@mieweb/pulsevault 0.0.2 → 0.1.0

package/dist/routes/pulsevault.d.ts

@@ -1,32 +1,34 @@
-import type { FastifyPluginAsync, FastifyPluginOptions, FastifyRequest } from "fastify";
-import type { PulseVaultCacheOptions } from "../app.js";
-import { type PulseVaultOnUploadComplete } from "../lib/pulsevaultTus.js";
-import type { PulseVaultValidatePayload } from "../lib/magic.js";
-import type { PulseVaultStorage } from "../storage/types.js";
-declare module "fastify" {
+import type { FastifyPluginAsync, FastifyPluginOptions } from 'fastify';
+import type { PulseVaultCacheOptions } from '../app.js';
+import { PROTOCOL_VERSION } from '../core.js';
+import type { PulseVaultOnUploadComplete, PulseVaultOnArtifactEvent } from '../lib/pulsevaultTus.js';
+import type { PulseVaultValidatePayload } from '../lib/magic.js';
+import { type PulseVaultAuthorize } from '../lib/authorize.js';
+import type { PulseVaultAllowedExtensions } from '../lib/options.js';
+import type { PulseVaultStorage, UploadKind } from '../storage/types.js';
+export type { PulseVaultAuthorize, PulseVaultAuthorizeContext, PulseVaultAuthorizePhase, } from '../lib/authorize.js';
+declare module 'fastify' {
     interface FastifyRequest {
         pulseVault?: {
-            videoid: string;
+            artifactId: string;
+            kind: UploadKind;
+            relatedTo?: string;
         };
     }
 }
-export type PulseVaultAuthorizePhase = "create" | "patch" | "resolve" | "delete";
-export type PulseVaultAuthorizeContext = {
-    phase: PulseVaultAuthorizePhase;
-    videoid: string;
-    /** Bearer / query-string token forwarded from the watch URL, if present. Only populated during the `"resolve"` phase. */
-    token?: string;
-};
-export type PulseVaultAuthorize = (request: FastifyRequest, ctx: PulseVaultAuthorizeContext) => void | Promise<void>;
 export type PulseVaultRoutesOptions = {
     storage: PulseVaultStorage;
     maxUploadSize: number;
-    allowedExtensions: readonly string[];
+    allowedExtensions: PulseVaultAllowedExtensions;
+    /** Advertised via `GET /capabilities` so the client knows which upload strategy this server expects. */
+    uploadUnit: 'beat' | 'merged';
     cache?: PulseVaultCacheOptions;
     authorize?: PulseVaultAuthorize;
     validatePayload?: PulseVaultValidatePayload;
     onUploadComplete?: PulseVaultOnUploadComplete;
+    onArtifactEvent?: PulseVaultOnArtifactEvent;
 } & FastifyPluginOptions;
 declare const pulseVaultRoutes: FastifyPluginAsync<PulseVaultRoutesOptions>;
 export default pulseVaultRoutes;
+export { PROTOCOL_VERSION };
 //# sourceMappingURL=pulsevault.d.ts.map

package/dist/routes/pulsevault.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pulsevault.d.ts","sourceRoot":"","sources":["../../src/routes/pulsevault.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAClB,oBAAoB,EAEpB,cAAc,EAEf,MAAM,SAAS,CAAC;AAEjB,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAGL,KAAK,0BAA0B,EAChC,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAGjE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAM7D,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,cAAc;QACtB,UAAU,CAAC,EAAE;YAAE,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC;KAClC;CACF;AAED,MAAM,MAAM,wBAAwB,GAChC,QAAQ,GACR,OAAO,GACP,SAAS,GACT,QAAQ,CAAC;AAEb,MAAM,MAAM,0BAA0B,GAAG;IACvC,KAAK,EAAE,wBAAwB,CAAC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,yHAAyH;IACzH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,CAChC,OAAO,EAAE,cAAc,EACvB,GAAG,EAAE,0BAA0B,KAC5B,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE1B,MAAM,MAAM,uBAAuB,GAAG;IACpC,OAAO,EAAE,iBAAiB,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,KAAK,CAAC,EAAE,sBAAsB,CAAC;IAC/B,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAChC,eAAe,CAAC,EAAE,yBAAyB,CAAC;IAC5C,gBAAgB,CAAC,EAAE,0BAA0B,CAAC;CAC/C,GAAG,oBAAoB,CAAC;AAwKzB,QAAA,MAAM,gBAAgB,EAAE,kBAAkB,CAAC,uBAAuB,CA+NjE,CAAC;AAEF,eAAe,gBAAgB,CAAC"}
+{"version":3,"file":"pulsevault.d.ts","sourceRoot":"","sources":["../../src/routes/pulsevault.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAClB,oBAAoB,EAIrB,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAAwB,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACpE,OAAO,KAAK,EACV,0BAA0B,EAC1B,yBAAyB,EAC1B,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,KAAK,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEzE,YAAY,EACV,mBAAmB,EACnB,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAK7B,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,cAAc;QACtB,UAAU,CAAC,EAAE;YAAE,UAAU,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,UAAU,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KAC3E;CACF;AAED,MAAM,MAAM,uBAAuB,GAAG;IACpC,OAAO,EAAE,iBAAiB,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,2BAA2B,CAAC;IAC/C,wGAAwG;IACxG,UAAU,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC9B,KAAK,CAAC,EAAE,sBAAsB,CAAC;IAC/B,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAChC,eAAe,CAAC,EAAE,yBAAyB,CAAC;IAC5C,gBAAgB,CAAC,EAAE,0BAA0B,CAAC;IAC9C,eAAe,CAAC,EAAE,yBAAyB,CAAC;CAC7C,GAAG,oBAAoB,CAAC;AA4JzB,QAAA,MAAM,gBAAgB,EAAE,kBAAkB,CAAC,uBAAuB,CA8EjE,CAAC;AAEF,eAAe,gBAAgB,CAAC;AAChC,OAAO,EAAE,gBAAgB,EAAE,CAAC"}

package/dist/routes/pulsevault.js

@@ -1,326 +1,195 @@
-import send from "@fastify/send";
-import { createPulsevaultTusServer, pulseVaultTusContext, } from "../lib/pulsevaultTus.js";
-import { pulseVaultError } from "../lib/errors.js";
-import { isUuid } from "../lib/uuid.js";
-/**
- * Pull `videoid` out of a raw `Upload-Metadata` header. Format is a
- * comma-separated list of `<key> <base64-value>` pairs (tus v1 creation
- * extension). We only care about `videoid`; everything else is left to the
- * tus server proper.
- */
-function parseVideoidFromMetadata(header) {
-    for (const pair of header.split(",")) {
-        const trimmed = pair.trim();
-        if (!trimmed)
-            continue;
-        const sep = trimmed.indexOf(" ");
-        if (sep < 0)
-            continue;
-        const key = trimmed.slice(0, sep);
-        if (key !== "videoid")
-            continue;
-        const value = trimmed.slice(sep + 1).trim();
-        if (!value)
-            return undefined;
-        try {
-            const decoded = Buffer.from(value, "base64").toString("utf8");
-            return isUuid(decoded) ? decoded : undefined;
-        }
-        catch {
-            return undefined;
-        }
-    }
-    return undefined;
-}
-/**
- * Decode the last URL segment of a tus PATCH/HEAD/DELETE (base64url-encoded
- * id) and extract the first path component, which the plugin always shapes as
- * the videoid (see `pulseVaultTus.ts`).
- */
-function videoidFromTusUrl(url) {
-    const match = url.match(/\/upload\/([^/?#]+)/);
-    if (!match?.[1])
-        return undefined;
-    let decoded;
-    try {
-        decoded = Buffer.from(match[1], "base64url").toString("utf8");
-    }
-    catch {
-        return undefined;
-    }
-    const first = decoded.split("/", 1)[0];
-    return isUuid(first) ? first : undefined;
-}
-function extractAuthzStatus(err) {
-    const e = err;
-    if (typeof e?.statusCode === "number")
-        return e.statusCode;
-    if (typeof e?.status_code === "number")
-        return e.status_code;
-    return 403;
-}
-function extractAuthzMessage(err) {
-    if (err instanceof Error && err.message)
-        return err.message;
-    return "Forbidden";
-}
+import { createPulseVaultCore, PROTOCOL_VERSION } from '../core.js';
+import {} from '../lib/authorize.js';
 const pulseVaultErrorResponse = {
-    type: "object",
+    type: 'object',
     properties: {
-        ok: { type: "boolean" },
-        error: { type: "string" },
+        ok: { type: 'boolean' },
+        error: { type: 'string' },
     },
-    required: ["ok", "error"],
+    required: ['ok', 'error'],
 };
 const tusRouteSchema = {
-    tags: ["pulsevault"],
-    summary: "TUS resumable upload endpoint",
-    description: "TUS v1 resumable upload protocol.\n\n" +
-        "- `POST` creates a new upload. The `Upload-Metadata` header must include a base64-encoded `videoid` pair.\n" +
-        "- `PATCH` appends a chunk at the offset given by `Upload-Offset`, with `Content-Type: application/offset+octet-stream`.\n" +
-        "- `HEAD` returns the current offset for a resumable upload.\n" +
-        "- `DELETE` cancels an in-flight upload.\n\n" +
-        "See https://tus.io/protocols/resumable-upload for the full protocol.",
+    tags: ['pulsevault'],
+    summary: 'TUS resumable upload endpoint',
+    description: 'TUS v1 resumable upload protocol.\n\n' +
+        '- `POST` creates a new upload. The `Upload-Metadata` header must include base64-encoded key/value pairs:\n' +
+        '  - `artifactId` (or the legacy `videoid`/`projectid` aliases) — a UUID generated by your server.\n' +
+        "  - `filename` — original filename; the extension must match the kind's allowed list.\n" +
+        '  - `kind` — `video` (default), `project`, or `captions`. Determines the storage subdir and which completion hooks fire.\n' +
+        "  - `relatedTo` — optional UUID of another artifact this one belongs to (e.g. a video's captions, or a beat belonging to a pulse manifest's session).\n" +
+        '  - `checksum` — optional `<algorithm>:<hex digest>` of the finished file, verified post-upload if a checksum validator is configured.\n' +
+        '- `PATCH` appends a chunk at the offset given by `Upload-Offset`, with `Content-Type: application/offset+octet-stream`.\n' +
+        '- `HEAD` returns the current offset for a resumable upload.\n' +
+        '- `DELETE` cancels an in-flight upload.\n\n' +
+        'See https://tus.io/protocols/resumable-upload for the full protocol.',
     response: {
-        400: { description: "Invalid request.", ...pulseVaultErrorResponse },
+        400: { description: 'Invalid request.', ...pulseVaultErrorResponse },
         403: {
-            description: "Authorize hook rejected the request.",
+            description: 'Authorize hook rejected the request.',
             ...pulseVaultErrorResponse,
         },
     },
 };
-const videoDeleteSchema = {
-    tags: ["pulsevault"],
-    summary: "Delete an uploaded video",
-    description: "Deletes all storage for a videoid (bytes + sidecar metadata). Runs the `authorize` hook with `phase: \"delete\"` before the adapter's `remove` is called. Returns 204 on success, 404 if the videoid was unknown, 501 if the adapter does not implement `remove`.",
+const artifactDeleteSchema = {
+    tags: ['pulsevault'],
+    summary: 'Delete an uploaded artifact',
+    description: 'Deletes all storage for an artifactId (bytes + sidecar metadata), regardless of kind. Runs the `authorize` hook with `phase: "delete"` before the adapter\'s `remove` is called. Returns 204 on success, 404 if the artifactId was unknown, 501 if the adapter does not implement `remove`.',
     params: {
-        type: "object",
+        type: 'object',
         properties: {
-            videoid: {
-                type: "string",
-                format: "uuid",
-                description: "UUID of the upload to delete.",
+            artifactId: {
+                type: 'string',
+                format: 'uuid',
+                description: 'UUID of the upload to delete.',
             },
         },
-        required: ["videoid"],
+        required: ['artifactId'],
     },
     response: {
         400: {
-            description: "`videoid` is not a valid UUID.",
+            description: '`artifactId` is not a valid UUID.',
             ...pulseVaultErrorResponse,
         },
         403: {
-            description: "Authorize hook rejected the request.",
+            description: 'Authorize hook rejected the request.',
             ...pulseVaultErrorResponse,
         },
-        404: { description: "Video not found.", ...pulseVaultErrorResponse },
+        404: { description: 'Artifact not found.', ...pulseVaultErrorResponse },
         501: {
-            description: "Storage adapter does not implement delete.",
+            description: 'Storage adapter does not implement delete.',
             ...pulseVaultErrorResponse,
         },
     },
 };
-const videoGetSchema = {
-    tags: ["pulsevault"],
-    summary: "Serve a previously uploaded video",
-    description: "Resolves the `videoid` through the configured storage adapter and either streams the bytes or redirects (for CDN-backed adapters). Runs the `authorize` hook before resolve.",
+const artifactGetSchema = {
+    tags: ['pulsevault'],
+    summary: 'Serve a previously uploaded artifact',
+    description: "Resolves the `artifactId` through the configured storage adapter and either streams the bytes or redirects (for CDN-backed adapters). The artifact's kind (video, project, or captions) is resolved from storage, not the URL. Runs the `authorize` hook before resolve.",
     params: {
-        type: "object",
+        type: 'object',
         properties: {
-            videoid: {
-                type: "string",
-                format: "uuid",
-                description: "UUID returned from the reserve/TUS-create flow.",
+            artifactId: {
+                type: 'string',
+                format: 'uuid',
+                description: 'UUID returned from the upload flow.',
             },
         },
-        required: ["videoid"],
+        required: ['artifactId'],
     },
     querystring: {
-        type: "object",
+        type: 'object',
         properties: {
             token: {
-                type: "string",
-                description: "Optional bearer token for pre-authenticated watch links. Forwarded to the `authorize` hook as `ctx.token` so parent servers can validate it without a separate login step.",
+                type: 'string',
+                description: 'Optional bearer token for pre-authenticated watch links. Forwarded to the `authorize` hook as `ctx.token` so parent servers can validate it without a separate login step.',
             },
         },
     },
     response: {
         400: {
-            description: "`videoid` is not a valid UUID.",
+            description: '`artifactId` is not a valid UUID.',
             ...pulseVaultErrorResponse,
         },
         403: {
-            description: "Authorize hook rejected the request.",
+            description: 'Authorize hook rejected the request.',
             ...pulseVaultErrorResponse,
         },
-        404: { description: "Video not found.", ...pulseVaultErrorResponse },
+        404: { description: 'Artifact not found.', ...pulseVaultErrorResponse },
     },
 };
+const capabilitiesSchema = {
+    tags: ['pulsevault'],
+    summary: "Discover this deployment's protocol version and configuration",
+    description: 'Unauthenticated — the response carries no secrets. Lets a client detect protocol compatibility before pairing, and which upload strategy (`uploadUnit`) this server expects.',
+    response: {
+        200: {
+            type: 'object',
+            properties: {
+                protocolVersion: { type: 'number' },
+                minSupportedVersion: { type: 'number' },
+                maxSupportedVersion: { type: 'number' },
+                uploadUnit: { type: 'string', enum: ['beat', 'merged'] },
+                kinds: { type: 'array', items: { type: 'string' } },
+                allowedExtensions: {
+                    type: 'object',
+                    properties: {
+                        video: { type: 'array', items: { type: 'string' } },
+                        project: { type: 'array', items: { type: 'string' } },
+                        captions: { type: 'array', items: { type: 'string' } },
+                    },
+                },
+                maxUploadSize: { type: 'number' },
+                checksum: {
+                    type: 'object',
+                    properties: { algorithms: { type: 'array', items: { type: 'string' } } },
+                },
+            },
+        },
+    },
+};
+/** Coerce the raw route param to a string; an invalid UUID is rejected by the core's own check either way. */
+function paramToString(value) {
+    return typeof value === 'string' ? value : '';
+}
 const pulseVaultRoutes = async (fastify, opts) => {
-    const { storage, maxUploadSize, allowedExtensions, cache, authorize, validatePayload, onUploadComplete, } = opts;
-    // `fastify.prefix` is `""` when the plugin is mounted at the root.
-    const tusPath = `${fastify.prefix}/upload`;
-    const tusServer = createPulsevaultTusServer({
+    const { storage, maxUploadSize, allowedExtensions, uploadUnit, cache, authorize, validatePayload, onUploadComplete, onArtifactEvent, } = opts;
+    // All hook orchestration, tus glue, and artifact GET/DELETE logic lives in
+    // the framework-agnostic core (`../core.js`); this file only wires Fastify's
+    // routing/schema/lifecycle around it, so behavior can't drift from the
+    // `./core` entry point non-Fastify hosts use.
+    const core = createPulseVaultCore({
         storage,
-        tusPath,
-        maxSize: maxUploadSize,
+        // `fastify.prefix` is `""` when the plugin is mounted at the root.
+        basePath: fastify.prefix,
+        maxUploadSize,
+        uploadUnit,
         allowedExtensions,
+        cache,
+        authorize,
         validatePayload,
         onUploadComplete,
+        onArtifactEvent,
+        logger: fastify.log,
     });
-    fastify.addContentTypeParser("application/offset+octet-stream", (_request, _payload, done) => {
+    fastify.addContentTypeParser('application/offset+octet-stream', (_request, _payload, done) => {
         done(null);
     });
-    /**
-     * Run the consumer's `authorize` hook (if any) for a TUS request. Returns
-     * `true` iff the request may proceed; on rejection, this function already
-     * wrote the response.
-     */
-    const runAuthorize = async (request, reply, phase) => {
-        let videoid;
-        if (phase === "create") {
-            const meta = request.headers["upload-metadata"];
-            if (typeof meta === "string") {
-                videoid = parseVideoidFromMetadata(meta);
-            }
-        }
-        else {
-            videoid = videoidFromTusUrl(request.url);
-        }
-        if (videoid) {
-            request.pulseVault = { videoid };
-        }
-        if (!authorize) {
-            return { ok: true, videoid };
-        }
-        // If we can't extract a videoid, let tus produce its own 4xx for malformed
-        // input rather than synthesize a fake authorize failure.
-        if (!videoid) {
-            return { ok: true, videoid };
-        }
-        try {
-            await authorize(request, { phase, videoid });
-            return { ok: true, videoid };
-        }
-        catch (err) {
-            const statusCode = extractAuthzStatus(err);
-            const message = extractAuthzMessage(err);
-            request.log.info({ err, videoid, phase, statusCode }, "pulsevault authorize rejected");
-            await reply.code(statusCode).send(pulseVaultError(message));
-            return { ok: false };
-        }
-    };
+    const tusMethods = ['POST', 'PATCH', 'HEAD', 'DELETE', 'OPTIONS'];
     const tusHandler = async (request, reply) => {
-        const phase = request.method === "POST" ? "create" : "patch";
-        const authz = await runAuthorize(request, reply, phase);
-        if (!authz.ok)
-            return;
-        // Once hijacked, Fastify will not write to this reply on our behalf, so we
-        // must translate any unexpected throw from `@tus/server` into a response
-        // ourselves — otherwise the socket stays open until the client times out.
+        // The core writes directly to the raw response (tus dispatch, authorize
+        // rejections, error translation) — hijack so Fastify doesn't also try to
+        // manage this reply afterward.
         reply.hijack();
-        try {
-            await pulseVaultTusContext.run({ request, videoid: authz.videoid }, () => tusServer.handle(request.raw, reply.raw));
-        }
-        catch (err) {
-            request.log.error({ err }, "pulsevault tus handler failed");
-            if (reply.raw.headersSent || reply.raw.writableEnded) {
-                reply.raw.destroy();
-                return;
-            }
-            reply.raw.statusCode = 500;
-            reply.raw.setHeader("content-type", "text/plain; charset=utf-8");
-            reply.raw.end("Internal Server Error");
-        }
+        await core.handleTus(request.raw, reply.raw);
     };
-    const tusMethods = ["POST", "PATCH", "HEAD", "DELETE", "OPTIONS"];
     fastify.route({
         method: [...tusMethods],
-        url: "/upload",
+        url: '/upload',
         schema: tusRouteSchema,
         handler: tusHandler,
     });
     fastify.route({
         method: [...tusMethods],
-        url: "/upload/*",
+        url: '/upload/*',
         schema: tusRouteSchema,
         handler: tusHandler,
     });
-    fastify.delete("/:videoid", { schema: videoDeleteSchema }, async (request, reply) => {
-        const videoid = request.params?.videoid;
-        if (!isUuid(videoid)) {
-            return reply
-                .code(400)
-                .send(pulseVaultError("`videoid` must be a valid UUID"));
-        }
-        request.pulseVault = { videoid };
-        if (authorize) {
-            try {
-                await authorize(request, { phase: "delete", videoid });
-            }
-            catch (err) {
-                const statusCode = extractAuthzStatus(err);
-                const message = extractAuthzMessage(err);
-                request.log.info({ err, videoid, phase: "delete", statusCode }, "pulsevault authorize rejected");
-                return reply.code(statusCode).send(pulseVaultError(message));
-            }
-        }
-        if (typeof storage.remove !== "function") {
-            return reply
-                .code(501)
-                .send(pulseVaultError("Storage adapter does not support delete"));
-        }
-        const removed = await storage.remove(videoid);
-        if (!removed) {
-            return reply.code(404).send(pulseVaultError("Video not found"));
-        }
-        return reply.code(204).send();
+    fastify.get('/capabilities', { schema: capabilitiesSchema }, async (request, reply) => {
+        reply.hijack();
+        await core.handleCapabilities(request.raw, reply.raw);
     });
-    fastify.get("/:videoid", { schema: videoGetSchema }, async (request, reply) => {
-        const videoid = request.params?.videoid;
-        if (!isUuid(videoid)) {
-            return reply
-                .code(400)
-                .send(pulseVaultError("`videoid` must be a valid UUID"));
-        }
-        request.pulseVault = { videoid };
-        // Extract the optional token forwarded by the mobile app in the watch URL.
+    fastify.delete('/artifacts/:artifactId', { schema: artifactDeleteSchema }, async (request, reply) => {
+        const artifactId = paramToString(request.params?.artifactId);
+        reply.hijack();
+        await core.handleArtifactDelete(request.raw, reply.raw, artifactId);
+    });
+    fastify.get('/artifacts/:artifactId', { schema: artifactGetSchema }, async (request, reply) => {
+        const artifactId = paramToString(request.params?.artifactId);
         const token = request.query?.token;
-        // Run authorize *before* resolve so consumers can reject without the
-        // response leaking "this videoid exists but you don't own it" vs. "no such
-        // videoid".
-        if (authorize) {
-            try {
-                await authorize(request, { phase: "resolve", videoid, token });
-            }
-            catch (err) {
-                const statusCode = extractAuthzStatus(err);
-                const message = extractAuthzMessage(err);
-                request.log.info({ err, videoid, phase: "resolve", statusCode }, "pulsevault authorize rejected");
-                return reply.code(statusCode).send(pulseVaultError(message));
-            }
-        }
-        const resolved = await storage.resolve(videoid);
-        if (!resolved) {
-            return reply.code(404).send(pulseVaultError("Video not found"));
-        }
-        if (resolved.kind === "redirect") {
-            return reply.redirect(resolved.url, resolved.statusCode ?? 302);
-        }
-        const result = await send(request.raw, resolved.filename, {
-            root: resolved.root,
-            ...cache,
-        });
-        if (result.type === "error") {
-            return reply
-                .code(result.statusCode)
-                .send(pulseVaultError(result.metadata.error.message));
-        }
-        for (const [name, value] of Object.entries(result.headers)) {
-            reply.header(name, value);
-        }
-        return reply.code(result.statusCode).send(result.stream);
+        reply.hijack();
+        await core.handleArtifactGet(request.raw, reply.raw, artifactId, token);
     });
 };
 export default pulseVaultRoutes;
+export { PROTOCOL_VERSION };
 //# sourceMappingURL=pulsevault.js.map

package/dist/routes/pulsevault.js.map

@@ -1 +1 @@
-{"version":3,"file":"pulsevault.js","sourceRoot":"","sources":["../../src/routes/pulsevault.ts"],"names":[],"mappings":"AAOA,OAAO,IAAI,MAAM,eAAe,CAAC;AAEjC,OAAO,EACL,yBAAyB,EACzB,oBAAoB,GAErB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAyCxC;;;;;GAKG;AACH,SAAS,wBAAwB,CAAC,MAAc;IAC9C,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,GAAG,GAAG,CAAC;YAAE,SAAS;QACtB,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAClC,IAAI,GAAG,KAAK,SAAS;YAAE,SAAS;QAChC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC9D,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,GAAW;IACpC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC/C,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAClC,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3C,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAY;IACtC,MAAM,CAAC,GAAG,GAAsD,CAAC;IACjE,IAAI,OAAO,CAAC,EAAE,UAAU,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC,UAAU,CAAC;IAC3D,IAAI,OAAO,CAAC,EAAE,WAAW,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC,WAAW,CAAC;IAC7D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAY;IACvC,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO;QAAE,OAAO,GAAG,CAAC,OAAO,CAAC;IAC5D,OAAO,WAAW,CAAC;AACrB,CAAC;AAYD,MAAM,uBAAuB,GAAG;IAC9B,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;QACvB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAC1B;IACD,QAAQ,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEF,MAAM,cAAc,GAAuB;IACzC,IAAI,EAAE,CAAC,YAAY,CAAC;IACpB,OAAO,EAAE,+BAA+B;IACxC,WAAW,EACT,uCAAuC;QACvC,6GAA6G;QAC7G,2HAA2H;QAC3H,+DAA+D;QAC/D,6CAA6C;QAC7C,sEAAsE;IACxE,QAAQ,EAAE;QACR,GAAG,EAAE,EAAE,WAAW,EAAE,kBAAkB,EAAE,GAAG,uBAAuB,EAAE;QACpE,GAAG,EAAE;YACH,WAAW,EAAE,sCAAsC;YACnD,GAAG,uBAAuB;SAC3B;KACF;CACF,CAAC;AAEF,MAAM,iBAAiB,GAAuB;IAC5C,IAAI,EAAE,CAAC,YAAY,CAAC;IACpB,OAAO,EAAE,0BAA0B;IACnC,WAAW,EACT,mQAAmQ;IACrQ,MAAM,EAAE;QACN,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,OAAO,EAAE;gBACP,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,+BAA+B;aAC7C;SACF;QACD,QAAQ,EAAE,CAAC,SAAS,CAAC;KACtB;IACD,QAAQ,EAAE;QACR,GAAG,EAAE;YACH,WAAW,EAAE,gCAAgC;YAC7C,GAAG,uBAAuB;SAC3B;QACD,GAAG,EAAE;YACH,WAAW,EAAE,sCAAsC;YACnD,GAAG,uBAAuB;SAC3B;QACD,GAAG,EAAE,EAAE,WAAW,EAAE,kBAAkB,EAAE,GAAG,uBAAuB,EAAE;QACpE,GAAG,EAAE;YACH,WAAW,EAAE,4CAA4C;YACzD,GAAG,uBAAuB;SAC3B;KACF;CACF,CAAC;AAEF,MAAM,cAAc,GAAuB;IACzC,IAAI,EAAE,CAAC,YAAY,CAAC;IACpB,OAAO,EAAE,mCAAmC;IAC5C,WAAW,EACT,8KAA8K;IAChL,MAAM,EAAE;QACN,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,OAAO,EAAE;gBACP,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,iDAAiD;aAC/D;SACF;QACD,QAAQ,EAAE,CAAC,SAAS,CAAC;KACtB;IACD,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,WAAW,EACT,4KAA4K;aAC/K;SACF;KACF;IACD,QAAQ,EAAE;QACR,GAAG,EAAE;YACH,WAAW,EAAE,gCAAgC;YAC7C,GAAG,uBAAuB;SAC3B;QACD,GAAG,EAAE;YACH,WAAW,EAAE,sCAAsC;YACnD,GAAG,uBAAuB;SAC3B;QACD,GAAG,EAAE,EAAE,WAAW,EAAE,kBAAkB,EAAE,GAAG,uBAAuB,EAAE;KACrE;CACF,CAAC;AAEF,MAAM,gBAAgB,GAAgD,KAAK,EACzE,OAAO,EACP,IAAI,EACJ,EAAE;IACF,MAAM,EACJ,OAAO,EACP,aAAa,EACb,iBAAiB,EACjB,KAAK,EACL,SAAS,EACT,eAAe,EACf,gBAAgB,GACjB,GAAG,IAAI,CAAC;IACT,mEAAmE;IACnE,MAAM,OAAO,GAAG,GAAG,OAAO,CAAC,MAAM,SAAS,CAAC;IAE3C,MAAM,SAAS,GAAG,yBAAyB,CAAC;QAC1C,OAAO;QACP,OAAO;QACP,OAAO,EAAE,aAAa;QACtB,iBAAiB;QACjB,eAAe;QACf,gBAAgB;KACjB,CAAC,CAAC;IAEH,OAAO,CAAC,oBAAoB,CAC1B,iCAAiC,EACjC,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;QAC3B,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,CAAC,CACF,CAAC;IAEF;;;;OAIG;IACH,MAAM,YAAY,GAAG,KAAK,EACxB,OAAuB,EACvB,KAAmB,EACnB,KAAyB,EAC2C,EAAE;QACtE,IAAI,OAA2B,CAAC;QAChC,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;YAChD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,OAAO,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3C,CAAC;QAED,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,UAAU,GAAG,EAAE,OAAO,EAAE,CAAC;QACnC,CAAC;QAED,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC/B,CAAC;QAED,2EAA2E;QAC3E,yDAAyD;QACzD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC/B,CAAC;QAED,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YAC7C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;YAC3C,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,IAAI,CACd,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EACnC,+BAA+B,CAChC,CAAC;YACF,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;YAC5D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;QACvB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;QACxE,MAAM,KAAK,GACT,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;QAEjD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QACxD,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO;QAEtB,2EAA2E;QAC3E,yEAAyE;QACzE,0EAA0E;QAC1E,KAAK,CAAC,MAAM,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,oBAAoB,CAAC,GAAG,CAC5B,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,EACnC,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAC/C,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,+BAA+B,CAAC,CAAC;YAC5D,IAAI,KAAK,CAAC,GAAG,CAAC,WAAW,IAAI,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;gBACrD,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO;YACT,CAAC;YACD,KAAK,CAAC,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YAC3B,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,2BAA2B,CAAC,CAAC;YACjE,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAU,CAAC;IAC3E,OAAO,CAAC,KAAK,CAAC;QACZ,MAAM,EAAE,CAAC,GAAG,UAAU,CAAC;QACvB,GAAG,EAAE,SAAS;QACd,MAAM,EAAE,cAAc;QACtB,OAAO,EAAE,UAAU;KACpB,CAAC,CAAC;IACH,OAAO,CAAC,KAAK,CAAC;QACZ,MAAM,EAAE,CAAC,GAAG,UAAU,CAAC;QACvB,GAAG,EAAE,WAAW;QAChB,MAAM,EAAE,cAAc;QACtB,OAAO,EAAE,UAAU;KACpB,CAAC,CAAC;IAEH,OAAO,CAAC,MAAM,CACZ,WAAW,EACX,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAC7B,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,OAAO,GAAI,OAAO,CAAC,MAAgC,EAAE,OAAO,CAAC;QACnE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACrB,OAAO,KAAK;iBACT,IAAI,CAAC,GAAG,CAAC;iBACT,IAAI,CAAC,eAAe,CAAC,gCAAgC,CAAC,CAAC,CAAC;QAC7D,CAAC;QAED,OAAO,CAAC,UAAU,GAAG,EAAE,OAAO,EAAE,CAAC;QAEjC,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC;gBACH,MAAM,SAAS,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YACzD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;gBAC3C,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;gBACzC,OAAO,CAAC,GAAG,CAAC,IAAI,CACd,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,EAC7C,+BAA+B,CAChC,CAAC;gBACF,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QAED,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACzC,OAAO,KAAK;iBACT,IAAI,CAAC,GAAG,CAAC;iBACT,IAAI,CACH,eAAe,CACb,yCAAyC,CAC1C,CACF,CAAC;QACN,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAChC,CAAC,CACF,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC5E,MAAM,OAAO,GAAI,OAAO,CAAC,MAAgC,EAAE,OAAO,CAAC;QACnE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACrB,OAAO,KAAK;iBACT,IAAI,CAAC,GAAG,CAAC;iBACT,IAAI,CAAC,eAAe,CAAC,gCAAgC,CAAC,CAAC,CAAC;QAC7D,CAAC;QAED,OAAO,CAAC,UAAU,GAAG,EAAE,OAAO,EAAE,CAAC;QAEjC,2EAA2E;QAC3E,MAAM,KAAK,GAAI,OAAO,CAAC,KAA4B,EAAE,KAAK,CAAC;QAE3D,qEAAqE;QACrE,2EAA2E;QAC3E,YAAY;QACZ,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC;gBACH,MAAM,SAAS,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YACjE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;gBAC3C,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;gBACzC,OAAO,CAAC,GAAG,CAAC,IAAI,CACd,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,EAC9C,+BAA+B,CAChC,CAAC;gBACF,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAClE,CAAC;QAED,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACjC,OAAO,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,QAAQ,EAAE;YACxD,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,GAAG,KAAK;SACT,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC5B,OAAO,KAAK;iBACT,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;iBACvB,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAC1D,CAAC;QAED,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3D,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,eAAe,gBAAgB,CAAC"}
+{"version":3,"file":"pulsevault.js","sourceRoot":"","sources":["../../src/routes/pulsevault.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAMpE,OAAO,EAA4B,MAAM,qBAAqB,CAAC;AAyC/D,MAAM,uBAAuB,GAAG;IAC9B,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;QACvB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAC1B;IACD,QAAQ,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEF,MAAM,cAAc,GAAuB;IACzC,IAAI,EAAE,CAAC,YAAY,CAAC;IACpB,OAAO,EAAE,+BAA+B;IACxC,WAAW,EACT,uCAAuC;QACvC,4GAA4G;QAC5G,qGAAqG;QACrG,yFAAyF;QACzF,4HAA4H;QAC5H,yJAAyJ;QACzJ,0IAA0I;QAC1I,2HAA2H;QAC3H,+DAA+D;QAC/D,6CAA6C;QAC7C,sEAAsE;IACxE,QAAQ,EAAE;QACR,GAAG,EAAE,EAAE,WAAW,EAAE,kBAAkB,EAAE,GAAG,uBAAuB,EAAE;QACpE,GAAG,EAAE;YACH,WAAW,EAAE,sCAAsC;YACnD,GAAG,uBAAuB;SAC3B;KACF;CACF,CAAC;AAEF,MAAM,oBAAoB,GAAuB;IAC/C,IAAI,EAAE,CAAC,YAAY,CAAC;IACpB,OAAO,EAAE,6BAA6B;IACtC,WAAW,EACT,6RAA6R;IAC/R,MAAM,EAAE;QACN,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,+BAA+B;aAC7C;SACF;QACD,QAAQ,EAAE,CAAC,YAAY,CAAC;KACzB;IACD,QAAQ,EAAE;QACR,GAAG,EAAE;YACH,WAAW,EAAE,mCAAmC;YAChD,GAAG,uBAAuB;SAC3B;QACD,GAAG,EAAE;YACH,WAAW,EAAE,sCAAsC;YACnD,GAAG,uBAAuB;SAC3B;QACD,GAAG,EAAE,EAAE,WAAW,EAAE,qBAAqB,EAAE,GAAG,uBAAuB,EAAE;QACvE,GAAG,EAAE;YACH,WAAW,EAAE,4CAA4C;YACzD,GAAG,uBAAuB;SAC3B;KACF;CACF,CAAC;AAEF,MAAM,iBAAiB,GAAuB;IAC5C,IAAI,EAAE,CAAC,YAAY,CAAC;IACpB,OAAO,EAAE,sCAAsC;IAC/C,WAAW,EACT,0QAA0Q;IAC5Q,MAAM,EAAE;QACN,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,qCAAqC;aACnD;SACF;QACD,QAAQ,EAAE,CAAC,YAAY,CAAC;KACzB;IACD,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,WAAW,EACT,4KAA4K;aAC/K;SACF;KACF;IACD,QAAQ,EAAE;QACR,GAAG,EAAE;YACH,WAAW,EAAE,mCAAmC;YAChD,GAAG,uBAAuB;SAC3B;QACD,GAAG,EAAE;YACH,WAAW,EAAE,sCAAsC;YACnD,GAAG,uBAAuB;SAC3B;QACD,GAAG,EAAE,EAAE,WAAW,EAAE,qBAAqB,EAAE,GAAG,uBAAuB,EAAE;KACxE;CACF,CAAC;AAEF,MAAM,kBAAkB,GAAuB;IAC7C,IAAI,EAAE,CAAC,YAAY,CAAC;IACpB,OAAO,EAAE,+DAA+D;IACxE,WAAW,EACT,8KAA8K;IAChL,QAAQ,EAAE;QACR,GAAG,EAAE;YACH,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACnC,mBAAmB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACvC,mBAAmB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACvC,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE;gBACxD,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;gBACnD,iBAAiB,EAAE;oBACjB,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;wBACnD,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;wBACrD,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;qBACvD;iBACF;gBACD,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACjC,QAAQ,EAAE;oBACR,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;iBACzE;aACF;SACF;KACF;CACF,CAAC;AAKF,8GAA8G;AAC9G,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,gBAAgB,GAAgD,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;IAC5F,MAAM,EACJ,OAAO,EACP,aAAa,EACb,iBAAiB,EACjB,UAAU,EACV,KAAK,EACL,SAAS,EACT,eAAe,EACf,gBAAgB,EAChB,eAAe,GAChB,GAAG,IAAI,CAAC;IAET,2EAA2E;IAC3E,6EAA6E;IAC7E,uEAAuE;IACvE,8CAA8C;IAC9C,MAAM,IAAI,GAAG,oBAAoB,CAAC;QAChC,OAAO;QACP,mEAAmE;QACnE,QAAQ,EAAE,OAAO,CAAC,MAAM;QACxB,aAAa;QACb,UAAU;QACV,iBAAiB;QACjB,KAAK;QACL,SAAS;QACT,eAAe;QACf,gBAAgB;QAChB,eAAe;QACf,MAAM,EAAE,OAAO,CAAC,GAAG;KACpB,CAAC,CAAC;IAEH,OAAO,CAAC,oBAAoB,CAAC,iCAAiC,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;QAC3F,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,CAAC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAU,CAAC;IAC3E,MAAM,UAAU,GAAG,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;QACxE,wEAAwE;QACxE,yEAAyE;QACzE,+BAA+B;QAC/B,KAAK,CAAC,MAAM,EAAE,CAAC;QACf,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/C,CAAC,CAAC;IACF,OAAO,CAAC,KAAK,CAAC;QACZ,MAAM,EAAE,CAAC,GAAG,UAAU,CAAC;QACvB,GAAG,EAAE,SAAS;QACd,MAAM,EAAE,cAAc;QACtB,OAAO,EAAE,UAAU;KACpB,CAAC,CAAC;IACH,OAAO,CAAC,KAAK,CAAC;QACZ,MAAM,EAAE,CAAC,GAAG,UAAU,CAAC;QACvB,GAAG,EAAE,WAAW;QAChB,MAAM,EAAE,cAAc;QACtB,OAAO,EAAE,UAAU;KACpB,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACpF,KAAK,CAAC,MAAM,EAAE,CAAC;QACf,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,MAAM,CACZ,wBAAwB,EACxB,EAAE,MAAM,EAAE,oBAAoB,EAAE,EAChC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,UAAU,GAAG,aAAa,CAAE,OAAO,CAAC,MAA2B,EAAE,UAAU,CAAC,CAAC;QACnF,KAAK,CAAC,MAAM,EAAE,CAAC;QACf,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACtE,CAAC,CACF,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC5F,MAAM,UAAU,GAAG,aAAa,CAAE,OAAO,CAAC,MAA2B,EAAE,UAAU,CAAC,CAAC;QACnF,MAAM,KAAK,GAAI,OAAO,CAAC,KAA4B,EAAE,KAAK,CAAC;QAC3D,KAAK,CAAC,MAAM,EAAE,CAAC;QACf,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,eAAe,gBAAgB,CAAC;AAChC,OAAO,EAAE,gBAAgB,EAAE,CAAC"}

package/dist/storage/local.d.ts

@@ -1,34 +1,55 @@
-import type { PulseVaultStorage } from "./types.js";
+import type { PulseVaultStorage, UploadKind } from './types.js';
 export type LocalStorageOptions = {
-    /** Directory where per-video subdirectories are stored. Resolved against CWD if relative. */
+    /** Directory where uploads are stored (flat kind-scoped subdirs). Resolved against CWD if relative. */
     workspaceDir: string;
+    /**
+     * Max number of entries kept in the in-memory metadata cache before the
+     * oldest (by insertion order) is evicted. A cache miss falls back to
+     * reading the sidecar from disk, so eviction only costs an extra read, not
+     * correctness. Defaults to 10,000.
+     */
+    metaCacheLimit?: number;
 };
 /**
  * Local adapter storage. Layout contract (stable; downstream tools may rely
  * on it):
  *
  * ```text
- * <workspaceRoot>/<videoid>/
- *   .pulsevault.json           # our sidecar: { version, ext, filename, status }
- *   video/<videoid><ext>       # finalized upload bytes
- *   video/<videoid><ext>.json  # @tus/file-store's offset/metadata sidecar
+ * <workspaceRoot>/
+ *   .pulsevault/<artifactId>.json   # sidecar: { version, ext, filename, status, kind, relatedTo }
+ *   video/<artifactId><ext>         # finalized video bytes
+ *   video/<artifactId><ext>.json    # @tus/file-store offset/metadata sidecar
+ *   project/<artifactId><ext>       # finalized project bytes
+ *   project/<artifactId><ext>.json  # @tus/file-store offset/metadata sidecar
+ *   captions/<artifactId><ext>      # finalized captions bytes
+ *   captions/<artifactId><ext>.json # @tus/file-store offset/metadata sidecar
  * ```
  *
  * `workspaceRoot` is exposed so consumers can layer post-processing (e.g.
  * hydrate an ArtiPod with `video/`, `transcripts/`, `frames/` mounts) against
  * the same on-disk tree from an `onUploadComplete` hook. `getLocalPath` is
  * exposed for `validatePayload` helpers that need to sniff the bytes before
- * the video is marked ready.
+ * the upload is marked ready.
  */
 export type LocalStorage = PulseVaultStorage & {
     readonly workspaceRoot: string;
     /**
-     * Return the absolute path to the upload bytes for `videoid`, regardless
+     * Return the absolute path to the upload bytes for `artifactId`, regardless
      * of ready state. Falls back to reading the sidecar if the in-memory cache
      * is cold (so it works even after a server restart mid-upload). Returns
-     * `null` if the videoid is unknown.
+     * `null` if the artifactId is unknown.
+     */
+    getLocalPath(artifactId: string): Promise<string | null>;
+    /**
+     * Return the artifact kind for a known artifactId without a full resolve.
+     * Returns `null` if the artifactId is unknown. Satisfies the optional
+     * `PulseVaultStorage.getKind` contract.
      */
-    getLocalPath(videoid: string): Promise<string | null>;
+    getKind(artifactId: string): Promise<UploadKind | null>;
+    /** Satisfies the optional `PulseVaultStorage.getRelatedTo` contract. */
+    getRelatedTo(artifactId: string): Promise<string | null>;
+    /** Satisfies the optional `PulseVaultStorage.getChecksum` contract. */
+    getChecksum(artifactId: string): Promise<string | null>;
 };
 export declare function createLocalStorage(opts: LocalStorageOptions): LocalStorage;
 //# sourceMappingURL=local.d.ts.map

package/dist/storage/local.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"local.d.ts","sourceRoot":"","sources":["../../src/storage/local.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAEV,iBAAiB,EAElB,MAAM,YAAY,CAAC;AA6BpB,MAAM,MAAM,mBAAmB,GAAG;IAChC,6FAA6F;IAC7F,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,YAAY,GAAG,iBAAiB,GAAG;IAC7C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;;;;;OAKG;IACH,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CACvD,CAAC;AAEF,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,mBAAmB,GAAG,YAAY,CAkL1E"}
+{"version":3,"file":"local.d.ts","sourceRoot":"","sources":["../../src/storage/local.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAEV,iBAAiB,EAEjB,UAAU,EACX,MAAM,YAAY,CAAC;AAwEpB,MAAM,MAAM,mBAAmB,GAAG;IAChC,uGAAuG;IACvG,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,MAAM,YAAY,GAAG,iBAAiB,GAAG;IAC7C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;;;;;OAKG;IACH,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACzD;;;;OAIG;IACH,OAAO,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IACxD,wEAAwE;IACxE,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACzD,uEAAuE;IACvE,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CACzD,CAAC;AAEF,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,mBAAmB,GAAG,YAAY,CAuO1E"}