@marinoscar/platform-api 0.0.0-stage → 0.1.0-next.11

package/dist/storage/drivers/storage-driver.js

@@ -0,0 +1,251 @@
+"use strict";
+// =============================================================================
+// Storage drivers: the `storage-driver` pluggable kind (PP-14.7, #925)
+// =============================================================================
+//
+// A storage driver is the part of the storage slice that knows ONE kind of
+// object store: how to build a `StorageProvider` for it, how to prove a
+// configuration works, how to create its bucket or container, how to list what
+// is in it. The slice itself (the objects API, profile images, exports, backups,
+// the node object store) only ever talks to the `StorageProvider`; which driver
+// built it, and with which settings and secrets, is runtime configuration an
+// administrator edits at /admin/settings/storage.
+//
+//   definition   id + label + settingsSchema + defaults + secrets   (what a form needs)
+//   operations   build / testConnection / provision / listKeys / purge   (what the slice calls)
+//
+// The three S3 flavours the platform ships (`s3`, `r2`, `s3compatible`)
+// register through `registerStorageDriver` exactly as an app's driver does
+// (`./builtin-storage-drivers.ts`): no private fast path, and no S3 code
+// outside them.
+//
+// FRAMEWORK-LIGHT, AND A LEAF: this file imports the pluggable-kind primitive,
+// the credential purpose registry and types. It must stay importable from the
+// settings declaration and the config services without pulling an SDK in; the
+// built-ins' SDK imports live in their own files.
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.STORAGE_BUCKET_STEP_LABELS = exports.storageDriverKind = void 0;
+exports.storageDriverCredentialPurpose = storageDriverCredentialPurpose;
+exports.registerStorageDriver = registerStorageDriver;
+exports.storageDriverDefinitions = storageDriverDefinitions;
+exports.storageDriverIds = storageDriverIds;
+exports.getStorageDriver = getStorageDriver;
+exports.requireStorageDriver = requireStorageDriver;
+exports.storageSecretAddress = storageSecretAddress;
+exports.describeStorageDrivers = describeStorageDrivers;
+exports.missingStorageFields = missingStorageFields;
+exports.storageLocationOf = storageLocationOf;
+const storage_1 = require("@marinoscar/platform-contract/storage");
+const index_1 = require("../../core/index");
+const index_2 = require("../../credentials/index");
+/**
+ * The `storage-driver` pluggable kind. Its instances are the definitions
+ * themselves. Use {@link registerStorageDriver} and the helpers below rather
+ * than the kind directly.
+ *
+ * @extensionPoint registry
+ * @stability experimental
+ */
+exports.storageDriverKind = (0, index_1.definePluggableKind)({
+    kind: 'storage-driver',
+    label: 'Storage driver',
+});
+const SECRET_LOOKING_FIELDS = new Set(['secretAccessKey', 'secretKey', 'sessionToken', 'secret', 'password', 'apiKey', 'apiKeys', 'key', 'token', 'privateKey', ...storage_1.STORAGE_SECRET_FIELD_NAMES].map((name) => name.toLowerCase()));
+/**
+ * Human labels for the four bucket-provisioning steps, sent in the response so
+ * a client need not carry them.
+ *
+ * @stability experimental
+ */
+exports.STORAGE_BUCKET_STEP_LABELS = {
+    create: 'Create the bucket',
+    publicAccessBlock: 'Block all public access',
+    encryption: 'Enable default encryption at rest',
+    cors: 'Apply the CORS rule browsers need',
+};
+/**
+ * The credential purpose a driver's secrets use by default (`storage_<id>`).
+ *
+ * @param id - the driver id.
+ * @stability experimental
+ */
+function storageDriverCredentialPurpose(id) {
+    return `storage_${id}`;
+}
+function assertValidDefinition(def) {
+    const where = `Storage driver "${def.id}"`;
+    if (typeof def.id !== 'string' || !storage_1.STORAGE_DRIVER_ID_PATTERN.test(def.id)) {
+        throw new Error(`Invalid storage driver id ${JSON.stringify(def.id)}: it must match ${storage_1.STORAGE_DRIVER_ID_PATTERN}.`);
+    }
+    if (typeof def.label !== 'string' || def.label.trim() === '')
+        throw new Error(`${where}: label must be a non-empty string.`);
+    for (const operation of ['build', 'testConnection']) {
+        if (typeof def[operation] !== 'function')
+            throw new Error(`${where}: ${operation} must be a function.`);
+    }
+    for (const operation of ['provision', 'listKeys', 'purge', 'location', 'missing', 'egressHosts', 'credentialAddress']) {
+        if (def[operation] !== undefined && typeof def[operation] !== 'function')
+            throw new Error(`${where}: ${operation} must be a function.`);
+    }
+    if (typeof def.settingsSchema !== 'object' || def.settingsSchema === null || typeof def.settingsSchema.shape !== 'object') {
+        throw new Error(`${where}: settingsSchema must be a z.object(...).`);
+    }
+    for (const field of Object.keys(def.settingsSchema.shape)) {
+        if (SECRET_LOOKING_FIELDS.has(field.toLowerCase())) {
+            throw new Error(`${where}: settingsSchema declares "${field}", which looks like a secret. A secret is never a setting: ` +
+                'declare it in `secrets`; it is stored encrypted in the credential store.');
+        }
+    }
+    const parsedDefaults = def.settingsSchema.safeParse(def.defaults);
+    if (!parsedDefaults.success) {
+        throw new Error(`${where}: defaults do not parse with settingsSchema: ` +
+            parsedDefaults.error.issues.map((issue) => `${issue.path.join('.') || '(root)'}: ${issue.message}`).join('; '));
+    }
+}
+/**
+ * Registers a storage driver. Call it at import time, before the application
+ * bootstraps (the reference app does it from
+ * `apps/api/src/app-registrations/storage.ts`, which `platform/storage/storage.config.ts`
+ * imports first). The three built-in S3 drivers register through this same
+ * function.
+ *
+ * Registering is all it takes: the `storage` settings namespace gains a
+ * `drivers.<id>` record validated by the driver's `settingsSchema`,
+ * `GET /api/admin/storage-config` describes it (`descriptors`, and a generated
+ * form on the admin page), its secrets get a credential purpose
+ * (`storage_<id>`) unless `credentialAddress` names one, and once an
+ * administrator selects it, every consumer of `STORAGE_PROVIDER` (the objects
+ * API, profile images, exports, backups, the node object store) uses the
+ * provider it builds.
+ *
+ * @param def - the driver.
+ * @throws Error when the definition is malformed (an id that does not match the pattern, a secret-looking settings field, defaults that do not parse, a missing operation).
+ * @throws RegistryError `DUPLICATE_ID` when the id is registered, `FROZEN` after the application bootstrapped.
+ *
+ * @example
+ * ```ts
+ * registerStorageDriver({
+ *   id: 'local-fs',
+ *   label: 'Local filesystem',
+ *   settingsSchema: z.object({ directory: z.string().describe('Directory the objects are written under') }),
+ *   defaults: { directory: '' },
+ *   build: ({ settings }) => new LocalFsStorageProvider(settings.directory),
+ *   testConnection: async ({ settings }) => ({ ok: true, message: `Writable: ${settings.directory}` }),
+ * });
+ * ```
+ *
+ * @extensionPoint registry
+ * @stability experimental
+ */
+function registerStorageDriver(def) {
+    assertValidDefinition(def);
+    const secrets = def.secrets ?? [];
+    const purpose = storageDriverCredentialPurpose(def.id);
+    const ownsPurpose = secrets.length > 0 && def.credentialAddress === undefined;
+    if (ownsPurpose && index_2.credentialPurposeRegistry.has(purpose)) {
+        throw new Error(`Storage driver "${def.id}": the credential purpose "${purpose}" is already registered by another owner. Pick another driver id.`);
+    }
+    const implementation = {
+        id: def.id,
+        label: def.label,
+        ...(def.description === undefined ? {} : { description: def.description }),
+        settingsSchema: def.settingsSchema,
+        defaults: def.defaults,
+        secrets,
+        build: () => def,
+        ...(def.egressHosts === undefined ? {} : { egressHosts: def.egressHosts }),
+    };
+    exports.storageDriverKind.register(implementation);
+    if (ownsPurpose) {
+        (0, index_2.registerCredentialPurpose)({ purpose, owner: 'storage', label: `${def.label} secrets`, tiers: ['system'] });
+    }
+}
+/**
+ * Every registered storage driver, in registration order (the built-ins first;
+ * the order the admin page lists them).
+ *
+ * @stability experimental
+ */
+function storageDriverDefinitions() {
+    return exports.storageDriverKind.list().map((impl) => definitionOf(impl));
+}
+/**
+ * The ids of every registered storage driver, in registration order.
+ *
+ * @stability experimental
+ */
+function storageDriverIds() {
+    return exports.storageDriverKind.ids();
+}
+/**
+ * The driver registered under `id`, or `undefined`.
+ *
+ * @param id - the driver id.
+ * @stability experimental
+ */
+function getStorageDriver(id) {
+    return exports.storageDriverKind.has(id) ? definitionOf(exports.storageDriverKind.get(id)) : undefined;
+}
+/**
+ * The driver registered under `id`.
+ *
+ * @param id - the driver id.
+ * @throws PluggableUnknownError when none is registered; the message names the registered ids.
+ * @stability experimental
+ */
+function requireStorageDriver(id) {
+    return definitionOf(exports.storageDriverKind.get(id));
+}
+function definitionOf(impl) {
+    return impl.build({ settings: {}, secret: async () => null });
+}
+/**
+ * Where `driver`'s secret `name` lives in the credential store.
+ *
+ * @param driver - a registered driver.
+ * @param name - one of the secrets it declares.
+ * @returns the `(purpose, name)` address.
+ * @stability experimental
+ */
+function storageSecretAddress(driver, name) {
+    return driver.credentialAddress ? driver.credentialAddress(name) : { purpose: storageDriverCredentialPurpose(driver.id), name };
+}
+/**
+ * The descriptor of every registered driver for a generated form: its
+ * non-secret fields, then one write-only `secret` field per declared secret
+ * carrying only whether a value is stored.
+ *
+ * @param presence - which of a driver's secrets are stored.
+ * @stability experimental
+ */
+function describeStorageDrivers(presence) {
+    return exports.storageDriverKind.describeAll(presence);
+}
+/**
+ * The names of a driver's still-missing settings and secrets
+ * ({@link StorageDriver.missing}, or every required secret that is absent).
+ *
+ * @param driver - a registered driver.
+ * @param settings - its parsed settings.
+ * @param present - which of its declared secrets are stored.
+ * @stability experimental
+ */
+function missingStorageFields(driver, settings, present) {
+    if (driver.missing)
+        return driver.missing(settings, present);
+    return (driver.secrets ?? []).filter((secret) => secret.required && present[secret.name] !== true).map((secret) => secret.name);
+}
+/**
+ * Where `driver`'s objects live for these settings ({@link StorageDriver.location}, or the `bucket` setting).
+ *
+ * @param driver - a registered driver.
+ * @param settings - its parsed settings.
+ * @stability experimental
+ */
+function storageLocationOf(driver, settings) {
+    if (driver.location)
+        return driver.location(settings);
+    return { bucket: typeof settings.bucket === 'string' ? settings.bucket : driver.id };
+}
+//# sourceMappingURL=storage-driver.js.map

package/dist/storage/drivers/storage-driver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-driver.js","sourceRoot":"","sources":["../../../src/storage/drivers/storage-driver.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,uEAAuE;AACvE,gFAAgF;AAChF,EAAE;AACF,2EAA2E;AAC3E,wEAAwE;AACxE,+EAA+E;AAC/E,iFAAiF;AACjF,gFAAgF;AAChF,6EAA6E;AAC7E,kDAAkD;AAClD,EAAE;AACF,wFAAwF;AACxF,gGAAgG;AAChG,EAAE;AACF,wEAAwE;AACxE,2EAA2E;AAC3E,yEAAyE;AACzE,gBAAgB;AAChB,EAAE;AACF,+EAA+E;AAC/E,8EAA8E;AAC9E,8EAA8E;AAC9E,kDAAkD;AAClD,gFAAgF;;;AAsVhF,wEAEC;AAsED,sDA0BC;AAQD,4DAEC;AAOD,4CAEC;AAQD,4CAEC;AASD,oDAEC;AAcD,oDAKC;AAUD,wDAEC;AAWD,oDAOC;AASD,8CAGC;AA1hBD,mEAO+C;AAI/C,4CAO0B;AAC1B,mDAA+F;AAwR/F;;;;;;;GAOG;AACU,QAAA,iBAAiB,GAAgD,IAAA,2BAAmB,EAE/F;IACA,IAAI,EAAE,gBAAgB;IACtB,KAAK,EAAE,gBAAgB;CACxB,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAwB,IAAI,GAAG,CACxD,CAAC,iBAAiB,EAAE,WAAW,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,oCAA0B,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACpK,IAAI,CAAC,WAAW,EAAE,CACnB,CACF,CAAC;AAEF;;;;;GAKG;AACU,QAAA,0BAA0B,GAAwC;IAC7E,MAAM,EAAE,mBAAmB;IAC3B,iBAAiB,EAAE,yBAAyB;IAC5C,UAAU,EAAE,mCAAmC;IAC/C,IAAI,EAAE,mCAAmC;CAC1C,CAAC;AAEF;;;;;GAKG;AACH,SAAgB,8BAA8B,CAAC,EAAU;IACvD,OAAO,WAAW,EAAE,EAAE,CAAC;AACzB,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAiC;IAC9D,MAAM,KAAK,GAAG,mBAAmB,GAAG,CAAC,EAAE,GAAG,CAAC;IAE3C,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,mCAAyB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,mBAAmB,mCAAyB,GAAG,CAAC,CAAC;IACtH,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,qCAAqC,CAAC,CAAC;IAC7H,KAAK,MAAM,SAAS,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAU,EAAE,CAAC;QAC7D,IAAI,OAAO,GAAG,CAAC,SAAS,CAAC,KAAK,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,SAAS,sBAAsB,CAAC,CAAC;IAC1G,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,mBAAmB,CAAU,EAAE,CAAC;QAC/H,IAAI,GAAG,CAAC,SAAS,CAAC,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,SAAS,CAAC,KAAK,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,SAAS,sBAAsB,CAAC,CAAC;IAC1I,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,IAAI,GAAG,CAAC,cAAc,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC1H,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2CAA2C,CAAC,CAAC;IACvE,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1D,IAAI,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,8BAA8B,KAAK,6DAA6D;gBACtG,0EAA0E,CAC7E,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,cAAc,GAAG,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClE,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,+CAA+C;YACrD,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACjH,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,SAAgB,qBAAqB,CAAkC,GAA+B;IACpG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAE3B,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,8BAA8B,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvD,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC;IAC9E,IAAI,WAAW,IAAI,iCAAyB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,mBAAmB,GAAG,CAAC,EAAE,8BAA8B,OAAO,mEAAmE,CAAC,CAAC;IACrJ,CAAC;IAED,MAAM,cAAc,GAAkE;QACpF,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;QAC1E,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,OAAO;QACP,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG;QAChB,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAuE,EAAE,CAAC;KACvI,CAAC;IAEF,yBAAiB,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IAE3C,IAAI,WAAW,EAAE,CAAC;QAChB,IAAA,iCAAyB,EAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,KAAK,UAAU,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC7G,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,wBAAwB;IACtC,OAAO,yBAAiB,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;AACpE,CAAC;AAED;;;;GAIG;AACH,SAAgB,gBAAgB;IAC9B,OAAO,yBAAiB,CAAC,GAAG,EAAE,CAAC;AACjC,CAAC;AAED;;;;;GAKG;AACH,SAAgB,gBAAgB,CAAC,EAAU;IACzC,OAAO,yBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,yBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACzF,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,oBAAoB,CAAC,EAAU;IAC7C,OAAO,YAAY,CAAC,yBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,YAAY,CAAC,IAAwE;IAC5F,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,CAAiC,CAAC;AAChG,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,oBAAoB,CAClC,MAAsE,EACtE,IAAY;IAEZ,OAAO,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,8BAA8B,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC;AAClI,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,sBAAsB,CAAC,QAAiD;IACtF,OAAO,yBAAiB,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;AACjD,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,oBAAoB,CAClC,MAAoC,EACpC,QAA+B,EAC/B,OAA0C;IAE1C,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7D,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAClI,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,iBAAiB,CAAC,MAAoC,EAAE,QAA+B;IACrG,IAAI,MAAM,CAAC,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACtD,OAAO,EAAE,MAAM,EAAE,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;AACvF,CAAC"}

package/dist/storage/handlers/storage-cleanup.handler.d.ts

@@ -0,0 +1,59 @@
+import { OnModuleInit } from '@nestjs/common';
+import { JobHandler } from '../../jobs/index';
+import { JobHandlerRegistry } from '../../jobs/index';
+import { StorageProvider } from '../providers';
+import { type StorageSystemData } from '../ports';
+import type { Job } from '../../jobs/index';
+import { type ResolvedStorageModuleOptions } from '../storage.options';
+/**
+ * The handler key, and therefore the `Job.type` every stale-upload sweep row
+ * carries. PERMANENT — rows outlive handlers. Exported so the scheduling task
+ * asks about the same string it queues.
+ *
+ * @stability experimental
+ */
+export declare const STORAGE_CLEANUP_TYPE = "storage.cleanup.stale-uploads";
+/**
+ * What one sweep did. Returned so a test can assert the split directly.
+ *
+ * @stability experimental
+ */
+export interface StaleUploadCleanupResult {
+    /** Rows removed, with any multipart upload aborted first. */
+    removed: number;
+    /** Candidates that could not be reclaimed. Retried on the next sweep. */
+    failed: number;
+}
+/**
+ * The server-only `storage.cleanup.stale-uploads` job: aborts and deletes every upload unfinished for longer than the stale-upload threshold, across organizations (bypass client, reason `purge`).
+ *
+ * @stability experimental
+ */
+export declare class StorageCleanupHandler implements JobHandler, OnModuleInit {
+    private readonly registry;
+    private readonly prisma;
+    private readonly storageProvider;
+    private readonly options?;
+    private readonly logger;
+    readonly type = "storage.cleanup.stale-uploads";
+    readonly label = "Stale upload cleanup";
+    constructor(registry: JobHandlerRegistry, prisma: StorageSystemData, storageProvider: StorageProvider, options?: ResolvedStorageModuleOptions | undefined);
+    /** Self-registration — the only wiring a handler needs. */
+    onModuleInit(): void;
+    /**
+     * Aborts and deletes every upload that has been unfinished for longer than
+     * `CLEANUP_AGE_HOURS` (or `StorageModule.forRoot({ staleUploadHours })`).
+     *
+     * Throws only when EVERY candidate failed — see the file header for why that
+     * is the line between "one wedged upload" and "the bucket is unreachable".
+     */
+    process(job: Job): Promise<void>;
+    /**
+     * The sweep itself.
+     *
+     * Exposed as its own method so a test can drive it and read the split without
+     * going through `process`'s throw rule.
+     */
+    sweep(): Promise<StaleUploadCleanupResult>;
+}
+//# sourceMappingURL=storage-cleanup.handler.d.ts.map

package/dist/storage/handlers/storage-cleanup.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-cleanup.handler.d.ts","sourceRoot":"","sources":["../../../src/storage/handlers/storage-cleanup.handler.ts"],"names":[],"mappings":"AA6CA,OAAO,EAA8B,YAAY,EAAY,MAAM,gBAAgB,CAAC;AAEpF,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAoB,eAAe,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EAAuB,KAAK,iBAAiB,EAAE,MAAM,UAAU,CAAC;AACvE,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAA+C,KAAK,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAEpH;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,kCAAkC,CAAC;AAapE;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,6DAA6D;IAC7D,OAAO,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,qBACa,qBAAsB,YAAW,UAAU,EAAE,YAAY;IAQlE,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAGI,OAAO,CAAC,QAAQ,CAAC,MAAM;IAEpD,OAAO,CAAC,QAAQ,CAAC,eAAe;IAKhC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;IAjB3B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;IAEjE,QAAQ,CAAC,IAAI,mCAAwB;IAErC,QAAQ,CAAC,KAAK,0BAA0B;gBAGrB,QAAQ,EAAE,kBAAkB,EAGC,MAAM,EAAE,iBAAiB,EAEtD,eAAe,EAAE,eAAe,EAKhC,OAAO,CAAC,EAAE,4BAA4B,YAAA;IAGzD,2DAA2D;IAC3D,YAAY,IAAI,IAAI;IAIpB;;;;;;OAMG;IACG,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IAwBtC;;;;;OAKG;IACG,KAAK,IAAI,OAAO,CAAC,wBAAwB,CAAC;CAmDjD"}

package/dist/storage/handlers/storage-cleanup.handler.js

@@ -0,0 +1,185 @@
+"use strict";
+// =============================================================================
+// `storage.cleanup.stale-uploads` — abandoned uploads, as a queue job
+// (issue #353, epic #345)
+// =============================================================================
+//
+// An upload that was initialised and never finished leaves two things behind: a
+// `storage_objects` row stuck at `pending`/`uploading`, and — for a multipart
+// upload — PARTS ALREADY BILLED IN THE BUCKET that no object references. The
+// second is why this sweep is not merely tidiness: S3-compatible providers
+// charge for uncompleted multipart parts indefinitely, and nothing else in this
+// application ever aborts them.
+//
+// The logic below is `storage/tasks/storage-cleanup.task.ts`'s, moved verbatim
+// apart from its logging. WHAT CHANGED IS THE EXECUTOR. Inline in a 4am cron
+// this loop made one network round trip per stale upload, on the scheduler's
+// thread, with no timeout and no retry, and a deployment that had accumulated a
+// thousand abandoned uploads would spend as long as that took blocking nothing
+// visible and appearing nowhere. As a job it holds a worker slot, is bounded by
+// `JOBS_JOB_TIMEOUT_MS`, and leaves a row with a duration.
+//
+// -----------------------------------------------------------------------------
+// ⚠ PER-UPLOAD FAILURES ARE COUNTED, NOT THROWN — AND THE JOB STILL FAILS IF
+// EVERY ONE OF THEM DID
+// -----------------------------------------------------------------------------
+//
+// The loop swallows one upload's failure and moves to the next, exactly as the
+// cron did, because one wedged multipart upload must not stop the other 999
+// from being reclaimed. But a handler that ALWAYS returns normally is a handler
+// whose `succeeded` row means nothing (`job-handler.interface.ts`: "a job that
+// silently reports success is far worse than one that retries something it did
+// not need to"). So the two are reconciled: partial failure is reported in the
+// log and the job succeeds; TOTAL failure — every candidate errored, which is
+// what a misconfigured or unreachable bucket looks like — throws, and the queue
+// retries it with backoff.
+//
+// SERVER-ONLY BY DERIVATION: neither `nodeResultSchema` nor `persistNodeResult`.
+// It reads this application's tables and issues deletes against them as it
+// goes, which is the shape `job-handler.interface.ts` names as server-only by
+// nature — there is no result for a remote machine to compute and post back.
+//
+// NO PROFILE: the work is idempotent (a row already deleted is simply not found
+// next time) and short, so the deployment-wide ceiling and attempt budget are
+// right for it.
+// =============================================================================
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var StorageCleanupHandler_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.StorageCleanupHandler = exports.STORAGE_CLEANUP_TYPE = void 0;
+const common_1 = require("@nestjs/common");
+const index_1 = require("../../jobs/index");
+const providers_1 = require("../providers");
+const ports_1 = require("../ports");
+const storage_options_1 = require("../storage.options");
+/**
+ * The handler key, and therefore the `Job.type` every stale-upload sweep row
+ * carries. PERMANENT — rows outlive handlers. Exported so the scheduling task
+ * asks about the same string it queues.
+ *
+ * @stability experimental
+ */
+exports.STORAGE_CLEANUP_TYPE = 'storage.cleanup.stale-uploads';
+/**
+ * How long an unfinished upload is left alone before it is considered
+ * abandoned.
+ *
+ * TWENTY-FOUR HOURS, carried over from the cron this handler replaces. It is a
+ * generous ceiling on a resumable upload rather than a guess: a client
+ * genuinely still uploading refreshes the row, and one that stopped a day ago
+ * is not coming back.
+ */
+const CLEANUP_AGE_HOURS = storage_options_1.DEFAULT_STALE_UPLOAD_HOURS;
+/**
+ * The server-only `storage.cleanup.stale-uploads` job: aborts and deletes every upload unfinished for longer than the stale-upload threshold, across organizations (bypass client, reason `purge`).
+ *
+ * @stability experimental
+ */
+let StorageCleanupHandler = StorageCleanupHandler_1 = class StorageCleanupHandler {
+    registry;
+    prisma;
+    storageProvider;
+    options;
+    logger = new common_1.Logger(StorageCleanupHandler_1.name);
+    type = exports.STORAGE_CLEANUP_TYPE;
+    label = 'Stale upload cleanup';
+    constructor(registry, prisma, storageProvider, options) {
+        this.registry = registry;
+        this.prisma = prisma;
+        this.storageProvider = storageProvider;
+        this.options = options;
+    }
+    /** Self-registration — the only wiring a handler needs. */
+    onModuleInit() {
+        this.registry.register(this);
+    }
+    /**
+     * Aborts and deletes every upload that has been unfinished for longer than
+     * `CLEANUP_AGE_HOURS` (or `StorageModule.forRoot({ staleUploadHours })`).
+     *
+     * Throws only when EVERY candidate failed — see the file header for why that
+     * is the line between "one wedged upload" and "the bucket is unreachable".
+     */
+    async process(job) {
+        const { removed, failed } = await this.sweep();
+        if (removed === 0 && failed === 0) {
+            this.logger.log(`Storage cleanup job ${job.id}: no stale uploads to clean up`);
+            return;
+        }
+        this.logger.log(`Storage cleanup job ${job.id}: ${removed} stale upload(s) removed, ${failed} failed`);
+        if (removed === 0 && failed > 0) {
+            // EVERY candidate failed. That is not "a wedged upload", it is a storage
+            // provider this process cannot talk to, and the queue's backoff is a
+            // better response than waiting until 4am tomorrow.
+            throw new Error(`Every one of the ${failed} stale upload(s) failed to clean up; the storage ` +
+                'provider is most likely unreachable or misconfigured');
+        }
+    }
+    /**
+     * The sweep itself.
+     *
+     * Exposed as its own method so a test can drive it and read the split without
+     * going through `process`'s throw rule.
+     */
+    async sweep() {
+        const cleanupBefore = new Date();
+        cleanupBefore.setHours(cleanupBefore.getHours() - (this.options?.staleUploadHours ?? CLEANUP_AGE_HOURS));
+        const db = this.prisma.asSystem('purge');
+        const staleUploads = await db.storageObject.findMany({
+            where: {
+                status: { in: ['pending', 'uploading'] },
+                createdAt: { lt: cleanupBefore },
+            },
+            select: {
+                id: true,
+                storageKey: true,
+                s3UploadId: true,
+            },
+        });
+        let removed = 0;
+        let failed = 0;
+        for (const upload of staleUploads) {
+            try {
+                // ⚠ ABORT BEFORE DELETE, NEVER AFTER. The row is the only record of
+                // `s3UploadId`, so deleting it first and then failing to abort leaves
+                // billed multipart parts that nothing in this application can ever name
+                // again. With this order, a failed abort leaves a row an operator (or
+                // the next sweep) can retry.
+                if (upload.s3UploadId) {
+                    await this.storageProvider.abortMultipartUpload(upload.storageKey, upload.s3UploadId);
+                }
+                // Chunks cascade.
+                await db.storageObject.delete({ where: { id: upload.id } });
+                removed++;
+                this.logger.debug(`Cleaned up stale upload: ${upload.id}`);
+            }
+            catch (error) {
+                failed++;
+                this.logger.error(`Failed to clean up upload ${upload.id}: ` +
+                    `${error instanceof Error ? error.message : 'Unknown error'}`);
+            }
+        }
+        return { removed, failed };
+    }
+};
+exports.StorageCleanupHandler = StorageCleanupHandler;
+exports.StorageCleanupHandler = StorageCleanupHandler = StorageCleanupHandler_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(1, (0, common_1.Inject)(ports_1.STORAGE_SYSTEM_DATA)),
+    __param(2, (0, common_1.Inject)(providers_1.STORAGE_PROVIDER)),
+    __param(3, (0, common_1.Optional)()),
+    __param(3, (0, common_1.Inject)(storage_options_1.STORAGE_OPTIONS)),
+    __metadata("design:paramtypes", [index_1.JobHandlerRegistry, Object, Object, Object])
+], StorageCleanupHandler);
+//# sourceMappingURL=storage-cleanup.handler.js.map

package/dist/storage/handlers/storage-cleanup.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-cleanup.handler.js","sourceRoot":"","sources":["../../../src/storage/handlers/storage-cleanup.handler.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,sEAAsE;AACtE,0BAA0B;AAC1B,gFAAgF;AAChF,EAAE;AACF,gFAAgF;AAChF,8EAA8E;AAC9E,6EAA6E;AAC7E,2EAA2E;AAC3E,gFAAgF;AAChF,gCAAgC;AAChC,EAAE;AACF,+EAA+E;AAC/E,6EAA6E;AAC7E,6EAA6E;AAC7E,gFAAgF;AAChF,+EAA+E;AAC/E,gFAAgF;AAChF,2DAA2D;AAC3D,EAAE;AACF,gFAAgF;AAChF,6EAA6E;AAC7E,wBAAwB;AACxB,gFAAgF;AAChF,EAAE;AACF,+EAA+E;AAC/E,4EAA4E;AAC5E,gFAAgF;AAChF,+EAA+E;AAC/E,+EAA+E;AAC/E,+EAA+E;AAC/E,8EAA8E;AAC9E,gFAAgF;AAChF,2BAA2B;AAC3B,EAAE;AACF,iFAAiF;AACjF,2EAA2E;AAC3E,8EAA8E;AAC9E,6EAA6E;AAC7E,EAAE;AACF,gFAAgF;AAChF,8EAA8E;AAC9E,gBAAgB;AAChB,gFAAgF;;;;;;;;;;;;;;;;AAEhF,2CAAoF;AAGpF,4CAAsD;AACtD,4CAAiE;AACjE,oCAAuE;AAEvE,wDAAoH;AAEpH;;;;;;GAMG;AACU,QAAA,oBAAoB,GAAG,+BAA+B,CAAC;AAEpE;;;;;;;;GAQG;AACH,MAAM,iBAAiB,GAAG,4CAA0B,CAAC;AAcrD;;;;GAIG;AAEI,IAAM,qBAAqB,6BAA3B,MAAM,qBAAqB;IAQb;IAG6B;IAE7B;IAKA;IAjBF,MAAM,GAAG,IAAI,eAAM,CAAC,uBAAqB,CAAC,IAAI,CAAC,CAAC;IAExD,IAAI,GAAG,4BAAoB,CAAC;IAE5B,KAAK,GAAG,sBAAsB,CAAC;IAExC,YACmB,QAA4B,EAGC,MAAyB,EAEtD,eAAgC,EAKhC,OAAsC;QAVtC,aAAQ,GAAR,QAAQ,CAAoB;QAGC,WAAM,GAAN,MAAM,CAAmB;QAEtD,oBAAe,GAAf,eAAe,CAAiB;QAKhC,YAAO,GAAP,OAAO,CAA+B;IACtD,CAAC;IAEJ,2DAA2D;IAC3D,YAAY;QACV,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CAAC,GAAQ;QACpB,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAE/C,IAAI,OAAO,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,uBAAuB,GAAG,CAAC,EAAE,gCAAgC,CAAC,CAAC;YAE/E,OAAO;QACT,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,uBAAuB,GAAG,CAAC,EAAE,KAAK,OAAO,6BAA6B,MAAM,SAAS,CACtF,CAAC;QAEF,IAAI,OAAO,KAAK,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,yEAAyE;YACzE,qEAAqE;YACrE,mDAAmD;YACnD,MAAM,IAAI,KAAK,CACb,oBAAoB,MAAM,mDAAmD;gBAC3E,sDAAsD,CACzD,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,KAAK;QACT,MAAM,aAAa,GAAG,IAAI,IAAI,EAAE,CAAC;QACjC,aAAa,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,IAAI,iBAAiB,CAAC,CAAC,CAAC;QAEzG,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAEzC,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC;YACnD,KAAK,EAAE;gBACL,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE;gBACxC,SAAS,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE;aACjC;YACD,MAAM,EAAE;gBACN,EAAE,EAAE,IAAI;gBACR,UAAU,EAAE,IAAI;gBAChB,UAAU,EAAE,IAAI;aACjB;SACF,CAAC,CAAC;QAEH,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,MAAM,GAAG,CAAC,CAAC;QAEf,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,oEAAoE;gBACpE,sEAAsE;gBACtE,wEAAwE;gBACxE,sEAAsE;gBACtE,6BAA6B;gBAC7B,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;oBACtB,MAAM,IAAI,CAAC,eAAe,CAAC,oBAAoB,CAC7C,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,UAAU,CAClB,CAAC;gBACJ,CAAC;gBAED,kBAAkB;gBAClB,MAAM,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;gBAE5D,OAAO,EAAE,CAAC;gBACV,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,EAAE,CAAC;gBACT,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,6BAA6B,MAAM,CAAC,EAAE,IAAI;oBACxC,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAChE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAC7B,CAAC;CACF,CAAA;AAlHY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,mBAAU,GAAE;IAYR,WAAA,IAAA,eAAM,EAAC,2BAAmB,CAAC,CAAA;IAC3B,WAAA,IAAA,eAAM,EAAC,4BAAgB,CAAC,CAAA;IAIxB,WAAA,IAAA,iBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,eAAM,EAAC,iCAAe,CAAC,CAAA;qCATG,0BAAkB;GARpC,qBAAqB,CAkHjC"}

package/dist/storage/handlers/storage-object-process.handler.d.ts

@@ -0,0 +1,47 @@
+import { OnModuleInit } from '@nestjs/common';
+import { type JobSettledEvent } from '../../jobs/index';
+import { JobHandler } from '../../jobs/index';
+import { JobHandlerRegistry } from '../../jobs/index';
+import { ObjectProcessingService } from '../processing/object-processing.service';
+import type { Job } from '../../jobs/index';
+import type { StoragePrisma } from '../data/storage-db';
+/**
+ * The handler key, and therefore the `Job.type` every object-processing row
+ * carries. PERMANENT — rows outlive handlers. Exported so `ObjectsService`
+ * enqueues the same string this handler registers.
+ *
+ * @stability experimental
+ */
+export declare const STORAGE_OBJECT_PROCESS_TYPE = "storage.object.process";
+/**
+ * The server-only `storage.object.process` job: runs the registered processors for one uploaded object, in its organization, and marks it `ready` or `failed`; a job that gives up marks a still-`processing` object `failed`.
+ *
+ * @stability experimental
+ */
+export declare class StorageObjectProcessHandler implements JobHandler, OnModuleInit {
+    private readonly registry;
+    private readonly prisma;
+    private readonly processing;
+    private readonly logger;
+    readonly type = "storage.object.process";
+    readonly label = "Object processing";
+    constructor(registry: JobHandlerRegistry, prisma: StoragePrisma, processing: ObjectProcessingService);
+    /** Self-registration — the only wiring a handler needs. */
+    onModuleInit(): void;
+    /**
+     * Runs the applicable processors against the job's object and writes the
+     * outcome to its row. Throws (so the queue retries) only for failures
+     * outside the processors — see the file header.
+     */
+    process(job: Job): Promise<void>;
+    /**
+     * A job settled. If it was one of ours and it GAVE UP, fail its object when
+     * the object still reads `processing`, so it never stays there for ever.
+     *
+     * One bounded row (see `ObjectProcessingService.markAbandoned`), and it
+     * never throws back into the emitter: a listener must not affect the job row
+     * that was just written.
+     */
+    onJobSettled(event: JobSettledEvent): Promise<void>;
+}
+//# sourceMappingURL=storage-object-process.handler.d.ts.map

package/dist/storage/handlers/storage-object-process.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-object-process.handler.d.ts","sourceRoot":"","sources":["../../../src/storage/handlers/storage-object-process.handler.ts"],"names":[],"mappings":"AAiDA,OAAO,EAAsB,YAAY,EAAU,MAAM,gBAAgB,CAAC;AAG1E,OAAO,EAAqB,KAAK,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAEtD,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAOlF,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,EAAiB,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGvE;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,2BAA2B,CAAC;AAQpE;;;;GAIG;AACH,qBACa,2BAA4B,YAAW,UAAU,EAAE,YAAY;IAQxE,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACA,OAAO,CAAC,QAAQ,CAAC,MAAM;IAChD,OAAO,CAAC,QAAQ,CAAC,UAAU;IAT7B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgD;IAEvE,QAAQ,CAAC,IAAI,4BAA+B;IAE5C,QAAQ,CAAC,KAAK,uBAAuB;gBAGlB,QAAQ,EAAE,kBAAkB,EACH,MAAM,EAAE,aAAa,EAC9C,UAAU,EAAE,uBAAuB;IAGtD,2DAA2D;IAC3D,YAAY,IAAI,IAAI;IAIpB;;;;OAIG;IACG,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IA4BtC;;;;;;;OAOG;IAEG,YAAY,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;CAoB1D"}