@mostajs/media-server 0.2.2

package/README.md

@@ -0,0 +1,349 @@
+# @mostajs/media-server
+
+**Auteur** : Dr Hamid MADANI <drmdh@msn.com>
+**Licence** : AGPL-3.0-or-later
+**Statut** : v0.1.0 — scaffold + factory + contract (P1 du design B.4)
+
+Couche **serveur** du module [@mostajs/media](../mosta-media) : factory
+`createMedia({ storage, repo })` qui pluge un repository ORM sur un driver
+[@mostajs/storage](https://github.com/apolocine/mosta-storage) pour livrer un
+**`MediaService`** consommable par les route handlers HTTP (Next.js App
+Router, Express, Fastify, Hono, …).
+
+> 🧩 Ce module est **strictement server-side**. Le client utilise
+> `@mostajs/media` (composants React, hooks `useMultiTakeSession`, etc.) et
+> appelle ce serveur via fetch.
+
+---
+
+## Pourquoi un module séparé ?
+
+`@mostajs/media` est ESM **browser-first** (React, MediaRecorder, IndexedDB).
+Y empiler la persistance serveur (ORM, mailer, file I/O) :
+
+- alourdit le bundle client d'environ 800 kB de dépendances inutiles ;
+- complique le tree-shaking pour les apps Next.js / Vite ;
+- mélange deux cycles de vie (browser API vs Node API) dans un même release.
+
+`@mostajs/media-server` reste **indépendant** : pas de dep React, pas de
+MediaRecorder, pas de `@mostajs/orm` en hard-dep (peer dep seulement).
+
+---
+
+## Architecture en 1 schéma
+
+```
+┌─────────────────────────┐   POST /api/media/recordings      ┌────────────────────────┐
+│  Browser                │  ───────────────────────────────▶ │  Route handler         │
+│  @mostajs/media         │                                   │  (Next.js App Router,  │
+│  MultiTakeRecorder      │                                   │   Express, Fastify…)   │
+│  videoStorage='server'  │  ◀────────── 200 { row, signedUrl}│                        │
+└─────────────────────────┘                                   │  • RBAC accountId      │
+                                                              │  • parse multipart     │
+                                                              │  • mediaService.…(…)   │
+                                                              └────────────┬───────────┘
+                                                                           │
+                                                            ┌──────────────┼──────────────┐
+                                                            ▼                             ▼
+                                                  ┌───────────────────┐         ┌──────────────────┐
+                                                  │ MediaRepository   │         │ @mostajs/storage │
+                                                  │ (ORM, Prisma, …)  │         │ FileStore        │
+                                                  │  → row metadata   │         │  → blob bytes    │
+                                                  └───────────────────┘         └──────────────────┘
+```
+
+---
+
+## Installation
+
+```bash
+npm install @mostajs/media-server @mostajs/storage
+```
+
+Peer deps requises : `@mostajs/storage ≥ 0.1.2`, `@mostajs/media ≥ 2.0.4`
+(pour le contract `recordingMode`).
+
+---
+
+## How to use — 5 étapes
+
+### 1. Préparer le storage (driver FS local pour la démo)
+
+```ts
+// lib/storage.ts
+import { FilesystemDriver, createFileStore } from '@mostajs/storage'
+
+const driver = new FilesystemDriver({
+  rootDir: '/home/hmd/storage/myapp',
+  signedUrlSecret: process.env.STORAGE_SIGNING_SECRET!,
+  signedUrlBaseUrl: 'https://myapp.example.com',
+})
+
+export const storage = createFileStore({ driver })
+```
+
+### 2. Implémenter le `MediaRepository` (au-dessus de votre ORM)
+
+Le repo est la **seule** surface ORM exposée — `@mostajs/media-server` ne
+voit ni Prisma, ni @mostajs/orm, ni Drizzle. Vous le câblez à votre data layer.
+
+```ts
+// lib/media-repo.ts
+import type { MediaRepository, MediaRow, MediaListFilter } from '@mostajs/media-server'
+import { db } from './db' // votre client ORM
+
+export const mediaRepo: MediaRepository = {
+  async insert(data) {
+    const id = data.id ?? crypto.randomUUID()
+    const row: MediaRow = {
+      ...data,
+      id,
+      createdAt: new Date(),
+    }
+    await db.media.create({ data: row })
+    return row
+  },
+  async findById(id) {
+    return db.media.findUnique({ where: { id } })
+  },
+  async update(id, patch) {
+    return db.media.update({ where: { id }, data: { ...patch, updatedAt: new Date() } })
+  },
+  async delete(id) {
+    await db.media.delete({ where: { id } })
+  },
+  async list(accountId, filter) {
+    const status = filter?.status
+      ? (Array.isArray(filter.status) ? filter.status : [filter.status])
+      : ['ready']
+    const rows = await db.media.findMany({
+      where: { accountId, status: { in: status } },
+      orderBy: { createdAt: 'desc' },
+      take: Math.min(filter?.limit ?? 50, 200),
+    })
+    return { items: rows }
+  },
+}
+```
+
+> 💡 **Tip RBAC** : ne JAMAIS filtrer par `userId`. Toujours par `accountId`,
+> conformément à la mémoire `feedback_account_id_vs_user_id` du workspace.
+
+### 3. Instancier le service
+
+```ts
+// lib/media-service.ts
+import { createMedia } from '@mostajs/media-server'
+import { storage } from './storage'
+import { mediaRepo } from './media-repo'
+
+export const mediaService = createMedia({
+  storage,
+  repo: mediaRepo,
+  defaultBucket: 'media-recordings',
+  signedUrlTtlSec: 60 * 60, // 1h
+})
+```
+
+### 4. Câbler les routes HTTP
+
+#### Next.js App Router — `POST /api/media/recordings`
+
+```ts
+// app/api/media/recordings/route.ts
+import { NextRequest, NextResponse } from 'next/server'
+import { mediaService } from '@/lib/media-service'
+import { getAccountIdFromSession } from '@/lib/session' // votre helper auth
+
+export const runtime = 'nodejs'
+
+export async function POST(req: NextRequest) {
+  const accountId = await getAccountIdFromSession(req)
+  if (!accountId) return NextResponse.json({ error: 'unauthorized' }, { status: 401 })
+
+  const form = await req.formData()
+  const blob = form.get('blob') as Blob
+  const mimeType = (form.get('mimeType') as string) || blob.type
+  const durationMs = Number(form.get('durationMs') || 0)
+  const sessionId = form.get('sessionId') as string | null
+  const takeIndex = form.get('takeIndex') ? Number(form.get('takeIndex')) : undefined
+
+  const buf = new Uint8Array(await blob.arrayBuffer())
+  const { row, signedUrl, signedUrlExpiresAt } = await mediaService.createRecording({
+    accountId,
+    body: buf,
+    mimeType,
+    durationMs,
+    sessionId: sessionId ?? undefined,
+    takeIndex,
+  })
+
+  return NextResponse.json({ row, signedUrl, signedUrlExpiresAt }, { status: 201 })
+}
+```
+
+#### Next.js App Router — `GET /api/media/[id]`
+
+```ts
+// app/api/media/[id]/route.ts
+import { NextRequest, NextResponse } from 'next/server'
+import { mediaService } from '@/lib/media-service'
+import { getAccountIdFromSession } from '@/lib/session'
+
+export const runtime = 'nodejs'
+
+export async function GET(req: NextRequest, ctx: { params: Promise<{ id: string }> }) {
+  const accountId = await getAccountIdFromSession(req)
+  if (!accountId) return NextResponse.json({ error: 'unauthorized' }, { status: 401 })
+
+  const { id } = await ctx.params
+  const result = await mediaService.getMedia(id)
+  if (!result) return NextResponse.json({ error: 'not_found' }, { status: 404 })
+
+  // RBAC : protection tenant — la row doit appartenir à l'account de la session
+  if (result.row.accountId !== accountId) {
+    return NextResponse.json({ error: 'forbidden' }, { status: 403 })
+  }
+
+  return NextResponse.json(result)
+}
+
+export async function DELETE(req: NextRequest, ctx: { params: Promise<{ id: string }> }) {
+  const accountId = await getAccountIdFromSession(req)
+  if (!accountId) return NextResponse.json({ error: 'unauthorized' }, { status: 401 })
+
+  const { id } = await ctx.params
+  const existing = await mediaService.getMedia(id)
+  if (existing && existing.row.accountId !== accountId) {
+    return NextResponse.json({ error: 'forbidden' }, { status: 403 })
+  }
+  await mediaService.deleteMedia(id)
+  return NextResponse.json({ ok: true })
+}
+```
+
+### 5. Câbler `@mostajs/media` côté browser
+
+```tsx
+// app/page.tsx (camera-studio ou consumer custom)
+'use client'
+import { MultiTakeRecorder } from '@mostajs/media'
+
+export default function Page() {
+  return (
+    <MultiTakeRecorder
+      initialVideoStorage="server"
+      initialVideoServerUrl="/api/media/recordings"
+      onSessionComplete={async (takes, sessionId, meta) => {
+        // Les takes sont déjà POSTés en chunks pendant l'enregistrement
+        // (storage='server'). Ici on peut lister/recharger via getMedia.
+        for (const take of takes) {
+          // take.videoResult.serverUrl pointera vers la row Media créée
+          console.log('Take saved:', take.id, take.videoResult.storage)
+        }
+      }}
+    />
+  )
+}
+```
+
+---
+
+## API détaillée
+
+### `createMedia(opts: CreateMediaOptions): MediaService`
+
+| Option              | Type            | Défaut              | Notes |
+|---------------------|-----------------|---------------------|-------|
+| `storage`           | `StorageLike`   | —                   | FileStore @mostajs/storage |
+| `repo`              | `MediaRepository` | —                 | Votre repo ORM |
+| `defaultBucket`     | `string`        | `'media-recordings'` | Bucket cible des uploads |
+| `signedUrlTtlSec`   | `number`        | `3600` (1h)         | TTL signed URLs |
+| `generateId`        | `() => string`  | base36 timestamp    | Surcharger pour UUID/ULID |
+
+### `MediaService`
+
+| Méthode | Signature | Effet |
+|---------|-----------|-------|
+| `createRecording` | `(input) => Promise<{ row, signedUrl, signedUrlExpiresAt }>` | insert row(uploading) → put storage → update row(ready) → sign URL. Si put fail → row.status=failed |
+| `getMedia` | `(id) => Promise<MediaWithSignedUrl \| null>` | Récupère row + signedUrl frais. Renvoie null si status ≠ ready |
+| `reissueSignedUrl` | `(id, ttlSec?) => Promise<MediaWithSignedUrl \| null>` | Re-sign sans toucher la row |
+| `deleteMedia` | `(id) => Promise<void>` | Soft-delete row (status='deleted') puis purge storage |
+| `listForAccount` | `(accountId, filter?) => Promise<{ items, nextCursor? }>` | Pagination multi-tenant |
+
+### `MediaRow` (row métadonnée)
+
+```ts
+{
+  id, accountId, ownerEmail?,
+  bucket, key,
+  mimeType, sizeBytes, durationMs, kind,
+  status: 'uploading' | 'ready' | 'deleted' | 'failed',
+  sessionId?, takeIndex?,
+  checksum?, metadata?,
+  createdAt, updatedAt?,
+}
+```
+
+---
+
+## Lifecycle row Media
+
+```
+[POST] ──▶ insert row(uploading) ──▶ storage.put() ──┬─▶ update row(ready)  ──▶ signedUrl ──▶ 201
+                                                     │
+                                                     └─▶ (failure) update row(failed) ──▶ throw
+
+[DELETE] ──▶ update row(deleted) ──▶ storage.delete() (best-effort, ne re-throw pas si fail)
+```
+
+---
+
+## Tests & smoke
+
+Pas de tests dans v0.1.0 — la livraison du **2e cas concret** (iquesta
+course-builder, après camera-studio) déclenchera la suite Vitest minimale
+(mock storage + mock repo). Référence mémoire workspace :
+`project_deployment_validation_modules`.
+
+Smoke local rapide :
+
+```ts
+// test-smoke.ts (ad-hoc)
+import { createMedia } from '@mostajs/media-server'
+
+const memRepo = createInMemoryRepo() // implémentation locale du contract
+const memStorage = createInMemoryStorage()
+
+const svc = createMedia({ storage: memStorage, repo: memRepo })
+const { row, signedUrl } = await svc.createRecording({
+  accountId: 'acc-1',
+  body: new Uint8Array([1, 2, 3]),
+  mimeType: 'video/webm',
+  durationMs: 5000,
+})
+console.assert(row.status === 'ready')
+console.assert(signedUrl.startsWith('http'))
+```
+
+---
+
+## Roadmap
+
+| Version | Périmètre | ETA |
+|---------|-----------|-----|
+| 0.1.0   | Scaffold + factory + contract | ✅ Livré 19/05/2026 |
+| 0.2.0   | Routes Next.js App Router prêtes (`/handlers/next.ts`) + smoke camera-studio | T+3 j |
+| 0.3.0   | Tests Vitest (mock storage + repo) | T+7 j |
+| 0.4.0   | Webhook events lifecycle (uploaded, ready, deleted) via `@mostajs/notifications` adapter | T+10 j |
+| 0.5.0   | Quota par tenant + GC blobs orphelins | T+14 j |
+| 1.0.0   | Stable API, smoke iquesta + camera-studio + 1 consumer externe | T+21 j |
+
+---
+
+## Liens
+
+- Design canonique : [`mostajs/mosta-media/docs/MULTI-SOURCE-AND-RESUME-DESIGN.md`](../mosta-media/docs/MULTI-SOURCE-AND-RESUME-DESIGN.md) §3 P1
+- Plan iquesta : [`SolutionCh/iquesta/docs/MEDIA-INTEGRATION-COURSE-BUILDER.md`](../../SolutionCh/iquesta/docs/MEDIA-INTEGRATION-COURSE-BUILDER.md)
+- Sibling client : [`@mostajs/media`](../mosta-media)
+- Storage driver : [`@mostajs/storage`](https://github.com/apolocine/mosta-storage)

package/dist/factory.d.ts

@@ -0,0 +1,53 @@
+import type { MediaRepository } from './schema.js';
+import type { MediaService } from './types.js';
+/**
+ * Surface minimale attendue du storage côté factory. Compatible avec
+ * `@mostajs/storage` FileStore mais déclarée localement pour ne pas créer de
+ * hard-dep build-time (peer dep seulement).
+ */
+export interface StorageLike {
+    /** Upload binaire. Retourne ref + size + checksum. */
+    put(args: {
+        bucket: string;
+        path: string;
+        body: Uint8Array | Blob | ArrayBuffer;
+        mimeType: string;
+    }): Promise<{
+        size: number;
+        checksum?: string | null;
+    }>;
+    /** Hard-delete d'un objet. */
+    delete(args: {
+        bucket: string;
+        path: string;
+    }): Promise<void>;
+    /** Signed URL pour playback browser-direct. */
+    signedUrl(args: {
+        bucket: string;
+        path: string;
+        ttlSec?: number;
+    }): Promise<{
+        url: string;
+        expiresAt: number;
+    }>;
+}
+/** Options du factory. */
+export interface CreateMediaOptions {
+    /** Adapter storage (FileStore @mostajs/storage ou shim équivalent). */
+    storage: StorageLike;
+    /** Repository métadonnée ORM (à fournir par le consumer). */
+    repo: MediaRepository;
+    /** Bucket par défaut (peut être overridé per-request via input.bucket). */
+    defaultBucket?: string;
+    /** TTL des signed URLs en secondes (défaut 1h). */
+    signedUrlTtlSec?: number;
+    /** Générateur d'id custom (défaut ULID-like). */
+    generateId?: () => string;
+}
+/**
+ * Construit un MediaService prêt à servir des routes HTTP. Le handler reste
+ * responsable du RBAC (accountId depuis la session) et de la sérialisation
+ * HTTP — le factory expose un service pur.
+ */
+export declare function createMedia(opts: CreateMediaOptions): MediaService;
+//# sourceMappingURL=factory.d.ts.map

package/dist/factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../src/factory.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EACV,eAAe,EAChB,MAAM,aAAa,CAAA;AACpB,OAAO,KAAK,EACV,YAAY,EAEb,MAAM,YAAY,CAAA;AAEnB;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,sDAAsD;IACtD,GAAG,CAAC,IAAI,EAAE;QACR,MAAM,EAAE,MAAM,CAAA;QACd,IAAI,EAAE,MAAM,CAAA;QACZ,IAAI,EAAE,UAAU,GAAG,IAAI,GAAG,WAAW,CAAA;QACrC,QAAQ,EAAE,MAAM,CAAA;KACjB,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAA;IACvD,8BAA8B;IAC9B,MAAM,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7D,+CAA+C;IAC/C,SAAS,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAChH;AAED,0BAA0B;AAC1B,MAAM,WAAW,kBAAkB;IACjC,uEAAuE;IACvE,OAAO,EAAE,WAAW,CAAA;IACpB,6DAA6D;IAC7D,IAAI,EAAE,eAAe,CAAA;IACrB,2EAA2E;IAC3E,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,mDAAmD;IACnD,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,iDAAiD;IACjD,UAAU,CAAC,EAAE,MAAM,MAAM,CAAA;CAC1B;AA2BD;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,kBAAkB,GAAG,YAAY,CAsIlE"}

package/dist/factory.js

@@ -0,0 +1,175 @@
+// @mostajs/media-server — createMedia factory
+// Author: Dr Hamid MADANI <drmdh@msn.com>
+//
+// Factory qui pluge un repository ORM (MediaRepository) sur un driver storage
+// (@mostajs/storage FileStore) pour produire un MediaService. Le route handler
+// (Next.js App Router, Express, …) consomme la surface MediaService sans rien
+// connaître du storage backend ni du dialecte ORM utilisé.
+const DEFAULT_BUCKET = 'media-recordings';
+const DEFAULT_TTL = 60 * 60;
+function defaultId() {
+    // Format compact base36 ~ ULID-friendly. Pas de hard-dep ulid pour scaffold v0.1.0.
+    return Date.now().toString(36) + '-' + Math.random().toString(36).slice(2, 10);
+}
+function deriveKind(mimeType) {
+    if (mimeType.startsWith('video/'))
+        return 'video';
+    if (mimeType.startsWith('audio/'))
+        return 'audio';
+    if (mimeType.startsWith('image/'))
+        return 'image';
+    return 'data'; // application/json, application/octet-stream, etc.
+}
+function extFromMime(mimeType) {
+    if (mimeType.includes('webm'))
+        return 'webm';
+    if (mimeType.includes('mp4'))
+        return 'mp4';
+    if (mimeType.includes('ogg'))
+        return 'ogg';
+    if (mimeType.includes('png'))
+        return 'png';
+    if (mimeType.includes('jpeg') || mimeType.includes('jpg'))
+        return 'jpg';
+    if (mimeType.includes('json'))
+        return 'json';
+    return 'bin';
+}
+/**
+ * Construit un MediaService prêt à servir des routes HTTP. Le handler reste
+ * responsable du RBAC (accountId depuis la session) et de la sérialisation
+ * HTTP — le factory expose un service pur.
+ */
+export function createMedia(opts) {
+    const { storage, repo } = opts;
+    const defaultBucket = opts.defaultBucket ?? DEFAULT_BUCKET;
+    const ttl = opts.signedUrlTtlSec ?? DEFAULT_TTL;
+    const newId = opts.generateId ?? defaultId;
+    async function buildSignedUrl(row) {
+        const { url, expiresAt } = await storage.signedUrl({
+            bucket: row.bucket,
+            path: row.key,
+            ttlSec: ttl,
+        });
+        return { row, signedUrl: url, signedUrlExpiresAt: expiresAt };
+    }
+    return {
+        async createRecording(input) {
+            if (!input.accountId)
+                throw new Error('createRecording: accountId is required');
+            if (!input.mimeType)
+                throw new Error('createRecording: mimeType is required');
+            const id = newId();
+            const bucket = input.bucket ?? defaultBucket;
+            const kind = input.kind ?? deriveKind(input.mimeType);
+            const key = `${input.accountId}/${id}.${extFromMime(input.mimeType)}`;
+            // 1. Insert row status=uploading. Permet de tracer un upload qui foire.
+            let row = await repo.insert({
+                accountId: input.accountId,
+                ownerEmail: input.ownerEmail ?? null,
+                bucket,
+                key,
+                mimeType: input.mimeType,
+                sizeBytes: 0,
+                durationMs: input.durationMs,
+                kind,
+                status: 'uploading',
+                sessionId: input.sessionId ?? null,
+                takeIndex: input.takeIndex ?? null,
+                metadata: input.metadata ?? null,
+                id,
+            });
+            // 2. Put storage. Failure → row.status=failed (auditable).
+            let putResult;
+            try {
+                putResult = await storage.put({
+                    bucket, path: key, body: input.body, mimeType: input.mimeType,
+                });
+            }
+            catch (e) {
+                await repo.update(row.id, { status: 'failed', updatedAt: new Date() });
+                throw e;
+            }
+            // 3. Update row status=ready avec taille + checksum réels.
+            row = await repo.update(row.id, {
+                status: 'ready',
+                sizeBytes: putResult.size,
+                checksum: putResult.checksum ?? null,
+                updatedAt: new Date(),
+            });
+            const signed = await buildSignedUrl(row);
+            return {
+                row: signed.row,
+                signedUrl: signed.signedUrl,
+                signedUrlExpiresAt: signed.signedUrlExpiresAt,
+            };
+        },
+        async updateRecording(id, input) {
+            const existing = await repo.findById(id);
+            if (!existing)
+                return null;
+            // Ré-uploade le blob sur la MÊME key (écrase l'objet storage).
+            const mimeType = input.mimeType ?? existing.mimeType;
+            let putResult;
+            try {
+                putResult = await storage.put({
+                    bucket: existing.bucket, path: existing.key, body: input.body, mimeType,
+                });
+            }
+            catch (e) {
+                await repo.update(id, { status: 'failed', updatedAt: new Date() });
+                throw e;
+            }
+            const row = await repo.update(id, {
+                status: 'ready',
+                mimeType,
+                sizeBytes: putResult.size,
+                checksum: putResult.checksum ?? null,
+                durationMs: input.durationMs ?? existing.durationMs,
+                metadata: input.metadata ?? existing.metadata,
+                updatedAt: new Date(),
+            });
+            const signed = await buildSignedUrl(row);
+            return {
+                row: signed.row,
+                signedUrl: signed.signedUrl,
+                signedUrlExpiresAt: signed.signedUrlExpiresAt,
+            };
+        },
+        async getMedia(id) {
+            const row = await repo.findById(id);
+            if (!row || row.status !== 'ready')
+                return null;
+            return buildSignedUrl(row);
+        },
+        async reissueSignedUrl(id, ttlSec) {
+            const row = await repo.findById(id);
+            if (!row || row.status !== 'ready')
+                return null;
+            const { url, expiresAt } = await storage.signedUrl({
+                bucket: row.bucket, path: row.key, ttlSec: ttlSec ?? ttl,
+            });
+            return { row, signedUrl: url, signedUrlExpiresAt: expiresAt };
+        },
+        async deleteMedia(id) {
+            const row = await repo.findById(id);
+            if (!row)
+                return;
+            // Soft-delete row d'abord (idempotent), purge storage ensuite.
+            await repo.update(id, { status: 'deleted', updatedAt: new Date() });
+            try {
+                await storage.delete({ bucket: row.bucket, path: row.key });
+            }
+            catch (e) {
+                // Si la purge échoue, on log mais on garde la row soft-deleted.
+                // Le consumer peut prévoir un GC périodique pour les blobs orphelins.
+                // eslint-disable-next-line no-console
+                console.warn('[mosta-media-server] storage.delete failed for', row.bucket, row.key, e);
+            }
+        },
+        async listForAccount(accountId, filter) {
+            return repo.list(accountId, filter);
+        },
+    };
+}
+//# sourceMappingURL=factory.js.map

package/dist/factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.js","sourceRoot":"","sources":["../src/factory.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C,0CAA0C;AAC1C,EAAE;AACF,8EAA8E;AAC9E,+EAA+E;AAC/E,8EAA8E;AAC9E,2DAA2D;AA2C3D,MAAM,cAAc,GAAG,kBAAkB,CAAA;AACzC,MAAM,WAAW,GAAG,EAAE,GAAG,EAAE,CAAA;AAE3B,SAAS,SAAS;IAChB,oFAAoF;IACpF,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AAChF,CAAC;AAED,SAAS,UAAU,CAAC,QAAgB;IAClC,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAA;IACjD,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAA;IACjD,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAA;IACjD,OAAO,MAAM,CAAA,CAAE,mDAAmD;AACpE,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB;IACnC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAA;IAC5C,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IAC1C,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IAC1C,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IAC1C,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACvE,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAA;IAC5C,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,IAAwB;IAClD,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,IAAI,CAAA;IAC9B,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,cAAc,CAAA;IAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,eAAe,IAAI,WAAW,CAAA;IAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,IAAI,SAAS,CAAA;IAE1C,KAAK,UAAU,cAAc,CAAC,GAAa;QACzC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC;YACjD,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,IAAI,EAAE,GAAG,CAAC,GAAG;YACb,MAAM,EAAE,GAAG;SACZ,CAAC,CAAA;QACF,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,kBAAkB,EAAE,SAAS,EAAE,CAAA;IAC/D,CAAC;IAED,OAAO;QACL,KAAK,CAAC,eAAe,CAAC,KAA2B;YAC/C,IAAI,CAAC,KAAK,CAAC,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;YAC/E,IAAI,CAAC,KAAK,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;YAE7E,MAAM,EAAE,GAAG,KAAK,EAAE,CAAA;YAClB,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,aAAa,CAAA;YAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;YACrD,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,SAAS,IAAI,EAAE,IAAI,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAA;YAErE,wEAAwE;YACxE,IAAI,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC;gBAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;gBACpC,MAAM;gBACN,GAAG;gBACH,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,SAAS,EAAE,CAAC;gBACZ,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,IAAI;gBACJ,MAAM,EAAE,WAAW;gBACnB,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;gBAClC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;gBAClC,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;gBAChC,EAAE;aACH,CAAC,CAAA;YAEF,2DAA2D;YAC3D,IAAI,SAAqD,CAAA;YACzD,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;oBAC5B,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ;iBAC9D,CAAC,CAAA;YACJ,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAA;gBACtE,MAAM,CAAC,CAAA;YACT,CAAC;YAED,2DAA2D;YAC3D,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE;gBAC9B,MAAM,EAAE,OAAO;gBACf,SAAS,EAAE,SAAS,CAAC,IAAI;gBACzB,QAAQ,EAAE,SAAS,CAAC,QAAQ,IAAI,IAAI;gBACpC,SAAS,EAAE,IAAI,IAAI,EAAE;aACtB,CAAC,CAAA;YAEF,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAA;YACxC,OAAO;gBACL,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;aAC9C,CAAA;QACH,CAAC;QAED,KAAK,CAAC,eAAe,CAAC,EAAU,EAAE,KAA2B;YAC3D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;YACxC,IAAI,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAA;YAC1B,+DAA+D;YAC/D,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAA;YACpD,IAAI,SAAqD,CAAA;YACzD,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;oBAC5B,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ;iBACxE,CAAC,CAAA;YACJ,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAA;gBAClE,MAAM,CAAC,CAAA;YACT,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE;gBAChC,MAAM,EAAE,OAAO;gBACf,QAAQ;gBACR,SAAS,EAAE,SAAS,CAAC,IAAI;gBACzB,QAAQ,EAAE,SAAS,CAAC,QAAQ,IAAI,IAAI;gBACpC,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU;gBACnD,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ;gBAC7C,SAAS,EAAE,IAAI,IAAI,EAAE;aACtB,CAAC,CAAA;YACF,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAA;YACxC,OAAO;gBACL,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;aAC9C,CAAA;QACH,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,EAAU;YACvB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;YACnC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,OAAO;gBAAE,OAAO,IAAI,CAAA;YAC/C,OAAO,cAAc,CAAC,GAAG,CAAC,CAAA;QAC5B,CAAC;QAED,KAAK,CAAC,gBAAgB,CAAC,EAAU,EAAE,MAAe;YAChD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;YACnC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,OAAO;gBAAE,OAAO,IAAI,CAAA;YAC/C,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC;gBACjD,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,IAAI,GAAG;aACzD,CAAC,CAAA;YACF,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,kBAAkB,EAAE,SAAS,EAAE,CAAA;QAC/D,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,EAAU;YAC1B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;YACnC,IAAI,CAAC,GAAG;gBAAE,OAAM;YAChB,+DAA+D;YAC/D,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAA;YACnE,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAA;YAC7D,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,gEAAgE;gBAChE,sEAAsE;gBACtE,sCAAsC;gBACtC,OAAO,CAAC,IAAI,CAAC,gDAAgD,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;YACxF,CAAC;QACH,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,SAAiB,EAAE,MAAwB;YAC9D,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;QACrC,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/handlers/next.d.ts

@@ -0,0 +1,71 @@
+import type { MediaService } from '../types.js';
+/** Contract pour extraire l'accountId tenant depuis la requête HTTP.
+ *  L'implémentation typique : lire la session JWT/cookie, charger l'account
+ *  associé. Retourner null = 401. Voir mémoire `feedback_account_id_vs_user_id`. */
+export type GetAccountIdFromRequest = (req: Request) => Promise<string | null> | string | null;
+/** Validation MIME — défaut accepte video/* | audio/* | image/*. */
+export type MimeAcceptor = (mimeType: string) => boolean;
+export interface RecordingsRouteOptions {
+    /** Service factory issu de `createMedia({ storage, repo })`. */
+    mediaService: MediaService;
+    /** Extraction tenant + auth. Retourne null pour 401. */
+    getAccountIdFromRequest: GetAccountIdFromRequest;
+    /** Optionnel : restreindre MIME (default video/audio/image). */
+    acceptMimeType?: MimeAcceptor;
+    /** Cap hard taille blob (default 500 MB). */
+    maxSizeBytes?: number;
+    /** Optionnel : extraire ownerEmail si l'auth le fournit (audit row). */
+    getOwnerEmail?: (req: Request) => Promise<string | null> | string | null;
+}
+export interface RecordingsRouteHandlers {
+    /** POST /api/media/recordings — multipart/form-data { blob, mimeType, durationMs, sessionId?, takeIndex?, metadata? }. */
+    POST(req: Request): Promise<Response>;
+}
+/**
+ * Factory du handler POST /api/media/recordings.
+ *
+ * @example
+ * ```ts
+ * // app/api/media/recordings/route.ts
+ * import { createRecordingsRoute } from '@mostajs/media-server'
+ * import { mediaService } from '@/lib/media-service'
+ * import { getAccountIdFromSession } from '@/lib/session'
+ *
+ * export const runtime = 'nodejs'
+ * const { POST } = createRecordingsRoute({
+ *   mediaService,
+ *   getAccountIdFromRequest: (req) => getAccountIdFromSession(req),
+ *   maxSizeBytes: 200 * 1024 * 1024,
+ * })
+ * export { POST }
+ * ```
+ */
+export declare function createRecordingsRoute(opts: RecordingsRouteOptions): RecordingsRouteHandlers;
+export interface MediaByIdRouteOptions {
+    mediaService: MediaService;
+    getAccountIdFromRequest: GetAccountIdFromRequest;
+}
+/** Next.js App Router context typing. Compatible Next ≥ 15 (params: Promise) ET Next ≤ 14 (params: object). */
+type RouteParamsCtx = {
+    params: {
+        id: string;
+    } | Promise<{
+        id: string;
+    }>;
+};
+export interface MediaByIdRouteHandlers {
+    /** GET /api/media/[id] → row + signed URL frais. 404 si absent, 403 si tenant mismatch. */
+    GET(req: Request, ctx: RouteParamsCtx): Promise<Response>;
+    /** PUT /api/media/[id] → remplace le blob d'une row existante (saveOrUpdate).
+     *  multipart/form-data { blob, mimeType?, durationMs?, metadata? }. */
+    PUT(req: Request, ctx: RouteParamsCtx): Promise<Response>;
+    /** DELETE /api/media/[id] → soft-delete row + purge storage. */
+    DELETE(req: Request, ctx: RouteParamsCtx): Promise<Response>;
+}
+/**
+ * Factory pour GET + PUT + DELETE /api/media/[id]. Le consumer ré-exporte
+ * `{ GET, PUT, DELETE }` depuis `app/api/media/[id]/route.ts`.
+ */
+export declare function createMediaByIdRoute(opts: MediaByIdRouteOptions): MediaByIdRouteHandlers;
+export {};
+//# sourceMappingURL=next.d.ts.map

package/dist/handlers/next.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"next.d.ts","sourceRoot":"","sources":["../../src/handlers/next.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAE/C;;oFAEoF;AACpF,MAAM,MAAM,uBAAuB,GAAG,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,MAAM,GAAG,IAAI,CAAA;AAE9F,oEAAoE;AACpE,MAAM,MAAM,YAAY,GAAG,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAA;AAExD,MAAM,WAAW,sBAAsB;IACrC,gEAAgE;IAChE,YAAY,EAAE,YAAY,CAAA;IAC1B,wDAAwD;IACxD,uBAAuB,EAAE,uBAAuB,CAAA;IAChD,gEAAgE;IAChE,cAAc,CAAC,EAAE,YAAY,CAAA;IAC7B,6CAA6C;IAC7C,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,wEAAwE;IACxE,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,MAAM,GAAG,IAAI,CAAA;CACzE;AAED,MAAM,WAAW,uBAAuB;IACtC,0HAA0H;IAC1H,IAAI,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;CACtC;AAMD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,sBAAsB,GAAG,uBAAuB,CAiF3F;AAID,MAAM,WAAW,qBAAqB;IACpC,YAAY,EAAE,YAAY,CAAA;IAC1B,uBAAuB,EAAE,uBAAuB,CAAA;CACjD;AAED,+GAA+G;AAC/G,KAAK,cAAc,GAAG;IACpB,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CACjD,CAAA;AAED,MAAM,WAAW,sBAAsB;IACrC,2FAA2F;IAC3F,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACzD;2EACuE;IACvE,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACzD,gEAAgE;IAChE,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;CAC7D;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,qBAAqB,GAAG,sBAAsB,CAgFxF"}

package/dist/handlers/next.js

@@ -0,0 +1,189 @@
+// @mostajs/media-server — Next.js App Router handler factories
+// Author: Dr Hamid MADANI <drmdh@msn.com>
+//
+// Factories qui transforment un MediaService + une politique RBAC en handlers
+// HTTP prêts à l'emploi pour Next.js App Router. Le consumer instancie une
+// fois côté serveur (ex: lib/media-service.ts), branche les handlers dans
+// app/api/media/recordings/route.ts + app/api/media/[id]/route.ts.
+const DEFAULT_MAX_SIZE = 500 * 1024 * 1024; // 500 MB
+const defaultMimeAccept = (mime) => mime.startsWith('video/') || mime.startsWith('audio/') || mime.startsWith('image/');
+/**
+ * Factory du handler POST /api/media/recordings.
+ *
+ * @example
+ * ```ts
+ * // app/api/media/recordings/route.ts
+ * import { createRecordingsRoute } from '@mostajs/media-server'
+ * import { mediaService } from '@/lib/media-service'
+ * import { getAccountIdFromSession } from '@/lib/session'
+ *
+ * export const runtime = 'nodejs'
+ * const { POST } = createRecordingsRoute({
+ *   mediaService,
+ *   getAccountIdFromRequest: (req) => getAccountIdFromSession(req),
+ *   maxSizeBytes: 200 * 1024 * 1024,
+ * })
+ * export { POST }
+ * ```
+ */
+export function createRecordingsRoute(opts) {
+    const maxSize = opts.maxSizeBytes ?? DEFAULT_MAX_SIZE;
+    const acceptMime = opts.acceptMimeType ?? defaultMimeAccept;
+    return {
+        async POST(req) {
+            const accountId = await opts.getAccountIdFromRequest(req);
+            if (!accountId)
+                return jsonResponse({ error: 'unauthorized' }, 401);
+            let form;
+            try {
+                form = await req.formData();
+            }
+            catch (e) {
+                return jsonResponse({ error: 'invalid_multipart', detail: e.message }, 400);
+            }
+            const blob = form.get('blob');
+            if (!(blob instanceof Blob)) {
+                return jsonResponse({ error: 'blob_required' }, 400);
+            }
+            const mimeType = form.get('mimeType') || blob.type || 'application/octet-stream';
+            if (!acceptMime(mimeType)) {
+                return jsonResponse({ error: 'unsupported_mime', mimeType }, 415);
+            }
+            if (blob.size > maxSize) {
+                return jsonResponse({ error: 'too_large', size: blob.size, maxSize }, 413);
+            }
+            if (blob.size === 0) {
+                return jsonResponse({ error: 'empty_blob' }, 400);
+            }
+            const durationMs = Number(form.get('durationMs') ?? 0);
+            const sessionId = form.get('sessionId') || undefined;
+            const takeIndexRaw = form.get('takeIndex');
+            const takeIndex = takeIndexRaw != null ? Number(takeIndexRaw) : undefined;
+            const metadataRaw = form.get('metadata');
+            let metadata;
+            if (typeof metadataRaw === 'string' && metadataRaw.length > 0) {
+                try {
+                    const parsed = JSON.parse(metadataRaw);
+                    if (parsed && typeof parsed === 'object' && !Array.isArray(parsed)) {
+                        metadata = Object.fromEntries(Object.entries(parsed).map(([k, v]) => [k, String(v)]));
+                    }
+                }
+                catch { /* metadata invalide → ignoré, pas bloquant */ }
+            }
+            const ownerEmail = opts.getOwnerEmail
+                ? (await opts.getOwnerEmail(req)) ?? undefined
+                : undefined;
+            try {
+                const body = new Uint8Array(await blob.arrayBuffer());
+                const result = await opts.mediaService.createRecording({
+                    accountId,
+                    ownerEmail,
+                    body,
+                    mimeType,
+                    durationMs: Number.isFinite(durationMs) ? durationMs : 0,
+                    sessionId,
+                    takeIndex,
+                    metadata,
+                });
+                return jsonResponse(result, 201);
+            }
+            catch (e) {
+                return jsonResponse({ error: 'create_failed', detail: e.message }, 500);
+            }
+        },
+    };
+}
+/**
+ * Factory pour GET + PUT + DELETE /api/media/[id]. Le consumer ré-exporte
+ * `{ GET, PUT, DELETE }` depuis `app/api/media/[id]/route.ts`.
+ */
+export function createMediaByIdRoute(opts) {
+    async function resolveParams(ctx) {
+        return ctx.params instanceof Promise ? await ctx.params : ctx.params;
+    }
+    return {
+        async GET(req, ctx) {
+            const accountId = await opts.getAccountIdFromRequest(req);
+            if (!accountId)
+                return jsonResponse({ error: 'unauthorized' }, 401);
+            const { id } = await resolveParams(ctx);
+            const result = await opts.mediaService.getMedia(id);
+            if (!result)
+                return jsonResponse({ error: 'not_found' }, 404);
+            if (result.row.accountId !== accountId) {
+                return jsonResponse({ error: 'forbidden' }, 403);
+            }
+            return jsonResponse(result);
+        },
+        async PUT(req, ctx) {
+            const accountId = await opts.getAccountIdFromRequest(req);
+            if (!accountId)
+                return jsonResponse({ error: 'unauthorized' }, 401);
+            const { id } = await resolveParams(ctx);
+            // RBAC : la row doit appartenir au tenant de la session.
+            const existing = await opts.mediaService.getMedia(id);
+            if (!existing)
+                return jsonResponse({ error: 'not_found' }, 404);
+            if (existing.row.accountId !== accountId) {
+                return jsonResponse({ error: 'forbidden' }, 403);
+            }
+            let form;
+            try {
+                form = await req.formData();
+            }
+            catch (e) {
+                return jsonResponse({ error: 'invalid_multipart', detail: e.message }, 400);
+            }
+            const blob = form.get('blob');
+            if (!(blob instanceof Blob) || blob.size === 0) {
+                return jsonResponse({ error: 'blob_required' }, 400);
+            }
+            const mimeType = form.get('mimeType') || undefined;
+            const durationMsRaw = form.get('durationMs');
+            const durationMs = durationMsRaw != null ? Number(durationMsRaw) : undefined;
+            const metadataRaw = form.get('metadata');
+            let metadata;
+            if (typeof metadataRaw === 'string' && metadataRaw.length > 0) {
+                try {
+                    const parsed = JSON.parse(metadataRaw);
+                    if (parsed && typeof parsed === 'object' && !Array.isArray(parsed)) {
+                        metadata = Object.fromEntries(Object.entries(parsed).map(([k, v]) => [k, String(v)]));
+                    }
+                }
+                catch { /* metadata invalide → ignoré */ }
+            }
+            try {
+                const body = new Uint8Array(await blob.arrayBuffer());
+                const result = await opts.mediaService.updateRecording(id, {
+                    body, mimeType, durationMs, metadata,
+                });
+                if (!result)
+                    return jsonResponse({ error: 'not_found' }, 404);
+                return jsonResponse(result, 200);
+            }
+            catch (e) {
+                return jsonResponse({ error: 'update_failed', detail: e.message }, 500);
+            }
+        },
+        async DELETE(req, ctx) {
+            const accountId = await opts.getAccountIdFromRequest(req);
+            if (!accountId)
+                return jsonResponse({ error: 'unauthorized' }, 401);
+            const { id } = await resolveParams(ctx);
+            const existing = await opts.mediaService.getMedia(id);
+            if (existing && existing.row.accountId !== accountId) {
+                return jsonResponse({ error: 'forbidden' }, 403);
+            }
+            await opts.mediaService.deleteMedia(id);
+            return jsonResponse({ ok: true });
+        },
+    };
+}
+// ─── Helpers ───────────────────────────────────────────────────────────
+function jsonResponse(body, status = 200) {
+    return new Response(JSON.stringify(body), {
+        status,
+        headers: { 'Content-Type': 'application/json; charset=utf-8' },
+    });
+}
+//# sourceMappingURL=next.js.map

package/dist/handlers/next.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"next.js","sourceRoot":"","sources":["../../src/handlers/next.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,0CAA0C;AAC1C,EAAE;AACF,8EAA8E;AAC9E,2EAA2E;AAC3E,0EAA0E;AAC1E,mEAAmE;AA8BnE,MAAM,gBAAgB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAA,CAAC,SAAS;AACpD,MAAM,iBAAiB,GAAiB,CAAC,IAAI,EAAE,EAAE,CAC/C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;AAErF;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAA4B;IAChE,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,IAAI,gBAAgB,CAAA;IACrD,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,IAAI,iBAAiB,CAAA;IAE3D,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,GAAG;YACZ,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAA;YACzD,IAAI,CAAC,SAAS;gBAAE,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAA;YAEnE,IAAI,IAAc,CAAA;YAClB,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAA;YAC7B,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,YAAY,CACjB,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAG,CAAW,CAAC,OAAO,EAAE,EAC5D,GAAG,CACJ,CAAA;YACH,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YAC7B,IAAI,CAAC,CAAC,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;gBAC5B,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,GAAG,CAAC,CAAA;YACtD,CAAC;YAED,MAAM,QAAQ,GAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAY,IAAI,IAAI,CAAC,IAAI,IAAI,0BAA0B,CAAA;YAC5F,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1B,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAA;YACnE,CAAC;YAED,IAAI,IAAI,CAAC,IAAI,GAAG,OAAO,EAAE,CAAC;gBACxB,OAAO,YAAY,CACjB,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,EAChD,GAAG,CACJ,CAAA;YACH,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACpB,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,GAAG,CAAC,CAAA;YACnD,CAAC;YAED,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAA;YACtD,MAAM,SAAS,GAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAY,IAAI,SAAS,CAAA;YAChE,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;YAC1C,MAAM,SAAS,GAAG,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YACzE,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;YACxC,IAAI,QAA4C,CAAA;YAChD,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9D,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;oBACtC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;wBACnE,QAAQ,GAAG,MAAM,CAAC,WAAW,CAC3B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CACvD,CAAA;oBACH,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC,CAAC,8CAA8C,CAAC,CAAC;YAC5D,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa;gBACnC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,SAAS;gBAC9C,CAAC,CAAC,SAAS,CAAA;YAEb,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;gBACrD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC;oBACrD,SAAS;oBACT,UAAU;oBACV,IAAI;oBACJ,QAAQ;oBACR,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;oBACxD,SAAS;oBACT,SAAS;oBACT,QAAQ;iBACT,CAAC,CAAA;gBACF,OAAO,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;YAClC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,YAAY,CACjB,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAG,CAAW,CAAC,OAAO,EAAE,EACxD,GAAG,CACJ,CAAA;YACH,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAwBD;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAA2B;IAC9D,KAAK,UAAU,aAAa,CAAC,GAAmB;QAC9C,OAAO,GAAG,CAAC,MAAM,YAAY,OAAO,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAA;IACtE,CAAC;IAED,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG;YAChB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAA;YACzD,IAAI,CAAC,SAAS;gBAAE,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAA;YAEnE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAA;YACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;YACnD,IAAI,CAAC,MAAM;gBAAE,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAA;YAC7D,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACvC,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAA;YAClD,CAAC;YACD,OAAO,YAAY,CAAC,MAAM,CAAC,CAAA;QAC7B,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG;YAChB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAA;YACzD,IAAI,CAAC,SAAS;gBAAE,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAA;YAEnE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAA;YACvC,yDAAyD;YACzD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;YACrD,IAAI,CAAC,QAAQ;gBAAE,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAA;YAC/D,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACzC,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAA;YAClD,CAAC;YAED,IAAI,IAAc,CAAA;YAClB,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAA;YAC7B,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAG,CAAW,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAA;YACxF,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YAC7B,IAAI,CAAC,CAAC,IAAI,YAAY,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBAC/C,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,GAAG,CAAC,CAAA;YACtD,CAAC;YACD,MAAM,QAAQ,GAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAY,IAAI,SAAS,CAAA;YAC9D,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;YAC5C,MAAM,UAAU,GAAG,aAAa,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YAC5E,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;YACxC,IAAI,QAA4C,CAAA;YAChD,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9D,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;oBACtC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;wBACnE,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;oBACvF,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC,CAAC,gCAAgC,CAAC,CAAC;YAC9C,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;gBACrD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,EAAE,EAAE;oBACzD,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ;iBACrC,CAAC,CAAA;gBACF,IAAI,CAAC,MAAM;oBAAE,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAA;gBAC7D,OAAO,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;YAClC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAG,CAAW,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAA;YACpF,CAAC;QACH,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG;YACnB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAA;YACzD,IAAI,CAAC,SAAS;gBAAE,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAA;YAEnE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAA;YACvC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;YACrD,IAAI,QAAQ,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACrD,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAA;YAClD,CAAC;YACD,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;YACvC,OAAO,YAAY,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;QACnC,CAAC;KACF,CAAA;AACH,CAAC;AAED,0EAA0E;AAE1E,SAAS,YAAY,CAAC,IAAa,EAAE,MAAM,GAAG,GAAG;IAC/C,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,iCAAiC,EAAE;KAC/D,CAAC,CAAA;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+export type { MediaKind, MediaStatus, MediaRow, MediaListFilter, MediaListResult, MediaRepository, } from './schema.js';
+export type { CreateRecordingInput, CreateRecordingResult, MediaWithSignedUrl, MediaService, } from './types.js';
+export type { StorageLike, CreateMediaOptions } from './factory.js';
+export { createMedia } from './factory.js';
+export type { RecordingsRouteOptions, RecordingsRouteHandlers, MediaByIdRouteOptions, MediaByIdRouteHandlers, GetAccountIdFromRequest, MimeAcceptor, } from './handlers/next.js';
+export { createRecordingsRoute, createMediaByIdRoute } from './handlers/next.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA,YAAY,EACV,SAAS,EAAE,WAAW,EAAE,QAAQ,EAChC,eAAe,EAAE,eAAe,EAChC,eAAe,GAChB,MAAM,aAAa,CAAA;AAEpB,YAAY,EACV,oBAAoB,EAAE,qBAAqB,EAC3C,kBAAkB,EAAE,YAAY,GACjC,MAAM,YAAY,CAAA;AAEnB,YAAY,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAG1C,YAAY,EACV,sBAAsB,EAAE,uBAAuB,EAC/C,qBAAqB,EAAE,sBAAsB,EAC7C,uBAAuB,EAAE,YAAY,GACtC,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA"}

package/dist/index.js

@@ -0,0 +1,5 @@
+// @mostajs/media-server — Barrel public
+// Author: Dr Hamid MADANI <drmdh@msn.com>
+export { createMedia } from './factory.js';
+export { createRecordingsRoute, createMediaByIdRoute } from './handlers/next.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,wCAAwC;AACxC,0CAA0C;AAc1C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAQ1C,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA"}

package/dist/schema.d.ts

@@ -0,0 +1,98 @@
+/** Catégorie sémantique de la prise. `data` = blob non-média (JSON ProjectFile,
+ *  manifests, etc.) qui passe par la même pipeline storage/repo mais ne doit
+ *  pas être routé vers un player. */
+export type MediaKind = 'video' | 'audio' | 'image' | 'data';
+/** Cycle de vie d'une row Media. */
+export type MediaStatus = 
+/** Row créée, blob pas encore uploadé (réservé pour le upload-then-finalize pattern). */
+'uploading'
+/** Blob présent en storage, signed URL exploitable. */
+ | 'ready'
+/** Soft-delete : row marquée mais blob purgé du storage. */
+ | 'deleted'
+/** Erreur upload/finalize — row conservée pour debug, blob inexistant ou orphelin. */
+ | 'failed';
+/** Row métadonnée persistée. Les bytes vivent dans le storage (FS/S3/…). */
+export interface MediaRow {
+    /** Identifiant interne — UUID ou ULID. Stable cross-restart. */
+    id: string;
+    /** Tenant propriétaire — clé d'isolation multi-tenant. */
+    accountId: string;
+    /** Email du créateur (audit). Optionnel selon le repo. */
+    ownerEmail?: string | null;
+    /** Nom logique du bucket dans @mostajs/storage. Par défaut `media-recordings`. */
+    bucket: string;
+    /** Path relatif dans le bucket. Convention `<accountId>/<id>.<ext>`. */
+    key: string;
+    /** Type MIME — validé côté factory au moment du createRecording. */
+    mimeType: string;
+    /** Taille en octets. */
+    sizeBytes: number;
+    /** Durée en ms — client-mesuré pour audio/video, 0 pour image. */
+    durationMs: number;
+    /** Kind sémantique — utile au consumer pour router vers le bon player. */
+    kind: MediaKind;
+    /** Cycle de vie. */
+    status: MediaStatus;
+    /** Identifiant de session multi-take (optionnel — permet de grouper des takes). */
+    sessionId?: string | null;
+    /** Index dans la session multi-take. Si pas de session, 0. */
+    takeIndex?: number | null;
+    /** Hash sha256 hex — fourni par @mostajs/storage à l'upload. */
+    checksum?: string | null;
+    /** Métadonnées libres (subtitle path, thumbnail key, etc.). */
+    metadata?: Record<string, string> | null;
+    /** Timestamp création. */
+    createdAt: Date | string;
+    /** Timestamp dernière mise à jour. */
+    updatedAt?: Date | string | null;
+}
+/** Filtre paginé pour `listForAccount`. */
+export interface MediaListFilter {
+    /** Filtre par session (récupérer les takes d'une session multi-take). */
+    sessionId?: string;
+    /** Filtre par status (par défaut `ready` seulement). */
+    status?: MediaStatus | MediaStatus[];
+    /** Filtre par kind. */
+    kind?: MediaKind | MediaKind[];
+    /** Tri (champ + direction). Défaut createdAt desc. */
+    orderBy?: {
+        field: 'createdAt' | 'updatedAt' | 'sizeBytes';
+        direction: 'asc' | 'desc';
+    };
+    /** Limite (pagination forward-only). Défaut 50, max 200. */
+    limit?: number;
+    /** Curseur opaque pour la page suivante (id de la dernière row). */
+    cursor?: string;
+}
+/** Page résultat de `listForAccount`. */
+export interface MediaListResult {
+    items: MediaRow[];
+    /** Curseur pour la page suivante. Absent si plus de pages. */
+    nextCursor?: string;
+    /** Total approximatif (count exact optionnel — coûteux côté DB). */
+    total?: number;
+}
+/**
+ * Contract du repository Media — implémentation à fournir par le consumer
+ * (typiquement au-dessus de @mostajs/orm, Prisma, ou un repo maison).
+ *
+ * Le repo manipule UNIQUEMENT la row métadonnée. Les bytes sont gérés par
+ * @mostajs/storage (paramètre `storage` du factory). Cette séparation permet
+ * de tester le factory en mockant les 2 surfaces indépendamment.
+ */
+export interface MediaRepository {
+    /** Insère une nouvelle row. Doit générer `id` si absent dans `data`. */
+    insert(data: Omit<MediaRow, 'id' | 'createdAt'> & {
+        id?: string;
+    }): Promise<MediaRow>;
+    /** Récupère une row par id (peu importe le tenant — RBAC géré côté handler). */
+    findById(id: string): Promise<MediaRow | null>;
+    /** Update partiel — typiquement status + updatedAt. */
+    update(id: string, patch: Partial<Omit<MediaRow, 'id' | 'createdAt'>>): Promise<MediaRow>;
+    /** Hard-delete row (le storage est purgé séparément par le factory). */
+    delete(id: string): Promise<void>;
+    /** Liste paginée pour un tenant. */
+    list(accountId: string, filter?: MediaListFilter): Promise<MediaListResult>;
+}
+//# sourceMappingURL=schema.d.ts.map

package/dist/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAQA;;qCAEqC;AACrC,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,CAAA;AAE5D,oCAAoC;AACpC,MAAM,MAAM,WAAW;AACrB,yFAAyF;AACvF,WAAW;AACb,uDAAuD;GACrD,OAAO;AACT,4DAA4D;GAC1D,SAAS;AACX,sFAAsF;GACpF,QAAQ,CAAA;AAEZ,4EAA4E;AAC5E,MAAM,WAAW,QAAQ;IACvB,gEAAgE;IAChE,EAAE,EAAE,MAAM,CAAA;IACV,0DAA0D;IAC1D,SAAS,EAAE,MAAM,CAAA;IACjB,0DAA0D;IAC1D,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,kFAAkF;IAClF,MAAM,EAAE,MAAM,CAAA;IACd,wEAAwE;IACxE,GAAG,EAAE,MAAM,CAAA;IACX,oEAAoE;IACpE,QAAQ,EAAE,MAAM,CAAA;IAChB,wBAAwB;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,kEAAkE;IAClE,UAAU,EAAE,MAAM,CAAA;IAClB,0EAA0E;IAC1E,IAAI,EAAE,SAAS,CAAA;IACf,oBAAoB;IACpB,MAAM,EAAE,WAAW,CAAA;IACnB,mFAAmF;IACnF,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,8DAA8D;IAC9D,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,gEAAgE;IAChE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAA;IACxC,0BAA0B;IAC1B,SAAS,EAAE,IAAI,GAAG,MAAM,CAAA;IACxB,sCAAsC;IACtC,SAAS,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,CAAA;CACjC;AAED,2CAA2C;AAC3C,MAAM,WAAW,eAAe;IAC9B,yEAAyE;IACzE,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,wDAAwD;IACxD,MAAM,CAAC,EAAE,WAAW,GAAG,WAAW,EAAE,CAAA;IACpC,uBAAuB;IACvB,IAAI,CAAC,EAAE,SAAS,GAAG,SAAS,EAAE,CAAA;IAC9B,sDAAsD;IACtD,OAAO,CAAC,EAAE;QAAE,KAAK,EAAE,WAAW,GAAG,WAAW,GAAG,WAAW,CAAC;QAAC,SAAS,EAAE,KAAK,GAAG,MAAM,CAAA;KAAE,CAAA;IACvF,4DAA4D;IAC5D,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,oEAAoE;IACpE,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,yCAAyC;AACzC,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,QAAQ,EAAE,CAAA;IACjB,8DAA8D;IAC9D,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,oEAAoE;IACpE,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,wEAAwE;IACxE,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,GAAG,WAAW,CAAC,GAAG;QAAE,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACrF,gFAAgF;IAChF,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAA;IAC9C,uDAAuD;IACvD,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,GAAG,WAAW,CAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACzF,wEAAwE;IACxE,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACjC,oCAAoC;IACpC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;CAC5E"}

package/dist/schema.js

@@ -0,0 +1,9 @@
+// @mostajs/media-server — Domain schema
+// Author: Dr Hamid MADANI <drmdh@msn.com>
+//
+// Contract pour la row "Media" persistée en DB. Le consumer fournit le repo
+// qui implémente cette forme. Volontairement minimal : pas de relations ORM
+// fortes, pas de hooks lifecycle — laissés au consumer (qui peut câbler son
+// ORM préféré via @mostajs/orm ou tout autre data layer).
+export {};
+//# sourceMappingURL=schema.js.map

package/dist/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA,wCAAwC;AACxC,0CAA0C;AAC1C,EAAE;AACF,4EAA4E;AAC5E,4EAA4E;AAC5E,4EAA4E;AAC5E,0DAA0D"}

package/dist/types.d.ts

@@ -0,0 +1,69 @@
+import type { MediaKind, MediaRow, MediaListFilter, MediaListResult } from './schema.js';
+/** Input du POST recording — multipart/form-data côté HTTP, objet typé côté factory. */
+export interface CreateRecordingInput {
+    accountId: string;
+    ownerEmail?: string;
+    /** Bytes du blob — Uint8Array côté Node, Blob côté Web (factory accepte les 2). */
+    body: Uint8Array | Blob | ArrayBuffer;
+    mimeType: string;
+    durationMs: number;
+    /** Si non fourni, dérivé du mimeType (`video/*` → video, `audio/*` → audio, sinon image). */
+    kind?: MediaKind;
+    /** Session multi-take (groupe N takes ensemble). */
+    sessionId?: string;
+    takeIndex?: number;
+    /** Bucket cible (défaut `media-recordings`). */
+    bucket?: string;
+    /** Métadonnées libres persistées sur la row. */
+    metadata?: Record<string, string>;
+}
+/** Résultat de createRecording — row + signedUrl frais. */
+export interface CreateRecordingResult {
+    row: MediaRow;
+    /** Signed URL pour playback immédiat. TTL configuré via factory.options. */
+    signedUrl: string;
+    /** Expiration absolute du signed URL (ms epoch). */
+    signedUrlExpiresAt: number;
+}
+/** Résultat de getMedia / reissueSignedUrl. */
+export interface MediaWithSignedUrl {
+    row: MediaRow;
+    signedUrl: string;
+    signedUrlExpiresAt: number;
+}
+/** Input du PUT recording — remplace le blob d'une row existante (saveOrUpdate). */
+export interface UpdateRecordingInput {
+    /** Nouveaux bytes du blob — écrasent l'objet storage existant (même key). */
+    body: Uint8Array | Blob | ArrayBuffer;
+    /** MIME optionnel — si absent, on conserve celui de la row. */
+    mimeType?: string;
+    /** Durée optionnelle. */
+    durationMs?: number;
+    /** Métadonnées — remplacent celles de la row si fourni. */
+    metadata?: Record<string, string>;
+}
+/** Service principal — surface publique consommée par les route handlers HTTP. */
+export interface MediaService {
+    /**
+     * Crée une nouvelle row + uploade le blob dans storage + retourne signed URL.
+     * Le flux est : insert row(status=uploading) → put storage → update row(status=ready)
+     * → sign URL. Si put storage échoue, la row passe à status=failed (audit).
+     */
+    createRecording(input: CreateRecordingInput): Promise<CreateRecordingResult>;
+    /**
+     * Met à jour une row existante : ré-uploade le blob (même bucket/key, écrase)
+     * + met à jour size/checksum/mime/durationMs/metadata. Retourne null si la
+     * row n'existe pas. Pattern saveOrUpdate : le consumer appelle createRecording
+     * pour un nouveau média, updateRecording pour ré-enregistrer un existant.
+     */
+    updateRecording(id: string, input: UpdateRecordingInput): Promise<CreateRecordingResult | null>;
+    /** Récupère row + signed URL frais. */
+    getMedia(id: string): Promise<MediaWithSignedUrl | null>;
+    /** Re-génère un signed URL (le précédent peut avoir expiré). */
+    reissueSignedUrl(id: string, ttlSec?: number): Promise<MediaWithSignedUrl | null>;
+    /** Soft-delete : row.status=deleted + purge blob storage. */
+    deleteMedia(id: string): Promise<void>;
+    /** Liste paginée pour un tenant. */
+    listForAccount(accountId: string, filter?: MediaListFilter): Promise<MediaListResult>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAExF,wFAAwF;AACxF,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,mFAAmF;IACnF,IAAI,EAAE,UAAU,GAAG,IAAI,GAAG,WAAW,CAAA;IACrC,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,6FAA6F;IAC7F,IAAI,CAAC,EAAE,SAAS,CAAA;IAChB,oDAAoD;IACpD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,gDAAgD;IAChD,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,gDAAgD;IAChD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAClC;AAED,2DAA2D;AAC3D,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,QAAQ,CAAA;IACb,4EAA4E;IAC5E,SAAS,EAAE,MAAM,CAAA;IACjB,oDAAoD;IACpD,kBAAkB,EAAE,MAAM,CAAA;CAC3B;AAED,+CAA+C;AAC/C,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,QAAQ,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,kBAAkB,EAAE,MAAM,CAAA;CAC3B;AAED,oFAAoF;AACpF,MAAM,WAAW,oBAAoB;IACnC,6EAA6E;IAC7E,IAAI,EAAE,UAAU,GAAG,IAAI,GAAG,WAAW,CAAA;IACrC,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,yBAAyB;IACzB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAClC;AAED,kFAAkF;AAClF,MAAM,WAAW,YAAY;IAC3B;;;;OAIG;IACH,eAAe,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAA;IAC5E;;;;;OAKG;IACH,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAA;IAC/F,uCAAuC;IACvC,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAA;IACxD,gEAAgE;IAChE,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAA;IACjF,6DAA6D;IAC7D,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACtC,oCAAoC;IACpC,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;CACtF"}

package/dist/types.js

@@ -0,0 +1,4 @@
+// @mostajs/media-server — Service contract
+// Author: Dr Hamid MADANI <drmdh@msn.com>
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,0CAA0C"}

package/docs/RATIONALE-19052026.md

@@ -0,0 +1,31 @@
+quel est l'intert  du mosta-media-server 
+
+● Bonne question — je m'arrête. L'intérêt de mosta-media-server se résume en 5
+  points :
+     
+  1. Découplage peer deps — @mostajs/media actuel est browser-only (React,
+❯ MediaRecorder, IDB). Y ajouter @mostajs/orm + better-sqlite3 + handlers HTTP
+──pollue le bundle client (~+800 kB inutiles à Webpack/Turbopack) et complique
+  le tree-shaking pour les consumers Next.js qui n'ont besoin que des composants
+   client. C'était d'ailleurs la décision D4 du design (§10).
+  2. Une seule implémentation pour N consumers — camera-studio, iquesta
+  course-builder, et tout futur app qui voudra persister un recording n'auront
+  pas à réécrire le triplet (row Media DB, put blob storage, signed URL). Le
+  factory createMedia({ storage, repo }) injecté permet à chaque app de plugger
+  SON driver storage et SON repo ORM.
+  3. Contrat serveur testable — MediaService est une interface unique
+  (createRecording, getMedia, reissueSignedUrl, deleteMedia, listForAccount).
+  Mockable trivial pour tests, et son contrat correspond 1:1 aux 4-5 endpoints
+  HTTP nécessaires.
+  4. Préparation P2 multi-source — quand on attaquera 4.1 smartphone push (D5
+  prioritaire), le serveur aura déjà la table Media + endpoints de finalisation.
+   Le smartphone publish son flux via WebRTC vers le serveur, le serveur écrit
+  dans storage et crée une row Media. Sans le module server, il faudrait refaire
+   ce câblage à zéro.
+  5. Pivot iquesta course-builder débloqué — la mémoire
+  project_iquesta_v4_recording_plan indique que <MediaRecorderModal> + endpoint
+  POST /api/admin/media/recordings + <RecordingPreview> + wire-up
+  <KindSpecificFields> attendent exactement cette factory. Sans elle, iquesta
+  doit dupliquer la logique en local.
+
+

package/package.json

@@ -0,0 +1,49 @@
+{
+  "name": "@mostajs/media-server",
+  "version": "0.2.2",
+  "description": "Server-side factory + schema + service contract for @mostajs/media recordings — pairs with @mostajs/storage for blob persistence and an injected ORM repository for row metadata.",
+  "author": "Dr Hamid MADANI <drmdh@msn.com>",
+  "license": "AGPL-3.0-or-later",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE",
+    "docs"
+  ],
+  "scripts": {
+    "build": "tsc && npm run fix-esm",
+    "fix-esm": "find dist -name '*.js' -exec sed -i -E \"s|from '(\\.{1,2}/[^']+)'(;?)|from '\\1.js'\\2|g\" {} \\; && find dist -name '*.js' -exec sed -i -E \"s|\\.js\\.js|.js|g\" {} \\;",
+    "clean": "rm -rf dist"
+  },
+  "peerDependencies": {
+    "@mostajs/media": "^2.0.4",
+    "@mostajs/storage": "^0.1.2"
+  },
+  "peerDependenciesMeta": {
+    "@mostajs/media": { "optional": false },
+    "@mostajs/storage": { "optional": false }
+  },
+  "devDependencies": {
+    "typescript": "^5.4.0"
+  },
+  "keywords": [
+    "media",
+    "recording",
+    "server",
+    "storage",
+    "mostajs"
+  ],
+  "publishConfig": {
+    "access": "public"
+  }
+}