@plumix/plugin-media 0.1.0

package/dist/magic-bytes.js

@@ -0,0 +1,107 @@
+// Lightweight magic-byte detector for the MIME types the media plugin
+// accepts. The presigned PUT pins a `Content-Type` the bucket stores
+// verbatim — but R2 doesn't sniff bytes, so a malicious user can claim
+// `image/png` and upload arbitrary content (HTML, executables, polyglot
+// payloads). We re-fetch the first ~64 bytes after upload and verify
+// the header matches the claimed type. On mismatch the caller deletes
+// the object and rejects the confirm.
+//
+// Returns `true` when the buffer's prefix matches the claimed MIME, OR
+// when we have no matcher for that MIME (e.g. `text/plain` — no reliable
+// magic bytes). Returns `false` only when a known signature mismatches.
+const sigAt = (offset, ...sig) => (b) => {
+    if (b.length < offset + sig.length)
+        return false;
+    for (let i = 0; i < sig.length; i++) {
+        if (b[offset + i] !== sig[i])
+            return false;
+    }
+    return true;
+};
+const startsWith = (...sig) => sigAt(0, ...sig);
+const anyOf = (...m) => (b) => m.some((f) => f(b));
+// `RIFF...<tag>` containers — `tag` lives at offset 8 after `RIFF` + size.
+// Used by image/webp + audio/wav.
+const riffWith = (...tag) => {
+    const head = startsWith(0x52, 0x49, 0x46, 0x46); // RIFF
+    const tail = sigAt(8, ...tag);
+    return (b) => head(b) && tail(b);
+};
+const isXmlOrSvg = (b) => {
+    // SVG/XML: tolerate UTF-8 BOM + leading whitespace, then `<?xml` or `<svg`.
+    const text = new TextDecoder("utf-8", { fatal: false }).decode(b.subarray(0, Math.min(b.length, 256)));
+    // Strip a leading UTF-8 BOM (U+FEFF) before checking the prefix.
+    const trimmed = text.replace(/^\uFEFF/, "").trimStart();
+    return trimmed.startsWith("<?xml") || trimmed.startsWith("<svg");
+};
+// `text/*` payloads must not look like HTML. Authors stash HTML in
+// `.txt` to bypass the image allowlist and have CDNs serve it as
+// content. Magic bytes can't fully prove "this is plain text", but we
+// can reject obvious HTML markers and require UTF-8 decodability.
+const isPlainText = (b) => {
+    let text;
+    try {
+        text = new TextDecoder("utf-8", { fatal: true }).decode(b.subarray(0, Math.min(b.length, 256)));
+    }
+    catch {
+        return false;
+    }
+    const trimmed = text
+        .replace(/^\uFEFF/, "")
+        .trimStart()
+        .toLowerCase();
+    return !(trimmed.startsWith("<!doctype") ||
+        trimmed.startsWith("<html") ||
+        trimmed.startsWith("<?xml") ||
+        trimmed.startsWith("<svg") ||
+        trimmed.startsWith("<script") ||
+        trimmed.startsWith("<iframe"));
+};
+// `ftyp` at offset 4 covers MP4, MOV, AVIF, HEIC, etc. We only need to
+// detect "is this an isobmff container", not which brand exactly.
+const isISOBMFF = sigAt(4, 0x66, 0x74, 0x79, 0x70);
+// PKZIP local-file header — also matches DOCX/XLSX/PPTX (they're zip
+// archives) and odt/ods/odp. We sniff "is this a zip container", NOT
+// "is this the right Office subtype". A `.docx` claimed as xlsx still
+// passes — verifying via the OOXML `[Content_Types].xml` is out of
+// scope; the inline-safe allowlist excludes all of these so the
+// serve route force-downloads regardless of subtype.
+const isZipContainer = startsWith(0x50, 0x4b, 0x03, 0x04);
+// OLE2 compound document — legacy Office (.doc/.xls/.ppt).
+const isOle2 = startsWith(0xd0, 0xcf, 0x11, 0xe0);
+const MATCHERS = {
+    "image/jpeg": startsWith(0xff, 0xd8, 0xff),
+    "image/png": startsWith(0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a),
+    "image/gif": anyOf(startsWith(0x47, 0x49, 0x46, 0x38, 0x37, 0x61), // GIF87a
+    startsWith(0x47, 0x49, 0x46, 0x38, 0x39, 0x61)),
+    "image/webp": riffWith(0x57, 0x45, 0x42, 0x50), // RIFF…WEBP
+    "image/avif": isISOBMFF,
+    "image/svg+xml": isXmlOrSvg,
+    "application/pdf": startsWith(0x25, 0x50, 0x44, 0x46), // %PDF
+    "application/zip": isZipContainer,
+    "application/msword": isOle2,
+    "application/vnd.ms-excel": isOle2,
+    "application/vnd.ms-powerpoint": isOle2,
+    "application/vnd.openxmlformats-officedocument.wordprocessingml.document": isZipContainer,
+    "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet": isZipContainer,
+    "application/vnd.openxmlformats-officedocument.presentationml.presentation": isZipContainer,
+    "audio/mpeg": anyOf(startsWith(0x49, 0x44, 0x33), // ID3v2 tag
+    startsWith(0xff, 0xfb), startsWith(0xff, 0xf3), startsWith(0xff, 0xf2)),
+    "audio/wav": riffWith(0x57, 0x41, 0x56, 0x45), // RIFF…WAVE
+    "audio/ogg": startsWith(0x4f, 0x67, 0x67, 0x53), // OggS
+    "video/mp4": isISOBMFF,
+    "video/webm": startsWith(0x1a, 0x45, 0xdf, 0xa3), // EBML
+    "video/quicktime": isISOBMFF,
+    "text/plain": isPlainText,
+    "text/markdown": isPlainText,
+    "text/csv": isPlainText,
+};
+/** Buffer size we ask storage to read for the magic-byte sniff. */
+export const MAGIC_BYTE_SAMPLE_SIZE = 64;
+export function looksLikeMime(bytes, claimedMime) {
+    const matcher = MATCHERS[claimedMime];
+    if (!matcher)
+        return true; // unknown / text — can't verify; accept.
+    return matcher(bytes);
+}
+//# sourceMappingURL=magic-bytes.js.map

package/dist/magic-bytes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"magic-bytes.js","sourceRoot":"","sources":["../src/magic-bytes.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,qEAAqE;AACrE,uEAAuE;AACvE,wEAAwE;AACxE,qEAAqE;AACrE,sEAAsE;AACtE,sCAAsC;AACtC,EAAE;AACF,uEAAuE;AACvE,yEAAyE;AACzE,wEAAwE;AAIxE,MAAM,KAAK,GACT,CAAC,MAAc,EAAE,GAAG,GAAsB,EAAW,EAAE,CACvD,CAAC,CAAC,EAAE,EAAE;IACJ,IAAI,CAAC,CAAC,MAAM,GAAG,MAAM,GAAG,GAAG,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACjD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IAC7C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEJ,MAAM,UAAU,GAAG,CAAC,GAAG,GAAsB,EAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC;AAE5E,MAAM,KAAK,GACT,CAAC,GAAG,CAAqB,EAAW,EAAE,CACtC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAExB,2EAA2E;AAC3E,kCAAkC;AAClC,MAAM,QAAQ,GAAG,CAAC,GAAG,GAAsB,EAAW,EAAE;IACtD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO;IACxD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC;IAC9B,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;AACnC,CAAC,CAAC;AAEF,MAAM,UAAU,GAAY,CAAC,CAAC,EAAE,EAAE;IAChC,4EAA4E;IAC5E,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAC5D,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CACvC,CAAC;IACF,iEAAiE;IACjE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;IACxD,OAAO,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AACnE,CAAC,CAAC;AAEF,mEAAmE;AACnE,iEAAiE;AACjE,sEAAsE;AACtE,kEAAkE;AAClE,MAAM,WAAW,GAAY,CAAC,CAAC,EAAE,EAAE;IACjC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CACrD,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CACvC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,OAAO,GAAG,IAAI;SACjB,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;SACtB,SAAS,EAAE;SACX,WAAW,EAAE,CAAC;IACjB,OAAO,CAAC,CACN,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC;QAC/B,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;QAC3B,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;QAC3B,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;QAC1B,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC;QAC7B,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAC9B,CAAC;AACJ,CAAC,CAAC;AAEF,uEAAuE;AACvE,kEAAkE;AAClE,MAAM,SAAS,GAAY,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAE5D,qEAAqE;AACrE,qEAAqE;AACrE,sEAAsE;AACtE,mEAAmE;AACnE,gEAAgE;AAChE,qDAAqD;AACrD,MAAM,cAAc,GAAY,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAEnE,2DAA2D;AAC3D,MAAM,MAAM,GAAY,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAE3D,MAAM,QAAQ,GAAsC;IAClD,YAAY,EAAE,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;IAC1C,WAAW,EAAE,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;IACvE,WAAW,EAAE,KAAK,CAChB,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS;IACzD,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAC/C;IACD,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,YAAY;IAC5D,YAAY,EAAE,SAAS;IACvB,eAAe,EAAE,UAAU;IAC3B,iBAAiB,EAAE,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO;IAC9D,iBAAiB,EAAE,cAAc;IACjC,oBAAoB,EAAE,MAAM;IAC5B,0BAA0B,EAAE,MAAM;IAClC,+BAA+B,EAAE,MAAM;IACvC,yEAAyE,EACvE,cAAc;IAChB,mEAAmE,EACjE,cAAc;IAChB,2EAA2E,EACzE,cAAc;IAChB,YAAY,EAAE,KAAK,CACjB,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,YAAY;IAC1C,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,EACtB,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,EACtB,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CACvB;IACD,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,YAAY;IAC3D,WAAW,EAAE,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO;IACxD,WAAW,EAAE,SAAS;IACtB,YAAY,EAAE,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO;IACzD,iBAAiB,EAAE,SAAS;IAC5B,YAAY,EAAE,WAAW;IACzB,eAAe,EAAE,WAAW;IAC5B,UAAU,EAAE,WAAW;CACxB,CAAC;AAEF,mEAAmE;AACnE,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAEzC,MAAM,UAAU,aAAa,CAAC,KAAiB,EAAE,WAAmB;IAClE,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IACtC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC,CAAC,yCAAyC;IACpE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;AACxB,CAAC"}

package/dist/mcp-tools.d.ts

@@ -0,0 +1,10 @@
+import type { McpTool } from "plumix/plugin";
+import * as v from "valibot";
+import { mediaListInputSchema } from "./read-service.js";
+declare const mediaGetInputSchema: v.ObjectSchema<{
+    readonly id: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>]>;
+}, undefined>;
+export declare const mediaListTool: McpTool<typeof mediaListInputSchema>;
+export declare const mediaGetTool: McpTool<typeof mediaGetInputSchema>;
+export {};
+//# sourceMappingURL=mcp-tools.d.ts.map

package/dist/mcp-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-tools.d.ts","sourceRoot":"","sources":["../src/mcp-tools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAE7C,OAAO,KAAK,CAAC,MAAM,SAAS,CAAC;AAE7B,OAAO,EAGL,oBAAoB,EAErB,MAAM,mBAAmB,CAAC;AAE3B,QAAA,MAAM,mBAAmB;;aAEvB,CAAC;AAYH,eAAO,MAAM,aAAa,EAAE,OAAO,CAAC,OAAO,oBAAoB,CAY9D,CAAC;AAEF,eAAO,MAAM,YAAY,EAAE,OAAO,CAAC,OAAO,mBAAmB,CAW5D,CAAC"}

package/dist/mcp-tools.js

@@ -0,0 +1,43 @@
+import { McpToolError } from "plumix/plugin";
+import * as v from "valibot";
+import { getMedia, listMedia, mediaListInputSchema, MediaReadError, } from "./read-service.js";
+const mediaGetInputSchema = v.object({
+    id: v.pipe(v.number(), v.integer(), v.minValue(1)),
+});
+function asMcpToolError(error) {
+    if (!(error instanceof MediaReadError))
+        throw error;
+    switch (error.data.code) {
+        case "not_found":
+            return McpToolError.notFound(error.message);
+        case "forbidden":
+            return McpToolError.forbidden(error.message);
+    }
+}
+export const mediaListTool = {
+    name: "media_list",
+    description: "List published media (images, files) with optional MIME and filename filters, paginated. Clamped to what your token may read.",
+    inputSchema: mediaListInputSchema,
+    async run(ctx, input) {
+        try {
+            return await listMedia(ctx, input);
+        }
+        catch (error) {
+            throw asMcpToolError(error);
+        }
+    },
+};
+export const mediaGetTool = {
+    name: "media_get",
+    description: "Read a single published media item in full by its id.",
+    inputSchema: mediaGetInputSchema,
+    async run(ctx, input) {
+        try {
+            return await getMedia(ctx, input);
+        }
+        catch (error) {
+            throw asMcpToolError(error);
+        }
+    },
+};
+//# sourceMappingURL=mcp-tools.js.map

package/dist/mcp-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-tools.js","sourceRoot":"","sources":["../src/mcp-tools.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,CAAC,MAAM,SAAS,CAAC;AAE7B,OAAO,EACL,QAAQ,EACR,SAAS,EACT,oBAAoB,EACpB,cAAc,GACf,MAAM,mBAAmB,CAAC;AAE3B,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;CACnD,CAAC,CAAC;AAEH,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,CAAC,CAAC,KAAK,YAAY,cAAc,CAAC;QAAE,MAAM,KAAK,CAAC;IACpD,QAAQ,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,WAAW;YACd,OAAO,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9C,KAAK,WAAW;YACd,OAAO,YAAY,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAyC;IACjE,IAAI,EAAE,YAAY;IAClB,WAAW,EACT,+HAA+H;IACjI,WAAW,EAAE,oBAAoB;IACjC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK;QAClB,IAAI,CAAC;YACH,OAAO,MAAM,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAwC;IAC/D,IAAI,EAAE,WAAW;IACjB,WAAW,EAAE,uDAAuD;IACpE,WAAW,EAAE,mBAAmB;IAChC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK;QAClB,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/media-blocks.d.ts

@@ -0,0 +1,3 @@
+import type { BlockSpec } from "plumix/blocks";
+export declare const mediaBlocks: readonly BlockSpec[];
+//# sourceMappingURL=media-blocks.d.ts.map

package/dist/media-blocks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"media-blocks.d.ts","sourceRoot":"","sources":["../src/media-blocks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAQ/C,eAAO,MAAM,WAAW,EAAE,SAAS,SAAS,EAG1C,CAAC"}

package/dist/media-blocks.js

@@ -0,0 +1,10 @@
+import { fileBlock } from "./blocks/file/index.js";
+import { imageBlock } from "./blocks/image/index.js";
+// Browser-clean canonical list — no server-side imports — so the
+// admin chunk can pull it without transitively dragging in the
+// plugin's RPC routes, upload handler, or `definePlugin`.
+export const mediaBlocks = Object.freeze([
+    imageBlock,
+    fileBlock,
+]);
+//# sourceMappingURL=media-blocks.js.map

package/dist/media-blocks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"media-blocks.js","sourceRoot":"","sources":["../src/media-blocks.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD,iEAAiE;AACjE,+DAA+D;AAC/D,0DAA0D;AAC1D,MAAM,CAAC,MAAM,WAAW,GAAyB,MAAM,CAAC,MAAM,CAAC;IAC7D,UAAU;IACV,SAAS;CACV,CAAC,CAAC"}

package/dist/meta.d.ts

@@ -0,0 +1,12 @@
+interface MediaMeta {
+    readonly mime: string;
+    readonly size: number;
+    readonly storageKey: string;
+    readonly originalName: string | null;
+    readonly alt: string | null;
+    readonly width: number | null;
+    readonly height: number | null;
+}
+export declare function parseMediaMeta(raw: unknown): MediaMeta | null;
+export {};
+//# sourceMappingURL=meta.d.ts.map

package/dist/meta.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"meta.d.ts","sourceRoot":"","sources":["../src/meta.ts"],"names":[],"mappings":"AAAA,UAAU,SAAS;IACjB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAG5B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,SAAS,GAAG,IAAI,CAmB7D"}

package/dist/meta.js

@@ -0,0 +1,20 @@
+export function parseMediaMeta(raw) {
+    if (!raw || typeof raw !== "object")
+        return null;
+    const r = raw;
+    if (typeof r.storageKey !== "string" ||
+        typeof r.mime !== "string" ||
+        typeof r.size !== "number") {
+        return null;
+    }
+    return {
+        storageKey: r.storageKey,
+        mime: r.mime,
+        size: r.size,
+        originalName: typeof r.originalName === "string" ? r.originalName : null,
+        alt: typeof r.alt === "string" ? r.alt : null,
+        width: typeof r.width === "number" ? r.width : null,
+        height: typeof r.height === "number" ? r.height : null,
+    };
+}
+//# sourceMappingURL=meta.js.map

package/dist/meta.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"meta.js","sourceRoot":"","sources":["../src/meta.ts"],"names":[],"mappings":"AAYA,MAAM,UAAU,cAAc,CAAC,GAAY;IACzC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,IACE,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;QAChC,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;QAC1B,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,EAC1B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,YAAY,EAAE,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI;QACxE,GAAG,EAAE,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;QAC7C,KAAK,EAAE,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;QACnD,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;KACvD,CAAC;AACJ,CAAC"}

package/dist/mime.d.ts

@@ -0,0 +1,3 @@
+export declare const DEFAULT_ACCEPTED_TYPES: readonly string[];
+export declare function extensionForMime(mime: string): string | undefined;
+//# sourceMappingURL=mime.d.ts.map

package/dist/mime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mime.d.ts","sourceRoot":"","sources":["../src/mime.ts"],"names":[],"mappings":"AA0DA,eAAO,MAAM,sBAAsB,EAAE,SAAS,MAAM,EAEnD,CAAC;AAEF,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEjE"}

package/dist/mime.js

@@ -0,0 +1,58 @@
+// Single source of truth for the MIME types this plugin accepts and the
+// extension we'll use for each in storage keys. Both `DEFAULT_ACCEPTED_TYPES`
+// (the upload allowlist) and the rpc layer's extension picker derive from
+// here, so the two stay in lockstep.
+//
+// SECURITY:
+// - The bucket stores whatever bytes the client uploads; the worker
+//   verifies them against the claimed mime via magic-byte sniff in
+//   `media.confirm` (defense-in-depth — we don't trust the signed
+//   Content-Type header at upload time).
+// - `image/svg+xml` is intentionally NOT in the default allowlist:
+//   SVG is XML and can carry executable `<script>`/`onload=` payloads.
+//   A magic-byte sniff can confirm the bytes start with `<svg`/`<?xml`
+//   but cannot prove they're safe to render. Operators who need SVG
+//   uploads must opt in explicitly via `media({ acceptedTypes: [...] })`
+//   AND serve from a separate cookie domain (so any embedded script
+//   can't reach admin cookies).
+// - Same precaution applies to `text/*` mimes: bytes are stored verbatim,
+//   and a malicious actor could disguise HTML/JS as `text/plain`. Always
+//   serve uploads from a domain distinct from the admin.
+const MEDIA_MIME_REGISTRY = {
+    // images
+    "image/jpeg": "jpg",
+    "image/png": "png",
+    "image/gif": "gif",
+    "image/webp": "webp",
+    "image/avif": "avif",
+    // SVG kept in the registry so opt-in consumers get the right extension,
+    // but excluded from DEFAULT_ACCEPTED_TYPES below.
+    "image/svg+xml": "svg",
+    // documents
+    "application/pdf": "pdf",
+    "application/msword": "doc",
+    "application/vnd.openxmlformats-officedocument.wordprocessingml.document": "docx",
+    "application/vnd.ms-excel": "xls",
+    "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet": "xlsx",
+    "application/vnd.ms-powerpoint": "ppt",
+    "application/vnd.openxmlformats-officedocument.presentationml.presentation": "pptx",
+    "text/plain": "txt",
+    "text/markdown": "md",
+    "text/csv": "csv",
+    // audio
+    "audio/mpeg": "mp3",
+    "audio/wav": "wav",
+    "audio/ogg": "ogg",
+    // video
+    "video/mp4": "mp4",
+    "video/webm": "webm",
+    "video/quicktime": "mov",
+    // archives
+    "application/zip": "zip",
+};
+const SVG_MIME = "image/svg+xml";
+export const DEFAULT_ACCEPTED_TYPES = Object.freeze(Object.keys(MEDIA_MIME_REGISTRY).filter((m) => m !== SVG_MIME));
+export function extensionForMime(mime) {
+    return MEDIA_MIME_REGISTRY[mime];
+}
+//# sourceMappingURL=mime.js.map

package/dist/mime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mime.js","sourceRoot":"","sources":["../src/mime.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,8EAA8E;AAC9E,0EAA0E;AAC1E,qCAAqC;AACrC,EAAE;AACF,YAAY;AACZ,oEAAoE;AACpE,mEAAmE;AACnE,kEAAkE;AAClE,yCAAyC;AACzC,mEAAmE;AACnE,uEAAuE;AACvE,uEAAuE;AACvE,oEAAoE;AACpE,yEAAyE;AACzE,oEAAoE;AACpE,gCAAgC;AAChC,0EAA0E;AAC1E,yEAAyE;AACzE,yDAAyD;AAEzD,MAAM,mBAAmB,GAAqC;IAC5D,SAAS;IACT,YAAY,EAAE,KAAK;IACnB,WAAW,EAAE,KAAK;IAClB,WAAW,EAAE,KAAK;IAClB,YAAY,EAAE,MAAM;IACpB,YAAY,EAAE,MAAM;IACpB,wEAAwE;IACxE,kDAAkD;IAClD,eAAe,EAAE,KAAK;IACtB,YAAY;IACZ,iBAAiB,EAAE,KAAK;IACxB,oBAAoB,EAAE,KAAK;IAC3B,yEAAyE,EACvE,MAAM;IACR,0BAA0B,EAAE,KAAK;IACjC,mEAAmE,EAAE,MAAM;IAC3E,+BAA+B,EAAE,KAAK;IACtC,2EAA2E,EACzE,MAAM;IACR,YAAY,EAAE,KAAK;IACnB,eAAe,EAAE,IAAI;IACrB,UAAU,EAAE,KAAK;IACjB,QAAQ;IACR,YAAY,EAAE,KAAK;IACnB,WAAW,EAAE,KAAK;IAClB,WAAW,EAAE,KAAK;IAClB,QAAQ;IACR,WAAW,EAAE,KAAK;IAClB,YAAY,EAAE,MAAM;IACpB,iBAAiB,EAAE,KAAK;IACxB,WAAW;IACX,iBAAiB,EAAE,KAAK;CACzB,CAAC;AAEF,MAAM,QAAQ,GAAG,eAAe,CAAC;AAEjC,MAAM,CAAC,MAAM,sBAAsB,GAAsB,MAAM,CAAC,MAAM,CACpE,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,CAAC,CAC/D,CAAC;AAEF,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC"}

package/dist/read-service.d.ts

@@ -0,0 +1,66 @@
+import type { AppContext } from "plumix/plugin";
+import * as v from "valibot";
+export declare const MEDIA_ENTRY_TYPE = "media";
+export declare const mediaListInputSchema: v.ObjectSchema<{
+    readonly limit: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, 100, undefined>]>, 24>;
+    readonly offset: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>]>, 0>;
+    readonly accept: v.OptionalSchema<v.UnionSchema<[v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MaxLengthAction<string, 64, undefined>]>, v.SchemaWithPipe<readonly [v.ArraySchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MaxLengthAction<string, 64, undefined>]>, undefined>, v.MaxLengthAction<string[], 32, undefined>]>], undefined>, undefined>;
+    readonly search: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MaxLengthAction<string, 200, undefined>]>, undefined>;
+}, undefined>;
+type MediaListInput = v.InferOutput<typeof mediaListInputSchema>;
+interface MediaItem {
+    readonly id: number;
+    readonly title: string;
+    readonly mime: string;
+    readonly size: number;
+    readonly storageKey: string;
+    readonly alt: string | null;
+    readonly url: string;
+    readonly thumbnailUrl: string;
+    readonly uploadedAt: string;
+    readonly uploadedById: number;
+    readonly width: number | null;
+    readonly height: number | null;
+}
+interface MediaListResult {
+    readonly items: readonly MediaItem[];
+    readonly hasMore: boolean;
+}
+/**
+ * Domain error the media read path throws. Each transport maps it to its own
+ * shape (oRPC typed error / MCP envelope), keeping the service transport-neutral.
+ */
+export declare class MediaReadError extends Error {
+    readonly data: {
+        readonly code: "forbidden";
+        readonly capability: string;
+    } | {
+        readonly code: "not_found";
+        readonly id: number;
+    };
+    private constructor();
+    static forbidden(capability: string): MediaReadError;
+    static notFound(id: number): MediaReadError;
+}
+/**
+ * List published media the caller may read, with MIME / filename filters and
+ * offset pagination. Fetches one extra row to report `hasMore` without a
+ * second COUNT query. Throws {@link MediaReadError}.
+ */
+export declare function listMedia(ctx: AppContext, input: MediaListInput): Promise<MediaListResult>;
+/**
+ * Read a single published media item by id. A missing row, a non-media row, a
+ * draft, or corrupt meta all collapse to `not_found` so existence stays hidden.
+ */
+export declare function getMedia(ctx: AppContext, input: {
+    readonly id: number;
+}): Promise<MediaItem>;
+export declare function thumbnailFor(ctx: AppContext, url: string, mime: string): string;
+/**
+ * Resolve a publicly-fetchable URL for a media row. Prefers the storage
+ * adapter's native URL; falls back to the worker-proxied serve route keyed on
+ * the entry id (not the storageKey — the serve route enforces `published`).
+ */
+export declare function resolveMediaUrl(storage: NonNullable<AppContext["storage"]>, storageKey: string, entryId: number, basePath?: string): Promise<string>;
+export {};
+//# sourceMappingURL=read-service.d.ts.map

package/dist/read-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-service.d.ts","sourceRoot":"","sources":["../src/read-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAO,MAAM,eAAe,CAAC;AAYrD,OAAO,KAAK,CAAC,MAAM,SAAS,CAAC;AAI7B,eAAO,MAAM,gBAAgB,UAAU,CAAC;AASxC,eAAO,MAAM,oBAAoB;;;;;aAgB/B,CAAC;AAEH,KAAK,cAAc,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAEjE,UAAU,SAAS;IACjB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,UAAU,eAAe;IACvB,QAAQ,CAAC,KAAK,EAAE,SAAS,SAAS,EAAE,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED;;;GAGG;AACH,qBAAa,cAAe,SAAQ,KAAK;IAKvC,QAAQ,CAAC,IAAI,EACT;QAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;QAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAC3D;QAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;QAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IAExD,OAAO;IAKP,MAAM,CAAC,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,cAAc;IAOpD,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,cAAc;CAM5C;AAED;;;;GAIG;AACH,wBAAsB,SAAS,CAC7B,GAAG,EAAE,UAAU,EACf,KAAK,EAAE,cAAc,GACpB,OAAO,CAAC,eAAe,CAAC,CAoC1B;AAED;;;GAGG;AACH,wBAAsB,QAAQ,CAC5B,GAAG,EAAE,UAAU,EACf,KAAK,EAAE;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC7B,OAAO,CAAC,SAAS,CAAC,CAapB;AA4BD,wBAAgB,YAAY,CAC1B,GAAG,EAAE,UAAU,EACf,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,GACX,MAAM,CAOR;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EAC3C,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,EACf,QAAQ,SAAK,GACZ,OAAO,CAAC,MAAM,CAAC,CAKjB"}

package/dist/read-service.js

@@ -0,0 +1,156 @@
+import { and, desc, entries, eq, escapeLikePattern, inArray, like, sql, withBasePath, } from "plumix/plugin";
+import * as v from "valibot";
+import { parseMediaMeta } from "./meta.js";
+export const MEDIA_ENTRY_TYPE = "media";
+const MEDIA_READ_CAPABILITY = "entry:media:read";
+const DEFAULT_PAGE_SIZE = 24;
+const MAX_PAGE_SIZE = 100;
+// 320px-wide auto-format thumbnail — enough for the 160px admin card at 2× DPI.
+const THUMBNAIL_OPTS = { width: 320, format: "auto", fit: "cover" };
+export const mediaListInputSchema = v.object({
+    limit: v.optional(v.pipe(v.number(), v.integer(), v.minValue(1), v.maxValue(MAX_PAGE_SIZE)), DEFAULT_PAGE_SIZE),
+    offset: v.optional(v.pipe(v.number(), v.integer(), v.minValue(0)), 0),
+    // MIME filter: string form (`"image/"`) does a `LIKE 'image/%'` prefix match;
+    // array form matches the listed MIMEs exactly. Pushed into SQL so `limit`
+    // counts only matching rows.
+    accept: v.optional(v.union([
+        v.pipe(v.string(), v.maxLength(64)),
+        v.pipe(v.array(v.pipe(v.string(), v.maxLength(64))), v.maxLength(32)),
+    ])),
+    search: v.optional(v.pipe(v.string(), v.trim(), v.maxLength(200))),
+});
+/**
+ * Domain error the media read path throws. Each transport maps it to its own
+ * shape (oRPC typed error / MCP envelope), keeping the service transport-neutral.
+ */
+export class MediaReadError extends Error {
+    static {
+        MediaReadError.prototype.name = "MediaReadError";
+    }
+    data;
+    constructor(data, message) {
+        super(message);
+        this.data = data;
+    }
+    static forbidden(capability) {
+        return new MediaReadError({ code: "forbidden", capability }, `missing capability: ${capability}`);
+    }
+    static notFound(id) {
+        return new MediaReadError({ code: "not_found", id }, `media ${id} not found`);
+    }
+}
+/**
+ * List published media the caller may read, with MIME / filename filters and
+ * offset pagination. Fetches one extra row to report `hasMore` without a
+ * second COUNT query. Throws {@link MediaReadError}.
+ */
+export async function listMedia(ctx, input) {
+    if (!ctx.auth.can(MEDIA_READ_CAPABILITY)) {
+        throw MediaReadError.forbidden(MEDIA_READ_CAPABILITY);
+    }
+    const conditions = [
+        eq(entries.type, MEDIA_ENTRY_TYPE),
+        eq(entries.status, "published"),
+    ];
+    const acceptCondition = buildAcceptCondition(input.accept);
+    if (acceptCondition)
+        conditions.push(acceptCondition);
+    if (input.search) {
+        const pattern = `%${escapeLikePattern(input.search)}%`;
+        conditions.push(sql `(
+      ${entries.title} LIKE ${pattern} ESCAPE '\\'
+      OR COALESCE(json_extract(${entries.meta}, '$.alt'), '') LIKE ${pattern} ESCAPE '\\'
+    )`);
+    }
+    const rows = await ctx.db
+        .select()
+        .from(entries)
+        .where(and(...conditions))
+        .orderBy(desc(entries.updatedAt), desc(entries.id))
+        .limit(input.limit + 1)
+        .offset(input.offset);
+    const hasMore = rows.length > input.limit;
+    const visibleRows = hasMore ? rows.slice(0, input.limit) : rows;
+    const items = [];
+    for (const row of visibleRows) {
+        const meta = parseMediaMeta(row.meta);
+        if (!meta)
+            continue;
+        items.push(await buildMediaItem(ctx, row, meta));
+    }
+    return { items, hasMore };
+}
+/**
+ * Read a single published media item by id. A missing row, a non-media row, a
+ * draft, or corrupt meta all collapse to `not_found` so existence stays hidden.
+ */
+export async function getMedia(ctx, input) {
+    if (!ctx.auth.can(MEDIA_READ_CAPABILITY)) {
+        throw MediaReadError.forbidden(MEDIA_READ_CAPABILITY);
+    }
+    const row = await ctx.db.query.entries.findFirst({
+        where: eq(entries.id, input.id),
+    });
+    const meta = row ? parseMediaMeta(row.meta) : null;
+    if (row?.type !== MEDIA_ENTRY_TYPE || row.status !== "published" || !meta) {
+        throw MediaReadError.notFound(input.id);
+    }
+    return buildMediaItem(ctx, row, meta);
+}
+async function buildMediaItem(ctx, row, meta) {
+    const url = ctx.storage
+        ? await resolveMediaUrl(ctx.storage, meta.storageKey, row.id, ctx.basePath)
+        : meta.storageKey;
+    // `publishedAt` is the "uploaded on" source of truth; fall back to createdAt.
+    const uploadedAt = (row.publishedAt ?? row.createdAt).toISOString();
+    return {
+        id: row.id,
+        title: row.title,
+        mime: meta.mime,
+        size: meta.size,
+        storageKey: meta.storageKey,
+        alt: meta.alt,
+        url,
+        thumbnailUrl: thumbnailFor(ctx, url, meta.mime),
+        uploadedAt,
+        uploadedById: row.authorId,
+        width: meta.width,
+        height: meta.height,
+    };
+}
+export function thumbnailFor(ctx, url, mime) {
+    // imageDelivery transforms need an absolute, publicly-reachable source — the
+    // transform CDN fetches it itself. The worker-proxied serve fallback is
+    // relative, so skip transforms there.
+    if (!mime.startsWith("image/") || !ctx.imageDelivery)
+        return url;
+    if (!url.startsWith("http://") && !url.startsWith("https://"))
+        return url;
+    return ctx.imageDelivery.url(url, THUMBNAIL_OPTS);
+}
+/**
+ * Resolve a publicly-fetchable URL for a media row. Prefers the storage
+ * adapter's native URL; falls back to the worker-proxied serve route keyed on
+ * the entry id (not the storageKey — the serve route enforces `published`).
+ */
+export async function resolveMediaUrl(storage, storageKey, entryId, basePath = "") {
+    const direct = await storage.url(storageKey);
+    return (direct ?? withBasePath(`/_plumix/media/serve/${String(entryId)}`, basePath));
+}
+// Translate `accept` into a SQL predicate against the JSON `mime` field. Real
+// MIME strings don't contain LIKE wildcards and the input is plugin/agent
+// supplied, so no escaping is needed.
+function buildAcceptCondition(accept) {
+    if (accept === undefined)
+        return undefined;
+    const mimeExpr = sql `json_extract(${entries.meta}, '$.mime')`;
+    if (typeof accept === "string") {
+        if (accept === "")
+            return undefined;
+        return like(mimeExpr, `${accept}%`);
+    }
+    if (accept.length === 0)
+        return undefined;
+    return inArray(mimeExpr, accept);
+}
+//# sourceMappingURL=read-service.js.map

package/dist/read-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-service.js","sourceRoot":"","sources":["../src/read-service.ts"],"names":[],"mappings":"AACA,OAAO,EACL,GAAG,EACH,IAAI,EACJ,OAAO,EACP,EAAE,EACF,iBAAiB,EACjB,OAAO,EACP,IAAI,EACJ,GAAG,EACH,YAAY,GACb,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,CAAC,MAAM,SAAS,CAAC;AAE7B,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAE3C,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC;AACxC,MAAM,qBAAqB,GAAG,kBAAkB,CAAC;AAEjD,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAC7B,MAAM,aAAa,GAAG,GAAG,CAAC;AAE1B,gFAAgF;AAChF,MAAM,cAAc,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAW,CAAC;AAE7E,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,KAAK,EAAE,CAAC,CAAC,QAAQ,CACf,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,EACzE,iBAAiB,CAClB;IACD,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACrE,8EAA8E;IAC9E,0EAA0E;IAC1E,6BAA6B;IAC7B,MAAM,EAAE,CAAC,CAAC,QAAQ,CAChB,CAAC,CAAC,KAAK,CAAC;QACN,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACnC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;KACtE,CAAC,CACH;IACD,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;CACnE,CAAC,CAAC;AAwBH;;;GAGG;AACH,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC;QACE,cAAc,CAAC,SAAS,CAAC,IAAI,GAAG,gBAAgB,CAAC;IACnD,CAAC;IAEQ,IAAI,CAE2C;IAExD,YAAoB,IAA4B,EAAE,OAAe;QAC/D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,MAAM,CAAC,SAAS,CAAC,UAAkB;QACjC,OAAO,IAAI,cAAc,CACvB,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,EACjC,uBAAuB,UAAU,EAAE,CACpC,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,EAAU;QACxB,OAAO,IAAI,cAAc,CACvB,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,EACzB,SAAS,EAAE,YAAY,CACxB,CAAC;IACJ,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,GAAe,EACf,KAAqB;IAErB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,CAAC;QACzC,MAAM,cAAc,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,UAAU,GAAU;QACxB,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,gBAAgB,CAAC;QAClC,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC;KAChC,CAAC;IACF,MAAM,eAAe,GAAG,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3D,IAAI,eAAe;QAAE,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACtD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,IAAI,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC;QACvD,UAAU,CAAC,IAAI,CAAC,GAAG,CAAA;QACf,OAAO,CAAC,KAAK,SAAS,OAAO;iCACJ,OAAO,CAAC,IAAI,wBAAwB,OAAO;MACtE,CAAC,CAAC;IACN,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,EAAE;SACtB,MAAM,EAAE;SACR,IAAI,CAAC,OAAO,CAAC;SACb,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC;SACzB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;SAClD,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;SACtB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1C,MAAM,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEhE,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,KAAK,CAAC,IAAI,CAAC,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC5B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,GAAe,EACf,KAA8B;IAE9B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,CAAC;QACzC,MAAM,cAAc,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;QAC/C,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC;KAChC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnD,IAAI,GAAG,EAAE,IAAI,KAAK,gBAAgB,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1E,MAAM,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AACxC,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,GAAe,EACf,GAAgC,EAChC,IAAoD;IAEpD,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO;QACrB,CAAC,CAAC,MAAM,eAAe,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC;QAC3E,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;IACpB,8EAA8E;IAC9E,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;IACpE,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,GAAG;QACH,YAAY,EAAE,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC;QAC/C,UAAU;QACV,YAAY,EAAE,GAAG,CAAC,QAAQ;QAC1B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,GAAe,EACf,GAAW,EACX,IAAY;IAEZ,6EAA6E;IAC7E,wEAAwE;IACxE,sCAAsC;IACtC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa;QAAE,OAAO,GAAG,CAAC;IACjE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,GAAG,CAAC;IAC1E,OAAO,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAA2C,EAC3C,UAAkB,EAClB,OAAe,EACf,QAAQ,GAAG,EAAE;IAEb,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC7C,OAAO,CACL,MAAM,IAAI,YAAY,CAAC,wBAAwB,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAC5E,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,0EAA0E;AAC1E,sCAAsC;AACtC,SAAS,oBAAoB,CAC3B,MAA8C;IAE9C,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,MAAM,QAAQ,GAAG,GAAG,CAAQ,gBAAgB,OAAO,CAAC,IAAI,aAAa,CAAC;IACtE,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,IAAI,MAAM,KAAK,EAAE;YAAE,OAAO,SAAS,CAAC;QACpC,OAAO,IAAI,CAAC,QAAQ,EAAE,GAAG,MAAM,GAAG,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,OAAO,OAAO,CAAC,QAAQ,EAAE,MAAkB,CAAC,CAAC;AAC/C,CAAC"}

package/dist/rpc.d.ts

@@ -0,0 +1,7 @@
+interface MediaRpcOptions {
+    readonly acceptedTypes: readonly string[];
+    readonly maxUploadSize: number;
+}
+export declare function createMediaRouter(options: MediaRpcOptions): Record<string, unknown>;
+export {};
+//# sourceMappingURL=rpc.d.ts.map

package/dist/rpc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc.d.ts","sourceRoot":"","sources":["../src/rpc.ts"],"names":[],"mappings":"AA2BA,UAAU,eAAe;IACvB,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAyED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,eAAe,GACvB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA0UzB"}