@spinekit/media 0.1.1 → 0.1.2

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 0.1.2 - 2026-08-22
+
+### Added
+
+- **`buildTransformPolicy(input?)`** — derives the `MediaTransformPolicy` document served to clients directly from the server's own `SIZE_VARIANTS`, `FOLDER_CONTENT_TYPE_MAP`, and `IMAGE_SETTINGS`. Previously each client surface (browser, mobile app, importer) held its own folder → preset table that could silently diverge from the server. The derived policy is authoritative: change the server defaults and every client resolves the same rules automatically. Untouched-folder overrides and a max-edge override are supported via `TransformPolicyInput`. Uses `@classytic/media-transform/policy` for the document shape and version constant.
+
+- **Cleanup steps** (`src/cleanup.ts`) — `CleanupStep` implementations for the three media purge operations (purge deleted, purge stale-pending, purge expired). Exporting as steps makes the same operations previewable (`estimate` before touching anything), confirmable, cancellable between steps, and auditable via arc's Cleanup Center (`PurgeEvidence` manifest). Contract is `@classytic/repo-core/cleanup` — no arc host-framework dependency, fold into a recipe with `recipeFromSteps()`.
+
 ## 0.1.1 - 2026-08-21
 
 ### Changed

package/dist/providers/media-provider.config.d.mts

@@ -5,10 +5,14 @@ interface S3ProviderConfig {
   kind: 's3';
   bucket: string;
   region: string;
-  accessKeyId: string;
-  secretAccessKey: string;
+  /** Omit both fields to use the deployment platform's default AWS credential chain. */
+  accessKeyId?: string;
+  secretAccessKey?: string;
+  /** Custom endpoint for S3-compatible services such as R2, MinIO, or Spaces. */
+  endpoint?: string;
   publicUrl?: string;
-  acl?: string;
+  acl?: 'private' | 'public-read' | 'authenticated-read';
+  forcePathStyle?: boolean;
 }
 interface GcsProviderConfig {
   kind: 'gcs';
@@ -17,6 +21,8 @@ interface GcsProviderConfig {
   keyFilename?: string;
   credentials?: Record<string, unknown>;
   publicUrl?: string;
+  /** Private by default. Set true only for an intentionally public media deployment. */
+  makePublic?: boolean;
 }
 interface CloudflareImagesProviderConfig {
   kind: 'cloudflare-images';

package/dist/providers/media-provider.config.mjs

@@ -1,12 +1,7 @@
 //#region src/providers/media-provider.config.ts
 /** Required credential fields per provider — the completeness check is data, not code. */
 const REQUIRED = {
-	s3: [
-		"bucket",
-		"region",
-		"accessKeyId",
-		"secretAccessKey"
-	],
+	s3: ["bucket", "region"],
 	gcs: ["bucket"],
 	"cloudflare-images": ["accountId", "apiToken"],
 	cloudinary: [
@@ -36,10 +31,15 @@ const SECRET_FIELDS = /* @__PURE__ */ new Set([
 function missingProviderFields(config) {
 	const required = REQUIRED[config.kind] ?? [];
 	const bag = config;
-	return required.filter((f) => {
+	const missing = required.filter((f) => {
 		const v = bag[f];
 		return v === void 0 || v === null || v === "";
 	});
+	if (config.kind === "s3") {
+		const hasAccessKey = Boolean(config.accessKeyId);
+		if (hasAccessKey !== Boolean(config.secretAccessKey)) missing.push(hasAccessKey ? "secretAccessKey" : "accessKeyId");
+	}
+	return missing;
 }
 async function resolveMediaProvider(config, options = {}) {
 	if (!config || missingProviderFields(config).length > 0) {
@@ -53,17 +53,23 @@ async function resolveMediaProvider(config, options = {}) {
 			return new S3Provider({
 				bucket: config.bucket,
 				region: config.region,
-				credentials: {
+				...config.accessKeyId && config.secretAccessKey ? { credentials: {
 					accessKeyId: config.accessKeyId,
 					secretAccessKey: config.secretAccessKey
-				},
+				} } : {},
+				...config.endpoint ? { endpoint: config.endpoint } : {},
 				...config.publicUrl ? { publicUrl: config.publicUrl } : {},
-				...config.acl ? { acl: config.acl } : {}
+				...config.acl ? { acl: config.acl } : {},
+				...config.forcePathStyle !== void 0 ? { forcePathStyle: config.forcePathStyle } : {}
 			});
 		}
 		case "gcs": {
 			const { GCSProvider } = await import("@classytic/media-kit/providers/gcs");
-			return new GCSProvider({ ...config });
+			const { kind: _kind, ...providerConfig } = config;
+			return new GCSProvider({
+				makePublic: false,
+				...providerConfig
+			});
 		}
 		case "cloudflare-images": {
 			const { CloudflareImagesProvider } = await import("@classytic/media-kit/providers/cloudflare-images");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@spinekit/media",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Arc module for @classytic/media-kit — two-phase direct-to-storage uploads (start-write / complete-write), content-hash dedup handshake, multipart & resumable sessions, and maintenance schedules, as ONE composable Arc resource.",
   "type": "module",
   "license": "SEE LICENSE IN LICENSE",
@@ -74,7 +74,7 @@
     "typescript": "^7.0.2",
     "vitest": "^3.2.4",
     "zod": "^4.0.0",
-    "@spinekit/kit": "0.1.0"
+    "@spinekit/kit": "0.1.1"
   },
   "author": "Classytic",
   "homepage": "https://www.npmjs.com/package/@spinekit/media",