@marinoscar/platform-api 0.1.0-next.3 → 0.1.0-next.4

package/dist/storage/data/storage-db.d.ts

@@ -0,0 +1,292 @@
+/**
+ * Prisma's arguments for one delegate call (`where`, `data`, `select`, ...),
+ * untyped on purpose: the app's client checks them at run time, and a typed
+ * shape here would make the app's generated client unassignable to
+ * {@link StoragePrisma}.
+ *
+ * @stability experimental
+ */
+export type StorageQueryArgs = any;
+/**
+ * A JSON column's value, as Prisma reads it (`Prisma.JsonValue`).
+ *
+ * @stability experimental
+ */
+export type StorageJsonValue = string | number | boolean | StorageJsonObject | StorageJsonArray | null;
+/**
+ * A JSON object, as Prisma reads it.
+ *
+ * @stability experimental
+ */
+export type StorageJsonObject = {
+    [Key in string]?: StorageJsonValue;
+};
+/**
+ * A JSON array, as Prisma reads it.
+ *
+ * @stability experimental
+ */
+export interface StorageJsonArray extends Array<StorageJsonValue> {
+}
+/**
+ * A JSON value a write accepts (`Prisma.InputJsonValue`).
+ *
+ * @stability experimental
+ */
+export type StorageInputJsonValue = string | number | boolean | StorageInputJsonObject | StorageInputJsonArray | {
+    /** Serialises the value. */
+    toJSON(): unknown;
+};
+/**
+ * A JSON object a write accepts.
+ *
+ * @stability experimental
+ */
+export type StorageInputJsonObject = {
+    readonly [Key in string]?: StorageInputJsonValue | null;
+};
+/**
+ * A JSON array a write accepts.
+ *
+ * @stability experimental
+ */
+export interface StorageInputJsonArray extends ReadonlyArray<StorageInputJsonValue | null> {
+}
+/**
+ * What a batch write returns.
+ *
+ * @stability experimental
+ */
+export interface StorageBatchPayload {
+    /** How many rows it changed. */
+    count: number;
+}
+/**
+ * `StorageObjectStatus`: where an object is in its upload lifecycle.
+ *
+ * @stability stable
+ */
+export declare const StorageObjectStatus: {
+    readonly [K in 'pending' | 'uploading' | 'processing' | 'ready' | 'failed']: K;
+};
+/**
+ * A {@link StorageObjectStatus} value.
+ *
+ * @stability stable
+ */
+export type StorageObjectStatus = (typeof StorageObjectStatus)[keyof typeof StorageObjectStatus];
+/**
+ * One `storage_objects` row (`StorageObject` in the `storage` fragment).
+ * Structurally the app's generated `StorageObject`, so a processor written
+ * against the app's type is an `ObjectProcessor` as it is.
+ *
+ * @stability stable
+ */
+export interface StorageObject {
+    /** The object id (UUID). */
+    id: string;
+    /** The original filename. */
+    name: string;
+    /** Total size in bytes. */
+    size: bigint;
+    /** The declared media type. */
+    mimeType: string;
+    /**
+     * The object key. Stored per row and never rebuilt: a legacy row keeps the
+     * layout it was written with (`uploads/<timestamp>/…` before #736).
+     */
+    storageKey: string;
+    /** The provider kind that held it when it was written (`s3`, `r2`, `s3compatible`). */
+    storageProvider: string;
+    /** The bucket it was written to. */
+    bucket: string | null;
+    /** Lifecycle status. */
+    status: StorageObjectStatus;
+    /** The provider's multipart upload id, while a resumable upload is open. */
+    s3UploadId: string | null;
+    /** Free-form metadata (processing stamps, `purpose: 'avatar'`). */
+    metadata: StorageJsonValue | null;
+    /** The uploader, or `null` once that user was deleted. */
+    uploadedById: string | null;
+    /** The organization the object belongs to (row-level security). */
+    orgId: string;
+    /** Creation. */
+    createdAt: Date;
+    /** Last update. */
+    updatedAt: Date;
+}
+/**
+ * One `storage_object_chunks` row: a recorded part of a multipart upload.
+ *
+ * @stability stable
+ */
+export interface StorageObjectChunk {
+    /** The row id. */
+    id: string;
+    /** The parent object. */
+    objectId: string;
+    /** The part number (1-10000). */
+    partNumber: number;
+    /** The part's ETag. */
+    eTag: string;
+    /** The part's size in bytes (0 when the client did not say). */
+    size: bigint;
+    /** The parent's organization. */
+    orgId: string;
+    /** When it was recorded. */
+    uploadedAt: Date;
+}
+/**
+ * One model delegate of the app's client, structurally. Every method takes
+ * Prisma's arguments untyped and resolves to `any` where an `include` or a
+ * `select` decides the shape; the call site names what it reads.
+ *
+ * @typeParam Row - the model's row type.
+ *
+ * @stability experimental
+ */
+export interface StorageDelegate<Row> {
+    /** `findUnique`. */
+    findUnique(args: StorageQueryArgs): Promise<Row | null>;
+    /** `findUniqueOrThrow`. */
+    findUniqueOrThrow(args: StorageQueryArgs): Promise<Row>;
+    /** `findFirst`. */
+    findFirst(args?: StorageQueryArgs): Promise<Row | null>;
+    /** `findMany`. */
+    findMany(args?: StorageQueryArgs): Promise<Row[]>;
+    /** `create`. */
+    create(args: StorageQueryArgs): Promise<Row>;
+    /** `update`. */
+    update(args: StorageQueryArgs): Promise<Row>;
+    /** `upsert`. */
+    upsert(args: StorageQueryArgs): Promise<Row>;
+    /** `delete`. */
+    delete(args: StorageQueryArgs): Promise<Row>;
+    /** `updateMany`. */
+    updateMany(args: StorageQueryArgs): Promise<StorageBatchPayload>;
+    /** `deleteMany`. */
+    deleteMany(args?: StorageQueryArgs): Promise<StorageBatchPayload>;
+    /** `count`. */
+    count(args?: StorageQueryArgs): Promise<number>;
+}
+/**
+ * The transaction client (or org-scoped client) the slice works with: the
+ * storage fragment's two models.
+ *
+ * @stability experimental
+ */
+export interface StorageTx {
+    /** `storage_objects`. */
+    storageObject: StorageDelegate<StorageObject>;
+    /** `storage_object_chunks`. */
+    storageObjectChunk: StorageDelegate<StorageObjectChunk>;
+}
+/**
+ * Options of {@link storageRunInOrg}: the acting user and Prisma's
+ * transaction bounds.
+ *
+ * @stability experimental
+ */
+export interface StorageRunInOrgOptions {
+    /** The acting user; becomes `app.user_id`. */
+    userId?: string;
+    /** Prisma's `maxWait`. */
+    maxWait?: number;
+    /** Prisma's `timeout`. */
+    timeout?: number;
+}
+/**
+ * The app's tenant Prisma client as the storage slice sees it (the core port
+ * `PLATFORM_PRISMA`). Besides the storage models it reads four tables the
+ * slice does not own, each for one reason: `audit_events` (every storage and
+ * configuration write is audited), `users` and `user_settings` (the profile
+ * image), `system_settings` (the configuration view's `updatedAt`) and
+ * `database_backup_runs` (the provider-switch gate).
+ *
+ * `forOrg` / `runInOrg` are optional: the reference app's `PrismaService`
+ * has both, and a plain client gets core's helpers of the same name.
+ *
+ * @stability experimental
+ */
+export interface StoragePrisma extends StorageTx {
+    /** `audit_events`; only `create` is called. */
+    auditEvent: {
+        /** Inserts one audit row. */
+        create(args: StorageQueryArgs): Promise<unknown>;
+    };
+    /** `users`; only `findUnique` is called. */
+    user: {
+        /** One user by id. */
+        findUnique(args: StorageQueryArgs): Promise<any>;
+    };
+    /** `user_settings`; only `findUnique` is called. */
+    userSettings: {
+        /** One user's settings row. */
+        findUnique(args: StorageQueryArgs): Promise<any>;
+    };
+    /** `system_settings`; only `findUnique` is called. */
+    systemSettings: {
+        /** One settings row by key. */
+        findUnique(args: StorageQueryArgs): Promise<any>;
+    };
+    /** `organizations`; only `findFirst` (the default organization) is called. */
+    organization: {
+        /** The default organization. */
+        findFirst(args: StorageQueryArgs): Promise<any>;
+    };
+    /** `database_backup_runs`; only `count` is called. */
+    databaseBackupRun: {
+        /** Backup runs matching `args`. */
+        count(args?: StorageQueryArgs): Promise<number>;
+    };
+    /** A tagged-template raw statement. */
+    $executeRaw(query: TemplateStringsArray, ...values: unknown[]): Promise<number>;
+    /** An interactive transaction. */
+    $transaction<T>(fn: (tx: any) => Promise<T>, options?: {
+        maxWait?: number;
+        timeout?: number;
+    }): Promise<T>;
+    /** A client extension. */
+    $extends(extension: unknown): unknown;
+    /** The app's own org-scoped client, when it has one (`PrismaService.forOrg`). */
+    forOrg?(orgId: string, opts?: {
+        userId?: string;
+    }): unknown;
+    /** The app's own org-scoped transaction, when it has one (`PrismaService.runInOrg`). */
+    runInOrg?<R>(orgId: string, fn: (tx: any) => Promise<R>, opts?: StorageRunInOrgOptions): Promise<R>;
+}
+/**
+ * A client scoped to one organization: every operation runs with
+ * `app.org_id` (and `app.user_id`) set, so another organization's objects are
+ * neither visible nor writable. Uses the client's own `forOrg` when it has
+ * one, core's `forOrg` otherwise.
+ *
+ * @param prisma - the `PLATFORM_PRISMA` client.
+ * @param orgId - `principal.activeOrgId` or a job payload's `orgId`; never request input.
+ * @param opts - `userId`, the acting user.
+ * @returns the scoped client, seen as {@link StorageTx}.
+ * @throws ScopedAccessError when an id is not a UUID (core's helper).
+ *
+ * @stability experimental
+ */
+export declare function storageForOrg(prisma: StoragePrisma, orgId: string, opts?: {
+    userId?: string;
+}): StorageTx;
+/**
+ * One interactive transaction in one organization's scope; `fn` receives the
+ * plain transaction client. Uses the client's own `runInOrg` when it has one,
+ * core's `runInOrg` otherwise.
+ *
+ * @typeParam R - what `fn` resolves to.
+ * @param prisma - the `PLATFORM_PRISMA` client.
+ * @param orgId - the organization.
+ * @param fn - the unit of work.
+ * @param opts - `userId` and Prisma's `maxWait` / `timeout`.
+ * @returns what `fn` resolved to.
+ *
+ * @stability experimental
+ */
+export declare function storageRunInOrg<R>(prisma: StoragePrisma, orgId: string, fn: (tx: StorageTx & {
+    [model: string]: any;
+}) => Promise<R>, opts?: StorageRunInOrgOptions): Promise<R>;
+//# sourceMappingURL=storage-db.d.ts.map

package/dist/storage/data/storage-db.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-db.d.ts","sourceRoot":"","sources":["../../../src/storage/data/storage-db.ts"],"names":[],"mappings":"AA8BA;;;;;;;GAOG;AACH,MAAM,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAEnC;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,iBAAiB,GAAG,gBAAgB,GAAG,IAAI,CAAC;AAEvG;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG;KAAG,GAAG,IAAI,MAAM,CAAC,CAAC,EAAE,gBAAgB;CAAE,CAAC;AAEvE;;;;GAIG;AACH,MAAM,WAAW,gBAAiB,SAAQ,KAAK,CAAC,gBAAgB,CAAC;CAAG;AAEpE;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,GAC7B,MAAM,GACN,MAAM,GACN,OAAO,GACP,sBAAsB,GACtB,qBAAqB,GACrB;IACE,4BAA4B;IAC5B,MAAM,IAAI,OAAO,CAAC;CACnB,CAAC;AAEN;;;;GAIG;AACH,MAAM,MAAM,sBAAsB,GAAG;IAAE,QAAQ,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC,EAAE,qBAAqB,GAAG,IAAI;CAAE,CAAC;AAEjG;;;;GAIG;AACH,MAAM,WAAW,qBAAsB,SAAQ,aAAa,CAAC,qBAAqB,GAAG,IAAI,CAAC;CAAG;AAE7F;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,gCAAgC;IAChC,KAAK,EAAE,MAAM,CAAC;CACf;AAID;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,EAAE;IAChC,QAAQ,EAAE,CAAC,IAAI,SAAS,GAAG,WAAW,GAAG,YAAY,GAAG,OAAO,GAAG,QAAQ,GAAG,CAAC;CAOrE,CAAC;AAEZ;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,OAAO,mBAAmB,CAAC,CAAC;AAIjG;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,4BAA4B;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,6BAA6B;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,2BAA2B;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,+BAA+B;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,uFAAuF;IACvF,eAAe,EAAE,MAAM,CAAC;IACxB,oCAAoC;IACpC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,wBAAwB;IACxB,MAAM,EAAE,mBAAmB,CAAC;IAC5B,4EAA4E;IAC5E,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,mEAAmE;IACnE,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAClC,0DAA0D;IAC1D,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,mEAAmE;IACnE,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,mBAAmB;IACnB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,kBAAkB;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,yBAAyB;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,iCAAiC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,uBAAuB;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,gEAAgE;IAChE,IAAI,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,4BAA4B;IAC5B,UAAU,EAAE,IAAI,CAAC;CAClB;AAID;;;;;;;;GAQG;AACH,MAAM,WAAW,eAAe,CAAC,GAAG;IAClC,oBAAoB;IACpB,UAAU,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;IACxD,2BAA2B;IAC3B,iBAAiB,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACxD,mBAAmB;IACnB,SAAS,CAAC,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;IACxD,kBAAkB;IAClB,QAAQ,CAAC,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAClD,gBAAgB;IAChB,MAAM,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7C,gBAAgB;IAChB,MAAM,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7C,gBAAgB;IAChB,MAAM,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7C,gBAAgB;IAChB,MAAM,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7C,oBAAoB;IACpB,UAAU,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACjE,oBAAoB;IACpB,UAAU,CAAC,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAClE,eAAe;IACf,KAAK,CAAC,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACjD;AAED;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACxB,yBAAyB;IACzB,aAAa,EAAE,eAAe,CAAC,aAAa,CAAC,CAAC;IAC9C,+BAA+B;IAC/B,kBAAkB,EAAE,eAAe,CAAC,kBAAkB,CAAC,CAAC;CACzD;AAED;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACrC,8CAA8C;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0BAA0B;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0BAA0B;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,aAAc,SAAQ,SAAS;IAC9C,+CAA+C;IAC/C,UAAU,EAAE;QACV,6BAA6B;QAC7B,MAAM,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;KAClD,CAAC;IACF,4CAA4C;IAC5C,IAAI,EAAE;QACJ,sBAAsB;QACtB,UAAU,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;KAClD,CAAC;IACF,oDAAoD;IACpD,YAAY,EAAE;QACZ,+BAA+B;QAC/B,UAAU,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;KAClD,CAAC;IACF,sDAAsD;IACtD,cAAc,EAAE;QACd,+BAA+B;QAC/B,UAAU,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;KAClD,CAAC;IACF,8EAA8E;IAC9E,YAAY,EAAE;QACZ,gCAAgC;QAChC,SAAS,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;KACjD,CAAC;IACF,sDAAsD;IACtD,iBAAiB,EAAE;QACjB,mCAAmC;QACnC,KAAK,CAAC,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;KACjD,CAAC;IACF,uCAAuC;IACvC,WAAW,CAAC,KAAK,EAAE,oBAAoB,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAChF,kCAAkC;IAClC,YAAY,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3G,0BAA0B;IAC1B,QAAQ,CAAC,SAAS,EAAE,OAAO,GAAG,OAAO,CAAC;IACtC,iFAAiF;IACjF,MAAM,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;IAC5D,wFAAwF;IACxF,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,sBAAsB,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CACrG;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,SAAS,CAK7G;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAC/B,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,MAAM,EACb,EAAE,EAAE,CAAC,EAAE,EAAE,SAAS,GAAG;IAAE,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,CAAA;CAAE,KAAK,OAAO,CAAC,CAAC,CAAC,EAC5D,IAAI,GAAE,sBAA2B,GAChC,OAAO,CAAC,CAAC,CAAC,CASZ"}

package/dist/storage/data/storage-db.js

@@ -0,0 +1,87 @@
+"use strict";
+// =============================================================================
+// The data the storage slice reads and writes, structurally (issue #736)
+// =============================================================================
+//
+// The slice never imports a generated Prisma client, not even its types (the
+// rule of identity, settings, sharing and jobs): the package is built,
+// type-checked and tested before any app's `prisma generate`, and works with
+// any app that composed the `storage` fragment of `@marinoscar/platform-db`
+// (`StorageObject`, `StorageObjectChunk`, `StorageObjectStatus`).
+//
+// TWO CLIENTS, TWO PORTS.
+//
+//   * The tenant client is the core port `PLATFORM_PRISMA`, seen as
+//     {@link StoragePrisma}. `storage_objects` and `storage_object_chunks` are
+//     under FORCEd row-level security (#725), so the slice reaches them only
+//     through an organization's scope: {@link storageForOrg} and
+//     {@link storageRunInOrg} below, which use the client's own `forOrg` /
+//     `runInOrg` when it has them (the reference app's `PrismaService`) and
+//     core's helpers of the same name otherwise.
+//   * The bypass client is `STORAGE_SYSTEM_DATA` (`ports.ts`), for the four
+//     reviewed cross-organization reads and writes (the stale-upload sweep,
+//     the stranded-object count, the public avatar route, the avatar
+//     replacement across an org switch).
+//
+// The rows mirror the fragment column for column. A column added to the
+// fragment is added here in the same change.
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.StorageObjectStatus = void 0;
+exports.storageForOrg = storageForOrg;
+exports.storageRunInOrg = storageRunInOrg;
+const index_1 = require("../../core/index");
+// ---- enums --------------------------------------------------------------------------
+/**
+ * `StorageObjectStatus`: where an object is in its upload lifecycle.
+ *
+ * @stability stable
+ */
+exports.StorageObjectStatus = Object.freeze({
+    pending: 'pending',
+    uploading: 'uploading',
+    processing: 'processing',
+    ready: 'ready',
+    failed: 'failed',
+});
+/**
+ * A client scoped to one organization: every operation runs with
+ * `app.org_id` (and `app.user_id`) set, so another organization's objects are
+ * neither visible nor writable. Uses the client's own `forOrg` when it has
+ * one, core's `forOrg` otherwise.
+ *
+ * @param prisma - the `PLATFORM_PRISMA` client.
+ * @param orgId - `principal.activeOrgId` or a job payload's `orgId`; never request input.
+ * @param opts - `userId`, the acting user.
+ * @returns the scoped client, seen as {@link StorageTx}.
+ * @throws ScopedAccessError when an id is not a UUID (core's helper).
+ *
+ * @stability experimental
+ */
+function storageForOrg(prisma, orgId, opts = {}) {
+    if (typeof prisma.forOrg === 'function') {
+        return (opts.userId !== undefined ? prisma.forOrg(orgId, opts) : prisma.forOrg(orgId));
+    }
+    return (0, index_1.forOrg)(prisma, orgId, opts);
+}
+/**
+ * One interactive transaction in one organization's scope; `fn` receives the
+ * plain transaction client. Uses the client's own `runInOrg` when it has one,
+ * core's `runInOrg` otherwise.
+ *
+ * @typeParam R - what `fn` resolves to.
+ * @param prisma - the `PLATFORM_PRISMA` client.
+ * @param orgId - the organization.
+ * @param fn - the unit of work.
+ * @param opts - `userId` and Prisma's `maxWait` / `timeout`.
+ * @returns what `fn` resolved to.
+ *
+ * @stability experimental
+ */
+function storageRunInOrg(prisma, orgId, fn, opts = {}) {
+    if (typeof prisma.runInOrg === 'function')
+        return prisma.runInOrg(orgId, fn, opts);
+    const { userId, ...transaction } = opts;
+    return (0, index_1.runInOrg)(prisma, { orgId, ...(userId !== undefined ? { userId } : {}) }, fn, transaction);
+}
+//# sourceMappingURL=storage-db.js.map

package/dist/storage/data/storage-db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-db.js","sourceRoot":"","sources":["../../../src/storage/data/storage-db.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,yEAAyE;AACzE,gFAAgF;AAChF,EAAE;AACF,6EAA6E;AAC7E,uEAAuE;AACvE,6EAA6E;AAC7E,4EAA4E;AAC5E,kEAAkE;AAClE,EAAE;AACF,0BAA0B;AAC1B,EAAE;AACF,oEAAoE;AACpE,+EAA+E;AAC/E,6EAA6E;AAC7E,iEAAiE;AACjE,2EAA2E;AAC3E,4EAA4E;AAC5E,iDAAiD;AACjD,4EAA4E;AAC5E,4EAA4E;AAC5E,qEAAqE;AACrE,yCAAyC;AACzC,EAAE;AACF,wEAAwE;AACxE,6CAA6C;AAC7C,gFAAgF;;;AA0ShF,sCAKC;AAgBD,0CAcC;AA3UD,4CAAoD;AAyEpD,wFAAwF;AAExF;;;;GAIG;AACU,QAAA,mBAAmB,GAE5B,MAAM,CAAC,MAAM,CAAC;IAChB,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,WAAW;IACtB,UAAU,EAAE,YAAY;IACxB,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,QAAQ;CACR,CAAC,CAAC;AAkMZ;;;;;;;;;;;;;GAaG;AACH,SAAgB,aAAa,CAAC,MAAqB,EAAE,KAAa,EAAE,OAA4B,EAAE;IAChG,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAc,CAAC;IACtG,CAAC;IACD,OAAO,IAAA,cAAM,EAAC,MAAe,EAAE,KAAK,EAAE,IAAI,CAAyB,CAAC;AACtE,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAgB,eAAe,CAC7B,MAAqB,EACrB,KAAa,EACb,EAA4D,EAC5D,OAA+B,EAAE;IAEjC,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,UAAU;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;IACnF,MAAM,EAAE,MAAM,EAAE,GAAG,WAAW,EAAE,GAAG,IAAI,CAAC;IACxC,OAAO,IAAA,gBAAQ,EACb,MAAe,EACf,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EACtD,EAAiC,EACjC,WAAW,CACZ,CAAC;AACJ,CAAC"}

package/dist/storage/drivers/builtin-storage-drivers.d.ts

@@ -0,0 +1,8 @@
+import { type StorageDriverDefinition } from './storage-driver';
+/**
+ * The built-in drivers, in registration (and admin page) order.
+ *
+ * @stability experimental
+ */
+export declare const BUILTIN_STORAGE_DRIVERS: readonly StorageDriverDefinition<any>[];
+//# sourceMappingURL=builtin-storage-drivers.d.ts.map

package/dist/storage/drivers/builtin-storage-drivers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"builtin-storage-drivers.d.ts","sourceRoot":"","sources":["../../../src/storage/drivers/builtin-storage-drivers.ts"],"names":[],"mappings":"AAiBA,OAAO,EAA4C,KAAK,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAE1G;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,EAAE,SAAS,uBAAuB,CAAC,GAAG,CAAC,EAIzE,CAAC"}

package/dist/storage/drivers/builtin-storage-drivers.js

@@ -0,0 +1,35 @@
+"use strict";
+// =============================================================================
+// The built-in storage drivers, registered (PP-14.7, #925)
+// =============================================================================
+//
+// `s3`, `r2` and `s3compatible` register through `registerStorageDriver`, the
+// same function an app uses, at import time and in the order the admin page
+// lists them. Anything that reads the registry (the `storage` settings
+// namespace, the config services) imports this file first, so the built-ins are
+// always there regardless of which entry point loaded the slice.
+//
+// IDEMPOTENT ACROSS DUPLICATE MODULE INSTANCES: a driver already registered is
+// skipped, so two copies of this file (a bundler, a test double) cannot make
+// the second registration throw `DUPLICATE_ID`. The registry is frozen once the
+// application bootstraps, and nothing registers after that.
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BUILTIN_STORAGE_DRIVERS = void 0;
+const s3_family_1 = require("./s3/s3-family");
+const storage_driver_1 = require("./storage-driver");
+/**
+ * The built-in drivers, in registration (and admin page) order.
+ *
+ * @stability experimental
+ */
+exports.BUILTIN_STORAGE_DRIVERS = Object.freeze([
+    s3_family_1.s3StorageDriver,
+    s3_family_1.r2StorageDriver,
+    s3_family_1.s3CompatibleStorageDriver,
+]);
+for (const driver of exports.BUILTIN_STORAGE_DRIVERS) {
+    if (!storage_driver_1.storageDriverKind.has(driver.id))
+        (0, storage_driver_1.registerStorageDriver)(driver);
+}
+//# sourceMappingURL=builtin-storage-drivers.js.map

package/dist/storage/drivers/builtin-storage-drivers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"builtin-storage-drivers.js","sourceRoot":"","sources":["../../../src/storage/drivers/builtin-storage-drivers.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,2DAA2D;AAC3D,gFAAgF;AAChF,EAAE;AACF,8EAA8E;AAC9E,4EAA4E;AAC5E,uEAAuE;AACvE,gFAAgF;AAChF,iEAAiE;AACjE,EAAE;AACF,+EAA+E;AAC/E,6EAA6E;AAC7E,gFAAgF;AAChF,4DAA4D;AAC5D,gFAAgF;;;AAEhF,8CAA6F;AAC7F,qDAA0G;AAE1G;;;;GAIG;AACU,QAAA,uBAAuB,GAA4C,MAAM,CAAC,MAAM,CAAC;IAC5F,2BAAe;IACf,2BAAe;IACf,qCAAyB;CAC1B,CAAC,CAAC;AAEH,KAAK,MAAM,MAAM,IAAI,+BAAuB,EAAE,CAAC;IAC7C,IAAI,CAAC,kCAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAAE,IAAA,sCAAqB,EAAC,MAAM,CAAC,CAAC;AACvE,CAAC"}