@trokky/trokky 3.4.1 → 3.5.1

package/dist/routes/handlers/tokens.js

@@ -3,6 +3,8 @@
  */
 import { InvalidInputError } from '../../core/index.js';
 import { BaseRoutes } from './base.js';
+// `resource:action` or `resource:*`, where resource is a collection-style name
+const PERMISSION_FORMAT = /^[A-Za-z][A-Za-z0-9_-]*:(\*|[a-z]+)$/;
 export class TokenRoutes extends BaseRoutes {
     getRoutes() {
         const basePath = this.config.basePath || '';
@@ -17,7 +19,7 @@ export class TokenRoutes extends BaseRoutes {
     // Token Management Routes
     async listTokens(request) {
         try {
-            await this.validateAuthentication(request);
+            await this.requirePermission(request, 'tokens:read');
             const { limit, offset, isActive } = request.query;
             const options = {};
             if (limit)
@@ -35,17 +37,49 @@ export class TokenRoutes extends BaseRoutes {
     }
     async createToken(request) {
         try {
-            await this.validateAuthentication(request);
+            const session = await this.requirePermission(request, 'tokens:write');
             if (!request.body || typeof request.body !== 'object') {
                 return this.errorResponse(new InvalidInputError('Token data is required'));
             }
             const tokenData = request.body;
             // Validate required fields
-            if (!tokenData.name || !tokenData.permissions) {
+            if (!tokenData.name || !Array.isArray(tokenData.permissions) || tokenData.permissions.length === 0 ||
+                !tokenData.permissions.every(p => typeof p === 'string')) {
                 return this.errorResponse(new InvalidInputError('Token name and permissions are required'));
             }
-            // Get user from auth context (placeholder for now)
-            const createdBy = 'system'; // TODO: Get from authenticated user context
+            const permissions = tokenData.permissions;
+            const malformed = permissions.filter(p => !PERMISSION_FORMAT.test(p));
+            if (malformed.length > 0) {
+                return this.errorResponse(new InvalidInputError(`Malformed permissions: ${malformed.join(', ')}`, 'permissions_format'));
+            }
+            let expiresAt;
+            if (tokenData.expiresAt !== undefined) {
+                expiresAt = typeof tokenData.expiresAt === 'string' ? Date.parse(tokenData.expiresAt) : NaN;
+                if (Number.isNaN(expiresAt) || expiresAt <= Date.now()) {
+                    return this.errorResponse(new InvalidInputError('expiresAt must be a future date, as an ISO 8601 string', 'expiresAt'));
+                }
+            }
+            if (session) {
+                // A token can never hold more than the person minting it
+                const exceeding = permissions.filter(p => !this.sessionHasPermission(session, p));
+                if (exceeding.length > 0) {
+                    return this.errorResponse(new InvalidInputError(`Cannot grant permissions you do not hold: ${exceeding.join(', ')}`, 'permissions'));
+                }
+                // A token minting tokens must not be able to outlive or out-replicate itself:
+                // children cannot manage tokens, and cannot expire after their parent.
+                if (session.role === 'api') {
+                    if (permissions.some(p => p.startsWith('tokens:'))) {
+                        return this.errorResponse(new InvalidInputError('An API token cannot grant token permissions', 'permissions'));
+                    }
+                    if (session.expiresAt) {
+                        const parentExpiry = Date.parse(session.expiresAt);
+                        if (expiresAt === undefined || expiresAt > parentExpiry) {
+                            return this.errorResponse(new InvalidInputError('A token created by an API token must expire no later than it', 'permissions'));
+                        }
+                    }
+                }
+            }
+            const createdBy = session?.userId ?? 'system';
             const result = await this.core.createAppToken(tokenData, createdBy);
             if (!result.success) {
                 return this.errorResponse(new Error(result.error || 'Failed to create token'));
@@ -61,7 +95,7 @@ export class TokenRoutes extends BaseRoutes {
     }
     async getToken(request) {
         try {
-            await this.validateAuthentication(request);
+            await this.requirePermission(request, 'tokens:read');
             const { id } = request.params;
             if (!id) {
                 return this.errorResponse(new InvalidInputError('Token ID is required'));
@@ -75,7 +109,7 @@ export class TokenRoutes extends BaseRoutes {
     }
     async updateToken(request) {
         try {
-            await this.validateAuthentication(request);
+            await this.requirePermission(request, 'tokens:write');
             const { id } = request.params;
             if (!id) {
                 return this.errorResponse(new InvalidInputError('Token ID is required'));
@@ -93,7 +127,7 @@ export class TokenRoutes extends BaseRoutes {
     }
     async deleteToken(request) {
         try {
-            await this.validateAuthentication(request);
+            await this.requirePermission(request, 'tokens:delete');
             const { id } = request.params;
             if (!id) {
                 return this.errorResponse(new InvalidInputError('Token ID is required'));

package/dist/routes/handlers/tokens.js.map

@@ -1 +1 @@
-{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../../../src/routes/handlers/tokens.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAEvD,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AAEtC,MAAM,OAAO,WAAY,SAAQ,UAAU;IAClC,SAAS;QACd,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAA;QAC3C,OAAO,IAAI,CAAC,YAAY,CAAC;YACvB,CAAC,KAAK,EAAE,GAAG,QAAQ,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzD,CAAC,MAAM,EAAE,GAAG,QAAQ,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3D,CAAC,KAAK,EAAE,GAAG,QAAQ,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3D,CAAC,KAAK,EAAE,GAAG,QAAQ,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9D,CAAC,QAAQ,EAAE,GAAG,QAAQ,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAClE,CAAC,CAAA;IACJ,CAAC;IAED,0BAA0B;IAClB,KAAK,CAAC,UAAU,CAAC,OAAoB;QAC3C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAA;YAE1C,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;YACjD,MAAM,OAAO,GAAQ,EAAE,CAAA;YACvB,IAAI,KAAK;gBAAE,OAAO,CAAC,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAA;YACtD,IAAI,MAAM;gBAAE,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAA;YACzD,IAAI,QAAQ,KAAK,SAAS;gBAAE,OAAO,CAAC,QAAQ,GAAG,QAAQ,KAAK,MAAM,CAAA;YAElE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;YACrD,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAA;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;QAClC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,OAAoB;QAC5C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAA;YAE1C,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtD,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,iBAAiB,CAAC,wBAAwB,CAAC,CAAC,CAAA;YAC5E,CAAC;YAED,MAAM,SAAS,GAAG,OAAO,CAAC,IAA+B,CAAA;YAEzD,2BAA2B;YAC3B,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;gBAC9C,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,iBAAiB,CAAC,yCAAyC,CAAC,CAAC,CAAA;YAC7F,CAAC;YAED,mDAAmD;YACnD,MAAM,SAAS,GAAG,QAAQ,CAAA,CAAC,4CAA4C;YAEvE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,SAAgB,EAAE,SAAS,CAAC,CAAA;YAC1E,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,wBAAwB,CAAC,CAAC,CAAA;YAChF,CAAC;YAED,OAAO,IAAI,CAAC,eAAe,CAAC;gBAC1B,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,wCAAwC;gBAC7D,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,EAAE,GAAG,CAAC,CAAA;QACT,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;QAClC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,OAAoB;QACzC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAA;YAE1C,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAA;YAC7B,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,iBAAiB,CAAC,sBAAsB,CAAC,CAAC,CAAA;YAC1E,CAAC;YAED,2CAA2C;YAC3C,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,qCAAqC,CAAC,EAAE,GAAG,CAAC,CAAA;QAClF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;QAClC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,OAAoB;QAC5C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAA;YAE1C,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAA;YAC7B,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,iBAAiB,CAAC,sBAAsB,CAAC,CAAC,CAAA;YAC1E,CAAC;YAED,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtD,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,iBAAiB,CAAC,yBAAyB,CAAC,CAAC,CAAA;YAC7E,CAAC;YAED,MAAM,UAAU,GAAG,OAAO,CAAC,IAA+B,CAAA;YAE1D,2CAA2C;YAC3C,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,kCAAkC,CAAC,EAAE,GAAG,CAAC,CAAA;QAC/E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;QAClC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,OAAoB;QAC5C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAA;YAE1C,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAA;YAC7B,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,iBAAiB,CAAC,sBAAsB,CAAC,CAAC,CAAA;YAC1E,CAAC;YAED,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAA;YAClC,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;QAClC,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../../../src/routes/handlers/tokens.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAEvD,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AAEtC,+EAA+E;AAC/E,MAAM,iBAAiB,GAAG,sCAAsC,CAAA;AAEhE,MAAM,OAAO,WAAY,SAAQ,UAAU;IAClC,SAAS;QACd,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAA;QAC3C,OAAO,IAAI,CAAC,YAAY,CAAC;YACvB,CAAC,KAAK,EAAE,GAAG,QAAQ,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzD,CAAC,MAAM,EAAE,GAAG,QAAQ,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3D,CAAC,KAAK,EAAE,GAAG,QAAQ,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3D,CAAC,KAAK,EAAE,GAAG,QAAQ,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9D,CAAC,QAAQ,EAAE,GAAG,QAAQ,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAClE,CAAC,CAAA;IACJ,CAAC;IAED,0BAA0B;IAClB,KAAK,CAAC,UAAU,CAAC,OAAoB;QAC3C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;YAEpD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;YACjD,MAAM,OAAO,GAAQ,EAAE,CAAA;YACvB,IAAI,KAAK;gBAAE,OAAO,CAAC,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAA;YACtD,IAAI,MAAM;gBAAE,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAA;YACzD,IAAI,QAAQ,KAAK,SAAS;gBAAE,OAAO,CAAC,QAAQ,GAAG,QAAQ,KAAK,MAAM,CAAA;YAElE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;YACrD,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAA;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;QAClC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,OAAoB;QAC5C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAA;YAErE,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtD,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,iBAAiB,CAAC,wBAAwB,CAAC,CAAC,CAAA;YAC5E,CAAC;YAED,MAAM,SAAS,GAAG,OAAO,CAAC,IAA+B,CAAA;YAEzD,2BAA2B;YAC3B,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;gBAC9F,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;gBAC7D,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,iBAAiB,CAAC,yCAAyC,CAAC,CAAC,CAAA;YAC7F,CAAC;YAED,MAAM,WAAW,GAAG,SAAS,CAAC,WAAuB,CAAA;YACrD,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;YACrE,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,iBAAiB,CAAC,0BAA0B,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAA;YAC1H,CAAC;YAED,IAAI,SAA6B,CAAA;YACjC,IAAI,SAAS,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACtC,SAAS,GAAG,OAAO,SAAS,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;gBAC3F,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;oBACvD,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,iBAAiB,CAAC,wDAAwD,EAAE,WAAW,CAAC,CAAC,CAAA;gBACzH,CAAC;YACH,CAAC;YAED,IAAI,OAAO,EAAE,CAAC;gBACZ,yDAAyD;gBACzD,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAA;gBACjF,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACzB,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,iBAAiB,CAAC,6CAA6C,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC,CAAA;gBACtI,CAAC;gBAED,8EAA8E;gBAC9E,uEAAuE;gBACvE,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;oBAC3B,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;wBACnD,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,iBAAiB,CAAC,6CAA6C,EAAE,aAAa,CAAC,CAAC,CAAA;oBAChH,CAAC;oBACD,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;wBACtB,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;wBAClD,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,GAAG,YAAY,EAAE,CAAC;4BACxD,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,iBAAiB,CAAC,8DAA8D,EAAE,aAAa,CAAC,CAAC,CAAA;wBACjI,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAED,MAAM,SAAS,GAAG,OAAO,EAAE,MAAM,IAAI,QAAQ,CAAA;YAE7C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,SAAgB,EAAE,SAAS,CAAC,CAAA;YAC1E,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,wBAAwB,CAAC,CAAC,CAAA;YAChF,CAAC;YAED,OAAO,IAAI,CAAC,eAAe,CAAC;gBAC1B,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,wCAAwC;gBAC7D,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,EAAE,GAAG,CAAC,CAAA;QACT,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;QAClC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,OAAoB;QACzC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;YAEpD,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAA;YAC7B,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,iBAAiB,CAAC,sBAAsB,CAAC,CAAC,CAAA;YAC1E,CAAC;YAED,2CAA2C;YAC3C,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,qCAAqC,CAAC,EAAE,GAAG,CAAC,CAAA;QAClF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;QAClC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,OAAoB;QAC5C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAA;YAErD,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAA;YAC7B,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,iBAAiB,CAAC,sBAAsB,CAAC,CAAC,CAAA;YAC1E,CAAC;YAED,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtD,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,iBAAiB,CAAC,yBAAyB,CAAC,CAAC,CAAA;YAC7E,CAAC;YAED,MAAM,UAAU,GAAG,OAAO,CAAC,IAA+B,CAAA;YAE1D,2CAA2C;YAC3C,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,kCAAkC,CAAC,EAAE,GAAG,CAAC,CAAA;QAC/E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;QAClC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,OAAoB;QAC5C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAA;YAEtD,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAA;YAC7B,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,iBAAiB,CAAC,sBAAsB,CAAC,CAAC,CAAA;YAC1E,CAAC;YAED,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAA;YAClC,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;QAClC,CAAC;IACH,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@trokky/trokky",
-  "version": "3.4.1",
+  "version": "3.5.1",
   "description": "Modern, composable Content Management System - Server package",
   "type": "module",
   "main": "dist/index.js",
@@ -93,6 +93,10 @@
       "types": "./dist/adapters/postgres-data/index.d.ts",
       "import": "./dist/adapters/postgres-data/index.js"
     },
+    "./adapters/s3-media": {
+      "import": "./dist/adapters/s3-media/index.js",
+      "types": "./dist/adapters/s3-media/index.d.ts"
+    },
     "./express": {
       "types": "./dist/integrations/express/index.d.ts",
       "import": "./dist/integrations/express/index.js"
@@ -157,6 +161,7 @@
   },
   "dependencies": {
     "@simplewebauthn/server": "^13.2.2",
+    "aws4fetch": "^1.0.20",
     "bcrypt": "^6.0.0",
     "busboy": "^1.6.0",
     "cors": "^2.8.5",