@ketvietlab/ketsuite 0.1.1

package/dist/modules/storage/functions.js

@@ -0,0 +1,129 @@
+import { deleteFrom, defineFn, eq, from, KetError } from '@ketvietlab/ketjs';
+const output = {
+    id: 'id',
+    name: 'text',
+    resModel: 'text?',
+    resId: 'text?',
+    resField: 'text?',
+    kind: 'text',
+    url: 'text?',
+    storeKey: 'text?',
+    mimetype: 'text',
+    size: 'int',
+    checksum: 'text?',
+    public: 'bool',
+    createdAt: 'datetime',
+};
+const invalid = (message) => {
+    throw new KetError({ code: 'E_ATTACHMENT_INVALID', message });
+};
+export const functions = {
+    createAttachment: defineFn({
+        input: output,
+        output,
+        effects: ['write:storage.Attachment'],
+        idempotent: true,
+        agent: true,
+        handler: async (ctx, args) => {
+            if (!String(args.name).trim())
+                invalid('attachment name cannot be empty');
+            if (Number(args.size) < 0)
+                invalid('attachment size cannot be negative');
+            if (!/^[a-z0-9!#$&^_.+-]+\/[a-z0-9!#$&^_.+-]+$/.test(String(args.mimetype)))
+                invalid('attachment mimetype is invalid');
+            if (args.kind !== 'stored' && args.kind !== 'url')
+                invalid('attachment kind must be stored or url');
+            if (args.kind === 'stored') {
+                if (!args.storeKey || !args.checksum)
+                    invalid('a stored attachment requires storeKey and checksum');
+                const checksum = String(args.checksum);
+                if (!/^[a-f0-9]{64}$/.test(checksum))
+                    invalid('a stored attachment requires a SHA-256 checksum');
+                const expected = `blobs/${ctx.scope.company}/${checksum.slice(0, 2)}/${checksum}`;
+                if (args.storeKey !== expected)
+                    invalid('stored attachment key does not match its company and checksum');
+                if (args.url)
+                    invalid('a stored attachment cannot also carry a URL');
+            }
+            if (args.kind === 'url') {
+                if (!args.url)
+                    invalid('a URL attachment requires url');
+                let target = null;
+                try {
+                    target = new URL(String(args.url));
+                }
+                catch {
+                    invalid('attachment URL is invalid');
+                }
+                if (!target || (target.protocol !== 'https:' && target.protocol !== 'http:'))
+                    invalid('an attachment URL must use http or https');
+                if (args.storeKey || args.checksum)
+                    invalid('a URL attachment cannot carry a stored object');
+                // Store what was validated: the parser normalises, so the raw input and the
+                // URL the checks ran against are not always the same string.
+                if (target)
+                    args.url = target.href;
+            }
+            await ctx.db.insert('storage.Attachment', args);
+            return args;
+        },
+    }),
+    getAttachment: defineFn({
+        input: { id: 'id' },
+        output,
+        effects: ['read:storage.Attachment'],
+        handler: async (ctx, args) => {
+            const A = ctx.table('storage.Attachment');
+            return ctx.db.one(from(A).where(eq(A.id, args.id)));
+        },
+    }),
+    getPublicAttachment: defineFn({
+        anonymous: true,
+        input: { id: 'id' },
+        output,
+        effects: ['read:storage.Attachment'],
+        handler: async (ctx, args) => {
+            const A = ctx.table('storage.Attachment');
+            return ctx.db.one(from(A).where(eq(A.id, args.id), eq(A.public, true)));
+        },
+    }),
+    listAttachments: defineFn({
+        input: { resModel: 'text', resId: 'text', resField: 'text?', limit: 'int?', offset: 'int?' },
+        output,
+        effects: ['read:storage.Attachment'],
+        agent: true,
+        handler: async (ctx, args) => {
+            const A = ctx.table('storage.Attachment');
+            let query = from(A).where(eq(A.resModel, args.resModel), eq(A.resId, args.resId));
+            if (args.resField)
+                query = query.where(eq(A.resField, args.resField));
+            query = query.limit(Math.max(1, Math.min(100, Number(args.limit ?? 50))));
+            if (args.offset)
+                query = query.offset(Math.max(0, Number(args.offset)));
+            return ctx.db.all(query);
+        },
+    }),
+    removeAttachment: defineFn({
+        input: { id: 'id' },
+        output: { ok: 'bool' },
+        effects: ['write:storage.Attachment'],
+        idempotent: true,
+        agent: true,
+        handler: async (ctx, args) => {
+            const A = ctx.table('storage.Attachment');
+            await ctx.db.del(deleteFrom(A).where(eq(A.id, args.id)));
+            return { ok: true };
+        },
+    }),
+    requestSweep: defineFn({
+        input: { minAgeMs: 'int?' },
+        output: { id: 'id', existing: 'bool' },
+        effects: ['enqueue:storage.sweep'],
+        idempotent: true,
+        agent: true,
+        handler: (ctx, args) => ctx.jobs.enqueue('storage.sweep', args, {
+            uniqueKey: `company:${ctx.scope.company ?? 'none'}`,
+        }),
+    }),
+};
+//# sourceMappingURL=functions.js.map

package/dist/modules/storage/functions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"functions.js","sourceRoot":"","sources":["../../../../../../../packages/ketsuite/src/modules/storage/functions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAG5E,MAAM,MAAM,GAAG;IACb,EAAE,EAAE,IAAI;IACR,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,OAAO;IACjB,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,OAAO;IACjB,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,OAAO;IACZ,QAAQ,EAAE,OAAO;IACjB,QAAQ,EAAE,MAAM;IAChB,IAAI,EAAE,KAAK;IACX,QAAQ,EAAE,OAAO;IACjB,MAAM,EAAE,MAAM;IACd,SAAS,EAAE,UAAU;CACtB,CAAA;AAED,MAAM,OAAO,GAAG,CAAC,OAAe,EAAS,EAAE;IACzC,MAAM,IAAI,QAAQ,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,CAAC,CAAA;AAC/D,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,SAAS,GAA2B;IAC/C,gBAAgB,EAAE,QAAQ,CAAC;QACzB,KAAK,EAAE,MAAM;QACb,MAAM;QACN,OAAO,EAAE,CAAC,0BAA0B,CAAC;QACrC,UAAU,EAAE,IAAI;QAChB,KAAK,EAAE,IAAI;QACX,OAAO,EAAE,KAAK,EAAE,GAAQ,EAAE,IAAI,EAAE,EAAE;YAChC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE;gBAAE,OAAO,CAAC,iCAAiC,CAAC,CAAA;YACzE,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,OAAO,CAAC,oCAAoC,CAAC,CAAA;YACxE,IAAI,CAAC,0CAA0C,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACzE,OAAO,CAAC,gCAAgC,CAAC,CAAA;YAC3C,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK;gBAAE,OAAO,CAAC,uCAAuC,CAAC,CAAA;YACnG,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC3B,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ;oBAAE,OAAO,CAAC,oDAAoD,CAAC,CAAA;gBACnG,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;gBACtC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC;oBAAE,OAAO,CAAC,iDAAiD,CAAC,CAAA;gBAChG,MAAM,QAAQ,GAAG,SAAS,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAA;gBACjF,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ;oBAC5B,OAAO,CAAC,+DAA+D,CAAC,CAAA;gBAC1E,IAAI,IAAI,CAAC,GAAG;oBAAE,OAAO,CAAC,6CAA6C,CAAC,CAAA;YACtE,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;gBACxB,IAAI,CAAC,IAAI,CAAC,GAAG;oBAAE,OAAO,CAAC,+BAA+B,CAAC,CAAA;gBACvD,IAAI,MAAM,GAAe,IAAI,CAAA;gBAC7B,IAAI,CAAC;oBACH,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;gBACpC,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,CAAC,2BAA2B,CAAC,CAAA;gBACtC,CAAC;gBACD,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC;oBAC1E,OAAO,CAAC,0CAA0C,CAAC,CAAA;gBACrD,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ;oBAAE,OAAO,CAAC,+CAA+C,CAAC,CAAA;gBAC5F,4EAA4E;gBAC5E,6DAA6D;gBAC7D,IAAI,MAAM;oBAAE,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,IAAI,CAAA;YACpC,CAAC;YACD,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,oBAAoB,EAAE,IAAW,CAAC,CAAA;YACtD,OAAO,IAAI,CAAA;QACb,CAAC;KACF,CAAC;IAEF,aAAa,EAAE,QAAQ,CAAC;QACtB,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;QACnB,MAAM;QACN,OAAO,EAAE,CAAC,yBAAyB,CAAC;QACpC,OAAO,EAAE,KAAK,EAAE,GAAQ,EAAE,IAAI,EAAE,EAAE;YAChC,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAA;YACzC,OAAO,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QACrD,CAAC;KACF,CAAC;IAEF,mBAAmB,EAAE,QAAQ,CAAC;QAC5B,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;QACnB,MAAM;QACN,OAAO,EAAE,CAAC,yBAAyB,CAAC;QACpC,OAAO,EAAE,KAAK,EAAE,GAAQ,EAAE,IAAI,EAAE,EAAE;YAChC,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAA;YACzC,OAAO,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;QACzE,CAAC;KACF,CAAC;IAEF,eAAe,EAAE,QAAQ,CAAC;QACxB,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;QAC5F,MAAM;QACN,OAAO,EAAE,CAAC,yBAAyB,CAAC;QACpC,KAAK,EAAE,IAAI;QACX,OAAO,EAAE,KAAK,EAAE,GAAQ,EAAE,IAAI,EAAE,EAAE;YAChC,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAA;YACzC,IAAI,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;YACjF,IAAI,IAAI,CAAC,QAAQ;gBAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAA;YACrE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;YACzE,IAAI,IAAI,CAAC,MAAM;gBAAE,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;YACvE,OAAO,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAC1B,CAAC;KACF,CAAC;IAEF,gBAAgB,EAAE,QAAQ,CAAC;QACzB,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;QACnB,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;QACtB,OAAO,EAAE,CAAC,0BAA0B,CAAC;QACrC,UAAU,EAAE,IAAI;QAChB,KAAK,EAAE,IAAI;QACX,OAAO,EAAE,KAAK,EAAE,GAAQ,EAAE,IAAI,EAAE,EAAE;YAChC,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAA;YACzC,MAAM,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;YACxD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;QACrB,CAAC;KACF,CAAC;IAEF,YAAY,EAAE,QAAQ,CAAC;QACrB,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;QAC3B,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE;QACtC,OAAO,EAAE,CAAC,uBAAuB,CAAC;QAClC,UAAU,EAAE,IAAI;QAChB,KAAK,EAAE,IAAI;QACX,OAAO,EAAE,CAAC,GAAQ,EAAE,IAAI,EAAE,EAAE,CAC1B,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,IAAI,EAAE;YACtC,SAAS,EAAE,WAAW,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,MAAM,EAAE;SACpD,CAAC;KACL,CAAC;CACH,CAAA"}

package/dist/modules/storage/index.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@ketvietlab/ketjs").KetModule;
+export default _default;
+//# sourceMappingURL=index.d.ts.map

package/dist/modules/storage/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../packages/ketsuite/src/modules/storage/index.ts"],"names":[],"mappings":""}

package/dist/modules/storage/index.js

@@ -0,0 +1,31 @@
+import { defineModule } from '@ketvietlab/ketjs';
+import { functions } from './functions.js';
+import { jobs } from './jobs.js';
+import { models } from './models.js';
+import { routes } from './routes.js';
+export default defineModule({
+    name: 'storage',
+    version: '0.1.0',
+    depends: ['company'],
+    app: true,
+    title: 'Tệp tin',
+    summary: 'Tệp đính kèm trên đĩa hoặc dịch vụ tương thích S3.',
+    category: 'Hệ thống',
+    models,
+    functions,
+    jobs,
+    routes,
+    messages: {
+        vi: {
+            'app.title': 'Tệp tin',
+            'app.summary': 'Tệp đính kèm trên đĩa hoặc dịch vụ tương thích S3.',
+            'app.category': 'Hệ thống',
+        },
+        en: {
+            'app.title': 'Files',
+            'app.summary': 'Attachments on local disk or an S3-compatible service.',
+            'app.category': 'System',
+        },
+    },
+});
+//# sourceMappingURL=index.js.map

package/dist/modules/storage/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../packages/ketsuite/src/modules/storage/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEpC,eAAe,YAAY,CAAC;IAC1B,IAAI,EAAE,SAAS;IACf,OAAO,EAAE,OAAO;IAChB,OAAO,EAAE,CAAC,SAAS,CAAC;IACpB,GAAG,EAAE,IAAI;IACT,KAAK,EAAE,SAAS;IAChB,OAAO,EAAE,oDAAoD;IAC7D,QAAQ,EAAE,UAAU;IACpB,MAAM;IACN,SAAS;IACT,IAAI;IACJ,MAAM;IACN,QAAQ,EAAE;QACR,EAAE,EAAE;YACF,WAAW,EAAE,SAAS;YACtB,aAAa,EAAE,oDAAoD;YACnE,cAAc,EAAE,UAAU;SAC3B;QACD,EAAE,EAAE;YACF,WAAW,EAAE,OAAO;YACpB,aAAa,EAAE,wDAAwD;YACvE,cAAc,EAAE,QAAQ;SACzB;KACF;CACF,CAAC,CAAA"}

package/dist/modules/storage/jobs.d.ts

@@ -0,0 +1,3 @@
+import type { JobSpec } from '@ketvietlab/ketjs';
+export declare const jobs: Record<string, JobSpec>;
+//# sourceMappingURL=jobs.d.ts.map

package/dist/modules/storage/jobs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jobs.d.ts","sourceRoot":"","sources":["../../../../../../packages/ketsuite/src/modules/storage/jobs.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAc,OAAO,EAAE,MAAM,mBAAmB,CAAA;AAE5D,eAAO,MAAM,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAkCxC,CAAA"}

package/dist/modules/storage/jobs.js

@@ -0,0 +1,37 @@
+import { defineJob, from, inArray } from '@ketvietlab/ketjs';
+export const jobs = {
+    sweep: defineJob({
+        queue: 'maintenance',
+        input: { minAgeMs: 'int?' },
+        effects: ['read:storage.Attachment', 'storage:read', 'storage:remove'],
+        idempotent: true,
+        handler: async (ctx, args) => {
+            const company = ctx.scope.company;
+            if (!company)
+                throw new Error('storage.sweep requires a company scope');
+            const A = ctx.table('storage.Attachment');
+            // A caller may shorten the grace period but never erase it: upload writes the
+            // bytes before it records the row, so a zero floor collects objects an
+            // in-flight request is about to reference.
+            const cutoff = Date.now() - Math.max(5 * 60_000, Number(args.minAgeMs ?? 60 * 60 * 1_000));
+            const prefix = `blobs/${company}/`;
+            let after;
+            do {
+                const page = await ctx.storage.list(prefix, { ...(after ? { after } : {}), limit: 250 });
+                const referenced = new Set((await ctx.db.all(from(A).select(A.storeKey).where(inArray(A.storeKey, page.keys)))).map((row) => row.storeKey));
+                for (const key of page.keys) {
+                    if (ctx.signal.aborted)
+                        throw ctx.signal.reason;
+                    if (referenced.has(key))
+                        continue;
+                    const meta = await ctx.storage.head(key);
+                    if (!meta?.modifiedAt || new Date(meta.modifiedAt).getTime() > cutoff)
+                        continue;
+                    await ctx.storage.remove(key);
+                }
+                after = page.next;
+            } while (after);
+        },
+    }),
+};
+//# sourceMappingURL=jobs.js.map

package/dist/modules/storage/jobs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jobs.js","sourceRoot":"","sources":["../../../../../../../packages/ketsuite/src/modules/storage/jobs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAA;AAG5D,MAAM,CAAC,MAAM,IAAI,GAA4B;IAC3C,KAAK,EAAE,SAAS,CAAC;QACf,KAAK,EAAE,aAAa;QACpB,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;QAC3B,OAAO,EAAE,CAAC,yBAAyB,EAAE,cAAc,EAAE,gBAAgB,CAAC;QACtE,UAAU,EAAE,IAAI;QAChB,OAAO,EAAE,KAAK,EAAE,GAAe,EAAE,IAAI,EAAE,EAAE;YACvC,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAA;YACjC,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;YACvE,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAA;YACzC,8EAA8E;YAC9E,uEAAuE;YACvE,2CAA2C;YAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,CAAA;YAC1F,MAAM,MAAM,GAAG,SAAS,OAAO,GAAG,CAAA;YAClC,IAAI,KAAyB,CAAA;YAC7B,GAAG,CAAC;gBACF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;gBACxF,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CACtF,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CACtB,CACF,CAAA;gBACD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;oBAC5B,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO;wBAAE,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,CAAA;oBAC/C,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;wBAAE,SAAQ;oBACjC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;oBACxC,IAAI,CAAC,IAAI,EAAE,UAAU,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,GAAG,MAAM;wBAAE,SAAQ;oBAC/E,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;gBAC/B,CAAC;gBACD,KAAK,GAAG,IAAI,CAAC,IAAI,CAAA;YACnB,CAAC,QAAQ,KAAK,EAAC;QACjB,CAAC;KACF,CAAC;CACH,CAAA"}

package/dist/modules/storage/models.d.ts

@@ -0,0 +1,3 @@
+import type { ModelDef } from '@ketvietlab/ketjs';
+export declare const models: Record<string, ModelDef>;
+//# sourceMappingURL=models.d.ts.map

package/dist/modules/storage/models.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.d.ts","sourceRoot":"","sources":["../../../../../../packages/ketsuite/src/modules/storage/models.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAEjD,eAAO,MAAM,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAqB3C,CAAA"}

package/dist/modules/storage/models.js

@@ -0,0 +1,23 @@
+export const models = {
+    /** Metadata is transactional; bytes live behind the Storage contract. */
+    Attachment: {
+        scope: 'company',
+        fields: {
+            id: 'id',
+            name: 'text',
+            resModel: 'text?',
+            /** Polymorphic target ids cannot be a ref because resModel selects the table. */
+            resId: 'text?',
+            resField: 'text?',
+            kind: 'text',
+            url: 'text?',
+            storeKey: 'text?',
+            mimetype: 'text',
+            size: 'int',
+            checksum: 'text?',
+            public: 'bool',
+            createdAt: 'datetime',
+        },
+    },
+};
+//# sourceMappingURL=models.js.map

package/dist/modules/storage/models.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.js","sourceRoot":"","sources":["../../../../../../../packages/ketsuite/src/modules/storage/models.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,MAAM,GAA6B;IAC9C,yEAAyE;IACzE,UAAU,EAAE;QACV,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE;YACN,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,OAAO;YACjB,iFAAiF;YACjF,KAAK,EAAE,OAAO;YACd,QAAQ,EAAE,OAAO;YACjB,IAAI,EAAE,MAAM;YACZ,GAAG,EAAE,OAAO;YACZ,QAAQ,EAAE,OAAO;YACjB,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,KAAK;YACX,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,MAAM;YACd,SAAS,EAAE,UAAU;SACtB;KACF;CACF,CAAA"}

package/dist/modules/storage/routes.d.ts

@@ -0,0 +1,27 @@
+import type { Route, RouteEntry, ServeContext } from '@ketvietlab/ketjs';
+export type Attachment = {
+    id: string;
+    name: string;
+    kind: string;
+    url?: string;
+    storeKey?: string;
+    mimetype: string;
+    size: number;
+    public: boolean;
+};
+export type UploadDefaults = {
+    resModel?: string;
+    resId?: string;
+    resField?: string;
+    public?: boolean;
+};
+/**
+ * Store one multipart upload and create its transactional attachment row.
+ *
+ * Feature bridges may provide trusted target metadata. This keeps streaming,
+ * limits, checksums and object-key construction in storage instead of copying
+ * an upload implementation into every domain that owns an attachment.
+ */
+export declare const receiveAttachment: (ctx: ServeContext, url: URL, req: Parameters<Route>[1], defaults?: UploadDefaults) => Promise<Attachment>;
+export declare const routes: Record<string, RouteEntry>;
+//# sourceMappingURL=routes.d.ts.map

package/dist/modules/storage/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../../../../packages/ketsuite/src/modules/storage/routes.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAiB,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAEvF,MAAM,MAAM,UAAU,GAAG;IACvB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,OAAO,CAAA;CAChB,CAAA;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,OAAO,CAAA;CACjB,CAAA;AAoCD;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,QACvB,YAAY,OACZ,GAAG,OACH,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,aACf,cAAc,KACvB,OAAO,CAAC,UAAU,CA+DpB,CAAA;AA0ED,eAAO,MAAM,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAI7C,CAAA"}

package/dist/modules/storage/routes.js

@@ -0,0 +1,180 @@
+import { mkdtemp, rm } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { randomUUID } from 'node:crypto';
+import { json, KetError, localStorage, multipart, streamed, text, withHeaders } from '@ketvietlab/ketjs';
+const field = async (part) => {
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of part.body) {
+        size += chunk.byteLength;
+        if (size > 64 * 1024)
+            throw new KetError({
+                code: 'E_MULTIPART_FIELD',
+                message: `multipart field "${part.name}" is too large`,
+            });
+        chunks.push(chunk);
+    }
+    return Buffer.concat(chunks).toString('utf8');
+};
+const safeType = (value) => {
+    const type = (value ?? 'application/octet-stream').split(';')[0].trim().toLowerCase();
+    return /^[a-z0-9!#$&^_.+-]+\/[a-z0-9!#$&^_.+-]+$/.test(type) ? type : 'application/octet-stream';
+};
+const inline = new Set([
+    'image/avif',
+    'image/gif',
+    'image/jpeg',
+    'image/png',
+    'image/webp',
+    'application/pdf',
+]);
+const disposition = (name, showInline) => {
+    const ascii = name.replace(/[^\x20-\x7e]/g, '_').replace(/["\\\r\n]/g, '_') || 'download';
+    return `${showInline ? 'inline' : 'attachment'}; filename="${ascii}"; filename*=UTF-8''${encodeURIComponent(name)}`;
+};
+/**
+ * Store one multipart upload and create its transactional attachment row.
+ *
+ * Feature bridges may provide trusted target metadata. This keeps streaming,
+ * limits, checksums and object-key construction in storage instead of copying
+ * an upload implementation into every domain that owns an attachment.
+ */
+export const receiveAttachment = async (ctx, url, req, defaults = {}) => {
+    const type = String(req.headers['content-type'] ?? '');
+    const dir = await mkdtemp(join(tmpdir(), 'ket-upload-'));
+    const spool = localStorage({ dir });
+    try {
+        let uploadPart = null;
+        const fields = {};
+        for await (const part of multipart(req, type, { maxBytes: ctx.config.uploadMax, maxParts: 64 })) {
+            if (part.filename !== undefined) {
+                if (uploadPart)
+                    throw new KetError({
+                        code: 'E_UPLOAD_FILES',
+                        message: 'only one file may be uploaded per request',
+                    });
+                const stored = await spool.put('body', part.body, { type: safeType(part.type) });
+                if (!stored.etag)
+                    throw new KetError({
+                        code: 'E_UPLOAD_CHECKSUM',
+                        message: 'the upload spool returned no checksum',
+                        hint: 'its temporary metadata could not be read back — check disk health and open file limits',
+                    });
+                uploadPart = {
+                    filename: part.filename || 'upload',
+                    type: safeType(part.type),
+                    size: stored.size,
+                    checksum: stored.etag,
+                };
+            }
+            else
+                fields[part.name] = await field(part);
+        }
+        if (!uploadPart)
+            throw new KetError({ code: 'E_UPLOAD_FILE', message: 'multipart request has no file' });
+        const scope = await ctx.scopeOf(url, req);
+        if (!scope.company)
+            throw new KetError({ code: 'E_UPLOAD_SCOPE', message: 'upload requires a company' });
+        const key = `blobs/${scope.company}/${uploadPart.checksum.slice(0, 2)}/${uploadPart.checksum}`;
+        const storage = await ctx.storageOf(url, req);
+        // Write even when the key is already present. Trusting head() lets the sweep
+        // collect the object between the probe and the row insert, leaving an
+        // attachment whose bytes are gone for good; re-writing also refreshes mtime.
+        const source = await spool.get('body');
+        if (!source)
+            throw new Error('temporary upload disappeared');
+        await storage.put(key, source.body, { type: uploadPart.type, size: uploadPart.size });
+        const id = randomUUID();
+        return (await ctx.call('storage.createAttachment', {
+            id,
+            name: fields.name || uploadPart.filename,
+            ...(defaults.resModel || fields.resModel ? { resModel: defaults.resModel ?? fields.resModel } : {}),
+            ...(defaults.resId || fields.resId ? { resId: defaults.resId ?? fields.resId } : {}),
+            ...(defaults.resField || fields.resField ? { resField: defaults.resField ?? fields.resField } : {}),
+            kind: 'stored',
+            storeKey: key,
+            mimetype: uploadPart.type,
+            size: uploadPart.size,
+            checksum: uploadPart.checksum,
+            public: defaults.public ?? (fields.public === 'true' || fields.public === '1'),
+            createdAt: new Date().toISOString(),
+        }, url, req));
+    }
+    finally {
+        await rm(dir, { recursive: true, force: true });
+    }
+};
+const upload = (ctx) => async (url, req) => {
+    if (req.method !== 'POST')
+        return text('POST multipart/form-data', { status: 405 });
+    return json(await receiveAttachment(ctx, url, req), { status: 201 });
+};
+const download = (ctx) => async (url, req, params) => {
+    if (req.method !== 'GET' && req.method !== 'HEAD')
+        return text('GET or HEAD', { status: 405 });
+    const sessions = await ctx.sessionsOf(url, req);
+    const authenticated = sessions ? Boolean(await sessions.of(req)) : true;
+    const publicAttachment = (await ctx
+        .call('storage.getPublicAttachment', { id: params.id }, url, req)
+        .catch((error) => {
+        // A caller granted only storage.getAttachment must still be able to
+        // download: refusal here means "not public", not that the request failed.
+        if (error.code === 'E_FN_NOT_PERMITTED')
+            return null;
+        throw error;
+    }));
+    const attachment = publicAttachment ??
+        (authenticated
+            ? (await ctx.call('storage.getAttachment', { id: params.id }, url, req))
+            : null);
+    if (!attachment)
+        return text('not found', { status: 404 });
+    const cacheControl = attachment.public ? 'public, max-age=3600' : 'private, no-store';
+    // A redirect carries no body but still hands out a capability, so it needs the
+    // same cache and sniff directives the proxied path sets.
+    const redirect = { 'x-content-type-options': 'nosniff', 'cache-control': cacheControl };
+    if (attachment.kind === 'url' && attachment.url)
+        return withHeaders(text('', { status: 302 }), { ...redirect, location: attachment.url });
+    if (!attachment.storeKey)
+        return text('attachment has no stored object', { status: 404 });
+    const storage = await ctx.storageOf(url, req);
+    const showInline = inline.has(attachment.mimetype);
+    const headers = {
+        'x-content-type-options': 'nosniff',
+        'content-disposition': disposition(attachment.name, showInline),
+        'cache-control': cacheControl,
+    };
+    if (req.method === 'HEAD') {
+        const found = await storage.head(attachment.storeKey);
+        return found
+            ? withHeaders(text('', { type: showInline ? attachment.mimetype : 'application/octet-stream' }), {
+                ...headers,
+                'content-length': String(found.size),
+            })
+            : text('not found', { status: 404 });
+    }
+    // A signed URL avoids proxying large, browser-safe files. Unknown active content
+    // always passes through the app so it receives attachment + nosniff headers.
+    if (showInline && attachment.size >= 1024 * 1024) {
+        const signed = await storage.signedUrl(attachment.storeKey, { expiresIn: 60 });
+        if (signed)
+            return withHeaders(text('', { status: 302 }), { ...redirect, location: signed });
+    }
+    const found = await storage.get(attachment.storeKey);
+    if (!found)
+        return text('not found', { status: 404 });
+    return withHeaders(streamed(found.body, { type: showInline ? attachment.mimetype : 'application/octet-stream' }), { ...headers, 'content-length': String(found.meta.size) });
+};
+const sweep = (ctx) => async (url, req) => {
+    if (req.method !== 'POST')
+        return text('POST', { status: 405 });
+    const queued = await ctx.call('storage.requestSweep', {}, url, req);
+    return json(queued, { status: 202 });
+};
+export const routes = {
+    '/files': { handler: upload },
+    '/files/sweep': { handler: sweep },
+    '/files/{id}': { anonymous: true, handler: download },
+};
+//# sourceMappingURL=routes.js.map

package/dist/modules/storage/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../../../../../../packages/ketsuite/src/modules/storage/routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAqBxG,MAAM,KAAK,GAAG,KAAK,EAAE,IAAmB,EAAmB,EAAE;IAC3D,MAAM,MAAM,GAAiB,EAAE,CAAA;IAC/B,IAAI,IAAI,GAAG,CAAC,CAAA;IACZ,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACpC,IAAI,IAAI,KAAK,CAAC,UAAU,CAAA;QACxB,IAAI,IAAI,GAAG,EAAE,GAAG,IAAI;YAClB,MAAM,IAAI,QAAQ,CAAC;gBACjB,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,oBAAoB,IAAI,CAAC,IAAI,gBAAgB;aACvD,CAAC,CAAA;QACJ,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACpB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;AAC/C,CAAC,CAAA;AAED,MAAM,QAAQ,GAAG,CAAC,KAAyB,EAAU,EAAE;IACrD,MAAM,IAAI,GAAG,CAAC,KAAK,IAAI,0BAA0B,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACtF,OAAO,0CAA0C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,0BAA0B,CAAA;AAClG,CAAC,CAAA;AAED,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC;IACrB,YAAY;IACZ,WAAW;IACX,YAAY;IACZ,WAAW;IACX,YAAY;IACZ,iBAAiB;CAClB,CAAC,CAAA;AAEF,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,UAAmB,EAAU,EAAE;IAChE,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,IAAI,UAAU,CAAA;IACzF,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,eAAe,KAAK,uBAAuB,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAA;AACrH,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EACpC,GAAiB,EACjB,GAAQ,EACR,GAAyB,EACzB,QAAQ,GAAmB,EAAE,EACR,EAAE;IACvB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAA;IACtD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC,CAAA;IACxD,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;IACnC,IAAI,CAAC;QACH,IAAI,UAAU,GAA8E,IAAI,CAAA;QAChG,MAAM,MAAM,GAA2B,EAAE,CAAA;QACzC,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;YAChG,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAChC,IAAI,UAAU;oBACZ,MAAM,IAAI,QAAQ,CAAC;wBACjB,IAAI,EAAE,gBAAgB;wBACtB,OAAO,EAAE,2CAA2C;qBACrD,CAAC,CAAA;gBACJ,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;gBAChF,IAAI,CAAC,MAAM,CAAC,IAAI;oBACd,MAAM,IAAI,QAAQ,CAAC;wBACjB,IAAI,EAAE,mBAAmB;wBACzB,OAAO,EAAE,uCAAuC;wBAChD,IAAI,EAAE,wFAAwF;qBAC/F,CAAC,CAAA;gBACJ,UAAU,GAAG;oBACX,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,QAAQ;oBACnC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;oBACzB,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,QAAQ,EAAE,MAAM,CAAC,IAAI;iBACtB,CAAA;YACH,CAAC;;gBAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;QAC9C,CAAC;QACD,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,QAAQ,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAA;QACxG,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QACzC,IAAI,CAAC,KAAK,CAAC,OAAO;YAAE,MAAM,IAAI,QAAQ,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAA;QACxG,MAAM,GAAG,GAAG,SAAS,KAAK,CAAC,OAAO,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAA;QAC9F,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QAC7C,6EAA6E;QAC7E,sEAAsE;QACtE,6EAA6E;QAC7E,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACtC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;QAC5D,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC,CAAA;QACrF,MAAM,EAAE,GAAG,UAAU,EAAE,CAAA;QACvB,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CACpB,0BAA0B,EAC1B;YACE,EAAE;YACF,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,UAAU,CAAC,QAAQ;YACxC,GAAG,CAAC,QAAQ,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnG,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpF,GAAG,CAAC,QAAQ,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnG,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,GAAG;YACb,QAAQ,EAAE,UAAU,CAAC,IAAI;YACzB,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC;YAC9E,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,EACD,GAAG,EACH,GAAG,CACJ,CAAe,CAAA;IAClB,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACjD,CAAC;AACH,CAAC,CAAA;AAED,MAAM,MAAM,GACV,CAAC,GAAiB,EAAS,EAAE,CAC7B,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACjB,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC,0BAA0B,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IACnF,OAAO,IAAI,CAAC,MAAM,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;AACtE,CAAC,CAAA;AAEH,MAAM,QAAQ,GACZ,CAAC,GAAiB,EAAS,EAAE,CAC7B,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;IACzB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IAC9F,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IAC/C,MAAM,aAAa,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,QAAQ,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACvE,MAAM,gBAAgB,GAAG,CAAC,MAAM,GAAG;SAChC,IAAI,CAAC,6BAA6B,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC;SAChE,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QACxB,oEAAoE;QACpE,0EAA0E;QAC1E,IAAK,KAA2B,CAAC,IAAI,KAAK,oBAAoB;YAAE,OAAO,IAAI,CAAA;QAC3E,MAAM,KAAK,CAAA;IACb,CAAC,CAAC,CAAsB,CAAA;IAC1B,MAAM,UAAU,GACd,gBAAgB;QAChB,CAAC,aAAa;YACZ,CAAC,CAAE,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAuB;YAC/F,CAAC,CAAC,IAAI,CAAC,CAAA;IACX,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IAC1D,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,mBAAmB,CAAA;IACrF,+EAA+E;IAC/E,yDAAyD;IACzD,MAAM,QAAQ,GAAG,EAAE,wBAAwB,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,EAAE,CAAA;IACvF,IAAI,UAAU,CAAC,IAAI,KAAK,KAAK,IAAI,UAAU,CAAC,GAAG;QAC7C,OAAO,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC,CAAA;IAC1F,IAAI,CAAC,UAAU,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC,iCAAiC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IACzF,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IAC7C,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;IAClD,MAAM,OAAO,GAAG;QACd,wBAAwB,EAAE,SAAS;QACnC,qBAAqB,EAAE,WAAW,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC;QAC/D,eAAe,EAAE,YAAY;KAC9B,CAAA;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;QACrD,OAAO,KAAK;YACV,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,0BAA0B,EAAE,CAAC,EAAE;gBAC7F,GAAG,OAAO;gBACV,gBAAgB,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;aACrC,CAAC;YACJ,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IACxC,CAAC;IACD,iFAAiF;IACjF,6EAA6E;IAC7E,IAAI,UAAU,IAAI,UAAU,CAAC,IAAI,IAAI,IAAI,GAAG,IAAI,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAA;QAC9E,IAAI,MAAM;YAAE,OAAO,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAA;IAC9F,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IACrD,OAAO,WAAW,CAChB,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,0BAA0B,EAAE,CAAC,EAC7F,EAAE,GAAG,OAAO,EAAE,gBAAgB,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC1D,CAAA;AACH,CAAC,CAAA;AAEH,MAAM,KAAK,GACT,CAAC,GAAiB,EAAS,EAAE,CAC7B,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACjB,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IAC/D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;IACnE,OAAO,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;AACtC,CAAC,CAAA;AAEH,MAAM,CAAC,MAAM,MAAM,GAA+B;IAChD,QAAQ,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE;IAC7B,cAAc,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;IAClC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE;CACtD,CAAA"}

package/dist/modules/uom/convert.d.ts

@@ -0,0 +1,52 @@
+/**
+ * The arithmetic, kept apart from the database so it can be reasoned about and
+ * tested on its own.
+ *
+ * Quantities are floats, as in Odoo. That is a decision with teeth: 0.1 + 0.2 is
+ * not 0.3, and a stock figure that drifts by 1e-16 per movement compares unequal to
+ * zero after enough of them, which is how "we have -0.0000000001 in stock" happens.
+ * The defence is that every value crossing a boundary is rounded to its unit's
+ * precision, and that comparisons go through helpers that respect it — never `===`.
+ */
+export type Unit = {
+    id: string;
+    parentPath: string;
+    absoluteFactor: number;
+    rounding: number;
+};
+export declare class UomError extends Error {
+    code: string;
+    hint: string | null;
+    constructor(d: {
+        code: string;
+        message: string;
+        hint?: string;
+    });
+}
+/**
+ * Round to a multiple of `precision`, away from zero at the halfway point.
+ *
+ * Three things here are load-bearing, and the first version got two of them wrong:
+ *
+ * 1. `toPrecision(12)` before rounding. Dividing by a precision like 0.1 lands on
+ *    2.9999999999999996 often enough that rounding would give 2 instead of 3.
+ * 2. Half-away-from-zero, spelt out. `Math.round` rounds .5 toward positive
+ *    infinity, so it sends -0.5 to -0 — which made 0.9995 compare *equal* to 1
+ *    instead of less than it, silently, in one direction only.
+ * 3. `toPrecision(15)` after multiplying back. Three times 0.1 is
+ *    0.30000000000000004, so a rounding function that skipped this step returned a
+ *    value that was not a multiple of its own precision.
+ */
+export declare function roundTo(value: number, precision: number): number;
+/** Compare two quantities at a given precision. Returns -1, 0 or 1. */
+export declare function compareQty(a: number, b: number, precision: number): -1 | 0 | 1;
+export declare const isZero: (value: number, precision: number) => boolean;
+/**
+ * Convert a quantity between two units with the same root.
+ *
+ * Crossing categories is refused rather than approximated: there is no number of
+ * kilograms in a litre, and a framework that guessed one would be worse than one
+ * that stopped.
+ */
+export declare function convertQty(qty: number, from: Unit, to: Unit): number;
+//# sourceMappingURL=convert.d.ts.map

package/dist/modules/uom/convert.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"convert.d.ts","sourceRoot":"","sources":["../../../../../../packages/ketsuite/src/modules/uom/convert.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,MAAM,IAAI,GAAG;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAA;AAE/F,qBAAa,QAAS,SAAQ,KAAK;IACjC,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,YAAY,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,EAK9D;CACF;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAShE;AAED,uEAAuE;AACvE,wBAAgB,UAAU,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAG9E;AAED,eAAO,MAAM,MAAM,UAAW,MAAM,aAAa,MAAM,KAAG,OAA0C,CAAA;AAEpG;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,GAAG,MAAM,CAgBpE"}

package/dist/modules/uom/convert.js

@@ -0,0 +1,76 @@
+/**
+ * The arithmetic, kept apart from the database so it can be reasoned about and
+ * tested on its own.
+ *
+ * Quantities are floats, as in Odoo. That is a decision with teeth: 0.1 + 0.2 is
+ * not 0.3, and a stock figure that drifts by 1e-16 per movement compares unequal to
+ * zero after enough of them, which is how "we have -0.0000000001 in stock" happens.
+ * The defence is that every value crossing a boundary is rounded to its unit's
+ * precision, and that comparisons go through helpers that respect it — never `===`.
+ */
+export class UomError extends Error {
+    code;
+    hint;
+    constructor(d) {
+        super(d.message);
+        this.name = 'UomError';
+        this.code = d.code;
+        this.hint = d.hint ?? null;
+    }
+}
+/**
+ * Round to a multiple of `precision`, away from zero at the halfway point.
+ *
+ * Three things here are load-bearing, and the first version got two of them wrong:
+ *
+ * 1. `toPrecision(12)` before rounding. Dividing by a precision like 0.1 lands on
+ *    2.9999999999999996 often enough that rounding would give 2 instead of 3.
+ * 2. Half-away-from-zero, spelt out. `Math.round` rounds .5 toward positive
+ *    infinity, so it sends -0.5 to -0 — which made 0.9995 compare *equal* to 1
+ *    instead of less than it, silently, in one direction only.
+ * 3. `toPrecision(15)` after multiplying back. Three times 0.1 is
+ *    0.30000000000000004, so a rounding function that skipped this step returned a
+ *    value that was not a multiple of its own precision.
+ */
+export function roundTo(value, precision) {
+    if (!(precision > 0))
+        throw new UomError({
+            code: 'E_UOM_BAD_PRECISION',
+            message: `rounding precision must be positive, got ${precision}`,
+        });
+    const scaled = Number((value / precision).toPrecision(12));
+    const rounded = Math.sign(scaled) * Math.round(Math.abs(scaled));
+    return Number((rounded * precision).toPrecision(15));
+}
+/** Compare two quantities at a given precision. Returns -1, 0 or 1. */
+export function compareQty(a, b, precision) {
+    const delta = roundTo(a - b, precision);
+    return delta < 0 ? -1 : delta > 0 ? 1 : 0;
+}
+export const isZero = (value, precision) => roundTo(value, precision) === 0;
+/**
+ * Convert a quantity between two units with the same root.
+ *
+ * Crossing categories is refused rather than approximated: there is no number of
+ * kilograms in a litre, and a framework that guessed one would be worse than one
+ * that stopped.
+ */
+export function convertQty(qty, from, to) {
+    if (from.id === to.id)
+        return roundTo(qty, to.rounding);
+    const fromRoot = from.parentPath.split('/').filter(Boolean)[0];
+    const toRoot = to.parentPath.split('/').filter(Boolean)[0];
+    if (!fromRoot || fromRoot !== toRoot) {
+        throw new UomError({
+            code: 'E_UOM_ROOT_MISMATCH',
+            message: `cannot convert "${from.id}" to "${to.id}": they measure different things`,
+            hint: 'units convert only when they share a reference root',
+        });
+    }
+    if (!(from.absoluteFactor > 0) || !(to.absoluteFactor > 0)) {
+        throw new UomError({ code: 'E_UOM_BAD_FACTOR', message: 'a unit factor must be greater than zero' });
+    }
+    // Odoo 19 stores an absolute factor from each node to its root.
+    return roundTo((qty * from.absoluteFactor) / to.absoluteFactor, to.rounding);
+}
+//# sourceMappingURL=convert.js.map