bunderstack 0.17.0-beta.2 → 0.17.0-beta.3

package/dist/storage/operations.js

@@ -0,0 +1,250 @@
+import { randomUUID } from 'node:crypto';
+import { extname } from 'node:path';
+import { checkAccess } from '../access.js';
+import { BunderstackError } from '../errors.js';
+import { deleteFileWithDerivatives } from './delete.js';
+import { deleteFileMetaRow, fileMatchesScope, getFileMeta, insertPendingFile, insertReadyFile, markFileReady, scopeToJson, sumReadySize, } from './file-meta.js';
+import { parseTransformSpec, transformHash, transformImage } from './thumbnails.js';
+const FILE_OWNER_COLUMN = 'ownerId';
+function matchMime(type, accept) {
+    if (!accept || accept.length === 0)
+        return true;
+    if (!type)
+        return false;
+    return accept.some((pattern) => pattern === type ||
+        (pattern.endsWith('/*') && type.startsWith(pattern.slice(0, -1))));
+}
+function accessContext(context, extra = {}) {
+    return {
+        request: context.request,
+        user: context.user,
+        session: context.session,
+        row: extra.row,
+        body: extra.body,
+    };
+}
+async function gate(rule, context) {
+    const result = await checkAccess(rule, context, FILE_OWNER_COLUMN);
+    if (!result.allowed) {
+        throw new BunderstackError(result.status === 401 ? 'UNAUTHORIZED' : 'FORBIDDEN', result.status === 401 ? 'Authentication required' : 'Forbidden');
+    }
+}
+function notFound(message = 'Not found') {
+    throw new BunderstackError('NOT_FOUND', message);
+}
+function sanitizeFilename(name) {
+    return name.replace(/["\\\r\n]/g, '');
+}
+async function quotaExceeded(db, bucket, quota, ownerId, scopeJson, incoming) {
+    if (quota.perUserBytes !== undefined && ownerId !== undefined) {
+        const current = await sumReadySize(db, { bucket, ownerId });
+        if (current + incoming > quota.perUserBytes)
+            return true;
+    }
+    if (quota.perScopeBytes !== undefined && scopeJson != null) {
+        const current = await sumReadySize(db, { bucket, scopeJson });
+        if (current + incoming > quota.perScopeBytes)
+            return true;
+    }
+    return false;
+}
+export function createStorageOperations(options) {
+    const { registry, db } = options;
+    const presignExpiresSec = options.presignExpiresSec ?? 60;
+    const bucketEntry = (name) => {
+        const entry = registry.get(name);
+        if (!entry)
+            notFound('Unknown bucket');
+        return entry;
+    };
+    return {
+        async prepareUpload(bucketName, body, context) {
+            const { bucket, adapter } = bucketEntry(bucketName);
+            const ctx = accessContext(context, { body });
+            await gate(bucket.access.create, ctx);
+            if (!adapter.presignPut) {
+                return { mode: 'proxy', uploadUrl: `/api/files/${bucket.name}` };
+            }
+            const scopeJson = scopeToJson(bucket.writeScope?.(ctx));
+            if (bucket.quota &&
+                (await quotaExceeded(db, bucket.name, bucket.quota, context.user?.id, scopeJson, bucket.upload?.maxSizeBytes ?? 0))) {
+                throw new BunderstackError('PAYLOAD_TOO_LARGE', 'Quota exceeded');
+            }
+            const fileId = `${bucket.name}/${randomUUID()}${extname(body.filename ?? '')}`;
+            await insertPendingFile(db, {
+                fileId,
+                bucket: bucket.name,
+                ownerId: context.user?.id ?? null,
+                scopeJson,
+                filename: body.filename ?? null,
+                contentType: body.contentType ?? null,
+            });
+            const uploadUrl = await adapter.presignPut(fileId, {
+                contentType: body.contentType,
+                expiresIn: presignExpiresSec,
+            });
+            const id = fileId.slice(`${bucket.name}/`.length);
+            return {
+                mode: 'presign',
+                fileId,
+                uploadUrl,
+                method: 'PUT',
+                confirmUrl: `/api/files/${bucket.name}/${id}/confirm`,
+            };
+        },
+        async upload(bucketName, file, context) {
+            const { bucket, adapter } = bucketEntry(bucketName);
+            const ctx = accessContext(context);
+            await gate(bucket.access.create, ctx);
+            if (!matchMime(file.type, bucket.upload?.accept)) {
+                throw new BunderstackError('BAD_REQUEST', `Content type ${file.type || '(none)'} not allowed`);
+            }
+            if (bucket.upload?.maxSizeBytes !== undefined &&
+                file.size > bucket.upload.maxSizeBytes) {
+                throw new BunderstackError('PAYLOAD_TOO_LARGE', 'File too large');
+            }
+            const scopeJson = scopeToJson(bucket.readScope?.(ctx));
+            if (bucket.quota &&
+                (await quotaExceeded(db, bucket.name, bucket.quota, context.user?.id, scopeJson, file.size))) {
+                throw new BunderstackError('PAYLOAD_TOO_LARGE', 'Quota exceeded');
+            }
+            const fileId = `${bucket.name}/${randomUUID()}${extname(file.name)}`;
+            await adapter.upload(fileId, await file.arrayBuffer(), file.type);
+            await insertReadyFile(db, {
+                fileId,
+                bucket: bucket.name,
+                ownerId: context.user?.id ?? null,
+                scopeJson,
+                filename: file.name || null,
+                contentType: file.type || null,
+                size: file.size,
+            });
+            const id = fileId.slice(`${bucket.name}/`.length);
+            return {
+                status: 201,
+                fileId,
+                url: `/api/files/${bucket.name}/${id}`,
+            };
+        },
+        async confirmUpload(bucketName, id, context) {
+            const { bucket, adapter } = bucketEntry(bucketName);
+            const fileId = `${bucketName}/${id}`;
+            const row = await getFileMeta(db, fileId);
+            if (!row || row.bucket !== bucketName)
+                notFound();
+            if (row.ownerId != null && row.ownerId !== (context.user?.id ?? null)) {
+                throw new BunderstackError('FORBIDDEN', 'Forbidden');
+            }
+            const result = { fileId, url: `/api/files/${bucketName}/${id}` };
+            if (row.status === 'ready')
+                return result;
+            const info = await adapter.stat?.(fileId);
+            if (!info)
+                notFound();
+            const rejectUpload = async (message, validation = false) => {
+                await adapter.delete(fileId);
+                await deleteFileMetaRow(db, fileId);
+                throw new BunderstackError(validation ? 'BAD_REQUEST' : 'PAYLOAD_TOO_LARGE', message);
+            };
+            if (bucket.upload?.maxSizeBytes !== undefined &&
+                info.size > bucket.upload.maxSizeBytes) {
+                await rejectUpload('File too large');
+            }
+            if (!matchMime(info.contentType, bucket.upload?.accept)) {
+                await rejectUpload(`Content type ${info.contentType || '(none)'} not allowed`, true);
+            }
+            if (bucket.quota &&
+                (await quotaExceeded(db, bucket.name, bucket.quota, row.ownerId ?? undefined, row.scopeJson, info.size))) {
+                await rejectUpload('Quota exceeded');
+            }
+            await markFileReady(db, fileId, info);
+            return result;
+        },
+        async download(bucketName, id, query, context) {
+            const { bucket, adapter } = bucketEntry(bucketName);
+            const fileId = `${bucketName}/${id}`;
+            const row = await getFileMeta(db, fileId);
+            if (!row || row.status !== 'ready' || row.bucket !== bucketName)
+                notFound();
+            const ctx = accessContext(context, { row });
+            await gate(bucket.access.get, ctx);
+            if (!fileMatchesScope(row, bucket.readScope?.(ctx)))
+                notFound();
+            const spec = parseTransformSpec(query);
+            if (spec) {
+                if (!bucket.transforms) {
+                    throw new BunderstackError('BAD_REQUEST', 'Transforms not enabled for this bucket');
+                }
+                const ext = spec.format ? `.${spec.format}` : extname(fileId) || '.jpg';
+                const cacheKey = `${fileId}__transforms/${transformHash(spec)}${ext}`;
+                if (await adapter.exists(cacheKey)) {
+                    const cached = await adapter.get(cacheKey);
+                    const headers = new Headers(cached.headers);
+                    headers.set('Cache-Control', 'public, max-age=31536000');
+                    return {
+                        kind: 'body',
+                        status: cached.status,
+                        body: cached.body,
+                        headers,
+                    };
+                }
+                const original = await adapter.get(fileId);
+                if (original.status === 404)
+                    notFound();
+                const transformed = await transformImage(Buffer.from(await original.arrayBuffer()), spec);
+                const contentType = spec.format
+                    ? `image/${spec.format}`
+                    : (original.headers.get('Content-Type') ?? 'image/jpeg');
+                const body = Uint8Array.from(transformed).buffer;
+                await adapter.upload(cacheKey, body, contentType);
+                return {
+                    kind: 'body',
+                    status: 200,
+                    body,
+                    headers: new Headers({
+                        'Content-Type': contentType,
+                        'Cache-Control': 'public, max-age=31536000',
+                    }),
+                };
+            }
+            if (bucket.visibility === 'public' && adapter.publicUrlFor) {
+                const url = adapter.publicUrlFor(fileId);
+                if (url)
+                    return { kind: 'redirect', status: 302, url };
+            }
+            if (bucket.visibility === 'private' && adapter.presignGet) {
+                return {
+                    kind: 'redirect',
+                    status: 302,
+                    url: await adapter.presignGet(fileId, {
+                        expiresIn: presignExpiresSec,
+                    }),
+                };
+            }
+            const response = await adapter.get(fileId);
+            const headers = new Headers(response.headers);
+            if (response.status !== 404 && row.filename) {
+                headers.set('Content-Disposition', `inline; filename="${sanitizeFilename(row.filename)}"`);
+            }
+            return {
+                kind: 'body',
+                status: response.status,
+                body: response.body,
+                headers,
+            };
+        },
+        async delete(bucketName, id, context) {
+            const { bucket, adapter } = bucketEntry(bucketName);
+            const fileId = `${bucketName}/${id}`;
+            const row = await getFileMeta(db, fileId);
+            if (!row || row.bucket !== bucketName)
+                notFound();
+            const ctx = accessContext(context, { row });
+            await gate(bucket.access.delete, ctx);
+            if (!fileMatchesScope(row, bucket.readScope?.(ctx)))
+                notFound();
+            await deleteFileWithDerivatives(adapter, db, fileId);
+        },
+    };
+}
+//# sourceMappingURL=operations.js.map

package/dist/storage/operations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operations.js","sourceRoot":"","sources":["../../src/storage/operations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAMnC,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,EAAE,yBAAyB,EAAE,MAAM,UAAU,CAAA;AACpD,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,WAAW,EACX,iBAAiB,EACjB,eAAe,EACf,aAAa,EACb,WAAW,EACX,YAAY,GAEb,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAiChF,MAAM,iBAAiB,GAAG,SAAS,CAAA;AAEnC,SAAS,SAAS,CAAC,IAAY,EAAE,MAAiB;IAChD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAC/C,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAA;IACvB,OAAO,MAAM,CAAC,IAAI,CAChB,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,KAAK,IAAI;QAChB,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CACpE,CAAA;AACH,CAAC;AAED,SAAS,aAAa,CACpB,OAAgC,EAChC,QAA+D,EAAE;IAEjE,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,IAAI,EAAE,KAAK,CAAC,IAAI;KACjB,CAAA;AACH,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,IAAmB,EAAE,OAAsB;IAC7D,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAA;IAClE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,gBAAgB,CACxB,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,WAAW,EACpD,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,WAAW,CAChE,CAAA;IACH,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,OAAO,GAAG,WAAW;IACrC,MAAM,IAAI,gBAAgB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;AAClD,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAA;AACvC,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,EAAS,EACT,MAAc,EACd,KAAwD,EACxD,OAA2B,EAC3B,SAAwB,EACxB,QAAgB;IAEhB,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC9D,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;QAC3D,IAAI,OAAO,GAAG,QAAQ,GAAG,KAAK,CAAC,YAAY;YAAE,OAAO,IAAI,CAAA;IAC1D,CAAC;IACD,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;QAC3D,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAA;QAC7D,IAAI,OAAO,GAAG,QAAQ,GAAG,KAAK,CAAC,aAAa;YAAE,OAAO,IAAI,CAAA;IAC3D,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAiC;IACvE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,OAAO,CAAA;IAChC,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,EAAE,CAAA;IAEzD,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,EAAE;QACnC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAChC,IAAI,CAAC,KAAK;YAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAA;QACtC,OAAO,KAAK,CAAA;IACd,CAAC,CAAA;IAED,OAAO;QACL,KAAK,CAAC,aAAa,CACjB,UAAkB,EAClB,IAAiD,EACjD,OAAgC;YAEhC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,UAAU,CAAC,CAAA;YACnD,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;YAC5C,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;YAErC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;gBACxB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,cAAc,MAAM,CAAC,IAAI,EAAE,EAAE,CAAA;YAClE,CAAC;YAED,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;YACvD,IACE,MAAM,CAAC,KAAK;gBACZ,CAAC,MAAM,aAAa,CAClB,EAAE,EACF,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,KAAK,EACZ,OAAO,CAAC,IAAI,EAAE,EAAE,EAChB,SAAS,EACT,MAAM,CAAC,MAAM,EAAE,YAAY,IAAI,CAAC,CACjC,CAAC,EACF,CAAC;gBACD,MAAM,IAAI,gBAAgB,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,CAAA;YACnE,CAAC;YAED,MAAM,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,IAAI,UAAU,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAA;YAC9E,MAAM,iBAAiB,CAAC,EAAE,EAAE;gBAC1B,MAAM;gBACN,MAAM,EAAE,MAAM,CAAC,IAAI;gBACnB,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,IAAI,IAAI;gBACjC,SAAS;gBACT,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;gBAC/B,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;aACtC,CAAC,CAAA;YACF,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE;gBACjD,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,SAAS,EAAE,iBAAiB;aAC7B,CAAC,CAAA;YACF,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAA;YACjD,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,MAAM;gBACN,SAAS;gBACT,MAAM,EAAE,KAAK;gBACb,UAAU,EAAE,cAAc,MAAM,CAAC,IAAI,IAAI,EAAE,UAAU;aACtD,CAAA;QACH,CAAC;QAED,KAAK,CAAC,MAAM,CACV,UAAkB,EAClB,IAAU,EACV,OAAgC;YAEhC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,UAAU,CAAC,CAAA;YACnD,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;YAClC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;YAErC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;gBACjD,MAAM,IAAI,gBAAgB,CACxB,aAAa,EACb,gBAAgB,IAAI,CAAC,IAAI,IAAI,QAAQ,cAAc,CACpD,CAAA;YACH,CAAC;YACD,IACE,MAAM,CAAC,MAAM,EAAE,YAAY,KAAK,SAAS;gBACzC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,EACtC,CAAC;gBACD,MAAM,IAAI,gBAAgB,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,CAAA;YACnE,CAAC;YAED,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;YACtD,IACE,MAAM,CAAC,KAAK;gBACZ,CAAC,MAAM,aAAa,CAClB,EAAE,EACF,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,KAAK,EACZ,OAAO,CAAC,IAAI,EAAE,EAAE,EAChB,SAAS,EACT,IAAI,CAAC,IAAI,CACV,CAAC,EACF,CAAC;gBACD,MAAM,IAAI,gBAAgB,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,CAAA;YACnE,CAAC;YAED,MAAM,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,IAAI,UAAU,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAA;YACpE,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;YACjE,MAAM,eAAe,CAAC,EAAE,EAAE;gBACxB,MAAM;gBACN,MAAM,EAAE,MAAM,CAAC,IAAI;gBACnB,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,IAAI,IAAI;gBACjC,SAAS;gBACT,QAAQ,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI;gBAC3B,WAAW,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI;gBAC9B,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB,CAAC,CAAA;YACF,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAA;YACjD,OAAO;gBACL,MAAM,EAAE,GAAY;gBACpB,MAAM;gBACN,GAAG,EAAE,cAAc,MAAM,CAAC,IAAI,IAAI,EAAE,EAAE;aACvC,CAAA;QACH,CAAC;QAED,KAAK,CAAC,aAAa,CACjB,UAAkB,EAClB,EAAU,EACV,OAAgC;YAEhC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,UAAU,CAAC,CAAA;YACnD,MAAM,MAAM,GAAG,GAAG,UAAU,IAAI,EAAE,EAAE,CAAA;YACpC,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;YACzC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU;gBAAE,QAAQ,EAAE,CAAA;YACjD,IAAI,GAAG,CAAC,OAAO,IAAI,IAAI,IAAI,GAAG,CAAC,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;gBACtE,MAAM,IAAI,gBAAgB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;YACtD,CAAC;YAED,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,cAAc,UAAU,IAAI,EAAE,EAAE,EAAE,CAAA;YAChE,IAAI,GAAG,CAAC,MAAM,KAAK,OAAO;gBAAE,OAAO,MAAM,CAAA;YAEzC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAA;YACzC,IAAI,CAAC,IAAI;gBAAE,QAAQ,EAAE,CAAA;YAErB,MAAM,YAAY,GAAG,KAAK,EAAE,OAAe,EAAE,UAAU,GAAG,KAAK,EAAE,EAAE;gBACjE,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;gBAC5B,MAAM,iBAAiB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;gBACnC,MAAM,IAAI,gBAAgB,CACxB,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,mBAAmB,EAChD,OAAO,CACR,CAAA;YACH,CAAC,CAAA;YACD,IACE,MAAM,CAAC,MAAM,EAAE,YAAY,KAAK,SAAS;gBACzC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,EACtC,CAAC;gBACD,MAAM,YAAY,CAAC,gBAAgB,CAAC,CAAA;YACtC,CAAC;YACD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;gBACxD,MAAM,YAAY,CAChB,gBAAgB,IAAI,CAAC,WAAW,IAAI,QAAQ,cAAc,EAC1D,IAAI,CACL,CAAA;YACH,CAAC;YACD,IACE,MAAM,CAAC,KAAK;gBACZ,CAAC,MAAM,aAAa,CAClB,EAAE,EACF,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,KAAK,EACZ,GAAG,CAAC,OAAO,IAAI,SAAS,EACxB,GAAG,CAAC,SAAS,EACb,IAAI,CAAC,IAAI,CACV,CAAC,EACF,CAAC;gBACD,MAAM,YAAY,CAAC,gBAAgB,CAAC,CAAA;YACtC,CAAC;YAED,MAAM,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YACrC,OAAO,MAAM,CAAA;QACf,CAAC;QAED,KAAK,CAAC,QAAQ,CACZ,UAAkB,EAClB,EAAU,EACV,KAA6B,EAC7B,OAAgC;YAEhC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,UAAU,CAAC,CAAA;YACnD,MAAM,MAAM,GAAG,GAAG,UAAU,IAAI,EAAE,EAAE,CAAA;YACpC,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;YACzC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,OAAO,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU;gBAAE,QAAQ,EAAE,CAAA;YAE3E,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC3C,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;YAClC,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC;gBAAE,QAAQ,EAAE,CAAA;YAE/D,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAA;YACtC,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;oBACvB,MAAM,IAAI,gBAAgB,CACxB,aAAa,EACb,wCAAwC,CACzC,CAAA;gBACH,CAAC;gBACD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAA;gBACvE,MAAM,QAAQ,GAAG,GAAG,MAAM,gBAAgB,aAAa,CAAC,IAAI,CAAC,GAAG,GAAG,EAAE,CAAA;gBACrE,IAAI,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACnC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;oBAC1C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;oBAC3C,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,0BAA0B,CAAC,CAAA;oBACxD,OAAO;wBACL,IAAI,EAAE,MAAM;wBACZ,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,IAAI,EAAE,MAAM,CAAC,IAAI;wBACjB,OAAO;qBACR,CAAA;gBACH,CAAC;gBAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;gBAC1C,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;oBAAE,QAAQ,EAAE,CAAA;gBACvC,MAAM,WAAW,GAAG,MAAM,cAAc,CACtC,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,EACzC,IAAI,CACL,CAAA;gBACD,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM;oBAC7B,CAAC,CAAC,SAAS,IAAI,CAAC,MAAM,EAAE;oBACxB,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,YAAY,CAAC,CAAA;gBAC1D,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,CAAA;gBAChD,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,WAAW,CAAC,CAAA;gBACjD,OAAO;oBACL,IAAI,EAAE,MAAM;oBACZ,MAAM,EAAE,GAAG;oBACX,IAAI;oBACJ,OAAO,EAAE,IAAI,OAAO,CAAC;wBACnB,cAAc,EAAE,WAAW;wBAC3B,eAAe,EAAE,0BAA0B;qBAC5C,CAAC;iBACH,CAAA;YACH,CAAC;YAED,IAAI,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;gBAC3D,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;gBACxC,IAAI,GAAG;oBAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAA;YACxD,CAAC;YACD,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;gBAC1D,OAAO;oBACL,IAAI,EAAE,UAAU;oBAChB,MAAM,EAAE,GAAG;oBACX,GAAG,EAAE,MAAM,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE;wBACpC,SAAS,EAAE,iBAAiB;qBAC7B,CAAC;iBACH,CAAA;YACH,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YAC1C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;YAC7C,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;gBAC5C,OAAO,CAAC,GAAG,CACT,qBAAqB,EACrB,qBAAqB,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CACvD,CAAA;YACH,CAAC;YACD,OAAO;gBACL,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,OAAO;aACR,CAAA;QACH,CAAC;QAED,KAAK,CAAC,MAAM,CACV,UAAkB,EAClB,EAAU,EACV,OAAgC;YAEhC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,UAAU,CAAC,CAAA;YACnD,MAAM,MAAM,GAAG,GAAG,UAAU,IAAI,EAAE,EAAE,CAAA;YACpC,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;YACzC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU;gBAAE,QAAQ,EAAE,CAAA;YACjD,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC3C,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;YACrC,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC;gBAAE,QAAQ,EAAE,CAAA;YAC/D,MAAM,yBAAyB,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,CAAA;QACtD,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/storage/registry.d.ts

@@ -0,0 +1,10 @@
+import type { ResolvedBackend, ResolvedBucket, ResolvedStorageBuckets } from './buckets.js';
+import type { StorageAdapter } from './index.js';
+export interface BucketStorage {
+    bucket: ResolvedBucket;
+    adapter: StorageAdapter;
+}
+export type BucketStorageRegistry = Map<string, BucketStorage>;
+export declare function createAdapter(backend: ResolvedBackend): StorageAdapter;
+export declare function createBucketStorages(resolved: ResolvedStorageBuckets): BucketStorageRegistry;
+//# sourceMappingURL=registry.d.ts.map

package/dist/storage/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/storage/registry.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,eAAe,EACf,cAAc,EACd,sBAAsB,EACvB,MAAM,WAAW,CAAA;AAClB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAK7C,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,cAAc,CAAA;IACtB,OAAO,EAAE,cAAc,CAAA;CACxB;AACD,MAAM,MAAM,qBAAqB,GAAG,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;AAE9D,wBAAgB,aAAa,CAAC,OAAO,EAAE,eAAe,GAAG,cAAc,CAYtE;AAED,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,sBAAsB,GAC/B,qBAAqB,CAMvB"}

package/dist/storage/registry.js

@@ -0,0 +1,23 @@
+import { LocalStorageAdapter } from './local.js';
+import { S3StorageAdapter } from './s3.js';
+export function createAdapter(backend) {
+    if (backend.type === 'local') {
+        return new LocalStorageAdapter(backend.path);
+    }
+    return new S3StorageAdapter({
+        bucket: backend.bucket,
+        region: backend.region,
+        accessKeyId: backend.accessKeyId,
+        secretAccessKey: backend.secretAccessKey,
+        endpoint: backend.endpoint,
+        publicUrl: backend.publicUrl,
+    });
+}
+export function createBucketStorages(resolved) {
+    const registry = new Map();
+    for (const [name, bucket] of resolved.buckets) {
+        registry.set(name, { bucket, adapter: createAdapter(bucket.backend) });
+    }
+    return registry;
+}
+//# sourceMappingURL=registry.js.map

package/dist/storage/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/storage/registry.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAA;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,MAAM,CAAA;AAQvC,MAAM,UAAU,aAAa,CAAC,OAAwB;IACpD,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC7B,OAAO,IAAI,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9C,CAAC;IACD,OAAO,IAAI,gBAAgB,CAAC;QAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,QAAgC;IAEhC,MAAM,QAAQ,GAA0B,IAAI,GAAG,EAAE,CAAA;IACjD,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QAC9C,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IACxE,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC"}

package/dist/storage/s3.d.ts

@@ -0,0 +1,28 @@
+import type { PresignGetOptions, PresignPutOptions, StorageAdapter } from './index.js';
+interface S3Config {
+    bucket: string;
+    region: string;
+    accessKeyId: string;
+    secretAccessKey: string;
+    endpoint?: string;
+    publicUrl?: string;
+}
+export declare class S3StorageAdapter implements StorageAdapter {
+    private client;
+    private readonly publicUrl?;
+    constructor(cfg: S3Config);
+    upload(fileId: string, data: Blob | ArrayBuffer, contentType: string): Promise<void>;
+    get(fileId: string): Promise<Response>;
+    delete(fileId: string): Promise<void>;
+    exists(fileId: string): Promise<boolean>;
+    presignPut(key: string, opts: PresignPutOptions): Promise<string>;
+    presignGet(key: string, opts: PresignGetOptions): Promise<string>;
+    stat(key: string): Promise<{
+        size: number;
+        contentType: string;
+    } | null>;
+    publicUrlFor(key: string): string | undefined;
+    list(prefix: string): Promise<string[]>;
+}
+export {};
+//# sourceMappingURL=s3.d.ts.map

package/dist/storage/s3.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3.d.ts","sourceRoot":"","sources":["../../src/storage/s3.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACf,MAAM,SAAS,CAAA;AAEhB,UAAU,QAAQ;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,eAAe,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,qBAAa,gBAAiB,YAAW,cAAc;IACrD,OAAO,CAAC,MAAM,CAAmC;IACjD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAQ;gBAEvB,GAAG,EAAE,QAAQ;IAWnB,MAAM,CACV,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,IAAI,GAAG,WAAW,EACxB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC;IAKV,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAetC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIxC,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC;IAQjE,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC;IAOjE,IAAI,CACR,GAAG,EAAE,MAAM,GACV,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IASxD,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAKvC,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;CAI9C"}

package/dist/storage/s3.js

@@ -0,0 +1,71 @@
+export class S3StorageAdapter {
+    client;
+    publicUrl;
+    constructor(cfg) {
+        this.client = new Bun.S3Client({
+            bucket: cfg.bucket,
+            region: cfg.region,
+            accessKeyId: cfg.accessKeyId,
+            secretAccessKey: cfg.secretAccessKey,
+            ...(cfg.endpoint && { endpoint: cfg.endpoint }),
+        });
+        this.publicUrl = cfg.publicUrl;
+    }
+    async upload(fileId, data, contentType) {
+        const bytes = data instanceof Blob ? await data.arrayBuffer() : data;
+        await this.client.write(fileId, bytes, { type: contentType });
+    }
+    async get(fileId) {
+        // `stat` (a HEAD, same cost as `exists`) is the only way to learn the
+        // stored Content-Type: a lazily-constructed `client.file(key)` reports
+        // `type: ""` — it never stats, and unlike `Bun.file` it does not guess
+        // from the extension either.
+        const info = await this.stat(fileId);
+        if (!info)
+            return new Response('Not found', { status: 404 });
+        const file = this.client.file(fileId);
+        return new Response(file.stream(), {
+            headers: {
+                'Content-Type': info.contentType || 'application/octet-stream',
+            },
+        });
+    }
+    async delete(fileId) {
+        await this.client.delete(fileId);
+    }
+    async exists(fileId) {
+        return this.client.exists(fileId);
+    }
+    async presignPut(key, opts) {
+        return this.client.presign(key, {
+            method: 'PUT',
+            expiresIn: opts.expiresIn,
+            ...(opts.contentType && { type: opts.contentType }),
+        });
+    }
+    async presignGet(key, opts) {
+        return this.client.presign(key, {
+            method: 'GET',
+            expiresIn: opts.expiresIn,
+        });
+    }
+    async stat(key) {
+        try {
+            const s = await this.client.stat(key);
+            return { size: s.size, contentType: s.type };
+        }
+        catch {
+            return null;
+        }
+    }
+    publicUrlFor(key) {
+        if (!this.publicUrl)
+            return undefined;
+        return `${this.publicUrl.replace(/\/$/, '')}/${key}`;
+    }
+    async list(prefix) {
+        const res = await this.client.list({ prefix });
+        return res.contents?.map((c) => c.key) ?? [];
+    }
+}
+//# sourceMappingURL=s3.js.map

package/dist/storage/s3.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3.js","sourceRoot":"","sources":["../../src/storage/s3.ts"],"names":[],"mappings":"AAgBA,MAAM,OAAO,gBAAgB;IACnB,MAAM,CAAmC;IAChC,SAAS,CAAS;IAEnC,YAAY,GAAa;QACvB,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,eAAe,EAAE,GAAG,CAAC,eAAe;YACpC,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;SAChD,CAAC,CAAA;QACF,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAA;IAChC,CAAC;IAED,KAAK,CAAC,MAAM,CACV,MAAc,EACd,IAAwB,EACxB,WAAmB;QAEnB,MAAM,KAAK,GAAG,IAAI,YAAY,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;QACpE,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAA;IAC/D,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,MAAc;QACtB,sEAAsE;QACtE,uEAAuE;QACvE,uEAAuE;QACvE,6BAA6B;QAC7B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACpC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;QAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACrC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE;YACjC,OAAO,EAAE;gBACP,cAAc,EAAE,IAAI,CAAC,WAAW,IAAI,0BAA0B;aAC/D;SACF,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAc;QACzB,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAClC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAc;QACzB,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACnC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,GAAW,EAAE,IAAuB;QACnD,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE;YAC9B,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;SACpD,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,GAAW,EAAE,IAAuB;QACnD,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE;YAC9B,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CACR,GAAW;QAEX,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACrC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IAED,YAAY,CAAC,GAAW;QACtB,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO,SAAS,CAAA;QACrC,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,GAAG,EAAE,CAAA;IACtD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAc;QACvB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;QAC9C,OAAO,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAA;IAC9C,CAAC;CACF"}

package/dist/storage/sweep.d.ts

@@ -0,0 +1,9 @@
+import type { AnyDb } from '../dialect.js';
+import type { BucketStorageRegistry } from './registry.js';
+/**
+ * Reap stale `pending` file-meta rows (two-phase uploads that never confirmed)
+ * older than `olderThanMs`. For each, best-effort delete the object (it may
+ * never have landed) then remove the meta row. Returns the number reaped.
+ */
+export declare function sweepOrphans(registry: BucketStorageRegistry, db: AnyDb, olderThanMs: number): Promise<number>;
+//# sourceMappingURL=sweep.d.ts.map

package/dist/storage/sweep.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sweep.d.ts","sourceRoot":"","sources":["../../src/storage/sweep.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AACvC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AAIvD;;;;GAIG;AACH,wBAAsB,YAAY,CAChC,QAAQ,EAAE,qBAAqB,EAC/B,EAAE,EAAE,KAAK,EACT,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,MAAM,CAAC,CASjB"}

package/dist/storage/sweep.js

@@ -0,0 +1,17 @@
+import { deleteFileMetaRow, listStalePendingFiles } from './file-meta.js';
+/**
+ * Reap stale `pending` file-meta rows (two-phase uploads that never confirmed)
+ * older than `olderThanMs`. For each, best-effort delete the object (it may
+ * never have landed) then remove the meta row. Returns the number reaped.
+ */
+export async function sweepOrphans(registry, db, olderThanMs) {
+    const cutoff = Date.now() - olderThanMs;
+    const rows = await listStalePendingFiles(db, cutoff);
+    for (const row of rows) {
+        const adapter = registry.get(row.bucket)?.adapter;
+        await adapter?.delete(row.fileId).catch(() => { });
+        await deleteFileMetaRow(db, row.fileId);
+    }
+    return rows.length;
+}
+//# sourceMappingURL=sweep.js.map

package/dist/storage/sweep.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sweep.js","sourceRoot":"","sources":["../../src/storage/sweep.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AAEtE;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAA+B,EAC/B,EAAS,EACT,WAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAA;IACvC,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;IACpD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,OAAO,CAAA;QACjD,MAAM,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACjD,MAAM,iBAAiB,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IACzC,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAA;AACpB,CAAC"}

package/dist/storage/thumbnails.d.ts

@@ -0,0 +1,11 @@
+export interface TransformSpec {
+    w?: number;
+    h?: number;
+    fit?: 'fill' | 'inside';
+    format?: 'webp' | 'jpeg' | 'png' | 'avif';
+    quality?: number;
+}
+export declare function transformImage(input: Buffer, spec: TransformSpec): Promise<Buffer>;
+export declare function transformHash(spec: TransformSpec): string;
+export declare function parseTransformSpec(query: Record<string, string>): TransformSpec | null;
+//# sourceMappingURL=thumbnails.d.ts.map

package/dist/storage/thumbnails.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"thumbnails.d.ts","sourceRoot":"","sources":["../../src/storage/thumbnails.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,aAAa;IAC5B,CAAC,CAAC,EAAE,MAAM,CAAA;IACV,CAAC,CAAC,EAAE,MAAM,CAAA;IACV,GAAG,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAA;IACvB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,CAAA;IACzC,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAiCD,wBAAsB,cAAc,CAClC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,MAAM,CAAC,CAuBjB;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,CAKzD;AAED,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC5B,aAAa,GAAG,IAAI,CAkBtB"}

package/dist/storage/thumbnails.js

@@ -0,0 +1,60 @@
+import { createHash } from 'node:crypto';
+function imageConstructor() {
+    const ctor = Bun.Image;
+    if (!ctor) {
+        throw new Error('[bunderstack] image transforms need Bun.Image — upgrade Bun (>= 1.3) or request the original file without transform params');
+    }
+    return ctor;
+}
+export async function transformImage(input, spec) {
+    const Image = imageConstructor();
+    let img = new Image(input);
+    if (spec.w !== undefined && spec.h !== undefined) {
+        img = img.resize(spec.w, spec.h, { fit: spec.fit ?? 'fill' });
+    }
+    else if (spec.w !== undefined) {
+        img = img.resize(spec.w);
+    }
+    else if (spec.h !== undefined) {
+        img = img.resize(0, spec.h);
+    }
+    const q = spec.quality;
+    switch (spec.format) {
+        case 'webp':
+            return img.webp({ quality: q }).buffer();
+        case 'png':
+            return img.png().buffer();
+        case 'avif':
+            return img.avif({ quality: q }).buffer();
+        default:
+            return img.jpeg({ quality: q }).buffer();
+    }
+}
+export function transformHash(spec) {
+    return createHash('sha256')
+        .update(JSON.stringify(spec))
+        .digest('hex')
+        .slice(0, 16);
+}
+export function parseTransformSpec(query) {
+    const { w, h, fit, format, quality } = query;
+    if (!w && !h && !fit && !format && !quality)
+        return null;
+    const spec = {};
+    if (w)
+        spec.w = Number(w);
+    if (h)
+        spec.h = Number(h);
+    if (fit === 'fill' || fit === 'inside')
+        spec.fit = fit;
+    if (format === 'webp' ||
+        format === 'jpeg' ||
+        format === 'png' ||
+        format === 'avif') {
+        spec.format = format;
+    }
+    if (quality)
+        spec.quality = Math.min(100, Math.max(1, Number(quality)));
+    return spec;
+}
+//# sourceMappingURL=thumbnails.js.map

package/dist/storage/thumbnails.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"thumbnails.js","sourceRoot":"","sources":["../../src/storage/thumbnails.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AA+BxC,SAAS,gBAAgB;IACvB,MAAM,IAAI,GAAI,GAAkD,CAAC,KAAK,CAAA;IACtE,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CACb,4HAA4H,CAC7H,CAAA;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAa,EACb,IAAmB;IAEnB,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAA;IAChC,IAAI,GAAG,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,CAAA;IAE1B,IAAI,IAAI,CAAC,CAAC,KAAK,SAAS,IAAI,IAAI,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QACjD,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,MAAM,EAAE,CAAC,CAAA;IAC/D,CAAC;SAAM,IAAI,IAAI,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QAChC,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC1B,CAAC;SAAM,IAAI,IAAI,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QAChC,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;IAC7B,CAAC;IAED,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAA;IACtB,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;QACpB,KAAK,MAAM;YACT,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAA;QAC1C,KAAK,KAAK;YACR,OAAO,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,CAAA;QAC3B,KAAK,MAAM;YACT,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAA;QAC1C;YACE,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAA;IAC5C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAmB;IAC/C,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;SAC5B,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AACjB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,KAA6B;IAE7B,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAA;IAC5C,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAA;IAExD,MAAM,IAAI,GAAkB,EAAE,CAAA;IAC9B,IAAI,CAAC;QAAE,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;IACzB,IAAI,CAAC;QAAE,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;IACzB,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,QAAQ;QAAE,IAAI,CAAC,GAAG,GAAG,GAAG,CAAA;IACtD,IACE,MAAM,KAAK,MAAM;QACjB,MAAM,KAAK,MAAM;QACjB,MAAM,KAAK,KAAK;QAChB,MAAM,KAAK,MAAM,EACjB,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;IACD,IAAI,OAAO;QAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;IACvE,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/testing.d.ts

@@ -0,0 +1,27 @@
+export type AuthSessionResolverLike = {
+    api: {
+        getSession: (opts: {
+            headers: Headers;
+        }) => Promise<unknown>;
+    };
+};
+export type BunderstackAppLike = {
+    auth: unknown;
+};
+/**
+ * Mock the auth session resolver on a Bunderstack app instance for unit testing.
+ */
+export declare function mockAuthSession<TUser extends {
+    id: string;
+    email: string;
+    name?: string;
+    role?: string;
+}>(app: BunderstackAppLike, resolver: (opts: {
+    headers: Headers;
+}) => Promise<{
+    user: TUser;
+    session?: {
+        activeOrganizationId?: string | null;
+    } | null;
+} | null>): void;
+//# sourceMappingURL=testing.d.ts.map

package/dist/testing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"testing.d.ts","sourceRoot":"","sources":["../src/testing.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,uBAAuB,GAAG;IACpC,GAAG,EAAE;QACH,UAAU,EAAE,CAAC,IAAI,EAAE;YAAE,OAAO,EAAE,OAAO,CAAA;SAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;KAC7D,CAAA;CACF,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,IAAI,EAAE,OAAO,CAAA;CACd,CAAA;AAED;;GAEG;AACH,wBAAgB,eAAe,CAC7B,KAAK,SAAS;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,EAEzE,GAAG,EAAE,kBAAkB,EACvB,QAAQ,EAAE,CAAC,IAAI,EAAE;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,KAAK,OAAO,CAAC;IAChD,IAAI,EAAE,KAAK,CAAA;IACX,OAAO,CAAC,EAAE;QAAE,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAA;CAC1D,GAAG,IAAI,CAAC,GACR,IAAI,CAON"}

package/dist/testing.js

@@ -0,0 +1,11 @@
+// src/testing.ts — test utilities for Bunderstack applications.
+/**
+ * Mock the auth session resolver on a Bunderstack app instance for unit testing.
+ */
+export function mockAuthSession(app, resolver) {
+    const auth = app.auth;
+    if (auth?.api) {
+        auth.api.getSession = resolver;
+    }
+}
+//# sourceMappingURL=testing.js.map

package/dist/testing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"testing.js","sourceRoot":"","sources":["../src/testing.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAYhE;;GAEG;AACH,MAAM,UAAU,eAAe,CAG7B,GAAuB,EACvB,QAGS;IAET,MAAM,IAAI,GAAG,GAAG,CAAC,IAA0C,CAAA;IAC3D,IAAI,IAAI,EAAE,GAAG,EAAE,CAAC;QACd,IAAI,CAAC,GAAG,CAAC,UAAU,GAAG,QAEA,CAAA;IACxB,CAAC;AACH,CAAC"}

package/dist/typeid-pg.d.ts

@@ -0,0 +1,19 @@
+import { type TypeId } from './typeid.js';
+/**
+ * Drizzle column builder for a branded TypeID text value (Postgres). Stores a
+ * plain `text` column so drizzle-kit migrations and `$inferSelect` work
+ * unchanged.
+ *
+ *   id: typeid('post').primaryKey().$defaultFn(() => generate('post'))
+ */
+export declare function typeid<P extends string>(prefix: P): import("drizzle-orm/pg-core").PgCustomColumnBuilder<{
+    name: "";
+    dataType: "custom";
+    columnType: "PgCustomColumn";
+    data: TypeId<P>;
+    driverParam: string;
+    enumValues: undefined;
+}>;
+export { generate, parse, asTypeId, encode, decode } from './typeid.js';
+export type { TypeId } from './typeid.js';
+//# sourceMappingURL=typeid-pg.d.ts.map

package/dist/typeid-pg.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"typeid-pg.d.ts","sourceRoot":"","sources":["../src/typeid-pg.ts"],"names":[],"mappings":"AAKA,OAAO,EAAiB,KAAK,MAAM,EAAE,MAAM,UAAU,CAAA;AAErD;;;;;;GAMG;AACH,wBAAgB,MAAM,CAAC,CAAC,SAAS,MAAM,EAAE,MAAM,EAAE,CAAC;;;;;;;GAMjD;AAED,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,UAAU,CAAA;AACpE,YAAY,EAAE,MAAM,EAAE,MAAM,UAAU,CAAA"}