@wildo-ai/saas-backend-lib 1.1.2 → 1.1.4

package/dist/esm/files/storage/file-storage-router.backend.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"file-storage-router.backend.service.js","sourceRoot":"","sources":["../../../../../src/files/storage/file-storage-router.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;;;;;;;;;;;;;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AAC/E,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAEpF,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAIvG,IAAM,+BAA+B,GAArC,MAAM,+BAA+B;IAQvB;IAEA;IAEA;IAEA;IAbT,QAAQ,CAA+D;IAEjF,+DAA+D;IAC9C,WAAW,CAAoC;IAEhE,YAEmB,MAAqB,EAErB,YAAwC,EAExC,oBAA0C,EAE1C,sBAA4C;QAN5C,WAAM,GAAN,MAAM,CAAe;QAErB,iBAAY,GAAZ,YAAY,CAA4B;QAExC,yBAAoB,GAApB,oBAAoB,CAAsB;QAE1C,2BAAsB,GAAtB,sBAAsB,CAAsB;QAE7D,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,iCAAiC,CAAC,CAAC;QAC3E,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC;QAE1E,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,EAAgC,CAAC;QAC3D,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,mBAAmB,CAAC,aAAa,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACnF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,mBAAmB,CAAC,eAAe,EAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACzF,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,eAAe,CAAC,eAAuC;QACrD,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrD,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,YAAY,EAAE,EAAE,CAAC;gBAC9C,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,SAAS,CAAC,aAAa,EACvB,SAAS,EACT;oBACE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;oBACjE,OAAO,EAAE;wBACP,OAAO,EAAE,oFAAoF;4BAC3F,0GAA0G;4BAC1G,yCAAyC;qBAC5C;iBACF,CACF,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC,oBAAoB,CAAC;QACnC,CAAC;QAED,8FAA8F;QAC9F,KAAK,MAAM,SAAS,IAAI,eAAe,EAAE,CAAC;YACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACjD,IAAI,QAAQ,IAAI,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC;gBACxC,OAAO,QAAQ,CAAC;YAClB,CAAC;QACH,CAAC;QAED,gFAAgF;QAChF,gFAAgF;QAChF,MAAM,mBAAmB,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;aAC/D,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC;aACnC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAErB,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,SAAS,CAAC,aAAa,EACvB,SAAS,EACT;YACE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;YACjE,OAAO,EAAE;gBACP,OAAO,EAAE,0DAA0D;oBACjE,oGAAoG;gBACtG,kBAAkB,EAAE,eAAe;gBACnC,mBAAmB;aACpB;SACF,CACF,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,oBAAoB,CAAC;IACnC,CAAC;IAED,eAAe,CAAC,UAAkB;QAChC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC1C,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,UAAU;QACd,KAAK,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACtD,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC;gBAC7B,IAAI,CAAC,QAAQ,CAAC,wCAAwC,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;gBACxE,SAAS;YACX,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,+BAA+B,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;YAC/D,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC5B,IAAI,CAAC,QAAQ,CAAC,8BAA8B,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW;QACf,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,KAAK,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACtD,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC;gBAC7B,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC5C,YAAY,IAAI,MAAM,CAAC,OAAO,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,UAAU,KAAK,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;YAC5F,CAAC;QACH,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;IAClD,CAAC;IAED;;;OAGG;IACH,YAAY;QACV,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;YACjD,IAAI,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC;gBAC5B,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF,CAAA;AAjJY,+BAA+B;IAD3C,UAAU,EAAE;IAQR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IAEjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAE9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,CAAA;IAE3D,WAAA,MAAM,CAAC,kBAAkB,CAAC,kCAAkC,CAAC,CAAA;+CAH/B,0BAA0B;GAVhD,+BAA+B,CAiJ3C","sourcesContent":["/**\n * File Storage Router Backend Service\n *\n * Selects the appropriate IFileStorageProvider based on:\n * 1. Schema-declared `storageAccepted` (from z_file({ storageAccepted: [...] }))\n * 2. Provider availability (isConfigured() check)\n *\n * Registered providers:\n * - Wildo-managed (MinIO/S3) — default, used when no storageAccepted is specified\n * - Local directory — filesystem-backed storage via `storage.localDirectory`\n *\n * Resolution is strict: when `storageAccepted` is explicitly declared, only\n * those providers are considered. A CONFIGURATION error is thrown when none\n * of the declared providers are configured (no silent fallback to S3).\n * When `storageAccepted` is omitted, Wildo-managed is the default and must\n * be configured, otherwise a CONFIGURATION error is thrown.\n */\n\nimport { injectable, inject } from 'inversify';\nimport { ErrorType, ErrorCustomMessageReference } from '@wildo-ai/saas-models';\nimport { FileStorageAccepted } from '@wildo-ai/zod-decorators';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport type { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport { ErrorBuilderBackendService } from '~wildo-backend-lib/errors/services/error-builder.backend.service';\nimport type { IFileStorageProvider, StorageProviderHealthResult } from './file-storage-provider.types';\n\n@injectable()\nexport class FileStorageRouterBackendService {\n  protected logDebug: (message: string, context?: Record<string, unknown>) => void;\n\n  /** Map of providerId → IFileStorageProvider for O(1) lookup */\n  private readonly providerMap: Map<string, IFileStorageProvider>;\n\n  constructor(\n    @inject(SAAS_SERVICE_TYPES.Logger)\n    private readonly logger: LoggerService,\n    @inject(SAAS_SERVICE_TYPES.ErrorBuilderService)\n    private readonly errorBuilder: ErrorBuilderBackendService,\n    @inject(SAAS_SERVICE_TYPES.FileStorageProvider_WildoManaged)\n    private readonly wildoManagedProvider: IFileStorageProvider,\n    @inject(SAAS_SERVICE_TYPES.FileStorageProvider_LocalDirectory)\n    private readonly localDirectoryProvider: IFileStorageProvider,\n  ) {\n    this.logDebug = this.logger.debugByType('FileStorageRouterBackendService');\n    this.logger.setDebugTypeLogging('FileStorageRouterBackendService', false);\n\n    this.providerMap = new Map<string, IFileStorageProvider>();\n    this.providerMap.set(FileStorageAccepted.WILDO_MANAGED, this.wildoManagedProvider);\n    this.providerMap.set(FileStorageAccepted.LOCAL_DIRECTORY, this.localDirectoryProvider);\n  }\n\n  /**\n   * Resolve the appropriate storage provider for a given set of accepted providers.\n   *\n   * Resolution:\n   * - `storageAccepted` undefined/empty → default to Wildo-managed (must be configured)\n   * - `storageAccepted` specified → first configured match wins; if none configured → CONFIGURATION error\n   *\n   * Strict: when providers are explicitly declared, no silent fallback to an\n   * un-requested provider occurs. This prevents data landing in unexpected storage.\n   *\n   * @param storageAccepted - Accepted storage providers from z_file() schema (undefined = Wildo-managed)\n   * @returns The resolved storage provider\n   * @throws CONFIGURATION error when no suitable configured provider is found\n   */\n  resolveProvider(storageAccepted?: FileStorageAccepted[]): IFileStorageProvider {\n    if (!storageAccepted || storageAccepted.length === 0) {\n      if (!this.wildoManagedProvider.isConfigured()) {\n        throw this.errorBuilder.buildError(\n          ErrorType.CONFIGURATION,\n          undefined,\n          {\n            customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n            context: {\n              message: 'No storageAccepted specified and default Wildo-managed storage is not configured. ' +\n                'Set STORAGE_ENDPOINT (managed storage credentials are fetched from apps-manager, never configured here) ' +\n                'or specify storageAccepted in z_file().',\n            },\n          }\n        );\n      }\n      return this.wildoManagedProvider;\n    }\n\n    // Try to find a registered AND configured provider matching the schema preferences (in order)\n    for (const preferred of storageAccepted) {\n      const provider = this.providerMap.get(preferred);\n      if (provider && provider.isConfigured()) {\n        return provider;\n      }\n    }\n\n    // The developer explicitly declared accepted providers but none are configured.\n    // Strict behavior: do NOT silently fall back to a provider they didn't request.\n    const configuredProviders = Array.from(this.providerMap.entries())\n      .filter(([, p]) => p.isConfigured())\n      .map(([id]) => id);\n\n    throw this.errorBuilder.buildError(\n      ErrorType.CONFIGURATION,\n      undefined,\n      {\n        customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n        context: {\n          message: 'None of the requested storage providers are configured. ' +\n            'Ensure the corresponding environment variables are set for at least one of the declared providers.',\n          requestedProviders: storageAccepted,\n          configuredProviders,\n        },\n      }\n    );\n  }\n\n  /**\n   * Get the default storage provider (Wildo-managed).\n   * Use this when no schema-level preference is set.\n   */\n  getDefaultProvider(): IFileStorageProvider {\n    return this.wildoManagedProvider;\n  }\n\n  getProviderById(providerId: string): IFileStorageProvider | undefined {\n    return this.providerMap.get(providerId);\n  }\n\n  /**\n   * Eagerly initialize all configured storage providers.\n   * Call at startup to fail fast on misconfiguration.\n   * Providers that are not configured are skipped.\n   */\n  async initialize(): Promise<void> {\n    for (const [providerId, provider] of this.providerMap) {\n      if (!provider.isConfigured()) {\n        this.logDebug('Skipping unconfigured storage provider', { providerId });\n        continue;\n      }\n      this.logDebug('Initializing storage provider', { providerId });\n      await provider.initialize();\n      this.logDebug('Storage provider initialized', { providerId });\n    }\n  }\n\n  /**\n   * Run health checks on all configured providers.\n   */\n  async healthCheck(): Promise<StorageProviderHealthResult> {\n    let totalLatency = 0;\n    for (const [providerId, provider] of this.providerMap) {\n      if (!provider.isConfigured()) {\n        continue;\n      }\n      const result = await provider.healthCheck();\n      totalLatency += result.latency;\n      if (!result.healthy) {\n        return { healthy: false, latency: totalLatency, error: `${providerId}: ${result.error}` };\n      }\n    }\n    return { healthy: true, latency: totalLatency };\n  }\n\n  /**\n   * Check if at least one storage provider is configured.\n   * Returns false when the app doesn't use file features.\n   */\n  isConfigured(): boolean {\n    for (const provider of this.providerMap.values()) {\n      if (provider.isConfigured()) {\n        return true;\n      }\n    }\n    return false;\n  }\n}\n"]}
+{"version":3,"file":"file-storage-router.backend.service.js","sourceRoot":"","sources":["../../../../src/files/storage/file-storage-router.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;;;;;;;;;;;;;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AAC/E,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAEpF,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAIvG,IAAM,+BAA+B,GAArC,MAAM,+BAA+B;IAQvB;IAEA;IAEA;IAEA;IAEA;IAfT,QAAQ,CAA+D;IAEjF,+DAA+D;IAC9C,WAAW,CAAoC;IAEhE,YAEmB,MAAqB,EAErB,YAAwC,EAExC,oBAA0C,EAE1C,sBAA4C,EAE5C,mBAAyC;QARzC,WAAM,GAAN,MAAM,CAAe;QAErB,iBAAY,GAAZ,YAAY,CAA4B;QAExC,yBAAoB,GAApB,oBAAoB,CAAsB;QAE1C,2BAAsB,GAAtB,sBAAsB,CAAsB;QAE5C,wBAAmB,GAAnB,mBAAmB,CAAsB;QAE1D,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,iCAAiC,CAAC,CAAC;QAC3E,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC;QAE1E,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,EAAgC,CAAC;QAC3D,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,mBAAmB,CAAC,aAAa,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACnF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,mBAAmB,CAAC,eAAe,EAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACvF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,mBAAmB,CAAC,YAAY,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACnF,CAAC;IAED;;;;;;;OAOG;IACH,mCAAmC,CAAC,WAAmB;QACrD,6FAA6F;QAC7F,2FAA2F;QAC3F,IAAI,CAAC,WAAW;YAAE,OAAO,SAAS,CAAC;QACnC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;YACjD,IAAI,QAAQ,CAAC,oBAAoB,KAAK,SAAS,IAAI,QAAQ,CAAC,oBAAoB,KAAK,WAAW;gBAAE,OAAO,QAAQ,CAAC;QACpH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,eAAe,CAAC,eAAuC;QACrD,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrD,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,YAAY,EAAE,EAAE,CAAC;gBAC9C,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,SAAS,CAAC,aAAa,EACvB,SAAS,EACT;oBACE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;oBACjE,OAAO,EAAE;wBACP,OAAO,EAAE,oFAAoF;4BAC3F,0GAA0G;4BAC1G,yCAAyC;qBAC5C;iBACF,CACF,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC,oBAAoB,CAAC;QACnC,CAAC;QAED,8FAA8F;QAC9F,KAAK,MAAM,SAAS,IAAI,eAAe,EAAE,CAAC;YACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACjD,IAAI,QAAQ,IAAI,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC;gBACxC,OAAO,QAAQ,CAAC;YAClB,CAAC;QACH,CAAC;QAED,gFAAgF;QAChF,gFAAgF;QAChF,MAAM,mBAAmB,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;aAC/D,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC;aACnC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAErB,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,SAAS,CAAC,aAAa,EACvB,SAAS,EACT;YACE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;YACjE,OAAO,EAAE;gBACP,OAAO,EAAE,0DAA0D;oBACjE,oGAAoG;gBACtG,kBAAkB,EAAE,eAAe;gBACnC,mBAAmB;aACpB;SACF,CACF,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,oBAAoB,CAAC;IACnC,CAAC;IAED,yGAAyG;IACzG,aAAa;QACX,OAAO,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,eAAe,CAAC,UAAkB;QAChC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC1C,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,UAAU;QACd,KAAK,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACtD,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC;gBAC7B,IAAI,CAAC,QAAQ,CAAC,wCAAwC,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;gBACxE,SAAS;YACX,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,+BAA+B,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;YAC/D,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC5B,IAAI,CAAC,QAAQ,CAAC,8BAA8B,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW;QACf,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,KAAK,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACtD,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC;gBAC7B,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC5C,YAAY,IAAI,MAAM,CAAC,OAAO,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,UAAU,KAAK,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;YAC5F,CAAC;QACH,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;IAClD,CAAC;IAED;;;;;;;;;OASG;IACH,YAAY;QACV,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;YACjD,IAAI,QAAQ,CAAC,oBAAoB,KAAK,SAAS,IAAI,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC;gBAC3E,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF,CAAA;AAjLY,+BAA+B;IAD3C,UAAU,EAAE;IAQR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IAEjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAE9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,CAAA;IAE3D,WAAA,MAAM,CAAC,kBAAkB,CAAC,kCAAkC,CAAC,CAAA;IAE7D,WAAA,MAAM,CAAC,kBAAkB,CAAC,+BAA+B,CAAC,CAAA;+CAL5B,0BAA0B;GAVhD,+BAA+B,CAiL3C","sourcesContent":["/**\n * File Storage Router Backend Service\n *\n * Selects the appropriate IFileStorageProvider based on:\n * 1. Schema-declared `storageAccepted` (from z_file({ storageAccepted: [...] }))\n * 2. Provider availability (isConfigured() check)\n *\n * Registered providers:\n * - Wildo-managed (MinIO/S3) — default, used when no storageAccepted is specified\n * - Local directory — filesystem-backed storage via `storage.localDirectory`\n *\n * Resolution is strict: when `storageAccepted` is explicitly declared, only\n * those providers are considered. A CONFIGURATION error is thrown when none\n * of the declared providers are configured (no silent fallback to S3).\n * When `storageAccepted` is omitted, Wildo-managed is the default and must\n * be configured, otherwise a CONFIGURATION error is thrown.\n */\n\nimport { injectable, inject } from 'inversify';\nimport { ErrorType, ErrorCustomMessageReference } from '@wildo-ai/saas-models';\nimport { FileStorageAccepted } from '@wildo-ai/zod-decorators';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport type { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport { ErrorBuilderBackendService } from '~wildo-backend-lib/errors/services/error-builder.backend.service';\nimport type { IFileStorageProvider, StorageProviderHealthResult } from './file-storage-provider.types';\n\n@injectable()\nexport class FileStorageRouterBackendService {\n  protected logDebug: (message: string, context?: Record<string, unknown>) => void;\n\n  /** Map of providerId → IFileStorageProvider for O(1) lookup */\n  private readonly providerMap: Map<string, IFileStorageProvider>;\n\n  constructor(\n    @inject(SAAS_SERVICE_TYPES.Logger)\n    private readonly logger: LoggerService,\n    @inject(SAAS_SERVICE_TYPES.ErrorBuilderService)\n    private readonly errorBuilder: ErrorBuilderBackendService,\n    @inject(SAAS_SERVICE_TYPES.FileStorageProvider_WildoManaged)\n    private readonly wildoManagedProvider: IFileStorageProvider,\n    @inject(SAAS_SERVICE_TYPES.FileStorageProvider_LocalDirectory)\n    private readonly localDirectoryProvider: IFileStorageProvider,\n    @inject(SAAS_SERVICE_TYPES.FileStorageProvider_GoogleDrive)\n    private readonly googleDriveProvider: IFileStorageProvider,\n  ) {\n    this.logDebug = this.logger.debugByType('FileStorageRouterBackendService');\n    this.logger.setDebugTypeLogging('FileStorageRouterBackendService', false);\n\n    this.providerMap = new Map<string, IFileStorageProvider>();\n    this.providerMap.set(FileStorageAccepted.WILDO_MANAGED, this.wildoManagedProvider);\n    this.providerMap.set(FileStorageAccepted.LOCAL_DIRECTORY, this.localDirectoryProvider);\n    this.providerMap.set(FileStorageAccepted.GOOGLE_DRIVE, this.googleDriveProvider);\n  }\n\n  /**\n   * The storage a picker's `REMOTE_REFERENCE` lands in, by the PROVIDER the reference names\n   * (#394 P5): the storage whose `connectedProviderRef` is that provider — `google-drive` →\n   * `GOOGLE_DRIVE`. Registered-or-not is the only question answered here; whether the field\n   * accepts that storage and whether it is configured are the caller's, because each refuses\n   * with a different message. Undefined when no registered storage is connected through the\n   * provider, which is what a Dropbox reference gets until a Dropbox storage exists.\n   */\n  resolveProviderForConnectedProvider(providerRef: string): IFileStorageProvider | undefined {\n    // Framework-served storages declare no provider; `undefined === undefined` must not make one\n    // of them the answer to a reference that names nothing (the first draft did exactly that).\n    if (!providerRef) return undefined;\n    for (const provider of this.providerMap.values()) {\n      if (provider.connectedProviderRef !== undefined && provider.connectedProviderRef === providerRef) return provider;\n    }\n    return undefined;\n  }\n\n  /**\n   * Resolve the appropriate storage provider for a given set of accepted providers.\n   *\n   * Resolution:\n   * - `storageAccepted` undefined/empty → default to Wildo-managed (must be configured)\n   * - `storageAccepted` specified → first configured match wins; if none configured → CONFIGURATION error\n   *\n   * Strict: when providers are explicitly declared, no silent fallback to an\n   * un-requested provider occurs. This prevents data landing in unexpected storage.\n   *\n   * @param storageAccepted - Accepted storage providers from z_file() schema (undefined = Wildo-managed)\n   * @returns The resolved storage provider\n   * @throws CONFIGURATION error when no suitable configured provider is found\n   */\n  resolveProvider(storageAccepted?: FileStorageAccepted[]): IFileStorageProvider {\n    if (!storageAccepted || storageAccepted.length === 0) {\n      if (!this.wildoManagedProvider.isConfigured()) {\n        throw this.errorBuilder.buildError(\n          ErrorType.CONFIGURATION,\n          undefined,\n          {\n            customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n            context: {\n              message: 'No storageAccepted specified and default Wildo-managed storage is not configured. ' +\n                'Set STORAGE_ENDPOINT (managed storage credentials are fetched from apps-manager, never configured here) ' +\n                'or specify storageAccepted in z_file().',\n            },\n          }\n        );\n      }\n      return this.wildoManagedProvider;\n    }\n\n    // Try to find a registered AND configured provider matching the schema preferences (in order)\n    for (const preferred of storageAccepted) {\n      const provider = this.providerMap.get(preferred);\n      if (provider && provider.isConfigured()) {\n        return provider;\n      }\n    }\n\n    // The developer explicitly declared accepted providers but none are configured.\n    // Strict behavior: do NOT silently fall back to a provider they didn't request.\n    const configuredProviders = Array.from(this.providerMap.entries())\n      .filter(([, p]) => p.isConfigured())\n      .map(([id]) => id);\n\n    throw this.errorBuilder.buildError(\n      ErrorType.CONFIGURATION,\n      undefined,\n      {\n        customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n        context: {\n          message: 'None of the requested storage providers are configured. ' +\n            'Ensure the corresponding environment variables are set for at least one of the declared providers.',\n          requestedProviders: storageAccepted,\n          configuredProviders,\n        },\n      }\n    );\n  }\n\n  /**\n   * Get the default storage provider (Wildo-managed).\n   * Use this when no schema-level preference is set.\n   */\n  getDefaultProvider(): IFileStorageProvider {\n    return this.wildoManagedProvider;\n  }\n\n  /** Every registered storage, configured or not — for validators that report on the unconfigured ones. */\n  listProviders(): readonly IFileStorageProvider[] {\n    return [...this.providerMap.values()];\n  }\n\n  getProviderById(providerId: string): IFileStorageProvider | undefined {\n    return this.providerMap.get(providerId);\n  }\n\n  /**\n   * Eagerly initialize all configured storage providers.\n   * Call at startup to fail fast on misconfiguration.\n   * Providers that are not configured are skipped.\n   */\n  async initialize(): Promise<void> {\n    for (const [providerId, provider] of this.providerMap) {\n      if (!provider.isConfigured()) {\n        this.logDebug('Skipping unconfigured storage provider', { providerId });\n        continue;\n      }\n      this.logDebug('Initializing storage provider', { providerId });\n      await provider.initialize();\n      this.logDebug('Storage provider initialized', { providerId });\n    }\n  }\n\n  /**\n   * Run health checks on all configured providers.\n   */\n  async healthCheck(): Promise<StorageProviderHealthResult> {\n    let totalLatency = 0;\n    for (const [providerId, provider] of this.providerMap) {\n      if (!provider.isConfigured()) {\n        continue;\n      }\n      const result = await provider.healthCheck();\n      totalLatency += result.latency;\n      if (!result.healthy) {\n        return { healthy: false, latency: totalLatency, error: `${providerId}: ${result.error}` };\n      }\n    }\n    return { healthy: true, latency: totalLatency };\n  }\n\n  /**\n   * Whether the APPLICATION has somewhere of its own to put bytes — at least one storage the\n   * framework serves with an application credential is configured. Returns false when the app\n   * doesn't use file features.\n   *\n   * A vendor storage (`connectedProviderRef` set) does not count: it is reachable only through a\n   * PERSON's delegated grant, so it is nowhere for an archival batch or a health check to write.\n   * Counting it made `resolveProvider([WILDO_MANAGED, LOCAL_DIRECTORY])` throw one line after this\n   * predicate answered true (#394 P5 review, F6).\n   */\n  isConfigured(): boolean {\n    for (const provider of this.providerMap.values()) {\n      if (provider.connectedProviderRef === undefined && provider.isConfigured()) {\n        return true;\n      }\n    }\n    return false;\n  }\n}\n"]}

package/dist/esm/files/storage/google-drive-storage-provider.backend.service.d.ts

@@ -0,0 +1,87 @@
+/**
+ * `FileStorageAccepted.GOOGLE_DRIVE` — a file storage whose bytes live in a PERSON's Google Drive
+ * (#394 P5).
+ *
+ * Every other storage here is the application's: it holds a credential of its own and every row
+ * is reachable with it. This one holds none. A Drive file is reachable through exactly one grant —
+ * the delegated OAuth2 token of the person who linked it (a picker's `REMOTE_REFERENCE`) or
+ * uploaded it — so the row's `uploadedBy` is the credential key, resolved through the same
+ * connected-accounts store and the same admissibility predicate the browser access-token door
+ * uses. A reader who is not the linker still reads the file: the application authorizes the ROW,
+ * and the storage reads the BYTES as the linker, which is the delegated access the person granted
+ * when they connected the account. Each such read is a recorded credential USE.
+ *
+ * Two decisions, written down because they are not the obvious ones:
+ *
+ * - `delete` NEVER touches Drive. The application never owned these bytes: a linked file is the
+ *   person's document, and an uploaded one landed in their Drive under their account. Deleting a
+ *   person's own document because an application row went away is the irreversible act this
+ *   repository requires a deliberate door for, and there is no such door yet. So a delete forgets
+ *   the reference and says so — a stale file in someone's Drive is a nuisance; a vanished one is
+ *   an incident.
+ * - `isConfigured` asks the registry, not the network. There is no application credential to
+ *   probe with, and a per-person storage is "configured" exactly when the provider admits a
+ *   USER-owned delegated connection — the condition under which any row could ever be read.
+ *
+ * Outbound calls go to one fixed vendor host, so they are not SSRF-pinned; each carries a deadline.
+ */
+import { Readable } from 'stream';
+import type { File } from '@wildo-ai/saas-models';
+import { FileStorageAccepted } from '@wildo-ai/zod-decorators';
+import type { LoggerService } from '../../monitoring/logger/services/logger.service';
+import { ErrorBuilderBackendService } from '../../errors/services/error-builder.backend.service';
+import { AppConfigurationService } from '../../config/services/app-configuration.backend.service';
+import type { ExecutionContext } from '../../runtime/models/execution-context.backend.schemas';
+import { ExternalProvidersRegistryBackendService } from '../../external-providers/services/external-providers-registry.backend.service';
+import type { UserProviderCredentialResolverPort } from '../../security/connected-accounts/user-provider-credential-resolver.port';
+import type { IFileStorageProvider, StorageDownloadResult, StorageFileMetadata, StorageProviderHealthResult, StorageRemoteFileDescription, StorageUploadOptions, StorageUploadResult, StoredFileStorageTarget } from './file-storage-provider.types';
+/**
+ * The provider whose delegated credential this storage reads through: the CATALOGUE `google-drive`
+ * provider (`@wildo-ai/providers/google-drive`), whose OAuth2 client a person connects their Drive
+ * through under the `drive.file` scope — not the engine `google` SSO provider, which mints no
+ * delegated token. The frontend `google-drive` module carries the same ref, so the picker, the
+ * access-token door and this storage all name one account.
+ */
+export declare const GOOGLE_DRIVE_CONNECTED_PROVIDER_REF = "google-drive";
+/** Drive v3, the only host this storage ever talks to. */
+export declare const GOOGLE_DRIVE_API_ORIGIN = "https://www.googleapis.com";
+/** One deadline for every call; a download of a large file streams past it only once headers arrived. */
+export declare const GOOGLE_DRIVE_REQUEST_TIMEOUT_MS = 30000;
+export declare class GoogleDriveStorageProvider implements IFileStorageProvider {
+    private readonly logger;
+    private readonly errorBuilder;
+    private readonly appConfigService;
+    private readonly registry;
+    private readonly userCredentials;
+    readonly providerId = FileStorageAccepted.GOOGLE_DRIVE;
+    readonly connectedProviderRef = "google-drive";
+    /** `delete` forgets the reference and leaves the bytes in the person's Drive — see the header. */
+    readonly retainsBytesOnDelete = true;
+    private readonly logDebug;
+    constructor(logger: LoggerService, errorBuilder: ErrorBuilderBackendService, appConfigService: AppConfigurationService, registry: ExternalProvidersRegistryBackendService, userCredentials: UserProviderCredentialResolverPort);
+    isConfigured(): boolean;
+    initialize(): Promise<void>;
+    healthCheck(): Promise<StorageProviderHealthResult>;
+    describeRemoteReference(externalId: string, linker: Pick<File, 'uploadedBy' | 'uploadedByEntityType'>, executionContext: ExecutionContext<any>): Promise<StorageRemoteFileDescription>;
+    upload(fileStream: Readable, fileId: string, mimeType: string, size: number, executionContext: ExecutionContext<any>, options?: StorageUploadOptions): Promise<StorageUploadResult>;
+    download(file: StoredFileStorageTarget, executionContext: ExecutionContext<any>): Promise<StorageDownloadResult>;
+    delete(file: StoredFileStorageTarget, _executionContext: ExecutionContext<any>): Promise<void>;
+    getMetadata(file: StoredFileStorageTarget, executionContext: ExecutionContext<any>): Promise<StorageFileMetadata>;
+    /**
+     * The delegated token of the person a target names. Three refusals, each naming what is
+     * missing: the target names no signed-in person; the provider admits no personal connection;
+     * the person's connection is gone. Every success is a recorded credential use.
+     *
+     * assurance-control: WILDO.IDENTITY.DELEGATED_AUTHORIZATION — a person's delegated grant is
+     * spent server-side only, only for a file that person linked or uploaded, and only as a
+     * recorded use; the token never reaches the reader.
+     */
+    private resolveLinkerToken;
+    private requireLinker;
+    private requireStorageRef;
+    private fetchMetadata;
+    private toDescription;
+    /** One call shape: fixed host, a deadline, and vendor status codes mapped to this repository's error types. */
+    private call;
+}
+//# sourceMappingURL=google-drive-storage-provider.backend.service.d.ts.map

package/dist/esm/files/storage/google-drive-storage-provider.backend.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-drive-storage-provider.backend.service.d.ts","sourceRoot":"","sources":["../../../../src/files/storage/google-drive-storage-provider.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAGlC,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAA0B,MAAM,0BAA0B,CAAC;AAEvF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAE9G,OAAO,EAAE,uBAAuB,EAAE,MAAM,sEAAsE,CAAC;AAC/G,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qEAAqE,CAAC;AAC5G,OAAO,EAAE,uCAAuC,EAAE,MAAM,4FAA4F,CAAC;AACrJ,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,uFAAuF,CAAC;AAIhJ,OAAO,KAAK,EACV,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,2BAA2B,EAC3B,4BAA4B,EAC5B,oBAAoB,EACpB,mBAAmB,EACnB,uBAAuB,EACxB,MAAM,+BAA+B,CAAC;AAEvC;;;;;;GAMG;AACH,eAAO,MAAM,mCAAmC,iBAAiB,CAAC;AAElE,0DAA0D;AAC1D,eAAO,MAAM,uBAAuB,+BAA+B,CAAC;AAKpE,yGAAyG;AACzG,eAAO,MAAM,+BAA+B,QAAS,CAAC;AAgBtD,qBACa,0BAA2B,YAAW,oBAAoB;IAQhC,OAAO,CAAC,QAAQ,CAAC,MAAM;IACV,OAAO,CAAC,QAAQ,CAAC,YAAY;IAChC,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAC3B,OAAO,CAAC,QAAQ,CAAC,eAAe;IAX7F,QAAQ,CAAC,UAAU,oCAAoC;IACvD,QAAQ,CAAC,oBAAoB,kBAAuC;IACpE,kGAAkG;IAClG,QAAQ,CAAC,oBAAoB,QAAQ;IACrC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA+D;gBAGlC,MAAM,EAAE,aAAa,EACR,YAAY,EAAE,0BAA0B,EAC3C,gBAAgB,EAAE,uBAAuB,EACzB,QAAQ,EAAE,uCAAuC,EACnD,eAAe,EAAE,kCAAkC;IAMjI,YAAY,IAAI,OAAO;IAWjB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ3B,WAAW,IAAI,OAAO,CAAC,2BAA2B,CAAC;IAWnD,uBAAuB,CAC3B,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,GAAG,sBAAsB,CAAC,EACzD,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,GACtC,OAAO,CAAC,4BAA4B,CAAC;IAMlC,MAAM,CACV,UAAU,EAAE,QAAQ,EACpB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,mBAAmB,CAAC;IA4CzB,QAAQ,CAAC,IAAI,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,qBAAqB,CAAC;IA6BhH,MAAM,CAAC,IAAI,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ9F,WAAW,CAAC,IAAI,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAUvH;;;;;;;;OAQG;YACW,kBAAkB;IA8BhC,OAAO,CAAC,aAAa;IAarB,OAAO,CAAC,iBAAiB;YAUX,aAAa;IAU3B,OAAO,CAAC,aAAa;IA2BrB,+GAA+G;YACjG,IAAI;CAsCnB"}

package/dist/esm/files/storage/google-drive-storage-provider.backend.service.js

@@ -0,0 +1,340 @@
+/**
+ * `FileStorageAccepted.GOOGLE_DRIVE` — a file storage whose bytes live in a PERSON's Google Drive
+ * (#394 P5).
+ *
+ * Every other storage here is the application's: it holds a credential of its own and every row
+ * is reachable with it. This one holds none. A Drive file is reachable through exactly one grant —
+ * the delegated OAuth2 token of the person who linked it (a picker's `REMOTE_REFERENCE`) or
+ * uploaded it — so the row's `uploadedBy` is the credential key, resolved through the same
+ * connected-accounts store and the same admissibility predicate the browser access-token door
+ * uses. A reader who is not the linker still reads the file: the application authorizes the ROW,
+ * and the storage reads the BYTES as the linker, which is the delegated access the person granted
+ * when they connected the account. Each such read is a recorded credential USE.
+ *
+ * Two decisions, written down because they are not the obvious ones:
+ *
+ * - `delete` NEVER touches Drive. The application never owned these bytes: a linked file is the
+ *   person's document, and an uploaded one landed in their Drive under their account. Deleting a
+ *   person's own document because an application row went away is the irreversible act this
+ *   repository requires a deliberate door for, and there is no such door yet. So a delete forgets
+ *   the reference and says so — a stale file in someone's Drive is a nuisance; a vanished one is
+ *   an incident.
+ * - `isConfigured` asks the registry, not the network. There is no application credential to
+ *   probe with, and a per-person storage is "configured" exactly when the provider admits a
+ *   USER-owned delegated connection — the condition under which any row could ever be read.
+ *
+ * Outbound calls go to one fixed vendor host, so they are not SSRF-pinned; each carries a deadline.
+ */
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { injectable, inject } from 'inversify';
+import { Readable } from 'stream';
+import { ErrorType, ErrorCustomMessageReference } from '@wildo-ai/saas-models';
+import { FileStorageAccepted, FileUploaderEntityType } from '@wildo-ai/zod-decorators';
+import { SAAS_SERVICE_TYPES } from '../../inject/models/service-types.js';
+import { ErrorBuilderBackendService } from '../../errors/services/error-builder.backend.service.js';
+import { describeCaughtError } from '../../errors/utils/error-log-level-classification.backend.utils.js';
+import { AppConfigurationService } from '../../config/services/app-configuration.backend.service.js';
+import { ExternalProvidersRegistryBackendService } from '../../external-providers/services/external-providers-registry.backend.service.js';
+import { resolveUserDelegatedAccessTokenSlot } from '../../security/connected-accounts/utils/user-delegated-access-token-slot.backend.utils.js';
+import { validateContentType, validateFileId, validateSize, validateStream, resolveConfiguredMaxFileSize } from '../../files/utils/file-validation.utils.js';
+import { resolveFileUploaderPrincipal } from '../../files/utils/file-uploader.utils.js';
+/**
+ * The provider whose delegated credential this storage reads through: the CATALOGUE `google-drive`
+ * provider (`@wildo-ai/providers/google-drive`), whose OAuth2 client a person connects their Drive
+ * through under the `drive.file` scope — not the engine `google` SSO provider, which mints no
+ * delegated token. The frontend `google-drive` module carries the same ref, so the picker, the
+ * access-token door and this storage all name one account.
+ */
+export const GOOGLE_DRIVE_CONNECTED_PROVIDER_REF = 'google-drive';
+/** Drive v3, the only host this storage ever talks to. */
+export const GOOGLE_DRIVE_API_ORIGIN = 'https://www.googleapis.com';
+const GOOGLE_DRIVE_FILES_URL = `${GOOGLE_DRIVE_API_ORIGIN}/drive/v3/files`;
+const GOOGLE_DRIVE_UPLOAD_URL = `${GOOGLE_DRIVE_API_ORIGIN}/upload/drive/v3/files`;
+/** Metadata fields read for a link or a metadata call — the FILES row is built from these. */
+const GOOGLE_DRIVE_METADATA_FIELDS = 'id,name,mimeType,size,modifiedTime,md5Checksum';
+/** One deadline for every call; a download of a large file streams past it only once headers arrived. */
+export const GOOGLE_DRIVE_REQUEST_TIMEOUT_MS = 30_000;
+let GoogleDriveStorageProvider = class GoogleDriveStorageProvider {
+    logger;
+    errorBuilder;
+    appConfigService;
+    registry;
+    userCredentials;
+    providerId = FileStorageAccepted.GOOGLE_DRIVE;
+    connectedProviderRef = GOOGLE_DRIVE_CONNECTED_PROVIDER_REF;
+    /** `delete` forgets the reference and leaves the bytes in the person's Drive — see the header. */
+    retainsBytesOnDelete = true;
+    logDebug;
+    constructor(logger, errorBuilder, appConfigService, registry, userCredentials) {
+        this.logger = logger;
+        this.errorBuilder = errorBuilder;
+        this.appConfigService = appConfigService;
+        this.registry = registry;
+        this.userCredentials = userCredentials;
+        this.logDebug = this.logger.debugByType('GoogleDriveStorageProvider');
+        this.logger.setDebugTypeLogging('GoogleDriveStorageProvider', false);
+    }
+    isConfigured() {
+        // A question, never a throw. The storage router asks EVERY bound provider at readiness in EVERY
+        // runtime, and a platform service (`platform-crontabs-batches-manager`) never initializes the
+        // external-providers registry, so the slot resolution below would trip `ensureInitialized()`
+        // and take the whole storage health check down with it — measured 2026-09-09: crontabs
+        // answered `/health/ready` 503 forever, logging `external_provider_registry_initialization_failed`
+        // every two seconds, from a provider that runtime could not have configured in the first place.
+        if (!this.registry.isReady())
+            return false;
+        return resolveUserDelegatedAccessTokenSlot(this.registry, this.connectedProviderRef).admitted;
+    }
+    async initialize() {
+        // Nothing to open. The "picker listed, storage not configured" diagnostic is NOT here: the
+        // router initializes only configured providers, so a warning on this method never runs. It
+        // lives in the startup validator's storage collector, which sees every provider with the
+        // registry ready (`collectVendorStorageListedWithoutConnectionIssues`).
+        this.logDebug('Google Drive storage ready', { configured: this.isConfigured() });
+    }
+    async healthCheck() {
+        // No probe: there is no application-level credential to probe WITH, and a probe as some
+        // arbitrary person would be a credential use nobody asked for.
+        const configured = this.isConfigured();
+        return {
+            healthy: configured,
+            latency: 0,
+            ...(configured ? {} : { error: `Provider '${this.connectedProviderRef}' does not admit a user-owned delegated connection` }),
+        };
+    }
+    async describeRemoteReference(externalId, linker, executionContext) {
+        const token = await this.resolveLinkerToken(linker, executionContext);
+        const wire = await this.fetchMetadata(externalId, token, executionContext);
+        return this.toDescription(wire, externalId, executionContext);
+    }
+    async upload(fileStream, fileId, mimeType, size, executionContext, options) {
+        validateFileId(fileId, this.errorBuilder, executionContext, 'fileId');
+        validateContentType(mimeType, this.errorBuilder, executionContext, 'mimeType');
+        const maxFileSize = resolveConfiguredMaxFileSize(this.appConfigService.config.storage?.maxFileSize);
+        validateSize(size, maxFileSize, this.errorBuilder, executionContext, 'size');
+        validateStream(fileStream, this.errorBuilder, executionContext, 'fileStream');
+        // An upload lands in the UPLOADER's Drive: the caller is the person, not a row.
+        const token = await this.resolveLinkerToken(resolveFileUploaderPrincipal(executionContext) ?? {}, executionContext);
+        // Drive's multipart upload wants the whole body; a resumable session would avoid buffering at
+        // the cost of two more round trips, and the configured maximum already bounds what is read.
+        const bytes = await readAllBounded(fileStream, maxFileSize, () => this.errorBuilder.buildError(ErrorType.VALIDATION, executionContext, {
+            customMessageReference: ErrorCustomMessageReference.VALIDATION,
+            context: { message: 'Stream exceeded the configured maximum file size', fileId, maxFileSize },
+        }));
+        const boundary = `wildo-${fileId}`;
+        const metadata = JSON.stringify({ name: options?.fileName ?? fileId, mimeType });
+        const body = Buffer.concat([
+            Buffer.from(`--${boundary}\r\nContent-Type: application/json; charset=UTF-8\r\n\r\n${metadata}\r\n--${boundary}\r\nContent-Type: ${mimeType}\r\n\r\n`, 'utf8'),
+            bytes,
+            Buffer.from(`\r\n--${boundary}--`, 'utf8'),
+        ]);
+        const response = await this.call(`${GOOGLE_DRIVE_UPLOAD_URL}?uploadType=multipart&fields=id&supportsAllDrives=true`, { method: 'POST', headers: { authorization: `Bearer ${token}`, 'content-type': `multipart/related; boundary=${boundary}` }, body }, executionContext, { fileId });
+        const wire = (await response.json());
+        const storageRef = typeof wire.id === 'string' && wire.id.length > 0 ? wire.id : undefined;
+        if (storageRef === undefined) {
+            throw this.errorBuilder.buildError(ErrorType.EXTERNAL_SERVICE, executionContext, {
+                customMessageReference: ErrorCustomMessageReference.EXTERNAL_SERVICE,
+                context: { message: 'Google Drive accepted the upload but returned no file id', fileId },
+            });
+        }
+        this.logDebug('Uploaded to Google Drive', { fileId, storageRef });
+        return { storageRef, provider: this.providerId };
+    }
+    async download(file, executionContext) {
+        const externalId = this.requireStorageRef(file, executionContext);
+        const token = await this.resolveLinkerToken(file, executionContext);
+        // Metadata first: `alt=media` answers with the bytes and a content-type, but the size Drive
+        // reports on the media response is not reliable for converted documents, and the row's
+        // consumers size their buffers from this result.
+        const wire = await this.fetchMetadata(externalId, token, executionContext, file.fileId);
+        const description = this.toDescription(wire, externalId, executionContext);
+        const response = await this.call(`${GOOGLE_DRIVE_FILES_URL}/${encodeURIComponent(externalId)}?alt=media&supportsAllDrives=true`, { method: 'GET', headers: { authorization: `Bearer ${token}` } }, executionContext, { fileId: file.fileId, storageRef: externalId });
+        if (response.body === null) {
+            throw this.errorBuilder.buildError(ErrorType.EXTERNAL_SERVICE, executionContext, {
+                customMessageReference: ErrorCustomMessageReference.EXTERNAL_SERVICE,
+                context: { message: 'Google Drive answered a media request with no body', fileId: file.fileId },
+            });
+        }
+        return {
+            stream: Readable.fromWeb(response.body),
+            contentType: response.headers.get('content-type') ?? description.contentType,
+            size: description.size,
+            ...(description.etag !== undefined ? { etag: description.etag } : {}),
+            ...(description.lastModified !== undefined ? { lastModified: description.lastModified } : {}),
+        };
+    }
+    async delete(file, _executionContext) {
+        // Deliberately no vendor call — see the file header. The reference is forgotten with the row.
+        this.logger.info('Google Drive file reference forgotten; the file stays in its owner\'s Drive', {
+            fileId: file.fileId,
+            storageRef: file.storageRef,
+        });
+    }
+    async getMetadata(file, executionContext) {
+        const externalId = this.requireStorageRef(file, executionContext);
+        const token = await this.resolveLinkerToken(file, executionContext);
+        const wire = await this.fetchMetadata(externalId, token, executionContext, file.fileId);
+        const { name: _name, ...metadata } = this.toDescription(wire, externalId, executionContext);
+        return metadata;
+    }
+    // ---------------------------------------------------------------------------
+    /**
+     * The delegated token of the person a target names. Three refusals, each naming what is
+     * missing: the target names no signed-in person; the provider admits no personal connection;
+     * the person's connection is gone. Every success is a recorded credential use.
+     *
+     * assurance-control: WILDO.IDENTITY.DELEGATED_AUTHORIZATION — a person's delegated grant is
+     * spent server-side only, only for a file that person linked or uploaded, and only as a
+     * recorded use; the token never reaches the reader.
+     */
+    async resolveLinkerToken(linker, executionContext) {
+        const identity = this.requireLinker(linker, executionContext);
+        const slot = resolveUserDelegatedAccessTokenSlot(this.registry, this.connectedProviderRef);
+        if (slot.admitted === false) {
+            throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, executionContext, {
+                customMessageReference: ErrorCustomMessageReference.CONFIGURATION,
+                context: {
+                    message: `Google Drive storage needs the '${this.connectedProviderRef}' provider to admit a user-owned delegated connection`,
+                    refusal: slot.refusal,
+                },
+            });
+        }
+        const query = { userId: identity.userId, providerRef: this.connectedProviderRef, secretSlug: slot.secretSlug };
+        const resolution = await this.userCredentials.resolveUserCredential(query);
+        if (resolution === undefined) {
+            throw this.errorBuilder.buildError(ErrorType.AUTHORIZATION, executionContext, {
+                customMessageReference: ErrorCustomMessageReference.FILE_STORAGE_ACCESS_DENIED,
+                context: {
+                    message: `The person this Google Drive file is reachable through has no '${this.connectedProviderRef}' connection`,
+                    userId: identity.userId,
+                },
+            });
+        }
+        await this.userCredentials.recordCredentialUse({ ...query, credentialId: resolution.credentialId });
+        return resolution.value;
+    }
+    requireLinker(linker, executionContext) {
+        if (linker.uploadedByEntityType !== FileUploaderEntityType.USER || !linker.uploadedBy) {
+            throw this.errorBuilder.buildError(ErrorType.AUTHORIZATION, executionContext, {
+                customMessageReference: ErrorCustomMessageReference.FILE_STORAGE_ACCESS_DENIED,
+                context: {
+                    message: 'A Google Drive file is reachable only through the signed-in person who linked or uploaded it, and this one names none',
+                    uploadedByEntityType: linker.uploadedByEntityType,
+                },
+            });
+        }
+        return { userId: linker.uploadedBy };
+    }
+    requireStorageRef(file, executionContext) {
+        if (!file.storageRef) {
+            throw this.errorBuilder.buildError(ErrorType.VALIDATION, executionContext, {
+                customMessageReference: ErrorCustomMessageReference.FILE_STORAGE_REF_INVALID,
+                context: { message: 'Google Drive file row carries no storageRef', fileId: file.fileId },
+            });
+        }
+        return file.storageRef;
+    }
+    async fetchMetadata(externalId, token, executionContext, fileId) {
+        const response = await this.call(`${GOOGLE_DRIVE_FILES_URL}/${encodeURIComponent(externalId)}?fields=${encodeURIComponent(GOOGLE_DRIVE_METADATA_FIELDS)}&supportsAllDrives=true`, { method: 'GET', headers: { authorization: `Bearer ${token}` } }, executionContext, { fileId, storageRef: externalId });
+        return (await response.json());
+    }
+    toDescription(wire, externalId, executionContext) {
+        const contentType = typeof wire.mimeType === 'string' && wire.mimeType.length > 0 ? wire.mimeType : undefined;
+        // Drive reports `size` as a decimal STRING, and omits it for Google-native documents (Docs,
+        // Sheets), which have no bytes until exported. A file with no size cannot be linked as a file.
+        const size = typeof wire.size === 'string' && /^\d+$/.test(wire.size) ? Number(wire.size)
+            : typeof wire.size === 'number' ? wire.size : undefined;
+        if (contentType === undefined || size === undefined) {
+            throw this.errorBuilder.buildError(ErrorType.VALIDATION, executionContext, {
+                customMessageReference: ErrorCustomMessageReference.FILE_STORAGE_REF_INVALID,
+                context: {
+                    message: contentType === undefined
+                        ? 'Google Drive reports no MIME type for this file'
+                        : 'Google Drive reports no byte size for this file — a Google-native document has none until exported',
+                    storageRef: externalId,
+                },
+            });
+        }
+        const lastModified = typeof wire.modifiedTime === 'string' ? new Date(wire.modifiedTime) : undefined;
+        return {
+            name: typeof wire.name === 'string' && wire.name.length > 0 ? wire.name : externalId,
+            contentType,
+            size,
+            ...(typeof wire.md5Checksum === 'string' ? { etag: wire.md5Checksum } : {}),
+            ...(lastModified !== undefined && !Number.isNaN(lastModified.getTime()) ? { lastModified } : {}),
+        };
+    }
+    /** One call shape: fixed host, a deadline, and vendor status codes mapped to this repository's error types. */
+    async call(url, init, executionContext, context) {
+        let response;
+        try {
+            response = await fetch(url, {
+                method: init.method,
+                headers: init.headers,
+                ...(init.body === undefined ? {} : { body: new Uint8Array(init.body) }),
+                signal: AbortSignal.timeout(GOOGLE_DRIVE_REQUEST_TIMEOUT_MS),
+            });
+        }
+        catch (error) {
+            throw this.errorBuilder.buildError(ErrorType.EXTERNAL_SERVICE, executionContext, {
+                customMessageReference: ErrorCustomMessageReference.EXTERNAL_SERVICE,
+                context: { message: 'Google Drive request failed', ...context, error: describeCaughtError(error) },
+            });
+        }
+        if (response.ok)
+            return response;
+        if (response.status === 404) {
+            throw this.errorBuilder.buildError(ErrorType.NOT_FOUND, executionContext, {
+                customMessageReference: ErrorCustomMessageReference.FILE_NOT_FOUND_IN_STORAGE,
+                context: { message: 'Google Drive knows no such file for this person', ...context },
+            });
+        }
+        if (response.status === 401 || response.status === 403) {
+            throw this.errorBuilder.buildError(ErrorType.AUTHORIZATION, executionContext, {
+                customMessageReference: ErrorCustomMessageReference.FILE_STORAGE_ACCESS_DENIED,
+                context: { message: 'Google Drive refused the delegated credential for this file', status: response.status, ...context },
+            });
+        }
+        throw this.errorBuilder.buildError(ErrorType.EXTERNAL_SERVICE, executionContext, {
+            customMessageReference: ErrorCustomMessageReference.EXTERNAL_SERVICE,
+            context: { message: 'Google Drive answered with an error', status: response.status, ...context },
+        });
+    }
+};
+GoogleDriveStorageProvider = __decorate([
+    injectable(),
+    __param(0, inject(SAAS_SERVICE_TYPES.Logger)),
+    __param(1, inject(SAAS_SERVICE_TYPES.ErrorBuilderService)),
+    __param(2, inject(SAAS_SERVICE_TYPES.AppConfigService)),
+    __param(3, inject(SAAS_SERVICE_TYPES.ExternalProvidersRegistryService)),
+    __param(4, inject(SAAS_SERVICE_TYPES.UserProviderCredentialResolver)),
+    __metadata("design:paramtypes", [Function, ErrorBuilderBackendService,
+        AppConfigurationService,
+        ExternalProvidersRegistryBackendService, Object])
+], GoogleDriveStorageProvider);
+export { GoogleDriveStorageProvider };
+/** Drains a stream into one buffer, refusing past `limit` before the whole thing is in memory. */
+async function readAllBounded(stream, limit, overflow) {
+    const chunks = [];
+    let total = 0;
+    for await (const chunk of stream) {
+        const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+        total += buffer.length;
+        if (total > limit)
+            throw overflow();
+        chunks.push(buffer);
+    }
+    return Buffer.concat(chunks);
+}
+//# sourceMappingURL=google-drive-storage-provider.backend.service.js.map

package/dist/esm/files/storage/google-drive-storage-provider.backend.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-drive-storage-provider.backend.service.js","sourceRoot":"","sources":["../../../../src/files/storage/google-drive-storage-provider.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;;;;;;;;;;;;;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAElC,OAAO,EAAE,SAAS,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AAE/E,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AACvF,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAEpF,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,EAAE,mBAAmB,EAAE,MAAM,8EAA8E,CAAC;AACnH,OAAO,EAAE,uBAAuB,EAAE,MAAM,sEAAsE,CAAC;AAE/G,OAAO,EAAE,uCAAuC,EAAE,MAAM,4FAA4F,CAAC;AAErJ,OAAO,EAAE,mCAAmC,EAAE,MAAM,qGAAqG,CAAC;AAC1J,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,4BAA4B,EAAE,MAAM,sDAAsD,CAAC;AACvK,OAAO,EAAE,4BAA4B,EAAE,MAAM,oDAAoD,CAAC;AAYlG;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,cAAc,CAAC;AAElE,0DAA0D;AAC1D,MAAM,CAAC,MAAM,uBAAuB,GAAG,4BAA4B,CAAC;AACpE,MAAM,sBAAsB,GAAG,GAAG,uBAAuB,iBAAiB,CAAC;AAC3E,MAAM,uBAAuB,GAAG,GAAG,uBAAuB,wBAAwB,CAAC;AACnF,8FAA8F;AAC9F,MAAM,4BAA4B,GAAG,gDAAgD,CAAC;AACtF,yGAAyG;AACzG,MAAM,CAAC,MAAM,+BAA+B,GAAG,MAAM,CAAC;AAiB/C,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IAQiB;IACa;IACH;IACgB;IACF;IAXrE,UAAU,GAAG,mBAAmB,CAAC,YAAY,CAAC;IAC9C,oBAAoB,GAAG,mCAAmC,CAAC;IACpE,kGAAkG;IACzF,oBAAoB,GAAG,IAAI,CAAC;IACpB,QAAQ,CAA+D;IAExF,YACsD,MAAqB,EACR,YAAwC,EAC3C,gBAAyC,EACzB,QAAiD,EACnD,eAAmD;QAJ3E,WAAM,GAAN,MAAM,CAAe;QACR,iBAAY,GAAZ,YAAY,CAA4B;QAC3C,qBAAgB,GAAhB,gBAAgB,CAAyB;QACzB,aAAQ,GAAR,QAAQ,CAAyC;QACnD,oBAAe,GAAf,eAAe,CAAoC;QAE/H,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,4BAA4B,CAAC,CAAC;QACtE,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;IACvE,CAAC;IAED,YAAY;QACV,gGAAgG;QAChG,8FAA8F;QAC9F,6FAA6F;QAC7F,uFAAuF;QACvF,mGAAmG;QACnG,gGAAgG;QAChG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE;YAAE,OAAO,KAAK,CAAC;QAC3C,OAAO,mCAAmC,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC,QAAQ,CAAC;IAChG,CAAC;IAED,KAAK,CAAC,UAAU;QACd,2FAA2F;QAC3F,2FAA2F;QAC3F,yFAAyF;QACzF,wEAAwE;QACxE,IAAI,CAAC,QAAQ,CAAC,4BAA4B,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,KAAK,CAAC,WAAW;QACf,wFAAwF;QACxF,+DAA+D;QAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACvC,OAAO;YACL,OAAO,EAAE,UAAU;YACnB,OAAO,EAAE,CAAC;YACV,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,IAAI,CAAC,oBAAoB,oDAAoD,EAAE,CAAC;SAC7H,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,uBAAuB,CAC3B,UAAkB,EAClB,MAAyD,EACzD,gBAAuC;QAEvC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;QACtE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC;QAC3E,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,MAAM,CACV,UAAoB,EACpB,MAAc,EACd,QAAgB,EAChB,IAAY,EACZ,gBAAuC,EACvC,OAA8B;QAE9B,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC;QACtE,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,UAAU,CAAC,CAAC;QAC/E,MAAM,WAAW,GAAG,4BAA4B,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACpG,YAAY,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC;QAC7E,cAAc,CAAC,UAAU,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC;QAE9E,gFAAgF;QAChF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,4BAA4B,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,gBAAgB,CAAC,CAAC;QAEpH,8FAA8F;QAC9F,4FAA4F;QAC5F,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,UAAU,EAAE,WAAW,EAAE,GAAG,EAAE,CAC/D,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,gBAAgB,EAAE;YACnE,sBAAsB,EAAE,2BAA2B,CAAC,UAAU;YAC9D,OAAO,EAAE,EAAE,OAAO,EAAE,kDAAkD,EAAE,MAAM,EAAE,WAAW,EAAE;SAC9F,CAAC,CAAC,CAAC;QAEN,MAAM,QAAQ,GAAG,SAAS,MAAM,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,IAAI,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjF,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,KAAK,QAAQ,4DAA4D,QAAQ,SAAS,QAAQ,qBAAqB,QAAQ,UAAU,EAAE,MAAM,CAAC;YAC9J,KAAK;YACL,MAAM,CAAC,IAAI,CAAC,SAAS,QAAQ,IAAI,EAAE,MAAM,CAAC;SAC3C,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAC9B,GAAG,uBAAuB,wDAAwD,EAClF,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,cAAc,EAAE,+BAA+B,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,EAClI,gBAAgB,EAChB,EAAE,MAAM,EAAE,CACX,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA0B,CAAC;QAC9D,MAAM,UAAU,GAAG,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3F,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,gBAAgB,EAAE,gBAAgB,EAAE;gBAC/E,sBAAsB,EAAE,2BAA2B,CAAC,gBAAgB;gBACpE,OAAO,EAAE,EAAE,OAAO,EAAE,0DAA0D,EAAE,MAAM,EAAE;aACzF,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,0BAA0B,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QAClE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAA6B,EAAE,gBAAuC;QACnF,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QAClE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QACpE,4FAA4F;QAC5F,uFAAuF;QACvF,iDAAiD;QACjD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACxF,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC;QAC3E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAC9B,GAAG,sBAAsB,IAAI,kBAAkB,CAAC,UAAU,CAAC,mCAAmC,EAC9F,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,EAAE,EAChE,gBAAgB,EAChB,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,CAChD,CAAC;QACF,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAC3B,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,gBAAgB,EAAE,gBAAgB,EAAE;gBAC/E,sBAAsB,EAAE,2BAA2B,CAAC,gBAAgB;gBACpE,OAAO,EAAE,EAAE,OAAO,EAAE,oDAAoD,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;aAChG,CAAC,CAAC;QACL,CAAC;QACD,OAAO;YACL,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAgD,CAAC;YACnF,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,WAAW,CAAC,WAAW;YAC5E,IAAI,EAAE,WAAW,CAAC,IAAI;YACtB,GAAG,CAAC,WAAW,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,WAAW,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9F,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAA6B,EAAE,iBAAwC;QAClF,8FAA8F;QAC9F,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6EAA6E,EAAE;YAC9F,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,IAA6B,EAAE,gBAAuC;QACtF,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QAClE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QACpE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACxF,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,QAAQ,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC;QAC5F,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,8EAA8E;IAE9E;;;;;;;;OAQG;IACK,KAAK,CAAC,kBAAkB,CAC9B,MAAyD,EACzD,gBAAuC;QAEvC,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,mCAAmC,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC3F,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YAC5B,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,gBAAgB,EAAE;gBAC5E,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;gBACjE,OAAO,EAAE;oBACP,OAAO,EAAE,mCAAmC,IAAI,CAAC,oBAAoB,uDAAuD;oBAC5H,OAAO,EAAE,IAAI,CAAC,OAAO;iBACtB;aACF,CAAC,CAAC;QACL,CAAC;QACD,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,oBAAoB,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;QAC/G,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAC3E,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,gBAAgB,EAAE;gBAC5E,sBAAsB,EAAE,2BAA2B,CAAC,0BAA0B;gBAC9E,OAAO,EAAE;oBACP,OAAO,EAAE,kEAAkE,IAAI,CAAC,oBAAoB,cAAc;oBAClH,MAAM,EAAE,QAAQ,CAAC,MAAM;iBACxB;aACF,CAAC,CAAC;QACL,CAAC;QACD,MAAM,IAAI,CAAC,eAAe,CAAC,mBAAmB,CAAC,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,UAAU,CAAC,YAAY,EAAE,CAAC,CAAC;QACpG,OAAO,UAAU,CAAC,KAAK,CAAC;IAC1B,CAAC;IAEO,aAAa,CAAC,MAAyD,EAAE,gBAAuC;QACtH,IAAI,MAAM,CAAC,oBAAoB,KAAK,sBAAsB,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YACtF,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,gBAAgB,EAAE;gBAC5E,sBAAsB,EAAE,2BAA2B,CAAC,0BAA0B;gBAC9E,OAAO,EAAE;oBACP,OAAO,EAAE,uHAAuH;oBAChI,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;iBAClD;aACF,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;IACvC,CAAC;IAEO,iBAAiB,CAAC,IAA6B,EAAE,gBAAuC;QAC9F,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,gBAAgB,EAAE;gBACzE,sBAAsB,EAAE,2BAA2B,CAAC,wBAAwB;gBAC5E,OAAO,EAAE,EAAE,OAAO,EAAE,6CAA6C,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;aACzF,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,UAAkB,EAAE,KAAa,EAAE,gBAAuC,EAAE,MAAe;QACrH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAC9B,GAAG,sBAAsB,IAAI,kBAAkB,CAAC,UAAU,CAAC,WAAW,kBAAkB,CAAC,4BAA4B,CAAC,yBAAyB,EAC/I,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,EAAE,EAChE,gBAAgB,EAChB,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,CACnC,CAAC;QACF,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA0B,CAAC;IAC1D,CAAC;IAEO,aAAa,CAAC,IAA2B,EAAE,UAAkB,EAAE,gBAAuC;QAC5G,MAAM,WAAW,GAAG,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9G,4FAA4F;QAC5F,+FAA+F;QAC/F,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;YACvF,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1D,IAAI,WAAW,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACpD,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,gBAAgB,EAAE;gBACzE,sBAAsB,EAAE,2BAA2B,CAAC,wBAAwB;gBAC5E,OAAO,EAAE;oBACP,OAAO,EAAE,WAAW,KAAK,SAAS;wBAChC,CAAC,CAAC,iDAAiD;wBACnD,CAAC,CAAC,oGAAoG;oBACxG,UAAU,EAAE,UAAU;iBACvB;aACF,CAAC,CAAC;QACL,CAAC;QACD,MAAM,YAAY,GAAG,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACrG,OAAO;YACL,IAAI,EAAE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU;YACpF,WAAW;YACX,IAAI;YACJ,GAAG,CAAC,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjG,CAAC;IACJ,CAAC;IAED,+GAA+G;IACvG,KAAK,CAAC,IAAI,CAChB,GAAW,EACX,IAAwE,EACxE,gBAAuC,EACvC,OAAgC;QAEhC,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC1B,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,+BAA+B,CAAC;aAC7D,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,gBAAgB,EAAE,gBAAgB,EAAE;gBAC/E,sBAAsB,EAAE,2BAA2B,CAAC,gBAAgB;gBACpE,OAAO,EAAE,EAAE,OAAO,EAAE,6BAA6B,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC,EAAE;aACnG,CAAC,CAAC;QACL,CAAC;QACD,IAAI,QAAQ,CAAC,EAAE;YAAE,OAAO,QAAQ,CAAC;QACjC,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,SAAS,EAAE,gBAAgB,EAAE;gBACxE,sBAAsB,EAAE,2BAA2B,CAAC,yBAAyB;gBAC7E,OAAO,EAAE,EAAE,OAAO,EAAE,iDAAiD,EAAE,GAAG,OAAO,EAAE;aACpF,CAAC,CAAC;QACL,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvD,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,gBAAgB,EAAE;gBAC5E,sBAAsB,EAAE,2BAA2B,CAAC,0BAA0B;gBAC9E,OAAO,EAAE,EAAE,OAAO,EAAE,6DAA6D,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,GAAG,OAAO,EAAE;aACzH,CAAC,CAAC;QACL,CAAC;QACD,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,gBAAgB,EAAE,gBAAgB,EAAE;YAC/E,sBAAsB,EAAE,2BAA2B,CAAC,gBAAgB;YACpE,OAAO,EAAE,EAAE,OAAO,EAAE,qCAAqC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,GAAG,OAAO,EAAE;SACjG,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AAtSY,0BAA0B;IADtC,UAAU,EAAE;IASR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAC9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAA;IAC3C,WAAA,MAAM,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,CAAA;IAC3D,WAAA,MAAM,CAAC,kBAAkB,CAAC,8BAA8B,CAAC,CAAA;+CAHqB,0BAA0B;QACzB,uBAAuB;QACf,uCAAuC;GAXtH,0BAA0B,CAsStC;;AAED,kGAAkG;AAClG,KAAK,UAAU,cAAc,CAAC,MAAgB,EAAE,KAAa,EAAE,QAAuB;IACpF,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAA4B,CAAC,CAAC;QAC1F,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC;QACvB,IAAI,KAAK,GAAG,KAAK;YAAE,MAAM,QAAQ,EAAE,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC","sourcesContent":["/**\n * `FileStorageAccepted.GOOGLE_DRIVE` — a file storage whose bytes live in a PERSON's Google Drive\n * (#394 P5).\n *\n * Every other storage here is the application's: it holds a credential of its own and every row\n * is reachable with it. This one holds none. A Drive file is reachable through exactly one grant —\n * the delegated OAuth2 token of the person who linked it (a picker's `REMOTE_REFERENCE`) or\n * uploaded it — so the row's `uploadedBy` is the credential key, resolved through the same\n * connected-accounts store and the same admissibility predicate the browser access-token door\n * uses. A reader who is not the linker still reads the file: the application authorizes the ROW,\n * and the storage reads the BYTES as the linker, which is the delegated access the person granted\n * when they connected the account. Each such read is a recorded credential USE.\n *\n * Two decisions, written down because they are not the obvious ones:\n *\n * - `delete` NEVER touches Drive. The application never owned these bytes: a linked file is the\n *   person's document, and an uploaded one landed in their Drive under their account. Deleting a\n *   person's own document because an application row went away is the irreversible act this\n *   repository requires a deliberate door for, and there is no such door yet. So a delete forgets\n *   the reference and says so — a stale file in someone's Drive is a nuisance; a vanished one is\n *   an incident.\n * - `isConfigured` asks the registry, not the network. There is no application credential to\n *   probe with, and a per-person storage is \"configured\" exactly when the provider admits a\n *   USER-owned delegated connection — the condition under which any row could ever be read.\n *\n * Outbound calls go to one fixed vendor host, so they are not SSRF-pinned; each carries a deadline.\n */\n\nimport { injectable, inject } from 'inversify';\nimport { Readable } from 'stream';\nimport type { ReadableStream as WebReadableStream } from 'stream/web';\nimport { ErrorType, ErrorCustomMessageReference } from '@wildo-ai/saas-models';\nimport type { File } from '@wildo-ai/saas-models';\nimport { FileStorageAccepted, FileUploaderEntityType } from '@wildo-ai/zod-decorators';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport type { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport { ErrorBuilderBackendService } from '~wildo-backend-lib/errors/services/error-builder.backend.service';\nimport { describeCaughtError } from '~wildo-backend-lib/errors/utils/error-log-level-classification.backend.utils';\nimport { AppConfigurationService } from '~wildo-backend-lib/config/services/app-configuration.backend.service';\nimport type { ExecutionContext } from '~wildo-backend-lib/runtime/models/execution-context.backend.schemas';\nimport { ExternalProvidersRegistryBackendService } from '~wildo-backend-lib/external-providers/services/external-providers-registry.backend.service';\nimport type { UserProviderCredentialResolverPort } from '~wildo-backend-lib/security/connected-accounts/user-provider-credential-resolver.port';\nimport { resolveUserDelegatedAccessTokenSlot } from '~wildo-backend-lib/security/connected-accounts/utils/user-delegated-access-token-slot.backend.utils';\nimport { validateContentType, validateFileId, validateSize, validateStream, resolveConfiguredMaxFileSize } from '~wildo-backend-lib/files/utils/file-validation.utils';\nimport { resolveFileUploaderPrincipal } from '~wildo-backend-lib/files/utils/file-uploader.utils';\nimport type {\n  IFileStorageProvider,\n  StorageDownloadResult,\n  StorageFileMetadata,\n  StorageProviderHealthResult,\n  StorageRemoteFileDescription,\n  StorageUploadOptions,\n  StorageUploadResult,\n  StoredFileStorageTarget,\n} from './file-storage-provider.types';\n\n/**\n * The provider whose delegated credential this storage reads through: the CATALOGUE `google-drive`\n * provider (`@wildo-ai/providers/google-drive`), whose OAuth2 client a person connects their Drive\n * through under the `drive.file` scope — not the engine `google` SSO provider, which mints no\n * delegated token. The frontend `google-drive` module carries the same ref, so the picker, the\n * access-token door and this storage all name one account.\n */\nexport const GOOGLE_DRIVE_CONNECTED_PROVIDER_REF = 'google-drive';\n\n/** Drive v3, the only host this storage ever talks to. */\nexport const GOOGLE_DRIVE_API_ORIGIN = 'https://www.googleapis.com';\nconst GOOGLE_DRIVE_FILES_URL = `${GOOGLE_DRIVE_API_ORIGIN}/drive/v3/files`;\nconst GOOGLE_DRIVE_UPLOAD_URL = `${GOOGLE_DRIVE_API_ORIGIN}/upload/drive/v3/files`;\n/** Metadata fields read for a link or a metadata call — the FILES row is built from these. */\nconst GOOGLE_DRIVE_METADATA_FIELDS = 'id,name,mimeType,size,modifiedTime,md5Checksum';\n/** One deadline for every call; a download of a large file streams past it only once headers arrived. */\nexport const GOOGLE_DRIVE_REQUEST_TIMEOUT_MS = 30_000;\n\ninterface DriveFileMetadataWire {\n  id?: unknown;\n  name?: unknown;\n  mimeType?: unknown;\n  size?: unknown;\n  modifiedTime?: unknown;\n  md5Checksum?: unknown;\n}\n\n/** The linker a target names, once it has been checked to be a signed-in person. */\ninterface LinkerIdentity {\n  readonly userId: string;\n}\n\n@injectable()\nexport class GoogleDriveStorageProvider implements IFileStorageProvider {\n  readonly providerId = FileStorageAccepted.GOOGLE_DRIVE;\n  readonly connectedProviderRef = GOOGLE_DRIVE_CONNECTED_PROVIDER_REF;\n  /** `delete` forgets the reference and leaves the bytes in the person's Drive — see the header. */\n  readonly retainsBytesOnDelete = true;\n  private readonly logDebug: (message: string, context?: Record<string, unknown>) => void;\n\n  constructor(\n    @inject(SAAS_SERVICE_TYPES.Logger) private readonly logger: LoggerService,\n    @inject(SAAS_SERVICE_TYPES.ErrorBuilderService) private readonly errorBuilder: ErrorBuilderBackendService,\n    @inject(SAAS_SERVICE_TYPES.AppConfigService) private readonly appConfigService: AppConfigurationService,\n    @inject(SAAS_SERVICE_TYPES.ExternalProvidersRegistryService) private readonly registry: ExternalProvidersRegistryBackendService,\n    @inject(SAAS_SERVICE_TYPES.UserProviderCredentialResolver) private readonly userCredentials: UserProviderCredentialResolverPort,\n  ) {\n    this.logDebug = this.logger.debugByType('GoogleDriveStorageProvider');\n    this.logger.setDebugTypeLogging('GoogleDriveStorageProvider', false);\n  }\n\n  isConfigured(): boolean {\n    // A question, never a throw. The storage router asks EVERY bound provider at readiness in EVERY\n    // runtime, and a platform service (`platform-crontabs-batches-manager`) never initializes the\n    // external-providers registry, so the slot resolution below would trip `ensureInitialized()`\n    // and take the whole storage health check down with it — measured 2026-09-09: crontabs\n    // answered `/health/ready` 503 forever, logging `external_provider_registry_initialization_failed`\n    // every two seconds, from a provider that runtime could not have configured in the first place.\n    if (!this.registry.isReady()) return false;\n    return resolveUserDelegatedAccessTokenSlot(this.registry, this.connectedProviderRef).admitted;\n  }\n\n  async initialize(): Promise<void> {\n    // Nothing to open. The \"picker listed, storage not configured\" diagnostic is NOT here: the\n    // router initializes only configured providers, so a warning on this method never runs. It\n    // lives in the startup validator's storage collector, which sees every provider with the\n    // registry ready (`collectVendorStorageListedWithoutConnectionIssues`).\n    this.logDebug('Google Drive storage ready', { configured: this.isConfigured() });\n  }\n\n  async healthCheck(): Promise<StorageProviderHealthResult> {\n    // No probe: there is no application-level credential to probe WITH, and a probe as some\n    // arbitrary person would be a credential use nobody asked for.\n    const configured = this.isConfigured();\n    return {\n      healthy: configured,\n      latency: 0,\n      ...(configured ? {} : { error: `Provider '${this.connectedProviderRef}' does not admit a user-owned delegated connection` }),\n    };\n  }\n\n  async describeRemoteReference(\n    externalId: string,\n    linker: Pick<File, 'uploadedBy' | 'uploadedByEntityType'>,\n    executionContext: ExecutionContext<any>,\n  ): Promise<StorageRemoteFileDescription> {\n    const token = await this.resolveLinkerToken(linker, executionContext);\n    const wire = await this.fetchMetadata(externalId, token, executionContext);\n    return this.toDescription(wire, externalId, executionContext);\n  }\n\n  async upload(\n    fileStream: Readable,\n    fileId: string,\n    mimeType: string,\n    size: number,\n    executionContext: ExecutionContext<any>,\n    options?: StorageUploadOptions,\n  ): Promise<StorageUploadResult> {\n    validateFileId(fileId, this.errorBuilder, executionContext, 'fileId');\n    validateContentType(mimeType, this.errorBuilder, executionContext, 'mimeType');\n    const maxFileSize = resolveConfiguredMaxFileSize(this.appConfigService.config.storage?.maxFileSize);\n    validateSize(size, maxFileSize, this.errorBuilder, executionContext, 'size');\n    validateStream(fileStream, this.errorBuilder, executionContext, 'fileStream');\n\n    // An upload lands in the UPLOADER's Drive: the caller is the person, not a row.\n    const token = await this.resolveLinkerToken(resolveFileUploaderPrincipal(executionContext) ?? {}, executionContext);\n\n    // Drive's multipart upload wants the whole body; a resumable session would avoid buffering at\n    // the cost of two more round trips, and the configured maximum already bounds what is read.\n    const bytes = await readAllBounded(fileStream, maxFileSize, () =>\n      this.errorBuilder.buildError(ErrorType.VALIDATION, executionContext, {\n        customMessageReference: ErrorCustomMessageReference.VALIDATION,\n        context: { message: 'Stream exceeded the configured maximum file size', fileId, maxFileSize },\n      }));\n\n    const boundary = `wildo-${fileId}`;\n    const metadata = JSON.stringify({ name: options?.fileName ?? fileId, mimeType });\n    const body = Buffer.concat([\n      Buffer.from(`--${boundary}\\r\\nContent-Type: application/json; charset=UTF-8\\r\\n\\r\\n${metadata}\\r\\n--${boundary}\\r\\nContent-Type: ${mimeType}\\r\\n\\r\\n`, 'utf8'),\n      bytes,\n      Buffer.from(`\\r\\n--${boundary}--`, 'utf8'),\n    ]);\n\n    const response = await this.call(\n      `${GOOGLE_DRIVE_UPLOAD_URL}?uploadType=multipart&fields=id&supportsAllDrives=true`,\n      { method: 'POST', headers: { authorization: `Bearer ${token}`, 'content-type': `multipart/related; boundary=${boundary}` }, body },\n      executionContext,\n      { fileId },\n    );\n    const wire = (await response.json()) as DriveFileMetadataWire;\n    const storageRef = typeof wire.id === 'string' && wire.id.length > 0 ? wire.id : undefined;\n    if (storageRef === undefined) {\n      throw this.errorBuilder.buildError(ErrorType.EXTERNAL_SERVICE, executionContext, {\n        customMessageReference: ErrorCustomMessageReference.EXTERNAL_SERVICE,\n        context: { message: 'Google Drive accepted the upload but returned no file id', fileId },\n      });\n    }\n    this.logDebug('Uploaded to Google Drive', { fileId, storageRef });\n    return { storageRef, provider: this.providerId };\n  }\n\n  async download(file: StoredFileStorageTarget, executionContext: ExecutionContext<any>): Promise<StorageDownloadResult> {\n    const externalId = this.requireStorageRef(file, executionContext);\n    const token = await this.resolveLinkerToken(file, executionContext);\n    // Metadata first: `alt=media` answers with the bytes and a content-type, but the size Drive\n    // reports on the media response is not reliable for converted documents, and the row's\n    // consumers size their buffers from this result.\n    const wire = await this.fetchMetadata(externalId, token, executionContext, file.fileId);\n    const description = this.toDescription(wire, externalId, executionContext);\n    const response = await this.call(\n      `${GOOGLE_DRIVE_FILES_URL}/${encodeURIComponent(externalId)}?alt=media&supportsAllDrives=true`,\n      { method: 'GET', headers: { authorization: `Bearer ${token}` } },\n      executionContext,\n      { fileId: file.fileId, storageRef: externalId },\n    );\n    if (response.body === null) {\n      throw this.errorBuilder.buildError(ErrorType.EXTERNAL_SERVICE, executionContext, {\n        customMessageReference: ErrorCustomMessageReference.EXTERNAL_SERVICE,\n        context: { message: 'Google Drive answered a media request with no body', fileId: file.fileId },\n      });\n    }\n    return {\n      stream: Readable.fromWeb(response.body as unknown as WebReadableStream<Uint8Array>),\n      contentType: response.headers.get('content-type') ?? description.contentType,\n      size: description.size,\n      ...(description.etag !== undefined ? { etag: description.etag } : {}),\n      ...(description.lastModified !== undefined ? { lastModified: description.lastModified } : {}),\n    };\n  }\n\n  async delete(file: StoredFileStorageTarget, _executionContext: ExecutionContext<any>): Promise<void> {\n    // Deliberately no vendor call — see the file header. The reference is forgotten with the row.\n    this.logger.info('Google Drive file reference forgotten; the file stays in its owner\\'s Drive', {\n      fileId: file.fileId,\n      storageRef: file.storageRef,\n    });\n  }\n\n  async getMetadata(file: StoredFileStorageTarget, executionContext: ExecutionContext<any>): Promise<StorageFileMetadata> {\n    const externalId = this.requireStorageRef(file, executionContext);\n    const token = await this.resolveLinkerToken(file, executionContext);\n    const wire = await this.fetchMetadata(externalId, token, executionContext, file.fileId);\n    const { name: _name, ...metadata } = this.toDescription(wire, externalId, executionContext);\n    return metadata;\n  }\n\n  // ---------------------------------------------------------------------------\n\n  /**\n   * The delegated token of the person a target names. Three refusals, each naming what is\n   * missing: the target names no signed-in person; the provider admits no personal connection;\n   * the person's connection is gone. Every success is a recorded credential use.\n   *\n   * assurance-control: WILDO.IDENTITY.DELEGATED_AUTHORIZATION — a person's delegated grant is\n   * spent server-side only, only for a file that person linked or uploaded, and only as a\n   * recorded use; the token never reaches the reader.\n   */\n  private async resolveLinkerToken(\n    linker: Pick<File, 'uploadedBy' | 'uploadedByEntityType'>,\n    executionContext: ExecutionContext<any>,\n  ): Promise<string> {\n    const identity = this.requireLinker(linker, executionContext);\n    const slot = resolveUserDelegatedAccessTokenSlot(this.registry, this.connectedProviderRef);\n    if (slot.admitted === false) {\n      throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, executionContext, {\n        customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n        context: {\n          message: `Google Drive storage needs the '${this.connectedProviderRef}' provider to admit a user-owned delegated connection`,\n          refusal: slot.refusal,\n        },\n      });\n    }\n    const query = { userId: identity.userId, providerRef: this.connectedProviderRef, secretSlug: slot.secretSlug };\n    const resolution = await this.userCredentials.resolveUserCredential(query);\n    if (resolution === undefined) {\n      throw this.errorBuilder.buildError(ErrorType.AUTHORIZATION, executionContext, {\n        customMessageReference: ErrorCustomMessageReference.FILE_STORAGE_ACCESS_DENIED,\n        context: {\n          message: `The person this Google Drive file is reachable through has no '${this.connectedProviderRef}' connection`,\n          userId: identity.userId,\n        },\n      });\n    }\n    await this.userCredentials.recordCredentialUse({ ...query, credentialId: resolution.credentialId });\n    return resolution.value;\n  }\n\n  private requireLinker(linker: Pick<File, 'uploadedBy' | 'uploadedByEntityType'>, executionContext: ExecutionContext<any>): LinkerIdentity {\n    if (linker.uploadedByEntityType !== FileUploaderEntityType.USER || !linker.uploadedBy) {\n      throw this.errorBuilder.buildError(ErrorType.AUTHORIZATION, executionContext, {\n        customMessageReference: ErrorCustomMessageReference.FILE_STORAGE_ACCESS_DENIED,\n        context: {\n          message: 'A Google Drive file is reachable only through the signed-in person who linked or uploaded it, and this one names none',\n          uploadedByEntityType: linker.uploadedByEntityType,\n        },\n      });\n    }\n    return { userId: linker.uploadedBy };\n  }\n\n  private requireStorageRef(file: StoredFileStorageTarget, executionContext: ExecutionContext<any>): string {\n    if (!file.storageRef) {\n      throw this.errorBuilder.buildError(ErrorType.VALIDATION, executionContext, {\n        customMessageReference: ErrorCustomMessageReference.FILE_STORAGE_REF_INVALID,\n        context: { message: 'Google Drive file row carries no storageRef', fileId: file.fileId },\n      });\n    }\n    return file.storageRef;\n  }\n\n  private async fetchMetadata(externalId: string, token: string, executionContext: ExecutionContext<any>, fileId?: string): Promise<DriveFileMetadataWire> {\n    const response = await this.call(\n      `${GOOGLE_DRIVE_FILES_URL}/${encodeURIComponent(externalId)}?fields=${encodeURIComponent(GOOGLE_DRIVE_METADATA_FIELDS)}&supportsAllDrives=true`,\n      { method: 'GET', headers: { authorization: `Bearer ${token}` } },\n      executionContext,\n      { fileId, storageRef: externalId },\n    );\n    return (await response.json()) as DriveFileMetadataWire;\n  }\n\n  private toDescription(wire: DriveFileMetadataWire, externalId: string, executionContext: ExecutionContext<any>): StorageRemoteFileDescription {\n    const contentType = typeof wire.mimeType === 'string' && wire.mimeType.length > 0 ? wire.mimeType : undefined;\n    // Drive reports `size` as a decimal STRING, and omits it for Google-native documents (Docs,\n    // Sheets), which have no bytes until exported. A file with no size cannot be linked as a file.\n    const size = typeof wire.size === 'string' && /^\\d+$/.test(wire.size) ? Number(wire.size)\n      : typeof wire.size === 'number' ? wire.size : undefined;\n    if (contentType === undefined || size === undefined) {\n      throw this.errorBuilder.buildError(ErrorType.VALIDATION, executionContext, {\n        customMessageReference: ErrorCustomMessageReference.FILE_STORAGE_REF_INVALID,\n        context: {\n          message: contentType === undefined\n            ? 'Google Drive reports no MIME type for this file'\n            : 'Google Drive reports no byte size for this file — a Google-native document has none until exported',\n          storageRef: externalId,\n        },\n      });\n    }\n    const lastModified = typeof wire.modifiedTime === 'string' ? new Date(wire.modifiedTime) : undefined;\n    return {\n      name: typeof wire.name === 'string' && wire.name.length > 0 ? wire.name : externalId,\n      contentType,\n      size,\n      ...(typeof wire.md5Checksum === 'string' ? { etag: wire.md5Checksum } : {}),\n      ...(lastModified !== undefined && !Number.isNaN(lastModified.getTime()) ? { lastModified } : {}),\n    };\n  }\n\n  /** One call shape: fixed host, a deadline, and vendor status codes mapped to this repository's error types. */\n  private async call(\n    url: string,\n    init: { method: string; headers: Record<string, string>; body?: Buffer },\n    executionContext: ExecutionContext<any>,\n    context: Record<string, unknown>,\n  ): Promise<Response> {\n    let response: Response;\n    try {\n      response = await fetch(url, {\n        method: init.method,\n        headers: init.headers,\n        ...(init.body === undefined ? {} : { body: new Uint8Array(init.body) }),\n        signal: AbortSignal.timeout(GOOGLE_DRIVE_REQUEST_TIMEOUT_MS),\n      });\n    } catch (error) {\n      throw this.errorBuilder.buildError(ErrorType.EXTERNAL_SERVICE, executionContext, {\n        customMessageReference: ErrorCustomMessageReference.EXTERNAL_SERVICE,\n        context: { message: 'Google Drive request failed', ...context, error: describeCaughtError(error) },\n      });\n    }\n    if (response.ok) return response;\n    if (response.status === 404) {\n      throw this.errorBuilder.buildError(ErrorType.NOT_FOUND, executionContext, {\n        customMessageReference: ErrorCustomMessageReference.FILE_NOT_FOUND_IN_STORAGE,\n        context: { message: 'Google Drive knows no such file for this person', ...context },\n      });\n    }\n    if (response.status === 401 || response.status === 403) {\n      throw this.errorBuilder.buildError(ErrorType.AUTHORIZATION, executionContext, {\n        customMessageReference: ErrorCustomMessageReference.FILE_STORAGE_ACCESS_DENIED,\n        context: { message: 'Google Drive refused the delegated credential for this file', status: response.status, ...context },\n      });\n    }\n    throw this.errorBuilder.buildError(ErrorType.EXTERNAL_SERVICE, executionContext, {\n      customMessageReference: ErrorCustomMessageReference.EXTERNAL_SERVICE,\n      context: { message: 'Google Drive answered with an error', status: response.status, ...context },\n    });\n  }\n}\n\n/** Drains a stream into one buffer, refusing past `limit` before the whole thing is in memory. */\nasync function readAllBounded(stream: Readable, limit: number, overflow: () => unknown): Promise<Buffer> {\n  const chunks: Buffer[] = [];\n  let total = 0;\n  for await (const chunk of stream) {\n    const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk as Uint8Array | string);\n    total += buffer.length;\n    if (total > limit) throw overflow();\n    chunks.push(buffer);\n  }\n  return Buffer.concat(chunks);\n}\n"]}