@marinoscar/platform-api 0.1.0-next.3 → 0.1.0-next.5

package/dist/storage/storage-key-prefix.registry.js

@@ -0,0 +1,303 @@
+"use strict";
+// =============================================================================
+// The storage key-prefix registry (issue #679, PP-1.7)
+// =============================================================================
+//
+// `npm run storage:purge` (what `appctl deploy uninstall --purge-storage` runs
+// inside the api image) deletes ONLY the object-storage prefixes the
+// application declares. That list used to be a closed array in
+// `storage-key-prefixes.ts`, so a fork that wrote a new prefix had to edit a
+// platform file and an "exactly six" test, or its objects silently survived a
+// purge. This registry opens it: a platform module declares its prefixes in
+// `platform-storage-prefixes.ts`, an app declares its own in
+// `app-registrations/storage-prefixes.ts`, and the manifest registers both.
+//
+// The validation below is the point of the file: it makes a prefix the purge
+// would mishandle IMPOSSIBLE TO REGISTER, at import time, with a
+// `RegistryError`:
+//
+//   - not matching `STORAGE_KEY_PREFIX_PATTERN` (no leading `/`, no `//`, one
+//     trailing `/`): `node-outputs` without its slash would be listed as
+//     `node-outputs` and match `node-outputs-old/` too; `node-outputs//` would
+//     match nothing and report success.
+//   - the same prefix twice, or one prefix starting with another: the purge
+//     would count and delete the same objects twice, and the report would
+//     overstate what the bucket held.
+//
+// ⚠ FRAMEWORK-FREE. Imports only the registry primitive (and the tenancy
+// mode), so it is safe to import from both sides of the storage boundary and
+// from the standalone purge entry point.
+//
+// SCOPES AND THE KEY BUILDER (#736, PP-8.3). Every prefix now also says where
+// a NEW key puts its tenant segment (`scope`), and `buildObjectKey` is the one
+// place a writer builds a key: `uploads/<orgId>/…` (org), `avatars/<userId>/…`
+// (user), `storage-config-test/…` (deployment). Root prefixes are unchanged,
+// so the full purge (`allKeyPrefixes()`), this tripwire and every runbook keep
+// working, and `orgKeyPrefixes(orgId)` gives org offboarding one listable
+// prefix per org-scoped root. Existing rows keep their stored `storage_key`
+// (legacy `uploads/<timestamp>/…` included): reads, downloads and deletes use
+// the stored key and never rebuild it.
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.storageKeyPrefixRegistry = exports.STORAGE_KEY_PREFIX_PATTERN = exports.KEY_PREFIX_SCOPES = void 0;
+exports.registerStorageKeyPrefixes = registerStorageKeyPrefixes;
+exports.registerKeyPrefix = registerKeyPrefix;
+exports.isRegisteredStorageKey = isRegisteredStorageKey;
+exports.allKeyPrefixes = allKeyPrefixes;
+exports.survivingKeyPrefixes = survivingKeyPrefixes;
+exports.orgKeyPrefixes = orgKeyPrefixes;
+exports.buildObjectKey = buildObjectKey;
+const index_1 = require("../core/index");
+const index_2 = require("../identity/index");
+/**
+ * Every {@link KeyPrefixScope}, in documentation order.
+ *
+ * @stability experimental
+ */
+exports.KEY_PREFIX_SCOPES = Object.freeze(['deployment', 'org', 'user']);
+/**
+ * The shape every registered prefix must have: lowercase segments of letters,
+ * digits and `-`, separated by single `/`, ending with exactly one `/`, never
+ * starting with one.
+ *
+ * @stability experimental
+ */
+exports.STORAGE_KEY_PREFIX_PATTERN = /^[a-z0-9][a-z0-9-]*(?:\/[a-z0-9][a-z0-9-]*)*\/$/;
+/** The id shape: kebab-case, so ids read the same in the purge report and in docs. */
+const STORAGE_KEY_PREFIX_ID_PATTERN = /^[a-z0-9][a-z0-9-]*$/;
+/** Throws when `def` cannot be registered next to `others`; the message names the conflict. */
+function assertRegistrable(def, others) {
+    if (typeof def.prefix !== 'string' || !exports.STORAGE_KEY_PREFIX_PATTERN.test(def.prefix)) {
+        throw new Error(`prefix ${JSON.stringify(def.prefix)} must match ${exports.STORAGE_KEY_PREFIX_PATTERN} ` +
+            "(lowercase segments, no leading '/', no '//', exactly one trailing '/')");
+    }
+    if (typeof def.owner !== 'string' || def.owner.trim() === '') {
+        throw new Error('owner is required');
+    }
+    if (typeof def.description !== 'string' || def.description.trim() === '') {
+        throw new Error('description is required');
+    }
+    if (def.scope !== undefined && !exports.KEY_PREFIX_SCOPES.includes(def.scope)) {
+        throw new Error(`scope ${JSON.stringify(def.scope)} must be one of ${exports.KEY_PREFIX_SCOPES.join(', ')}`);
+    }
+    if (def.survivesFactoryReset !== undefined && typeof def.survivesFactoryReset !== 'boolean') {
+        throw new Error('survivesFactoryReset must be a boolean');
+    }
+    for (const other of others) {
+        if (other.id === def.id)
+            continue; // the duplicate-id rule reports this one
+        if (other.prefix === def.prefix) {
+            throw new Error(`prefix "${def.prefix}" is already registered by "${other.id}"`);
+        }
+        if (def.prefix.startsWith(other.prefix) || other.prefix.startsWith(def.prefix)) {
+            throw new Error(`prefix "${def.prefix}" overlaps "${other.prefix}" (registered by "${other.id}"); ` +
+                'the purge would count and delete the same objects twice');
+        }
+    }
+}
+/**
+ * Every object-storage key prefix this application writes under, in
+ * registration order (platform entries first, then the app's). The only thing
+ * a destructive path may enumerate: read it through {@link allKeyPrefixes}.
+ *
+ * @stability experimental
+ */
+exports.storageKeyPrefixRegistry = (0, index_1.defineRegistry)({
+    name: 'storage-key-prefixes',
+    idOf: (d) => d.id,
+    idPattern: STORAGE_KEY_PREFIX_ID_PATTERN,
+    // Checks against what is already registered. Overlaps INSIDE one batch are
+    // checked by `registerStorageKeyPrefixes`, because `registerAll` runs
+    // `validate` before any entry of the batch is added.
+    validate: (d, registry) => assertRegistrable(d, registry.list()),
+});
+/**
+ * Registers `defs`, all or nothing. Unlike a bare `registerAll`, it also
+ * rejects two entries of the same batch that share or overlap a prefix.
+ *
+ * An entry ALREADY REGISTERED with the identical definition (same id, prefix,
+ * owner, description and scope) is skipped rather than refused, so a slice's
+ * own `forRoot()` can register its prefixes after an app's manifest already
+ * did, in the app's order. A different definition under a registered id is
+ * still `DUPLICATE_ID`.
+ *
+ * @param defs - the prefixes, in purge order.
+ * @extensionPoint registry
+ * @stability experimental
+ *
+ * @throws RegistryError `INVALID_ENTRY` for a malformed, duplicate or
+ *   overlapping prefix, `DUPLICATE_ID`, `INVALID_ID` or `FROZEN`; the registry
+ *   is unchanged when it throws.
+ */
+function registerStorageKeyPrefixes(defs) {
+    defs = defs.filter((def) => !isAlreadyRegistered(def));
+    if (defs.length === 0)
+        return;
+    defs.forEach((def, index) => {
+        try {
+            assertRegistrable(def, defs.slice(0, index));
+        }
+        catch (err) {
+            const reason = err instanceof Error ? err.message : String(err);
+            throw new index_1.RegistryError('INVALID_ENTRY', exports.storageKeyPrefixRegistry.name, `Invalid entry "${def.id}" in registry "${exports.storageKeyPrefixRegistry.name}": ${reason}`, { id: typeof def.id === 'string' ? def.id : undefined, cause: err });
+        }
+    });
+    exports.storageKeyPrefixRegistry.registerAll(defs);
+}
+/** Whether `def` is registered already, with exactly this definition. */
+function isAlreadyRegistered(def) {
+    const existing = exports.storageKeyPrefixRegistry.get(def.id);
+    return (existing !== undefined &&
+        existing.prefix === def.prefix &&
+        existing.owner === def.owner &&
+        existing.description === def.description &&
+        (existing.scope ?? 'deployment') === (def.scope ?? 'deployment') &&
+        (existing.survivesFactoryReset ?? false) === (def.survivesFactoryReset ?? false));
+}
+/**
+ * Registers one prefix: {@link registerStorageKeyPrefixes} with one entry.
+ *
+ * @param def - the prefix.
+ * @throws RegistryError as {@link registerStorageKeyPrefixes} does.
+ *
+ * @example
+ * ```ts
+ * registerKeyPrefix({ id: 'exports', prefix: 'exports/', owner: 'health-export', scope: 'org', description: 'User data exports.' });
+ * ```
+ *
+ * @extensionPoint registry
+ * @stability experimental
+ */
+function registerKeyPrefix(def) {
+    registerStorageKeyPrefixes([def]);
+}
+/**
+ * Whether `key` lies under a registered prefix, i.e. whether a purge would reach it.
+ *
+ * @param key - an object key.
+ * @returns `true` when a registered root prefix covers it.
+ *
+ * @stability experimental
+ */
+function isRegisteredStorageKey(key) {
+    return exports.storageKeyPrefixRegistry.list().some((d) => key.startsWith(d.prefix));
+}
+/**
+ * Every registered root prefix, in registration order: what a FULL purge
+ * enumerates (`runStoragePurge`). Covers legacy and org-segmented keys alike,
+ * since both sit under the same root.
+ *
+ * @returns a frozen array, built now from the registry of the running process.
+ *
+ * @extensionPoint registry
+ * @stability experimental
+ */
+function allKeyPrefixes() {
+    return Object.freeze(exports.storageKeyPrefixRegistry.list().map((d) => d.prefix));
+}
+/**
+ * Every registered root prefix marked `survivesFactoryReset: true`, in
+ * registration order: what the admin factory reset keeps (#743).
+ *
+ * @returns a frozen array.
+ *
+ * @stability experimental
+ */
+function survivingKeyPrefixes() {
+    return Object.freeze(exports.storageKeyPrefixRegistry
+        .list()
+        .filter((d) => d.survivesFactoryReset === true)
+        .map((d) => d.prefix));
+}
+/**
+ * Every `<prefix><orgId>/` of the org-scoped prefixes: what org offboarding
+ * enumerates. ⚠ Not sufficient alone: objects written before #736 have no org
+ * segment (`uploads/<timestamp>/…`), so offboarding ALSO deletes the stored
+ * keys of `storage_objects WHERE org_id = $1`.
+ *
+ * @param orgId - the organization id.
+ * @returns a frozen array, in registration order.
+ * @throws Error when `orgId` is empty or not one path segment.
+ *
+ * @extensionPoint registry
+ * @stability experimental
+ */
+function orgKeyPrefixes(orgId) {
+    assertSegment('orgId', orgId);
+    return Object.freeze(exports.storageKeyPrefixRegistry
+        .list()
+        .filter((d) => d.scope === 'org')
+        .map((d) => `${d.prefix}${orgId}/`));
+}
+/** A path segment the builder accepts: no `/`, not empty, not `.`/`..`. */
+function assertPart(part) {
+    if (typeof part !== 'string' || part === '' || part.includes('/') || part === '.' || part === '..') {
+        throw new Error(`buildObjectKey(): invalid key part ${JSON.stringify(part)} (non-empty, no '/', not '.' or '..')`);
+    }
+}
+/**
+ * The tenant segment: one non-empty path segment (no `/`, not `.`/`..`). Not
+ * checked as a UUID here: the organization comes from the principal (the guard
+ * validated it against the user's memberships) or a job payload, and row-level
+ * security rejects any other on the row itself.
+ */
+function assertSegment(name, value) {
+    if (typeof value !== 'string' || value === '' || value.includes('/') || value === '.' || value === '..') {
+        throw new Error(`${name} must be one non-empty path segment (got ${JSON.stringify(value)})`);
+    }
+}
+/**
+ * Builds a NEW object key under a registered prefix:
+ *
+ * - org scope: `<prefix><orgId>/<…parts>`;
+ * - user scope: `<prefix><userId>/<…parts>`;
+ * - deployment scope: `<prefix><…parts>`.
+ *
+ * Never used to find an existing object: a row's stored `storage_key` is the
+ * truth (legacy keys have no org segment).
+ *
+ * @param id - the registered prefix id (`'uploads'`).
+ * @param ctx - the organization and user; see {@link ObjectKeyContext}.
+ * @param parts - the remaining path segments (`'<timestamp>'`, `'<uuid>.pdf'`); at least one.
+ * @returns the key.
+ * @throws Error when `id` is not registered, a part is malformed, a user-scoped key
+ *   has no `userId`, or an org-scoped key has no `orgId` (outside single-org mode
+ *   with a `defaultOrgId`).
+ *
+ * @example
+ * ```ts
+ * buildObjectKey('uploads', { orgId }, String(Date.now()), `${randomUUID()}.pdf`);
+ * // 'uploads/<orgId>/1733000000000/<uuid>.pdf'
+ * ```
+ *
+ * @extensionPoint registry
+ * @stability experimental
+ */
+function buildObjectKey(id, ctx, ...parts) {
+    const def = exports.storageKeyPrefixRegistry.get(id);
+    if (def === undefined) {
+        throw new Error(`buildObjectKey(): no key prefix "${id}" is registered`);
+    }
+    if (parts.length === 0) {
+        throw new Error(`buildObjectKey(): a key under "${def.prefix}" needs at least one part`);
+    }
+    parts.forEach(assertPart);
+    const scope = def.scope ?? 'deployment';
+    if (scope === 'deployment')
+        return `${def.prefix}${parts.join('/')}`;
+    if (scope === 'user') {
+        assertSegment(`buildObjectKey("${id}"): userId`, ctx.userId);
+        return `${def.prefix}${ctx.userId}/${parts.join('/')}`;
+    }
+    let orgId = ctx.orgId;
+    if (orgId === undefined && (0, index_2.currentTenancyMode)() === 'single' && ctx.defaultOrgId !== undefined) {
+        orgId = ctx.defaultOrgId;
+    }
+    if (orgId === undefined) {
+        throw new Error(`buildObjectKey("${id}"): an org-scoped key needs ctx.orgId ` +
+            '(only single-organization mode may fall back to the default organization of the request scope)');
+    }
+    assertSegment(`buildObjectKey("${id}"): orgId`, orgId);
+    return `${def.prefix}${orgId}/${parts.join('/')}`;
+}
+//# sourceMappingURL=storage-key-prefix.registry.js.map

package/dist/storage/storage-key-prefix.registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-key-prefix.registry.js","sourceRoot":"","sources":["../../src/storage/storage-key-prefix.registry.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,uDAAuD;AACvD,gFAAgF;AAChF,EAAE;AACF,+EAA+E;AAC/E,qEAAqE;AACrE,+DAA+D;AAC/D,6EAA6E;AAC7E,8EAA8E;AAC9E,4EAA4E;AAC5E,6DAA6D;AAC7D,4EAA4E;AAC5E,EAAE;AACF,6EAA6E;AAC7E,iEAAiE;AACjE,mBAAmB;AACnB,EAAE;AACF,8EAA8E;AAC9E,yEAAyE;AACzE,+EAA+E;AAC/E,wCAAwC;AACxC,4EAA4E;AAC5E,0EAA0E;AAC1E,sCAAsC;AACtC,EAAE;AACF,yEAAyE;AACzE,6EAA6E;AAC7E,yCAAyC;AACzC,EAAE;AACF,8EAA8E;AAC9E,+EAA+E;AAC/E,+EAA+E;AAC/E,6EAA6E;AAC7E,+EAA+E;AAC/E,0EAA0E;AAC1E,4EAA4E;AAC5E,8EAA8E;AAC9E,uCAAuC;AACvC,gFAAgF;;;AAgJhF,gEAiBC;AA6BD,8CAEC;AAUD,wDAEC;AAYD,wCAEC;AAUD,oDAOC;AAeD,wCAQC;AAqED,wCA8BC;AAnWD,yCAAwE;AACxE,6CAAuD;AAgBvD;;;;GAIG;AACU,QAAA,iBAAiB,GAA8B,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AAsCzG;;;;;;GAMG;AACU,QAAA,0BAA0B,GAAG,iDAAiD,CAAC;AAE5F,sFAAsF;AACtF,MAAM,6BAA6B,GAAG,sBAAsB,CAAC;AAE7D,+FAA+F;AAC/F,SAAS,iBAAiB,CAAC,GAAwB,EAAE,MAAqC;IACxF,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,kCAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CACb,UAAU,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,kCAA0B,GAAG;YAC9E,yEAAyE,CAC5E,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,IAAI,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,yBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,mBAAmB,yBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvG,CAAC;IACD,IAAI,GAAG,CAAC,oBAAoB,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;QAC5F,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE;YAAE,SAAS,CAAC,yCAAyC;QAC5E,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,WAAW,GAAG,CAAC,MAAM,+BAA+B,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/E,MAAM,IAAI,KAAK,CACb,WAAW,GAAG,CAAC,MAAM,eAAe,KAAK,CAAC,MAAM,qBAAqB,KAAK,CAAC,EAAE,MAAM;gBACjF,yDAAyD,CAC5D,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACU,QAAA,wBAAwB,GAAkC,IAAA,sBAAc,EAAsB;IACzG,IAAI,EAAE,sBAAsB;IAC5B,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE;IACjB,SAAS,EAAE,6BAA6B;IACxC,2EAA2E;IAC3E,sEAAsE;IACtE,qDAAqD;IACrD,QAAQ,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;CACjE,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAgB,0BAA0B,CAAC,IAAoC;IAC7E,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC;IACvD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC9B,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;QAC1B,IAAI,CAAC;YACH,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChE,MAAM,IAAI,qBAAa,CACrB,eAAe,EACf,gCAAwB,CAAC,IAAI,EAC7B,kBAAkB,GAAG,CAAC,EAAE,kBAAkB,gCAAwB,CAAC,IAAI,MAAM,MAAM,EAAE,EACrF,EAAE,EAAE,EAAE,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,CACpE,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IACH,gCAAwB,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED,yEAAyE;AACzE,SAAS,mBAAmB,CAAC,GAAwB;IACnD,MAAM,QAAQ,GAAG,gCAAwB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACtD,OAAO,CACL,QAAQ,KAAK,SAAS;QACtB,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM;QAC9B,QAAQ,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK;QAC5B,QAAQ,CAAC,WAAW,KAAK,GAAG,CAAC,WAAW;QACxC,CAAC,QAAQ,CAAC,KAAK,IAAI,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,YAAY,CAAC;QAChE,CAAC,QAAQ,CAAC,oBAAoB,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,IAAI,KAAK,CAAC,CACjF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAgB,iBAAiB,CAAC,GAAwB;IACxD,0BAA0B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AACpC,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,sBAAsB,CAAC,GAAW;IAChD,OAAO,gCAAwB,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,cAAc;IAC5B,OAAO,MAAM,CAAC,MAAM,CAAC,gCAAwB,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,oBAAoB;IAClC,OAAO,MAAM,CAAC,MAAM,CAClB,gCAAwB;SACrB,IAAI,EAAE;SACN,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,oBAAoB,KAAK,IAAI,CAAC;SAC9C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CACxB,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAgB,cAAc,CAAC,KAAa;IAC1C,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC9B,OAAO,MAAM,CAAC,MAAM,CAClB,gCAAwB;SACrB,IAAI,EAAE;SACN,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC;SAChC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,KAAK,GAAG,CAAC,CACtC,CAAC;AACJ,CAAC;AAuBD,2EAA2E;AAC3E,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QACnG,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACrH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CAAC,IAAY,EAAE,KAAyB;IAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACxG,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,4CAA4C,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/F,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,SAAgB,cAAc,CAAC,EAAU,EAAE,GAAqB,EAAE,GAAG,KAAe;IAClF,MAAM,GAAG,GAAG,gCAAwB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,oCAAoC,EAAE,iBAAiB,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,kCAAkC,GAAG,CAAC,MAAM,2BAA2B,CAAC,CAAC;IAC3F,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAE1B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,YAAY,CAAC;IACxC,IAAI,KAAK,KAAK,YAAY;QAAE,OAAO,GAAG,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAErE,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,aAAa,CAAC,mBAAmB,EAAE,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAC7D,OAAO,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACzD,CAAC;IAED,IAAI,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;IACtB,IAAI,KAAK,KAAK,SAAS,IAAI,IAAA,0BAAkB,GAAE,KAAK,QAAQ,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/F,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC;IAC3B,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,mBAAmB,EAAE,wCAAwC;YAC3D,gGAAgG,CACnG,CAAC;IACJ,CAAC;IACD,aAAa,CAAC,mBAAmB,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;IACvD,OAAO,GAAG,GAAG,CAAC,MAAM,GAAG,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AACpD,CAAC"}

package/dist/storage/storage-key-prefixes.d.ts

@@ -0,0 +1,66 @@
+import { type StorageKeyPrefixDef } from './storage-key-prefix.registry';
+/**
+ * Files uploaded through the storage objects API. ORG scope since #736: new
+ * keys are `uploads/<orgId>/<timestamp>/<uuid><ext>`; rows written before keep
+ * `uploads/<timestamp>/<uuid><ext>`.
+ *
+ * @stability stable
+ */
+export declare const UPLOADS_KEY_PREFIX = "uploads/";
+/**
+ * Per-user profile images. USER scope: individual objects live under
+ * `avatars/<userId>/` (an avatar belongs to a person, not a tenant).
+ *
+ * @stability stable
+ */
+export declare const AVATARS_KEY_PREFIX = "avatars/";
+/**
+ * Artifacts a worker node uploaded for a job it executed
+ * (`node-outputs/<jobId>/<uuid>`). The nodes slice owns the writer and its
+ * slash-less constant (`NODE_OUTPUT_KEY_PREFIX`, joined as
+ * `${PREFIX}/${id}`); the slice cannot depend on storage, so storage
+ * registers the prefix for it, normalised to one trailing slash.
+ *
+ * @stability stable
+ */
+export declare const NODE_OUTPUTS_KEY_PREFIX = "node-outputs/";
+/**
+ * Probe objects written by the storage connection test. DEPLOYMENT scope.
+ *
+ * ⚠ Easy to leave off the registry and wrong to: the test deletes its probe
+ * on a best-effort basis, so these DO linger after a failed round trip. A
+ * purge that skipped this prefix would leave exactly the objects an operator
+ * never knew they had.
+ *
+ * @stability stable
+ */
+export declare const STORAGE_TEST_KEY_PREFIX = "storage-config-test/";
+/**
+ * The storage slice's own prefix registrations, in the platform's historical
+ * purge order (`uploads`, `avatars`, `node-outputs`, `storage-config-test`).
+ * `StorageModule.forRoot()` registers them (a no-op for an entry the app's
+ * manifest already registered identically, which is how the reference app
+ * keeps `database-backups` and `ai-outputs` between them).
+ *
+ * @stability experimental
+ */
+export declare const STORAGE_SLICE_KEY_PREFIXES: readonly StorageKeyPrefixDef[];
+/**
+ * Registers {@link STORAGE_SLICE_KEY_PREFIXES}. Idempotent; called by
+ * `StorageModule.forRoot()`.
+ *
+ * @stability experimental
+ */
+export declare function registerStorageSliceKeyPrefixes(): void;
+/**
+ * {@link registerStorageSliceKeyPrefixes} unless every slice prefix is
+ * registered already or the registry is frozen: what a service that builds
+ * keys calls from its constructor, so it works when it is constructed without
+ * `StorageModule.forRoot()` (a spec, a script).
+ *
+ * @internal
+ *
+ * @stability experimental
+ */
+export declare function ensureStorageSliceKeyPrefixes(): void;
+//# sourceMappingURL=storage-key-prefixes.d.ts.map

package/dist/storage/storage-key-prefixes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-key-prefixes.d.ts","sourceRoot":"","sources":["../../src/storage/storage-key-prefixes.ts"],"names":[],"mappings":"AAsDA,OAAO,EAAwD,KAAK,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAE/H;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,aAAa,CAAC;AAE7C;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,aAAa,CAAC;AAE7C;;;;;;;;GAQG;AACH,eAAO,MAAM,uBAAuB,kBAA+B,CAAC;AAEpE;;;;;;;;;GASG;AACH,eAAO,MAAM,uBAAuB,yBAAyB,CAAC;AAE9D;;;;;;;;GAQG;AACH,eAAO,MAAM,0BAA0B,EAAE,SAAS,mBAAmB,EA+BpE,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,+BAA+B,IAAI,IAAI,CAEtD;AAED;;;;;;;;;GASG;AACH,wBAAgB,6BAA6B,IAAI,IAAI,CAIpD"}

package/dist/storage/storage-key-prefixes.js

@@ -0,0 +1,161 @@
+"use strict";
+// =============================================================================
+// Every key prefix this application writes into object storage (issue #404)
+// =============================================================================
+//
+// THE ONE REASON THIS FILE EXISTS. `appctl deploy uninstall --purge-storage`
+// deletes objects, and it must build its targets from a list the APPLICATION
+// owns rather than one somebody transcribed into the CLI. The portable deploy
+// specification records what happens otherwise: a transcribed list said
+// `backups/` where the real constant was `database-backups/`, and the purge
+// would have reported COMPLETE while leaving every database backup in the
+// bucket. Nothing failed, nothing warned; the operator was simply told a
+// falsehood about their own data.
+//
+// So the rule is structural, not procedural: purge targets are built ONLY from
+// `STORAGE_KEY_PREFIXES`, the frozen view of the storage key-prefix registry
+// (`storage-key-prefix.view.ts`; registry in `storage-key-prefix.registry.ts`,
+// issue #679). The constants below are the platform's entries
+// (`platform-storage-prefixes.ts` registers them); an app registers its own in
+// `app-registrations/storage-prefixes.ts`, never here.
+// `storage-key-prefixes.spec.ts` asserts each entry is the prefix its writer
+// actually uses, and scans `apps/api/src` for every `*_KEY_PREFIX` constant: a
+// new writer that invents a prefix nobody registered trips that test. A purge
+// that filtered a full bucket listing instead of using the list would not,
+// which is why it must not.
+//
+// WHY IT LIVES HERE AND NOT IN `packages/shared`. That package is committed as
+// plain CommonJS with a hand-written `index.d.ts` and no build step, so a
+// constant there costs a second declaration to keep in sync. Worse, it would
+// move the list AWAY from the code that writes the keys -- and the property
+// this whole file exists for is that adding a writer in `apps/api` must trip
+// the test. Distance from the writers is the failure mode, not a neutral
+// packaging choice.
+//
+// (#736: no longer a no-import leaf. It imports the registry, to declare the
+// slice's registrations next to the constants, and the nodes slice's
+// constant. Neither imports a Nest module, so the cycle concern below holds.)
+//
+// A NO-IMPORT LEAF, exactly like `storage-credential.constants.ts` beside it
+// and for the reason its header gives: several modules on both sides of the
+// storage boundary need this, and a file that imports nothing is safe to
+// import from either without inviting a cycle under `emitDecoratorMetadata`.
+// That is also why `STORAGE_KEY_PREFIXES` is NOT here: the view loads the
+// manifest, which imports this file through `platform-storage-prefixes.ts`. A
+// load test in the spec proves this file still requires nothing.
+//
+// ⚠ TRAILING SLASHES ARE NORMALISED HERE, AND THAT IS NOT COSMETIC. The
+// writers disagree: `BACKUP_KEY_PREFIX` carries one, `NODE_OUTPUT_KEY_PREFIX`
+// does not (it is joined as `${PREFIX}/${id}`), and `uploads/` was a bare
+// template literal in two places with no constant at all. A purge built from
+// the raw values would ask for `node-outputs//`, match nothing, and report
+// success -- the same silent falsehood in a new costume.
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.STORAGE_SLICE_KEY_PREFIXES = exports.STORAGE_TEST_KEY_PREFIX = exports.NODE_OUTPUTS_KEY_PREFIX = exports.AVATARS_KEY_PREFIX = exports.UPLOADS_KEY_PREFIX = void 0;
+exports.registerStorageSliceKeyPrefixes = registerStorageSliceKeyPrefixes;
+exports.ensureStorageSliceKeyPrefixes = ensureStorageSliceKeyPrefixes;
+const index_1 = require("../nodes/index");
+const storage_key_prefix_registry_1 = require("./storage-key-prefix.registry");
+/**
+ * Files uploaded through the storage objects API. ORG scope since #736: new
+ * keys are `uploads/<orgId>/<timestamp>/<uuid><ext>`; rows written before keep
+ * `uploads/<timestamp>/<uuid><ext>`.
+ *
+ * @stability stable
+ */
+exports.UPLOADS_KEY_PREFIX = 'uploads/';
+/**
+ * Per-user profile images. USER scope: individual objects live under
+ * `avatars/<userId>/` (an avatar belongs to a person, not a tenant).
+ *
+ * @stability stable
+ */
+exports.AVATARS_KEY_PREFIX = 'avatars/';
+/**
+ * Artifacts a worker node uploaded for a job it executed
+ * (`node-outputs/<jobId>/<uuid>`). The nodes slice owns the writer and its
+ * slash-less constant (`NODE_OUTPUT_KEY_PREFIX`, joined as
+ * `${PREFIX}/${id}`); the slice cannot depend on storage, so storage
+ * registers the prefix for it, normalised to one trailing slash.
+ *
+ * @stability stable
+ */
+exports.NODE_OUTPUTS_KEY_PREFIX = `${index_1.NODE_OUTPUT_KEY_PREFIX}/`;
+/**
+ * Probe objects written by the storage connection test. DEPLOYMENT scope.
+ *
+ * ⚠ Easy to leave off the registry and wrong to: the test deletes its probe
+ * on a best-effort basis, so these DO linger after a failed round trip. A
+ * purge that skipped this prefix would leave exactly the objects an operator
+ * never knew they had.
+ *
+ * @stability stable
+ */
+exports.STORAGE_TEST_KEY_PREFIX = 'storage-config-test/';
+/**
+ * The storage slice's own prefix registrations, in the platform's historical
+ * purge order (`uploads`, `avatars`, `node-outputs`, `storage-config-test`).
+ * `StorageModule.forRoot()` registers them (a no-op for an entry the app's
+ * manifest already registered identically, which is how the reference app
+ * keeps `database-backups` and `ai-outputs` between them).
+ *
+ * @stability experimental
+ */
+exports.STORAGE_SLICE_KEY_PREFIXES = Object.freeze([
+    {
+        id: 'uploads',
+        prefix: exports.UPLOADS_KEY_PREFIX,
+        owner: 'storage',
+        scope: 'org',
+        description: 'Files uploaded through the storage objects API, under uploads/<orgId>/ (legacy rows: uploads/<timestamp>/).',
+    },
+    {
+        id: 'avatars',
+        prefix: exports.AVATARS_KEY_PREFIX,
+        owner: 'storage/profile-image',
+        scope: 'user',
+        description: 'Per-user profile images, under avatars/<userId>/.',
+    },
+    {
+        id: 'node-outputs',
+        prefix: exports.NODE_OUTPUTS_KEY_PREFIX,
+        owner: 'nodes',
+        scope: 'deployment',
+        description: 'Artifacts a worker node uploaded for a job it executed, under node-outputs/<jobId>/.',
+    },
+    {
+        id: 'storage-config-test',
+        prefix: exports.STORAGE_TEST_KEY_PREFIX,
+        owner: 'storage/config',
+        scope: 'deployment',
+        description: 'Probe objects the storage connection test writes; they linger after a failed round trip.',
+    },
+].map((def) => Object.freeze(def)));
+/**
+ * Registers {@link STORAGE_SLICE_KEY_PREFIXES}. Idempotent; called by
+ * `StorageModule.forRoot()`.
+ *
+ * @stability experimental
+ */
+function registerStorageSliceKeyPrefixes() {
+    (0, storage_key_prefix_registry_1.registerStorageKeyPrefixes)(exports.STORAGE_SLICE_KEY_PREFIXES);
+}
+/**
+ * {@link registerStorageSliceKeyPrefixes} unless every slice prefix is
+ * registered already or the registry is frozen: what a service that builds
+ * keys calls from its constructor, so it works when it is constructed without
+ * `StorageModule.forRoot()` (a spec, a script).
+ *
+ * @internal
+ *
+ * @stability experimental
+ */
+function ensureStorageSliceKeyPrefixes() {
+    if (exports.STORAGE_SLICE_KEY_PREFIXES.every((def) => storage_key_prefix_registry_1.storageKeyPrefixRegistry.has(def.id)))
+        return;
+    if (storage_key_prefix_registry_1.storageKeyPrefixRegistry.frozen)
+        return;
+    registerStorageSliceKeyPrefixes();
+}
+//# sourceMappingURL=storage-key-prefixes.js.map

package/dist/storage/storage-key-prefixes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-key-prefixes.js","sourceRoot":"","sources":["../../src/storage/storage-key-prefixes.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,4EAA4E;AAC5E,gFAAgF;AAChF,EAAE;AACF,6EAA6E;AAC7E,6EAA6E;AAC7E,8EAA8E;AAC9E,wEAAwE;AACxE,4EAA4E;AAC5E,0EAA0E;AAC1E,yEAAyE;AACzE,kCAAkC;AAClC,EAAE;AACF,+EAA+E;AAC/E,6EAA6E;AAC7E,+EAA+E;AAC/E,8DAA8D;AAC9D,+EAA+E;AAC/E,uDAAuD;AACvD,6EAA6E;AAC7E,+EAA+E;AAC/E,8EAA8E;AAC9E,2EAA2E;AAC3E,4BAA4B;AAC5B,EAAE;AACF,+EAA+E;AAC/E,0EAA0E;AAC1E,6EAA6E;AAC7E,4EAA4E;AAC5E,6EAA6E;AAC7E,yEAAyE;AACzE,oBAAoB;AACpB,EAAE;AACF,6EAA6E;AAC7E,qEAAqE;AACrE,8EAA8E;AAC9E,EAAE;AACF,6EAA6E;AAC7E,4EAA4E;AAC5E,yEAAyE;AACzE,6EAA6E;AAC7E,0EAA0E;AAC1E,8EAA8E;AAC9E,iEAAiE;AACjE,EAAE;AACF,wEAAwE;AACxE,8EAA8E;AAC9E,0EAA0E;AAC1E,6EAA6E;AAC7E,2EAA2E;AAC3E,yDAAyD;AACzD,gFAAgF;;;AA6FhF,0EAEC;AAYD,sEAIC;AA7GD,0CAAwD;AACxD,+EAA+H;AAE/H;;;;;;GAMG;AACU,QAAA,kBAAkB,GAAG,UAAU,CAAC;AAE7C;;;;;GAKG;AACU,QAAA,kBAAkB,GAAG,UAAU,CAAC;AAE7C;;;;;;;;GAQG;AACU,QAAA,uBAAuB,GAAG,GAAG,8BAAsB,GAAG,CAAC;AAEpE;;;;;;;;;GASG;AACU,QAAA,uBAAuB,GAAG,sBAAsB,CAAC;AAE9D;;;;;;;;GAQG;AACU,QAAA,0BAA0B,GAAmC,MAAM,CAAC,MAAM,CACrF;IACE;QACE,EAAE,EAAE,SAAS;QACb,MAAM,EAAE,0BAAkB;QAC1B,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,KAAc;QACrB,WAAW,EAAE,6GAA6G;KAC3H;IACD;QACE,EAAE,EAAE,SAAS;QACb,MAAM,EAAE,0BAAkB;QAC1B,KAAK,EAAE,uBAAuB;QAC9B,KAAK,EAAE,MAAe;QACtB,WAAW,EAAE,mDAAmD;KACjE;IACD;QACE,EAAE,EAAE,cAAc;QAClB,MAAM,EAAE,+BAAuB;QAC/B,KAAK,EAAE,OAAO;QACd,KAAK,EAAE,YAAqB;QAC5B,WAAW,EAAE,sFAAsF;KACpG;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,MAAM,EAAE,+BAAuB;QAC/B,KAAK,EAAE,gBAAgB;QACvB,KAAK,EAAE,YAAqB;QAC5B,WAAW,EAAE,0FAA0F;KACxG;CACF,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CACnC,CAAC;AAEF;;;;;GAKG;AACH,SAAgB,+BAA+B;IAC7C,IAAA,wDAA0B,EAAC,kCAA0B,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,6BAA6B;IAC3C,IAAI,kCAA0B,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,sDAAwB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO;IAC5F,IAAI,sDAAwB,CAAC,MAAM;QAAE,OAAO;IAC5C,+BAA+B,EAAE,CAAC;AACpC,CAAC"}

package/dist/storage/storage.constants.d.ts

@@ -0,0 +1,17 @@
+/**
+ * The permission ids the slice's routes check, by their `PERMISSIONS` name.
+ *
+ * @internal
+ *
+ * @stability experimental
+ */
+export declare const PERMISSIONS: Readonly<{
+    readonly STORAGE_READ: "storage:read";
+    readonly STORAGE_WRITE: "storage:write";
+    readonly STORAGE_DELETE_ANY: "storage:delete_any";
+    readonly STORAGE_CONFIG_READ: "storage_config:read";
+    readonly STORAGE_CONFIG_WRITE: "storage_config:write";
+    readonly USER_SETTINGS_READ: "user_settings:read";
+    readonly USER_SETTINGS_WRITE: "user_settings:write";
+}>;
+//# sourceMappingURL=storage.constants.d.ts.map

package/dist/storage/storage.constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.constants.d.ts","sourceRoot":"","sources":["../../src/storage/storage.constants.ts"],"names":[],"mappings":"AAUA;;;;;;GAMG;AACH,eAAO,MAAM,WAAW;;;;;;;;EAQb,CAAC"}

package/dist/storage/storage.constants.js

@@ -0,0 +1,28 @@
+"use strict";
+// The permission strings the storage slice's routes enforce, derived from its
+// declarations (`storage.permissions.ts`, `config/storage-config.permissions.ts`)
+// and the settings slice's (the profile-image routes are user-settings writes).
+// The keys are the reference app's `PERMISSIONS` names, so a controller reads
+// exactly as it did before the move (#736).
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PERMISSIONS = void 0;
+const index_1 = require("../settings/index");
+const storage_config_permissions_1 = require("./config/storage-config.permissions");
+const storage_permissions_1 = require("./storage.permissions");
+/**
+ * The permission ids the slice's routes check, by their `PERMISSIONS` name.
+ *
+ * @internal
+ *
+ * @stability experimental
+ */
+exports.PERMISSIONS = Object.freeze({
+    STORAGE_READ: storage_permissions_1.STORAGE_PERMISSIONS.STORAGE_READ.id,
+    STORAGE_WRITE: storage_permissions_1.STORAGE_PERMISSIONS.STORAGE_WRITE.id,
+    STORAGE_DELETE_ANY: storage_permissions_1.STORAGE_PERMISSIONS.STORAGE_DELETE_ANY.id,
+    STORAGE_CONFIG_READ: storage_config_permissions_1.STORAGE_CONFIG_PERMISSIONS.STORAGE_CONFIG_READ.id,
+    STORAGE_CONFIG_WRITE: storage_config_permissions_1.STORAGE_CONFIG_PERMISSIONS.STORAGE_CONFIG_WRITE.id,
+    USER_SETTINGS_READ: index_1.SETTINGS_PERMISSIONS.USER_SETTINGS_READ.id,
+    USER_SETTINGS_WRITE: index_1.SETTINGS_PERMISSIONS.USER_SETTINGS_WRITE.id,
+});
+//# sourceMappingURL=storage.constants.js.map

package/dist/storage/storage.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.constants.js","sourceRoot":"","sources":["../../src/storage/storage.constants.ts"],"names":[],"mappings":";AAAA,8EAA8E;AAC9E,kFAAkF;AAClF,gFAAgF;AAChF,8EAA8E;AAC9E,4CAA4C;;;AAE5C,6CAAyD;AACzD,oFAAiF;AACjF,+DAA4D;AAE5D;;;;;;GAMG;AACU,QAAA,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC;IACvC,YAAY,EAAE,yCAAmB,CAAC,YAAY,CAAC,EAAE;IACjD,aAAa,EAAE,yCAAmB,CAAC,aAAa,CAAC,EAAE;IACnD,kBAAkB,EAAE,yCAAmB,CAAC,kBAAkB,CAAC,EAAE;IAC7D,mBAAmB,EAAE,uDAA0B,CAAC,mBAAmB,CAAC,EAAE;IACtE,oBAAoB,EAAE,uDAA0B,CAAC,oBAAoB,CAAC,EAAE;IACxE,kBAAkB,EAAE,4BAAoB,CAAC,kBAAkB,CAAC,EAAE;IAC9D,mBAAmB,EAAE,4BAAoB,CAAC,mBAAmB,CAAC,EAAE;CACxD,CAAC,CAAC"}

package/dist/storage/storage.module.d.ts

@@ -0,0 +1,35 @@
+import { DynamicModule } from '@nestjs/common';
+import { type StorageModuleOptions } from './storage.options';
+/**
+ * The storage slice's objects API, its status route, the stale-upload sweep
+ * and the post-upload processing job.
+ *
+ * Needs, from the app: `JobsModule.forRoot()` (global), `SettingsModule.forRoot()`
+ * (global), the core `PlatformHostModule` (`PLATFORM_PRISMA`), the
+ * `STORAGE_SYSTEM_DATA` port, the credential store's encryption key and the
+ * `@fastify/multipart` plugin registered on the Fastify instance (the simple
+ * upload route; `simpleUploadFileSizeLimit` gives its limit).
+ *
+ * @stability experimental
+ */
+export declare class StorageModule {
+    /**
+     * The slice for one app. Call once. Registers the slice's own object-key
+     * prefixes (`uploads`, `avatars`, `node-outputs`, `storage-config-test`;
+     * idempotent).
+     *
+     * @param options - deployment tuning, and the `provider` binding that replaces the default object store; see {@link StorageModuleOptions}.
+     * @returns the dynamic module. It exports `ObjectsService` and `STORAGE_OPTIONS`.
+     * @throws Error when an option is invalid.
+     *
+     * @example
+     * ```ts
+     * export const StorageModule = PlatformStorageModule.forRoot({});
+     * ```
+     *
+     * @extensionPoint option
+     * @stability experimental
+     */
+    static forRoot(options?: StorageModuleOptions): DynamicModule;
+}
+//# sourceMappingURL=storage.module.d.ts.map

package/dist/storage/storage.module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.module.d.ts","sourceRoot":"","sources":["../../src/storage/storage.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAU,MAAM,gBAAgB,CAAC;AAWvD,OAAO,EAAgD,KAAK,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAqB5G;;;;;;;;;;;GAWG;AACH,qBACa,aAAa;IACxB;;;;;;;;;;;;;;;;OAgBG;IACH,MAAM,CAAC,OAAO,CAAC,OAAO,GAAE,oBAAyB,GAAG,aAAa;CAyBlE"}