@ttt-productions/media-processing-core 0.8.15 → 0.8.17

package/dist/run-pipeline.js

@@ -1,18 +1,18 @@
-import { parseMediaProcessingSpec } from "@ttt-productions/media-schemas";
-import { createTempWorkspace } from "./workspace/temp.js";
-import { processMedia } from "./process-media.js";
-import { inspectMedia } from "./inspection/inspect-media.js";
-import { mergeModeration } from "./moderation/merge.js";
-import path from "node:path";
-import { stat } from "node:fs/promises";
+import { parseMediaProcessingSpec } from '@ttt-productions/media-schemas';
+import { createTempWorkspace } from './workspace/temp.js';
+import { processMedia } from './process-media.js';
+import { inspectMedia } from './inspection/inspect-media.js';
+import { mergeModeration } from './moderation/merge.js';
+import path from 'node:path';
+import { stat } from 'node:fs/promises';
 function mediaTypeFromSpecKind(kind) {
-    if (kind === "image")
-        return "image";
-    if (kind === "video")
-        return "video";
-    if (kind === "audio")
-        return "audio";
-    return "other";
+    if (kind === 'image')
+        return 'image';
+    if (kind === 'video')
+        return 'video';
+    if (kind === 'audio')
+        return 'audio';
+    return 'other';
 }
 function attachProvider(m, provider) {
     if (!m)
@@ -21,7 +21,7 @@ function attachProvider(m, provider) {
 }
 export async function runMediaPipeline(args) {
     let { spec } = args;
-    const { io, outputBaseName = "media", moderation, signal, onProgress, resolveAfterInspection } = args;
+    const { io, outputBaseName = 'media', moderation, signal, onProgress, resolveAfterInspection, } = args;
     // Carried onto every return path once produced — the finalizer must hand the
     // SAME inspection object to the safety gate (one classification authority).
     let inspection;
@@ -30,7 +30,7 @@ export async function runMediaPipeline(args) {
         return {
             ok: false,
             mediaType: mediaTypeFromSpecKind(spec.kind),
-            error: { code: "processing_canceled", message: "Processing canceled." },
+            error: { code: 'processing_canceled', message: 'Processing canceled.' },
         };
     }
     // Runtime contract validation (fast-fail with actionable errors).
@@ -42,22 +42,26 @@ export async function runMediaPipeline(args) {
             ok: false,
             mediaType: mediaTypeFromSpecKind(spec.kind),
             error: {
-                code: "invalid_spec",
-                message: "Invalid MediaProcessingSpec.",
+                code: 'invalid_spec',
+                message: 'Invalid MediaProcessingSpec.',
                 details: { issues: e?.issues ?? e?.message ?? String(e) },
             },
         };
     }
     const ws = await createTempWorkspace();
     try {
-        const inputPath = path.join(ws.dir, "input");
+        const inputPath = path.join(ws.dir, 'input');
         const outputBasePath = path.join(ws.dir, outputBaseName);
         if (signal?.aborted) {
-            return { ok: false, mediaType: mediaTypeFromSpecKind(spec.kind), error: { code: "processing_canceled", message: "Processing canceled." } };
+            return {
+                ok: false,
+                mediaType: mediaTypeFromSpecKind(spec.kind),
+                error: { code: 'processing_canceled', message: 'Processing canceled.' },
+            };
         }
-        onProgress?.({ phase: "read_input", percent: 0 });
+        onProgress?.({ phase: 'read_input', percent: 0 });
         await io.input.readToFile(inputPath);
-        onProgress?.({ phase: "read_input", percent: 1 });
+        onProgress?.({ phase: 'read_input', percent: 1 });
         // CANONICAL INSPECTION (before moderation and processing): classify the
         // just-downloaded bytes structurally and let the caller's policy adapter
         // pick the spec from the result. See RunPipelineArgs.resolveAfterInspection.
@@ -68,7 +72,7 @@ export async function runMediaPipeline(args) {
                 ...(args.inspectionDeps ? { deps: args.inspectionDeps } : {}),
             });
             const resolution = await resolveAfterInspection(inspection);
-            if ("reject" in resolution) {
+            if ('reject' in resolution) {
                 return withInspection({
                     ok: false,
                     mediaType: mediaTypeFromSpecKind(spec.kind),
@@ -83,8 +87,8 @@ export async function runMediaPipeline(args) {
                     ok: false,
                     mediaType: mediaTypeFromSpecKind(spec.kind),
                     error: {
-                        code: "invalid_spec",
-                        message: "Invalid MediaProcessingSpec from resolveAfterInspection.",
+                        code: 'invalid_spec',
+                        message: 'Invalid MediaProcessingSpec from resolveAfterInspection.',
                         details: { issues: e?.issues ?? e?.message ?? String(e) },
                     },
                 });
@@ -93,14 +97,14 @@ export async function runMediaPipeline(args) {
         // PRE moderation (original)
         let mIn;
         if (moderation?.moderateInput) {
-            onProgress?.({ phase: "moderation_input", percent: 0 });
+            onProgress?.({ phase: 'moderation_input', percent: 0 });
             mIn = attachProvider(await moderation.moderateInput({
                 spec,
                 kind: spec.kind,
                 localPath: inputPath,
                 mime: io.input.mime,
             }), moderation.provider);
-            onProgress?.({ phase: "moderation_input", percent: 1 });
+            onProgress?.({ phase: 'moderation_input', percent: 1 });
             // Fail closed on both "rejected" (policy violation) and "error" (the
             // moderation check itself did not complete — quota/outage/API failure).
             // A non-passing check must NEVER fall through to transcode + persist:
@@ -109,20 +113,20 @@ export async function runMediaPipeline(args) {
             // retryable `processing_failed` code AND carries `moderation` (status
             // "error") on the result — callers route that to their retryable
             // moderation lane and land the row failed rather than publishing it.
-            if (mIn?.status === "rejected" || mIn?.status === "error") {
+            if (mIn?.status === 'rejected' || mIn?.status === 'error') {
                 return withInspection({
                     ok: false,
                     mediaType: mediaTypeFromSpecKind(spec.kind),
                     moderation: mIn,
-                    error: mIn.status === "error"
+                    error: mIn.status === 'error'
                         ? {
-                            code: "processing_failed",
-                            message: "Moderation check did not complete.",
-                            details: { provider: mIn.provider, reason: "moderation_error" },
+                            code: 'processing_failed',
+                            message: 'Moderation check did not complete.',
+                            details: { provider: mIn.provider, reason: 'moderation_error' },
                         }
                         : {
-                            code: "rejected",
-                            message: "Rejected by moderation.",
+                            code: 'rejected',
+                            message: 'Rejected by moderation.',
                             details: { provider: mIn.provider, reasons: mIn.reasons, findings: mIn.findings },
                         },
                 });
@@ -151,8 +155,8 @@ export async function runMediaPipeline(args) {
                         ok: false,
                         mediaType: mediaTypeFromSpecKind(spec.kind),
                         error: {
-                            code: "too_large",
-                            message: "Processed output exceeds allowed size.",
+                            code: 'too_large',
+                            message: 'Processed output exceeds allowed size.',
                             details: { key: o.key, sizeBytes: size, limitBytes: perFileLimit },
                         },
                     });
@@ -162,8 +166,8 @@ export async function runMediaPipeline(args) {
                         ok: false,
                         mediaType: mediaTypeFromSpecKind(spec.kind),
                         error: {
-                            code: "too_large",
-                            message: "Total processed outputs exceed allowed size.",
+                            code: 'too_large',
+                            message: 'Total processed outputs exceed allowed size.',
                             details: { totalBytes: total, limitBytes: totalLimit },
                         },
                     });
@@ -173,7 +177,7 @@ export async function runMediaPipeline(args) {
         if (!result.ok || !result.outputs?.length) {
             if (mIn)
                 result.moderation = mIn;
-            onProgress?.({ phase: "done", percent: result.ok ? 1 : 0 });
+            onProgress?.({ phase: 'done', percent: result.ok ? 1 : 0 });
             return withInspection(result);
         }
         // POST moderation (processed outputs) — runs on the LOCAL output paths
@@ -182,7 +186,7 @@ export async function runMediaPipeline(args) {
         // the consuming app's media-serving design docs.
         let mOut;
         if (moderation?.moderateOutput) {
-            onProgress?.({ phase: "moderation_output", percent: 0 });
+            onProgress?.({ phase: 'moderation_output', percent: 0 });
             mOut = attachProvider(await moderation.moderateOutput({
                 spec,
                 kind: spec.kind,
@@ -190,39 +194,51 @@ export async function runMediaPipeline(args) {
                     .filter((o) => !!o.path)
                     .map((o) => ({ key: o.key, localPath: o.path, mime: o.mime })),
             }), moderation.provider);
-            onProgress?.({ phase: "moderation_output", percent: 1 });
+            onProgress?.({ phase: 'moderation_output', percent: 1 });
             // Same fail-closed posture as the input check: block both "rejected"
             // and "error" before any persistence, so an incomplete check can never
             // publish unscanned output. Ordering is load-bearing — see the
             // consuming app's media-serving design docs.
-            if (mOut?.status === "rejected" || mOut?.status === "error") {
+            if (mOut?.status === 'rejected' || mOut?.status === 'error') {
                 return withInspection({
                     ok: false,
                     mediaType: result.mediaType,
                     moderation: mOut,
-                    error: mOut.status === "error"
+                    error: mOut.status === 'error'
                         ? {
-                            code: "processing_failed",
-                            message: "Moderation check did not complete.",
-                            details: { provider: mOut.provider, reason: "moderation_error" },
+                            code: 'processing_failed',
+                            message: 'Moderation check did not complete.',
+                            details: { provider: mOut.provider, reason: 'moderation_error' },
                         }
                         : {
-                            code: "rejected",
-                            message: "Rejected by moderation.",
-                            details: { provider: mOut.provider, reasons: mOut.reasons, findings: mOut.findings },
+                            code: 'rejected',
+                            message: 'Rejected by moderation.',
+                            details: {
+                                provider: mOut.provider,
+                                reasons: mOut.reasons,
+                                findings: mOut.findings,
+                            },
                         },
                 });
             }
         }
         // Persist outputs — only after input AND output moderation both passed.
-        onProgress?.({ phase: "persist_outputs", percent: 0 });
+        onProgress?.({ phase: 'persist_outputs', percent: 0 });
         const totalOut = result.outputs.length;
         let outIdx = 0;
         for (const out of result.outputs) {
             if (signal?.aborted) {
-                return withInspection({ ok: false, mediaType: result.mediaType, error: { code: "processing_canceled", message: "Processing canceled." } });
+                return withInspection({
+                    ok: false,
+                    mediaType: result.mediaType,
+                    error: { code: 'processing_canceled', message: 'Processing canceled.' },
+                });
             }
-            onProgress?.({ phase: "persist_outputs", percent: totalOut ? outIdx / totalOut : 0, detail: { key: out.key } });
+            onProgress?.({
+                phase: 'persist_outputs',
+                percent: totalOut ? outIdx / totalOut : 0,
+                detail: { key: out.key },
+            });
             if (!out.path)
                 continue;
             const persisted = await io.output.writeFromFile(out.path, out.key);
@@ -232,11 +248,11 @@ export async function runMediaPipeline(args) {
                 out.path = persisted.path;
             outIdx += 1;
         }
-        onProgress?.({ phase: "persist_outputs", percent: 1 });
+        onProgress?.({ phase: 'persist_outputs', percent: 1 });
         const merged = mergeModeration(mIn ?? undefined, mOut ?? undefined);
         if (merged)
             result.moderation = merged;
-        onProgress?.({ phase: "done", percent: 1 });
+        onProgress?.({ phase: 'done', percent: 1 });
         return withInspection(result);
     }
     finally {

package/dist/run-pipeline.js.map

@@ -1 +1 @@
-{"version":3,"file":"run-pipeline.js","sourceRoot":"","sources":["../src/run-pipeline.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAyB,MAAM,+BAA+B,CAAC;AAGpF,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAgCxC,SAAS,qBAAqB,CAAC,IAAiC;IAC9D,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IACrC,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IACrC,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IACrC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,cAAc,CACrB,CAA2C,EAC3C,QAAiB;IAEjB,IAAI,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IACjB,OAAO,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;AAC5F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAqB;IAC1D,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,EAAE,EAAE,cAAc,GAAG,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,sBAAsB,EAAE,GAAG,IAAI,CAAC;IACtG,6EAA6E;IAC7E,4EAA4E;IAC5E,IAAI,UAA6C,CAAC;IAClD,MAAM,cAAc,GAAG,CAAC,CAAwB,EAAyB,EAAE,CACzE,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAExC,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;QACpB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,SAAS,EAAE,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;YAC3C,KAAK,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,sBAAsB,EAAE;SACxE,CAAC;IACJ,CAAC;IAED,kEAAkE;IAClE,IAAI,CAAC;QACH,IAAI,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,SAAS,EAAE,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;YAC3C,KAAK,EAAE;gBACL,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,8BAA8B;gBACvC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,IAAI,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE;aAC1D;SACF,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,GAAG,MAAM,mBAAmB,EAAE,CAAC;IAEvC,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC7C,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAEzD,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,sBAAsB,EAAE,EAAE,CAAC;QAC7I,CAAC;QACD,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QAClD,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACrC,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QAElD,wEAAwE;QACxE,yEAAyE;QACzE,6EAA6E;QAC7E,IAAI,sBAAsB,EAAE,CAAC;YAC3B,UAAU,GAAG,MAAM,YAAY,CAAC;gBAC9B,SAAS,EAAE,SAAS;gBACpB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7B,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9D,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC,UAAU,CAAC,CAAC;YAC5D,IAAI,QAAQ,IAAI,UAAU,EAAE,CAAC;gBAC3B,OAAO,cAAc,CAAC;oBACpB,EAAE,EAAE,KAAK;oBACT,SAAS,EAAE,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;oBAC3C,KAAK,EAAE,UAAU,CAAC,MAAM;iBACzB,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC;gBACH,IAAI,GAAG,wBAAwB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACnD,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,OAAO,cAAc,CAAC;oBACpB,EAAE,EAAE,KAAK;oBACT,SAAS,EAAE,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;oBAC3C,KAAK,EAAE;wBACL,IAAI,EAAE,cAAc;wBACpB,OAAO,EAAE,0DAA0D;wBACnE,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,IAAI,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE;qBAC1D;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,IAAI,GAA6C,CAAC;QAClD,IAAI,UAAU,EAAE,aAAa,EAAE,CAAC;YAC9B,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;YACxD,GAAG,GAAG,cAAc,CAClB,MAAM,UAAU,CAAC,aAAa,CAAC;gBAC7B,IAAI;gBACJ,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,SAAS,EAAE,SAAS;gBACpB,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI;aACpB,CAAC,EACF,UAAU,CAAC,QAAQ,CACpB,CAAC;YACF,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;YAExD,qEAAqE;YACrE,wEAAwE;YACxE,sEAAsE;YACtE,wEAAwE;YACxE,gEAAgE;YAChE,sEAAsE;YACtE,iEAAiE;YACjE,qEAAqE;YACrE,IAAI,GAAG,EAAE,MAAM,KAAK,UAAU,IAAI,GAAG,EAAE,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC1D,OAAO,cAAc,CAAC;oBACpB,EAAE,EAAE,KAAK;oBACT,SAAS,EAAE,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;oBAC3C,UAAU,EAAE,GAAG;oBACf,KAAK,EACH,GAAG,CAAC,MAAM,KAAK,OAAO;wBACpB,CAAC,CAAC;4BACE,IAAI,EAAE,mBAAmB;4BACzB,OAAO,EAAE,oCAAoC;4BAC7C,OAAO,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,kBAAkB,EAAE;yBAChE;wBACH,CAAC,CAAC;4BACE,IAAI,EAAE,UAAU;4BAChB,OAAO,EAAE,yBAAyB;4BAClC,OAAO,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE;yBAClF;iBACR,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE;YACtC,SAAS;YACT,cAAc;YACd,SAAS,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI;SACzB,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QAE3B,8CAA8C;QAC9C,IAAI,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;YACxC,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,QAAQ,IAAI,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,gBAAgB;YAChG,MAAM,UAAU,GAAG,IAAI,CAAC,mBAAmB,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,QAAQ,IAAI,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,gBAAgB;YAE1H,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC/B,IAAI,CAAC,CAAC,CAAC,IAAI;oBAAE,SAAS;gBACtB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;gBACjC,KAAK,IAAI,IAAI,CAAC;gBACd,IAAI,CAAC,CAAC,CAAC,SAAS;oBAAE,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC;gBACrC,IAAI,IAAI,GAAG,YAAY,EAAE,CAAC;oBACxB,OAAO,cAAc,CAAC;wBACpB,EAAE,EAAE,KAAK;wBACT,SAAS,EAAE,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;wBAC3C,KAAK,EAAE;4BACL,IAAI,EAAE,WAAW;4BACjB,OAAO,EAAE,wCAAwC;4BACjD,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE;yBACnE;qBACF,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,KAAK,GAAG,UAAU,EAAE,CAAC;oBACvB,OAAO,cAAc,CAAC;wBACpB,EAAE,EAAE,KAAK;wBACT,SAAS,EAAE,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;wBAC3C,KAAK,EAAE;4BACL,IAAI,EAAE,WAAW;4BACjB,OAAO,EAAE,8CAA8C;4BACvD,OAAO,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE;yBACvD;qBACF,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;YAC1C,IAAI,GAAG;gBAAE,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC;YACjC,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC5D,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;QAED,uEAAuE;QACvE,qEAAqE;QACrE,8DAA8D;QAC9D,iDAAiD;QACjD,IAAI,IAA8C,CAAC;QACnD,IAAI,UAAU,EAAE,cAAc,EAAE,CAAC;YAC/B,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;YACzD,IAAI,GAAG,cAAc,CACnB,MAAM,UAAU,CAAC,cAAc,CAAC;gBAC9B,IAAI;gBACJ,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;qBAC5B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;qBACvB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,IAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;aAClE,CAAC,EACF,UAAU,CAAC,QAAQ,CACpB,CAAC;YACF,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;YAEzD,qEAAqE;YACrE,uEAAuE;YACvE,+DAA+D;YAC/D,6CAA6C;YAC7C,IAAI,IAAI,EAAE,MAAM,KAAK,UAAU,IAAI,IAAI,EAAE,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC5D,OAAO,cAAc,CAAC;oBACpB,EAAE,EAAE,KAAK;oBACT,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,UAAU,EAAE,IAAI;oBAChB,KAAK,EACH,IAAI,CAAC,MAAM,KAAK,OAAO;wBACrB,CAAC,CAAC;4BACE,IAAI,EAAE,mBAAmB;4BACzB,OAAO,EAAE,oCAAoC;4BAC7C,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,kBAAkB,EAAE;yBACjE;wBACH,CAAC,CAAC;4BACE,IAAI,EAAE,UAAU;4BAChB,OAAO,EAAE,yBAAyB;4BAClC,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE;yBACrF;iBACR,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,wEAAwE;QACxE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;QACvC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpB,OAAO,cAAc,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,sBAAsB,EAAE,EAAE,CAAC,CAAC;YAC7I,CAAC;YACD,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAChH,IAAI,CAAC,GAAG,CAAC,IAAI;gBAAE,SAAS;YACxB,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;YACnE,IAAI,SAAS,CAAC,GAAG;gBAAE,GAAG,CAAC,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC;YAC3C,IAAI,SAAS,CAAC,IAAI;gBAAE,GAAG,CAAC,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;YAC9C,MAAM,IAAI,CAAC,CAAC;QACd,CAAC;QACD,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QAEvD,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,IAAI,SAAS,EAAE,IAAI,IAAI,SAAS,CAAC,CAAC;QACpE,IAAI,MAAM;YAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC;QAEvC,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QAE5C,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;IACrB,CAAC;AACH,CAAC","sourcesContent":["import type {\n    MediaProcessingResult,\n    MediaProcessingSpec,\n    MediaModerationResult,\n    MediaInspectionResult,\n    MediaProcessingError,\n  } from \"@ttt-productions/media-schemas\";\nimport { parseMediaProcessingSpec } from \"@ttt-productions/media-schemas\";\n  import { createTempWorkspace } from \"./workspace/temp.js\";\n  import { processMedia } from \"./process-media.js\";\n  import { inspectMedia, type InspectMediaDeps } from \"./inspection/inspect-media.js\";\n  import type { MediaIO } from \"./io/types.js\";\n  import type { ModerationAdapter } from \"./moderation/types.js\";\n  import { mergeModeration } from \"./moderation/merge.js\";\n  import path from \"node:path\";\n  import { stat } from \"node:fs/promises\";\n\n  export interface RunPipelineArgs {\n    spec: MediaProcessingSpec;\n    io: MediaIO;\n    outputBaseName?: string;\n    moderation?: ModerationAdapter;\n  signal?: AbortSignal;\n  onProgress?: (p: import(\"./types.js\").MediaPipelineProgress) => void;\n  /**\n   * CANONICAL INSPECTION SEAM (canonical-upload-content-classification).\n   * When present, the pipeline runs `inspectMedia` on the just-downloaded temp\n   * input — BEFORE moderation and processing — and calls this policy hook with\n   * the bounded result. The hook either:\n   *   - returns `{ spec }` — the caller's policy adapter selected the\n   *     processing spec FROM the inspection (the byte-derived kind, never the\n   *     client MIME); the pipeline continues with that spec; or\n   *   - returns `{ reject }` — a typed terminal (`kind_mismatch`,\n   *     `unsupported_format`, `unsupported_codec`, …); the pipeline stops\n   *     before any transcode/moderation work.\n   * The inspection result rides the returned `MediaProcessingResult.inspection`\n   * either way, so the finalizer hands the SAME object to the safety gate —\n   * one authority, no re-detection. Callers that omit the hook get the\n   * pre-existing behavior unchanged.\n   */\n  resolveAfterInspection?: (\n    inspection: MediaInspectionResult,\n  ) => Promise<{ spec: MediaProcessingSpec } | { reject: MediaProcessingError }> | ({ spec: MediaProcessingSpec } | { reject: MediaProcessingError });\n  /** Inspection tool overrides (tests). */\n  inspectionDeps?: InspectMediaDeps;\n  }\n  \n  function mediaTypeFromSpecKind(kind: MediaProcessingSpec[\"kind\"]): \"image\" | \"video\" | \"audio\" | \"other\" {\n    if (kind === \"image\") return \"image\";\n    if (kind === \"video\") return \"video\";\n    if (kind === \"audio\") return \"audio\";\n    return \"other\";\n  }\n  \n  function attachProvider(\n    m: MediaModerationResult | null | undefined,\n    provider?: string\n  ): MediaModerationResult | null | undefined {\n    if (!m) return m;\n    return { ...m, provider: m.provider ?? provider, reviewedAt: m.reviewedAt ?? Date.now() };\n  }\n  \n  export async function runMediaPipeline(args: RunPipelineArgs): Promise<MediaProcessingResult> {\n    let { spec } = args;\n    const { io, outputBaseName = \"media\", moderation, signal, onProgress, resolveAfterInspection } = args;\n    // Carried onto every return path once produced — the finalizer must hand the\n    // SAME inspection object to the safety gate (one classification authority).\n    let inspection: MediaInspectionResult | undefined;\n    const withInspection = (r: MediaProcessingResult): MediaProcessingResult =>\n      inspection ? { ...r, inspection } : r;\n\n    if (signal?.aborted) {\n      return {\n        ok: false,\n        mediaType: mediaTypeFromSpecKind(spec.kind),\n        error: { code: \"processing_canceled\", message: \"Processing canceled.\" },\n      };\n    }\n\n    // Runtime contract validation (fast-fail with actionable errors).\n    try {\n      spec = parseMediaProcessingSpec(spec);\n    } catch (e: any) {\n      return {\n        ok: false,\n        mediaType: mediaTypeFromSpecKind(spec.kind),\n        error: {\n          code: \"invalid_spec\",\n          message: \"Invalid MediaProcessingSpec.\",\n          details: { issues: e?.issues ?? e?.message ?? String(e) },\n        },\n      };\n    }\n  \n    const ws = await createTempWorkspace();\n  \n    try {\n      const inputPath = path.join(ws.dir, \"input\");\n      const outputBasePath = path.join(ws.dir, outputBaseName);\n  \n      if (signal?.aborted) {\n        return { ok: false, mediaType: mediaTypeFromSpecKind(spec.kind), error: { code: \"processing_canceled\", message: \"Processing canceled.\" } };\n      }\n      onProgress?.({ phase: \"read_input\", percent: 0 });\n      await io.input.readToFile(inputPath);\n      onProgress?.({ phase: \"read_input\", percent: 1 });\n\n      // CANONICAL INSPECTION (before moderation and processing): classify the\n      // just-downloaded bytes structurally and let the caller's policy adapter\n      // pick the spec from the result. See RunPipelineArgs.resolveAfterInspection.\n      if (resolveAfterInspection) {\n        inspection = await inspectMedia({\n          localPath: inputPath,\n          ...(signal ? { signal } : {}),\n          ...(args.inspectionDeps ? { deps: args.inspectionDeps } : {}),\n        });\n        const resolution = await resolveAfterInspection(inspection);\n        if (\"reject\" in resolution) {\n          return withInspection({\n            ok: false,\n            mediaType: mediaTypeFromSpecKind(spec.kind),\n            error: resolution.reject,\n          });\n        }\n        try {\n          spec = parseMediaProcessingSpec(resolution.spec);\n        } catch (e: any) {\n          return withInspection({\n            ok: false,\n            mediaType: mediaTypeFromSpecKind(spec.kind),\n            error: {\n              code: \"invalid_spec\",\n              message: \"Invalid MediaProcessingSpec from resolveAfterInspection.\",\n              details: { issues: e?.issues ?? e?.message ?? String(e) },\n            },\n          });\n        }\n      }\n\n      // PRE moderation (original)\n      let mIn: MediaModerationResult | null | undefined;\n      if (moderation?.moderateInput) {\n        onProgress?.({ phase: \"moderation_input\", percent: 0 });\n        mIn = attachProvider(\n          await moderation.moderateInput({\n            spec,\n            kind: spec.kind,\n            localPath: inputPath,\n            mime: io.input.mime,\n          }),\n          moderation.provider\n        );\n        onProgress?.({ phase: \"moderation_input\", percent: 1 });\n  \n        // Fail closed on both \"rejected\" (policy violation) and \"error\" (the\n        // moderation check itself did not complete — quota/outage/API failure).\n        // A non-passing check must NEVER fall through to transcode + persist:\n        // published bytes must always have been scanned. An \"error\" is a system\n        // failure, not a content rejection, so it returns the distinct,\n        // retryable `processing_failed` code AND carries `moderation` (status\n        // \"error\") on the result — callers route that to their retryable\n        // moderation lane and land the row failed rather than publishing it.\n        if (mIn?.status === \"rejected\" || mIn?.status === \"error\") {\n          return withInspection({\n            ok: false,\n            mediaType: mediaTypeFromSpecKind(spec.kind),\n            moderation: mIn,\n            error:\n              mIn.status === \"error\"\n                ? {\n                    code: \"processing_failed\",\n                    message: \"Moderation check did not complete.\",\n                    details: { provider: mIn.provider, reason: \"moderation_error\" },\n                  }\n                : {\n                    code: \"rejected\",\n                    message: \"Rejected by moderation.\",\n                    details: { provider: mIn.provider, reasons: mIn.reasons, findings: mIn.findings },\n                  },\n          });\n        }\n      }\n  \n      const result = await processMedia(spec, {\n        inputPath,\n        outputBasePath,\n        inputMime: io.input.mime,\n      }, { signal, onProgress });\n\n      // Output size enforcement (processed outputs)\n      if (result.ok && result.outputs?.length) {\n        const perFileLimit = spec.maxOutputBytes ?? spec.maxBytes ?? 200 * 1024 * 1024; // 200MB default\n        const totalLimit = spec.maxTotalOutputBytes ?? spec.maxOutputBytes ?? spec.maxBytes ?? 400 * 1024 * 1024; // 400MB default\n\n        let total = 0;\n        for (const o of result.outputs) {\n          if (!o.path) continue;\n          const s = await stat(o.path);\n          const size = Number(s.size ?? 0);\n          total += size;\n          if (!o.sizeBytes) o.sizeBytes = size;\n          if (size > perFileLimit) {\n            return withInspection({\n              ok: false,\n              mediaType: mediaTypeFromSpecKind(spec.kind),\n              error: {\n                code: \"too_large\",\n                message: \"Processed output exceeds allowed size.\",\n                details: { key: o.key, sizeBytes: size, limitBytes: perFileLimit },\n              },\n            });\n          }\n          if (total > totalLimit) {\n            return withInspection({\n              ok: false,\n              mediaType: mediaTypeFromSpecKind(spec.kind),\n              error: {\n                code: \"too_large\",\n                message: \"Total processed outputs exceed allowed size.\",\n                details: { totalBytes: total, limitBytes: totalLimit },\n              },\n            });\n          }\n        }\n      }\n  \n      if (!result.ok || !result.outputs?.length) {\n        if (mIn) result.moderation = mIn;\n        onProgress?.({ phase: \"done\", percent: result.ok ? 1 : 0 });\n        return withInspection(result);\n      }\n  \n      // POST moderation (processed outputs) — runs on the LOCAL output paths\n      // BEFORE any final persistence, so rejected output never reaches the\n      // final store (R2 / emulator). Ordering is load-bearing — see\n      // the consuming app's media-serving design docs.\n      let mOut: MediaModerationResult | null | undefined;\n      if (moderation?.moderateOutput) {\n        onProgress?.({ phase: \"moderation_output\", percent: 0 });\n        mOut = attachProvider(\n          await moderation.moderateOutput({\n            spec,\n            kind: spec.kind,\n            outputs: (result.outputs ?? [])\n              .filter((o) => !!o.path)\n              .map((o) => ({ key: o.key, localPath: o.path!, mime: o.mime })),\n          }),\n          moderation.provider\n        );\n        onProgress?.({ phase: \"moderation_output\", percent: 1 });\n\n        // Same fail-closed posture as the input check: block both \"rejected\"\n        // and \"error\" before any persistence, so an incomplete check can never\n        // publish unscanned output. Ordering is load-bearing — see the\n        // consuming app's media-serving design docs.\n        if (mOut?.status === \"rejected\" || mOut?.status === \"error\") {\n          return withInspection({\n            ok: false,\n            mediaType: result.mediaType,\n            moderation: mOut,\n            error:\n              mOut.status === \"error\"\n                ? {\n                    code: \"processing_failed\",\n                    message: \"Moderation check did not complete.\",\n                    details: { provider: mOut.provider, reason: \"moderation_error\" },\n                  }\n                : {\n                    code: \"rejected\",\n                    message: \"Rejected by moderation.\",\n                    details: { provider: mOut.provider, reasons: mOut.reasons, findings: mOut.findings },\n                  },\n          });\n        }\n      }\n\n      // Persist outputs — only after input AND output moderation both passed.\n      onProgress?.({ phase: \"persist_outputs\", percent: 0 });\n      const totalOut = result.outputs.length;\n      let outIdx = 0;\n      for (const out of result.outputs) {\n        if (signal?.aborted) {\n          return withInspection({ ok: false, mediaType: result.mediaType, error: { code: \"processing_canceled\", message: \"Processing canceled.\" } });\n        }\n        onProgress?.({ phase: \"persist_outputs\", percent: totalOut ? outIdx / totalOut : 0, detail: { key: out.key } });\n        if (!out.path) continue;\n        const persisted = await io.output.writeFromFile(out.path, out.key);\n        if (persisted.url) out.url = persisted.url;\n        if (persisted.path) out.path = persisted.path;\n        outIdx += 1;\n      }\n      onProgress?.({ phase: \"persist_outputs\", percent: 1 });\n\n      const merged = mergeModeration(mIn ?? undefined, mOut ?? undefined);\n      if (merged) result.moderation = merged;\n\n      onProgress?.({ phase: \"done\", percent: 1 });\n  \n      return withInspection(result);\n    } finally {\n      await ws.cleanup();\n    }\n  }\n  "]}
+{"version":3,"file":"run-pipeline.js","sourceRoot":"","sources":["../src/run-pipeline.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAyB,MAAM,+BAA+B,CAAC;AAGpF,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAkCxC,SAAS,qBAAqB,CAC5B,IAAiC;IAEjC,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IACrC,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IACrC,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IACrC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,cAAc,CACrB,CAA2C,EAC3C,QAAiB;IAEjB,IAAI,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IACjB,OAAO,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;AAC5F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAqB;IAC1D,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IACpB,MAAM,EACJ,EAAE,EACF,cAAc,GAAG,OAAO,EACxB,UAAU,EACV,MAAM,EACN,UAAU,EACV,sBAAsB,GACvB,GAAG,IAAI,CAAC;IACT,6EAA6E;IAC7E,4EAA4E;IAC5E,IAAI,UAA6C,CAAC;IAClD,MAAM,cAAc,GAAG,CAAC,CAAwB,EAAyB,EAAE,CACzE,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAExC,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;QACpB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,SAAS,EAAE,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;YAC3C,KAAK,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,sBAAsB,EAAE;SACxE,CAAC;IACJ,CAAC;IAED,kEAAkE;IAClE,IAAI,CAAC;QACH,IAAI,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,SAAS,EAAE,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;YAC3C,KAAK,EAAE;gBACL,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,8BAA8B;gBACvC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,IAAI,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE;aAC1D;SACF,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,GAAG,MAAM,mBAAmB,EAAE,CAAC;IAEvC,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC7C,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAEzD,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,SAAS,EAAE,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC3C,KAAK,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,sBAAsB,EAAE;aACxE,CAAC;QACJ,CAAC;QACD,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QAClD,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACrC,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QAElD,wEAAwE;QACxE,yEAAyE;QACzE,6EAA6E;QAC7E,IAAI,sBAAsB,EAAE,CAAC;YAC3B,UAAU,GAAG,MAAM,YAAY,CAAC;gBAC9B,SAAS,EAAE,SAAS;gBACpB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7B,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9D,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC,UAAU,CAAC,CAAC;YAC5D,IAAI,QAAQ,IAAI,UAAU,EAAE,CAAC;gBAC3B,OAAO,cAAc,CAAC;oBACpB,EAAE,EAAE,KAAK;oBACT,SAAS,EAAE,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;oBAC3C,KAAK,EAAE,UAAU,CAAC,MAAM;iBACzB,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC;gBACH,IAAI,GAAG,wBAAwB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACnD,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,OAAO,cAAc,CAAC;oBACpB,EAAE,EAAE,KAAK;oBACT,SAAS,EAAE,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;oBAC3C,KAAK,EAAE;wBACL,IAAI,EAAE,cAAc;wBACpB,OAAO,EAAE,0DAA0D;wBACnE,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,IAAI,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE;qBAC1D;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,IAAI,GAA6C,CAAC;QAClD,IAAI,UAAU,EAAE,aAAa,EAAE,CAAC;YAC9B,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;YACxD,GAAG,GAAG,cAAc,CAClB,MAAM,UAAU,CAAC,aAAa,CAAC;gBAC7B,IAAI;gBACJ,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,SAAS,EAAE,SAAS;gBACpB,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI;aACpB,CAAC,EACF,UAAU,CAAC,QAAQ,CACpB,CAAC;YACF,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;YAExD,qEAAqE;YACrE,wEAAwE;YACxE,sEAAsE;YACtE,wEAAwE;YACxE,gEAAgE;YAChE,sEAAsE;YACtE,iEAAiE;YACjE,qEAAqE;YACrE,IAAI,GAAG,EAAE,MAAM,KAAK,UAAU,IAAI,GAAG,EAAE,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC1D,OAAO,cAAc,CAAC;oBACpB,EAAE,EAAE,KAAK;oBACT,SAAS,EAAE,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;oBAC3C,UAAU,EAAE,GAAG;oBACf,KAAK,EACH,GAAG,CAAC,MAAM,KAAK,OAAO;wBACpB,CAAC,CAAC;4BACE,IAAI,EAAE,mBAAmB;4BACzB,OAAO,EAAE,oCAAoC;4BAC7C,OAAO,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,kBAAkB,EAAE;yBAChE;wBACH,CAAC,CAAC;4BACE,IAAI,EAAE,UAAU;4BAChB,OAAO,EAAE,yBAAyB;4BAClC,OAAO,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE;yBAClF;iBACR,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,YAAY,CAC/B,IAAI,EACJ;YACE,SAAS;YACT,cAAc;YACd,SAAS,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI;SACzB,EACD,EAAE,MAAM,EAAE,UAAU,EAAE,CACvB,CAAC;QAEF,8CAA8C;QAC9C,IAAI,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;YACxC,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,QAAQ,IAAI,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,gBAAgB;YAChG,MAAM,UAAU,GACd,IAAI,CAAC,mBAAmB,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,QAAQ,IAAI,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,gBAAgB;YAEzG,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC/B,IAAI,CAAC,CAAC,CAAC,IAAI;oBAAE,SAAS;gBACtB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;gBACjC,KAAK,IAAI,IAAI,CAAC;gBACd,IAAI,CAAC,CAAC,CAAC,SAAS;oBAAE,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC;gBACrC,IAAI,IAAI,GAAG,YAAY,EAAE,CAAC;oBACxB,OAAO,cAAc,CAAC;wBACpB,EAAE,EAAE,KAAK;wBACT,SAAS,EAAE,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;wBAC3C,KAAK,EAAE;4BACL,IAAI,EAAE,WAAW;4BACjB,OAAO,EAAE,wCAAwC;4BACjD,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE;yBACnE;qBACF,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,KAAK,GAAG,UAAU,EAAE,CAAC;oBACvB,OAAO,cAAc,CAAC;wBACpB,EAAE,EAAE,KAAK;wBACT,SAAS,EAAE,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;wBAC3C,KAAK,EAAE;4BACL,IAAI,EAAE,WAAW;4BACjB,OAAO,EAAE,8CAA8C;4BACvD,OAAO,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE;yBACvD;qBACF,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;YAC1C,IAAI,GAAG;gBAAE,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC;YACjC,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC5D,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;QAED,uEAAuE;QACvE,qEAAqE;QACrE,8DAA8D;QAC9D,iDAAiD;QACjD,IAAI,IAA8C,CAAC;QACnD,IAAI,UAAU,EAAE,cAAc,EAAE,CAAC;YAC/B,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;YACzD,IAAI,GAAG,cAAc,CACnB,MAAM,UAAU,CAAC,cAAc,CAAC;gBAC9B,IAAI;gBACJ,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;qBAC5B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;qBACvB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,IAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;aAClE,CAAC,EACF,UAAU,CAAC,QAAQ,CACpB,CAAC;YACF,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;YAEzD,qEAAqE;YACrE,uEAAuE;YACvE,+DAA+D;YAC/D,6CAA6C;YAC7C,IAAI,IAAI,EAAE,MAAM,KAAK,UAAU,IAAI,IAAI,EAAE,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC5D,OAAO,cAAc,CAAC;oBACpB,EAAE,EAAE,KAAK;oBACT,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,UAAU,EAAE,IAAI;oBAChB,KAAK,EACH,IAAI,CAAC,MAAM,KAAK,OAAO;wBACrB,CAAC,CAAC;4BACE,IAAI,EAAE,mBAAmB;4BACzB,OAAO,EAAE,oCAAoC;4BAC7C,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,kBAAkB,EAAE;yBACjE;wBACH,CAAC,CAAC;4BACE,IAAI,EAAE,UAAU;4BAChB,OAAO,EAAE,yBAAyB;4BAClC,OAAO,EAAE;gCACP,QAAQ,EAAE,IAAI,CAAC,QAAQ;gCACvB,OAAO,EAAE,IAAI,CAAC,OAAO;gCACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;6BACxB;yBACF;iBACR,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,wEAAwE;QACxE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;QACvC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpB,OAAO,cAAc,CAAC;oBACpB,EAAE,EAAE,KAAK;oBACT,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,KAAK,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,sBAAsB,EAAE;iBACxE,CAAC,CAAC;YACL,CAAC;YACD,UAAU,EAAE,CAAC;gBACX,KAAK,EAAE,iBAAiB;gBACxB,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;gBACzC,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE;aACzB,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,IAAI;gBAAE,SAAS;YACxB,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;YACnE,IAAI,SAAS,CAAC,GAAG;gBAAE,GAAG,CAAC,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC;YAC3C,IAAI,SAAS,CAAC,IAAI;gBAAE,GAAG,CAAC,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;YAC9C,MAAM,IAAI,CAAC,CAAC;QACd,CAAC;QACD,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QAEvD,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,IAAI,SAAS,EAAE,IAAI,IAAI,SAAS,CAAC,CAAC;QACpE,IAAI,MAAM;YAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC;QAEvC,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QAE5C,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;IACrB,CAAC;AACH,CAAC","sourcesContent":["import type {\n  MediaProcessingResult,\n  MediaProcessingSpec,\n  MediaModerationResult,\n  MediaInspectionResult,\n  MediaProcessingError,\n} from '@ttt-productions/media-schemas';\nimport { parseMediaProcessingSpec } from '@ttt-productions/media-schemas';\nimport { createTempWorkspace } from './workspace/temp.js';\nimport { processMedia } from './process-media.js';\nimport { inspectMedia, type InspectMediaDeps } from './inspection/inspect-media.js';\nimport type { MediaIO } from './io/types.js';\nimport type { ModerationAdapter } from './moderation/types.js';\nimport { mergeModeration } from './moderation/merge.js';\nimport path from 'node:path';\nimport { stat } from 'node:fs/promises';\n\nexport interface RunPipelineArgs {\n  spec: MediaProcessingSpec;\n  io: MediaIO;\n  outputBaseName?: string;\n  moderation?: ModerationAdapter;\n  signal?: AbortSignal;\n  onProgress?: (p: import('./types.js').MediaPipelineProgress) => void;\n  /**\n   * CANONICAL INSPECTION SEAM (canonical-upload-content-classification).\n   * When present, the pipeline runs `inspectMedia` on the just-downloaded temp\n   * input — BEFORE moderation and processing — and calls this policy hook with\n   * the bounded result. The hook either:\n   *   - returns `{ spec }` — the caller's policy adapter selected the\n   *     processing spec FROM the inspection (the byte-derived kind, never the\n   *     client MIME); the pipeline continues with that spec; or\n   *   - returns `{ reject }` — a typed terminal (`kind_mismatch`,\n   *     `unsupported_format`, `unsupported_codec`, …); the pipeline stops\n   *     before any transcode/moderation work.\n   * The inspection result rides the returned `MediaProcessingResult.inspection`\n   * either way, so the finalizer hands the SAME object to the safety gate —\n   * one authority, no re-detection. Callers that omit the hook get the\n   * pre-existing behavior unchanged.\n   */\n  resolveAfterInspection?: (\n    inspection: MediaInspectionResult,\n  ) =>\n    | Promise<{ spec: MediaProcessingSpec } | { reject: MediaProcessingError }>\n    | ({ spec: MediaProcessingSpec } | { reject: MediaProcessingError });\n  /** Inspection tool overrides (tests). */\n  inspectionDeps?: InspectMediaDeps;\n}\n\nfunction mediaTypeFromSpecKind(\n  kind: MediaProcessingSpec['kind'],\n): 'image' | 'video' | 'audio' | 'other' {\n  if (kind === 'image') return 'image';\n  if (kind === 'video') return 'video';\n  if (kind === 'audio') return 'audio';\n  return 'other';\n}\n\nfunction attachProvider(\n  m: MediaModerationResult | null | undefined,\n  provider?: string,\n): MediaModerationResult | null | undefined {\n  if (!m) return m;\n  return { ...m, provider: m.provider ?? provider, reviewedAt: m.reviewedAt ?? Date.now() };\n}\n\nexport async function runMediaPipeline(args: RunPipelineArgs): Promise<MediaProcessingResult> {\n  let { spec } = args;\n  const {\n    io,\n    outputBaseName = 'media',\n    moderation,\n    signal,\n    onProgress,\n    resolveAfterInspection,\n  } = args;\n  // Carried onto every return path once produced — the finalizer must hand the\n  // SAME inspection object to the safety gate (one classification authority).\n  let inspection: MediaInspectionResult | undefined;\n  const withInspection = (r: MediaProcessingResult): MediaProcessingResult =>\n    inspection ? { ...r, inspection } : r;\n\n  if (signal?.aborted) {\n    return {\n      ok: false,\n      mediaType: mediaTypeFromSpecKind(spec.kind),\n      error: { code: 'processing_canceled', message: 'Processing canceled.' },\n    };\n  }\n\n  // Runtime contract validation (fast-fail with actionable errors).\n  try {\n    spec = parseMediaProcessingSpec(spec);\n  } catch (e: any) {\n    return {\n      ok: false,\n      mediaType: mediaTypeFromSpecKind(spec.kind),\n      error: {\n        code: 'invalid_spec',\n        message: 'Invalid MediaProcessingSpec.',\n        details: { issues: e?.issues ?? e?.message ?? String(e) },\n      },\n    };\n  }\n\n  const ws = await createTempWorkspace();\n\n  try {\n    const inputPath = path.join(ws.dir, 'input');\n    const outputBasePath = path.join(ws.dir, outputBaseName);\n\n    if (signal?.aborted) {\n      return {\n        ok: false,\n        mediaType: mediaTypeFromSpecKind(spec.kind),\n        error: { code: 'processing_canceled', message: 'Processing canceled.' },\n      };\n    }\n    onProgress?.({ phase: 'read_input', percent: 0 });\n    await io.input.readToFile(inputPath);\n    onProgress?.({ phase: 'read_input', percent: 1 });\n\n    // CANONICAL INSPECTION (before moderation and processing): classify the\n    // just-downloaded bytes structurally and let the caller's policy adapter\n    // pick the spec from the result. See RunPipelineArgs.resolveAfterInspection.\n    if (resolveAfterInspection) {\n      inspection = await inspectMedia({\n        localPath: inputPath,\n        ...(signal ? { signal } : {}),\n        ...(args.inspectionDeps ? { deps: args.inspectionDeps } : {}),\n      });\n      const resolution = await resolveAfterInspection(inspection);\n      if ('reject' in resolution) {\n        return withInspection({\n          ok: false,\n          mediaType: mediaTypeFromSpecKind(spec.kind),\n          error: resolution.reject,\n        });\n      }\n      try {\n        spec = parseMediaProcessingSpec(resolution.spec);\n      } catch (e: any) {\n        return withInspection({\n          ok: false,\n          mediaType: mediaTypeFromSpecKind(spec.kind),\n          error: {\n            code: 'invalid_spec',\n            message: 'Invalid MediaProcessingSpec from resolveAfterInspection.',\n            details: { issues: e?.issues ?? e?.message ?? String(e) },\n          },\n        });\n      }\n    }\n\n    // PRE moderation (original)\n    let mIn: MediaModerationResult | null | undefined;\n    if (moderation?.moderateInput) {\n      onProgress?.({ phase: 'moderation_input', percent: 0 });\n      mIn = attachProvider(\n        await moderation.moderateInput({\n          spec,\n          kind: spec.kind,\n          localPath: inputPath,\n          mime: io.input.mime,\n        }),\n        moderation.provider,\n      );\n      onProgress?.({ phase: 'moderation_input', percent: 1 });\n\n      // Fail closed on both \"rejected\" (policy violation) and \"error\" (the\n      // moderation check itself did not complete — quota/outage/API failure).\n      // A non-passing check must NEVER fall through to transcode + persist:\n      // published bytes must always have been scanned. An \"error\" is a system\n      // failure, not a content rejection, so it returns the distinct,\n      // retryable `processing_failed` code AND carries `moderation` (status\n      // \"error\") on the result — callers route that to their retryable\n      // moderation lane and land the row failed rather than publishing it.\n      if (mIn?.status === 'rejected' || mIn?.status === 'error') {\n        return withInspection({\n          ok: false,\n          mediaType: mediaTypeFromSpecKind(spec.kind),\n          moderation: mIn,\n          error:\n            mIn.status === 'error'\n              ? {\n                  code: 'processing_failed',\n                  message: 'Moderation check did not complete.',\n                  details: { provider: mIn.provider, reason: 'moderation_error' },\n                }\n              : {\n                  code: 'rejected',\n                  message: 'Rejected by moderation.',\n                  details: { provider: mIn.provider, reasons: mIn.reasons, findings: mIn.findings },\n                },\n        });\n      }\n    }\n\n    const result = await processMedia(\n      spec,\n      {\n        inputPath,\n        outputBasePath,\n        inputMime: io.input.mime,\n      },\n      { signal, onProgress },\n    );\n\n    // Output size enforcement (processed outputs)\n    if (result.ok && result.outputs?.length) {\n      const perFileLimit = spec.maxOutputBytes ?? spec.maxBytes ?? 200 * 1024 * 1024; // 200MB default\n      const totalLimit =\n        spec.maxTotalOutputBytes ?? spec.maxOutputBytes ?? spec.maxBytes ?? 400 * 1024 * 1024; // 400MB default\n\n      let total = 0;\n      for (const o of result.outputs) {\n        if (!o.path) continue;\n        const s = await stat(o.path);\n        const size = Number(s.size ?? 0);\n        total += size;\n        if (!o.sizeBytes) o.sizeBytes = size;\n        if (size > perFileLimit) {\n          return withInspection({\n            ok: false,\n            mediaType: mediaTypeFromSpecKind(spec.kind),\n            error: {\n              code: 'too_large',\n              message: 'Processed output exceeds allowed size.',\n              details: { key: o.key, sizeBytes: size, limitBytes: perFileLimit },\n            },\n          });\n        }\n        if (total > totalLimit) {\n          return withInspection({\n            ok: false,\n            mediaType: mediaTypeFromSpecKind(spec.kind),\n            error: {\n              code: 'too_large',\n              message: 'Total processed outputs exceed allowed size.',\n              details: { totalBytes: total, limitBytes: totalLimit },\n            },\n          });\n        }\n      }\n    }\n\n    if (!result.ok || !result.outputs?.length) {\n      if (mIn) result.moderation = mIn;\n      onProgress?.({ phase: 'done', percent: result.ok ? 1 : 0 });\n      return withInspection(result);\n    }\n\n    // POST moderation (processed outputs) — runs on the LOCAL output paths\n    // BEFORE any final persistence, so rejected output never reaches the\n    // final store (R2 / emulator). Ordering is load-bearing — see\n    // the consuming app's media-serving design docs.\n    let mOut: MediaModerationResult | null | undefined;\n    if (moderation?.moderateOutput) {\n      onProgress?.({ phase: 'moderation_output', percent: 0 });\n      mOut = attachProvider(\n        await moderation.moderateOutput({\n          spec,\n          kind: spec.kind,\n          outputs: (result.outputs ?? [])\n            .filter((o) => !!o.path)\n            .map((o) => ({ key: o.key, localPath: o.path!, mime: o.mime })),\n        }),\n        moderation.provider,\n      );\n      onProgress?.({ phase: 'moderation_output', percent: 1 });\n\n      // Same fail-closed posture as the input check: block both \"rejected\"\n      // and \"error\" before any persistence, so an incomplete check can never\n      // publish unscanned output. Ordering is load-bearing — see the\n      // consuming app's media-serving design docs.\n      if (mOut?.status === 'rejected' || mOut?.status === 'error') {\n        return withInspection({\n          ok: false,\n          mediaType: result.mediaType,\n          moderation: mOut,\n          error:\n            mOut.status === 'error'\n              ? {\n                  code: 'processing_failed',\n                  message: 'Moderation check did not complete.',\n                  details: { provider: mOut.provider, reason: 'moderation_error' },\n                }\n              : {\n                  code: 'rejected',\n                  message: 'Rejected by moderation.',\n                  details: {\n                    provider: mOut.provider,\n                    reasons: mOut.reasons,\n                    findings: mOut.findings,\n                  },\n                },\n        });\n      }\n    }\n\n    // Persist outputs — only after input AND output moderation both passed.\n    onProgress?.({ phase: 'persist_outputs', percent: 0 });\n    const totalOut = result.outputs.length;\n    let outIdx = 0;\n    for (const out of result.outputs) {\n      if (signal?.aborted) {\n        return withInspection({\n          ok: false,\n          mediaType: result.mediaType,\n          error: { code: 'processing_canceled', message: 'Processing canceled.' },\n        });\n      }\n      onProgress?.({\n        phase: 'persist_outputs',\n        percent: totalOut ? outIdx / totalOut : 0,\n        detail: { key: out.key },\n      });\n      if (!out.path) continue;\n      const persisted = await io.output.writeFromFile(out.path, out.key);\n      if (persisted.url) out.url = persisted.url;\n      if (persisted.path) out.path = persisted.path;\n      outIdx += 1;\n    }\n    onProgress?.({ phase: 'persist_outputs', percent: 1 });\n\n    const merged = mergeModeration(mIn ?? undefined, mOut ?? undefined);\n    if (merged) result.moderation = merged;\n\n    onProgress?.({ phase: 'done', percent: 1 });\n\n    return withInspection(result);\n  } finally {\n    await ws.cleanup();\n  }\n}\n"]}

package/dist/server/download-token.d.ts

@@ -0,0 +1,14 @@
+/** The one method of a Storage object handle this module uses. */
+export interface DownloadTokenWritable {
+    setMetadata(update: {
+        metadata: Record<string, string | null>;
+    }): Promise<unknown>;
+}
+/** True when the object's stored metadata still carries a download token. */
+export declare function hasDownloadToken(objectMetadata: Readonly<Record<string, unknown>> | undefined): boolean;
+/**
+ * Remove the object's download token and nothing else: a null custom-metadata value deletes that
+ * one key, leaving every other entry. A no-op write when the object has none.
+ */
+export declare function removeDownloadToken(file: DownloadTokenWritable): Promise<void>;
+//# sourceMappingURL=download-token.d.ts.map

package/dist/server/download-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"download-token.d.ts","sourceRoot":"","sources":["../../src/server/download-token.ts"],"names":[],"mappings":"AAKA,kEAAkE;AAClE,MAAM,WAAW,qBAAqB;IACpC,WAAW,CAAC,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACpF;AAKD,6EAA6E;AAC7E,wBAAgB,gBAAgB,CAC9B,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS,GAC5D,OAAO,CAGT;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAEpF"}

package/dist/server/download-token.js

@@ -0,0 +1,19 @@
+// The one remover of a Storage object's Firebase download token. The Firebase Storage client gives
+// every object it uploads a `firebaseStorageDownloadTokens` metadata entry: a never-expiring link
+// that reads the object signed out, around the Storage rules. An app that serves no object through
+// one removes it as soon as the server takes the object over.
+/** The custom-metadata key the Firebase Storage client writes on upload. */
+const DOWNLOAD_TOKENS_KEY = 'firebaseStorageDownloadTokens';
+/** True when the object's stored metadata still carries a download token. */
+export function hasDownloadToken(objectMetadata) {
+    const custom = objectMetadata?.['metadata'];
+    return typeof custom === 'object' && custom !== null && DOWNLOAD_TOKENS_KEY in custom;
+}
+/**
+ * Remove the object's download token and nothing else: a null custom-metadata value deletes that
+ * one key, leaving every other entry. A no-op write when the object has none.
+ */
+export async function removeDownloadToken(file) {
+    await file.setMetadata({ metadata: { [DOWNLOAD_TOKENS_KEY]: null } });
+}
+//# sourceMappingURL=download-token.js.map

package/dist/server/download-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"download-token.js","sourceRoot":"","sources":["../../src/server/download-token.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,kGAAkG;AAClG,mGAAmG;AACnG,8DAA8D;AAO9D,4EAA4E;AAC5E,MAAM,mBAAmB,GAAG,+BAA+B,CAAC;AAE5D,6EAA6E;AAC7E,MAAM,UAAU,gBAAgB,CAC9B,cAA6D;IAE7D,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC,UAAU,CAAC,CAAC;IAC5C,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,mBAAmB,IAAI,MAAM,CAAC;AACxF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAA2B;IACnE,MAAM,IAAI,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;AACxE,CAAC","sourcesContent":["// The one remover of a Storage object's Firebase download token. The Firebase Storage client gives\n// every object it uploads a `firebaseStorageDownloadTokens` metadata entry: a never-expiring link\n// that reads the object signed out, around the Storage rules. An app that serves no object through\n// one removes it as soon as the server takes the object over.\n\n/** The one method of a Storage object handle this module uses. */\nexport interface DownloadTokenWritable {\n  setMetadata(update: { metadata: Record<string, string | null> }): Promise<unknown>;\n}\n\n/** The custom-metadata key the Firebase Storage client writes on upload. */\nconst DOWNLOAD_TOKENS_KEY = 'firebaseStorageDownloadTokens';\n\n/** True when the object's stored metadata still carries a download token. */\nexport function hasDownloadToken(\n  objectMetadata: Readonly<Record<string, unknown>> | undefined,\n): boolean {\n  const custom = objectMetadata?.['metadata'];\n  return typeof custom === 'object' && custom !== null && DOWNLOAD_TOKENS_KEY in custom;\n}\n\n/**\n * Remove the object's download token and nothing else: a null custom-metadata value deletes that\n * one key, leaving every other entry. A no-op write when the object has none.\n */\nexport async function removeDownloadToken(file: DownloadTokenWritable): Promise<void> {\n  await file.setMetadata({ metadata: { [DOWNLOAD_TOKENS_KEY]: null } });\n}\n"]}

package/dist/server/firebase-media-io.d.ts

@@ -1,5 +1,5 @@
-import type { MediaIO } from "../io/types.js";
-import type { MediaObjectStore } from "./storage-ops.js";
+import type { MediaIO } from '../io/types.js';
+import type { MediaObjectStore } from './storage-ops.js';
 export interface CreateObjectStoreMediaIOArgs {
     /** Firebase Storage staging path of the uploaded source file. */
     inputStoragePath: string;

package/dist/server/firebase-media-io.js

@@ -3,7 +3,7 @@
 // environment (see storage-ops.ts). Output keys are extension-less:
 // `${outputKeyPrefix}/${outputKey}` — meaning lives in the asset registry,
 // not the key. Writes return the object key; no URLs anywhere.
-import { getStorage } from "firebase-admin/storage";
+import { getStorage } from 'firebase-admin/storage';
 export function createObjectStoreMediaIO(args) {
     const bucket = getStorage().bucket();
     return {

package/dist/server/firebase-media-io.js.map

@@ -1 +1 @@
-{"version":3,"file":"firebase-media-io.js","sourceRoot":"","sources":["../../src/server/firebase-media-io.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,gFAAgF;AAChF,oEAAoE;AACpE,2EAA2E;AAC3E,+DAA+D;AAE/D,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAuBpD,MAAM,UAAU,wBAAwB,CAAC,IAAkC;IACzE,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC,MAAM,EAAE,CAAC;IAErC,OAAO;QACL,KAAK,EAAE;YACL,IAAI,EAAE,IAAI,CAAC,SAAS;YACpB,KAAK,CAAC,UAAU,CAAC,SAAiB;gBAChC,MAAM,IAAI,GACR,IAAI,CAAC,eAAe,IAAI,IAAI;oBAC1B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC;oBAC1E,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;gBACzC,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;YAClD,CAAC;SACF;QACD,MAAM,EAAE;YACN,KAAK,CAAC,aAAa,CAAC,SAAiB,EAAE,SAAiB;gBACtD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,eAAe,IAAI,SAAS,EAAE,CAAC;gBACnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;gBAClE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;YAC9B,CAAC;SACF;KACF,CAAC;AACJ,CAAC","sourcesContent":["// MediaIO adapter: reads the staged upload from Firebase Storage, writes\n// processed outputs through whichever MediaObjectStore the app selected for the\n// environment (see storage-ops.ts). Output keys are extension-less:\n// `${outputKeyPrefix}/${outputKey}` — meaning lives in the asset registry,\n// not the key. Writes return the object key; no URLs anywhere.\n\nimport { getStorage } from \"firebase-admin/storage\";\nimport type { MediaIO } from \"../io/types.js\";\nimport type { MediaObjectStore } from \"./storage-ops.js\";\n\nexport interface CreateObjectStoreMediaIOArgs {\n  /** Firebase Storage staging path of the uploaded source file. */\n  inputStoragePath: string;\n  /** Store receiving the processed outputs. */\n  outputStore: MediaObjectStore;\n  /** Key prefix for outputs, e.g. `mediaAssets/{mediaAssetId}`. */\n  outputKeyPrefix: string;\n  /** Optional mime hint for the input. */\n  inputMime?: string;\n  /**\n   * Optional object generation to pin the input download to. When set, the\n   * download resolves the exact immutable generation of the staged object\n   * (per GCS generation-precondition semantics), so a concurrent overwrite of\n   * the source path cannot swap the bytes that get read. Accepts the numeric\n   * generation or its string form (GCS generations exceed 2^53).\n   */\n  inputGeneration?: string | number;\n}\n\nexport function createObjectStoreMediaIO(args: CreateObjectStoreMediaIOArgs): MediaIO {\n  const bucket = getStorage().bucket();\n\n  return {\n    input: {\n      mime: args.inputMime,\n      async readToFile(localPath: string) {\n        const file =\n          args.inputGeneration != null\n            ? bucket.file(args.inputStoragePath, { generation: args.inputGeneration })\n            : bucket.file(args.inputStoragePath);\n        await file.download({ destination: localPath });\n      },\n    },\n    output: {\n      async writeFromFile(localPath: string, outputKey: string) {\n        const key = `${args.outputKeyPrefix}/${outputKey}`;\n        const result = await args.outputStore.putFile({ localPath, key });\n        return { path: result.key };\n      },\n    },\n  };\n}\n"]}
+{"version":3,"file":"firebase-media-io.js","sourceRoot":"","sources":["../../src/server/firebase-media-io.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,gFAAgF;AAChF,oEAAoE;AACpE,2EAA2E;AAC3E,+DAA+D;AAE/D,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAuBpD,MAAM,UAAU,wBAAwB,CAAC,IAAkC;IACzE,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC,MAAM,EAAE,CAAC;IAErC,OAAO;QACL,KAAK,EAAE;YACL,IAAI,EAAE,IAAI,CAAC,SAAS;YACpB,KAAK,CAAC,UAAU,CAAC,SAAiB;gBAChC,MAAM,IAAI,GACR,IAAI,CAAC,eAAe,IAAI,IAAI;oBAC1B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC;oBAC1E,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;gBACzC,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;YAClD,CAAC;SACF;QACD,MAAM,EAAE;YACN,KAAK,CAAC,aAAa,CAAC,SAAiB,EAAE,SAAiB;gBACtD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,eAAe,IAAI,SAAS,EAAE,CAAC;gBACnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;gBAClE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;YAC9B,CAAC;SACF;KACF,CAAC;AACJ,CAAC","sourcesContent":["// MediaIO adapter: reads the staged upload from Firebase Storage, writes\n// processed outputs through whichever MediaObjectStore the app selected for the\n// environment (see storage-ops.ts). Output keys are extension-less:\n// `${outputKeyPrefix}/${outputKey}` — meaning lives in the asset registry,\n// not the key. Writes return the object key; no URLs anywhere.\n\nimport { getStorage } from 'firebase-admin/storage';\nimport type { MediaIO } from '../io/types.js';\nimport type { MediaObjectStore } from './storage-ops.js';\n\nexport interface CreateObjectStoreMediaIOArgs {\n  /** Firebase Storage staging path of the uploaded source file. */\n  inputStoragePath: string;\n  /** Store receiving the processed outputs. */\n  outputStore: MediaObjectStore;\n  /** Key prefix for outputs, e.g. `mediaAssets/{mediaAssetId}`. */\n  outputKeyPrefix: string;\n  /** Optional mime hint for the input. */\n  inputMime?: string;\n  /**\n   * Optional object generation to pin the input download to. When set, the\n   * download resolves the exact immutable generation of the staged object\n   * (per GCS generation-precondition semantics), so a concurrent overwrite of\n   * the source path cannot swap the bytes that get read. Accepts the numeric\n   * generation or its string form (GCS generations exceed 2^53).\n   */\n  inputGeneration?: string | number;\n}\n\nexport function createObjectStoreMediaIO(args: CreateObjectStoreMediaIOArgs): MediaIO {\n  const bucket = getStorage().bucket();\n\n  return {\n    input: {\n      mime: args.inputMime,\n      async readToFile(localPath: string) {\n        const file =\n          args.inputGeneration != null\n            ? bucket.file(args.inputStoragePath, { generation: args.inputGeneration })\n            : bucket.file(args.inputStoragePath);\n        await file.download({ destination: localPath });\n      },\n    },\n    output: {\n      async writeFromFile(localPath: string, outputKey: string) {\n        const key = `${args.outputKeyPrefix}/${outputKey}`;\n        const result = await args.outputStore.putFile({ localPath, key });\n        return { path: result.key };\n      },\n    },\n  };\n}\n"]}

package/dist/server/gcs-errors.js

@@ -1,4 +1,4 @@
-import { R2StorageError } from "./r2-retry.js";
+import { R2StorageError } from './r2-retry.js';
 /**
  * True when a storage read or delete failed because the object does not exist, from
  * either backend this package's stores use, decided from structured fields only — never
@@ -9,7 +9,7 @@ import { R2StorageError } from "./r2-retry.js";
  */
 export function isObjectNotFoundError(e) {
     if (e instanceof R2StorageError)
-        return e.status === 404 && e.s3ErrorCode === "NoSuchKey";
+        return e.status === 404 && e.s3ErrorCode === 'NoSuchKey';
     return e?.code === 404;
 }
 //# sourceMappingURL=gcs-errors.js.map

package/dist/server/gcs-errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"gcs-errors.js","sourceRoot":"","sources":["../../src/server/gcs-errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,CAAU;IAC9C,IAAI,CAAC,YAAY,cAAc;QAAE,OAAO,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC;IAC1F,OAAQ,CAA2C,EAAE,IAAI,KAAK,GAAG,CAAC;AACpE,CAAC","sourcesContent":["import { R2StorageError } from \"./r2-retry.js\";\n\n/**\n * True when a storage read or delete failed because the object does not exist, from\n * either backend this package's stores use, decided from structured fields only — never\n * from message text, which a library may rewrite and which carries no contract. The R2\n * store's `R2StorageError` answers with status `404` and S3 error code `NoSuchKey`, which\n * tells a missing key from a missing bucket (`NoSuchBucket`); the Cloud Storage Admin SDK\n * answers with the numeric HTTP code `404`.\n */\nexport function isObjectNotFoundError(e: unknown): boolean {\n  if (e instanceof R2StorageError) return e.status === 404 && e.s3ErrorCode === \"NoSuchKey\";\n  return (e as { code?: unknown } | null | undefined)?.code === 404;\n}\n"]}
+{"version":3,"file":"gcs-errors.js","sourceRoot":"","sources":["../../src/server/gcs-errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,CAAU;IAC9C,IAAI,CAAC,YAAY,cAAc;QAAE,OAAO,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC;IAC1F,OAAQ,CAA2C,EAAE,IAAI,KAAK,GAAG,CAAC;AACpE,CAAC","sourcesContent":["import { R2StorageError } from './r2-retry.js';\n\n/**\n * True when a storage read or delete failed because the object does not exist, from\n * either backend this package's stores use, decided from structured fields only — never\n * from message text, which a library may rewrite and which carries no contract. The R2\n * store's `R2StorageError` answers with status `404` and S3 error code `NoSuchKey`, which\n * tells a missing key from a missing bucket (`NoSuchBucket`); the Cloud Storage Admin SDK\n * answers with the numeric HTTP code `404`.\n */\nexport function isObjectNotFoundError(e: unknown): boolean {\n  if (e instanceof R2StorageError) return e.status === 404 && e.s3ErrorCode === 'NoSuchKey';\n  return (e as { code?: unknown } | null | undefined)?.code === 404;\n}\n"]}

package/dist/server/index.d.ts

@@ -1,6 +1,8 @@
-export * from "./storage-ops.js";
-export * from "./firebase-media-io.js";
-export * from "./pending-media.js";
-export * from "./staged-object.js";
-export * from "./gcs-errors.js";
+export * from './storage-ops.js';
+export { R2StorageError } from './r2-retry.js';
+export * from './firebase-media-io.js';
+export * from './pending-media.js';
+export * from './staged-object.js';
+export * from './gcs-errors.js';
+export * from './download-token.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,cAAc,wBAAwB,CAAC;AACvC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC"}

package/dist/server/index.js

@@ -1,6 +1,8 @@
-export * from "./storage-ops.js";
-export * from "./firebase-media-io.js";
-export * from "./pending-media.js";
-export * from "./staged-object.js";
-export * from "./gcs-errors.js";
+export * from './storage-ops.js';
+export { R2StorageError } from './r2-retry.js';
+export * from './firebase-media-io.js';
+export * from './pending-media.js';
+export * from './staged-object.js';
+export * from './gcs-errors.js';
+export * from './download-token.js';
 //# sourceMappingURL=index.js.map

package/dist/server/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC","sourcesContent":["export * from \"./storage-ops.js\";\nexport * from \"./firebase-media-io.js\";\nexport * from \"./pending-media.js\";\nexport * from \"./staged-object.js\";\nexport * from \"./gcs-errors.js\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,cAAc,wBAAwB,CAAC;AACvC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC","sourcesContent":["export * from './storage-ops.js';\nexport { R2StorageError } from './r2-retry.js';\nexport * from './firebase-media-io.js';\nexport * from './pending-media.js';\nexport * from './staged-object.js';\nexport * from './gcs-errors.js';\nexport * from './download-token.js';\n"]}

package/dist/server/pending-media.d.ts

@@ -1,5 +1,5 @@
-import type { DocumentReference, DocumentSnapshot, Firestore, Transaction } from "firebase-admin/firestore";
-import { type ClaimablePendingMedia, type PendingMediaClaimOutcome, type PendingMediaClaimPolicy, type PendingMediaFinalizeResult, type PendingMediaTerminalStatus } from "@ttt-productions/media-schemas";
+import type { DocumentReference, DocumentSnapshot, Firestore, Transaction } from 'firebase-admin/firestore';
+import { type ClaimablePendingMedia, type PendingMediaClaimOutcome, type PendingMediaClaimPolicy, type PendingMediaFinalizeResult, type PendingMediaTerminalStatus } from '@ttt-productions/media-schemas';
 /** The app's pending-media row schema — anything with zod's `safeParse` shape. */
 export interface PendingMediaRowParser<TRow> {
     safeParse(data: unknown): {

package/dist/server/pending-media.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pending-media.d.ts","sourceRoot":"","sources":["../../src/server/pending-media.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC5G,OAAO,EAML,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,0BAA0B,EAC/B,KAAK,0BAA0B,EAChC,MAAM,gCAAgC,CAAC;AAMxC,kFAAkF;AAClF,MAAM,WAAW,qBAAqB,CAAC,IAAI;IACzC,SAAS,CAAC,IAAI,EAAE,OAAO,GAAG;QAAE,OAAO,EAAE,IAAI,CAAC;QAAC,IAAI,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,OAAO,EAAE,KAAK,CAAA;KAAE,CAAC;CAC9E;AAED,MAAM,WAAW,wBAAwB,CAAC,IAAI;IAC5C,MAAM,EAAE,qBAAqB,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,EAAE,uBAAuB,CAAC;IAChC,0CAA0C;IAC1C,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,wBAAsB,8BAA8B,CAAC,IAAI,SAAS,qBAAqB,EACrF,WAAW,EAAE,WAAW,EACxB,eAAe,EAAE,iBAAiB,EAClC,OAAO,EAAE,wBAAwB,CAAC,IAAI,CAAC,GACtC,OAAO,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAWzC;AAMD,MAAM,WAAW,2BAA2B;IAC1C,YAAY,EAAE,0BAA0B,CAAC;IACzC,oFAAoF;IACpF,UAAU,EAAE,OAAO,CAAC;CACrB;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,uBAAuB,CAAC,MAAM,IAAI,CAC5C,WAAW,EAAE,WAAW,EACxB,QAAQ,EAAE,gBAAgB,EAC1B,OAAO,EAAE,2BAA2B,KACjC,OAAO,CAAC,CAAC,MAAM,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC;AAEzC,MAAM,WAAW,2BAA2B,CAAC,MAAM;IACjD,sFAAsF;IACtF,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,WAAW,CAAC,EAAE,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAC9C,0CAA0C;IAC1C,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,2BAA2B,CAAC,MAAM,CAAE,SAAQ,0BAA0B;IACrF,mFAAmF;IACnF,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,wBAAsB,iCAAiC,CAAC,MAAM,GAAG,KAAK,EACpE,WAAW,EAAE,WAAW,EACxB,GAAG,EAAE,iBAAiB,EACtB,YAAY,EAAE,0BAA0B,EACxC,OAAO,GAAE,2BAA2B,CAAC,MAAM,CAAM,GAChD,OAAO,CAAC,2BAA2B,CAAC,MAAM,CAAC,CAAC,CAW9C;AAED,mEAAmE;AACnE,wBAAgB,oBAAoB,CAAC,MAAM,GAAG,KAAK,EACjD,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,iBAAiB,EACtB,YAAY,EAAE,0BAA0B,EACxC,OAAO,GAAE,2BAA2B,CAAC,MAAM,CAAM,GAChD,OAAO,CAAC,2BAA2B,CAAC,MAAM,CAAC,CAAC,CAE9C;AAED;;;;;GAKG;AACH,wBAAsB,8BAA8B,CAAC,MAAM,GAAG,KAAK,EACjE,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,iBAAiB,EACtB,OAAO,GAAE,2BAA2B,CAAC,MAAM,CAAM,GAChD,OAAO,CAAC,IAAI,CAAC,CAYf"}
+{"version":3,"file":"pending-media.d.ts","sourceRoot":"","sources":["../../src/server/pending-media.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACV,iBAAiB,EACjB,gBAAgB,EAChB,SAAS,EACT,WAAW,EACZ,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAML,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,0BAA0B,EAC/B,KAAK,0BAA0B,EAChC,MAAM,gCAAgC,CAAC;AAMxC,kFAAkF;AAClF,MAAM,WAAW,qBAAqB,CAAC,IAAI;IACzC,SAAS,CAAC,IAAI,EAAE,OAAO,GAAG;QAAE,OAAO,EAAE,IAAI,CAAC;QAAC,IAAI,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,OAAO,EAAE,KAAK,CAAA;KAAE,CAAC;CAC9E;AAED,MAAM,WAAW,wBAAwB,CAAC,IAAI;IAC5C,MAAM,EAAE,qBAAqB,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,EAAE,uBAAuB,CAAC;IAChC,0CAA0C;IAC1C,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,wBAAsB,8BAA8B,CAAC,IAAI,SAAS,qBAAqB,EACrF,WAAW,EAAE,WAAW,EACxB,eAAe,EAAE,iBAAiB,EAClC,OAAO,EAAE,wBAAwB,CAAC,IAAI,CAAC,GACtC,OAAO,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAezC;AAMD,MAAM,WAAW,2BAA2B;IAC1C,YAAY,EAAE,0BAA0B,CAAC;IACzC,oFAAoF;IACpF,UAAU,EAAE,OAAO,CAAC;CACrB;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,uBAAuB,CAAC,MAAM,IAAI,CAC5C,WAAW,EAAE,WAAW,EACxB,QAAQ,EAAE,gBAAgB,EAC1B,OAAO,EAAE,2BAA2B,KACjC,OAAO,CAAC,CAAC,MAAM,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC;AAEzC,MAAM,WAAW,2BAA2B,CAAC,MAAM;IACjD,sFAAsF;IACtF,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,WAAW,CAAC,EAAE,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAC9C,0CAA0C;IAC1C,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,2BAA2B,CAAC,MAAM,CAAE,SAAQ,0BAA0B;IACrF,mFAAmF;IACnF,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,wBAAsB,iCAAiC,CAAC,MAAM,GAAG,KAAK,EACpE,WAAW,EAAE,WAAW,EACxB,GAAG,EAAE,iBAAiB,EACtB,YAAY,EAAE,0BAA0B,EACxC,OAAO,GAAE,2BAA2B,CAAC,MAAM,CAAM,GAChD,OAAO,CAAC,2BAA2B,CAAC,MAAM,CAAC,CAAC,CAqB9C;AAED,mEAAmE;AACnE,wBAAgB,oBAAoB,CAAC,MAAM,GAAG,KAAK,EACjD,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,iBAAiB,EACtB,YAAY,EAAE,0BAA0B,EACxC,OAAO,GAAE,2BAA2B,CAAC,MAAM,CAAM,GAChD,OAAO,CAAC,2BAA2B,CAAC,MAAM,CAAC,CAAC,CAI9C;AAED;;;;;GAKG;AACH,wBAAsB,8BAA8B,CAAC,MAAM,GAAG,KAAK,EACjE,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,iBAAiB,EACtB,OAAO,GAAE,2BAA2B,CAAC,MAAM,CAAM,GAChD,OAAO,CAAC,IAAI,CAAC,CAkBf"}

package/dist/server/pending-media.js

@@ -4,7 +4,7 @@
 // decide, and write. Everything app-specific is injected: the row's `DocumentReference`
 // (so no collection name lives here), the row schema, the claim policy, the extra
 // writes a terminal transition carries, and the clock.
-import { buildPendingMediaTerminalFields, decidePendingMediaClaim, decidePendingMediaFinalize, isPendingMediaNonTerminalStatus, PendingMediaStatusSchema, } from "@ttt-productions/media-schemas";
+import { buildPendingMediaTerminalFields, decidePendingMediaClaim, decidePendingMediaFinalize, isPendingMediaNonTerminalStatus, PendingMediaStatusSchema, } from '@ttt-productions/media-schemas';
 /**
  * Claim a row for processing inside `transaction`, driven by the CURRENT row (never a
  * frozen event snapshot). Reads before any write. A row that no longer parses is
@@ -13,10 +13,10 @@ import { buildPendingMediaTerminalFields, decidePendingMediaClaim, decidePending
 export async function claimPendingMediaForProcessing(transaction, pendingMediaRef, options) {
     const snap = await transaction.get(pendingMediaRef);
     if (!snap.exists)
-        return { kind: "missing" };
+        return { kind: 'missing' };
     const parsed = options.schema.safeParse(snap.data());
     if (!parsed.success)
-        return { kind: "missing" };
+        return { kind: 'missing' };
     const { outcome, write } = decidePendingMediaClaim(parsed.data, options.now ?? Date.now(), options.policy);
     // Spread into a literal: the Admin SDK's update() wants an UpdateData-compatible object.
     if (write)
@@ -32,9 +32,12 @@ export async function claimPendingMediaForProcessing(transaction, pendingMediaRe
 export async function finalizePendingMediaInTransaction(transaction, ref, targetStatus, options = {}) {
     const snap = await transaction.get(ref);
     const result = decidePendingMediaFinalize(snap.exists ? (snap.data() ?? {}) : undefined, targetStatus);
-    if (result.decision !== "applied")
+    if (result.decision !== 'applied')
         return result;
-    const applyExtra = await options.extraWrites?.(transaction, snap, { targetStatus, unparsable: false });
+    const applyExtra = await options.extraWrites?.(transaction, snap, {
+        targetStatus,
+        unparsable: false,
+    });
     transaction.update(ref, buildPendingMediaTerminalFields(targetStatus, options.extraFields ?? {}, options.now ?? Date.now()));
     return applyExtra ? { ...result, extra: applyExtra() } : result;
 }
@@ -57,7 +60,10 @@ export async function finalizeUnparsablePendingMedia(db, ref, options = {}) {
         if (status !== undefined && !isPendingMediaNonTerminalStatus(status))
             return;
         const failed = PendingMediaStatusSchema.enum.failed;
-        const applyExtra = await options.extraWrites?.(transaction, snap, { targetStatus: failed, unparsable: true });
+        const applyExtra = await options.extraWrites?.(transaction, snap, {
+            targetStatus: failed,
+            unparsable: true,
+        });
         transaction.update(ref, buildPendingMediaTerminalFields(failed, options.extraFields ?? {}, options.now ?? Date.now()));
         applyExtra?.();
     });