@marinoscar/platform-api 0.0.0-stage → 0.1.0-next.4

package/dist/storage/processing/object-processor.registry.js

@@ -0,0 +1,100 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var ObjectProcessorRegistry_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ObjectProcessorRegistry = void 0;
+const common_1 = require("@nestjs/common");
+// =============================================================================
+// ObjectProcessorRegistry — where post-upload processors register (issue #736)
+// =============================================================================
+//
+// Replaces the optional `OBJECT_PROCESSOR` injection (#520), which took one
+// provider or an array under one token: an app could only add a processor by
+// editing the module that provided the token, and `example-metadata.processor.ts`
+// was never wired at all. Processors now self-register from their own
+// `onModuleInit`, exactly as job handlers do with `JobHandlerRegistry` and
+// Doctor checks with `DoctorCheckRegistry`.
+//
+// ⚠ REGISTRATION IS AN `onModuleInit` CONCERN, and reading it happens later:
+// `ObjectProcessingService.appliesTo` is asked when an upload completes and
+// `run` when a `storage.object.process` job runs, both long after every
+// module initialised. Nothing reads the registry at construction time.
+//
+// Priority order and the `canProcess` contract are unchanged: lower `priority`
+// runs first; `canProcess` is a synchronous, I/O-free predicate over the row.
+// =============================================================================
+/**
+ * The post-upload processors of this app. Inject it and call
+ * {@link ObjectProcessorRegistry.register} from your processor's
+ * `onModuleInit`; `ObjectProcessingService` reads it when an upload completes
+ * (does any processor want this object?) and when the
+ * `storage.object.process` job runs.
+ *
+ * Provided and exported by `ObjectProcessingModule` (which `StorageModule`
+ * imports); a processor's module imports `ObjectProcessingModule`.
+ *
+ * @example
+ * ```ts
+ * @Injectable()
+ * export class ExampleMetadataProcessor implements ObjectProcessor, OnModuleInit {
+ *   constructor(private readonly registry: ObjectProcessorRegistry) {}
+ *   onModuleInit() { this.registry.register(this); }
+ *   // name, priority, canProcess, process ...
+ * }
+ * ```
+ *
+ * @extensionPoint registry
+ * @stability experimental
+ */
+let ObjectProcessorRegistry = ObjectProcessorRegistry_1 = class ObjectProcessorRegistry {
+    logger = new common_1.Logger(ObjectProcessorRegistry_1.name);
+    processors = new Map();
+    /**
+     * Registers a processor. A second processor with the same `name` replaces
+     * the first, with a warning (the last registration wins, as with job
+     * handlers).
+     *
+     * @param processor - the processor; its `name` must be non-empty.
+     * @throws Error when `processor.name` is empty or `priority` is not a finite number.
+     */
+    register(processor) {
+        if (typeof processor.name !== 'string' || processor.name.trim() === '') {
+            throw new Error('ObjectProcessorRegistry.register(): a processor needs a non-empty name');
+        }
+        if (typeof processor.priority !== 'number' || !Number.isFinite(processor.priority)) {
+            throw new Error(`ObjectProcessorRegistry.register(): processor "${processor.name}" needs a finite priority`);
+        }
+        const existing = this.processors.get(processor.name);
+        if (existing && existing !== processor) {
+            this.logger.warn(`Duplicate object processor "${processor.name}": ${existing.constructor.name} is being replaced by ` +
+                `${processor.constructor.name}. The last registration wins.`);
+        }
+        this.processors.set(processor.name, processor);
+    }
+    /**
+     * Every registered processor, lowest `priority` first (ties: registration order).
+     *
+     * @returns a fresh array.
+     */
+    list() {
+        return [...this.processors.values()].sort((a, b) => a.priority - b.priority);
+    }
+    /**
+     * The registered names, in priority order.
+     *
+     * @returns the names.
+     */
+    names() {
+        return this.list().map((processor) => processor.name);
+    }
+};
+exports.ObjectProcessorRegistry = ObjectProcessorRegistry;
+exports.ObjectProcessorRegistry = ObjectProcessorRegistry = ObjectProcessorRegistry_1 = __decorate([
+    (0, common_1.Injectable)()
+], ObjectProcessorRegistry);
+//# sourceMappingURL=object-processor.registry.js.map

package/dist/storage/processing/object-processor.registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"object-processor.registry.js","sourceRoot":"","sources":["../../../src/storage/processing/object-processor.registry.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAAoD;AAIpD,gFAAgF;AAChF,+EAA+E;AAC/E,gFAAgF;AAChF,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAC7E,kFAAkF;AAClF,sEAAsE;AACtE,2EAA2E;AAC3E,4CAA4C;AAC5C,EAAE;AACF,6EAA6E;AAC7E,4EAA4E;AAC5E,wEAAwE;AACxE,uEAAuE;AACvE,EAAE;AACF,+EAA+E;AAC/E,8EAA8E;AAC9E,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEI,IAAM,uBAAuB,+BAA7B,MAAM,uBAAuB;IACjB,MAAM,GAAG,IAAI,eAAM,CAAC,yBAAuB,CAAC,IAAI,CAAC,CAAC;IAClD,UAAU,GAAG,IAAI,GAAG,EAA2B,CAAC;IAEjE;;;;;;;OAOG;IACH,QAAQ,CAAC,SAA0B;QACjC,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACvE,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,OAAO,SAAS,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnF,MAAM,IAAI,KAAK,CAAC,kDAAkD,SAAS,CAAC,IAAI,2BAA2B,CAAC,CAAC;QAC/G,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,QAAQ,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACvC,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,+BAA+B,SAAS,CAAC,IAAI,MAAM,QAAQ,CAAC,WAAW,CAAC,IAAI,wBAAwB;gBAClG,GAAG,SAAS,CAAC,WAAW,CAAC,IAAI,+BAA+B,CAC/D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACjD,CAAC;IAED;;;;OAIG;IACH,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC/E,CAAC;IAED;;;;OAIG;IACH,KAAK;QACH,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACxD,CAAC;CACF,CAAA;AA/CY,0DAAuB;kCAAvB,uBAAuB;IADnC,IAAA,mBAAU,GAAE;GACA,uBAAuB,CA+CnC"}

package/dist/storage/processing/processing-metadata.d.ts

@@ -0,0 +1,20 @@
+import type { StorageInputJsonValue, StorageJsonValue } from '../data/storage-db';
+/**
+ * The metadata a processed object carries: whatever was there before, plus the
+ * processing record under `_processing` and the moment it was written under
+ * `_processedAt`, plus `_processingFailed: true` when it ended badly.
+ *
+ * ONE builder for every writer of a processed row (#520): `ObjectsService`
+ * marking an object with no applicable processor `ready` at upload time,
+ * `ObjectProcessingService` after the processors ran, and the processing job's
+ * give-up path. Three hand-rolled copies of this shape would be three places
+ * for a row's metadata to disagree depending on which path settled it.
+ *
+ * @stability experimental
+ */
+export declare function buildProcessedMetadata(existing: StorageJsonValue | null | undefined, processing: Record<string, unknown>, options?: {
+    failed?: boolean;
+    error?: string;
+    processedAt?: Date;
+}): StorageInputJsonValue;
+//# sourceMappingURL=processing-metadata.d.ts.map

package/dist/storage/processing/processing-metadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"processing-metadata.d.ts","sourceRoot":"","sources":["../../../src/storage/processing/processing-metadata.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAClF;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,GAAG,SAAS,EAC7C,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACnC,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,IAAI,CAAA;CAAO,GACrE,qBAAqB,CAuBvB"}

package/dist/storage/processing/processing-metadata.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildProcessedMetadata = buildProcessedMetadata;
+/**
+ * The metadata a processed object carries: whatever was there before, plus the
+ * processing record under `_processing` and the moment it was written under
+ * `_processedAt`, plus `_processingFailed: true` when it ended badly.
+ *
+ * ONE builder for every writer of a processed row (#520): `ObjectsService`
+ * marking an object with no applicable processor `ready` at upload time,
+ * `ObjectProcessingService` after the processors ran, and the processing job's
+ * give-up path. Three hand-rolled copies of this shape would be three places
+ * for a row's metadata to disagree depending on which path settled it.
+ *
+ * @stability experimental
+ */
+function buildProcessedMetadata(existing, processing, options = {}) {
+    const base = existing && typeof existing === 'object' && !Array.isArray(existing)
+        ? existing
+        : {};
+    // A previous run's failure markers are dropped before this run's outcome is
+    // written. Before #520 an object was processed exactly once, so they could
+    // never be present; now a job can be re-run from the admin Jobs page, and a
+    // row that succeeds on the re-run must not keep saying it failed.
+    const { _processingFailed: _previousFailed, _processingError: _previousError, ...rest } = base;
+    return {
+        ...rest,
+        _processing: processing,
+        ...(options.failed ? { _processingFailed: true } : {}),
+        ...(options.failed && options.error ? { _processingError: options.error } : {}),
+        _processedAt: (options.processedAt ?? new Date()).toISOString(),
+    };
+}
+//# sourceMappingURL=processing-metadata.js.map

package/dist/storage/processing/processing-metadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"processing-metadata.js","sourceRoot":"","sources":["../../../src/storage/processing/processing-metadata.ts"],"names":[],"mappings":";;AAeA,wDA2BC;AAxCD;;;;;;;;;;;;GAYG;AACH,SAAgB,sBAAsB,CACpC,QAA6C,EAC7C,UAAmC,EACnC,UAAoE,EAAE;IAEtE,MAAM,IAAI,GACR,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAClE,CAAC,CAAE,QAAoC;QACvC,CAAC,CAAC,EAAE,CAAC;IAET,4EAA4E;IAC5E,2EAA2E;IAC3E,4EAA4E;IAC5E,kEAAkE;IAClE,MAAM,EACJ,iBAAiB,EAAE,eAAe,EAClC,gBAAgB,EAAE,cAAc,EAChC,GAAG,IAAI,EACR,GAAG,IAAI,CAAC;IAET,OAAO;QACL,GAAG,IAAI;QACP,WAAW,EAAE,UAAU;QACvB,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,YAAY,EAAE,CAAC,OAAO,CAAC,WAAW,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;KACvC,CAAC;AAC7B,CAAC"}

package/dist/storage/profile-image/avatar.controller.d.ts

@@ -0,0 +1,24 @@
+import { FastifyReply } from 'fastify';
+import { AvatarService } from './avatar.service';
+/**
+ * Public, same-origin avatar route (#367).
+ *
+ * Its own controller, deliberately NOT a method on `UsersController`: that
+ * controller's routes are admin-gated, and a public route beside them is one
+ * decorator edit away from being accidentally locked (or the others unlocked).
+ * `/users/:userId/avatar/:objectId` cannot collide with `/users/:id` — the
+ * segment counts differ.
+ *
+ * No `@Auth()`, so no bearer security is published for it. The global
+ * MaintenanceGuard still applies, exactly as it does to other public routes.
+ *
+ * @internal
+ *
+ * @stability experimental
+ */
+export declare class AvatarController {
+    private readonly avatars;
+    constructor(avatars: AvatarService);
+    getAvatar(userId: string, objectId: string, reply: FastifyReply): Promise<never>;
+}
+//# sourceMappingURL=avatar.controller.d.ts.map

package/dist/storage/profile-image/avatar.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"avatar.controller.d.ts","sourceRoot":"","sources":["../../../src/storage/profile-image/avatar.controller.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAGvC,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD;;;;;;;;;;;;;;;GAeG;AACH,qBAEa,gBAAgB;IACf,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,aAAa;IAsB7C,SAAS,CACI,MAAM,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAC5B,KAAK,EAAE,YAAY;CAmB7B"}

package/dist/storage/profile-image/avatar.controller.js

@@ -0,0 +1,90 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AvatarController = void 0;
+const common_1 = require("@nestjs/common");
+const swagger_1 = require("@nestjs/swagger");
+const index_1 = require("../../identity/index");
+const avatar_service_1 = require("./avatar.service");
+/**
+ * Public, same-origin avatar route (#367).
+ *
+ * Its own controller, deliberately NOT a method on `UsersController`: that
+ * controller's routes are admin-gated, and a public route beside them is one
+ * decorator edit away from being accidentally locked (or the others unlocked).
+ * `/users/:userId/avatar/:objectId` cannot collide with `/users/:id` — the
+ * segment counts differ.
+ *
+ * No `@Auth()`, so no bearer security is published for it. The global
+ * MaintenanceGuard still applies, exactly as it does to other public routes.
+ *
+ * @internal
+ *
+ * @stability experimental
+ */
+let AvatarController = class AvatarController {
+    avatars;
+    constructor(avatars) {
+        this.avatars = avatars;
+    }
+    async getAvatar(userId, objectId, reply) {
+        const avatar = await this.avatars.open(userId, objectId);
+        reply
+            .status(200)
+            // The stored type was determined from magic bytes at upload time.
+            .header('Content-Type', avatar.mimeType)
+            .header('X-Content-Type-Options', 'nosniff')
+            .header('Content-Disposition', 'inline')
+            .header('Content-Security-Policy', "default-src 'none'; sandbox")
+            .header('Cache-Control', 'private, max-age=86400');
+        if (avatar.size > BigInt(0)) {
+            reply.header('Content-Length', avatar.size.toString());
+        }
+        return reply.send(avatar.stream);
+    }
+};
+exports.AvatarController = AvatarController;
+__decorate([
+    (0, common_1.Get)(':userId/avatar/:objectId'),
+    (0, index_1.Public)(),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Get a user\'s uploaded profile picture (public)',
+        description: 'Serves the picture only while it is the user\'s selected profile picture ' +
+            '(`profile.imageSource: "upload"` and `profile.imageObjectId` equal to `objectId`). ' +
+            'Every other case is an identical 404. No authentication, so it works in `<img src>`.',
+    }),
+    (0, swagger_1.ApiParam)({ name: 'userId', type: String, format: 'uuid' }),
+    (0, swagger_1.ApiParam)({ name: 'objectId', type: String, format: 'uuid' }),
+    (0, swagger_1.ApiProduces)('image/jpeg', 'image/png', 'image/gif', 'image/webp'),
+    (0, swagger_1.ApiResponse)({
+        status: 200,
+        description: 'Image bytes',
+        content: {
+            'image/*': { schema: { type: 'string', format: 'binary' } },
+        },
+    }),
+    (0, swagger_1.ApiResponse)({ status: 404, description: 'Not found' }),
+    __param(0, (0, common_1.Param)('userId')),
+    __param(1, (0, common_1.Param)('objectId')),
+    __param(2, (0, common_1.Res)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object]),
+    __metadata("design:returntype", Promise)
+], AvatarController.prototype, "getAvatar", null);
+exports.AvatarController = AvatarController = __decorate([
+    (0, swagger_1.ApiTags)('Users'),
+    (0, common_1.Controller)('users'),
+    __metadata("design:paramtypes", [avatar_service_1.AvatarService])
+], AvatarController);
+//# sourceMappingURL=avatar.controller.js.map

package/dist/storage/profile-image/avatar.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"avatar.controller.js","sourceRoot":"","sources":["../../../src/storage/profile-image/avatar.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA6D;AAC7D,6CAMyB;AAGzB,gDAA8C;AAC9C,qDAAiD;AAEjD;;;;;;;;;;;;;;;GAeG;AAGI,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IACE;IAA7B,YAA6B,OAAsB;QAAtB,YAAO,GAAP,OAAO,CAAe;IAAG,CAAC;IAsBjD,AAAN,KAAK,CAAC,SAAS,CACI,MAAc,EACZ,QAAgB,EAC5B,KAAmB;QAE1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAEzD,KAAK;aACF,MAAM,CAAC,GAAG,CAAC;YACZ,kEAAkE;aACjE,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC;aACvC,MAAM,CAAC,wBAAwB,EAAE,SAAS,CAAC;aAC3C,MAAM,CAAC,qBAAqB,EAAE,QAAQ,CAAC;aACvC,MAAM,CAAC,yBAAyB,EAAE,6BAA6B,CAAC;aAChE,MAAM,CAAC,eAAe,EAAE,wBAAwB,CAAC,CAAC;QAErD,IAAI,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5B,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;CACF,CAAA;AA7CY,4CAAgB;AAuBrB;IApBL,IAAA,YAAG,EAAC,0BAA0B,CAAC;IAC/B,IAAA,cAAM,GAAE;IACR,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,iDAAiD;QAC1D,WAAW,EACT,2EAA2E;YAC3E,qFAAqF;YACrF,sFAAsF;KACzF,CAAC;IACD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC1D,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC5D,IAAA,qBAAW,EAAC,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,CAAC;IACjE,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,aAAa;QAC1B,OAAO,EAAE;YACP,SAAS,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;SAC5D;KACF,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;IAEpD,WAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;IACf,WAAA,IAAA,cAAK,EAAC,UAAU,CAAC,CAAA;IACjB,WAAA,IAAA,YAAG,GAAE,CAAA;;;;iDAkBP;2BA5CU,gBAAgB;IAF5B,IAAA,iBAAO,EAAC,OAAO,CAAC;IAChB,IAAA,mBAAU,EAAC,OAAO,CAAC;qCAEoB,8BAAa;GADxC,gBAAgB,CA6C5B"}

package/dist/storage/profile-image/avatar.service.d.ts

@@ -0,0 +1,60 @@
+import { Readable } from 'node:stream';
+import type { StorageProvider } from '../providers/storage-provider.interface';
+import { type StorageSystemData } from '../ports';
+import type { StoragePrisma } from '../data/storage-db';
+/**
+ * A stored avatar, opened for streaming.
+ *
+ * @stability experimental
+ */
+export interface OpenedAvatar {
+    /** The bytes. */
+    stream: Readable;
+    /** The media type. */
+    mimeType: string;
+    /** The size in bytes, or `null` when unknown. */
+    size: bigint;
+}
+/**
+ * Resolves an avatar request to stored bytes (#367).
+ *
+ * Two entry points share one lookup: `open` for the public URL and
+ * `openStored` for the owner's authenticated settings preview.
+ *
+ * The URL is public (an `<img>` cannot send a bearer token), so the rule for
+ * serving is deliberately narrow: the object must be the avatar that user has
+ * CURRENTLY selected. A previously uploaded, replaced, or deselected picture
+ * is not served, and every miss — malformed id, unknown user, wrong source,
+ * wrong object, missing bytes — is the same 404 so the endpoint is not an
+ * oracle for which users or objects exist.
+ *
+ * @stability experimental
+ */
+export declare class AvatarService {
+    private readonly prisma;
+    private readonly system;
+    private readonly storageProvider;
+    private readonly logger;
+    constructor(prisma: StoragePrisma, system: StorageSystemData, storageProvider: StorageProvider);
+    /**
+     * The public route: serves `objectId` only while it is the user's CURRENTLY
+     * selected picture (`imageSource: 'upload'` and a matching object id).
+     */
+    open(userId: string, objectId: string): Promise<OpenedAvatar>;
+    /**
+     * The authenticated preview: serves the caller's stored uploaded picture
+     * (`profile.imageObjectId`) WHATEVER source is selected, so the settings UI
+     * can preview the picture a user could switch back to. Never reachable by
+     * anyone but the owner — `userId` comes from the authenticated principal,
+     * not the URL — which is why it may be broader than `open`.
+     */
+    openStored(userId: string): Promise<OpenedAvatar>;
+    private loadProfile;
+    /**
+     * Object lookup, ownership check and download shared by both entry points.
+     * Every miss is the same 404.
+     */
+    private openObject;
+    private notFound;
+}
+//# sourceMappingURL=avatar.service.d.ts.map

package/dist/storage/profile-image/avatar.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"avatar.service.d.ts","sourceRoot":"","sources":["../../../src/storage/profile-image/avatar.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAGvC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AAO/E,OAAO,EAAuB,KAAK,iBAAiB,EAAE,MAAM,UAAU,CAAC;AACvE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,iBAAiB;IACjB,MAAM,EAAE,QAAQ,CAAC;IACjB,sBAAsB;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,iDAAiD;IACjD,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;;;;;;GAcG;AACH,qBACa,aAAa;IAIG,OAAO,CAAC,QAAQ,CAAC,MAAM;IASnB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAEpD,OAAO,CAAC,QAAQ,CAAC,eAAe;IAdlC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkC;gBAGb,MAAM,EAAE,aAAa,EASjB,MAAM,EAAE,iBAAiB,EAEtD,eAAe,EAAE,eAAe;IAGnD;;;OAGG;IACG,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAanE;;;;;;OAMG;IACG,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;YAazC,WAAW;IAUzB;;;OAGG;YACW,UAAU;IAwBxB,OAAO,CAAC,QAAQ;CAGjB"}

package/dist/storage/profile-image/avatar.service.js

@@ -0,0 +1,117 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var AvatarService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AvatarService = void 0;
+const common_1 = require("@nestjs/common");
+const storage_provider_interface_1 = require("../providers/storage-provider.interface");
+const profile_image_1 = require("./profile-image");
+const index_1 = require("../../core/index");
+const ports_1 = require("../ports");
+/**
+ * Resolves an avatar request to stored bytes (#367).
+ *
+ * Two entry points share one lookup: `open` for the public URL and
+ * `openStored` for the owner's authenticated settings preview.
+ *
+ * The URL is public (an `<img>` cannot send a bearer token), so the rule for
+ * serving is deliberately narrow: the object must be the avatar that user has
+ * CURRENTLY selected. A previously uploaded, replaced, or deselected picture
+ * is not served, and every miss — malformed id, unknown user, wrong source,
+ * wrong object, missing bytes — is the same 404 so the endpoint is not an
+ * oracle for which users or objects exist.
+ *
+ * @stability experimental
+ */
+let AvatarService = AvatarService_1 = class AvatarService {
+    prisma;
+    system;
+    storageProvider;
+    logger = new common_1.Logger(AvatarService_1.name);
+    constructor(prisma, system, storageProvider) {
+        this.prisma = prisma;
+        this.system = system;
+        this.storageProvider = storageProvider;
+    }
+    /**
+     * The public route: serves `objectId` only while it is the user's CURRENTLY
+     * selected picture (`imageSource: 'upload'` and a matching object id).
+     */
+    async open(userId, objectId) {
+        if (!(0, profile_image_1.isUuid)(userId) || !(0, profile_image_1.isUuid)(objectId)) {
+            throw this.notFound();
+        }
+        const profile = await this.loadProfile(userId);
+        if (profile.imageSource !== 'upload' || profile.imageObjectId !== objectId) {
+            throw this.notFound();
+        }
+        return this.openObject(userId, objectId);
+    }
+    /**
+     * The authenticated preview: serves the caller's stored uploaded picture
+     * (`profile.imageObjectId`) WHATEVER source is selected, so the settings UI
+     * can preview the picture a user could switch back to. Never reachable by
+     * anyone but the owner — `userId` comes from the authenticated principal,
+     * not the URL — which is why it may be broader than `open`.
+     */
+    async openStored(userId) {
+        if (!(0, profile_image_1.isUuid)(userId)) {
+            throw this.notFound();
+        }
+        const { imageObjectId } = await this.loadProfile(userId);
+        if (!imageObjectId) {
+            throw this.notFound();
+        }
+        return this.openObject(userId, imageObjectId);
+    }
+    async loadProfile(userId) {
+        const settings = await this.prisma.userSettings.findUnique({
+            where: { userId },
+            select: { value: true },
+        });
+        return (0, profile_image_1.normalizeProfileSettings)(settings?.value?.profile);
+    }
+    /**
+     * Object lookup, ownership check and download shared by both entry points.
+     * Every miss is the same 404.
+     */
+    async openObject(userId, objectId) {
+        const object = await this.system.asSystem('admin-aggregate').storageObject.findUnique({
+            where: { id: objectId },
+        });
+        if (!object || !(0, profile_image_1.isAvatarObjectFor)(object, userId)) {
+            throw this.notFound();
+        }
+        try {
+            const stream = await this.storageProvider.download(object.storageKey);
+            return { stream, mimeType: object.mimeType, size: object.size };
+        }
+        catch (error) {
+            this.logger.warn(`Avatar bytes unavailable for object ${objectId}: ${error instanceof Error ? error.message : String(error)}`);
+            throw this.notFound();
+        }
+    }
+    notFound() {
+        return new common_1.NotFoundException('Not found');
+    }
+};
+exports.AvatarService = AvatarService;
+exports.AvatarService = AvatarService = AvatarService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(index_1.PLATFORM_PRISMA)),
+    __param(1, (0, common_1.Inject)(ports_1.STORAGE_SYSTEM_DATA)),
+    __param(2, (0, common_1.Inject)(storage_provider_interface_1.STORAGE_PROVIDER)),
+    __metadata("design:paramtypes", [Object, Object, Object])
+], AvatarService);
+//# sourceMappingURL=avatar.service.js.map

package/dist/storage/profile-image/avatar.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"avatar.service.js","sourceRoot":"","sources":["../../../src/storage/profile-image/avatar.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAA+E;AAG/E,wFAA2E;AAE3E,mDAIyB;AACzB,4CAAmD;AACnD,oCAAuE;AAiBvE;;;;;;;;;;;;;;GAcG;AAEI,IAAM,aAAa,qBAAnB,MAAM,aAAa;IAIoB;IASI;IAE7B;IAdF,MAAM,GAAG,IAAI,eAAM,CAAC,eAAa,CAAC,IAAI,CAAC,CAAC;IAEzD,YAC4C,MAAqB,EASjB,MAAyB,EAEtD,eAAgC;QAXP,WAAM,GAAN,MAAM,CAAe;QASjB,WAAM,GAAN,MAAM,CAAmB;QAEtD,oBAAe,GAAf,eAAe,CAAiB;IAChD,CAAC;IAEJ;;;OAGG;IACH,KAAK,CAAC,IAAI,CAAC,MAAc,EAAE,QAAgB;QACzC,IAAI,CAAC,IAAA,sBAAM,EAAC,MAAM,CAAC,IAAI,CAAC,IAAA,sBAAM,EAAC,QAAQ,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACxB,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,OAAO,CAAC,WAAW,KAAK,QAAQ,IAAI,OAAO,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;YAC3E,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACxB,CAAC;QAED,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,UAAU,CAAC,MAAc;QAC7B,IAAI,CAAC,IAAA,sBAAM,EAAC,MAAM,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACxB,CAAC;QAED,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACxB,CAAC;QAED,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAChD,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,MAAc;QACtC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC;YACzD,KAAK,EAAE,EAAE,MAAM,EAAE;YACjB,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;SACxB,CAAC,CAAC;QACH,OAAO,IAAA,wCAAwB,EAC5B,QAAQ,EAAE,KAAkD,EAAE,OAAO,CACvE,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,UAAU,CACtB,MAAc,EACd,QAAgB;QAEhB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC;YACpF,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE;SACxB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,IAAI,CAAC,IAAA,iCAAiB,EAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACxB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACtE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;QAClE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,uCAAuC,QAAQ,KAC7C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CACH,CAAC;YACF,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACxB,CAAC;IACH,CAAC;IAEO,QAAQ;QACd,OAAO,IAAI,0BAAiB,CAAC,WAAW,CAAC,CAAC;IAC5C,CAAC;CACF,CAAA;AAhGY,sCAAa;wBAAb,aAAa;IADzB,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,eAAM,EAAC,uBAAe,CAAC,CAAA;IASvB,WAAA,IAAA,eAAM,EAAC,2BAAmB,CAAC,CAAA;IAC3B,WAAA,IAAA,eAAM,EAAC,6CAAgB,CAAC,CAAA;;GAdhB,aAAa,CAgGzB"}

package/dist/storage/profile-image/dto/profile-image-response.dto.d.ts

@@ -0,0 +1,28 @@
+import type { Type } from '@nestjs/common';
+import { z } from 'zod';
+/**
+ * Body of `POST` and `DELETE /api/user-settings/profile-image` (#367), inside
+ * the global `{ data }` envelope: the updated settings plus the picture that
+ * now represents the user (same resolution as `GET /api/auth/me`).
+ *
+ * Built from the COMPOSED user-settings response schema, so it is created
+ * after every user-settings namespace is registered (by
+ * `createProfileImageController()`), never at import time.
+ *
+ * @returns the zod schema.
+ *
+ * @stability experimental
+ */
+export declare function profileImageResponseSchema(): z.ZodObject<{
+    settings: z.ZodObject<import("../../../settings/index").UserSettingsCoreResponseShape & import("../../../settings/index").ComposedUserSettingsResponseShape, z.core.$strip>;
+    profileImageUrl: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+/**
+ * {@link profileImageResponseSchema} as a Nest DTO named `ProfileImageResponseDto`.
+ *
+ * @returns the DTO class.
+ *
+ * @stability experimental
+ */
+export declare function createProfileImageResponseDto(): Type<unknown>;
+//# sourceMappingURL=profile-image-response.dto.d.ts.map

package/dist/storage/profile-image/dto/profile-image-response.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-image-response.dto.d.ts","sourceRoot":"","sources":["../../../../src/storage/profile-image/dto/profile-image-response.dto.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAE3C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;;;;;;;;;;;GAYG;AACH,wBAAgB,0BAA0B;;;kBAMzC;AAED;;;;;;GAMG;AACH,wBAAgB,6BAA6B,IAAI,IAAI,CAAC,OAAO,CAAC,CAG7D"}

package/dist/storage/profile-image/dto/profile-image-response.dto.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.profileImageResponseSchema = profileImageResponseSchema;
+exports.createProfileImageResponseDto = createProfileImageResponseDto;
+const nestjs_zod_1 = require("nestjs-zod");
+const zod_1 = require("zod");
+const index_1 = require("../../../settings/index");
+/**
+ * Body of `POST` and `DELETE /api/user-settings/profile-image` (#367), inside
+ * the global `{ data }` envelope: the updated settings plus the picture that
+ * now represents the user (same resolution as `GET /api/auth/me`).
+ *
+ * Built from the COMPOSED user-settings response schema, so it is created
+ * after every user-settings namespace is registered (by
+ * `createProfileImageController()`), never at import time.
+ *
+ * @returns the zod schema.
+ *
+ * @stability experimental
+ */
+function profileImageResponseSchema() {
+    return zod_1.z.object({
+        settings: (0, index_1.composeUserSettingsResponseSchema)(),
+        // Same-origin path (`/api/users/<id>/avatar/<objectId>`), provider URL, or null.
+        profileImageUrl: zod_1.z.string().nullable(),
+    });
+}
+/**
+ * {@link profileImageResponseSchema} as a Nest DTO named `ProfileImageResponseDto`.
+ *
+ * @returns the DTO class.
+ *
+ * @stability experimental
+ */
+function createProfileImageResponseDto() {
+    class ProfileImageResponseDto extends (0, nestjs_zod_1.createZodDto)(profileImageResponseSchema()) {
+    }
+    return ProfileImageResponseDto;
+}
+//# sourceMappingURL=profile-image-response.dto.js.map

package/dist/storage/profile-image/dto/profile-image-response.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-image-response.dto.js","sourceRoot":"","sources":["../../../../src/storage/profile-image/dto/profile-image-response.dto.ts"],"names":[],"mappings":";;AAmBA,gEAMC;AASD,sEAGC;AApCD,2CAA0C;AAC1C,6BAAwB;AAExB,mDAA4E;AAE5E;;;;;;;;;;;;GAYG;AACH,SAAgB,0BAA0B;IACxC,OAAO,OAAC,CAAC,MAAM,CAAC;QACd,QAAQ,EAAE,IAAA,yCAAiC,GAAE;QAC7C,iFAAiF;QACjF,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACvC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,6BAA6B;IAC3C,MAAM,uBAAwB,SAAQ,IAAA,yBAAY,EAAC,0BAA0B,EAAE,CAAC;KAAG;IACnF,OAAO,uBAAuB,CAAC;AACjC,CAAC"}

package/dist/storage/profile-image/profile-image.controller.d.ts

@@ -0,0 +1,32 @@
+import type { Type } from '@nestjs/common';
+import { FastifyReply, FastifyRequest } from 'fastify';
+/**
+ * Builds the `/api/user-settings/profile-image` controller (`GET` preview,
+ * `POST` upload, `DELETE`; `user_settings:read|write`). A factory, like the
+ * settings slice's controllers, because its response embeds the COMPOSED user
+ * settings schema: it must be built after every user-settings namespace is
+ * registered, which `ProfileImageModule.forRoot()` guarantees by calling it.
+ *
+ * @returns the controller class (named `ProfileImageController`).
+ *
+ * @internal
+ *
+ * @stability experimental
+ */
+export declare function createProfileImageController(): Type<ProfileImageControllerShape>;
+/**
+ * The profile-image controller's handlers, for a test that calls them directly.
+ *
+ * @internal
+ *
+ * @stability experimental
+ */
+export interface ProfileImageControllerShape {
+    /** `GET`: streams the user's own stored picture. */
+    preview(userId: string, reply: FastifyReply): Promise<void>;
+    /** `POST`: stores a new picture. */
+    upload(req: FastifyRequest, userId: string, orgId: string): Promise<unknown>;
+    /** `DELETE`: removes the stored picture. */
+    remove(userId: string): Promise<unknown>;
+}
+//# sourceMappingURL=profile-image.controller.d.ts.map

package/dist/storage/profile-image/profile-image.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-image.controller.d.ts","sourceRoot":"","sources":["../../../src/storage/profile-image/profile-image.controller.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAgCvD;;;;;;;;;;;;GAYG;AACH,wBAAgB,4BAA4B,IAAI,IAAI,CAAC,2BAA2B,CAAC,CAqIhF;AAED;;;;;;GAMG;AACH,MAAM,WAAW,2BAA2B;IAC1C,oDAAoD;IACpD,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,oCAAoC;IACpC,MAAM,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7E,4CAA4C;IAC5C,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1C"}