@marinoscar/platform-api 0.1.0-next.3 → 0.1.0-next.4

package/dist/storage/profile-image/profile-image.controller.js

@@ -0,0 +1,192 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createProfileImageController = createProfileImageController;
+const common_1 = require("@nestjs/common");
+const swagger_1 = require("@nestjs/swagger");
+const index_1 = require("../../identity/index");
+const storage_constants_1 = require("../storage.constants");
+const index_2 = require("../../core/index");
+const profile_image_1 = require("./profile-image");
+const profile_image_service_1 = require("./profile-image.service");
+const avatar_service_1 = require("./avatar.service");
+const profile_image_response_dto_1 = require("./dto/profile-image-response.dto");
+const multipart_1 = require("../multipart");
+const MAX_MB = profile_image_1.AVATAR_MAX_BYTES / (1024 * 1024);
+/**
+ * Translate `@fastify/multipart` errors (plain FastifyErrors, which the global
+ * filter would otherwise turn into a 500) into client errors.
+ */
+function toClientError(error) {
+    const code = error?.code;
+    if (code === 'FST_REQ_FILE_TOO_LARGE') {
+        return new common_1.PayloadTooLargeException(`Profile image exceeds the ${MAX_MB} MB limit`);
+    }
+    if (typeof code === 'string' && code.startsWith('FST_')) {
+        return new common_1.BadRequestException('Invalid multipart body. Send multipart/form-data with a single "file" field.');
+    }
+    return error;
+}
+/**
+ * Builds the `/api/user-settings/profile-image` controller (`GET` preview,
+ * `POST` upload, `DELETE`; `user_settings:read|write`). A factory, like the
+ * settings slice's controllers, because its response embeds the COMPOSED user
+ * settings schema: it must be built after every user-settings namespace is
+ * registered, which `ProfileImageModule.forRoot()` guarantees by calling it.
+ *
+ * @returns the controller class (named `ProfileImageController`).
+ *
+ * @internal
+ *
+ * @stability experimental
+ */
+function createProfileImageController() {
+    const ProfileImageResponseDto = (0, profile_image_response_dto_1.createProfileImageResponseDto)();
+    let ProfileImageController = class ProfileImageController {
+        profileImages;
+        avatars;
+        constructor(profileImages, avatars) {
+            this.profileImages = profileImages;
+            this.avatars = avatars;
+        }
+        async preview(userId, reply) {
+            const avatar = await this.avatars.openStored(userId);
+            reply
+                .status(200)
+                // The stored type was determined from magic bytes at upload time.
+                .header('Content-Type', avatar.mimeType)
+                .header('X-Content-Type-Options', 'nosniff')
+                .header('Content-Disposition', 'inline')
+                .header('Content-Security-Policy', "default-src 'none'; sandbox")
+                // Per-user and changes on every upload/remove: never cached.
+                .header('Cache-Control', 'private, no-store');
+            if (avatar.size > BigInt(0)) {
+                reply.header('Content-Length', avatar.size.toString());
+            }
+            return reply.send(avatar.stream);
+        }
+        async upload(req, userId, orgId) {
+            if (!(0, multipart_1.asMultipart)(req).isMultipart()) {
+                throw new common_1.BadRequestException('Expected multipart/form-data with a single "file" field.');
+            }
+            let buffer;
+            try {
+                const part = await (0, multipart_1.asMultipart)(req).file({
+                    limits: { fileSize: profile_image_1.AVATAR_MAX_BYTES, files: 1 },
+                    throwFileSizeLimit: true,
+                });
+                if (!part) {
+                    throw new common_1.BadRequestException('No file provided');
+                }
+                if (part.fieldname !== 'file') {
+                    throw new common_1.BadRequestException('The file must be sent in the "file" field.');
+                }
+                // Buffered, bounded by `fileSize`: 5 MB is small enough to hold, and the
+                // magic bytes must be inspected before anything reaches storage.
+                // `toBuffer` rejects with FST_REQ_FILE_TOO_LARGE on a truncated file.
+                buffer = await part.toBuffer();
+            }
+            catch (error) {
+                throw toClientError(error);
+            }
+            return this.profileImages.upload(userId, buffer, orgId);
+        }
+        async remove(userId) {
+            return this.profileImages.remove(userId);
+        }
+    };
+    __decorate([
+        (0, common_1.Get)(),
+        (0, index_1.Auth)({ permissions: [storage_constants_1.PERMISSIONS.USER_SETTINGS_READ] }),
+        (0, swagger_1.ApiOperation)({
+            summary: 'Get your uploaded profile picture (preview)',
+            description: 'Streams the caller\'s stored uploaded picture (`profile.imageObjectId`) whatever ' +
+                '`profile.imageSource` is selected, so a settings UI can preview the upload option while ' +
+                '`none` or `provider` is selected. Unlike the public `/api/users/{userId}/avatar/{objectId}` ' +
+                'route it requires authentication and only ever serves the caller\'s own picture. ' +
+                '404 when no picture is uploaded or its bytes are unavailable.',
+        }),
+        (0, swagger_1.ApiProduces)('image/jpeg', 'image/png', 'image/gif', 'image/webp'),
+        (0, swagger_1.ApiResponse)({
+            status: 200,
+            description: 'Image bytes',
+            content: {
+                'image/*': { schema: { type: 'string', format: 'binary' } },
+            },
+        }),
+        (0, swagger_1.ApiResponse)({ status: 404, description: 'Not found' }),
+        __param(0, (0, index_1.CurrentUser)('id')),
+        __param(1, (0, common_1.Res)()),
+        __metadata("design:type", Function),
+        __metadata("design:paramtypes", [String, Object]),
+        __metadata("design:returntype", Promise)
+    ], ProfileImageController.prototype, "preview", null);
+    __decorate([
+        (0, common_1.Post)(),
+        (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+        (0, index_1.Auth)({ permissions: [storage_constants_1.PERMISSIONS.USER_SETTINGS_WRITE] }),
+        (0, swagger_1.ApiOperation)({
+            summary: 'Upload a profile picture',
+            description: `Multipart upload with a single \`file\` field. The type is determined from the file's ` +
+                `content (magic bytes) — the declared MIME type and filename are ignored — and must be ` +
+                `JPEG, PNG, GIF or WebP; anything else (SVG included) is a 400. Maximum ${MAX_MB} MB ` +
+                `(413 above it). On success the picture is selected (\`profile.imageSource: "upload"\`) and ` +
+                `any previously uploaded picture is deleted.`,
+        }),
+        (0, swagger_1.ApiConsumes)('multipart/form-data'),
+        (0, swagger_1.ApiBody)({
+            schema: {
+                type: 'object',
+                required: ['file'],
+                properties: { file: { type: 'string', format: 'binary' } },
+            },
+        }),
+        (0, index_2.ApiDataResponse)(ProfileImageResponseDto, {
+            description: 'Picture stored and selected',
+        }),
+        (0, swagger_1.ApiResponse)({ status: 400, description: 'Missing file, invalid multipart body, or unsupported image type' }),
+        (0, swagger_1.ApiResponse)({ status: 413, description: `File exceeds ${MAX_MB} MB` }),
+        __param(0, (0, common_1.Req)()),
+        __param(1, (0, index_1.CurrentUser)('id')),
+        __param(2, (0, index_1.CurrentOrg)()),
+        __metadata("design:type", Function),
+        __metadata("design:paramtypes", [Object, String, String]),
+        __metadata("design:returntype", Promise)
+    ], ProfileImageController.prototype, "upload", null);
+    __decorate([
+        (0, common_1.Delete)(),
+        (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+        (0, index_1.Auth)({ permissions: [storage_constants_1.PERMISSIONS.USER_SETTINGS_WRITE] }),
+        (0, swagger_1.ApiOperation)({
+            summary: 'Remove the uploaded profile picture',
+            description: 'Deletes the uploaded picture (if any) and clears `profile.imageObjectId`. If the uploaded ' +
+                'picture was selected, `profile.imageSource` falls back to `"provider"`. Idempotent.',
+        }),
+        (0, index_2.ApiDataResponse)(ProfileImageResponseDto, {
+            description: 'Picture removed',
+        }),
+        __param(0, (0, index_1.CurrentUser)('id')),
+        __metadata("design:type", Function),
+        __metadata("design:paramtypes", [String]),
+        __metadata("design:returntype", Promise)
+    ], ProfileImageController.prototype, "remove", null);
+    ProfileImageController = __decorate([
+        (0, swagger_1.ApiTags)('User Settings'),
+        (0, common_1.Controller)('user-settings/profile-image'),
+        __metadata("design:paramtypes", [profile_image_service_1.ProfileImageService,
+            avatar_service_1.AvatarService])
+    ], ProfileImageController);
+    return ProfileImageController;
+}
+//# sourceMappingURL=profile-image.controller.js.map

package/dist/storage/profile-image/profile-image.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-image.controller.js","sourceRoot":"","sources":["../../../src/storage/profile-image/profile-image.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;AAkEA,oEAqIC;AAvMD,2CAWwB;AACxB,6CAOyB;AAIzB,gDAAqE;AACrE,4DAAmD;AACnD,4CAAmD;AACnD,mDAAmD;AACnD,mEAA8D;AAC9D,qDAAiD;AACjD,iFAAiF;AACjF,4CAA2C;AAE3C,MAAM,MAAM,GAAG,gCAAgB,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;AAEhD;;;GAGG;AACH,SAAS,aAAa,CAAC,KAAc;IACnC,MAAM,IAAI,GAAI,KAAmC,EAAE,IAAI,CAAC;IACxD,IAAI,IAAI,KAAK,wBAAwB,EAAE,CAAC;QACtC,OAAO,IAAI,iCAAwB,CACjC,6BAA6B,MAAM,WAAW,CAC/C,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACxD,OAAO,IAAI,4BAAmB,CAC5B,8EAA8E,CAC/E,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAgB,4BAA4B;IAC1C,MAAM,uBAAuB,GAAG,IAAA,0DAA6B,GAAE,CAAC;IAEhE,IAEM,sBAAsB,GAF5B,MAEM,sBAAsB;QAEP;QACA;QAFnB,YACmB,aAAkC,EAClC,OAAsB;YADtB,kBAAa,GAAb,aAAa,CAAqB;YAClC,YAAO,GAAP,OAAO,CAAe;QACtC,CAAC;QAsBE,AAAN,KAAK,CAAC,OAAO,CACQ,MAAc,EAC1B,KAAmB;YAE1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAErD,KAAK;iBACF,MAAM,CAAC,GAAG,CAAC;gBACZ,kEAAkE;iBACjE,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC;iBACvC,MAAM,CAAC,wBAAwB,EAAE,SAAS,CAAC;iBAC3C,MAAM,CAAC,qBAAqB,EAAE,QAAQ,CAAC;iBACvC,MAAM,CAAC,yBAAyB,EAAE,6BAA6B,CAAC;gBACjE,6DAA6D;iBAC5D,MAAM,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC;YAEhD,IAAI,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5B,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YACzD,CAAC;YAED,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;QA2BK,AAAN,KAAK,CAAC,MAAM,CACH,GAAmB,EACP,MAAc,EACnB,KAAa;YAE3B,IAAI,CAAC,IAAA,uBAAW,EAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;gBACpC,MAAM,IAAI,4BAAmB,CAC3B,0DAA0D,CAC3D,CAAC;YACJ,CAAC;YAED,IAAI,MAAc,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,IAAA,uBAAW,EAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACvC,MAAM,EAAE,EAAE,QAAQ,EAAE,gCAAgB,EAAE,KAAK,EAAE,CAAC,EAAE;oBAChD,kBAAkB,EAAE,IAAI;iBACzB,CAAC,CAAC;gBAEH,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,MAAM,IAAI,4BAAmB,CAAC,kBAAkB,CAAC,CAAC;gBACpD,CAAC;gBACD,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;oBAC9B,MAAM,IAAI,4BAAmB,CAAC,4CAA4C,CAAC,CAAC;gBAC9E,CAAC;gBAED,yEAAyE;gBACzE,iEAAiE;gBACjE,sEAAsE;gBACtE,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;YAED,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAC1D,CAAC;QAcK,AAAN,KAAK,CAAC,MAAM,CAAoB,MAAc;YAC5C,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3C,CAAC;KACF,CAAA;IAnGO;QApBL,IAAA,YAAG,GAAE;QACL,IAAA,YAAI,EAAC,EAAE,WAAW,EAAE,CAAC,+BAAW,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACvD,IAAA,sBAAY,EAAC;YACZ,OAAO,EAAE,6CAA6C;YACtD,WAAW,EACT,mFAAmF;gBACnF,0FAA0F;gBAC1F,8FAA8F;gBAC9F,mFAAmF;gBACnF,+DAA+D;SAClE,CAAC;QACD,IAAA,qBAAW,EAAC,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,CAAC;QACjE,IAAA,qBAAW,EAAC;YACX,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,aAAa;YAC1B,OAAO,EAAE;gBACP,SAAS,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;aAC5D;SACF,CAAC;QACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;QAEpD,WAAA,IAAA,mBAAW,EAAC,IAAI,CAAC,CAAA;QACjB,WAAA,IAAA,YAAG,GAAE,CAAA;;;;yDAmBP;IA2BK;QAzBL,IAAA,aAAI,GAAE;QACN,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;QACvB,IAAA,YAAI,EAAC,EAAE,WAAW,EAAE,CAAC,+BAAW,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACxD,IAAA,sBAAY,EAAC;YACZ,OAAO,EAAE,0BAA0B;YACnC,WAAW,EACT,wFAAwF;gBACxF,wFAAwF;gBACxF,0EAA0E,MAAM,MAAM;gBACtF,6FAA6F;gBAC7F,6CAA6C;SAChD,CAAC;QACD,IAAA,qBAAW,EAAC,qBAAqB,CAAC;QAClC,IAAA,iBAAO,EAAC;YACP,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,CAAC,MAAM,CAAC;gBAClB,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;aAC3D;SACF,CAAC;QACD,IAAA,uBAAe,EAAC,uBAAuB,EAAE;YACxC,WAAW,EAAE,6BAA6B;SAC3C,CAAC;QACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,iEAAiE,EAAE,CAAC;QAC5G,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,gBAAgB,MAAM,KAAK,EAAE,CAAC;QAEpE,WAAA,IAAA,YAAG,GAAE,CAAA;QACL,WAAA,IAAA,mBAAW,EAAC,IAAI,CAAC,CAAA;QACjB,WAAA,IAAA,kBAAU,GAAE,CAAA;;;;wDA+Bd;IAcK;QAZL,IAAA,eAAM,GAAE;QACR,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;QACvB,IAAA,YAAI,EAAC,EAAE,WAAW,EAAE,CAAC,+BAAW,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACxD,IAAA,sBAAY,EAAC;YACZ,OAAO,EAAE,qCAAqC;YAC9C,WAAW,EACT,4FAA4F;gBAC5F,qFAAqF;SACxF,CAAC;QACD,IAAA,uBAAe,EAAC,uBAAuB,EAAE;YACxC,WAAW,EAAE,iBAAiB;SAC/B,CAAC;QACY,WAAA,IAAA,mBAAW,EAAC,IAAI,CAAC,CAAA;;;;wDAE9B;IA5HG,sBAAsB;QAF3B,IAAA,iBAAO,EAAC,eAAe,CAAC;QACxB,IAAA,mBAAU,EAAC,6BAA6B,CAAC;yCAGN,2CAAmB;YACzB,8BAAa;OAHrC,sBAAsB,CA6H3B;IAED,OAAO,sBAAsB,CAAC;AAChC,CAAC"}

package/dist/storage/profile-image/profile-image.d.ts

@@ -0,0 +1,138 @@
+import { type UserProfileSettingsValue } from '@marinoscar/platform-contract/settings';
+/**
+ * `storage_objects.metadata.purpose` stamped on every uploaded avatar.
+ *
+ * @stability experimental
+ */
+export declare const AVATAR_PURPOSE = "avatar";
+/**
+ * Hard ceiling on an uploaded avatar, in bytes.
+ *
+ * @stability experimental
+ */
+export declare const AVATAR_MAX_BYTES: number;
+/**
+ * Storage key prefix for a user's avatars. Only the profile-image upload
+ * endpoint writes under it, so a key outside this prefix is never treated as
+ * an avatar — even if its metadata was edited to say `purpose: 'avatar'`
+ * through the generic storage metadata endpoint.
+ *
+ * @stability experimental
+ */
+export declare function avatarKeyPrefix(userId: string): string;
+/**
+ * Same-origin URL at which an uploaded avatar is served publicly.
+ *
+ * @stability experimental
+ */
+export declare function avatarUrl(userId: string, objectId: string): string;
+/**
+ * Whether `value` is a canonical UUID string.
+ *
+ * @stability experimental
+ */
+export declare function isUuid(value: unknown): value is string;
+/**
+ * The subset of a `storage_objects` row needed to judge an avatar.
+ *
+ * @stability experimental
+ */
+export interface AvatarCandidate {
+    /** The uploader. */
+    uploadedById: string | null;
+    /** The stored key. */
+    storageKey: string;
+    /** The upload status. */
+    status: string;
+    /** The media type. */
+    mimeType: string;
+    /** Object metadata to store with it. */
+    metadata: unknown;
+}
+/**
+ * Whether `object` is a usable avatar belonging to `userId`: owned by them,
+ * written by the avatar upload path (key prefix + purpose), `ready`, and of a
+ * validated image type.
+ *
+ * @stability experimental
+ */
+export declare function isAvatarObjectFor(object: AvatarCandidate | null | undefined, userId: string): boolean;
+/**
+ * Normalised `profile` — `imageObjectId` is always present (`null` when none).
+ *
+ * @stability experimental
+ */
+export type NormalizedProfileSettings = UserProfileSettingsValue & {
+    /** The uploaded avatar object, or `null` (always present after normalisation). */
+    imageObjectId: string | null;
+};
+/**
+ * Normalise a stored `profile` value into the #367 shape.
+ *
+ * Rows written before #367 carry `useProviderImage` (and an unused
+ * `customImageUrl`) instead of `imageSource`. They are translated here, on
+ * read, rather than by a data migration: `useProviderImage === false` becomes
+ * `none`, anything else `provider`. The legacy keys are dropped, so the first
+ * write after this ships stores the new shape.
+ *
+ * @stability experimental
+ */
+export declare function normalizeProfileSettings(raw: unknown): NormalizedProfileSettings;
+/**
+ * The user fields the profile picture URL is resolved from.
+ *
+ * @stability experimental
+ */
+export interface ProfileImageUser {
+    /** The user id. */
+    id: string;
+    /** The identity provider's picture URL, or `null`. */
+    providerProfileImageUrl: string | null;
+}
+/**
+ * The single rule for "which picture represents this user":
+ *
+ *  - `none`     → `null`
+ *  - `provider` → the provider picture, or `null`
+ *  - `upload`   → the same-origin avatar URL, or `null` without an object id
+ *
+ * `users.profile_image_url` is deliberately NOT consulted: nothing writes it.
+ * Accepts a raw stored `profile` (or nothing, for a user without a settings
+ * row) and normalises it first.
+ *
+ * @stability experimental
+ */
+export declare function resolveProfileImageUrl(user: ProfileImageUser, rawProfile: unknown): string | null;
+/**
+ * The image types a profile picture may be (by magic bytes, never the declared type).
+ *
+ * @stability experimental
+ */
+export declare const AVATAR_MIME_TYPES: readonly ["image/jpeg", "image/png", "image/gif", "image/webp"];
+/**
+ * One of {@link AVATAR_MIME_TYPES}.
+ *
+ * @stability experimental
+ */
+export type AvatarMimeType = (typeof AVATAR_MIME_TYPES)[number];
+/**
+ * What `detectImageType` recognised from the leading bytes.
+ *
+ * @stability experimental
+ */
+export interface DetectedImageType {
+    /** The media type. */
+    mimeType: AvatarMimeType;
+    /** The file extension, with its dot. */
+    extension: 'jpg' | 'png' | 'gif' | 'webp';
+}
+/**
+ * Identify an image by its leading bytes. The client's declared MIME type and
+ * filename are never consulted — they are whatever the uploader says they are.
+ * Returns `null` for anything that is not JPEG, PNG, GIF or WebP (SVG, which is
+ * text and can carry script, is rejected by construction).
+ *
+ * @stability experimental
+ */
+export declare function detectImageType(buffer: Buffer): DetectedImageType | null;
+//# sourceMappingURL=profile-image.d.ts.map

package/dist/storage/profile-image/profile-image.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-image.d.ts","sourceRoot":"","sources":["../../../src/storage/profile-image/profile-image.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,KAAK,wBAAwB,EAC9B,MAAM,wCAAwC,CAAC;AAWhD;;;;GAIG;AACH,eAAO,MAAM,cAAc,WAAW,CAAC;AAEvC;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,QAAkB,CAAC;AAEhD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAElE;AAKD;;;;GAIG;AACH,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAEtD;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,oBAAoB;IACpB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,sBAAsB;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,yBAAyB;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,sBAAsB;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,wCAAwC;IACxC,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,eAAe,GAAG,IAAI,GAAG,SAAS,EAC1C,MAAM,EAAE,MAAM,GACb,OAAO,CAaT;AAMD;;;;GAIG;AACH,MAAM,MAAM,yBAAyB,GAAG,wBAAwB,GAAG;IACjE,kFAAkF;IAClF,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B,CAAC;AAEF;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,OAAO,GAAG,yBAAyB,CAsBhF;AAMD;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,mBAAmB;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,sDAAsD;IACtD,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;CACxC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,gBAAgB,EACtB,UAAU,EAAE,OAAO,GAClB,MAAM,GAAG,IAAI,CAaf;AAMD;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,iEAKpB,CAAC;AAEX;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhE;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,sBAAsB;IACtB,QAAQ,EAAE,cAAc,CAAC;IACzB,wCAAwC;IACxC,SAAS,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;CAC3C;AAOD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CAwBxE"}

package/dist/storage/profile-image/profile-image.js

@@ -0,0 +1,182 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AVATAR_MIME_TYPES = exports.AVATAR_MAX_BYTES = exports.AVATAR_PURPOSE = void 0;
+exports.avatarKeyPrefix = avatarKeyPrefix;
+exports.avatarUrl = avatarUrl;
+exports.isUuid = isUuid;
+exports.isAvatarObjectFor = isAvatarObjectFor;
+exports.normalizeProfileSettings = normalizeProfileSettings;
+exports.resolveProfileImageUrl = resolveProfileImageUrl;
+exports.detectImageType = detectImageType;
+const storage_key_prefixes_1 = require("../storage-key-prefixes");
+const settings_1 = require("@marinoscar/platform-contract/settings");
+// =============================================================================
+// Profile image (#367) — pure helpers shared by settings, auth and users
+// =============================================================================
+//
+// Pure functions with no Nest dependencies on purpose: `AuthService`,
+// `UsersService` and `UserSettingsService` all need them, and none of those
+// should have to import a module (and its providers) to answer "which URL
+// represents this user?".
+/**
+ * `storage_objects.metadata.purpose` stamped on every uploaded avatar.
+ *
+ * @stability experimental
+ */
+exports.AVATAR_PURPOSE = 'avatar';
+/**
+ * Hard ceiling on an uploaded avatar, in bytes.
+ *
+ * @stability experimental
+ */
+exports.AVATAR_MAX_BYTES = 5 * 1024 * 1024;
+/**
+ * Storage key prefix for a user's avatars. Only the profile-image upload
+ * endpoint writes under it, so a key outside this prefix is never treated as
+ * an avatar — even if its metadata was edited to say `purpose: 'avatar'`
+ * through the generic storage metadata endpoint.
+ *
+ * @stability experimental
+ */
+function avatarKeyPrefix(userId) {
+    return `${storage_key_prefixes_1.AVATARS_KEY_PREFIX}${userId}/`;
+}
+/**
+ * Same-origin URL at which an uploaded avatar is served publicly.
+ *
+ * @stability experimental
+ */
+function avatarUrl(userId, objectId) {
+    return `/api/users/${userId}/avatar/${objectId}`;
+}
+const UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+/**
+ * Whether `value` is a canonical UUID string.
+ *
+ * @stability experimental
+ */
+function isUuid(value) {
+    return typeof value === 'string' && UUID_PATTERN.test(value);
+}
+/**
+ * Whether `object` is a usable avatar belonging to `userId`: owned by them,
+ * written by the avatar upload path (key prefix + purpose), `ready`, and of a
+ * validated image type.
+ *
+ * @stability experimental
+ */
+function isAvatarObjectFor(object, userId) {
+    if (!object)
+        return false;
+    const metadata = object.metadata && typeof object.metadata === 'object'
+        ? object.metadata
+        : {};
+    return (object.uploadedById === userId &&
+        object.storageKey.startsWith(avatarKeyPrefix(userId)) &&
+        metadata.purpose === exports.AVATAR_PURPOSE &&
+        object.status === 'ready' &&
+        exports.AVATAR_MIME_TYPES.includes(object.mimeType));
+}
+/**
+ * Normalise a stored `profile` value into the #367 shape.
+ *
+ * Rows written before #367 carry `useProviderImage` (and an unused
+ * `customImageUrl`) instead of `imageSource`. They are translated here, on
+ * read, rather than by a data migration: `useProviderImage === false` becomes
+ * `none`, anything else `provider`. The legacy keys are dropped, so the first
+ * write after this ships stores the new shape.
+ *
+ * @stability experimental
+ */
+function normalizeProfileSettings(raw) {
+    const profile = raw && typeof raw === 'object' ? raw : {};
+    const imageSource = settings_1.PROFILE_IMAGE_SOURCES.includes(profile.imageSource)
+        ? profile.imageSource
+        : profile.useProviderImage === false
+            ? 'none'
+            : 'provider';
+    const normalized = {
+        imageSource,
+        imageObjectId: isUuid(profile.imageObjectId) ? profile.imageObjectId : null,
+    };
+    if (typeof profile.displayName === 'string') {
+        normalized.displayName = profile.displayName;
+    }
+    return normalized;
+}
+/**
+ * The single rule for "which picture represents this user":
+ *
+ *  - `none`     → `null`
+ *  - `provider` → the provider picture, or `null`
+ *  - `upload`   → the same-origin avatar URL, or `null` without an object id
+ *
+ * `users.profile_image_url` is deliberately NOT consulted: nothing writes it.
+ * Accepts a raw stored `profile` (or nothing, for a user without a settings
+ * row) and normalises it first.
+ *
+ * @stability experimental
+ */
+function resolveProfileImageUrl(user, rawProfile) {
+    const profile = normalizeProfileSettings(rawProfile);
+    switch (profile.imageSource) {
+        case 'none':
+            return null;
+        case 'upload':
+            return profile.imageObjectId
+                ? avatarUrl(user.id, profile.imageObjectId)
+                : null;
+        case 'provider':
+        default:
+            return user.providerProfileImageUrl ?? null;
+    }
+}
+// -----------------------------------------------------------------------------
+// Image type detection (magic bytes)
+// -----------------------------------------------------------------------------
+/**
+ * The image types a profile picture may be (by magic bytes, never the declared type).
+ *
+ * @stability experimental
+ */
+exports.AVATAR_MIME_TYPES = [
+    'image/jpeg',
+    'image/png',
+    'image/gif',
+    'image/webp',
+];
+function startsWith(buffer, bytes, offset = 0) {
+    if (buffer.length < offset + bytes.length)
+        return false;
+    return bytes.every((byte, i) => buffer[offset + i] === byte);
+}
+/**
+ * Identify an image by its leading bytes. The client's declared MIME type and
+ * filename are never consulted — they are whatever the uploader says they are.
+ * Returns `null` for anything that is not JPEG, PNG, GIF or WebP (SVG, which is
+ * text and can carry script, is rejected by construction).
+ *
+ * @stability experimental
+ */
+function detectImageType(buffer) {
+    // JPEG: FF D8 FF
+    if (startsWith(buffer, [0xff, 0xd8, 0xff])) {
+        return { mimeType: 'image/jpeg', extension: 'jpg' };
+    }
+    // PNG: 89 50 4E 47 0D 0A 1A 0A
+    if (startsWith(buffer, [0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a])) {
+        return { mimeType: 'image/png', extension: 'png' };
+    }
+    // GIF: "GIF87a" / "GIF89a"
+    if (startsWith(buffer, [0x47, 0x49, 0x46, 0x38, 0x37, 0x61]) ||
+        startsWith(buffer, [0x47, 0x49, 0x46, 0x38, 0x39, 0x61])) {
+        return { mimeType: 'image/gif', extension: 'gif' };
+    }
+    // WebP: "RIFF" <4-byte size> "WEBP"
+    if (startsWith(buffer, [0x52, 0x49, 0x46, 0x46]) &&
+        startsWith(buffer, [0x57, 0x45, 0x42, 0x50], 8)) {
+        return { mimeType: 'image/webp', extension: 'webp' };
+    }
+    return null;
+}
+//# sourceMappingURL=profile-image.js.map

package/dist/storage/profile-image/profile-image.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-image.js","sourceRoot":"","sources":["../../../src/storage/profile-image/profile-image.ts"],"names":[],"mappings":";;;AAsCA,0CAEC;AAOD,8BAEC;AAUD,wBAEC;AA2BD,8CAgBC;AA2BD,4DAsBC;AA+BD,wDAgBC;AAkDD,0CAwBC;AAlRD,kEAA6D;AAC7D,qEAIgD;AAEhD,gFAAgF;AAChF,yEAAyE;AACzE,gFAAgF;AAChF,EAAE;AACF,sEAAsE;AACtE,4EAA4E;AAC5E,0EAA0E;AAC1E,0BAA0B;AAE1B;;;;GAIG;AACU,QAAA,cAAc,GAAG,QAAQ,CAAC;AAEvC;;;;GAIG;AACU,QAAA,gBAAgB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEhD;;;;;;;GAOG;AACH,SAAgB,eAAe,CAAC,MAAc;IAC5C,OAAO,GAAG,yCAAkB,GAAG,MAAM,GAAG,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,SAAgB,SAAS,CAAC,MAAc,EAAE,QAAgB;IACxD,OAAO,cAAc,MAAM,WAAW,QAAQ,EAAE,CAAC;AACnD,CAAC;AAED,MAAM,YAAY,GAChB,iEAAiE,CAAC;AAEpE;;;;GAIG;AACH,SAAgB,MAAM,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC/D,CAAC;AAoBD;;;;;;GAMG;AACH,SAAgB,iBAAiB,CAC/B,MAA0C,EAC1C,MAAc;IAEd,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,MAAM,QAAQ,GACZ,MAAM,CAAC,QAAQ,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;QACpD,CAAC,CAAE,MAAM,CAAC,QAAoC;QAC9C,CAAC,CAAC,EAAE,CAAC;IACT,OAAO,CACL,MAAM,CAAC,YAAY,KAAK,MAAM;QAC9B,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACrD,QAAQ,CAAC,OAAO,KAAK,sBAAc;QACnC,MAAM,CAAC,MAAM,KAAK,OAAO;QACzB,yBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,QAA0B,CAAC,CAC9D,CAAC;AACJ,CAAC;AAgBD;;;;;;;;;;GAUG;AACH,SAAgB,wBAAwB,CAAC,GAAY;IACnD,MAAM,OAAO,GACX,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAE,GAA+B,CAAC,CAAC,CAAC,EAAE,CAAC;IAEzE,MAAM,WAAW,GAAuB,gCAAqB,CAAC,QAAQ,CACpE,OAAO,CAAC,WAAiC,CAC1C;QACC,CAAC,CAAE,OAAO,CAAC,WAAkC;QAC7C,CAAC,CAAC,OAAO,CAAC,gBAAgB,KAAK,KAAK;YAClC,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,UAAU,CAAC;IAEjB,MAAM,UAAU,GAA8B;QAC5C,WAAW;QACX,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI;KAC5E,CAAC;IAEF,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QAC5C,UAAU,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IAC/C,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAkBD;;;;;;;;;;;;GAYG;AACH,SAAgB,sBAAsB,CACpC,IAAsB,EACtB,UAAmB;IAEnB,MAAM,OAAO,GAAG,wBAAwB,CAAC,UAAU,CAAC,CAAC;IACrD,QAAQ,OAAO,CAAC,WAAW,EAAE,CAAC;QAC5B,KAAK,MAAM;YACT,OAAO,IAAI,CAAC;QACd,KAAK,QAAQ;YACX,OAAO,OAAO,CAAC,aAAa;gBAC1B,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,aAAa,CAAC;gBAC3C,CAAC,CAAC,IAAI,CAAC;QACX,KAAK,UAAU,CAAC;QAChB;YACE,OAAO,IAAI,CAAC,uBAAuB,IAAI,IAAI,CAAC;IAChD,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,qCAAqC;AACrC,gFAAgF;AAEhF;;;;GAIG;AACU,QAAA,iBAAiB,GAAG;IAC/B,YAAY;IACZ,WAAW;IACX,WAAW;IACX,YAAY;CACJ,CAAC;AAqBX,SAAS,UAAU,CAAC,MAAc,EAAE,KAAe,EAAE,MAAM,GAAG,CAAC;IAC7D,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,eAAe,CAAC,MAAc;IAC5C,iBAAiB;IACjB,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QAC3C,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACtD,CAAC;IACD,+BAA+B;IAC/B,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QACzE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACrD,CAAC;IACD,2BAA2B;IAC3B,IACE,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACxD,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,EACxD,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACrD,CAAC;IACD,oCAAoC;IACpC,IACE,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5C,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,EAC/C,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IACvD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/storage/profile-image/profile-image.module.d.ts

@@ -0,0 +1,39 @@
+import { DynamicModule } from '@nestjs/common';
+/**
+ * Uploaded profile pictures (#367): `GET`/`POST`/`DELETE` on
+ * `/api/user-settings/profile-image` (`user_settings:read|write`) and the
+ * public `GET /api/users/:userId/avatar/:objectId`.
+ *
+ * Separate from the settings slice because it needs the storage provider, and
+ * the settings slice must stay below storage in the slice graph. The picture
+ * is the `profile` field of the user settings document, which the settings
+ * slice owns and validates through its `SETTINGS_PROFILE_IMAGES` port (the
+ * reference app binds that port to the helpers exported here:
+ * `normalizeProfileSettings`, `isAvatarObjectFor`).
+ *
+ * Needs, from the app: `SettingsModule.forRoot()` (global), the
+ * `PLATFORM_PRISMA` and `STORAGE_SYSTEM_DATA` ports, and every user-settings
+ * namespace registered before `forRoot()` runs (the upload response embeds
+ * the composed user-settings schema).
+ *
+ * @stability experimental
+ */
+export declare class ProfileImageModule {
+    /**
+     * The module for one app. Builds the controller now, so call it after the
+     * user-settings namespaces are registered.
+     *
+     * @returns the dynamic module. It exports `ProfileImageService` and `AvatarService`.
+     *
+     * @example
+     * ```ts
+     * import '../../settings/registry'; // the app's namespace manifests
+     * export const ProfileImageModule = PlatformProfileImageModule.forRoot();
+     * ```
+     *
+     * @extensionPoint option
+     * @stability experimental
+     */
+    static forRoot(): DynamicModule;
+}
+//# sourceMappingURL=profile-image.module.d.ts.map

package/dist/storage/profile-image/profile-image.module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-image.module.d.ts","sourceRoot":"","sources":["../../../src/storage/profile-image/profile-image.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAU,MAAM,gBAAgB,CAAC;AAQvD;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBACa,kBAAkB;IAC7B;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,OAAO,IAAI,aAAa;CAShC"}

package/dist/storage/profile-image/profile-image.module.js

@@ -0,0 +1,66 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var ProfileImageModule_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProfileImageModule = void 0;
+const common_1 = require("@nestjs/common");
+const storage_providers_module_1 = require("../providers/storage-providers.module");
+const avatar_controller_1 = require("./avatar.controller");
+const avatar_service_1 = require("./avatar.service");
+const profile_image_controller_1 = require("./profile-image.controller");
+const profile_image_service_1 = require("./profile-image.service");
+/**
+ * Uploaded profile pictures (#367): `GET`/`POST`/`DELETE` on
+ * `/api/user-settings/profile-image` (`user_settings:read|write`) and the
+ * public `GET /api/users/:userId/avatar/:objectId`.
+ *
+ * Separate from the settings slice because it needs the storage provider, and
+ * the settings slice must stay below storage in the slice graph. The picture
+ * is the `profile` field of the user settings document, which the settings
+ * slice owns and validates through its `SETTINGS_PROFILE_IMAGES` port (the
+ * reference app binds that port to the helpers exported here:
+ * `normalizeProfileSettings`, `isAvatarObjectFor`).
+ *
+ * Needs, from the app: `SettingsModule.forRoot()` (global), the
+ * `PLATFORM_PRISMA` and `STORAGE_SYSTEM_DATA` ports, and every user-settings
+ * namespace registered before `forRoot()` runs (the upload response embeds
+ * the composed user-settings schema).
+ *
+ * @stability experimental
+ */
+let ProfileImageModule = ProfileImageModule_1 = class ProfileImageModule {
+    /**
+     * The module for one app. Builds the controller now, so call it after the
+     * user-settings namespaces are registered.
+     *
+     * @returns the dynamic module. It exports `ProfileImageService` and `AvatarService`.
+     *
+     * @example
+     * ```ts
+     * import '../../settings/registry'; // the app's namespace manifests
+     * export const ProfileImageModule = PlatformProfileImageModule.forRoot();
+     * ```
+     *
+     * @extensionPoint option
+     * @stability experimental
+     */
+    static forRoot() {
+        return {
+            module: ProfileImageModule_1,
+            imports: [storage_providers_module_1.StorageProvidersModule],
+            controllers: [(0, profile_image_controller_1.createProfileImageController)(), avatar_controller_1.AvatarController],
+            providers: [profile_image_service_1.ProfileImageService, avatar_service_1.AvatarService],
+            exports: [profile_image_service_1.ProfileImageService, avatar_service_1.AvatarService],
+        };
+    }
+};
+exports.ProfileImageModule = ProfileImageModule;
+exports.ProfileImageModule = ProfileImageModule = ProfileImageModule_1 = __decorate([
+    (0, common_1.Module)({})
+], ProfileImageModule);
+//# sourceMappingURL=profile-image.module.js.map

package/dist/storage/profile-image/profile-image.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-image.module.js","sourceRoot":"","sources":["../../../src/storage/profile-image/profile-image.module.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAAuD;AAEvD,oFAA+E;AAC/E,2DAAuD;AACvD,qDAAiD;AACjD,yEAA0E;AAC1E,mEAA8D;AAE9D;;;;;;;;;;;;;;;;;;GAkBG;AAEI,IAAM,kBAAkB,0BAAxB,MAAM,kBAAkB;IAC7B;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,OAAO;QACZ,OAAO;YACL,MAAM,EAAE,oBAAkB;YAC1B,OAAO,EAAE,CAAC,iDAAsB,CAAC;YACjC,WAAW,EAAE,CAAC,IAAA,uDAA4B,GAAE,EAAE,oCAAgB,CAAC;YAC/D,SAAS,EAAE,CAAC,2CAAmB,EAAE,8BAAa,CAAC;YAC/C,OAAO,EAAE,CAAC,2CAAmB,EAAE,8BAAa,CAAC;SAC9C,CAAC;IACJ,CAAC;CACF,CAAA;AAzBY,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,kBAAkB,CAyB9B"}