@voltro/plugin-storage 0.33.0 → 0.35.0

package/dist/rpc.js

@@ -47,7 +47,8 @@ var c = i.Literal("user", "group", "apiKey"), l = i.Literal("read", "write"), u
 		refs: i.Array(d),
 		nextOffset: i.NullOr(i.Number)
 	}),
-	error: t
+	error: t,
+	guards: [{ scope: "storage:browse" }]
 }), p = a({
 	name: "storage.mintUrl",
 	input: i.Struct({
@@ -56,7 +57,8 @@ var c = i.Literal("user", "group", "apiKey"), l = i.Literal("read", "write"), u
 		expiresInSec: i.optional(i.Number)
 	}),
 	output: i.Struct({ url: i.String }),
-	error: i.Union(t, e)
+	error: i.Union(t, e),
+	openAccess: "per-object authorization: the access policy + grants decide this subject's read (StorageAccessDenied on refusal); a scope here would double-gate what the policy already decides per object"
 }), m = a({
 	name: "storage.mintUploadUrl",
 	input: i.Struct({
@@ -65,7 +67,8 @@ var c = i.Literal("user", "group", "apiKey"), l = i.Literal("read", "write"), u
 		expiresInSec: i.optional(i.Number)
 	}),
 	output: i.Struct({ url: i.String }),
-	error: t
+	error: t,
+	guards: [{ scope: "storage:manage" }]
 }), h = a({
 	name: "storage.mintUploadTicket",
 	input: i.Struct({
@@ -82,7 +85,8 @@ var c = i.Literal("user", "group", "apiKey"), l = i.Literal("read", "write"), u
 		uploadUrl: i.String,
 		expiresInSec: i.Number
 	}),
-	error: t
+	error: t,
+	openAccess: "self-service upload: the ticket binds the calling subject + tenant, caps size, and the finalize path runs limits + scan"
 }), g = a({
 	name: "storage.mintPresignedUpload",
 	input: i.Struct({
@@ -99,7 +103,8 @@ var c = i.Literal("user", "group", "apiKey"), l = i.Literal("read", "write"), u
 		finalizeToken: i.String,
 		expiresInSec: i.Number
 	}),
-	error: t
+	error: t,
+	openAccess: "self-service upload: the finalize token binds the calling subject + tenant; finalizeUpload refuses another subject's token and runs limits + scan"
 }), _ = a({
 	name: "storage.finalizeUpload",
 	input: i.Struct({ finalizeToken: i.String }),
@@ -111,7 +116,8 @@ var c = i.Literal("user", "group", "apiKey"), l = i.Literal("read", "write"), u
 		width: i.optional(i.Number),
 		height: i.optional(i.Number)
 	}),
-	error: i.Union(t, n, r)
+	error: i.Union(t, n, r),
+	openAccess: "authorization is the signed finalize token itself: it binds the minting subject (403 for another caller) and the finalize runs limits + scan"
 }), v = a({
 	name: "storage.beginResumableUpload",
 	input: i.Struct({
@@ -132,7 +138,8 @@ var c = i.Literal("user", "group", "apiKey"), l = i.Literal("read", "write"), u
 		chunkSize: i.Number,
 		expiresInSec: i.Number
 	}),
-	error: t
+	error: t,
+	openAccess: "self-service upload: the resumable token binds the calling subject + tenant and the assembled object runs limits + scan"
 }), y = a({
 	name: "storage.beginMultipartUpload",
 	input: i.Struct({
@@ -151,7 +158,8 @@ var c = i.Literal("user", "group", "apiKey"), l = i.Literal("read", "write"), u
 		partSize: i.Number,
 		expiresInSec: i.Number
 	}),
-	error: t
+	error: t,
+	openAccess: "self-service upload: the multipart token binds the calling subject + tenant; completion refuses another subject's token"
 }), b = a({
 	name: "storage.signMultipartPart",
 	input: i.Struct({
@@ -159,7 +167,8 @@ var c = i.Literal("user", "group", "apiKey"), l = i.Literal("read", "write"), u
 		partNumber: i.Number
 	}),
 	output: i.Struct({ url: i.String }),
-	error: t
+	error: t,
+	openAccess: "authorization is the signed multipart token: parts can only be signed for a session a subject legitimately began"
 }), x = a({
 	name: "storage.completeMultipartUpload",
 	input: i.Struct({
@@ -174,12 +183,14 @@ var c = i.Literal("user", "group", "apiKey"), l = i.Literal("read", "write"), u
 		url: i.String,
 		size: i.Number
 	}),
-	error: i.Union(t, n)
+	error: i.Union(t, n),
+	openAccess: "authorization is the signed multipart token: completion refuses a token minted by another subject"
 }), S = a({
 	name: "storage.abortMultipartUpload",
 	input: i.Struct({ multipartToken: i.String }),
 	output: i.Struct({ ok: i.Boolean }),
-	error: t
+	error: t,
+	openAccess: "authorization is the signed multipart token: aborting releases the caller's own upload session"
 }), C = a({
 	name: "storage.upload",
 	input: i.Struct({
@@ -193,7 +204,8 @@ var c = i.Literal("user", "group", "apiKey"), l = i.Literal("read", "write"), u
 		id: i.String,
 		url: i.String
 	}),
-	error: i.Union(t, n, r)
+	error: i.Union(t, n, r),
+	openAccess: "self-service upload: ownerId/tenant come from the calling subject and the put runs limits + scan"
 }), w = a({
 	name: "storage.ingestUrl",
 	input: i.Struct({
@@ -209,7 +221,8 @@ var c = i.Literal("user", "group", "apiKey"), l = i.Literal("read", "write"), u
 		id: i.String,
 		url: i.String
 	}),
-	error: i.Union(t, n, r)
+	error: i.Union(t, n, r),
+	guards: [{ scope: "storage:manage" }]
 }), T = o({
 	name: "storage.share",
 	input: i.Struct({
@@ -220,17 +233,20 @@ var c = i.Literal("user", "group", "apiKey"), l = i.Literal("read", "write"), u
 		expiresInDays: i.optional(i.Number)
 	}),
 	output: i.Struct({ grantId: i.String }),
-	error: t
+	error: t,
+	openAccess: "owner-or-admin enforced in-handler (assertMayAdministerGrants): only the ref's owner or admin:full may grant, which is stricter per object than any global scope"
 }), E = o({
 	name: "storage.revoke",
 	input: i.Struct({ grantId: i.String }),
 	output: i.Struct({ ok: i.Boolean }),
-	error: t
+	error: t,
+	openAccess: "owner-or-admin enforced in-handler: only the owning subject (or admin:full) of the grant's object may revoke; unknown and unowned grants report the same 403"
 }), D = s({
 	name: "storage.listGrants",
 	input: i.Struct({ refId: i.String }),
 	output: i.Struct({ grants: i.Array(u) }),
-	error: t
+	error: t,
+	openAccess: "owner-or-admin enforced in-handler: who an object is shared with is readable only by the object's owner or admin:full"
 }), O = [
 	{
 		tag: "storage.mintUrl",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voltro/plugin-storage",
-  "version": "0.33.0",
+  "version": "0.35.0",
   "description": "File-storage plugin — one StorageProvider contract, switchable backends (S3 / MinIO / Azure / filesystem / memory / database). Public (CDN-direct) + private (access policy + per-object grants) objects, upload constraints, virus-scan hook, on-the-fly image transforms.",
   "keywords": [
     "voltro",
@@ -43,9 +43,9 @@
     "node": ">=24.0.0"
   },
   "dependencies": {
-    "@voltro/database": "0.33.0",
-    "@voltro/env": "0.33.0",
-    "@voltro/protocol": "0.33.0"
+    "@voltro/database": "0.35.0",
+    "@voltro/env": "0.35.0",
+    "@voltro/protocol": "0.35.0"
   },
   "optionalDependencies": {
     "@aws-sdk/client-s3": "^3.1096.0",