@zlooks.cn/images-server 1.0.1

package/dist/assets/provider.d.ts

@@ -0,0 +1,3 @@
+import type { AssetAnnouncement } from '@zlooks.cn/public-asset';
+export declare const imageAssetProvider: Pick<AssetAnnouncement, 'providerId' | 'namespace' | 'prefix' | 'methods'>;
+//# sourceMappingURL=provider.d.ts.map

package/dist/assets/provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../src/assets/provider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAGjE,eAAO,MAAM,kBAAkB,EAAE,IAAI,CAAC,iBAAiB,EAAE,YAAY,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,CAGzG,CAAC"}

package/dist/assets/provider.js

@@ -0,0 +1,6 @@
+import { IMAGES_ID, IMAGES_NAMESPACE } from '../identity.js';
+export const imageAssetProvider = {
+    providerId: IMAGES_ID, namespace: IMAGES_NAMESPACE,
+    prefix: '/media/images/', methods: ['GET', 'HEAD'],
+};
+//# sourceMappingURL=provider.js.map

package/dist/assets/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../../src/assets/provider.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAE7D,MAAM,CAAC,MAAM,kBAAkB,GAA+E;IAC5G,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,gBAAgB;IAClD,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;CACnD,CAAC"}

package/dist/assets/read-image-asset.d.ts

@@ -0,0 +1,5 @@
+import { type AssetMetadata } from '@zlooks.cn/public-asset';
+import type { ImageStore } from '../persistence/image-store.js';
+import type { LocalImageStorage } from '../storage/local-storage.js';
+export declare function readImageAsset(store: ImageStore, storage: LocalImageStorage, input: unknown, signal: AbortSignal): AsyncGenerator<AssetMetadata | Buffer>;
+//# sourceMappingURL=read-image-asset.d.ts.map

package/dist/assets/read-image-asset.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-image-asset.d.ts","sourceRoot":"","sources":["../../src/assets/read-image-asset.ts"],"names":[],"mappings":"AACA,OAAO,EAAyC,KAAK,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACpG,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAGrE,wBAAuB,cAAc,CACnC,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,iBAAiB,EAC1B,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,WAAW,GAClB,cAAc,CAAC,aAAa,GAAG,MAAM,CAAC,CAsDxC"}

package/dist/assets/read-image-asset.js

@@ -0,0 +1,88 @@
+import rangeParser from 'range-parser';
+import { ASSET_CHUNK_BYTES, assetRequestSchema } from '@zlooks.cn/public-asset';
+import { imagePreconditionStatus, permitsImageRange, imageReadHeaders, emptyImageResponse } from './response-policy.js';
+export async function* readImageAsset(store, storage, input, signal) {
+    signal.throwIfAborted();
+    const parsed = assetRequestSchema.safeParse(input);
+    if (!parsed.success) {
+        yield emptyImageResponse(400);
+        return;
+    }
+    const request = parsed.data;
+    const path = /^\/media\/images\/([a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12})\.(jpg|png|webp|gif|avif)$/.exec(request.path);
+    if (!path) {
+        yield emptyImageResponse(404);
+        return;
+    }
+    let row;
+    try {
+        row = await store.readAsset(path[1], signal);
+    }
+    catch {
+        signal.throwIfAborted();
+        yield emptyImageResponse(503);
+        return;
+    }
+    if (!row || row.extension !== path[2]) {
+        yield emptyImageResponse(404);
+        return;
+    }
+    const file = await storage.open(row.relativePath).catch(() => null);
+    if (!file) {
+        yield emptyImageResponse(503);
+        return;
+    }
+    try {
+        signal.throwIfAborted();
+        const stat = await file.stat();
+        if (!stat.isFile() || stat.size !== row.byteSize) {
+            yield emptyImageResponse(503);
+            return;
+        }
+        const etag = `"${row.sha256}"`;
+        const modified = new Date(row.modifiedAt);
+        const headers = imageReadHeaders(etag, modified);
+        const precondition = imagePreconditionStatus(request.headers, etag, modified);
+        if (precondition) {
+            yield precondition === 304 ? { status: 304, headers } : emptyImageResponse(precondition);
+            return;
+        }
+        let start = 0;
+        let end = row.byteSize - 1;
+        let partial = false;
+        if (request.method === 'GET' && request.headers.range && permitsImageRange(request.headers['if-range'], etag, modified)) {
+            const ranges = rangeParser(row.byteSize, request.headers.range);
+            if (typeof ranges === 'number' || ranges.type !== 'bytes' || ranges.length !== 1) {
+                const response = emptyImageResponse(416);
+                response.headers['content-range'] = `bytes */${row.byteSize}`;
+                yield response;
+                return;
+            }
+            ({ start, end } = ranges[0]);
+            partial = true;
+        }
+        yield {
+            status: partial ? 206 : 200,
+            headers: {
+                ...headers, 'content-length': String(end - start + 1), 'content-type': row.mediaType,
+                ...(partial ? { 'content-range': `bytes ${start}-${end}/${row.byteSize}` } : {}),
+            },
+        };
+        if (request.method === 'HEAD')
+            return;
+        const stream = file.createReadStream({ start, end, autoClose: false, highWaterMark: ASSET_CHUNK_BYTES, signal });
+        try {
+            for await (const chunk of stream) {
+                signal.throwIfAborted();
+                yield chunk;
+            }
+        }
+        finally {
+            stream.destroy();
+        }
+    }
+    finally {
+        await file.close();
+    }
+}
+//# sourceMappingURL=read-image-asset.js.map

package/dist/assets/read-image-asset.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-image-asset.js","sourceRoot":"","sources":["../../src/assets/read-image-asset.ts"],"names":[],"mappings":"AAAA,OAAO,WAAW,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAsB,MAAM,yBAAyB,CAAC;AAGpG,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAExH,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,cAAc,CACnC,KAAiB,EACjB,OAA0B,EAC1B,KAAc,EACd,MAAmB;IAEnB,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAAC,MAAM,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC;IAC5B,MAAM,IAAI,GAAG,4GAA4G,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7I,IAAI,CAAC,IAAI,EAAE,CAAC;QAAC,MAAM,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IACrD,IAAI,GAAG,CAAC;IACR,IAAI,CAAC;QAAC,GAAG,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IACtD,MAAM,CAAC;QAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAAC,MAAM,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IACzE,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAAC,MAAM,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IACjF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACpE,IAAI,CAAC,IAAI,EAAE,CAAC;QAAC,MAAM,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IACrD,IAAI,CAAC;QACH,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,QAAQ,EAAE,CAAC;YAAC,MAAM,kBAAkB,CAAC,GAAG,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC5F,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QAC/B,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACjD,MAAM,YAAY,GAAG,uBAAuB,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC9E,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,YAAY,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;YACzF,OAAO;QACT,CAAC;QACD,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,GAAG,GAAG,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC;QAC3B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;YACxH,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAChE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;gBACzC,QAAQ,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,WAAW,GAAG,CAAC,QAAQ,EAAE,CAAC;gBAC9D,MAAM,QAAQ,CAAC;gBAAC,OAAO;YACzB,CAAC;YACD,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC;YAC9B,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QACD,MAAM;YACJ,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;YAC3B,OAAO,EAAE;gBACP,GAAG,OAAO,EAAE,gBAAgB,EAAE,MAAM,CAAC,GAAG,GAAG,KAAK,GAAG,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,SAAS;gBACpF,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,SAAS,KAAK,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACjF;SACF,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC,CAAC;QACjH,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBACjC,MAAM,CAAC,cAAc,EAAE,CAAC;gBACxB,MAAM,KAAe,CAAC;YACxB,CAAC;QACH,CAAC;gBAAS,CAAC;YAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAAC,CAAC;IACjC,CAAC;YAAS,CAAC;QAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AACnC,CAAC"}

package/dist/assets/response-policy.d.ts

@@ -0,0 +1,6 @@
+import type { AssetMetadata, AssetRequest } from '@zlooks.cn/public-asset';
+export declare function imageReadHeaders(etag: string, modified: Date): AssetMetadata['headers'];
+export declare function emptyImageResponse(status: number): AssetMetadata;
+export declare function imagePreconditionStatus(headers: AssetRequest['headers'], etag: string, modified: Date): 304 | 412 | undefined;
+export declare function permitsImageRange(value: string | undefined, etag: string, modified: Date): boolean;
+//# sourceMappingURL=response-policy.d.ts.map

package/dist/assets/response-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"response-policy.d.ts","sourceRoot":"","sources":["../../src/assets/response-policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAE3E,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,GAAG,aAAa,CAAC,SAAS,CAAC,CAOvF;AACD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,CAEhE;AACD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,YAAY,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,GAAG,GAAG,GAAG,GAAG,GAAG,SAAS,CAS7H;AACD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,GAAG,OAAO,CAIlG"}

package/dist/assets/response-policy.js

@@ -0,0 +1,49 @@
+export function imageReadHeaders(etag, modified) {
+    return {
+        etag, 'last-modified': modified.toUTCString(), 'accept-ranges': 'bytes',
+        'cache-control': 'public, max-age=31536000, immutable',
+        'content-disposition': 'inline', 'x-content-type-options': 'nosniff',
+        'access-control-allow-origin': '*', 'cross-origin-resource-policy': 'cross-origin',
+    };
+}
+export function emptyImageResponse(status) {
+    return { status, headers: { 'content-length': '0', 'cache-control': 'no-store', 'access-control-allow-origin': '*' } };
+}
+export function imagePreconditionStatus(headers, etag, modified) {
+    const match = headers['if-match'];
+    if (match && !matchesTag(match, etag, false))
+        return 412;
+    if (!match && isOlder(headers['if-unmodified-since'], modified))
+        return 412;
+    const none = headers['if-none-match'];
+    if (none)
+        return matchesTag(none, etag, true) ? 304 : undefined;
+    const since = parseDate(headers['if-modified-since']);
+    if (since !== undefined && modifiedSeconds(modified) <= since)
+        return 304;
+    return undefined;
+}
+export function permitsImageRange(value, etag, modified) {
+    if (!value || value === etag)
+        return true;
+    const date = parseDate(value);
+    return date !== undefined && date >= modifiedSeconds(modified);
+}
+function matchesTag(value, etag, weak) {
+    return value.split(',').some((item) => {
+        const tag = item.trim();
+        return tag === '*' || (weak ? tag.replace(/^W\//, '') : tag) === etag;
+    });
+}
+function parseDate(value) {
+    if (!value)
+        return undefined;
+    const time = Date.parse(value);
+    return Number.isFinite(time) ? Math.floor(time / 1000) : undefined;
+}
+function modifiedSeconds(modified) { return Math.floor(modified.getTime() / 1000); }
+function isOlder(value, modified) {
+    const date = parseDate(value);
+    return date !== undefined && date < modifiedSeconds(modified);
+}
+//# sourceMappingURL=response-policy.js.map

package/dist/assets/response-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"response-policy.js","sourceRoot":"","sources":["../../src/assets/response-policy.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,QAAc;IAC3D,OAAO;QACL,IAAI,EAAE,eAAe,EAAE,QAAQ,CAAC,WAAW,EAAE,EAAE,eAAe,EAAE,OAAO;QACvE,eAAe,EAAE,qCAAqC;QACtD,qBAAqB,EAAE,QAAQ,EAAE,wBAAwB,EAAE,SAAS;QACpE,6BAA6B,EAAE,GAAG,EAAE,8BAA8B,EAAE,cAAc;KACnF,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,gBAAgB,EAAE,GAAG,EAAE,eAAe,EAAE,UAAU,EAAE,6BAA6B,EAAE,GAAG,EAAE,EAAE,CAAC;AACzH,CAAC;AACD,MAAM,UAAU,uBAAuB,CAAC,OAAgC,EAAE,IAAY,EAAE,QAAc;IACpG,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAClC,IAAI,KAAK,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IACzD,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,QAAQ,CAAC;QAAE,OAAO,GAAG,CAAC;IAC5E,MAAM,IAAI,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACtC,IAAI,IAAI;QAAE,OAAO,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IAChE,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC;IACtD,IAAI,KAAK,KAAK,SAAS,IAAI,eAAe,CAAC,QAAQ,CAAC,IAAI,KAAK;QAAE,OAAO,GAAG,CAAC;IAC1E,OAAO,SAAS,CAAC;AACnB,CAAC;AACD,MAAM,UAAU,iBAAiB,CAAC,KAAyB,EAAE,IAAY,EAAE,QAAc;IACvF,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9B,OAAO,IAAI,KAAK,SAAS,IAAI,IAAI,IAAI,eAAe,CAAC,QAAQ,CAAC,CAAC;AACjE,CAAC;AACD,SAAS,UAAU,CAAC,KAAa,EAAE,IAAY,EAAE,IAAa;IAC5D,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,OAAO,GAAG,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC;IACxE,CAAC,CAAC,CAAC;AACL,CAAC;AACD,SAAS,SAAS,CAAC,KAAyB;IAC1C,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACrE,CAAC;AACD,SAAS,eAAe,CAAC,QAAc,IAAY,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;AAClG,SAAS,OAAO,CAAC,KAAyB,EAAE,QAAc;IACxD,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9B,OAAO,IAAI,KAAK,SAAS,IAAI,IAAI,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;AAChE,CAAC"}

package/dist/caches/public-image-cache.d.ts

@@ -0,0 +1,18 @@
+import type { Redis } from 'ioredis';
+import type { ImageRow } from '../persistence/entities.js';
+export declare class PublicImageCache {
+    private readonly prefix;
+    private readonly locks;
+    private readonly entry;
+    constructor(redis: Redis, prefix: string, load: (id: string) => Promise<ImageRow>);
+    read(id: string, signal: AbortSignal): Promise<{
+        extension: "avif" | "gif" | "jpg" | "png" | "webp";
+        relativePath: string;
+        byteSize: number;
+        mediaType: "image/avif" | "image/gif" | "image/jpeg" | "image/png" | "image/webp";
+        sha256: string;
+        modifiedAt: number;
+    } | undefined>;
+    change<T>(id: string, mutation: () => Promise<T>, signal?: AbortSignal): Promise<T>;
+}
+//# sourceMappingURL=public-image-cache.d.ts.map

package/dist/caches/public-image-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-image-cache.d.ts","sourceRoot":"","sources":["../../src/caches/public-image-cache.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAC;AAe3D,qBAAa,gBAAgB;IAID,OAAO,CAAC,QAAQ,CAAC,MAAM;IAHjD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAY;IAClC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;IAEvB,YAAY,KAAK,EAAE,KAAK,EAAmB,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,CAAC,EAiBjG;IAEK,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW;;;;;;;mBAKzC;IAEK,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAUxF;CACF"}

package/dist/caches/public-image-cache.js

@@ -0,0 +1,58 @@
+import { Cache, defineCache, RedisCache } from '@hile/cache';
+import { RedisLock } from '@hile/redis-lock';
+import { z } from 'zod';
+import { ImageError } from '../domain/image-error.js';
+import { validateImagePath } from '../storage/image-path.js';
+import { IMAGE_MAX_BYTES, mediaTypeSchema } from '../domain/schema.js';
+const imageAssetSchema = z.strictObject({
+    extension: z.enum(['jpg', 'png', 'webp', 'gif', 'avif']),
+    relativePath: z.string().transform(validateImagePath),
+    byteSize: z.number().int().positive().max(IMAGE_MAX_BYTES),
+    mediaType: mediaTypeSchema,
+    sha256: z.string().regex(/^[a-f0-9]{64}$/),
+    modifiedAt: z.number().int().min(0).max(8_640_000_000_000_000),
+});
+const lockOptions = { ttl: 30_000, wait: 5_000 };
+export class PublicImageCache {
+    prefix;
+    locks;
+    entry;
+    constructor(redis, prefix, load) {
+        this.prefix = prefix;
+        this.locks = new RedisLock(redis, { renew: true });
+        const definition = defineCache('image:{id:string}', async ({ id }) => {
+            const row = await load(id).catch((error) => {
+                if (error instanceof ImageError && error.code === 'NOT_FOUND')
+                    return undefined;
+                throw error;
+            });
+            if (!row || row.status !== 'ready' || !row.relativePath || !row.extension || !row.byteSize || !row.mediaType || !row.sha256) {
+                return new Cache(undefined);
+            }
+            const asset = imageAssetSchema.parse({
+                extension: row.extension, relativePath: row.relativePath, byteSize: row.byteSize,
+                mediaType: row.mediaType, sha256: row.sha256, modifiedAt: (row.readyAt ?? row.createdAt).getTime(),
+            });
+            return new Cache(asset).setExpire(300);
+        }, { singleflight: lockOptions, negative: { ttl: 5 } });
+        this.entry = new RedisCache(prefix, redis, { locks: this.locks }).loadCache(definition);
+    }
+    async read(id, signal) {
+        signal.throwIfAborted();
+        const asset = await (await this.entry).read({ id });
+        signal.throwIfAborted();
+        return asset === undefined ? undefined : imageAssetSchema.parse(asset);
+    }
+    async change(id, mutation, signal) {
+        signal?.throwIfAborted();
+        // Share @hile/cache 4.0.1's singleflight lock: an old fill must finish before invalidation.
+        return this.locks.withLock(`${this.prefix}image:${id}:lock`, lockOptions, async () => {
+            signal?.throwIfAborted();
+            // Invalidate before committing; a Redis failure must not leave changed DB state behind a live cache.
+            await (await this.entry).remove({ id });
+            signal?.throwIfAborted();
+            return mutation();
+        });
+    }
+}
+//# sourceMappingURL=public-image-cache.js.map

package/dist/caches/public-image-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-image-cache.js","sourceRoot":"","sources":["../../src/caches/public-image-cache.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEvE,MAAM,gBAAgB,GAAG,CAAC,CAAC,YAAY,CAAC;IACtC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACxD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,iBAAiB,CAAC;IACrD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC;IAC1D,SAAS,EAAE,eAAe;IAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAC1C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC;CAC/D,CAAC,CAAC;AACH,MAAM,WAAW,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAEjD,MAAM,OAAO,gBAAgB;IAIgB,MAAM;IAHhC,KAAK,CAAY;IACjB,KAAK,CAAC;IAEvB,YAAY,KAAY,EAAmB,MAAc,EAAE,IAAuC;sBAAvD,MAAM;QAC/C,IAAI,CAAC,KAAK,GAAG,IAAI,SAAS,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,MAAM,UAAU,GAAG,WAAW,CAAC,mBAAmB,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;YACnE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBAClD,IAAI,KAAK,YAAY,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;oBAAE,OAAO,SAAS,CAAC;gBAChF,MAAM,KAAK,CAAC;YACd,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,OAAO,IAAI,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;gBAC5H,OAAO,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;YAC9B,CAAC;YACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC;gBACnC,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBAChF,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;aACnG,CAAC,CAAC;YACH,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACzC,CAAC,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC1F,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAU,EAAE,MAAmB;QACxC,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACpD,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzE,CAAC;IAED,KAAK,CAAC,MAAM,CAAI,EAAU,EAAE,QAA0B,EAAE,MAAoB;QAC1E,MAAM,EAAE,cAAc,EAAE,CAAC;QACzB,4FAA4F;QAC5F,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,MAAM,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE;YACnF,MAAM,EAAE,cAAc,EAAE,CAAC;YACzB,qGAAqG;YACrG,MAAM,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACxC,MAAM,EAAE,cAAc,EAAE,CAAC;YACzB,OAAO,QAAQ,EAAE,CAAC;QACpB,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/command/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/command/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/command/index.ts"],"names":[],"mappings":""}

package/dist/command/index.js

@@ -0,0 +1,23 @@
+#!/usr/bin/env node
+import { fileURLToPath } from 'node:url';
+import { createRegistryDatabaseDataSource, registerDatabaseCommands } from '@zlooks.cn/database-command';
+import { runServiceCommand } from '@zlooks.cn/service-command';
+import { imagesMigrations } from '../migrations/index.js';
+import { ImageEntity } from '../persistence/entities.js';
+import { IMAGES_NAMESPACE } from '../identity.js';
+await runServiceCommand({
+    packageRoot: fileURLToPath(new URL('../../', import.meta.url)),
+    requiresReactServer: false,
+    configure(program) {
+        registerDatabaseCommands(program, {
+            createDataSource: (envFile) => createRegistryDatabaseDataSource(envFile, {
+                commandNamespace: `${IMAGES_NAMESPACE}.db.command`, entities: [ImageEntity],
+            }),
+            migrations: imagesMigrations,
+        });
+    },
+}).catch((error) => {
+    process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
+    process.exitCode = 1;
+});
+//# sourceMappingURL=index.js.map

package/dist/command/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/command/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,gCAAgC,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACzG,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD,MAAM,iBAAiB,CAAC;IACtB,WAAW,EAAE,aAAa,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9D,mBAAmB,EAAE,KAAK;IAC1B,SAAS,CAAC,OAAO;QACf,wBAAwB,CAAC,OAAO,EAAE;YAChC,gBAAgB,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,gCAAgC,CAAC,OAAO,EAAE;gBACvE,gBAAgB,EAAE,GAAG,gBAAgB,aAAa,EAAE,QAAQ,EAAE,CAAC,WAAW,CAAC;aAC5E,CAAC;YACF,UAAU,EAAE,gBAAgB;SAC7B,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACpF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/dist/domain/image-error.d.ts

@@ -0,0 +1,5 @@
+export declare class ImageError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+//# sourceMappingURL=image-error.d.ts.map

package/dist/domain/image-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"image-error.d.ts","sourceRoot":"","sources":["../../src/domain/image-error.ts"],"names":[],"mappings":"AAAA,qBAAa,UAAW,SAAQ,KAAK;aACP,IAAI,EAAE,MAAM;IAAxC,YAA4B,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAGxD;CACF"}

package/dist/domain/image-error.js

@@ -0,0 +1,9 @@
+export class ImageError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'ImageError';
+    }
+}
+//# sourceMappingURL=image-error.js.map

package/dist/domain/image-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"image-error.js","sourceRoot":"","sources":["../../src/domain/image-error.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,UAAW,SAAQ,KAAK;IACP,IAAI;IAAhC,YAA4B,IAAY,EAAE,OAAe;QACvD,KAAK,CAAC,OAAO,CAAC,CAAC;oBADW,IAAI;QAE9B,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC3B,CAAC;CACF"}

package/dist/domain/list-cursor.d.ts

@@ -0,0 +1,10 @@
+import type { ListImageInput } from './schema.js';
+export declare function encodeCursor(filter: ListImageInput, row: {
+    id: string;
+    createdAt: Date;
+}): string;
+export declare function decodeCursor(filter: ListImageInput): {
+    id: string;
+    createdAt: Date;
+} | undefined;
+//# sourceMappingURL=list-cursor.d.ts.map

package/dist/domain/list-cursor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-cursor.d.ts","sourceRoot":"","sources":["../../src/domain/list-cursor.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAalD,wBAAgB,YAAY,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,IAAI,CAAA;CAAE,GAAG,MAAM,CAGjG;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,cAAc,GAAG;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,IAAI,CAAA;CAAE,GAAG,SAAS,CAUhG"}

package/dist/domain/list-cursor.js

@@ -0,0 +1,31 @@
+import { createHash } from 'node:crypto';
+import { z } from 'zod';
+import { ImageError } from './image-error.js';
+const cursorSchema = z.strictObject({
+    filter: z.string().regex(/^[a-f0-9]{64}$/),
+    id: z.uuid(),
+    createdAt: z.iso.datetime(),
+});
+function filterFingerprint({ cursor: _cursor, limit: _limit, ...filter }) {
+    const entries = Object.entries(filter).sort(([left], [right]) => left.localeCompare(right));
+    return createHash('sha256').update(JSON.stringify(entries)).digest('hex');
+}
+export function encodeCursor(filter, row) {
+    const cursor = { filter: filterFingerprint(filter), id: row.id, createdAt: row.createdAt.toISOString() };
+    return Buffer.from(JSON.stringify(cursor)).toString('base64url');
+}
+export function decodeCursor(filter) {
+    if (!filter.cursor)
+        return;
+    try {
+        const decoded = JSON.parse(Buffer.from(filter.cursor, 'base64url').toString('utf8'));
+        const cursor = cursorSchema.parse(decoded);
+        if (cursor.filter !== filterFingerprint(filter))
+            throw new Error('Filter mismatch');
+        return { id: cursor.id, createdAt: new Date(cursor.createdAt) };
+    }
+    catch {
+        throw new ImageError('INVALID_CURSOR', '分页游标无效或查询条件已改变');
+    }
+}
+//# sourceMappingURL=list-cursor.js.map

package/dist/domain/list-cursor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-cursor.js","sourceRoot":"","sources":["../../src/domain/list-cursor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAG9C,MAAM,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC;IAClC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAC1C,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAEH,SAAS,iBAAiB,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,EAAkB;IACtF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5F,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAsB,EAAE,GAAoC;IACvF,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,iBAAiB,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;IACzG,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAsB;IACjD,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO;IAC3B,IAAI,CAAC;QACH,MAAM,OAAO,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9F,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,MAAM,CAAC,MAAM,KAAK,iBAAiB,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACpF,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC"}

package/dist/domain/output-schema.d.ts

@@ -0,0 +1,63 @@
+import { z } from 'zod';
+/** Public metadata only; persistence paths, request fingerprints and credentials stay private. */
+export declare const imageMetadataSchema: z.ZodObject<{
+    id: z.ZodUUID;
+    originalFilename: z.ZodNullable<z.ZodString>;
+    status: z.ZodEnum<{
+        deleted: "deleted";
+        deleting: "deleting";
+        failed: "failed";
+        ready: "ready";
+        uploading: "uploading";
+    }>;
+    url: z.ZodNullable<z.ZodURL>;
+    mediaType: z.ZodNullable<z.ZodEnum<{
+        "image/avif": "image/avif";
+        "image/gif": "image/gif";
+        "image/jpeg": "image/jpeg";
+        "image/png": "image/png";
+        "image/webp": "image/webp";
+    }>>;
+    byteSize: z.ZodNullable<z.ZodNumber>;
+    width: z.ZodNullable<z.ZodNumber>;
+    height: z.ZodNullable<z.ZodNumber>;
+    sha256: z.ZodNullable<z.ZodString>;
+    createdBy: z.ZodString;
+    createdAt: z.ZodISODateTime;
+    readyAt: z.ZodNullable<z.ZodISODateTime>;
+    deletedAt: z.ZodNullable<z.ZodISODateTime>;
+    failureCode: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;
+export declare const imagePageSchema: z.ZodObject<{
+    items: z.ZodArray<z.ZodObject<{
+        id: z.ZodUUID;
+        originalFilename: z.ZodNullable<z.ZodString>;
+        status: z.ZodEnum<{
+            deleted: "deleted";
+            deleting: "deleting";
+            failed: "failed";
+            ready: "ready";
+            uploading: "uploading";
+        }>;
+        url: z.ZodNullable<z.ZodURL>;
+        mediaType: z.ZodNullable<z.ZodEnum<{
+            "image/avif": "image/avif";
+            "image/gif": "image/gif";
+            "image/jpeg": "image/jpeg";
+            "image/png": "image/png";
+            "image/webp": "image/webp";
+        }>>;
+        byteSize: z.ZodNullable<z.ZodNumber>;
+        width: z.ZodNullable<z.ZodNumber>;
+        height: z.ZodNullable<z.ZodNumber>;
+        sha256: z.ZodNullable<z.ZodString>;
+        createdBy: z.ZodString;
+        createdAt: z.ZodISODateTime;
+        readyAt: z.ZodNullable<z.ZodISODateTime>;
+        deletedAt: z.ZodNullable<z.ZodISODateTime>;
+        failureCode: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>>;
+    hasMore: z.ZodBoolean;
+    nextCursor: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;
+//# sourceMappingURL=output-schema.d.ts.map

package/dist/domain/output-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-schema.d.ts","sourceRoot":"","sources":["../../src/domain/output-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,kGAAkG;AAClG,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAe9B,CAAC;AAEH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAI1B,CAAC"}

package/dist/domain/output-schema.js

@@ -0,0 +1,25 @@
+import { z } from 'zod';
+import { IMAGE_MAX_BYTES, mediaTypeSchema, statusSchema } from './schema.js';
+/** Public metadata only; persistence paths, request fingerprints and credentials stay private. */
+export const imageMetadataSchema = z.strictObject({
+    id: z.uuid().describe('不可变图片 ID；用于 read-image、delete-image 和 images://image/{id}。'),
+    originalFilename: z.string().max(200).nullable().describe('上传时提供的原始文件名；未提供时为 null，仅作搜索元数据。'),
+    status: statusSchema.describe('uploading 上传中；ready 原图可读；failed 上传失败；deleting 原图已禁用、清理中；deleted 已删除。'),
+    url: z.url().nullable().describe('仅 ready 状态返回公开原图 URL，其余为 null。公开 GET/HEAD 无需身份或防盗链参数，缓存副本不能随删除撤销。'),
+    mediaType: mediaTypeSchema.nullable().describe('服务检测出的真实图片 MIME type；尚未完成检测时为 null。'),
+    byteSize: z.number().int().min(1).max(IMAGE_MAX_BYTES).nullable().describe('原始文件字节数；尚未完成检测时为 null，不是 Base64 字符数。'),
+    width: z.number().int().positive().nullable().describe('图片宽度，单位像素；尚未完成检测时为 null。'),
+    height: z.number().int().positive().nullable().describe('图片高度，单位像素；动画为单帧高度，尚未完成检测时为 null。'),
+    sha256: z.string().regex(/^[a-f0-9]{64}$/).nullable().describe('原始字节 SHA-256；删除时用作 expectedSha256，尚未完成检测时为 null。不表示跨图片去重。'),
+    createdBy: z.string().min(1).max(128).describe('创建图片的 MCP clientId，缺失时为 subject。'),
+    createdAt: z.iso.datetime().describe('数据库记录创建时间，UTC ISO-8601；list-image 时间筛选基于此字段。'),
+    readyAt: z.iso.datetime().nullable().describe('原图持久化并提交 ready 的 UTC 时间；未就绪时为 null，删除后保留。'),
+    deletedAt: z.iso.datetime().nullable().describe('完成删除的 UTC 时间；未完成时为 null，重复删除保留首次时间。'),
+    failureCode: z.string().max(64).nullable().describe('上传失败或启动恢复记录的安全错误码；无失败时为 null，不含底层异常或本地路径。'),
+});
+export const imagePageSchema = z.strictObject({
+    items: z.array(imageMetadataSchema).max(100).describe('当前页图片元数据；空结果为 []，不返回图片字节、本地路径或上传幂等键。'),
+    hasMore: z.boolean().describe('是否存在下一页；false 时停止翻页。分页不是跨请求的数据库快照。'),
+    nextCursor: z.string().min(1).max(2048).nullable().describe('下一页续查值：保持筛选及排序，将此值作为 cursor；hasMore=false 时为 null。'),
+});
+//# sourceMappingURL=output-schema.js.map

package/dist/domain/output-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-schema.js","sourceRoot":"","sources":["../../src/domain/output-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE7E,kGAAkG;AAClG,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,YAAY,CAAC;IAChD,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,4DAA4D,CAAC;IACnF,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IAC5F,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC,sEAAsE,CAAC;IACrG,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mEAAmE,CAAC;IACrG,SAAS,EAAE,eAAe,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IACrF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;IAClH,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;IAClF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IAC3F,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2DAA2D,CAAC;IAC3H,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IAClF,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;IACpF,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IAC1F,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IACtF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;CACjG,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,YAAY,CAAC;IAC5C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,sCAAsC,CAAC;IAC7F,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;IACnE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oDAAoD,CAAC;CAClH,CAAC,CAAC"}

package/dist/domain/schema.d.ts

@@ -0,0 +1,69 @@
+import { z } from 'zod';
+export declare const IMAGE_MAX_BYTES: number;
+export declare const BASE64_MAX_BYTES: number;
+export declare const mediaTypeSchema: z.ZodEnum<{
+    "image/avif": "image/avif";
+    "image/gif": "image/gif";
+    "image/jpeg": "image/jpeg";
+    "image/png": "image/png";
+    "image/webp": "image/webp";
+}>;
+export declare const statusSchema: z.ZodEnum<{
+    deleted: "deleted";
+    deleting: "deleting";
+    failed: "failed";
+    ready: "ready";
+    uploading: "uploading";
+}>;
+export declare const uploadImageSchema: z.ZodObject<{
+    idempotencyKey: z.ZodString;
+    filename: z.ZodOptional<z.ZodString>;
+    source: z.ZodLiteral<"base64">;
+    base64: z.ZodString;
+}, z.core.$strict>;
+export declare const readImageSchema: z.ZodObject<{
+    id: z.ZodUUID;
+}, z.core.$strict>;
+export declare const deleteImageSchema: z.ZodObject<{
+    id: z.ZodUUID;
+    expectedSha256: z.ZodString;
+}, z.core.$strict>;
+export declare const listImageSchema: z.ZodObject<{
+    createdFrom: z.ZodOptional<z.ZodPipe<z.ZodISODateTime, z.ZodTransform<string, string>>>;
+    createdTo: z.ZodOptional<z.ZodPipe<z.ZodISODateTime, z.ZodTransform<string, string>>>;
+    mediaTypes: z.ZodOptional<z.ZodPipe<z.ZodArray<z.ZodEnum<{
+        "image/avif": "image/avif";
+        "image/gif": "image/gif";
+        "image/jpeg": "image/jpeg";
+        "image/png": "image/png";
+        "image/webp": "image/webp";
+    }>>, z.ZodTransform<("image/avif" | "image/gif" | "image/jpeg" | "image/png" | "image/webp")[], ("image/avif" | "image/gif" | "image/jpeg" | "image/png" | "image/webp")[]>>>;
+    filenameContains: z.ZodOptional<z.ZodString>;
+    minBytes: z.ZodOptional<z.ZodNumber>;
+    maxBytes: z.ZodOptional<z.ZodNumber>;
+    minWidth: z.ZodOptional<z.ZodNumber>;
+    maxWidth: z.ZodOptional<z.ZodNumber>;
+    minHeight: z.ZodOptional<z.ZodNumber>;
+    maxHeight: z.ZodOptional<z.ZodNumber>;
+    statuses: z.ZodPipe<z.ZodDefault<z.ZodArray<z.ZodEnum<{
+        deleted: "deleted";
+        deleting: "deleting";
+        failed: "failed";
+        ready: "ready";
+        uploading: "uploading";
+    }>>>, z.ZodTransform<("deleted" | "deleting" | "failed" | "ready" | "uploading")[], ("deleted" | "deleting" | "failed" | "ready" | "uploading")[]>>;
+    createdBy: z.ZodOptional<z.ZodString>;
+    sha256: z.ZodOptional<z.ZodString>;
+    order: z.ZodDefault<z.ZodEnum<{
+        asc: "asc";
+        desc: "desc";
+    }>>;
+    limit: z.ZodDefault<z.ZodNumber>;
+    cursor: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type ListImageInput = z.infer<typeof listImageSchema>;
+export type ListImageRequest = z.input<typeof listImageSchema>;
+export type ReadImageInput = z.infer<typeof readImageSchema>;
+export type UploadImageInput = z.infer<typeof uploadImageSchema>;
+export type DeleteImageInput = z.infer<typeof deleteImageSchema>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/domain/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/domain/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,eAAe,QAAmB,CAAC;AAChD,eAAO,MAAM,gBAAgB,QAAkB,CAAC;AAChD,eAAO,MAAM,eAAe;;;;;;EAA+E,CAAC;AAC5G,eAAO,MAAM,YAAY;;;;;;EAAkE,CAAC;AAK5F,eAAO,MAAM,iBAAiB;;;;;kBAG5B,CAAC;AACH,eAAO,MAAM,eAAe;;kBAA+F,CAAC;AAC5H,eAAO,MAAM,iBAAiB;;;kBAA0K,CAAC;AAIzM,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAsB1B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAC7D,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAC/D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAC7D,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AACjE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC"}