@trokky/trokky 3.1.0 → 3.2.0

package/dist/core/media/processors/sharp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sharp.d.ts","sourceRoot":"","sources":["../../../../src/core/media/processors/sharp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,cAAc,EACd,KAAK,oBAAoB,EACzB,KAAK,cAAc,EAEpB,MAAM,YAAY,CAAA;AAMnB;;GAEG;AACH,qBAAa,mBAAoB,SAAQ,cAAc;IACrD,OAAO,CAAC,KAAK,CAAe;IAC5B,OAAO,CAAC,MAAM,CAA+C;gBAEjD,MAAM,EAAE,oBAAoB;YAK1B,sBAAsB;IAe9B,YAAY,CAChB,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GACvD,OAAO,CAAC,cAAc,CAAC;IA4E1B,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM;IAOpD,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM3C,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;CAatC"}
+{"version":3,"file":"sharp.d.ts","sourceRoot":"","sources":["../../../../src/core/media/processors/sharp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EACL,cAAc,EACd,KAAK,oBAAoB,EACzB,KAAK,cAAc,EAEpB,MAAM,YAAY,CAAA;AAMnB;;GAEG;AACH,qBAAa,mBAAoB,SAAQ,cAAc;IACrD,OAAO,CAAC,KAAK,CAAe;IAC5B,OAAO,CAAC,MAAM,CAA+C;gBAEjD,MAAM,EAAE,oBAAoB;YAK1B,sBAAsB;IAyB9B,YAAY,CAChB,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GACvD,OAAO,CAAC,cAAc,CAAC;IA4E1B,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM;IAOpD,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM3C,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;CAatC"}

package/dist/core/media/processors/sharp.js

@@ -9,6 +9,7 @@
  * - Self-hosted deployments
  * - Development with immediate processing
  */
+import { createRequire } from 'node:module';
 import { ImageProcessor } from './types.js';
 import { createLogger } from '../../utils/logger.js';
 /**
@@ -24,8 +25,18 @@ export class SharpImageProcessor extends ImageProcessor {
     async ensureSharpInitialized() {
         if (!this.sharp) {
             try {
-                // Dynamic import to avoid issues in edge environments
-                const sharpModule = await import('sharp');
+                // sharp is loaded through `require`, not `import`, and that is deliberate.
+                //
+                // A bundler resolves a literal `import('sharp')` even when the branch never executes,
+                // and the surviving reference breaks a Cloudflare Workers build before any code runs —
+                // sharp pulls in `detect-libc`, which wants `fs` and `child_process`. Hiding the
+                // specifier behind a variable does not help either: workerd rejects a non-literal
+                // dynamic specifier at parse time. A plain `require` call is followed by neither, so
+                // the reference disappears from an edge bundle and still resolves in Node, where sharp
+                // is CommonJS anyway. `password-hash.ts` loads bcrypt the same way, for the same reason.
+                //
+                // Do not turn this back into `await import('sharp')`.
+                const sharpModule = createRequire(import.meta.url)('sharp');
                 this.sharp = sharpModule.default || sharpModule;
             }
             catch (error) {

package/dist/core/media/processors/sharp.js.map

@@ -1 +1 @@
-{"version":3,"file":"sharp.js","sourceRoot":"","sources":["../../../../src/core/media/processors/sharp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,cAAc,EAIf,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AAKpD;;GAEG;AACH,MAAM,OAAO,mBAAoB,SAAQ,cAAc;IAC7C,KAAK,CAAe;IACpB,MAAM,GAAG,YAAY,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAA;IAE7D,YAAY,MAA4B;QACtC,KAAK,CAAC,MAAM,CAAC,CAAA;QACb,mDAAmD;IACrD,CAAC;IAEO,KAAK,CAAC,sBAAsB;QAClC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,sDAAsD;gBACtD,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAA;gBACzC,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,OAAO,IAAI,WAAW,CAAA;YACjD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CACb,kDAAkD;oBAClD,sGAAsG,CACvG,CAAA;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,IAAU,EACV,QAAwD;QAExD,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAA;QAEnC,yBAAyB;QACzB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAA;QAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAEvC,8BAA8B;QAC9B,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACxC,MAAM,gBAAgB,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,CAAA;QAEvD,MAAM,QAAQ,GAA0B;YACtC,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC;YAC9C,KAAK,EAAE,gBAAgB,CAAC,KAAK,IAAI,CAAC;YAClC,MAAM,EAAE,gBAAgB,CAAC,MAAM,IAAI,CAAC;YACpC,MAAM,EAAE,gBAAgB,CAAC,MAAM,IAAI,SAAS;YAC5C,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,qEAAqE;SACtE,CAAA;QAED,MAAM,QAAQ,GAA0C,EAAE,CAAA;QAE1D,uBAAuB;QACvB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YACjD,IAAI,CAAC;gBACH,IAAI,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;gBAEtC,wBAAwB;gBACxB,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;oBACpC,MAAM,aAAa,GAAQ,EAAE,CAAA;oBAE7B,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;wBAChB,aAAa,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAA;oBACjC,CAAC;oBAED,aAAa,GAAG,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;gBACpF,CAAC;gBAED,gCAAgC;gBAChC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;oBACnB,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;wBACvB,KAAK,MAAM;4BACT,aAAa,GAAG,aAAa,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,CAAA;4BACtE,MAAK;wBACP,KAAK,KAAK;4BACR,aAAa,GAAG,aAAa,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,CAAA;4BACrE,MAAK;wBACP,KAAK,MAAM;4BACT,aAAa,GAAG,aAAa,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,CAAA;4BACtE,MAAK;wBACP,KAAK,MAAM;4BACT,aAAa,GAAG,aAAa,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,CAAA;4BACtE,MAAK;oBACT,CAAC;gBACH,CAAC;gBAED,2BAA2B;gBAC3B,MAAM,eAAe,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAA;gBAEjF,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG;oBACvB,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC;oBAChD,KAAK,EAAE,eAAe,CAAC,IAAI,CAAC,KAAK;oBACjC,MAAM,EAAE,eAAe,CAAC,IAAI,CAAC,MAAM;oBACnC,MAAM,EAAE,eAAe,CAAC,IAAI,CAAC,MAAM;oBACnC,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC,MAAM;oBACjC,MAAM,EAAE,eAAe,CAAC,IAAI,CAAC,0BAA0B;iBACxD,CAAA;YAEH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YACrF,CAAC;QACH,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAA;IAC/B,CAAC;IAED,WAAW,CAAC,OAAe,EAAE,WAAoB;QAC/C,IAAI,CAAC,WAAW,IAAI,WAAW,KAAK,UAAU,EAAE,CAAC;YAC/C,OAAO,UAAU,OAAO,EAAE,CAAA;QAC5B,CAAC;QACD,OAAO,UAAU,OAAO,IAAI,WAAW,EAAE,CAAA;IAC3C,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAe;QAC/B,8CAA8C;QAC9C,wEAAwE;QACxE,OAAM;IACR,CAAC;IAED,KAAK,CAAC,WAAW;QACf,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAA;YACnC,4CAA4C;YAC5C,MAAM,IAAI,CAAC,KAAK,CAAC;gBACf,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE;aAC/E,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAA;YACnB,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,KAAK,CAAC,CAAA;YACrD,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"sharp.js","sourceRoot":"","sources":["../../../../src/core/media/processors/sharp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EACL,cAAc,EAIf,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AAKpD;;GAEG;AACH,MAAM,OAAO,mBAAoB,SAAQ,cAAc;IAC7C,KAAK,CAAe;IACpB,MAAM,GAAG,YAAY,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAA;IAE7D,YAAY,MAA4B;QACtC,KAAK,CAAC,MAAM,CAAC,CAAA;QACb,mDAAmD;IACrD,CAAC;IAEO,KAAK,CAAC,sBAAsB;QAClC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,2EAA2E;gBAC3E,EAAE;gBACF,sFAAsF;gBACtF,uFAAuF;gBACvF,iFAAiF;gBACjF,kFAAkF;gBAClF,qFAAqF;gBACrF,uFAAuF;gBACvF,yFAAyF;gBACzF,EAAE;gBACF,sDAAsD;gBACtD,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAA;gBAC3D,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,OAAO,IAAI,WAAW,CAAA;YACjD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CACb,kDAAkD;oBAClD,sGAAsG,CACvG,CAAA;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,IAAU,EACV,QAAwD;QAExD,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAA;QAEnC,yBAAyB;QACzB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAA;QAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAEvC,8BAA8B;QAC9B,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACxC,MAAM,gBAAgB,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,CAAA;QAEvD,MAAM,QAAQ,GAA0B;YACtC,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC;YAC9C,KAAK,EAAE,gBAAgB,CAAC,KAAK,IAAI,CAAC;YAClC,MAAM,EAAE,gBAAgB,CAAC,MAAM,IAAI,CAAC;YACpC,MAAM,EAAE,gBAAgB,CAAC,MAAM,IAAI,SAAS;YAC5C,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,qEAAqE;SACtE,CAAA;QAED,MAAM,QAAQ,GAA0C,EAAE,CAAA;QAE1D,uBAAuB;QACvB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YACjD,IAAI,CAAC;gBACH,IAAI,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;gBAEtC,wBAAwB;gBACxB,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;oBACpC,MAAM,aAAa,GAAQ,EAAE,CAAA;oBAE7B,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;wBAChB,aAAa,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAA;oBACjC,CAAC;oBAED,aAAa,GAAG,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;gBACpF,CAAC;gBAED,gCAAgC;gBAChC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;oBACnB,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;wBACvB,KAAK,MAAM;4BACT,aAAa,GAAG,aAAa,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,CAAA;4BACtE,MAAK;wBACP,KAAK,KAAK;4BACR,aAAa,GAAG,aAAa,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,CAAA;4BACrE,MAAK;wBACP,KAAK,MAAM;4BACT,aAAa,GAAG,aAAa,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,CAAA;4BACtE,MAAK;wBACP,KAAK,MAAM;4BACT,aAAa,GAAG,aAAa,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,CAAA;4BACtE,MAAK;oBACT,CAAC;gBACH,CAAC;gBAED,2BAA2B;gBAC3B,MAAM,eAAe,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAA;gBAEjF,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG;oBACvB,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC;oBAChD,KAAK,EAAE,eAAe,CAAC,IAAI,CAAC,KAAK;oBACjC,MAAM,EAAE,eAAe,CAAC,IAAI,CAAC,MAAM;oBACnC,MAAM,EAAE,eAAe,CAAC,IAAI,CAAC,MAAM;oBACnC,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC,MAAM;oBACjC,MAAM,EAAE,eAAe,CAAC,IAAI,CAAC,0BAA0B;iBACxD,CAAA;YAEH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YACrF,CAAC;QACH,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAA;IAC/B,CAAC;IAED,WAAW,CAAC,OAAe,EAAE,WAAoB;QAC/C,IAAI,CAAC,WAAW,IAAI,WAAW,KAAK,UAAU,EAAE,CAAC;YAC/C,OAAO,UAAU,OAAO,EAAE,CAAA;QAC5B,CAAC;QACD,OAAO,UAAU,OAAO,IAAI,WAAW,EAAE,CAAA;IAC3C,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAe;QAC/B,8CAA8C;QAC9C,wEAAwE;QACxE,OAAM;IACR,CAAC;IAED,KAAK,CAAC,WAAW;QACf,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAA;YACnC,4CAA4C;YAC5C,MAAM,IAAI,CAAC,KAAK,CAAC;gBACf,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE;aAC/E,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAA;YACnB,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,KAAK,CAAC,CAAA;YACrD,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;CACF"}

package/dist/core/media/processors/types.d.ts

@@ -22,7 +22,7 @@ export interface ProcessedImage {
     variants: Record<string, ProcessedImageVariant>;
 }
 export interface ImageProcessorConfig {
-    type: 'none' | 'sharp' | 'cloudflare-images' | 'cloudflare-transformations' | 'cloudflare-transform-store' | 'workers-images' | 'imagekit' | 'imgix' | 'custom';
+    type: 'none' | 'sharp' | 'cloudflare-images' | 'imagekit' | 'imgix' | 'custom';
     variants?: ImageVariant[];
     options?: Record<string, unknown>;
 }

package/dist/core/media/processors/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/media/processors/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,CAAA;IACzC,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,GAAG,CAAC,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAA;CAC1D;AAED,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,qBAAqB,CAAA;IAC/B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAA;CAChD;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,mBAAmB,GAAG,4BAA4B,GAAG,4BAA4B,GAAG,gBAAgB,GAAG,UAAU,GAAG,OAAO,GAAG,QAAQ,CAAA;IAC/J,QAAQ,CAAC,EAAE,YAAY,EAAE,CAAA;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAClC;AAED;;GAEG;AACH,8BAAsB,cAAc;IAClC,SAAS,CAAC,MAAM,EAAE,oBAAoB,CAAA;gBAE1B,MAAM,EAAE,oBAAoB;IAIxC;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,CACnB,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GACvD,OAAO,CAAC,cAAc,CAAC;IAE1B;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM;IAEnE;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAEpD;;OAEG;IACH,QAAQ,CAAC,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;CACzC;AAED;;GAEG;AACH,eAAO,MAAM,sBAAsB,EAAE,YAAY,EAyBhD,CAAA"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/media/processors/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,CAAA;IACzC,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,GAAG,CAAC,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAA;CAC1D;AAED,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,qBAAqB,CAAA;IAC/B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAA;CAChD;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,mBAAmB,GAAG,UAAU,GAAG,OAAO,GAAG,QAAQ,CAAA;IAC9E,QAAQ,CAAC,EAAE,YAAY,EAAE,CAAA;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAClC;AAED;;GAEG;AACH,8BAAsB,cAAc;IAClC,SAAS,CAAC,MAAM,EAAE,oBAAoB,CAAA;gBAE1B,MAAM,EAAE,oBAAoB;IAIxC;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,CACnB,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GACvD,OAAO,CAAC,cAAc,CAAC;IAE1B;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM;IAEnE;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAEpD;;OAEG;IACH,QAAQ,CAAC,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;CACzC;AAED;;GAEG;AACH,eAAO,MAAM,sBAAsB,EAAE,YAAY,EAyBhD,CAAA"}

package/dist/core/security/rate-limit-store.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Where a rate limiter keeps its counters.
+ *
+ * In one long-lived process a `Map` is the whole story. On an edge runtime it is
+ * a security bug wearing a performance costume: every isolate keeps its own
+ * counters, so the effective limit is multiplied by however many isolates happen
+ * to be warm, and nobody notices because the limiter still *looks* like it works.
+ *
+ * The naive fix — one shared write per request — is unaffordable here, because
+ * `checkRateLimit` guards media reads as well as sign-ins.
+ *
+ * So the unit of exchange is a **lease**, not a request. A limiter asks the store
+ * for a slice of the window's quota, spends it locally at no cost, and goes back
+ * only when the slice runs out. One round trip per `leaseSize` requests instead
+ * of one per request.
+ *
+ * The error this introduces leans the safe way. An isolate that leases ten and
+ * serves two before it is evicted has still spent ten of the window's budget, so
+ * churn makes the limit *stricter* than configured, never looser. Being briefly
+ * too strict under load is a far better failure than silently admitting ten times
+ * the traffic you asked for.
+ */
+export interface RateLimitStore {
+    /**
+     * Reserve up to `want` units of the quota for `key` in the window starting at
+     * `windowStart`, and report how many were actually granted — `0` when the
+     * window is exhausted. Implementations must apply the increment atomically:
+     * two callers reserving at once must not both receive the last unit.
+     */
+    reserve(request: RateLimitReservation): Promise<number>;
+}
+export interface RateLimitReservation {
+    /** The counter's identity: the operation, or whatever the key generator built. */
+    key: string;
+    /** Start of the fixed window, in epoch milliseconds. */
+    windowStart: number;
+    /** Window length, so a store can expire its own rows without being told twice. */
+    windowMs: number;
+    /** How many units the caller would like. */
+    want: number;
+    /** The most that may be granted across all callers for this key and window. */
+    max: number;
+}
+/**
+ * Counters in process memory. Exact, free, and correct for a single process —
+ * which is every Node deployment. It is the default for that reason.
+ */
+export declare class MemoryRateLimitStore implements RateLimitStore {
+    private readonly counts;
+    reserve({ key, windowStart, want, max }: RateLimitReservation): Promise<number>;
+    /** Drop counters for windows that are well past. */
+    cleanup(windowMs: number, now?: number): void;
+    /** Units already spent for a key in the current window. Test seam. */
+    used(key: string, windowStart: number): number;
+}
+//# sourceMappingURL=rate-limit-store.d.ts.map

package/dist/core/security/rate-limit-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit-store.d.ts","sourceRoot":"","sources":["../../../src/core/security/rate-limit-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,MAAM,WAAW,cAAc;IAC7B;;;;;OAKG;IACH,OAAO,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;CACxD;AAED,MAAM,WAAW,oBAAoB;IACnC,kFAAkF;IAClF,GAAG,EAAE,MAAM,CAAA;IACX,wDAAwD;IACxD,WAAW,EAAE,MAAM,CAAA;IACnB,kFAAkF;IAClF,QAAQ,EAAE,MAAM,CAAA;IAChB,4CAA4C;IAC5C,IAAI,EAAE,MAAM,CAAA;IACZ,+EAA+E;IAC/E,GAAG,EAAE,MAAM,CAAA;CACZ;AAED;;;GAGG;AACH,qBAAa,oBAAqB,YAAW,cAAc;IACzD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA2D;IAErE,OAAO,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,oBAAoB,GAAG,OAAO,CAAC,MAAM,CAAC;IAc5F,oDAAoD;IAC7C,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,IAAI;IASxD,sEAAsE;IAC/D,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM;CAItD"}

package/dist/core/security/rate-limit-store.js

@@ -0,0 +1,55 @@
+/**
+ * Where a rate limiter keeps its counters.
+ *
+ * In one long-lived process a `Map` is the whole story. On an edge runtime it is
+ * a security bug wearing a performance costume: every isolate keeps its own
+ * counters, so the effective limit is multiplied by however many isolates happen
+ * to be warm, and nobody notices because the limiter still *looks* like it works.
+ *
+ * The naive fix — one shared write per request — is unaffordable here, because
+ * `checkRateLimit` guards media reads as well as sign-ins.
+ *
+ * So the unit of exchange is a **lease**, not a request. A limiter asks the store
+ * for a slice of the window's quota, spends it locally at no cost, and goes back
+ * only when the slice runs out. One round trip per `leaseSize` requests instead
+ * of one per request.
+ *
+ * The error this introduces leans the safe way. An isolate that leases ten and
+ * serves two before it is evicted has still spent ten of the window's budget, so
+ * churn makes the limit *stricter* than configured, never looser. Being briefly
+ * too strict under load is a far better failure than silently admitting ten times
+ * the traffic you asked for.
+ */
+/**
+ * Counters in process memory. Exact, free, and correct for a single process —
+ * which is every Node deployment. It is the default for that reason.
+ */
+export class MemoryRateLimitStore {
+    counts = new Map();
+    async reserve({ key, windowStart, want, max }) {
+        const current = this.counts.get(key);
+        if (!current || current.windowStart < windowStart) {
+            const granted = Math.min(want, max);
+            this.counts.set(key, { used: granted, windowStart });
+            return granted;
+        }
+        const granted = Math.min(want, Math.max(0, max - current.used));
+        current.used += granted;
+        return granted;
+    }
+    /** Drop counters for windows that are well past. */
+    cleanup(windowMs, now = Date.now()) {
+        const cutoff = now - windowMs * 2;
+        for (const [key, value] of this.counts.entries()) {
+            if (value.windowStart < cutoff) {
+                this.counts.delete(key);
+            }
+        }
+    }
+    /** Units already spent for a key in the current window. Test seam. */
+    used(key, windowStart) {
+        const current = this.counts.get(key);
+        return current && current.windowStart >= windowStart ? current.used : 0;
+    }
+}
+//# sourceMappingURL=rate-limit-store.js.map

package/dist/core/security/rate-limit-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit-store.js","sourceRoot":"","sources":["../../../src/core/security/rate-limit-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAyBH;;;GAGG;AACH,MAAM,OAAO,oBAAoB;IACd,MAAM,GAAG,IAAI,GAAG,EAAiD,CAAA;IAE3E,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAwB;QACxE,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAEpC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,WAAW,GAAG,WAAW,EAAE,CAAC;YAClD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;YACnC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAA;YACpD,OAAO,OAAO,CAAA;QAChB,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;QAC/D,OAAO,CAAC,IAAI,IAAI,OAAO,CAAA;QACvB,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,oDAAoD;IAC7C,OAAO,CAAC,QAAgB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QAC/C,MAAM,MAAM,GAAG,GAAG,GAAG,QAAQ,GAAG,CAAC,CAAA;QACjC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;YACjD,IAAI,KAAK,CAAC,WAAW,GAAG,MAAM,EAAE,CAAC;gBAC/B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IAED,sEAAsE;IAC/D,IAAI,CAAC,GAAW,EAAE,WAAmB;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACpC,OAAO,OAAO,IAAI,OAAO,CAAC,WAAW,IAAI,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;IACzE,CAAC;CACF"}

package/dist/core/security/rate-limiter.d.ts

@@ -1,15 +1,43 @@
+import { type RateLimitStore } from './rate-limit-store.js';
 export interface RateLimitConfig {
     windowMs: number;
     maxRequests: number;
     keyGenerator?: (operation: string, context?: Record<string, unknown>) => string;
+    /**
+     * Where counters live. Defaults to process memory, which is exact and free in
+     * a single process. Supply a shared store on a runtime that spreads requests
+     * across isolates, or the limit is silently multiplied by their number.
+     */
+    store?: RateLimitStore;
+    /**
+     * How many units to take from the store at a time. `1` consults the store on
+     * every request: exact, and the right choice for an in-process store. A larger
+     * lease trades a bounded, fail-safe strictness for far fewer round trips, which
+     * is what makes a shared store affordable on hot paths. See rate-limit-store.ts.
+     */
+    leaseSize?: number;
 }
 export declare class RateLimiter {
-    private operationCounts;
     private readonly defaultConfig;
-    constructor(config?: Partial<RateLimitConfig>);
     private config;
+    private readonly store;
+    private readonly memoryStore;
+    private readonly leaseSize;
+    private readonly leases;
+    constructor(config?: Partial<RateLimitConfig>);
     checkRateLimit(operation: string, context?: Record<string, unknown>): Promise<void>;
+    /**
+     * Drop bookkeeping for windows that are well past. Only meaningful for the
+     * in-memory store; a shared store expires its own rows.
+     */
     cleanup(): void;
+    /**
+     * Requests left in the current window, as far as this instance can tell.
+     * With a shared store and a lease larger than one this is a local view: it
+     * counts what this instance still holds, not what every instance has spent.
+     */
     getRemainingRequests(operation: string): number;
 }
+export { MemoryRateLimitStore } from './rate-limit-store.js';
+export type { RateLimitStore, RateLimitReservation } from './rate-limit-store.js';
 //# sourceMappingURL=rate-limiter.d.ts.map

package/dist/core/security/rate-limiter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rate-limiter.d.ts","sourceRoot":"","sources":["../../../src/core/security/rate-limiter.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAA;CAChF;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,eAAe,CAA4D;IACnF,OAAO,CAAC,QAAQ,CAAC,aAAa,CAG7B;gBAEW,MAAM,GAAE,OAAO,CAAC,eAAe,CAAM;IAIjD,OAAO,CAAC,MAAM,CAAiB;IAElB,cAAc,CACzB,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,OAAO,CAAC,IAAI,CAAC;IAuBT,OAAO,IAAI,IAAI;IAWf,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;CAYvD"}
+{"version":3,"file":"rate-limiter.d.ts","sourceRoot":"","sources":["../../../src/core/security/rate-limiter.ts"],"names":[],"mappings":"AACA,OAAO,EAAwB,KAAK,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAEjF,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAA;IAC/E;;;;OAIG;IACH,KAAK,CAAC,EAAE,cAAc,CAAA;IACtB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAQD,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,aAAa,CAG7B;IAED,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgB;IACtC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA6B;IACzD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAQ;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA2B;gBAEtC,MAAM,GAAE,OAAO,CAAC,eAAe,CAAM;IAUpC,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IA8BhG;;;OAGG;IACI,OAAO,IAAI,IAAI;IAYtB;;;;OAIG;IACI,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;CAevD;AAED,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAA;AAC5D,YAAY,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAA"}

package/dist/core/security/rate-limiter.js

@@ -1,48 +1,79 @@
 import { RateLimitError } from '../errors/index.js';
+import { MemoryRateLimitStore } from './rate-limit-store.js';
 export class RateLimiter {
-    operationCounts = new Map();
     defaultConfig = {
         windowMs: 60 * 1000, // 1 minute
         maxRequests: 1000
     };
+    config;
+    store;
+    memoryStore;
+    leaseSize;
+    leases = new Map();
     constructor(config = {}) {
         this.config = { ...this.defaultConfig, ...config };
+        const store = config.store ?? new MemoryRateLimitStore();
+        this.store = store;
+        // Kept typed so cleanup() can still prune, which only makes sense in memory.
+        this.memoryStore = store instanceof MemoryRateLimitStore ? store : null;
+        this.leaseSize = Math.max(1, config.leaseSize ?? 1);
     }
-    config;
     async checkRateLimit(operation, context) {
-        const key = this.config.keyGenerator
-            ? this.config.keyGenerator(operation, context)
-            : operation;
+        const key = this.config.keyGenerator ? this.config.keyGenerator(operation, context) : operation;
         const now = Date.now();
         const windowStart = Math.floor(now / this.config.windowMs) * this.config.windowMs;
-        const current = this.operationCounts.get(key);
-        if (!current || current.windowStart < windowStart) {
-            // New window or first request
-            this.operationCounts.set(key, { count: 1, windowStart });
+        const lease = this.leases.get(key);
+        if (lease && lease.windowStart === windowStart && lease.remaining > 0) {
+            lease.remaining -= 1;
             return;
         }
-        if (current.count >= this.config.maxRequests) {
+        const granted = await this.store.reserve({
+            key,
+            windowStart,
+            windowMs: this.config.windowMs,
+            want: this.leaseSize,
+            max: this.config.maxRequests
+        });
+        if (granted <= 0) {
+            // A spent lease from this window must not be resurrected by a later call.
+            this.leases.set(key, { windowStart, remaining: 0 });
             throw new RateLimitError(operation);
         }
-        current.count++;
+        // One unit pays for this request; the rest is credit for the next ones.
+        this.leases.set(key, { windowStart, remaining: granted - 1 });
     }
+    /**
+     * Drop bookkeeping for windows that are well past. Only meaningful for the
+     * in-memory store; a shared store expires its own rows.
+     */
     cleanup() {
         const now = Date.now();
-        const cutoff = now - this.config.windowMs * 2; // Keep 2 windows of history
-        for (const [key, data] of this.operationCounts.entries()) {
-            if (data.windowStart < cutoff) {
-                this.operationCounts.delete(key);
+        const cutoff = now - this.config.windowMs * 2;
+        for (const [key, lease] of this.leases.entries()) {
+            if (lease.windowStart < cutoff) {
+                this.leases.delete(key);
             }
         }
+        this.memoryStore?.cleanup(this.config.windowMs, now);
     }
+    /**
+     * Requests left in the current window, as far as this instance can tell.
+     * With a shared store and a lease larger than one this is a local view: it
+     * counts what this instance still holds, not what every instance has spent.
+     */
     getRemainingRequests(operation) {
         const now = Date.now();
         const windowStart = Math.floor(now / this.config.windowMs) * this.config.windowMs;
-        const current = this.operationCounts.get(operation);
-        if (!current || current.windowStart < windowStart) {
-            return this.config.maxRequests;
+        if (this.memoryStore) {
+            const used = this.memoryStore.used(operation, windowStart);
+            const held = this.leases.get(operation);
+            const unspent = held && held.windowStart === windowStart ? held.remaining : 0;
+            // `used` counts leased units, some of which are still in hand.
+            return Math.max(0, this.config.maxRequests - used + unspent);
         }
-        return Math.max(0, this.config.maxRequests - current.count);
+        const lease = this.leases.get(operation);
+        return lease && lease.windowStart === windowStart ? lease.remaining : this.config.maxRequests;
     }
 }
+export { MemoryRateLimitStore } from './rate-limit-store.js';
 //# sourceMappingURL=rate-limiter.js.map

package/dist/core/security/rate-limiter.js.map

@@ -1 +1 @@
-{"version":3,"file":"rate-limiter.js","sourceRoot":"","sources":["../../../src/core/security/rate-limiter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAQnD,MAAM,OAAO,WAAW;IACd,eAAe,GAAG,IAAI,GAAG,EAAkD,CAAA;IAClE,aAAa,GAAoB;QAChD,QAAQ,EAAE,EAAE,GAAG,IAAI,EAAE,WAAW;QAChC,WAAW,EAAE,IAAI;KAClB,CAAA;IAED,YAAY,SAAmC,EAAE;QAC/C,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,EAAE,GAAG,MAAM,EAAE,CAAA;IACpD,CAAC;IAEO,MAAM,CAAiB;IAExB,KAAK,CAAC,cAAc,CACzB,SAAiB,EACjB,OAAiC;QAEjC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY;YAClC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC;YAC9C,CAAC,CAAC,SAAS,CAAA;QAEb,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAA;QAEjF,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAE7C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,WAAW,GAAG,WAAW,EAAE,CAAC;YAClD,8BAA8B;YAC9B,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;YACxD,OAAM;QACR,CAAC;QAED,IAAI,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC7C,MAAM,IAAI,cAAc,CAAC,SAAS,CAAC,CAAA;QACrC,CAAC;QAED,OAAO,CAAC,KAAK,EAAE,CAAA;IACjB,CAAC;IAEM,OAAO;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,MAAM,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAA,CAAC,4BAA4B;QAE1E,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,EAAE,CAAC;YACzD,IAAI,IAAI,CAAC,WAAW,GAAG,MAAM,EAAE,CAAC;gBAC9B,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IAEM,oBAAoB,CAAC,SAAiB;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAA;QAEjF,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAEnD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,WAAW,GAAG,WAAW,EAAE,CAAC;YAClD,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAAA;QAChC,CAAC;QAED,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;IAC7D,CAAC;CACF"}
+{"version":3,"file":"rate-limiter.js","sourceRoot":"","sources":["../../../src/core/security/rate-limiter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,EAAE,oBAAoB,EAAuB,MAAM,uBAAuB,CAAA;AA2BjF,MAAM,OAAO,WAAW;IACL,aAAa,GAAoB;QAChD,QAAQ,EAAE,EAAE,GAAG,IAAI,EAAE,WAAW;QAChC,WAAW,EAAE,IAAI;KAClB,CAAA;IAEO,MAAM,CAAiB;IACd,KAAK,CAAgB;IACrB,WAAW,CAA6B;IACxC,SAAS,CAAQ;IACjB,MAAM,GAAG,IAAI,GAAG,EAAiB,CAAA;IAElD,YAAY,SAAmC,EAAE;QAC/C,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,EAAE,GAAG,MAAM,EAAE,CAAA;QAElD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,IAAI,oBAAoB,EAAE,CAAA;QACxD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;QAClB,6EAA6E;QAC7E,IAAI,CAAC,WAAW,GAAG,KAAK,YAAY,oBAAoB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;QACvE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC,CAAA;IACrD,CAAC;IAEM,KAAK,CAAC,cAAc,CAAC,SAAiB,EAAE,OAAiC;QAC9E,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAE/F,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAA;QAEjF,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAClC,IAAI,KAAK,IAAI,KAAK,CAAC,WAAW,KAAK,WAAW,IAAI,KAAK,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;YACtE,KAAK,CAAC,SAAS,IAAI,CAAC,CAAA;YACpB,OAAM;QACR,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;YACvC,GAAG;YACH,WAAW;YACX,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,IAAI,EAAE,IAAI,CAAC,SAAS;YACpB,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;SAC7B,CAAC,CAAA;QAEF,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;YACjB,0EAA0E;YAC1E,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAA;YACnD,MAAM,IAAI,cAAc,CAAC,SAAS,CAAC,CAAA;QACrC,CAAC;QAED,wEAAwE;QACxE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,GAAG,CAAC,EAAE,CAAC,CAAA;IAC/D,CAAC;IAED;;;OAGG;IACI,OAAO;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,MAAM,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAA;QAE7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;YACjD,IAAI,KAAK,CAAC,WAAW,GAAG,MAAM,EAAE,CAAC;gBAC/B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YACzB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;IACtD,CAAC;IAED;;;;OAIG;IACI,oBAAoB,CAAC,SAAiB;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAA;QAEjF,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;YAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YACvC,MAAM,OAAO,GAAG,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;YAC7E,+DAA+D;YAC/D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,IAAI,GAAG,OAAO,CAAC,CAAA;QAC9D,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACxC,OAAO,KAAK,IAAI,KAAK,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAA;IAC/F,CAAC;CACF;AAED,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAA"}

package/dist/core/services/media-service.d.ts

@@ -15,6 +15,21 @@ export interface MediaServiceDependencies {
     eventsEnabled: boolean;
     getImageProcessor: () => ImageProcessor;
 }
+/** One step of media processing that did not succeed, even after retries. */
+export interface VariantFailure {
+    stage: 'process' | 'save-variant' | 'persist-metadata';
+    variant?: string;
+    error: string;
+}
+/**
+ * What happened while generating variants, recorded on the media file when it was not clean.
+ * Its absence means every variant was generated and stored.
+ */
+export interface ImageProcessingReport {
+    status: 'partial' | 'failed';
+    failures: VariantFailure[];
+    failedAt: string;
+}
 /**
  * Media upload, retrieval, image variants and filename sanitization.
  */
@@ -22,6 +37,25 @@ export declare class MediaService {
     private readonly deps;
     constructor(deps: MediaServiceDependencies);
     uploadMedia(file: File): Promise<MediaFile>;
+    /**
+     * Retry policy for the remote-backed steps of media processing.
+     *
+     * Cloudflare's Images service fails a small share of calls transiently — measured at roughly
+     * one in fifteen for a 6MB JPEG — and every one of those used to cost a thumbnail silently.
+     * Input the service will never accept is not retried: that is a permanent failure and should
+     * surface immediately rather than after three waits.
+     */
+    private retryOptions;
+    /**
+     * Generate every variant for an image and write them to storage.
+     *
+     * Shared by upload and regeneration so both get the same retries and the same reporting. A
+     * failure never throws: the original file is already stored and is what the caller actually
+     * uploaded. But a failure is never swallowed either — it comes back in `report`, which the
+     * caller attaches to the media record, so an image with missing variants says so instead of
+     * looking complete.
+     */
+    private generateVariants;
     getMedia(id: string): Promise<MediaFile | null>;
     updateMedia(id: string, metadata: Record<string, any>): Promise<MediaFile>;
     getMediaContent(id: string): Promise<ArrayBuffer | null>;

package/dist/core/services/media-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"media-service.d.ts","sourceRoot":"","sources":["../../../src/core/services/media-service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAA;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAA;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,KAAK,EAAE,cAAc,EAAyB,MAAM,6BAA6B,CAAA;AACxF,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAGnD,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,SAAS,EAET,eAAe,EAChB,MAAM,mBAAmB,CAAA;AAE1B,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,YAAY,CAAA;IACpB,MAAM,EAAE,YAAY,CAAA;IACpB,YAAY,EAAE,mBAAmB,CAAA;IACjC,WAAW,EAAE,WAAW,CAAA;IACxB,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,eAAe,EAAE,OAAO,CAAA;IACxB,QAAQ,EAAE,cAAc,CAAA;IACxB,aAAa,EAAE,OAAO,CAAA;IACtB,iBAAiB,EAAE,MAAM,cAAc,CAAA;CACxC;AAED;;GAEG;AACH,qBAAa,YAAY;IACX,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,wBAAwB;IAG9C,WAAW,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC;IAkI3C,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IAY/C,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC;IAuB1E,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAYxD,SAAS,CAAC,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,eAAe,CAAC;IAalF,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA2CtC,uBAAuB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAkH7D,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM;IAIpD,iBAAiB,IAAI,OAAO,CAAC,cAAc,CAAC;IAKlD,4BAA4B,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM;IAiDhD,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;IAgC1C,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;CAIlD"}
+{"version":3,"file":"media-service.d.ts","sourceRoot":"","sources":["../../../src/core/services/media-service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAA;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAA;AAEtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,KAAK,EAAE,cAAc,EAAyB,MAAM,6BAA6B,CAAA;AACxF,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAGnD,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,SAAS,EAET,eAAe,EAChB,MAAM,mBAAmB,CAAA;AAE1B,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,YAAY,CAAA;IACpB,MAAM,EAAE,YAAY,CAAA;IACpB,YAAY,EAAE,mBAAmB,CAAA;IACjC,WAAW,EAAE,WAAW,CAAA;IACxB,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,eAAe,EAAE,OAAO,CAAA;IACxB,QAAQ,EAAE,cAAc,CAAA;IACxB,aAAa,EAAE,OAAO,CAAA;IACtB,iBAAiB,EAAE,MAAM,cAAc,CAAA;CACxC;AAGD,6EAA6E;AAC7E,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,SAAS,GAAG,cAAc,GAAG,kBAAkB,CAAA;IACtD,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;CACd;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,SAAS,GAAG,QAAQ,CAAA;IAC5B,QAAQ,EAAE,cAAc,EAAE,CAAA;IAC1B,QAAQ,EAAE,MAAM,CAAA;CACjB;AAQD;;GAEG;AACH,qBAAa,YAAY;IACX,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,wBAAwB;IAG9C,WAAW,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC;IA2FxD;;;;;;;OAOG;IACH,OAAO,CAAC,YAAY;IAqBpB;;;;;;;;OAQG;YACW,gBAAgB;IAsFjB,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IAY/C,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC;IAuB1E,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAYxD,SAAS,CAAC,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,eAAe,CAAC;IAalF,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA2CtC,uBAAuB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IA0F7D,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM;IAIpD,iBAAiB,IAAI,OAAO,CAAC,cAAc,CAAC;IAKlD,4BAA4B,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM;IAiDhD,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;IAgC1C,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;CAIlD"}