@selvajs/platform 0.16.1-beta.2 → 0.17.0

package/dist/storage/cacheBust.js

@@ -1,21 +1,19 @@
 /**
- * Append a cache-busting token to a stored-asset URL.
+ * Appends a cache-busting token to a stored-asset URL.
  *
- * Mutable blobs are overwritten **in place** (`IStorageProvider.put` is upsert),
- * so a re-upload keeps the same storage path — and therefore the same public
- * URL. A browser/CDN that cached the old bytes under that URL keeps serving them
- * until the TTL expires, which reads as "the replace didn't work". Appending a
- * token that changes only when the content changes gives each new version a
- * distinct URL (forcing a refetch) while letting unchanged assets stay cached.
+ * `IStorageProvider.put` upserts, so a re-upload keeps the same storage path
+ * and public URL — a browser/CDN caching the old bytes under that URL keeps
+ * serving them past the TTL, which reads as "the replace didn't work."
+ * Appending a token that only changes with the content gives each version a
+ * distinct URL, forcing a refetch, while unchanged assets stay cached.
  *
- * Generic over asset kind: the caller supplies the token from whatever it has
- * that tracks the blob's version — a content hash, the owning record's
- * `updatedAt`, a version counter. The serving route ignores the query string
- * (SvelteKit's `[...path]` param never includes it), so this is purely a
- * client-cache key and needs no route support.
+ * Generic over asset kind — pass whatever tracks the blob's version (content
+ * hash, `updatedAt`, a counter). The serving route ignores the query string
+ * (SvelteKit's `[...path]` param never includes it), so this needs no route
+ * support.
  *
- * Empty/whitespace tokens are dropped (returns the URL unchanged) so a missing
- * token degrades to "no cache-bust" rather than `?v=`.
+ * Empty/whitespace tokens return the URL unchanged, so a missing token
+ * degrades to "no cache-bust" rather than `?v=`.
  */
 export function withCacheBust(url, token) {
     if (token === undefined || token === null)

package/dist/storage/cacheBust.js.map

@@ -1 +1 @@
-{"version":3,"file":"cacheBust.js","sourceRoot":"","sources":["../../src/storage/cacheBust.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,KAAyC;IACnF,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC;IACtD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,GAAG,CAAC;IAC7B,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAC1C,OAAO,GAAG,GAAG,GAAG,GAAG,KAAK,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;AACrD,CAAC"}
+{"version":3,"file":"cacheBust.js","sourceRoot":"","sources":["../../src/storage/cacheBust.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,KAAyC;IACnF,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC;IACtD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,GAAG,CAAC;IAC7B,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAC1C,OAAO,GAAG,GAAG,GAAG,GAAG,KAAK,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;AACrD,CAAC"}

package/dist/storage/image.d.ts

@@ -1,12 +1,10 @@
 /**
  * Shared image-transcoding helper for `IStorageProvider` implementations.
- * Cover images are normalized to WebP at upload time (capped at 1200px,
- * quality 85) so storage/bandwidth stays predictable and the viewer path
- * is uniform.
+ * Normalizes uploads to WebP (capped at 1200px, quality 85) so storage,
+ * bandwidth, and the viewer path stay predictable.
  *
- * `sharp` is loaded via a dynamic import so the platform package has no
- * hard runtime dependency on it — install it in providers that need
- * transcoding (optional peer dependency).
+ * `sharp` is a dynamic import, not a hard dependency of this package —
+ * providers that need transcoding install it themselves.
  */
 export declare const IMAGE_MAX_WIDTH = 1200;
 export declare const IMAGE_WEBP_QUALITY = 85;
@@ -19,18 +17,16 @@ export interface TranscodeResult {
 /** True if the input looks like an image to process — by content type or path extension. */
 export declare function isImageUpload(contentType: string | undefined, storagePath: string): boolean;
 /**
- * Rewrite a path's extension to `.webp`. Unchanged if not a recognized image
- * extension. SVG is included: every upload (including SVG) is rasterized to
- * WebP, so a `.svg` input is stored as `.webp` — no vector blob is ever
- * persisted, which keeps the served bytes XSS-free without a sanitizer.
+ * Rewrites a path's extension to `.webp`; unchanged for non-image extensions.
+ * SVG is rasterized like any other input, so no vector blob is ever
+ * persisted — served bytes stay XSS-free without a sanitizer.
  */
 export declare function toWebpPath(storagePath: string): string;
 /**
- * If the input is an image, transcode to WebP (capped + re-encoded) and
- * return rewritten bytes/content-type/path. Non-images pass through, so
+ * Transcodes images to WebP; passes non-images through unchanged, so
  * providers can call this unconditionally before `put`.
  *
- * Throws if `sharp` isn't installed — that's a config error, not a fallback.
+ * Throws if `sharp` isn't installed — a config error, not a fallback.
  */
 export declare function transcodeImageIfNeeded(data: Uint8Array, contentType: string | undefined, storagePath: string): Promise<TranscodeResult>;
 //# sourceMappingURL=image.d.ts.map

package/dist/storage/image.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"image.d.ts","sourceRoot":"","sources":["../../src/storage/image.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,eAAO,MAAM,eAAe,OAAO,CAAC;AACpC,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAErC,MAAM,WAAW,eAAe;IAC/B,IAAI,EAAE,UAAU,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,gEAAgE;IAChE,IAAI,EAAE,MAAM,CAAC;CACb;AAED,4FAA4F;AAC5F,wBAAgB,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAG3F;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAC3C,IAAI,EAAE,UAAU,EAChB,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,WAAW,EAAE,MAAM,GACjB,OAAO,CAAC,eAAe,CAAC,CAgB1B"}
+{"version":3,"file":"image.d.ts","sourceRoot":"","sources":["../../src/storage/image.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,eAAO,MAAM,eAAe,OAAO,CAAC;AACpC,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAErC,MAAM,WAAW,eAAe;IAC/B,IAAI,EAAE,UAAU,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,gEAAgE;IAChE,IAAI,EAAE,MAAM,CAAC;CACb;AAED,4FAA4F;AAC5F,wBAAgB,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAG3F;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAC3C,IAAI,EAAE,UAAU,EAChB,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,WAAW,EAAE,MAAM,GACjB,OAAO,CAAC,eAAe,CAAC,CAgB1B"}

package/dist/storage/image.js

@@ -1,12 +1,10 @@
 /**
  * Shared image-transcoding helper for `IStorageProvider` implementations.
- * Cover images are normalized to WebP at upload time (capped at 1200px,
- * quality 85) so storage/bandwidth stays predictable and the viewer path
- * is uniform.
+ * Normalizes uploads to WebP (capped at 1200px, quality 85) so storage,
+ * bandwidth, and the viewer path stay predictable.
  *
- * `sharp` is loaded via a dynamic import so the platform package has no
- * hard runtime dependency on it — install it in providers that need
- * transcoding (optional peer dependency).
+ * `sharp` is a dynamic import, not a hard dependency of this package —
+ * providers that need transcoding install it themselves.
  */
 export const IMAGE_MAX_WIDTH = 1200;
 export const IMAGE_WEBP_QUALITY = 85;
@@ -17,20 +15,18 @@ export function isImageUpload(contentType, storagePath) {
     return /\.(webp|png|jpe?g|gif|bmp|tif?f|svg)$/i.test(storagePath);
 }
 /**
- * Rewrite a path's extension to `.webp`. Unchanged if not a recognized image
- * extension. SVG is included: every upload (including SVG) is rasterized to
- * WebP, so a `.svg` input is stored as `.webp` — no vector blob is ever
- * persisted, which keeps the served bytes XSS-free without a sanitizer.
+ * Rewrites a path's extension to `.webp`; unchanged for non-image extensions.
+ * SVG is rasterized like any other input, so no vector blob is ever
+ * persisted — served bytes stay XSS-free without a sanitizer.
  */
 export function toWebpPath(storagePath) {
     return storagePath.replace(/\.(png|jpe?g|gif|bmp|tif?f|svg)$/i, '.webp');
 }
 /**
- * If the input is an image, transcode to WebP (capped + re-encoded) and
- * return rewritten bytes/content-type/path. Non-images pass through, so
+ * Transcodes images to WebP; passes non-images through unchanged, so
  * providers can call this unconditionally before `put`.
  *
- * Throws if `sharp` isn't installed — that's a config error, not a fallback.
+ * Throws if `sharp` isn't installed — a config error, not a fallback.
  */
 export async function transcodeImageIfNeeded(data, contentType, storagePath) {
     if (!isImageUpload(contentType, storagePath)) {

package/dist/storage/image.js.map

@@ -1 +1 @@
-{"version":3,"file":"image.js","sourceRoot":"","sources":["../../src/storage/image.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC;AACpC,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AASrC,4FAA4F;AAC5F,MAAM,UAAU,aAAa,CAAC,WAA+B,EAAE,WAAmB;IACjF,IAAI,WAAW,EAAE,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,OAAO,wCAAwC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AACnE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,WAAmB;IAC7C,OAAO,WAAW,CAAC,OAAO,CAAC,mCAAmC,EAAE,OAAO,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC3C,IAAgB,EAChB,WAA+B,EAC/B,WAAmB;IAEnB,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC;QAC9C,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,IAAI,0BAA0B,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAC5F,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAC/C,MAAM,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC;SAC5D,IAAI,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;SACrC,QAAQ,EAAE,CAAC;IAEb,OAAO;QACN,IAAI,EAAE,IAAI,UAAU,CAAC,UAAU,CAAC;QAChC,WAAW,EAAE,YAAY;QACzB,IAAI,EAAE,UAAU,CAAC,WAAW,CAAC;KAC7B,CAAC;AACH,CAAC;AAMD,IAAI,WAAW,GAAmB,IAAI,CAAC;AAEvC,KAAK,UAAU,SAAS;IACvB,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IACpC,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,CAAoC,CAAC;QACvE,WAAW,GAAG,GAAG,CAAC,OAAO,IAAK,GAA0B,CAAC;QACzD,OAAO,WAAW,CAAC;IACpB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACd,sGAAsG,EACtG,EAAE,KAAK,EAAE,GAAY,EAAE,CACvB,CAAC;IACH,CAAC;AACF,CAAC"}
+{"version":3,"file":"image.js","sourceRoot":"","sources":["../../src/storage/image.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC;AACpC,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AASrC,4FAA4F;AAC5F,MAAM,UAAU,aAAa,CAAC,WAA+B,EAAE,WAAmB;IACjF,IAAI,WAAW,EAAE,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,OAAO,wCAAwC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AACnE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,WAAmB;IAC7C,OAAO,WAAW,CAAC,OAAO,CAAC,mCAAmC,EAAE,OAAO,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC3C,IAAgB,EAChB,WAA+B,EAC/B,WAAmB;IAEnB,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC;QAC9C,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,IAAI,0BAA0B,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAC5F,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAC/C,MAAM,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC;SAC5D,IAAI,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;SACrC,QAAQ,EAAE,CAAC;IAEb,OAAO;QACN,IAAI,EAAE,IAAI,UAAU,CAAC,UAAU,CAAC;QAChC,WAAW,EAAE,YAAY;QACzB,IAAI,EAAE,UAAU,CAAC,WAAW,CAAC;KAC7B,CAAC;AACH,CAAC;AAMD,IAAI,WAAW,GAAmB,IAAI,CAAC;AAEvC,KAAK,UAAU,SAAS;IACvB,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IACpC,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,CAAoC,CAAC;QACvE,WAAW,GAAG,GAAG,CAAC,OAAO,IAAK,GAA0B,CAAC;QACzD,OAAO,WAAW,CAAC;IACpB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACd,sGAAsG,EACtG,EAAE,KAAK,EAAE,GAAY,EAAE,CACvB,CAAC;IACH,CAAC;AACF,CAAC"}

package/dist/userProfile/interface.d.ts

@@ -6,7 +6,7 @@ import type { RecentRun, UserProfile } from './types.js';
  * providers (Entra, Supabase Auth) don't have to model fields they can't
  * persist.
  *
- * Adapters MUST scope by `ctx`: a caller cannot read or modify another
+ * Adapters must scope by `ctx`: a caller cannot read or modify another
  * user's profile via the `userId` argument. SQL adapters delegate to RLS;
  * document-store adapters check `ctx.userId === userId` (or
  * `instance_admin` for admin tooling). Pass `SYSTEM_CONTEXT` for trusted

package/dist/userProfile/types.d.ts

@@ -4,11 +4,7 @@ export interface RecentRun {
     definitionName: string;
     timestamp: string;
 }
-/**
- * Mutable per-user profile state. Owned by `IUserProfileStore` so OIDC
- * providers (Supabase Auth, Entra, Firebase) don't have to model fields they
- * can't persist — identity from the IdP, profile state from your DB.
- */
+/** Mutable per-user profile state, owned by `IUserProfileStore`. */
 export interface UserProfile {
     userId: string;
     displayName?: string;

package/dist/userProfile/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/userProfile/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,SAAS;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CAClB;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4CAA4C;IAC5C,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,8DAA8D;IAC9D,UAAU,EAAE,SAAS,EAAE,CAAC;CACxB;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CAExD"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/userProfile/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,SAAS;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,oEAAoE;AACpE,MAAM,WAAW,WAAW;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4CAA4C;IAC5C,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,8DAA8D;IAC9D,UAAU,EAAE,SAAS,EAAE,CAAC;CACxB;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CAExD"}

package/dist/userProfile/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/userProfile/types.ts"],"names":[],"mappings":"AAqBA,MAAM,UAAU,YAAY,CAAC,MAAc;IAC1C,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;AAC3D,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/userProfile/types.ts"],"names":[],"mappings":"AAiBA,MAAM,UAAU,YAAY,CAAC,MAAc;IAC1C,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;AAC3D,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@selvajs/platform",
-  "version": "0.16.1-beta.2",
+  "version": "0.17.0",
   "description": "Pure TypeScript interfaces for Selva platform providers (auth, definitions, compute)",
   "license": "MIT",
   "author": "VektorNode",
@@ -22,7 +22,7 @@
     "directory": "packages/platform"
   },
   "engines": {
-    "node": ">=22.0.0"
+    "node": ">=24.0.0"
   },
   "type": "module",
   "main": "./dist/index.js",
@@ -122,7 +122,7 @@
   ],
   "dependencies": {
     "zod": "^4.3.6",
-    "@selvajs/schemas": "^5.0.0-beta.2"
+    "@selvajs/schemas": "^5.0.0"
   },
   "peerDependencies": {
     "sharp": "^0.34.0 || ^0.35.0",
@@ -140,7 +140,7 @@
     "sharp": "^0.35.3",
     "typescript": "~6.0.3",
     "vitest": "^4.1.10",
-    "@selvajs/config": "0.0.3"
+    "@selvajs/config": "0.0.4"
   },
   "scripts": {
     "build": "tsc",