@mieweb/pulsevault 0.0.2 → 0.1.1

package/dist/lib/pulsevaultTus.js

@@ -1,7 +1,10 @@
-import { Server } from "@tus/server";
-import { AsyncLocalStorage } from "node:async_hooks";
-import path from "node:path";
-import { isUuid } from "./uuid.js";
+import { Server } from '@tus/server';
+import { AsyncLocalStorage } from 'node:async_hooks';
+import path from 'node:path';
+import { isUuid } from './uuid.js';
+import { statusCodeOf } from './errors.js';
+import { consoleLogger } from './request.js';
+import { parseUploadKind } from '../storage/types.js';
 export const pulseVaultTusContext = new AsyncLocalStorage();
 /**
  * Shape `@tus/server` recognizes for sending an error response. We tag both
@@ -16,50 +19,74 @@ export function tusError(status, body) {
         body,
     });
 }
-/** Parse the first path segment of a tus upload id as the videoid. */
-function videoidFromUploadId(id) {
-    const first = id.split("/", 1)[0];
-    return isUuid(first) ? first : undefined;
+/** Parse the artifactId UUID from a tus upload id of the form `<kind>/<artifactId><ext>`. */
+export function artifactIdFromUploadId(id) {
+    const [, nameWithExt] = id.split('/');
+    if (!nameWithExt)
+        return undefined;
+    const ext = path.extname(nameWithExt);
+    const candidate = ext ? nameWithExt.slice(0, -ext.length) : nameWithExt;
+    return isUuid(candidate) ? candidate : undefined;
 }
 /**
- * Extract a numeric HTTP status from a thrown error, honoring both
- * `statusCode` (Fastify) and `status_code` (tus).
+ * Extract and normalize the fields `namingFunction` cares about from raw
+ * `Upload-Metadata`. Doesn't validate — the caller still checks `artifactId`
+ * is a UUID and `filename`'s extension is allowed for `kind`.
  */
-function statusCodeOf(err, fallback) {
-    const e = err;
-    if (typeof e?.statusCode === "number")
-        return e.statusCode;
-    if (typeof e?.status_code === "number")
-        return e.status_code;
-    return fallback;
+function parseUploadMetadata(metadata) {
+    // Accept `artifactId` plus the legacy `videoid`/`projectid` aliases for
+    // back-compat with pre-`artifactId` clients.
+    const artifactId = (metadata?.artifactId ??
+        metadata?.videoid ??
+        metadata?.projectid ??
+        '').trim();
+    const filename = (metadata?.filename ?? '').trim();
+    // `kind` defaults to `"video"` so existing clients that don't send the field continue to work unchanged.
+    const kind = parseUploadKind(metadata?.kind);
+    const rawRelatedTo = (metadata?.relatedTo ?? '').trim();
+    const relatedTo = isUuid(rawRelatedTo) ? rawRelatedTo : undefined;
+    const checksum = (metadata?.checksum ?? '').trim() || undefined;
+    return { artifactId, filename, kind, relatedTo, checksum };
 }
 export function createPulsevaultTusServer(options) {
-    const { storage, tusPath, maxSize, allowedExtensions, validatePayload, onUploadComplete, } = options;
-    return new Server({
+    const { storage, tusPath, maxSize, allowedExtensions, validatePayload, onUploadComplete, onArtifactEvent, logger = consoleLogger, } = options;
+    const server = new Server({
         path: tusPath,
         datastore: storage.datastore,
         maxSize,
         namingFunction: async (_req, metadata) => {
-            const videoid = metadata?.videoid ?? "";
-            const filename = (metadata?.filename ?? "").trim();
-            if (!isUuid(videoid)) {
-                throw tusError(400, "Upload-Metadata must include a valid `videoid` (UUID).\n");
+            const { artifactId, filename, kind, relatedTo, checksum } = parseUploadMetadata(metadata);
+            if (!isUuid(artifactId)) {
+                throw tusError(400, 'Upload-Metadata must include a valid `artifactId` UUID.\n');
             }
             const ext = path.extname(filename).toLowerCase();
-            if (!ext || !allowedExtensions.includes(ext)) {
-                throw tusError(400, `Upload-Metadata \`filename\` must end with one of: ${allowedExtensions.join(", ")}\n`);
+            const allowed = allowedExtensions[kind];
+            if (!ext || !allowed.includes(ext)) {
+                throw tusError(400, `Upload-Metadata \`filename\` for kind="${kind}" must end with one of: ${allowed.join(', ')}\n`);
             }
-            return storage.reserveUpload({ videoid, filename, ext });
+            // Store kind/relatedTo/checksum in the AsyncLocalStorage context so the
+            // authorize hook (already running) and onUploadFinish (same-request
+            // uploads) can read them without a storage round-trip.
+            const store = pulseVaultTusContext.getStore();
+            if (store) {
+                store.kind = kind;
+                store.relatedTo = relatedTo;
+                store.checksum = checksum;
+            }
+            return storage.reserveUpload({ artifactId, filename, ext, kind, relatedTo, checksum });
         },
-        generateUrl(_req, { proto, host, path: tusBasePath, id }) {
-            const encoded = Buffer.from(id, "utf8").toString("base64url");
-            return `${proto}://${host}${tusBasePath}/${encoded}`;
+        // Relative Location (RFC 7231 §7.1.2) so the upload URL is correct behind
+        // any TLS-terminating proxy without trusting spoofable X-Forwarded-*
+        // headers; clients resolve it against the request URL they already used.
+        generateUrl(_req, { path: tusBasePath, id }) {
+            const encoded = Buffer.from(id, 'utf8').toString('base64url');
+            return `${tusBasePath}/${encoded}`;
         },
         getFileIdFromRequest(_req, lastPath) {
             if (!lastPath) {
                 return;
             }
-            return Buffer.from(lastPath, "base64url").toString("utf8");
+            return Buffer.from(lastPath, 'base64url').toString('utf8');
         },
         onUploadFinish: async (_req, upload) => {
             // Completion sequence: validate → markReady → consumer hook. Each step
@@ -71,76 +98,168 @@ export function createPulsevaultTusServer(options) {
                 // before calling into tus. Bail quietly rather than crash.
                 return {};
             }
-            const videoid = videoidFromUploadId(upload.id);
-            if (!videoid) {
+            const artifactId = artifactIdFromUploadId(upload.id);
+            if (!artifactId) {
                 return {};
             }
             const size = upload.size ?? 0;
             const uploadId = upload.id;
-            // 1. Validate payload (magic bytes, virus scan, etc.). If this throws
-            //    we wipe the bytes from storage — the client gets a 4xx, the
-            //    sidecar is gone, and they can safely retry with a corrected file.
+            // Resolve kind/checksum: prefer the context value (set during the same
+            // request's namingFunction for single-request uploads), fall back to a
+            // storage lookup (cheap in-memory cache hit) for chunked uploads, or —
+            // just as commonly — a single-PATCH upload sent as two separate HTTP
+            // requests (create, then patch), where `onUploadFinish` runs on the
+            // PATCH request's own fresh context, not the one `namingFunction`
+            // populated during the earlier POST.
+            const kind = store.kind ?? (await resolveKind(storage, artifactId));
+            const checksum = store.checksum ?? (await resolveChecksum(storage, artifactId));
+            // 1. Validate payload (magic bytes, checksum, virus scan, etc.). If
+            //    this throws we wipe the bytes from storage — the client gets a
+            //    4xx, the sidecar is gone, and they can safely retry with a
+            //    corrected file. The same hook runs for every kind; consumers that
+            //    want kind-specific behavior branch on `ctx.kind` themselves.
             if (validatePayload) {
                 try {
                     await validatePayload(store.request, {
-                        videoid,
+                        artifactId,
                         size,
                         uploadId,
-                        localPath: await resolveLocalPath(storage, videoid),
+                        localPath: await resolveLocalPath(storage, artifactId),
+                        ...(checksum ? { checksum } : {}),
+                        kind,
                     });
                 }
                 catch (err) {
                     const status = statusCodeOf(err, 422);
-                    const message = err instanceof Error ? err.message : "Payload validation failed";
+                    const message = err instanceof Error ? err.message : 'Payload validation failed';
                     try {
-                        await storage.remove?.(videoid);
+                        await storage.remove?.(artifactId);
                     }
                     catch (rmErr) {
-                        store.request.log.error({ err: rmErr, videoid }, "pulsevault failed to remove rejected upload");
+                        logger.error({ err: rmErr, artifactId }, 'pulsevault failed to remove rejected upload');
+                    }
+                    await onArtifactEvent?.({ phase: 'reject', artifactId, kind, size, reason: message });
+                    // 4xx rejection reasons are the client's business (e.g. "Checksum
+                    // mismatch: …"); 5xx means *our* side broke — log the real error and
+                    // return a generic body so internals (adapter wiring, stack detail)
+                    // never reach the client.
+                    if (status >= 500) {
+                        logger.error({ err, artifactId, kind }, 'pulsevault payload validation errored');
+                        throw tusError(status, 'Payload validation failed\n');
                     }
                     throw tusError(status, `${message}\n`);
                 }
             }
             // 2. Flip the sidecar to "ready" so `resolve` will serve the bytes.
             //    Done *before* the consumer hook so a downstream service that
-            //    reacts to `onUploadComplete` can immediately GET the video.
+            //    reacts to `onUploadComplete` can immediately GET the artifact.
             try {
-                await storage.markReady?.(videoid);
+                await storage.markReady?.(artifactId);
             }
             catch (err) {
-                const message = err instanceof Error ? err.message : "markReady failed";
-                throw tusError(500, `${message}\n`);
+                // Internal failure — log the real error server-side, return a generic
+                // body (a storage error message can leak paths/config to the client).
+                logger.error({ err, artifactId, kind }, 'pulsevault markReady failed');
+                throw tusError(500, 'Upload finalization failed\n');
             }
             // 3. Consumer hook — business logic (DB writes, queue jobs).
             if (onUploadComplete) {
                 try {
-                    await onUploadComplete(store.request, { videoid, size, uploadId });
+                    await onUploadComplete(store.request, { artifactId, kind, size, uploadId });
                 }
                 catch (err) {
                     // Propagate as a tus error so the client sees a non-2xx and can
                     // distinguish "bytes stored but completion hook failed" from
-                    // success. The video is marked ready at this point — consumers
+                    // success. The artifact is marked ready at this point — consumers
                     // who want "all-or-nothing" should `storage.remove` before
                     // throwing.
-                    const message = err instanceof Error ? err.message : "onUploadComplete failed";
-                    throw tusError(500, `${message}\n`);
+                    // The real error (often a consumer DB failure whose message can leak
+                    // schema/infra detail) stays in the server log, not the client body.
+                    logger.error({ err, artifactId, kind }, 'pulsevault onUploadComplete failed');
+                    throw tusError(500, 'Upload completion hook failed\n');
                 }
             }
+            await onArtifactEvent?.({ phase: 'complete', artifactId, kind, size });
             return {};
         },
     });
+    hardenAgainstClientAbort(server, logger);
+    return server;
+}
+/**
+ * Stops a dropped upload connection from crashing the whole server process.
+ *
+ * @tus/server@2's `BaseHandler.writeToStore` (used by both the PATCH handler and the POST handler's
+ * creation-with-upload path) pipes the incoming body (`Readable.fromWeb(req.body)`) into an internal
+ * proxy via `data.pipe(proxy)` and attaches an 'error' handler to the *proxy* — but never to `data`
+ * itself. `.pipe()` doesn't forward source errors, so when the client drops the connection
+ * mid-transfer (a mobile app killed during an upload, a network reset, a cancelled transfer) `data`
+ * emits an 'error' ('aborted' / ECONNRESET) with no listener. An unhandled stream 'error' is fatal
+ * to Node: the process crashes, taking down every other in-flight upload (observed as the server
+ * dying and subsequent requests 502-ing).
+ *
+ * We wrap each body-carrying handler's `writeToStore` to attach a no-op 'error' listener to `data`
+ * before delegating. The abort then unwinds normally — the proxy/pipeline still rejects the write
+ * and the stored offset simply doesn't advance, so the client resumes from the last persisted byte
+ * on its next PATCH. Defensive: it no-ops if a future @tus version renames/fixes this, and the
+ * extra listener is harmless if they add their own. (Long-term fix: upgrade @tus/server once it
+ * handles the source-stream error itself.)
+ */
+function hardenAgainstClientAbort(server, logger) {
+    const handlers = server.handlers ?? {};
+    for (const method of ['PATCH', 'POST']) {
+        const handler = handlers[method];
+        if (!handler || typeof handler.writeToStore !== 'function') {
+            logger.info({ method }, 'pulsevault: could not harden handler against client abort (API changed?)');
+            continue;
+        }
+        const original = handler.writeToStore.bind(handler);
+        handler.writeToStore = (data, ...rest) => {
+            if (data && typeof data.on === 'function') {
+                data.on('error', (err) => {
+                    // Debug (falling back to info for loggers without it): a client dropping mid-upload is
+                    // an expected, per-request event on flaky mobile networks — not something to page over.
+                    const obj = { err: err instanceof Error ? err.message : String(err), method };
+                    const msg = 'pulsevault: upload body stream aborted (client disconnected mid-transfer)';
+                    if (logger.debug)
+                        logger.debug(obj, msg);
+                    else
+                        logger.info(obj, msg);
+                });
+            }
+            return original(data, ...rest);
+        };
+    }
+}
+/**
+ * Resolve the artifact kind from storage for a known artifactId. Used by
+ * `onUploadFinish` for chunked uploads where the kind is not in the current
+ * request's context. Defaults to `"video"` for adapters that don't implement
+ * `getKind` or when the artifactId is not found.
+ */
+async function resolveKind(storage, artifactId) {
+    const result = await storage.getKind?.(artifactId);
+    return result ?? 'video';
+}
+/**
+ * Resolve the `checksum` metadata from storage for a known artifactId. Same
+ * rationale as `resolveKind` — `namingFunction`'s in-memory context doesn't
+ * survive past the request it ran on, so completion (which may run on a
+ * later, separate request) needs a storage-backed fallback.
+ */
+async function resolveChecksum(storage, artifactId) {
+    const result = await storage.getChecksum?.(artifactId);
+    return result ?? undefined;
 }
 /**
  * If the adapter exposes `getLocalPath` (the built-in local adapter does),
- * resolve the videoid to an absolute disk path for `validatePayload`. For
+ * resolve the artifactId to an absolute disk path for `validatePayload`. For
  * other adapters, returns `null` and the validator is expected to fetch
  * bytes through whatever API it knows about.
  */
-async function resolveLocalPath(storage, videoid) {
-    const candidate = storage.getLocalPath;
-    if (typeof candidate !== "function")
-        return null;
-    const result = await candidate(videoid);
-    return typeof result === "string" ? result : null;
+async function resolveLocalPath(storage, artifactId) {
+    const adapter = storage;
+    const result = await adapter.getLocalPath?.(artifactId);
+    return typeof result === 'string' ? result : null;
 }
 //# sourceMappingURL=pulsevaultTus.js.map

package/dist/lib/pulsevaultTus.js.map

@@ -1 +1 @@
-{"version":3,"file":"pulsevaultTus.js","sourceRoot":"","sources":["../../src/lib/pulsevaultTus.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAcnC,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,iBAAiB,EAAwB,CAAC;AAmClF;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,MAAc,EAAE,IAAY;IACnD,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE;QACpC,UAAU,EAAE,MAAM;QAClB,WAAW,EAAE,MAAM;QACnB,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAED,sEAAsE;AACtE,SAAS,mBAAmB,CAAC,EAAU;IACrC,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,GAAY,EAAE,QAAgB;IAClD,MAAM,CAAC,GAAG,GAAsD,CAAC;IACjE,IAAI,OAAO,CAAC,EAAE,UAAU,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC,UAAU,CAAC;IAC3D,IAAI,OAAO,CAAC,EAAE,WAAW,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC,WAAW,CAAC;IAC7D,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,OAA6B;IACrE,MAAM,EACJ,OAAO,EACP,OAAO,EACP,OAAO,EACP,iBAAiB,EACjB,eAAe,EACf,gBAAgB,GACjB,GAAG,OAAO,CAAC;IAEZ,OAAO,IAAI,MAAM,CAAC;QAChB,IAAI,EAAE,OAAO;QACb,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,OAAO;QACP,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;YACvC,MAAM,OAAO,GAAG,QAAQ,EAAE,OAAO,IAAI,EAAE,CAAC;YACxC,MAAM,QAAQ,GAAG,CAAC,QAAQ,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAEnD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBACrB,MAAM,QAAQ,CACZ,GAAG,EACH,0DAA0D,CAC3D,CAAC;YACJ,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;YACjD,IAAI,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7C,MAAM,QAAQ,CACZ,GAAG,EACH,sDAAsD,iBAAiB,CAAC,IAAI,CAC1E,IAAI,CACL,IAAI,CACN,CAAC;YACJ,CAAC;YAED,OAAO,OAAO,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,WAAW,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE;YACtD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAC9D,OAAO,GAAG,KAAK,MAAM,IAAI,GAAG,WAAW,IAAI,OAAO,EAAE,CAAC;QACvD,CAAC;QACD,oBAAoB,CAAC,IAAI,EAAE,QAAQ;YACjC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YACD,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC7D,CAAC;QACD,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;YACrC,uEAAuE;YACvE,mEAAmE;YACnE,mEAAmE;YACnE,MAAM,KAAK,GAAG,oBAAoB,CAAC,QAAQ,EAAE,CAAC;YAC9C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,mEAAmE;gBACnE,2DAA2D;gBAC3D,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;YAC9B,MAAM,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAC;YAE3B,sEAAsE;YACtE,iEAAiE;YACjE,uEAAuE;YACvE,IAAI,eAAe,EAAE,CAAC;gBACpB,IAAI,CAAC;oBACH,MAAM,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE;wBACnC,OAAO;wBACP,IAAI;wBACJ,QAAQ;wBACR,SAAS,EAAE,MAAM,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC;qBACpD,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;oBACtC,MAAM,OAAO,GACX,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC;oBACnE,IAAI,CAAC;wBACH,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC;oBAClC,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CACrB,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,EACvB,6CAA6C,CAC9C,CAAC;oBACJ,CAAC;oBACD,MAAM,QAAQ,CAAC,MAAM,EAAE,GAAG,OAAO,IAAI,CAAC,CAAC;gBACzC,CAAC;YACH,CAAC;YAED,oEAAoE;YACpE,kEAAkE;YAClE,iEAAiE;YACjE,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC;YACrC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,OAAO,GACX,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC;gBAC1D,MAAM,QAAQ,CAAC,GAAG,EAAE,GAAG,OAAO,IAAI,CAAC,CAAC;YACtC,CAAC;YAED,6DAA6D;YAC7D,IAAI,gBAAgB,EAAE,CAAC;gBACrB,IAAI,CAAC;oBACH,MAAM,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACrE,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,gEAAgE;oBAChE,6DAA6D;oBAC7D,+DAA+D;oBAC/D,2DAA2D;oBAC3D,YAAY;oBACZ,MAAM,OAAO,GACX,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC;oBACjE,MAAM,QAAQ,CAAC,GAAG,EAAE,GAAG,OAAO,IAAI,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC;YAED,OAAO,EAAE,CAAC;QACZ,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,gBAAgB,CAC7B,OAA0B,EAC1B,OAAe;IAEf,MAAM,SAAS,GAAI,OAAsC,CAAC,YAAY,CAAC;IACvE,IAAI,OAAO,SAAS,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,MAAM,GAAG,MAAO,SAAoD,CACxE,OAAO,CACR,CAAC;IACF,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACpD,CAAC"}
+{"version":3,"file":"pulsevaultTus.js","sourceRoot":"","sources":["../../src/lib/pulsevaultTus.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAiD,aAAa,EAAE,MAAM,cAAc,CAAC;AAG5F,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAmBtD,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,iBAAiB,EAAwB,CAAC;AAoDlF;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,MAAc,EAAE,IAAY;IACnD,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE;QACpC,UAAU,EAAE,MAAM;QAClB,WAAW,EAAE,MAAM;QACnB,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,sBAAsB,CAAC,EAAU;IAC/C,MAAM,CAAC,EAAE,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,WAAW;QAAE,OAAO,SAAS,CAAC;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;IACxE,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AACnD,CAAC;AAUD;;;;GAIG;AACH,SAAS,mBAAmB,CAC1B,QAAmD;IAEnD,wEAAwE;IACxE,6CAA6C;IAC7C,MAAM,UAAU,GAAG,CACjB,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,OAAO;QACjB,QAAQ,EAAE,SAAS;QACnB,EAAE,CACH,CAAC,IAAI,EAAE,CAAC;IACT,MAAM,QAAQ,GAAG,CAAC,QAAQ,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACnD,yGAAyG;IACzG,MAAM,IAAI,GAAG,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,CAAC,QAAQ,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxD,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,MAAM,QAAQ,GAAG,CAAC,QAAQ,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;IAEhE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,OAA6B;IACrE,MAAM,EACJ,OAAO,EACP,OAAO,EACP,OAAO,EACP,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,MAAM,GAAG,aAAa,GACvB,GAAG,OAAO,CAAC;IAEZ,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC;QACxB,IAAI,EAAE,OAAO;QACb,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,OAAO;QACP,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;YACvC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YAE1F,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;gBACxB,MAAM,QAAQ,CAAC,GAAG,EAAE,2DAA2D,CAAC,CAAC;YACnF,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;YACjD,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnC,MAAM,QAAQ,CACZ,GAAG,EACH,0CAA0C,IAAI,2BAA2B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAChG,CAAC;YACJ,CAAC;YAED,wEAAwE;YACxE,oEAAoE;YACpE,uDAAuD;YACvD,MAAM,KAAK,GAAG,oBAAoB,CAAC,QAAQ,EAAE,CAAC;YAC9C,IAAI,KAAK,EAAE,CAAC;gBACV,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;gBAClB,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;gBAC5B,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC;YAC5B,CAAC;YAED,OAAO,OAAO,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,0EAA0E;QAC1E,qEAAqE;QACrE,yEAAyE;QACzE,WAAW,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE;YACzC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAC9D,OAAO,GAAG,WAAW,IAAI,OAAO,EAAE,CAAC;QACrC,CAAC;QACD,oBAAoB,CAAC,IAAI,EAAE,QAAQ;YACjC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YACD,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC7D,CAAC;QACD,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;YACrC,uEAAuE;YACvE,mEAAmE;YACnE,mEAAmE;YACnE,MAAM,KAAK,GAAG,oBAAoB,CAAC,QAAQ,EAAE,CAAC;YAC9C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,mEAAmE;gBACnE,2DAA2D;gBAC3D,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,UAAU,GAAG,sBAAsB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACrD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;YAC9B,MAAM,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAC;YAE3B,uEAAuE;YACvE,uEAAuE;YACvE,uEAAuE;YACvE,qEAAqE;YACrE,oEAAoE;YACpE,kEAAkE;YAClE,qCAAqC;YACrC,MAAM,IAAI,GAAe,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,WAAW,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;YAChF,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,CAAC,MAAM,eAAe,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;YAEhF,oEAAoE;YACpE,oEAAoE;YACpE,gEAAgE;YAChE,uEAAuE;YACvE,kEAAkE;YAClE,IAAI,eAAe,EAAE,CAAC;gBACpB,IAAI,CAAC;oBACH,MAAM,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE;wBACnC,UAAU;wBACV,IAAI;wBACJ,QAAQ;wBACR,SAAS,EAAE,MAAM,gBAAgB,CAAC,OAAO,EAAE,UAAU,CAAC;wBACtD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACjC,IAAI;qBACL,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;oBACtC,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC;oBACjF,IAAI,CAAC;wBACH,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,CAAC;oBACrC,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,6CAA6C,CAAC,CAAC;oBAC1F,CAAC;oBACD,MAAM,eAAe,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;oBACtF,kEAAkE;oBAClE,qEAAqE;oBACrE,oEAAoE;oBACpE,0BAA0B;oBAC1B,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;wBAClB,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,uCAAuC,CAAC,CAAC;wBACjF,MAAM,QAAQ,CAAC,MAAM,EAAE,6BAA6B,CAAC,CAAC;oBACxD,CAAC;oBACD,MAAM,QAAQ,CAAC,MAAM,EAAE,GAAG,OAAO,IAAI,CAAC,CAAC;gBACzC,CAAC;YACH,CAAC;YAED,oEAAoE;YACpE,kEAAkE;YAClE,oEAAoE;YACpE,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,CAAC;YACxC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,sEAAsE;gBACtE,sEAAsE;gBACtE,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,6BAA6B,CAAC,CAAC;gBACvE,MAAM,QAAQ,CAAC,GAAG,EAAE,8BAA8B,CAAC,CAAC;YACtD,CAAC;YAED,6DAA6D;YAC7D,IAAI,gBAAgB,EAAE,CAAC;gBACrB,IAAI,CAAC;oBACH,MAAM,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAC9E,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,gEAAgE;oBAChE,6DAA6D;oBAC7D,kEAAkE;oBAClE,2DAA2D;oBAC3D,YAAY;oBACZ,qEAAqE;oBACrE,qEAAqE;oBACrE,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,oCAAoC,CAAC,CAAC;oBAC9E,MAAM,QAAQ,CAAC,GAAG,EAAE,iCAAiC,CAAC,CAAC;gBACzD,CAAC;YACH,CAAC;YAED,MAAM,eAAe,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAEvE,OAAO,EAAE,CAAC;QACZ,CAAC;KACF,CAAC,CAAC;IAEH,wBAAwB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEzC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAS,wBAAwB,CAAC,MAAc,EAAE,MAAwB;IACxE,MAAM,QAAQ,GAAI,MAA4D,CAAC,QAAQ,IAAI,EAAE,CAAC;IAC9F,KAAK,MAAM,MAAM,IAAI,CAAC,OAAO,EAAE,MAAM,CAAU,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAElB,CAAC;QACd,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;YAC3D,MAAM,CAAC,IAAI,CACT,EAAE,MAAM,EAAE,EACV,0EAA0E,CAC3E,CAAC;YACF,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpD,OAAO,CAAC,YAAY,GAAG,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,EAAE;YACvC,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,UAAU,EAAE,CAAC;gBAC1C,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAY,EAAE,EAAE;oBAChC,uFAAuF;oBACvF,wFAAwF;oBACxF,MAAM,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;oBAC9E,MAAM,GAAG,GAAG,2EAA2E,CAAC;oBACxF,IAAI,MAAM,CAAC,KAAK;wBAAE,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;;wBACpC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBAC7B,CAAC,CAAC,CAAC;YACL,CAAC;YACD,OAAO,QAAQ,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;QACjC,CAAC,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,WAAW,CAAC,OAA0B,EAAE,UAAkB;IACvE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,CAAC;IACnD,OAAO,MAAM,IAAI,OAAO,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,eAAe,CAC5B,OAA0B,EAC1B,UAAkB;IAElB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,CAAC;IACvD,OAAO,MAAM,IAAI,SAAS,CAAC;AAC7B,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,gBAAgB,CAC7B,OAA0B,EAC1B,UAAkB;IAElB,MAAM,OAAO,GAAG,OAA4E,CAAC;IAC7F,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,CAAC,CAAC;IACxD,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACpD,CAAC"}

package/dist/lib/request.d.ts

@@ -0,0 +1,26 @@
+import type { IncomingHttpHeaders } from 'node:http';
+/**
+ * Structural request shape the plugin's internals and hooks rely on.
+ * `FastifyRequest`, Express's `req`, and a raw `http.IncomingMessage` all
+ * satisfy this already (they all expose `.headers`), so the same hook
+ * implementations work unmodified under the Fastify plugin and the
+ * framework-agnostic core.
+ */
+export type PulseVaultRequest = {
+    headers: IncomingHttpHeaders;
+};
+/**
+ * Structural logger shape used for the plugin's own internal diagnostics
+ * (authorize rejections, tus handler failures, cleanup errors) — satisfied
+ * by Pino (Fastify's `request.log`) and by the `consoleLogger` fallback
+ * below, so non-Fastify hosts don't need to bring their own logger.
+ */
+export type PulseVaultLogger = {
+    info(obj: unknown, msg?: string): void;
+    error(obj: unknown, msg?: string): void;
+    /** Optional low-noise level for expected, per-request events (e.g. a client aborting mid-upload). */
+    debug?(obj: unknown, msg?: string): void;
+};
+/** Default logger for hosts that don't supply one. */
+export declare const consoleLogger: PulseVaultLogger;
+//# sourceMappingURL=request.d.ts.map

package/dist/lib/request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.d.ts","sourceRoot":"","sources":["../../src/lib/request.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAErD;;;;;;GAMG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,OAAO,EAAE,mBAAmB,CAAC;CAC9B,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,qGAAqG;IACrG,KAAK,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1C,CAAC;AAEF,sDAAsD;AACtD,eAAO,MAAM,aAAa,EAAE,gBAa3B,CAAC"}

package/dist/lib/request.js

@@ -0,0 +1,22 @@
+/** Default logger for hosts that don't supply one. */
+export const consoleLogger = {
+    info(obj, msg) {
+        if (msg)
+            console.info(msg, obj);
+        else
+            console.info(obj);
+    },
+    error(obj, msg) {
+        if (msg)
+            console.error(msg, obj);
+        else
+            console.error(obj);
+    },
+    debug(obj, msg) {
+        if (msg)
+            console.debug(msg, obj);
+        else
+            console.debug(obj);
+    },
+};
+//# sourceMappingURL=request.js.map

package/dist/lib/request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.js","sourceRoot":"","sources":["../../src/lib/request.ts"],"names":[],"mappings":"AA0BA,sDAAsD;AACtD,MAAM,CAAC,MAAM,aAAa,GAAqB;IAC7C,IAAI,CAAC,GAAG,EAAE,GAAG;QACX,IAAI,GAAG;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;;YAC3B,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IACD,KAAK,CAAC,GAAG,EAAE,GAAG;QACZ,IAAI,GAAG;YAAE,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;;YAC5B,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IACD,KAAK,CAAC,GAAG,EAAE,GAAG;QACZ,IAAI,GAAG;YAAE,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;;YAC5B,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;CACF,CAAC"}

package/dist/lib/uuid.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"uuid.d.ts","sourceRoot":"","sources":["../../src/lib/uuid.ts"],"names":[],"mappings":"AAGA,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAEtD"}
+{"version":3,"file":"uuid.d.ts","sourceRoot":"","sources":["../../src/lib/uuid.ts"],"names":[],"mappings":"AAEA,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAEtD"}

package/dist/lib/uuid.js

@@ -1,5 +1,5 @@
 const UUID_REGEX = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 export function isUuid(value) {
-    return typeof value === "string" && UUID_REGEX.test(value);
+    return typeof value === 'string' && UUID_REGEX.test(value);
 }
 //# sourceMappingURL=uuid.js.map

package/dist/lib/uuid.js.map

@@ -1 +1 @@
-{"version":3,"file":"uuid.js","sourceRoot":"","sources":["../../src/lib/uuid.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,GACd,iEAAiE,CAAC;AAEpE,MAAM,UAAU,MAAM,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7D,CAAC"}
+{"version":3,"file":"uuid.js","sourceRoot":"","sources":["../../src/lib/uuid.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,GAAG,iEAAiE,CAAC;AAErF,MAAM,UAAU,MAAM,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7D,CAAC"}

package/dist/routes/pulsevault.d.ts

@@ -1,32 +1,34 @@
-import type { FastifyPluginAsync, FastifyPluginOptions, FastifyRequest } from "fastify";
-import type { PulseVaultCacheOptions } from "../app.js";
-import { type PulseVaultOnUploadComplete } from "../lib/pulsevaultTus.js";
-import type { PulseVaultValidatePayload } from "../lib/magic.js";
-import type { PulseVaultStorage } from "../storage/types.js";
-declare module "fastify" {
+import type { FastifyPluginAsync, FastifyPluginOptions } from 'fastify';
+import type { PulseVaultCacheOptions } from '../app.js';
+import { PROTOCOL_VERSION } from '../core.js';
+import type { PulseVaultOnUploadComplete, PulseVaultOnArtifactEvent } from '../lib/pulsevaultTus.js';
+import type { PulseVaultValidatePayload } from '../lib/magic.js';
+import { type PulseVaultAuthorize } from '../lib/authorize.js';
+import type { PulseVaultAllowedExtensions } from '../lib/options.js';
+import type { PulseVaultStorage, UploadKind } from '../storage/types.js';
+export type { PulseVaultAuthorize, PulseVaultAuthorizeContext, PulseVaultAuthorizePhase, } from '../lib/authorize.js';
+declare module 'fastify' {
     interface FastifyRequest {
         pulseVault?: {
-            videoid: string;
+            artifactId: string;
+            kind: UploadKind;
+            relatedTo?: string;
         };
     }
 }
-export type PulseVaultAuthorizePhase = "create" | "patch" | "resolve" | "delete";
-export type PulseVaultAuthorizeContext = {
-    phase: PulseVaultAuthorizePhase;
-    videoid: string;
-    /** Bearer / query-string token forwarded from the watch URL, if present. Only populated during the `"resolve"` phase. */
-    token?: string;
-};
-export type PulseVaultAuthorize = (request: FastifyRequest, ctx: PulseVaultAuthorizeContext) => void | Promise<void>;
 export type PulseVaultRoutesOptions = {
     storage: PulseVaultStorage;
     maxUploadSize: number;
-    allowedExtensions: readonly string[];
+    allowedExtensions: PulseVaultAllowedExtensions;
+    /** Advertised via `GET /capabilities` so the client knows which upload strategy this server expects. */
+    uploadUnit: 'segment' | 'merged';
     cache?: PulseVaultCacheOptions;
     authorize?: PulseVaultAuthorize;
     validatePayload?: PulseVaultValidatePayload;
     onUploadComplete?: PulseVaultOnUploadComplete;
+    onArtifactEvent?: PulseVaultOnArtifactEvent;
 } & FastifyPluginOptions;
 declare const pulseVaultRoutes: FastifyPluginAsync<PulseVaultRoutesOptions>;
 export default pulseVaultRoutes;
+export { PROTOCOL_VERSION };
 //# sourceMappingURL=pulsevault.d.ts.map

package/dist/routes/pulsevault.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pulsevault.d.ts","sourceRoot":"","sources":["../../src/routes/pulsevault.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAClB,oBAAoB,EAEpB,cAAc,EAEf,MAAM,SAAS,CAAC;AAEjB,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAGL,KAAK,0BAA0B,EAChC,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAGjE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAM7D,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,cAAc;QACtB,UAAU,CAAC,EAAE;YAAE,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC;KAClC;CACF;AAED,MAAM,MAAM,wBAAwB,GAChC,QAAQ,GACR,OAAO,GACP,SAAS,GACT,QAAQ,CAAC;AAEb,MAAM,MAAM,0BAA0B,GAAG;IACvC,KAAK,EAAE,wBAAwB,CAAC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,yHAAyH;IACzH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,CAChC,OAAO,EAAE,cAAc,EACvB,GAAG,EAAE,0BAA0B,KAC5B,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE1B,MAAM,MAAM,uBAAuB,GAAG;IACpC,OAAO,EAAE,iBAAiB,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,KAAK,CAAC,EAAE,sBAAsB,CAAC;IAC/B,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAChC,eAAe,CAAC,EAAE,yBAAyB,CAAC;IAC5C,gBAAgB,CAAC,EAAE,0BAA0B,CAAC;CAC/C,GAAG,oBAAoB,CAAC;AAwKzB,QAAA,MAAM,gBAAgB,EAAE,kBAAkB,CAAC,uBAAuB,CA+NjE,CAAC;AAEF,eAAe,gBAAgB,CAAC"}
+{"version":3,"file":"pulsevault.d.ts","sourceRoot":"","sources":["../../src/routes/pulsevault.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAClB,oBAAoB,EAIrB,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAAwB,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACpE,OAAO,KAAK,EACV,0BAA0B,EAC1B,yBAAyB,EAC1B,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,KAAK,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEzE,YAAY,EACV,mBAAmB,EACnB,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAK7B,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,cAAc;QACtB,UAAU,CAAC,EAAE;YAAE,UAAU,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,UAAU,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KAC3E;CACF;AAED,MAAM,MAAM,uBAAuB,GAAG;IACpC,OAAO,EAAE,iBAAiB,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,2BAA2B,CAAC;IAC/C,wGAAwG;IACxG,UAAU,EAAE,SAAS,GAAG,QAAQ,CAAC;IACjC,KAAK,CAAC,EAAE,sBAAsB,CAAC;IAC/B,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAChC,eAAe,CAAC,EAAE,yBAAyB,CAAC;IAC5C,gBAAgB,CAAC,EAAE,0BAA0B,CAAC;IAC9C,eAAe,CAAC,EAAE,yBAAyB,CAAC;CAC7C,GAAG,oBAAoB,CAAC;AA6JzB,QAAA,MAAM,gBAAgB,EAAE,kBAAkB,CAAC,uBAAuB,CA8EjE,CAAC;AAEF,eAAe,gBAAgB,CAAC;AAChC,OAAO,EAAE,gBAAgB,EAAE,CAAC"}