,MAAM,KAAK,aAAa,OAAO,MAAM,IAAI,GAAG;GAC5C,MAAM,KAAK,QAAQ,OAAO,KAAK;GAC/B,KAAK,OAAO,KAAK,yBAAyB;IAAE;IAAO,SAAS,MAAM;IAAI;GAAO,CAAC;GAC9E,MAAM,IAAI,kBAAkB,MAAM;EACpC;EACA,MAAM,QAAQ,MAAM,KAAK,UAAU,OAAO,OAAO;GAAE;GAAK;GAAM,MAAM,KAAK;GAAM;EAAY,CAAC;EAC5F,IAAI,CAAC,OACH,OAAO,KAAK,KAAK,SAAS,OAAO,MAAM,EAAE;EAE3C,MAAM,KAAK,aAAa,OAAO,MAAM,IAAI,MAAM,GAAG;EAClD,OAAO;CACT;CAEA,MAAc,UACZ,OACA,OACA,OACuB;EACvB,MAAM,UAAU,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,QAAQ,aAAa;GAC/D,MAAM,UAAU,MAAM,OAAO,UAAU,OAAO,MAAM,IAAI,KAAK;GAC7D,IAAI,SACF,MAAM,OAAO,OAAO,CAAC,YAAY,WAAW,KAAK;IAAE;IAAO,MAAM;GAAQ,CAAC,CAAC,CAAC;GAE7E,OAAO;EACT,CAAC;EACD,IAAI,SACF,KAAK,OAAO,KAAK,mBAAmB;GAAE;GAAO,SAAS,MAAM;EAAG,CAAC;EAElE,OAAO;CACT;CAEA,MAAc,WAAW,OAAe,UAA+C;EACrF,MAAM,MAAM,CAAC,GAAG,IAAI,IAAI,QAAQ,CAAC;EACjC,IAAI,IAAI,WAAW,GACjB,OAAO,CAAC;EAGV,QAAO,MADY,KAAK,KAAK,UAAU,OAAO,GAAG,EAAA,CACrC,QAAQ,UAAU,MAAM,UAAU,SAAS,MAAM,WAAW,OAAO;CACjF;CAEA,KAAa,OAAyB;EACpC,IAAI,MAAM,WAAW,aAAa,MAAM,WAAW,SACjD,OAAO;GAAE,GAAG;GAAO,KAAK;GAAM,aAAa;EAAK;EAElD,OAAO;GACL,GAAG;GACH,KAAK,KAAK,SAAS,YAAY,MAAM,EAAE;GACvC,aAAa,KAAK,SAAS,gBAAgB,MAAM,EAAE;EACrD;CACF;CAEA,MAAc,QAAQ,OAAe,OAAgC;EACnE,MAAM,UAAU,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,QAAQ,aAAa;GAC/D,MAAM,UAAU,MAAM,OAAO,OAAO,OAAO,MAAM,EAAE;GACnD,IAAI,SACF,MAAM,OAAO,OAAO,CAAC,YAAY,aAAa,KAAK;IAAE;IAAO,MAAM;GAAM,CAAC,CAAC,CAAC;GAE7E,OAAO;EACT,CAAC;EACD,IAAI,SACF,MAAM,KAAK,aAAa,OAAO,MAAM,IAAI,MAAM,GAAG;EAEpD,OAAO;CACT;CAEA,MAAc,aAAa,OAAe,SAAiB,KAA4B;EACrF,IAAI;GACF,MAAM,KAAK,QAAQ,OAAO,GAAG;EAC/B,SAAS,OAAO;GACd,KAAK,OAAO,KAAK,6BAA6B;IAAE;IAAO;IAAS,KAAK;GAAM,CAAC;EAC9E;CACF;AACF"}

package/dist/automations/actions.d.ts

@@ -1,32 +1,21 @@
 import { DomainEvent } from "../types/shared.js";
-import { EmailTemplateId, EmailTemplateParams } from "../types/email-templates.js";
+import { EmailTemplateId } from "../types/email-templates.js";
 import { AutomationAction } from "../types/schemas/automations.js";
-import { WebhookSender } from "../types/automations.js";
 import "../types/index.js";
-import { CredentialStore } from "../shared/ports.js";
-import { Mailer, MailerLookups } from "../shared/mailer.js";
+import "../shared/ports.js";
 import "./model.js";
-import "./ports.js";
+import { ActionDeps, EmailRecipient } from "./community-mail.js";
+import { EmailDerivation } from "./community-derivations.js";
 //#region src/automations/actions.d.ts
-interface ActionDeps {
-  mailer: Pick<Mailer, 'send'>;
-  lookups: MailerLookups;
-  credentials: Pick<CredentialStore, 'reveal'>;
-  webhooks: WebhookSender;
-}
-interface SendEmailDerivation<K extends EmailTemplateId> {
-  /** The only event type this template's params can be derived from. */
-  trigger: string;
-  /** Undefined = the recipient or content behind the event's ids cannot be resolved. */
-  derive(event: DomainEvent, lookups: MailerLookups): Promise<{
-    to: string;
-    params: EmailTemplateParams[K];
-  } | undefined>;
-}
-type SendEmailDerivations = { [K in EmailTemplateId]?: SendEmailDerivation<K>; };
+type SendEmailDerivations = { [K in EmailTemplateId]?: EmailDerivation<K>; };
 declare const SEND_EMAIL_DERIVATIONS: SendEmailDerivations;
-/** Throws on any failure — the engine owns retry policy and failure bookkeeping. */
-declare function executeAction(action: AutomationAction, event: DomainEvent, deps: ActionDeps): Promise<void>;
+/** Who an action reached, and who a delivery to failed for (a partial failure does not throw). */
+interface ActionOutcome {
+  recipients: string[];
+  failed: string[];
+}
+/** Throws on any failure but a partial fan-out — the engine owns retry policy and failure bookkeeping. */
+declare function executeAction(action: AutomationAction, event: DomainEvent, deps: ActionDeps): Promise<ActionOutcome>;
 //#endregion
-export { ActionDeps, SEND_EMAIL_DERIVATIONS, executeAction };
+export { type ActionDeps, ActionOutcome, type EmailRecipient, SEND_EMAIL_DERIVATIONS, executeAction };
 //# sourceMappingURL=actions.d.ts.map