@murumets-ee/media 0.27.0 → 0.29.0

package/dist/query-client.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"query-client.mjs","names":[],"sources":["../src/query-client.ts"],"sourcesContent":["/**\n * MediaQueryClient — read-only media client for frontends.\n *\n * Usage:\n *   import { createMediaQueryClient } from '@murumets-ee/media/query'\n *   const media = await createMediaQueryClient()\n *   const image = await media.findById(id)\n */\n\nimport type {\n  CountOptions,\n  FindByIdOptions,\n  FindManyOptions,\n  QueryClient,\n} from '@murumets-ee/entity/query'\nimport type { Media } from './entity.js'\nimport type { MediaRecord } from './types.js'\n\ntype MediaFields = typeof Media.allFields\n\nexport interface MediaQueryClientConfig {\n  query: QueryClient<MediaFields>\n}\n\nexport class MediaQueryClient {\n  private query: QueryClient<MediaFields>\n\n  constructor(config: MediaQueryClientConfig) {\n    this.query = config.query\n  }\n\n  async findById(id: string, options?: FindByIdOptions): Promise<MediaRecord | null> {\n    return this.query.findById(id, options)\n  }\n\n  async findMany(options?: FindManyOptions): Promise<MediaRecord[]> {\n    return this.query.findMany(options)\n  }\n\n  async count(options?: CountOptions): Promise<number> {\n    return this.query.count(options)\n  }\n}\n\n/**\n * Factory — creates a MediaQueryClient.\n * Must be called after createApp().\n */\nexport async function createMediaQueryClient(): Promise<MediaQueryClient> {\n  const { createQueryClient } = await import('@murumets-ee/core/clients')\n  const { Media } = await import('./entity.js')\n  const query = createQueryClient(Media)\n  return new MediaQueryClient({ query })\n}\n"],"mappings":"AAwBA,IAAa,EAAb,KAA8B,CAC5B,MAEA,YAAY,EAAgC,CAC1C,KAAK,MAAQ,EAAO,MAGtB,MAAM,SAAS,EAAY,EAAwD,CACjF,OAAO,KAAK,MAAM,SAAS,EAAI,EAAQ,CAGzC,MAAM,SAAS,EAAmD,CAChE,OAAO,KAAK,MAAM,SAAS,EAAQ,CAGrC,MAAM,MAAM,EAAyC,CACnD,OAAO,KAAK,MAAM,MAAM,EAAQ,GAQpC,eAAsB,GAAoD,CACxE,GAAM,CAAE,qBAAsB,MAAM,OAAO,6BACrC,CAAE,SAAU,MAAM,OAAO,yBAAA,KAAA,GAAA,EAAA,EAAA,CAE/B,OAAO,IAAI,EAAiB,CAAE,MADhB,EAAkB,EACG,CAAE,CAAC"}
+{"version":3,"file":"query-client.mjs","names":[],"sources":["../src/query-client.ts"],"sourcesContent":["/**\n * MediaQueryClient — read-only media client for frontends.\n *\n * Usage:\n *   import { createMediaQueryClient } from '@murumets-ee/media/query'\n *   const media = await createMediaQueryClient()\n *   const image = await media.findById(id)\n */\n\nimport type {\n  CountOptions,\n  FindByIdOptions,\n  FindManyOptions,\n  QueryClient,\n} from '@murumets-ee/entity/query'\nimport type { Media } from './entity.js'\nimport type { MediaRecord } from './types.js'\n\ntype MediaFields = typeof Media.allFields\n\nexport interface MediaQueryClientConfig {\n  query: QueryClient<MediaFields>\n}\n\nexport class MediaQueryClient {\n  private query: QueryClient<MediaFields>\n\n  constructor(config: MediaQueryClientConfig) {\n    this.query = config.query\n  }\n\n  async findById(id: string, options?: FindByIdOptions): Promise<MediaRecord | null> {\n    return this.query.findById(id, options)\n  }\n\n  async findMany(options?: FindManyOptions): Promise<MediaRecord[]> {\n    return this.query.findMany(options)\n  }\n\n  async count(options?: CountOptions): Promise<number> {\n    return this.query.count(options)\n  }\n}\n\n/**\n * Factory — creates a MediaQueryClient.\n * Must be called after createApp().\n */\nexport async function createMediaQueryClient(): Promise<MediaQueryClient> {\n  const { createQueryClient } = await import('@murumets-ee/core/clients')\n  const { Media } = await import('./entity.js')\n  const query = createQueryClient(Media)\n  return new MediaQueryClient({ query })\n}\n"],"mappings":"AAwBA,IAAa,EAAb,KAA8B,CAC5B,MAEA,YAAY,EAAgC,CAC1C,KAAK,MAAQ,EAAO,KACtB,CAEA,MAAM,SAAS,EAAY,EAAwD,CACjF,OAAO,KAAK,MAAM,SAAS,EAAI,CAAO,CACxC,CAEA,MAAM,SAAS,EAAmD,CAChE,OAAO,KAAK,MAAM,SAAS,CAAO,CACpC,CAEA,MAAM,MAAM,EAAyC,CACnD,OAAO,KAAK,MAAM,MAAM,CAAO,CACjC,CACF,EAMA,eAAsB,GAAoD,CACxE,GAAM,CAAE,qBAAsB,MAAM,OAAO,6BACrC,CAAE,SAAU,MAAM,OAAO,wBAAc,CAAA,KAAA,GAAA,EAAA,CAAA,EAE7C,OAAO,IAAI,EAAiB,CAAE,MADhB,EAAkB,CACE,CAAE,CAAC,CACvC"}

package/dist/ref.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"ref.d.mts","names":[],"sources":["../src/ref.ts"],"mappings":";;AAiCA;;;;;AAGA;;;;;;;;;;;AAYA;;;;;;;;;;;KAfY,YAAA;;UAGK,QAAA;EA+BW;EA7B1B,GAAA;EA6BoC;EA3BpC,IAAA,EAAM,YAAA;EA2BqD;EAzB3D,EAAA;EAyB0D;EAvB1D,OAAA;AAAA;;UAIe,gBAAA,SAAyB,QAAA;EAmBmB;EAjB3D,GAAA;EAiBuF;EAfvF,GAAA;EAqBU;EAnBV,QAAA;;EAEA,QAAA;EAiBmD;EAfnD,KAAA;EA2C4B;EAzC5B,MAAA;AAAA;;AA2EF;;;KApEY,gBAAA,IAAoB,IAAA,EAAM,QAAA,OAAe,OAAA,CAAQ,GAAA,SAAY,gBAAA;;;;;KAM7D,gBAAA,IAAoB,GAAA,EAAK,gBAAA;;AAuErC;;iBA3CgB,cAAA,CAAe,IAAA,WAAe,QAAA;;;;;iBAkC9B,eAAA,CAAgB,IAAA,UAAc,OAAA;EAAY,IAAA,GAAO,YAAA;AAAA;AAqBjE;;;AAAA,iBAZgB,kBAAA,CAAmB,KAAA,YAAiB,OAAA;EAAY,IAAA,GAAO,YAAA;AAAA;;;;iBAYvD,cAAA,CAAe,IAAA,EAAM,YAAA,EAAc,EAAA,UAAY,OAAA;AAsC/D;;;;;;;;;;;AAAA,iBAAsB,gBAAA,CACpB,IAAA,UACA,QAAA,EAAU,gBAAA,EACV,SAAA,GAAY,OAAA,CAAQ,MAAA,CAAO,YAAA,EAAc,gBAAA,KACxC,OAAA"}
+{"version":3,"file":"ref.d.mts","names":[],"sources":["../src/ref.ts"],"mappings":";;AAiCA;;;;AAAwB;AAGxB;;;;;;;;;;AAQS;AAIT;;;;;;;;;;;KAfY,YAAA;AA2BJ;AAAA,UAxBS,QAAA;EA+BW;EA7B1B,GAAA;EA6BoC;EA3BpC,IAAA,EAAM,YAAY;EA2ByC;EAzB3D,EAAA;EAyB0D;EAvB1D,OAAA;AAAA;;UAIe,gBAAA,SAAyB,QAAQ;EAmBW;EAjB3D,GAAA;EAiBuF;EAfvF,GAAA;EAqBU;EAnBV,QAAA;;EAEA,QAAA;EAiBmD;EAfnD,KAAA;EA2C4B;EAzC5B,MAAA;AAAA;AAyCoD;AAkCtD;;;AAlCsD,KAlC1C,gBAAA,IAAoB,IAAA,EAAM,QAAA,OAAe,OAAA,CAAQ,GAAA,SAAY,gBAAA;;;;;KAM7D,gBAAA,IAAoB,GAAqB,EAAhB,gBAAgB;AA8D0B;AAS/E;;AAT+E,iBAlC/D,cAAA,CAAe,IAAA,WAAe,QAAQ;;;;;iBAkCtC,eAAA,CAAgB,IAAA,UAAc,OAAA;EAAY,IAAA,GAAO,YAAY;AAAA;AAqB7E;;;AAAA,iBAZgB,kBAAA,CAAmB,KAAA,YAAiB,OAAA;EAAY,IAAA,GAAO,YAAY;AAAA;;;;iBAYnE,cAAA,CAAe,IAAA,EAAM,YAAY,EAAE,EAAA,UAAY,OAAA;AAsC/D;;;;;;;;;;;AAAA,iBAAsB,gBAAA,CACpB,IAAA,UACA,QAAA,EAAU,gBAAA,EACV,SAAA,GAAY,OAAA,CAAQ,MAAA,CAAO,YAAA,EAAc,gBAAA,KACxC,OAAA"}

package/dist/ref.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"ref.mjs","names":[],"sources":["../src/ref.ts"],"sourcesContent":["/**\n * Media reference system — parse, extract, and resolve [media:type:id:variant] tags.\n *\n * Two complementary ways to reference media:\n *   1. field.media() — stores UUID directly (cover image, hero background)\n *   2. [media:type:id:variant] — inline in text/richtext prose\n *\n * Both resolve to the same Media entity.\n *\n * @example\n * ```typescript\n * import { parseMediaRefs, resolveMediaRefs, createMediaRef } from '@murumets-ee/media/ref'\n *\n * // Create a tag\n * const tag = createMediaRef('image', 'abc-123', 'thumbnail')\n * // → '[media:image:abc-123:thumbnail]'\n *\n * // Parse tags from text\n * const refs = parseMediaRefs('Here is [media:image:abc-123:hero] a photo')\n * // → [{ raw: '[media:image:abc-123:hero]', type: 'image', id: 'abc-123', variant: 'hero' }]\n *\n * // Resolve tags to HTML\n * const html = await resolveMediaRefs(text, myResolver, {\n *   image: (ref) => ref.variant === 'url' ? ref.url : `<img src=\"${ref.url}\" />`,\n * })\n * ```\n */\n\n// ---------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------\n\n/** Supported media reference types in tags */\nexport type MediaRefType = 'image' | 'video' | 'audio' | 'file'\n\n/** Parsed media reference from a [media:type:id] or [media:type:id:variant] tag */\nexport interface MediaRef {\n  /** The full original tag string */\n  raw: string\n  /** The type prefix (image, video, audio, file) */\n  type: MediaRefType\n  /** The media entity UUID */\n  id: string\n  /** Optional rendering variant hint (thumbnail, hero, url, banner, etc.) */\n  variant: string | null\n}\n\n/** Resolved media reference with URL and metadata */\nexport interface ResolvedMediaRef extends MediaRef {\n  /** Resolved URL for the media file */\n  url: string\n  /** Alt text (if available from entity) */\n  alt?: string\n  /** Original filename */\n  filename?: string\n  /** MIME type */\n  mimeType?: string\n  /** Image width */\n  width?: number\n  /** Image height */\n  height?: number\n}\n\n/**\n * Resolver function — provided by consumer to batch-resolve media IDs.\n * Receives parsed references, returns a Map of id → resolved reference.\n */\nexport type MediaRefResolver = (refs: MediaRef[]) => Promise<Map<string, ResolvedMediaRef>>\n\n/**\n * Renderer function — converts a resolved reference to a string representation.\n * Consumer provides custom renderers per type.\n */\nexport type MediaRefRenderer = (ref: ResolvedMediaRef) => string\n\n// ---------------------------------------------------------------\n// Pattern\n// ---------------------------------------------------------------\n\n/**\n * Regex pattern for media reference tags.\n *\n * Format: [media:type:uuid] or [media:type:uuid:variant]\n * - type:    image | video | audio | file\n * - uuid:    UUID v4 (36 chars with hyphens)\n * - variant: optional lowercase alphanumeric + hyphens\n *\n * Examples:\n *   [media:image:550e8400-e29b-41d4-a716-446655440000]\n *   [media:video:550e8400-e29b-41d4-a716-446655440000:thumbnail]\n *   [media:file:550e8400-e29b-41d4-a716-446655440000:download]\n */\nconst MEDIA_REF_PATTERN = /\\[media:(image|video|audio|file):([a-f0-9-]{36})(?::([a-z0-9-]+))?\\]/g\n\n// ---------------------------------------------------------------\n// Parser\n// ---------------------------------------------------------------\n\n/**\n * Parse all media reference tags from a text string.\n */\nexport function parseMediaRefs(text: string): MediaRef[] {\n  const refs: MediaRef[] = []\n\n  // Reset regex lastIndex (global flag)\n  MEDIA_REF_PATTERN.lastIndex = 0\n\n  let match = MEDIA_REF_PATTERN.exec(text)\n  while (match !== null) {\n    const [raw, type, id, variant] = match\n    // Groups 1 and 2 are required by the pattern, so this guard only narrows\n    // their types from `string | undefined` to `string`. It is not runtime\n    // defense — a non-null `match` always has both captures.\n    if (type && id) {\n      refs.push({\n        raw,\n        type: type as MediaRefType,\n        id,\n        variant: variant ?? null,\n      })\n    }\n    match = MEDIA_REF_PATTERN.exec(text)\n  }\n\n  return refs\n}\n\n// ---------------------------------------------------------------\n// Extractor\n// ---------------------------------------------------------------\n\n/**\n * Extract unique media entity UUIDs from text.\n * Useful for preloading media before rendering.\n */\nexport function extractMediaIds(text: string, options?: { type?: MediaRefType }): string[] {\n  const refs = parseMediaRefs(text)\n  const filtered = options?.type ? refs.filter((r) => r.type === options.type) : refs\n  return [...new Set(filtered.map((r) => r.id))]\n}\n\n/**\n * Extract unique media entity UUIDs from multiple text strings.\n */\nexport function extractAllMediaIds(texts: string[], options?: { type?: MediaRefType }): string[] {\n  const allIds = texts.flatMap((text) => extractMediaIds(text, options))\n  return [...new Set(allIds)]\n}\n\n// ---------------------------------------------------------------\n// Creator\n// ---------------------------------------------------------------\n\n/**\n * Create a media reference tag string.\n */\nexport function createMediaRef(type: MediaRefType, id: string, variant?: string): string {\n  return variant ? `[media:${type}:${id}:${variant}]` : `[media:${type}:${id}]`\n}\n\n// ---------------------------------------------------------------\n// Resolver\n// ---------------------------------------------------------------\n\n/** Default HTML renderers per media type */\nconst defaultRenderers: Record<MediaRefType, MediaRefRenderer> = {\n  image: (ref) => {\n    const attrs = [\n      `src=\"${ref.url}\"`,\n      `alt=\"${ref.alt ?? ref.filename ?? ''}\"`,\n      ref.width ? `width=\"${ref.width}\"` : '',\n      ref.height ? `height=\"${ref.height}\"` : '',\n    ]\n      .filter(Boolean)\n      .join(' ')\n    return `<img ${attrs} />`\n  },\n  video: (ref) => `<video src=\"${ref.url}\" controls></video>`,\n  audio: (ref) => `<audio src=\"${ref.url}\" controls></audio>`,\n  file: (ref) =>\n    `<a href=\"${ref.url}\" download=\"${ref.filename ?? ''}\">${ref.filename ?? ref.url}</a>`,\n}\n\n/**\n * Resolve all media reference tags in a text string.\n *\n * 1. Parses all [media:type:id:variant] tags\n * 2. Calls the resolver function to get URLs + metadata\n * 3. Replaces each tag with rendered output\n *\n * @param text - Input text containing media reference tags\n * @param resolver - Function that batch-resolves MediaRef[] → Map<id, ResolvedMediaRef>\n * @param renderers - Optional custom renderers per type (override defaults)\n */\nexport async function resolveMediaRefs(\n  text: string,\n  resolver: MediaRefResolver,\n  renderers?: Partial<Record<MediaRefType, MediaRefRenderer>>,\n): Promise<string> {\n  const refs = parseMediaRefs(text)\n  if (refs.length === 0) return text\n\n  // Batch-resolve all references\n  const resolvedMap = await resolver(refs)\n\n  // Replace each tag with rendered output\n  let result = text\n  for (const ref of refs) {\n    const resolved = resolvedMap.get(ref.id)\n    if (!resolved) continue\n\n    const renderer = renderers?.[ref.type] ?? defaultRenderers[ref.type]\n    if (!renderer) continue\n\n    result = result.replace(ref.raw, renderer(resolved))\n  }\n\n  return result\n}\n"],"mappings":"AA4FA,MAAM,EAAoB,wEAS1B,SAAgB,EAAe,EAA0B,CACvD,IAAM,EAAmB,EAAE,CAG3B,EAAkB,UAAY,EAE9B,IAAI,EAAQ,EAAkB,KAAK,EAAK,CACxC,KAAO,IAAU,MAAM,CACrB,GAAM,CAAC,EAAK,EAAM,EAAI,GAAW,EAI7B,GAAQ,GACV,EAAK,KAAK,CACR,MACM,OACN,KACA,QAAS,GAAW,KACrB,CAAC,CAEJ,EAAQ,EAAkB,KAAK,EAAK,CAGtC,OAAO,EAWT,SAAgB,EAAgB,EAAc,EAA6C,CACzF,IAAM,EAAO,EAAe,EAAK,CAC3B,EAAW,GAAS,KAAO,EAAK,OAAQ,GAAM,EAAE,OAAS,EAAQ,KAAK,CAAG,EAC/E,MAAO,CAAC,GAAG,IAAI,IAAI,EAAS,IAAK,GAAM,EAAE,GAAG,CAAC,CAAC,CAMhD,SAAgB,EAAmB,EAAiB,EAA6C,CAC/F,IAAM,EAAS,EAAM,QAAS,GAAS,EAAgB,EAAM,EAAQ,CAAC,CACtE,MAAO,CAAC,GAAG,IAAI,IAAI,EAAO,CAAC,CAU7B,SAAgB,EAAe,EAAoB,EAAY,EAA0B,CACvF,OAAO,EAAU,UAAU,EAAK,GAAG,EAAG,GAAG,EAAQ,GAAK,UAAU,EAAK,GAAG,EAAG,GAQ7E,MAAM,EAA2D,CAC/D,MAAQ,GASC,QARO,CACZ,QAAQ,EAAI,IAAI,GAChB,QAAQ,EAAI,KAAO,EAAI,UAAY,GAAG,GACtC,EAAI,MAAQ,UAAU,EAAI,MAAM,GAAK,GACrC,EAAI,OAAS,WAAW,EAAI,OAAO,GAAK,GACzC,CACE,OAAO,QAAQ,CACf,KAAK,IACY,CAAC,KAEvB,MAAQ,GAAQ,eAAe,EAAI,IAAI,qBACvC,MAAQ,GAAQ,eAAe,EAAI,IAAI,qBACvC,KAAO,GACL,YAAY,EAAI,IAAI,cAAc,EAAI,UAAY,GAAG,IAAI,EAAI,UAAY,EAAI,IAAI,MACpF,CAaD,eAAsB,EACpB,EACA,EACA,EACiB,CACjB,IAAM,EAAO,EAAe,EAAK,CACjC,GAAI,EAAK,SAAW,EAAG,OAAO,EAG9B,IAAM,EAAc,MAAM,EAAS,EAAK,CAGpC,EAAS,EACb,IAAK,IAAM,KAAO,EAAM,CACtB,IAAM,EAAW,EAAY,IAAI,EAAI,GAAG,CACxC,GAAI,CAAC,EAAU,SAEf,IAAM,EAAW,IAAY,EAAI,OAAS,EAAiB,EAAI,MAC1D,IAEL,EAAS,EAAO,QAAQ,EAAI,IAAK,EAAS,EAAS,CAAC,EAGtD,OAAO"}
+{"version":3,"file":"ref.mjs","names":[],"sources":["../src/ref.ts"],"sourcesContent":["/**\n * Media reference system — parse, extract, and resolve [media:type:id:variant] tags.\n *\n * Two complementary ways to reference media:\n *   1. field.media() — stores UUID directly (cover image, hero background)\n *   2. [media:type:id:variant] — inline in text/richtext prose\n *\n * Both resolve to the same Media entity.\n *\n * @example\n * ```typescript\n * import { parseMediaRefs, resolveMediaRefs, createMediaRef } from '@murumets-ee/media/ref'\n *\n * // Create a tag\n * const tag = createMediaRef('image', 'abc-123', 'thumbnail')\n * // → '[media:image:abc-123:thumbnail]'\n *\n * // Parse tags from text\n * const refs = parseMediaRefs('Here is [media:image:abc-123:hero] a photo')\n * // → [{ raw: '[media:image:abc-123:hero]', type: 'image', id: 'abc-123', variant: 'hero' }]\n *\n * // Resolve tags to HTML\n * const html = await resolveMediaRefs(text, myResolver, {\n *   image: (ref) => ref.variant === 'url' ? ref.url : `<img src=\"${ref.url}\" />`,\n * })\n * ```\n */\n\n// ---------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------\n\n/** Supported media reference types in tags */\nexport type MediaRefType = 'image' | 'video' | 'audio' | 'file'\n\n/** Parsed media reference from a [media:type:id] or [media:type:id:variant] tag */\nexport interface MediaRef {\n  /** The full original tag string */\n  raw: string\n  /** The type prefix (image, video, audio, file) */\n  type: MediaRefType\n  /** The media entity UUID */\n  id: string\n  /** Optional rendering variant hint (thumbnail, hero, url, banner, etc.) */\n  variant: string | null\n}\n\n/** Resolved media reference with URL and metadata */\nexport interface ResolvedMediaRef extends MediaRef {\n  /** Resolved URL for the media file */\n  url: string\n  /** Alt text (if available from entity) */\n  alt?: string\n  /** Original filename */\n  filename?: string\n  /** MIME type */\n  mimeType?: string\n  /** Image width */\n  width?: number\n  /** Image height */\n  height?: number\n}\n\n/**\n * Resolver function — provided by consumer to batch-resolve media IDs.\n * Receives parsed references, returns a Map of id → resolved reference.\n */\nexport type MediaRefResolver = (refs: MediaRef[]) => Promise<Map<string, ResolvedMediaRef>>\n\n/**\n * Renderer function — converts a resolved reference to a string representation.\n * Consumer provides custom renderers per type.\n */\nexport type MediaRefRenderer = (ref: ResolvedMediaRef) => string\n\n// ---------------------------------------------------------------\n// Pattern\n// ---------------------------------------------------------------\n\n/**\n * Regex pattern for media reference tags.\n *\n * Format: [media:type:uuid] or [media:type:uuid:variant]\n * - type:    image | video | audio | file\n * - uuid:    UUID v4 (36 chars with hyphens)\n * - variant: optional lowercase alphanumeric + hyphens\n *\n * Examples:\n *   [media:image:550e8400-e29b-41d4-a716-446655440000]\n *   [media:video:550e8400-e29b-41d4-a716-446655440000:thumbnail]\n *   [media:file:550e8400-e29b-41d4-a716-446655440000:download]\n */\nconst MEDIA_REF_PATTERN = /\\[media:(image|video|audio|file):([a-f0-9-]{36})(?::([a-z0-9-]+))?\\]/g\n\n// ---------------------------------------------------------------\n// Parser\n// ---------------------------------------------------------------\n\n/**\n * Parse all media reference tags from a text string.\n */\nexport function parseMediaRefs(text: string): MediaRef[] {\n  const refs: MediaRef[] = []\n\n  // Reset regex lastIndex (global flag)\n  MEDIA_REF_PATTERN.lastIndex = 0\n\n  let match = MEDIA_REF_PATTERN.exec(text)\n  while (match !== null) {\n    const [raw, type, id, variant] = match\n    // Groups 1 and 2 are required by the pattern, so this guard only narrows\n    // their types from `string | undefined` to `string`. It is not runtime\n    // defense — a non-null `match` always has both captures.\n    if (type && id) {\n      refs.push({\n        raw,\n        type: type as MediaRefType,\n        id,\n        variant: variant ?? null,\n      })\n    }\n    match = MEDIA_REF_PATTERN.exec(text)\n  }\n\n  return refs\n}\n\n// ---------------------------------------------------------------\n// Extractor\n// ---------------------------------------------------------------\n\n/**\n * Extract unique media entity UUIDs from text.\n * Useful for preloading media before rendering.\n */\nexport function extractMediaIds(text: string, options?: { type?: MediaRefType }): string[] {\n  const refs = parseMediaRefs(text)\n  const filtered = options?.type ? refs.filter((r) => r.type === options.type) : refs\n  return [...new Set(filtered.map((r) => r.id))]\n}\n\n/**\n * Extract unique media entity UUIDs from multiple text strings.\n */\nexport function extractAllMediaIds(texts: string[], options?: { type?: MediaRefType }): string[] {\n  const allIds = texts.flatMap((text) => extractMediaIds(text, options))\n  return [...new Set(allIds)]\n}\n\n// ---------------------------------------------------------------\n// Creator\n// ---------------------------------------------------------------\n\n/**\n * Create a media reference tag string.\n */\nexport function createMediaRef(type: MediaRefType, id: string, variant?: string): string {\n  return variant ? `[media:${type}:${id}:${variant}]` : `[media:${type}:${id}]`\n}\n\n// ---------------------------------------------------------------\n// Resolver\n// ---------------------------------------------------------------\n\n/** Default HTML renderers per media type */\nconst defaultRenderers: Record<MediaRefType, MediaRefRenderer> = {\n  image: (ref) => {\n    const attrs = [\n      `src=\"${ref.url}\"`,\n      `alt=\"${ref.alt ?? ref.filename ?? ''}\"`,\n      ref.width ? `width=\"${ref.width}\"` : '',\n      ref.height ? `height=\"${ref.height}\"` : '',\n    ]\n      .filter(Boolean)\n      .join(' ')\n    return `<img ${attrs} />`\n  },\n  video: (ref) => `<video src=\"${ref.url}\" controls></video>`,\n  audio: (ref) => `<audio src=\"${ref.url}\" controls></audio>`,\n  file: (ref) =>\n    `<a href=\"${ref.url}\" download=\"${ref.filename ?? ''}\">${ref.filename ?? ref.url}</a>`,\n}\n\n/**\n * Resolve all media reference tags in a text string.\n *\n * 1. Parses all [media:type:id:variant] tags\n * 2. Calls the resolver function to get URLs + metadata\n * 3. Replaces each tag with rendered output\n *\n * @param text - Input text containing media reference tags\n * @param resolver - Function that batch-resolves MediaRef[] → Map<id, ResolvedMediaRef>\n * @param renderers - Optional custom renderers per type (override defaults)\n */\nexport async function resolveMediaRefs(\n  text: string,\n  resolver: MediaRefResolver,\n  renderers?: Partial<Record<MediaRefType, MediaRefRenderer>>,\n): Promise<string> {\n  const refs = parseMediaRefs(text)\n  if (refs.length === 0) return text\n\n  // Batch-resolve all references\n  const resolvedMap = await resolver(refs)\n\n  // Replace each tag with rendered output\n  let result = text\n  for (const ref of refs) {\n    const resolved = resolvedMap.get(ref.id)\n    if (!resolved) continue\n\n    const renderer = renderers?.[ref.type] ?? defaultRenderers[ref.type]\n    if (!renderer) continue\n\n    result = result.replace(ref.raw, renderer(resolved))\n  }\n\n  return result\n}\n"],"mappings":"AA4FA,MAAM,EAAoB,wEAS1B,SAAgB,EAAe,EAA0B,CACvD,IAAM,EAAmB,CAAC,EAG1B,EAAkB,UAAY,EAE9B,IAAI,EAAQ,EAAkB,KAAK,CAAI,EACvC,KAAO,IAAU,MAAM,CACrB,GAAM,CAAC,EAAK,EAAM,EAAI,GAAW,EAI7B,GAAQ,GACV,EAAK,KAAK,CACR,MACM,OACN,KACA,QAAS,GAAW,IACtB,CAAC,EAEH,EAAQ,EAAkB,KAAK,CAAI,CACrC,CAEA,OAAO,CACT,CAUA,SAAgB,EAAgB,EAAc,EAA6C,CACzF,IAAM,EAAO,EAAe,CAAI,EAC1B,EAAW,GAAS,KAAO,EAAK,OAAQ,GAAM,EAAE,OAAS,EAAQ,IAAI,EAAI,EAC/E,MAAO,CAAC,GAAG,IAAI,IAAI,EAAS,IAAK,GAAM,EAAE,EAAE,CAAC,CAAC,CAC/C,CAKA,SAAgB,EAAmB,EAAiB,EAA6C,CAC/F,IAAM,EAAS,EAAM,QAAS,GAAS,EAAgB,EAAM,CAAO,CAAC,EACrE,MAAO,CAAC,GAAG,IAAI,IAAI,CAAM,CAAC,CAC5B,CASA,SAAgB,EAAe,EAAoB,EAAY,EAA0B,CACvF,OAAO,EAAU,UAAU,EAAK,GAAG,EAAG,GAAG,EAAQ,GAAK,UAAU,EAAK,GAAG,EAAG,EAC7E,CAOA,MAAM,EAA2D,CAC/D,MAAQ,GASC,QARO,CACZ,QAAQ,EAAI,IAAI,GAChB,QAAQ,EAAI,KAAO,EAAI,UAAY,GAAG,GACtC,EAAI,MAAQ,UAAU,EAAI,MAAM,GAAK,GACrC,EAAI,OAAS,WAAW,EAAI,OAAO,GAAK,EAC1C,CAAC,CACE,OAAO,OAAO,CAAC,CACf,KAAK,GACW,EAAE,KAEvB,MAAQ,GAAQ,eAAe,EAAI,IAAI,qBACvC,MAAQ,GAAQ,eAAe,EAAI,IAAI,qBACvC,KAAO,GACL,YAAY,EAAI,IAAI,cAAc,EAAI,UAAY,GAAG,IAAI,EAAI,UAAY,EAAI,IAAI,KACrF,EAaA,eAAsB,EACpB,EACA,EACA,EACiB,CACjB,IAAM,EAAO,EAAe,CAAI,EAChC,GAAI,EAAK,SAAW,EAAG,OAAO,EAG9B,IAAM,EAAc,MAAM,EAAS,CAAI,EAGnC,EAAS,EACb,IAAK,IAAM,KAAO,EAAM,CACtB,IAAM,EAAW,EAAY,IAAI,EAAI,EAAE,EACvC,GAAI,CAAC,EAAU,SAEf,IAAM,EAAW,IAAY,EAAI,OAAS,EAAiB,EAAI,MAC1D,IAEL,EAAS,EAAO,QAAQ,EAAI,IAAK,EAAS,CAAQ,CAAC,EACrD,CAEA,OAAO,CACT"}

package/dist/{regenerate-variants-DtA5pKjj.mjs → regenerate-variants-BysyeIoA.mjs}

@@ -1,2 +1,2 @@
-import{n as e,r as t,t as n}from"./variant-key-CFr3fR-n.mjs";import"server-only";async function r(r){let{app:i,storage:a,logger:o,styles:s}=r,c=i.db.readWrite,{AdminClient:l}=await import(`@murumets-ee/entity/admin`),{Media:u}=await import(`./entity-B75A4L3p.mjs`),{schemaRegistry:d}=await import(`@murumets-ee/db`),{eq:f}=await import(`drizzle-orm`),p=new l({entity:u,db:c,logger:o,contextResolver:r.contextResolver}),m=d.get(`media`);if(!m)throw Error(`Media schema not registered`);let h={total:0,processed:0,skipped:0,errors:0},g=0;for(o?.info({styles:Object.keys(s)},`Starting variant regeneration`);;){let r=await p.findMany({where:f(m.mediaType,`image`),limit:100,offset:g});if(r.length===0)break;h.total+=r.length;for(let i of r)try{if(!e(i.mimeType)){h.skipped++;continue}let r=await a.download(i.fileKey),c;if(Buffer.isBuffer(r.body))c=r.body;else{let e=[],t=r.body.getReader();for(;;){let{done:n,value:r}=await t.read();if(n)break;r&&e.push(r)}c=Buffer.concat(e)}let l=await t(c,s),u=await a.getMetadata(i.fileKey),d=u?.metadata?.variants;d&&await Promise.all(Object.values(d).map(e=>a.delete(e).catch(()=>{})));let f={},p=u?.visibility??`public`,m=await Promise.all([...l.variants].map(async([e,t])=>{let r=n(i.fileKey,e,t.format);try{return await a.upload(t.buffer,{key:r,filename:`${e}_${i.filename}`,mimeType:t.mimeType,size:t.buffer.byteLength,visibility:p,metadata:{variantOf:i.fileKey,style:e}}),{styleName:e,vKey:r,ok:!0}}catch(t){return o?.warn({style:e,key:r,error:t},`Failed to upload regenerated variant (non-fatal)`),{styleName:e,vKey:r,ok:!1}}}));for(let e of m)e.ok&&(f[e.styleName]=e.vKey);Object.keys(f).length>0&&await a.updateMetadata(i.fileKey,{metadata:{...u?.metadata??{},variants:f}}).catch(e=>{o?.warn({key:i.fileKey,error:e},`Failed to update variant metadata (non-fatal)`)}),h.processed++,o?.debug({id:i.id,variants:Object.keys(f)},`Regenerated variants`)}catch(e){h.errors++,o?.error({id:i.id,fileKey:i.fileKey,error:e},`Failed to regenerate variants for media record`)}if(g+=100,r.length<100)break}return o?.info(h,`Variant regeneration complete`),h}export{r as regenerateAllVariants};
-//# sourceMappingURL=regenerate-variants-DtA5pKjj.mjs.map
+import{n as e,r as t,t as n}from"./variant-key-CLlac3_1.mjs";import"server-only";async function r(r){let{app:i,storage:a,logger:o,styles:s}=r,c=i.db.readWrite,{AdminClient:l}=await import(`@murumets-ee/entity/admin`),{Media:u}=await import(`./entity-Caba_NFw.mjs`),{schemaRegistry:d}=await import(`@murumets-ee/db`),{eq:f}=await import(`drizzle-orm`),p=new l({entity:u,db:c,logger:o,contextResolver:r.contextResolver}),m=d.get(`media`);if(!m)throw Error(`Media schema not registered`);let h={total:0,processed:0,skipped:0,errors:0},g=0;for(o?.info({styles:Object.keys(s)},`Starting variant regeneration`);;){let r=await p.findMany({where:f(m.mediaType,`image`),limit:100,offset:g});if(r.length===0)break;h.total+=r.length;for(let i of r)try{if(!e(i.mimeType)){h.skipped++;continue}let r=await a.download(i.fileKey),c;if(Buffer.isBuffer(r.body))c=r.body;else{let e=[],t=r.body.getReader();for(;;){let{done:n,value:r}=await t.read();if(n)break;r&&e.push(r)}c=Buffer.concat(e)}let l=await t(c,s),u=await a.getMetadata(i.fileKey),d=u?.metadata?.variants;d&&await Promise.all(Object.values(d).map(e=>a.delete(e).catch(()=>{})));let f={},p=u?.visibility??`public`,m=await Promise.all([...l.variants].map(async([e,t])=>{let r=n(i.fileKey,e,t.format);try{return await a.upload(t.buffer,{key:r,filename:`${e}_${i.filename}`,mimeType:t.mimeType,size:t.buffer.byteLength,visibility:p,metadata:{variantOf:i.fileKey,style:e}}),{styleName:e,vKey:r,ok:!0}}catch(t){return o?.warn({style:e,key:r,error:t},`Failed to upload regenerated variant (non-fatal)`),{styleName:e,vKey:r,ok:!1}}}));for(let e of m)e.ok&&(f[e.styleName]=e.vKey);Object.keys(f).length>0&&await a.updateMetadata(i.fileKey,{metadata:{...u?.metadata??{},variants:f}}).catch(e=>{o?.warn({key:i.fileKey,error:e},`Failed to update variant metadata (non-fatal)`)}),h.processed++,o?.debug({id:i.id,variants:Object.keys(f)},`Regenerated variants`)}catch(e){h.errors++,o?.error({id:i.id,fileKey:i.fileKey,error:e},`Failed to regenerate variants for media record`)}if(g+=100,r.length<100)break}return o?.info(h,`Variant regeneration complete`),h}export{r as regenerateAllVariants};
+//# sourceMappingURL=regenerate-variants-BysyeIoA.mjs.map

package/dist/{regenerate-variants-DtA5pKjj.mjs.map → regenerate-variants-BysyeIoA.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"regenerate-variants-DtA5pKjj.mjs","names":[],"sources":["../src/regenerate-variants.ts"],"sourcesContent":["/**\n * Batch variant regeneration — reprocesses all image media with updated styles.\n *\n * Downloads each original from storage, generates new variants via Sharp,\n * cleans up old variant files, and uploads new ones.\n *\n * Per-image errors are logged but don't stop the batch.\n */\n\nimport 'server-only'\n\nimport type { Logger, ToolkitApp } from '@murumets-ee/core'\nimport type { ContextResolver } from '@murumets-ee/entity'\nimport type { StorageClient } from '@murumets-ee/storage'\nimport { isProcessableImage, processImage } from './process-image.js'\nimport type { ImageStyle } from './types.js'\nimport { deriveVariantKey } from './variant-key.js'\n\nconst BATCH_SIZE = 100\n\nexport interface RegenerateOptions {\n  /** Toolkit app (provides db). */\n  app: ToolkitApp\n  storage: StorageClient\n  logger?: Logger\n  /** Current image styles to generate */\n  styles: Record<string, ImageStyle>\n  /** Security context resolver — passed through to AdminClient. */\n  contextResolver?: ContextResolver\n}\n\nexport interface RegenerateResult {\n  /** Total image media records found */\n  total: number\n  /** Successfully reprocessed */\n  processed: number\n  /** Skipped (non-processable mimeType, download failed, etc.) */\n  skipped: number\n  /** Failed with errors */\n  errors: number\n}\n\n/**\n * Regenerate variants for all image media.\n * Processes in batches of 100 to avoid memory pressure.\n */\nexport async function regenerateAllVariants(options: RegenerateOptions): Promise<RegenerateResult> {\n  const { app, storage, logger, styles } = options\n  const db = app.db.readWrite\n  const { AdminClient } = await import('@murumets-ee/entity/admin')\n  const { Media } = await import('./entity.js')\n  const { schemaRegistry } = await import('@murumets-ee/db')\n  const { eq } = await import('drizzle-orm')\n\n  const admin = new AdminClient<typeof Media.allFields>({\n    entity: Media,\n    db,\n    logger,\n    contextResolver: options.contextResolver,\n  })\n  const table = schemaRegistry.get('media')\n  if (!table) throw new Error('Media schema not registered')\n\n  const result: RegenerateResult = { total: 0, processed: 0, skipped: 0, errors: 0 }\n  let offset = 0\n\n  logger?.info({ styles: Object.keys(styles) }, 'Starting variant regeneration')\n\n  // Process in batches\n  while (true) {\n    const batch = await admin.findMany({\n      where: eq(table.mediaType, 'image'),\n      limit: BATCH_SIZE,\n      offset,\n    })\n\n    if (batch.length === 0) break\n    result.total += batch.length\n\n    for (const record of batch) {\n      try {\n        // Skip non-processable images (SVG, GIF)\n        if (!isProcessableImage(record.mimeType)) {\n          result.skipped++\n          continue\n        }\n\n        // Download original from storage\n        const downloaded = await storage.download(record.fileKey)\n        let buffer: Buffer\n        if (Buffer.isBuffer(downloaded.body)) {\n          buffer = downloaded.body\n        } else {\n          // ReadableStream → Buffer\n          const chunks: Uint8Array[] = []\n          const reader = downloaded.body.getReader()\n          while (true) {\n            const { done, value } = await reader.read()\n            if (done) break\n            if (value) chunks.push(value)\n          }\n          buffer = Buffer.concat(chunks)\n        }\n\n        // Generate new variants\n        const processed = await processImage(buffer, styles)\n\n        // Delete old variant files (best-effort, parallel)\n        const oldFileRecord = await storage.getMetadata(record.fileKey)\n        const oldVariants = (oldFileRecord?.metadata as Record<string, unknown> | null)?.variants as\n          | Record<string, string>\n          | undefined\n        if (oldVariants) {\n          await Promise.all(\n            Object.values(oldVariants).map((vKey) => storage.delete(vKey).catch(() => {})),\n          )\n        }\n\n        // Upload new variants (parallel)\n        const newVariantKeys: Record<string, string> = {}\n        const visibility = oldFileRecord?.visibility ?? 'public'\n        const uploadResults = await Promise.all(\n          [...processed.variants].map(async ([styleName, variant]) => {\n            const vKey = deriveVariantKey(record.fileKey, styleName, variant.format)\n            try {\n              await storage.upload(variant.buffer, {\n                key: vKey,\n                filename: `${styleName}_${record.filename}`,\n                mimeType: variant.mimeType,\n                size: variant.buffer.byteLength,\n                visibility,\n                metadata: { variantOf: record.fileKey, style: styleName },\n              })\n              return { styleName, vKey, ok: true as const }\n            } catch (uploadErr) {\n              logger?.warn(\n                { style: styleName, key: vKey, error: uploadErr },\n                'Failed to upload regenerated variant (non-fatal)',\n              )\n              return { styleName, vKey, ok: false as const }\n            }\n          }),\n        )\n        for (const r of uploadResults) {\n          if (r.ok) newVariantKeys[r.styleName] = r.vKey\n        }\n\n        // Update original file's metadata with new variant keys\n        if (Object.keys(newVariantKeys).length > 0) {\n          await storage\n            .updateMetadata(record.fileKey, {\n              metadata: {\n                ...(oldFileRecord?.metadata ?? {}),\n                variants: newVariantKeys,\n              },\n            })\n            .catch((metaErr: unknown) => {\n              logger?.warn(\n                { key: record.fileKey, error: metaErr },\n                'Failed to update variant metadata (non-fatal)',\n              )\n            })\n        }\n\n        result.processed++\n        logger?.debug(\n          { id: record.id, variants: Object.keys(newVariantKeys) },\n          'Regenerated variants',\n        )\n      } catch (err) {\n        result.errors++\n        logger?.error(\n          { id: record.id, fileKey: record.fileKey, error: err },\n          'Failed to regenerate variants for media record',\n        )\n      }\n    }\n\n    offset += BATCH_SIZE\n    if (batch.length < BATCH_SIZE) break\n  }\n\n  logger?.info(result, 'Variant regeneration complete')\n  return result\n}\n"],"mappings":"iFA8CA,eAAsB,EAAsB,EAAuD,CACjG,GAAM,CAAE,MAAK,UAAS,SAAQ,UAAW,EACnC,EAAK,EAAI,GAAG,UACZ,CAAE,eAAgB,MAAM,OAAO,6BAC/B,CAAE,SAAU,MAAM,OAAO,yBACzB,CAAE,kBAAmB,MAAM,OAAO,mBAClC,CAAE,MAAO,MAAM,OAAO,eAEtB,EAAQ,IAAI,EAAoC,CACpD,OAAQ,EACR,KACA,SACA,gBAAiB,EAAQ,gBAC1B,CAAC,CACI,EAAQ,EAAe,IAAI,QAAQ,CACzC,GAAI,CAAC,EAAO,MAAU,MAAM,8BAA8B,CAE1D,IAAM,EAA2B,CAAE,MAAO,EAAG,UAAW,EAAG,QAAS,EAAG,OAAQ,EAAG,CAC9E,EAAS,EAKb,IAHA,GAAQ,KAAK,CAAE,OAAQ,OAAO,KAAK,EAAO,CAAE,CAAE,gCAAgC,GAGjE,CACX,IAAM,EAAQ,MAAM,EAAM,SAAS,CACjC,MAAO,EAAG,EAAM,UAAW,QAAQ,CACnC,MAAO,IACP,SACD,CAAC,CAEF,GAAI,EAAM,SAAW,EAAG,MACxB,EAAO,OAAS,EAAM,OAEtB,IAAK,IAAM,KAAU,EACnB,GAAI,CAEF,GAAI,CAAC,EAAmB,EAAO,SAAS,CAAE,CACxC,EAAO,UACP,SAIF,IAAM,EAAa,MAAM,EAAQ,SAAS,EAAO,QAAQ,CACrD,EACJ,GAAI,OAAO,SAAS,EAAW,KAAK,CAClC,EAAS,EAAW,SACf,CAEL,IAAM,EAAuB,EAAE,CACzB,EAAS,EAAW,KAAK,WAAW,CAC1C,OAAa,CACX,GAAM,CAAE,OAAM,SAAU,MAAM,EAAO,MAAM,CAC3C,GAAI,EAAM,MACN,GAAO,EAAO,KAAK,EAAM,CAE/B,EAAS,OAAO,OAAO,EAAO,CAIhC,IAAM,EAAY,MAAM,EAAa,EAAQ,EAAO,CAG9C,EAAgB,MAAM,EAAQ,YAAY,EAAO,QAAQ,CACzD,EAAe,GAAe,UAA6C,SAG7E,GACF,MAAM,QAAQ,IACZ,OAAO,OAAO,EAAY,CAAC,IAAK,GAAS,EAAQ,OAAO,EAAK,CAAC,UAAY,GAAG,CAAC,CAC/E,CAIH,IAAM,EAAyC,EAAE,CAC3C,EAAa,GAAe,YAAc,SAC1C,EAAgB,MAAM,QAAQ,IAClC,CAAC,GAAG,EAAU,SAAS,CAAC,IAAI,MAAO,CAAC,EAAW,KAAa,CAC1D,IAAM,EAAO,EAAiB,EAAO,QAAS,EAAW,EAAQ,OAAO,CACxE,GAAI,CASF,OARA,MAAM,EAAQ,OAAO,EAAQ,OAAQ,CACnC,IAAK,EACL,SAAU,GAAG,EAAU,GAAG,EAAO,WACjC,SAAU,EAAQ,SAClB,KAAM,EAAQ,OAAO,WACrB,aACA,SAAU,CAAE,UAAW,EAAO,QAAS,MAAO,EAAW,CAC1D,CAAC,CACK,CAAE,YAAW,OAAM,GAAI,GAAe,OACtC,EAAW,CAKlB,OAJA,GAAQ,KACN,CAAE,MAAO,EAAW,IAAK,EAAM,MAAO,EAAW,CACjD,mDACD,CACM,CAAE,YAAW,OAAM,GAAI,GAAgB,GAEhD,CACH,CACD,IAAK,IAAM,KAAK,EACV,EAAE,KAAI,EAAe,EAAE,WAAa,EAAE,MAIxC,OAAO,KAAK,EAAe,CAAC,OAAS,GACvC,MAAM,EACH,eAAe,EAAO,QAAS,CAC9B,SAAU,CACR,GAAI,GAAe,UAAY,EAAE,CACjC,SAAU,EACX,CACF,CAAC,CACD,MAAO,GAAqB,CAC3B,GAAQ,KACN,CAAE,IAAK,EAAO,QAAS,MAAO,EAAS,CACvC,gDACD,EACD,CAGN,EAAO,YACP,GAAQ,MACN,CAAE,GAAI,EAAO,GAAI,SAAU,OAAO,KAAK,EAAe,CAAE,CACxD,uBACD,OACM,EAAK,CACZ,EAAO,SACP,GAAQ,MACN,CAAE,GAAI,EAAO,GAAI,QAAS,EAAO,QAAS,MAAO,EAAK,CACtD,iDACD,CAKL,GADA,GAAU,IACN,EAAM,OAAS,IAAY,MAIjC,OADA,GAAQ,KAAK,EAAQ,gCAAgC,CAC9C"}
+{"version":3,"file":"regenerate-variants-BysyeIoA.mjs","names":[],"sources":["../src/regenerate-variants.ts"],"sourcesContent":["/**\n * Batch variant regeneration — reprocesses all image media with updated styles.\n *\n * Downloads each original from storage, generates new variants via Sharp,\n * cleans up old variant files, and uploads new ones.\n *\n * Per-image errors are logged but don't stop the batch.\n */\n\nimport 'server-only'\n\nimport type { Logger, ToolkitApp } from '@murumets-ee/core'\nimport type { ContextResolver } from '@murumets-ee/entity'\nimport type { StorageClient } from '@murumets-ee/storage'\nimport { isProcessableImage, processImage } from './process-image.js'\nimport type { ImageStyle } from './types.js'\nimport { deriveVariantKey } from './variant-key.js'\n\nconst BATCH_SIZE = 100\n\nexport interface RegenerateOptions {\n  /** Toolkit app (provides db). */\n  app: ToolkitApp\n  storage: StorageClient\n  logger?: Logger\n  /** Current image styles to generate */\n  styles: Record<string, ImageStyle>\n  /** Security context resolver — passed through to AdminClient. */\n  contextResolver?: ContextResolver\n}\n\nexport interface RegenerateResult {\n  /** Total image media records found */\n  total: number\n  /** Successfully reprocessed */\n  processed: number\n  /** Skipped (non-processable mimeType, download failed, etc.) */\n  skipped: number\n  /** Failed with errors */\n  errors: number\n}\n\n/**\n * Regenerate variants for all image media.\n * Processes in batches of 100 to avoid memory pressure.\n */\nexport async function regenerateAllVariants(options: RegenerateOptions): Promise<RegenerateResult> {\n  const { app, storage, logger, styles } = options\n  const db = app.db.readWrite\n  const { AdminClient } = await import('@murumets-ee/entity/admin')\n  const { Media } = await import('./entity.js')\n  const { schemaRegistry } = await import('@murumets-ee/db')\n  const { eq } = await import('drizzle-orm')\n\n  const admin = new AdminClient<typeof Media.allFields>({\n    entity: Media,\n    db,\n    logger,\n    contextResolver: options.contextResolver,\n  })\n  const table = schemaRegistry.get('media')\n  if (!table) throw new Error('Media schema not registered')\n\n  const result: RegenerateResult = { total: 0, processed: 0, skipped: 0, errors: 0 }\n  let offset = 0\n\n  logger?.info({ styles: Object.keys(styles) }, 'Starting variant regeneration')\n\n  // Process in batches\n  while (true) {\n    const batch = await admin.findMany({\n      where: eq(table.mediaType, 'image'),\n      limit: BATCH_SIZE,\n      offset,\n    })\n\n    if (batch.length === 0) break\n    result.total += batch.length\n\n    for (const record of batch) {\n      try {\n        // Skip non-processable images (SVG, GIF)\n        if (!isProcessableImage(record.mimeType)) {\n          result.skipped++\n          continue\n        }\n\n        // Download original from storage\n        const downloaded = await storage.download(record.fileKey)\n        let buffer: Buffer\n        if (Buffer.isBuffer(downloaded.body)) {\n          buffer = downloaded.body\n        } else {\n          // ReadableStream → Buffer\n          const chunks: Uint8Array[] = []\n          const reader = downloaded.body.getReader()\n          while (true) {\n            const { done, value } = await reader.read()\n            if (done) break\n            if (value) chunks.push(value)\n          }\n          buffer = Buffer.concat(chunks)\n        }\n\n        // Generate new variants\n        const processed = await processImage(buffer, styles)\n\n        // Delete old variant files (best-effort, parallel)\n        const oldFileRecord = await storage.getMetadata(record.fileKey)\n        const oldVariants = (oldFileRecord?.metadata as Record<string, unknown> | null)?.variants as\n          | Record<string, string>\n          | undefined\n        if (oldVariants) {\n          await Promise.all(\n            Object.values(oldVariants).map((vKey) => storage.delete(vKey).catch(() => {})),\n          )\n        }\n\n        // Upload new variants (parallel)\n        const newVariantKeys: Record<string, string> = {}\n        const visibility = oldFileRecord?.visibility ?? 'public'\n        const uploadResults = await Promise.all(\n          [...processed.variants].map(async ([styleName, variant]) => {\n            const vKey = deriveVariantKey(record.fileKey, styleName, variant.format)\n            try {\n              await storage.upload(variant.buffer, {\n                key: vKey,\n                filename: `${styleName}_${record.filename}`,\n                mimeType: variant.mimeType,\n                size: variant.buffer.byteLength,\n                visibility,\n                metadata: { variantOf: record.fileKey, style: styleName },\n              })\n              return { styleName, vKey, ok: true as const }\n            } catch (uploadErr) {\n              logger?.warn(\n                { style: styleName, key: vKey, error: uploadErr },\n                'Failed to upload regenerated variant (non-fatal)',\n              )\n              return { styleName, vKey, ok: false as const }\n            }\n          }),\n        )\n        for (const r of uploadResults) {\n          if (r.ok) newVariantKeys[r.styleName] = r.vKey\n        }\n\n        // Update original file's metadata with new variant keys\n        if (Object.keys(newVariantKeys).length > 0) {\n          await storage\n            .updateMetadata(record.fileKey, {\n              metadata: {\n                ...(oldFileRecord?.metadata ?? {}),\n                variants: newVariantKeys,\n              },\n            })\n            .catch((metaErr: unknown) => {\n              logger?.warn(\n                { key: record.fileKey, error: metaErr },\n                'Failed to update variant metadata (non-fatal)',\n              )\n            })\n        }\n\n        result.processed++\n        logger?.debug(\n          { id: record.id, variants: Object.keys(newVariantKeys) },\n          'Regenerated variants',\n        )\n      } catch (err) {\n        result.errors++\n        logger?.error(\n          { id: record.id, fileKey: record.fileKey, error: err },\n          'Failed to regenerate variants for media record',\n        )\n      }\n    }\n\n    offset += BATCH_SIZE\n    if (batch.length < BATCH_SIZE) break\n  }\n\n  logger?.info(result, 'Variant regeneration complete')\n  return result\n}\n"],"mappings":"iFA8CA,eAAsB,EAAsB,EAAuD,CACjG,GAAM,CAAE,MAAK,UAAS,SAAQ,UAAW,EACnC,EAAK,EAAI,GAAG,UACZ,CAAE,eAAgB,MAAM,OAAO,6BAC/B,CAAE,SAAU,MAAM,OAAO,yBACzB,CAAE,kBAAmB,MAAM,OAAO,mBAClC,CAAE,MAAO,MAAM,OAAO,eAEtB,EAAQ,IAAI,EAAoC,CACpD,OAAQ,EACR,KACA,SACA,gBAAiB,EAAQ,eAC3B,CAAC,EACK,EAAQ,EAAe,IAAI,OAAO,EACxC,GAAI,CAAC,EAAO,MAAU,MAAM,6BAA6B,EAEzD,IAAM,EAA2B,CAAE,MAAO,EAAG,UAAW,EAAG,QAAS,EAAG,OAAQ,CAAE,EAC7E,EAAS,EAKb,IAHA,GAAQ,KAAK,CAAE,OAAQ,OAAO,KAAK,CAAM,CAAE,EAAG,+BAA+B,IAGhE,CACX,IAAM,EAAQ,MAAM,EAAM,SAAS,CACjC,MAAO,EAAG,EAAM,UAAW,OAAO,EAClC,MAAO,IACP,QACF,CAAC,EAED,GAAI,EAAM,SAAW,EAAG,MACxB,EAAO,OAAS,EAAM,OAEtB,IAAK,IAAM,KAAU,EACnB,GAAI,CAEF,GAAI,CAAC,EAAmB,EAAO,QAAQ,EAAG,CACxC,EAAO,UACP,QACF,CAGA,IAAM,EAAa,MAAM,EAAQ,SAAS,EAAO,OAAO,EACpD,EACJ,GAAI,OAAO,SAAS,EAAW,IAAI,EACjC,EAAS,EAAW,SACf,CAEL,IAAM,EAAuB,CAAC,EACxB,EAAS,EAAW,KAAK,UAAU,EACzC,OAAa,CACX,GAAM,CAAE,OAAM,SAAU,MAAM,EAAO,KAAK,EAC1C,GAAI,EAAM,MACN,GAAO,EAAO,KAAK,CAAK,CAC9B,CACA,EAAS,OAAO,OAAO,CAAM,CAC/B,CAGA,IAAM,EAAY,MAAM,EAAa,EAAQ,CAAM,EAG7C,EAAgB,MAAM,EAAQ,YAAY,EAAO,OAAO,EACxD,EAAe,GAAe,UAA6C,SAG7E,GACF,MAAM,QAAQ,IACZ,OAAO,OAAO,CAAW,CAAC,CAAC,IAAK,GAAS,EAAQ,OAAO,CAAI,CAAC,CAAC,UAAY,CAAC,CAAC,CAAC,CAC/E,EAIF,IAAM,EAAyC,CAAC,EAC1C,EAAa,GAAe,YAAc,SAC1C,EAAgB,MAAM,QAAQ,IAClC,CAAC,GAAG,EAAU,QAAQ,CAAC,CAAC,IAAI,MAAO,CAAC,EAAW,KAAa,CAC1D,IAAM,EAAO,EAAiB,EAAO,QAAS,EAAW,EAAQ,MAAM,EACvE,GAAI,CASF,OARA,MAAM,EAAQ,OAAO,EAAQ,OAAQ,CACnC,IAAK,EACL,SAAU,GAAG,EAAU,GAAG,EAAO,WACjC,SAAU,EAAQ,SAClB,KAAM,EAAQ,OAAO,WACrB,aACA,SAAU,CAAE,UAAW,EAAO,QAAS,MAAO,CAAU,CAC1D,CAAC,EACM,CAAE,YAAW,OAAM,GAAI,EAAc,CAC9C,OAAS,EAAW,CAKlB,OAJA,GAAQ,KACN,CAAE,MAAO,EAAW,IAAK,EAAM,MAAO,CAAU,EAChD,kDACF,EACO,CAAE,YAAW,OAAM,GAAI,EAAe,CAC/C,CACF,CAAC,CACH,EACA,IAAK,IAAM,KAAK,EACV,EAAE,KAAI,EAAe,EAAE,WAAa,EAAE,MAIxC,OAAO,KAAK,CAAc,CAAC,CAAC,OAAS,GACvC,MAAM,EACH,eAAe,EAAO,QAAS,CAC9B,SAAU,CACR,GAAI,GAAe,UAAY,CAAC,EAChC,SAAU,CACZ,CACF,CAAC,CAAC,CACD,MAAO,GAAqB,CAC3B,GAAQ,KACN,CAAE,IAAK,EAAO,QAAS,MAAO,CAAQ,EACtC,+CACF,CACF,CAAC,EAGL,EAAO,YACP,GAAQ,MACN,CAAE,GAAI,EAAO,GAAI,SAAU,OAAO,KAAK,CAAc,CAAE,EACvD,sBACF,CACF,OAAS,EAAK,CACZ,EAAO,SACP,GAAQ,MACN,CAAE,GAAI,EAAO,GAAI,QAAS,EAAO,QAAS,MAAO,CAAI,EACrD,gDACF,CACF,CAIF,GADA,GAAU,IACN,EAAM,OAAS,IAAY,KACjC,CAGA,OADA,GAAQ,KAAK,EAAQ,+BAA+B,EAC7C,CACT"}

package/dist/{regenerate-variants-DJIFSrdC.mjs → regenerate-variants-CtzCRkKd.mjs}

@@ -1,2 +1,2 @@
-import{i as e,r as t,t as n}from"./variant-key-gVMhzKyv.mjs";import"server-only";async function r(r){let{app:i,storage:a,logger:o,styles:s}=r,c=i.db.readWrite,{AdminClient:l}=await import(`@murumets-ee/entity/admin`),{Media:u}=await import(`./entity-D1YaFEh8.mjs`).then(e=>e.n),{schemaRegistry:d}=await import(`@murumets-ee/db`),{eq:f}=await import(`drizzle-orm`),p=new l({entity:u,db:c,logger:o,contextResolver:r.contextResolver}),m=d.get(`media`);if(!m)throw Error(`Media schema not registered`);let h={total:0,processed:0,skipped:0,errors:0},g=0;for(o?.info({styles:Object.keys(s)},`Starting variant regeneration`);;){let r=await p.findMany({where:f(m.mediaType,`image`),limit:100,offset:g});if(r.length===0)break;h.total+=r.length;for(let i of r)try{if(!t(i.mimeType)){h.skipped++;continue}let r=await a.download(i.fileKey),c;if(Buffer.isBuffer(r.body))c=r.body;else{let e=[],t=r.body.getReader();for(;;){let{done:n,value:r}=await t.read();if(n)break;r&&e.push(r)}c=Buffer.concat(e)}let l=await e(c,s),u=await a.getMetadata(i.fileKey),d=u?.metadata?.variants;d&&await Promise.all(Object.values(d).map(e=>a.delete(e).catch(()=>{})));let f={},p=u?.visibility??`public`,m=await Promise.all([...l.variants].map(async([e,t])=>{let r=n(i.fileKey,e,t.format);try{return await a.upload(t.buffer,{key:r,filename:`${e}_${i.filename}`,mimeType:t.mimeType,size:t.buffer.byteLength,visibility:p,metadata:{variantOf:i.fileKey,style:e}}),{styleName:e,vKey:r,ok:!0}}catch(t){return o?.warn({style:e,key:r,error:t},`Failed to upload regenerated variant (non-fatal)`),{styleName:e,vKey:r,ok:!1}}}));for(let e of m)e.ok&&(f[e.styleName]=e.vKey);Object.keys(f).length>0&&await a.updateMetadata(i.fileKey,{metadata:{...u?.metadata??{},variants:f}}).catch(e=>{o?.warn({key:i.fileKey,error:e},`Failed to update variant metadata (non-fatal)`)}),h.processed++,o?.debug({id:i.id,variants:Object.keys(f)},`Regenerated variants`)}catch(e){h.errors++,o?.error({id:i.id,fileKey:i.fileKey,error:e},`Failed to regenerate variants for media record`)}if(g+=100,r.length<100)break}return o?.info(h,`Variant regeneration complete`),h}export{r as regenerateAllVariants};
-//# sourceMappingURL=regenerate-variants-DJIFSrdC.mjs.map
+import{i as e,r as t,t as n}from"./variant-key-CyI9Qq-f.mjs";import"server-only";async function r(r){let{app:i,storage:a,logger:o,styles:s}=r,c=i.db.readWrite,{AdminClient:l}=await import(`@murumets-ee/entity/admin`),{Media:u}=await import(`./entity-v0J9plyH.mjs`).then(e=>e.n),{schemaRegistry:d}=await import(`@murumets-ee/db`),{eq:f}=await import(`drizzle-orm`),p=new l({entity:u,db:c,logger:o,contextResolver:r.contextResolver}),m=d.get(`media`);if(!m)throw Error(`Media schema not registered`);let h={total:0,processed:0,skipped:0,errors:0},g=0;for(o?.info({styles:Object.keys(s)},`Starting variant regeneration`);;){let r=await p.findMany({where:f(m.mediaType,`image`),limit:100,offset:g});if(r.length===0)break;h.total+=r.length;for(let i of r)try{if(!t(i.mimeType)){h.skipped++;continue}let r=await a.download(i.fileKey),c;if(Buffer.isBuffer(r.body))c=r.body;else{let e=[],t=r.body.getReader();for(;;){let{done:n,value:r}=await t.read();if(n)break;r&&e.push(r)}c=Buffer.concat(e)}let l=await e(c,s),u=await a.getMetadata(i.fileKey),d=u?.metadata?.variants;d&&await Promise.all(Object.values(d).map(e=>a.delete(e).catch(()=>{})));let f={},p=u?.visibility??`public`,m=await Promise.all([...l.variants].map(async([e,t])=>{let r=n(i.fileKey,e,t.format);try{return await a.upload(t.buffer,{key:r,filename:`${e}_${i.filename}`,mimeType:t.mimeType,size:t.buffer.byteLength,visibility:p,metadata:{variantOf:i.fileKey,style:e}}),{styleName:e,vKey:r,ok:!0}}catch(t){return o?.warn({style:e,key:r,error:t},`Failed to upload regenerated variant (non-fatal)`),{styleName:e,vKey:r,ok:!1}}}));for(let e of m)e.ok&&(f[e.styleName]=e.vKey);Object.keys(f).length>0&&await a.updateMetadata(i.fileKey,{metadata:{...u?.metadata??{},variants:f}}).catch(e=>{o?.warn({key:i.fileKey,error:e},`Failed to update variant metadata (non-fatal)`)}),h.processed++,o?.debug({id:i.id,variants:Object.keys(f)},`Regenerated variants`)}catch(e){h.errors++,o?.error({id:i.id,fileKey:i.fileKey,error:e},`Failed to regenerate variants for media record`)}if(g+=100,r.length<100)break}return o?.info(h,`Variant regeneration complete`),h}export{r as regenerateAllVariants};
+//# sourceMappingURL=regenerate-variants-CtzCRkKd.mjs.map

package/dist/{regenerate-variants-DJIFSrdC.mjs.map → regenerate-variants-CtzCRkKd.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"regenerate-variants-DJIFSrdC.mjs","names":[],"sources":["../src/regenerate-variants.ts"],"sourcesContent":["/**\n * Batch variant regeneration — reprocesses all image media with updated styles.\n *\n * Downloads each original from storage, generates new variants via Sharp,\n * cleans up old variant files, and uploads new ones.\n *\n * Per-image errors are logged but don't stop the batch.\n */\n\nimport 'server-only'\n\nimport type { Logger, ToolkitApp } from '@murumets-ee/core'\nimport type { ContextResolver } from '@murumets-ee/entity'\nimport type { StorageClient } from '@murumets-ee/storage'\nimport { isProcessableImage, processImage } from './process-image.js'\nimport type { ImageStyle } from './types.js'\nimport { deriveVariantKey } from './variant-key.js'\n\nconst BATCH_SIZE = 100\n\nexport interface RegenerateOptions {\n  /** Toolkit app (provides db). */\n  app: ToolkitApp\n  storage: StorageClient\n  logger?: Logger\n  /** Current image styles to generate */\n  styles: Record<string, ImageStyle>\n  /** Security context resolver — passed through to AdminClient. */\n  contextResolver?: ContextResolver\n}\n\nexport interface RegenerateResult {\n  /** Total image media records found */\n  total: number\n  /** Successfully reprocessed */\n  processed: number\n  /** Skipped (non-processable mimeType, download failed, etc.) */\n  skipped: number\n  /** Failed with errors */\n  errors: number\n}\n\n/**\n * Regenerate variants for all image media.\n * Processes in batches of 100 to avoid memory pressure.\n */\nexport async function regenerateAllVariants(options: RegenerateOptions): Promise<RegenerateResult> {\n  const { app, storage, logger, styles } = options\n  const db = app.db.readWrite\n  const { AdminClient } = await import('@murumets-ee/entity/admin')\n  const { Media } = await import('./entity.js')\n  const { schemaRegistry } = await import('@murumets-ee/db')\n  const { eq } = await import('drizzle-orm')\n\n  const admin = new AdminClient<typeof Media.allFields>({\n    entity: Media,\n    db,\n    logger,\n    contextResolver: options.contextResolver,\n  })\n  const table = schemaRegistry.get('media')\n  if (!table) throw new Error('Media schema not registered')\n\n  const result: RegenerateResult = { total: 0, processed: 0, skipped: 0, errors: 0 }\n  let offset = 0\n\n  logger?.info({ styles: Object.keys(styles) }, 'Starting variant regeneration')\n\n  // Process in batches\n  while (true) {\n    const batch = await admin.findMany({\n      where: eq(table.mediaType, 'image'),\n      limit: BATCH_SIZE,\n      offset,\n    })\n\n    if (batch.length === 0) break\n    result.total += batch.length\n\n    for (const record of batch) {\n      try {\n        // Skip non-processable images (SVG, GIF)\n        if (!isProcessableImage(record.mimeType)) {\n          result.skipped++\n          continue\n        }\n\n        // Download original from storage\n        const downloaded = await storage.download(record.fileKey)\n        let buffer: Buffer\n        if (Buffer.isBuffer(downloaded.body)) {\n          buffer = downloaded.body\n        } else {\n          // ReadableStream → Buffer\n          const chunks: Uint8Array[] = []\n          const reader = downloaded.body.getReader()\n          while (true) {\n            const { done, value } = await reader.read()\n            if (done) break\n            if (value) chunks.push(value)\n          }\n          buffer = Buffer.concat(chunks)\n        }\n\n        // Generate new variants\n        const processed = await processImage(buffer, styles)\n\n        // Delete old variant files (best-effort, parallel)\n        const oldFileRecord = await storage.getMetadata(record.fileKey)\n        const oldVariants = (oldFileRecord?.metadata as Record<string, unknown> | null)?.variants as\n          | Record<string, string>\n          | undefined\n        if (oldVariants) {\n          await Promise.all(\n            Object.values(oldVariants).map((vKey) => storage.delete(vKey).catch(() => {})),\n          )\n        }\n\n        // Upload new variants (parallel)\n        const newVariantKeys: Record<string, string> = {}\n        const visibility = oldFileRecord?.visibility ?? 'public'\n        const uploadResults = await Promise.all(\n          [...processed.variants].map(async ([styleName, variant]) => {\n            const vKey = deriveVariantKey(record.fileKey, styleName, variant.format)\n            try {\n              await storage.upload(variant.buffer, {\n                key: vKey,\n                filename: `${styleName}_${record.filename}`,\n                mimeType: variant.mimeType,\n                size: variant.buffer.byteLength,\n                visibility,\n                metadata: { variantOf: record.fileKey, style: styleName },\n              })\n              return { styleName, vKey, ok: true as const }\n            } catch (uploadErr) {\n              logger?.warn(\n                { style: styleName, key: vKey, error: uploadErr },\n                'Failed to upload regenerated variant (non-fatal)',\n              )\n              return { styleName, vKey, ok: false as const }\n            }\n          }),\n        )\n        for (const r of uploadResults) {\n          if (r.ok) newVariantKeys[r.styleName] = r.vKey\n        }\n\n        // Update original file's metadata with new variant keys\n        if (Object.keys(newVariantKeys).length > 0) {\n          await storage\n            .updateMetadata(record.fileKey, {\n              metadata: {\n                ...(oldFileRecord?.metadata ?? {}),\n                variants: newVariantKeys,\n              },\n            })\n            .catch((metaErr: unknown) => {\n              logger?.warn(\n                { key: record.fileKey, error: metaErr },\n                'Failed to update variant metadata (non-fatal)',\n              )\n            })\n        }\n\n        result.processed++\n        logger?.debug(\n          { id: record.id, variants: Object.keys(newVariantKeys) },\n          'Regenerated variants',\n        )\n      } catch (err) {\n        result.errors++\n        logger?.error(\n          { id: record.id, fileKey: record.fileKey, error: err },\n          'Failed to regenerate variants for media record',\n        )\n      }\n    }\n\n    offset += BATCH_SIZE\n    if (batch.length < BATCH_SIZE) break\n  }\n\n  logger?.info(result, 'Variant regeneration complete')\n  return result\n}\n"],"mappings":"iFA8CA,eAAsB,EAAsB,EAAuD,CACjG,GAAM,CAAE,MAAK,UAAS,SAAQ,UAAW,EACnC,EAAK,EAAI,GAAG,UACZ,CAAE,eAAgB,MAAM,OAAO,6BAC/B,CAAE,SAAU,MAAM,OAAO,yBAAA,KAAA,GAAA,EAAA,EAAA,CACzB,CAAE,kBAAmB,MAAM,OAAO,mBAClC,CAAE,MAAO,MAAM,OAAO,eAEtB,EAAQ,IAAI,EAAoC,CACpD,OAAQ,EACR,KACA,SACA,gBAAiB,EAAQ,gBAC1B,CAAC,CACI,EAAQ,EAAe,IAAI,QAAQ,CACzC,GAAI,CAAC,EAAO,MAAU,MAAM,8BAA8B,CAE1D,IAAM,EAA2B,CAAE,MAAO,EAAG,UAAW,EAAG,QAAS,EAAG,OAAQ,EAAG,CAC9E,EAAS,EAKb,IAHA,GAAQ,KAAK,CAAE,OAAQ,OAAO,KAAK,EAAO,CAAE,CAAE,gCAAgC,GAGjE,CACX,IAAM,EAAQ,MAAM,EAAM,SAAS,CACjC,MAAO,EAAG,EAAM,UAAW,QAAQ,CACnC,MAAO,IACP,SACD,CAAC,CAEF,GAAI,EAAM,SAAW,EAAG,MACxB,EAAO,OAAS,EAAM,OAEtB,IAAK,IAAM,KAAU,EACnB,GAAI,CAEF,GAAI,CAAC,EAAmB,EAAO,SAAS,CAAE,CACxC,EAAO,UACP,SAIF,IAAM,EAAa,MAAM,EAAQ,SAAS,EAAO,QAAQ,CACrD,EACJ,GAAI,OAAO,SAAS,EAAW,KAAK,CAClC,EAAS,EAAW,SACf,CAEL,IAAM,EAAuB,EAAE,CACzB,EAAS,EAAW,KAAK,WAAW,CAC1C,OAAa,CACX,GAAM,CAAE,OAAM,SAAU,MAAM,EAAO,MAAM,CAC3C,GAAI,EAAM,MACN,GAAO,EAAO,KAAK,EAAM,CAE/B,EAAS,OAAO,OAAO,EAAO,CAIhC,IAAM,EAAY,MAAM,EAAa,EAAQ,EAAO,CAG9C,EAAgB,MAAM,EAAQ,YAAY,EAAO,QAAQ,CACzD,EAAe,GAAe,UAA6C,SAG7E,GACF,MAAM,QAAQ,IACZ,OAAO,OAAO,EAAY,CAAC,IAAK,GAAS,EAAQ,OAAO,EAAK,CAAC,UAAY,GAAG,CAAC,CAC/E,CAIH,IAAM,EAAyC,EAAE,CAC3C,EAAa,GAAe,YAAc,SAC1C,EAAgB,MAAM,QAAQ,IAClC,CAAC,GAAG,EAAU,SAAS,CAAC,IAAI,MAAO,CAAC,EAAW,KAAa,CAC1D,IAAM,EAAO,EAAiB,EAAO,QAAS,EAAW,EAAQ,OAAO,CACxE,GAAI,CASF,OARA,MAAM,EAAQ,OAAO,EAAQ,OAAQ,CACnC,IAAK,EACL,SAAU,GAAG,EAAU,GAAG,EAAO,WACjC,SAAU,EAAQ,SAClB,KAAM,EAAQ,OAAO,WACrB,aACA,SAAU,CAAE,UAAW,EAAO,QAAS,MAAO,EAAW,CAC1D,CAAC,CACK,CAAE,YAAW,OAAM,GAAI,GAAe,OACtC,EAAW,CAKlB,OAJA,GAAQ,KACN,CAAE,MAAO,EAAW,IAAK,EAAM,MAAO,EAAW,CACjD,mDACD,CACM,CAAE,YAAW,OAAM,GAAI,GAAgB,GAEhD,CACH,CACD,IAAK,IAAM,KAAK,EACV,EAAE,KAAI,EAAe,EAAE,WAAa,EAAE,MAIxC,OAAO,KAAK,EAAe,CAAC,OAAS,GACvC,MAAM,EACH,eAAe,EAAO,QAAS,CAC9B,SAAU,CACR,GAAI,GAAe,UAAY,EAAE,CACjC,SAAU,EACX,CACF,CAAC,CACD,MAAO,GAAqB,CAC3B,GAAQ,KACN,CAAE,IAAK,EAAO,QAAS,MAAO,EAAS,CACvC,gDACD,EACD,CAGN,EAAO,YACP,GAAQ,MACN,CAAE,GAAI,EAAO,GAAI,SAAU,OAAO,KAAK,EAAe,CAAE,CACxD,uBACD,OACM,EAAK,CACZ,EAAO,SACP,GAAQ,MACN,CAAE,GAAI,EAAO,GAAI,QAAS,EAAO,QAAS,MAAO,EAAK,CACtD,iDACD,CAKL,GADA,GAAU,IACN,EAAM,OAAS,IAAY,MAIjC,OADA,GAAQ,KAAK,EAAQ,gCAAgC,CAC9C"}
+{"version":3,"file":"regenerate-variants-CtzCRkKd.mjs","names":[],"sources":["../src/regenerate-variants.ts"],"sourcesContent":["/**\n * Batch variant regeneration — reprocesses all image media with updated styles.\n *\n * Downloads each original from storage, generates new variants via Sharp,\n * cleans up old variant files, and uploads new ones.\n *\n * Per-image errors are logged but don't stop the batch.\n */\n\nimport 'server-only'\n\nimport type { Logger, ToolkitApp } from '@murumets-ee/core'\nimport type { ContextResolver } from '@murumets-ee/entity'\nimport type { StorageClient } from '@murumets-ee/storage'\nimport { isProcessableImage, processImage } from './process-image.js'\nimport type { ImageStyle } from './types.js'\nimport { deriveVariantKey } from './variant-key.js'\n\nconst BATCH_SIZE = 100\n\nexport interface RegenerateOptions {\n  /** Toolkit app (provides db). */\n  app: ToolkitApp\n  storage: StorageClient\n  logger?: Logger\n  /** Current image styles to generate */\n  styles: Record<string, ImageStyle>\n  /** Security context resolver — passed through to AdminClient. */\n  contextResolver?: ContextResolver\n}\n\nexport interface RegenerateResult {\n  /** Total image media records found */\n  total: number\n  /** Successfully reprocessed */\n  processed: number\n  /** Skipped (non-processable mimeType, download failed, etc.) */\n  skipped: number\n  /** Failed with errors */\n  errors: number\n}\n\n/**\n * Regenerate variants for all image media.\n * Processes in batches of 100 to avoid memory pressure.\n */\nexport async function regenerateAllVariants(options: RegenerateOptions): Promise<RegenerateResult> {\n  const { app, storage, logger, styles } = options\n  const db = app.db.readWrite\n  const { AdminClient } = await import('@murumets-ee/entity/admin')\n  const { Media } = await import('./entity.js')\n  const { schemaRegistry } = await import('@murumets-ee/db')\n  const { eq } = await import('drizzle-orm')\n\n  const admin = new AdminClient<typeof Media.allFields>({\n    entity: Media,\n    db,\n    logger,\n    contextResolver: options.contextResolver,\n  })\n  const table = schemaRegistry.get('media')\n  if (!table) throw new Error('Media schema not registered')\n\n  const result: RegenerateResult = { total: 0, processed: 0, skipped: 0, errors: 0 }\n  let offset = 0\n\n  logger?.info({ styles: Object.keys(styles) }, 'Starting variant regeneration')\n\n  // Process in batches\n  while (true) {\n    const batch = await admin.findMany({\n      where: eq(table.mediaType, 'image'),\n      limit: BATCH_SIZE,\n      offset,\n    })\n\n    if (batch.length === 0) break\n    result.total += batch.length\n\n    for (const record of batch) {\n      try {\n        // Skip non-processable images (SVG, GIF)\n        if (!isProcessableImage(record.mimeType)) {\n          result.skipped++\n          continue\n        }\n\n        // Download original from storage\n        const downloaded = await storage.download(record.fileKey)\n        let buffer: Buffer\n        if (Buffer.isBuffer(downloaded.body)) {\n          buffer = downloaded.body\n        } else {\n          // ReadableStream → Buffer\n          const chunks: Uint8Array[] = []\n          const reader = downloaded.body.getReader()\n          while (true) {\n            const { done, value } = await reader.read()\n            if (done) break\n            if (value) chunks.push(value)\n          }\n          buffer = Buffer.concat(chunks)\n        }\n\n        // Generate new variants\n        const processed = await processImage(buffer, styles)\n\n        // Delete old variant files (best-effort, parallel)\n        const oldFileRecord = await storage.getMetadata(record.fileKey)\n        const oldVariants = (oldFileRecord?.metadata as Record<string, unknown> | null)?.variants as\n          | Record<string, string>\n          | undefined\n        if (oldVariants) {\n          await Promise.all(\n            Object.values(oldVariants).map((vKey) => storage.delete(vKey).catch(() => {})),\n          )\n        }\n\n        // Upload new variants (parallel)\n        const newVariantKeys: Record<string, string> = {}\n        const visibility = oldFileRecord?.visibility ?? 'public'\n        const uploadResults = await Promise.all(\n          [...processed.variants].map(async ([styleName, variant]) => {\n            const vKey = deriveVariantKey(record.fileKey, styleName, variant.format)\n            try {\n              await storage.upload(variant.buffer, {\n                key: vKey,\n                filename: `${styleName}_${record.filename}`,\n                mimeType: variant.mimeType,\n                size: variant.buffer.byteLength,\n                visibility,\n                metadata: { variantOf: record.fileKey, style: styleName },\n              })\n              return { styleName, vKey, ok: true as const }\n            } catch (uploadErr) {\n              logger?.warn(\n                { style: styleName, key: vKey, error: uploadErr },\n                'Failed to upload regenerated variant (non-fatal)',\n              )\n              return { styleName, vKey, ok: false as const }\n            }\n          }),\n        )\n        for (const r of uploadResults) {\n          if (r.ok) newVariantKeys[r.styleName] = r.vKey\n        }\n\n        // Update original file's metadata with new variant keys\n        if (Object.keys(newVariantKeys).length > 0) {\n          await storage\n            .updateMetadata(record.fileKey, {\n              metadata: {\n                ...(oldFileRecord?.metadata ?? {}),\n                variants: newVariantKeys,\n              },\n            })\n            .catch((metaErr: unknown) => {\n              logger?.warn(\n                { key: record.fileKey, error: metaErr },\n                'Failed to update variant metadata (non-fatal)',\n              )\n            })\n        }\n\n        result.processed++\n        logger?.debug(\n          { id: record.id, variants: Object.keys(newVariantKeys) },\n          'Regenerated variants',\n        )\n      } catch (err) {\n        result.errors++\n        logger?.error(\n          { id: record.id, fileKey: record.fileKey, error: err },\n          'Failed to regenerate variants for media record',\n        )\n      }\n    }\n\n    offset += BATCH_SIZE\n    if (batch.length < BATCH_SIZE) break\n  }\n\n  logger?.info(result, 'Variant regeneration complete')\n  return result\n}\n"],"mappings":"iFA8CA,eAAsB,EAAsB,EAAuD,CACjG,GAAM,CAAE,MAAK,UAAS,SAAQ,UAAW,EACnC,EAAK,EAAI,GAAG,UACZ,CAAE,eAAgB,MAAM,OAAO,6BAC/B,CAAE,SAAU,MAAM,OAAO,wBAAc,CAAA,KAAA,GAAA,EAAA,CAAA,EACvC,CAAE,kBAAmB,MAAM,OAAO,mBAClC,CAAE,MAAO,MAAM,OAAO,eAEtB,EAAQ,IAAI,EAAoC,CACpD,OAAQ,EACR,KACA,SACA,gBAAiB,EAAQ,eAC3B,CAAC,EACK,EAAQ,EAAe,IAAI,OAAO,EACxC,GAAI,CAAC,EAAO,MAAU,MAAM,6BAA6B,EAEzD,IAAM,EAA2B,CAAE,MAAO,EAAG,UAAW,EAAG,QAAS,EAAG,OAAQ,CAAE,EAC7E,EAAS,EAKb,IAHA,GAAQ,KAAK,CAAE,OAAQ,OAAO,KAAK,CAAM,CAAE,EAAG,+BAA+B,IAGhE,CACX,IAAM,EAAQ,MAAM,EAAM,SAAS,CACjC,MAAO,EAAG,EAAM,UAAW,OAAO,EAClC,MAAO,IACP,QACF,CAAC,EAED,GAAI,EAAM,SAAW,EAAG,MACxB,EAAO,OAAS,EAAM,OAEtB,IAAK,IAAM,KAAU,EACnB,GAAI,CAEF,GAAI,CAAC,EAAmB,EAAO,QAAQ,EAAG,CACxC,EAAO,UACP,QACF,CAGA,IAAM,EAAa,MAAM,EAAQ,SAAS,EAAO,OAAO,EACpD,EACJ,GAAI,OAAO,SAAS,EAAW,IAAI,EACjC,EAAS,EAAW,SACf,CAEL,IAAM,EAAuB,CAAC,EACxB,EAAS,EAAW,KAAK,UAAU,EACzC,OAAa,CACX,GAAM,CAAE,OAAM,SAAU,MAAM,EAAO,KAAK,EAC1C,GAAI,EAAM,MACN,GAAO,EAAO,KAAK,CAAK,CAC9B,CACA,EAAS,OAAO,OAAO,CAAM,CAC/B,CAGA,IAAM,EAAY,MAAM,EAAa,EAAQ,CAAM,EAG7C,EAAgB,MAAM,EAAQ,YAAY,EAAO,OAAO,EACxD,EAAe,GAAe,UAA6C,SAG7E,GACF,MAAM,QAAQ,IACZ,OAAO,OAAO,CAAW,CAAC,CAAC,IAAK,GAAS,EAAQ,OAAO,CAAI,CAAC,CAAC,UAAY,CAAC,CAAC,CAAC,CAC/E,EAIF,IAAM,EAAyC,CAAC,EAC1C,EAAa,GAAe,YAAc,SAC1C,EAAgB,MAAM,QAAQ,IAClC,CAAC,GAAG,EAAU,QAAQ,CAAC,CAAC,IAAI,MAAO,CAAC,EAAW,KAAa,CAC1D,IAAM,EAAO,EAAiB,EAAO,QAAS,EAAW,EAAQ,MAAM,EACvE,GAAI,CASF,OARA,MAAM,EAAQ,OAAO,EAAQ,OAAQ,CACnC,IAAK,EACL,SAAU,GAAG,EAAU,GAAG,EAAO,WACjC,SAAU,EAAQ,SAClB,KAAM,EAAQ,OAAO,WACrB,aACA,SAAU,CAAE,UAAW,EAAO,QAAS,MAAO,CAAU,CAC1D,CAAC,EACM,CAAE,YAAW,OAAM,GAAI,EAAc,CAC9C,OAAS,EAAW,CAKlB,OAJA,GAAQ,KACN,CAAE,MAAO,EAAW,IAAK,EAAM,MAAO,CAAU,EAChD,kDACF,EACO,CAAE,YAAW,OAAM,GAAI,EAAe,CAC/C,CACF,CAAC,CACH,EACA,IAAK,IAAM,KAAK,EACV,EAAE,KAAI,EAAe,EAAE,WAAa,EAAE,MAIxC,OAAO,KAAK,CAAc,CAAC,CAAC,OAAS,GACvC,MAAM,EACH,eAAe,EAAO,QAAS,CAC9B,SAAU,CACR,GAAI,GAAe,UAAY,CAAC,EAChC,SAAU,CACZ,CACF,CAAC,CAAC,CACD,MAAO,GAAqB,CAC3B,GAAQ,KACN,CAAE,IAAK,EAAO,QAAS,MAAO,CAAQ,EACtC,+CACF,CACF,CAAC,EAGL,EAAO,YACP,GAAQ,MACN,CAAE,GAAI,EAAO,GAAI,SAAU,OAAO,KAAK,CAAc,CAAE,EACvD,sBACF,CACF,OAAS,EAAK,CACZ,EAAO,SACP,GAAQ,MACN,CAAE,GAAI,EAAO,GAAI,QAAS,EAAO,QAAS,MAAO,CAAI,EACrD,gDACF,CACF,CAIF,GADA,GAAU,IACN,EAAM,OAAS,IAAY,KACjC,CAGA,OADA,GAAQ,KAAK,EAAQ,+BAA+B,EAC7C,CACT"}

package/dist/{resolve-image-styles-BI3pvJBZ.mjs → resolve-image-styles-iN9JbZYf.mjs}

@@ -1,2 +1,2 @@
 const e={thumbnail:{width:200,height:200,fit:`cover`,format:`webp`,quality:80}};async function t(t,n){try{let{createSettingsClient:e}=await import(`@murumets-ee/settings`),{imageStylesSettings:n}=await import(`./image-styles-settings.mjs`),r=await e(n,{app:t}).get(`imageStyles`);if(r&&Object.keys(r).length>0)return r}catch(e){n?.warn({err:e},`resolveImageStyles: settings DB read failed — falling back`)}try{let{getMediaConfig:e}=await import(`./plugin.mjs`);return e().imageStyles}catch{}return e}export{t as resolveImageStyles};
-//# sourceMappingURL=resolve-image-styles-BI3pvJBZ.mjs.map
+//# sourceMappingURL=resolve-image-styles-iN9JbZYf.mjs.map

package/dist/{resolve-image-styles-BI3pvJBZ.mjs.map → resolve-image-styles-iN9JbZYf.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"resolve-image-styles-BI3pvJBZ.mjs","names":[],"sources":["../src/resolve-image-styles.ts"],"sourcesContent":["/**\n * Image style resolution waterfall — single source of truth for the\n * \"which styles should we use?\" question.\n *\n * Priority: settings DB (user-configured) → plugin config (from `media()`\n * factory call) → hardcoded defaults (thumbnail only).\n *\n * This replaces three near-duplicate blocks (MediaClient's private\n * resolveImageStyles + two admin-route branches) that had drifted — the\n * routes didn't treat an empty stored object as \"fall back to config\"\n * while MediaClient did. Consolidating here keeps the behavior consistent\n * and logs the DB read failure so operators can diagnose issues instead\n * of silently getting defaults.\n *\n * Not cached. MediaClient wraps this with its own per-instance cache.\n */\n\nimport type { Logger, ToolkitApp } from '@murumets-ee/core'\nimport type { ImageStyle } from './types.js'\n\nconst HARDCODED_DEFAULTS: Record<string, ImageStyle> = {\n  thumbnail: { width: 200, height: 200, fit: 'cover', format: 'webp', quality: 80 },\n}\n\nexport async function resolveImageStyles(\n  app: ToolkitApp,\n  logger?: Logger,\n): Promise<Record<string, ImageStyle>> {\n  // 1. Settings DB (source of truth once the admin UI has saved anything).\n  //    An empty record counts as \"nothing configured\" — fall through. This\n  //    matches the pre-extraction behavior of MediaClient and fixes the\n  //    routes' prior behavior of showing an empty UI in that case.\n  try {\n    const { createSettingsClient } = await import('@murumets-ee/settings')\n    const { imageStylesSettings } = await import('./image-styles-settings.js')\n    const settingsClient = createSettingsClient(imageStylesSettings, { app })\n    const stored = await settingsClient.get('imageStyles')\n    if (stored && Object.keys(stored).length > 0) return stored\n  } catch (err) {\n    // Logging matters: prior silent catches masked real issues (e.g. DB\n    // unavailable) as \"no styles\" and routed admins toward config fallback\n    // when the real failure was infrastructure.\n    logger?.warn({ err }, 'resolveImageStyles: settings DB read failed — falling back')\n  }\n\n  // 2. Plugin config (from the `media()` factory call in lumi.config.ts).\n  try {\n    const { getMediaConfig } = await import('./plugin.js')\n    return getMediaConfig().imageStyles\n  } catch {\n    // Plugin not initialized (e.g. unit tests that don't call media()) —\n    // fall through to hardcoded defaults. No log: this is a valid mode.\n  }\n\n  // 3. Hardcoded baseline — a single thumbnail style so uploads don't fail\n  //    in a toolkit that never registered the plugin.\n  return HARDCODED_DEFAULTS\n}\n"],"mappings":"AAoBA,MAAM,EAAiD,CACrD,UAAW,CAAE,MAAO,IAAK,OAAQ,IAAK,IAAK,QAAS,OAAQ,OAAQ,QAAS,GAAI,CAClF,CAED,eAAsB,EACpB,EACA,EACqC,CAKrC,GAAI,CACF,GAAM,CAAE,wBAAyB,MAAM,OAAO,yBACxC,CAAE,uBAAwB,MAAM,OAAO,+BAEvC,EAAS,MADQ,EAAqB,EAAqB,CAAE,MAAK,CACrC,CAAC,IAAI,cAAc,CACtD,GAAI,GAAU,OAAO,KAAK,EAAO,CAAC,OAAS,EAAG,OAAO,QAC9C,EAAK,CAIZ,GAAQ,KAAK,CAAE,MAAK,CAAE,6DAA6D,CAIrF,GAAI,CACF,GAAM,CAAE,kBAAmB,MAAM,OAAO,gBACxC,OAAO,GAAgB,CAAC,iBAClB,EAOR,OAAO"}
+{"version":3,"file":"resolve-image-styles-iN9JbZYf.mjs","names":[],"sources":["../src/resolve-image-styles.ts"],"sourcesContent":["/**\n * Image style resolution waterfall — single source of truth for the\n * \"which styles should we use?\" question.\n *\n * Priority: settings DB (user-configured) → plugin config (from `media()`\n * factory call) → hardcoded defaults (thumbnail only).\n *\n * This replaces three near-duplicate blocks (MediaClient's private\n * resolveImageStyles + two admin-route branches) that had drifted — the\n * routes didn't treat an empty stored object as \"fall back to config\"\n * while MediaClient did. Consolidating here keeps the behavior consistent\n * and logs the DB read failure so operators can diagnose issues instead\n * of silently getting defaults.\n *\n * Not cached. MediaClient wraps this with its own per-instance cache.\n */\n\nimport type { Logger, ToolkitApp } from '@murumets-ee/core'\nimport type { ImageStyle } from './types.js'\n\nconst HARDCODED_DEFAULTS: Record<string, ImageStyle> = {\n  thumbnail: { width: 200, height: 200, fit: 'cover', format: 'webp', quality: 80 },\n}\n\nexport async function resolveImageStyles(\n  app: ToolkitApp,\n  logger?: Logger,\n): Promise<Record<string, ImageStyle>> {\n  // 1. Settings DB (source of truth once the admin UI has saved anything).\n  //    An empty record counts as \"nothing configured\" — fall through. This\n  //    matches the pre-extraction behavior of MediaClient and fixes the\n  //    routes' prior behavior of showing an empty UI in that case.\n  try {\n    const { createSettingsClient } = await import('@murumets-ee/settings')\n    const { imageStylesSettings } = await import('./image-styles-settings.js')\n    const settingsClient = createSettingsClient(imageStylesSettings, { app })\n    const stored = await settingsClient.get('imageStyles')\n    if (stored && Object.keys(stored).length > 0) return stored\n  } catch (err) {\n    // Logging matters: prior silent catches masked real issues (e.g. DB\n    // unavailable) as \"no styles\" and routed admins toward config fallback\n    // when the real failure was infrastructure.\n    logger?.warn({ err }, 'resolveImageStyles: settings DB read failed — falling back')\n  }\n\n  // 2. Plugin config (from the `media()` factory call in lumi.config.ts).\n  try {\n    const { getMediaConfig } = await import('./plugin.js')\n    return getMediaConfig().imageStyles\n  } catch {\n    // Plugin not initialized (e.g. unit tests that don't call media()) —\n    // fall through to hardcoded defaults. No log: this is a valid mode.\n  }\n\n  // 3. Hardcoded baseline — a single thumbnail style so uploads don't fail\n  //    in a toolkit that never registered the plugin.\n  return HARDCODED_DEFAULTS\n}\n"],"mappings":"AAoBA,MAAM,EAAiD,CACrD,UAAW,CAAE,MAAO,IAAK,OAAQ,IAAK,IAAK,QAAS,OAAQ,OAAQ,QAAS,EAAG,CAClF,EAEA,eAAsB,EACpB,EACA,EACqC,CAKrC,GAAI,CACF,GAAM,CAAE,wBAAyB,MAAM,OAAO,yBACxC,CAAE,uBAAwB,MAAM,OAAO,+BAEvC,EAAS,MADQ,EAAqB,EAAqB,CAAE,KAAI,CACrC,CAAC,CAAC,IAAI,aAAa,EACrD,GAAI,GAAU,OAAO,KAAK,CAAM,CAAC,CAAC,OAAS,EAAG,OAAO,CACvD,OAAS,EAAK,CAIZ,GAAQ,KAAK,CAAE,KAAI,EAAG,4DAA4D,CACpF,CAGA,GAAI,CACF,GAAM,CAAE,kBAAmB,MAAM,OAAO,gBACxC,OAAO,EAAe,CAAC,CAAC,WAC1B,MAAQ,CAGR,CAIA,OAAO,CACT"}

package/dist/{resolve-image-styles-B2pbn_AH.mjs → resolve-image-styles-qxVgkNT_.mjs}

@@ -1,2 +1,2 @@
-const e={thumbnail:{width:200,height:200,fit:`cover`,format:`webp`,quality:80}};async function t(t,n){try{let{createSettingsClient:e}=await import(`@murumets-ee/settings`),{imageStylesSettings:n}=await import(`./image-styles-settings-B4QOt7Ve.mjs`),r=await e(n,{app:t}).get(`imageStyles`);if(r&&Object.keys(r).length>0)return r}catch(e){n?.warn({err:e},`resolveImageStyles: settings DB read failed — falling back`)}try{let{getMediaConfig:e}=await import(`./plugin-DyYikOz_.mjs`);return e().imageStyles}catch{}return e}export{t as resolveImageStyles};
-//# sourceMappingURL=resolve-image-styles-B2pbn_AH.mjs.map
+const e={thumbnail:{width:200,height:200,fit:`cover`,format:`webp`,quality:80}};async function t(t,n){try{let{createSettingsClient:e}=await import(`@murumets-ee/settings`),{imageStylesSettings:n}=await import(`./image-styles-settings-ClIA2MJI.mjs`),r=await e(n,{app:t}).get(`imageStyles`);if(r&&Object.keys(r).length>0)return r}catch(e){n?.warn({err:e},`resolveImageStyles: settings DB read failed — falling back`)}try{let{getMediaConfig:e}=await import(`./plugin-_fxTC79v.mjs`);return e().imageStyles}catch{}return e}export{t as resolveImageStyles};
+//# sourceMappingURL=resolve-image-styles-qxVgkNT_.mjs.map

package/dist/{resolve-image-styles-B2pbn_AH.mjs.map → resolve-image-styles-qxVgkNT_.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"resolve-image-styles-B2pbn_AH.mjs","names":[],"sources":["../src/resolve-image-styles.ts"],"sourcesContent":["/**\n * Image style resolution waterfall — single source of truth for the\n * \"which styles should we use?\" question.\n *\n * Priority: settings DB (user-configured) → plugin config (from `media()`\n * factory call) → hardcoded defaults (thumbnail only).\n *\n * This replaces three near-duplicate blocks (MediaClient's private\n * resolveImageStyles + two admin-route branches) that had drifted — the\n * routes didn't treat an empty stored object as \"fall back to config\"\n * while MediaClient did. Consolidating here keeps the behavior consistent\n * and logs the DB read failure so operators can diagnose issues instead\n * of silently getting defaults.\n *\n * Not cached. MediaClient wraps this with its own per-instance cache.\n */\n\nimport type { Logger, ToolkitApp } from '@murumets-ee/core'\nimport type { ImageStyle } from './types.js'\n\nconst HARDCODED_DEFAULTS: Record<string, ImageStyle> = {\n  thumbnail: { width: 200, height: 200, fit: 'cover', format: 'webp', quality: 80 },\n}\n\nexport async function resolveImageStyles(\n  app: ToolkitApp,\n  logger?: Logger,\n): Promise<Record<string, ImageStyle>> {\n  // 1. Settings DB (source of truth once the admin UI has saved anything).\n  //    An empty record counts as \"nothing configured\" — fall through. This\n  //    matches the pre-extraction behavior of MediaClient and fixes the\n  //    routes' prior behavior of showing an empty UI in that case.\n  try {\n    const { createSettingsClient } = await import('@murumets-ee/settings')\n    const { imageStylesSettings } = await import('./image-styles-settings.js')\n    const settingsClient = createSettingsClient(imageStylesSettings, { app })\n    const stored = await settingsClient.get('imageStyles')\n    if (stored && Object.keys(stored).length > 0) return stored\n  } catch (err) {\n    // Logging matters: prior silent catches masked real issues (e.g. DB\n    // unavailable) as \"no styles\" and routed admins toward config fallback\n    // when the real failure was infrastructure.\n    logger?.warn({ err }, 'resolveImageStyles: settings DB read failed — falling back')\n  }\n\n  // 2. Plugin config (from the `media()` factory call in lumi.config.ts).\n  try {\n    const { getMediaConfig } = await import('./plugin.js')\n    return getMediaConfig().imageStyles\n  } catch {\n    // Plugin not initialized (e.g. unit tests that don't call media()) —\n    // fall through to hardcoded defaults. No log: this is a valid mode.\n  }\n\n  // 3. Hardcoded baseline — a single thumbnail style so uploads don't fail\n  //    in a toolkit that never registered the plugin.\n  return HARDCODED_DEFAULTS\n}\n"],"mappings":"AAoBA,MAAM,EAAiD,CACrD,UAAW,CAAE,MAAO,IAAK,OAAQ,IAAK,IAAK,QAAS,OAAQ,OAAQ,QAAS,GAAI,CAClF,CAED,eAAsB,EACpB,EACA,EACqC,CAKrC,GAAI,CACF,GAAM,CAAE,wBAAyB,MAAM,OAAO,yBACxC,CAAE,uBAAwB,MAAM,OAAO,wCAEvC,EAAS,MADQ,EAAqB,EAAqB,CAAE,MAAK,CACrC,CAAC,IAAI,cAAc,CACtD,GAAI,GAAU,OAAO,KAAK,EAAO,CAAC,OAAS,EAAG,OAAO,QAC9C,EAAK,CAIZ,GAAQ,KAAK,CAAE,MAAK,CAAE,6DAA6D,CAIrF,GAAI,CACF,GAAM,CAAE,kBAAmB,MAAM,OAAO,yBACxC,OAAO,GAAgB,CAAC,iBAClB,EAOR,OAAO"}
+{"version":3,"file":"resolve-image-styles-qxVgkNT_.mjs","names":[],"sources":["../src/resolve-image-styles.ts"],"sourcesContent":["/**\n * Image style resolution waterfall — single source of truth for the\n * \"which styles should we use?\" question.\n *\n * Priority: settings DB (user-configured) → plugin config (from `media()`\n * factory call) → hardcoded defaults (thumbnail only).\n *\n * This replaces three near-duplicate blocks (MediaClient's private\n * resolveImageStyles + two admin-route branches) that had drifted — the\n * routes didn't treat an empty stored object as \"fall back to config\"\n * while MediaClient did. Consolidating here keeps the behavior consistent\n * and logs the DB read failure so operators can diagnose issues instead\n * of silently getting defaults.\n *\n * Not cached. MediaClient wraps this with its own per-instance cache.\n */\n\nimport type { Logger, ToolkitApp } from '@murumets-ee/core'\nimport type { ImageStyle } from './types.js'\n\nconst HARDCODED_DEFAULTS: Record<string, ImageStyle> = {\n  thumbnail: { width: 200, height: 200, fit: 'cover', format: 'webp', quality: 80 },\n}\n\nexport async function resolveImageStyles(\n  app: ToolkitApp,\n  logger?: Logger,\n): Promise<Record<string, ImageStyle>> {\n  // 1. Settings DB (source of truth once the admin UI has saved anything).\n  //    An empty record counts as \"nothing configured\" — fall through. This\n  //    matches the pre-extraction behavior of MediaClient and fixes the\n  //    routes' prior behavior of showing an empty UI in that case.\n  try {\n    const { createSettingsClient } = await import('@murumets-ee/settings')\n    const { imageStylesSettings } = await import('./image-styles-settings.js')\n    const settingsClient = createSettingsClient(imageStylesSettings, { app })\n    const stored = await settingsClient.get('imageStyles')\n    if (stored && Object.keys(stored).length > 0) return stored\n  } catch (err) {\n    // Logging matters: prior silent catches masked real issues (e.g. DB\n    // unavailable) as \"no styles\" and routed admins toward config fallback\n    // when the real failure was infrastructure.\n    logger?.warn({ err }, 'resolveImageStyles: settings DB read failed — falling back')\n  }\n\n  // 2. Plugin config (from the `media()` factory call in lumi.config.ts).\n  try {\n    const { getMediaConfig } = await import('./plugin.js')\n    return getMediaConfig().imageStyles\n  } catch {\n    // Plugin not initialized (e.g. unit tests that don't call media()) —\n    // fall through to hardcoded defaults. No log: this is a valid mode.\n  }\n\n  // 3. Hardcoded baseline — a single thumbnail style so uploads don't fail\n  //    in a toolkit that never registered the plugin.\n  return HARDCODED_DEFAULTS\n}\n"],"mappings":"AAoBA,MAAM,EAAiD,CACrD,UAAW,CAAE,MAAO,IAAK,OAAQ,IAAK,IAAK,QAAS,OAAQ,OAAQ,QAAS,EAAG,CAClF,EAEA,eAAsB,EACpB,EACA,EACqC,CAKrC,GAAI,CACF,GAAM,CAAE,wBAAyB,MAAM,OAAO,yBACxC,CAAE,uBAAwB,MAAM,OAAO,wCAEvC,EAAS,MADQ,EAAqB,EAAqB,CAAE,KAAI,CACrC,CAAC,CAAC,IAAI,aAAa,EACrD,GAAI,GAAU,OAAO,KAAK,CAAM,CAAC,CAAC,OAAS,EAAG,OAAO,CACvD,OAAS,EAAK,CAIZ,GAAQ,KAAK,CAAE,KAAI,EAAG,4DAA4D,CACpF,CAGA,GAAI,CACF,GAAM,CAAE,kBAAmB,MAAM,OAAO,yBACxC,OAAO,EAAe,CAAC,CAAC,WAC1B,MAAQ,CAGR,CAIA,OAAO,CACT"}

package/dist/{routes-BbNpbNjb.mjs → routes-CT4-zLOt.mjs}

@@ -1,2 +1,2 @@
-import{combineAdminRoutes as e,defineAdminRoute as t,safeAudit as n}from"@murumets-ee/core";const r=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;function i(e){return e!==void 0&&r.test(e)}const a=[`image`,`video`,`audio`,`document`,`other`];function o(e){return a.includes(e)}function s(e,t){if(e===null||!/^\d+$/.test(e))return t;let n=Number(e);return Number.isSafeInteger(n)?n:t}function c(e,t=200){return new Response(JSON.stringify(e),{status:t,headers:{"Content-Type":`application/json`}})}function l(e,t){return c({error:e},t)}const u={clientPromise:null};async function d(){if(!u.clientPromise){let e=(async()=>{let{getApp:e}=await import(`@murumets-ee/core`),{createStorageClient:t}=await import(`@murumets-ee/storage`),{getStorageConfig:n}=await import(`@murumets-ee/storage/plugin`),r=e();return t(n(),{app:r})})();e.catch(()=>{u.clientPromise===e&&(u.clientPromise=null)}),u.clientPromise=e}return u.clientPromise}async function f(){let{createAdminClient:e}=await import(`@murumets-ee/core/clients`),{MediaClient:t}=await import(`./client-BZY26jaX.mjs`),{Media:n}=await import(`./entity-B75A4L3p.mjs`),r=await d();return new t({admin:e(n),storage:r})}const p=async(e,t)=>{let{isStorageConfigured:n,getStorageConfigReason:r}=await import(`@murumets-ee/storage`),a=t.segments;if(a.length===2&&a[1]===`usage`){let e=a[0];if(!i(e))return l(`Invalid media ID format`,400);let{findMediaUsages:t}=await import(`./usage-DmdsFJpK.mjs`),{getApp:n}=await import(`@murumets-ee/core`);return c({usages:await t(e,n())})}if(a.length>=2)return l(`Not found`,404);let u=a.length>0?a[0]:void 0;if(u!==void 0&&!i(u))return l(`Invalid media ID format`,400);if(!n()){let e=r()??`Storage not configured`;return a.length>0?c({error:e,configured:!1,reason:e},503):c({items:[],total:0,configured:!1,reason:e})}let d=await f();if(u!==void 0){let e=await d.findById(u);if(!e)return l(`Media not found`,404);let t=await d.getUrl(u);return c({...e,url:t})}let p=new URL(e.url),m=p.searchParams.get(`search`)??void 0,h=p.searchParams.get(`mediaType`),g=h!==null&&o(h)?h:void 0,_=Math.min(Math.max(s(p.searchParams.get(`limit`),24),1),100),v=Math.min(s(p.searchParams.get(`offset`),0),1e5),y=await d.findMany({...m!==void 0&&{search:m},...g!==void 0&&{mediaType:g},limit:_,offset:v}),b=y.items.map(e=>e.id),[x,S]=await Promise.all([d.getUrls(b),d.getVariantUrls(b,`thumbnail`)]);return c({items:y.items.map(e=>{let t=S.get(e.id);return{id:e.id,title:e.title??null,alt:e.alt??null,filename:e.filename,mimeType:e.mimeType,size:e.size,mediaType:e.mediaType,url:x.get(e.id)??``,...t!==void 0&&{thumbnailUrl:t},width:e.width??null,height:e.height??null}}),total:y.total})},m=async(e,t)=>{let{isStorageConfigured:r,getStorageConfigReason:i,detectMimeType:a}=await import(`@murumets-ee/storage`);if(t.segments.length>0)return l(`Not found`,404);if(!r())return l(i()??`Storage not configured`,503);let o=await f(),s=(await e.formData()).get(`file`);if(!(s instanceof File)||s.size===0)return l(`No file provided`,400);if(s.size>50*1024*1024)return l(`File too large: ${(s.size/1024/1024).toFixed(1)} MB exceeds 50 MB limit`,400);let u=Buffer.from(await s.arrayBuffer()),{mimeType:d,mismatch:p}=await a(u,s.type||`application/octet-stream`);if(p)return l(`File content doesn't match declared type: claimed ${s.type}, detected ${d}`,400);let m=await o.upload(u,{filename:s.name,mimeType:d,size:s.size,uploadedBy:t.user.id}),h={id:m.media.id,title:m.media.title??null,alt:m.media.alt??null,filename:m.media.filename,mimeType:m.media.mimeType,size:m.media.size,mediaType:m.media.mediaType,url:m.url,width:m.media.width??null,height:m.media.height??null};return n(t,{action:`media.upload`,entityType:`media`,entityId:m.media.id,userId:t.user.id,...t.user.name!==void 0&&{userName:t.user.name},changes:{filename:m.media.filename,mimeType:m.media.mimeType,size:m.media.size,mediaType:m.media.mediaType}}),c(h,201)},h=async(e,t)=>{let{isStorageConfigured:r,getStorageConfigReason:i}=await import(`@murumets-ee/storage`);if(t.segments.length!==1)return l(`Not found`,404);if(!r())return l(i()??`Storage not configured`,503);let{regenerateAllVariants:a}=await import(`./regenerate-variants-DtA5pKjj.mjs`),{getApp:o,getContext:s}=await import(`@murumets-ee/core`),{resolveImageStyles:u}=await import(`./resolve-image-styles-B2pbn_AH.mjs`),{createStorageClient:d}=await import(`@murumets-ee/storage`),{getStorageConfig:f}=await import(`@murumets-ee/storage/plugin`),p=o(),m=await u(p,p.logger);if(!m||Object.keys(m).length===0)return l(`No image styles configured`,400);let h=await a({app:p,storage:d(f(),{app:p}),logger:p.logger.child({media:!0}),styles:m,contextResolver:()=>{let e=s();if(!(!e?.user||!e?.checker))return{user:e.user,checker:e.checker,...e.scope!==void 0&&{scope:e.scope}}}});return n(t,{action:`media.regenerate_variants`,userId:t.user.id,...t.user.name!==void 0&&{userName:t.user.name},metadata:{total:h.total,processed:h.processed,errors:h.errors}}),c(h)},g=async(e,t)=>{let r=t.segments;if(r.length===0)return l(`Media ID required`,400);if(r.length>1)return l(`Not found`,404);let a=r[0];if(!i(a))return l(`Invalid media ID format`,400);let{isStorageConfigured:o,getStorageConfigReason:s}=await import(`@murumets-ee/storage`);return o()?(await(await f()).delete(a),n(t,{action:`media.delete`,entityType:`media`,entityId:a,userId:t.user.id,...t.user.name!==void 0&&{userName:t.user.name}}),c({deleted:1})):l(s()??`Storage not configured`,503)},_=[`admin`,`editor`,`agent`,`viewer`],v=[`admin`,`editor`];function y(){return e([t({prefix:`media`,path:``,method:`GET`,permission:`media:view`,defaultRoles:_,matchAnyPath:!0,description:`Read media — list, single item, or referencing-entity usage report.`,handler:p}),t({prefix:`media`,path:``,method:`POST`,permission:`media:create`,defaultRoles:v,description:"Upload a media file (multipart FormData with `file` field).",handler:m}),t({prefix:`media`,path:`regenerate-variants`,method:`POST`,permission:`media:create`,defaultRoles:v,description:`Regenerate every image-style variant for every media row.`,handler:h}),t({prefix:`media`,path:``,method:`DELETE`,permission:`media:delete`,defaultRoles:v,matchAnyPath:!0,description:`Delete a media record + its storage object.`,handler:g})])}export{y as t};
-//# sourceMappingURL=routes-BbNpbNjb.mjs.map
+import{combineAdminRoutes as e,defineAdminRoute as t,safeAudit as n}from"@murumets-ee/core";const r=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;function i(e){return e!==void 0&&r.test(e)}const a=[`image`,`video`,`audio`,`document`,`other`];function o(e){return a.includes(e)}function s(e,t){if(e===null||!/^\d+$/.test(e))return t;let n=Number(e);return Number.isSafeInteger(n)?n:t}function c(e,t=200){return new Response(JSON.stringify(e),{status:t,headers:{"Content-Type":`application/json`}})}function l(e,t){return c({error:e},t)}const u={clientPromise:null};async function d(){if(!u.clientPromise){let e=(async()=>{let{getApp:e}=await import(`@murumets-ee/core`),{createStorageClient:t}=await import(`@murumets-ee/storage`),{getStorageConfig:n}=await import(`@murumets-ee/storage/plugin`),r=e();return t(n(),{app:r})})();e.catch(()=>{u.clientPromise===e&&(u.clientPromise=null)}),u.clientPromise=e}return u.clientPromise}async function f(){let{createAdminClient:e}=await import(`@murumets-ee/core/clients`),{MediaClient:t}=await import(`./client-BL8RADZv.mjs`),{Media:n}=await import(`./entity-Caba_NFw.mjs`),r=await d();return new t({admin:e(n),storage:r})}const p=async(e,t)=>{let{isStorageConfigured:n,getStorageConfigReason:r}=await import(`@murumets-ee/storage`),a=t.segments;if(a.length===2&&a[1]===`usage`){let e=a[0];if(!i(e))return l(`Invalid media ID format`,400);let{findMediaUsages:t}=await import(`./usage-CVAqkS6h.mjs`),{getApp:n}=await import(`@murumets-ee/core`);return c({usages:await t(e,n())})}if(a.length>=2)return l(`Not found`,404);let u=a.length>0?a[0]:void 0;if(u!==void 0&&!i(u))return l(`Invalid media ID format`,400);if(!n()){let e=r()??`Storage not configured`;return a.length>0?c({error:e,configured:!1,reason:e},503):c({items:[],total:0,configured:!1,reason:e})}let d=await f();if(u!==void 0){let e=await d.findById(u);if(!e)return l(`Media not found`,404);let t=await d.getUrl(u);return c({...e,url:t})}let p=new URL(e.url),m=p.searchParams.get(`search`)??void 0,h=p.searchParams.get(`mediaType`),g=h!==null&&o(h)?h:void 0,_=Math.min(Math.max(s(p.searchParams.get(`limit`),24),1),100),v=Math.min(s(p.searchParams.get(`offset`),0),1e5),y=await d.findMany({...m!==void 0&&{search:m},...g!==void 0&&{mediaType:g},limit:_,offset:v}),b=y.items.map(e=>e.id),[x,S]=await Promise.all([d.getUrls(b),d.getVariantUrls(b,`thumbnail`)]);return c({items:y.items.map(e=>{let t=S.get(e.id);return{id:e.id,title:e.title??null,alt:e.alt??null,filename:e.filename,mimeType:e.mimeType,size:e.size,mediaType:e.mediaType,url:x.get(e.id)??``,...t!==void 0&&{thumbnailUrl:t},width:e.width??null,height:e.height??null}}),total:y.total})},m=async(e,t)=>{let{isStorageConfigured:r,getStorageConfigReason:i,detectMimeType:a}=await import(`@murumets-ee/storage`);if(t.segments.length>0)return l(`Not found`,404);if(!r())return l(i()??`Storage not configured`,503);let o=await f(),s=(await e.formData()).get(`file`);if(!(s instanceof File)||s.size===0)return l(`No file provided`,400);if(s.size>50*1024*1024)return l(`File too large: ${(s.size/1024/1024).toFixed(1)} MB exceeds 50 MB limit`,400);let u=Buffer.from(await s.arrayBuffer()),{mimeType:d,mismatch:p}=await a(u,s.type||`application/octet-stream`);if(p)return l(`File content doesn't match declared type: claimed ${s.type}, detected ${d}`,400);let m=await o.upload(u,{filename:s.name,mimeType:d,size:s.size,uploadedBy:t.user.id}),h={id:m.media.id,title:m.media.title??null,alt:m.media.alt??null,filename:m.media.filename,mimeType:m.media.mimeType,size:m.media.size,mediaType:m.media.mediaType,url:m.url,width:m.media.width??null,height:m.media.height??null};return n(t,{action:`media.upload`,entityType:`media`,entityId:m.media.id,userId:t.user.id,...t.user.name!==void 0&&{userName:t.user.name},changes:{filename:m.media.filename,mimeType:m.media.mimeType,size:m.media.size,mediaType:m.media.mediaType}}),c(h,201)},h=async(e,t)=>{let{isStorageConfigured:r,getStorageConfigReason:i}=await import(`@murumets-ee/storage`);if(t.segments.length!==1)return l(`Not found`,404);if(!r())return l(i()??`Storage not configured`,503);let{regenerateAllVariants:a}=await import(`./regenerate-variants-BysyeIoA.mjs`),{getApp:o,getContext:s}=await import(`@murumets-ee/core`),{resolveImageStyles:u}=await import(`./resolve-image-styles-qxVgkNT_.mjs`),{createStorageClient:d}=await import(`@murumets-ee/storage`),{getStorageConfig:f}=await import(`@murumets-ee/storage/plugin`),p=o(),m=await u(p,p.logger);if(!m||Object.keys(m).length===0)return l(`No image styles configured`,400);let h=await a({app:p,storage:d(f(),{app:p}),logger:p.logger.child({media:!0}),styles:m,contextResolver:()=>{let e=s();if(!(!e?.user||!e?.checker))return{user:e.user,checker:e.checker,...e.scope!==void 0&&{scope:e.scope}}}});return n(t,{action:`media.regenerate_variants`,userId:t.user.id,...t.user.name!==void 0&&{userName:t.user.name},metadata:{total:h.total,processed:h.processed,errors:h.errors}}),c(h)},g=async(e,t)=>{let r=t.segments;if(r.length===0)return l(`Media ID required`,400);if(r.length>1)return l(`Not found`,404);let a=r[0];if(!i(a))return l(`Invalid media ID format`,400);let{isStorageConfigured:o,getStorageConfigReason:s}=await import(`@murumets-ee/storage`);return o()?(await(await f()).delete(a),n(t,{action:`media.delete`,entityType:`media`,entityId:a,userId:t.user.id,...t.user.name!==void 0&&{userName:t.user.name}}),c({deleted:1})):l(s()??`Storage not configured`,503)},_=[`admin`,`editor`,`agent`,`viewer`],v=[`admin`,`editor`];function y(){return e([t({prefix:`media`,path:``,method:`GET`,permission:`media:view`,defaultRoles:_,matchAnyPath:!0,description:`Read media — list, single item, or referencing-entity usage report.`,handler:p}),t({prefix:`media`,path:``,method:`POST`,permission:`media:create`,defaultRoles:v,description:"Upload a media file (multipart FormData with `file` field).",handler:m}),t({prefix:`media`,path:`regenerate-variants`,method:`POST`,permission:`media:create`,defaultRoles:v,description:`Regenerate every image-style variant for every media row.`,handler:h}),t({prefix:`media`,path:``,method:`DELETE`,permission:`media:delete`,defaultRoles:v,matchAnyPath:!0,description:`Delete a media record + its storage object.`,handler:g})])}export{y as t};
+//# sourceMappingURL=routes-CT4-zLOt.mjs.map

package/dist/{routes-BbNpbNjb.mjs.map → routes-CT4-zLOt.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"routes-BbNpbNjb.mjs","names":[],"sources":["../src/admin/routes.ts"],"sourcesContent":["/**\n * Media admin routes — one static `defineAdminRoute` per HTTP method.\n *\n * **URL surface served by this module:**\n *\n *   - GET    /api/admin/media                       — list with search/filter + URLs\n *   - GET    /api/admin/media/<id>                  — single record with URL\n *   - GET    /api/admin/media/<id>/usage            — entities referencing this media\n *   - POST   /api/admin/media                       — upload (multipart FormData)\n *   - POST   /api/admin/media/regenerate-variants   — bulk variant regeneration\n *   - DELETE /api/admin/media/<id>                  — delete + storage cleanup\n *\n * Standard entity CRUD (PATCH with translations) falls through to the\n * generic entity handler — add `Media` to `entities` in your handler config.\n *\n * **Why per-method `defineAdminRoute`** (vs. the previous top-level\n * `resource: 'media'` + auto-mapped permission):\n *\n *   - The wrapper (`guardedHandler` from `@murumets-ee/core`) owns the\n *     permission gate, `permission.denied` audit, and 403 body shape\n *     uniformly with every other migrated plugin. The previous shape\n *     relied on `METHOD_TO_ACTION` auto-mapping at the api-handler\n *     dispatch level which couldn't emit per-route audit metadata.\n *   - Inline `if (!checkPermission('media', 'create')) ...` defenses\n *     at the regenerate-variants / upload / delete branches are now\n *     redundant — the wrapper enforces the permission BEFORE the\n *     handler runs.\n *\n * **`matchAnyPath` rationale:** media's URL surface predates the\n * static-second-segment convention every other plugin follows\n * (`/taxonomy/<vocab>/<id>`, `/settings/<namespace>/<rest>`). The\n * second segment under `/media` is the media id itself — a runtime\n * UUID — which the dispatcher's literal `segments[0]` match would\n * miss for every request. The catch-all flag declares \"this entry\n * claims every (prefix, method) sub-path no other entry matched\" so\n * the existing URL contract works under the per-method dispatch\n * model. Static POST sub-paths (`regenerate-variants`) take\n * precedence over the catch-all entry on POST. See\n * `DefineAdminRouteSpec.matchAnyPath` in `@murumets-ee/core` for the\n * full contract.\n *\n * **Default roles:** broad for view (`['admin', 'editor', 'agent',\n * 'viewer']`), narrower for writes (`['admin', 'editor']`).\n * Conservative starting point — apps can grant more via the\n * Permissions UI.\n *\n * @example\n * ```typescript\n * import { createAdminApiHandler } from '@murumets-ee/admin-ui/server'\n * import { mediaRoutes } from '@murumets-ee/media/admin'\n * import { Media } from '@murumets-ee/media'\n *\n * const handler = createAdminApiHandler({\n *   authenticate: async (req) => { ... },\n *   entities: [Article, Media],\n *   routes: [...mediaRoutes()],\n * })\n * ```\n */\n\nimport {\n  type AdminRoute,\n  type AdminRouteHandler,\n  combineAdminRoutes,\n  defineAdminRoute,\n  safeAudit,\n} from '@murumets-ee/core'\nimport type { MediaClient } from '../client.js'\nimport type { MediaPickerItem, MediaPickerListResult } from '../picker/types.js'\n\n// ---------------------------------------------------------------------------\n// Validation\n// ---------------------------------------------------------------------------\n\nconst UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i\n\nfunction isValidUuid(value: string | undefined): value is string {\n  return value !== undefined && UUID_RE.test(value)\n}\n\n/**\n * Closed enum of allowed `mediaType` filter values, in lockstep with the\n * `mediaType` field on the Media entity. The list MUST match\n * `MediaListOptions.mediaType` (declared in `../types.js`) — TypeScript\n * doesn't link the two automatically, so the small drift risk is\n * accepted in exchange for not pulling a runtime dep on the entity\n * schema package just to read its enum.\n *\n * Used as both the runtime allowlist (`isAllowedMediaType`) and the\n * source of truth for the narrowed type the guard produces — keeping\n * `as` casts off the handler's hot path.\n */\nconst ALLOWED_MEDIA_TYPES = ['image', 'video', 'audio', 'document', 'other'] as const\ntype AllowedMediaType = (typeof ALLOWED_MEDIA_TYPES)[number]\n\nfunction isAllowedMediaType(value: string): value is AllowedMediaType {\n  // Cast to readonly string[] so the typed-tuple `includes` check works\n  // with an arbitrary string input — `Array.prototype.includes`'s\n  // signature on a typed tuple only accepts members of the tuple\n  // (TS 4.9+ literal-narrowing), which is exactly what we want to\n  // sidestep here.\n  return (ALLOWED_MEDIA_TYPES as readonly string[]).includes(value)\n}\n\n/**\n * Hard cap on the `offset` query param. The dispatcher's allowed-pages\n * model is `limit ∈ [1, 100]`; even with the max page size that's\n * 1000 pages before hitting MAX_OFFSET, which is well beyond any\n * realistic admin-UI scroll depth. Forces slow-discard offset attacks\n * (`?offset=999999999`) to revert to a sane upper bound. Cursor-based\n * pagination would let this go higher, but the media list is\n * offset-based by convention with the entity-list shell.\n */\nconst MAX_OFFSET = 100_000\n\n/**\n * Strict non-negative integer parser for query params.\n *\n * `Number(raw)` silently coerces blanks (`'' → 0`), hex (`'0x05' → 5`),\n * exponent notation (`'1e2' → 100`), and signed (`'+5'/'-5'`) values —\n * all of which pass a downstream `Number.isInteger(n) && n >= 0` check.\n * Pre-filtering with `/^\\d+$/` keeps the contract honest: \"if you don't\n * send a pure non-negative integer string, you get the default.\" Same\n * pattern as `packages/taxonomy/src/admin/routes.ts:handleGet` tree\n * branch from PR-C-taxonomy.\n */\nfunction parseUintParam(raw: string | null, fallback: number): number {\n  if (raw === null || !/^\\d+$/.test(raw)) return fallback\n  const parsed = Number(raw)\n  // The regex above stops hex / exponent / signed / whitespace / blank\n  // inputs, but a long digit-only string still slips past — `Number(...)`\n  // returns `Infinity` past ~309 digits, and precision is lost past\n  // 2^53. Both would propagate through `client.findMany`'s\n  // `offset: parsed` into a Postgres query that either crashes the\n  // driver (`Infinity` is not a valid bigint) or silently rounds (the\n  // 2^53 precision-loss boundary). Reject via `Number.isSafeInteger`\n  // so overflowing inputs revert to `fallback` like every other\n  // malformed value.\n  if (!Number.isSafeInteger(parsed)) return fallback\n  return parsed\n}\n\n// ---------------------------------------------------------------------------\n// Response helpers\n// ---------------------------------------------------------------------------\n\nfunction jsonResponse(data: unknown, status = 200): Response {\n  return new Response(JSON.stringify(data), {\n    status,\n    headers: { 'Content-Type': 'application/json' },\n  })\n}\n\nfunction jsonError(message: string, status: number): Response {\n  return jsonResponse({ error: message }, status)\n}\n\n// ---------------------------------------------------------------------------\n// Per-request MediaClient factory + cached storage client\n// ---------------------------------------------------------------------------\n//\n// MediaClient and its AdminClient MUST be built per-request — AdminClient's\n// context resolver is captured eagerly at construction (see\n// buildContextResolver in @murumets-ee/core/clients). A module-level singleton\n// would bake the first request's user + tenant scope into every subsequent\n// request's writes — a cross-request permission/scope leak.\n//\n// Storage config is process-global and safe to cache once.\n\ntype StorageClient = Awaited<ReturnType<typeof import('@murumets-ee/storage').createStorageClient>>\n\ninterface StorageState {\n  clientPromise: Promise<StorageClient> | null\n}\n\n// Module-level state. `null` once eviction fires on a rejection so the next\n// request gets a fresh resolution attempt (see `getStorage`'s `.catch`).\nconst storageState: StorageState = { clientPromise: null }\n\n/**\n * Resolve the process-wide storage client. The pending-promise slot is\n * cleared on rejection so a transient `createStorageClient` failure\n * (DB hiccup, misconfig) doesn't poison every subsequent media request\n * for the lifetime of the Node process. Same pattern as\n * `packages/taxonomy/src/admin/routes.ts:getClient` from PR-C-taxonomy.\n */\nasync function getStorage(): Promise<StorageClient> {\n  if (!storageState.clientPromise) {\n    const pending = (async () => {\n      const { getApp } = await import('@murumets-ee/core')\n      const { createStorageClient } = await import('@murumets-ee/storage')\n      const { getStorageConfig } = await import('@murumets-ee/storage/plugin')\n      const app = getApp()\n      return createStorageClient(getStorageConfig(), { app })\n    })()\n    // Clear the slot on rejection so a transient failure doesn't poison\n    // every subsequent request. `pending.catch(handler)` attaches a\n    // synchronous rejection listener that resets the cached slot — the\n    // handler returns `undefined`, NOT a re-throw — so the new\n    // `.catch`-returned promise resolves, but we never await or hold\n    // that promise. The ORIGINAL `pending` (stored in\n    // `storageState.clientPromise`) is what callers `await`, and it's\n    // still in its rejected state — so the caller observing this\n    // resolution sees the underlying error. The `.catch` also marks\n    // the rejection as \"handled\" for Node's unhandled-rejection\n    // tracker. `storageState.clientPromise` holds the original `pending`\n    // so concurrent in-flight callers share one resolution.\n    pending.catch(() => {\n      if (storageState.clientPromise === pending) storageState.clientPromise = null\n    })\n    storageState.clientPromise = pending\n  }\n  return storageState.clientPromise\n}\n\nasync function getMediaClient(): Promise<MediaClient> {\n  const { createAdminClient } = await import('@murumets-ee/core/clients')\n  const { MediaClient } = await import('../client.js')\n  const { Media } = await import('../entity.js')\n  const storage = await getStorage()\n  const admin = createAdminClient(Media)\n  return new MediaClient({ admin, storage })\n}\n\n// ---------------------------------------------------------------------------\n// Handlers\n// ---------------------------------------------------------------------------\n\nconst handleGet: AdminRouteHandler = async (req, ctx) => {\n  const { isStorageConfigured, getStorageConfigReason } = await import('@murumets-ee/storage')\n  const segments = ctx.segments\n\n  // GET /media/<id>/usage — DB-only lookup, safe even when storage is\n  // unconfigured. Validate the UUID first so a malformed id 400s\n  // uniformly with the storage-configured branch below.\n  if (segments.length === 2 && segments[1] === 'usage') {\n    const id = segments[0]\n    if (!isValidUuid(id)) return jsonError('Invalid media ID format', 400)\n\n    const { findMediaUsages } = await import('../usage.js')\n    const { getApp } = await import('@murumets-ee/core')\n    const app = getApp()\n    const usages = await findMediaUsages(id, app)\n    return jsonResponse({ usages })\n  }\n\n  // Reject unknown sub-paths explicitly. The wrapper-gate has already\n  // passed (caller has `media:view`); a handler-level 404 here matches\n  // the dispatcher's miss-shape so unknown URLs don't fall through to\n  // the single-id branch and 400/500 with a misleading reason. The\n  // only valid 2-segment URL is `<id>/usage`, which was already\n  // claimed by the early-return above — anything else with >=2\n  // segments is not a recognized media route.\n  if (segments.length >= 2) return jsonError('Not found', 404)\n\n  // GET /media/<id> — validate UUID up front so a bad request still\n  // 400s when storage happens to be unconfigured (matches DELETE).\n  const singleId = segments.length > 0 ? segments[0] : undefined\n  if (singleId !== undefined && !isValidUuid(singleId)) {\n    return jsonError('Invalid media ID format', 400)\n  }\n\n  // Everything below needs a working storage client. If env isn't\n  // wired, return a structured \"disabled\" response rather than 500 —\n  // the media list page renders a banner and new admins can finish\n  // onboarding without being blocked on a crash loop.\n  if (!isStorageConfigured()) {\n    const reason = getStorageConfigReason() ?? 'Storage not configured'\n    if (segments.length > 0) {\n      // Single item — treat as not-found-ish to avoid leaking\n      // existence; include reason so the UI can surface it.\n      return jsonResponse({ error: reason, configured: false, reason }, 503)\n    }\n    // GET /media — empty list + disabled flag for the picker's banner.\n    const response: MediaPickerListResult & { configured: false; reason: string } = {\n      items: [],\n      total: 0,\n      configured: false,\n      reason,\n    }\n    return jsonResponse(response)\n  }\n\n  const client = await getMediaClient()\n\n  // GET /media/<id> — single item with URL (full record for EntityForm + picker)\n  if (singleId !== undefined) {\n    const record = await client.findById(singleId)\n    if (!record) return jsonError('Media not found', 404)\n\n    const url = await client.getUrl(singleId)\n    return jsonResponse({ ...record, url })\n  }\n\n  // GET /media — list with search/filter + batch URL resolution\n  const url = new URL(req.url)\n  const search = url.searchParams.get('search') ?? undefined\n  // mediaType MUST be validated against the entity's closed enum before\n  // it reaches `client.findMany` — the previous shape force-cast the raw\n  // query value with `as 'image' | ...` which is a type-system lie. A\n  // bogus value like `?mediaType=bogus` would parameterize into\n  // `WHERE media_type = 'bogus'` (no SQL injection — Drizzle is\n  // parameterized — but the row count is silently zero, which is\n  // confusing). Empty string from `?mediaType=` is also passed-through\n  // by the prior `?? undefined` shape since empty string is not null.\n  // Allowlist + type guard drops bogus / empty values cleanly so the\n  // filter is omitted instead of applied with a no-match value.\n  const rawMediaType = url.searchParams.get('mediaType')\n  const mediaType =\n    rawMediaType !== null && isAllowedMediaType(rawMediaType) ? rawMediaType : undefined\n  // Strict parsing keeps the contract honest — see `parseUintParam`\n  // JSDoc. Cap limit to [1, 100] and offset to [0, MAX_OFFSET] so a\n  // request can't ask for an unboundedly large page nor force a\n  // slow-discard scan with `?offset=99999999`.\n  const limit = Math.min(Math.max(parseUintParam(url.searchParams.get('limit'), 24), 1), 100)\n  const offset = Math.min(parseUintParam(url.searchParams.get('offset'), 0), MAX_OFFSET)\n\n  const result = await client.findMany({\n    ...(search !== undefined && { search }),\n    ...(mediaType !== undefined && { mediaType }),\n    limit,\n    offset,\n  })\n\n  // Resolve original URLs + thumbnail variant URLs for all items.\n  const ids = result.items.map((item) => item.id)\n  const [urlMap, thumbMap] = await Promise.all([\n    client.getUrls(ids),\n    client.getVariantUrls(ids, 'thumbnail'),\n  ])\n\n  const items: (MediaPickerItem & { thumbnailUrl?: string })[] = result.items.map((item) => {\n    const thumbnailUrl = thumbMap.get(item.id)\n    return {\n      id: item.id,\n      title: item.title ?? null,\n      alt: item.alt ?? null,\n      filename: item.filename,\n      mimeType: item.mimeType,\n      size: item.size,\n      mediaType: item.mediaType,\n      url: urlMap.get(item.id) ?? '',\n      ...(thumbnailUrl !== undefined && { thumbnailUrl }),\n      width: item.width ?? null,\n      height: item.height ?? null,\n    }\n  })\n\n  const response: MediaPickerListResult = { items, total: result.total }\n  return jsonResponse(response)\n}\n\nconst handleUpload: AdminRouteHandler = async (req, ctx) => {\n  const { isStorageConfigured, getStorageConfigReason, detectMimeType } = await import(\n    '@murumets-ee/storage'\n  )\n\n  // Upload is registered at `path: ''` (NOT matchAnyPath) — the\n  // dispatcher only invokes this handler when segments=[]. The api-\n  // handler ALSO rejects empty/whitespace-only first segments with a\n  // 400 before any plugin dispatcher runs (see\n  // `packages/admin-ui/src/server/api-handler/index.ts` segment-\n  // validation block). So this guard is defense-in-depth — per HANDOFF\n  // §\"Defense-in-depth `&& segments[i]` guards are fine\" — protecting\n  // against a future framework invariant change that lets a non-empty\n  // segment reach a `path: ''` static entry.\n  if (ctx.segments.length > 0) return jsonError('Not found', 404)\n\n  if (!isStorageConfigured()) {\n    return jsonError(getStorageConfigReason() ?? 'Storage not configured', 503)\n  }\n\n  const client = await getMediaClient()\n\n  const formData = await req.formData()\n  const file = formData.get('file')\n  // FormData `get` returns string | File | null. Reject anything that\n  // isn't a File so the typed `file.size`/`file.arrayBuffer()` below\n  // is safe without a runtime cast.\n  if (!(file instanceof File) || file.size === 0) {\n    return jsonError('No file provided', 400)\n  }\n\n  // Guard against oversized uploads (50 MB limit). Hardcoded rather\n  // than read from getMediaConfig() to keep this handler independent\n  // of plugin-init order — the plugin's resolved config may not be\n  // populated yet under CLI / non-RSC startup paths.\n  const MAX_UPLOAD_SIZE = 50 * 1024 * 1024\n  if (file.size > MAX_UPLOAD_SIZE) {\n    return jsonError(\n      `File too large: ${(file.size / 1024 / 1024).toFixed(1)} MB exceeds 50 MB limit`,\n      400,\n    )\n  }\n\n  const buffer = Buffer.from(await file.arrayBuffer())\n\n  // Detect actual MIME type from file content (prevents spoofing).\n  const { mimeType, mismatch } = await detectMimeType(\n    buffer,\n    file.type || 'application/octet-stream',\n  )\n  if (mismatch) {\n    return jsonError(\n      `File content doesn't match declared type: claimed ${file.type}, detected ${mimeType}`,\n      400,\n    )\n  }\n\n  const result = await client.upload(buffer, {\n    filename: file.name,\n    mimeType,\n    size: file.size,\n    uploadedBy: ctx.user.id,\n  })\n\n  const item: MediaPickerItem = {\n    id: result.media.id,\n    title: result.media.title ?? null,\n    alt: result.media.alt ?? null,\n    filename: result.media.filename,\n    mimeType: result.media.mimeType,\n    size: result.media.size,\n    mediaType: result.media.mediaType,\n    url: result.url,\n    width: result.media.width ?? null,\n    height: result.media.height ?? null,\n  }\n\n  safeAudit(ctx, {\n    action: 'media.upload',\n    entityType: 'media',\n    entityId: result.media.id,\n    userId: ctx.user.id,\n    ...(ctx.user.name !== undefined && { userName: ctx.user.name }),\n    changes: {\n      filename: result.media.filename,\n      mimeType: result.media.mimeType,\n      size: result.media.size,\n      mediaType: result.media.mediaType,\n    },\n  })\n\n  return jsonResponse(item, 201)\n}\n\nconst handleRegenerateVariants: AdminRouteHandler = async (_req, ctx) => {\n  const { isStorageConfigured, getStorageConfigReason } = await import('@murumets-ee/storage')\n\n  // Static POST path='regenerate-variants' — the dispatcher only invokes\n  // this handler when `segments[0] === 'regenerate-variants'`. Trailing\n  // segments (e.g. POST /media/regenerate-variants/extra) aren't a\n  // supported sub-route.\n  if (ctx.segments.length !== 1) return jsonError('Not found', 404)\n\n  if (!isStorageConfigured()) {\n    return jsonError(getStorageConfigReason() ?? 'Storage not configured', 503)\n  }\n\n  const { regenerateAllVariants } = await import('../regenerate-variants.js')\n  const { getApp, getContext } = await import('@murumets-ee/core')\n  const { resolveImageStyles } = await import('../resolve-image-styles.js')\n  const { createStorageClient } = await import('@murumets-ee/storage')\n  const { getStorageConfig } = await import('@murumets-ee/storage/plugin')\n\n  const app = getApp()\n  const styles = await resolveImageStyles(app, app.logger)\n  if (!styles || Object.keys(styles).length === 0) {\n    return jsonError('No image styles configured', 400)\n  }\n\n  const storageConfig = getStorageConfig()\n  const storage = createStorageClient(storageConfig, { app })\n\n  const result = await regenerateAllVariants({\n    app,\n    storage,\n    logger: app.logger.child({ media: true }),\n    styles,\n    contextResolver: () => {\n      const requestCtx = getContext()\n      if (!requestCtx?.user || !requestCtx?.checker) return undefined\n      return {\n        user: requestCtx.user,\n        checker: requestCtx.checker,\n        ...(requestCtx.scope !== undefined && { scope: requestCtx.scope }),\n      }\n    },\n  })\n\n  safeAudit(ctx, {\n    action: 'media.regenerate_variants',\n    userId: ctx.user.id,\n    ...(ctx.user.name !== undefined && { userName: ctx.user.name }),\n    metadata: { total: result.total, processed: result.processed, errors: result.errors },\n  })\n\n  return jsonResponse(result)\n}\n\nconst handleDelete: AdminRouteHandler = async (_req, ctx) => {\n  const segments = ctx.segments\n\n  // DELETE /media — no id supplied. Reject as 400, NOT 404, so a\n  // caller confusing \"no id\" with \"id not found\" gets a meaningful\n  // error. The wrapper-gate has already validated the caller has\n  // media:delete, so the 400 isn't an information-disclosure vector.\n  if (segments.length === 0) return jsonError('Media ID required', 400)\n\n  // Reject sub-paths beyond /<id> — DELETE /media/<id>/usage etc.\n  if (segments.length > 1) return jsonError('Not found', 404)\n\n  const id = segments[0]\n  if (!isValidUuid(id)) return jsonError('Invalid media ID format', 400)\n\n  const { isStorageConfigured, getStorageConfigReason } = await import('@murumets-ee/storage')\n  if (!isStorageConfigured()) {\n    // Can't safely delete — MediaClient needs storage to remove the\n    // actual object, and partial delete (DB row gone, object orphaned)\n    // would leak storage. Surface the reason so the UI can display it.\n    return jsonError(getStorageConfigReason() ?? 'Storage not configured', 503)\n  }\n\n  // AdminClient.delete() checks entity_refs and throws\n  // ReferencedEntityError if this media is still referenced. The\n  // error bubbles to the caller's error handler which returns 409\n  // with usage details.\n  const client = await getMediaClient()\n  await client.delete(id)\n\n  safeAudit(ctx, {\n    action: 'media.delete',\n    entityType: 'media',\n    entityId: id,\n    userId: ctx.user.id,\n    ...(ctx.user.name !== undefined && { userName: ctx.user.name }),\n  })\n\n  return jsonResponse({ deleted: 1 })\n}\n\n// ---------------------------------------------------------------------------\n// Route factory\n// ---------------------------------------------------------------------------\n\n/**\n * Default roles for view: broad reach across the admin shell.\n *\n * `BUILT_IN_ROLES` in `packages/auth/src/permissions.ts` is exactly\n * `['admin', 'public', 'authenticated', 'agent']` — `admin` is\n * hardcoded as an unconditional yes in `buildPermissionChecker`,\n * `agent` is the only non-admin built-in that flows through\n * `buildInitialRoleDefinitions()` + `upsertBuiltInRoles`. The\n * `agent` entry in this list is what gives ops agents read-only\n * media access on first boot of a fresh install.\n *\n * `editor` and `viewer` are CONVENTIONAL app-defined roles —\n * apps that follow the scaffold pattern create them as part of\n * their own role catalog. Including them in `defaultRoles` doesn't\n * seed them (the seeder only iterates the built-ins above), but\n * the values DO flow into the process-local permission catalog\n * (see `registerPermission` in `@murumets-ee/core`), which the\n * forthcoming Permission Matrix UI (PR-D) reads to show \"this\n * route's recommended default grants\" against the app's actual\n * role set. The catalog is also the mechanism via which a future\n * upgrade of `upsertBuiltInRoles` could extend the seed surface\n * to app-defined roles without each plugin having to re-declare\n * its defaults.\n */\nconst VIEW_DEFAULT_ROLES = ['admin', 'editor', 'agent', 'viewer'] as const\n\n/** Default roles for create/delete — narrower than view. */\nconst WRITE_DEFAULT_ROLES = ['admin', 'editor'] as const\n\n/**\n * Build admin API routes for media management.\n *\n * Returns `AdminRoute[]` from `combineAdminRoutes` — one entry per\n * `(prefix, method)` after grouping. Callers spread the result into\n * their top-level routes list: `routes: [...mediaRoutes()]`.\n *\n * Four `defineAdminRoute` entries:\n *\n *   - GET    matchAnyPath with `media:view`   defaultRoles: VIEW_DEFAULT_ROLES\n *   - POST   path=''            `media:create` defaultRoles: WRITE_DEFAULT_ROLES\n *   - POST   path='regenerate-variants' `media:create` defaultRoles: WRITE_DEFAULT_ROLES\n *   - DELETE matchAnyPath with `media:delete` defaultRoles: WRITE_DEFAULT_ROLES\n *\n * Permissions are auto-registered by the entity catalog\n * (`buildResourceCatalog` in `@murumets-ee/auth`) AND by\n * `registerPermission` inside `defineAdminRoute`. Idempotent —\n * `registerPermission` unions `defaultRoles` on repeat registration,\n * so the framework's two pathways agree on the final grant set.\n *\n * Standard entity CRUD (PATCH with translations) is NOT registered\n * here — it falls through to the generic entity handler. Add `Media`\n * to the `entities` array in your handler config to enable it.\n */\nexport function mediaRoutes(): AdminRoute[] {\n  const entries = [\n    defineAdminRoute({\n      prefix: 'media',\n      path: '',\n      method: 'GET',\n      permission: 'media:view',\n      defaultRoles: VIEW_DEFAULT_ROLES,\n      matchAnyPath: true,\n      description: 'Read media — list, single item, or referencing-entity usage report.',\n      handler: handleGet,\n    }),\n    defineAdminRoute({\n      prefix: 'media',\n      path: '',\n      method: 'POST',\n      permission: 'media:create',\n      defaultRoles: WRITE_DEFAULT_ROLES,\n      description: 'Upload a media file (multipart FormData with `file` field).',\n      handler: handleUpload,\n    }),\n    defineAdminRoute({\n      prefix: 'media',\n      path: 'regenerate-variants',\n      method: 'POST',\n      permission: 'media:create',\n      defaultRoles: WRITE_DEFAULT_ROLES,\n      description: 'Regenerate every image-style variant for every media row.',\n      handler: handleRegenerateVariants,\n    }),\n    defineAdminRoute({\n      prefix: 'media',\n      path: '',\n      method: 'DELETE',\n      permission: 'media:delete',\n      defaultRoles: WRITE_DEFAULT_ROLES,\n      matchAnyPath: true,\n      description: 'Delete a media record + its storage object.',\n      handler: handleDelete,\n    }),\n  ]\n\n  return combineAdminRoutes(entries)\n}\n"],"mappings":"4FA0EA,MAAM,EAAU,kEAEhB,SAAS,EAAY,EAA4C,CAC/D,OAAO,IAAU,IAAA,IAAa,EAAQ,KAAK,EAAM,CAenD,MAAM,EAAsB,CAAC,QAAS,QAAS,QAAS,WAAY,QAAQ,CAG5E,SAAS,EAAmB,EAA0C,CAMpE,OAAQ,EAA0C,SAAS,EAAM,CAyBnE,SAAS,EAAe,EAAoB,EAA0B,CACpE,GAAI,IAAQ,MAAQ,CAAC,QAAQ,KAAK,EAAI,CAAE,OAAO,EAC/C,IAAM,EAAS,OAAO,EAAI,CAW1B,OADK,OAAO,cAAc,EAAO,CAC1B,EADmC,EAQ5C,SAAS,EAAa,EAAe,EAAS,IAAe,CAC3D,OAAO,IAAI,SAAS,KAAK,UAAU,EAAK,CAAE,CACxC,SACA,QAAS,CAAE,eAAgB,mBAAoB,CAChD,CAAC,CAGJ,SAAS,EAAU,EAAiB,EAA0B,CAC5D,OAAO,EAAa,CAAE,MAAO,EAAS,CAAE,EAAO,CAuBjD,MAAM,EAA6B,CAAE,cAAe,KAAM,CAS1D,eAAe,GAAqC,CAClD,GAAI,CAAC,EAAa,cAAe,CAC/B,IAAM,GAAW,SAAY,CAC3B,GAAM,CAAE,UAAW,MAAM,OAAO,qBAC1B,CAAE,uBAAwB,MAAM,OAAO,wBACvC,CAAE,oBAAqB,MAAM,OAAO,+BACpC,EAAM,GAAQ,CACpB,OAAO,EAAoB,GAAkB,CAAE,CAAE,MAAK,CAAC,IACrD,CAaJ,EAAQ,UAAY,CACd,EAAa,gBAAkB,IAAS,EAAa,cAAgB,OACzE,CACF,EAAa,cAAgB,EAE/B,OAAO,EAAa,cAGtB,eAAe,GAAuC,CACpD,GAAM,CAAE,qBAAsB,MAAM,OAAO,6BACrC,CAAE,eAAgB,MAAM,OAAO,yBAC/B,CAAE,SAAU,MAAM,OAAO,yBACzB,EAAU,MAAM,GAAY,CAElC,OAAO,IAAI,EAAY,CAAE,MADX,EAAkB,EACF,CAAE,UAAS,CAAC,CAO5C,MAAM,EAA+B,MAAO,EAAK,IAAQ,CACvD,GAAM,CAAE,sBAAqB,0BAA2B,MAAM,OAAO,wBAC/D,EAAW,EAAI,SAKrB,GAAI,EAAS,SAAW,GAAK,EAAS,KAAO,QAAS,CACpD,IAAM,EAAK,EAAS,GACpB,GAAI,CAAC,EAAY,EAAG,CAAE,OAAO,EAAU,0BAA2B,IAAI,CAEtE,GAAM,CAAE,mBAAoB,MAAM,OAAO,wBACnC,CAAE,UAAW,MAAM,OAAO,qBAGhC,OAAO,EAAa,CAAE,OAAA,MADD,EAAgB,EADzB,GACgC,CAAC,CACf,CAAC,CAUjC,GAAI,EAAS,QAAU,EAAG,OAAO,EAAU,YAAa,IAAI,CAI5D,IAAM,EAAW,EAAS,OAAS,EAAI,EAAS,GAAK,IAAA,GACrD,GAAI,IAAa,IAAA,IAAa,CAAC,EAAY,EAAS,CAClD,OAAO,EAAU,0BAA2B,IAAI,CAOlD,GAAI,CAAC,GAAqB,CAAE,CAC1B,IAAM,EAAS,GAAwB,EAAI,yBAa3C,OAZI,EAAS,OAAS,EAGb,EAAa,CAAE,MAAO,EAAQ,WAAY,GAAO,SAAQ,CAAE,IAAI,CASjE,EAAa,CALlB,MAAO,EAAE,CACT,MAAO,EACP,WAAY,GACZ,SAE0B,CAAC,CAG/B,IAAM,EAAS,MAAM,GAAgB,CAGrC,GAAI,IAAa,IAAA,GAAW,CAC1B,IAAM,EAAS,MAAM,EAAO,SAAS,EAAS,CAC9C,GAAI,CAAC,EAAQ,OAAO,EAAU,kBAAmB,IAAI,CAErD,IAAM,EAAM,MAAM,EAAO,OAAO,EAAS,CACzC,OAAO,EAAa,CAAE,GAAG,EAAQ,MAAK,CAAC,CAIzC,IAAM,EAAM,IAAI,IAAI,EAAI,IAAI,CACtB,EAAS,EAAI,aAAa,IAAI,SAAS,EAAI,IAAA,GAW3C,EAAe,EAAI,aAAa,IAAI,YAAY,CAChD,EACJ,IAAiB,MAAQ,EAAmB,EAAa,CAAG,EAAe,IAAA,GAKvE,EAAQ,KAAK,IAAI,KAAK,IAAI,EAAe,EAAI,aAAa,IAAI,QAAQ,CAAE,GAAG,CAAE,EAAE,CAAE,IAAI,CACrF,EAAS,KAAK,IAAI,EAAe,EAAI,aAAa,IAAI,SAAS,CAAE,EAAE,CAAE,IAAW,CAEhF,EAAS,MAAM,EAAO,SAAS,CACnC,GAAI,IAAW,IAAA,IAAa,CAAE,SAAQ,CACtC,GAAI,IAAc,IAAA,IAAa,CAAE,YAAW,CAC5C,QACA,SACD,CAAC,CAGI,EAAM,EAAO,MAAM,IAAK,GAAS,EAAK,GAAG,CACzC,CAAC,EAAQ,GAAY,MAAM,QAAQ,IAAI,CAC3C,EAAO,QAAQ,EAAI,CACnB,EAAO,eAAe,EAAK,YAAY,CACxC,CAAC,CAoBF,OAAO,EAAa,CADsB,MAjBqB,EAAO,MAAM,IAAK,GAAS,CACxF,IAAM,EAAe,EAAS,IAAI,EAAK,GAAG,CAC1C,MAAO,CACL,GAAI,EAAK,GACT,MAAO,EAAK,OAAS,KACrB,IAAK,EAAK,KAAO,KACjB,SAAU,EAAK,SACf,SAAU,EAAK,SACf,KAAM,EAAK,KACX,UAAW,EAAK,UAChB,IAAK,EAAO,IAAI,EAAK,GAAG,EAAI,GAC5B,GAAI,IAAiB,IAAA,IAAa,CAAE,eAAc,CAClD,MAAO,EAAK,OAAS,KACrB,OAAQ,EAAK,QAAU,KACxB,EAG4C,CAAE,MAAO,EAAO,MACnC,CAAC,EAGzB,EAAkC,MAAO,EAAK,IAAQ,CAC1D,GAAM,CAAE,sBAAqB,yBAAwB,kBAAmB,MAAM,OAC5E,wBAYF,GAAI,EAAI,SAAS,OAAS,EAAG,OAAO,EAAU,YAAa,IAAI,CAE/D,GAAI,CAAC,GAAqB,CACxB,OAAO,EAAU,GAAwB,EAAI,yBAA0B,IAAI,CAG7E,IAAM,EAAS,MAAM,GAAgB,CAG/B,GAAO,MADU,EAAI,UAAU,EACf,IAAI,OAAO,CAIjC,GAAI,EAAE,aAAgB,OAAS,EAAK,OAAS,EAC3C,OAAO,EAAU,mBAAoB,IAAI,CAQ3C,GAAI,EAAK,KADe,GAAK,KAAO,KAElC,OAAO,EACL,oBAAoB,EAAK,KAAO,KAAO,MAAM,QAAQ,EAAE,CAAC,yBACxD,IACD,CAGH,IAAM,EAAS,OAAO,KAAK,MAAM,EAAK,aAAa,CAAC,CAG9C,CAAE,WAAU,YAAa,MAAM,EACnC,EACA,EAAK,MAAQ,2BACd,CACD,GAAI,EACF,OAAO,EACL,qDAAqD,EAAK,KAAK,aAAa,IAC5E,IACD,CAGH,IAAM,EAAS,MAAM,EAAO,OAAO,EAAQ,CACzC,SAAU,EAAK,KACf,WACA,KAAM,EAAK,KACX,WAAY,EAAI,KAAK,GACtB,CAAC,CAEI,EAAwB,CAC5B,GAAI,EAAO,MAAM,GACjB,MAAO,EAAO,MAAM,OAAS,KAC7B,IAAK,EAAO,MAAM,KAAO,KACzB,SAAU,EAAO,MAAM,SACvB,SAAU,EAAO,MAAM,SACvB,KAAM,EAAO,MAAM,KACnB,UAAW,EAAO,MAAM,UACxB,IAAK,EAAO,IACZ,MAAO,EAAO,MAAM,OAAS,KAC7B,OAAQ,EAAO,MAAM,QAAU,KAChC,CAgBD,OAdA,EAAU,EAAK,CACb,OAAQ,eACR,WAAY,QACZ,SAAU,EAAO,MAAM,GACvB,OAAQ,EAAI,KAAK,GACjB,GAAI,EAAI,KAAK,OAAS,IAAA,IAAa,CAAE,SAAU,EAAI,KAAK,KAAM,CAC9D,QAAS,CACP,SAAU,EAAO,MAAM,SACvB,SAAU,EAAO,MAAM,SACvB,KAAM,EAAO,MAAM,KACnB,UAAW,EAAO,MAAM,UACzB,CACF,CAAC,CAEK,EAAa,EAAM,IAAI,EAG1B,EAA8C,MAAO,EAAM,IAAQ,CACvE,GAAM,CAAE,sBAAqB,0BAA2B,MAAM,OAAO,wBAMrE,GAAI,EAAI,SAAS,SAAW,EAAG,OAAO,EAAU,YAAa,IAAI,CAEjE,GAAI,CAAC,GAAqB,CACxB,OAAO,EAAU,GAAwB,EAAI,yBAA0B,IAAI,CAG7E,GAAM,CAAE,yBAA0B,MAAM,OAAO,sCACzC,CAAE,SAAQ,cAAe,MAAM,OAAO,qBACtC,CAAE,sBAAuB,MAAM,OAAO,uCACtC,CAAE,uBAAwB,MAAM,OAAO,wBACvC,CAAE,oBAAqB,MAAM,OAAO,+BAEpC,EAAM,GAAQ,CACd,EAAS,MAAM,EAAmB,EAAK,EAAI,OAAO,CACxD,GAAI,CAAC,GAAU,OAAO,KAAK,EAAO,CAAC,SAAW,EAC5C,OAAO,EAAU,6BAA8B,IAAI,CAMrD,IAAM,EAAS,MAAM,EAAsB,CACzC,MACA,QAJc,EADM,GAC2B,CAAE,CAAE,MAAK,CAIjD,CACP,OAAQ,EAAI,OAAO,MAAM,CAAE,MAAO,GAAM,CAAC,CACzC,SACA,oBAAuB,CACrB,IAAM,EAAa,GAAY,CAC3B,MAAC,GAAY,MAAQ,CAAC,GAAY,SACtC,MAAO,CACL,KAAM,EAAW,KACjB,QAAS,EAAW,QACpB,GAAI,EAAW,QAAU,IAAA,IAAa,CAAE,MAAO,EAAW,MAAO,CAClE,EAEJ,CAAC,CASF,OAPA,EAAU,EAAK,CACb,OAAQ,4BACR,OAAQ,EAAI,KAAK,GACjB,GAAI,EAAI,KAAK,OAAS,IAAA,IAAa,CAAE,SAAU,EAAI,KAAK,KAAM,CAC9D,SAAU,CAAE,MAAO,EAAO,MAAO,UAAW,EAAO,UAAW,OAAQ,EAAO,OAAQ,CACtF,CAAC,CAEK,EAAa,EAAO,EAGvB,EAAkC,MAAO,EAAM,IAAQ,CAC3D,IAAM,EAAW,EAAI,SAMrB,GAAI,EAAS,SAAW,EAAG,OAAO,EAAU,oBAAqB,IAAI,CAGrE,GAAI,EAAS,OAAS,EAAG,OAAO,EAAU,YAAa,IAAI,CAE3D,IAAM,EAAK,EAAS,GACpB,GAAI,CAAC,EAAY,EAAG,CAAE,OAAO,EAAU,0BAA2B,IAAI,CAEtE,GAAM,CAAE,sBAAqB,0BAA2B,MAAM,OAAO,wBAuBrE,OAtBK,GAAqB,EAY1B,MAAM,MADe,GAAgB,EACxB,OAAO,EAAG,CAEvB,EAAU,EAAK,CACb,OAAQ,eACR,WAAY,QACZ,SAAU,EACV,OAAQ,EAAI,KAAK,GACjB,GAAI,EAAI,KAAK,OAAS,IAAA,IAAa,CAAE,SAAU,EAAI,KAAK,KAAM,CAC/D,CAAC,CAEK,EAAa,CAAE,QAAS,EAAG,CAAC,EAlB1B,EAAU,GAAwB,EAAI,yBAA0B,IAAI,EAiDzE,EAAqB,CAAC,QAAS,SAAU,QAAS,SAAS,CAG3D,EAAsB,CAAC,QAAS,SAAS,CA0B/C,SAAgB,GAA4B,CA0C1C,OAAO,EAAmB,CAxCxB,EAAiB,CACf,OAAQ,QACR,KAAM,GACN,OAAQ,MACR,WAAY,aACZ,aAAc,EACd,aAAc,GACd,YAAa,sEACb,QAAS,EACV,CAAC,CACF,EAAiB,CACf,OAAQ,QACR,KAAM,GACN,OAAQ,OACR,WAAY,eACZ,aAAc,EACd,YAAa,8DACb,QAAS,EACV,CAAC,CACF,EAAiB,CACf,OAAQ,QACR,KAAM,sBACN,OAAQ,OACR,WAAY,eACZ,aAAc,EACd,YAAa,4DACb,QAAS,EACV,CAAC,CACF,EAAiB,CACf,OAAQ,QACR,KAAM,GACN,OAAQ,SACR,WAAY,eACZ,aAAc,EACd,aAAc,GACd,YAAa,8CACb,QAAS,EACV,CAAC,CAG6B,CAAC"}
+{"version":3,"file":"routes-CT4-zLOt.mjs","names":[],"sources":["../src/admin/routes.ts"],"sourcesContent":["/**\n * Media admin routes — one static `defineAdminRoute` per HTTP method.\n *\n * **URL surface served by this module:**\n *\n *   - GET    /api/admin/media                       — list with search/filter + URLs\n *   - GET    /api/admin/media/<id>                  — single record with URL\n *   - GET    /api/admin/media/<id>/usage            — entities referencing this media\n *   - POST   /api/admin/media                       — upload (multipart FormData)\n *   - POST   /api/admin/media/regenerate-variants   — bulk variant regeneration\n *   - DELETE /api/admin/media/<id>                  — delete + storage cleanup\n *\n * Standard entity CRUD (PATCH with translations) falls through to the\n * generic entity handler — add `Media` to `entities` in your handler config.\n *\n * **Why per-method `defineAdminRoute`** (vs. the previous top-level\n * `resource: 'media'` + auto-mapped permission):\n *\n *   - The wrapper (`guardedHandler` from `@murumets-ee/core`) owns the\n *     permission gate, `permission.denied` audit, and 403 body shape\n *     uniformly with every other migrated plugin. The previous shape\n *     relied on `METHOD_TO_ACTION` auto-mapping at the api-handler\n *     dispatch level which couldn't emit per-route audit metadata.\n *   - Inline `if (!checkPermission('media', 'create')) ...` defenses\n *     at the regenerate-variants / upload / delete branches are now\n *     redundant — the wrapper enforces the permission BEFORE the\n *     handler runs.\n *\n * **`matchAnyPath` rationale:** media's URL surface predates the\n * static-second-segment convention every other plugin follows\n * (`/taxonomy/<vocab>/<id>`, `/settings/<namespace>/<rest>`). The\n * second segment under `/media` is the media id itself — a runtime\n * UUID — which the dispatcher's literal `segments[0]` match would\n * miss for every request. The catch-all flag declares \"this entry\n * claims every (prefix, method) sub-path no other entry matched\" so\n * the existing URL contract works under the per-method dispatch\n * model. Static POST sub-paths (`regenerate-variants`) take\n * precedence over the catch-all entry on POST. See\n * `DefineAdminRouteSpec.matchAnyPath` in `@murumets-ee/core` for the\n * full contract.\n *\n * **Default roles:** broad for view (`['admin', 'editor', 'agent',\n * 'viewer']`), narrower for writes (`['admin', 'editor']`).\n * Conservative starting point — apps can grant more via the\n * Permissions UI.\n *\n * @example\n * ```typescript\n * import { createAdminApiHandler } from '@murumets-ee/admin-ui/server'\n * import { mediaRoutes } from '@murumets-ee/media/admin'\n * import { Media } from '@murumets-ee/media'\n *\n * const handler = createAdminApiHandler({\n *   authenticate: async (req) => { ... },\n *   entities: [Article, Media],\n *   routes: [...mediaRoutes()],\n * })\n * ```\n */\n\nimport {\n  type AdminRoute,\n  type AdminRouteHandler,\n  combineAdminRoutes,\n  defineAdminRoute,\n  safeAudit,\n} from '@murumets-ee/core'\nimport type { MediaClient } from '../client.js'\nimport type { MediaPickerItem, MediaPickerListResult } from '../picker/types.js'\n\n// ---------------------------------------------------------------------------\n// Validation\n// ---------------------------------------------------------------------------\n\nconst UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i\n\nfunction isValidUuid(value: string | undefined): value is string {\n  return value !== undefined && UUID_RE.test(value)\n}\n\n/**\n * Closed enum of allowed `mediaType` filter values, in lockstep with the\n * `mediaType` field on the Media entity. The list MUST match\n * `MediaListOptions.mediaType` (declared in `../types.js`) — TypeScript\n * doesn't link the two automatically, so the small drift risk is\n * accepted in exchange for not pulling a runtime dep on the entity\n * schema package just to read its enum.\n *\n * Used as both the runtime allowlist (`isAllowedMediaType`) and the\n * source of truth for the narrowed type the guard produces — keeping\n * `as` casts off the handler's hot path.\n */\nconst ALLOWED_MEDIA_TYPES = ['image', 'video', 'audio', 'document', 'other'] as const\ntype AllowedMediaType = (typeof ALLOWED_MEDIA_TYPES)[number]\n\nfunction isAllowedMediaType(value: string): value is AllowedMediaType {\n  // Cast to readonly string[] so the typed-tuple `includes` check works\n  // with an arbitrary string input — `Array.prototype.includes`'s\n  // signature on a typed tuple only accepts members of the tuple\n  // (TS 4.9+ literal-narrowing), which is exactly what we want to\n  // sidestep here.\n  return (ALLOWED_MEDIA_TYPES as readonly string[]).includes(value)\n}\n\n/**\n * Hard cap on the `offset` query param. The dispatcher's allowed-pages\n * model is `limit ∈ [1, 100]`; even with the max page size that's\n * 1000 pages before hitting MAX_OFFSET, which is well beyond any\n * realistic admin-UI scroll depth. Forces slow-discard offset attacks\n * (`?offset=999999999`) to revert to a sane upper bound. Cursor-based\n * pagination would let this go higher, but the media list is\n * offset-based by convention with the entity-list shell.\n */\nconst MAX_OFFSET = 100_000\n\n/**\n * Strict non-negative integer parser for query params.\n *\n * `Number(raw)` silently coerces blanks (`'' → 0`), hex (`'0x05' → 5`),\n * exponent notation (`'1e2' → 100`), and signed (`'+5'/'-5'`) values —\n * all of which pass a downstream `Number.isInteger(n) && n >= 0` check.\n * Pre-filtering with `/^\\d+$/` keeps the contract honest: \"if you don't\n * send a pure non-negative integer string, you get the default.\" Same\n * pattern as `packages/taxonomy/src/admin/routes.ts:handleGet` tree\n * branch from PR-C-taxonomy.\n */\nfunction parseUintParam(raw: string | null, fallback: number): number {\n  if (raw === null || !/^\\d+$/.test(raw)) return fallback\n  const parsed = Number(raw)\n  // The regex above stops hex / exponent / signed / whitespace / blank\n  // inputs, but a long digit-only string still slips past — `Number(...)`\n  // returns `Infinity` past ~309 digits, and precision is lost past\n  // 2^53. Both would propagate through `client.findMany`'s\n  // `offset: parsed` into a Postgres query that either crashes the\n  // driver (`Infinity` is not a valid bigint) or silently rounds (the\n  // 2^53 precision-loss boundary). Reject via `Number.isSafeInteger`\n  // so overflowing inputs revert to `fallback` like every other\n  // malformed value.\n  if (!Number.isSafeInteger(parsed)) return fallback\n  return parsed\n}\n\n// ---------------------------------------------------------------------------\n// Response helpers\n// ---------------------------------------------------------------------------\n\nfunction jsonResponse(data: unknown, status = 200): Response {\n  return new Response(JSON.stringify(data), {\n    status,\n    headers: { 'Content-Type': 'application/json' },\n  })\n}\n\nfunction jsonError(message: string, status: number): Response {\n  return jsonResponse({ error: message }, status)\n}\n\n// ---------------------------------------------------------------------------\n// Per-request MediaClient factory + cached storage client\n// ---------------------------------------------------------------------------\n//\n// MediaClient and its AdminClient MUST be built per-request — AdminClient's\n// context resolver is captured eagerly at construction (see\n// buildContextResolver in @murumets-ee/core/clients). A module-level singleton\n// would bake the first request's user + tenant scope into every subsequent\n// request's writes — a cross-request permission/scope leak.\n//\n// Storage config is process-global and safe to cache once.\n\ntype StorageClient = Awaited<ReturnType<typeof import('@murumets-ee/storage').createStorageClient>>\n\ninterface StorageState {\n  clientPromise: Promise<StorageClient> | null\n}\n\n// Module-level state. `null` once eviction fires on a rejection so the next\n// request gets a fresh resolution attempt (see `getStorage`'s `.catch`).\nconst storageState: StorageState = { clientPromise: null }\n\n/**\n * Resolve the process-wide storage client. The pending-promise slot is\n * cleared on rejection so a transient `createStorageClient` failure\n * (DB hiccup, misconfig) doesn't poison every subsequent media request\n * for the lifetime of the Node process. Same pattern as\n * `packages/taxonomy/src/admin/routes.ts:getClient` from PR-C-taxonomy.\n */\nasync function getStorage(): Promise<StorageClient> {\n  if (!storageState.clientPromise) {\n    const pending = (async () => {\n      const { getApp } = await import('@murumets-ee/core')\n      const { createStorageClient } = await import('@murumets-ee/storage')\n      const { getStorageConfig } = await import('@murumets-ee/storage/plugin')\n      const app = getApp()\n      return createStorageClient(getStorageConfig(), { app })\n    })()\n    // Clear the slot on rejection so a transient failure doesn't poison\n    // every subsequent request. `pending.catch(handler)` attaches a\n    // synchronous rejection listener that resets the cached slot — the\n    // handler returns `undefined`, NOT a re-throw — so the new\n    // `.catch`-returned promise resolves, but we never await or hold\n    // that promise. The ORIGINAL `pending` (stored in\n    // `storageState.clientPromise`) is what callers `await`, and it's\n    // still in its rejected state — so the caller observing this\n    // resolution sees the underlying error. The `.catch` also marks\n    // the rejection as \"handled\" for Node's unhandled-rejection\n    // tracker. `storageState.clientPromise` holds the original `pending`\n    // so concurrent in-flight callers share one resolution.\n    pending.catch(() => {\n      if (storageState.clientPromise === pending) storageState.clientPromise = null\n    })\n    storageState.clientPromise = pending\n  }\n  return storageState.clientPromise\n}\n\nasync function getMediaClient(): Promise<MediaClient> {\n  const { createAdminClient } = await import('@murumets-ee/core/clients')\n  const { MediaClient } = await import('../client.js')\n  const { Media } = await import('../entity.js')\n  const storage = await getStorage()\n  const admin = createAdminClient(Media)\n  return new MediaClient({ admin, storage })\n}\n\n// ---------------------------------------------------------------------------\n// Handlers\n// ---------------------------------------------------------------------------\n\nconst handleGet: AdminRouteHandler = async (req, ctx) => {\n  const { isStorageConfigured, getStorageConfigReason } = await import('@murumets-ee/storage')\n  const segments = ctx.segments\n\n  // GET /media/<id>/usage — DB-only lookup, safe even when storage is\n  // unconfigured. Validate the UUID first so a malformed id 400s\n  // uniformly with the storage-configured branch below.\n  if (segments.length === 2 && segments[1] === 'usage') {\n    const id = segments[0]\n    if (!isValidUuid(id)) return jsonError('Invalid media ID format', 400)\n\n    const { findMediaUsages } = await import('../usage.js')\n    const { getApp } = await import('@murumets-ee/core')\n    const app = getApp()\n    const usages = await findMediaUsages(id, app)\n    return jsonResponse({ usages })\n  }\n\n  // Reject unknown sub-paths explicitly. The wrapper-gate has already\n  // passed (caller has `media:view`); a handler-level 404 here matches\n  // the dispatcher's miss-shape so unknown URLs don't fall through to\n  // the single-id branch and 400/500 with a misleading reason. The\n  // only valid 2-segment URL is `<id>/usage`, which was already\n  // claimed by the early-return above — anything else with >=2\n  // segments is not a recognized media route.\n  if (segments.length >= 2) return jsonError('Not found', 404)\n\n  // GET /media/<id> — validate UUID up front so a bad request still\n  // 400s when storage happens to be unconfigured (matches DELETE).\n  const singleId = segments.length > 0 ? segments[0] : undefined\n  if (singleId !== undefined && !isValidUuid(singleId)) {\n    return jsonError('Invalid media ID format', 400)\n  }\n\n  // Everything below needs a working storage client. If env isn't\n  // wired, return a structured \"disabled\" response rather than 500 —\n  // the media list page renders a banner and new admins can finish\n  // onboarding without being blocked on a crash loop.\n  if (!isStorageConfigured()) {\n    const reason = getStorageConfigReason() ?? 'Storage not configured'\n    if (segments.length > 0) {\n      // Single item — treat as not-found-ish to avoid leaking\n      // existence; include reason so the UI can surface it.\n      return jsonResponse({ error: reason, configured: false, reason }, 503)\n    }\n    // GET /media — empty list + disabled flag for the picker's banner.\n    const response: MediaPickerListResult & { configured: false; reason: string } = {\n      items: [],\n      total: 0,\n      configured: false,\n      reason,\n    }\n    return jsonResponse(response)\n  }\n\n  const client = await getMediaClient()\n\n  // GET /media/<id> — single item with URL (full record for EntityForm + picker)\n  if (singleId !== undefined) {\n    const record = await client.findById(singleId)\n    if (!record) return jsonError('Media not found', 404)\n\n    const url = await client.getUrl(singleId)\n    return jsonResponse({ ...record, url })\n  }\n\n  // GET /media — list with search/filter + batch URL resolution\n  const url = new URL(req.url)\n  const search = url.searchParams.get('search') ?? undefined\n  // mediaType MUST be validated against the entity's closed enum before\n  // it reaches `client.findMany` — the previous shape force-cast the raw\n  // query value with `as 'image' | ...` which is a type-system lie. A\n  // bogus value like `?mediaType=bogus` would parameterize into\n  // `WHERE media_type = 'bogus'` (no SQL injection — Drizzle is\n  // parameterized — but the row count is silently zero, which is\n  // confusing). Empty string from `?mediaType=` is also passed-through\n  // by the prior `?? undefined` shape since empty string is not null.\n  // Allowlist + type guard drops bogus / empty values cleanly so the\n  // filter is omitted instead of applied with a no-match value.\n  const rawMediaType = url.searchParams.get('mediaType')\n  const mediaType =\n    rawMediaType !== null && isAllowedMediaType(rawMediaType) ? rawMediaType : undefined\n  // Strict parsing keeps the contract honest — see `parseUintParam`\n  // JSDoc. Cap limit to [1, 100] and offset to [0, MAX_OFFSET] so a\n  // request can't ask for an unboundedly large page nor force a\n  // slow-discard scan with `?offset=99999999`.\n  const limit = Math.min(Math.max(parseUintParam(url.searchParams.get('limit'), 24), 1), 100)\n  const offset = Math.min(parseUintParam(url.searchParams.get('offset'), 0), MAX_OFFSET)\n\n  const result = await client.findMany({\n    ...(search !== undefined && { search }),\n    ...(mediaType !== undefined && { mediaType }),\n    limit,\n    offset,\n  })\n\n  // Resolve original URLs + thumbnail variant URLs for all items.\n  const ids = result.items.map((item) => item.id)\n  const [urlMap, thumbMap] = await Promise.all([\n    client.getUrls(ids),\n    client.getVariantUrls(ids, 'thumbnail'),\n  ])\n\n  const items: (MediaPickerItem & { thumbnailUrl?: string })[] = result.items.map((item) => {\n    const thumbnailUrl = thumbMap.get(item.id)\n    return {\n      id: item.id,\n      title: item.title ?? null,\n      alt: item.alt ?? null,\n      filename: item.filename,\n      mimeType: item.mimeType,\n      size: item.size,\n      mediaType: item.mediaType,\n      url: urlMap.get(item.id) ?? '',\n      ...(thumbnailUrl !== undefined && { thumbnailUrl }),\n      width: item.width ?? null,\n      height: item.height ?? null,\n    }\n  })\n\n  const response: MediaPickerListResult = { items, total: result.total }\n  return jsonResponse(response)\n}\n\nconst handleUpload: AdminRouteHandler = async (req, ctx) => {\n  const { isStorageConfigured, getStorageConfigReason, detectMimeType } = await import(\n    '@murumets-ee/storage'\n  )\n\n  // Upload is registered at `path: ''` (NOT matchAnyPath) — the\n  // dispatcher only invokes this handler when segments=[]. The api-\n  // handler ALSO rejects empty/whitespace-only first segments with a\n  // 400 before any plugin dispatcher runs (see\n  // `packages/admin-ui/src/server/api-handler/index.ts` segment-\n  // validation block). So this guard is defense-in-depth — per HANDOFF\n  // §\"Defense-in-depth `&& segments[i]` guards are fine\" — protecting\n  // against a future framework invariant change that lets a non-empty\n  // segment reach a `path: ''` static entry.\n  if (ctx.segments.length > 0) return jsonError('Not found', 404)\n\n  if (!isStorageConfigured()) {\n    return jsonError(getStorageConfigReason() ?? 'Storage not configured', 503)\n  }\n\n  const client = await getMediaClient()\n\n  const formData = await req.formData()\n  const file = formData.get('file')\n  // FormData `get` returns string | File | null. Reject anything that\n  // isn't a File so the typed `file.size`/`file.arrayBuffer()` below\n  // is safe without a runtime cast.\n  if (!(file instanceof File) || file.size === 0) {\n    return jsonError('No file provided', 400)\n  }\n\n  // Guard against oversized uploads (50 MB limit). Hardcoded rather\n  // than read from getMediaConfig() to keep this handler independent\n  // of plugin-init order — the plugin's resolved config may not be\n  // populated yet under CLI / non-RSC startup paths.\n  const MAX_UPLOAD_SIZE = 50 * 1024 * 1024\n  if (file.size > MAX_UPLOAD_SIZE) {\n    return jsonError(\n      `File too large: ${(file.size / 1024 / 1024).toFixed(1)} MB exceeds 50 MB limit`,\n      400,\n    )\n  }\n\n  const buffer = Buffer.from(await file.arrayBuffer())\n\n  // Detect actual MIME type from file content (prevents spoofing).\n  const { mimeType, mismatch } = await detectMimeType(\n    buffer,\n    file.type || 'application/octet-stream',\n  )\n  if (mismatch) {\n    return jsonError(\n      `File content doesn't match declared type: claimed ${file.type}, detected ${mimeType}`,\n      400,\n    )\n  }\n\n  const result = await client.upload(buffer, {\n    filename: file.name,\n    mimeType,\n    size: file.size,\n    uploadedBy: ctx.user.id,\n  })\n\n  const item: MediaPickerItem = {\n    id: result.media.id,\n    title: result.media.title ?? null,\n    alt: result.media.alt ?? null,\n    filename: result.media.filename,\n    mimeType: result.media.mimeType,\n    size: result.media.size,\n    mediaType: result.media.mediaType,\n    url: result.url,\n    width: result.media.width ?? null,\n    height: result.media.height ?? null,\n  }\n\n  safeAudit(ctx, {\n    action: 'media.upload',\n    entityType: 'media',\n    entityId: result.media.id,\n    userId: ctx.user.id,\n    ...(ctx.user.name !== undefined && { userName: ctx.user.name }),\n    changes: {\n      filename: result.media.filename,\n      mimeType: result.media.mimeType,\n      size: result.media.size,\n      mediaType: result.media.mediaType,\n    },\n  })\n\n  return jsonResponse(item, 201)\n}\n\nconst handleRegenerateVariants: AdminRouteHandler = async (_req, ctx) => {\n  const { isStorageConfigured, getStorageConfigReason } = await import('@murumets-ee/storage')\n\n  // Static POST path='regenerate-variants' — the dispatcher only invokes\n  // this handler when `segments[0] === 'regenerate-variants'`. Trailing\n  // segments (e.g. POST /media/regenerate-variants/extra) aren't a\n  // supported sub-route.\n  if (ctx.segments.length !== 1) return jsonError('Not found', 404)\n\n  if (!isStorageConfigured()) {\n    return jsonError(getStorageConfigReason() ?? 'Storage not configured', 503)\n  }\n\n  const { regenerateAllVariants } = await import('../regenerate-variants.js')\n  const { getApp, getContext } = await import('@murumets-ee/core')\n  const { resolveImageStyles } = await import('../resolve-image-styles.js')\n  const { createStorageClient } = await import('@murumets-ee/storage')\n  const { getStorageConfig } = await import('@murumets-ee/storage/plugin')\n\n  const app = getApp()\n  const styles = await resolveImageStyles(app, app.logger)\n  if (!styles || Object.keys(styles).length === 0) {\n    return jsonError('No image styles configured', 400)\n  }\n\n  const storageConfig = getStorageConfig()\n  const storage = createStorageClient(storageConfig, { app })\n\n  const result = await regenerateAllVariants({\n    app,\n    storage,\n    logger: app.logger.child({ media: true }),\n    styles,\n    contextResolver: () => {\n      const requestCtx = getContext()\n      if (!requestCtx?.user || !requestCtx?.checker) return undefined\n      return {\n        user: requestCtx.user,\n        checker: requestCtx.checker,\n        ...(requestCtx.scope !== undefined && { scope: requestCtx.scope }),\n      }\n    },\n  })\n\n  safeAudit(ctx, {\n    action: 'media.regenerate_variants',\n    userId: ctx.user.id,\n    ...(ctx.user.name !== undefined && { userName: ctx.user.name }),\n    metadata: { total: result.total, processed: result.processed, errors: result.errors },\n  })\n\n  return jsonResponse(result)\n}\n\nconst handleDelete: AdminRouteHandler = async (_req, ctx) => {\n  const segments = ctx.segments\n\n  // DELETE /media — no id supplied. Reject as 400, NOT 404, so a\n  // caller confusing \"no id\" with \"id not found\" gets a meaningful\n  // error. The wrapper-gate has already validated the caller has\n  // media:delete, so the 400 isn't an information-disclosure vector.\n  if (segments.length === 0) return jsonError('Media ID required', 400)\n\n  // Reject sub-paths beyond /<id> — DELETE /media/<id>/usage etc.\n  if (segments.length > 1) return jsonError('Not found', 404)\n\n  const id = segments[0]\n  if (!isValidUuid(id)) return jsonError('Invalid media ID format', 400)\n\n  const { isStorageConfigured, getStorageConfigReason } = await import('@murumets-ee/storage')\n  if (!isStorageConfigured()) {\n    // Can't safely delete — MediaClient needs storage to remove the\n    // actual object, and partial delete (DB row gone, object orphaned)\n    // would leak storage. Surface the reason so the UI can display it.\n    return jsonError(getStorageConfigReason() ?? 'Storage not configured', 503)\n  }\n\n  // AdminClient.delete() checks entity_refs and throws\n  // ReferencedEntityError if this media is still referenced. The\n  // error bubbles to the caller's error handler which returns 409\n  // with usage details.\n  const client = await getMediaClient()\n  await client.delete(id)\n\n  safeAudit(ctx, {\n    action: 'media.delete',\n    entityType: 'media',\n    entityId: id,\n    userId: ctx.user.id,\n    ...(ctx.user.name !== undefined && { userName: ctx.user.name }),\n  })\n\n  return jsonResponse({ deleted: 1 })\n}\n\n// ---------------------------------------------------------------------------\n// Route factory\n// ---------------------------------------------------------------------------\n\n/**\n * Default roles for view: broad reach across the admin shell.\n *\n * `BUILT_IN_ROLES` in `packages/auth/src/permissions.ts` is exactly\n * `['admin', 'public', 'authenticated', 'agent']` — `admin` is\n * hardcoded as an unconditional yes in `buildPermissionChecker`,\n * `agent` is the only non-admin built-in that flows through\n * `buildInitialRoleDefinitions()` + `upsertBuiltInRoles`. The\n * `agent` entry in this list is what gives ops agents read-only\n * media access on first boot of a fresh install.\n *\n * `editor` and `viewer` are CONVENTIONAL app-defined roles —\n * apps that follow the scaffold pattern create them as part of\n * their own role catalog. Including them in `defaultRoles` doesn't\n * seed them (the seeder only iterates the built-ins above), but\n * the values DO flow into the process-local permission catalog\n * (see `registerPermission` in `@murumets-ee/core`), which the\n * forthcoming Permission Matrix UI (PR-D) reads to show \"this\n * route's recommended default grants\" against the app's actual\n * role set. The catalog is also the mechanism via which a future\n * upgrade of `upsertBuiltInRoles` could extend the seed surface\n * to app-defined roles without each plugin having to re-declare\n * its defaults.\n */\nconst VIEW_DEFAULT_ROLES = ['admin', 'editor', 'agent', 'viewer'] as const\n\n/** Default roles for create/delete — narrower than view. */\nconst WRITE_DEFAULT_ROLES = ['admin', 'editor'] as const\n\n/**\n * Build admin API routes for media management.\n *\n * Returns `AdminRoute[]` from `combineAdminRoutes` — one entry per\n * `(prefix, method)` after grouping. Callers spread the result into\n * their top-level routes list: `routes: [...mediaRoutes()]`.\n *\n * Four `defineAdminRoute` entries:\n *\n *   - GET    matchAnyPath with `media:view`   defaultRoles: VIEW_DEFAULT_ROLES\n *   - POST   path=''            `media:create` defaultRoles: WRITE_DEFAULT_ROLES\n *   - POST   path='regenerate-variants' `media:create` defaultRoles: WRITE_DEFAULT_ROLES\n *   - DELETE matchAnyPath with `media:delete` defaultRoles: WRITE_DEFAULT_ROLES\n *\n * Permissions are auto-registered by the entity catalog\n * (`buildResourceCatalog` in `@murumets-ee/auth`) AND by\n * `registerPermission` inside `defineAdminRoute`. Idempotent —\n * `registerPermission` unions `defaultRoles` on repeat registration,\n * so the framework's two pathways agree on the final grant set.\n *\n * Standard entity CRUD (PATCH with translations) is NOT registered\n * here — it falls through to the generic entity handler. Add `Media`\n * to the `entities` array in your handler config to enable it.\n */\nexport function mediaRoutes(): AdminRoute[] {\n  const entries = [\n    defineAdminRoute({\n      prefix: 'media',\n      path: '',\n      method: 'GET',\n      permission: 'media:view',\n      defaultRoles: VIEW_DEFAULT_ROLES,\n      matchAnyPath: true,\n      description: 'Read media — list, single item, or referencing-entity usage report.',\n      handler: handleGet,\n    }),\n    defineAdminRoute({\n      prefix: 'media',\n      path: '',\n      method: 'POST',\n      permission: 'media:create',\n      defaultRoles: WRITE_DEFAULT_ROLES,\n      description: 'Upload a media file (multipart FormData with `file` field).',\n      handler: handleUpload,\n    }),\n    defineAdminRoute({\n      prefix: 'media',\n      path: 'regenerate-variants',\n      method: 'POST',\n      permission: 'media:create',\n      defaultRoles: WRITE_DEFAULT_ROLES,\n      description: 'Regenerate every image-style variant for every media row.',\n      handler: handleRegenerateVariants,\n    }),\n    defineAdminRoute({\n      prefix: 'media',\n      path: '',\n      method: 'DELETE',\n      permission: 'media:delete',\n      defaultRoles: WRITE_DEFAULT_ROLES,\n      matchAnyPath: true,\n      description: 'Delete a media record + its storage object.',\n      handler: handleDelete,\n    }),\n  ]\n\n  return combineAdminRoutes(entries)\n}\n"],"mappings":"4FA0EA,MAAM,EAAU,kEAEhB,SAAS,EAAY,EAA4C,CAC/D,OAAO,IAAU,IAAA,IAAa,EAAQ,KAAK,CAAK,CAClD,CAcA,MAAM,EAAsB,CAAC,QAAS,QAAS,QAAS,WAAY,OAAO,EAG3E,SAAS,EAAmB,EAA0C,CAMpE,OAAQ,EAA0C,SAAS,CAAK,CAClE,CAwBA,SAAS,EAAe,EAAoB,EAA0B,CACpE,GAAI,IAAQ,MAAQ,CAAC,QAAQ,KAAK,CAAG,EAAG,OAAO,EAC/C,IAAM,EAAS,OAAO,CAAG,EAWzB,OADK,OAAO,cAAc,CAAM,EACzB,EADmC,CAE5C,CAMA,SAAS,EAAa,EAAe,EAAS,IAAe,CAC3D,OAAO,IAAI,SAAS,KAAK,UAAU,CAAI,EAAG,CACxC,SACA,QAAS,CAAE,eAAgB,kBAAmB,CAChD,CAAC,CACH,CAEA,SAAS,EAAU,EAAiB,EAA0B,CAC5D,OAAO,EAAa,CAAE,MAAO,CAAQ,EAAG,CAAM,CAChD,CAsBA,MAAM,EAA6B,CAAE,cAAe,IAAK,EASzD,eAAe,GAAqC,CAClD,GAAI,CAAC,EAAa,cAAe,CAC/B,IAAM,GAAW,SAAY,CAC3B,GAAM,CAAE,UAAW,MAAM,OAAO,qBAC1B,CAAE,uBAAwB,MAAM,OAAO,wBACvC,CAAE,oBAAqB,MAAM,OAAO,+BACpC,EAAM,EAAO,EACnB,OAAO,EAAoB,EAAiB,EAAG,CAAE,KAAI,CAAC,CACxD,EAAA,CAAG,EAaH,EAAQ,UAAY,CACd,EAAa,gBAAkB,IAAS,EAAa,cAAgB,KAC3E,CAAC,EACD,EAAa,cAAgB,CAC/B,CACA,OAAO,EAAa,aACtB,CAEA,eAAe,GAAuC,CACpD,GAAM,CAAE,qBAAsB,MAAM,OAAO,6BACrC,CAAE,eAAgB,MAAM,OAAO,yBAC/B,CAAE,SAAU,MAAM,OAAO,yBACzB,EAAU,MAAM,EAAW,EAEjC,OAAO,IAAI,EAAY,CAAE,MADX,EAAkB,CACH,EAAG,SAAQ,CAAC,CAC3C,CAMA,MAAM,EAA+B,MAAO,EAAK,IAAQ,CACvD,GAAM,CAAE,sBAAqB,0BAA2B,MAAM,OAAO,wBAC/D,EAAW,EAAI,SAKrB,GAAI,EAAS,SAAW,GAAK,EAAS,KAAO,QAAS,CACpD,IAAM,EAAK,EAAS,GACpB,GAAI,CAAC,EAAY,CAAE,EAAG,OAAO,EAAU,0BAA2B,GAAG,EAErE,GAAM,CAAE,mBAAoB,MAAM,OAAO,wBACnC,CAAE,UAAW,MAAM,OAAO,qBAGhC,OAAO,EAAa,CAAE,OAAA,MADD,EAAgB,EADzB,EAC+B,CAAC,CACf,CAAC,CAChC,CASA,GAAI,EAAS,QAAU,EAAG,OAAO,EAAU,YAAa,GAAG,EAI3D,IAAM,EAAW,EAAS,OAAS,EAAI,EAAS,GAAK,IAAA,GACrD,GAAI,IAAa,IAAA,IAAa,CAAC,EAAY,CAAQ,EACjD,OAAO,EAAU,0BAA2B,GAAG,EAOjD,GAAI,CAAC,EAAoB,EAAG,CAC1B,IAAM,EAAS,EAAuB,GAAK,yBAa3C,OAZI,EAAS,OAAS,EAGb,EAAa,CAAE,MAAO,EAAQ,WAAY,GAAO,QAAO,EAAG,GAAG,EAShE,EAAa,CALlB,MAAO,CAAC,EACR,MAAO,EACP,WAAY,GACZ,QAEyB,CAAC,CAC9B,CAEA,IAAM,EAAS,MAAM,EAAe,EAGpC,GAAI,IAAa,IAAA,GAAW,CAC1B,IAAM,EAAS,MAAM,EAAO,SAAS,CAAQ,EAC7C,GAAI,CAAC,EAAQ,OAAO,EAAU,kBAAmB,GAAG,EAEpD,IAAM,EAAM,MAAM,EAAO,OAAO,CAAQ,EACxC,OAAO,EAAa,CAAE,GAAG,EAAQ,KAAI,CAAC,CACxC,CAGA,IAAM,EAAM,IAAI,IAAI,EAAI,GAAG,EACrB,EAAS,EAAI,aAAa,IAAI,QAAQ,GAAK,IAAA,GAW3C,EAAe,EAAI,aAAa,IAAI,WAAW,EAC/C,EACJ,IAAiB,MAAQ,EAAmB,CAAY,EAAI,EAAe,IAAA,GAKvE,EAAQ,KAAK,IAAI,KAAK,IAAI,EAAe,EAAI,aAAa,IAAI,OAAO,EAAG,EAAE,EAAG,CAAC,EAAG,GAAG,EACpF,EAAS,KAAK,IAAI,EAAe,EAAI,aAAa,IAAI,QAAQ,EAAG,CAAC,EAAG,GAAU,EAE/E,EAAS,MAAM,EAAO,SAAS,CACnC,GAAI,IAAW,IAAA,IAAa,CAAE,QAAO,EACrC,GAAI,IAAc,IAAA,IAAa,CAAE,WAAU,EAC3C,QACA,QACF,CAAC,EAGK,EAAM,EAAO,MAAM,IAAK,GAAS,EAAK,EAAE,EACxC,CAAC,EAAQ,GAAY,MAAM,QAAQ,IAAI,CAC3C,EAAO,QAAQ,CAAG,EAClB,EAAO,eAAe,EAAK,WAAW,CACxC,CAAC,EAoBD,OAAO,EAAa,CADsB,MAjBqB,EAAO,MAAM,IAAK,GAAS,CACxF,IAAM,EAAe,EAAS,IAAI,EAAK,EAAE,EACzC,MAAO,CACL,GAAI,EAAK,GACT,MAAO,EAAK,OAAS,KACrB,IAAK,EAAK,KAAO,KACjB,SAAU,EAAK,SACf,SAAU,EAAK,SACf,KAAM,EAAK,KACX,UAAW,EAAK,UAChB,IAAK,EAAO,IAAI,EAAK,EAAE,GAAK,GAC5B,GAAI,IAAiB,IAAA,IAAa,CAAE,cAAa,EACjD,MAAO,EAAK,OAAS,KACrB,OAAQ,EAAK,QAAU,IACzB,CACF,CAE8C,EAAG,MAAO,EAAO,KACpC,CAAC,CAC9B,EAEM,EAAkC,MAAO,EAAK,IAAQ,CAC1D,GAAM,CAAE,sBAAqB,yBAAwB,kBAAmB,MAAM,OAC5E,wBAYF,GAAI,EAAI,SAAS,OAAS,EAAG,OAAO,EAAU,YAAa,GAAG,EAE9D,GAAI,CAAC,EAAoB,EACvB,OAAO,EAAU,EAAuB,GAAK,yBAA0B,GAAG,EAG5E,IAAM,EAAS,MAAM,EAAe,EAG9B,GAAO,MADU,EAAI,SAAS,EAAA,CACd,IAAI,MAAM,EAIhC,GAAI,EAAE,aAAgB,OAAS,EAAK,OAAS,EAC3C,OAAO,EAAU,mBAAoB,GAAG,EAQ1C,GAAI,EAAK,KADe,GAAK,KAAO,KAElC,OAAO,EACL,oBAAoB,EAAK,KAAO,KAAO,KAAA,CAAM,QAAQ,CAAC,EAAE,yBACxD,GACF,EAGF,IAAM,EAAS,OAAO,KAAK,MAAM,EAAK,YAAY,CAAC,EAG7C,CAAE,WAAU,YAAa,MAAM,EACnC,EACA,EAAK,MAAQ,0BACf,EACA,GAAI,EACF,OAAO,EACL,qDAAqD,EAAK,KAAK,aAAa,IAC5E,GACF,EAGF,IAAM,EAAS,MAAM,EAAO,OAAO,EAAQ,CACzC,SAAU,EAAK,KACf,WACA,KAAM,EAAK,KACX,WAAY,EAAI,KAAK,EACvB,CAAC,EAEK,EAAwB,CAC5B,GAAI,EAAO,MAAM,GACjB,MAAO,EAAO,MAAM,OAAS,KAC7B,IAAK,EAAO,MAAM,KAAO,KACzB,SAAU,EAAO,MAAM,SACvB,SAAU,EAAO,MAAM,SACvB,KAAM,EAAO,MAAM,KACnB,UAAW,EAAO,MAAM,UACxB,IAAK,EAAO,IACZ,MAAO,EAAO,MAAM,OAAS,KAC7B,OAAQ,EAAO,MAAM,QAAU,IACjC,EAgBA,OAdA,EAAU,EAAK,CACb,OAAQ,eACR,WAAY,QACZ,SAAU,EAAO,MAAM,GACvB,OAAQ,EAAI,KAAK,GACjB,GAAI,EAAI,KAAK,OAAS,IAAA,IAAa,CAAE,SAAU,EAAI,KAAK,IAAK,EAC7D,QAAS,CACP,SAAU,EAAO,MAAM,SACvB,SAAU,EAAO,MAAM,SACvB,KAAM,EAAO,MAAM,KACnB,UAAW,EAAO,MAAM,SAC1B,CACF,CAAC,EAEM,EAAa,EAAM,GAAG,CAC/B,EAEM,EAA8C,MAAO,EAAM,IAAQ,CACvE,GAAM,CAAE,sBAAqB,0BAA2B,MAAM,OAAO,wBAMrE,GAAI,EAAI,SAAS,SAAW,EAAG,OAAO,EAAU,YAAa,GAAG,EAEhE,GAAI,CAAC,EAAoB,EACvB,OAAO,EAAU,EAAuB,GAAK,yBAA0B,GAAG,EAG5E,GAAM,CAAE,yBAA0B,MAAM,OAAO,sCACzC,CAAE,SAAQ,cAAe,MAAM,OAAO,qBACtC,CAAE,sBAAuB,MAAM,OAAO,uCACtC,CAAE,uBAAwB,MAAM,OAAO,wBACvC,CAAE,oBAAqB,MAAM,OAAO,+BAEpC,EAAM,EAAO,EACb,EAAS,MAAM,EAAmB,EAAK,EAAI,MAAM,EACvD,GAAI,CAAC,GAAU,OAAO,KAAK,CAAM,CAAC,CAAC,SAAW,EAC5C,OAAO,EAAU,6BAA8B,GAAG,EAMpD,IAAM,EAAS,MAAM,EAAsB,CACzC,MACA,QAJc,EADM,EAC0B,EAAG,CAAE,KAAI,CAIjD,EACN,OAAQ,EAAI,OAAO,MAAM,CAAE,MAAO,EAAK,CAAC,EACxC,SACA,oBAAuB,CACrB,IAAM,EAAa,EAAW,EAC1B,MAAC,GAAY,MAAQ,CAAC,GAAY,SACtC,MAAO,CACL,KAAM,EAAW,KACjB,QAAS,EAAW,QACpB,GAAI,EAAW,QAAU,IAAA,IAAa,CAAE,MAAO,EAAW,KAAM,CAClE,CACF,CACF,CAAC,EASD,OAPA,EAAU,EAAK,CACb,OAAQ,4BACR,OAAQ,EAAI,KAAK,GACjB,GAAI,EAAI,KAAK,OAAS,IAAA,IAAa,CAAE,SAAU,EAAI,KAAK,IAAK,EAC7D,SAAU,CAAE,MAAO,EAAO,MAAO,UAAW,EAAO,UAAW,OAAQ,EAAO,MAAO,CACtF,CAAC,EAEM,EAAa,CAAM,CAC5B,EAEM,EAAkC,MAAO,EAAM,IAAQ,CAC3D,IAAM,EAAW,EAAI,SAMrB,GAAI,EAAS,SAAW,EAAG,OAAO,EAAU,oBAAqB,GAAG,EAGpE,GAAI,EAAS,OAAS,EAAG,OAAO,EAAU,YAAa,GAAG,EAE1D,IAAM,EAAK,EAAS,GACpB,GAAI,CAAC,EAAY,CAAE,EAAG,OAAO,EAAU,0BAA2B,GAAG,EAErE,GAAM,CAAE,sBAAqB,0BAA2B,MAAM,OAAO,wBAuBrE,OAtBK,EAAoB,GAYzB,MAAM,MADe,EAAe,EAAA,CACvB,OAAO,CAAE,EAEtB,EAAU,EAAK,CACb,OAAQ,eACR,WAAY,QACZ,SAAU,EACV,OAAQ,EAAI,KAAK,GACjB,GAAI,EAAI,KAAK,OAAS,IAAA,IAAa,CAAE,SAAU,EAAI,KAAK,IAAK,CAC/D,CAAC,EAEM,EAAa,CAAE,QAAS,CAAE,CAAC,GAlBzB,EAAU,EAAuB,GAAK,yBAA0B,GAAG,CAmB9E,EA8BM,EAAqB,CAAC,QAAS,SAAU,QAAS,QAAQ,EAG1D,EAAsB,CAAC,QAAS,QAAQ,EA0B9C,SAAgB,GAA4B,CA0C1C,OAAO,EAAmB,CAxCxB,EAAiB,CACf,OAAQ,QACR,KAAM,GACN,OAAQ,MACR,WAAY,aACZ,aAAc,EACd,aAAc,GACd,YAAa,sEACb,QAAS,CACX,CAAC,EACD,EAAiB,CACf,OAAQ,QACR,KAAM,GACN,OAAQ,OACR,WAAY,eACZ,aAAc,EACd,YAAa,8DACb,QAAS,CACX,CAAC,EACD,EAAiB,CACf,OAAQ,QACR,KAAM,sBACN,OAAQ,OACR,WAAY,eACZ,aAAc,EACd,YAAa,4DACb,QAAS,CACX,CAAC,EACD,EAAiB,CACf,OAAQ,QACR,KAAM,GACN,OAAQ,SACR,WAAY,eACZ,aAAc,EACd,aAAc,GACd,YAAa,8CACb,QAAS,CACX,CAAC,CAG6B,CAAC,CACnC"}

package/dist/{types-CqjShq2U.d.mts → types-Bv5ATAgT.d.mts}

@@ -151,4 +151,4 @@ interface MediaPluginConfig {
 }
 //#endregion
 export { MediaRecord as a, MediaUploadResult as c, MediaPluginConfig as i, Media as l, MediaListOptions as n, MediaType as o, MediaListResult as r, MediaUploadOptions as s, ImageStyle as t };
-//# sourceMappingURL=types-CqjShq2U.d.mts.map
+//# sourceMappingURL=types-Bv5ATAgT.d.mts.map

package/dist/types-Bv5ATAgT.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types-Bv5ATAgT.d.mts","names":[],"sources":["../src/entity.ts","../src/types.ts"],"mappings":";;;;;;;;AAmBA;;;;;;;;;;;;cAAa,KAAA,gCAAK,MAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KCdN,SAAA;;UAGK,kBAAA;EDgEf;EC9DA,QAAA;;EAEA,QAAA;;EAEA,IAAA;;EAEA,UAAA,GAAa,cAAc;;EAE3B,KAAA;;EAEA,GAAA;;EAEA,WAAA;;EAEA,KAAA;;EAEA,MAAA;;EAEA,UAAA;AAAA;;UAIe,iBAAA;;EAEf,KAAA,EAAO,WAAW;;EAElB,GAAA;AAAA;;;;;;;;KAUU,WAAA,GAAc,cAAc,QAAQ,KAAA,CAAM,SAAA;;UAGrC,gBAAA;;EAEf,SAAA,GAAY,SAAS;;EAErB,cAAA;;EAEA,MAAA;;EAEA,KAAA;;EAEA,MAAA;;EAEA,OAAA;EAxDmB;EA0DnB,cAAA;AAAA;AA1DmB;AAAA,UA8DJ,eAAA;EACf,KAAA,EAAO,WAAW;EAClB,KAAA;EACA,KAAA;EACA,MAAA;AAAA;;UAIe,UAAA;EA3DF;EA6Db,KAAA;EAzDA;EA2DA,MAAA;EAvDA;EAyDA,GAAA;EArDA;EAuDA,MAAA;EAvDU;EAyDV,OAAA;AAAA;;UAIe,iBAAA;EAvDf;EAyDA,aAAA;EAvDA;EAyDA,aAAA;EAzDG;EA2DH,iBAAA,GAAoB,cAAA;EAjDC;EAmDrB,WAAA,GAAc,MAAA,SAAe,UAAA;AAAA"}

package/dist/{usage-DmdsFJpK.mjs → usage-CVAqkS6h.mjs}

@@ -1,2 +1,2 @@
 import"server-only";import{findEntityUsages as e}from"@murumets-ee/entity/refs";async function t(t,n){return(await e(`media`,t,n.db.readOnly)).map(e=>{let t=`field`,r=n.entities.get(e.sourceEntity);if(r){let n=r.allFields[e.sourceField];n&&n.type===`blockTree`&&(t=`block`)}return{entityName:e.sourceEntity,entityId:e.sourceId,fieldName:e.sourceField,context:t}})}export{t as findMediaUsages};
-//# sourceMappingURL=usage-DmdsFJpK.mjs.map
+//# sourceMappingURL=usage-CVAqkS6h.mjs.map

package/dist/{usage-DmdsFJpK.mjs.map → usage-CVAqkS6h.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"usage-DmdsFJpK.mjs","names":[],"sources":["../src/usage.ts"],"sourcesContent":["/**\n * Media usage lookup — finds all entity references to a media item.\n *\n * Delegates to the universal entity_refs tracking table (populated at write time\n * by AdminClient). One indexed query instead of scanning every table.\n *\n * Used by delete protection (409 Conflict) and the usage API endpoint.\n */\n\nimport 'server-only'\n\nimport type { ToolkitApp } from '@murumets-ee/core'\nimport { findEntityUsages } from '@murumets-ee/entity/refs'\n\nexport interface MediaUsage {\n  entityName: string\n  entityId: string\n  fieldName: string\n  /** 'field' = entity column, 'block' = `field.blockTree()` field */\n  context: 'field' | 'block'\n}\n\n/**\n * Find all entities that reference a given media ID.\n *\n * @param mediaId - UUID of the media item to check\n * @param app     - Toolkit app (provides db + entity registry)\n * @returns Array of usage records (empty if unreferenced)\n */\nexport async function findMediaUsages(\n  mediaId: string,\n  app: ToolkitApp,\n): Promise<MediaUsage[]> {\n  const usages = await findEntityUsages('media', mediaId, app.db.readOnly)\n\n  // Derive context from the source field: a usage whose field is a\n  // `field.blockTree()` slot is media referenced from inside a block tree.\n  // (Block-tree ref-extraction itself is tracked separately — see the\n  // entity_refs blockTree gap; until that lands no usage will actually carry\n  // a blockTree source field, so this stays forward-compatible.)\n  return usages.map((usage) => {\n    let context: 'field' | 'block' = 'field'\n    const entity = app.entities.get(usage.sourceEntity)\n    if (entity) {\n      const fieldConfig = entity.allFields[usage.sourceField]\n      if (fieldConfig && fieldConfig.type === 'blockTree') {\n        context = 'block'\n      }\n    }\n\n    return {\n      entityName: usage.sourceEntity,\n      entityId: usage.sourceId,\n      fieldName: usage.sourceField,\n      context,\n    }\n  })\n}\n"],"mappings":"gFA6BA,eAAsB,EACpB,EACA,EACuB,CAQvB,OAAO,MAPc,EAAiB,QAAS,EAAS,EAAI,GAAG,SAAS,EAO1D,IAAK,GAAU,CAC3B,IAAI,EAA6B,QAC3B,EAAS,EAAI,SAAS,IAAI,EAAM,aAAa,CACnD,GAAI,EAAQ,CACV,IAAM,EAAc,EAAO,UAAU,EAAM,aACvC,GAAe,EAAY,OAAS,cACtC,EAAU,SAId,MAAO,CACL,WAAY,EAAM,aAClB,SAAU,EAAM,SAChB,UAAW,EAAM,YACjB,UACD,EACD"}
+{"version":3,"file":"usage-CVAqkS6h.mjs","names":[],"sources":["../src/usage.ts"],"sourcesContent":["/**\n * Media usage lookup — finds all entity references to a media item.\n *\n * Delegates to the universal entity_refs tracking table (populated at write time\n * by AdminClient). One indexed query instead of scanning every table.\n *\n * Used by delete protection (409 Conflict) and the usage API endpoint.\n */\n\nimport 'server-only'\n\nimport type { ToolkitApp } from '@murumets-ee/core'\nimport { findEntityUsages } from '@murumets-ee/entity/refs'\n\nexport interface MediaUsage {\n  entityName: string\n  entityId: string\n  fieldName: string\n  /** 'field' = entity column, 'block' = `field.blockTree()` field */\n  context: 'field' | 'block'\n}\n\n/**\n * Find all entities that reference a given media ID.\n *\n * @param mediaId - UUID of the media item to check\n * @param app     - Toolkit app (provides db + entity registry)\n * @returns Array of usage records (empty if unreferenced)\n */\nexport async function findMediaUsages(\n  mediaId: string,\n  app: ToolkitApp,\n): Promise<MediaUsage[]> {\n  const usages = await findEntityUsages('media', mediaId, app.db.readOnly)\n\n  // Derive context from the source field: a usage whose field is a\n  // `field.blockTree()` slot is media referenced from inside a block tree.\n  // (Block-tree ref-extraction itself is tracked separately — see the\n  // entity_refs blockTree gap; until that lands no usage will actually carry\n  // a blockTree source field, so this stays forward-compatible.)\n  return usages.map((usage) => {\n    let context: 'field' | 'block' = 'field'\n    const entity = app.entities.get(usage.sourceEntity)\n    if (entity) {\n      const fieldConfig = entity.allFields[usage.sourceField]\n      if (fieldConfig && fieldConfig.type === 'blockTree') {\n        context = 'block'\n      }\n    }\n\n    return {\n      entityName: usage.sourceEntity,\n      entityId: usage.sourceId,\n      fieldName: usage.sourceField,\n      context,\n    }\n  })\n}\n"],"mappings":"gFA6BA,eAAsB,EACpB,EACA,EACuB,CAQvB,OAAO,MAPc,EAAiB,QAAS,EAAS,EAAI,GAAG,QAAQ,EAAA,CAOzD,IAAK,GAAU,CAC3B,IAAI,EAA6B,QAC3B,EAAS,EAAI,SAAS,IAAI,EAAM,YAAY,EAClD,GAAI,EAAQ,CACV,IAAM,EAAc,EAAO,UAAU,EAAM,aACvC,GAAe,EAAY,OAAS,cACtC,EAAU,QAEd,CAEA,MAAO,CACL,WAAY,EAAM,aAClB,SAAU,EAAM,SAChB,UAAW,EAAM,YACjB,SACF,CACF,CAAC,CACH"}

package/dist/usage.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"usage.mjs","names":[],"sources":["../src/usage.ts"],"sourcesContent":["/**\n * Media usage lookup — finds all entity references to a media item.\n *\n * Delegates to the universal entity_refs tracking table (populated at write time\n * by AdminClient). One indexed query instead of scanning every table.\n *\n * Used by delete protection (409 Conflict) and the usage API endpoint.\n */\n\nimport 'server-only'\n\nimport type { ToolkitApp } from '@murumets-ee/core'\nimport { findEntityUsages } from '@murumets-ee/entity/refs'\n\nexport interface MediaUsage {\n  entityName: string\n  entityId: string\n  fieldName: string\n  /** 'field' = entity column, 'block' = `field.blockTree()` field */\n  context: 'field' | 'block'\n}\n\n/**\n * Find all entities that reference a given media ID.\n *\n * @param mediaId - UUID of the media item to check\n * @param app     - Toolkit app (provides db + entity registry)\n * @returns Array of usage records (empty if unreferenced)\n */\nexport async function findMediaUsages(\n  mediaId: string,\n  app: ToolkitApp,\n): Promise<MediaUsage[]> {\n  const usages = await findEntityUsages('media', mediaId, app.db.readOnly)\n\n  // Derive context from the source field: a usage whose field is a\n  // `field.blockTree()` slot is media referenced from inside a block tree.\n  // (Block-tree ref-extraction itself is tracked separately — see the\n  // entity_refs blockTree gap; until that lands no usage will actually carry\n  // a blockTree source field, so this stays forward-compatible.)\n  return usages.map((usage) => {\n    let context: 'field' | 'block' = 'field'\n    const entity = app.entities.get(usage.sourceEntity)\n    if (entity) {\n      const fieldConfig = entity.allFields[usage.sourceField]\n      if (fieldConfig && fieldConfig.type === 'blockTree') {\n        context = 'block'\n      }\n    }\n\n    return {\n      entityName: usage.sourceEntity,\n      entityId: usage.sourceId,\n      fieldName: usage.sourceField,\n      context,\n    }\n  })\n}\n"],"mappings":"gFA6BA,eAAsB,EACpB,EACA,EACuB,CAQvB,OAAO,MAPc,EAAiB,QAAS,EAAS,EAAI,GAAG,SAAS,EAO1D,IAAK,GAAU,CAC3B,IAAI,EAA6B,QAC3B,EAAS,EAAI,SAAS,IAAI,EAAM,aAAa,CACnD,GAAI,EAAQ,CACV,IAAM,EAAc,EAAO,UAAU,EAAM,aACvC,GAAe,EAAY,OAAS,cACtC,EAAU,SAId,MAAO,CACL,WAAY,EAAM,aAClB,SAAU,EAAM,SAChB,UAAW,EAAM,YACjB,UACD,EACD"}
+{"version":3,"file":"usage.mjs","names":[],"sources":["../src/usage.ts"],"sourcesContent":["/**\n * Media usage lookup — finds all entity references to a media item.\n *\n * Delegates to the universal entity_refs tracking table (populated at write time\n * by AdminClient). One indexed query instead of scanning every table.\n *\n * Used by delete protection (409 Conflict) and the usage API endpoint.\n */\n\nimport 'server-only'\n\nimport type { ToolkitApp } from '@murumets-ee/core'\nimport { findEntityUsages } from '@murumets-ee/entity/refs'\n\nexport interface MediaUsage {\n  entityName: string\n  entityId: string\n  fieldName: string\n  /** 'field' = entity column, 'block' = `field.blockTree()` field */\n  context: 'field' | 'block'\n}\n\n/**\n * Find all entities that reference a given media ID.\n *\n * @param mediaId - UUID of the media item to check\n * @param app     - Toolkit app (provides db + entity registry)\n * @returns Array of usage records (empty if unreferenced)\n */\nexport async function findMediaUsages(\n  mediaId: string,\n  app: ToolkitApp,\n): Promise<MediaUsage[]> {\n  const usages = await findEntityUsages('media', mediaId, app.db.readOnly)\n\n  // Derive context from the source field: a usage whose field is a\n  // `field.blockTree()` slot is media referenced from inside a block tree.\n  // (Block-tree ref-extraction itself is tracked separately — see the\n  // entity_refs blockTree gap; until that lands no usage will actually carry\n  // a blockTree source field, so this stays forward-compatible.)\n  return usages.map((usage) => {\n    let context: 'field' | 'block' = 'field'\n    const entity = app.entities.get(usage.sourceEntity)\n    if (entity) {\n      const fieldConfig = entity.allFields[usage.sourceField]\n      if (fieldConfig && fieldConfig.type === 'blockTree') {\n        context = 'block'\n      }\n    }\n\n    return {\n      entityName: usage.sourceEntity,\n      entityId: usage.sourceId,\n      fieldName: usage.sourceField,\n      context,\n    }\n  })\n}\n"],"mappings":"gFA6BA,eAAsB,EACpB,EACA,EACuB,CAQvB,OAAO,MAPc,EAAiB,QAAS,EAAS,EAAI,GAAG,QAAQ,EAAA,CAOzD,IAAK,GAAU,CAC3B,IAAI,EAA6B,QAC3B,EAAS,EAAI,SAAS,IAAI,EAAM,YAAY,EAClD,GAAI,EAAQ,CACV,IAAM,EAAc,EAAO,UAAU,EAAM,aACvC,GAAe,EAAY,OAAS,cACtC,EAAU,QAEd,CAEA,MAAO,CACL,WAAY,EAAM,aAClB,SAAU,EAAM,SAChB,UAAW,EAAM,YACjB,SACF,CACF,CAAC,CACH"}

package/dist/{variant-key-CFr3fR-n.mjs → variant-key-CLlac3_1.mjs}

@@ -1,2 +1,2 @@
 import e from"sharp";const t=new Set([`image/svg+xml`,`image/gif`]);function n(e){return e.startsWith(`image/`)&&!t.has(e)}async function r(t,n){let r=await e(t).metadata(),i=r.width??0,a=r.height??0,o=new Map,s=Object.entries(n);return await Promise.all(s.map(async([n,r])=>{let i=r.format??`webp`,a=r.quality??80,s=r.fit??`cover`,{data:c,info:l}=await e(t).resize({width:r.width,height:r.height,fit:s,withoutEnlargement:!0})[i]({quality:a}).toBuffer({resolveWithObject:!0});o.set(n,{buffer:c,format:i,mimeType:`image/${i}`,width:l.width,height:l.height})})),{width:i,height:a,variants:o}}function i(e,t,n=`webp`){let r=e.lastIndexOf(`/`);return`${e.substring(0,r)}/${t}_${e.substring(r+1).replace(/\.[^.]+$/,``)}.${n}`}export{n,r,i as t};
-//# sourceMappingURL=variant-key-CFr3fR-n.mjs.map
+//# sourceMappingURL=variant-key-CLlac3_1.mjs.map

package/dist/{variant-key-CFr3fR-n.mjs.map → variant-key-CLlac3_1.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"variant-key-CFr3fR-n.mjs","names":[],"sources":["../src/process-image.ts","../src/variant-key.ts"],"sourcesContent":["/**\n * Server-side image processing via Sharp.\n *\n * Pure processing module — no DB or storage dependencies.\n * Takes a buffer and image styles, returns metadata + variant buffers.\n */\n\nimport sharp from 'sharp'\nimport type { ImageStyle } from './types.js'\n\n/** Result of processing an image through Sharp */\nexport interface ProcessedImage {\n  /** Original image width in pixels */\n  width: number\n  /** Original image height in pixels */\n  height: number\n  /** Generated variant buffers keyed by style name */\n  variants: Map<string, ProcessedVariant>\n}\n\n/** A single processed variant */\nexport interface ProcessedVariant {\n  buffer: Buffer\n  format: string\n  mimeType: string\n  width: number\n  height: number\n}\n\n/** MIME types that should NOT be processed (vectors, animations) */\nconst SKIP_MIME_TYPES = new Set(['image/svg+xml', 'image/gif'])\n\n/**\n * Check if a MIME type is eligible for Sharp processing.\n * Returns false for SVG, GIF, and non-image types.\n */\nexport function isProcessableImage(mimeType: string): boolean {\n  return mimeType.startsWith('image/') && !SKIP_MIME_TYPES.has(mimeType)\n}\n\n/**\n * Extract image dimensions and generate resized variants.\n *\n * @param buffer - Original image file as a Buffer\n * @param styles - Named image style presets to generate\n * @returns Metadata (width/height) and variant buffers\n */\nexport async function processImage(\n  buffer: Buffer,\n  styles: Record<string, ImageStyle>,\n): Promise<ProcessedImage> {\n  const meta = await sharp(buffer).metadata()\n  const width = meta.width ?? 0\n  const height = meta.height ?? 0\n\n  const variants = new Map<string, ProcessedVariant>()\n\n  const entries = Object.entries(styles)\n  await Promise.all(\n    entries.map(async ([name, style]) => {\n      const fmt = style.format ?? 'webp'\n      const quality = style.quality ?? 80\n      const fit = style.fit ?? 'cover'\n\n      const resized = sharp(buffer).resize({\n        width: style.width,\n        height: style.height,\n        fit,\n        withoutEnlargement: true,\n      })\n\n      const { data: variantBuffer, info } = await resized[fmt]({ quality }).toBuffer({\n        resolveWithObject: true,\n      })\n\n      variants.set(name, {\n        buffer: variantBuffer,\n        format: fmt,\n        mimeType: `image/${fmt}`,\n        width: info.width,\n        height: info.height,\n      })\n    }),\n  )\n\n  return { width, height, variants }\n}\n\n/**\n * Extract only image dimensions (no variant generation).\n * Useful for getting width/height when styles are empty.\n */\nexport async function getImageDimensions(\n  buffer: Buffer,\n): Promise<{ width: number; height: number }> {\n  const meta = await sharp(buffer).metadata()\n  return { width: meta.width ?? 0, height: meta.height ?? 0 }\n}\n","/**\n * Variant key derivation convention.\n *\n * Given an original storage key and a style name, produces a deterministic\n * variant key in the same directory.\n *\n * Convention:\n *   Original:  uploads/2026/02/{uuid}/photo.jpg\n *   Variant:   uploads/2026/02/{uuid}/thumbnail_photo.webp\n */\n\n/**\n * Derive a variant storage key from the original key + style name.\n *\n * @param originalKey - The original file's storage key\n * @param styleName - The image style name (e.g., 'thumbnail', 'medium')\n * @param format - The variant output format (default: 'webp')\n * @returns The derived variant key\n */\nexport function deriveVariantKey(originalKey: string, styleName: string, format = 'webp'): string {\n  const lastSlash = originalKey.lastIndexOf('/')\n  const dir = originalKey.substring(0, lastSlash)\n  const filename = originalKey.substring(lastSlash + 1)\n  const baseName = filename.replace(/\\.[^.]+$/, '')\n  return `${dir}/${styleName}_${baseName}.${format}`\n}\n"],"mappings":"qBA8BA,MAAM,EAAkB,IAAI,IAAI,CAAC,gBAAiB,YAAY,CAAC,CAM/D,SAAgB,EAAmB,EAA2B,CAC5D,OAAO,EAAS,WAAW,SAAS,EAAI,CAAC,EAAgB,IAAI,EAAS,CAUxE,eAAsB,EACpB,EACA,EACyB,CACzB,IAAM,EAAO,MAAM,EAAM,EAAO,CAAC,UAAU,CACrC,EAAQ,EAAK,OAAS,EACtB,EAAS,EAAK,QAAU,EAExB,EAAW,IAAI,IAEf,EAAU,OAAO,QAAQ,EAAO,CA4BtC,OA3BA,MAAM,QAAQ,IACZ,EAAQ,IAAI,MAAO,CAAC,EAAM,KAAW,CACnC,IAAM,EAAM,EAAM,QAAU,OACtB,EAAU,EAAM,SAAW,GAC3B,EAAM,EAAM,KAAO,QASnB,CAAE,KAAM,EAAe,QAAS,MAPtB,EAAM,EAAO,CAAC,OAAO,CACnC,MAAO,EAAM,MACb,OAAQ,EAAM,OACd,MACA,mBAAoB,GACrB,CAEkD,CAAC,GAAK,CAAE,UAAS,CAAC,CAAC,SAAS,CAC7E,kBAAmB,GACpB,CAAC,CAEF,EAAS,IAAI,EAAM,CACjB,OAAQ,EACR,OAAQ,EACR,SAAU,SAAS,IACnB,MAAO,EAAK,MACZ,OAAQ,EAAK,OACd,CAAC,EACF,CACH,CAEM,CAAE,QAAO,SAAQ,WAAU,CClEpC,SAAgB,EAAiB,EAAqB,EAAmB,EAAS,OAAgB,CAChG,IAAM,EAAY,EAAY,YAAY,IAAI,CAI9C,MAAO,GAHK,EAAY,UAAU,EAAG,EAGxB,CAAC,GAAG,EAAU,GAFV,EAAY,UAAU,EAAY,EAC1B,CAAC,QAAQ,WAAY,GACR,CAAC,GAAG"}
+{"version":3,"file":"variant-key-CLlac3_1.mjs","names":[],"sources":["../src/process-image.ts","../src/variant-key.ts"],"sourcesContent":["/**\n * Server-side image processing via Sharp.\n *\n * Pure processing module — no DB or storage dependencies.\n * Takes a buffer and image styles, returns metadata + variant buffers.\n */\n\nimport sharp from 'sharp'\nimport type { ImageStyle } from './types.js'\n\n/** Result of processing an image through Sharp */\nexport interface ProcessedImage {\n  /** Original image width in pixels */\n  width: number\n  /** Original image height in pixels */\n  height: number\n  /** Generated variant buffers keyed by style name */\n  variants: Map<string, ProcessedVariant>\n}\n\n/** A single processed variant */\nexport interface ProcessedVariant {\n  buffer: Buffer\n  format: string\n  mimeType: string\n  width: number\n  height: number\n}\n\n/** MIME types that should NOT be processed (vectors, animations) */\nconst SKIP_MIME_TYPES = new Set(['image/svg+xml', 'image/gif'])\n\n/**\n * Check if a MIME type is eligible for Sharp processing.\n * Returns false for SVG, GIF, and non-image types.\n */\nexport function isProcessableImage(mimeType: string): boolean {\n  return mimeType.startsWith('image/') && !SKIP_MIME_TYPES.has(mimeType)\n}\n\n/**\n * Extract image dimensions and generate resized variants.\n *\n * @param buffer - Original image file as a Buffer\n * @param styles - Named image style presets to generate\n * @returns Metadata (width/height) and variant buffers\n */\nexport async function processImage(\n  buffer: Buffer,\n  styles: Record<string, ImageStyle>,\n): Promise<ProcessedImage> {\n  const meta = await sharp(buffer).metadata()\n  const width = meta.width ?? 0\n  const height = meta.height ?? 0\n\n  const variants = new Map<string, ProcessedVariant>()\n\n  const entries = Object.entries(styles)\n  await Promise.all(\n    entries.map(async ([name, style]) => {\n      const fmt = style.format ?? 'webp'\n      const quality = style.quality ?? 80\n      const fit = style.fit ?? 'cover'\n\n      const resized = sharp(buffer).resize({\n        width: style.width,\n        height: style.height,\n        fit,\n        withoutEnlargement: true,\n      })\n\n      const { data: variantBuffer, info } = await resized[fmt]({ quality }).toBuffer({\n        resolveWithObject: true,\n      })\n\n      variants.set(name, {\n        buffer: variantBuffer,\n        format: fmt,\n        mimeType: `image/${fmt}`,\n        width: info.width,\n        height: info.height,\n      })\n    }),\n  )\n\n  return { width, height, variants }\n}\n\n/**\n * Extract only image dimensions (no variant generation).\n * Useful for getting width/height when styles are empty.\n */\nexport async function getImageDimensions(\n  buffer: Buffer,\n): Promise<{ width: number; height: number }> {\n  const meta = await sharp(buffer).metadata()\n  return { width: meta.width ?? 0, height: meta.height ?? 0 }\n}\n","/**\n * Variant key derivation convention.\n *\n * Given an original storage key and a style name, produces a deterministic\n * variant key in the same directory.\n *\n * Convention:\n *   Original:  uploads/2026/02/{uuid}/photo.jpg\n *   Variant:   uploads/2026/02/{uuid}/thumbnail_photo.webp\n */\n\n/**\n * Derive a variant storage key from the original key + style name.\n *\n * @param originalKey - The original file's storage key\n * @param styleName - The image style name (e.g., 'thumbnail', 'medium')\n * @param format - The variant output format (default: 'webp')\n * @returns The derived variant key\n */\nexport function deriveVariantKey(originalKey: string, styleName: string, format = 'webp'): string {\n  const lastSlash = originalKey.lastIndexOf('/')\n  const dir = originalKey.substring(0, lastSlash)\n  const filename = originalKey.substring(lastSlash + 1)\n  const baseName = filename.replace(/\\.[^.]+$/, '')\n  return `${dir}/${styleName}_${baseName}.${format}`\n}\n"],"mappings":"qBA8BA,MAAM,EAAkB,IAAI,IAAI,CAAC,gBAAiB,WAAW,CAAC,EAM9D,SAAgB,EAAmB,EAA2B,CAC5D,OAAO,EAAS,WAAW,QAAQ,GAAK,CAAC,EAAgB,IAAI,CAAQ,CACvE,CASA,eAAsB,EACpB,EACA,EACyB,CACzB,IAAM,EAAO,MAAM,EAAM,CAAM,CAAC,CAAC,SAAS,EACpC,EAAQ,EAAK,OAAS,EACtB,EAAS,EAAK,QAAU,EAExB,EAAW,IAAI,IAEf,EAAU,OAAO,QAAQ,CAAM,EA4BrC,OA3BA,MAAM,QAAQ,IACZ,EAAQ,IAAI,MAAO,CAAC,EAAM,KAAW,CACnC,IAAM,EAAM,EAAM,QAAU,OACtB,EAAU,EAAM,SAAW,GAC3B,EAAM,EAAM,KAAO,QASnB,CAAE,KAAM,EAAe,QAAS,MAPtB,EAAM,CAAM,CAAC,CAAC,OAAO,CACnC,MAAO,EAAM,MACb,OAAQ,EAAM,OACd,MACA,mBAAoB,EACtB,CAEkD,CAAC,CAAC,EAAI,CAAC,CAAE,SAAQ,CAAC,CAAC,CAAC,SAAS,CAC7E,kBAAmB,EACrB,CAAC,EAED,EAAS,IAAI,EAAM,CACjB,OAAQ,EACR,OAAQ,EACR,SAAU,SAAS,IACnB,MAAO,EAAK,MACZ,OAAQ,EAAK,MACf,CAAC,CACH,CAAC,CACH,EAEO,CAAE,QAAO,SAAQ,UAAS,CACnC,CCnEA,SAAgB,EAAiB,EAAqB,EAAmB,EAAS,OAAgB,CAChG,IAAM,EAAY,EAAY,YAAY,GAAG,EAI7C,MAAO,GAHK,EAAY,UAAU,EAAG,CAGzB,EAAE,GAAG,EAAU,GAFV,EAAY,UAAU,EAAY,CAC3B,CAAC,CAAC,QAAQ,WAAY,EACT,EAAE,GAAG,GAC5C"}

package/dist/{variant-key-gVMhzKyv.mjs → variant-key-CyI9Qq-f.mjs}

@@ -1,2 +1,2 @@
 import e from"sharp";const t=new Set([`image/svg+xml`,`image/gif`]);function n(e){return e.startsWith(`image/`)&&!t.has(e)}async function r(t,n){let r=await e(t).metadata(),i=r.width??0,a=r.height??0,o=new Map,s=Object.entries(n);return await Promise.all(s.map(async([n,r])=>{let i=r.format??`webp`,a=r.quality??80,s=r.fit??`cover`,{data:c,info:l}=await e(t).resize({width:r.width,height:r.height,fit:s,withoutEnlargement:!0})[i]({quality:a}).toBuffer({resolveWithObject:!0});o.set(n,{buffer:c,format:i,mimeType:`image/${i}`,width:l.width,height:l.height})})),{width:i,height:a,variants:o}}async function i(t){let n=await e(t).metadata();return{width:n.width??0,height:n.height??0}}function a(e,t,n=`webp`){let r=e.lastIndexOf(`/`);return`${e.substring(0,r)}/${t}_${e.substring(r+1).replace(/\.[^.]+$/,``)}.${n}`}export{r as i,i as n,n as r,a as t};
-//# sourceMappingURL=variant-key-gVMhzKyv.mjs.map
+//# sourceMappingURL=variant-key-CyI9Qq-f.mjs.map