appos 0.3.5-0 → 0.3.6-0

package/dist/exports/api/workflows/api/storage.d.mts

@@ -1,396 +0,0 @@
-import { StorageBlob, StorageRelationsConfig, StorageTables } from "./storage-schema.mjs";
-import { ImageTransformations } from "../generate-image-variant.mjs";
-import { NodePgDatabase } from "drizzle-orm/node-postgres";
-import { Pool } from "pg";
-import { DriveManager } from "flydrive";
-import { FSDriverOptions } from "flydrive/drivers/fs/types";
-import { S3DriverOptions } from "flydrive/drivers/s3/types";
-
-//#region src/api/storage.d.ts
-
-/**
- * Database type with storage schema and relations.
- */
-type DatabaseWithStorage = NodePgDatabase<StorageTables, StorageRelationsConfig> & {
-  $client: Pool;
-};
-/**
- * Type of the storage service instance.
- */
-type Storage<TDisks extends Record<string, FSDriverOptions | S3DriverOptions> = Record<string, FSDriverOptions | S3DriverOptions>, TTableNames extends string = string, TAttachments extends Partial<Record<TTableNames, readonly string[]>> = Record<never, never>> = StorageService<Extract<keyof TDisks, string>, TTableNames, TAttachments>;
-/**
- * Helper type to extract attachment name for a specific table.
- */
-type AttachmentName<TAttachments extends Partial<Record<string, readonly string[]>>, TTable extends string> = TTable extends keyof TAttachments ? TAttachments[TTable] extends readonly (infer N)[] ? N : string : string;
-/**
- * Storage service for blob operations.
- *
- * This service uses a dual-drive architecture when configured:
- * - `drive`: For actual file operations (upload, delete, read) using internal endpoints
- * - `signedUrlDrive`: For generating browser-accessible signed URLs with public endpoints
- *
- * This allows containers to use fast internal network for operations while
- * generating URLs that work in end-user browsers.
- *
- * @template TDiskNames - Union of disk names (e.g., "private" | "public")
- * @template TTableNames - Union of table names for type-safe attachment methods
- * @template TAttachments - Mapping of table names to valid attachment names
- */
-declare class StorageService<TDiskNames extends string = string, TTableNames extends string = string, TAttachments extends Partial<Record<TTableNames, readonly string[]>> = Record<never, never>> {
-  /**
-   * The drive manager for file operations.
-   */
-  readonly drive: DriveManager<any>;
-  /**
-   * The database instance with storage schema and relations.
-   */
-  readonly db: DatabaseWithStorage;
-  /**
-   * The default disk name.
-   */
-  readonly defaultDisk: TDiskNames;
-  /**
-   * Cron expression for unattached blob purge schedule.
-   *
-   * @default "0 0 * * *"
-   */
-  readonly purgeCron?: string;
-  /**
-   * Secret key for signing blob IDs.
-   */
-  readonly secret?: string;
-  /**
-   * Drive manager for generating signed URLs (public endpoint).
-   */
-  readonly signedUrlDrive: DriveManager<any>;
-  constructor(drive: DriveManager<any>, db: DatabaseWithStorage, defaultDisk: TDiskNames, signedUrlDrive: DriveManager<any>, purgeCron?: string, secret?: string);
-  /**
-   * Create a blob record and upload file.
-   */
-  createBlob(file: Buffer | Uint8Array, options: {
-    filename: string;
-    contentType?: string;
-    metadata?: Record<string, any>;
-    serviceName?: TDiskNames;
-    prefix?: string;
-  }): Promise<StorageBlob>;
-  /**
-   * Get blob by ID.
-   */
-  getBlob(id: string): Promise<StorageBlob | null>;
-  /**
-   * Download blob content.
-   */
-  downloadBlob(id: string): Promise<Buffer | null>;
-  /**
-   * Delete blob and its content.
-   */
-  deleteBlob(id: string): Promise<boolean>;
-  /**
-   * Get signed URL for blob. If blob is on public service, returns permanent
-   * URL instead.
-   */
-  getSignedUrl(id: string, options?: {
-    expiresIn?: number;
-    disposition?: "inline" | "attachment";
-    filename?: string;
-  }): Promise<string | null>;
-  /**
-   * Get permanent public URL (no expiration).
-   * Works for blobs on public storage service.
-   */
-  getPublicUrl(id: string): Promise<string | null>;
-  /**
-   * Create attachment between a record and blob.
-   *
-   * @param recordType - The table name (e.g., 'users')
-   * @param recordId - The record ID
-   * @param blobId - The blob ID to attach
-   * @param name - The attachment name (e.g., 'avatar')
-   * @param replaceExisting - If true, replaces existing attachment with same name (for one-to-one)
-   */
-  createAttachment(recordType: string, recordId: string, blobId: string, name: string, replaceExisting?: boolean): Promise<{
-    id: string;
-    createdAt: string;
-    name: string;
-    recordType: string;
-    recordId: string;
-    blobId: string;
-  }>;
-  /**
-   * Get attachments for a record with their associated blobs.
-   */
-  getAttachments(recordType: string, recordId: string, name?: string): Promise<{
-    id: string;
-    createdAt: string;
-    name: string;
-    recordType: string;
-    recordId: string;
-    blobId: string;
-    blob: {
-      metadata: unknown;
-      id: string;
-      key: string;
-      filename: string;
-      contentType: string | null;
-      serviceName: string;
-      byteSize: number;
-      checksum: string | null;
-      createdAt: string;
-    } | null;
-  }[]>;
-  /**
-   * Get attachments by their IDs with associated blobs.
-   *
-   * @param attachmentIds - Array of attachment IDs to fetch.
-   */
-  getAttachmentsByIds(attachmentIds: string[]): Promise<{
-    id: string;
-    createdAt: string;
-    name: string;
-    recordType: string;
-    recordId: string;
-    blobId: string;
-    blob: {
-      metadata: unknown;
-      id: string;
-      key: string;
-      filename: string;
-      contentType: string | null;
-      serviceName: string;
-      byteSize: number;
-      checksum: string | null;
-      createdAt: string;
-    } | null;
-  }[]>;
-  /**
-   * Delete a single attachment by ID.
-   */
-  deleteAttachment(attachmentId: string): Promise<boolean>;
-  /**
-   * Delete attachments for a record (without deleting the blobs).
-   */
-  deleteAttachments(recordType: string, recordId: string, name?: string): Promise<number>;
-  /**
-   * Get direct upload credentials (for S3). Also creates a pending blob record
-   * that will be finalized after upload.
-   */
-  getDirectUploadUrl(options: {
-    contentType?: string;
-    expiresIn?: number;
-    filename: string;
-    metadata?: Record<string, any>;
-    serviceName?: TDiskNames;
-  }): Promise<{
-    blobId: string;
-    headers?: Record<string, string>;
-    key: string;
-    url: string;
-  } | null>;
-  /**
-   * Finalize a direct upload by updating blob metadata. Call this after the
-   * client has uploaded to S3.
-   */
-  finalizeDirectUpload(blobId: string, actualSize: number): Promise<void>;
-  /**
-   * Update blob metadata (for automatic extraction).
-   */
-  updateBlobMetadata(blobId: string, metadata: Record<string, any>): Promise<void>;
-  /**
-   * Get existing variant or return null.
-   */
-  getVariant(blobId: string, transformations: ImageTransformations): Promise<StorageBlob | null>;
-  /**
-   * Create variant blob and record.
-   */
-  createVariant(blobId: string, transformations: ImageTransformations, variantBuffer: Buffer): Promise<StorageBlob>;
-  /**
-   * Get blobs that have no attachments (orphaned). Useful for cleanup jobs.
-   */
-  getUnattachedBlobs(options?: {
-    olderThan?: string;
-    limit?: number;
-  }): Promise<StorageBlob[]>;
-  /**
-   * Get pending blobs that were never finalized (stuck direct uploads).
-   */
-  getPendingBlobs(olderThan?: string): Promise<StorageBlob[]>;
-  /**
-   * Purge unattached blobs.
-   */
-  purgeUnattached(olderThan?: string): Promise<number>;
-  /**
-   * Create a signed, tamper-proof reference to a blob.
-   * Use findSigned() to resolve back to blob.
-   *
-   * Algorithm:
-   * 1. Create payload with blobId and expiration timestamp
-   * 2. JSON stringify and base64url encode the payload
-   * 3. Create HMAC-SHA256 signature of the encoded payload
-   * 4. Return payload.signature format
-   */
-  signedId(blobId: string, expiresIn?: number): string;
-  /**
-   * Find blob by signed ID. Returns null if invalid or expired.
-   * Uses constant-time comparison to prevent timing attacks.
-   *
-   * Algorithm:
-   * 1. Split signed ID into payload and signature
-   * 2. Decode and recompute expected signature
-   * 3. Use timingSafeEqual for constant-time comparison
-   * 4. Check expiration timestamp
-   * 5. Return blob if valid, null otherwise
-   */
-  findSigned(signedId: string): Promise<StorageBlob | null>;
-  /**
-   * Get a single attachment handle (one-to-one relationship).
-   * Similar to Rails' `has_one_attached :avatar`.
-   *
-   * Algorithm:
-   * Returns an object with methods to manage a single attachment:
-   * - attach(): Replace existing attachment with new blob
-   * - get(): Get attached blob or null
-   * - url(): Get signed URL
-   * - variant(): Get/generate image variant
-   * - purge(): Delete attachment and blob
-   *
-   * @template TTable - The table name (must be in TTableNames)
-   */
-  one<TTable extends TTableNames>(recordType: TTable, recordId: string, name: AttachmentName<TAttachments, TTable>): {
-    /**
-     * Attach a blob to this record (replaces existing).
-     * Auto-triggers extractBlobMetadata workflow.
-     */
-    attach(blobId: string): Promise<{
-      id: string;
-      createdAt: string;
-      name: string;
-      recordType: string;
-      recordId: string;
-      blobId: string;
-    }>;
-    /** Get the attached blob or null. */
-    get(): Promise<StorageBlob | null>;
-    /** Check if a blob is attached. */
-    attached(): Promise<boolean>;
-    /** Get signed URL or null. */
-    url(options?: {
-      expiresIn?: number;
-      disposition?: "inline" | "attachment";
-    }): Promise<string | null>;
-    /** Get permanent public URL or null. */
-    publicUrl(): Promise<string | null>;
-    /** Get blob metadata or null. */
-    metadata(): Promise<Record<string, unknown> | null>;
-    /** Check if metadata has been extracted. */
-    analyzed(): Promise<boolean>;
-    /** Check if blob supports preview/variant generation. */
-    representable(): Promise<boolean>;
-    /**
-     * Get variant URL. Auto-enqueues generation if not ready.
-     * Returns URL if variant exists, null if generating.
-     */
-    variant(transformations: ImageTransformations, expiresIn?: number): Promise<string | null>;
-    /**
-     * Get preview URL. Auto-enqueues generation if not ready.
-     * Returns URL if preview exists, null if generating.
-     */
-    preview(expiresIn?: number, timeInSeconds?: number): Promise<string | null>;
-    /** Detach blob from record (keeps blob for reuse). */
-    detach(): Promise<boolean>;
-    /** Delete attachment AND blob immediately. */
-    purge(): Promise<boolean>;
-    /** Enqueue attachment and blob deletion in background. */
-    purgeLater(): Promise<boolean>;
-    /** Download blob content as Buffer. */
-    download(): Promise<Buffer | null>;
-    /** Download to temp file, run callback, auto-cleanup. */
-    open<T>(callback: (filePath: string) => Promise<T> | T): Promise<T | null>;
-    /**
-     * Smart representation - variant for images, preview for videos/PDFs.
-     * Auto-enqueues generation if not ready.
-     */
-    representation(transformations: ImageTransformations, expiresIn?: number): Promise<string | null>;
-    /** Get blob's byte size. */
-    byteSize(): Promise<number | null>;
-    /** Get blob's content type. */
-    contentType(): Promise<string | null>;
-    /** Get blob's filename. */
-    filename(): Promise<string | null>;
-    /** Get signed, tamper-proof ID for the blob. */
-    signedId(expiresIn?: number): Promise<string | null>;
-  };
-  /**
-   * Get a multiple attachment handle (one-to-many relationship).
-   * Similar to Rails' `has_many_attached :images`.
-   *
-   * Algorithm:
-   * Returns an object with methods to manage multiple attachments:
-   * - attach(): Add blobs (doesn't replace existing)
-   * - list(): Get all attached blobs
-   * - urls(): Get signed URLs for all
-   * - variants(): Get/generate variants for all
-   * - purge(): Delete all or specific attachment
-   *
-   * @template TTable - The table name (must be in TTableNames)
-   */
-  many<TTable extends TTableNames>(recordType: TTable, recordId: string, name: AttachmentName<TAttachments, TTable>): {
-    /**
-     * Attach one or more blobs (adds to existing, doesn't replace).
-     * Auto-triggers extractBlobMetadata for each blob.
-     */
-    attach(blobIds: string | string[]): Promise<{
-      id: string;
-      createdAt: string;
-      name: string;
-      recordType: string;
-      recordId: string;
-      blobId: string;
-    }[]>;
-    /** Get all attached blobs. */
-    list(): Promise<StorageBlob[]>;
-    /** Count attached blobs. */
-    count(): Promise<number>;
-    /** Get signed URLs for all blobs. */
-    urls(options?: {
-      expiresIn?: number;
-    }): Promise<string[]>;
-    /** Get public URLs for all blobs. */
-    publicUrls(): Promise<(string | null)[]>;
-    /** Get metadata for all blobs. */
-    metadata(): Promise<(Record<string, unknown> | null)[]>;
-    /** Check which blobs have been analyzed. */
-    analyzed(): Promise<boolean[]>;
-    /** Check which blobs support preview/variants. */
-    representable(): Promise<boolean[]>;
-    /** Get variant URLs for all blobs. Auto-enqueues if not ready. */
-    variants(transformations: ImageTransformations, expiresIn?: number): Promise<(string | null)[]>;
-    /** Get preview URLs for all blobs. Auto-enqueues if not ready. */
-    previews(expiresIn?: number, timeInSeconds?: number): Promise<(string | null)[]>;
-    /** Detach specific blob or all blobs (keeps blobs for reuse). */
-    detach(blobId?: string): Promise<number>;
-    /** Delete specific or all attachments AND blobs immediately. */
-    purge(blobId?: string): Promise<number>;
-    /** Enqueue specific or all attachments for background deletion. */
-    purgeLater(blobId?: string): Promise<number>;
-    /** Download all blobs as Buffers. */
-    download(): Promise<Buffer[]>;
-    /** Download each blob to temp file, run callback for each. */
-    open<T>(callback: (filePath: string, blob: StorageBlob) => Promise<T> | T): Promise<T[]>;
-    /**
-     * Smart representations - variant for images, preview for videos/PDFs.
-     * Auto-enqueues generation if not ready.
-     */
-    representations(transformations: ImageTransformations, expiresIn?: number): Promise<(string | null)[]>;
-    /** Get byte sizes for all blobs. */
-    byteSizes(): Promise<number[]>;
-    /** Get content types for all blobs. */
-    contentTypes(): Promise<(string | null)[]>;
-    /** Get filenames for all blobs. */
-    filenames(): Promise<string[]>;
-    /** Get signed IDs for all blobs. */
-    signedIds(expiresIn?: number): Promise<string[]>;
-  };
-}
-//#endregion
-export { Storage };

package/dist/exports/api/workflows/api/workflow.d.mts

@@ -1,24 +0,0 @@
-import "./container.mjs";
-import { z } from "zod";
-
-//#region src/api/workflow.d.ts
-
-/**
- * Handle to a running or completed workflow.
- */
-interface WorkflowHandle<TOutput> {
-  /**
-   * Get the current status of the workflow.
-   */
-  getStatus(): Promise<unknown>;
-  /**
-   * Wait for the workflow to complete and return its result.
-   */
-  getResult(): Promise<TOutput>;
-  /**
-   * The unique ID of this workflow execution.
-   */
-  workflowId: string;
-}
-//#endregion
-export { WorkflowHandle };

package/dist/exports/api/workflows/constants.mjs

@@ -1,23 +0,0 @@
-//#region src/constants.ts
-/**
-* Directory for public static assets.
-*
-* Expected structure:
-* - `<project-root>/public/` - Public directory root
-* - `<project-root>/public/locales/` - i18n translation files
-*
-* @default "public"
-*/
-const PUBLIC_DIR = process.env.NODE_ENV === "production" ? "client" : "public";
-/**
-* File extension for code files based on environment.
-*
-* In development: `.ts` (TypeScript source files)
-* In production: `.js` (bundled JavaScript files)
-*
-* @default "ts" in development, "js" in production
-*/
-const FILE_EXT = process.env.NODE_ENV === "production" ? "js" : "ts";
-
-//#endregion
-export {  };

package/dist/exports/api/workflows/extract-blob-metadata.mjs

@@ -1,132 +0,0 @@
-import { defineWorkflow } from "./api/workflow.mjs";
-import z$1 from "zod";
-import { join } from "node:path";
-import { ALL_FORMATS, BlobSource, Input } from "mediabunny";
-
-//#region src/api/workflows/extract-blob-metadata.ts
-const extractBlobMetadata = defineWorkflow({
-	input: z$1.object({ blobId: z$1.string() }),
-	async run({ container, input: { blobId }, step }) {
-		const blob = await step("fetch-blob", async () => {
-			return container.storage.primary.getBlob(blobId);
-		});
-		if (!blob) throw new Error(`Blob ${blobId} not found`);
-		const buffer = await step("download-blob", async () => {
-			return container.storage.primary.downloadBlob(blobId);
-		});
-		if (!buffer) throw new Error(`Failed to download blob ${blobId}`);
-		let metadata = {};
-		if (blob.contentType?.startsWith("image/")) metadata = await step("extract-image-metadata", async () => {
-			const sharp = (await import("sharp")).default;
-			const info = await sharp(buffer).metadata();
-			return {
-				width: info.width,
-				height: info.height,
-				format: info.format,
-				hasAlpha: info.hasAlpha,
-				space: info.space
-			};
-		});
-		else if (blob.contentType?.startsWith("video/") || blob.contentType?.startsWith("audio/")) metadata = await step("extract-media-metadata", async () => {
-			const uint8Array = new Uint8Array(buffer);
-			const input = new Input({
-				source: new BlobSource(new Blob([uint8Array], { type: blob.contentType || "video/mp4" })),
-				formats: ALL_FORMATS
-			});
-			const duration = await input.computeDuration();
-			const tags = await input.getMetadataTags();
-			let videoData = {};
-			let audioData = {};
-			let hasVideo = false;
-			let hasAudio = false;
-			try {
-				const videoTrack = await input.getPrimaryVideoTrack();
-				if (videoTrack) {
-					hasVideo = true;
-					const displayAspectRatio = videoTrack.displayWidth && videoTrack.displayHeight ? videoTrack.displayWidth / videoTrack.displayHeight : null;
-					videoData = {
-						width: videoTrack.displayWidth,
-						height: videoTrack.displayHeight,
-						rotation: videoTrack.rotation,
-						angle: videoTrack.rotation,
-						displayAspectRatio
-					};
-				}
-			} catch {}
-			try {
-				const audioTrack = await input.getPrimaryAudioTrack();
-				if (audioTrack) {
-					hasAudio = true;
-					audioData = {
-						sampleRate: audioTrack.sampleRate,
-						channels: audioTrack.numberOfChannels
-					};
-				}
-			} catch {}
-			return {
-				duration,
-				video: hasVideo,
-				audio: hasAudio,
-				...videoData,
-				...audioData,
-				tags
-			};
-		});
-		else if (blob.contentType === "application/pdf") metadata = await step("extract-pdf-metadata", async () => {
-			try {
-				const pdfjsLib = await import("pdfjs-dist/legacy/build/pdf.mjs");
-				const standardFontDataUrl = `${join(process.cwd(), "node_modules/pdfjs-dist/standard_fonts")}/`;
-				const pdf = await pdfjsLib.getDocument({
-					data: new Uint8Array(buffer),
-					standardFontDataUrl
-				}).promise;
-				const pdfMetadata = await pdf.getMetadata();
-				const viewport = (await pdf.getPage(1)).getViewport({ scale: 1 });
-				const info = pdfMetadata.info;
-				return {
-					pageCount: pdf.numPages,
-					width: viewport.width,
-					height: viewport.height,
-					title: info?.Title || null,
-					author: info?.Author || null,
-					subject: info?.Subject || null,
-					keywords: info?.Keywords || null,
-					creator: info?.Creator || null,
-					producer: info?.Producer || null,
-					creationDate: info?.CreationDate || null,
-					modificationDate: info?.ModDate || null,
-					pdfVersion: info?.PDFFormatVersion || null
-				};
-			} catch (error) {
-				container.logger.error({
-					error,
-					errorMessage: error instanceof Error ? error.message : String(error),
-					errorStack: error instanceof Error ? error.stack : void 0,
-					errorCode: error?.code,
-					blobId
-				}, "Failed to extract PDF metadata");
-				return {
-					error: "Failed to extract PDF metadata",
-					errorMessage: error instanceof Error ? error.message : String(error)
-				};
-			}
-		});
-		await step("save-metadata", async () => {
-			await container.storage.primary.updateBlobMetadata(blobId, {
-				...metadata,
-				analyzed: true
-			});
-		});
-		container.logger.info({
-			blobId,
-			metadata
-		}, "Metadata extracted");
-		return {
-			...metadata,
-			analyzed: true
-		};
-	}
-});
-
-//#endregion
-export { extractBlobMetadata };

package/dist/exports/api/workflows/generate-image-variant.d.mts

@@ -1,63 +0,0 @@
-import "./api/workflow.mjs";
-import "./api/container.mjs";
-import { z } from "zod";
-
-//#region src/api/workflows/generate-image-variant.d.ts
-
-/**
- * Image transformations schema.
- * Supports resize, rotate, flip, flop, sharpen, blur, grayscale, format conversion.
- */
-declare const transformationsSchema: z.ZodObject<{
-  resize: z.ZodOptional<z.ZodObject<{
-    width: z.ZodOptional<z.ZodNumber>;
-    height: z.ZodOptional<z.ZodNumber>;
-    fit: z.ZodOptional<z.ZodEnum<{
-      fill: "fill";
-      cover: "cover";
-      contain: "contain";
-      inside: "inside";
-      outside: "outside";
-    }>>;
-    position: z.ZodOptional<z.ZodEnum<{
-      left: "left";
-      right: "right";
-      top: "top";
-      "right top": "right top";
-      "right bottom": "right bottom";
-      bottom: "bottom";
-      "left bottom": "left bottom";
-      "left top": "left top";
-      centre: "centre";
-    }>>;
-    kernel: z.ZodOptional<z.ZodEnum<{
-      nearest: "nearest";
-      linear: "linear";
-      cubic: "cubic";
-      mitchell: "mitchell";
-      lanczos2: "lanczos2";
-      lanczos3: "lanczos3";
-    }>>;
-  }, z.core.$strip>>;
-  rotate: z.ZodOptional<z.ZodNumber>;
-  flip: z.ZodOptional<z.ZodBoolean>;
-  flop: z.ZodOptional<z.ZodBoolean>;
-  sharpen: z.ZodOptional<z.ZodBoolean>;
-  blur: z.ZodOptional<z.ZodNumber>;
-  grayscale: z.ZodOptional<z.ZodBoolean>;
-  format: z.ZodOptional<z.ZodEnum<{
-    jpeg: "jpeg";
-    png: "png";
-    webp: "webp";
-    avif: "avif";
-    gif: "gif";
-  }>>;
-  quality: z.ZodOptional<z.ZodNumber>;
-  preview: z.ZodOptional<z.ZodLiteral<true>>;
-}, z.core.$strip>;
-/**
- * Types for image transformations.
- */
-type ImageTransformations = z.infer<typeof transformationsSchema>;
-//#endregion
-export { ImageTransformations };