@open-mercato/core 0.6.8-develop.7100.1.fbf66fca35 → 0.7.0

package/dist/modules/attachments/lib/attachment-service.js

@@ -1,313 +0,0 @@
-import { CrudHttpError } from "@open-mercato/shared/lib/crud/errors";
-import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
-import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
-import { createLogger } from "@open-mercato/shared/lib/logger";
-import { Attachment, AttachmentPartition } from "../data/entities.js";
-import { assertAttachmentScopeInvariant, checkAttachmentAccess } from "./access.js";
-import { buildAttachmentFileUrl } from "./imageUrls.js";
-import {
-  isScopedAttachmentUploadError
-} from "./scoped-upload-service.js";
-import { readAttachmentMetadata } from "./metadata.js";
-import {
-  buildAttachmentContentDisposition,
-  canRenderInlineAttachment,
-  hasDangerousExecutableExtension
-} from "./security.js";
-import {
-  isMultipartRequestWithinUploadLimit,
-  resolveAttachmentMaxBytes,
-  resolveAttachmentMultipartMaxBytes
-} from "./upload-limits.js";
-const logger = createLogger("attachments").child({ component: "attachment-service" });
-const SCOPED_UPLOAD_ERROR_MESSAGES = {
-  dangerous_executable: {
-    key: "attachments.errors.dangerousExecutable",
-    fallback: "Executable file types are not allowed as attachments."
-  },
-  max_upload_size: {
-    key: "attachments.errors.maxUploadSize",
-    fallback: "Attachment exceeds the maximum upload size."
-  },
-  active_content: {
-    key: "attachments.errors.activeContentBlocked",
-    fallback: "Active content uploads are not allowed."
-  },
-  partition_unavailable: {
-    key: "attachments.errors.partitionUnavailable",
-    fallback: "Attachment partition is not available for this scope."
-  },
-  quota_exceeded: {
-    key: "attachments.errors.quotaExceeded",
-    fallback: "Attachment storage quota exceeded for this tenant."
-  },
-  quota_target_exists: {
-    key: "attachments.errors.storagePathExists",
-    fallback: "The target storage path already exists."
-  },
-  quota_unavailable: {
-    key: "attachments.errors.quotaUnavailable",
-    fallback: "Storage quota accounting is unavailable."
-  },
-  quota_recovery_unsupported: {
-    key: "attachments.errors.quotaRecoveryUnsupported",
-    fallback: "Storage driver cannot participate in quota recovery."
-  },
-  storage_failed: {
-    key: "attachments.errors.storageFailed",
-    fallback: "Failed to store the attachment file."
-  },
-  persistence_failed: {
-    key: "attachments.errors.persistenceFailed",
-    fallback: "Failed to persist attachment."
-  }
-};
-const UPLOAD_FAILED_MESSAGE = {
-  key: "attachments.errors.uploadFailed",
-  fallback: "Attachment upload failed."
-};
-const UPLOAD_SERVICE_UNAVAILABLE_MESSAGE = {
-  key: "attachments.errors.uploadServiceUnavailable",
-  fallback: "The attachment upload service is not available."
-};
-async function translateAttachmentError(message) {
-  const { t } = await resolveTranslations();
-  return t(message.key, message.fallback);
-}
-async function readRequestBodyWithinLimit(request, maxBytes) {
-  const reader = request.body?.getReader();
-  if (!reader) throw new CrudHttpError(400, { error: "File is required" });
-  const chunks = [];
-  let totalBytes = 0;
-  try {
-    while (true) {
-      const { done, value } = await reader.read();
-      if (done) break;
-      totalBytes += value.byteLength;
-      if (totalBytes > maxBytes) {
-        await reader.cancel();
-        throw new CrudHttpError(413, { error: "Attachment exceeds the maximum upload size." });
-      }
-      chunks.push(value);
-    }
-  } finally {
-    reader.releaseLock();
-  }
-  const body = new Uint8Array(totalBytes);
-  let offset = 0;
-  for (const chunk of chunks) {
-    body.set(chunk, offset);
-    offset += chunk.byteLength;
-  }
-  return body;
-}
-function assignmentMatches(candidate, expected) {
-  return candidate.type === expected.type && candidate.id === expected.id;
-}
-function partitionMatchesScope(partition, tenantId, organizationId) {
-  const partitionTenantId = partition.tenantId ?? null;
-  const partitionOrganizationId = partition.organizationId ?? null;
-  if (partitionTenantId === null && partitionOrganizationId === null) return true;
-  if (partitionTenantId === null || partitionOrganizationId === null) return false;
-  return partitionTenantId === tenantId && partitionOrganizationId === organizationId;
-}
-class DefaultAttachmentService {
-  /**
-   * The scoped upload service is supplied as a *resolver*, not an instance:
-   * resolving it eagerly would drag its own dependencies (notably `dataEngine`)
-   * into every container that merely constructs an `attachmentService`, even
-   * one that never uploads. `createScoped` requires it — module uploads must
-   * share the one reservation ledger rather than run a parallel quota
-   * mechanism — so its absence surfaces there, at the call that needs it.
-   */
-  constructor(em, storageDriverFactory, resolveScopedUploadService) {
-    this.em = em;
-    this.storageDriverFactory = storageDriverFactory;
-    this.resolveScopedUploadService = resolveScopedUploadService;
-  }
-  validateUpload(input) {
-    if (!isMultipartRequestWithinUploadLimit(input.contentLength ?? null)) {
-      throw new CrudHttpError(413, { error: "Attachment exceeds the maximum upload size." });
-    }
-    if (input.fileName && hasDangerousExecutableExtension(input.fileName)) {
-      throw new CrudHttpError(400, { error: "Executable file types are not allowed as attachments." });
-    }
-    if (typeof input.fileSize === "number" && input.fileSize > resolveAttachmentMaxBytes(null)) {
-      throw new CrudHttpError(413, { error: "Attachment exceeds the maximum upload size." });
-    }
-  }
-  async readUploadForm(request) {
-    this.validateUpload({ contentLength: request.headers.get("content-length") });
-    const contentType = request.headers.get("content-type") ?? "";
-    if (!contentType.toLowerCase().includes("multipart/form-data")) {
-      throw new CrudHttpError(400, { error: "Expected multipart/form-data" });
-    }
-    const body = await readRequestBodyWithinLimit(request, resolveAttachmentMultipartMaxBytes());
-    const responseBody = body.buffer.slice(body.byteOffset, body.byteOffset + body.byteLength);
-    try {
-      return await new Response(responseBody, { headers: { "content-type": contentType } }).formData();
-    } catch {
-      throw new CrudHttpError(400, { error: "Invalid multipart/form-data" });
-    }
-  }
-  async createScoped(input) {
-    assertAttachmentScopeInvariant(input);
-    this.validateUpload({ fileName: input.fileName, fileSize: input.buffer.length });
-    let uploadService = null;
-    try {
-      uploadService = this.resolveScopedUploadService?.() ?? null;
-    } catch (error) {
-      logger.error("Scoped attachment upload service could not be resolved", { err: error });
-    }
-    if (!uploadService) {
-      throw new CrudHttpError(500, {
-        error: await translateAttachmentError(UPLOAD_SERVICE_UNAVAILABLE_MESSAGE)
-      });
-    }
-    let attachment;
-    try {
-      attachment = await uploadService.upload({
-        tenantId: input.tenantId,
-        organizationId: input.organizationId,
-        entityId: input.entityId,
-        recordId: input.recordId,
-        fileName: input.fileName,
-        buffer: input.buffer,
-        declaredMimeType: input.declaredMimeType ?? null,
-        assignments: input.assignments,
-        partitionCode: input.partitionCode,
-        requirePrivatePartition: true,
-        persistLink: input.persistLink
-      });
-    } catch (error) {
-      if (isScopedAttachmentUploadError(error)) {
-        const message = SCOPED_UPLOAD_ERROR_MESSAGES[error.code] ?? UPLOAD_FAILED_MESSAGE;
-        throw new CrudHttpError(error.status, { error: await translateAttachmentError(message) });
-      }
-      throw error;
-    }
-    return {
-      id: attachment.id,
-      url: attachment.url ?? buildAttachmentFileUrl(attachment.id),
-      fileName: attachment.fileName,
-      mimeType: attachment.mimeType,
-      fileSize: attachment.fileSize
-    };
-  }
-  async readScoped(input) {
-    const attachment = await findOneWithDecryption(
-      this.em,
-      Attachment,
-      {
-        id: input.attachmentId,
-        tenantId: input.auth.tenantId ?? null,
-        organizationId: input.auth.orgId ?? null
-      },
-      void 0,
-      { tenantId: input.auth.tenantId, organizationId: input.auth.orgId }
-    );
-    if (!attachment) throw new CrudHttpError(404, { error: "Attachment not found" });
-    const partition = await findOneWithDecryption(
-      this.em,
-      AttachmentPartition,
-      { code: attachment.partitionCode },
-      void 0,
-      { tenantId: input.auth.tenantId, organizationId: input.auth.orgId }
-    );
-    if (!partition) throw new CrudHttpError(500, { error: "Attachment partition is not configured" });
-    const access = checkAttachmentAccess(input.auth, attachment, partition, { requireAuthForPublic: true });
-    if (!access.ok) {
-      throw new CrudHttpError(access.status, { error: access.status === 401 ? "Unauthorized" : "Forbidden" });
-    }
-    if (!partitionMatchesScope(partition, input.auth.tenantId, input.auth.orgId)) {
-      throw new CrudHttpError(403, { error: "Attachment partition is not accessible for this scope" });
-    }
-    if (input.requirePrivatePartition && partition.isPublic) {
-      throw new CrudHttpError(403, { error: "Attachment partition is not accessible for this resource" });
-    }
-    if (input.expectedPartitionCode && attachment.partitionCode !== input.expectedPartitionCode) {
-      throw new CrudHttpError(404, { error: "Attachment not found" });
-    }
-    if (attachment.entityId !== input.expectedOwner.entityId || attachment.recordId !== input.expectedOwner.recordId) {
-      throw new CrudHttpError(404, { error: "Attachment not found" });
-    }
-    if (input.expectedAssignment) {
-      const assignments = readAttachmentMetadata(attachment.storageMetadata).assignments ?? [];
-      if (!assignments.some((candidate) => assignmentMatches(candidate, input.expectedAssignment))) {
-        throw new CrudHttpError(404, { error: "Attachment not found" });
-      }
-    }
-    const driver = await this.storageDriverFactory.resolveForPartition(attachment.partitionCode, {
-      tenantId: attachment.tenantId ?? "",
-      organizationId: attachment.organizationId ?? ""
-    });
-    let result;
-    try {
-      result = await driver.read(attachment.partitionCode, attachment.storagePath);
-    } catch {
-      throw new CrudHttpError(404, { error: "File not available" });
-    }
-    const mimeType = attachment.mimeType || "application/octet-stream";
-    const renderInline = !input.forceDownload && canRenderInlineAttachment(mimeType);
-    return {
-      buffer: result.buffer,
-      contentType: renderInline ? result.contentType ?? mimeType : "application/octet-stream",
-      contentDisposition: buildAttachmentContentDisposition(
-        attachment.fileName,
-        renderInline ? "inline" : "attachment"
-      ),
-      fileName: attachment.fileName,
-      mimeType
-    };
-  }
-  async releaseScoped(input, options = {}) {
-    const em = options.em ?? this.em;
-    const expectedAssignment = input.expectedAssignment;
-    if (!expectedAssignment) {
-      throw new CrudHttpError(500, {
-        error: "Attachment release requires the expected assignment of the releasing record"
-      });
-    }
-    const isInTransaction = em.isInTransaction;
-    if (options.flush !== false && typeof isInTransaction === "function" && isInTransaction.call(em)) {
-      throw new CrudHttpError(500, {
-        error: "Attachment release inside an ambient transaction requires flush: false and deferred provider cleanup"
-      });
-    }
-    const scope = { tenantId: input.tenantId, organizationId: input.organizationId };
-    const attachment = await findOneWithDecryption(
-      em,
-      Attachment,
-      {
-        id: input.attachmentId,
-        tenantId: input.tenantId,
-        organizationId: input.organizationId
-      },
-      void 0,
-      scope
-    );
-    if (!attachment) throw new CrudHttpError(404, { error: "Attachment not found" });
-    if (attachment.entityId !== input.expectedOwner.entityId || attachment.recordId !== input.expectedOwner.recordId || input.expectedPartitionCode && attachment.partitionCode !== input.expectedPartitionCode) {
-      throw new CrudHttpError(404, { error: "Attachment not found" });
-    }
-    const assignments = readAttachmentMetadata(attachment.storageMetadata).assignments ?? [];
-    if (!assignments.some((candidate) => assignmentMatches(candidate, expectedAssignment))) {
-      throw new CrudHttpError(409, { error: "Attachment is still referenced by another record" });
-    }
-    if (assignments.some((candidate) => !assignmentMatches(candidate, expectedAssignment))) {
-      throw new CrudHttpError(409, { error: "Attachment is still referenced by another record" });
-    }
-    const driver = await this.storageDriverFactory.resolveForPartition(attachment.partitionCode, scope);
-    const deleteProviderBytes = () => driver.delete(attachment.partitionCode, attachment.storagePath);
-    em.remove(attachment);
-    if (options.flush === false) {
-      return deleteProviderBytes;
-    }
-    await em.flush();
-    await deleteProviderBytes();
-  }
-}
-export {
-  DefaultAttachmentService
-};
-//# sourceMappingURL=attachment-service.js.map

package/dist/modules/attachments/lib/attachment-service.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/attachments/lib/attachment-service.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { AuthContext } from '@open-mercato/shared/lib/auth/server'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { Attachment, AttachmentPartition } from '../data/entities'\nimport { assertAttachmentScopeInvariant, checkAttachmentAccess } from './access'\nimport type { StorageDriverFactory } from './drivers'\nimport { buildAttachmentFileUrl } from './imageUrls'\nimport {\n  isScopedAttachmentUploadError,\n  type ScopedAttachmentUploadErrorCode,\n  type ScopedAttachmentUploadService,\n} from './scoped-upload-service'\nimport { readAttachmentMetadata, type AttachmentAssignment } from './metadata'\nimport {\n  buildAttachmentContentDisposition,\n  canRenderInlineAttachment,\n  hasDangerousExecutableExtension,\n} from './security'\nimport {\n  isMultipartRequestWithinUploadLimit,\n  resolveAttachmentMaxBytes,\n  resolveAttachmentMultipartMaxBytes,\n} from './upload-limits'\n\nconst logger = createLogger('attachments').child({ component: 'attachment-service' })\n\ntype AttachmentErrorMessage = {\n  key: string\n  fallback: string\n}\n\n/**\n * The scoped upload service reports failures as machine codes. Each maps to the\n * translation key the public attachment route uses for the same condition, and\n * the key is resolved server-side before it reaches the response body \u2014 clients\n * render the `error` field verbatim, so handing them a raw key would surface\n * `attachments.errors.quotaExceeded` as the user-facing message.\n */\nconst SCOPED_UPLOAD_ERROR_MESSAGES: Record<ScopedAttachmentUploadErrorCode, AttachmentErrorMessage> = {\n  dangerous_executable: {\n    key: 'attachments.errors.dangerousExecutable',\n    fallback: 'Executable file types are not allowed as attachments.',\n  },\n  max_upload_size: {\n    key: 'attachments.errors.maxUploadSize',\n    fallback: 'Attachment exceeds the maximum upload size.',\n  },\n  active_content: {\n    key: 'attachments.errors.activeContentBlocked',\n    fallback: 'Active content uploads are not allowed.',\n  },\n  partition_unavailable: {\n    key: 'attachments.errors.partitionUnavailable',\n    fallback: 'Attachment partition is not available for this scope.',\n  },\n  quota_exceeded: {\n    key: 'attachments.errors.quotaExceeded',\n    fallback: 'Attachment storage quota exceeded for this tenant.',\n  },\n  quota_target_exists: {\n    key: 'attachments.errors.storagePathExists',\n    fallback: 'The target storage path already exists.',\n  },\n  quota_unavailable: {\n    key: 'attachments.errors.quotaUnavailable',\n    fallback: 'Storage quota accounting is unavailable.',\n  },\n  quota_recovery_unsupported: {\n    key: 'attachments.errors.quotaRecoveryUnsupported',\n    fallback: 'Storage driver cannot participate in quota recovery.',\n  },\n  storage_failed: {\n    key: 'attachments.errors.storageFailed',\n    fallback: 'Failed to store the attachment file.',\n  },\n  persistence_failed: {\n    key: 'attachments.errors.persistenceFailed',\n    fallback: 'Failed to persist attachment.',\n  },\n}\n\nconst UPLOAD_FAILED_MESSAGE: AttachmentErrorMessage = {\n  key: 'attachments.errors.uploadFailed',\n  fallback: 'Attachment upload failed.',\n}\n\nconst UPLOAD_SERVICE_UNAVAILABLE_MESSAGE: AttachmentErrorMessage = {\n  key: 'attachments.errors.uploadServiceUnavailable',\n  fallback: 'The attachment upload service is not available.',\n}\n\nasync function translateAttachmentError(message: AttachmentErrorMessage): Promise<string> {\n  const { t } = await resolveTranslations()\n  return t(message.key, message.fallback)\n}\n\nexport type AttachmentOwner = {\n  entityId: string\n  recordId: string\n}\n\nexport type CreateScopedAttachmentInput = AttachmentOwner & {\n  tenantId: string\n  organizationId: string\n  partitionCode: string\n  fileName: string\n  declaredMimeType?: string | null\n  buffer: Buffer\n  assignments?: AttachmentAssignment[]\n  /**\n   * Persists a module-owned link inside the same transaction as the Attachment\n   * row. The callback receives only the generated id, never an Attachment\n   * entity or storage implementation.\n   */\n  persistLink?: (tx: EntityManager, attachmentId: string) => Promise<void> | void\n}\n\nexport type CreatedScopedAttachment = {\n  id: string\n  url: string\n  fileName: string\n  mimeType: string\n  fileSize: number\n}\n\nexport type ReadScopedAttachmentInput = {\n  attachmentId: string\n  auth: NonNullable<AuthContext>\n  expectedOwner: AttachmentOwner\n  expectedAssignment?: AttachmentAssignment\n  expectedPartitionCode?: string\n  requirePrivatePartition?: boolean\n  forceDownload?: boolean\n}\n\nexport type ReadScopedAttachmentResult = {\n  buffer: Buffer\n  contentType: string\n  contentDisposition: string\n  fileName: string\n  mimeType: string\n}\n\nexport type ReleaseScopedAttachmentInput = {\n  attachmentId: string\n  tenantId: string\n  organizationId: string\n  expectedOwner: AttachmentOwner\n  /**\n   * Required: releasing an attachment deletes the row *and* the provider bytes,\n   * so the caller must name the one assignment it owns. The release only\n   * proceeds when that assignment is the attachment's sole reference.\n   */\n  expectedAssignment: AttachmentAssignment\n  expectedPartitionCode?: string\n}\n\nexport type AttachmentProviderCleanup = () => Promise<void>\n\nexport interface AttachmentService {\n  validateUpload(input: {\n    contentLength?: string | null\n    fileName?: string\n    fileSize?: number\n  }): void\n  readUploadForm?(request: Request): Promise<FormData>\n  createScoped(input: CreateScopedAttachmentInput): Promise<CreatedScopedAttachment>\n  readScoped(input: ReadScopedAttachmentInput): Promise<ReadScopedAttachmentResult>\n  releaseScoped?(\n    input: ReleaseScopedAttachmentInput,\n    options?: { em?: EntityManager; flush?: boolean },\n  ): Promise<AttachmentProviderCleanup | void>\n}\n\nasync function readRequestBodyWithinLimit(request: Request, maxBytes: number): Promise<Uint8Array> {\n  const reader = request.body?.getReader()\n  if (!reader) throw new CrudHttpError(400, { error: 'File is required' })\n  const chunks: Uint8Array[] = []\n  let totalBytes = 0\n  try {\n    while (true) {\n      const { done, value } = await reader.read()\n      if (done) break\n      totalBytes += value.byteLength\n      if (totalBytes > maxBytes) {\n        await reader.cancel()\n        throw new CrudHttpError(413, { error: 'Attachment exceeds the maximum upload size.' })\n      }\n      chunks.push(value)\n    }\n  } finally {\n    reader.releaseLock()\n  }\n  const body = new Uint8Array(totalBytes)\n  let offset = 0\n  for (const chunk of chunks) {\n    body.set(chunk, offset)\n    offset += chunk.byteLength\n  }\n  return body\n}\n\n\nfunction assignmentMatches(candidate: AttachmentAssignment, expected: AttachmentAssignment): boolean {\n  return candidate.type === expected.type && candidate.id === expected.id\n}\n\nfunction partitionMatchesScope(\n  partition: AttachmentPartition,\n  tenantId: string | null | undefined,\n  organizationId: string | null | undefined,\n): boolean {\n  const partitionTenantId = partition.tenantId ?? null\n  const partitionOrganizationId = partition.organizationId ?? null\n  if (partitionTenantId === null && partitionOrganizationId === null) return true\n  if (partitionTenantId === null || partitionOrganizationId === null) return false\n  return partitionTenantId === tenantId && partitionOrganizationId === organizationId\n}\n\nexport class DefaultAttachmentService implements AttachmentService {\n  /**\n   * The scoped upload service is supplied as a *resolver*, not an instance:\n   * resolving it eagerly would drag its own dependencies (notably `dataEngine`)\n   * into every container that merely constructs an `attachmentService`, even\n   * one that never uploads. `createScoped` requires it \u2014 module uploads must\n   * share the one reservation ledger rather than run a parallel quota\n   * mechanism \u2014 so its absence surfaces there, at the call that needs it.\n   */\n  constructor(\n    private readonly em: EntityManager,\n    private readonly storageDriverFactory: StorageDriverFactory,\n    private readonly resolveScopedUploadService?: (() => ScopedAttachmentUploadService | null) | null,\n  ) {}\n\n  validateUpload(input: {\n    contentLength?: string | null\n    fileName?: string\n    fileSize?: number\n  }): void {\n    if (!isMultipartRequestWithinUploadLimit(input.contentLength ?? null)) {\n      throw new CrudHttpError(413, { error: 'Attachment exceeds the maximum upload size.' })\n    }\n    if (input.fileName && hasDangerousExecutableExtension(input.fileName)) {\n      throw new CrudHttpError(400, { error: 'Executable file types are not allowed as attachments.' })\n    }\n    if (typeof input.fileSize === 'number' && input.fileSize > resolveAttachmentMaxBytes(null)) {\n      throw new CrudHttpError(413, { error: 'Attachment exceeds the maximum upload size.' })\n    }\n  }\n\n  async readUploadForm(request: Request): Promise<FormData> {\n    this.validateUpload({ contentLength: request.headers.get('content-length') })\n    const contentType = request.headers.get('content-type') ?? ''\n    if (!contentType.toLowerCase().includes('multipart/form-data')) {\n      throw new CrudHttpError(400, { error: 'Expected multipart/form-data' })\n    }\n    const body = await readRequestBodyWithinLimit(request, resolveAttachmentMultipartMaxBytes())\n    const responseBody = body.buffer.slice(body.byteOffset, body.byteOffset + body.byteLength) as ArrayBuffer\n    try {\n      return await new Response(responseBody, { headers: { 'content-type': contentType } }).formData()\n    } catch {\n      throw new CrudHttpError(400, { error: 'Invalid multipart/form-data' })\n    }\n  }\n\n  async createScoped(input: CreateScopedAttachmentInput): Promise<CreatedScopedAttachment> {\n    assertAttachmentScopeInvariant(input)\n    this.validateUpload({ fileName: input.fileName, fileSize: input.buffer.length })\n\n    // Delegate to the platform's scoped upload service rather than repeating its\n    // work. It owns the fenced quota lease (reserve \u2192 storing \u2192 stored \u2192\n    // complete) that the recovery worker reconciles, writes to the provider\n    // outside the database transaction, and emits the attachment CRUD side\n    // effects. The previous implementation here ran a *second*, independent\n    // quota mechanism on a different advisory-lock key that counted only\n    // committed rows, so it could not see an in-flight reservation from the\n    // public attachment route and the two paths could jointly exceed a tenant's\n    // quota \u2014 and it wrote to storage inside the transaction, so a crash before\n    // commit left bytes nothing accounted for.\n    let uploadService: ScopedAttachmentUploadService | null = null\n    try {\n      uploadService = this.resolveScopedUploadService?.() ?? null\n    } catch (error) {\n      logger.error('Scoped attachment upload service could not be resolved', { err: error })\n    }\n    if (!uploadService) {\n      throw new CrudHttpError(500, {\n        error: await translateAttachmentError(UPLOAD_SERVICE_UNAVAILABLE_MESSAGE),\n      })\n    }\n\n    let attachment: Attachment\n    try {\n      attachment = await uploadService.upload({\n        tenantId: input.tenantId,\n        organizationId: input.organizationId,\n        entityId: input.entityId,\n        recordId: input.recordId,\n        fileName: input.fileName,\n        buffer: input.buffer,\n        declaredMimeType: input.declaredMimeType ?? null,\n        assignments: input.assignments,\n        partitionCode: input.partitionCode,\n        requirePrivatePartition: true,\n        persistLink: input.persistLink,\n      })\n    } catch (error) {\n      if (isScopedAttachmentUploadError(error)) {\n        const message = SCOPED_UPLOAD_ERROR_MESSAGES[error.code] ?? UPLOAD_FAILED_MESSAGE\n        throw new CrudHttpError(error.status, { error: await translateAttachmentError(message) })\n      }\n      throw error\n    }\n\n    return {\n      id: attachment.id,\n      url: attachment.url ?? buildAttachmentFileUrl(attachment.id),\n      fileName: attachment.fileName,\n      mimeType: attachment.mimeType,\n      fileSize: attachment.fileSize,\n    }\n  }\n\n  async readScoped(input: ReadScopedAttachmentInput): Promise<ReadScopedAttachmentResult> {\n    // Scope the lookup at the database boundary so a foreign-tenant row is\n    // never materialized, then keep checkAttachmentAccess below as defense in\n    // depth. This service only ever stores fully scoped rows, so global rows\n    // and super-admin status deliberately do not widen the requested scope \u2014\n    // a super admin reads another tenant's attachment by switching scope, not\n    // by bypassing the filter.\n    const attachment = await findOneWithDecryption(\n      this.em,\n      Attachment,\n      {\n        id: input.attachmentId,\n        tenantId: input.auth.tenantId ?? null,\n        organizationId: input.auth.orgId ?? null,\n      },\n      undefined,\n      { tenantId: input.auth.tenantId, organizationId: input.auth.orgId },\n    )\n    if (!attachment) throw new CrudHttpError(404, { error: 'Attachment not found' })\n    const partition = await findOneWithDecryption(\n      this.em,\n      AttachmentPartition,\n      { code: attachment.partitionCode },\n      undefined,\n      { tenantId: input.auth.tenantId, organizationId: input.auth.orgId },\n    )\n    if (!partition) throw new CrudHttpError(500, { error: 'Attachment partition is not configured' })\n\n    const access = checkAttachmentAccess(input.auth, attachment, partition, { requireAuthForPublic: true })\n    if (!access.ok) {\n      throw new CrudHttpError(access.status, { error: access.status === 401 ? 'Unauthorized' : 'Forbidden' })\n    }\n    if (!partitionMatchesScope(partition, input.auth.tenantId, input.auth.orgId)) {\n      throw new CrudHttpError(403, { error: 'Attachment partition is not accessible for this scope' })\n    }\n    if (input.requirePrivatePartition && partition.isPublic) {\n      throw new CrudHttpError(403, { error: 'Attachment partition is not accessible for this resource' })\n    }\n    if (input.expectedPartitionCode && attachment.partitionCode !== input.expectedPartitionCode) {\n      throw new CrudHttpError(404, { error: 'Attachment not found' })\n    }\n    if (\n      attachment.entityId !== input.expectedOwner.entityId ||\n      attachment.recordId !== input.expectedOwner.recordId\n    ) {\n      throw new CrudHttpError(404, { error: 'Attachment not found' })\n    }\n    if (input.expectedAssignment) {\n      const assignments = readAttachmentMetadata(attachment.storageMetadata).assignments ?? []\n      if (!assignments.some((candidate) => assignmentMatches(candidate, input.expectedAssignment!))) {\n        throw new CrudHttpError(404, { error: 'Attachment not found' })\n      }\n    }\n\n    const driver = await this.storageDriverFactory.resolveForPartition(attachment.partitionCode, {\n      tenantId: attachment.tenantId ?? '',\n      organizationId: attachment.organizationId ?? '',\n    })\n    let result: Awaited<ReturnType<typeof driver.read>>\n    try {\n      result = await driver.read(attachment.partitionCode, attachment.storagePath)\n    } catch {\n      throw new CrudHttpError(404, { error: 'File not available' })\n    }\n\n    const mimeType = attachment.mimeType || 'application/octet-stream'\n    const renderInline = !input.forceDownload && canRenderInlineAttachment(mimeType)\n    return {\n      buffer: result.buffer,\n      contentType: renderInline ? result.contentType ?? mimeType : 'application/octet-stream',\n      contentDisposition: buildAttachmentContentDisposition(\n        attachment.fileName,\n        renderInline ? 'inline' : 'attachment',\n      ),\n      fileName: attachment.fileName,\n      mimeType,\n    }\n  }\n\n  async releaseScoped(\n    input: ReleaseScopedAttachmentInput,\n    options: { em?: EntityManager; flush?: boolean } = {},\n  ): Promise<AttachmentProviderCleanup | void> {\n    const em = options.em ?? this.em\n    // The type makes `expectedAssignment` mandatory, but this service is handed\n    // out through untyped DI resolution and consumed through structural ports in\n    // other packages, so the shared-reference guard is enforced at runtime too:\n    // without it a caller could destroy an attachment other records still link.\n    const expectedAssignment = input.expectedAssignment\n    if (!expectedAssignment) {\n      throw new CrudHttpError(500, {\n        error: 'Attachment release requires the expected assignment of the releasing record',\n      })\n    }\n    const isInTransaction = (em as { isInTransaction?: () => boolean }).isInTransaction\n    if (\n      options.flush !== false\n      && typeof isInTransaction === 'function'\n      && isInTransaction.call(em)\n    ) {\n      throw new CrudHttpError(500, {\n        error: 'Attachment release inside an ambient transaction requires flush: false and deferred provider cleanup',\n      })\n    }\n    const scope = { tenantId: input.tenantId, organizationId: input.organizationId }\n    const attachment = await findOneWithDecryption(\n      em,\n      Attachment,\n      {\n        id: input.attachmentId,\n        tenantId: input.tenantId,\n        organizationId: input.organizationId,\n      },\n      undefined,\n      scope,\n    )\n    if (!attachment) throw new CrudHttpError(404, { error: 'Attachment not found' })\n    if (\n      attachment.entityId !== input.expectedOwner.entityId\n      || attachment.recordId !== input.expectedOwner.recordId\n      || (input.expectedPartitionCode && attachment.partitionCode !== input.expectedPartitionCode)\n    ) {\n      throw new CrudHttpError(404, { error: 'Attachment not found' })\n    }\n    const assignments = readAttachmentMetadata(attachment.storageMetadata).assignments ?? []\n    if (!assignments.some((candidate) => assignmentMatches(candidate, expectedAssignment))) {\n      throw new CrudHttpError(409, { error: 'Attachment is still referenced by another record' })\n    }\n    if (assignments.some((candidate) => !assignmentMatches(candidate, expectedAssignment))) {\n      throw new CrudHttpError(409, { error: 'Attachment is still referenced by another record' })\n    }\n\n    const driver = await this.storageDriverFactory.resolveForPartition(attachment.partitionCode, scope)\n    const deleteProviderBytes = () => driver.delete(attachment.partitionCode, attachment.storagePath)\n    em.remove(attachment)\n    if (options.flush === false) {\n      return deleteProviderBytes\n    }\n    await em.flush()\n    await deleteProviderBytes()\n  }\n}\n"],
-  "mappings": "AAEA,SAAS,qBAAqB;AAC9B,SAAS,6BAA6B;AACtC,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAC7B,SAAS,YAAY,2BAA2B;AAChD,SAAS,gCAAgC,6BAA6B;AAEtE,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,OAGK;AACP,SAAS,8BAAyD;AAClE;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,SAAS,aAAa,aAAa,EAAE,MAAM,EAAE,WAAW,qBAAqB,CAAC;AAcpF,MAAM,+BAAgG;AAAA,EACpG,sBAAsB;AAAA,IACpB,KAAK;AAAA,IACL,UAAU;AAAA,EACZ;AAAA,EACA,iBAAiB;AAAA,IACf,KAAK;AAAA,IACL,UAAU;AAAA,EACZ;AAAA,EACA,gBAAgB;AAAA,IACd,KAAK;AAAA,IACL,UAAU;AAAA,EACZ;AAAA,EACA,uBAAuB;AAAA,IACrB,KAAK;AAAA,IACL,UAAU;AAAA,EACZ;AAAA,EACA,gBAAgB;AAAA,IACd,KAAK;AAAA,IACL,UAAU;AAAA,EACZ;AAAA,EACA,qBAAqB;AAAA,IACnB,KAAK;AAAA,IACL,UAAU;AAAA,EACZ;AAAA,EACA,mBAAmB;AAAA,IACjB,KAAK;AAAA,IACL,UAAU;AAAA,EACZ;AAAA,EACA,4BAA4B;AAAA,IAC1B,KAAK;AAAA,IACL,UAAU;AAAA,EACZ;AAAA,EACA,gBAAgB;AAAA,IACd,KAAK;AAAA,IACL,UAAU;AAAA,EACZ;AAAA,EACA,oBAAoB;AAAA,IAClB,KAAK;AAAA,IACL,UAAU;AAAA,EACZ;AACF;AAEA,MAAM,wBAAgD;AAAA,EACpD,KAAK;AAAA,EACL,UAAU;AACZ;AAEA,MAAM,qCAA6D;AAAA,EACjE,KAAK;AAAA,EACL,UAAU;AACZ;AAEA,eAAe,yBAAyB,SAAkD;AACxF,QAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,SAAO,EAAE,QAAQ,KAAK,QAAQ,QAAQ;AACxC;AAgFA,eAAe,2BAA2B,SAAkB,UAAuC;AACjG,QAAM,SAAS,QAAQ,MAAM,UAAU;AACvC,MAAI,CAAC,OAAQ,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,mBAAmB,CAAC;AACvE,QAAM,SAAuB,CAAC;AAC9B,MAAI,aAAa;AACjB,MAAI;AACF,WAAO,MAAM;AACX,YAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAC1C,UAAI,KAAM;AACV,oBAAc,MAAM;AACpB,UAAI,aAAa,UAAU;AACzB,cAAM,OAAO,OAAO;AACpB,cAAM,IAAI,cAAc,KAAK,EAAE,OAAO,8CAA8C,CAAC;AAAA,MACvF;AACA,aAAO,KAAK,KAAK;AAAA,IACnB;AAAA,EACF,UAAE;AACA,WAAO,YAAY;AAAA,EACrB;AACA,QAAM,OAAO,IAAI,WAAW,UAAU;AACtC,MAAI,SAAS;AACb,aAAW,SAAS,QAAQ;AAC1B,SAAK,IAAI,OAAO,MAAM;AACtB,cAAU,MAAM;AAAA,EAClB;AACA,SAAO;AACT;AAGA,SAAS,kBAAkB,WAAiC,UAAyC;AACnG,SAAO,UAAU,SAAS,SAAS,QAAQ,UAAU,OAAO,SAAS;AACvE;AAEA,SAAS,sBACP,WACA,UACA,gBACS;AACT,QAAM,oBAAoB,UAAU,YAAY;AAChD,QAAM,0BAA0B,UAAU,kBAAkB;AAC5D,MAAI,sBAAsB,QAAQ,4BAA4B,KAAM,QAAO;AAC3E,MAAI,sBAAsB,QAAQ,4BAA4B,KAAM,QAAO;AAC3E,SAAO,sBAAsB,YAAY,4BAA4B;AACvE;AAEO,MAAM,yBAAsD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASjE,YACmB,IACA,sBACA,4BACjB;AAHiB;AACA;AACA;AAAA,EAChB;AAAA,EAEH,eAAe,OAIN;AACP,QAAI,CAAC,oCAAoC,MAAM,iBAAiB,IAAI,GAAG;AACrE,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,8CAA8C,CAAC;AAAA,IACvF;AACA,QAAI,MAAM,YAAY,gCAAgC,MAAM,QAAQ,GAAG;AACrE,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,wDAAwD,CAAC;AAAA,IACjG;AACA,QAAI,OAAO,MAAM,aAAa,YAAY,MAAM,WAAW,0BAA0B,IAAI,GAAG;AAC1F,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,8CAA8C,CAAC;AAAA,IACvF;AAAA,EACF;AAAA,EAEA,MAAM,eAAe,SAAqC;AACxD,SAAK,eAAe,EAAE,eAAe,QAAQ,QAAQ,IAAI,gBAAgB,EAAE,CAAC;AAC5E,UAAM,cAAc,QAAQ,QAAQ,IAAI,cAAc,KAAK;AAC3D,QAAI,CAAC,YAAY,YAAY,EAAE,SAAS,qBAAqB,GAAG;AAC9D,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,+BAA+B,CAAC;AAAA,IACxE;AACA,UAAM,OAAO,MAAM,2BAA2B,SAAS,mCAAmC,CAAC;AAC3F,UAAM,eAAe,KAAK,OAAO,MAAM,KAAK,YAAY,KAAK,aAAa,KAAK,UAAU;AACzF,QAAI;AACF,aAAO,MAAM,IAAI,SAAS,cAAc,EAAE,SAAS,EAAE,gBAAgB,YAAY,EAAE,CAAC,EAAE,SAAS;AAAA,IACjG,QAAQ;AACN,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,8BAA8B,CAAC;AAAA,IACvE;AAAA,EACF;AAAA,EAEA,MAAM,aAAa,OAAsE;AACvF,mCAA+B,KAAK;AACpC,SAAK,eAAe,EAAE,UAAU,MAAM,UAAU,UAAU,MAAM,OAAO,OAAO,CAAC;AAY/E,QAAI,gBAAsD;AAC1D,QAAI;AACF,sBAAgB,KAAK,6BAA6B,KAAK;AAAA,IACzD,SAAS,OAAO;AACd,aAAO,MAAM,0DAA0D,EAAE,KAAK,MAAM,CAAC;AAAA,IACvF;AACA,QAAI,CAAC,eAAe;AAClB,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO,MAAM,yBAAyB,kCAAkC;AAAA,MAC1E,CAAC;AAAA,IACH;AAEA,QAAI;AACJ,QAAI;AACF,mBAAa,MAAM,cAAc,OAAO;AAAA,QACtC,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,QAChB,UAAU,MAAM;AAAA,QAChB,UAAU,MAAM;AAAA,QAChB,QAAQ,MAAM;AAAA,QACd,kBAAkB,MAAM,oBAAoB;AAAA,QAC5C,aAAa,MAAM;AAAA,QACnB,eAAe,MAAM;AAAA,QACrB,yBAAyB;AAAA,QACzB,aAAa,MAAM;AAAA,MACrB,CAAC;AAAA,IACH,SAAS,OAAO;AACd,UAAI,8BAA8B,KAAK,GAAG;AACxC,cAAM,UAAU,6BAA6B,MAAM,IAAI,KAAK;AAC5D,cAAM,IAAI,cAAc,MAAM,QAAQ,EAAE,OAAO,MAAM,yBAAyB,OAAO,EAAE,CAAC;AAAA,MAC1F;AACA,YAAM;AAAA,IACR;AAEA,WAAO;AAAA,MACL,IAAI,WAAW;AAAA,MACf,KAAK,WAAW,OAAO,uBAAuB,WAAW,EAAE;AAAA,MAC3D,UAAU,WAAW;AAAA,MACrB,UAAU,WAAW;AAAA,MACrB,UAAU,WAAW;AAAA,IACvB;AAAA,EACF;AAAA,EAEA,MAAM,WAAW,OAAuE;AAOtF,UAAM,aAAa,MAAM;AAAA,MACvB,KAAK;AAAA,MACL;AAAA,MACA;AAAA,QACE,IAAI,MAAM;AAAA,QACV,UAAU,MAAM,KAAK,YAAY;AAAA,QACjC,gBAAgB,MAAM,KAAK,SAAS;AAAA,MACtC;AAAA,MACA;AAAA,MACA,EAAE,UAAU,MAAM,KAAK,UAAU,gBAAgB,MAAM,KAAK,MAAM;AAAA,IACpE;AACA,QAAI,CAAC,WAAY,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,uBAAuB,CAAC;AAC/E,UAAM,YAAY,MAAM;AAAA,MACtB,KAAK;AAAA,MACL;AAAA,MACA,EAAE,MAAM,WAAW,cAAc;AAAA,MACjC;AAAA,MACA,EAAE,UAAU,MAAM,KAAK,UAAU,gBAAgB,MAAM,KAAK,MAAM;AAAA,IACpE;AACA,QAAI,CAAC,UAAW,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,yCAAyC,CAAC;AAEhG,UAAM,SAAS,sBAAsB,MAAM,MAAM,YAAY,WAAW,EAAE,sBAAsB,KAAK,CAAC;AACtG,QAAI,CAAC,OAAO,IAAI;AACd,YAAM,IAAI,cAAc,OAAO,QAAQ,EAAE,OAAO,OAAO,WAAW,MAAM,iBAAiB,YAAY,CAAC;AAAA,IACxG;AACA,QAAI,CAAC,sBAAsB,WAAW,MAAM,KAAK,UAAU,MAAM,KAAK,KAAK,GAAG;AAC5E,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,wDAAwD,CAAC;AAAA,IACjG;AACA,QAAI,MAAM,2BAA2B,UAAU,UAAU;AACvD,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,2DAA2D,CAAC;AAAA,IACpG;AACA,QAAI,MAAM,yBAAyB,WAAW,kBAAkB,MAAM,uBAAuB;AAC3F,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,uBAAuB,CAAC;AAAA,IAChE;AACA,QACE,WAAW,aAAa,MAAM,cAAc,YAC5C,WAAW,aAAa,MAAM,cAAc,UAC5C;AACA,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,uBAAuB,CAAC;AAAA,IAChE;AACA,QAAI,MAAM,oBAAoB;AAC5B,YAAM,cAAc,uBAAuB,WAAW,eAAe,EAAE,eAAe,CAAC;AACvF,UAAI,CAAC,YAAY,KAAK,CAAC,cAAc,kBAAkB,WAAW,MAAM,kBAAmB,CAAC,GAAG;AAC7F,cAAM,IAAI,cAAc,KAAK,EAAE,OAAO,uBAAuB,CAAC;AAAA,MAChE;AAAA,IACF;AAEA,UAAM,SAAS,MAAM,KAAK,qBAAqB,oBAAoB,WAAW,eAAe;AAAA,MAC3F,UAAU,WAAW,YAAY;AAAA,MACjC,gBAAgB,WAAW,kBAAkB;AAAA,IAC/C,CAAC;AACD,QAAI;AACJ,QAAI;AACF,eAAS,MAAM,OAAO,KAAK,WAAW,eAAe,WAAW,WAAW;AAAA,IAC7E,QAAQ;AACN,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,qBAAqB,CAAC;AAAA,IAC9D;AAEA,UAAM,WAAW,WAAW,YAAY;AACxC,UAAM,eAAe,CAAC,MAAM,iBAAiB,0BAA0B,QAAQ;AAC/E,WAAO;AAAA,MACL,QAAQ,OAAO;AAAA,MACf,aAAa,eAAe,OAAO,eAAe,WAAW;AAAA,MAC7D,oBAAoB;AAAA,QAClB,WAAW;AAAA,QACX,eAAe,WAAW;AAAA,MAC5B;AAAA,MACA,UAAU,WAAW;AAAA,MACrB;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,cACJ,OACA,UAAmD,CAAC,GACT;AAC3C,UAAM,KAAK,QAAQ,MAAM,KAAK;AAK9B,UAAM,qBAAqB,MAAM;AACjC,QAAI,CAAC,oBAAoB;AACvB,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AACA,UAAM,kBAAmB,GAA2C;AACpE,QACE,QAAQ,UAAU,SACf,OAAO,oBAAoB,cAC3B,gBAAgB,KAAK,EAAE,GAC1B;AACA,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AACA,UAAM,QAAQ,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAC/E,UAAM,aAAa,MAAM;AAAA,MACvB;AAAA,MACA;AAAA,MACA;AAAA,QACE,IAAI,MAAM;AAAA,QACV,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI,CAAC,WAAY,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,uBAAuB,CAAC;AAC/E,QACE,WAAW,aAAa,MAAM,cAAc,YACzC,WAAW,aAAa,MAAM,cAAc,YAC3C,MAAM,yBAAyB,WAAW,kBAAkB,MAAM,uBACtE;AACA,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,uBAAuB,CAAC;AAAA,IAChE;AACA,UAAM,cAAc,uBAAuB,WAAW,eAAe,EAAE,eAAe,CAAC;AACvF,QAAI,CAAC,YAAY,KAAK,CAAC,cAAc,kBAAkB,WAAW,kBAAkB,CAAC,GAAG;AACtF,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,mDAAmD,CAAC;AAAA,IAC5F;AACA,QAAI,YAAY,KAAK,CAAC,cAAc,CAAC,kBAAkB,WAAW,kBAAkB,CAAC,GAAG;AACtF,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,mDAAmD,CAAC;AAAA,IAC5F;AAEA,UAAM,SAAS,MAAM,KAAK,qBAAqB,oBAAoB,WAAW,eAAe,KAAK;AAClG,UAAM,sBAAsB,MAAM,OAAO,OAAO,WAAW,eAAe,WAAW,WAAW;AAChG,OAAG,OAAO,UAAU;AACpB,QAAI,QAAQ,UAAU,OAAO;AAC3B,aAAO;AAAA,IACT;AACA,UAAM,GAAG,MAAM;AACf,UAAM,oBAAoB;AAAA,EAC5B;AACF;",
-  "names": []
-}

package/dist/modules/auth/api/reset/validate.js

@@ -1,55 +0,0 @@
-import { validatePasswordResetTokenSchema } from "@open-mercato/core/modules/auth/data/validators";
-import { NextResponse } from "next/server";
-import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
-import { z } from "zod";
-import { rateLimitErrorSchema } from "@open-mercato/shared/lib/ratelimit/helpers";
-import { readEndpointRateLimitConfig } from "@open-mercato/shared/lib/ratelimit/config";
-import { checkAuthRateLimit } from "@open-mercato/core/modules/auth/lib/rateLimitCheck";
-const resetValidateRateLimitConfig = readEndpointRateLimitConfig("RESET_VALIDATE", {
-  points: 10,
-  duration: 300,
-  keyPrefix: "reset-validate"
-});
-async function POST(req) {
-  const form = await req.formData();
-  const token = String(form.get("token") ?? "");
-  const { error: rateLimitError } = await checkAuthRateLimit({ req, ipConfig: resetValidateRateLimitConfig });
-  if (rateLimitError) return rateLimitError;
-  const parsed = validatePasswordResetTokenSchema.safeParse({ token });
-  if (!parsed.success) return NextResponse.json({ ok: true, valid: false });
-  const container = await createRequestContainer();
-  const auth = container.resolve("authService");
-  const valid = await auth.isPasswordResetTokenValid(parsed.data.token);
-  return NextResponse.json({ ok: true, valid });
-}
-const metadata = { requireAuth: false };
-const passwordResetValidateResponseSchema = z.object({
-  ok: z.literal(true),
-  valid: z.boolean()
-});
-const openApi = {
-  tag: "Authentication & Accounts",
-  summary: "Check a password reset token",
-  methods: {
-    POST: {
-      summary: "Check whether a password reset token is still usable",
-      description: "Reports whether a reset token exists, is unused, and has not expired, so the reset page can render a terminal state instead of a form the token can never submit. The token is never consumed and the response never distinguishes unknown, used, and expired tokens.",
-      requestBody: {
-        contentType: "application/x-www-form-urlencoded",
-        schema: validatePasswordResetTokenSchema
-      },
-      responses: [
-        { status: 200, description: "Token state resolved", schema: passwordResetValidateResponseSchema }
-      ],
-      errors: [
-        { status: 429, description: "Too many token validation attempts", schema: rateLimitErrorSchema }
-      ]
-    }
-  }
-};
-export {
-  POST,
-  metadata,
-  openApi
-};
-//# sourceMappingURL=validate.js.map

package/dist/modules/auth/api/reset/validate.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../../src/modules/auth/api/reset/validate.ts"],
-  "sourcesContent": ["import { validatePasswordResetTokenSchema } from '@open-mercato/core/modules/auth/data/validators'\nimport { NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { AuthService } from '@open-mercato/core/modules/auth/services/authService'\nimport { z } from 'zod'\nimport { rateLimitErrorSchema } from '@open-mercato/shared/lib/ratelimit/helpers'\nimport { readEndpointRateLimitConfig } from '@open-mercato/shared/lib/ratelimit/config'\nimport { checkAuthRateLimit } from '@open-mercato/core/modules/auth/lib/rateLimitCheck'\n\nconst resetValidateRateLimitConfig = readEndpointRateLimitConfig('RESET_VALIDATE', {\n  points: 10, duration: 300, keyPrefix: 'reset-validate',\n})\n\nexport async function POST(req: Request) {\n  const form = await req.formData()\n  const token = String(form.get('token') ?? '')\n  // Rate limit by IP \u2014 checked before validation and DB work\n  const { error: rateLimitError } = await checkAuthRateLimit({ req, ipConfig: resetValidateRateLimitConfig })\n  if (rateLimitError) return rateLimitError\n  const parsed = validatePasswordResetTokenSchema.safeParse({ token })\n  // A malformed token is reported as simply not valid: the caller learns nothing\n  // it could not learn by posting the same token to /api/auth/reset/confirm.\n  if (!parsed.success) return NextResponse.json({ ok: true, valid: false })\n  const container = await createRequestContainer()\n  const auth = container.resolve<AuthService>('authService')\n  const valid = await auth.isPasswordResetTokenValid(parsed.data.token)\n  return NextResponse.json({ ok: true, valid })\n}\n\nexport const metadata = { requireAuth: false }\n\nconst passwordResetValidateResponseSchema = z.object({\n  ok: z.literal(true),\n  valid: z.boolean(),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Authentication & Accounts',\n  summary: 'Check a password reset token',\n  methods: {\n    POST: {\n      summary: 'Check whether a password reset token is still usable',\n      description: 'Reports whether a reset token exists, is unused, and has not expired, so the reset page can render a terminal state instead of a form the token can never submit. The token is never consumed and the response never distinguishes unknown, used, and expired tokens.',\n      requestBody: {\n        contentType: 'application/x-www-form-urlencoded',\n        schema: validatePasswordResetTokenSchema,\n      },\n      responses: [\n        { status: 200, description: 'Token state resolved', schema: passwordResetValidateResponseSchema },\n      ],\n      errors: [\n        { status: 429, description: 'Too many token validation attempts', schema: rateLimitErrorSchema },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,wCAAwC;AACjD,SAAS,oBAAoB;AAE7B,SAAS,8BAA8B;AAEvC,SAAS,SAAS;AAClB,SAAS,4BAA4B;AACrC,SAAS,mCAAmC;AAC5C,SAAS,0BAA0B;AAEnC,MAAM,+BAA+B,4BAA4B,kBAAkB;AAAA,EACjF,QAAQ;AAAA,EAAI,UAAU;AAAA,EAAK,WAAW;AACxC,CAAC;AAED,eAAsB,KAAK,KAAc;AACvC,QAAM,OAAO,MAAM,IAAI,SAAS;AAChC,QAAM,QAAQ,OAAO,KAAK,IAAI,OAAO,KAAK,EAAE;AAE5C,QAAM,EAAE,OAAO,eAAe,IAAI,MAAM,mBAAmB,EAAE,KAAK,UAAU,6BAA6B,CAAC;AAC1G,MAAI,eAAgB,QAAO;AAC3B,QAAM,SAAS,iCAAiC,UAAU,EAAE,MAAM,CAAC;AAGnE,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,KAAK,EAAE,IAAI,MAAM,OAAO,MAAM,CAAC;AACxE,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,UAAU,QAAqB,aAAa;AACzD,QAAM,QAAQ,MAAM,KAAK,0BAA0B,OAAO,KAAK,KAAK;AACpE,SAAO,aAAa,KAAK,EAAE,IAAI,MAAM,MAAM,CAAC;AAC9C;AAEO,MAAM,WAAW,EAAE,aAAa,MAAM;AAE7C,MAAM,sCAAsC,EAAE,OAAO;AAAA,EACnD,IAAI,EAAE,QAAQ,IAAI;AAAA,EAClB,OAAO,EAAE,QAAQ;AACnB,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,wBAAwB,QAAQ,oCAAoC;AAAA,MAClG;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,sCAAsC,QAAQ,qBAAqB;AAAA,MACjG;AAAA,IACF;AAAA,EACF;AACF;",
-  "names": []
-}