@warlock.js/core 5.31.0 → 5.33.0

package/esm/http/uploads/image-variant-types.d.mts

@@ -1,10 +1,9 @@
 import { ImageVariantDefinition, ImageVariantOutputFormat } from "../uploads-types.mjs";
-
 //#region ../../packages/core/src/http/uploads/image-variant-types.d.ts
 /**
  * The `uploads.images` config after validation, with every default applied
  */
-type ResolvedImageVariantsConfig = {
+export type ResolvedImageVariantsConfig = {
   variants: Readonly<Record<string, ImageVariantDefinition>>;
   formats: readonly ImageVariantOutputFormat[];
   maxSourceBytes: number;
@@ -16,19 +15,19 @@ type ResolvedImageVariantsConfig = {
 /**
  * Raster formats a variant can be generated from, detected by magic bytes
  */
-type VariantSourceFormat = "jpeg" | "png" | "webp" | "avif";
+export type VariantSourceFormat = "jpeg" | "png" | "webp" | "avif";
 /**
  * Every format `detectImageFormat` can recognise, including the refused ones
  */
-type DetectedImageFormat = VariantSourceFormat | "gif" | "svg";
+export type DetectedImageFormat = VariantSourceFormat | "gif" | "svg";
 /**
  * Format a derivative is written in
  */
-type VariantOutputFormat = VariantSourceFormat;
+export type VariantOutputFormat = VariantSourceFormat;
 /**
  * What the query string of an uploads request asks for
  */
-type UploadedFileQuery = {
+export type UploadedFileQuery = {
   type: "original";
 } | {
   type: "variant";
@@ -46,7 +45,7 @@ type UploadedFileQuery = {
  * passed through loader data as is. Core does not import that type — web
  * depends on core, not the other way around — this is a structural match.
  */
-type GeneratedImageVariant = {
+export type GeneratedImageVariant = {
   /**
    * Actual rendered width, in pixels
    */
@@ -68,7 +67,7 @@ type GeneratedImageVariant = {
  * Serializable descriptor returned by `generateImageVariants`, matching web's
  * `ImageDescriptor` field for field.
  */
-type GeneratedImageDescriptor = {
+export type GeneratedImageDescriptor = {
   /**
    * The original source path: `/uploads/<path>`
    */
@@ -91,5 +90,4 @@ type GeneratedImageDescriptor = {
   formats?: readonly ImageVariantOutputFormat[];
 };
 //#endregion
-export { DetectedImageFormat, GeneratedImageDescriptor, GeneratedImageVariant, ResolvedImageVariantsConfig, UploadedFileQuery, VariantOutputFormat, VariantSourceFormat };
 //# sourceMappingURL=image-variant-types.d.mts.map

package/esm/http/uploads/image-variant-types.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"image-variant-types.d.mts","names":[],"sources":["../../../../../../../../../packages/core/src/http/uploads/image-variant-types.ts"],"mappings":";;;;;AAKA;KAAY,2BAAA;EACV,QAAA,EAAU,QAAA,CAAS,MAAA,SAAe,sBAAA;EAClC,OAAA,WAAkB,wBAAA;EAClB,cAAA;EACA,eAAA;EACA,cAAA;EACA,aAAA;EACA,WAAA;AAAA;;;;KAMU,mBAAA;;;;KAKA,mBAAA,GAAsB,mBAAmB;;;;KAKzC,mBAAA,GAAsB,mBAAmB;AAVrD;;;AAAA,KAeY,iBAAA;EACN,IAAA;AAAA;EACA,IAAA;EAAiB,OAAA;EAAiB,MAAA;AAAA;EAClC,IAAA;EAAiB,MAAA;AAAA;;AAR8B;AAKrD;;;;;;KAaY,qBAAA;EAX4B;;;EAetC,KAAA;EAd2B;AAU7B;;EASE,MAAA;EAUsB;;;EALtB,GAAA;EAKc;;;EAAd,IAAA,GAAO,OAAA,CAAQ,MAAA,CAAO,wBAAA;AAAA;;;;;KAOZ,wBAAA;EAAA;;;EAIV,GAAA;EAemB;;;EAVnB,KAAA;EAe2C;;;EAV3C,MAAA;EAKA;;;EAAA,QAAA,EAAU,QAAA,CAAS,MAAA,SAAe,qBAAA;EAKlC;;;EAAA,OAAA,YAAmB,wBAAA;AAAA"}
+{"version":3,"file":"image-variant-types.d.mts","names":[],"sources":["../../../../../../../../../packages/core/src/http/uploads/image-variant-types.ts"],"mappings":";;;;;YAKY;EACV,UAAU,SAAS,eAAe;EAClC,kBAAkB;EAClB;EACA;EACA;EACA;EACA;;;;;YAMU;;;;YAKA,sBAAsB;;;;YAKtB,sBAAsB;;;;YAKtB;EACN;;EACA;EAAiB;EAAiB;;EAClC;EAAiB;;;;;;;;;;YAUX;;;;EAIV;;;;EAKA;;;;EAKA;;;;EAKA,OAAO,QAAQ,OAAO;;;;;;YAOZ;;;;EAIV;;;;EAKA;;;;EAKA;;;;EAKA,UAAU,SAAS,eAAe;;;;EAKlC,mBAAmB"}

package/esm/http/uploads/image-variants-config-error.d.mts

@@ -5,11 +5,10 @@
  * Raised the first time a variant is requested, so a bad config fails loudly
  * on the first image instead of producing unbounded or surprising derivatives.
  */
-declare class ImageVariantsConfigError extends Error {
+export declare class ImageVariantsConfigError extends Error {
   /** Stable Warlock error code; `warlock explain WL1005` prints the fix. */
   readonly code = "WL1005";
   constructor(message: string, options?: ErrorOptions);
 }
 //#endregion
-export { ImageVariantsConfigError };
 //# sourceMappingURL=image-variants-config-error.d.mts.map

package/esm/http/uploads/image-variants-config-error.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"image-variants-config-error.d.mts","names":[],"sources":["../../../../../../../../../packages/core/src/http/uploads/image-variants-config-error.ts"],"mappings":";;AAMA;;;;;cAAa,wBAAA,SAAiC,KAAK;;WAEjC,IAAA;cAEG,OAAA,UAAiB,OAAA,GAAU,YAAA;AAAA"}
+{"version":3,"file":"image-variants-config-error.d.mts","names":[],"sources":["../../../../../../../../../packages/core/src/http/uploads/image-variants-config-error.ts"],"mappings":";;;;;;;qBAMa,iCAAiC;;WAE5B;EAEhB,YAAmB,iBAAiB,UAAU"}

package/esm/http/uploads/index.d.mts

@@ -3,4 +3,5 @@ import { GenerateImageVariantsOptions, generateImageVariants } from "./generate-
 import { ImageVariantsConfigError } from "./image-variants-config-error.mjs";
 import { PurgeImageVariantsOptions, purgeImageVariants } from "./purge-image-variants.mjs";
 import { ResolveImageVariantInput, ResolvedImageVariant, resolveImageVariant } from "./resolve-image-variant.mjs";
-import { UploadedFileControllerOptions, createUploadedFileController, uploadedFileController } from "./uploaded-file.controller.mjs";
+import { UploadedFileControllerOptions, createUploadedFileController, uploadedFileController } from "./uploaded-file.controller.mjs";
+export { DetectedImageFormat, GenerateImageVariantsOptions, GeneratedImageDescriptor, GeneratedImageVariant, ImageVariantsConfigError, PurgeImageVariantsOptions, ResolveImageVariantInput, ResolvedImageVariant, ResolvedImageVariantsConfig, UploadedFileControllerOptions, UploadedFileQuery, VariantOutputFormat, VariantSourceFormat, createUploadedFileController, generateImageVariants, purgeImageVariants, resolveImageVariant, uploadedFileController };

package/esm/http/uploads/index.mjs

@@ -4,4 +4,4 @@ import { purgeImageVariants } from "./purge-image-variants.mjs";
 import { resolveImageVariant } from "./resolve-image-variant.mjs";
 import { createUploadedFileController, uploadedFileController } from "./uploaded-file.controller.mjs";
 
-export {  };
+export { ImageVariantsConfigError, createUploadedFileController, generateImageVariants, purgeImageVariants, resolveImageVariant, uploadedFileController };

package/esm/http/uploads/parse-uploaded-file-query.mjs

@@ -1,5 +1,5 @@
 //#region ../../packages/core/src/http/uploads/parse-uploaded-file-query.ts
-const ALLOWED_KEYS = new Set(["variant", "format"]);
+const ALLOWED_KEYS = /* @__PURE__ */ new Set(["variant", "format"]);
 /**
 * Read the query string of an uploads request, strictly.
 *

package/esm/http/uploads/parse-uploaded-file-query.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"parse-uploaded-file-query.mjs","names":[],"sources":["../../../../../../../../../packages/core/src/http/uploads/parse-uploaded-file-query.ts"],"sourcesContent":["import type { UploadedFileQuery } from \"./image-variant-types\";\n\nconst ALLOWED_KEYS = new Set([\"variant\", \"format\"]);\n\n/**\n * Read the query string of an uploads request, strictly.\n *\n * It parses the raw URL rather than the framework's parsed query, because the\n * parsed form folds a repeated key into an array and a lone key into a string,\n * and a strict allowlist has to see both. Only `variant` and `format` are\n * accepted, each at most once, and `format` only next to `variant`.\n *\n * @param url - the raw request URL, path and query\n */\nexport function parseUploadedFileQuery(url: string): UploadedFileQuery {\n  const queryStart = url.indexOf(\"?\");\n  const rawQuery = queryStart === -1 ? \"\" : url.slice(queryStart + 1);\n\n  if (rawQuery === \"\") return { type: \"original\" };\n\n  const values = new Map<string, string>();\n\n  for (const [key, value] of new URLSearchParams(rawQuery)) {\n    if (!ALLOWED_KEYS.has(key)) {\n      return { type: \"invalid\", reason: `Unknown query parameter \"${key}\".` };\n    }\n\n    if (values.has(key)) {\n      return { type: \"invalid\", reason: `Query parameter \"${key}\" is repeated.` };\n    }\n\n    values.set(key, value);\n  }\n\n  const variant = values.get(\"variant\");\n  const format = values.get(\"format\");\n\n  if (variant === undefined) {\n    return values.size === 0\n      ? { type: \"original\" }\n      : { type: \"invalid\", reason: `\"format\" requires \"variant\".` };\n  }\n\n  if (variant === \"\") {\n    return { type: \"invalid\", reason: `\"variant\" must not be empty.` };\n  }\n\n  return format === undefined ? { type: \"variant\", variant } : { type: \"variant\", variant, format };\n}\n"],"mappings":";AAEA,MAAM,eAAe,IAAI,IAAI,CAAC,WAAW,QAAQ,CAAC;;;;;;;;;;;AAYlD,SAAgB,uBAAuB,KAAgC;CACrE,MAAM,aAAa,IAAI,QAAQ,GAAG;CAClC,MAAM,WAAW,eAAe,KAAK,KAAK,IAAI,MAAM,aAAa,CAAC;CAElE,IAAI,aAAa,IAAI,OAAO,EAAE,MAAM,WAAW;CAE/C,MAAM,yBAAS,IAAI,IAAoB;CAEvC,KAAK,MAAM,CAAC,KAAK,UAAU,IAAI,gBAAgB,QAAQ,GAAG;EACxD,IAAI,CAAC,aAAa,IAAI,GAAG,GACvB,OAAO;GAAE,MAAM;GAAW,QAAQ,4BAA4B,IAAI;EAAI;EAGxE,IAAI,OAAO,IAAI,GAAG,GAChB,OAAO;GAAE,MAAM;GAAW,QAAQ,oBAAoB,IAAI;EAAgB;EAG5E,OAAO,IAAI,KAAK,KAAK;CACvB;CAEA,MAAM,UAAU,OAAO,IAAI,SAAS;CACpC,MAAM,SAAS,OAAO,IAAI,QAAQ;CAElC,IAAI,YAAY,QACd,OAAO,OAAO,SAAS,IACnB,EAAE,MAAM,WAAW,IACnB;EAAE,MAAM;EAAW,QAAQ;CAA+B;CAGhE,IAAI,YAAY,IACd,OAAO;EAAE,MAAM;EAAW,QAAQ;CAA+B;CAGnE,OAAO,WAAW,SAAY;EAAE,MAAM;EAAW;CAAQ,IAAI;EAAE,MAAM;EAAW;EAAS;CAAO;AAClG"}
+{"version":3,"file":"parse-uploaded-file-query.mjs","names":[],"sources":["../../../../../../../../../packages/core/src/http/uploads/parse-uploaded-file-query.ts"],"sourcesContent":["import type { UploadedFileQuery } from \"./image-variant-types\";\n\nconst ALLOWED_KEYS = new Set([\"variant\", \"format\"]);\n\n/**\n * Read the query string of an uploads request, strictly.\n *\n * It parses the raw URL rather than the framework's parsed query, because the\n * parsed form folds a repeated key into an array and a lone key into a string,\n * and a strict allowlist has to see both. Only `variant` and `format` are\n * accepted, each at most once, and `format` only next to `variant`.\n *\n * @param url - the raw request URL, path and query\n */\nexport function parseUploadedFileQuery(url: string): UploadedFileQuery {\n  const queryStart = url.indexOf(\"?\");\n  const rawQuery = queryStart === -1 ? \"\" : url.slice(queryStart + 1);\n\n  if (rawQuery === \"\") return { type: \"original\" };\n\n  const values = new Map<string, string>();\n\n  for (const [key, value] of new URLSearchParams(rawQuery)) {\n    if (!ALLOWED_KEYS.has(key)) {\n      return { type: \"invalid\", reason: `Unknown query parameter \"${key}\".` };\n    }\n\n    if (values.has(key)) {\n      return { type: \"invalid\", reason: `Query parameter \"${key}\" is repeated.` };\n    }\n\n    values.set(key, value);\n  }\n\n  const variant = values.get(\"variant\");\n  const format = values.get(\"format\");\n\n  if (variant === undefined) {\n    return values.size === 0\n      ? { type: \"original\" }\n      : { type: \"invalid\", reason: `\"format\" requires \"variant\".` };\n  }\n\n  if (variant === \"\") {\n    return { type: \"invalid\", reason: `\"variant\" must not be empty.` };\n  }\n\n  return format === undefined ? { type: \"variant\", variant } : { type: \"variant\", variant, format };\n}\n"],"mappings":";AAEA,MAAM,+BAAe,IAAI,IAAI,CAAC,WAAW,QAAQ,CAAC;;;;;;;;;;;AAYlD,SAAgB,uBAAuB,KAAgC;CACrE,MAAM,aAAa,IAAI,QAAQ,GAAG;CAClC,MAAM,WAAW,eAAe,KAAK,KAAK,IAAI,MAAM,aAAa,CAAC;CAElE,IAAI,aAAa,IAAI,OAAO,EAAE,MAAM,WAAW;CAE/C,MAAM,yBAAS,IAAI,IAAoB;CAEvC,KAAK,MAAM,CAAC,KAAK,UAAU,IAAI,gBAAgB,QAAQ,GAAG;EACxD,IAAI,CAAC,aAAa,IAAI,GAAG,GACvB,OAAO;GAAE,MAAM;GAAW,QAAQ,4BAA4B,IAAI;EAAI;EAGxE,IAAI,OAAO,IAAI,GAAG,GAChB,OAAO;GAAE,MAAM;GAAW,QAAQ,oBAAoB,IAAI;EAAgB;EAG5E,OAAO,IAAI,KAAK,KAAK;CACvB;CAEA,MAAM,UAAU,OAAO,IAAI,SAAS;CACpC,MAAM,SAAS,OAAO,IAAI,QAAQ;CAElC,IAAI,YAAY,QACd,OAAO,OAAO,SAAS,IACnB,EAAE,MAAM,WAAW,IACnB;EAAE,MAAM;EAAW,QAAQ;CAA+B;CAGhE,IAAI,YAAY,IACd,OAAO;EAAE,MAAM;EAAW,QAAQ;CAA+B;CAGnE,OAAO,WAAW,SAAY;EAAE,MAAM;EAAW;CAAQ,IAAI;EAAE,MAAM;EAAW;EAAS;CAAO;AAClG"}

package/esm/http/uploads/purge-image-variants.d.mts

@@ -1,10 +1,9 @@
 import { StorageDriverName } from "../../storage/types.mjs";
-
 //#region ../../packages/core/src/http/uploads/purge-image-variants.d.ts
 /**
  * Options for {@link purgeImageVariants}
  */
-type PurgeImageVariantsOptions = {
+export type PurgeImageVariantsOptions = {
   /**
    * Disk the source lives on; the default disk when omitted
    */
@@ -31,7 +30,6 @@ type PurgeImageVariantsOptions = {
  * configured local disk root, including through a symlink
  * @returns `true` when something was removed
  */
-declare function purgeImageVariants(relativePath?: string, options?: PurgeImageVariantsOptions): Promise<boolean>;
+export declare function purgeImageVariants(relativePath?: string, options?: PurgeImageVariantsOptions): Promise<boolean>;
 //#endregion
-export { PurgeImageVariantsOptions, purgeImageVariants };
 //# sourceMappingURL=purge-image-variants.d.mts.map

package/esm/http/uploads/purge-image-variants.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"purge-image-variants.d.mts","names":[],"sources":["../../../../../../../../../packages/core/src/http/uploads/purge-image-variants.ts"],"mappings":";;;;;AAeA;KAAY,yBAAA;;;AAIc;EAAxB,IAAA,GAAO,iBAAiB;AAAA;;;;;;;;AA2BhB;;;;;;;;;;;;;;iBAHY,kBAAA,CACpB,YAAA,WACA,OAAA,GAAS,yBAAA,GACR,OAAO"}
+{"version":3,"file":"purge-image-variants.d.mts","names":[],"sources":["../../../../../../../../../packages/core/src/http/uploads/purge-image-variants.ts"],"mappings":";;;;;YAeY;;;;EAIV,OAAO;;;;;;;;;;;;;;;;;;;;;;;wBAwBa,mBACpB,uBACA,UAAS,4BACR"}

package/esm/http/uploads/resolve-image-variant.d.mts

@@ -1,12 +1,11 @@
 import { StorageDriverName } from "../../storage/types.mjs";
 import { VariantOutputFormat } from "./image-variant-types.mjs";
-
 //#region ../../packages/core/src/http/uploads/resolve-image-variant.d.ts
 /**
  * What to render: a file on a storage disk and a variant named in
  * `uploads.images.variants`
  */
-type ResolveImageVariantInput = {
+export type ResolveImageVariantInput = {
   /**
    * Path of the source, relative to the disk root
    */
@@ -28,7 +27,7 @@ type ResolveImageVariantInput = {
 /**
  * A derivative on disk, ready to send
  */
-type ResolvedImageVariant = {
+export type ResolvedImageVariant = {
   /**
    * Absolute path of the cached derivative
    */
@@ -66,7 +65,6 @@ type ResolvedImageVariant = {
  * @throws HttpError(413) when the source is over the configured limits
  * @throws HttpError(415) when the source is not jpeg, png, webp or avif
  */
-declare function resolveImageVariant(input: ResolveImageVariantInput): Promise<ResolvedImageVariant | undefined>;
+export declare function resolveImageVariant(input: ResolveImageVariantInput): Promise<ResolvedImageVariant | undefined>;
 //#endregion
-export { ResolveImageVariantInput, ResolvedImageVariant, resolveImageVariant };
 //# sourceMappingURL=resolve-image-variant.d.mts.map

package/esm/http/uploads/resolve-image-variant.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"resolve-image-variant.d.mts","names":[],"sources":["../../../../../../../../../packages/core/src/http/uploads/resolve-image-variant.ts"],"mappings":";;;;;;AAoCA;;KAAY,wBAAA;EAoBc;;;EAhBxB,IAAA;EAWS;;;EANT,OAAA;EAWwB;AAM1B;;;EAXE,MAAA,GAAS,mBAAA;EAeT;;;EAVA,IAAA,GAAO,iBAAiB;AAAA;;AAmBb;AA6Bb;KA1CY,oBAAA;;;;EAIV,YAAA;EAwCQ;;;EAnCR,IAAA;EAEA,MAAA,EAAQ,mBAAmB;EAE3B,WAAA;AAAA;AA+B6B;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iBAFT,mBAAA,CACpB,KAAA,EAAO,wBAAA,GACN,OAAA,CAAQ,oBAAA"}
+{"version":3,"file":"resolve-image-variant.d.mts","names":[],"sources":["../../../../../../../../../packages/core/src/http/uploads/resolve-image-variant.ts"],"mappings":";;;;;;;YAoCY;;;;EAIV;;;;EAKA;;;;;EAMA,SAAS;;;;EAKT,OAAO;;;;;YAMG;;;;EAIV;;;;EAKA;EAEA,QAAQ;EAER;;;;;;;;;;;;;;;;;;;;;;;;;;;;wBA6BoB,oBACpB,OAAO,2BACN,QAAQ"}

package/esm/http/uploads/resolve-image-variants-config.mjs

@@ -9,7 +9,7 @@ const MAX_VARIANT_DIMENSION = 8192;
 /**
 * Default `maxSourceBytes`: 25 MB
 */
-const DEFAULT_MAX_SOURCE_BYTES = 25 * 1024 * 1024;
+const DEFAULT_MAX_SOURCE_BYTES = 26214400;
 /**
 * Default `maxSourcePixels`
 */
@@ -83,11 +83,11 @@ function resolveImageVariantsConfig(images, storageRoot) {
 		maxSourceBytes: resolveLimit("maxSourceBytes", images.maxSourceBytes, DEFAULT_MAX_SOURCE_BYTES),
 		maxSourcePixels: resolveLimit("maxSourcePixels", images.maxSourcePixels, DEFAULT_MAX_SOURCE_PIXELS),
 		cacheDirectory,
-		maxCacheBytes: resolveLimit("maxCacheBytes", images.maxCacheBytes, 512 * 1024 * 1024),
-		maxCacheAge: resolveLimit("maxCacheAge", images.maxCacheAge, 10080 * 60)
+		maxCacheBytes: resolveLimit("maxCacheBytes", images.maxCacheBytes, 536870912),
+		maxCacheAge: resolveLimit("maxCacheAge", images.maxCacheAge, 604800)
 	};
 }
 
 //#endregion
-export { resolveImageVariantsConfig };
+export { DEFAULT_MAX_SOURCE_BYTES, DEFAULT_MAX_SOURCE_PIXELS, MAX_VARIANT_DIMENSION, resolveImageVariantsConfig };
 //# sourceMappingURL=resolve-image-variants-config.mjs.map

package/esm/http/uploads/resolve-image-variants-config.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"resolve-image-variants-config.mjs","names":[],"sources":["../../../../../../../../../packages/core/src/http/uploads/resolve-image-variants-config.ts"],"sourcesContent":["import type {\n  ImageVariantDefinition,\n  ImageVariantFit,\n  ImageVariantOutputFormat,\n  UploadsImagesConfigurations,\n} from \"../uploads-types\";\nimport { variantCacheDirectoryFor } from \"./image-variant-cache\";\nimport { ImageVariantsConfigError } from \"./image-variants-config-error\";\nimport type { ResolvedImageVariantsConfig } from \"./image-variant-types\";\n\n/**\n * Largest width or height a variant may declare\n */\nexport const MAX_VARIANT_DIMENSION = 8192;\n\n/**\n * Default `maxSourceBytes`: 25 MB\n */\nexport const DEFAULT_MAX_SOURCE_BYTES = 25 * 1024 * 1024;\n\n/**\n * Default `maxSourcePixels`\n */\nexport const DEFAULT_MAX_SOURCE_PIXELS = 40_000_000;\n\nconst FITS: readonly ImageVariantFit[] = [\"cover\", \"contain\", \"inside\"];\n\nconst OUTPUT_FORMATS: readonly ImageVariantOutputFormat[] = [\"avif\", \"webp\"];\n\nconst VARIANT_NAME = /^[A-Za-z0-9_-]+$/;\n\nfunction isPositiveInteger(value: unknown, max = Number.MAX_SAFE_INTEGER): value is number {\n  return typeof value === \"number\" && Number.isInteger(value) && value >= 1 && value <= max;\n}\n\nfunction resolveVariant(name: string, raw: unknown): ImageVariantDefinition {\n  const key = `uploads.images.variants.${name}`;\n\n  if (!VARIANT_NAME.test(name)) {\n    throw new ImageVariantsConfigError(\n      `${key}: a variant name may only use letters, digits, \"-\" and \"_\".`,\n    );\n  }\n\n  if (!raw || typeof raw !== \"object\") {\n    throw new ImageVariantsConfigError(`${key} must be an object with a width.`);\n  }\n\n  const { width, height, fit, quality, enlarge } = raw as Record<string, unknown>;\n\n  if (!isPositiveInteger(width, MAX_VARIANT_DIMENSION)) {\n    throw new ImageVariantsConfigError(\n      `${key}.width must be an integer from 1 to ${MAX_VARIANT_DIMENSION}, got ${JSON.stringify(width)}.`,\n    );\n  }\n\n  const variant: ImageVariantDefinition = { width };\n\n  if (height !== undefined) {\n    if (!isPositiveInteger(height, MAX_VARIANT_DIMENSION)) {\n      throw new ImageVariantsConfigError(\n        `${key}.height must be an integer from 1 to ${MAX_VARIANT_DIMENSION}, got ${JSON.stringify(height)}.`,\n      );\n    }\n\n    variant.height = height;\n  }\n\n  if (fit !== undefined) {\n    if (!FITS.includes(fit as ImageVariantFit)) {\n      throw new ImageVariantsConfigError(\n        `${key}.fit must be one of ${FITS.join(\", \")}, got ${JSON.stringify(fit)}.`,\n      );\n    }\n\n    variant.fit = fit as ImageVariantFit;\n  }\n\n  if (quality !== undefined) {\n    if (!isPositiveInteger(quality, 100)) {\n      throw new ImageVariantsConfigError(\n        `${key}.quality must be an integer from 1 to 100, got ${JSON.stringify(quality)}.`,\n      );\n    }\n\n    variant.quality = quality;\n  }\n\n  if (enlarge !== undefined && typeof enlarge !== \"boolean\") {\n    throw new ImageVariantsConfigError(\n      `${key}.enlarge must be a boolean, got ${JSON.stringify(enlarge)}.`,\n    );\n  }\n\n  // Always set, never left undefined: the effective flag (default false) is\n  // part of the normalized variant, so toggling it changes the cache key.\n  variant.enlarge = enlarge === true;\n\n  return variant;\n}\n\nfunction resolveFormats(raw: unknown): readonly ImageVariantOutputFormat[] {\n  if (raw === undefined) return [];\n\n  if (!Array.isArray(raw)) {\n    throw new ImageVariantsConfigError(`uploads.images.formats must be an array.`);\n  }\n\n  for (const format of raw) {\n    if (!OUTPUT_FORMATS.includes(format)) {\n      throw new ImageVariantsConfigError(\n        `uploads.images.formats may only contain ${OUTPUT_FORMATS.join(\", \")}, got ${JSON.stringify(format)}.`,\n      );\n    }\n  }\n\n  return [...new Set(raw as ImageVariantOutputFormat[])];\n}\n\nfunction resolveLimit(name: string, raw: unknown, fallback: number): number {\n  if (raw === undefined) return fallback;\n\n  if (!isPositiveInteger(raw)) {\n    throw new ImageVariantsConfigError(\n      `uploads.images.${name} must be a positive integer, got ${JSON.stringify(raw)}.`,\n    );\n  }\n\n  return raw;\n}\n\n/**\n * Validate the `uploads.images` config and apply its defaults.\n *\n * Every variant is copied field by field, so an unknown key in the config can\n * never reach sharp, and the result is what the cache key is computed from.\n *\n * @param images - the raw `uploads.images` value\n * @param storageRoot - the local storage root, base of the default cache directory\n * @returns the resolved config, or `undefined` when variants are not configured\n * @throws ImageVariantsConfigError when any value is out of bounds\n */\nexport function resolveImageVariantsConfig(\n  images: UploadsImagesConfigurations | undefined,\n  storageRoot: string,\n): ResolvedImageVariantsConfig | undefined {\n  if (images === undefined || images === null) return undefined;\n\n  if (typeof images !== \"object\") {\n    throw new ImageVariantsConfigError(\"uploads.images must be an object.\");\n  }\n\n  const rawVariants = (images as { variants?: unknown }).variants;\n\n  if (!rawVariants || typeof rawVariants !== \"object\" || Object.keys(rawVariants).length === 0) {\n    throw new ImageVariantsConfigError(\n      \"uploads.images.variants must declare at least one variant.\",\n    );\n  }\n\n  const variants: Record<string, ImageVariantDefinition> = {};\n\n  for (const [name, raw] of Object.entries(rawVariants)) {\n    variants[name] = resolveVariant(name, raw);\n  }\n\n  const cacheDirectory = variantCacheDirectoryFor(storageRoot, images);\n\n  return {\n    variants,\n    formats: resolveFormats(images.formats),\n    maxSourceBytes: resolveLimit(\"maxSourceBytes\", images.maxSourceBytes, DEFAULT_MAX_SOURCE_BYTES),\n    maxSourcePixels: resolveLimit(\n      \"maxSourcePixels\",\n      images.maxSourcePixels,\n      DEFAULT_MAX_SOURCE_PIXELS,\n    ),\n    cacheDirectory,\n    maxCacheBytes: resolveLimit(\"maxCacheBytes\", images.maxCacheBytes, 512 * 1024 * 1024),\n    maxCacheAge: resolveLimit(\"maxCacheAge\", images.maxCacheAge, 7 * 24 * 60 * 60),\n  };\n}\n"],"mappings":";;;;;;;AAaA,MAAa,wBAAwB;;;;AAKrC,MAAa,2BAA2B,KAAK,OAAO;;;;AAKpD,MAAa,4BAA4B;AAEzC,MAAM,OAAmC;CAAC;CAAS;CAAW;AAAQ;AAEtE,MAAM,iBAAsD,CAAC,QAAQ,MAAM;AAE3E,MAAM,eAAe;AAErB,SAAS,kBAAkB,OAAgB,MAAM,OAAO,kBAAmC;CACzF,OAAO,OAAO,UAAU,YAAY,OAAO,UAAU,KAAK,KAAK,SAAS,KAAK,SAAS;AACxF;AAEA,SAAS,eAAe,MAAc,KAAsC;CAC1E,MAAM,MAAM,2BAA2B;CAEvC,IAAI,CAAC,aAAa,KAAK,IAAI,GACzB,MAAM,IAAI,yBACR,GAAG,IAAI,4DACT;CAGF,IAAI,CAAC,OAAO,OAAO,QAAQ,UACzB,MAAM,IAAI,yBAAyB,GAAG,IAAI,iCAAiC;CAG7E,MAAM,EAAE,OAAO,QAAQ,KAAK,SAAS,YAAY;CAEjD,IAAI,CAAC,kBAAkB,WAA4B,GACjD,MAAM,IAAI,yBACR,GAAG,IAAI,sCAAsC,sBAAsB,QAAQ,KAAK,UAAU,KAAK,EAAE,EACnG;CAGF,MAAM,UAAkC,EAAE,MAAM;CAEhD,IAAI,WAAW,QAAW;EACxB,IAAI,CAAC,kBAAkB,YAA6B,GAClD,MAAM,IAAI,yBACR,GAAG,IAAI,uCAAuC,sBAAsB,QAAQ,KAAK,UAAU,MAAM,EAAE,EACrG;EAGF,QAAQ,SAAS;CACnB;CAEA,IAAI,QAAQ,QAAW;EACrB,IAAI,CAAC,KAAK,SAAS,GAAsB,GACvC,MAAM,IAAI,yBACR,GAAG,IAAI,sBAAsB,KAAK,KAAK,IAAI,EAAE,QAAQ,KAAK,UAAU,GAAG,EAAE,EAC3E;EAGF,QAAQ,MAAM;CAChB;CAEA,IAAI,YAAY,QAAW;EACzB,IAAI,CAAC,kBAAkB,SAAS,GAAG,GACjC,MAAM,IAAI,yBACR,GAAG,IAAI,iDAAiD,KAAK,UAAU,OAAO,EAAE,EAClF;EAGF,QAAQ,UAAU;CACpB;CAEA,IAAI,YAAY,UAAa,OAAO,YAAY,WAC9C,MAAM,IAAI,yBACR,GAAG,IAAI,kCAAkC,KAAK,UAAU,OAAO,EAAE,EACnE;CAKF,QAAQ,UAAU,YAAY;CAE9B,OAAO;AACT;AAEA,SAAS,eAAe,KAAmD;CACzE,IAAI,QAAQ,QAAW,OAAO,CAAC;CAE/B,IAAI,CAAC,MAAM,QAAQ,GAAG,GACpB,MAAM,IAAI,yBAAyB,0CAA0C;CAG/E,KAAK,MAAM,UAAU,KACnB,IAAI,CAAC,eAAe,SAAS,MAAM,GACjC,MAAM,IAAI,yBACR,2CAA2C,eAAe,KAAK,IAAI,EAAE,QAAQ,KAAK,UAAU,MAAM,EAAE,EACtG;CAIJ,OAAO,CAAC,GAAG,IAAI,IAAI,GAAiC,CAAC;AACvD;AAEA,SAAS,aAAa,MAAc,KAAc,UAA0B;CAC1E,IAAI,QAAQ,QAAW,OAAO;CAE9B,IAAI,CAAC,kBAAkB,GAAG,GACxB,MAAM,IAAI,yBACR,kBAAkB,KAAK,mCAAmC,KAAK,UAAU,GAAG,EAAE,EAChF;CAGF,OAAO;AACT;;;;;;;;;;;;AAaA,SAAgB,2BACd,QACA,aACyC;CACzC,IAAI,WAAW,UAAa,WAAW,MAAM,OAAO;CAEpD,IAAI,OAAO,WAAW,UACpB,MAAM,IAAI,yBAAyB,mCAAmC;CAGxE,MAAM,cAAe,OAAkC;CAEvD,IAAI,CAAC,eAAe,OAAO,gBAAgB,YAAY,OAAO,KAAK,WAAW,CAAC,CAAC,WAAW,GACzF,MAAM,IAAI,yBACR,4DACF;CAGF,MAAM,WAAmD,CAAC;CAE1D,KAAK,MAAM,CAAC,MAAM,QAAQ,OAAO,QAAQ,WAAW,GAClD,SAAS,QAAQ,eAAe,MAAM,GAAG;CAG3C,MAAM,iBAAiB,yBAAyB,aAAa,MAAM;CAEnE,OAAO;EACL;EACA,SAAS,eAAe,OAAO,OAAO;EACtC,gBAAgB,aAAa,kBAAkB,OAAO,gBAAgB,wBAAwB;EAC9F,iBAAiB,aACf,mBACA,OAAO,iBACP,yBACF;EACA;EACA,eAAe,aAAa,iBAAiB,OAAO,eAAe,MAAM,OAAO,IAAI;EACpF,aAAa,aAAa,eAAe,OAAO,aAAa,QAAc,EAAE;CAC/E;AACF"}
+{"version":3,"file":"resolve-image-variants-config.mjs","names":[],"sources":["../../../../../../../../../packages/core/src/http/uploads/resolve-image-variants-config.ts"],"sourcesContent":["import type {\n  ImageVariantDefinition,\n  ImageVariantFit,\n  ImageVariantOutputFormat,\n  UploadsImagesConfigurations,\n} from \"../uploads-types\";\nimport { variantCacheDirectoryFor } from \"./image-variant-cache\";\nimport { ImageVariantsConfigError } from \"./image-variants-config-error\";\nimport type { ResolvedImageVariantsConfig } from \"./image-variant-types\";\n\n/**\n * Largest width or height a variant may declare\n */\nexport const MAX_VARIANT_DIMENSION = 8192;\n\n/**\n * Default `maxSourceBytes`: 25 MB\n */\nexport const DEFAULT_MAX_SOURCE_BYTES = 25 * 1024 * 1024;\n\n/**\n * Default `maxSourcePixels`\n */\nexport const DEFAULT_MAX_SOURCE_PIXELS = 40_000_000;\n\nconst FITS: readonly ImageVariantFit[] = [\"cover\", \"contain\", \"inside\"];\n\nconst OUTPUT_FORMATS: readonly ImageVariantOutputFormat[] = [\"avif\", \"webp\"];\n\nconst VARIANT_NAME = /^[A-Za-z0-9_-]+$/;\n\nfunction isPositiveInteger(value: unknown, max = Number.MAX_SAFE_INTEGER): value is number {\n  return typeof value === \"number\" && Number.isInteger(value) && value >= 1 && value <= max;\n}\n\nfunction resolveVariant(name: string, raw: unknown): ImageVariantDefinition {\n  const key = `uploads.images.variants.${name}`;\n\n  if (!VARIANT_NAME.test(name)) {\n    throw new ImageVariantsConfigError(\n      `${key}: a variant name may only use letters, digits, \"-\" and \"_\".`,\n    );\n  }\n\n  if (!raw || typeof raw !== \"object\") {\n    throw new ImageVariantsConfigError(`${key} must be an object with a width.`);\n  }\n\n  const { width, height, fit, quality, enlarge } = raw as Record<string, unknown>;\n\n  if (!isPositiveInteger(width, MAX_VARIANT_DIMENSION)) {\n    throw new ImageVariantsConfigError(\n      `${key}.width must be an integer from 1 to ${MAX_VARIANT_DIMENSION}, got ${JSON.stringify(width)}.`,\n    );\n  }\n\n  const variant: ImageVariantDefinition = { width };\n\n  if (height !== undefined) {\n    if (!isPositiveInteger(height, MAX_VARIANT_DIMENSION)) {\n      throw new ImageVariantsConfigError(\n        `${key}.height must be an integer from 1 to ${MAX_VARIANT_DIMENSION}, got ${JSON.stringify(height)}.`,\n      );\n    }\n\n    variant.height = height;\n  }\n\n  if (fit !== undefined) {\n    if (!FITS.includes(fit as ImageVariantFit)) {\n      throw new ImageVariantsConfigError(\n        `${key}.fit must be one of ${FITS.join(\", \")}, got ${JSON.stringify(fit)}.`,\n      );\n    }\n\n    variant.fit = fit as ImageVariantFit;\n  }\n\n  if (quality !== undefined) {\n    if (!isPositiveInteger(quality, 100)) {\n      throw new ImageVariantsConfigError(\n        `${key}.quality must be an integer from 1 to 100, got ${JSON.stringify(quality)}.`,\n      );\n    }\n\n    variant.quality = quality;\n  }\n\n  if (enlarge !== undefined && typeof enlarge !== \"boolean\") {\n    throw new ImageVariantsConfigError(\n      `${key}.enlarge must be a boolean, got ${JSON.stringify(enlarge)}.`,\n    );\n  }\n\n  // Always set, never left undefined: the effective flag (default false) is\n  // part of the normalized variant, so toggling it changes the cache key.\n  variant.enlarge = enlarge === true;\n\n  return variant;\n}\n\nfunction resolveFormats(raw: unknown): readonly ImageVariantOutputFormat[] {\n  if (raw === undefined) return [];\n\n  if (!Array.isArray(raw)) {\n    throw new ImageVariantsConfigError(`uploads.images.formats must be an array.`);\n  }\n\n  for (const format of raw) {\n    if (!OUTPUT_FORMATS.includes(format)) {\n      throw new ImageVariantsConfigError(\n        `uploads.images.formats may only contain ${OUTPUT_FORMATS.join(\", \")}, got ${JSON.stringify(format)}.`,\n      );\n    }\n  }\n\n  return [...new Set(raw as ImageVariantOutputFormat[])];\n}\n\nfunction resolveLimit(name: string, raw: unknown, fallback: number): number {\n  if (raw === undefined) return fallback;\n\n  if (!isPositiveInteger(raw)) {\n    throw new ImageVariantsConfigError(\n      `uploads.images.${name} must be a positive integer, got ${JSON.stringify(raw)}.`,\n    );\n  }\n\n  return raw;\n}\n\n/**\n * Validate the `uploads.images` config and apply its defaults.\n *\n * Every variant is copied field by field, so an unknown key in the config can\n * never reach sharp, and the result is what the cache key is computed from.\n *\n * @param images - the raw `uploads.images` value\n * @param storageRoot - the local storage root, base of the default cache directory\n * @returns the resolved config, or `undefined` when variants are not configured\n * @throws ImageVariantsConfigError when any value is out of bounds\n */\nexport function resolveImageVariantsConfig(\n  images: UploadsImagesConfigurations | undefined,\n  storageRoot: string,\n): ResolvedImageVariantsConfig | undefined {\n  if (images === undefined || images === null) return undefined;\n\n  if (typeof images !== \"object\") {\n    throw new ImageVariantsConfigError(\"uploads.images must be an object.\");\n  }\n\n  const rawVariants = (images as { variants?: unknown }).variants;\n\n  if (!rawVariants || typeof rawVariants !== \"object\" || Object.keys(rawVariants).length === 0) {\n    throw new ImageVariantsConfigError(\n      \"uploads.images.variants must declare at least one variant.\",\n    );\n  }\n\n  const variants: Record<string, ImageVariantDefinition> = {};\n\n  for (const [name, raw] of Object.entries(rawVariants)) {\n    variants[name] = resolveVariant(name, raw);\n  }\n\n  const cacheDirectory = variantCacheDirectoryFor(storageRoot, images);\n\n  return {\n    variants,\n    formats: resolveFormats(images.formats),\n    maxSourceBytes: resolveLimit(\"maxSourceBytes\", images.maxSourceBytes, DEFAULT_MAX_SOURCE_BYTES),\n    maxSourcePixels: resolveLimit(\n      \"maxSourcePixels\",\n      images.maxSourcePixels,\n      DEFAULT_MAX_SOURCE_PIXELS,\n    ),\n    cacheDirectory,\n    maxCacheBytes: resolveLimit(\"maxCacheBytes\", images.maxCacheBytes, 512 * 1024 * 1024),\n    maxCacheAge: resolveLimit(\"maxCacheAge\", images.maxCacheAge, 7 * 24 * 60 * 60),\n  };\n}\n"],"mappings":";;;;;;;AAaA,MAAa,wBAAwB;;;;AAKrC,MAAa,2BAA2B;;;;AAKxC,MAAa,4BAA4B;AAEzC,MAAM,OAAmC;CAAC;CAAS;CAAW;AAAQ;AAEtE,MAAM,iBAAsD,CAAC,QAAQ,MAAM;AAE3E,MAAM,eAAe;AAErB,SAAS,kBAAkB,OAAgB,MAAM,OAAO,kBAAmC;CACzF,OAAO,OAAO,UAAU,YAAY,OAAO,UAAU,KAAK,KAAK,SAAS,KAAK,SAAS;AACxF;AAEA,SAAS,eAAe,MAAc,KAAsC;CAC1E,MAAM,MAAM,2BAA2B;CAEvC,IAAI,CAAC,aAAa,KAAK,IAAI,GACzB,MAAM,IAAI,yBACR,GAAG,IAAI,4DACT;CAGF,IAAI,CAAC,OAAO,OAAO,QAAQ,UACzB,MAAM,IAAI,yBAAyB,GAAG,IAAI,iCAAiC;CAG7E,MAAM,EAAE,OAAO,QAAQ,KAAK,SAAS,YAAY;CAEjD,IAAI,CAAC,kBAAkB,WAA4B,GACjD,MAAM,IAAI,yBACR,GAAG,IAAI,sCAAsC,sBAAsB,QAAQ,KAAK,UAAU,KAAK,EAAE,EACnG;CAGF,MAAM,UAAkC,EAAE,MAAM;CAEhD,IAAI,WAAW,QAAW;EACxB,IAAI,CAAC,kBAAkB,YAA6B,GAClD,MAAM,IAAI,yBACR,GAAG,IAAI,uCAAuC,sBAAsB,QAAQ,KAAK,UAAU,MAAM,EAAE,EACrG;EAGF,QAAQ,SAAS;CACnB;CAEA,IAAI,QAAQ,QAAW;EACrB,IAAI,CAAC,KAAK,SAAS,GAAsB,GACvC,MAAM,IAAI,yBACR,GAAG,IAAI,sBAAsB,KAAK,KAAK,IAAI,EAAE,QAAQ,KAAK,UAAU,GAAG,EAAE,EAC3E;EAGF,QAAQ,MAAM;CAChB;CAEA,IAAI,YAAY,QAAW;EACzB,IAAI,CAAC,kBAAkB,SAAS,GAAG,GACjC,MAAM,IAAI,yBACR,GAAG,IAAI,iDAAiD,KAAK,UAAU,OAAO,EAAE,EAClF;EAGF,QAAQ,UAAU;CACpB;CAEA,IAAI,YAAY,UAAa,OAAO,YAAY,WAC9C,MAAM,IAAI,yBACR,GAAG,IAAI,kCAAkC,KAAK,UAAU,OAAO,EAAE,EACnE;CAKF,QAAQ,UAAU,YAAY;CAE9B,OAAO;AACT;AAEA,SAAS,eAAe,KAAmD;CACzE,IAAI,QAAQ,QAAW,OAAO,CAAC;CAE/B,IAAI,CAAC,MAAM,QAAQ,GAAG,GACpB,MAAM,IAAI,yBAAyB,0CAA0C;CAG/E,KAAK,MAAM,UAAU,KACnB,IAAI,CAAC,eAAe,SAAS,MAAM,GACjC,MAAM,IAAI,yBACR,2CAA2C,eAAe,KAAK,IAAI,EAAE,QAAQ,KAAK,UAAU,MAAM,EAAE,EACtG;CAIJ,OAAO,CAAC,GAAG,IAAI,IAAI,GAAiC,CAAC;AACvD;AAEA,SAAS,aAAa,MAAc,KAAc,UAA0B;CAC1E,IAAI,QAAQ,QAAW,OAAO;CAE9B,IAAI,CAAC,kBAAkB,GAAG,GACxB,MAAM,IAAI,yBACR,kBAAkB,KAAK,mCAAmC,KAAK,UAAU,GAAG,EAAE,EAChF;CAGF,OAAO;AACT;;;;;;;;;;;;AAaA,SAAgB,2BACd,QACA,aACyC;CACzC,IAAI,WAAW,UAAa,WAAW,MAAM,OAAO;CAEpD,IAAI,OAAO,WAAW,UACpB,MAAM,IAAI,yBAAyB,mCAAmC;CAGxE,MAAM,cAAe,OAAkC;CAEvD,IAAI,CAAC,eAAe,OAAO,gBAAgB,YAAY,OAAO,KAAK,WAAW,CAAC,CAAC,WAAW,GACzF,MAAM,IAAI,yBACR,4DACF;CAGF,MAAM,WAAmD,CAAC;CAE1D,KAAK,MAAM,CAAC,MAAM,QAAQ,OAAO,QAAQ,WAAW,GAClD,SAAS,QAAQ,eAAe,MAAM,GAAG;CAG3C,MAAM,iBAAiB,yBAAyB,aAAa,MAAM;CAEnE,OAAO;EACL;EACA,SAAS,eAAe,OAAO,OAAO;EACtC,gBAAgB,aAAa,kBAAkB,OAAO,gBAAgB,wBAAwB;EAC9F,iBAAiB,aACf,mBACA,OAAO,iBACP,yBACF;EACA;EACA,eAAe,aAAa,iBAAiB,OAAO,eAAe,SAAiB;EACpF,aAAa,aAAa,eAAe,OAAO,aAAa,MAAgB;CAC/E;AACF"}

package/esm/http/uploads/resolve-original-content-type.mjs

@@ -8,7 +8,7 @@ import mime from "mime";
 * upload served under its real type is stored XSS the moment it is fetched
 * from the app's own origin.
 */
-const INLINE_EXECUTABLE_MIME_TYPES = new Set([
+const INLINE_EXECUTABLE_MIME_TYPES = /* @__PURE__ */ new Set([
 	"image/svg+xml",
 	"text/html",
 	"application/xhtml+xml",

package/esm/http/uploads/resolve-original-content-type.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"resolve-original-content-type.mjs","names":[],"sources":["../../../../../../../../../packages/core/src/http/uploads/resolve-original-content-type.ts"],"sourcesContent":["import mime from \"mime\";\n\n/**\n * Extension-derived MIME types that are never safe to advertise as-is: a\n * browser that trusts one of these will parse and execute the response body\n * (inline `<script>` in an svg, markup and script in html/xhtml/xml), so an\n * upload served under its real type is stored XSS the moment it is fetched\n * from the app's own origin.\n */\nconst INLINE_EXECUTABLE_MIME_TYPES = new Set([\n  \"image/svg+xml\",\n  \"text/html\",\n  \"application/xhtml+xml\",\n  \"text/xml\",\n  \"application/xml\",\n]);\n\n/**\n * Content type for an upload original that is being served as an\n * `attachment` (see `uploaded-file.controller.ts`): the extension-derived\n * type, except the svg/html/xml family, which is downgraded to\n * `application/octet-stream` so a browser never sniffs or renders it.\n */\nexport function resolveOriginalContentType(filePath: string): string {\n  const type = mime.getType(filePath) || \"application/octet-stream\";\n\n  return INLINE_EXECUTABLE_MIME_TYPES.has(type) ? \"application/octet-stream\" : type;\n}\n"],"mappings":";;;;;;;;;;AASA,MAAM,+BAA+B,IAAI,IAAI;CAC3C;CACA;CACA;CACA;CACA;AACF,CAAC;;;;;;;AAQD,SAAgB,2BAA2B,UAA0B;CACnE,MAAM,OAAO,KAAK,QAAQ,QAAQ,KAAK;CAEvC,OAAO,6BAA6B,IAAI,IAAI,IAAI,6BAA6B;AAC/E"}
+{"version":3,"file":"resolve-original-content-type.mjs","names":[],"sources":["../../../../../../../../../packages/core/src/http/uploads/resolve-original-content-type.ts"],"sourcesContent":["import mime from \"mime\";\n\n/**\n * Extension-derived MIME types that are never safe to advertise as-is: a\n * browser that trusts one of these will parse and execute the response body\n * (inline `<script>` in an svg, markup and script in html/xhtml/xml), so an\n * upload served under its real type is stored XSS the moment it is fetched\n * from the app's own origin.\n */\nconst INLINE_EXECUTABLE_MIME_TYPES = new Set([\n  \"image/svg+xml\",\n  \"text/html\",\n  \"application/xhtml+xml\",\n  \"text/xml\",\n  \"application/xml\",\n]);\n\n/**\n * Content type for an upload original that is being served as an\n * `attachment` (see `uploaded-file.controller.ts`): the extension-derived\n * type, except the svg/html/xml family, which is downgraded to\n * `application/octet-stream` so a browser never sniffs or renders it.\n */\nexport function resolveOriginalContentType(filePath: string): string {\n  const type = mime.getType(filePath) || \"application/octet-stream\";\n\n  return INLINE_EXECUTABLE_MIME_TYPES.has(type) ? \"application/octet-stream\" : type;\n}\n"],"mappings":";;;;;;;;;;AASA,MAAM,+CAA+B,IAAI,IAAI;CAC3C;CACA;CACA;CACA;CACA;AACF,CAAC;;;;;;;AAQD,SAAgB,2BAA2B,UAA0B;CACnE,MAAM,OAAO,KAAK,QAAQ,QAAQ,KAAK;CAEvC,OAAO,6BAA6B,IAAI,IAAI,IAAI,6BAA6B;AAC/E"}

package/esm/http/uploads/trim-image-variant-cache.mjs

@@ -9,14 +9,14 @@ const SWEEP_INTERVAL_MS = 6e4;
 * write and is removed by the sweep. Younger ones are never touched: a writer
 * may still be renaming them into place.
 */
-const ORPHAN_TEMP_AGE_MS = 60 * 6e4;
+const ORPHAN_TEMP_AGE_MS = 36e5;
 /**
 * A generation directory left without derivatives is removed only when it
 * was last changed longer ago than this, so a directory a writer has just
 * created for its first derivative survives. The writers also retry once when
 * their directory vanishes between `mkdir` and the rename.
 */
-const EMPTY_GENERATION_GRACE_MS = 5 * 6e4;
+const EMPTY_GENERATION_GRACE_MS = 3e5;
 const caches = /* @__PURE__ */ new Map();
 function cacheState(directory) {
 	let state = caches.get(directory);
@@ -189,5 +189,5 @@ async function trimImageVariantCache(images, keep) {
 }
 
 //#endregion
-export { freshImageVariant, scheduleImageVariantCacheTrim };
+export { EMPTY_GENERATION_GRACE_MS, ORPHAN_TEMP_AGE_MS, freshImageVariant, scheduleImageVariantCacheTrim, trimImageVariantCache };
 //# sourceMappingURL=trim-image-variant-cache.mjs.map

package/esm/http/uploads/trim-image-variant-cache.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"trim-image-variant-cache.mjs","names":[],"sources":["../../../../../../../../../packages/core/src/http/uploads/trim-image-variant-cache.ts"],"sourcesContent":["import { log } from \"@warlock.js/logger\";\nimport fs from \"node:fs/promises\";\nimport type { ResolvedImageVariantsConfig } from \"./image-variant-types\";\nimport { variantCacheGenerations } from \"./image-variant-cache-entries\";\n\nconst SWEEP_INTERVAL_MS = 60_000;\n\n/**\n * A writer's temporary file older than this is an orphan left by a crashed\n * write and is removed by the sweep. Younger ones are never touched: a writer\n * may still be renaming them into place.\n */\nexport const ORPHAN_TEMP_AGE_MS = 60 * 60_000;\n\n/**\n * A generation directory left without derivatives is removed only when it\n * was last changed longer ago than this, so a directory a writer has just\n * created for its first derivative survives. The writers also retry once when\n * their directory vanishes between `mkdir` and the rename.\n */\nexport const EMPTY_GENERATION_GRACE_MS = 5 * 60_000;\n\ntype CacheState = {\n  sweep?: Promise<void>;\n  timer?: ReturnType<typeof setTimeout>;\n  /** When the last scheduled check ran, whether or not it walked the cache. */\n  lastSweep: number;\n  /** When the cache was last walked. */\n  lastWalk: number;\n  bytes: number;\n  sizes: Map<string, number>;\n  keep: Set<string>;\n  /** True once a walk has reconciled `bytes` with the disk. */\n  reconciled: boolean;\n  /** The oldest retained derivative's mtime; undefined when none is known. */\n  oldestMtimeMs?: number;\n};\nconst caches = new Map<string, CacheState>();\nfunction cacheState(directory: string): CacheState {\n  let state = caches.get(directory);\n  if (!state) {\n    state = {\n      lastSweep: 0,\n      lastWalk: 0,\n      bytes: 0,\n      sizes: new Map(),\n      keep: new Set(),\n      reconciled: false,\n    };\n    caches.set(directory, state);\n  }\n  return state;\n}\n\nfunction errorCode(error: unknown): string | undefined {\n  return (error as NodeJS.ErrnoException | undefined)?.code;\n}\n\n/** Age is measured from generation; hits do not extend a derivative's life. */\nexport async function freshImageVariant(target: string, maxAgeSeconds: number): Promise<boolean> {\n  try {\n    const stats = await fs.stat(target);\n    return stats.isFile() && Date.now() - stats.mtimeMs < maxAgeSeconds * 1000;\n  } catch (error) {\n    if (errorCode(error) === \"ENOENT\") return false;\n    throw error;\n  }\n}\n\n/**\n * Whether a scheduled check must walk the cache. It may skip only when a walk\n * has already reconciled the byte estimate, the cache is within its byte\n * budget, nothing retained has expired (new writes are always younger than\n * the oldest retained derivative), and a walk ran within the last\n * `maxCacheAge`, which also bounds how long an orphaned temporary can linger.\n */\nfunction sweepIsDue(state: CacheState, images: ResolvedImageVariantsConfig): boolean {\n  const maxAgeMs = images.maxCacheAge * 1000;\n  const now = Date.now();\n  return (\n    !state.reconciled ||\n    state.bytes > images.maxCacheBytes ||\n    (state.oldestMtimeMs !== undefined && state.oldestMtimeMs <= now - maxAgeMs) ||\n    now - state.lastWalk >= maxAgeMs\n  );\n}\n\n/**\n * Schedule housekeeping only after a write. Hits do no cache-directory I/O.\n * Writes update a running byte estimate; at most one background check per\n * minute walks the cache, and only when it may have something to reclaim\n * (see {@link sweepIsDue}).\n */\nexport function scheduleImageVariantCacheTrim(\n  images: ResolvedImageVariantsConfig,\n  target: string,\n): void {\n  const state = cacheState(images.cacheDirectory);\n  void fs\n    .stat(target)\n    .then((stats) => {\n      state.bytes += stats.size - (state.sizes.get(target) ?? 0);\n      state.sizes.set(target, stats.size);\n      state.oldestMtimeMs = Math.min(state.oldestMtimeMs ?? stats.mtimeMs, stats.mtimeMs);\n      if (state.timer) return;\n      const delay = Math.max(0, state.lastSweep + SWEEP_INTERVAL_MS - Date.now());\n      state.timer = setTimeout(() => {\n        state.timer = undefined;\n        if (!sweepIsDue(state, images)) {\n          state.lastSweep = Date.now();\n          return;\n        }\n        void trimImageVariantCache(images, target).catch((error: unknown) => {\n          log.warn(\"uploads\", \"image-variants\", error);\n        });\n      }, delay);\n      state.timer.unref();\n    })\n    .catch((error: unknown) => {\n      if (errorCode(error) !== \"ENOENT\") log.warn(\"uploads\", \"image-variants\", error);\n    });\n}\n\ntype Derivative = { target: string; size: number; mtimeMs: number; generation: Generation };\ntype Generation = {\n  directory: string;\n  /** The directory's mtime before this sweep removed anything from it. */\n  mtimeMs: number;\n  derivatives: number;\n  manifest?: string;\n};\n\n/** Remove a temporary only when it is a regular file older than {@link ORPHAN_TEMP_AGE_MS}. */\nasync function removeOrphanTemporary(target: string): Promise<void> {\n  try {\n    const stats = await fs.lstat(target);\n    if (stats.isFile() && Date.now() - stats.mtimeMs > ORPHAN_TEMP_AGE_MS) {\n      await fs.rm(target, { force: true });\n    }\n  } catch (error) {\n    if (errorCode(error) !== \"ENOENT\") throw error;\n  }\n}\n\n/**\n * Remove a generation left without derivatives: its manifest, then the\n * directory itself with a non-recursive `rmdir`, so anything a writer has put\n * there since the walk keeps the directory in place.\n */\nasync function removeEmptyGeneration(generation: Generation): Promise<void> {\n  if (generation.derivatives > 0) return;\n  if (Date.now() - generation.mtimeMs <= EMPTY_GENERATION_GRACE_MS) return;\n  if (generation.manifest) await fs.rm(generation.manifest, { force: true });\n  try {\n    if (!(await fs.lstat(generation.directory)).isDirectory()) return;\n    await fs.rmdir(generation.directory);\n  } catch (error) {\n    const code = errorCode(error);\n    if (code !== \"ENOENT\" && code !== \"ENOTEMPTY\" && code !== \"EEXIST\") throw error;\n  }\n}\n\n/**\n * Join an in-flight sweep rather than queueing another walk. Retain the file\n * about to be served, even if it alone exceeds the byte budget. Only paths in\n * the generated cache layout are touched and symlinks are never followed:\n * expired and oldest derivatives are evicted, writer temporaries older than\n * {@link ORPHAN_TEMP_AGE_MS} are removed, and a generation directory left\n * without derivatives loses its manifest and the directory itself once it is\n * older than {@link EMPTY_GENERATION_GRACE_MS}. The cache root, shard and\n * source directories, user folders and unrelated files stay in place.\n */\nexport async function trimImageVariantCache(\n  images: ResolvedImageVariantsConfig,\n  keep: string,\n): Promise<void> {\n  const state = cacheState(images.cacheDirectory);\n  state.keep.add(keep);\n  if (state.sweep) return state.sweep;\n  state.lastSweep = Date.now();\n  state.lastWalk = state.lastSweep;\n  const sweep = (async () => {\n    const files: Derivative[] = [];\n    const generations: Generation[] = [];\n    for await (const found of variantCacheGenerations(images.cacheDirectory)) {\n      let mtimeMs: number;\n      try {\n        mtimeMs = (await fs.lstat(found.directory)).mtimeMs;\n      } catch (error) {\n        if (errorCode(error) === \"ENOENT\") continue;\n        throw error;\n      }\n      const generation: Generation = { directory: found.directory, mtimeMs, derivatives: 0 };\n      generations.push(generation);\n      for (const entry of found.entries) {\n        if (entry.type === \"manifest\") {\n          generation.manifest = entry.target;\n        } else if (entry.type === \"temporary\") {\n          await removeOrphanTemporary(entry.target);\n        } else {\n          try {\n            const stats = await fs.stat(entry.target);\n            files.push({\n              target: entry.target,\n              size: stats.size,\n              mtimeMs: stats.mtimeMs,\n              generation,\n            });\n            generation.derivatives += 1;\n          } catch (error) {\n            if (errorCode(error) !== \"ENOENT\") throw error;\n          }\n        }\n      }\n    }\n    state.sizes = new Map(files.map((file) => [file.target, file.size]));\n    state.bytes = files.reduce((sum, file) => sum + file.size, 0);\n    const cutoff = Date.now() - images.maxCacheAge * 1000;\n    let oldestMtimeMs: number | undefined;\n    for (const file of files.sort((a, b) => a.mtimeMs - b.mtimeMs)) {\n      if (\n        !state.keep.has(file.target) &&\n        (file.mtimeMs <= cutoff || state.bytes > images.maxCacheBytes)\n      ) {\n        await fs.rm(file.target, { force: true });\n        state.bytes -= file.size;\n        state.sizes.delete(file.target);\n        file.generation.derivatives -= 1;\n        continue;\n      }\n      oldestMtimeMs = Math.min(oldestMtimeMs ?? file.mtimeMs, file.mtimeMs);\n    }\n    for (const generation of generations) await removeEmptyGeneration(generation);\n    state.oldestMtimeMs = oldestMtimeMs;\n    state.reconciled = true;\n  })();\n  state.sweep = sweep;\n  try {\n    await sweep;\n  } finally {\n    state.sweep = undefined;\n    state.keep.clear();\n  }\n}\n"],"mappings":";;;;;AAKA,MAAM,oBAAoB;;;;;;AAO1B,MAAa,qBAAqB,KAAK;;;;;;;AAQvC,MAAa,4BAA4B,IAAI;AAiB7C,MAAM,yBAAS,IAAI,IAAwB;AAC3C,SAAS,WAAW,WAA+B;CACjD,IAAI,QAAQ,OAAO,IAAI,SAAS;CAChC,IAAI,CAAC,OAAO;EACV,QAAQ;GACN,WAAW;GACX,UAAU;GACV,OAAO;GACP,uBAAO,IAAI,IAAI;GACf,sBAAM,IAAI,IAAI;GACd,YAAY;EACd;EACA,OAAO,IAAI,WAAW,KAAK;CAC7B;CACA,OAAO;AACT;AAEA,SAAS,UAAU,OAAoC;CACrD,OAAQ,OAA6C;AACvD;;AAGA,eAAsB,kBAAkB,QAAgB,eAAyC;CAC/F,IAAI;EACF,MAAM,QAAQ,MAAM,GAAG,KAAK,MAAM;EAClC,OAAO,MAAM,OAAO,KAAK,KAAK,IAAI,IAAI,MAAM,UAAU,gBAAgB;CACxE,SAAS,OAAO;EACd,IAAI,UAAU,KAAK,MAAM,UAAU,OAAO;EAC1C,MAAM;CACR;AACF;;;;;;;;AASA,SAAS,WAAW,OAAmB,QAA8C;CACnF,MAAM,WAAW,OAAO,cAAc;CACtC,MAAM,MAAM,KAAK,IAAI;CACrB,OACE,CAAC,MAAM,cACP,MAAM,QAAQ,OAAO,iBACpB,MAAM,kBAAkB,UAAa,MAAM,iBAAiB,MAAM,YACnE,MAAM,MAAM,YAAY;AAE5B;;;;;;;AAQA,SAAgB,8BACd,QACA,QACM;CACN,MAAM,QAAQ,WAAW,OAAO,cAAc;CAC9C,AAAK,GACF,KAAK,MAAM,CAAC,CACZ,MAAM,UAAU;EACf,MAAM,SAAS,MAAM,QAAQ,MAAM,MAAM,IAAI,MAAM,KAAK;EACxD,MAAM,MAAM,IAAI,QAAQ,MAAM,IAAI;EAClC,MAAM,gBAAgB,KAAK,IAAI,MAAM,iBAAiB,MAAM,SAAS,MAAM,OAAO;EAClF,IAAI,MAAM,OAAO;EACjB,MAAM,QAAQ,KAAK,IAAI,GAAG,MAAM,YAAY,oBAAoB,KAAK,IAAI,CAAC;EAC1E,MAAM,QAAQ,iBAAiB;GAC7B,MAAM,QAAQ;GACd,IAAI,CAAC,WAAW,OAAO,MAAM,GAAG;IAC9B,MAAM,YAAY,KAAK,IAAI;IAC3B;GACF;GACA,AAAK,sBAAsB,QAAQ,MAAM,CAAC,CAAC,OAAO,UAAmB;IACnE,IAAI,KAAK,WAAW,kBAAkB,KAAK;GAC7C,CAAC;EACH,GAAG,KAAK;EACR,MAAM,MAAM,MAAM;CACpB,CAAC,CAAC,CACD,OAAO,UAAmB;EACzB,IAAI,UAAU,KAAK,MAAM,UAAU,IAAI,KAAK,WAAW,kBAAkB,KAAK;CAChF,CAAC;AACL;;AAYA,eAAe,sBAAsB,QAA+B;CAClE,IAAI;EACF,MAAM,QAAQ,MAAM,GAAG,MAAM,MAAM;EACnC,IAAI,MAAM,OAAO,KAAK,KAAK,IAAI,IAAI,MAAM,gBACvC,MAAM,GAAG,GAAG,QAAQ,EAAE,OAAO,KAAK,CAAC;CAEvC,SAAS,OAAO;EACd,IAAI,UAAU,KAAK,MAAM,UAAU,MAAM;CAC3C;AACF;;;;;;AAOA,eAAe,sBAAsB,YAAuC;CAC1E,IAAI,WAAW,cAAc,GAAG;CAChC,IAAI,KAAK,IAAI,IAAI,WAAW,gBAAsC;CAClE,IAAI,WAAW,UAAU,MAAM,GAAG,GAAG,WAAW,UAAU,EAAE,OAAO,KAAK,CAAC;CACzE,IAAI;EACF,IAAI,EAAE,MAAM,GAAG,MAAM,WAAW,SAAS,EAAC,CAAE,YAAY,GAAG;EAC3D,MAAM,GAAG,MAAM,WAAW,SAAS;CACrC,SAAS,OAAO;EACd,MAAM,OAAO,UAAU,KAAK;EAC5B,IAAI,SAAS,YAAY,SAAS,eAAe,SAAS,UAAU,MAAM;CAC5E;AACF;;;;;;;;;;;AAYA,eAAsB,sBACpB,QACA,MACe;CACf,MAAM,QAAQ,WAAW,OAAO,cAAc;CAC9C,MAAM,KAAK,IAAI,IAAI;CACnB,IAAI,MAAM,OAAO,OAAO,MAAM;CAC9B,MAAM,YAAY,KAAK,IAAI;CAC3B,MAAM,WAAW,MAAM;CACvB,MAAM,SAAS,YAAY;EACzB,MAAM,QAAsB,CAAC;EAC7B,MAAM,cAA4B,CAAC;EACnC,WAAW,MAAM,SAAS,wBAAwB,OAAO,cAAc,GAAG;GACxE,IAAI;GACJ,IAAI;IACF,WAAW,MAAM,GAAG,MAAM,MAAM,SAAS,EAAC,CAAE;GAC9C,SAAS,OAAO;IACd,IAAI,UAAU,KAAK,MAAM,UAAU;IACnC,MAAM;GACR;GACA,MAAM,aAAyB;IAAE,WAAW,MAAM;IAAW;IAAS,aAAa;GAAE;GACrF,YAAY,KAAK,UAAU;GAC3B,KAAK,MAAM,SAAS,MAAM,SACxB,IAAI,MAAM,SAAS,YACjB,WAAW,WAAW,MAAM;QACvB,IAAI,MAAM,SAAS,aACxB,MAAM,sBAAsB,MAAM,MAAM;QAExC,IAAI;IACF,MAAM,QAAQ,MAAM,GAAG,KAAK,MAAM,MAAM;IACxC,MAAM,KAAK;KACT,QAAQ,MAAM;KACd,MAAM,MAAM;KACZ,SAAS,MAAM;KACf;IACF,CAAC;IACD,WAAW,eAAe;GAC5B,SAAS,OAAO;IACd,IAAI,UAAU,KAAK,MAAM,UAAU,MAAM;GAC3C;EAGN;EACA,MAAM,QAAQ,IAAI,IAAI,MAAM,KAAK,SAAS,CAAC,KAAK,QAAQ,KAAK,IAAI,CAAC,CAAC;EACnE,MAAM,QAAQ,MAAM,QAAQ,KAAK,SAAS,MAAM,KAAK,MAAM,CAAC;EAC5D,MAAM,SAAS,KAAK,IAAI,IAAI,OAAO,cAAc;EACjD,IAAI;EACJ,KAAK,MAAM,QAAQ,MAAM,MAAM,GAAG,MAAM,EAAE,UAAU,EAAE,OAAO,GAAG;GAC9D,IACE,CAAC,MAAM,KAAK,IAAI,KAAK,MAAM,MAC1B,KAAK,WAAW,UAAU,MAAM,QAAQ,OAAO,gBAChD;IACA,MAAM,GAAG,GAAG,KAAK,QAAQ,EAAE,OAAO,KAAK,CAAC;IACxC,MAAM,SAAS,KAAK;IACpB,MAAM,MAAM,OAAO,KAAK,MAAM;IAC9B,KAAK,WAAW,eAAe;IAC/B;GACF;GACA,gBAAgB,KAAK,IAAI,iBAAiB,KAAK,SAAS,KAAK,OAAO;EACtE;EACA,KAAK,MAAM,cAAc,aAAa,MAAM,sBAAsB,UAAU;EAC5E,MAAM,gBAAgB;EACtB,MAAM,aAAa;CACrB,EAAC,CAAE;CACH,MAAM,QAAQ;CACd,IAAI;EACF,MAAM;CACR,UAAU;EACR,MAAM,QAAQ;EACd,MAAM,KAAK,MAAM;CACnB;AACF"}
+{"version":3,"file":"trim-image-variant-cache.mjs","names":[],"sources":["../../../../../../../../../packages/core/src/http/uploads/trim-image-variant-cache.ts"],"sourcesContent":["import { log } from \"@warlock.js/logger\";\nimport fs from \"node:fs/promises\";\nimport type { ResolvedImageVariantsConfig } from \"./image-variant-types\";\nimport { variantCacheGenerations } from \"./image-variant-cache-entries\";\n\nconst SWEEP_INTERVAL_MS = 60_000;\n\n/**\n * A writer's temporary file older than this is an orphan left by a crashed\n * write and is removed by the sweep. Younger ones are never touched: a writer\n * may still be renaming them into place.\n */\nexport const ORPHAN_TEMP_AGE_MS = 60 * 60_000;\n\n/**\n * A generation directory left without derivatives is removed only when it\n * was last changed longer ago than this, so a directory a writer has just\n * created for its first derivative survives. The writers also retry once when\n * their directory vanishes between `mkdir` and the rename.\n */\nexport const EMPTY_GENERATION_GRACE_MS = 5 * 60_000;\n\ntype CacheState = {\n  sweep?: Promise<void>;\n  timer?: ReturnType<typeof setTimeout>;\n  /** When the last scheduled check ran, whether or not it walked the cache. */\n  lastSweep: number;\n  /** When the cache was last walked. */\n  lastWalk: number;\n  bytes: number;\n  sizes: Map<string, number>;\n  keep: Set<string>;\n  /** True once a walk has reconciled `bytes` with the disk. */\n  reconciled: boolean;\n  /** The oldest retained derivative's mtime; undefined when none is known. */\n  oldestMtimeMs?: number;\n};\nconst caches = new Map<string, CacheState>();\nfunction cacheState(directory: string): CacheState {\n  let state = caches.get(directory);\n  if (!state) {\n    state = {\n      lastSweep: 0,\n      lastWalk: 0,\n      bytes: 0,\n      sizes: new Map(),\n      keep: new Set(),\n      reconciled: false,\n    };\n    caches.set(directory, state);\n  }\n  return state;\n}\n\nfunction errorCode(error: unknown): string | undefined {\n  return (error as NodeJS.ErrnoException | undefined)?.code;\n}\n\n/** Age is measured from generation; hits do not extend a derivative's life. */\nexport async function freshImageVariant(target: string, maxAgeSeconds: number): Promise<boolean> {\n  try {\n    const stats = await fs.stat(target);\n    return stats.isFile() && Date.now() - stats.mtimeMs < maxAgeSeconds * 1000;\n  } catch (error) {\n    if (errorCode(error) === \"ENOENT\") return false;\n    throw error;\n  }\n}\n\n/**\n * Whether a scheduled check must walk the cache. It may skip only when a walk\n * has already reconciled the byte estimate, the cache is within its byte\n * budget, nothing retained has expired (new writes are always younger than\n * the oldest retained derivative), and a walk ran within the last\n * `maxCacheAge`, which also bounds how long an orphaned temporary can linger.\n */\nfunction sweepIsDue(state: CacheState, images: ResolvedImageVariantsConfig): boolean {\n  const maxAgeMs = images.maxCacheAge * 1000;\n  const now = Date.now();\n  return (\n    !state.reconciled ||\n    state.bytes > images.maxCacheBytes ||\n    (state.oldestMtimeMs !== undefined && state.oldestMtimeMs <= now - maxAgeMs) ||\n    now - state.lastWalk >= maxAgeMs\n  );\n}\n\n/**\n * Schedule housekeeping only after a write. Hits do no cache-directory I/O.\n * Writes update a running byte estimate; at most one background check per\n * minute walks the cache, and only when it may have something to reclaim\n * (see {@link sweepIsDue}).\n */\nexport function scheduleImageVariantCacheTrim(\n  images: ResolvedImageVariantsConfig,\n  target: string,\n): void {\n  const state = cacheState(images.cacheDirectory);\n  void fs\n    .stat(target)\n    .then((stats) => {\n      state.bytes += stats.size - (state.sizes.get(target) ?? 0);\n      state.sizes.set(target, stats.size);\n      state.oldestMtimeMs = Math.min(state.oldestMtimeMs ?? stats.mtimeMs, stats.mtimeMs);\n      if (state.timer) return;\n      const delay = Math.max(0, state.lastSweep + SWEEP_INTERVAL_MS - Date.now());\n      state.timer = setTimeout(() => {\n        state.timer = undefined;\n        if (!sweepIsDue(state, images)) {\n          state.lastSweep = Date.now();\n          return;\n        }\n        void trimImageVariantCache(images, target).catch((error: unknown) => {\n          log.warn(\"uploads\", \"image-variants\", error);\n        });\n      }, delay);\n      state.timer.unref();\n    })\n    .catch((error: unknown) => {\n      if (errorCode(error) !== \"ENOENT\") log.warn(\"uploads\", \"image-variants\", error);\n    });\n}\n\ntype Derivative = { target: string; size: number; mtimeMs: number; generation: Generation };\ntype Generation = {\n  directory: string;\n  /** The directory's mtime before this sweep removed anything from it. */\n  mtimeMs: number;\n  derivatives: number;\n  manifest?: string;\n};\n\n/** Remove a temporary only when it is a regular file older than {@link ORPHAN_TEMP_AGE_MS}. */\nasync function removeOrphanTemporary(target: string): Promise<void> {\n  try {\n    const stats = await fs.lstat(target);\n    if (stats.isFile() && Date.now() - stats.mtimeMs > ORPHAN_TEMP_AGE_MS) {\n      await fs.rm(target, { force: true });\n    }\n  } catch (error) {\n    if (errorCode(error) !== \"ENOENT\") throw error;\n  }\n}\n\n/**\n * Remove a generation left without derivatives: its manifest, then the\n * directory itself with a non-recursive `rmdir`, so anything a writer has put\n * there since the walk keeps the directory in place.\n */\nasync function removeEmptyGeneration(generation: Generation): Promise<void> {\n  if (generation.derivatives > 0) return;\n  if (Date.now() - generation.mtimeMs <= EMPTY_GENERATION_GRACE_MS) return;\n  if (generation.manifest) await fs.rm(generation.manifest, { force: true });\n  try {\n    if (!(await fs.lstat(generation.directory)).isDirectory()) return;\n    await fs.rmdir(generation.directory);\n  } catch (error) {\n    const code = errorCode(error);\n    if (code !== \"ENOENT\" && code !== \"ENOTEMPTY\" && code !== \"EEXIST\") throw error;\n  }\n}\n\n/**\n * Join an in-flight sweep rather than queueing another walk. Retain the file\n * about to be served, even if it alone exceeds the byte budget. Only paths in\n * the generated cache layout are touched and symlinks are never followed:\n * expired and oldest derivatives are evicted, writer temporaries older than\n * {@link ORPHAN_TEMP_AGE_MS} are removed, and a generation directory left\n * without derivatives loses its manifest and the directory itself once it is\n * older than {@link EMPTY_GENERATION_GRACE_MS}. The cache root, shard and\n * source directories, user folders and unrelated files stay in place.\n */\nexport async function trimImageVariantCache(\n  images: ResolvedImageVariantsConfig,\n  keep: string,\n): Promise<void> {\n  const state = cacheState(images.cacheDirectory);\n  state.keep.add(keep);\n  if (state.sweep) return state.sweep;\n  state.lastSweep = Date.now();\n  state.lastWalk = state.lastSweep;\n  const sweep = (async () => {\n    const files: Derivative[] = [];\n    const generations: Generation[] = [];\n    for await (const found of variantCacheGenerations(images.cacheDirectory)) {\n      let mtimeMs: number;\n      try {\n        mtimeMs = (await fs.lstat(found.directory)).mtimeMs;\n      } catch (error) {\n        if (errorCode(error) === \"ENOENT\") continue;\n        throw error;\n      }\n      const generation: Generation = { directory: found.directory, mtimeMs, derivatives: 0 };\n      generations.push(generation);\n      for (const entry of found.entries) {\n        if (entry.type === \"manifest\") {\n          generation.manifest = entry.target;\n        } else if (entry.type === \"temporary\") {\n          await removeOrphanTemporary(entry.target);\n        } else {\n          try {\n            const stats = await fs.stat(entry.target);\n            files.push({\n              target: entry.target,\n              size: stats.size,\n              mtimeMs: stats.mtimeMs,\n              generation,\n            });\n            generation.derivatives += 1;\n          } catch (error) {\n            if (errorCode(error) !== \"ENOENT\") throw error;\n          }\n        }\n      }\n    }\n    state.sizes = new Map(files.map((file) => [file.target, file.size]));\n    state.bytes = files.reduce((sum, file) => sum + file.size, 0);\n    const cutoff = Date.now() - images.maxCacheAge * 1000;\n    let oldestMtimeMs: number | undefined;\n    for (const file of files.sort((a, b) => a.mtimeMs - b.mtimeMs)) {\n      if (\n        !state.keep.has(file.target) &&\n        (file.mtimeMs <= cutoff || state.bytes > images.maxCacheBytes)\n      ) {\n        await fs.rm(file.target, { force: true });\n        state.bytes -= file.size;\n        state.sizes.delete(file.target);\n        file.generation.derivatives -= 1;\n        continue;\n      }\n      oldestMtimeMs = Math.min(oldestMtimeMs ?? file.mtimeMs, file.mtimeMs);\n    }\n    for (const generation of generations) await removeEmptyGeneration(generation);\n    state.oldestMtimeMs = oldestMtimeMs;\n    state.reconciled = true;\n  })();\n  state.sweep = sweep;\n  try {\n    await sweep;\n  } finally {\n    state.sweep = undefined;\n    state.keep.clear();\n  }\n}\n"],"mappings":";;;;;AAKA,MAAM,oBAAoB;;;;;;AAO1B,MAAa,qBAAqB;;;;;;;AAQlC,MAAa,4BAA4B;AAiBzC,MAAM,yBAAS,IAAI,IAAwB;AAC3C,SAAS,WAAW,WAA+B;CACjD,IAAI,QAAQ,OAAO,IAAI,SAAS;CAChC,IAAI,CAAC,OAAO;EACV,QAAQ;GACN,WAAW;GACX,UAAU;GACV,OAAO;GACP,uBAAO,IAAI,IAAI;GACf,sBAAM,IAAI,IAAI;GACd,YAAY;EACd;EACA,OAAO,IAAI,WAAW,KAAK;CAC7B;CACA,OAAO;AACT;AAEA,SAAS,UAAU,OAAoC;CACrD,OAAQ,OAA6C;AACvD;;AAGA,eAAsB,kBAAkB,QAAgB,eAAyC;CAC/F,IAAI;EACF,MAAM,QAAQ,MAAM,GAAG,KAAK,MAAM;EAClC,OAAO,MAAM,OAAO,KAAK,KAAK,IAAI,IAAI,MAAM,UAAU,gBAAgB;CACxE,SAAS,OAAO;EACd,IAAI,UAAU,KAAK,MAAM,UAAU,OAAO;EAC1C,MAAM;CACR;AACF;;;;;;;;AASA,SAAS,WAAW,OAAmB,QAA8C;CACnF,MAAM,WAAW,OAAO,cAAc;CACtC,MAAM,MAAM,KAAK,IAAI;CACrB,OACE,CAAC,MAAM,cACP,MAAM,QAAQ,OAAO,iBACpB,MAAM,kBAAkB,UAAa,MAAM,iBAAiB,MAAM,YACnE,MAAM,MAAM,YAAY;AAE5B;;;;;;;AAQA,SAAgB,8BACd,QACA,QACM;CACN,MAAM,QAAQ,WAAW,OAAO,cAAc;CAC9C,AAAK,GACF,KAAK,MAAM,CAAC,CACZ,MAAM,UAAU;EACf,MAAM,SAAS,MAAM,QAAQ,MAAM,MAAM,IAAI,MAAM,KAAK;EACxD,MAAM,MAAM,IAAI,QAAQ,MAAM,IAAI;EAClC,MAAM,gBAAgB,KAAK,IAAI,MAAM,iBAAiB,MAAM,SAAS,MAAM,OAAO;EAClF,IAAI,MAAM,OAAO;EACjB,MAAM,QAAQ,KAAK,IAAI,GAAG,MAAM,YAAY,oBAAoB,KAAK,IAAI,CAAC;EAC1E,MAAM,QAAQ,iBAAiB;GAC7B,MAAM,QAAQ;GACd,IAAI,CAAC,WAAW,OAAO,MAAM,GAAG;IAC9B,MAAM,YAAY,KAAK,IAAI;IAC3B;GACF;GACA,AAAK,sBAAsB,QAAQ,MAAM,CAAC,CAAC,OAAO,UAAmB;IACnE,IAAI,KAAK,WAAW,kBAAkB,KAAK;GAC7C,CAAC;EACH,GAAG,KAAK;EACR,MAAM,MAAM,MAAM;CACpB,CAAC,CAAC,CACD,OAAO,UAAmB;EACzB,IAAI,UAAU,KAAK,MAAM,UAAU,IAAI,KAAK,WAAW,kBAAkB,KAAK;CAChF,CAAC;AACL;;AAYA,eAAe,sBAAsB,QAA+B;CAClE,IAAI;EACF,MAAM,QAAQ,MAAM,GAAG,MAAM,MAAM;EACnC,IAAI,MAAM,OAAO,KAAK,KAAK,IAAI,IAAI,MAAM,gBACvC,MAAM,GAAG,GAAG,QAAQ,EAAE,OAAO,KAAK,CAAC;CAEvC,SAAS,OAAO;EACd,IAAI,UAAU,KAAK,MAAM,UAAU,MAAM;CAC3C;AACF;;;;;;AAOA,eAAe,sBAAsB,YAAuC;CAC1E,IAAI,WAAW,cAAc,GAAG;CAChC,IAAI,KAAK,IAAI,IAAI,WAAW,gBAAsC;CAClE,IAAI,WAAW,UAAU,MAAM,GAAG,GAAG,WAAW,UAAU,EAAE,OAAO,KAAK,CAAC;CACzE,IAAI;EACF,IAAI,EAAE,MAAM,GAAG,MAAM,WAAW,SAAS,EAAC,CAAE,YAAY,GAAG;EAC3D,MAAM,GAAG,MAAM,WAAW,SAAS;CACrC,SAAS,OAAO;EACd,MAAM,OAAO,UAAU,KAAK;EAC5B,IAAI,SAAS,YAAY,SAAS,eAAe,SAAS,UAAU,MAAM;CAC5E;AACF;;;;;;;;;;;AAYA,eAAsB,sBACpB,QACA,MACe;CACf,MAAM,QAAQ,WAAW,OAAO,cAAc;CAC9C,MAAM,KAAK,IAAI,IAAI;CACnB,IAAI,MAAM,OAAO,OAAO,MAAM;CAC9B,MAAM,YAAY,KAAK,IAAI;CAC3B,MAAM,WAAW,MAAM;CACvB,MAAM,SAAS,YAAY;EACzB,MAAM,QAAsB,CAAC;EAC7B,MAAM,cAA4B,CAAC;EACnC,WAAW,MAAM,SAAS,wBAAwB,OAAO,cAAc,GAAG;GACxE,IAAI;GACJ,IAAI;IACF,WAAW,MAAM,GAAG,MAAM,MAAM,SAAS,EAAC,CAAE;GAC9C,SAAS,OAAO;IACd,IAAI,UAAU,KAAK,MAAM,UAAU;IACnC,MAAM;GACR;GACA,MAAM,aAAyB;IAAE,WAAW,MAAM;IAAW;IAAS,aAAa;GAAE;GACrF,YAAY,KAAK,UAAU;GAC3B,KAAK,MAAM,SAAS,MAAM,SACxB,IAAI,MAAM,SAAS,YACjB,WAAW,WAAW,MAAM;QACvB,IAAI,MAAM,SAAS,aACxB,MAAM,sBAAsB,MAAM,MAAM;QAExC,IAAI;IACF,MAAM,QAAQ,MAAM,GAAG,KAAK,MAAM,MAAM;IACxC,MAAM,KAAK;KACT,QAAQ,MAAM;KACd,MAAM,MAAM;KACZ,SAAS,MAAM;KACf;IACF,CAAC;IACD,WAAW,eAAe;GAC5B,SAAS,OAAO;IACd,IAAI,UAAU,KAAK,MAAM,UAAU,MAAM;GAC3C;EAGN;EACA,MAAM,QAAQ,IAAI,IAAI,MAAM,KAAK,SAAS,CAAC,KAAK,QAAQ,KAAK,IAAI,CAAC,CAAC;EACnE,MAAM,QAAQ,MAAM,QAAQ,KAAK,SAAS,MAAM,KAAK,MAAM,CAAC;EAC5D,MAAM,SAAS,KAAK,IAAI,IAAI,OAAO,cAAc;EACjD,IAAI;EACJ,KAAK,MAAM,QAAQ,MAAM,MAAM,GAAG,MAAM,EAAE,UAAU,EAAE,OAAO,GAAG;GAC9D,IACE,CAAC,MAAM,KAAK,IAAI,KAAK,MAAM,MAC1B,KAAK,WAAW,UAAU,MAAM,QAAQ,OAAO,gBAChD;IACA,MAAM,GAAG,GAAG,KAAK,QAAQ,EAAE,OAAO,KAAK,CAAC;IACxC,MAAM,SAAS,KAAK;IACpB,MAAM,MAAM,OAAO,KAAK,MAAM;IAC9B,KAAK,WAAW,eAAe;IAC/B;GACF;GACA,gBAAgB,KAAK,IAAI,iBAAiB,KAAK,SAAS,KAAK,OAAO;EACtE;EACA,KAAK,MAAM,cAAc,aAAa,MAAM,sBAAsB,UAAU;EAC5E,MAAM,gBAAgB;EACtB,MAAM,aAAa;CACrB,EAAC,CAAE;CACH,MAAM,QAAQ;CACd,IAAI;EACF,MAAM;CACR,UAAU;EACR,MAAM,QAAQ;EACd,MAAM,KAAK,MAAM;CACnB;AACF"}

package/esm/http/uploads/uploaded-file.controller.d.mts

@@ -1,16 +1,18 @@
 import { StorageDriverName } from "../../storage/types.mjs";
 import { RequestHandler } from "../../router/types.mjs";
+import "../../router/index.mjs";
 //#region ../../packages/core/src/http/uploads/uploaded-file.controller.d.ts
 /**
  * Options for {@link createUploadedFileController}
  */
-type UploadedFileControllerOptions = {
+export type UploadedFileControllerOptions = {
   /**
    * Disk to serve from; remote disks support variants only. Uses the default
    * disk when omitted. A private disk
    * should be served from a route that checks access first.
    */
-  disk?: StorageDriverName; /** Allow derivatives from the default cloud disk. Explicit disk selection also opts in. */
+  disk?: StorageDriverName;
+  /** Allow derivatives from the default cloud disk. Explicit disk selection also opts in. */
   remote?: boolean;
 };
 /**
@@ -34,11 +36,10 @@ type UploadedFileControllerOptions = {
  * (see `resolveImageVariant`), written atomically, generated once per key even
  * under concurrent requests, and sent with an immutable cache and an ETag.
  */
-declare function createUploadedFileController(options?: UploadedFileControllerOptions): RequestHandler;
+export declare function createUploadedFileController(options?: UploadedFileControllerOptions): RequestHandler;
 /**
  * Serves the default disk's uploads; see {@link createUploadedFileController}
  */
-declare const uploadedFileController: RequestHandler;
+export declare const uploadedFileController: RequestHandler;
 //#endregion
-export { UploadedFileControllerOptions, createUploadedFileController, uploadedFileController };
 //# sourceMappingURL=uploaded-file.controller.d.mts.map

package/esm/http/uploads/uploaded-file.controller.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"uploaded-file.controller.d.mts","names":[],"sources":["../../../../../../../../../packages/core/src/http/uploads/uploaded-file.controller.ts"],"mappings":";;;;;;KA6FY,6BAAA;EAA6B;;;;;EAMvC,IAAA,GAAO,iBAAiB,EAGlB;EAAN,MAAA;AAAA;;;;;;;;AA0Be;AA+HjB;;;;AAAoF;;;;;;;;;iBAjIpE,4BAAA,CACd,OAAA,GAAS,6BAAA,GACR,cAAc;;;;cA+HJ,sBAAA,EAAwB,cAA+C"}
+{"version":3,"file":"uploaded-file.controller.d.mts","names":[],"sources":["../../../../../../../../../packages/core/src/http/uploads/uploaded-file.controller.ts"],"mappings":";;;;;;;YA6FY;;;;;;EAMV,OAAO;;EAGP;;;;;;;;;;;;;;;;;;;;;;;wBAwBc,6BACd,UAAS,gCACR;;;;qBA+HU,wBAAwB"}

package/esm/http/uploads/uploaded-file.controller.mjs

@@ -104,7 +104,8 @@ function createUploadedFileController(options = {}) {
 			}
 			const source = await resolveUploadPath(request.params["*"], diskRoot, [path.join(diskRoot, ".cache", "image-variants"), variantCacheDirectoryFor(diskRoot)]);
 			if (!source) return notFound(response);
-			const sniffedFormat = detectImageFormat(await readFileHead(source.absolutePath, 512));
+			const head = await readFileHead(source.absolutePath, 512);
+			const sniffedFormat = detectImageFormat(head);
 			if (!isVariantSourceFormat(sniffedFormat)) return sendOriginalAsAttachment(response, source.absolutePath);
 			const inlineContentType = resolveInlineImageContentType(source.absolutePath, sniffedFormat);
 			if (!inlineContentType) return sendOriginalAsAttachment(response, source.absolutePath);

package/esm/http/uploads/uploaded-file.controller.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"uploaded-file.controller.mjs","names":[],"sources":["../../../../../../../../../packages/core/src/http/uploads/uploaded-file.controller.ts"],"sourcesContent":["import { log } from \"@warlock.js/logger\";\nimport fs from \"node:fs/promises\";\nimport path from \"node:path\";\nimport type { RequestHandler } from \"../../router\";\nimport type { StorageDriverName } from \"../../storage/types\";\nimport { HttpError } from \"../errors\";\nimport type { Response } from \"../response\";\nimport {\n  detectImageFormat,\n  IMAGE_SIGNATURE_BYTES,\n  isVariantSourceFormat,\n} from \"./detect-image-format\";\nimport { isMissingFileError, variantCacheDirectoryFor } from \"./image-variant-cache\";\nimport type { VariantOutputFormat } from \"./image-variant-types\";\nimport { localDiskRoot } from \"./local-disk-root\";\nimport { evaluateConditionalRequest } from \"../conditional-request\";\nimport { parseUploadedFileQuery } from \"./parse-uploaded-file-query\";\nimport { readFileHead } from \"./read-file-head\";\nimport { resolveImageVariant } from \"./resolve-image-variant\";\nimport { resolveInlineImageContentType } from \"./resolve-inline-image-content-type\";\nimport { resolveOriginalContentType } from \"./resolve-original-content-type\";\nimport { resolveUploadPath } from \"./resolve-upload-path\";\n\n/**\n * One year, in seconds: originals and derivatives are both long-lived\n */\nconst ONE_YEAR = 31_536_000;\n\nconst CONTENT_TYPES: Record<VariantOutputFormat, string> = {\n  jpeg: \"image/jpeg\",\n  png: \"image/png\",\n  webp: \"image/webp\",\n  avif: \"image/avif\",\n};\n\nfunction notFound(response: Response) {\n  return response.notFound({ error: \"File Not Found\" });\n}\n\nasync function sendVariant(\n  response: Response,\n  body: Buffer,\n  hash: string,\n  format: VariantOutputFormat,\n) {\n  return response.sendBuffer(body, {\n    contentType: CONTENT_TYPES[format],\n    cacheTime: ONE_YEAR,\n    immutable: true,\n    etag: `\"${hash}\"`,\n  });\n}\n\n/**\n * Serve an upload original that isn't safe to render inline: a non-raster\n * format (html, xml, the svg family, anything unrecognised) is markup a\n * browser will parse and execute, and a raster-sniffed file whose extension\n * doesn't back that format up (see `resolveInlineImageContentType`) is a\n * polyglot — so both go out as a download instead of a rendered response.\n * `Content-Type` stays extension-derived, except the svg/html/xml family,\n * which is downgraded to `application/octet-stream` so the browser never\n * renders it even if it ignores the disposition.\n */\nasync function sendOriginalAsAttachment(response: Response, absolutePath: string) {\n  response.header(\"Content-Security-Policy\", \"sandbox\");\n\n  return response.sendBuffer(await fs.readFile(absolutePath), {\n    contentType: resolveOriginalContentType(absolutePath),\n    cacheTime: ONE_YEAR,\n    immutable: true,\n    inline: false,\n    filename: path.basename(absolutePath),\n  });\n}\n\n/**\n * Serve an upload original inline, once the sniffed raster format and the\n * extension-derived format have been confirmed to agree. The content type is\n * always the SNIFFED image type, passed explicitly — never `sendFile`'s\n * extension-derived guess, which is exactly what let a JPEG named `.html`\n * out as `text/html` before this existed.\n */\nasync function sendOriginalInline(response: Response, absolutePath: string, contentType: string) {\n  return response.sendBuffer(await fs.readFile(absolutePath), {\n    contentType,\n    cacheTime: ONE_YEAR,\n    immutable: true,\n  });\n}\n\n/**\n * Options for {@link createUploadedFileController}\n */\nexport type UploadedFileControllerOptions = {\n  /**\n   * Disk to serve from; remote disks support variants only. Uses the default\n   * disk when omitted. A private disk\n   * should be served from a route that checks access first.\n   */\n  disk?: StorageDriverName;\n\n  /** Allow derivatives from the default cloud disk. Explicit disk selection also opts in. */\n  remote?: boolean;\n};\n\n/**\n * Serves local uploads and bounded on-demand image variants from any disk.\n *\n * ```ts\n * router.get(\"/uploads/*\", uploadedFileController);\n * router.get(\"/invoices/*\", createUploadedFileController({ disk: \"private\" }), {\n *   middleware: [authMiddleware()],\n * });\n * ```\n *\n * - `GET /uploads/<path>` sends the original file with a one-year cache.\n * - `GET /uploads/<path>?variant=<name>[&format=webp|avif]` sends a derivative\n *   rendered from a variant named in `uploads.images.variants`. No other query\n *   key is accepted, so a client can never ask for an arbitrary size.\n *\n * The path must stay inside the disk root (after symlinks are resolved) and\n * outside the variant cache; anything else is a 404, the same answer a missing\n * file gets. Derivatives are cached on disk under a directory per source\n * (see `resolveImageVariant`), written atomically, generated once per key even\n * under concurrent requests, and sent with an immutable cache and an ETag.\n */\nexport function createUploadedFileController(\n  options: UploadedFileControllerOptions = {},\n): RequestHandler {\n  return async ({ request, response }) => {\n    const diskRoot = localDiskRoot(options.disk);\n    // The scaffold's public route must not expose private objects when the\n    // default disk changes to a cloud bucket. Remote access is deliberate.\n    if (!diskRoot && options.disk === undefined && options.remote !== true)\n      return notFound(response);\n\n    const query = parseUploadedFileQuery(request.url);\n\n    if (query.type === \"invalid\") {\n      return response.badRequest({ error: query.reason });\n    }\n\n    // Every uploads response — originals and variants — tells the browser not\n    // to guess a content type from the bytes, so a mislabeled body can never be\n    // sniffed into something executable.\n    response.header(\"X-Content-Type-Options\", \"nosniff\");\n\n    if (query.type === \"original\") {\n      if (!diskRoot) {\n        log.error(\n          \"uploads\",\n          \"serve\",\n          options.disk === undefined\n            ? \"uploadedFileController needs a local storage driver with a root.\"\n            : `uploadedFileController needs a local disk; \"${options.disk}\" is not one.`,\n        );\n\n        return notFound(response);\n      }\n\n      const source = await resolveUploadPath(request.params[\"*\"], diskRoot, [\n        path.join(diskRoot, \".cache\", \"image-variants\"),\n        variantCacheDirectoryFor(diskRoot),\n      ]);\n\n      if (!source) return notFound(response);\n\n      // Inline is decided by SNIFFED bytes, never by extension: an svg (or any\n      // other non-raster file) named `.png` must still download, not render.\n      const head = await readFileHead(source.absolutePath, IMAGE_SIGNATURE_BYTES);\n      const sniffedFormat = detectImageFormat(head);\n\n      if (!isVariantSourceFormat(sniffedFormat)) {\n        return sendOriginalAsAttachment(response, source.absolutePath);\n      }\n\n      // Inline is only safe when the extension-derived type agrees with the\n      // sniffed bytes too — otherwise `sendFile` would advertise the\n      // extension's type (e.g. text/html for JPEG bytes named `.html`).\n      const inlineContentType = resolveInlineImageContentType(source.absolutePath, sniffedFormat);\n\n      if (!inlineContentType) {\n        return sendOriginalAsAttachment(response, source.absolutePath);\n      }\n\n      return sendOriginalInline(response, source.absolutePath, inlineContentType);\n    }\n\n    try {\n      const variantInput = {\n        path: request.params[\"*\"] as string,\n        variant: query.variant,\n        ...(query.format !== undefined ? { format: query.format as VariantOutputFormat } : {}),\n        ...(options.disk !== undefined ? { disk: options.disk } : {}),\n      };\n      let variant = await resolveImageVariant(variantInput);\n\n      if (!variant) return notFound(response);\n\n      // The variant hash is a strong validator: If-None-Match compares weakly,\n      // If-Match strongly (RFC 9110 §13.1).\n      const precondition = evaluateConditionalRequest({\n        method: request.method,\n        etag: `\"${variant.hash}\"`,\n        ifMatch: request.header(\"if-match\"),\n        ifNoneMatch: request.header(\"if-none-match\"),\n      });\n\n      if (precondition === \"not-modified\") {\n        return response.baseResponse.status(304).send();\n      }\n\n      if (precondition === \"precondition-failed\") {\n        return response.baseResponse.status(412).send();\n      }\n\n      let body: Buffer;\n\n      try {\n        body = await fs.readFile(variant.absolutePath);\n      } catch (readError) {\n        if (!isMissingFileError(readError)) throw readError;\n\n        // Pruned between the existence check and the read: the source was\n        // rewritten in place and a request for the new version cleared the\n        // old generation. Resolve (and render) once more.\n        variant = await resolveImageVariant(variantInput);\n\n        if (!variant) return notFound(response);\n\n        body = await fs.readFile(variant.absolutePath);\n      }\n\n      return sendVariant(response, body, variant.hash, variant.format);\n    } catch (error) {\n      if (error instanceof HttpError) {\n        return response.send({ error: error.message }, error.status);\n      }\n\n      log.error(\n        \"uploads\",\n        \"variant\",\n        `Could not generate variant \"${query.variant}\" of ${String(request.params[\"*\"])}: ${\n          error instanceof Error ? error.message : String(error)\n        }`,\n      );\n\n      return response.serverError({ error: \"Could not generate the image variant.\" });\n    }\n  };\n}\n\n/**\n * Serves the default disk's uploads; see {@link createUploadedFileController}\n */\nexport const uploadedFileController: RequestHandler = createUploadedFileController();\n"],"mappings":";;;;;;;;;;;;;;;;;;;AA0BA,MAAM,WAAW;AAEjB,MAAM,gBAAqD;CACzD,MAAM;CACN,KAAK;CACL,MAAM;CACN,MAAM;AACR;AAEA,SAAS,SAAS,UAAoB;CACpC,OAAO,SAAS,SAAS,EAAE,OAAO,iBAAiB,CAAC;AACtD;AAEA,eAAe,YACb,UACA,MACA,MACA,QACA;CACA,OAAO,SAAS,WAAW,MAAM;EAC/B,aAAa,cAAc;EAC3B,WAAW;EACX,WAAW;EACX,MAAM,IAAI,KAAK;CACjB,CAAC;AACH;;;;;;;;;;;AAYA,eAAe,yBAAyB,UAAoB,cAAsB;CAChF,SAAS,OAAO,2BAA2B,SAAS;CAEpD,OAAO,SAAS,WAAW,MAAM,GAAG,SAAS,YAAY,GAAG;EAC1D,aAAa,2BAA2B,YAAY;EACpD,WAAW;EACX,WAAW;EACX,QAAQ;EACR,UAAU,KAAK,SAAS,YAAY;CACtC,CAAC;AACH;;;;;;;;AASA,eAAe,mBAAmB,UAAoB,cAAsB,aAAqB;CAC/F,OAAO,SAAS,WAAW,MAAM,GAAG,SAAS,YAAY,GAAG;EAC1D;EACA,WAAW;EACX,WAAW;CACb,CAAC;AACH;;;;;;;;;;;;;;;;;;;;;;AAsCA,SAAgB,6BACd,UAAyC,CAAC,GAC1B;CAChB,OAAO,OAAO,EAAE,SAAS,eAAe;EACtC,MAAM,WAAW,cAAc,QAAQ,IAAI;EAG3C,IAAI,CAAC,YAAY,QAAQ,SAAS,UAAa,QAAQ,WAAW,MAChE,OAAO,SAAS,QAAQ;EAE1B,MAAM,QAAQ,uBAAuB,QAAQ,GAAG;EAEhD,IAAI,MAAM,SAAS,WACjB,OAAO,SAAS,WAAW,EAAE,OAAO,MAAM,OAAO,CAAC;EAMpD,SAAS,OAAO,0BAA0B,SAAS;EAEnD,IAAI,MAAM,SAAS,YAAY;GAC7B,IAAI,CAAC,UAAU;IACb,IAAI,MACF,WACA,SACA,QAAQ,SAAS,SACb,qEACA,+CAA+C,QAAQ,KAAK,cAClE;IAEA,OAAO,SAAS,QAAQ;GAC1B;GAEA,MAAM,SAAS,MAAM,kBAAkB,QAAQ,OAAO,MAAM,UAAU,CACpE,KAAK,KAAK,UAAU,UAAU,gBAAgB,GAC9C,yBAAyB,QAAQ,CACnC,CAAC;GAED,IAAI,CAAC,QAAQ,OAAO,SAAS,QAAQ;GAKrC,MAAM,gBAAgB,kBAAkB,MADrB,aAAa,OAAO,iBAAmC,CAC9B;GAE5C,IAAI,CAAC,sBAAsB,aAAa,GACtC,OAAO,yBAAyB,UAAU,OAAO,YAAY;GAM/D,MAAM,oBAAoB,8BAA8B,OAAO,cAAc,aAAa;GAE1F,IAAI,CAAC,mBACH,OAAO,yBAAyB,UAAU,OAAO,YAAY;GAG/D,OAAO,mBAAmB,UAAU,OAAO,cAAc,iBAAiB;EAC5E;EAEA,IAAI;GACF,MAAM,eAAe;IACnB,MAAM,QAAQ,OAAO;IACrB,SAAS,MAAM;IACf,GAAI,MAAM,WAAW,SAAY,EAAE,QAAQ,MAAM,OAA8B,IAAI,CAAC;IACpF,GAAI,QAAQ,SAAS,SAAY,EAAE,MAAM,QAAQ,KAAK,IAAI,CAAC;GAC7D;GACA,IAAI,UAAU,MAAM,oBAAoB,YAAY;GAEpD,IAAI,CAAC,SAAS,OAAO,SAAS,QAAQ;GAItC,MAAM,eAAe,2BAA2B;IAC9C,QAAQ,QAAQ;IAChB,MAAM,IAAI,QAAQ,KAAK;IACvB,SAAS,QAAQ,OAAO,UAAU;IAClC,aAAa,QAAQ,OAAO,eAAe;GAC7C,CAAC;GAED,IAAI,iBAAiB,gBACnB,OAAO,SAAS,aAAa,OAAO,GAAG,CAAC,CAAC,KAAK;GAGhD,IAAI,iBAAiB,uBACnB,OAAO,SAAS,aAAa,OAAO,GAAG,CAAC,CAAC,KAAK;GAGhD,IAAI;GAEJ,IAAI;IACF,OAAO,MAAM,GAAG,SAAS,QAAQ,YAAY;GAC/C,SAAS,WAAW;IAClB,IAAI,CAAC,mBAAmB,SAAS,GAAG,MAAM;IAK1C,UAAU,MAAM,oBAAoB,YAAY;IAEhD,IAAI,CAAC,SAAS,OAAO,SAAS,QAAQ;IAEtC,OAAO,MAAM,GAAG,SAAS,QAAQ,YAAY;GAC/C;GAEA,OAAO,YAAY,UAAU,MAAM,QAAQ,MAAM,QAAQ,MAAM;EACjE,SAAS,OAAO;GACd,IAAI,iBAAiB,WACnB,OAAO,SAAS,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,MAAM,MAAM;GAG7D,IAAI,MACF,WACA,WACA,+BAA+B,MAAM,QAAQ,OAAO,OAAO,QAAQ,OAAO,IAAI,EAAE,IAC9E,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAEzD;GAEA,OAAO,SAAS,YAAY,EAAE,OAAO,wCAAwC,CAAC;EAChF;CACF;AACF;;;;AAKA,MAAa,yBAAyC,6BAA6B"}
+{"version":3,"file":"uploaded-file.controller.mjs","names":[],"sources":["../../../../../../../../../packages/core/src/http/uploads/uploaded-file.controller.ts"],"sourcesContent":["import { log } from \"@warlock.js/logger\";\nimport fs from \"node:fs/promises\";\nimport path from \"node:path\";\nimport type { RequestHandler } from \"../../router\";\nimport type { StorageDriverName } from \"../../storage/types\";\nimport { HttpError } from \"../errors\";\nimport type { Response } from \"../response\";\nimport {\n  detectImageFormat,\n  IMAGE_SIGNATURE_BYTES,\n  isVariantSourceFormat,\n} from \"./detect-image-format\";\nimport { isMissingFileError, variantCacheDirectoryFor } from \"./image-variant-cache\";\nimport type { VariantOutputFormat } from \"./image-variant-types\";\nimport { localDiskRoot } from \"./local-disk-root\";\nimport { evaluateConditionalRequest } from \"../conditional-request\";\nimport { parseUploadedFileQuery } from \"./parse-uploaded-file-query\";\nimport { readFileHead } from \"./read-file-head\";\nimport { resolveImageVariant } from \"./resolve-image-variant\";\nimport { resolveInlineImageContentType } from \"./resolve-inline-image-content-type\";\nimport { resolveOriginalContentType } from \"./resolve-original-content-type\";\nimport { resolveUploadPath } from \"./resolve-upload-path\";\n\n/**\n * One year, in seconds: originals and derivatives are both long-lived\n */\nconst ONE_YEAR = 31_536_000;\n\nconst CONTENT_TYPES: Record<VariantOutputFormat, string> = {\n  jpeg: \"image/jpeg\",\n  png: \"image/png\",\n  webp: \"image/webp\",\n  avif: \"image/avif\",\n};\n\nfunction notFound(response: Response) {\n  return response.notFound({ error: \"File Not Found\" });\n}\n\nasync function sendVariant(\n  response: Response,\n  body: Buffer,\n  hash: string,\n  format: VariantOutputFormat,\n) {\n  return response.sendBuffer(body, {\n    contentType: CONTENT_TYPES[format],\n    cacheTime: ONE_YEAR,\n    immutable: true,\n    etag: `\"${hash}\"`,\n  });\n}\n\n/**\n * Serve an upload original that isn't safe to render inline: a non-raster\n * format (html, xml, the svg family, anything unrecognised) is markup a\n * browser will parse and execute, and a raster-sniffed file whose extension\n * doesn't back that format up (see `resolveInlineImageContentType`) is a\n * polyglot — so both go out as a download instead of a rendered response.\n * `Content-Type` stays extension-derived, except the svg/html/xml family,\n * which is downgraded to `application/octet-stream` so the browser never\n * renders it even if it ignores the disposition.\n */\nasync function sendOriginalAsAttachment(response: Response, absolutePath: string) {\n  response.header(\"Content-Security-Policy\", \"sandbox\");\n\n  return response.sendBuffer(await fs.readFile(absolutePath), {\n    contentType: resolveOriginalContentType(absolutePath),\n    cacheTime: ONE_YEAR,\n    immutable: true,\n    inline: false,\n    filename: path.basename(absolutePath),\n  });\n}\n\n/**\n * Serve an upload original inline, once the sniffed raster format and the\n * extension-derived format have been confirmed to agree. The content type is\n * always the SNIFFED image type, passed explicitly — never `sendFile`'s\n * extension-derived guess, which is exactly what let a JPEG named `.html`\n * out as `text/html` before this existed.\n */\nasync function sendOriginalInline(response: Response, absolutePath: string, contentType: string) {\n  return response.sendBuffer(await fs.readFile(absolutePath), {\n    contentType,\n    cacheTime: ONE_YEAR,\n    immutable: true,\n  });\n}\n\n/**\n * Options for {@link createUploadedFileController}\n */\nexport type UploadedFileControllerOptions = {\n  /**\n   * Disk to serve from; remote disks support variants only. Uses the default\n   * disk when omitted. A private disk\n   * should be served from a route that checks access first.\n   */\n  disk?: StorageDriverName;\n\n  /** Allow derivatives from the default cloud disk. Explicit disk selection also opts in. */\n  remote?: boolean;\n};\n\n/**\n * Serves local uploads and bounded on-demand image variants from any disk.\n *\n * ```ts\n * router.get(\"/uploads/*\", uploadedFileController);\n * router.get(\"/invoices/*\", createUploadedFileController({ disk: \"private\" }), {\n *   middleware: [authMiddleware()],\n * });\n * ```\n *\n * - `GET /uploads/<path>` sends the original file with a one-year cache.\n * - `GET /uploads/<path>?variant=<name>[&format=webp|avif]` sends a derivative\n *   rendered from a variant named in `uploads.images.variants`. No other query\n *   key is accepted, so a client can never ask for an arbitrary size.\n *\n * The path must stay inside the disk root (after symlinks are resolved) and\n * outside the variant cache; anything else is a 404, the same answer a missing\n * file gets. Derivatives are cached on disk under a directory per source\n * (see `resolveImageVariant`), written atomically, generated once per key even\n * under concurrent requests, and sent with an immutable cache and an ETag.\n */\nexport function createUploadedFileController(\n  options: UploadedFileControllerOptions = {},\n): RequestHandler {\n  return async ({ request, response }) => {\n    const diskRoot = localDiskRoot(options.disk);\n    // The scaffold's public route must not expose private objects when the\n    // default disk changes to a cloud bucket. Remote access is deliberate.\n    if (!diskRoot && options.disk === undefined && options.remote !== true)\n      return notFound(response);\n\n    const query = parseUploadedFileQuery(request.url);\n\n    if (query.type === \"invalid\") {\n      return response.badRequest({ error: query.reason });\n    }\n\n    // Every uploads response — originals and variants — tells the browser not\n    // to guess a content type from the bytes, so a mislabeled body can never be\n    // sniffed into something executable.\n    response.header(\"X-Content-Type-Options\", \"nosniff\");\n\n    if (query.type === \"original\") {\n      if (!diskRoot) {\n        log.error(\n          \"uploads\",\n          \"serve\",\n          options.disk === undefined\n            ? \"uploadedFileController needs a local storage driver with a root.\"\n            : `uploadedFileController needs a local disk; \"${options.disk}\" is not one.`,\n        );\n\n        return notFound(response);\n      }\n\n      const source = await resolveUploadPath(request.params[\"*\"], diskRoot, [\n        path.join(diskRoot, \".cache\", \"image-variants\"),\n        variantCacheDirectoryFor(diskRoot),\n      ]);\n\n      if (!source) return notFound(response);\n\n      // Inline is decided by SNIFFED bytes, never by extension: an svg (or any\n      // other non-raster file) named `.png` must still download, not render.\n      const head = await readFileHead(source.absolutePath, IMAGE_SIGNATURE_BYTES);\n      const sniffedFormat = detectImageFormat(head);\n\n      if (!isVariantSourceFormat(sniffedFormat)) {\n        return sendOriginalAsAttachment(response, source.absolutePath);\n      }\n\n      // Inline is only safe when the extension-derived type agrees with the\n      // sniffed bytes too — otherwise `sendFile` would advertise the\n      // extension's type (e.g. text/html for JPEG bytes named `.html`).\n      const inlineContentType = resolveInlineImageContentType(source.absolutePath, sniffedFormat);\n\n      if (!inlineContentType) {\n        return sendOriginalAsAttachment(response, source.absolutePath);\n      }\n\n      return sendOriginalInline(response, source.absolutePath, inlineContentType);\n    }\n\n    try {\n      const variantInput = {\n        path: request.params[\"*\"] as string,\n        variant: query.variant,\n        ...(query.format !== undefined ? { format: query.format as VariantOutputFormat } : {}),\n        ...(options.disk !== undefined ? { disk: options.disk } : {}),\n      };\n      let variant = await resolveImageVariant(variantInput);\n\n      if (!variant) return notFound(response);\n\n      // The variant hash is a strong validator: If-None-Match compares weakly,\n      // If-Match strongly (RFC 9110 §13.1).\n      const precondition = evaluateConditionalRequest({\n        method: request.method,\n        etag: `\"${variant.hash}\"`,\n        ifMatch: request.header(\"if-match\"),\n        ifNoneMatch: request.header(\"if-none-match\"),\n      });\n\n      if (precondition === \"not-modified\") {\n        return response.baseResponse.status(304).send();\n      }\n\n      if (precondition === \"precondition-failed\") {\n        return response.baseResponse.status(412).send();\n      }\n\n      let body: Buffer;\n\n      try {\n        body = await fs.readFile(variant.absolutePath);\n      } catch (readError) {\n        if (!isMissingFileError(readError)) throw readError;\n\n        // Pruned between the existence check and the read: the source was\n        // rewritten in place and a request for the new version cleared the\n        // old generation. Resolve (and render) once more.\n        variant = await resolveImageVariant(variantInput);\n\n        if (!variant) return notFound(response);\n\n        body = await fs.readFile(variant.absolutePath);\n      }\n\n      return sendVariant(response, body, variant.hash, variant.format);\n    } catch (error) {\n      if (error instanceof HttpError) {\n        return response.send({ error: error.message }, error.status);\n      }\n\n      log.error(\n        \"uploads\",\n        \"variant\",\n        `Could not generate variant \"${query.variant}\" of ${String(request.params[\"*\"])}: ${\n          error instanceof Error ? error.message : String(error)\n        }`,\n      );\n\n      return response.serverError({ error: \"Could not generate the image variant.\" });\n    }\n  };\n}\n\n/**\n * Serves the default disk's uploads; see {@link createUploadedFileController}\n */\nexport const uploadedFileController: RequestHandler = createUploadedFileController();\n"],"mappings":";;;;;;;;;;;;;;;;;;;AA0BA,MAAM,WAAW;AAEjB,MAAM,gBAAqD;CACzD,MAAM;CACN,KAAK;CACL,MAAM;CACN,MAAM;AACR;AAEA,SAAS,SAAS,UAAoB;CACpC,OAAO,SAAS,SAAS,EAAE,OAAO,iBAAiB,CAAC;AACtD;AAEA,eAAe,YACb,UACA,MACA,MACA,QACA;CACA,OAAO,SAAS,WAAW,MAAM;EAC/B,aAAa,cAAc;EAC3B,WAAW;EACX,WAAW;EACX,MAAM,IAAI,KAAK;CACjB,CAAC;AACH;;;;;;;;;;;AAYA,eAAe,yBAAyB,UAAoB,cAAsB;CAChF,SAAS,OAAO,2BAA2B,SAAS;CAEpD,OAAO,SAAS,WAAW,MAAM,GAAG,SAAS,YAAY,GAAG;EAC1D,aAAa,2BAA2B,YAAY;EACpD,WAAW;EACX,WAAW;EACX,QAAQ;EACR,UAAU,KAAK,SAAS,YAAY;CACtC,CAAC;AACH;;;;;;;;AASA,eAAe,mBAAmB,UAAoB,cAAsB,aAAqB;CAC/F,OAAO,SAAS,WAAW,MAAM,GAAG,SAAS,YAAY,GAAG;EAC1D;EACA,WAAW;EACX,WAAW;CACb,CAAC;AACH;;;;;;;;;;;;;;;;;;;;;;AAsCA,SAAgB,6BACd,UAAyC,CAAC,GAC1B;CAChB,OAAO,OAAO,EAAE,SAAS,eAAe;EACtC,MAAM,WAAW,cAAc,QAAQ,IAAI;EAG3C,IAAI,CAAC,YAAY,QAAQ,SAAS,UAAa,QAAQ,WAAW,MAChE,OAAO,SAAS,QAAQ;EAE1B,MAAM,QAAQ,uBAAuB,QAAQ,GAAG;EAEhD,IAAI,MAAM,SAAS,WACjB,OAAO,SAAS,WAAW,EAAE,OAAO,MAAM,OAAO,CAAC;EAMpD,SAAS,OAAO,0BAA0B,SAAS;EAEnD,IAAI,MAAM,SAAS,YAAY;GAC7B,IAAI,CAAC,UAAU;IACb,IAAI,MACF,WACA,SACA,QAAQ,SAAS,SACb,qEACA,+CAA+C,QAAQ,KAAK,cAClE;IAEA,OAAO,SAAS,QAAQ;GAC1B;GAEA,MAAM,SAAS,MAAM,kBAAkB,QAAQ,OAAO,MAAM,UAAU,CACpE,KAAK,KAAK,UAAU,UAAU,gBAAgB,GAC9C,yBAAyB,QAAQ,CACnC,CAAC;GAED,IAAI,CAAC,QAAQ,OAAO,SAAS,QAAQ;GAIrC,MAAM,OAAO,MAAM,aAAa,OAAO,iBAAmC;GAC1E,MAAM,gBAAgB,kBAAkB,IAAI;GAE5C,IAAI,CAAC,sBAAsB,aAAa,GACtC,OAAO,yBAAyB,UAAU,OAAO,YAAY;GAM/D,MAAM,oBAAoB,8BAA8B,OAAO,cAAc,aAAa;GAE1F,IAAI,CAAC,mBACH,OAAO,yBAAyB,UAAU,OAAO,YAAY;GAG/D,OAAO,mBAAmB,UAAU,OAAO,cAAc,iBAAiB;EAC5E;EAEA,IAAI;GACF,MAAM,eAAe;IACnB,MAAM,QAAQ,OAAO;IACrB,SAAS,MAAM;IACf,GAAI,MAAM,WAAW,SAAY,EAAE,QAAQ,MAAM,OAA8B,IAAI,CAAC;IACpF,GAAI,QAAQ,SAAS,SAAY,EAAE,MAAM,QAAQ,KAAK,IAAI,CAAC;GAC7D;GACA,IAAI,UAAU,MAAM,oBAAoB,YAAY;GAEpD,IAAI,CAAC,SAAS,OAAO,SAAS,QAAQ;GAItC,MAAM,eAAe,2BAA2B;IAC9C,QAAQ,QAAQ;IAChB,MAAM,IAAI,QAAQ,KAAK;IACvB,SAAS,QAAQ,OAAO,UAAU;IAClC,aAAa,QAAQ,OAAO,eAAe;GAC7C,CAAC;GAED,IAAI,iBAAiB,gBACnB,OAAO,SAAS,aAAa,OAAO,GAAG,CAAC,CAAC,KAAK;GAGhD,IAAI,iBAAiB,uBACnB,OAAO,SAAS,aAAa,OAAO,GAAG,CAAC,CAAC,KAAK;GAGhD,IAAI;GAEJ,IAAI;IACF,OAAO,MAAM,GAAG,SAAS,QAAQ,YAAY;GAC/C,SAAS,WAAW;IAClB,IAAI,CAAC,mBAAmB,SAAS,GAAG,MAAM;IAK1C,UAAU,MAAM,oBAAoB,YAAY;IAEhD,IAAI,CAAC,SAAS,OAAO,SAAS,QAAQ;IAEtC,OAAO,MAAM,GAAG,SAAS,QAAQ,YAAY;GAC/C;GAEA,OAAO,YAAY,UAAU,MAAM,QAAQ,MAAM,QAAQ,MAAM;EACjE,SAAS,OAAO;GACd,IAAI,iBAAiB,WACnB,OAAO,SAAS,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,MAAM,MAAM;GAG7D,IAAI,MACF,WACA,WACA,+BAA+B,MAAM,QAAQ,OAAO,OAAO,QAAQ,OAAO,IAAI,EAAE,IAC9E,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAEzD;GAEA,OAAO,SAAS,YAAY,EAAE,OAAO,wCAAwC,CAAC;EAChF;CACF;AACF;;;;AAKA,MAAa,yBAAyC,6BAA6B"}

package/esm/http/uploads/variant-cache-key.mjs

@@ -66,5 +66,5 @@ function variantCachePath(cacheDirectory, source, hash, format) {
 }
 
 //#endregion
-export { variantCacheKey, variantCachePath, variantGenerationTag, variantSourceDirectory, variantSourceKey };
+export { variantCacheKey, variantCachePath, variantExtension, variantGenerationTag, variantSourceDirectory, variantSourceKey };
 //# sourceMappingURL=variant-cache-key.mjs.map

package/esm/http/uploads-config.d.mts

@@ -1,5 +1,4 @@
 import { UploadsConfigurations } from "./uploads-types.mjs";
-
 //#region ../../packages/core/src/http/uploads-config.d.ts
 /**
  * Default uploads configuration values
@@ -7,7 +6,7 @@ import { UploadsConfigurations } from "./uploads-types.mjs";
  * These defaults are used when no configuration is provided
  * or when specific keys are missing from the app config.
  */
-declare const UPLOADS_DEFAULTS: UploadsConfigurations;
+export declare const UPLOADS_DEFAULTS: UploadsConfigurations;
 /**
  * Get uploads configuration value
  *
@@ -24,7 +23,6 @@ declare const UPLOADS_DEFAULTS: UploadsConfigurations;
  * const length = uploadsConfig("randomLength", 32);
  * ```
  */
-declare function uploadsConfig<K extends keyof UploadsConfigurations>(key: K, defaultValue?: UploadsConfigurations[K]): UploadsConfigurations[K];
+export declare function uploadsConfig<K extends keyof UploadsConfigurations>(key: K, defaultValue?: UploadsConfigurations[K]): UploadsConfigurations[K];
 //#endregion
-export { UPLOADS_DEFAULTS, uploadsConfig };
 //# sourceMappingURL=uploads-config.d.mts.map

package/esm/http/uploads-config.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"uploads-config.d.mts","names":[],"sources":["../../../../../../../../packages/core/src/http/uploads-config.ts"],"mappings":";;;;;AASA;;;;cAAa,gBAAA,EAAkB,qBAQ9B;AAkBD;;;;;;;;;;;;;;;;AAAA,iBAAgB,aAAA,iBAA8B,qBAAA,EAC5C,GAAA,EAAK,CAAA,EACL,YAAA,GAAe,qBAAA,CAAsB,CAAA,IACpC,qBAAA,CAAsB,CAAA"}
+{"version":3,"file":"uploads-config.d.mts","names":[],"sources":["../../../../../../../../packages/core/src/http/uploads-config.ts"],"mappings":";;;;;;;;qBASa,kBAAkB;;;;;;;;;;;;;;;;;wBA0Bf,cAAc,gBAAgB,uBAC5C,KAAK,GACL,eAAe,sBAAsB,KACpC,sBAAsB"}