@jini-ai/cms 0.1.0

package/dist/media/tool-registrations.d.ts

@@ -0,0 +1,42 @@
+/**
+ * @file Media's tool-registration wiring: maps `agent-tools.ts`'s four catalog entries onto
+ * `media-service.ts`'s list/upload/update/trash operations, as `ToolRegistration`s. The entire
+ * catalog is wired — `purgeMedia` is deliberately absent from the catalog rather than
+ * present-but-unwired; see `media/agent-tools.ts`'s own header.
+ *
+ * Authorization shape: unlike Forms/Identity/Widgets, `media-service.ts`'s functions perform NO
+ * internal `authorize()` call of their own — every admin HTTP route a host builds gates inline
+ * instead. Every handler here does the same via the kit's `requireToolPermission`, which is the
+ * single evaluation for these tools, located where a real route would locate it.
+ */
+import type { AuthorizeFn } from "../core/commands/command.js";
+import { type DerivedRiskByToolId, type ToolRegistration } from "../core/tools/registration-kit.js";
+import type { AssetBlobRepoPort, AssetRenditionRepoPort, BlobStorePort, MediaRepoPort } from "./ports.js";
+/**
+ * The exact slice of a host's route-deps bag Media's tool handlers read. Declared structurally
+ * (rather than importing any host's own route-deps type) so this module carries no back-edge into
+ * a host's composition root. A host satisfies this structurally by passing its existing route deps
+ * object; nothing there needs to change shape.
+ */
+export interface MediaToolDeps {
+    authorize: AuthorizeFn;
+    workspaceId: string;
+    clock: {
+        nowIso(): string;
+    };
+    idGen: {
+        newId(): string;
+    };
+    mediaRepo: MediaRepoPort;
+    assetBlobRepo: AssetBlobRepoPort;
+    assetRenditionRepo: AssetRenditionRepoPort;
+    blobStore: BlobStorePort;
+}
+/**
+ * This wiring layer's OWN risk classification, authored from what each handler below actually
+ * calls. See `DerivedRiskByToolId` in the kit for why it is independent of the catalog's own
+ * `sideEffects` declaration.
+ */
+export declare const mediaDerivedRisk: DerivedRiskByToolId;
+export declare function buildMediaRegistrations(routeDeps: MediaToolDeps): ToolRegistration[];
+//# sourceMappingURL=tool-registrations.d.ts.map

package/dist/media/tool-registrations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-registrations.d.ts","sourceRoot":"","sources":["../../src/media/tool-registrations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAQL,KAAK,mBAAmB,EAExB,KAAK,gBAAgB,EACtB,MAAM,mCAAmC,CAAC;AAG3C,OAAO,KAAK,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAK1G;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,WAAW,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE;QAAE,MAAM,IAAI,MAAM,CAAA;KAAE,CAAC;IAC5B,KAAK,EAAE;QAAE,KAAK,IAAI,MAAM,CAAA;KAAE,CAAC;IAC3B,SAAS,EAAE,aAAa,CAAC;IACzB,aAAa,EAAE,iBAAiB,CAAC;IACjC,kBAAkB,EAAE,sBAAsB,CAAC;IAC3C,SAAS,EAAE,aAAa,CAAC;CAC1B;AAED;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,EAAE,mBAU7B,CAAC;AAqCH,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,aAAa,GAAG,gBAAgB,EAAE,CAkFpF"}

package/dist/media/tool-registrations.js

@@ -0,0 +1,121 @@
+import { buildDomainRegistrations, indexCatalogById, requireInputRecord, requireString, requireToolPermission, withSchemaOnRejection, } from "../core/tools/registration-kit.js";
+import { mediaAgentToolCatalog } from "./agent-tools.js";
+import { listMedia, MediaValidationError, trashMedia, updateMediaMetadata, uploadMedia } from "./media-service.js";
+const CATALOG_BY_ID = indexCatalogById(mediaAgentToolCatalog);
+/**
+ * This wiring layer's OWN risk classification, authored from what each handler below actually
+ * calls. See `DerivedRiskByToolId` in the kit for why it is independent of the catalog's own
+ * `sideEffects` declaration.
+ */
+export const mediaDerivedRisk = new Map([
+    // -> listMedia (media-service.ts): mediaRepo.list only, no write.
+    ["media_list_assets", "none"],
+    // -> uploadMedia (media-service.ts): blobRepo.save (maybe) + mediaRepo.save + renditionRepo.save.
+    ["media_upload_asset", "mutates-durable-state"],
+    // -> updateMediaMetadata (media-service.ts): mediaRepo.save, editorial fields only.
+    ["media_update_metadata", "mutates-durable-state"],
+    // -> trashMedia (media-service.ts): mediaRepo.save, status flip. Never a purge: purgeMedia is
+    //    deliberately not exposed at all (see media/agent-tools.ts's file header).
+    ["media_trash_asset", "mutates-durable-state"],
+]);
+/** The only Media rejection worth decorating with the published schema — a shape problem a different input would fix. */
+function isMediaShapeRejection(error) {
+    return error instanceof MediaValidationError;
+}
+/**
+ * Projects a `MediaRecord` into an explicit model-facing shape rather than returning the domain
+ * record verbatim — the same discipline Forms' `toFormDefinitionView` applies. `workspaceId`/
+ * `createdAt`/`updatedAt` are dropped for the identical reasons given there.
+ */
+function toMediaToolView(record) {
+    return {
+        id: record.id,
+        title: record.title,
+        alt: record.alt,
+        caption: record.caption,
+        credit: record.credit,
+        sha256: record.source.sha256,
+        status: record.status,
+        version: record.version,
+    };
+}
+export function buildMediaRegistrations(routeDeps) {
+    const mediaWriteDeps = () => ({
+        clock: routeDeps.clock,
+        idGen: routeDeps.idGen,
+        mediaRepo: routeDeps.mediaRepo,
+        blobRepo: routeDeps.assetBlobRepo,
+        renditionRepo: routeDeps.assetRenditionRepo,
+        blobStore: routeDeps.blobStore,
+    });
+    const handlers = {
+        media_list_assets: async (ctx) => {
+            await requireToolPermission(routeDeps, { principalId: ctx.principal.id, permission: "media.read", entityType: "media" });
+            const { media } = await listMedia({ deps: { mediaRepo: routeDeps.mediaRepo }, input: { workspaceId: routeDeps.workspaceId } });
+            return { media: media.map(toMediaToolView) };
+        },
+        media_upload_asset: async (ctx) => {
+            const input = requireInputRecord(ctx.input);
+            await requireToolPermission(routeDeps, { principalId: ctx.principal.id, permission: "media.upload", entityType: "media" });
+            return withSchemaOnRejection({ toolId: "media_upload_asset", catalog: CATALOG_BY_ID, isShapeRejection: isMediaShapeRejection }, async () => {
+                const dataBase64 = requireString(input, "dataBase64");
+                let bytes;
+                try {
+                    bytes = new Uint8Array(Buffer.from(dataBase64, "base64"));
+                }
+                catch {
+                    throw new Error("'dataBase64' is not valid base64");
+                }
+                const { media } = await uploadMedia({
+                    deps: mediaWriteDeps(),
+                    input: {
+                        workspaceId: routeDeps.workspaceId,
+                        bytes,
+                        filename: requireString(input, "filename"),
+                        contentType: requireString(input, "contentType"),
+                        alt: typeof input.alt === "string" ? input.alt : undefined,
+                        caption: typeof input.caption === "string" ? input.caption : undefined,
+                        credit: typeof input.credit === "string" ? input.credit : undefined,
+                        createdByPrincipal: ctx.principal.id,
+                    },
+                });
+                return { media: toMediaToolView(media) };
+            });
+        },
+        media_update_metadata: async (ctx) => {
+            const input = requireInputRecord(ctx.input);
+            const mediaId = requireString(input, "mediaId");
+            await requireToolPermission(routeDeps, { principalId: ctx.principal.id, permission: "media.update", entityType: "media", entityId: mediaId });
+            const { media } = await updateMediaMetadata({
+                deps: { clock: routeDeps.clock, mediaRepo: routeDeps.mediaRepo },
+                input: {
+                    workspaceId: routeDeps.workspaceId,
+                    id: mediaId,
+                    title: typeof input.title === "string" ? input.title : undefined,
+                    alt: typeof input.alt === "string" ? input.alt : undefined,
+                    caption: typeof input.caption === "string" ? input.caption : undefined,
+                    credit: typeof input.credit === "string" ? input.credit : undefined,
+                },
+            });
+            return { media: toMediaToolView(media) };
+        },
+        media_trash_asset: async (ctx) => {
+            const mediaId = requireString(requireInputRecord(ctx.input), "mediaId");
+            await requireToolPermission(routeDeps, { principalId: ctx.principal.id, permission: "media.delete", entityType: "media", entityId: mediaId });
+            const { media } = await trashMedia({
+                deps: { clock: routeDeps.clock, mediaRepo: routeDeps.mediaRepo },
+                input: { workspaceId: routeDeps.workspaceId, id: mediaId },
+            });
+            return { media: toMediaToolView(media) };
+        },
+    };
+    // No `unwiredToolIds`: Media wires its ENTIRE catalog, same tripwire discipline as Forms.
+    return buildDomainRegistrations({
+        domain: "media",
+        catalogModule: "media/agent-tools.ts",
+        catalog: CATALOG_BY_ID,
+        handlers,
+        derivedRisk: mediaDerivedRisk,
+    });
+}
+//# sourceMappingURL=tool-registrations.js.map

package/dist/media/tool-registrations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-registrations.js","sourceRoot":"","sources":["../../src/media/tool-registrations.ts"],"names":[],"mappings":"AAYA,OAAO,EACL,wBAAwB,EACxB,gBAAgB,EAChB,kBAAkB,EAClB,aAAa,EACb,qBAAqB,EACrB,qBAAqB,GAKtB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,UAAU,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAInH,MAAM,aAAa,GAAG,gBAAgB,CAAC,qBAAqB,CAAC,CAAC;AAmB9D;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAA8B;IACxF,kEAAkE;IAClE,CAAC,mBAAmB,EAAE,MAAM,CAAC;IAC7B,kGAAkG;IAClG,CAAC,oBAAoB,EAAE,uBAAuB,CAAC;IAC/C,oFAAoF;IACpF,CAAC,uBAAuB,EAAE,uBAAuB,CAAC;IAClD,8FAA8F;IAC9F,+EAA+E;IAC/E,CAAC,mBAAmB,EAAE,uBAAuB,CAAC;CAC/C,CAAC,CAAC;AAEH,yHAAyH;AACzH,SAAS,qBAAqB,CAAC,KAAc;IAC3C,OAAO,KAAK,YAAY,oBAAoB,CAAC;AAC/C,CAAC;AAcD;;;;GAIG;AACH,SAAS,eAAe,CAAC,MAAmB;IAC1C,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;QAC5B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO,EAAE,MAAM,CAAC,OAAO;KACxB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,SAAwB;IAC9D,MAAM,cAAc,GAAG,GAAG,EAAE,CAAC,CAAC;QAC5B,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,QAAQ,EAAE,SAAS,CAAC,aAAa;QACjC,aAAa,EAAE,SAAS,CAAC,kBAAkB;QAC3C,SAAS,EAAE,SAAS,CAAC,SAAS;KAC/B,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAgC;QAC5C,iBAAiB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC/B,MAAM,qBAAqB,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;YACzH,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAC/H,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;QAC/C,CAAC;QAED,kBAAkB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAChC,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC5C,MAAM,qBAAqB,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;YAC3H,OAAO,qBAAqB,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,EAAE,KAAK,IAAI,EAAE;gBACzI,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;gBACtD,IAAI,KAAiB,CAAC;gBACtB,IAAI,CAAC;oBACH,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;gBAC5D,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;gBACtD,CAAC;gBACD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,WAAW,CAAC;oBAClC,IAAI,EAAE,cAAc,EAAE;oBACtB,KAAK,EAAE;wBACL,WAAW,EAAE,SAAS,CAAC,WAAW;wBAClC,KAAK;wBACL,QAAQ,EAAE,aAAa,CAAC,KAAK,EAAE,UAAU,CAAC;wBAC1C,WAAW,EAAE,aAAa,CAAC,KAAK,EAAE,aAAa,CAAC;wBAChD,GAAG,EAAE,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;wBAC1D,OAAO,EAAE,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;wBACtE,MAAM,EAAE,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;wBACnE,kBAAkB,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE;qBACrC;iBACF,CAAC,CAAC;gBACH,OAAO,EAAE,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3C,CAAC,CAAC,CAAC;QACL,CAAC;QAED,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACnC,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC5C,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAChD,MAAM,qBAAqB,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YAC9I,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,mBAAmB,CAAC;gBAC1C,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE;gBAChE,KAAK,EAAE;oBACL,WAAW,EAAE,SAAS,CAAC,WAAW;oBAClC,EAAE,EAAE,OAAO;oBACX,KAAK,EAAE,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;oBAChE,GAAG,EAAE,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;oBAC1D,OAAO,EAAE,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;oBACtE,MAAM,EAAE,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;iBACpE;aACF,CAAC,CAAC;YACH,OAAO,EAAE,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,CAAC;QAED,iBAAiB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC/B,MAAM,OAAO,GAAG,aAAa,CAAC,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,CAAC;YACxE,MAAM,qBAAqB,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YAC9I,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,UAAU,CAAC;gBACjC,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE;gBAChE,KAAK,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,EAAE,EAAE,OAAO,EAAE;aAC3D,CAAC,CAAC;YACH,OAAO,EAAE,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,CAAC;KACF,CAAC;IAEF,0FAA0F;IAC1F,OAAO,wBAAwB,CAAC;QAC9B,MAAM,EAAE,OAAO;QACf,aAAa,EAAE,sBAAsB;QACrC,OAAO,EAAE,aAAa;QACtB,QAAQ;QACR,WAAW,EAAE,gBAAgB;KAC9B,CAAC,CAAC;AACL,CAAC"}

package/dist/media/transform-lock.d.ts

@@ -0,0 +1,36 @@
+/**
+ * @file Generic in-process keyed mutex factory, extracted from
+ * `blob-gc-lock.ts`'s `withSha256Lock` shape (INV-1's
+ * "Serialization" clause) so the same FIFO-per-key critical-section pattern
+ * can back two independent lock namespaces this domain needs:
+ *
+ *  - `withTransformRegistryLock` — serializes `registerTransform`'s
+ *    read-max-version-then-insert-next-version sequence per `(workspaceId,
+ *    name)`, so two concurrent registrations of the same name can't both
+ *    read the same "current max" and mint a colliding version.
+ *  - `withRenditionLock` — serializes lazy rendition generation per
+ *    `(sha256, transformName, version)` ("single-flight"), so two
+ *    concurrent requests for the same not-yet-generated rendition never run
+ *    the image transformer twice.
+ *
+ * `blob-gc-lock.ts` itself is untouched — this is a separate module, not a
+ * modification of that file's exports (its shape is deliberately mirrored
+ * here, not imported, so `blob-gc-lock.ts`'s own signature stays untouched).
+ */
+/**
+ * Creates one independent keyed-lock namespace: calls sharing the same `key`
+ * are strictly FIFO-ordered; calls for different keys run fully
+ * concurrently. A rejection in one critical section does not poison the lock
+ * for later callers on the same key (each waits for its predecessor to
+ * *settle*, not to succeed) — identical semantics to `withSha256Lock`.
+ *
+ * @complexity O(1) scheduling overhead per call; total wait time is bounded
+ * by the number of other calls currently queued for the same key.
+ * @overallScore 100
+ */
+export declare function createKeyedLock(): <T>(key: string, criticalSection: () => Promise<T>) => Promise<T>;
+/** Keyed on `${workspaceId}:${name}` — see file header. */
+export declare const withTransformRegistryLock: <T>(key: string, criticalSection: () => Promise<T>) => Promise<T>;
+/** Keyed on `${sha256}:${transformName}:${version}` — see file header. */
+export declare const withRenditionLock: <T>(key: string, criticalSection: () => Promise<T>) => Promise<T>;
+//# sourceMappingURL=transform-lock.d.ts.map

package/dist/media/transform-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transform-lock.d.ts","sourceRoot":"","sources":["../../src/media/transform-lock.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAkBnG;AAED,2DAA2D;AAC3D,eAAO,MAAM,yBAAyB,GArBF,CAAC,OAAO,MAAM,mBAAmB,MAAM,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAqBzC,CAAC;AAE3D,0EAA0E;AAC1E,eAAO,MAAM,iBAAiB,GAxBM,CAAC,OAAO,MAAM,mBAAmB,MAAM,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAwBjD,CAAC"}

package/dist/media/transform-lock.js

@@ -0,0 +1,50 @@
+/**
+ * @file Generic in-process keyed mutex factory, extracted from
+ * `blob-gc-lock.ts`'s `withSha256Lock` shape (INV-1's
+ * "Serialization" clause) so the same FIFO-per-key critical-section pattern
+ * can back two independent lock namespaces this domain needs:
+ *
+ *  - `withTransformRegistryLock` — serializes `registerTransform`'s
+ *    read-max-version-then-insert-next-version sequence per `(workspaceId,
+ *    name)`, so two concurrent registrations of the same name can't both
+ *    read the same "current max" and mint a colliding version.
+ *  - `withRenditionLock` — serializes lazy rendition generation per
+ *    `(sha256, transformName, version)` ("single-flight"), so two
+ *    concurrent requests for the same not-yet-generated rendition never run
+ *    the image transformer twice.
+ *
+ * `blob-gc-lock.ts` itself is untouched — this is a separate module, not a
+ * modification of that file's exports (its shape is deliberately mirrored
+ * here, not imported, so `blob-gc-lock.ts`'s own signature stays untouched).
+ */
+/**
+ * Creates one independent keyed-lock namespace: calls sharing the same `key`
+ * are strictly FIFO-ordered; calls for different keys run fully
+ * concurrently. A rejection in one critical section does not poison the lock
+ * for later callers on the same key (each waits for its predecessor to
+ * *settle*, not to succeed) — identical semantics to `withSha256Lock`.
+ *
+ * @complexity O(1) scheduling overhead per call; total wait time is bounded
+ * by the number of other calls currently queued for the same key.
+ * @overallScore 100
+ */
+export function createKeyedLock() {
+    const lockTails = new Map();
+    return function withLock(key, criticalSection) {
+        const priorTail = lockTails.get(key) ?? Promise.resolve();
+        const run = priorTail.then(criticalSection, criticalSection);
+        const settledTail = run.then(() => undefined, () => undefined);
+        lockTails.set(key, settledTail);
+        void settledTail.then(() => {
+            if (lockTails.get(key) === settledTail) {
+                lockTails.delete(key);
+            }
+        });
+        return run;
+    };
+}
+/** Keyed on `${workspaceId}:${name}` — see file header. */
+export const withTransformRegistryLock = createKeyedLock();
+/** Keyed on `${sha256}:${transformName}:${version}` — see file header. */
+export const withRenditionLock = createKeyedLock();
+//# sourceMappingURL=transform-lock.js.map

package/dist/media/transform-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transform-lock.js","sourceRoot":"","sources":["../../src/media/transform-lock.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH;;;;;;;;;;GAUG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAyB,CAAC;IAEnD,OAAO,SAAS,QAAQ,CAAI,GAAW,EAAE,eAAiC;QACxE,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAC1D,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;QAC7D,MAAM,WAAW,GAAkB,GAAG,CAAC,IAAI,CACzC,GAAG,EAAE,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;QACF,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAChC,KAAK,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE;YACzB,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,WAAW,EAAE,CAAC;gBACvC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACxB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;AACJ,CAAC;AAED,2DAA2D;AAC3D,MAAM,CAAC,MAAM,yBAAyB,GAAG,eAAe,EAAE,CAAC;AAE3D,0EAA0E;AAC1E,MAAM,CAAC,MAAM,iBAAiB,GAAG,eAAe,EAAE,CAAC"}

package/dist/media/transform-registry.d.ts

@@ -0,0 +1,103 @@
+/**
+ * @file Named transform registry service — the core-declared
+ * path only (no theme/plugin declaration API; see `transform-types.ts` file
+ * header for that disclosed scope boundary).
+ *
+ * Mirrors `media-service.ts`'s shape: plain async functions taking
+ * `{ deps, input }` (+ optional `options`), typed domain errors.
+ */
+import type { ClockPort, IdGeneratorPort, UUID } from "../core/ports.js";
+import type { TransformDefinitionRepoPort } from "./ports.js";
+import { TransformValidationError, type TransformDefinitionRecord, type TransformParams } from "./transform-types.js";
+export { TransformValidationError };
+export interface RegisterTransformInput {
+    workspaceId: UUID;
+    name: string;
+    params: TransformParams;
+    /** Registering module id, e.g. `"core"`. See `transform-types.ts` file header. */
+    owner: string;
+}
+export interface RegisterTransformDeps {
+    clock: ClockPort;
+    idGen: IdGeneratorPort;
+    transformRepo: TransformDefinitionRepoPort;
+}
+export interface RegisterTransformRequired {
+    deps: RegisterTransformDeps;
+    input: RegisterTransformInput;
+}
+/**
+ * Registers a named transform definition. Append-only:
+ * redefining an already-used `name` never mutates the prior version's row —
+ * it inserts a new row at `version = (current max version for name) + 1`
+ * (or `1` if `name` has never been registered). The read-max-then-insert
+ * sequence runs inside {@link withTransformRegistryLock} keyed on
+ * `(workspaceId, name)` so two concurrent `registerTransform` calls for the
+ * same name can't both observe the same "current max" and mint colliding
+ * versions (the version-numbering equivalent of the race
+ * `withSha256Lock`/`blob-gc-lock.ts` closes for blob dedup-vs-GC).
+ *
+ * @complexity O(v) in the number of existing versions of `name`, from the
+ * max-version scan (`listByName` + reduce) — acceptable at walking-skeleton
+ * scale, same tradeoff class as `isBlobUnreferenced`'s O(n) scan.
+ * @overallScore 100
+ */
+export declare function registerTransform(required: RegisterTransformRequired, _optional?: Record<string, never>): Promise<{
+    definition: TransformDefinitionRecord;
+}>;
+export interface GetLatestTransformDefinitionRequired {
+    deps: {
+        transformRepo: TransformDefinitionRepoPort;
+    };
+    input: {
+        workspaceId: UUID;
+        name: string;
+    };
+}
+/**
+ * Returns the highest-`version` row registered for `name`, or `null` if
+ * `name` has never been registered.
+ *
+ * @complexity O(v) in the number of versions of `name`.
+ * @overallScore 100
+ */
+export declare function getLatestTransformDefinition(required: GetLatestTransformDefinitionRequired): Promise<TransformDefinitionRecord | null>;
+export interface IsLatestTransformVersionRequired {
+    deps: {
+        transformRepo: TransformDefinitionRepoPort;
+    };
+    input: {
+        workspaceId: UUID;
+        name: string;
+        version: number;
+    };
+}
+/**
+ * Answers "is `version` the current latest registered version of `name`?" —
+ * the cheap half of the anonymous-generation bound ("latest
+ * registry version of that name"). Used by `rendition-service.ts` to decide
+ * whether an unauthenticated request may trigger lazy generation for an
+ * as-yet-ungenerated rendition.
+ *
+ * @complexity O(v), inherited from {@link getLatestTransformDefinition}.
+ * @overallScore 100
+ */
+export declare function isLatestTransformVersion(required: IsLatestTransformVersionRequired): Promise<boolean>;
+/**
+ * STUB (disclosed) — the other half of the anonymous-generation
+ * bound: "referenced by published content". The real check depends on
+ * the `entry_refs` where-used index, which is not implemented as
+ * running code yet (same disclosed gap `blob-gc.ts`'s `hasLiveEntryRefs`
+ * names for the same reason — see that file's header). Always reports "not
+ * referenced", which is what makes {@link isLatestTransformVersion} alone
+ * the effective bound in this build.
+ *
+ * @complexity O(1) (stub).
+ * @overallScore 100
+ */
+export declare function isReferencedByPublishedContent(_input: {
+    workspaceId: UUID;
+    name: string;
+    version: number;
+}): boolean;
+//# sourceMappingURL=transform-registry.d.ts.map

package/dist/media/transform-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transform-registry.d.ts","sourceRoot":"","sources":["../../src/media/transform-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC;AAC9D,OAAO,EAA8B,wBAAwB,EAAE,KAAK,yBAAyB,EAAE,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAGlJ,OAAO,EAAE,wBAAwB,EAAE,CAAC;AAMpC,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,IAAI,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,eAAe,CAAC;IACxB,kFAAkF;IAClF,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,SAAS,CAAC;IACjB,KAAK,EAAE,eAAe,CAAC;IACvB,aAAa,EAAE,2BAA2B,CAAC;CAC5C;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,qBAAqB,CAAC;IAC5B,KAAK,EAAE,sBAAsB,CAAC;CAC/B;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,yBAAyB,EACnC,SAAS,GAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAM,GACpC,OAAO,CAAC;IAAE,UAAU,EAAE,yBAAyB,CAAA;CAAE,CAAC,CAyBpD;AAMD,MAAM,WAAW,oCAAoC;IACnD,IAAI,EAAE;QAAE,aAAa,EAAE,2BAA2B,CAAA;KAAE,CAAC;IACrD,KAAK,EAAE;QAAE,WAAW,EAAE,IAAI,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5C;AAED;;;;;;GAMG;AACH,wBAAsB,4BAA4B,CAChD,QAAQ,EAAE,oCAAoC,GAC7C,OAAO,CAAC,yBAAyB,GAAG,IAAI,CAAC,CAI3C;AAED,MAAM,WAAW,gCAAgC;IAC/C,IAAI,EAAE;QAAE,aAAa,EAAE,2BAA2B,CAAA;KAAE,CAAC;IACrD,KAAK,EAAE;QAAE,WAAW,EAAE,IAAI,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7D;AAED;;;;;;;;;GASG;AACH,wBAAsB,wBAAwB,CAAC,QAAQ,EAAE,gCAAgC,GAAG,OAAO,CAAC,OAAO,CAAC,CAG3G;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,8BAA8B,CAAC,MAAM,EAAE;IACrD,WAAW,EAAE,IAAI,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAEV"}

package/dist/media/transform-registry.js

@@ -0,0 +1,87 @@
+import { assertValidTransformParams, TransformValidationError } from "./transform-types.js";
+import { withTransformRegistryLock } from "./transform-lock.js";
+export { TransformValidationError };
+/**
+ * Registers a named transform definition. Append-only:
+ * redefining an already-used `name` never mutates the prior version's row —
+ * it inserts a new row at `version = (current max version for name) + 1`
+ * (or `1` if `name` has never been registered). The read-max-then-insert
+ * sequence runs inside {@link withTransformRegistryLock} keyed on
+ * `(workspaceId, name)` so two concurrent `registerTransform` calls for the
+ * same name can't both observe the same "current max" and mint colliding
+ * versions (the version-numbering equivalent of the race
+ * `withSha256Lock`/`blob-gc-lock.ts` closes for blob dedup-vs-GC).
+ *
+ * @complexity O(v) in the number of existing versions of `name`, from the
+ * max-version scan (`listByName` + reduce) — acceptable at walking-skeleton
+ * scale, same tradeoff class as `isBlobUnreferenced`'s O(n) scan.
+ * @overallScore 100
+ */
+export async function registerTransform(required, _optional = {}) {
+    const { deps, input } = required;
+    const name = input.name.trim();
+    if (!name)
+        throw new TransformValidationError("transform name is required");
+    const owner = input.owner.trim();
+    if (!owner)
+        throw new TransformValidationError("owner is required");
+    assertValidTransformParams(input.params);
+    return withTransformRegistryLock(`${input.workspaceId}:${name}`, async () => {
+        const existingVersions = await deps.transformRepo.listByName({ workspaceId: input.workspaceId, name });
+        const currentMaxVersion = existingVersions.reduce((max, row) => Math.max(max, row.version), 0);
+        const definition = {
+            id: deps.idGen.newId(),
+            workspaceId: input.workspaceId,
+            name,
+            version: currentMaxVersion + 1,
+            params: input.params,
+            owner,
+            createdAt: deps.clock.nowIso(),
+        };
+        await deps.transformRepo.insert(definition);
+        return { definition };
+    });
+}
+/**
+ * Returns the highest-`version` row registered for `name`, or `null` if
+ * `name` has never been registered.
+ *
+ * @complexity O(v) in the number of versions of `name`.
+ * @overallScore 100
+ */
+export async function getLatestTransformDefinition(required) {
+    const rows = await required.deps.transformRepo.listByName(required.input);
+    if (rows.length === 0)
+        return null;
+    return rows.reduce((latest, row) => (row.version > latest.version ? row : latest));
+}
+/**
+ * Answers "is `version` the current latest registered version of `name`?" —
+ * the cheap half of the anonymous-generation bound ("latest
+ * registry version of that name"). Used by `rendition-service.ts` to decide
+ * whether an unauthenticated request may trigger lazy generation for an
+ * as-yet-ungenerated rendition.
+ *
+ * @complexity O(v), inherited from {@link getLatestTransformDefinition}.
+ * @overallScore 100
+ */
+export async function isLatestTransformVersion(required) {
+    const latest = await getLatestTransformDefinition({ deps: required.deps, input: required.input });
+    return latest !== null && latest.version === required.input.version;
+}
+/**
+ * STUB (disclosed) — the other half of the anonymous-generation
+ * bound: "referenced by published content". The real check depends on
+ * the `entry_refs` where-used index, which is not implemented as
+ * running code yet (same disclosed gap `blob-gc.ts`'s `hasLiveEntryRefs`
+ * names for the same reason — see that file's header). Always reports "not
+ * referenced", which is what makes {@link isLatestTransformVersion} alone
+ * the effective bound in this build.
+ *
+ * @complexity O(1) (stub).
+ * @overallScore 100
+ */
+export function isReferencedByPublishedContent(_input) {
+    return false;
+}
+//# sourceMappingURL=transform-registry.js.map

package/dist/media/transform-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transform-registry.js","sourceRoot":"","sources":["../../src/media/transform-registry.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,0BAA0B,EAAE,wBAAwB,EAAwD,MAAM,sBAAsB,CAAC;AAClJ,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAEhE,OAAO,EAAE,wBAAwB,EAAE,CAAC;AAyBpC;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAmC,EACnC,YAAmC,EAAE;IAErC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC;IAEjC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,wBAAwB,CAAC,4BAA4B,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,wBAAwB,CAAC,mBAAmB,CAAC,CAAC;IACpE,0BAA0B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAEzC,OAAO,yBAAyB,CAAC,GAAG,KAAK,CAAC,WAAW,IAAI,IAAI,EAAE,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QACvG,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QAE/F,MAAM,UAAU,GAA8B;YAC5C,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,IAAI;YACJ,OAAO,EAAE,iBAAiB,GAAG,CAAC;YAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK;YACL,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;SAC/B,CAAC;QACF,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC5C,OAAO,EAAE,UAAU,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC;AAWD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,QAA8C;IAE9C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC1E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AACrF,CAAC;AAOD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,QAA0C;IACvF,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IAClG,OAAO,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;AACtE,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,8BAA8B,CAAC,MAI9C;IACC,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/media/transform-types.d.ts

@@ -0,0 +1,82 @@
+/**
+ * @file Domain types + typed errors for the named transform registry and
+ * rendition generation ("Transforms and the immutable URL
+ * contract").
+ *
+ * Purpose:
+ * `TransformDefinitionRecord` is the `transform_registry` sidecar row: a
+ * declarative, immutable, append-only named transform definition keyed
+ * `(workspaceId, name, version)`. `TransformParams` is the small closed set
+ * of resize/format parameters this build supports — deliberately NOT an
+ * arbitrary `?w=&h=` query grammar (an explicit amplification /
+ * URL-grammar-freeze decision).
+ *
+ * SCOPE NOTE (disclosed): the original design describes transforms as declarable by
+ * "core + theme/plugin". This build only implements the core-declared path —
+ * there is no theme/plugin declaration API here (out of scope for this task).
+ * `owner` is kept as a plain string (not a hardcoded `"core"` literal type)
+ * specifically so a future theme/plugin declarer can pass its own id through
+ * the same field without a schema change — mirrors
+ * `identity/permissions.ts`'s `PermissionDescriptor.owner` pattern, which
+ * solves the identical "who registered this, extensibly" problem for the
+ * permission catalog.
+ */
+import type { ISODateTime, UUID } from "../core/ports.js";
+/** Resize behavior, mirrors `sharp`'s `fit` vocabulary (a deliberately small subset). */
+export type TransformFit = "cover" | "contain" | "fill" | "inside" | "outside";
+/**
+ * Output re-encode format. Matches `media-service.ts`'s
+ * `DEFAULT_ALLOWED_MIME_TYPES` image set minus SVG (never a transform output —
+ * SVG has no raster pixels to resize).
+ */
+export type TransformFormat = "jpeg" | "png" | "webp" | "gif";
+/**
+ * Declarative transform parameters (named definitions only, never
+ * caller-supplied dimensions). `width`/`height` are optional so a
+ * format-only re-encode (no resize) is a valid definition; `fit` only
+ * matters when both `width` and `height` are given.
+ */
+export interface TransformParams {
+    width?: number | undefined;
+    height?: number | undefined;
+    fit?: TransformFit | undefined;
+    format: TransformFormat;
+}
+/**
+ * `transform_registry` sidecar row. Identity is
+ * `(workspaceId, name, version)`; a row, once inserted, is never updated or
+ * removed — see `TransformDefinitionRepoPort.insert`'s append-only contract
+ * in `ports.ts`. Redefining `name` mints a new row with `version` one higher
+ * than the previous max, never a mutation of the old row.
+ */
+export interface TransformDefinitionRecord {
+    id: UUID;
+    workspaceId: UUID;
+    name: string;
+    version: number;
+    params: TransformParams;
+    /** Registering module — `"core"` for every definition this task creates. See file header. */
+    owner: string;
+    createdAt: ISODateTime;
+}
+export declare class TransformValidationError extends Error {
+}
+/**
+ * @complexity O(1).
+ * @overallScore 100
+ */
+export declare function mimeForTransformFormat(format: TransformFormat): string;
+/** Upper bound on a requested resize dimension — an output-side resource-use guard (not the
+ * full pixel-bomb ingest cap, which polices upload input; this polices the transform
+ * definition itself so a registered definition can't ask the image transformer to allocate an
+ * absurd target canvas). */
+export declare const MAX_TRANSFORM_DIMENSION_PX = 8000;
+/**
+ * Validates a {@link TransformParams} value at registration time. Throws
+ * {@link TransformValidationError} on the first violation found.
+ *
+ * @complexity O(1).
+ * @overallScore 100
+ */
+export declare function assertValidTransformParams(params: TransformParams): void;
+//# sourceMappingURL=transform-types.d.ts.map

package/dist/media/transform-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transform-types.d.ts","sourceRoot":"","sources":["../../src/media/transform-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAE1D,yFAAyF;AACzF,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE/E;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,CAAC;AAE9D;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,GAAG,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;IAC/B,MAAM,EAAE,eAAe,CAAC;CACzB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,IAAI,CAAC;IACT,WAAW,EAAE,IAAI,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,eAAe,CAAC;IACxB,6FAA6F;IAC7F,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,WAAW,CAAC;CACxB;AAED,qBAAa,wBAAyB,SAAQ,KAAK;CAAG;AAUtD;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAEtE;AAED;;;4BAG4B;AAC5B,eAAO,MAAM,0BAA0B,OAAO,CAAC;AAE/C;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CAoBxE"}

package/dist/media/transform-types.js

@@ -0,0 +1,47 @@
+export class TransformValidationError extends Error {
+}
+/** Maps a {@link TransformFormat} to the MIME type served on the rendition response. */
+const MIME_BY_TRANSFORM_FORMAT = {
+    jpeg: "image/jpeg",
+    png: "image/png",
+    webp: "image/webp",
+    gif: "image/gif",
+};
+/**
+ * @complexity O(1).
+ * @overallScore 100
+ */
+export function mimeForTransformFormat(format) {
+    return MIME_BY_TRANSFORM_FORMAT[format];
+}
+/** Upper bound on a requested resize dimension — an output-side resource-use guard (not the
+ * full pixel-bomb ingest cap, which polices upload input; this polices the transform
+ * definition itself so a registered definition can't ask the image transformer to allocate an
+ * absurd target canvas). */
+export const MAX_TRANSFORM_DIMENSION_PX = 8000;
+/**
+ * Validates a {@link TransformParams} value at registration time. Throws
+ * {@link TransformValidationError} on the first violation found.
+ *
+ * @complexity O(1).
+ * @overallScore 100
+ */
+export function assertValidTransformParams(params) {
+    if (!params.format || !(params.format in MIME_BY_TRANSFORM_FORMAT)) {
+        throw new TransformValidationError(`transform params.format must be one of ${Object.keys(MIME_BY_TRANSFORM_FORMAT).join(", ")}`);
+    }
+    for (const [key, value] of [
+        ["width", params.width],
+        ["height", params.height],
+    ]) {
+        if (value === undefined)
+            continue;
+        if (!Number.isInteger(value) || value < 1 || value > MAX_TRANSFORM_DIMENSION_PX) {
+            throw new TransformValidationError(`transform params.${key} must be an integer between 1 and ${MAX_TRANSFORM_DIMENSION_PX}`);
+        }
+    }
+    if (params.fit !== undefined && !(params.width && params.height)) {
+        throw new TransformValidationError("transform params.fit requires both width and height");
+    }
+}
+//# sourceMappingURL=transform-types.js.map

package/dist/media/transform-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transform-types.js","sourceRoot":"","sources":["../../src/media/transform-types.ts"],"names":[],"mappings":"AAkEA,MAAM,OAAO,wBAAyB,SAAQ,KAAK;CAAG;AAEtD,wFAAwF;AACxF,MAAM,wBAAwB,GAAoC;IAChE,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,WAAW;IAChB,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,WAAW;CACjB,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAuB;IAC5D,OAAO,wBAAwB,CAAC,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED;;;4BAG4B;AAC5B,MAAM,CAAC,MAAM,0BAA0B,GAAG,IAAI,CAAC;AAE/C;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CAAC,MAAuB;IAChE,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,wBAAwB,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,wBAAwB,CAChC,0CAA0C,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC7F,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI;QACzB,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC;QACvB,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;KACjB,EAAE,CAAC;QACX,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,0BAA0B,EAAE,CAAC;YAChF,MAAM,IAAI,wBAAwB,CAChC,oBAAoB,GAAG,qCAAqC,0BAA0B,EAAE,CACzF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,wBAAwB,CAAC,qDAAqD,CAAC,CAAC;IAC5F,CAAC;AACH,CAAC"}