@kumwe/studio-media 0.1.0-alpha.2 → 0.1.0-alpha.3

package/dist/index.d.ts

@@ -1,4 +1,5 @@
 export { MediaLibrary, MEDIA_PROVIDER_FAILURE, selectBestRendition, type MediaLibraryListener, type MediaLibraryState, type MediaLibraryStatus, type MediaProvider, type MediaUploadRequest, } from './media-library.js';
 export { MediaUploadController, MEDIA_UPLOAD_FAILURE, MEDIA_UPLOAD_TOO_LARGE, type MediaUploadChunk, type MediaUploadControllerOptions, type MediaUploadListener, type MediaUploadTransport, } from './upload-controller.js';
+export { evaluateUploadPolicy, planFromPolicy, type MediaUploadPolicy, type MediaUploadPolicyDecision, } from './upload-policy.js';
 export { validateMediaReference } from './validate-media-reference.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,sBAAsB,EACtB,mBAAmB,EACnB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,aAAa,EAClB,KAAK,kBAAkB,GACxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,4BAA4B,EACjC,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,GAC1B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,sBAAsB,EACtB,mBAAmB,EACnB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,aAAa,EAClB,KAAK,kBAAkB,GACxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,4BAA4B,EACjC,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,GAC1B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,oBAAoB,EACpB,cAAc,EACd,KAAK,iBAAiB,EACtB,KAAK,yBAAyB,GAC/B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC"}

package/dist/index.js

@@ -1,4 +1,5 @@
 export { MediaLibrary, MEDIA_PROVIDER_FAILURE, selectBestRendition, } from './media-library.js';
 export { MediaUploadController, MEDIA_UPLOAD_FAILURE, MEDIA_UPLOAD_TOO_LARGE, } from './upload-controller.js';
+export { evaluateUploadPolicy, planFromPolicy, } from './upload-policy.js';
 export { validateMediaReference } from './validate-media-reference.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,sBAAsB,EACtB,mBAAmB,GAMpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,GAKvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,sBAAsB,EACtB,mBAAmB,GAMpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,GAKvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,oBAAoB,EACpB,cAAc,GAGf,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC"}

package/dist/upload-policy.d.ts

@@ -0,0 +1,35 @@
+import type { MediaUploadPlan, MediaUploadRequestDescriptor, StudioDiagnostic } from '@kumwe/studio-protocol';
+/**
+ * The host-declared upload policy: the bounded upload plan the host grants
+ * (`MediaUploadPlan`) plus the declared media types it accepts. This is the
+ * policy shape the canonical vectors in `schemas/vectors/media/` fix; the
+ * host remains authoritative and re-verifies everything server-side.
+ */
+export interface MediaUploadPolicy {
+    acceptedMediaTypes: readonly string[];
+    chunkBytes?: number;
+    maximumBytes: number;
+    resumable: boolean;
+}
+export type MediaUploadPolicyDecision = {
+    failure: StudioDiagnostic;
+    outcome: 'rejected';
+} | {
+    outcome: 'accepted';
+    plan: MediaUploadPlan;
+};
+/** The deterministic upload plan a policy grants, independent of any request. */
+export declare function planFromPolicy(policy: MediaUploadPolicy): MediaUploadPlan;
+/**
+ * Evaluates one upload request against a host-declared policy, in the fixed
+ * order filename, media type, size. Rejections use the closed media failure
+ * vocabulary: an oversize request fails with `studio.media/upload-too-large`
+ * carrying the byte counts only as machine-readable diagnostic parameters
+ * (the exact diagnostic `MediaUploadController` raises at the same boundary),
+ * and every other violation fails with the generic
+ * `studio.media/upload-failed` — user-facing messages never echo the raw
+ * size, media type, or filename. The canonical corpus in
+ * `schemas/vectors/media/` replays this decision.
+ */
+export declare function evaluateUploadPolicy(policy: MediaUploadPolicy, request: MediaUploadRequestDescriptor): MediaUploadPolicyDecision;
+//# sourceMappingURL=upload-policy.d.ts.map

package/dist/upload-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload-policy.d.ts","sourceRoot":"","sources":["../src/upload-policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EACf,4BAA4B,EAC5B,gBAAgB,EACjB,MAAM,wBAAwB,CAAC;AAGhC;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,MAAM,yBAAyB,GACjC;IAAE,OAAO,EAAE,gBAAgB,CAAC;IAAC,OAAO,EAAE,UAAU,CAAA;CAAE,GAClD;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,eAAe,CAAA;CAAE,CAAC;AAEnD,iFAAiF;AACjF,wBAAgB,cAAc,CAAC,MAAM,EAAE,iBAAiB,GAAG,eAAe,CASzE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,iBAAiB,EACzB,OAAO,EAAE,4BAA4B,GACpC,yBAAyB,CA4B3B"}

package/dist/upload-policy.js

@@ -0,0 +1,71 @@
+import { MEDIA_UPLOAD_FAILURE, MEDIA_UPLOAD_TOO_LARGE } from './upload-controller.js';
+/** The deterministic upload plan a policy grants, independent of any request. */
+export function planFromPolicy(policy) {
+    const plan = {
+        maximumBytes: policy.maximumBytes,
+        resumable: policy.resumable,
+    };
+    if (policy.chunkBytes !== undefined) {
+        plan.chunkBytes = policy.chunkBytes;
+    }
+    return plan;
+}
+/**
+ * Evaluates one upload request against a host-declared policy, in the fixed
+ * order filename, media type, size. Rejections use the closed media failure
+ * vocabulary: an oversize request fails with `studio.media/upload-too-large`
+ * carrying the byte counts only as machine-readable diagnostic parameters
+ * (the exact diagnostic `MediaUploadController` raises at the same boundary),
+ * and every other violation fails with the generic
+ * `studio.media/upload-failed` — user-facing messages never echo the raw
+ * size, media type, or filename. The canonical corpus in
+ * `schemas/vectors/media/` replays this decision.
+ */
+export function evaluateUploadPolicy(policy, request) {
+    if (!isCanonicalFilename(request.filename) ||
+        !policy.acceptedMediaTypes.includes(request.mediaType) ||
+        !Number.isInteger(request.byteSize) ||
+        request.byteSize < 1) {
+        return {
+            failure: {
+                code: 'studio.media/upload-failed',
+                message: { ...MEDIA_UPLOAD_FAILURE },
+                severity: 'error',
+            },
+            outcome: 'rejected',
+        };
+    }
+    if (request.byteSize > policy.maximumBytes) {
+        return {
+            failure: {
+                code: 'studio.media/upload-too-large',
+                message: { ...MEDIA_UPLOAD_TOO_LARGE },
+                parameters: { byteSize: request.byteSize, maximumBytes: policy.maximumBytes },
+                severity: 'error',
+            },
+            outcome: 'rejected',
+        };
+    }
+    return { outcome: 'accepted', plan: planFromPolicy(policy) };
+}
+/**
+ * Mirrors the filename rule of `media-upload-session.schema.json`: one to 255
+ * code points, no C0 control characters, no DEL, and no path separators —
+ * per the media contract, filenames are display metadata, never storage
+ * paths.
+ */
+function isCanonicalFilename(filename) {
+    let length = 0;
+    for (const character of filename) {
+        length += 1;
+        if (length > 255) {
+            return false;
+        }
+        const codePoint = character.codePointAt(0) ?? 0;
+        if (codePoint <= 0x1f || codePoint === 0x7f || character === '/' || character === '\\') {
+            return false;
+        }
+    }
+    return length >= 1;
+}
+//# sourceMappingURL=upload-policy.js.map

package/dist/upload-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload-policy.js","sourceRoot":"","sources":["../src/upload-policy.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAmBtF,iFAAiF;AACjF,MAAM,UAAU,cAAc,CAAC,MAAyB;IACtD,MAAM,IAAI,GAAoB;QAC5B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC;IACF,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IACtC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAAyB,EACzB,OAAqC;IAErC,IACE,CAAC,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC;QACtC,CAAC,MAAM,CAAC,kBAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC;QACtD,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC;QACnC,OAAO,CAAC,QAAQ,GAAG,CAAC,EACpB,CAAC;QACD,OAAO;YACL,OAAO,EAAE;gBACP,IAAI,EAAE,4BAA4B;gBAClC,OAAO,EAAE,EAAE,GAAG,oBAAoB,EAAE;gBACpC,QAAQ,EAAE,OAAO;aAClB;YACD,OAAO,EAAE,UAAU;SACpB,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC;QAC3C,OAAO;YACL,OAAO,EAAE;gBACP,IAAI,EAAE,+BAA+B;gBACrC,OAAO,EAAE,EAAE,GAAG,sBAAsB,EAAE;gBACtC,UAAU,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE;gBAC7E,QAAQ,EAAE,OAAO;aAClB;YACD,OAAO,EAAE,UAAU;SACpB,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED;;;;;GAKG;AACH,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,CAAC,CAAC;QACZ,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;YACjB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,SAAS,IAAI,IAAI,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,GAAG,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvF,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,MAAM,IAAI,CAAC,CAAC;AACrB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kumwe/studio-media",
-  "version": "0.1.0-alpha.2",
+  "version": "0.1.0-alpha.3",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/kumwe/studio.git",