@voltro/plugin-storage 0.69.1 → 0.71.0

package/dist/types.d.ts

@@ -373,6 +373,15 @@ export declare interface StorageServiceShape {
         readonly bytes: Uint8Array;
         readonly ref: StorageRef;
     }, StorageError>;
+    /** Trusted server-side streamed read with the same tenant guard as get.
+     * Provider acquisition is lazy; callers must authorize private-object access.
+     * Providers without getStream fall back to a buffered provider read. */
+    readonly getStream: (id: string, opts?: {
+        readonly tenantId?: string | null;
+    }) => Effect.Effect<{
+        readonly stream: ByteStream;
+        readonly ref: StorageRef;
+    }, StorageError>;
     /** Direct/presigned URL for an object. For PUBLIC objects this is the
      *  CDN/bucket URL (no app round-trip).
      *
@@ -462,8 +471,12 @@ export declare interface StorageServiceShape {
      *  migration / "adopt this remote image"). The content-type comes from the
      *  response unless overridden. NOTE: this fetches an arbitrary URL from the
      *  server — pass only trusted URLs (SSRF); front it with an allow-list if the
-     *  URL is user-supplied. */
+     *  URL is user-supplied. Reads are bounded by `limits.maxBytes` (64 MiB when
+     *  absent) before the scanning/checksum/put pipeline. This is bounded
+     *  buffering, not a zero-copy provider stream. Effect interruption cancels
+     *  the HTTP read; an optional caller signal interrupts the entire ingest. */
     readonly ingestUrl: (url: string, opts?: {
+        readonly abortSignal?: AbortSignal;
         readonly contentType?: string;
         readonly tenantId?: string | null;
         readonly ownerId?: string | null;
@@ -624,7 +637,8 @@ export declare type Transcoder = (input: {
 }) => ReadonlyArray<Rendition> | Promise<ReadonlyArray<Rendition>> | Effect.Effect<ReadonlyArray<Rendition>>;
 
 export declare interface UploadLimits {
-    /** Reject uploads larger than this many bytes. */
+    /** Reject uploads larger than this many bytes. URL ingestion enforces this
+     * while reading the response; absent a limit, ingestion caps at 64 MiB. */
     readonly maxBytes?: number;
     /** Allowed content types — exact (`application/pdf`) or wildcard
      *  (`image/*`). Omit to allow any. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voltro/plugin-storage",
-  "version": "0.69.1",
+  "version": "0.71.0",
   "description": "File-storage plugin — one StorageProvider contract, switchable backends (S3 / MinIO / Azure / filesystem / memory / database). Public (CDN-direct) + private (access policy + per-object grants) objects, upload constraints, virus-scan hook, on-the-fly image transforms.",
   "keywords": [
     "voltro",
@@ -43,9 +43,9 @@
     "node": ">=24.0.0"
   },
   "dependencies": {
-    "@voltro/database": "0.69.1",
-    "@voltro/env": "0.69.1",
-    "@voltro/protocol": "0.69.1"
+    "@voltro/database": "0.71.0",
+    "@voltro/env": "0.71.0",
+    "@voltro/protocol": "0.71.0"
   },
   "optionalDependencies": {
     "@aws-sdk/client-s3": "^3.1126.0",