@jazzmind/busibox-app 3.0.18

package/dist/lib/index.js

@@ -0,0 +1,24 @@
+/**
+ * Lib exports - organized by busibox service
+ */
+// Agent service
+export * from './agent';
+// AuthZ service (auth, RBAC, SSO, audit, tokens, passkeys, user management)
+export * from './authz';
+// HTTP utilities
+export * from './http/fetch-with-fallback';
+// Data service (documents, embeddings, libraries)
+export * from './data';
+// RBAC - rename User to RbacUser to avoid conflict with types/User
+export { listRoles, getRole, getRoleByName, listUsers, getAllUsers, getUser, getUserByEmail, getUserRoles, getUserRoleNames, hasRole, hasAnyRole, hasAllRoles, isAdmin, isGuest, createRole, updateRole, deleteRole, addUserRole, removeUserRole, deleteUser, createUser, updateUser, activateUser, deactivateUser, reactivateUser, listEmailDomains, addEmailDomain, removeEmailDomain, createRoleBinding, getRoleBinding, deleteRoleBinding, listRoleBindings, getRoleResourceBindings, getResourceRoles, userCanAccessResource, getUserAccessibleResources, grantRoleResourceAccess, revokeRoleResourceAccess, } from './authz/rbac';
+// Config service (config-api client)
+export * from './config';
+// Icons
+export * from './icons';
+// Hooks
+export * from './hooks/useIsMobile';
+export * from './hooks/useAutosave';
+// Media (video upload/expiration - client-safe)
+export * from './media/upload';
+export * from './media/expiration';
+//# sourceMappingURL=index.js.map

package/dist/lib/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/lib/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,gBAAgB;AAChB,cAAc,SAAS,CAAC;AAExB,4EAA4E;AAC5E,cAAc,SAAS,CAAC;AAExB,iBAAiB;AACjB,cAAc,4BAA4B,CAAC;AAE3C,kDAAkD;AAClD,cAAc,QAAQ,CAAC;AAEvB,mEAAmE;AACnE,OAAO,EACL,SAAS,EACT,OAAO,EACP,aAAa,EACb,SAAS,EACT,WAAW,EACX,OAAO,EACP,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,OAAO,EACP,UAAU,EACV,WAAW,EACX,OAAO,EACP,OAAO,EACP,UAAU,EACV,UAAU,EACV,UAAU,EACV,WAAW,EACX,cAAc,EACd,UAAU,EACV,UAAU,EACV,UAAU,EACV,YAAY,EACZ,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,gBAAgB,EAChB,uBAAuB,EACvB,gBAAgB,EAChB,qBAAqB,EACrB,0BAA0B,EAC1B,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,cAAc,CAAC;AAkBtB,qCAAqC;AACrC,cAAc,UAAU,CAAC;AAEzB,QAAQ;AACR,cAAc,SAAS,CAAC;AAExB,QAAQ;AACR,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AAEpC,gDAAgD;AAChD,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC"}

package/dist/lib/insights/client.d.ts

@@ -0,0 +1,131 @@
+/**
+ * Insights API Client for busibox-app
+ *
+ * Thin wrapper around agent-api HTTP endpoints for chat insights.
+ * Insights are agent memories stored in Milvus.
+ */
+import 'server-only';
+export interface ChatInsight {
+    id: string;
+    userId: string;
+    content: string;
+    embedding: number[];
+    conversationId: string;
+    analyzedAt: number;
+    category?: string;
+}
+export interface InsightFrontend {
+    id: string;
+    content: string;
+    category: string;
+    importance: number;
+    source: string;
+    conversationId: string;
+    createdAt: string;
+    metadata: Record<string, unknown>;
+}
+export interface InsightSearchResult {
+    id: string;
+    content: string;
+    insight: InsightFrontend;
+    score: number;
+    distance: number;
+}
+export interface InsightListResponse {
+    results: InsightSearchResult[];
+    total: number;
+    offset: number;
+    limit: number;
+    by_category: Record<string, number>;
+}
+export interface InsightStatsResponse {
+    total: number;
+    by_category: Record<string, number>;
+    userId: string;
+    count: number;
+    collectionName: string;
+}
+export interface TokenManager {
+    getAuthzToken(audience: string, scopes: string[]): Promise<string>;
+}
+/**
+ * Initialize the chat_insights collection in Milvus
+ *
+ * Creates the collection with schema if it doesn't exist.
+ * This is idempotent - safe to call multiple times.
+ */
+export declare function initializeChatInsightsCollection(tokenManager?: TokenManager): Promise<void>;
+/**
+ * Insert insights into Milvus
+ *
+ * @param insights - Array of insights to insert
+ * @param tokenManager - Token manager for authentication
+ */
+export declare function insertInsights(insights: ChatInsight[], tokenManager?: TokenManager): Promise<void>;
+/**
+ * Search for relevant insights based on query
+ *
+ * @param query - Search query text
+ * @param userId - User ID to filter results
+ * @param options - Search configuration
+ * @param tokenManager - Token manager for authentication
+ * @returns Array of relevant insights with scores
+ */
+export declare function searchInsights(query: string, userId: string, options?: {
+    limit?: number;
+    scoreThreshold?: number;
+}, tokenManager?: TokenManager): Promise<InsightSearchResult[]>;
+/**
+ * List all insights for a user with pagination and optional filtering
+ *
+ * @param options - List configuration (category, offset, limit)
+ * @param tokenManager - Token manager for authentication
+ * @returns Paginated list of insights with category counts
+ */
+export declare function listInsights(options?: {
+    category?: string;
+    offset?: number;
+    limit?: number;
+}, tokenManager?: TokenManager): Promise<InsightListResponse>;
+/**
+ * Delete insights for a conversation
+ *
+ * @param conversationId - Conversation ID
+ * @param userId - User ID (for authorization)
+ * @param tokenManager - Token manager for authentication
+ */
+export declare function deleteConversationInsights(conversationId: string, userId: string, tokenManager?: TokenManager): Promise<void>;
+/**
+ * Get insight count for a user
+ *
+ * @param userId - User ID
+ * @param tokenManager - Token manager for authentication
+ * @returns Number of insights
+ */
+export declare function getUserInsightCount(userId: string, tokenManager?: TokenManager): Promise<number>;
+/**
+ * Delete all insights for a user (for account deletion/cleanup)
+ *
+ * @param userId - User ID
+ * @param tokenManager - Token manager for authentication
+ */
+export declare function deleteUserInsights(userId: string, tokenManager?: TokenManager): Promise<void>;
+/**
+ * Flush collection to ensure data persistence
+ *
+ * Call this after batch inserts for data durability.
+ */
+export declare function flushInsightsCollection(tokenManager?: TokenManager): Promise<void>;
+/**
+ * Get collection statistics including category counts
+ *
+ * @param tokenManager - Token manager for authentication (uses /me endpoint)
+ */
+export declare function getCollectionStats(tokenManager?: TokenManager): Promise<InsightStatsResponse>;
+/**
+ * Health check for insights service
+ *
+ * @returns true if service is healthy
+ */
+export declare function checkInsightsHealth(): Promise<boolean>;
+//# sourceMappingURL=client.d.ts.map

package/dist/lib/insights/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../src/lib/insights/client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,aAAa,CAAC;AAErB,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,eAAe,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,YAAY;IAC3B,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACpE;AAUD;;;;;GAKG;AACH,wBAAsB,gCAAgC,CACpD,YAAY,CAAC,EAAE,YAAY,GAC1B,OAAO,CAAC,IAAI,CAAC,CAuBf;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAClC,QAAQ,EAAE,WAAW,EAAE,EACvB,YAAY,CAAC,EAAE,YAAY,GAC1B,OAAO,CAAC,IAAI,CAAC,CA4Bf;AAED;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAClC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,OAAO,GAAE;IACP,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;CACpB,EACN,YAAY,CAAC,EAAE,YAAY,GAC1B,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAkChC;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAChC,OAAO,GAAE;IACP,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CACX,EACN,YAAY,CAAC,EAAE,YAAY,GAC1B,OAAO,CAAC,mBAAmB,CAAC,CAgC9B;AAED;;;;;;GAMG;AACH,wBAAsB,0BAA0B,CAC9C,cAAc,EAAE,MAAM,EACtB,MAAM,EAAE,MAAM,EACd,YAAY,CAAC,EAAE,YAAY,GAC1B,OAAO,CAAC,IAAI,CAAC,CAqBf;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,MAAM,EACd,YAAY,CAAC,EAAE,YAAY,GAC1B,OAAO,CAAC,MAAM,CAAC,CAwBjB;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,MAAM,EACd,YAAY,CAAC,EAAE,YAAY,GAC1B,OAAO,CAAC,IAAI,CAAC,CAqBf;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,YAAY,CAAC,EAAE,YAAY,GAC1B,OAAO,CAAC,IAAI,CAAC,CAuBf;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,YAAY,CAAC,EAAE,YAAY,GAC1B,OAAO,CAAC,oBAAoB,CAAC,CAuB/B;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,OAAO,CAAC,CAgB5D"}

package/dist/lib/insights/client.js

@@ -0,0 +1,306 @@
+/**
+ * Insights API Client for busibox-app
+ *
+ * Thin wrapper around agent-api HTTP endpoints for chat insights.
+ * Insights are agent memories stored in Milvus.
+ */
+import 'server-only';
+// Agent API configuration (insights migrated from search-api to agent-api)
+const AGENT_API_URL = process.env.AGENT_API_URL || process.env.NEXT_PUBLIC_AGENT_API_URL || 'http://localhost:4111';
+// Legacy: Search API fallback
+const SEARCH_API_URL = process.env.SEARCH_API_URL || process.env.NEXT_PUBLIC_SEARCH_API_URL || 'http://localhost:8001';
+// Use agent-api for insights
+const INSIGHTS_API_URL = AGENT_API_URL;
+/**
+ * Initialize the chat_insights collection in Milvus
+ *
+ * Creates the collection with schema if it doesn't exist.
+ * This is idempotent - safe to call multiple times.
+ */
+export async function initializeChatInsightsCollection(tokenManager) {
+    let headers = {
+        'Content-Type': 'application/json',
+    };
+    if (tokenManager) {
+        try {
+            const token = await tokenManager.getAuthzToken('agent-api', ['insights:write']);
+            headers['Authorization'] = `Bearer ${token}`;
+        }
+        catch (error) {
+            console.warn('[initializeChatInsightsCollection] Failed to get auth token:', error);
+        }
+    }
+    const response = await fetch(`${INSIGHTS_API_URL}/insights/init`, {
+        method: 'POST',
+        headers,
+    });
+    if (!response.ok) {
+        const error = await response.json().catch(() => ({ detail: response.statusText }));
+        throw new Error(`Failed to initialize collection: ${error.detail || response.statusText}`);
+    }
+}
+/**
+ * Insert insights into Milvus
+ *
+ * @param insights - Array of insights to insert
+ * @param tokenManager - Token manager for authentication
+ */
+export async function insertInsights(insights, tokenManager) {
+    if (insights.length === 0) {
+        return;
+    }
+    let headers = {
+        'Content-Type': 'application/json',
+    };
+    if (tokenManager) {
+        try {
+            const token = await tokenManager.getAuthzToken('agent-api', ['insights:write']);
+            headers['Authorization'] = `Bearer ${token}`;
+        }
+        catch (error) {
+            console.warn('[insertInsights] Failed to get auth token:', error);
+        }
+    }
+    const response = await fetch(`${INSIGHTS_API_URL}/insights`, {
+        method: 'POST',
+        headers,
+        body: JSON.stringify({ insights }),
+    });
+    if (!response.ok) {
+        const error = await response.json().catch(() => ({ detail: response.statusText }));
+        throw new Error(`Failed to insert insights: ${error.detail || response.statusText}`);
+    }
+}
+/**
+ * Search for relevant insights based on query
+ *
+ * @param query - Search query text
+ * @param userId - User ID to filter results
+ * @param options - Search configuration
+ * @param tokenManager - Token manager for authentication
+ * @returns Array of relevant insights with scores
+ */
+export async function searchInsights(query, userId, options = {}, tokenManager) {
+    const { limit = 3, scoreThreshold = 0.7 } = options;
+    let headers = {
+        'Content-Type': 'application/json',
+    };
+    if (tokenManager) {
+        try {
+            const token = await tokenManager.getAuthzToken('agent-api', ['insights:read']);
+            headers['Authorization'] = `Bearer ${token}`;
+        }
+        catch (error) {
+            console.warn('[searchInsights] Failed to get auth token:', error);
+        }
+    }
+    const response = await fetch(`${INSIGHTS_API_URL}/insights/search`, {
+        method: 'POST',
+        headers,
+        body: JSON.stringify({
+            query,
+            userId,
+            limit,
+            scoreThreshold,
+        }),
+    });
+    if (!response.ok) {
+        const error = await response.json().catch(() => ({ detail: response.statusText }));
+        throw new Error(`Failed to search insights: ${error.detail || response.statusText}`);
+    }
+    const data = await response.json();
+    return data.results;
+}
+/**
+ * List all insights for a user with pagination and optional filtering
+ *
+ * @param options - List configuration (category, offset, limit)
+ * @param tokenManager - Token manager for authentication
+ * @returns Paginated list of insights with category counts
+ */
+export async function listInsights(options = {}, tokenManager) {
+    const { category, offset = 0, limit = 50 } = options;
+    let headers = {
+        'Content-Type': 'application/json',
+    };
+    if (tokenManager) {
+        try {
+            const token = await tokenManager.getAuthzToken('agent-api', ['insights:read']);
+            headers['Authorization'] = `Bearer ${token}`;
+        }
+        catch (error) {
+            console.warn('[listInsights] Failed to get auth token:', error);
+        }
+    }
+    const params = new URLSearchParams();
+    if (category)
+        params.set('category', category);
+    params.set('offset', String(offset));
+    params.set('limit', String(limit));
+    const response = await fetch(`${INSIGHTS_API_URL}/insights/list?${params.toString()}`, {
+        method: 'GET',
+        headers,
+    });
+    if (!response.ok) {
+        const error = await response.json().catch(() => ({ detail: response.statusText }));
+        throw new Error(`Failed to list insights: ${error.detail || response.statusText}`);
+    }
+    return response.json();
+}
+/**
+ * Delete insights for a conversation
+ *
+ * @param conversationId - Conversation ID
+ * @param userId - User ID (for authorization)
+ * @param tokenManager - Token manager for authentication
+ */
+export async function deleteConversationInsights(conversationId, userId, tokenManager) {
+    let headers = {};
+    if (tokenManager) {
+        try {
+            const token = await tokenManager.getAuthzToken('agent-api', ['insights:write']);
+            headers['Authorization'] = `Bearer ${token}`;
+        }
+        catch (error) {
+            console.warn('[deleteConversationInsights] Failed to get auth token:', error);
+        }
+    }
+    const response = await fetch(`${INSIGHTS_API_URL}/insights/conversation/${conversationId}`, {
+        method: 'DELETE',
+        headers,
+    });
+    if (!response.ok) {
+        const error = await response.json().catch(() => ({ detail: response.statusText }));
+        throw new Error(`Failed to delete conversation insights: ${error.detail || response.statusText}`);
+    }
+}
+/**
+ * Get insight count for a user
+ *
+ * @param userId - User ID
+ * @param tokenManager - Token manager for authentication
+ * @returns Number of insights
+ */
+export async function getUserInsightCount(userId, tokenManager) {
+    let headers = {};
+    if (tokenManager) {
+        try {
+            const token = await tokenManager.getAuthzToken('agent-api', ['insights:read']);
+            headers['Authorization'] = `Bearer ${token}`;
+        }
+        catch (error) {
+            console.warn('[getUserInsightCount] Failed to get auth token:', error);
+        }
+    }
+    const response = await fetch(`${INSIGHTS_API_URL}/insights/stats/${userId}`, {
+        method: 'GET',
+        headers,
+    });
+    if (!response.ok) {
+        const error = await response.json().catch(() => ({ detail: response.statusText }));
+        throw new Error(`Failed to get user insight count: ${error.detail || response.statusText}`);
+    }
+    const data = await response.json();
+    return data.total || data.count;
+}
+/**
+ * Delete all insights for a user (for account deletion/cleanup)
+ *
+ * @param userId - User ID
+ * @param tokenManager - Token manager for authentication
+ */
+export async function deleteUserInsights(userId, tokenManager) {
+    let headers = {};
+    if (tokenManager) {
+        try {
+            const token = await tokenManager.getAuthzToken('agent-api', ['insights:write']);
+            headers['Authorization'] = `Bearer ${token}`;
+        }
+        catch (error) {
+            console.warn('[deleteUserInsights] Failed to get auth token:', error);
+        }
+    }
+    const response = await fetch(`${INSIGHTS_API_URL}/insights/user/${userId}`, {
+        method: 'DELETE',
+        headers,
+    });
+    if (!response.ok) {
+        const error = await response.json().catch(() => ({ detail: response.statusText }));
+        throw new Error(`Failed to delete user insights: ${error.detail || response.statusText}`);
+    }
+}
+/**
+ * Flush collection to ensure data persistence
+ *
+ * Call this after batch inserts for data durability.
+ */
+export async function flushInsightsCollection(tokenManager) {
+    let headers = {
+        'Content-Type': 'application/json',
+    };
+    if (tokenManager) {
+        try {
+            const token = await tokenManager.getAuthzToken('agent-api', ['insights:write']);
+            headers['Authorization'] = `Bearer ${token}`;
+        }
+        catch (error) {
+            console.warn('[flushInsightsCollection] Failed to get auth token:', error);
+        }
+    }
+    const response = await fetch(`${INSIGHTS_API_URL}/insights/flush`, {
+        method: 'POST',
+        headers,
+    });
+    if (!response.ok) {
+        const error = await response.json().catch(() => ({ detail: response.statusText }));
+        throw new Error(`Failed to flush collection: ${error.detail || response.statusText}`);
+    }
+}
+/**
+ * Get collection statistics including category counts
+ *
+ * @param tokenManager - Token manager for authentication (uses /me endpoint)
+ */
+export async function getCollectionStats(tokenManager) {
+    let headers = {};
+    if (tokenManager) {
+        try {
+            const token = await tokenManager.getAuthzToken('agent-api', ['insights:read']);
+            headers['Authorization'] = `Bearer ${token}`;
+        }
+        catch (error) {
+            console.warn('[getCollectionStats] Failed to get auth token:', error);
+        }
+    }
+    const response = await fetch(`${INSIGHTS_API_URL}/insights/stats/me`, {
+        method: 'GET',
+        headers,
+    });
+    if (!response.ok) {
+        const error = await response.json().catch(() => ({ detail: response.statusText }));
+        throw new Error(`Failed to get collection stats: ${error.detail || response.statusText}`);
+    }
+    return response.json();
+}
+/**
+ * Health check for insights service
+ *
+ * @returns true if service is healthy
+ */
+export async function checkInsightsHealth() {
+    try {
+        const response = await fetch(`${INSIGHTS_API_URL}/health`, {
+            method: 'GET',
+        });
+        if (!response.ok) {
+            return false;
+        }
+        const data = await response.json();
+        return data.status === 'healthy' || data.status === 'degraded';
+    }
+    catch (error) {
+        console.error('[checkInsightsHealth] Health check failed:', error);
+        return false;
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/lib/insights/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../../src/lib/insights/client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,aAAa,CAAC;AAmDrB,2EAA2E;AAC3E,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,uBAAuB,CAAC;AACpH,8BAA8B;AAC9B,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,uBAAuB,CAAC;AAEvH,6BAA6B;AAC7B,MAAM,gBAAgB,GAAG,aAAa,CAAC;AAEvC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,YAA2B;IAE3B,IAAI,OAAO,GAA2B;QACpC,cAAc,EAAE,kBAAkB;KACnC,CAAC;IAEF,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC;YAChF,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,KAAK,EAAE,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,8DAA8D,EAAE,KAAK,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,gBAAgB,gBAAgB,EAAE;QAChE,MAAM,EAAE,MAAM;QACd,OAAO;KACR,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,oCAAoC,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IAC7F,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAuB,EACvB,YAA2B;IAE3B,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;IACT,CAAC;IAED,IAAI,OAAO,GAA2B;QACpC,cAAc,EAAE,kBAAkB;KACnC,CAAC;IAEF,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC;YAChF,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,KAAK,EAAE,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,4CAA4C,EAAE,KAAK,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,gBAAgB,WAAW,EAAE;QAC3D,MAAM,EAAE,MAAM;QACd,OAAO;QACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC;KACnC,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,8BAA8B,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAa,EACb,MAAc,EACd,UAGI,EAAE,EACN,YAA2B;IAE3B,MAAM,EAAE,KAAK,GAAG,CAAC,EAAE,cAAc,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC;IAEpD,IAAI,OAAO,GAA2B;QACpC,cAAc,EAAE,kBAAkB;KACnC,CAAC;IAEF,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;YAC/E,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,KAAK,EAAE,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,4CAA4C,EAAE,KAAK,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,gBAAgB,kBAAkB,EAAE;QAClE,MAAM,EAAE,MAAM;QACd,OAAO;QACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,KAAK;YACL,MAAM;YACN,KAAK;YACL,cAAc;SACf,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,8BAA8B,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,OAAO,IAAI,CAAC,OAAO,CAAC;AACtB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,UAII,EAAE,EACN,YAA2B;IAE3B,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC;IAErD,IAAI,OAAO,GAA2B;QACpC,cAAc,EAAE,kBAAkB;KACnC,CAAC;IAEF,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;YAC/E,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,KAAK,EAAE,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,0CAA0C,EAAE,KAAK,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,IAAI,QAAQ;QAAE,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC/C,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACrC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAEnC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,gBAAgB,kBAAkB,MAAM,CAAC,QAAQ,EAAE,EAAE,EAAE;QACrF,MAAM,EAAE,KAAK;QACb,OAAO;KACR,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,4BAA4B,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,cAAsB,EACtB,MAAc,EACd,YAA2B;IAE3B,IAAI,OAAO,GAA2B,EAAE,CAAC;IAEzC,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC;YAChF,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,KAAK,EAAE,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,wDAAwD,EAAE,KAAK,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,gBAAgB,0BAA0B,cAAc,EAAE,EAAE;QAC1F,MAAM,EAAE,QAAQ;QAChB,OAAO;KACR,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,2CAA2C,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IACpG,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAc,EACd,YAA2B;IAE3B,IAAI,OAAO,GAA2B,EAAE,CAAC;IAEzC,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;YAC/E,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,KAAK,EAAE,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,iDAAiD,EAAE,KAAK,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,gBAAgB,mBAAmB,MAAM,EAAE,EAAE;QAC3E,MAAM,EAAE,KAAK;QACb,OAAO;KACR,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,qCAAqC,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,OAAO,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC;AAClC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAc,EACd,YAA2B;IAE3B,IAAI,OAAO,GAA2B,EAAE,CAAC;IAEzC,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC;YAChF,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,KAAK,EAAE,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,gDAAgD,EAAE,KAAK,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,gBAAgB,kBAAkB,MAAM,EAAE,EAAE;QAC1E,MAAM,EAAE,QAAQ;QAChB,OAAO;KACR,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,mCAAmC,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IAC5F,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,YAA2B;IAE3B,IAAI,OAAO,GAA2B;QACpC,cAAc,EAAE,kBAAkB;KACnC,CAAC;IAEF,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC;YAChF,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,KAAK,EAAE,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,qDAAqD,EAAE,KAAK,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,gBAAgB,iBAAiB,EAAE;QACjE,MAAM,EAAE,MAAM;QACd,OAAO;KACR,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IACxF,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,YAA2B;IAE3B,IAAI,OAAO,GAA2B,EAAE,CAAC;IAEzC,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;YAC/E,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,KAAK,EAAE,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,gDAAgD,EAAE,KAAK,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,gBAAgB,oBAAoB,EAAE;QACpE,MAAM,EAAE,KAAK;QACb,OAAO;KACR,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,mCAAmC,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,gBAAgB,SAAS,EAAE;YACzD,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC;IACjE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,4CAA4C,EAAE,KAAK,CAAC,CAAC;QACnE,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/lib/insights/index.d.ts

@@ -0,0 +1,5 @@
+/**
+ * @deprecated Import from '../agent/insights' instead.
+ */
+export * from '../agent/insights';
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/insights/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/insights/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,cAAc,mBAAmB,CAAC"}

package/dist/lib/insights/index.js

@@ -0,0 +1,5 @@
+/**
+ * @deprecated Import from '../agent/insights' instead.
+ */
+export * from '../agent/insights';
+//# sourceMappingURL=index.js.map

package/dist/lib/insights/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/insights/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,cAAc,mBAAmB,CAAC"}

package/dist/lib/media/access-control.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Access control utilities for video operations
+ *
+ * Provides functions to check if a user can access or modify videos
+ * based on ownership and sharing settings.
+ *
+ * Uses video-store (data-api) instead of Prisma.
+ */
+/**
+ * Check if a user can access a specific video
+ *
+ * Access is granted if:
+ * - User is the owner
+ * - Video is PUBLIC
+ * - Video is SHARED and user is in the share list
+ *
+ * @param accessToken - Data-API access token
+ * @param userId - ID of the user attempting access
+ * @param videoId - ID of the video to access
+ * @returns true if user has access, false otherwise
+ */
+export declare function canAccessVideo(accessToken: string, userId: string, videoId: string): Promise<boolean>;
+/**
+ * Require that a user owns a video, throwing an error if not
+ *
+ * Use this for operations that only the owner can perform
+ * (e.g., delete, update sharing settings)
+ *
+ * @param accessToken - Data-API access token
+ * @param userId - ID of the user attempting the operation
+ * @param videoId - ID of the video
+ * @throws Error if user is not the owner
+ */
+export declare function requireVideoOwnership(accessToken: string, userId: string, videoId: string): Promise<void>;
+//# sourceMappingURL=access-control.d.ts.map

package/dist/lib/media/access-control.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-control.d.ts","sourceRoot":"","sources":["../../../src/lib/media/access-control.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAOH;;;;;;;;;;;;GAYG;AACH,wBAAsB,cAAc,CAClC,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,OAAO,CAAC,CAmBlB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,qBAAqB,CACzC,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CAUf"}

package/dist/lib/media/access-control.js

@@ -0,0 +1,63 @@
+/**
+ * Access control utilities for video operations
+ *
+ * Provides functions to check if a user can access or modify videos
+ * based on ownership and sharing settings.
+ *
+ * Uses video-store (data-api) instead of Prisma.
+ */
+import { getVideoById, listVideoShares, } from './store';
+/**
+ * Check if a user can access a specific video
+ *
+ * Access is granted if:
+ * - User is the owner
+ * - Video is PUBLIC
+ * - Video is SHARED and user is in the share list
+ *
+ * @param accessToken - Data-API access token
+ * @param userId - ID of the user attempting access
+ * @param videoId - ID of the video to access
+ * @returns true if user has access, false otherwise
+ */
+export async function canAccessVideo(accessToken, userId, videoId) {
+    const video = await getVideoById(accessToken, videoId);
+    if (!video)
+        return false;
+    // Owner always has access
+    if (video.ownerId === userId)
+        return true;
+    // Public videos accessible by all authenticated users
+    if (video.visibility === 'PUBLIC')
+        return true;
+    // Shared videos accessible if user is in share list
+    if (video.visibility === 'SHARED') {
+        const shares = await listVideoShares(accessToken, videoId);
+        const hasShare = shares.some((s) => s.userId === userId);
+        if (hasShare)
+            return true;
+    }
+    // Private or no access
+    return false;
+}
+/**
+ * Require that a user owns a video, throwing an error if not
+ *
+ * Use this for operations that only the owner can perform
+ * (e.g., delete, update sharing settings)
+ *
+ * @param accessToken - Data-API access token
+ * @param userId - ID of the user attempting the operation
+ * @param videoId - ID of the video
+ * @throws Error if user is not the owner
+ */
+export async function requireVideoOwnership(accessToken, userId, videoId) {
+    const video = await getVideoById(accessToken, videoId);
+    if (!video) {
+        throw new Error('Video not found');
+    }
+    if (video.ownerId !== userId) {
+        throw new Error('Unauthorized: You do not own this video');
+    }
+}
+//# sourceMappingURL=access-control.js.map

package/dist/lib/media/access-control.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-control.js","sourceRoot":"","sources":["../../../src/lib/media/access-control.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,YAAY,EACZ,eAAe,GAChB,MAAM,SAAS,CAAC;AAEjB;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,WAAmB,EACnB,MAAc,EACd,OAAe;IAEf,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACvD,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IAEzB,0BAA0B;IAC1B,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAE1C,sDAAsD;IACtD,IAAI,KAAK,CAAC,UAAU,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE/C,oDAAoD;IACpD,IAAI,KAAK,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QACzD,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC;IAC5B,CAAC;IAED,uBAAuB;IACvB,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,WAAmB,EACnB,MAAc,EACd,OAAe;IAEf,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAEvD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC"}

package/dist/lib/media/agent-api-client.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Agent API Video Client
+ *
+ * Thin client for proxying video operations through the Agent API.
+ * The Agent API forwards requests to LiteLLM which holds the OpenAI key --
+ * the Busibox Portal never sees or stores the raw API key.
+ *
+ * Endpoints used:
+ *   POST  /llm/videos/create            – create a video generation job
+ *   GET   /llm/videos/{video_id}        – retrieve video status
+ *   GET   /llm/videos/{video_id}/content – download video bytes
+ */
+export interface AgentVideoResponse {
+    id: string;
+    status: string;
+    progress?: number | null;
+    error?: {
+        message?: string;
+    } | null;
+    [key: string]: unknown;
+}
+export interface CreateVideoViaAgentParams {
+    model?: string;
+    prompt: string;
+    seconds: string;
+    size: string;
+    /** Base64-encoded reference image (already resized) */
+    inputReferenceBase64?: string;
+    /** Filename for the reference image */
+    inputReferenceFilename?: string;
+}
+/**
+ * Create a video generation job via Agent API -> LiteLLM -> OpenAI.
+ */
+export declare function createVideoViaAgent(agentToken: string, params: CreateVideoViaAgentParams): Promise<AgentVideoResponse>;
+/**
+ * Retrieve video status via Agent API -> LiteLLM -> OpenAI.
+ */
+export declare function getVideoStatusViaAgent(agentToken: string, openaiVideoId: string): Promise<AgentVideoResponse>;
+/**
+ * Download video content bytes via Agent API -> LiteLLM -> OpenAI.
+ *
+ * Returns a Buffer with the full video file.
+ */
+export declare function downloadVideoViaAgent(agentToken: string, openaiVideoId: string): Promise<Buffer>;
+//# sourceMappingURL=agent-api-client.d.ts.map

package/dist/lib/media/agent-api-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-api-client.d.ts","sourceRoot":"","sources":["../../../src/lib/media/agent-api-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AASH,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACpC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,yBAAyB;IACxC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,uCAAuC;IACvC,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC;AAID;;GAEG;AACH,wBAAsB,mBAAmB,CACvC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC,kBAAkB,CAAC,CA+B7B;AAED;;GAEG;AACH,wBAAsB,sBAAsB,CAC1C,UAAU,EAAE,MAAM,EAClB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,kBAAkB,CAAC,CAgB7B;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,UAAU,EAAE,MAAM,EAClB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,MAAM,CAAC,CAiBjB"}