@voltro/plugin-storage 0.84.0 → 0.86.0

package/dist/rpc.js

@@ -1,17 +1,21 @@
 import { StorageAccessDenied as e, StorageError as t, StorageRejected as n, StorageScanRejected as r } from "./types.js";
 import { Schema as i } from "effect";
-import { defineAction as a, defineMutation as o, defineQuery as s } from "@voltro/protocol";
+import { StorageAccessPolicySchema as a, defineAction as o, defineMutation as s, defineQuery as c } from "@voltro/protocol";
 //#region src/rpc.ts
-var c = i.Literal("user", "group", "apiKey"), l = i.Literal("read", "write"), u = i.Struct({
+var l = i.Literals([
+	"user",
+	"group",
+	"apiKey"
+]), u = i.Literals(["read", "write"]), d = i.Struct({
 	id: i.String,
 	refId: i.String,
-	principalType: c,
+	principalType: l,
 	principalId: i.String,
-	permission: l,
+	permission: u,
 	createdAt: i.String,
 	expiresAt: i.NullOr(i.String),
 	createdBy: i.NullOr(i.String)
-}), d = i.Struct({
+}), f = i.Struct({
 	id: i.String,
 	tenantId: i.NullOr(i.String),
 	ownerId: i.NullOr(i.String),
@@ -20,7 +24,7 @@ var c = i.Literal("user", "group", "apiKey"), l = i.Literal("read", "write"), u
 	contentType: i.String,
 	size: i.Number,
 	checksum: i.String,
-	visibility: i.Literal("public", "private"),
+	visibility: i.Literals(["public", "private"]),
 	hasPassword: i.Boolean,
 	createdAt: i.String,
 	width: i.NullOr(i.Number),
@@ -33,7 +37,7 @@ var c = i.Literal("user", "group", "apiKey"), l = i.Literal("read", "write"), u
 	caption: i.NullOr(i.String),
 	derivedFrom: i.NullOr(i.String),
 	kind: i.NullOr(i.String)
-}), f = s({
+}), p = c({
 	name: "storage.listRefs",
 	input: i.Struct({
 		folder: i.optional(i.String),
@@ -44,12 +48,12 @@ var c = i.Literal("user", "group", "apiKey"), l = i.Literal("read", "write"), u
 		offset: i.optional(i.Number)
 	}),
 	output: i.Struct({
-		refs: i.Array(d),
+		refs: i.Array(f),
 		nextOffset: i.NullOr(i.Number)
 	}),
 	error: t,
 	guards: [{ scope: "storage:browse" }]
-}), p = a({
+}), m = o({
 	name: "storage.mintUrl",
 	input: i.Struct({
 		id: i.String,
@@ -57,9 +61,9 @@ var c = i.Literal("user", "group", "apiKey"), l = i.Literal("read", "write"), u
 		expiresInSec: i.optional(i.Number)
 	}),
 	output: i.Struct({ url: i.String }),
-	error: i.Union(t, e),
+	error: i.Union([t, e]),
 	openAccess: "per-object authorization: the access policy + grants decide this subject's read (StorageAccessDenied on refusal); a scope here would double-gate what the policy already decides per object"
-}), m = a({
+}), h = o({
 	name: "storage.mintUploadUrl",
 	input: i.Struct({
 		key: i.String,
@@ -69,11 +73,13 @@ var c = i.Literal("user", "group", "apiKey"), l = i.Literal("read", "write"), u
 	output: i.Struct({ url: i.String }),
 	error: t,
 	guards: [{ scope: "storage:manage" }]
-}), h = a({
+}), g = o({
 	name: "storage.mintUploadTicket",
 	input: i.Struct({
+		operationId: i.optional(i.String.pipe(i.check(i.makeFilter((e) => e.trim().length > 0)), i.check(i.isMaxLength(200)))),
 		contentType: i.String,
-		visibility: i.optional(i.Literal("public", "private")),
+		visibility: i.optional(i.Literals(["public", "private"])),
+		access: i.optional(a),
 		key: i.optional(i.String),
 		folder: i.optional(i.String),
 		tags: i.optional(i.Array(i.String)),
@@ -83,15 +89,17 @@ var c = i.Literal("user", "group", "apiKey"), l = i.Literal("read", "write"), u
 	}),
 	output: i.Struct({
 		uploadUrl: i.String,
-		expiresInSec: i.Number
+		expiresInSec: i.Number,
+		operationId: i.optional(i.String)
 	}),
 	error: t,
 	openAccess: "self-service upload: the ticket binds the calling subject + tenant, caps size, and the finalize path runs limits + scan; an unidentified caller is refused in-handler unless the app set `anonymousUploads`"
-}), g = a({
+}), _ = o({
 	name: "storage.mintPresignedUpload",
 	input: i.Struct({
 		contentType: i.String,
-		visibility: i.optional(i.Literal("public", "private")),
+		visibility: i.optional(i.Literals(["public", "private"])),
+		access: i.optional(a),
 		folder: i.optional(i.String),
 		tags: i.optional(i.Array(i.String)),
 		alt: i.optional(i.String),
@@ -105,7 +113,7 @@ var c = i.Literal("user", "group", "apiKey"), l = i.Literal("read", "write"), u
 	}),
 	error: t,
 	openAccess: "self-service upload: the finalize token binds the calling subject + tenant; finalizeUpload refuses another subject's token and runs limits + scan; an unidentified caller is refused in-handler unless the app set `anonymousUploads`"
-}), _ = a({
+}), v = o({
 	name: "storage.finalizeUpload",
 	input: i.Struct({ finalizeToken: i.String }),
 	output: i.Struct({
@@ -116,14 +124,19 @@ var c = i.Literal("user", "group", "apiKey"), l = i.Literal("read", "write"), u
 		width: i.optional(i.Number),
 		height: i.optional(i.Number)
 	}),
-	error: i.Union(t, n, r),
+	error: i.Union([
+		t,
+		n,
+		r
+	]),
 	openAccess: "authorization is the signed finalize token itself: it binds the minting subject where there was one (403 for another caller; an anonymous ticket is bound by possession of the short-lived token alone) and the finalize runs limits + scan"
-}), v = a({
+}), y = o({
 	name: "storage.beginResumableUpload",
 	input: i.Struct({
 		contentType: i.String,
 		size: i.Number,
-		visibility: i.optional(i.Literal("public", "private")),
+		visibility: i.optional(i.Literals(["public", "private"])),
+		access: i.optional(a),
 		folder: i.optional(i.String),
 		tags: i.optional(i.Array(i.String)),
 		alt: i.optional(i.String),
@@ -140,12 +153,13 @@ var c = i.Literal("user", "group", "apiKey"), l = i.Literal("read", "write"), u
 	}),
 	error: t,
 	openAccess: "self-service upload: the resumable token binds the calling subject + tenant and the assembled object runs limits + scan; an unidentified caller is refused in-handler unless the app set `anonymousUploads`"
-}), y = a({
+}), b = o({
 	name: "storage.beginMultipartUpload",
 	input: i.Struct({
 		contentType: i.String,
 		size: i.Number,
-		visibility: i.optional(i.Literal("public", "private")),
+		visibility: i.optional(i.Literals(["public", "private"])),
+		access: i.optional(a),
 		folder: i.optional(i.String),
 		tags: i.optional(i.Array(i.String)),
 		alt: i.optional(i.String),
@@ -160,7 +174,7 @@ var c = i.Literal("user", "group", "apiKey"), l = i.Literal("read", "write"), u
 	}),
 	error: t,
 	openAccess: "self-service upload: the multipart token binds the calling subject + tenant; completion refuses another subject's token; an unidentified caller is refused in-handler unless the app set `anonymousUploads`"
-}), b = a({
+}), x = o({
 	name: "storage.signMultipartPart",
 	input: i.Struct({
 		multipartToken: i.String,
@@ -169,7 +183,7 @@ var c = i.Literal("user", "group", "apiKey"), l = i.Literal("read", "write"), u
 	output: i.Struct({ url: i.String }),
 	error: t,
 	openAccess: "authorization is the signed multipart token: parts can only be signed for a session a subject legitimately began"
-}), x = a({
+}), S = o({
 	name: "storage.completeMultipartUpload",
 	input: i.Struct({
 		multipartToken: i.String,
@@ -183,20 +197,21 @@ var c = i.Literal("user", "group", "apiKey"), l = i.Literal("read", "write"), u
 		url: i.String,
 		size: i.Number
 	}),
-	error: i.Union(t, n),
+	error: i.Union([t, n]),
 	openAccess: "authorization is the signed multipart token: completion refuses a token minted by another subject, and where there was none the binding is possession of the short-lived token alone"
-}), S = a({
+}), C = o({
 	name: "storage.abortMultipartUpload",
 	input: i.Struct({ multipartToken: i.String }),
 	output: i.Struct({ ok: i.Boolean }),
 	error: t,
 	openAccess: "authorization is the signed multipart token: aborting releases the caller's own upload session"
-}), C = a({
+}), w = o({
 	name: "storage.upload",
 	input: i.Struct({
 		bytesBase64: i.String,
 		contentType: i.String,
-		visibility: i.optional(i.Literal("public", "private")),
+		visibility: i.optional(i.Literals(["public", "private"])),
+		access: i.optional(a),
 		key: i.optional(i.String),
 		password: i.optional(i.String)
 	}),
@@ -204,13 +219,17 @@ var c = i.Literal("user", "group", "apiKey"), l = i.Literal("read", "write"), u
 		id: i.String,
 		url: i.String
 	}),
-	error: i.Union(t, n, r),
+	error: i.Union([
+		t,
+		n,
+		r
+	]),
 	openAccess: "self-service upload: ownerId/tenant come from the calling subject and the put runs limits + scan; an unidentified caller is refused in-handler unless the app set `anonymousUploads`"
-}), w = a({
+}), T = o({
 	name: "storage.ingestUrl",
 	input: i.Struct({
 		url: i.String,
-		visibility: i.optional(i.Literal("public", "private")),
+		visibility: i.optional(i.Literals(["public", "private"])),
 		folder: i.optional(i.String),
 		tags: i.optional(i.Array(i.String)),
 		alt: i.optional(i.String),
@@ -221,33 +240,37 @@ var c = i.Literal("user", "group", "apiKey"), l = i.Literal("read", "write"), u
 		id: i.String,
 		url: i.String
 	}),
-	error: i.Union(t, n, r),
+	error: i.Union([
+		t,
+		n,
+		r
+	]),
 	guards: [{ scope: "storage:manage" }]
-}), T = o({
+}), E = s({
 	name: "storage.share",
 	input: i.Struct({
 		refId: i.String,
-		principalType: c,
+		principalType: l,
 		principalId: i.String,
-		permission: i.optional(l),
+		permission: i.optional(u),
 		expiresInDays: i.optional(i.Number)
 	}),
 	output: i.Struct({ grantId: i.String }),
 	error: t,
 	openAccess: "owner-or-admin enforced in-handler (assertMayAdministerGrants): only the ref's owner or admin:full may grant, which is stricter per object than any global scope"
-}), E = o({
+}), D = s({
 	name: "storage.revoke",
 	input: i.Struct({ grantId: i.String }),
 	output: i.Struct({ ok: i.Boolean }),
 	error: t,
 	openAccess: "owner-or-admin enforced in-handler: only the owning subject (or admin:full) of the grant's object may revoke; unknown and unowned grants report the same 403"
-}), D = s({
+}), O = c({
 	name: "storage.listGrants",
 	input: i.Struct({ refId: i.String }),
-	output: i.Struct({ grants: i.Array(u) }),
+	output: i.Struct({ grants: i.Array(d) }),
 	error: t,
 	openAccess: "owner-or-admin enforced in-handler: who an object is shared with is readable only by the object's owner or admin:full"
-}), O = [
+}), k = [
 	{
 		tag: "storage.mintUrl",
 		kind: "action",
@@ -378,4 +401,4 @@ var c = i.Literal("user", "group", "apiKey"), l = i.Literal("read", "write"), u
 	}
 ];
 //#endregion
-export { S as abortMultipartUploadDescriptor, y as beginMultipartUploadDescriptor, v as beginResumableUploadDescriptor, x as completeMultipartUploadDescriptor, _ as finalizeUploadDescriptor, w as ingestUrlDescriptor, D as listGrantsDescriptor, f as listRefsDescriptor, g as mintPresignedUploadDescriptor, h as mintUploadTicketDescriptor, m as mintUploadUrlDescriptor, p as mintUrlDescriptor, E as revokeDescriptor, T as shareDescriptor, b as signMultipartPartDescriptor, O as storageRpcClientImports, C as uploadDescriptor };
+export { C as abortMultipartUploadDescriptor, b as beginMultipartUploadDescriptor, y as beginResumableUploadDescriptor, S as completeMultipartUploadDescriptor, v as finalizeUploadDescriptor, T as ingestUrlDescriptor, O as listGrantsDescriptor, p as listRefsDescriptor, _ as mintPresignedUploadDescriptor, g as mintUploadTicketDescriptor, h as mintUploadUrlDescriptor, m as mintUrlDescriptor, D as revokeDescriptor, E as shareDescriptor, x as signMultipartPartDescriptor, k as storageRpcClientImports, w as uploadDescriptor };

package/dist/scanners.js

@@ -0,0 +1,46 @@
+import { storageEnv as e } from "./env.js";
+//#region src/scanners.ts
+var t = (e, t = 65536) => {
+	let n = [Buffer.from("zINSTREAM\0", "utf8")];
+	for (let r = 0; r < e.length; r += t) {
+		let i = e.subarray(r, Math.min(r + t, e.length)), a = Buffer.alloc(4);
+		a.writeUInt32BE(i.length, 0), n.push(a, Buffer.from(i));
+	}
+	let r = Buffer.alloc(4);
+	return r.writeUInt32BE(0, 0), n.push(r), Buffer.concat(n);
+}, n = (e) => {
+	let t = e.replace(/\0+$/, "").trim();
+	if (/\bOK$/.test(t)) return { clean: !0 };
+	let n = /:\s*(.+?)\s+FOUND$/.exec(t);
+	if (n) return {
+		clean: !1,
+		threat: n[1] ?? "unknown"
+	};
+	throw Error(`clamav: unexpected response: ${t}`);
+}, r = async (r, i) => {
+	let a = await import("node:net"), o = e.read("CLAMAV_HOST", i.host) ?? "127.0.0.1", s = e.read("CLAMAV_PORT"), c = i.port ?? (s ? Number(s) : 3310), l = i.timeoutMs ?? 3e4;
+	return new Promise((e, s) => {
+		let u = a.createConnection({
+			host: o,
+			port: c
+		}), d = "", f = setTimeout(() => {
+			u.destroy(), s(/* @__PURE__ */ Error("clamav scan timed out"));
+		}, l);
+		u.on("error", (e) => {
+			clearTimeout(f), s(e);
+		}), u.on("connect", () => {
+			u.end(t(r, i.chunkSize));
+		}), u.on("data", (e) => {
+			d += e.toString("utf8");
+		}), u.on("close", () => {
+			clearTimeout(f);
+			try {
+				e(n(d));
+			} catch (e) {
+				s(e);
+			}
+		});
+	});
+}, i = (e = {}) => (t) => r(t.bytes, e);
+//#endregion
+export { i as clamavScanner, t as encodeInstream, n as parseClamavResponse };