@mieweb/pulsevault 0.0.2 → 0.1.0

package/dist/lib/options.d.ts

@@ -0,0 +1,39 @@
+import type { PulseVaultValidatePayload } from './magic.js';
+import type { PulseVaultOnUploadComplete } from './pulsevaultTus.js';
+/** Per-kind form of `PulseVaultAllowedExtensionsInput`, named once so it isn't re-declared at every use site. */
+type AllowedExtensionsByKind = {
+    video?: readonly string[];
+    project?: readonly string[];
+    captions?: readonly string[];
+};
+export type PulseVaultAllowedExtensionsInput = readonly string[] | AllowedExtensionsByKind;
+export type PulseVaultAllowedExtensions = {
+    video: readonly string[];
+    project: readonly string[];
+    captions: readonly string[];
+};
+/**
+ * Normalize the consumer's `allowedExtensions` option (legacy array or per-kind
+ * object) into the canonical `{ video, project, captions }` shape both
+ * adapters pass down to the tus layer.
+ */
+export declare function normalizeAllowedExtensions(raw: PulseVaultAllowedExtensionsInput | undefined): PulseVaultAllowedExtensions;
+/** Shared by the Fastify plugin's `prefix` and the core's `basePath` — same shape, different option name. */
+export declare function validateBasePath(basePath: string, optionName: string): void;
+export declare function validateMaxUploadSize(maxUploadSize: number): void;
+export declare function validateUploadUnit(uploadUnit: 'beat' | 'merged' | undefined): void;
+export declare function validateAllowedExtensions(allowedExtensions: PulseVaultAllowedExtensionsInput | undefined): void;
+/**
+ * One-time (not per-request) warning for the now-deprecated per-kind project
+ * hooks, so consumers notice the migration need instead of it being silently
+ * aliased away until a future major version removes it outright.
+ */
+export declare function warnIfUsingDeprecatedProjectHooks(opts: {
+    validateProjectPayload?: unknown;
+    onProjectUploadComplete?: unknown;
+}): void;
+/** Compose the legacy per-kind hook (if any) with the generic hook, mapped onto the `"project"` kind only. */
+export declare function composeValidatePayload(generic: PulseVaultValidatePayload | undefined, legacyProject: PulseVaultValidatePayload | undefined): PulseVaultValidatePayload | undefined;
+export declare function composeOnUploadComplete(generic: PulseVaultOnUploadComplete | undefined, legacyProject: PulseVaultOnUploadComplete | undefined): PulseVaultOnUploadComplete | undefined;
+export {};
+//# sourceMappingURL=options.d.ts.map

package/dist/lib/options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../../src/lib/options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAErE,iHAAiH;AACjH,KAAK,uBAAuB,GAAG;IAC7B,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,gCAAgC,GAAG,SAAS,MAAM,EAAE,GAAG,uBAAuB,CAAC;AAE3F,MAAM,MAAM,2BAA2B,GAAG;IACxC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7B,CAAC;AAOF;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,gCAAgC,GAAG,SAAS,GAChD,2BAA2B,CAsB7B;AAED,6GAA6G;AAC7G,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAM3E;AAED,wBAAgB,qBAAqB,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAIjE;AAED,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,IAAI,CAIlF;AAED,wBAAgB,yBAAyB,CACvC,iBAAiB,EAAE,gCAAgC,GAAG,SAAS,GAC9D,IAAI,CAgBN;AAED;;;;GAIG;AACH,wBAAgB,iCAAiC,CAAC,IAAI,EAAE;IACtD,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,uBAAuB,CAAC,EAAE,OAAO,CAAC;CACnC,GAAG,IAAI,CAaP;AAED,8GAA8G;AAC9G,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,yBAAyB,GAAG,SAAS,EAC9C,aAAa,EAAE,yBAAyB,GAAG,SAAS,GACnD,yBAAyB,GAAG,SAAS,CASvC;AAED,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,0BAA0B,GAAG,SAAS,EAC/C,aAAa,EAAE,0BAA0B,GAAG,SAAS,GACpD,0BAA0B,GAAG,SAAS,CASxC"}

package/dist/lib/options.js

@@ -0,0 +1,103 @@
+const DEFAULT_VIDEO_EXTENSIONS = ['.mp4'];
+const DEFAULT_PROJECT_EXTENSIONS = ['.pulse', '.zip'];
+const DEFAULT_CAPTIONS_EXTENSIONS = ['.srt'];
+const EXTENSION_REGEX = /^\.[^.\s/\\]+$/;
+/**
+ * Normalize the consumer's `allowedExtensions` option (legacy array or per-kind
+ * object) into the canonical `{ video, project, captions }` shape both
+ * adapters pass down to the tus layer.
+ */
+export function normalizeAllowedExtensions(raw) {
+    if (!raw) {
+        return {
+            video: DEFAULT_VIDEO_EXTENSIONS,
+            project: DEFAULT_PROJECT_EXTENSIONS,
+            captions: DEFAULT_CAPTIONS_EXTENSIONS,
+        };
+    }
+    if (Array.isArray(raw)) {
+        // Legacy flat array: treat as video-only, project/captions keep their defaults.
+        return {
+            video: raw.map((ext) => ext.toLowerCase()),
+            project: DEFAULT_PROJECT_EXTENSIONS,
+            captions: DEFAULT_CAPTIONS_EXTENSIONS,
+        };
+    }
+    const byKind = raw;
+    return {
+        video: (byKind.video ?? DEFAULT_VIDEO_EXTENSIONS).map((ext) => ext.toLowerCase()),
+        project: (byKind.project ?? DEFAULT_PROJECT_EXTENSIONS).map((ext) => ext.toLowerCase()),
+        captions: (byKind.captions ?? DEFAULT_CAPTIONS_EXTENSIONS).map((ext) => ext.toLowerCase()),
+    };
+}
+/** Shared by the Fastify plugin's `prefix` and the core's `basePath` — same shape, different option name. */
+export function validateBasePath(basePath, optionName) {
+    if (basePath !== '' && (!basePath.startsWith('/') || basePath.endsWith('/'))) {
+        throw new TypeError(`\`${optionName}\` must be '' or start with '/' with no trailing slash (e.g. '/pulsevault')`);
+    }
+}
+export function validateMaxUploadSize(maxUploadSize) {
+    if (!(maxUploadSize > 0)) {
+        throw new TypeError('`maxUploadSize` must be a positive number (use Infinity for no cap)');
+    }
+}
+export function validateUploadUnit(uploadUnit) {
+    if (uploadUnit && uploadUnit !== 'beat' && uploadUnit !== 'merged') {
+        throw new TypeError('`uploadUnit` must be "beat" or "merged"');
+    }
+}
+export function validateAllowedExtensions(allowedExtensions) {
+    if (!allowedExtensions)
+        return;
+    const exts = Array.isArray(allowedExtensions)
+        ? allowedExtensions
+        : [
+            ...(allowedExtensions.video ?? []),
+            ...(allowedExtensions.project ?? []),
+            ...(allowedExtensions.captions ?? []),
+        ];
+    for (const ext of exts) {
+        if (!EXTENSION_REGEX.test(ext)) {
+            throw new TypeError(`\`allowedExtensions\` entry ${JSON.stringify(ext)} must start with '.' and contain no nested dots, slashes, or whitespace (e.g. '.mp4')`);
+        }
+    }
+}
+/**
+ * One-time (not per-request) warning for the now-deprecated per-kind project
+ * hooks, so consumers notice the migration need instead of it being silently
+ * aliased away until a future major version removes it outright.
+ */
+export function warnIfUsingDeprecatedProjectHooks(opts) {
+    if (opts.validateProjectPayload) {
+        process.emitWarning('pulsevault: `validateProjectPayload` is deprecated — use `validatePayload` and branch on `ctx.kind === "project"` instead. Still honored this release.', 'DeprecationWarning');
+    }
+    if (opts.onProjectUploadComplete) {
+        process.emitWarning('pulsevault: `onProjectUploadComplete` is deprecated — use `onUploadComplete` and branch on `ctx.kind === "project"` instead. Still honored this release.', 'DeprecationWarning');
+    }
+}
+/** Compose the legacy per-kind hook (if any) with the generic hook, mapped onto the `"project"` kind only. */
+export function composeValidatePayload(generic, legacyProject) {
+    if (!legacyProject)
+        return generic;
+    return async (request, ctx) => {
+        if (ctx.kind === 'project') {
+            await legacyProject(request, ctx);
+            return;
+        }
+        if (generic)
+            await generic(request, ctx);
+    };
+}
+export function composeOnUploadComplete(generic, legacyProject) {
+    if (!legacyProject)
+        return generic;
+    return async (request, ctx) => {
+        if (ctx.kind === 'project') {
+            await legacyProject(request, ctx);
+            return;
+        }
+        if (generic)
+            await generic(request, ctx);
+    };
+}
+//# sourceMappingURL=options.js.map

package/dist/lib/options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.js","sourceRoot":"","sources":["../../src/lib/options.ts"],"names":[],"mappings":"AAkBA,MAAM,wBAAwB,GAAsB,CAAC,MAAM,CAAC,CAAC;AAC7D,MAAM,0BAA0B,GAAsB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AACzE,MAAM,2BAA2B,GAAsB,CAAC,MAAM,CAAC,CAAC;AAChE,MAAM,eAAe,GAAG,gBAAgB,CAAC;AAEzC;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CACxC,GAAiD;IAEjD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO;YACL,KAAK,EAAE,wBAAwB;YAC/B,OAAO,EAAE,0BAA0B;YACnC,QAAQ,EAAE,2BAA2B;SACtC,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,gFAAgF;QAChF,OAAO;YACL,KAAK,EAAG,GAAyB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YACjE,OAAO,EAAE,0BAA0B;YACnC,QAAQ,EAAE,2BAA2B;SACtC,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,GAA8B,CAAC;IAC9C,OAAO;QACL,KAAK,EAAE,CAAC,MAAM,CAAC,KAAK,IAAI,wBAAwB,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QACjF,OAAO,EAAE,CAAC,MAAM,CAAC,OAAO,IAAI,0BAA0B,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QACvF,QAAQ,EAAE,CAAC,MAAM,CAAC,QAAQ,IAAI,2BAA2B,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;KAC3F,CAAC;AACJ,CAAC;AAED,6GAA6G;AAC7G,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,UAAkB;IACnE,IAAI,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,SAAS,CACjB,KAAK,UAAU,6EAA6E,CAC7F,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,aAAqB;IACzD,IAAI,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,SAAS,CAAC,qEAAqE,CAAC,CAAC;IAC7F,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,UAAyC;IAC1E,IAAI,UAAU,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QACnE,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,iBAA+D;IAE/D,IAAI,CAAC,iBAAiB;QAAE,OAAO;IAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC;QAC3C,CAAC,CAAE,iBAAuC;QAC1C,CAAC,CAAC;YACE,GAAG,CAAE,iBAA6C,CAAC,KAAK,IAAI,EAAE,CAAC;YAC/D,GAAG,CAAE,iBAA6C,CAAC,OAAO,IAAI,EAAE,CAAC;YACjE,GAAG,CAAE,iBAA6C,CAAC,QAAQ,IAAI,EAAE,CAAC;SACnE,CAAC;IACN,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,SAAS,CACjB,+BAA+B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,uFAAuF,CAC1I,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iCAAiC,CAAC,IAGjD;IACC,IAAI,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAChC,OAAO,CAAC,WAAW,CACjB,wJAAwJ,EACxJ,oBAAoB,CACrB,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,uBAAuB,EAAE,CAAC;QACjC,OAAO,CAAC,WAAW,CACjB,0JAA0J,EAC1J,oBAAoB,CACrB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,8GAA8G;AAC9G,MAAM,UAAU,sBAAsB,CACpC,OAA8C,EAC9C,aAAoD;IAEpD,IAAI,CAAC,aAAa;QAAE,OAAO,OAAO,CAAC;IACnC,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;QAC5B,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAClC,OAAO;QACT,CAAC;QACD,IAAI,OAAO;YAAE,MAAM,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC3C,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,OAA+C,EAC/C,aAAqD;IAErD,IAAI,CAAC,aAAa;QAAE,OAAO,OAAO,CAAC;IACnC,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;QAC5B,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAClC,OAAO;QACT,CAAC;QACD,IAAI,OAAO;YAAE,MAAM,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC3C,CAAC,CAAC;AACJ,CAAC"}

package/dist/lib/pulsevaultTus.d.ts

@@ -1,23 +1,45 @@
-import { Server } from "@tus/server";
-import type { FastifyRequest } from "fastify";
-import { AsyncLocalStorage } from "node:async_hooks";
-import type { PulseVaultValidatePayload } from "./magic.js";
-import type { PulseVaultStorage } from "../storage/types.js";
+import { Server } from '@tus/server';
+import { AsyncLocalStorage } from 'node:async_hooks';
+import type { PulseVaultValidatePayload } from './magic.js';
+import { type PulseVaultRequest, type PulseVaultLogger } from './request.js';
+import type { PulseVaultStorage } from '../storage/types.js';
+import type { UploadKind } from '../storage/types.js';
 /**
- * Context the plugin stashes on each incoming Fastify request for the lifetime
- * of a TUS call. Shared with the tus hooks via `AsyncLocalStorage` because
- * `@tus/server` v2 hooks receive a web `Request`, not the FastifyRequest.
+ * Context the plugin stashes on each incoming request for the lifetime of a
+ * TUS call. Shared with the tus hooks via `AsyncLocalStorage` because
+ * `@tus/server` v2 hooks receive a raw `req`/`res`, not the host's request
+ * wrapper (Fastify's `FastifyRequest`, Express's `req`, etc.).
  */
 export type PulseVaultTusContext = {
-    request: FastifyRequest;
-    videoid?: string;
+    request: PulseVaultRequest;
+    artifactId?: string;
+    /** Kind resolved during TUS create; available on the same request only. */
+    kind?: UploadKind;
+    /** `relatedTo` resolved during TUS create; available on the same request only. */
+    relatedTo?: string;
+    /** Raw `checksum` metadata value (`<algorithm>:<hex>`), if the client sent one. */
+    checksum?: string;
 };
 export declare const pulseVaultTusContext: AsyncLocalStorage<PulseVaultTusContext>;
-export type PulseVaultOnUploadComplete = (request: FastifyRequest, ctx: {
-    videoid: string;
+export type PulseVaultOnUploadComplete = (request: PulseVaultRequest, ctx: {
+    artifactId: string;
+    kind: UploadKind;
     size: number;
     uploadId: string;
 }) => void | Promise<void>;
+/**
+ * Fired at low-frequency, audit-worthy moments — never per chunk — so an
+ * operator can wire one hook to get both ops metrics and a compliance audit
+ * trail without hand-rolling both from the lower-level hooks.
+ */
+export type PulseVaultArtifactEvent = {
+    phase: 'authorize' | 'complete' | 'reject';
+    artifactId: string;
+    kind: UploadKind;
+    size?: number;
+    reason?: string;
+};
+export type PulseVaultOnArtifactEvent = (event: PulseVaultArtifactEvent) => void | Promise<void>;
 export type PulsevaultTusOptions = {
     storage: PulseVaultStorage;
     /** Absolute URL path where TUS is mounted, e.g. `/pulsevault/upload`. */
@@ -25,25 +47,27 @@ export type PulsevaultTusOptions = {
     /** Max total upload size in bytes. Use `Infinity` for no cap. */
     maxSize: number;
     /**
-     * File extensions allowed in the upload `filename` metadata. Must be
-     * pre-normalized to lowercase and include the leading dot.
+     * Allowed extensions per kind. Must be pre-normalized to lowercase and
+     * include the leading dot.
      */
-    allowedExtensions: readonly string[];
+    allowedExtensions: {
+        video: readonly string[];
+        project: readonly string[];
+        captions: readonly string[];
+    };
     /**
-     * Optional payload-validation hook. Runs after TUS writes the final byte
-     * but before `markReady` and `onUploadComplete`. Throwing from this hook
-     * causes the plugin to `storage.remove?.(videoid)` and return a 4xx
-     * (default 422) to the client. Use for magic-byte sniffing, virus
-     * scanning, size re-checks — anything that needs the final bytes.
+     * Optional payload-validation hook, called for every kind with `ctx.kind`
+     * set accordingly. Runs after TUS writes the final byte but before
+     * `markReady` and `onUploadComplete`. Throwing causes
+     * `storage.remove?.(artifactId)` and a 4xx (default 422).
      */
     validatePayload?: PulseVaultValidatePayload;
-    /**
-     * Fired once the final byte of an upload has been written *and* any
-     * `validatePayload` has passed. Use this to flip consumer state (DB row,
-     * queue job, audit log). Throwing here returns a 500 — bytes are on disk
-     * and marked ready, but consumer-side work failed.
-     */
+    /** Fired once the final byte has been written and any `validatePayload` has passed, for every kind. */
     onUploadComplete?: PulseVaultOnUploadComplete;
+    /** See `PulseVaultOnArtifactEvent`. */
+    onArtifactEvent?: PulseVaultOnArtifactEvent;
+    /** Logger for internal diagnostics (cleanup failures, etc). Defaults to `console`. */
+    logger?: PulseVaultLogger;
 };
 /**
  * Shape `@tus/server` recognizes for sending an error response. We tag both
@@ -52,5 +76,7 @@ export type PulsevaultTusOptions = {
  * right HTTP status.
  */
 export declare function tusError(status: number, body: string): Error;
+/** Parse the artifactId UUID from a tus upload id of the form `<kind>/<artifactId><ext>`. */
+export declare function artifactIdFromUploadId(id: string): string | undefined;
 export declare function createPulsevaultTusServer(options: PulsevaultTusOptions): Server;
 //# sourceMappingURL=pulsevaultTus.d.ts.map

package/dist/lib/pulsevaultTus.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pulsevaultTus.d.ts","sourceRoot":"","sources":["../../src/lib/pulsevaultTus.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAGrD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAE7D;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,EAAE,cAAc,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,eAAO,MAAM,oBAAoB,yCAAgD,CAAC;AAElF,MAAM,MAAM,0BAA0B,GAAG,CACvC,OAAO,EAAE,cAAc,EACvB,GAAG,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,KACrD,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE1B,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,EAAE,iBAAiB,CAAC;IAC3B,yEAAyE;IACzE,OAAO,EAAE,MAAM,CAAC;IAChB,iEAAiE;IACjE,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,yBAAyB,CAAC;IAC5C;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,0BAA0B,CAAC;CAC/C,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,KAAK,CAM5D;AAmBD,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,oBAAoB,UAyHtE"}
+{"version":3,"file":"pulsevaultTus.d.ts","sourceRoot":"","sources":["../../src/lib/pulsevaultTus.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAGrD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EAAE,KAAK,iBAAiB,EAAE,KAAK,gBAAgB,EAAiB,MAAM,cAAc,CAAC;AAC5F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEtD;;;;;GAKG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,EAAE,iBAAiB,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2EAA2E;IAC3E,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,kFAAkF;IAClF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mFAAmF;IACnF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,eAAO,MAAM,oBAAoB,yCAAgD,CAAC;AAElF,MAAM,MAAM,0BAA0B,GAAG,CACvC,OAAO,EAAE,iBAAiB,EAC1B,GAAG,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,KAC1E,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE1B;;;;GAIG;AACH,MAAM,MAAM,uBAAuB,GAAG;IACpC,KAAK,EAAE,WAAW,GAAG,UAAU,GAAG,QAAQ,CAAC;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AACF,MAAM,MAAM,yBAAyB,GAAG,CAAC,KAAK,EAAE,uBAAuB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAEjG,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,EAAE,iBAAiB,CAAC;IAC3B,yEAAyE;IACzE,OAAO,EAAE,MAAM,CAAC;IAChB,iEAAiE;IACjE,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,iBAAiB,EAAE;QACjB,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;QACzB,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;QAC3B,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;KAC7B,CAAC;IACF;;;;;OAKG;IACH,eAAe,CAAC,EAAE,yBAAyB,CAAC;IAC5C,uGAAuG;IACvG,gBAAgB,CAAC,EAAE,0BAA0B,CAAC;IAC9C,uCAAuC;IACvC,eAAe,CAAC,EAAE,yBAAyB,CAAC;IAC5C,sFAAsF;IACtF,MAAM,CAAC,EAAE,gBAAgB,CAAC;CAC3B,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,KAAK,CAM5D;AAED,6FAA6F;AAC7F,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAMrE;AAiDD,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,oBAAoB,UA2ItE"}

package/dist/lib/pulsevaultTus.js

@@ -1,7 +1,8 @@
-import { Server } from "@tus/server";
-import { AsyncLocalStorage } from "node:async_hooks";
-import path from "node:path";
-import { isUuid } from "./uuid.js";
+import { Server } from '@tus/server';
+import { AsyncLocalStorage } from 'node:async_hooks';
+import path from 'node:path';
+import { isUuid } from './uuid.js';
+import { consoleLogger } from './request.js';
 export const pulseVaultTusContext = new AsyncLocalStorage();
 /**
  * Shape `@tus/server` recognizes for sending an error response. We tag both
@@ -16,10 +17,14 @@ export function tusError(status, body) {
         body,
     });
 }
-/** Parse the first path segment of a tus upload id as the videoid. */
-function videoidFromUploadId(id) {
-    const first = id.split("/", 1)[0];
-    return isUuid(first) ? first : undefined;
+/** Parse the artifactId UUID from a tus upload id of the form `<kind>/<artifactId><ext>`. */
+export function artifactIdFromUploadId(id) {
+    const [, nameWithExt] = id.split('/');
+    if (!nameWithExt)
+        return undefined;
+    const ext = path.extname(nameWithExt);
+    const candidate = ext ? nameWithExt.slice(0, -ext.length) : nameWithExt;
+    return isUuid(candidate) ? candidate : undefined;
 }
 /**
  * Extract a numeric HTTP status from a thrown error, honoring both
@@ -27,39 +32,69 @@ function videoidFromUploadId(id) {
  */
 function statusCodeOf(err, fallback) {
     const e = err;
-    if (typeof e?.statusCode === "number")
+    if (typeof e?.statusCode === 'number')
         return e.statusCode;
-    if (typeof e?.status_code === "number")
+    if (typeof e?.status_code === 'number')
         return e.status_code;
     return fallback;
 }
+/**
+ * Extract and normalize the fields `namingFunction` cares about from raw
+ * `Upload-Metadata`. Doesn't validate — the caller still checks `artifactId`
+ * is a UUID and `filename`'s extension is allowed for `kind`.
+ */
+function parseUploadMetadata(metadata) {
+    // Accept `artifactId` plus the legacy `videoid`/`projectid` aliases for
+    // back-compat with pre-`artifactId` clients.
+    const artifactId = (metadata?.artifactId ??
+        metadata?.videoid ??
+        metadata?.projectid ??
+        '').trim();
+    const filename = (metadata?.filename ?? '').trim();
+    // `kind` defaults to `"video"` so existing clients that don't send the field continue to work unchanged.
+    const rawKind = (metadata?.kind ?? '').trim().toLowerCase();
+    const kind = rawKind === 'project' ? 'project' : rawKind === 'captions' ? 'captions' : 'video';
+    const rawRelatedTo = (metadata?.relatedTo ?? '').trim();
+    const relatedTo = isUuid(rawRelatedTo) ? rawRelatedTo : undefined;
+    const checksum = (metadata?.checksum ?? '').trim() || undefined;
+    return { artifactId, filename, kind, relatedTo, checksum };
+}
 export function createPulsevaultTusServer(options) {
-    const { storage, tusPath, maxSize, allowedExtensions, validatePayload, onUploadComplete, } = options;
+    const { storage, tusPath, maxSize, allowedExtensions, validatePayload, onUploadComplete, onArtifactEvent, logger = consoleLogger, } = options;
     return new Server({
         path: tusPath,
         datastore: storage.datastore,
         maxSize,
         namingFunction: async (_req, metadata) => {
-            const videoid = metadata?.videoid ?? "";
-            const filename = (metadata?.filename ?? "").trim();
-            if (!isUuid(videoid)) {
-                throw tusError(400, "Upload-Metadata must include a valid `videoid` (UUID).\n");
+            const { artifactId, filename, kind, relatedTo, checksum } = parseUploadMetadata(metadata);
+            if (!isUuid(artifactId)) {
+                throw tusError(400, 'Upload-Metadata must include a valid `artifactId` UUID.\n');
             }
             const ext = path.extname(filename).toLowerCase();
-            if (!ext || !allowedExtensions.includes(ext)) {
-                throw tusError(400, `Upload-Metadata \`filename\` must end with one of: ${allowedExtensions.join(", ")}\n`);
+            const allowed = allowedExtensions[kind];
+            if (!ext || !allowed.includes(ext)) {
+                throw tusError(400, `Upload-Metadata \`filename\` for kind="${kind}" must end with one of: ${allowed.join(', ')}\n`);
             }
-            return storage.reserveUpload({ videoid, filename, ext });
+            // Store kind/relatedTo/checksum in the AsyncLocalStorage context so the
+            // authorize hook (already running) and onUploadFinish (same-request
+            // uploads) can read them without a storage round-trip.
+            const store = pulseVaultTusContext.getStore();
+            if (store) {
+                store.kind = kind;
+                store.relatedTo = relatedTo;
+                store.checksum = checksum;
+            }
+            return storage.reserveUpload({ artifactId, filename, ext, kind, relatedTo, checksum });
         },
         generateUrl(_req, { proto, host, path: tusBasePath, id }) {
-            const encoded = Buffer.from(id, "utf8").toString("base64url");
+            const encoded = Buffer.from(id, 'utf8').toString('base64url');
             return `${proto}://${host}${tusBasePath}/${encoded}`;
         },
         getFileIdFromRequest(_req, lastPath) {
             if (!lastPath) {
                 return;
             }
-            return Buffer.from(lastPath, "base64url").toString("utf8");
+            return Buffer.from(lastPath, 'base64url').toString('utf8');
         },
         onUploadFinish: async (_req, upload) => {
             // Completion sequence: validate → markReady → consumer hook. Each step
@@ -71,76 +106,109 @@ export function createPulsevaultTusServer(options) {
                 // before calling into tus. Bail quietly rather than crash.
                 return {};
             }
-            const videoid = videoidFromUploadId(upload.id);
-            if (!videoid) {
+            const artifactId = artifactIdFromUploadId(upload.id);
+            if (!artifactId) {
                 return {};
             }
             const size = upload.size ?? 0;
             const uploadId = upload.id;
-            // 1. Validate payload (magic bytes, virus scan, etc.). If this throws
-            //    we wipe the bytes from storage — the client gets a 4xx, the
-            //    sidecar is gone, and they can safely retry with a corrected file.
+            // Resolve kind/checksum: prefer the context value (set during the same
+            // request's namingFunction for single-request uploads), fall back to a
+            // storage lookup (cheap in-memory cache hit) for chunked uploads, or —
+            // just as commonly — a single-PATCH upload sent as two separate HTTP
+            // requests (create, then patch), where `onUploadFinish` runs on the
+            // PATCH request's own fresh context, not the one `namingFunction`
+            // populated during the earlier POST.
+            const kind = store.kind ?? (await resolveKind(storage, artifactId));
+            const checksum = store.checksum ?? (await resolveChecksum(storage, artifactId));
+            // 1. Validate payload (magic bytes, checksum, virus scan, etc.). If
+            //    this throws we wipe the bytes from storage — the client gets a
+            //    4xx, the sidecar is gone, and they can safely retry with a
+            //    corrected file. The same hook runs for every kind; consumers that
+            //    want kind-specific behavior branch on `ctx.kind` themselves.
             if (validatePayload) {
                 try {
                     await validatePayload(store.request, {
-                        videoid,
+                        artifactId,
                         size,
                         uploadId,
-                        localPath: await resolveLocalPath(storage, videoid),
+                        localPath: await resolveLocalPath(storage, artifactId),
+                        ...(checksum ? { checksum } : {}),
+                        kind,
                     });
                 }
                 catch (err) {
                     const status = statusCodeOf(err, 422);
-                    const message = err instanceof Error ? err.message : "Payload validation failed";
+                    const message = err instanceof Error ? err.message : 'Payload validation failed';
                     try {
-                        await storage.remove?.(videoid);
+                        await storage.remove?.(artifactId);
                     }
                     catch (rmErr) {
-                        store.request.log.error({ err: rmErr, videoid }, "pulsevault failed to remove rejected upload");
+                        logger.error({ err: rmErr, artifactId }, 'pulsevault failed to remove rejected upload');
                     }
+                    await onArtifactEvent?.({ phase: 'reject', artifactId, kind, size, reason: message });
                     throw tusError(status, `${message}\n`);
                 }
             }
             // 2. Flip the sidecar to "ready" so `resolve` will serve the bytes.
             //    Done *before* the consumer hook so a downstream service that
-            //    reacts to `onUploadComplete` can immediately GET the video.
+            //    reacts to `onUploadComplete` can immediately GET the artifact.
             try {
-                await storage.markReady?.(videoid);
+                await storage.markReady?.(artifactId);
             }
             catch (err) {
-                const message = err instanceof Error ? err.message : "markReady failed";
+                const message = err instanceof Error ? err.message : 'markReady failed';
                 throw tusError(500, `${message}\n`);
             }
             // 3. Consumer hook — business logic (DB writes, queue jobs).
             if (onUploadComplete) {
                 try {
-                    await onUploadComplete(store.request, { videoid, size, uploadId });
+                    await onUploadComplete(store.request, { artifactId, kind, size, uploadId });
                 }
                 catch (err) {
                     // Propagate as a tus error so the client sees a non-2xx and can
                     // distinguish "bytes stored but completion hook failed" from
-                    // success. The video is marked ready at this point — consumers
+                    // success. The artifact is marked ready at this point — consumers
                     // who want "all-or-nothing" should `storage.remove` before
                     // throwing.
-                    const message = err instanceof Error ? err.message : "onUploadComplete failed";
+                    const message = err instanceof Error ? err.message : 'onUploadComplete failed';
                     throw tusError(500, `${message}\n`);
                 }
             }
+            await onArtifactEvent?.({ phase: 'complete', artifactId, kind, size });
             return {};
         },
     });
 }
+/**
+ * Resolve the artifact kind from storage for a known artifactId. Used by
+ * `onUploadFinish` for chunked uploads where the kind is not in the current
+ * request's context. Defaults to `"video"` for adapters that don't implement
+ * `getKind` or when the artifactId is not found.
+ */
+async function resolveKind(storage, artifactId) {
+    const result = await storage.getKind?.(artifactId);
+    return result ?? 'video';
+}
+/**
+ * Resolve the `checksum` metadata from storage for a known artifactId. Same
+ * rationale as `resolveKind` — `namingFunction`'s in-memory context doesn't
+ * survive past the request it ran on, so completion (which may run on a
+ * later, separate request) needs a storage-backed fallback.
+ */
+async function resolveChecksum(storage, artifactId) {
+    const result = await storage.getChecksum?.(artifactId);
+    return result ?? undefined;
+}
 /**
  * If the adapter exposes `getLocalPath` (the built-in local adapter does),
- * resolve the videoid to an absolute disk path for `validatePayload`. For
+ * resolve the artifactId to an absolute disk path for `validatePayload`. For
  * other adapters, returns `null` and the validator is expected to fetch
  * bytes through whatever API it knows about.
  */
-async function resolveLocalPath(storage, videoid) {
-    const candidate = storage.getLocalPath;
-    if (typeof candidate !== "function")
-        return null;
-    const result = await candidate(videoid);
-    return typeof result === "string" ? result : null;
+async function resolveLocalPath(storage, artifactId) {
+    const adapter = storage;
+    const result = await adapter.getLocalPath?.(artifactId);
+    return typeof result === 'string' ? result : null;
 }
 //# sourceMappingURL=pulsevaultTus.js.map

package/dist/lib/pulsevaultTus.js.map

@@ -1 +1 @@
-{"version":3,"file":"pulsevaultTus.js","sourceRoot":"","sources":["../../src/lib/pulsevaultTus.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAcnC,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,iBAAiB,EAAwB,CAAC;AAmClF;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,MAAc,EAAE,IAAY;IACnD,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE;QACpC,UAAU,EAAE,MAAM;QAClB,WAAW,EAAE,MAAM;QACnB,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAED,sEAAsE;AACtE,SAAS,mBAAmB,CAAC,EAAU;IACrC,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,GAAY,EAAE,QAAgB;IAClD,MAAM,CAAC,GAAG,GAAsD,CAAC;IACjE,IAAI,OAAO,CAAC,EAAE,UAAU,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC,UAAU,CAAC;IAC3D,IAAI,OAAO,CAAC,EAAE,WAAW,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC,WAAW,CAAC;IAC7D,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,OAA6B;IACrE,MAAM,EACJ,OAAO,EACP,OAAO,EACP,OAAO,EACP,iBAAiB,EACjB,eAAe,EACf,gBAAgB,GACjB,GAAG,OAAO,CAAC;IAEZ,OAAO,IAAI,MAAM,CAAC;QAChB,IAAI,EAAE,OAAO;QACb,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,OAAO;QACP,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;YACvC,MAAM,OAAO,GAAG,QAAQ,EAAE,OAAO,IAAI,EAAE,CAAC;YACxC,MAAM,QAAQ,GAAG,CAAC,QAAQ,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAEnD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBACrB,MAAM,QAAQ,CACZ,GAAG,EACH,0DAA0D,CAC3D,CAAC;YACJ,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;YACjD,IAAI,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7C,MAAM,QAAQ,CACZ,GAAG,EACH,sDAAsD,iBAAiB,CAAC,IAAI,CAC1E,IAAI,CACL,IAAI,CACN,CAAC;YACJ,CAAC;YAED,OAAO,OAAO,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,WAAW,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE;YACtD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAC9D,OAAO,GAAG,KAAK,MAAM,IAAI,GAAG,WAAW,IAAI,OAAO,EAAE,CAAC;QACvD,CAAC;QACD,oBAAoB,CAAC,IAAI,EAAE,QAAQ;YACjC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YACD,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC7D,CAAC;QACD,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;YACrC,uEAAuE;YACvE,mEAAmE;YACnE,mEAAmE;YACnE,MAAM,KAAK,GAAG,oBAAoB,CAAC,QAAQ,EAAE,CAAC;YAC9C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,mEAAmE;gBACnE,2DAA2D;gBAC3D,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;YAC9B,MAAM,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAC;YAE3B,sEAAsE;YACtE,iEAAiE;YACjE,uEAAuE;YACvE,IAAI,eAAe,EAAE,CAAC;gBACpB,IAAI,CAAC;oBACH,MAAM,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE;wBACnC,OAAO;wBACP,IAAI;wBACJ,QAAQ;wBACR,SAAS,EAAE,MAAM,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC;qBACpD,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;oBACtC,MAAM,OAAO,GACX,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC;oBACnE,IAAI,CAAC;wBACH,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC;oBAClC,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CACrB,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,EACvB,6CAA6C,CAC9C,CAAC;oBACJ,CAAC;oBACD,MAAM,QAAQ,CAAC,MAAM,EAAE,GAAG,OAAO,IAAI,CAAC,CAAC;gBACzC,CAAC;YACH,CAAC;YAED,oEAAoE;YACpE,kEAAkE;YAClE,iEAAiE;YACjE,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC;YACrC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,OAAO,GACX,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC;gBAC1D,MAAM,QAAQ,CAAC,GAAG,EAAE,GAAG,OAAO,IAAI,CAAC,CAAC;YACtC,CAAC;YAED,6DAA6D;YAC7D,IAAI,gBAAgB,EAAE,CAAC;gBACrB,IAAI,CAAC;oBACH,MAAM,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACrE,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,gEAAgE;oBAChE,6DAA6D;oBAC7D,+DAA+D;oBAC/D,2DAA2D;oBAC3D,YAAY;oBACZ,MAAM,OAAO,GACX,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC;oBACjE,MAAM,QAAQ,CAAC,GAAG,EAAE,GAAG,OAAO,IAAI,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC;YAED,OAAO,EAAE,CAAC;QACZ,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,gBAAgB,CAC7B,OAA0B,EAC1B,OAAe;IAEf,MAAM,SAAS,GAAI,OAAsC,CAAC,YAAY,CAAC;IACvE,IAAI,OAAO,SAAS,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,MAAM,GAAG,MAAO,SAAoD,CACxE,OAAO,CACR,CAAC;IACF,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACpD,CAAC"}
+{"version":3,"file":"pulsevaultTus.js","sourceRoot":"","sources":["../../src/lib/pulsevaultTus.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAEnC,OAAO,EAAiD,aAAa,EAAE,MAAM,cAAc,CAAC;AAqB5F,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,iBAAiB,EAAwB,CAAC;AAmDlF;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,MAAc,EAAE,IAAY;IACnD,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE;QACpC,UAAU,EAAE,MAAM;QAClB,WAAW,EAAE,MAAM;QACnB,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,sBAAsB,CAAC,EAAU;IAC/C,MAAM,CAAC,EAAE,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,WAAW;QAAE,OAAO,SAAS,CAAC;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;IACxE,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AACnD,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,GAAY,EAAE,QAAgB;IAClD,MAAM,CAAC,GAAG,GAAsD,CAAC;IACjE,IAAI,OAAO,CAAC,EAAE,UAAU,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC,UAAU,CAAC;IAC3D,IAAI,OAAO,CAAC,EAAE,WAAW,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC,WAAW,CAAC;IAC7D,OAAO,QAAQ,CAAC;AAClB,CAAC;AAUD;;;;GAIG;AACH,SAAS,mBAAmB,CAC1B,QAAmD;IAEnD,wEAAwE;IACxE,6CAA6C;IAC7C,MAAM,UAAU,GAAG,CACjB,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,OAAO;QACjB,QAAQ,EAAE,SAAS;QACnB,EAAE,CACH,CAAC,IAAI,EAAE,CAAC;IACT,MAAM,QAAQ,GAAG,CAAC,QAAQ,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACnD,yGAAyG;IACzG,MAAM,OAAO,GAAG,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5D,MAAM,IAAI,GACR,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC;IACpF,MAAM,YAAY,GAAG,CAAC,QAAQ,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxD,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,MAAM,QAAQ,GAAG,CAAC,QAAQ,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;IAEhE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,OAA6B;IACrE,MAAM,EACJ,OAAO,EACP,OAAO,EACP,OAAO,EACP,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,MAAM,GAAG,aAAa,GACvB,GAAG,OAAO,CAAC;IAEZ,OAAO,IAAI,MAAM,CAAC;QAChB,IAAI,EAAE,OAAO;QACb,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,OAAO;QACP,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;YACvC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YAE1F,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;gBACxB,MAAM,QAAQ,CAAC,GAAG,EAAE,2DAA2D,CAAC,CAAC;YACnF,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;YACjD,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnC,MAAM,QAAQ,CACZ,GAAG,EACH,0CAA0C,IAAI,2BAA2B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAChG,CAAC;YACJ,CAAC;YAED,wEAAwE;YACxE,oEAAoE;YACpE,uDAAuD;YACvD,MAAM,KAAK,GAAG,oBAAoB,CAAC,QAAQ,EAAE,CAAC;YAC9C,IAAI,KAAK,EAAE,CAAC;gBACV,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;gBAClB,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;gBAC5B,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC;YAC5B,CAAC;YAED,OAAO,OAAO,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,WAAW,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE;YACtD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAC9D,OAAO,GAAG,KAAK,MAAM,IAAI,GAAG,WAAW,IAAI,OAAO,EAAE,CAAC;QACvD,CAAC;QACD,oBAAoB,CAAC,IAAI,EAAE,QAAQ;YACjC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YACD,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC7D,CAAC;QACD,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;YACrC,uEAAuE;YACvE,mEAAmE;YACnE,mEAAmE;YACnE,MAAM,KAAK,GAAG,oBAAoB,CAAC,QAAQ,EAAE,CAAC;YAC9C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,mEAAmE;gBACnE,2DAA2D;gBAC3D,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,UAAU,GAAG,sBAAsB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACrD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;YAC9B,MAAM,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAC;YAE3B,uEAAuE;YACvE,uEAAuE;YACvE,uEAAuE;YACvE,qEAAqE;YACrE,oEAAoE;YACpE,kEAAkE;YAClE,qCAAqC;YACrC,MAAM,IAAI,GAAe,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,WAAW,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;YAChF,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,CAAC,MAAM,eAAe,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;YAEhF,oEAAoE;YACpE,oEAAoE;YACpE,gEAAgE;YAChE,uEAAuE;YACvE,kEAAkE;YAClE,IAAI,eAAe,EAAE,CAAC;gBACpB,IAAI,CAAC;oBACH,MAAM,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE;wBACnC,UAAU;wBACV,IAAI;wBACJ,QAAQ;wBACR,SAAS,EAAE,MAAM,gBAAgB,CAAC,OAAO,EAAE,UAAU,CAAC;wBACtD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACjC,IAAI;qBACL,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;oBACtC,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC;oBACjF,IAAI,CAAC;wBACH,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,CAAC;oBACrC,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,6CAA6C,CAAC,CAAC;oBAC1F,CAAC;oBACD,MAAM,eAAe,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;oBACtF,MAAM,QAAQ,CAAC,MAAM,EAAE,GAAG,OAAO,IAAI,CAAC,CAAC;gBACzC,CAAC;YACH,CAAC;YAED,oEAAoE;YACpE,kEAAkE;YAClE,oEAAoE;YACpE,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,CAAC;YACxC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC;gBACxE,MAAM,QAAQ,CAAC,GAAG,EAAE,GAAG,OAAO,IAAI,CAAC,CAAC;YACtC,CAAC;YAED,6DAA6D;YAC7D,IAAI,gBAAgB,EAAE,CAAC;gBACrB,IAAI,CAAC;oBACH,MAAM,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAC9E,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,gEAAgE;oBAChE,6DAA6D;oBAC7D,kEAAkE;oBAClE,2DAA2D;oBAC3D,YAAY;oBACZ,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC;oBAC/E,MAAM,QAAQ,CAAC,GAAG,EAAE,GAAG,OAAO,IAAI,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC;YAED,MAAM,eAAe,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAEvE,OAAO,EAAE,CAAC;QACZ,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,WAAW,CAAC,OAA0B,EAAE,UAAkB;IACvE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,CAAC;IACnD,OAAO,MAAM,IAAI,OAAO,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,eAAe,CAC5B,OAA0B,EAC1B,UAAkB;IAElB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,CAAC;IACvD,OAAO,MAAM,IAAI,SAAS,CAAC;AAC7B,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,gBAAgB,CAC7B,OAA0B,EAC1B,UAAkB;IAElB,MAAM,OAAO,GAAG,OAA4E,CAAC;IAC7F,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,CAAC,CAAC;IACxD,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACpD,CAAC"}

package/dist/lib/request.d.ts

@@ -0,0 +1,24 @@
+import type { IncomingHttpHeaders } from 'node:http';
+/**
+ * Structural request shape the plugin's internals and hooks rely on.
+ * `FastifyRequest`, Express's `req`, and a raw `http.IncomingMessage` all
+ * satisfy this already (they all expose `.headers`), so the same hook
+ * implementations work unmodified under the Fastify plugin and the
+ * framework-agnostic core.
+ */
+export type PulseVaultRequest = {
+    headers: IncomingHttpHeaders;
+};
+/**
+ * Structural logger shape used for the plugin's own internal diagnostics
+ * (authorize rejections, tus handler failures, cleanup errors) — satisfied
+ * by Pino (Fastify's `request.log`) and by the `consoleLogger` fallback
+ * below, so non-Fastify hosts don't need to bring their own logger.
+ */
+export type PulseVaultLogger = {
+    info(obj: unknown, msg?: string): void;
+    error(obj: unknown, msg?: string): void;
+};
+/** Default logger for hosts that don't supply one. */
+export declare const consoleLogger: PulseVaultLogger;
+//# sourceMappingURL=request.d.ts.map

package/dist/lib/request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.d.ts","sourceRoot":"","sources":["../../src/lib/request.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAErD;;;;;;GAMG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,OAAO,EAAE,mBAAmB,CAAC;CAC9B,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACzC,CAAC;AAEF,sDAAsD;AACtD,eAAO,MAAM,aAAa,EAAE,gBAS3B,CAAC"}

package/dist/lib/request.js

@@ -0,0 +1,16 @@
+/** Default logger for hosts that don't supply one. */
+export const consoleLogger = {
+    info(obj, msg) {
+        if (msg)
+            console.info(msg, obj);
+        else
+            console.info(obj);
+    },
+    error(obj, msg) {
+        if (msg)
+            console.error(msg, obj);
+        else
+            console.error(obj);
+    },
+};
+//# sourceMappingURL=request.js.map

package/dist/lib/request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.js","sourceRoot":"","sources":["../../src/lib/request.ts"],"names":[],"mappings":"AAwBA,sDAAsD;AACtD,MAAM,CAAC,MAAM,aAAa,GAAqB;IAC7C,IAAI,CAAC,GAAG,EAAE,GAAG;QACX,IAAI,GAAG;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;;YAC3B,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IACD,KAAK,CAAC,GAAG,EAAE,GAAG;QACZ,IAAI,GAAG;YAAE,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;;YAC5B,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;CACF,CAAC"}

package/dist/lib/uuid.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"uuid.d.ts","sourceRoot":"","sources":["../../src/lib/uuid.ts"],"names":[],"mappings":"AAGA,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAEtD"}
+{"version":3,"file":"uuid.d.ts","sourceRoot":"","sources":["../../src/lib/uuid.ts"],"names":[],"mappings":"AAEA,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAEtD"}

package/dist/lib/uuid.js

@@ -1,5 +1,5 @@
 const UUID_REGEX = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 export function isUuid(value) {
-    return typeof value === "string" && UUID_REGEX.test(value);
+    return typeof value === 'string' && UUID_REGEX.test(value);
 }
 //# sourceMappingURL=uuid.js.map

package/dist/lib/uuid.js.map

@@ -1 +1 @@
-{"version":3,"file":"uuid.js","sourceRoot":"","sources":["../../src/lib/uuid.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,GACd,iEAAiE,CAAC;AAEpE,MAAM,UAAU,MAAM,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7D,CAAC"}
+{"version":3,"file":"uuid.js","sourceRoot":"","sources":["../../src/lib/uuid.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,GAAG,iEAAiE,CAAC;AAErF,MAAM,UAAU,MAAM,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7D,CAAC"}