@venizia/ignis 0.4.6 → 0.4.7-1

package/dist/esm/components/socket-io/handlers/bun.handler.js

@@ -1,32 +1,34 @@
-export async function createBunEngine(opts) {
-    const { serverOptions } = opts;
-    const { Server: BunEngine } = await import('@socket.io/bun-engine');
-    // Extract cors fields explicitly to bridge socket.io/bun-engine type differences
-    const corsConfig = typeof serverOptions.cors === 'object' ? serverOptions.cors : undefined;
-    const engine = new BunEngine({
-        path: serverOptions.path ?? '/socket.io/',
-        ...(corsConfig && {
-            cors: {
-                origin: corsConfig.origin,
-                methods: corsConfig.methods,
-                credentials: corsConfig.credentials,
-                allowedHeaders: corsConfig.allowedHeaders,
-                exposedHeaders: corsConfig.exposedHeaders,
-                maxAge: corsConfig.maxAge,
-            },
-        }),
-    });
-    const engineHandler = engine.handler();
-    return { engine, engineHandler };
-}
-export function createBunFetchHandler(opts) {
-    const { engine, enginePath, honoServer } = opts;
-    return (req, server) => {
-        const url = new URL(req.url);
-        if (!url.pathname.startsWith(enginePath)) {
-            return honoServer.fetch(req, server);
-        }
-        return engine.handleRequest(req, server) ?? new Response(null, { status: 404 });
-    };
+export class SocketIOBunHandler {
+    static async createEngine(opts) {
+        const { serverOptions } = opts;
+        const { Server: BunEngine } = await import('@socket.io/bun-engine');
+        // Extract cors fields explicitly to bridge socket.io/bun-engine type differences
+        const corsConfig = typeof serverOptions.cors === 'object' ? serverOptions.cors : undefined;
+        const engine = new BunEngine({
+            path: serverOptions.path ?? '/socket.io/',
+            ...(corsConfig && {
+                cors: {
+                    origin: corsConfig.origin,
+                    methods: corsConfig.methods,
+                    credentials: corsConfig.credentials,
+                    allowedHeaders: corsConfig.allowedHeaders,
+                    exposedHeaders: corsConfig.exposedHeaders,
+                    maxAge: corsConfig.maxAge,
+                },
+            }),
+        });
+        const engineHandler = engine.handler();
+        return { engine, engineHandler };
+    }
+    static createFetchHandler(opts) {
+        const { engine, enginePath, honoServer } = opts;
+        return (req, server) => {
+            const url = new URL(req.url);
+            if (!url.pathname.startsWith(enginePath)) {
+                return honoServer.fetch(req, server);
+            }
+            return engine.handleRequest(req, server) ?? new Response(null, { status: 404 });
+        };
+    }
 }
 //# sourceMappingURL=bun.handler.js.map

package/dist/esm/components/socket-io/handlers/bun.handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"bun.handler.js","sourceRoot":"","sources":["../../../../../src/components/socket-io/handlers/bun.handler.ts"],"names":[],"mappings":"AAIA,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAErC;IACC,MAAM,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;IAC/B,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;IAEpE,iFAAiF;IACjF,MAAM,UAAU,GAAG,OAAO,aAAa,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3F,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,IAAI,EAAE,aAAa,CAAC,IAAI,IAAI,aAAa;QACzC,GAAG,CAAC,UAAU,IAAI;YAChB,IAAI,EAAE;gBACJ,MAAM,EAAE,UAAU,CAAC,MAA2D;gBAC9E,OAAO,EAAE,UAAU,CAAC,OAAO;gBAC3B,WAAW,EAAE,UAAU,CAAC,WAAW;gBACnC,cAAc,EAAE,UAAU,CAAC,cAAc;gBACzC,cAAc,EAAE,UAAU,CAAC,cAAc;gBACzC,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B;SACF,CAAC;KACH,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IAEvC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAIrC;IACC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAEhD,OAAO,CAAC,GAAY,EAAE,MAA0B,EAAgC,EAAE;QAChF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAE7B,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YACzC,OAAO,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACvC,CAAC;QAED,OAAO,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAClF,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import type { OpenAPIHono } from '@hono/zod-openapi';\nimport type { TBunServerInstance } from '@/base/applications';\nimport type { ServerOptions } from 'socket.io';\n\nexport async function createBunEngine(opts: {\n  serverOptions: Partial<ServerOptions>;\n}): Promise<{ engine: any; engineHandler: any }> {\n  const { serverOptions } = opts;\n  const { Server: BunEngine } = await import('@socket.io/bun-engine');\n\n  // Extract cors fields explicitly to bridge socket.io/bun-engine type differences\n  const corsConfig = typeof serverOptions.cors === 'object' ? serverOptions.cors : undefined;\n  const engine = new BunEngine({\n    path: serverOptions.path ?? '/socket.io/',\n    ...(corsConfig && {\n      cors: {\n        origin: corsConfig.origin as string | RegExp | (string | RegExp)[] | undefined,\n        methods: corsConfig.methods,\n        credentials: corsConfig.credentials,\n        allowedHeaders: corsConfig.allowedHeaders,\n        exposedHeaders: corsConfig.exposedHeaders,\n        maxAge: corsConfig.maxAge,\n      },\n    }),\n  });\n\n  const engineHandler = engine.handler();\n\n  return { engine, engineHandler };\n}\n\nexport function createBunFetchHandler(opts: {\n  engine: any;\n  enginePath: string;\n  honoServer: OpenAPIHono;\n}): (req: Request, server: TBunServerInstance) => Response | Promise<Response> {\n  const { engine, enginePath, honoServer } = opts;\n\n  return (req: Request, server: TBunServerInstance): Response | Promise<Response> => {\n    const url = new URL(req.url);\n\n    if (!url.pathname.startsWith(enginePath)) {\n      return honoServer.fetch(req, server);\n    }\n\n    return engine.handleRequest(req, server) ?? new Response(null, { status: 404 });\n  };\n}\n"]}
+{"version":3,"file":"bun.handler.js","sourceRoot":"","sources":["../../../../../src/components/socket-io/handlers/bun.handler.ts"],"names":[],"mappings":"AAIA,MAAM,OAAO,kBAAkB;IAC7B,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,IAEzB;QACC,MAAM,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;QAC/B,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;QAEpE,iFAAiF;QACjF,MAAM,UAAU,GAAG,OAAO,aAAa,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3F,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;YAC3B,IAAI,EAAE,aAAa,CAAC,IAAI,IAAI,aAAa;YACzC,GAAG,CAAC,UAAU,IAAI;gBAChB,IAAI,EAAE;oBACJ,MAAM,EAAE,UAAU,CAAC,MAA2D;oBAC9E,OAAO,EAAE,UAAU,CAAC,OAAO;oBAC3B,WAAW,EAAE,UAAU,CAAC,WAAW;oBACnC,cAAc,EAAE,UAAU,CAAC,cAAc;oBACzC,cAAc,EAAE,UAAU,CAAC,cAAc;oBACzC,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B;aACF,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;QAEvC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACnC,CAAC;IAED,MAAM,CAAC,kBAAkB,CAAC,IAIzB;QACC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;QAEhD,OAAO,CAAC,GAAY,EAAE,MAA0B,EAAgC,EAAE;YAChF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAE7B,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBACzC,OAAO,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACvC,CAAC;YAED,OAAO,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAClF,CAAC,CAAC;IACJ,CAAC;CACF","sourcesContent":["import type { OpenAPIHono } from '@hono/zod-openapi';\nimport type { TBunServerInstance } from '@/base/applications';\nimport type { ServerOptions } from 'socket.io';\n\nexport class SocketIOBunHandler {\n  static async createEngine(opts: {\n    serverOptions: Partial<ServerOptions>;\n  }): Promise<{ engine: any; engineHandler: any }> {\n    const { serverOptions } = opts;\n    const { Server: BunEngine } = await import('@socket.io/bun-engine');\n\n    // Extract cors fields explicitly to bridge socket.io/bun-engine type differences\n    const corsConfig = typeof serverOptions.cors === 'object' ? serverOptions.cors : undefined;\n    const engine = new BunEngine({\n      path: serverOptions.path ?? '/socket.io/',\n      ...(corsConfig && {\n        cors: {\n          origin: corsConfig.origin as string | RegExp | (string | RegExp)[] | undefined,\n          methods: corsConfig.methods,\n          credentials: corsConfig.credentials,\n          allowedHeaders: corsConfig.allowedHeaders,\n          exposedHeaders: corsConfig.exposedHeaders,\n          maxAge: corsConfig.maxAge,\n        },\n      }),\n    });\n\n    const engineHandler = engine.handler();\n\n    return { engine, engineHandler };\n  }\n\n  static createFetchHandler(opts: {\n    engine: any;\n    enginePath: string;\n    honoServer: OpenAPIHono;\n  }): (req: Request, server: TBunServerInstance) => Response | Promise<Response> {\n    const { engine, enginePath, honoServer } = opts;\n\n    return (req: Request, server: TBunServerInstance): Response | Promise<Response> => {\n      const url = new URL(req.url);\n\n      if (!url.pathname.startsWith(enginePath)) {\n        return honoServer.fetch(req, server);\n      }\n\n      return engine.handleRequest(req, server) ?? new Response(null, { status: 404 });\n    };\n  }\n}\n"]}

package/dist/esm/components/static-asset/common/commit-token.d.ts

@@ -4,20 +4,25 @@ export interface ICommitTokenPayload {
     key: string;
     expiresAt: number;
 }
-/** Signs `{ bucket, key, expiresAt }` so the commit route can trust the key it is handed. */
-export declare const buildCommitToken: (opts: {
-    payload: ICommitTokenPayload;
-    secretKey: string;
-}) => string;
-/**
- * Reads a commit token back, or throws.
- *
- * Verification happens BEFORE any storage call, which is what makes the commit route refuse to be a
- * name prober: a forged token fails without a round trip, so timing says nothing about what exists.
- */
-export declare const readCommitToken: (opts: {
-    token: string;
-    secretKey: string;
-    now?: number;
-}) => ICommitTokenPayload;
+/** Signs and reads the token the commit route trusts instead of a key a caller names. */
+export declare class AssetCommitToken {
+    private static encode;
+    private static sign;
+    /** Signs `{ bucket, key, expiresAt }` so the commit route can trust the key it is handed. */
+    static build(opts: {
+        payload: ICommitTokenPayload;
+        secretKey: string;
+    }): string;
+    /**
+     * Reads a commit token back, or throws.
+     *
+     * Verification happens BEFORE any storage call, which is what makes the commit route refuse to be a
+     * name prober: a forged token fails without a round trip, so timing says nothing about what exists.
+     */
+    static read(opts: {
+        token: string;
+        secretKey: string;
+        now?: number;
+    }): ICommitTokenPayload;
+}
 //# sourceMappingURL=commit-token.d.ts.map

package/dist/esm/components/static-asset/common/commit-token.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"commit-token.d.ts","sourceRoot":"","sources":["../../../../../src/components/static-asset/common/commit-token.ts"],"names":[],"mappings":"AAIA,yNAAyN;AACzN,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;CACnB;AAQD,6FAA6F;AAC7F,eAAO,MAAM,gBAAgB,GAAI,MAAM;IACrC,OAAO,EAAE,mBAAmB,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;CACnB,KAAG,MAGH,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,eAAe,GAAI,MAAM;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,KAAG,mBAsBH,CAAC"}
+{"version":3,"file":"commit-token.d.ts","sourceRoot":"","sources":["../../../../../src/components/static-asset/common/commit-token.ts"],"names":[],"mappings":"AAIA,yNAAyN;AACzN,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,yFAAyF;AACzF,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAC,MAAM;IAIrB,OAAO,CAAC,MAAM,CAAC,IAAI;IAInB,6FAA6F;IAC7F,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,mBAAmB,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM;IAK/E;;;;;OAKG;IACH,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,mBAAmB;CAyB3F"}

package/dist/esm/components/static-asset/common/commit-token.js

@@ -1,35 +1,42 @@
 import { getError } from '@venizia/ignis-helpers/core';
 import { createHmac, timingSafeEqual } from 'node:crypto';
 import { StaticAssetErrors } from './errors.js';
-const encode = (payload) => Buffer.from(JSON.stringify(payload)).toString('base64url');
-const sign = (opts) => createHmac('sha256', opts.secretKey).update(opts.body).digest('base64url');
-/** Signs `{ bucket, key, expiresAt }` so the commit route can trust the key it is handed. */
-export const buildCommitToken = (opts) => {
-    const body = encode(opts.payload);
-    return `${body}.${sign({ body, secretKey: opts.secretKey })}`;
-};
-/**
- * Reads a commit token back, or throws.
- *
- * Verification happens BEFORE any storage call, which is what makes the commit route refuse to be a
- * name prober: a forged token fails without a round trip, so timing says nothing about what exists.
- */
-export const readCommitToken = (opts) => {
-    const { token, secretKey, now = Date.now() } = opts;
-    const [body, signature] = token.split('.');
-    if (!body || !signature) {
-        throw getError(StaticAssetErrors.INVALID_COMMIT_TOKEN);
+/** Signs and reads the token the commit route trusts instead of a key a caller names. */
+export class AssetCommitToken {
+    static encode(payload) {
+        return Buffer.from(JSON.stringify(payload)).toString('base64url');
     }
-    const expected = Buffer.from(sign({ body, secretKey }));
-    const given = Buffer.from(signature);
-    // Length-checked first: `timingSafeEqual` throws on a length mismatch instead of answering false.
-    if (expected.length !== given.length || !timingSafeEqual(expected, given)) {
-        throw getError(StaticAssetErrors.INVALID_COMMIT_TOKEN);
+    static sign(opts) {
+        return createHmac('sha256', opts.secretKey).update(opts.body).digest('base64url');
     }
-    const payload = JSON.parse(Buffer.from(body, 'base64url').toString('utf8'));
-    if (payload.expiresAt <= now) {
-        throw getError(StaticAssetErrors.EXPIRED_COMMIT_TOKEN);
+    /** Signs `{ bucket, key, expiresAt }` so the commit route can trust the key it is handed. */
+    static build(opts) {
+        const body = AssetCommitToken.encode(opts.payload);
+        return `${body}.${AssetCommitToken.sign({ body, secretKey: opts.secretKey })}`;
     }
-    return payload;
-};
+    /**
+     * Reads a commit token back, or throws.
+     *
+     * Verification happens BEFORE any storage call, which is what makes the commit route refuse to be a
+     * name prober: a forged token fails without a round trip, so timing says nothing about what exists.
+     */
+    static read(opts) {
+        const { token, secretKey, now = Date.now() } = opts;
+        const [body, signature] = token.split('.');
+        if (!body || !signature) {
+            throw getError(StaticAssetErrors.INVALID_COMMIT_TOKEN);
+        }
+        const expected = Buffer.from(AssetCommitToken.sign({ body, secretKey }));
+        const given = Buffer.from(signature);
+        // Length-checked first: `timingSafeEqual` throws on a length mismatch instead of answering false.
+        if (expected.length !== given.length || !timingSafeEqual(expected, given)) {
+            throw getError(StaticAssetErrors.INVALID_COMMIT_TOKEN);
+        }
+        const payload = JSON.parse(Buffer.from(body, 'base64url').toString('utf8'));
+        if (payload.expiresAt <= now) {
+            throw getError(StaticAssetErrors.EXPIRED_COMMIT_TOKEN);
+        }
+        return payload;
+    }
+}
 //# sourceMappingURL=commit-token.js.map

package/dist/esm/components/static-asset/common/commit-token.js.map

@@ -1 +1 @@
-{"version":3,"file":"commit-token.js","sourceRoot":"","sources":["../../../../../src/components/static-asset/common/commit-token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAS7C,MAAM,MAAM,GAAG,CAAC,OAA4B,EAAU,EAAE,CACtD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAE7D,MAAM,IAAI,GAAG,CAAC,IAAyC,EAAU,EAAE,CACjE,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAE7E,6FAA6F;AAC7F,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,IAGhC,EAAU,EAAE;IACX,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClC,OAAO,GAAG,IAAI,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;AAChE,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,IAI/B,EAAuB,EAAE;IACxB,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC;IACpD,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAE3C,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACxB,MAAM,QAAQ,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAErC,kGAAkG;IAClG,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;QAC1E,MAAM,QAAQ,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,OAAO,GAAwB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACjG,IAAI,OAAO,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;QAC7B,MAAM,QAAQ,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,CAAC;IACzD,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC","sourcesContent":["import { getError } from '@venizia/ignis-helpers/core';\nimport { createHmac, timingSafeEqual } from 'node:crypto';\nimport { StaticAssetErrors } from './errors';\n\n/** What a commit token binds. Business fields are deliberately absent - which order or tenant an upload belongs to is the application's, and a token the framework signs is the wrong place to put its authorization. */\nexport interface ICommitTokenPayload {\n  bucket: string;\n  key: string;\n  expiresAt: number;\n}\n\nconst encode = (payload: ICommitTokenPayload): string =>\n  Buffer.from(JSON.stringify(payload)).toString('base64url');\n\nconst sign = (opts: { body: string; secretKey: string }): string =>\n  createHmac('sha256', opts.secretKey).update(opts.body).digest('base64url');\n\n/** Signs `{ bucket, key, expiresAt }` so the commit route can trust the key it is handed. */\nexport const buildCommitToken = (opts: {\n  payload: ICommitTokenPayload;\n  secretKey: string;\n}): string => {\n  const body = encode(opts.payload);\n  return `${body}.${sign({ body, secretKey: opts.secretKey })}`;\n};\n\n/**\n * Reads a commit token back, or throws.\n *\n * Verification happens BEFORE any storage call, which is what makes the commit route refuse to be a\n * name prober: a forged token fails without a round trip, so timing says nothing about what exists.\n */\nexport const readCommitToken = (opts: {\n  token: string;\n  secretKey: string;\n  now?: number;\n}): ICommitTokenPayload => {\n  const { token, secretKey, now = Date.now() } = opts;\n  const [body, signature] = token.split('.');\n\n  if (!body || !signature) {\n    throw getError(StaticAssetErrors.INVALID_COMMIT_TOKEN);\n  }\n\n  const expected = Buffer.from(sign({ body, secretKey }));\n  const given = Buffer.from(signature);\n\n  // Length-checked first: `timingSafeEqual` throws on a length mismatch instead of answering false.\n  if (expected.length !== given.length || !timingSafeEqual(expected, given)) {\n    throw getError(StaticAssetErrors.INVALID_COMMIT_TOKEN);\n  }\n\n  const payload: ICommitTokenPayload = JSON.parse(Buffer.from(body, 'base64url').toString('utf8'));\n  if (payload.expiresAt <= now) {\n    throw getError(StaticAssetErrors.EXPIRED_COMMIT_TOKEN);\n  }\n\n  return payload;\n};\n"]}
+{"version":3,"file":"commit-token.js","sourceRoot":"","sources":["../../../../../src/components/static-asset/common/commit-token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAS7C,yFAAyF;AACzF,MAAM,OAAO,gBAAgB;IACnB,MAAM,CAAC,MAAM,CAAC,OAA4B;QAChD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpE,CAAC;IAEO,MAAM,CAAC,IAAI,CAAC,IAAyC;QAC3D,OAAO,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACpF,CAAC;IAED,6FAA6F;IAC7F,MAAM,CAAC,KAAK,CAAC,IAAyD;QACpE,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnD,OAAO,GAAG,IAAI,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;IACjF,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,IAAI,CAAC,IAAwD;QAClE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC;QACpD,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAE3C,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACxB,MAAM,QAAQ,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QACzE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAErC,kGAAkG;QAClG,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;YAC1E,MAAM,QAAQ,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,OAAO,GAAwB,IAAI,CAAC,KAAK,CAC7C,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAChD,CAAC;QACF,IAAI,OAAO,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;YAC7B,MAAM,QAAQ,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;CACF","sourcesContent":["import { getError } from '@venizia/ignis-helpers/core';\nimport { createHmac, timingSafeEqual } from 'node:crypto';\nimport { StaticAssetErrors } from './errors';\n\n/** What a commit token binds. Business fields are deliberately absent - which order or tenant an upload belongs to is the application's, and a token the framework signs is the wrong place to put its authorization. */\nexport interface ICommitTokenPayload {\n  bucket: string;\n  key: string;\n  expiresAt: number;\n}\n\n/** Signs and reads the token the commit route trusts instead of a key a caller names. */\nexport class AssetCommitToken {\n  private static encode(payload: ICommitTokenPayload): string {\n    return Buffer.from(JSON.stringify(payload)).toString('base64url');\n  }\n\n  private static sign(opts: { body: string; secretKey: string }): string {\n    return createHmac('sha256', opts.secretKey).update(opts.body).digest('base64url');\n  }\n\n  /** Signs `{ bucket, key, expiresAt }` so the commit route can trust the key it is handed. */\n  static build(opts: { payload: ICommitTokenPayload; secretKey: string }): string {\n    const body = AssetCommitToken.encode(opts.payload);\n    return `${body}.${AssetCommitToken.sign({ body, secretKey: opts.secretKey })}`;\n  }\n\n  /**\n   * Reads a commit token back, or throws.\n   *\n   * Verification happens BEFORE any storage call, which is what makes the commit route refuse to be a\n   * name prober: a forged token fails without a round trip, so timing says nothing about what exists.\n   */\n  static read(opts: { token: string; secretKey: string; now?: number }): ICommitTokenPayload {\n    const { token, secretKey, now = Date.now() } = opts;\n    const [body, signature] = token.split('.');\n\n    if (!body || !signature) {\n      throw getError(StaticAssetErrors.INVALID_COMMIT_TOKEN);\n    }\n\n    const expected = Buffer.from(AssetCommitToken.sign({ body, secretKey }));\n    const given = Buffer.from(signature);\n\n    // Length-checked first: `timingSafeEqual` throws on a length mismatch instead of answering false.\n    if (expected.length !== given.length || !timingSafeEqual(expected, given)) {\n      throw getError(StaticAssetErrors.INVALID_COMMIT_TOKEN);\n    }\n\n    const payload: ICommitTokenPayload = JSON.parse(\n      Buffer.from(body, 'base64url').toString('utf8'),\n    );\n    if (payload.expiresAt <= now) {\n      throw getError(StaticAssetErrors.EXPIRED_COMMIT_TOKEN);\n    }\n\n    return payload;\n  }\n}\n"]}

package/dist/esm/components/static-asset/common/constants.d.ts

@@ -9,8 +9,6 @@ export declare const WHITELIST_HEADERS: readonly ["content-encoding", "cache-con
 export declare const RENDERABLE_CONTENT_TYPES: Set<string>;
 export declare class StaticAssetStorageTypes {
     static readonly DISK = "disk";
-    /** @deprecated Use {@link StaticAssetStorageTypes.BUN_S3}, which reaches MinIO over the same S3 API. */
-    static readonly MINIO = "minio";
     static readonly BUN_S3 = "bun-s3";
     static readonly SCHEME_SET: Set<string>;
     static isValid(orgType: string): boolean;

package/dist/esm/components/static-asset/common/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../../src/components/static-asset/common/constants.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAGjE,uGAAuG;AACvG,eAAO,MAAM,iBAAiB,yEAKpB,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,aAgBnC,CAAC;AAEH,qBAAa,uBAAuB;IAClC,MAAM,CAAC,QAAQ,CAAC,IAAI,UAAU;IAC9B,wGAAwG;IACxG,MAAM,CAAC,QAAQ,CAAC,KAAK,WAAW;IAChC,MAAM,CAAC,QAAQ,CAAC,MAAM,YAAY;IAElC,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAiD;IAE3E,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;CAGzC;AAED,MAAM,MAAM,uBAAuB,GAAG,WAAW,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAElF,+FAA+F;AAC/F,qBAAa,uBAAuB;IAClC,MAAM,CAAC,QAAQ,CAAC,OAAO,aAAa;IACpC,MAAM,CAAC,QAAQ,CAAC,SAAS,eAAe;IAExC,MAAM,CAAC,QAAQ,CAAC,UAAU,cAA2C;IAErE,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AAED,MAAM,MAAM,uBAAuB,GAAG,WAAW,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAElF,yHAAyH;AACzH,eAAO,MAAM,sBAAsB,aAAa,CAAC;AAEjD,2LAA2L;AAC3L,eAAO,MAAM,uBAAuB,4BAA4B,CAAC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../../src/components/static-asset/common/constants.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAGjE,uGAAuG;AACvG,eAAO,MAAM,iBAAiB,yEAKpB,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,aAgBnC,CAAC;AAEH,qBAAa,uBAAuB;IAClC,MAAM,CAAC,QAAQ,CAAC,IAAI,UAAU;IAC9B,MAAM,CAAC,QAAQ,CAAC,MAAM,YAAY;IAElC,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAqC;IAE/D,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;CAGzC;AAED,MAAM,MAAM,uBAAuB,GAAG,WAAW,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAElF,+FAA+F;AAC/F,qBAAa,uBAAuB;IAClC,MAAM,CAAC,QAAQ,CAAC,OAAO,aAAa;IACpC,MAAM,CAAC,QAAQ,CAAC,SAAS,eAAe;IAExC,MAAM,CAAC,QAAQ,CAAC,UAAU,cAA2C;IAErE,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AAED,MAAM,MAAM,uBAAuB,GAAG,WAAW,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAElF,yHAAyH;AACzH,eAAO,MAAM,sBAAsB,aAAa,CAAC;AAEjD,2LAA2L;AAC3L,eAAO,MAAM,uBAAuB,4BAA4B,CAAC"}

package/dist/esm/components/static-asset/common/constants.js

@@ -30,10 +30,8 @@ export const RENDERABLE_CONTENT_TYPES = new Set([
 ]);
 export class StaticAssetStorageTypes {
     static { this.DISK = 'disk'; }
-    /** @deprecated Use {@link StaticAssetStorageTypes.BUN_S3}, which reaches MinIO over the same S3 API. */
-    static { this.MINIO = 'minio'; }
     static { this.BUN_S3 = 'bun-s3'; }
-    static { this.SCHEME_SET = new Set([this.DISK, this.MINIO, this.BUN_S3]); }
+    static { this.SCHEME_SET = new Set([this.DISK, this.BUN_S3]); }
     static isValid(orgType) {
         return this.SCHEME_SET.has(orgType);
     }

package/dist/esm/components/static-asset/common/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../../../src/components/static-asset/common/constants.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,+BAA+B,CAAC;AAErD,uGAAuG;AACvG,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,IAAI,CAAC,OAAO,CAAC,gBAAgB;IAC7B,IAAI,CAAC,OAAO,CAAC,aAAa;IAC1B,IAAI,CAAC,OAAO,CAAC,IAAI;IACjB,IAAI,CAAC,OAAO,CAAC,aAAa;CAClB,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAS;IACtD,WAAW;IACX,YAAY;IACZ,WAAW;IACX,YAAY;IACZ,YAAY;IACZ,WAAW;IACX,cAAc;IACd,WAAW;IACX,YAAY;IACZ,YAAY;IACZ,WAAW;IACX,WAAW;IACX,iBAAiB;IACjB,YAAY;IACZ,UAAU;CACX,CAAC,CAAC;AAEH,MAAM,OAAO,uBAAuB;aAClB,SAAI,GAAG,MAAM,CAAC;IAC9B,wGAAwG;aACxF,UAAK,GAAG,OAAO,CAAC;aAChB,WAAM,GAAG,QAAQ,CAAC;aAElB,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAE3E,MAAM,CAAC,OAAO,CAAC,OAAe;QAC5B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;;AAKH,+FAA+F;AAC/F,MAAM,OAAO,uBAAuB;aAClB,YAAO,GAAG,SAAS,CAAC;aACpB,cAAS,GAAG,WAAW,CAAC;aAExB,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IAErE,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AAKH,yHAAyH;AACzH,MAAM,CAAC,MAAM,sBAAsB,GAAG,UAAU,CAAC;AAEjD,2LAA2L;AAC3L,MAAM,CAAC,MAAM,uBAAuB,GAAG,yBAAyB,CAAC","sourcesContent":["import type { TConstValue } from '@venizia/ignis-helpers/common';\nimport { HTTP } from '@venizia/ignis-helpers/common';\n\n/** `content-type` is absent on purpose: it is decided from the object name, never from the backend. */\nexport const WHITELIST_HEADERS = [\n  HTTP.Headers.CONTENT_ENCODING,\n  HTTP.Headers.CACHE_CONTROL,\n  HTTP.Headers.ETAG,\n  HTTP.Headers.LAST_MODIFIED,\n] as const;\n\n/**\n * Types the controller will let a browser render, keyed off the object name. Anything absent here is\n * served as an attachment, because a renderable upload on the API origin is stored XSS - and `nosniff`\n * cannot stop a type we declared ourselves. `image/svg+xml` is deliberately excluded: SVG carries script.\n */\nexport const RENDERABLE_CONTENT_TYPES = new Set<string>([\n  'image/png',\n  'image/jpeg',\n  'image/gif',\n  'image/webp',\n  'image/avif',\n  'image/bmp',\n  'image/x-icon',\n  'video/mp4',\n  'video/webm',\n  'audio/mpeg',\n  'audio/wav',\n  'audio/ogg',\n  'application/pdf',\n  'text/plain',\n  'text/csv',\n]);\n\nexport class StaticAssetStorageTypes {\n  static readonly DISK = 'disk';\n  /** @deprecated Use {@link StaticAssetStorageTypes.BUN_S3}, which reaches MinIO over the same S3 API. */\n  static readonly MINIO = 'minio';\n  static readonly BUN_S3 = 'bun-s3';\n\n  static readonly SCHEME_SET = new Set([this.DISK, this.MINIO, this.BUN_S3]);\n\n  static isValid(orgType: string): boolean {\n    return this.SCHEME_SET.has(orgType);\n  }\n}\n\nexport type TStaticAssetStorageType = TConstValue<typeof StaticAssetStorageTypes>;\n\n/** What `recreate-metalink` did: refreshed the rows of an object, or created its first one. */\nexport class MetaLinkRecreateActions {\n  static readonly CREATED = 'created';\n  static readonly REFRESHED = 'refreshed';\n\n  static readonly SCHEME_SET = new Set([this.CREATED, this.REFRESHED]);\n\n  static isValid(value: string): boolean {\n    return this.SCHEME_SET.has(value);\n  }\n}\n\nexport type TMetaLinkRecreateAction = TConstValue<typeof MetaLinkRecreateActions>;\n\n/** Where a signed policy may write. The final key is never inside it, so content cannot be replaced after the commit. */\nexport const DEFAULT_PENDING_PREFIX = 'pending/';\n\n/** Reported in the body, never thrown: the bytes are stored, only the row is not. A CODE, because a 200 bypasses the middleware that strips the driver's `detail`/`table`/`constraint`. */\nexport const META_LINK_CREATE_FAILED = 'META_LINK_CREATE_FAILED';\n"]}
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../../../src/components/static-asset/common/constants.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,+BAA+B,CAAC;AAErD,uGAAuG;AACvG,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,IAAI,CAAC,OAAO,CAAC,gBAAgB;IAC7B,IAAI,CAAC,OAAO,CAAC,aAAa;IAC1B,IAAI,CAAC,OAAO,CAAC,IAAI;IACjB,IAAI,CAAC,OAAO,CAAC,aAAa;CAClB,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAS;IACtD,WAAW;IACX,YAAY;IACZ,WAAW;IACX,YAAY;IACZ,YAAY;IACZ,WAAW;IACX,cAAc;IACd,WAAW;IACX,YAAY;IACZ,YAAY;IACZ,WAAW;IACX,WAAW;IACX,iBAAiB;IACjB,YAAY;IACZ,UAAU;CACX,CAAC,CAAC;AAEH,MAAM,OAAO,uBAAuB;aAClB,SAAI,GAAG,MAAM,CAAC;aACd,WAAM,GAAG,QAAQ,CAAC;aAElB,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAE/D,MAAM,CAAC,OAAO,CAAC,OAAe;QAC5B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;;AAKH,+FAA+F;AAC/F,MAAM,OAAO,uBAAuB;aAClB,YAAO,GAAG,SAAS,CAAC;aACpB,cAAS,GAAG,WAAW,CAAC;aAExB,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IAErE,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AAKH,yHAAyH;AACzH,MAAM,CAAC,MAAM,sBAAsB,GAAG,UAAU,CAAC;AAEjD,2LAA2L;AAC3L,MAAM,CAAC,MAAM,uBAAuB,GAAG,yBAAyB,CAAC","sourcesContent":["import type { TConstValue } from '@venizia/ignis-helpers/common';\nimport { HTTP } from '@venizia/ignis-helpers/common';\n\n/** `content-type` is absent on purpose: it is decided from the object name, never from the backend. */\nexport const WHITELIST_HEADERS = [\n  HTTP.Headers.CONTENT_ENCODING,\n  HTTP.Headers.CACHE_CONTROL,\n  HTTP.Headers.ETAG,\n  HTTP.Headers.LAST_MODIFIED,\n] as const;\n\n/**\n * Types the controller will let a browser render, keyed off the object name. Anything absent here is\n * served as an attachment, because a renderable upload on the API origin is stored XSS - and `nosniff`\n * cannot stop a type we declared ourselves. `image/svg+xml` is deliberately excluded: SVG carries script.\n */\nexport const RENDERABLE_CONTENT_TYPES = new Set<string>([\n  'image/png',\n  'image/jpeg',\n  'image/gif',\n  'image/webp',\n  'image/avif',\n  'image/bmp',\n  'image/x-icon',\n  'video/mp4',\n  'video/webm',\n  'audio/mpeg',\n  'audio/wav',\n  'audio/ogg',\n  'application/pdf',\n  'text/plain',\n  'text/csv',\n]);\n\nexport class StaticAssetStorageTypes {\n  static readonly DISK = 'disk';\n  static readonly BUN_S3 = 'bun-s3';\n\n  static readonly SCHEME_SET = new Set([this.DISK, this.BUN_S3]);\n\n  static isValid(orgType: string): boolean {\n    return this.SCHEME_SET.has(orgType);\n  }\n}\n\nexport type TStaticAssetStorageType = TConstValue<typeof StaticAssetStorageTypes>;\n\n/** What `recreate-metalink` did: refreshed the rows of an object, or created its first one. */\nexport class MetaLinkRecreateActions {\n  static readonly CREATED = 'created';\n  static readonly REFRESHED = 'refreshed';\n\n  static readonly SCHEME_SET = new Set([this.CREATED, this.REFRESHED]);\n\n  static isValid(value: string): boolean {\n    return this.SCHEME_SET.has(value);\n  }\n}\n\nexport type TMetaLinkRecreateAction = TConstValue<typeof MetaLinkRecreateActions>;\n\n/** Where a signed policy may write. The final key is never inside it, so content cannot be replaced after the commit. */\nexport const DEFAULT_PENDING_PREFIX = 'pending/';\n\n/** Reported in the body, never thrown: the bytes are stored, only the row is not. A CODE, because a 200 bypasses the middleware that strips the driver's `detail`/`table`/`constraint`. */\nexport const META_LINK_CREATE_FAILED = 'META_LINK_CREATE_FAILED';\n"]}

package/dist/esm/components/static-asset/common/types.d.ts

@@ -5,7 +5,6 @@ import type { DiskHelper, IBucketRef, IFileStat, IObjectLocation, IObjectRef, IS
 import type { BunS3Helper } from '@venizia/ignis-helpers/bun-s3';
 import type { AnyType, TValueOrAsyncResolver, ValueOrPromise } from '@venizia/ignis-helpers/common';
 import type { TMultipartStorage } from '@venizia/ignis-helpers';
-import type { MinioHelper } from '@venizia/ignis-helpers/minio';
 import type { TMetaLinkCompatibleSchema, TMetaLinkSchema } from '../models/index.js';
 import type { StaticAssetStorageTypes } from './constants.js';
 export type TStaticAssetExtraOptions = {
@@ -152,9 +151,6 @@ export type TStaticAssetsComponentOptions<Schema extends TMetaLinkCompatibleSche
     } | {
         storage: typeof StaticAssetStorageTypes.DISK;
         helper: DiskHelper;
-    } | {
-        storage: typeof StaticAssetStorageTypes.MINIO;
-        helper: MinioHelper;
     }) & ({
         useMetaLink?: false | undefined;
     } | {

package/dist/esm/components/static-asset/common/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/components/static-asset/common/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AAClF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,KAAK,EACV,oBAAoB,EACpB,qBAAqB,EACrB,YAAY,EACb,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EACV,UAAU,EACV,UAAU,EACV,SAAS,EACT,eAAe,EACf,UAAU,EACV,cAAc,EACd,aAAa,EACb,aAAa,EACd,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,KAAK,EAAE,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AACpG,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,KAAK,EAAE,yBAAyB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAE3D,MAAM,MAAM,wBAAwB,GAAG;IACrC,kBAAkB,CAAC,EAAE;QACnB,OAAO,CAAC,EAAE,iBAAiB,CAAC;QAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IAEF,mGAAmG;IACnG,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,aAAa,CAAA;KAAE,KAAK,MAAM,CAAC;IAC5D,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,eAAe,KAAK,MAAM,CAAC;IAEpD,uEAAuE;IACvE,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,qJAAqJ;IACrJ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB,CAAC;AAEF,wGAAwG;AACxG,MAAM,MAAM,mBAAmB,GAAG,CAAC,IAAI,EAAE;IACvC,MAAM,EAAE,UAAU,CAAC;IACnB,IAAI,EAAE,aAAa,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB,KAAK,MAAM,CAAC;AAEb,4NAA4N;AAC5N,sJAAsJ;AACtJ,MAAM,MAAM,kBAAkB,GAAG,CAAC,IAAI,EAAE;IACtC,UAAU,EAAE,kBAAkB,CAAC;IAC/B,MAAM,EAAE,cAAc,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;CAClB,KAAK,IAAI,CAAC;AAGX,MAAM,MAAM,aAAa,GAAG;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC;AACnD,MAAM,MAAM,aAAa,GAAG;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC;AACvE,MAAM,MAAM,YAAY,GAAG;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gJAAgJ;IAChJ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AACF,MAAM,MAAM,UAAU,GAAG;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnF,MAAM,MAAM,oBAAoB,GAAG;IACjC,yIAAyI;IACzI,SAAS,EAAE,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,aAAa,CAAA;KAAE,KAAK,cAAc,CAAC,OAAO,CAAC,CAAC;IAEzE,mFAAmF;IACnF,SAAS,EAAE,MAAM,CAAC;IAElB,6IAA6I;IAC7I,QAAQ,EAAE,MAAM,CAAC;IAEjB,yIAAyI;IACzI,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,4FAA4F;IAC5F,SAAS,CAAC,EAAE,SAAS,CAAC;IAEtB,0LAA0L;IAC1L,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE;QAChB,MAAM,EAAE,UAAU,CAAC;QACnB,aAAa,EAAE,UAAU,CAAC;QAC1B,MAAM,EAAE,UAAU,CAAC;KACpB,KAAK,cAAc,CAAC,IAAI,CAAC,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,KAAK,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACzE,CAAC;AAEF,4JAA4J;AAC5J,MAAM,MAAM,eAAe,CAAC,MAAM,SAAS,yBAAyB,GAAG,eAAe,IAAI;IACxF,KAAK,EAAE,qBAAqB,CAAC,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;IAClE,UAAU,EAAE,qBAAqB,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC;IACjE,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE;QACtB,YAAY,EAAE,aAAa,CAAC;QAC5B,QAAQ,EAAE,SAAS,CAAC;QACpB,+KAA+K;QAC/K,KAAK,EAAE,YAAY,CAAC;KACrB,KAAK,cAAc,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,CAAA;KAAE,CAAC,CAAC;CACrE,CAAC;AAEF,8DAA8D;AAC9D,MAAM,MAAM,uBAAuB,GAAG,OAAO,CAC3C,IAAI,CAAC,gBAAgB,EAAE,QAAQ,GAAG,SAAS,GAAG,WAAW,CAAC,CAC3D,GAAG;IACF,0DAA0D;IAC1D,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,UAAU,CAAC,EAAE,uBAAuB,CAAC;IACrC,eAAe,CAAC,EAAE,uBAAuB,CAAC;IAC1C,YAAY,CAAC,EAAE,uBAAuB,CAAC;IACvC,YAAY,CAAC,EAAE,uBAAuB,CAAC;IAEvC,MAAM,CAAC,EAAE,uBAAuB,CAAC;IACjC,WAAW,CAAC,EAAE,uBAAuB,CAAC;IACtC,YAAY,CAAC,EAAE,uBAAuB,CAAC;IACvC,eAAe,CAAC,EAAE,uBAAuB,CAAC;IAC1C,oBAAoB,CAAC,EAAE,uBAAuB,CAAC;IAE/C,YAAY,CAAC,EAAE,uBAAuB,CAAC;IACvC,YAAY,CAAC,EAAE,uBAAuB,CAAC;IAEvC,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;CAC5C,CAAC;AAEF,MAAM,MAAM,6BAA6B,CACvC,MAAM,SAAS,yBAAyB,GAAG,eAAe,IACxD;IACF,CAAC,GAAG,EAAE,MAAM,GAAG;QACb,UAAU,EAAE;YACV,IAAI,EAAE,MAAM,CAAC;YACb,QAAQ,EAAE,MAAM,CAAC;YACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;YAEnB,qKAAqK;YACrK,aAAa,CAAC,EAAE,OAAO,CAAC;YAExB,6OAA6O;YAC7O,MAAM,CAAC,EAAE,qBAAqB,CAAC,MAAM,CAAC,CAAC;YAEvC;;;;;;eAMG;YACH,SAAS,CAAC,EAAE,MAAM,CAAC;YAEnB,MAAM,CAAC,EAAE,kBAAkB,CAAC;YAE5B,oPAAoP;YACpP,YAAY,CAAC,EAAE,oBAAoB,CAAC;SACrC,CAAC;QACF,KAAK,CAAC,EAAE,wBAAwB,CAAC;QAEjC,0GAA0G;QAC1G,iBAAiB,CAAC,EAAE,mBAAmB,CAAC;QAExC,gLAAgL;QAChL,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;QAExC,oGAAoG;QACpG,iBAAiB,CAAC,EAAE,kBAAkB,CAAC;KACxC,GAAG,CACA;QAAE,OAAO,EAAE,OAAO,uBAAuB,CAAC,MAAM,CAAC;QAAC,MAAM,EAAE,WAAW,CAAA;KAAE,GACvE;QAAE,OAAO,EAAE,OAAO,uBAAuB,CAAC,IAAI,CAAC;QAAC,MAAM,EAAE,UAAU,CAAA;KAAE,GACpE;QAAE,OAAO,EAAE,OAAO,uBAAuB,CAAC,KAAK,CAAC;QAAC,MAAM,EAAE,WAAW,CAAA;KAAE,CACzE,GACC,CACI;QAAE,WAAW,CAAC,EAAE,KAAK,GAAG,SAAS,CAAA;KAAE,GACnC;QAAE,WAAW,EAAE,IAAI,CAAC;QAAC,QAAQ,EAAE,eAAe,CAAC,MAAM,CAAC,CAAA;KAAE,CAC3D,CAAC;CACL,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/components/static-asset/common/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AAClF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,KAAK,EACV,oBAAoB,EACpB,qBAAqB,EACrB,YAAY,EACb,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EACV,UAAU,EACV,UAAU,EACV,SAAS,EACT,eAAe,EACf,UAAU,EACV,cAAc,EACd,aAAa,EACb,aAAa,EACd,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,KAAK,EAAE,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AACpG,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,KAAK,EAAE,yBAAyB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAE3D,MAAM,MAAM,wBAAwB,GAAG;IACrC,kBAAkB,CAAC,EAAE;QACnB,OAAO,CAAC,EAAE,iBAAiB,CAAC;QAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IAEF,mGAAmG;IACnG,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,aAAa,CAAA;KAAE,KAAK,MAAM,CAAC;IAC5D,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,eAAe,KAAK,MAAM,CAAC;IAEpD,uEAAuE;IACvE,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,qJAAqJ;IACrJ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB,CAAC;AAEF,wGAAwG;AACxG,MAAM,MAAM,mBAAmB,GAAG,CAAC,IAAI,EAAE;IACvC,MAAM,EAAE,UAAU,CAAC;IACnB,IAAI,EAAE,aAAa,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB,KAAK,MAAM,CAAC;AAEb,4NAA4N;AAC5N,sJAAsJ;AACtJ,MAAM,MAAM,kBAAkB,GAAG,CAAC,IAAI,EAAE;IACtC,UAAU,EAAE,kBAAkB,CAAC;IAC/B,MAAM,EAAE,cAAc,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;CAClB,KAAK,IAAI,CAAC;AAGX,MAAM,MAAM,aAAa,GAAG;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC;AACnD,MAAM,MAAM,aAAa,GAAG;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC;AACvE,MAAM,MAAM,YAAY,GAAG;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gJAAgJ;IAChJ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AACF,MAAM,MAAM,UAAU,GAAG;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnF,MAAM,MAAM,oBAAoB,GAAG;IACjC,yIAAyI;IACzI,SAAS,EAAE,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,aAAa,CAAA;KAAE,KAAK,cAAc,CAAC,OAAO,CAAC,CAAC;IAEzE,mFAAmF;IACnF,SAAS,EAAE,MAAM,CAAC;IAElB,6IAA6I;IAC7I,QAAQ,EAAE,MAAM,CAAC;IAEjB,yIAAyI;IACzI,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,4FAA4F;IAC5F,SAAS,CAAC,EAAE,SAAS,CAAC;IAEtB,0LAA0L;IAC1L,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE;QAChB,MAAM,EAAE,UAAU,CAAC;QACnB,aAAa,EAAE,UAAU,CAAC;QAC1B,MAAM,EAAE,UAAU,CAAC;KACpB,KAAK,cAAc,CAAC,IAAI,CAAC,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,KAAK,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACzE,CAAC;AAEF,4JAA4J;AAC5J,MAAM,MAAM,eAAe,CAAC,MAAM,SAAS,yBAAyB,GAAG,eAAe,IAAI;IACxF,KAAK,EAAE,qBAAqB,CAAC,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;IAClE,UAAU,EAAE,qBAAqB,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC;IACjE,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE;QACtB,YAAY,EAAE,aAAa,CAAC;QAC5B,QAAQ,EAAE,SAAS,CAAC;QACpB,+KAA+K;QAC/K,KAAK,EAAE,YAAY,CAAC;KACrB,KAAK,cAAc,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,CAAA;KAAE,CAAC,CAAC;CACrE,CAAC;AAEF,8DAA8D;AAC9D,MAAM,MAAM,uBAAuB,GAAG,OAAO,CAC3C,IAAI,CAAC,gBAAgB,EAAE,QAAQ,GAAG,SAAS,GAAG,WAAW,CAAC,CAC3D,GAAG;IACF,0DAA0D;IAC1D,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,UAAU,CAAC,EAAE,uBAAuB,CAAC;IACrC,eAAe,CAAC,EAAE,uBAAuB,CAAC;IAC1C,YAAY,CAAC,EAAE,uBAAuB,CAAC;IACvC,YAAY,CAAC,EAAE,uBAAuB,CAAC;IAEvC,MAAM,CAAC,EAAE,uBAAuB,CAAC;IACjC,WAAW,CAAC,EAAE,uBAAuB,CAAC;IACtC,YAAY,CAAC,EAAE,uBAAuB,CAAC;IACvC,eAAe,CAAC,EAAE,uBAAuB,CAAC;IAC1C,oBAAoB,CAAC,EAAE,uBAAuB,CAAC;IAE/C,YAAY,CAAC,EAAE,uBAAuB,CAAC;IACvC,YAAY,CAAC,EAAE,uBAAuB,CAAC;IAEvC,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;CAC5C,CAAC;AAEF,MAAM,MAAM,6BAA6B,CACvC,MAAM,SAAS,yBAAyB,GAAG,eAAe,IACxD;IACF,CAAC,GAAG,EAAE,MAAM,GAAG;QACb,UAAU,EAAE;YACV,IAAI,EAAE,MAAM,CAAC;YACb,QAAQ,EAAE,MAAM,CAAC;YACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;YAEnB,qKAAqK;YACrK,aAAa,CAAC,EAAE,OAAO,CAAC;YAExB,6OAA6O;YAC7O,MAAM,CAAC,EAAE,qBAAqB,CAAC,MAAM,CAAC,CAAC;YAEvC;;;;;;eAMG;YACH,SAAS,CAAC,EAAE,MAAM,CAAC;YAEnB,MAAM,CAAC,EAAE,kBAAkB,CAAC;YAE5B,oPAAoP;YACpP,YAAY,CAAC,EAAE,oBAAoB,CAAC;SACrC,CAAC;QACF,KAAK,CAAC,EAAE,wBAAwB,CAAC;QAEjC,0GAA0G;QAC1G,iBAAiB,CAAC,EAAE,mBAAmB,CAAC;QAExC,gLAAgL;QAChL,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;QAExC,oGAAoG;QACpG,iBAAiB,CAAC,EAAE,kBAAkB,CAAC;KACxC,GAAG,CACA;QAAE,OAAO,EAAE,OAAO,uBAAuB,CAAC,MAAM,CAAC;QAAC,MAAM,EAAE,WAAW,CAAA;KAAE,GACvE;QAAE,OAAO,EAAE,OAAO,uBAAuB,CAAC,IAAI,CAAC;QAAC,MAAM,EAAE,UAAU,CAAA;KAAE,CACvE,GACC,CACI;QAAE,WAAW,CAAC,EAAE,KAAK,GAAG,SAAS,CAAA;KAAE,GACnC;QAAE,WAAW,EAAE,IAAI,CAAC;QAAC,QAAQ,EAAE,eAAe,CAAC,MAAM,CAAC,CAAA;KAAE,CAC3D,CAAC;CACL,CAAC"}

package/dist/esm/components/static-asset/common/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../src/components/static-asset/common/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { BaseRestController, IAuthRouteConfig, TRouteContext } from '@/base';\nimport type { IDuration } from '@venizia/ignis-helpers/common';\nimport type {\n  BaseRelationalEntity,\n  DefaultCRUDRepository,\n  TTableObject,\n} from '@venizia/ignis-connectors/postgres';\nimport type {\n  DiskHelper,\n  IBucketRef,\n  IFileStat,\n  IObjectLocation,\n  IObjectRef,\n  IStorageHelper,\n  IUploadResult,\n  TUploadNaming,\n} from '@venizia/ignis-helpers';\nimport type { BunS3Helper } from '@venizia/ignis-helpers/bun-s3';\nimport type { AnyType, TValueOrAsyncResolver, ValueOrPromise } from '@venizia/ignis-helpers/common';\nimport type { TMultipartStorage } from '@venizia/ignis-helpers';\nimport type { MinioHelper } from '@venizia/ignis-helpers/minio';\nimport type { TMetaLinkCompatibleSchema, TMetaLinkSchema } from '../models';\nimport type { StaticAssetStorageTypes } from './constants';\n\nexport type TStaticAssetExtraOptions = {\n  parseMultipartBody?: {\n    storage?: TMultipartStorage;\n    uploadDir?: string;\n  };\n\n  /** `folderPath` carries the upload query's target folder - dropping it flattens nested uploads. */\n  normalizeNameFn?: (opts: { file: TUploadNaming }) => string;\n  normalizeLinkFn?: (opts: IObjectLocation) => string;\n\n  /** Maximum folder nesting depth allowed in object paths. Default: 2 */\n  maxFolderDepth?: number;\n\n  /** Largest file the UPLOAD route accepts. Absent means no ceiling. Checked against `content-length` before spooling, then per file after parsing. */\n  maxBytes?: number;\n  [key: string]: AnyType;\n};\n\n/** Decides the key one uploaded file is stored under. `defaultKey` is what IGNIS would have written. */\nexport type TObjectNameResolver = (opts: {\n  bucket: IBucketRef;\n  file: TUploadNaming;\n  defaultKey: string;\n}) => string;\n\n/** Adds routes of the application's own to a generated asset controller. Runs after every built-in route, so a built-in route always wins a path collision. `basePath` is the mount path with exactly one leading slash. */\n/** Adds routes of the application's own. Registration order decides a path collision, so the same shape serves both the before and the after hook. */\nexport type TDefineExtraRoutes = (opts: {\n  controller: BaseRestController;\n  helper: IStorageHelper;\n  basePath: string;\n}) => void;\n\n// Declared by hand rather than inferred: RouteHandler inference here is heavy.\nexport type TBucketParams = { bucketName: string };\nexport type TObjectParams = { bucketName: string; objectName: string };\nexport type TUploadQuery = {\n  principalType?: string;\n  principalId?: string;\n  variant?: string;\n  /** Display order within the principal. Caller-supplied: deriving it would be a non-atomic read of `max(sequence)` then a write of `max + 1`. */\n  sequence?: number;\n  folderPath?: string;\n};\nexport type TListQuery = { prefix?: string; recursive?: string; maxKeys?: string };\n\nexport type TDirectUploadOptions = {\n  /** Who may ask for a policy. REQUIRED, not defaulted: this route hands out a write credential, and there is no safe default for that. */\n  authorize: (opts: { context: TRouteContext }) => ValueOrPromise<boolean>;\n\n  /** Signs the commit token. Keep it out of the repository and out of the client. */\n  secretKey: string;\n\n  /** The ceiling the policy carries as `content-length-range`. A signed PUT cannot express this at all, which is why this is a POST policy. */\n  maxBytes: number;\n\n  /** Where a policy may write. The final key is NEVER in a policy, so content cannot be replaced after the commit. Default: `pending/`. */\n  pendingPrefix?: string;\n\n  /** How long a policy and its commit token stay good. Default: the helper's POST default. */\n  expiresIn?: IDuration;\n\n  /** Runs BEFORE the copy to the final key, so a hook that throws leaves the object under the pending prefix for a lifecycle rule to collect, rather than stranding it at the final key. */\n  onCommit?: (opts: {\n    bucket: IBucketRef;\n    pendingObject: IObjectRef;\n    object: IObjectRef;\n  }) => ValueOrPromise<void>;\n};\n\nexport type TUploadPolicyRequest = {\n  files: Array<{ fileName: string; contentType?: string; size?: number }>;\n};\n\n/** The MetaLink table belongs to the application. `Schema` defaults to the table IGNIS ships, and widens to any table whose row carries the same fields. */\nexport type TMetaLinkConfig<Schema extends TMetaLinkCompatibleSchema = TMetaLinkSchema> = {\n  model: TValueOrAsyncResolver<typeof BaseRelationalEntity<Schema>>;\n  repository: TValueOrAsyncResolver<DefaultCRUDRepository<Schema>>;\n  createMetaLink?: (opts: {\n    uploadResult: IUploadResult;\n    fileStat: IFileStat;\n    /** The caller's labels. Named for where they used to travel - they arrive in the request BODY now, as form fields on an upload and beside the commit token on a direct one. */\n    query: TUploadQuery;\n  }) => ValueOrPromise<{ count: number; data: TTableObject<Schema> }>;\n};\n\n/** The part of a built-in route an application may change. */\nexport type TStaticAssetRouteConfig = Partial<\n  Omit<IAuthRouteConfig, 'method' | 'request' | 'responses'>\n> & {\n  /** Whether this route is registered. Defaults to true. */\n  enabled?: boolean;\n};\n\nexport type TStaticAssetRoutes = {\n  getBuckets?: TStaticAssetRouteConfig;\n  getBucketByName?: TStaticAssetRouteConfig;\n  createBucket?: TStaticAssetRouteConfig;\n  deleteBucket?: TStaticAssetRouteConfig;\n\n  upload?: TStaticAssetRouteConfig;\n  listObjects?: TStaticAssetRouteConfig;\n  deleteObject?: TStaticAssetRouteConfig;\n  getObjectByName?: TStaticAssetRouteConfig;\n  downloadObjectByName?: TStaticAssetRouteConfig;\n\n  uploadPolicy?: TStaticAssetRouteConfig;\n  uploadCommit?: TStaticAssetRouteConfig;\n\n  recreateMetaLink?: TStaticAssetRouteConfig;\n};\n\nexport type TStaticAssetsComponentOptions<\n  Schema extends TMetaLinkCompatibleSchema = TMetaLinkSchema,\n> = {\n  [key: string]: {\n    controller: {\n      name: string;\n      basePath: string;\n      isStrict?: boolean;\n\n      /** `true` serves a raw nested object path (`/objects/photos/2024/f.jpg`) - a URL shape change; a percent-encoded path keeps working either way. Default: `false`. */\n      rawObjectPath?: boolean;\n\n      /** The single bucket every object route uses. It leaves the URL (`/objects/{objectName}`) and the four bucket-management routes are not registered. The function form is read per request, so an environment variable can be read lazily. */\n      bucket?: TValueOrAsyncResolver<string>;\n\n      /**\n       * The key scope this controller owns, e.g. `inventory/`. Every route refuses a key outside it\n       * as a 404 without calling the storage, `listObjects` lists only inside it, and an upload key\n       * must land inside it: the default name is placed there, a `resolveObjectName` or\n       * `extra.normalizeNameFn` key outside it is refused. `maxFolderDepth` counts the folders below\n       * it. Absent: every key in the bucket.\n       */\n      keyPrefix?: string;\n\n      routes?: TStaticAssetRoutes;\n\n      /** Direct upload: the browser posts the bytes to the storage and IGNIS only signs the permission. Absent leaves both routes unregistered. Requires `bucket` - a policy names one bucket, and a bucket in the URL is a bucket the caller chooses. */\n      directUpload?: TDirectUploadOptions;\n    };\n    extra?: TStaticAssetExtraOptions;\n\n    /** Decides the stored object name of each uploaded file; absent keeps the storage helper's own naming. */\n    resolveObjectName?: TObjectNameResolver;\n\n    /** Registers the application's own routes BEFORE every built-in one, so a literal path wins over the catch-all `rawObjectPath` produces. Hono matches in registration order. */\n    defineRoutesBefore?: TDefineExtraRoutes;\n\n    /** Registers the application's own routes on the generated controller, after every built-in one. */\n    defineExtraRoutes?: TDefineExtraRoutes;\n  } & (\n    | { storage: typeof StaticAssetStorageTypes.BUN_S3; helper: BunS3Helper }\n    | { storage: typeof StaticAssetStorageTypes.DISK; helper: DiskHelper }\n    | { storage: typeof StaticAssetStorageTypes.MINIO; helper: MinioHelper }\n  ) &\n    (\n      | { useMetaLink?: false | undefined }\n      | { useMetaLink: true; metaLink: TMetaLinkConfig<Schema> }\n    );\n};\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../src/components/static-asset/common/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { BaseRestController, IAuthRouteConfig, TRouteContext } from '@/base';\nimport type { IDuration } from '@venizia/ignis-helpers/common';\nimport type {\n  BaseRelationalEntity,\n  DefaultCRUDRepository,\n  TTableObject,\n} from '@venizia/ignis-connectors/postgres';\nimport type {\n  DiskHelper,\n  IBucketRef,\n  IFileStat,\n  IObjectLocation,\n  IObjectRef,\n  IStorageHelper,\n  IUploadResult,\n  TUploadNaming,\n} from '@venizia/ignis-helpers';\nimport type { BunS3Helper } from '@venizia/ignis-helpers/bun-s3';\nimport type { AnyType, TValueOrAsyncResolver, ValueOrPromise } from '@venizia/ignis-helpers/common';\nimport type { TMultipartStorage } from '@venizia/ignis-helpers';\nimport type { TMetaLinkCompatibleSchema, TMetaLinkSchema } from '../models';\nimport type { StaticAssetStorageTypes } from './constants';\n\nexport type TStaticAssetExtraOptions = {\n  parseMultipartBody?: {\n    storage?: TMultipartStorage;\n    uploadDir?: string;\n  };\n\n  /** `folderPath` carries the upload query's target folder - dropping it flattens nested uploads. */\n  normalizeNameFn?: (opts: { file: TUploadNaming }) => string;\n  normalizeLinkFn?: (opts: IObjectLocation) => string;\n\n  /** Maximum folder nesting depth allowed in object paths. Default: 2 */\n  maxFolderDepth?: number;\n\n  /** Largest file the UPLOAD route accepts. Absent means no ceiling. Checked against `content-length` before spooling, then per file after parsing. */\n  maxBytes?: number;\n  [key: string]: AnyType;\n};\n\n/** Decides the key one uploaded file is stored under. `defaultKey` is what IGNIS would have written. */\nexport type TObjectNameResolver = (opts: {\n  bucket: IBucketRef;\n  file: TUploadNaming;\n  defaultKey: string;\n}) => string;\n\n/** Adds routes of the application's own to a generated asset controller. Runs after every built-in route, so a built-in route always wins a path collision. `basePath` is the mount path with exactly one leading slash. */\n/** Adds routes of the application's own. Registration order decides a path collision, so the same shape serves both the before and the after hook. */\nexport type TDefineExtraRoutes = (opts: {\n  controller: BaseRestController;\n  helper: IStorageHelper;\n  basePath: string;\n}) => void;\n\n// Declared by hand rather than inferred: RouteHandler inference here is heavy.\nexport type TBucketParams = { bucketName: string };\nexport type TObjectParams = { bucketName: string; objectName: string };\nexport type TUploadQuery = {\n  principalType?: string;\n  principalId?: string;\n  variant?: string;\n  /** Display order within the principal. Caller-supplied: deriving it would be a non-atomic read of `max(sequence)` then a write of `max + 1`. */\n  sequence?: number;\n  folderPath?: string;\n};\nexport type TListQuery = { prefix?: string; recursive?: string; maxKeys?: string };\n\nexport type TDirectUploadOptions = {\n  /** Who may ask for a policy. REQUIRED, not defaulted: this route hands out a write credential, and there is no safe default for that. */\n  authorize: (opts: { context: TRouteContext }) => ValueOrPromise<boolean>;\n\n  /** Signs the commit token. Keep it out of the repository and out of the client. */\n  secretKey: string;\n\n  /** The ceiling the policy carries as `content-length-range`. A signed PUT cannot express this at all, which is why this is a POST policy. */\n  maxBytes: number;\n\n  /** Where a policy may write. The final key is NEVER in a policy, so content cannot be replaced after the commit. Default: `pending/`. */\n  pendingPrefix?: string;\n\n  /** How long a policy and its commit token stay good. Default: the helper's POST default. */\n  expiresIn?: IDuration;\n\n  /** Runs BEFORE the copy to the final key, so a hook that throws leaves the object under the pending prefix for a lifecycle rule to collect, rather than stranding it at the final key. */\n  onCommit?: (opts: {\n    bucket: IBucketRef;\n    pendingObject: IObjectRef;\n    object: IObjectRef;\n  }) => ValueOrPromise<void>;\n};\n\nexport type TUploadPolicyRequest = {\n  files: Array<{ fileName: string; contentType?: string; size?: number }>;\n};\n\n/** The MetaLink table belongs to the application. `Schema` defaults to the table IGNIS ships, and widens to any table whose row carries the same fields. */\nexport type TMetaLinkConfig<Schema extends TMetaLinkCompatibleSchema = TMetaLinkSchema> = {\n  model: TValueOrAsyncResolver<typeof BaseRelationalEntity<Schema>>;\n  repository: TValueOrAsyncResolver<DefaultCRUDRepository<Schema>>;\n  createMetaLink?: (opts: {\n    uploadResult: IUploadResult;\n    fileStat: IFileStat;\n    /** The caller's labels. Named for where they used to travel - they arrive in the request BODY now, as form fields on an upload and beside the commit token on a direct one. */\n    query: TUploadQuery;\n  }) => ValueOrPromise<{ count: number; data: TTableObject<Schema> }>;\n};\n\n/** The part of a built-in route an application may change. */\nexport type TStaticAssetRouteConfig = Partial<\n  Omit<IAuthRouteConfig, 'method' | 'request' | 'responses'>\n> & {\n  /** Whether this route is registered. Defaults to true. */\n  enabled?: boolean;\n};\n\nexport type TStaticAssetRoutes = {\n  getBuckets?: TStaticAssetRouteConfig;\n  getBucketByName?: TStaticAssetRouteConfig;\n  createBucket?: TStaticAssetRouteConfig;\n  deleteBucket?: TStaticAssetRouteConfig;\n\n  upload?: TStaticAssetRouteConfig;\n  listObjects?: TStaticAssetRouteConfig;\n  deleteObject?: TStaticAssetRouteConfig;\n  getObjectByName?: TStaticAssetRouteConfig;\n  downloadObjectByName?: TStaticAssetRouteConfig;\n\n  uploadPolicy?: TStaticAssetRouteConfig;\n  uploadCommit?: TStaticAssetRouteConfig;\n\n  recreateMetaLink?: TStaticAssetRouteConfig;\n};\n\nexport type TStaticAssetsComponentOptions<\n  Schema extends TMetaLinkCompatibleSchema = TMetaLinkSchema,\n> = {\n  [key: string]: {\n    controller: {\n      name: string;\n      basePath: string;\n      isStrict?: boolean;\n\n      /** `true` serves a raw nested object path (`/objects/photos/2024/f.jpg`) - a URL shape change; a percent-encoded path keeps working either way. Default: `false`. */\n      rawObjectPath?: boolean;\n\n      /** The single bucket every object route uses. It leaves the URL (`/objects/{objectName}`) and the four bucket-management routes are not registered. The function form is read per request, so an environment variable can be read lazily. */\n      bucket?: TValueOrAsyncResolver<string>;\n\n      /**\n       * The key scope this controller owns, e.g. `inventory/`. Every route refuses a key outside it\n       * as a 404 without calling the storage, `listObjects` lists only inside it, and an upload key\n       * must land inside it: the default name is placed there, a `resolveObjectName` or\n       * `extra.normalizeNameFn` key outside it is refused. `maxFolderDepth` counts the folders below\n       * it. Absent: every key in the bucket.\n       */\n      keyPrefix?: string;\n\n      routes?: TStaticAssetRoutes;\n\n      /** Direct upload: the browser posts the bytes to the storage and IGNIS only signs the permission. Absent leaves both routes unregistered. Requires `bucket` - a policy names one bucket, and a bucket in the URL is a bucket the caller chooses. */\n      directUpload?: TDirectUploadOptions;\n    };\n    extra?: TStaticAssetExtraOptions;\n\n    /** Decides the stored object name of each uploaded file; absent keeps the storage helper's own naming. */\n    resolveObjectName?: TObjectNameResolver;\n\n    /** Registers the application's own routes BEFORE every built-in one, so a literal path wins over the catch-all `rawObjectPath` produces. Hono matches in registration order. */\n    defineRoutesBefore?: TDefineExtraRoutes;\n\n    /** Registers the application's own routes on the generated controller, after every built-in one. */\n    defineExtraRoutes?: TDefineExtraRoutes;\n  } & (\n    | { storage: typeof StaticAssetStorageTypes.BUN_S3; helper: BunS3Helper }\n    | { storage: typeof StaticAssetStorageTypes.DISK; helper: DiskHelper }\n  ) &\n    (\n      | { useMetaLink?: false | undefined }\n      | { useMetaLink: true; metaLink: TMetaLinkConfig<Schema> }\n    );\n};\n"]}

package/dist/esm/components/static-asset/component.js

@@ -16,7 +16,7 @@ import { inject } from '../../base/metadata/index.js';
 import { CoreBindings } from '@venizia/ignis-kernel';
 import { Binding } from '@venizia/ignis-kernel';
 import { StaticAssetComponentBindingKeys } from './common/index.js';
-import { AssetControllerFactory, buildObjectLink } from './controller/index.js';
+import { AssetControllerFactory } from './controller/index.js';
 /** `Schema` is the MetaLink table the application binds. It has to live on the CLASS, not only on the options: `component(Ctor, { options })` infers the options from the class, so a class pinned to the shipped table can only carry options for that table. */
 let StaticAssetComponent = StaticAssetComponent_1 = class StaticAssetComponent extends BaseComponent {
     constructor(application) {
@@ -54,7 +54,7 @@ let StaticAssetComponent = StaticAssetComponent_1 = class StaticAssetComponent e
                     ...extra,
                     normalizeLinkFn: extra?.normalizeLinkFn ??
                         // The link follows the URL shape the controller serves: `{objectName}` is one Hono path segment unless `rawObjectPath` widens it, and a configured bucket leaves the path.
-                        ((linkOptions) => buildObjectLink({
+                        ((linkOptions) => AssetControllerFactory.buildObjectLink({
                             basePath: controller.basePath,
                             bucket: linkOptions.bucket,
                             object: linkOptions.object,

package/dist/esm/components/static-asset/component.js.map

@@ -1 +1 @@
-{"version":3,"file":"component.js","sourceRoot":"","sources":["../../../../src/components/static-asset/component.ts"],"names":[],"mappings":";;;;;;;;;;;;;AACA,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAEhD,OAAO,EAAE,+BAA+B,EAAsC,MAAM,UAAU,CAAC;AAE/F,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAEvE,kQAAkQ;AAClQ,IAAa,oBAAoB,4BAAjC,MAAa,oBAEX,SAAQ,aAAoD;IAC5D,YAC8D,WAA4B;QAExF,KAAK,CAAC;YACJ,KAAK,EAAE,sBAAoB,CAAC,IAAI;YAChC,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE;YACrD,QAAQ,EAAE;gBACR,CAAC,+BAA+B,CAAC,8BAA8B,CAAC,EAC9D,OAAO,CAAC,IAAI,CAAgC;oBAC1C,GAAG,EAAE,+BAA+B,CAAC,8BAA8B;iBACpE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;aACjB;SACF,CAAC,CAAC;QAXyD,gBAAW,GAAX,WAAW,CAAiB;IAY1F,CAAC;IAEQ,OAAO;QACd,2FAA2F;QAC3F,8EAA8E;QAC9E,MAAM,gBAAgB,GACpB,IAAI,CAAC,OAAO;YACZ,IAAI,CAAC,WAAW,CAAC,GAAG,CAAwC;gBAC1D,GAAG,EAAE,+BAA+B,CAAC,8BAA8B;aACpE,CAAC,CAAC;QAEL,MAAM,uBAAuB,GAAG,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACjE,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,uBAAuB,EAAE,CAAC;YACjD,MAAM,EACJ,OAAO,EACP,UAAU,EACV,MAAM,EACN,KAAK,EACL,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,GAClB,GAAG,GAAG,CAAC;YAER,IAAI,CAAC,WAAW,CAAC,UAAU,CACzB,sBAAsB,CAAC,qBAAqB,CAAC;gBAC3C,UAAU;gBACV,OAAO;gBACP,MAAM;gBACN,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,QAAQ,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;gBACpD,iBAAiB;gBACjB,kBAAkB;gBAClB,iBAAiB;gBACjB,OAAO,EAAE;oBACP,GAAG,KAAK;oBACR,eAAe,EACb,KAAK,EAAE,eAAe;wBACtB,2KAA2K;wBAC3K,CAAC,CAAC,WAAW,EAAE,EAAE,CACf,eAAe,CAAC;4BACd,QAAQ,EAAE,UAAU,CAAC,QAAQ;4BAC7B,MAAM,EAAE,WAAW,CAAC,MAAM;4BAC1B,MAAM,EAAE,WAAW,CAAC,MAAM;4BAC1B,mBAAmB,EAAE,UAAU,CAAC,MAAM,KAAK,SAAS;4BACpD,aAAa,EAAE,UAAU,CAAC,aAAa;yBACxC,CAAC,CAAC;iBACR;aACF,CAAC,CACH,CAAC;YAEF,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAC1B,iFAAiF,EACjF,GAAG,EACH,OAAO,EACP,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CACzB,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAA;AA1EY,oBAAoB;IAI5B,WAAA,MAAM,CAAC,EAAE,GAAG,EAAE,YAAY,CAAC,oBAAoB,EAAE,CAAC,CAAA;;GAJ1C,oBAAoB,CA0EhC","sourcesContent":["import { type BaseApplication } from '@/base/applications';\nimport { BaseComponent } from '@venizia/ignis-kernel';\nimport { inject } from '@/base/metadata';\nimport { CoreBindings } from '@venizia/ignis-kernel';\nimport { Binding } from '@venizia/ignis-kernel';\nimport { type ValueOrPromise } from '@venizia/ignis-helpers/common';\nimport { StaticAssetComponentBindingKeys, type TStaticAssetsComponentOptions } from './common';\nimport type { TMetaLinkCompatibleSchema, TMetaLinkSchema } from './models';\nimport { AssetControllerFactory, buildObjectLink } from './controller';\n\n/** `Schema` is the MetaLink table the application binds. It has to live on the CLASS, not only on the options: `component(Ctor, { options })` infers the options from the class, so a class pinned to the shipped table can only carry options for that table. */\nexport class StaticAssetComponent<\n  Schema extends TMetaLinkCompatibleSchema = TMetaLinkSchema,\n> extends BaseComponent<TStaticAssetsComponentOptions<Schema>> {\n  constructor(\n    @inject({ key: CoreBindings.APPLICATION_INSTANCE }) private application: BaseApplication,\n  ) {\n    super({\n      scope: StaticAssetComponent.name,\n      initDefault: { enable: true, container: application },\n      bindings: {\n        [StaticAssetComponentBindingKeys.STATIC_ASSET_COMPONENT_OPTIONS]:\n          Binding.bind<TStaticAssetsComponentOptions>({\n            key: StaticAssetComponentBindingKeys.STATIC_ASSET_COMPONENT_OPTIONS,\n          }).toValue({}),\n      },\n    });\n  }\n\n  override binding(): ValueOrPromise<void> {\n    // Direct options win. The key is the path for an application that registers this component\n    // through `configs.artifacts`, where an index carries classes and no options.\n    const componentOptions =\n      this.options ??\n      this.application.get<TStaticAssetsComponentOptions<Schema>>({\n        key: StaticAssetComponentBindingKeys.STATIC_ASSET_COMPONENT_OPTIONS,\n      });\n\n    const componentOptionsEntries = Object.entries(componentOptions);\n    for (const [key, opt] of componentOptionsEntries) {\n      const {\n        storage,\n        controller,\n        helper,\n        extra,\n        resolveObjectName,\n        defineRoutesBefore,\n        defineExtraRoutes,\n      } = opt;\n\n      this.application.controller(\n        AssetControllerFactory.defineAssetController({\n          controller,\n          storage,\n          helper,\n          useMetaLink: opt.useMetaLink,\n          metaLink: opt.useMetaLink ? opt.metaLink : undefined,\n          resolveObjectName,\n          defineRoutesBefore,\n          defineExtraRoutes,\n          options: {\n            ...extra,\n            normalizeLinkFn:\n              extra?.normalizeLinkFn ??\n              // The link follows the URL shape the controller serves: `{objectName}` is one Hono path segment unless `rawObjectPath` widens it, and a configured bucket leaves the path.\n              ((linkOptions) =>\n                buildObjectLink({\n                  basePath: controller.basePath,\n                  bucket: linkOptions.bucket,\n                  object: linkOptions.object,\n                  hasConfiguredBucket: controller.bucket !== undefined,\n                  rawObjectPath: controller.rawObjectPath,\n                })),\n          },\n        }),\n      );\n\n      this.application.logger.info(\n        `[binding] Asset storage is bound | Key: %s | Storage type: %s | UseMetaLink: %s`,\n        key,\n        storage,\n        Boolean(opt.useMetaLink),\n      );\n    }\n  }\n}\n"]}
+{"version":3,"file":"component.js","sourceRoot":"","sources":["../../../../src/components/static-asset/component.ts"],"names":[],"mappings":";;;;;;;;;;;;;AACA,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAEhD,OAAO,EAAE,+BAA+B,EAAsC,MAAM,UAAU,CAAC;AAE/F,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAEtD,kQAAkQ;AAClQ,IAAa,oBAAoB,4BAAjC,MAAa,oBAEX,SAAQ,aAAoD;IAC5D,YAC8D,WAA4B;QAExF,KAAK,CAAC;YACJ,KAAK,EAAE,sBAAoB,CAAC,IAAI;YAChC,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE;YACrD,QAAQ,EAAE;gBACR,CAAC,+BAA+B,CAAC,8BAA8B,CAAC,EAC9D,OAAO,CAAC,IAAI,CAAgC;oBAC1C,GAAG,EAAE,+BAA+B,CAAC,8BAA8B;iBACpE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;aACjB;SACF,CAAC,CAAC;QAXyD,gBAAW,GAAX,WAAW,CAAiB;IAY1F,CAAC;IAEQ,OAAO;QACd,2FAA2F;QAC3F,8EAA8E;QAC9E,MAAM,gBAAgB,GACpB,IAAI,CAAC,OAAO;YACZ,IAAI,CAAC,WAAW,CAAC,GAAG,CAAwC;gBAC1D,GAAG,EAAE,+BAA+B,CAAC,8BAA8B;aACpE,CAAC,CAAC;QAEL,MAAM,uBAAuB,GAAG,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACjE,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,uBAAuB,EAAE,CAAC;YACjD,MAAM,EACJ,OAAO,EACP,UAAU,EACV,MAAM,EACN,KAAK,EACL,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,GAClB,GAAG,GAAG,CAAC;YAER,IAAI,CAAC,WAAW,CAAC,UAAU,CACzB,sBAAsB,CAAC,qBAAqB,CAAC;gBAC3C,UAAU;gBACV,OAAO;gBACP,MAAM;gBACN,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,QAAQ,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;gBACpD,iBAAiB;gBACjB,kBAAkB;gBAClB,iBAAiB;gBACjB,OAAO,EAAE;oBACP,GAAG,KAAK;oBACR,eAAe,EACb,KAAK,EAAE,eAAe;wBACtB,2KAA2K;wBAC3K,CAAC,CAAC,WAAW,EAAE,EAAE,CACf,sBAAsB,CAAC,eAAe,CAAC;4BACrC,QAAQ,EAAE,UAAU,CAAC,QAAQ;4BAC7B,MAAM,EAAE,WAAW,CAAC,MAAM;4BAC1B,MAAM,EAAE,WAAW,CAAC,MAAM;4BAC1B,mBAAmB,EAAE,UAAU,CAAC,MAAM,KAAK,SAAS;4BACpD,aAAa,EAAE,UAAU,CAAC,aAAa;yBACxC,CAAC,CAAC;iBACR;aACF,CAAC,CACH,CAAC;YAEF,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAC1B,iFAAiF,EACjF,GAAG,EACH,OAAO,EACP,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CACzB,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAA;AA1EY,oBAAoB;IAI5B,WAAA,MAAM,CAAC,EAAE,GAAG,EAAE,YAAY,CAAC,oBAAoB,EAAE,CAAC,CAAA;;GAJ1C,oBAAoB,CA0EhC","sourcesContent":["import { type BaseApplication } from '@/base/applications';\nimport { BaseComponent } from '@venizia/ignis-kernel';\nimport { inject } from '@/base/metadata';\nimport { CoreBindings } from '@venizia/ignis-kernel';\nimport { Binding } from '@venizia/ignis-kernel';\nimport { type ValueOrPromise } from '@venizia/ignis-helpers/common';\nimport { StaticAssetComponentBindingKeys, type TStaticAssetsComponentOptions } from './common';\nimport type { TMetaLinkCompatibleSchema, TMetaLinkSchema } from './models';\nimport { AssetControllerFactory } from './controller';\n\n/** `Schema` is the MetaLink table the application binds. It has to live on the CLASS, not only on the options: `component(Ctor, { options })` infers the options from the class, so a class pinned to the shipped table can only carry options for that table. */\nexport class StaticAssetComponent<\n  Schema extends TMetaLinkCompatibleSchema = TMetaLinkSchema,\n> extends BaseComponent<TStaticAssetsComponentOptions<Schema>> {\n  constructor(\n    @inject({ key: CoreBindings.APPLICATION_INSTANCE }) private application: BaseApplication,\n  ) {\n    super({\n      scope: StaticAssetComponent.name,\n      initDefault: { enable: true, container: application },\n      bindings: {\n        [StaticAssetComponentBindingKeys.STATIC_ASSET_COMPONENT_OPTIONS]:\n          Binding.bind<TStaticAssetsComponentOptions>({\n            key: StaticAssetComponentBindingKeys.STATIC_ASSET_COMPONENT_OPTIONS,\n          }).toValue({}),\n      },\n    });\n  }\n\n  override binding(): ValueOrPromise<void> {\n    // Direct options win. The key is the path for an application that registers this component\n    // through `configs.artifacts`, where an index carries classes and no options.\n    const componentOptions =\n      this.options ??\n      this.application.get<TStaticAssetsComponentOptions<Schema>>({\n        key: StaticAssetComponentBindingKeys.STATIC_ASSET_COMPONENT_OPTIONS,\n      });\n\n    const componentOptionsEntries = Object.entries(componentOptions);\n    for (const [key, opt] of componentOptionsEntries) {\n      const {\n        storage,\n        controller,\n        helper,\n        extra,\n        resolveObjectName,\n        defineRoutesBefore,\n        defineExtraRoutes,\n      } = opt;\n\n      this.application.controller(\n        AssetControllerFactory.defineAssetController({\n          controller,\n          storage,\n          helper,\n          useMetaLink: opt.useMetaLink,\n          metaLink: opt.useMetaLink ? opt.metaLink : undefined,\n          resolveObjectName,\n          defineRoutesBefore,\n          defineExtraRoutes,\n          options: {\n            ...extra,\n            normalizeLinkFn:\n              extra?.normalizeLinkFn ??\n              // The link follows the URL shape the controller serves: `{objectName}` is one Hono path segment unless `rawObjectPath` widens it, and a configured bucket leaves the path.\n              ((linkOptions) =>\n                AssetControllerFactory.buildObjectLink({\n                  basePath: controller.basePath,\n                  bucket: linkOptions.bucket,\n                  object: linkOptions.object,\n                  hasConfiguredBucket: controller.bucket !== undefined,\n                  rawObjectPath: controller.rawObjectPath,\n                })),\n          },\n        }),\n      );\n\n      this.application.logger.info(\n        `[binding] Asset storage is bound | Key: %s | Storage type: %s | UseMetaLink: %s`,\n        key,\n        storage,\n        Boolean(opt.useMetaLink),\n      );\n    }\n  }\n}\n"]}

package/dist/esm/components/static-asset/controller/base.definition.d.ts

@@ -19,10 +19,10 @@ export interface IAssetDefinitions {
  * `hasConfiguredBucket` drops `/buckets/{bucketName}` and its param from every object route.
  * `rawObjectPath` appends the `{.+}` catch-all, the spelling `@hono/zod-openapi` translates.
  */
-export declare const buildAssetDefinitions: (opts: {
-    hasConfiguredBucket?: boolean;
-    rawObjectPath?: boolean;
-}) => IAssetDefinitions;
-/** The bucket-in-path shape, unchanged - every existing importer keeps working. */
-export declare const StaticAssetDefinitions: IAssetDefinitions;
+export declare class AssetDefinitionBuilder {
+    static build(opts: {
+        hasConfiguredBucket?: boolean;
+        rawObjectPath?: boolean;
+    }): IAssetDefinitions;
+}
 //# sourceMappingURL=base.definition.d.ts.map

package/dist/esm/components/static-asset/controller/base.definition.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base.definition.d.ts","sourceRoot":"","sources":["../../../../../src/components/static-asset/controller/base.definition.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,QAAQ,CAAC;AAiE/C,0GAA0G;AAC1G,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,gBAAgB,CAAC;IAC9B,kBAAkB,EAAE,gBAAgB,CAAC;IACrC,aAAa,EAAE,gBAAgB,CAAC;IAChC,aAAa,EAAE,gBAAgB,CAAC;IAChC,kBAAkB,EAAE,gBAAgB,CAAC;IACrC,uBAAuB,EAAE,gBAAgB,CAAC;IAC1C,aAAa,EAAE,gBAAgB,CAAC;IAChC,aAAa,EAAE,gBAAgB,CAAC;IAChC,MAAM,EAAE,gBAAgB,CAAC;IACzB,aAAa,EAAE,gBAAgB,CAAC;IAChC,YAAY,EAAE,gBAAgB,CAAC;IAC/B,iBAAiB,EAAE,gBAAgB,CAAC;CACrC;AAED;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,GAAI,MAAM;IAC1C,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB,KAAG,iBAkQH,CAAC;AAEF,mFAAmF;AACnF,eAAO,MAAM,sBAAsB,mBAA4B,CAAC"}
+{"version":3,"file":"base.definition.d.ts","sourceRoot":"","sources":["../../../../../src/components/static-asset/controller/base.definition.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,QAAQ,CAAC;AAiE/C,0GAA0G;AAC1G,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,gBAAgB,CAAC;IAC9B,kBAAkB,EAAE,gBAAgB,CAAC;IACrC,aAAa,EAAE,gBAAgB,CAAC;IAChC,aAAa,EAAE,gBAAgB,CAAC;IAChC,kBAAkB,EAAE,gBAAgB,CAAC;IACrC,uBAAuB,EAAE,gBAAgB,CAAC;IAC1C,aAAa,EAAE,gBAAgB,CAAC;IAChC,aAAa,EAAE,gBAAgB,CAAC;IAChC,MAAM,EAAE,gBAAgB,CAAC;IACzB,aAAa,EAAE,gBAAgB,CAAC;IAChC,YAAY,EAAE,gBAAgB,CAAC;IAC/B,iBAAiB,EAAE,gBAAgB,CAAC;CACrC;AAED;;;;GAIG;AACH,qBAAa,sBAAsB;IACjC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE;QACjB,mBAAmB,CAAC,EAAE,OAAO,CAAC;QAC9B,aAAa,CAAC,EAAE,OAAO,CAAC;KACzB,GAAG,iBAAiB;CAoQtB"}