boondmanager-mcp-server 2.18.0 → 2.19.1

package/dist/services/upload-relay.d.ts

@@ -0,0 +1,88 @@
+/** How long a slot stays usable after creation. */
+export declare const SLOT_TTL_MS: number;
+export interface SlotHandle {
+    /** Backend-private reference to the stored object (e.g. Graph folder id). */
+    ref: string;
+    /** Pre-authenticated URL the client PUTs the file to (single request). */
+    uploadUrl: string;
+    expiresAt: Date;
+}
+export interface StoredObject {
+    size: number;
+    /** Short-lived, pre-authenticated URL BoondManager can download. */
+    downloadUrl: string;
+}
+export interface RelayBackend {
+    readonly name: string;
+    createSlot(slotId: string, filename: string): Promise<SlotHandle>;
+    /** `undefined` when nothing was uploaded to the slot yet. */
+    stat(ref: string, filename: string): Promise<StoredObject | undefined>;
+    /** First bytes of the stored object, for type sniffing. */
+    head(downloadUrl: string, bytes: number): Promise<Buffer>;
+    purge(ref: string): Promise<void>;
+}
+export interface SharePointConfig {
+    tenantId: string;
+    clientId: string;
+    clientSecret: string;
+    /** `host:/sites/path` (Graph site key). */
+    site: string;
+    library: string;
+}
+/** Accept `https://host/sites/x`, `host/sites/x` or `host:/sites/x`. */
+export declare function normalizeSiteKey(raw: string): string;
+/** SharePoint forbids `" * : < > ? / \ |` and `#`/`%` cause URL trouble. */
+export declare function sanitizeSharePointName(filename: string): string;
+export declare class SharePointRelay implements RelayBackend {
+    private readonly cfg;
+    readonly name = "sharepoint";
+    private token?;
+    private driveId?;
+    constructor(cfg: SharePointConfig);
+    private accessToken;
+    private graph;
+    private graphOk;
+    private drive;
+    createSlot(slotId: string, filename: string): Promise<SlotHandle>;
+    stat(ref: string, filename: string): Promise<StoredObject | undefined>;
+    /** `/content` answers 302 to the same pre-authenticated URL; read it without following. */
+    private contentRedirect;
+    head(downloadUrl: string, bytes: number): Promise<Buffer>;
+    purge(ref: string): Promise<void>;
+}
+/** The configured backend, or a French explanation of why there is none. */
+export declare function relayFromEnv(env?: NodeJS.ProcessEnv): RelayBackend | string;
+export interface CreatedSlot {
+    uploadSlot: string;
+    uploadUrl: string;
+    expiresAt: string;
+    maxBytes: number;
+    filename: string;
+}
+export interface ClaimedUpload {
+    downloadUrl: string;
+    filename: string;
+    contentType: string;
+    size: number;
+    /** Purge the stored object; call once BoondManager has fetched it. */
+    release: () => Promise<void>;
+}
+/**
+ * In-memory registry of open slots. Single-use: a claimed slot is removed
+ * before BoondManager is called, so a retry needs a new slot. Expired slots
+ * are purged opportunistically whenever a new one is created.
+ */
+export declare class UploadRelay {
+    private readonly env;
+    private readonly slots;
+    private cachedBackend?;
+    constructor(env?: NodeJS.ProcessEnv);
+    private backend;
+    private maxBytes;
+    private sweep;
+    open(filename: string): Promise<CreatedSlot>;
+    claim(uploadSlot: string): Promise<ClaimedUpload>;
+}
+/** Process-wide registry (one server process = one set of slots). */
+export declare const uploadRelay: UploadRelay;
+//# sourceMappingURL=upload-relay.d.ts.map

package/dist/services/upload-relay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload-relay.d.ts","sourceRoot":"","sources":["../../src/services/upload-relay.ts"],"names":[],"mappings":"AA2BA,mDAAmD;AACnD,eAAO,MAAM,WAAW,QAAiB,CAAC;AAI1C,MAAM,WAAW,UAAU;IACzB,6EAA6E;IAC7E,GAAG,EAAE,MAAM,CAAC;IACZ,0EAA0E;IAC1E,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAClE,6DAA6D;IAC7D,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAAC;IACvE,2DAA2D;IAC3D,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnC;AAMD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,2CAA2C;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wEAAwE;AACxE,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAQpD;AAED,4EAA4E;AAC5E,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAS/D;AAED,qBAAa,eAAgB,YAAW,YAAY;IAKtC,OAAO,CAAC,QAAQ,CAAC,GAAG;IAJhC,QAAQ,CAAC,IAAI,gBAAgB;IAC7B,OAAO,CAAC,KAAK,CAAC,CAAuC;IACrD,OAAO,CAAC,OAAO,CAAC,CAAS;gBAEI,GAAG,EAAE,gBAAgB;YAEpC,WAAW;YAyBX,KAAK;YAoBL,OAAO;YAWP,KAAK;IAqBb,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAuBjE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;IAoC5E,2FAA2F;YAC7E,eAAe;IAUvB,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IASzD,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAWxC;AAMD,4EAA4E;AAC5E,wBAAgB,YAAY,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,YAAY,GAAG,MAAM,CAyBxF;AAQD,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,sEAAsE;IACtE,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B;AAED;;;;GAIG;AACH,qBAAa,WAAW;IAIV,OAAO,CAAC,QAAQ,CAAC,GAAG;IAHhC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA2B;IACjD,OAAO,CAAC,aAAa,CAAC,CAAe;gBAER,GAAG,GAAE,MAAM,CAAC,UAAwB;IAEjE,OAAO,CAAC,OAAO;IAQf,OAAO,CAAC,QAAQ;YAIF,KAAK;IAUb,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAoB5C,KAAK,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;CAiDxD;AAED,qEAAqE;AACrE,eAAO,MAAM,WAAW,aAAoB,CAAC"}

package/dist/services/upload-relay.js

@@ -0,0 +1,325 @@
+/**
+ * Upload relay for files that live neither at a public URL nor on the
+ * server's host — typically a conversation attachment, which sits in the MCP
+ * client's code-execution sandbox. The model cannot re-emit those bytes
+ * reliably (see `fileContent`), so they must travel outside its output:
+ *
+ *   1. `boond_documents_upload_slot` asks the relay for a single-use,
+ *      pre-authenticated upload URL on an object store the operator controls;
+ *   2. the client's sandbox PUTs the file there (`curl`), bytes never passing
+ *      through the model;
+ *   3. `boond_documents_create({ uploadSlot })` checks the stored file (size,
+ *      magic bytes), hands BoondManager a short-lived pre-authenticated
+ *      download URL through the existing `fileUrl` mechanism, then purges the
+ *      file — permanently, bypassing the recycle bin when the store allows.
+ *
+ * Store credentials stay on the server; the client only ever sees URLs scoped
+ * to one file and one slot. Off unless `BOOND_MCP_UPLOAD_RELAY` is set.
+ *
+ * Backends implement {@link RelayBackend}; `sharepoint` (Microsoft Graph,
+ * app-only `Sites.Selected`) is the first.
+ */
+import { randomUUID } from "node:crypto";
+import { extname } from "node:path";
+import { readPositiveInt, readString } from "../config/env.js";
+import { DEFAULT_UPLOAD_MAX_BYTES } from "../constants.js";
+import { sniffDocumentType, UploadRejectedError } from "./upload-source.js";
+/** How long a slot stays usable after creation. */
+export const SLOT_TTL_MS = 15 * 60 * 1000;
+const GRAPH = "https://graph.microsoft.com/v1.0";
+const REQUEST_TIMEOUT_MS = 30_000;
+/** Accept `https://host/sites/x`, `host/sites/x` or `host:/sites/x`. */
+export function normalizeSiteKey(raw) {
+    const s = raw
+        .trim()
+        .replace(/^https?:\/\//i, "")
+        .replace(/\/+$/, "");
+    if (s.includes(":/"))
+        return s;
+    const slash = s.indexOf("/");
+    return slash === -1 ? s : `${s.slice(0, slash)}:${s.slice(slash)}`;
+}
+/** SharePoint forbids `" * : < > ? / \ |` and `#`/`%` cause URL trouble. */
+export function sanitizeSharePointName(filename) {
+    const cleaned = filename
+        .replace(/["*:<>?/\\|#%]/g, "_")
+        .split("")
+        .filter((c) => c.charCodeAt(0) >= 0x20)
+        .join("")
+        .trim()
+        .replace(/^\.+|\.+$/g, "");
+    return (cleaned.length > 0 ? cleaned : "document").slice(0, 200);
+}
+export class SharePointRelay {
+    cfg;
+    name = "sharepoint";
+    token;
+    driveId;
+    constructor(cfg) {
+        this.cfg = cfg;
+    }
+    async accessToken() {
+        if (this.token && this.token.expiresAt > Date.now() + 60_000)
+            return this.token.value;
+        const body = new URLSearchParams({
+            grant_type: "client_credentials",
+            client_id: this.cfg.clientId,
+            client_secret: this.cfg.clientSecret,
+            scope: "https://graph.microsoft.com/.default",
+        });
+        const res = await fetch(`https://login.microsoftonline.com/${encodeURIComponent(this.cfg.tenantId)}/oauth2/v2.0/token`, { method: "POST", body, signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS) });
+        const json = (await res.json().catch(() => ({})));
+        if (!res.ok || !json.access_token) {
+            // Never echo the request (it carries the secret); the error code is enough.
+            throw new Error(`Relais SharePoint : authentification Entra ID refusée (${json.error ?? res.status}).`);
+        }
+        this.token = { value: json.access_token, expiresAt: Date.now() + (json.expires_in ?? 3600) * 1000 };
+        return this.token.value;
+    }
+    async graph(method, path, body) {
+        const res = await fetch(`${GRAPH}${path}`, {
+            method,
+            headers: {
+                Authorization: `Bearer ${await this.accessToken()}`,
+                ...(body === undefined ? {} : { "Content-Type": "application/json" }),
+            },
+            body: body === undefined ? null : JSON.stringify(body),
+            signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+        });
+        const text = await res.text();
+        let json = {};
+        try {
+            if (text)
+                json = JSON.parse(text);
+        }
+        catch {
+            // Non-JSON error page (proxy, throttling HTML): the status says enough.
+        }
+        return { status: res.status, json };
+    }
+    async graphOk(method, path, body) {
+        const { status, json } = await this.graph(method, path, body);
+        if (status >= 400) {
+            const e = json.error;
+            throw new Error(`Relais SharePoint : ${method} ${path.split("?")[0]} → ${status} ${e?.code ?? ""} ${e?.message ?? ""}`.trim());
+        }
+        return json;
+    }
+    async drive() {
+        if (this.driveId)
+            return this.driveId;
+        const site = await this.graphOk("GET", `/sites/${this.cfg.site}?$select=id`);
+        const drives = await this.graphOk("GET", `/sites/${site.id}/drives?$select=id,name,webUrl`);
+        const wanted = this.cfg.library.toLowerCase();
+        const match = drives.value.find((d) => d.name.toLowerCase() === wanted || (d.webUrl ?? "").toLowerCase().endsWith(`/${wanted}`));
+        if (!match) {
+            const names = drives.value.map((d) => d.name).join(", ");
+            throw new Error(`Relais SharePoint : bibliothèque « ${this.cfg.library} » introuvable sur le site (trouvées : ${names}).`);
+        }
+        this.driveId = match.id;
+        return match.id;
+    }
+    async createSlot(slotId, filename) {
+        const driveId = await this.drive();
+        // One folder per slot keeps the file's own name intact — BoondManager
+        // names the document after the download's Content-Disposition.
+        const folder = await this.graphOk("POST", `/drives/${driveId}/root/children`, {
+            name: `mcp-${slotId}`,
+            folder: {},
+            "@microsoft.graph.conflictBehavior": "fail",
+        });
+        const name = encodeURIComponent(sanitizeSharePointName(filename));
+        const session = await this.graphOk("POST", `/drives/${driveId}/items/${folder.id}:/${name}:/createUploadSession`, { item: { "@microsoft.graph.conflictBehavior": "fail" } });
+        const graphExpiry = session.expirationDateTime ? Date.parse(session.expirationDateTime) : Infinity;
+        return {
+            ref: folder.id,
+            uploadUrl: session.uploadUrl,
+            expiresAt: new Date(Math.min(Date.now() + SLOT_TTL_MS, graphExpiry)),
+        };
+    }
+    async stat(ref, filename) {
+        const driveId = await this.drive();
+        // List the slot's own folder instead of addressing the file by name: the
+        // folder is private to the slot, so whatever file it holds is the upload,
+        // and a name normalised differently by SharePoint cannot cause a miss.
+        // No $select: SharePoint does not reliably return the download-URL
+        // annotation under $select with app-only tokens.
+        const { status, json } = await this.graph("GET", `/drives/${driveId}/items/${ref}/children`);
+        if (status === 404) {
+            throw new UploadRejectedError("Dossier de transit du slot introuvable (supprimé à la main ?). Créer un nouveau slot avec `boond_documents_upload_slot`.");
+        }
+        if (status >= 400)
+            throw new Error(`Relais SharePoint : lecture du dossier de transit → ${status}.`);
+        const files = (json.value ?? []).filter((item) => item.file !== undefined);
+        if (files.length === 0)
+            return undefined;
+        const wanted = sanitizeSharePointName(filename).toLowerCase();
+        const item = files.find((f) => (f.name ?? "").toLowerCase() === wanted) ?? files[0];
+        if (item.size === undefined)
+            return undefined;
+        const downloadUrl = item["@microsoft.graph.downloadUrl"] ?? (await this.contentRedirect(driveId, item.id));
+        if (!downloadUrl) {
+            throw new Error(`Relais SharePoint : fichier déposé trouvé (${item.size} octets) mais Graph ne fournit pas d'URL de lecture temporaire.`);
+        }
+        return { size: item.size, downloadUrl };
+    }
+    /** `/content` answers 302 to the same pre-authenticated URL; read it without following. */
+    async contentRedirect(driveId, itemId) {
+        const res = await fetch(`${GRAPH}/drives/${driveId}/items/${itemId}/content`, {
+            headers: { Authorization: `Bearer ${await this.accessToken()}` },
+            redirect: "manual",
+            signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+        });
+        await res.body?.cancel().catch(() => undefined);
+        return res.status >= 300 && res.status < 400 ? (res.headers.get("location") ?? undefined) : undefined;
+    }
+    async head(downloadUrl, bytes) {
+        const res = await fetch(downloadUrl, {
+            headers: { Range: `bytes=0-${bytes - 1}` },
+            signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+        });
+        if (!res.ok)
+            throw new Error(`Relais SharePoint : lecture de l'en-tête du fichier → ${res.status}.`);
+        return Buffer.from(await res.arrayBuffer()).subarray(0, bytes);
+    }
+    async purge(ref) {
+        const driveId = await this.drive();
+        // permanentDelete skips the recycle bin (RGPD: CVs, payslips...). Fall
+        // back to a regular delete if the tenant refuses it.
+        const { status } = await this.graph("POST", `/drives/${driveId}/items/${ref}/permanentDelete`);
+        if (status < 400 || status === 404)
+            return;
+        const del = await this.graph("DELETE", `/drives/${driveId}/items/${ref}`);
+        if (del.status >= 400 && del.status !== 404) {
+            throw new Error(`Relais SharePoint : suppression du dossier de transit → ${del.status}.`);
+        }
+    }
+}
+// ---------------------------------------------------------------------------
+// Configuration and slot registry
+// ---------------------------------------------------------------------------
+/** The configured backend, or a French explanation of why there is none. */
+export function relayFromEnv(env = process.env) {
+    const kind = (readString("BOOND_MCP_UPLOAD_RELAY", env) ?? "").toLowerCase();
+    if (kind === "") {
+        return "Relais d'upload désactivé : l'opérateur du serveur doit définir `BOOND_MCP_UPLOAD_RELAY` (valeur : `sharepoint`).";
+    }
+    if (kind !== "sharepoint") {
+        return `Relais d'upload inconnu : « ${kind} » (valeur acceptée : \`sharepoint\`).`;
+    }
+    const required = {
+        tenantId: "BOOND_MCP_SHAREPOINT_TENANT_ID",
+        clientId: "BOOND_MCP_SHAREPOINT_CLIENT_ID",
+        clientSecret: "BOOND_MCP_SHAREPOINT_CLIENT_SECRET",
+        site: "BOOND_MCP_SHAREPOINT_SITE",
+    };
+    const missing = Object.values(required).filter((name) => !readString(name, env));
+    if (missing.length > 0) {
+        return `Relais SharePoint incomplet : variable(s) manquante(s) ${missing.map((m) => `\`${m}\``).join(", ")}.`;
+    }
+    return new SharePointRelay({
+        tenantId: readString(required.tenantId, env),
+        clientId: readString(required.clientId, env),
+        clientSecret: readString(required.clientSecret, env),
+        site: normalizeSiteKey(readString(required.site, env)),
+        library: readString("BOOND_MCP_SHAREPOINT_LIBRARY", env) ?? "Documents",
+    });
+}
+/**
+ * In-memory registry of open slots. Single-use: a claimed slot is removed
+ * before BoondManager is called, so a retry needs a new slot. Expired slots
+ * are purged opportunistically whenever a new one is created.
+ */
+export class UploadRelay {
+    env;
+    slots = new Map();
+    cachedBackend;
+    constructor(env = process.env) {
+        this.env = env;
+    }
+    backend() {
+        if (this.cachedBackend)
+            return this.cachedBackend;
+        const resolved = relayFromEnv(this.env);
+        if (typeof resolved === "string")
+            throw new UploadRejectedError(resolved);
+        this.cachedBackend = resolved;
+        return resolved;
+    }
+    maxBytes() {
+        return readPositiveInt("BOOND_MCP_UPLOAD_MAX_BYTES", DEFAULT_UPLOAD_MAX_BYTES, this.env);
+    }
+    async sweep() {
+        const now = Date.now();
+        for (const [id, slot] of this.slots) {
+            if (slot.handle.expiresAt.getTime() <= now) {
+                this.slots.delete(id);
+                await slot.backend.purge(slot.handle.ref).catch(() => undefined);
+            }
+        }
+    }
+    async open(filename) {
+        const backend = this.backend();
+        const ext = extname(filename).toLowerCase();
+        if (ext === "") {
+            throw new UploadRejectedError("`fileName` doit comporter une extension (ex. « cv.pdf »).");
+        }
+        await this.sweep();
+        const uploadSlot = randomUUID();
+        const clean = sanitizeSharePointName(filename);
+        const handle = await backend.createSlot(uploadSlot, clean);
+        this.slots.set(uploadSlot, { backend, handle, filename: clean });
+        return {
+            uploadSlot,
+            uploadUrl: handle.uploadUrl,
+            expiresAt: handle.expiresAt.toISOString(),
+            maxBytes: this.maxBytes(),
+            filename: clean,
+        };
+    }
+    async claim(uploadSlot) {
+        const slot = this.slots.get(uploadSlot);
+        if (!slot) {
+            throw new UploadRejectedError(`\`uploadSlot\` inconnu ou déjà utilisé : « ${uploadSlot} ». Créer un nouveau slot avec \`boond_documents_upload_slot\`.`);
+        }
+        const purge = () => slot.backend.purge(slot.handle.ref);
+        if (slot.handle.expiresAt.getTime() <= Date.now()) {
+            this.slots.delete(uploadSlot);
+            await purge().catch(() => undefined);
+            throw new UploadRejectedError("Slot d'upload expiré. Créer un nouveau slot avec `boond_documents_upload_slot`.");
+        }
+        const stored = await slot.backend.stat(slot.handle.ref, slot.filename);
+        if (!stored) {
+            // Not consumed: the upload may still be in flight.
+            throw new UploadRejectedError("Aucun fichier dans le dossier de transit de ce slot : le dépôt n'est pas terminé ou n'a pas eu lieu. " +
+                "Exécuter la commande d'upload (réponse HTTP 200/201 attendue), puis réessayer.");
+        }
+        this.slots.delete(uploadSlot);
+        try {
+            const max = this.maxBytes();
+            if (stored.size > max) {
+                throw new UploadRejectedError(`Fichier trop volumineux : ${(stored.size / 1024 / 1024).toFixed(1)} Mo (max ${(max / 1024 / 1024).toFixed(1)} Mo).`);
+            }
+            const head = await slot.backend.head(stored.downloadUrl, 16);
+            const sniffed = sniffDocumentType(head, slot.filename);
+            if (!sniffed || !sniffed.extensions.includes(extname(slot.filename).toLowerCase())) {
+                throw new UploadRejectedError(`Format non accepté pour « ${slot.filename} » : le contenu déposé ne correspond pas à un format autorisé ` +
+                    "ou à son extension.");
+            }
+            return {
+                downloadUrl: stored.downloadUrl,
+                filename: slot.filename,
+                contentType: sniffed.contentType,
+                size: stored.size,
+                release: purge,
+            };
+        }
+        catch (error) {
+            await purge().catch(() => undefined);
+            throw error;
+        }
+    }
+}
+/** Process-wide registry (one server process = one set of slots). */
+export const uploadRelay = new UploadRelay();
+//# sourceMappingURL=upload-relay.js.map

package/dist/services/upload-relay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload-relay.js","sourceRoot":"","sources":["../../src/services/upload-relay.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAE5E,mDAAmD;AACnD,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC1C,MAAM,KAAK,GAAG,kCAAkC,CAAC;AACjD,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAuClC,wEAAwE;AACxE,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,MAAM,CAAC,GAAG,GAAG;SACV,IAAI,EAAE;SACN,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;SAC5B,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvB,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;AACrE,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,sBAAsB,CAAC,QAAgB;IACrD,MAAM,OAAO,GAAG,QAAQ;SACrB,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC;SAC/B,KAAK,CAAC,EAAE,CAAC;SACT,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;SACtC,IAAI,CAAC,EAAE,CAAC;SACR,IAAI,EAAE;SACN,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAC7B,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,OAAO,eAAe;IAKG;IAJpB,IAAI,GAAG,YAAY,CAAC;IACrB,KAAK,CAAwC;IAC7C,OAAO,CAAU;IAEzB,YAA6B,GAAqB;QAArB,QAAG,GAAH,GAAG,CAAkB;IAAG,CAAC;IAE9C,KAAK,CAAC,WAAW;QACvB,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QACtF,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,UAAU,EAAE,oBAAoB;YAChC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ;YAC5B,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY;YACpC,KAAK,EAAE,sCAAsC;SAC9C,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,qCAAqC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,oBAAoB,EAC9F,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAC1E,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAI/C,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YAClC,4EAA4E;YAC5E,MAAM,IAAI,KAAK,CAAC,0DAA0D,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;QAC1G,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC;QACpG,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,KAAK,CAAI,MAAc,EAAE,IAAY,EAAE,IAAc;QACjE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,KAAK,GAAG,IAAI,EAAE,EAAE;YACzC,MAAM;YACN,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,MAAM,IAAI,CAAC,WAAW,EAAE,EAAE;gBACnD,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;aACtE;YACD,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YACtD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;SAChD,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,IAAI,GAAG,EAAO,CAAC;QACnB,IAAI,CAAC;YACH,IAAI,IAAI;gBAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;QAC1E,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;IACtC,CAAC;IAEO,KAAK,CAAC,OAAO,CAAI,MAAc,EAAE,IAAY,EAAE,IAAc;QACnE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAsD,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACnH,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;YAClB,MAAM,CAAC,GAAI,IAAwD,CAAC,KAAK,CAAC;YAC1E,MAAM,IAAI,KAAK,CACb,uBAAuB,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,MAAM,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAC9G,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,KAAK;QACjB,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC;QACtC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAiB,KAAK,EAAE,UAAU,IAAI,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,CAAC;QAC7F,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAC/B,KAAK,EACL,UAAU,IAAI,CAAC,EAAE,gCAAgC,CAClD,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAC7B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,MAAM,EAAE,CAAC,CAChG,CAAC;QACF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzD,MAAM,IAAI,KAAK,CACb,sCAAsC,IAAI,CAAC,GAAG,CAAC,OAAO,0CAA0C,KAAK,IAAI,CAC1G,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,KAAK,CAAC,EAAE,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,QAAgB;QAC/C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACnC,sEAAsE;QACtE,+DAA+D;QAC/D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAiB,MAAM,EAAE,WAAW,OAAO,gBAAgB,EAAE;YAC5F,IAAI,EAAE,OAAO,MAAM,EAAE;YACrB,MAAM,EAAE,EAAE;YACV,mCAAmC,EAAE,MAAM;SAC5C,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,kBAAkB,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAChC,MAAM,EACN,WAAW,OAAO,UAAU,MAAM,CAAC,EAAE,KAAK,IAAI,uBAAuB,EACrE,EAAE,IAAI,EAAE,EAAE,mCAAmC,EAAE,MAAM,EAAE,EAAE,CAC1D,CAAC;QACF,MAAM,WAAW,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACnG,OAAO;YACL,GAAG,EAAE,MAAM,CAAC,EAAE;YACd,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,EAAE,WAAW,CAAC,CAAC;SACrE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAW,EAAE,QAAgB;QACtC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACnC,yEAAyE;QACzE,0EAA0E;QAC1E,uEAAuE;QACvE,mEAAmE;QACnE,iDAAiD;QACjD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAQtC,KAAK,EAAE,WAAW,OAAO,UAAU,GAAG,WAAW,CAAC,CAAC;QACtD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnB,MAAM,IAAI,mBAAmB,CAC3B,0HAA0H,CAC3H,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,IAAI,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,MAAM,GAAG,CAAC,CAAC;QACrG,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;QAC3E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACzC,MAAM,MAAM,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9D,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAE,CAAC;QACrF,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3G,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,8CAA8C,IAAI,CAAC,IAAI,iEAAiE,CACzH,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC;IAC1C,CAAC;IAED,2FAA2F;IACnF,KAAK,CAAC,eAAe,CAAC,OAAe,EAAE,MAAc;QAC3D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,KAAK,WAAW,OAAO,UAAU,MAAM,UAAU,EAAE;YAC5E,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,IAAI,CAAC,WAAW,EAAE,EAAE,EAAE;YAChE,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;SAChD,CAAC,CAAC;QACH,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAChD,OAAO,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxG,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,WAAmB,EAAE,KAAa;QAC3C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE;YACnC,OAAO,EAAE,EAAE,KAAK,EAAE,WAAW,KAAK,GAAG,CAAC,EAAE,EAAE;YAC1C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;SAChD,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;QACrG,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAW;QACrB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACnC,uEAAuE;QACvE,qDAAqD;QACrD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,OAAO,UAAU,GAAG,kBAAkB,CAAC,CAAC;QAC/F,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO;QAC3C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,OAAO,UAAU,GAAG,EAAE,CAAC,CAAC;QAC1E,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,2DAA2D,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;CACF;AAED,8EAA8E;AAC9E,kCAAkC;AAClC,8EAA8E;AAE9E,4EAA4E;AAC5E,MAAM,UAAU,YAAY,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC/D,MAAM,IAAI,GAAG,CAAC,UAAU,CAAC,wBAAwB,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7E,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QAChB,OAAO,mHAAmH,CAAC;IAC7H,CAAC;IACD,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;QAC1B,OAAO,+BAA+B,IAAI,wCAAwC,CAAC;IACrF,CAAC;IACD,MAAM,QAAQ,GAAG;QACf,QAAQ,EAAE,gCAAgC;QAC1C,QAAQ,EAAE,gCAAgC;QAC1C,YAAY,EAAE,oCAAoC;QAClD,IAAI,EAAE,2BAA2B;KACzB,CAAC;IACX,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IACjF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,0DAA0D,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IAChH,CAAC;IACD,OAAO,IAAI,eAAe,CAAC;QACzB,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAW;QACtD,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAW;QACtD,YAAY,EAAE,UAAU,CAAC,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAW;QAC9D,IAAI,EAAE,gBAAgB,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAW,CAAC;QAChE,OAAO,EAAE,UAAU,CAAC,8BAA8B,EAAE,GAAG,CAAC,IAAI,WAAW;KACxE,CAAC,CAAC;AACL,CAAC;AAyBD;;;;GAIG;AACH,MAAM,OAAO,WAAW;IAIO;IAHZ,KAAK,GAAG,IAAI,GAAG,EAAgB,CAAC;IACzC,aAAa,CAAgB;IAErC,YAA6B,MAAyB,OAAO,CAAC,GAAG;QAApC,QAAG,GAAH,GAAG,CAAiC;IAAG,CAAC;IAE7D,OAAO;QACb,IAAI,IAAI,CAAC,aAAa;YAAE,OAAO,IAAI,CAAC,aAAa,CAAC;QAClD,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,OAAO,QAAQ,KAAK,QAAQ;YAAE,MAAM,IAAI,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAC1E,IAAI,CAAC,aAAa,GAAG,QAAQ,CAAC;QAC9B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,QAAQ;QACd,OAAO,eAAe,CAAC,4BAA4B,EAAE,wBAAwB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3F,CAAC;IAEO,KAAK,CAAC,KAAK;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACpC,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,GAAG,EAAE,CAAC;gBAC3C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACtB,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAgB;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QAC5C,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;YACf,MAAM,IAAI,mBAAmB,CAAC,2DAA2D,CAAC,CAAC;QAC7F,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC3D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACjE,OAAO;YACL,UAAU;YACV,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE;YACzC,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE;YACzB,QAAQ,EAAE,KAAK;SAChB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,UAAkB;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,mBAAmB,CAC3B,8CAA8C,UAAU,iEAAiE,CAC1H,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACxD,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAClD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC9B,MAAM,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACrC,MAAM,IAAI,mBAAmB,CAAC,iFAAiF,CAAC,CAAC;QACnH,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,mDAAmD;YACnD,MAAM,IAAI,mBAAmB,CAC3B,uGAAuG;gBACrG,gFAAgF,CACnF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,IAAI,MAAM,CAAC,IAAI,GAAG,GAAG,EAAE,CAAC;gBACtB,MAAM,IAAI,mBAAmB,CAC3B,6BAA6B,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CACrH,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAC7D,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvD,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBACnF,MAAM,IAAI,mBAAmB,CAC3B,6BAA6B,IAAI,CAAC,QAAQ,gEAAgE;oBACxG,qBAAqB,CACxB,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,OAAO,EAAE,KAAK;aACf,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACrC,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF;AAED,qEAAqE;AACrE,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC"}

package/dist/tools/documents.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"documents.d.ts","sourceRoot":"","sources":["../../src/tools/documents.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAiBzE,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAwN7D"}
+{"version":3,"file":"documents.d.ts","sourceRoot":"","sources":["../../src/tools/documents.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AA6BzE,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAoS7D"}

package/dist/tools/documents.js

@@ -1,6 +1,8 @@
 import { apiDownload, apiUploadForm, formatDetailResponse, DownloadTooLargeError } from "../services/boond-client.js";
 import { progressReporterFrom } from "../services/progress.js";
-import { DocumentGetSchema, DocumentCreateSchema } from "../schemas/index.js";
+import { z } from "zod";
+import { DocumentGetSchema, DocumentCreateSchema, DocumentUploadSlotSchema } from "../schemas/index.js";
+import { uploadRelay } from "../services/upload-relay.js";
 import { MAX_DOCUMENT_BYTES, MAX_IMAGE_BYTES, CHARACTER_LIMIT, INLINE_UPLOAD_MAX_BYTES } from "../constants.js";
 import { decodeInlineUpload, readLocalUpload, UploadRejectedError } from "../services/upload-source.js";
 import { registerDeleteTool, MutationOutputSchema } from "./crud-factory.js";
@@ -9,6 +11,14 @@ import { extractDocxText, extractPdfText, isDocxMime, isImageMime, isPdfMime } f
 function isTextMime(mime) {
     return mime.startsWith("text/") || /[+/](json|xml)$|^application\/(json|xml|csv)$/.test(mime);
 }
+const UploadSlotOutputSchema = z.object({
+    uploadSlot: z.string(),
+    uploadUrl: z.string(),
+    expiresAt: z.string(),
+    maxBytes: z.number(),
+    fileName: z.string(),
+    uploadCommand: z.string(),
+});
 export function registerDocumentTools(server) {
     // Download a document (CV, justificatif, contrat...)
     server.registerTool("boond_documents_get", {
@@ -124,15 +134,70 @@ Un ID inconnu est rejeté explicitement plutôt que de renvoyer la page d'accuei
         }
         return raw();
     });
-    // Upload a document: by URL, by local path (opt-in, stdio) or inline base64
+    // Open a single-use upload slot on the operator's relay (chat attachments)
+    server.registerTool("boond_documents_upload_slot", {
+        title: "Ouvrir un slot d'upload",
+        description: `Ouvre un slot d'upload à usage unique sur le relais de stockage configuré par l'opérateur (\`BOOND_MCP_UPLOAD_RELAY\`, ex. SharePoint), pour transmettre à BoondManager un fichier qui n'est ni à une URL publique ni sur le poste du serveur — typiquement une pièce jointe de conversation, présente dans l'environnement d'exécution de code du client.
+
+Déroulé : (1) appeler cet outil avec le nom du fichier ; (2) déposer le fichier sur \`uploadUrl\` en **une seule requête PUT** depuis l'environnement d'exécution, avec la commande \`curl\` renvoyée — les octets ne passent pas par la réponse du modèle ; (3) appeler \`boond_documents_create\` avec \`uploadSlot\`. Le fichier est vérifié (taille, premiers octets), transmis à Boond par une URL de lecture temporaire, puis supprimé définitivement du relais.
+
+Slot valable 15 min, un seul fichier, un seul usage. \`uploadUrl\` est pré-authentifiée : ne pas la réutiliser ni la partager.
+
+Returns: \`uploadSlot\`, \`uploadUrl\`, \`expiresAt\`, \`maxBytes\`, \`fileName\` et la commande d'upload.`,
+        inputSchema: DocumentUploadSlotSchema,
+        outputSchema: UploadSlotOutputSchema,
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: true,
+        },
+    }, async (params) => {
+        let slot;
+        try {
+            slot = await uploadRelay.open(params.fileName);
+        }
+        catch (error) {
+            if (error instanceof UploadRejectedError) {
+                return { isError: true, content: [{ type: "text", text: `❌ ${error.message}` }] };
+            }
+            throw error;
+        }
+        const command = `F="<chemin-du-fichier>"; N=$(stat -c%s "$F"); ` +
+            `curl -sS --fail-with-body -X PUT -H "Content-Length: $N" -H "Content-Range: bytes 0-$((N-1))/$N" ` +
+            `--data-binary @"$F" "${slot.uploadUrl}"`;
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: `✅ Slot d'upload ouvert (expire ${slot.expiresAt}, ${(slot.maxBytes / 1024 / 1024).toFixed(0)} Mo max).\n` +
+                        `uploadSlot: ${slot.uploadSlot}\n\n` +
+                        `Déposer le fichier depuis l'environnement d'exécution (remplacer <chemin-du-fichier>) :\n${command}\n\n` +
+                        `Puis : boond_documents_create({ parentType, parentId, uploadSlot: "${slot.uploadSlot}" }).`,
+                },
+            ],
+            structuredContent: {
+                uploadSlot: slot.uploadSlot,
+                uploadUrl: slot.uploadUrl,
+                expiresAt: slot.expiresAt,
+                maxBytes: slot.maxBytes,
+                fileName: slot.filename,
+                uploadCommand: command,
+            },
+        };
+    });
+    // Upload a document: by URL, local path (opt-in, stdio), inline base64 or relay slot
     server.registerTool("boond_documents_create", {
         title: "Téléverser un document",
         description: `Attache un document à une entité BoondManager. Exactement une source par appel :
-- \`fileUrl\` : URL https que BoondManager télécharge lui-même (aucun octet ne transite par le serveur MCP) ;
-- \`filePath\` : chemin absolu d'un fichier local, lu par le serveur MCP — transport stdio uniquement, et seulement sous un répertoire listé dans \`BOOND_MCP_UPLOAD_DIRS\` (désactivé par défaut) ;
-- \`fileContent\` (base64) + \`fileName\` : petit fichier passé inline, ${Math.round(INLINE_UPLOAD_MAX_BYTES / 1024 / 1024)} Mo max.
+- \`fileUrl\` : URL https que BoondManager télécharge lui-même ;
+- \`filePath\` : chemin absolu d'un fichier local, lu par le serveur MCP — transport stdio uniquement, sous un répertoire de \`BOOND_MCP_UPLOAD_DIRS\` (désactivé par défaut) ;
+- \`uploadSlot\` : fichier déposé sur un slot de \`boond_documents_upload_slot\` — **la voie pour une pièce jointe de conversation** ;
+- \`fileContent\` (base64) + \`fileName\` : petit fichier inline, ${Math.round(INLINE_UPLOAD_MAX_BYTES / 1024 / 1024)} Mo max, réservé à un appelant qui détient déjà les octets exacts (un modèle ne retranscrit pas fiablement une pièce jointe en base64).
 
-Le format est vérifié sur les premiers octets du fichier (PDF, Office, ODF, RTF, images), pas sur l'extension. \`fileContent\` suppose que l'appelant détient déjà les octets exacts : un modèle ne peut pas retranscrire de façon fiable une pièce jointe de conversation en base64 — préférer \`filePath\`. Cas d'usage typiques : CV d'un candidat (parentType=candidateResume, parsing=true pour l'analyse IA Boond), justificatif de note de frais (expensesReport), bon de commande, contrat...
+Le format est vérifié sur les premiers octets du fichier (PDF, Office, ODF, RTF, images), pas sur l'extension. Cas d'usage typiques : CV d'un candidat (parentType=candidateResume, parsing=true pour l'analyse IA Boond), pièce jointe d'un besoin / AO (parentType=opportunity), d'un positionnement (positioning), justificatif de note de frais (expensesReport), bon de commande, contrat...
+
+\`parentType\` n'est pas limité à une liste fermée : il est transmis tel quel à BoondManager, qui valide le type. Un type que l'API ne gère pas est refusé sans rien écrire.
 
 Returns: Métadonnées du document créé (ID).`,
         inputSchema: DocumentCreateSchema,
@@ -145,10 +210,10 @@ Returns: Métadonnées du document créé (ID).`,
         },
     }, async (params) => {
         const reject = (text) => ({ isError: true, content: [{ type: "text", text: `❌ ${text}` }] });
-        const sources = [params.fileUrl, params.filePath, params.fileContent].filter((v) => v !== undefined).length;
+        const sources = [params.fileUrl, params.filePath, params.fileContent, params.uploadSlot].filter((v) => v !== undefined).length;
         if (sources !== 1) {
-            return reject(`Exactement une source de fichier est attendue (reçu : ${sources}). Fournir \`fileUrl\`, ou \`filePath\`, ` +
-                "ou `fileContent` + `fileName`.");
+            return reject(`Exactement une source de fichier est attendue (reçu : ${sources}). Fournir \`fileUrl\`, \`filePath\`, ` +
+                "`uploadSlot`, ou `fileContent` + `fileName`.");
         }
         if (params.fileContent !== undefined && params.fileName === undefined) {
             return reject("`fileName` (avec extension, ex. « cv.pdf ») est requis avec `fileContent`.");
@@ -157,11 +222,14 @@ Returns: Métadonnées du document créé (ID).`,
             return reject("`fileName` ne s'utilise qu'avec `fileContent`.");
         }
         let file;
+        let relayed;
         try {
             if (params.filePath !== undefined)
                 file = await readLocalUpload(params.filePath);
             else if (params.fileContent !== undefined && params.fileName !== undefined)
                 file = decodeInlineUpload(params.fileContent, params.fileName);
+            else if (params.uploadSlot !== undefined)
+                relayed = await uploadRelay.claim(params.uploadSlot);
         }
         catch (error) {
             if (error instanceof UploadRejectedError)
@@ -174,20 +242,34 @@ Returns: Métadonnées du document créé (ID).`,
         };
         if (params.fileUrl !== undefined)
             fields.fileUrl = params.fileUrl;
+        // The relay hands Boond a short-lived pre-authenticated download URL.
+        if (relayed !== undefined)
+            fields.fileUrl = relayed.downloadUrl;
         if (params.parsing !== undefined)
             fields.parsing = String(params.parsing);
-        const response = file === undefined
-            ? await apiUploadForm("/documents", fields)
-            : await apiUploadForm("/documents", fields, file);
+        let response;
+        try {
+            response =
+                file === undefined
+                    ? await apiUploadForm("/documents", fields)
+                    : await apiUploadForm("/documents", fields, file);
+        }
+        finally {
+            // Boond has fetched the file (or failed): purge the relay copy either way.
+            if (relayed !== undefined)
+                await relayed.release().catch(() => undefined);
+        }
         const entity = Array.isArray(response.data) ? response.data[0] : response.data;
         const structured = {};
         if (entity?.id !== undefined)
             structured.id = String(entity.id);
         if (entity?.type !== undefined)
             structured.type = String(entity.type);
-        const sent = file === undefined
-            ? ""
-            : `\nFichier: ${file.filename} (${file.contentType}, ${(file.data.length / 1024).toFixed(0)} Ko)`;
+        const sent = file !== undefined
+            ? `\nFichier: ${file.filename} (${file.contentType}, ${(file.data.length / 1024).toFixed(0)} Ko)`
+            : relayed !== undefined
+                ? `\nFichier: ${relayed.filename} (${relayed.contentType}, ${(relayed.size / 1024).toFixed(0)} Ko, via relais — copie de transit supprimée)`
+                : "";
         return {
             content: [
                 {