cursedbelt 0.0.0

package/dist/server/media-bun/ffmpeg.js

@@ -0,0 +1,126 @@
+// Pure ffmpeg/ffprobe argument builders + output parsers. No Bun.spawn, no I/O — so
+// the argv construction and the stderr/JSON parsing (the bug-prone part) are unit
+// tested without ffmpeg present. `video.ts` is the thin spawn shell around these.
+const X264_CRF = { high: 18, medium: 23, low: 28 };
+const VP9_CRF = { high: 24, medium: 31, low: 37 };
+/**
+ * Resolve the codec plan for a trim. mp4 → H.264/AAC (universal playback) with
+ * `+faststart` so the moov atom is up front (web streaming); webm → VP9/Opus.
+ */
+export function videoCodecPlan(format = 'mp4', quality = 'medium') {
+    if (format === 'webm') {
+        return {
+            videoCodec: 'libvpx-vp9',
+            audioCodec: 'libopus',
+            crf: VP9_CRF[quality],
+            preset: 'good',
+            extraOutputArgs: ['-b:v', '0', '-row-mt', '1'],
+        };
+    }
+    return {
+        videoCodec: 'libx264',
+        audioCodec: 'aac',
+        crf: X264_CRF[quality],
+        preset: 'fast',
+        // yuv420p = broad decoder compatibility; faststart = progressive web playback.
+        extraOutputArgs: ['-pix_fmt', 'yuv420p', '-movflags', '+faststart'],
+    };
+}
+/**
+ * Build the ffmpeg argv (without the `ffmpeg` binary) for a re-encoding trim.
+ * Uses accurate input seeking (`-ss` before `-i`, accurate when transcoding) plus
+ * `-t duration` so the clip is exactly `end - start` long regardless of keyframes.
+ */
+export function buildTrimArgs(spec) {
+    const plan = videoCodecPlan(spec.format, spec.quality);
+    const duration = Math.max(0, spec.endSeconds - spec.startSeconds);
+    return [
+        '-hide_banner',
+        '-nostdin',
+        '-y',
+        '-ss',
+        String(spec.startSeconds),
+        '-i',
+        spec.inputPath,
+        '-t',
+        String(duration),
+        '-c:v',
+        plan.videoCodec,
+        '-preset',
+        plan.preset,
+        '-crf',
+        String(plan.crf),
+        '-c:a',
+        plan.audioCodec,
+        ...plan.extraOutputArgs,
+        spec.outputPath,
+    ];
+}
+/** ffprobe argv for `probeMedia` — quiet JSON with streams + format. */
+export function buildProbeArgs(inputPath) {
+    return ['-v', 'quiet', '-print_format', 'json', '-show_streams', '-show_format', inputPath];
+}
+/** ffmpeg argv to grab a single frame at `atSeconds` and write it to `output`. */
+export function buildThumbnailArgs(inputPath, atSeconds, output) {
+    return [
+        '-hide_banner',
+        '-nostdin',
+        '-y',
+        '-ss',
+        String(Math.max(0, atSeconds)),
+        '-i',
+        inputPath,
+        '-frames:v',
+        '1',
+        '-q:v',
+        '3',
+        output,
+    ];
+}
+/** Parse an ffmpeg `HH:MM:SS.ss` (or bare seconds) timestamp into seconds. */
+export function ffmpegTimeToSeconds(time) {
+    const t = time.trim();
+    if (t === 'N/A' || t === '')
+        return Number.NaN;
+    const parts = t.split(':');
+    if (parts.length === 1)
+        return Number.parseFloat(parts[0]);
+    let seconds = 0;
+    for (const part of parts)
+        seconds = seconds * 60 + Number.parseFloat(part);
+    return seconds;
+}
+const TIME_RE = /time=\s*([0-9:.]+)/;
+/**
+ * Parse one line/chunk of ffmpeg stderr into a progress event. ffmpeg emits
+ * `frame=… time=00:00:03.00 …` (carriage-return-updated). Returns an `encode`
+ * event with a clamped percent when `totalSeconds` is known, else just the phase;
+ * `null` when the line carries no timestamp.
+ */
+export function parseFfmpegProgress(line, totalSeconds) {
+    const m = TIME_RE.exec(line);
+    if (!m)
+        return null;
+    const elapsed = ffmpegTimeToSeconds(m[1]);
+    if (!Number.isFinite(elapsed))
+        return null;
+    if (totalSeconds && totalSeconds > 0) {
+        const pct = Math.min(100, Math.max(0, (elapsed / totalSeconds) * 100));
+        return { phase: 'encode', progressPercent: Math.round(pct) };
+    }
+    return { phase: 'encode' };
+}
+/** Extract width/height/duration/format from parsed ffprobe JSON. */
+export function parseFfprobe(json) {
+    const streams = json.streams ?? [];
+    const video = streams.find((s) => s.codec_type === 'video');
+    const durationStr = json.format?.duration ?? video?.duration ?? '';
+    const durationSeconds = durationStr ? Number.parseFloat(durationStr) : Number.NaN;
+    return {
+        width: video?.width ?? 0,
+        height: video?.height ?? 0,
+        durationSeconds: Number.isFinite(durationSeconds) ? durationSeconds : 0,
+        format: json.format?.format_name ?? '',
+    };
+}
+//# sourceMappingURL=ffmpeg.js.map

package/dist/server/media-bun/ffmpeg.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ffmpeg.js","sourceRoot":"","sources":["../../../src/server/media-bun/ffmpeg.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,kFAAkF;AAClF,kFAAkF;AAoBlF,MAAM,QAAQ,GAAiC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;AACjF,MAAM,OAAO,GAAiC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;AAEhF;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,SAAsB,KAAK,EAC3B,UAAwB,QAAQ;IAEhC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO;YACL,UAAU,EAAE,YAAY;YACxB,UAAU,EAAE,SAAS;YACrB,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,MAAM;YACd,eAAe,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC;SAC/C,CAAC;IACJ,CAAC;IACD,OAAO;QACL,UAAU,EAAE,SAAS;QACrB,UAAU,EAAE,KAAK;QACjB,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC;QACtB,MAAM,EAAE,MAAM;QACd,+EAA+E;QAC/E,eAAe,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,CAAC;KACpE,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAAmB;IAC/C,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC;IAClE,OAAO;QACL,cAAc;QACd,UAAU;QACV,IAAI;QACJ,KAAK;QACL,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC;QACzB,IAAI;QACJ,IAAI,CAAC,SAAS;QACd,IAAI;QACJ,MAAM,CAAC,QAAQ,CAAC;QAChB,MAAM;QACN,IAAI,CAAC,UAAU;QACf,SAAS;QACT,IAAI,CAAC,MAAM;QACX,MAAM;QACN,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QAChB,MAAM;QACN,IAAI,CAAC,UAAU;QACf,GAAG,IAAI,CAAC,eAAe;QACvB,IAAI,CAAC,UAAU;KAChB,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC9C,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,eAAe,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;AAC9F,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,kBAAkB,CAAC,SAAiB,EAAE,SAAiB,EAAE,MAAc;IACrF,OAAO;QACL,cAAc;QACd,UAAU;QACV,IAAI;QACJ,KAAK;QACL,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QAC9B,IAAI;QACJ,SAAS;QACT,WAAW;QACX,GAAG;QACH,MAAM;QACN,GAAG;QACH,MAAM;KACP,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACtB,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC;IAC/C,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,OAAO,GAAG,OAAO,GAAG,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC3E,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,OAAO,GAAG,oBAAoB,CAAC;AAErC;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,IAAY,EACZ,YAAqB;IAErB,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,OAAO,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,YAAY,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,OAAO,GAAG,YAAY,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QACvE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;IAC/D,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC7B,CAAC;AAeD,qEAAqE;AACrE,MAAM,UAAU,YAAY,CAAC,IAAiB;IAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,OAAO,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,IAAI,KAAK,EAAE,QAAQ,IAAI,EAAE,CAAC;IACnE,MAAM,eAAe,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;IAClF,OAAO;QACL,KAAK,EAAE,KAAK,EAAE,KAAK,IAAI,CAAC;QACxB,MAAM,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC;QAC1B,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACvE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,IAAI,EAAE;KACvC,CAAC;AACJ,CAAC"}

package/dist/server/media-bun/image.d.ts

@@ -0,0 +1,8 @@
+import { type ImagePipelineSpec } from '../../core/media';
+/**
+ * Render an `ImagePipelineSpec` to an encoded image buffer. Operations are applied in
+ * order; `compress` overrides the output quality; `format-convert` is a no-op marker
+ * (the output format does the conversion). Throws on an invalid spec (before sharp).
+ */
+export declare function renderImage(spec: ImagePipelineSpec): Promise<Buffer>;
+//# sourceMappingURL=image.d.ts.map

package/dist/server/media-bun/image.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"image.d.ts","sourceRoot":"","sources":["../../../src/server/media-bun/image.ts"],"names":[],"mappings":"AAMA,OAAO,EAML,KAAK,iBAAiB,EACvB,MAAM,kBAAkB,CAAC;AAyD1B;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAuC1E"}

package/dist/server/media-bun/image.js

@@ -0,0 +1,97 @@
+// Image rendering via sharp. sharp is an OPTIONAL peer dep, imported LAZILY inside
+// renderImage so merely importing `cursedbelt/server` never loads the native binary
+// — only an app that actually renders an image pays for it. The transforms are driven
+// by the media-core `ImagePipelineSpec`; `remove-bg` runs the pure media-core BFS on
+// sharp's raw RGBA buffer, then re-wraps the result.
+import { assertValidImagePipelineSpec, clampQuality, floodFillBGS, } from '../../core/media';
+let sharpPromise = null;
+/** Lazily import sharp once; a clear error if the optional peer isn't installed. */
+async function loadSharp() {
+    if (!sharpPromise) {
+        sharpPromise = import('sharp')
+            .then((m) => m.default)
+            .catch((err) => {
+            sharpPromise = null;
+            throw new Error(`cursedbelt media: 'sharp' is required for renderImage but could not be loaded. ` +
+                `Install it in the app (it is an optional peer dependency). Cause: ${err instanceof Error ? err.message : String(err)}`);
+        });
+    }
+    return sharpPromise;
+}
+/** Run a sharp pipeline to a fresh, transparent RGBA buffer, BFS it, re-wrap it. */
+async function applyRemoveBg(sharp, img, op) {
+    const { data, info } = await img.ensureAlpha().raw().toBuffer({ resolveWithObject: true });
+    const out = floodFillBGS(new Uint8Array(data.buffer, data.byteOffset, data.byteLength), {
+        width: info.width,
+        height: info.height,
+        channels: 4,
+        tolerance: op.tolerance,
+    });
+    return sharp(Buffer.from(out.buffer, out.byteOffset, out.byteLength), {
+        raw: { width: info.width, height: info.height, channels: 4 },
+    });
+}
+function applyResize(img, op) {
+    return img.resize({
+        width: op.width,
+        height: op.height,
+        fit: op.fit ?? 'cover',
+        withoutEnlargement: false,
+    });
+}
+/**
+ * Render an `ImagePipelineSpec` to an encoded image buffer. Operations are applied in
+ * order; `compress` overrides the output quality; `format-convert` is a no-op marker
+ * (the output format does the conversion). Throws on an invalid spec (before sharp).
+ */
+export async function renderImage(spec) {
+    assertValidImagePipelineSpec(spec);
+    const sharp = await loadSharp();
+    const source = typeof spec.input === 'string'
+        ? spec.input
+        : Buffer.from(spec.input.buffer, spec.input.byteOffset, spec.input.byteLength);
+    // `failOn: 'none'` keeps a slightly-truncated upload from hard-failing the pipeline.
+    let img = sharp(source, { failOn: 'none' });
+    let quality = spec.output.quality;
+    for (const op of spec.operations) {
+        switch (op.type) {
+            case 'resize':
+                img = applyResize(img, op);
+                break;
+            case 'crop':
+                img = img.extract({ left: op.left, top: op.top, width: op.width, height: op.height });
+                break;
+            case 'rotate':
+                // Default background transparent so a non-90° rotate doesn't fill with black.
+                img = img.rotate(op.angle, { background: { r: 0, g: 0, b: 0, alpha: 0 } });
+                break;
+            case 'flip':
+                img = op.direction === 'vertical' ? img.flip() : img.flop();
+                break;
+            case 'remove-bg':
+                img = await applyRemoveBg(sharp, img, op);
+                break;
+            case 'compress':
+                quality = op.quality;
+                break;
+            case 'format-convert':
+                break;
+        }
+    }
+    return encode(img, spec.output.format, quality);
+}
+function encode(img, format, quality) {
+    const q = clampQuality(quality);
+    switch (format) {
+        case 'jpeg':
+            return img.jpeg({ quality: q, mozjpeg: true }).toBuffer();
+        case 'png':
+            // PNG is lossless; map quality → effort/compression for a size/CPU trade-off.
+            return img.png({ compressionLevel: 9 }).toBuffer();
+        case 'webp':
+            return img.webp({ quality: q }).toBuffer();
+        case 'avif':
+            return img.avif({ quality: q }).toBuffer();
+    }
+}
+//# sourceMappingURL=image.js.map

package/dist/server/media-bun/image.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"image.js","sourceRoot":"","sources":["../../../src/server/media-bun/image.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,oFAAoF;AACpF,sFAAsF;AACtF,qFAAqF;AACrF,qDAAqD;AAErD,OAAO,EACL,4BAA4B,EAC5B,YAAY,EACZ,YAAY,GAIb,MAAM,kBAAkB,CAAC;AAO1B,IAAI,YAAY,GAAiC,IAAI,CAAC;AAEtD,oFAAoF;AACpF,KAAK,UAAU,SAAS;IACtB,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC;aAC3B,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;aACtB,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACb,YAAY,GAAG,IAAI,CAAC;YACpB,MAAM,IAAI,KAAK,CACb,iFAAiF;gBAC/E,qEACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACL,CAAC;QACJ,CAAC,CAAC,CAAC;IACP,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,oFAAoF;AACpF,KAAK,UAAU,aAAa,CAC1B,KAAmB,EACnB,GAAkB,EAClB,EAAkD;IAElD,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3F,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE;QACtF,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,QAAQ,EAAE,CAAC;QACX,SAAS,EAAE,EAAE,CAAC,SAAS;KACxB,CAAC,CAAC;IACH,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,EAAE;QACpE,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE;KAC7D,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAClB,GAAkB,EAClB,EAA+C;IAE/C,OAAO,GAAG,CAAC,MAAM,CAAC;QAChB,KAAK,EAAE,EAAE,CAAC,KAAK;QACf,MAAM,EAAE,EAAE,CAAC,MAAM;QACjB,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,OAAO;QACtB,kBAAkB,EAAE,KAAK;KAC1B,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAuB;IACvD,4BAA4B,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAEhC,MAAM,MAAM,GACV,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;QAC5B,CAAC,CAAC,IAAI,CAAC,KAAK;QACZ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACnF,qFAAqF;IACrF,IAAI,GAAG,GAAG,KAAK,CAAC,MAAyB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAE/D,IAAI,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;IAClC,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACjC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;YAChB,KAAK,QAAQ;gBACX,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAC3B,MAAM;YACR,KAAK,MAAM;gBACT,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;gBACtF,MAAM;YACR,KAAK,QAAQ;gBACX,8EAA8E;gBAC9E,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC3E,MAAM;YACR,KAAK,MAAM;gBACT,GAAG,GAAG,EAAE,CAAC,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC5D,MAAM;YACR,KAAK,WAAW;gBACd,GAAG,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;gBAC1C,MAAM;YACR,KAAK,UAAU;gBACb,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC;gBACrB,MAAM;YACR,KAAK,gBAAgB;gBACnB,MAAM;QACV,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,MAAM,CACb,GAAkB,EAClB,MAAyB,EACzB,OAA2B;IAE3B,MAAM,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAChC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,MAAM;YACT,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC5D,KAAK,KAAK;YACR,8EAA8E;YAC9E,OAAO,GAAG,CAAC,GAAG,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QACrD,KAAK,MAAM;YACT,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC7C,KAAK,MAAM;YACT,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC/C,CAAC;AACH,CAAC"}

package/dist/server/media-bun/index.d.ts

@@ -0,0 +1,4 @@
+export { buildProbeArgs, buildThumbnailArgs, buildTrimArgs, ffmpegTimeToSeconds, type ProbeResult, parseFfmpegProgress, parseFfprobe, type VideoCodecPlan, videoCodecPlan, } from './ffmpeg';
+export { renderImage } from './image';
+export { extractThumbnail, isFfmpegAvailable, isFfprobeAvailable, probeMedia, trimVideo, } from './video';
+//# sourceMappingURL=index.d.ts.map

package/dist/server/media-bun/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/server/media-bun/index.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,mBAAmB,EACnB,KAAK,WAAW,EAChB,mBAAmB,EACnB,YAAY,EACZ,KAAK,cAAc,EACnB,cAAc,GACf,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACtC,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,UAAU,EACV,SAAS,GACV,MAAM,SAAS,CAAC"}

package/dist/server/media-bun/index.js

@@ -0,0 +1,8 @@
+// cursedbelt/server/media (media-bun) — the Bun server adapter for the media-core
+// specs: image rendering via sharp (lazy/optional), video trim + probe + thumbnail
+// via native ffmpeg/ffprobe. App handlers keep auth, FsNode lookup, quota, and
+// storeFile; this owns the actual pixel/codec work.
+export { buildProbeArgs, buildThumbnailArgs, buildTrimArgs, ffmpegTimeToSeconds, parseFfmpegProgress, parseFfprobe, videoCodecPlan, } from './ffmpeg';
+export { renderImage } from './image';
+export { extractThumbnail, isFfmpegAvailable, isFfprobeAvailable, probeMedia, trimVideo, } from './video';
+//# sourceMappingURL=index.js.map

package/dist/server/media-bun/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/media-bun/index.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,mFAAmF;AACnF,+EAA+E;AAC/E,oDAAoD;AAEpD,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,mBAAmB,EAEnB,mBAAmB,EACnB,YAAY,EAEZ,cAAc,GACf,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACtC,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,UAAU,EACV,SAAS,GACV,MAAM,SAAS,CAAC"}

package/dist/server/media-bun/video.d.ts

@@ -0,0 +1,17 @@
+import { type VideoProgressEvent, type VideoTrimSpec } from '../../core/media';
+import { type ProbeResult } from './ffmpeg';
+/** Is ffmpeg runnable? Cheap probe used to skip server media ops / tests cleanly. */
+export declare function isFfmpegAvailable(bin?: string): Promise<boolean>;
+/** Is ffprobe runnable? */
+export declare function isFfprobeAvailable(): Promise<boolean>;
+/**
+ * Trim `[startSeconds, endSeconds]` from `inputPath` into `outputPath`, re-encoding to
+ * the requested format/quality. `onProgress` receives `encode` events (parsed from
+ * ffmpeg stderr) and a final `done`; on a non-zero exit it emits `error` and throws.
+ */
+export declare function trimVideo(spec: VideoTrimSpec, onProgress?: (event: VideoProgressEvent) => void): Promise<void>;
+/** Probe a media file's primary video dimensions + duration + container format. */
+export declare function probeMedia(inputPath: string): Promise<ProbeResult>;
+/** Extract a single frame at `atSeconds` from `inputPath` and write it to `output`. */
+export declare function extractThumbnail(inputPath: string, atSeconds: number, output: string): Promise<void>;
+//# sourceMappingURL=video.d.ts.map

package/dist/server/media-bun/video.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"video.d.ts","sourceRoot":"","sources":["../../../src/server/media-bun/video.ts"],"names":[],"mappings":"AAKA,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,aAAa,EACnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAIL,KAAK,WAAW,EAGjB,MAAM,UAAU,CAAC;AAKlB,qFAAqF;AACrF,wBAAsB,iBAAiB,CAAC,GAAG,GAAE,MAAe,GAAG,OAAO,CAAC,OAAO,CAAC,CAQ9E;AAED,2BAA2B;AAC3B,wBAAgB,kBAAkB,IAAI,OAAO,CAAC,OAAO,CAAC,CAErD;AA2BD;;;;GAIG;AACH,wBAAsB,SAAS,CAC7B,IAAI,EAAE,aAAa,EACnB,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,IAAI,GAC/C,OAAO,CAAC,IAAI,CAAC,CAoBf;AAED,mFAAmF;AACnF,wBAAsB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAiBxE;AAED,uFAAuF;AACvF,wBAAsB,gBAAgB,CACpC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAiBf"}

package/dist/server/media-bun/video.js

@@ -0,0 +1,100 @@
+// Video trim / probe / thumbnail via native ffmpeg + ffprobe, spawned with Bun.spawn.
+// All argv construction + output parsing lives in the pure `ffmpeg.ts` (tested without
+// ffmpeg); this file is the thin process shell. The binaries must be on PATH, or set
+// `FFMPEG_PATH` / `FFPROBE_PATH`. Replaces ca's hand-rolled spawn boilerplate.
+import { assertValidVideoTrimSpec, } from '../../core/media';
+import { buildProbeArgs, buildThumbnailArgs, buildTrimArgs, parseFfmpegProgress, parseFfprobe, } from './ffmpeg';
+const FFMPEG = process.env.FFMPEG_PATH || 'ffmpeg';
+const FFPROBE = process.env.FFPROBE_PATH || 'ffprobe';
+/** Is ffmpeg runnable? Cheap probe used to skip server media ops / tests cleanly. */
+export async function isFfmpegAvailable(bin = FFMPEG) {
+    try {
+        const proc = Bun.spawn([bin, '-version'], { stdout: 'ignore', stderr: 'ignore' });
+        await proc.exited;
+        return proc.exitCode === 0;
+    }
+    catch {
+        return false;
+    }
+}
+/** Is ffprobe runnable? */
+export function isFfprobeAvailable() {
+    return isFfmpegAvailable(FFPROBE);
+}
+/** Drain a stderr stream line-by-line (ffmpeg uses \r to update progress in place). */
+async function readProgress(stream, totalSeconds, onProgress) {
+    const decoder = new TextDecoder();
+    let buffer = '';
+    let tail = '';
+    for await (const chunk of stream) {
+        const text = decoder.decode(chunk, { stream: true });
+        buffer += text;
+        tail = (tail + text).slice(-4000); // keep a bounded tail for an error message
+        const segments = buffer.split(/[\r\n]/);
+        buffer = segments.pop() ?? '';
+        if (onProgress) {
+            for (const seg of segments) {
+                const ev = parseFfmpegProgress(seg, totalSeconds);
+                if (ev)
+                    onProgress(ev);
+            }
+        }
+    }
+    return tail;
+}
+/**
+ * Trim `[startSeconds, endSeconds]` from `inputPath` into `outputPath`, re-encoding to
+ * the requested format/quality. `onProgress` receives `encode` events (parsed from
+ * ffmpeg stderr) and a final `done`; on a non-zero exit it emits `error` and throws.
+ */
+export async function trimVideo(spec, onProgress) {
+    assertValidVideoTrimSpec(spec);
+    const total = spec.endSeconds - spec.startSeconds;
+    onProgress?.({ phase: 'encode', progressPercent: 0 });
+    const proc = Bun.spawn([FFMPEG, ...buildTrimArgs(spec)], { stdout: 'ignore', stderr: 'pipe' });
+    const tail = await readProgress(proc.stderr, total, onProgress);
+    await proc.exited;
+    if (proc.exitCode !== 0) {
+        const message = `ffmpeg trim failed (exit ${proc.exitCode}): ${tail
+            .trim()
+            .split(/[\r\n]/)
+            .pop() ?? ''}`;
+        onProgress?.({ phase: 'error', error: message });
+        throw new Error(message);
+    }
+    onProgress?.({ phase: 'done', progressPercent: 100 });
+}
+/** Probe a media file's primary video dimensions + duration + container format. */
+export async function probeMedia(inputPath) {
+    const proc = Bun.spawn([FFPROBE, ...buildProbeArgs(inputPath)], {
+        stdout: 'pipe',
+        stderr: 'pipe',
+    });
+    const stdout = await new Response(proc.stdout).text();
+    await proc.exited;
+    if (proc.exitCode !== 0) {
+        throw new Error(`ffprobe failed (exit ${proc.exitCode}) for ${inputPath}`);
+    }
+    try {
+        return parseFfprobe(JSON.parse(stdout));
+    }
+    catch (err) {
+        throw new Error(`ffprobe returned unparseable JSON: ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+/** Extract a single frame at `atSeconds` from `inputPath` and write it to `output`. */
+export async function extractThumbnail(inputPath, atSeconds, output) {
+    const proc = Bun.spawn([FFMPEG, ...buildThumbnailArgs(inputPath, atSeconds, output)], {
+        stdout: 'ignore',
+        stderr: 'pipe',
+    });
+    const tail = await new Response(proc.stderr).text();
+    await proc.exited;
+    if (proc.exitCode !== 0) {
+        throw new Error(`ffmpeg thumbnail failed (exit ${proc.exitCode}): ${tail
+            .trim()
+            .split(/[\r\n]/)
+            .pop() ?? ''}`);
+    }
+}
+//# sourceMappingURL=video.js.map

package/dist/server/media-bun/video.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"video.js","sourceRoot":"","sources":["../../../src/server/media-bun/video.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,uFAAuF;AACvF,qFAAqF;AACrF,+EAA+E;AAE/E,OAAO,EACL,wBAAwB,GAGzB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,aAAa,EAEb,mBAAmB,EACnB,YAAY,GACb,MAAM,UAAU,CAAC;AAElB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,QAAQ,CAAC;AACnD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,SAAS,CAAC;AAEtD,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAc,MAAM;IAC1D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClF,MAAM,IAAI,CAAC,MAAM,CAAC;QAClB,OAAO,IAAI,CAAC,QAAQ,KAAK,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,2BAA2B;AAC3B,MAAM,UAAU,kBAAkB;IAChC,OAAO,iBAAiB,CAAC,OAAO,CAAC,CAAC;AACpC,CAAC;AAED,uFAAuF;AACvF,KAAK,UAAU,YAAY,CACzB,MAAkC,EAClC,YAAoB,EACpB,UAAyD;IAEzD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,MAAM,IAAI,IAAI,CAAC;QACf,IAAI,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,2CAA2C;QAC9E,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;QAC9B,IAAI,UAAU,EAAE,CAAC;YACf,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;gBAC3B,MAAM,EAAE,GAAG,mBAAmB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;gBAClD,IAAI,EAAE;oBAAE,UAAU,CAAC,EAAE,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,IAAmB,EACnB,UAAgD;IAEhD,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC;IAClD,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC,CAAC;IAEtD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/F,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,MAAoC,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IAC9F,MAAM,IAAI,CAAC,MAAM,CAAC;IAElB,IAAI,IAAI,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,4BAA4B,IAAI,CAAC,QAAQ,MACvD,IAAI;aACD,IAAI,EAAE;aACN,KAAK,CAAC,QAAQ,CAAC;aACf,GAAG,EAAE,IAAI,EACd,EAAE,CAAC;QACH,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IACD,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,GAAG,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,SAAiB;IAChD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC,EAAE;QAC9D,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,MAAM;KACf,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACtD,MAAM,IAAI,CAAC,MAAM,CAAC;IAClB,IAAI,IAAI,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,CAAC,QAAQ,SAAS,SAAS,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,sCAAsC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACzF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,SAAiB,EACjB,SAAiB,EACjB,MAAc;IAEd,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,GAAG,kBAAkB,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,EAAE;QACpF,MAAM,EAAE,QAAQ;QAChB,MAAM,EAAE,MAAM;KACf,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,MAAM,IAAI,CAAC,MAAM,CAAC;IAClB,IAAI,IAAI,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,iCAAiC,IAAI,CAAC,QAAQ,MAC5C,IAAI;aACD,IAAI,EAAE;aACN,KAAK,CAAC,QAAQ,CAAC;aACf,GAAG,EAAE,IAAI,EACd,EAAE,CACH,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/server/metrics/metricsBuffer.d.ts

@@ -0,0 +1,40 @@
+import type { Database } from 'bun:sqlite';
+/**
+ * In-memory, batched writer for `request_metrics`. To keep request latency
+ * untouched we never write per request: rows land in a buffer and a single batched
+ * transaction flushes them on an interval (and eagerly when the buffer is large).
+ *
+ * This is the reusable successor to ca's `metricsBuffer` module, retargeted at the
+ * task-22 `request_metrics` schema (no `created_at` column — `ts` is the epoch-ms
+ * timestamp). The flush timer is `unref()`'d so it never keeps the process alive.
+ */
+export interface MetricRow {
+    /** Epoch ms. */
+    ts: number;
+    method: string | null;
+    /** Normalized route label (see `normalizeRoute`). */
+    route: string | null;
+    status: number | null;
+    durationMs: number | null;
+    bytesOut: number | null;
+    userId: string | null;
+}
+export interface MetricsBufferOptions {
+    db: Database;
+    /** Flush cadence in ms. Default: 1500. */
+    flushIntervalMs?: number;
+    /** Eager-flush threshold — caps memory if a flush stalls. Default: 5000. */
+    maxSize?: number;
+}
+export interface MetricsBuffer {
+    /** Enqueue one request's metrics (non-blocking; flushed in batches). */
+    record(row: MetricRow): void;
+    /** Force-flush the buffer now (also used on shutdown + in tests). */
+    flush(): void;
+    /** Stop the flush timer and drain whatever remains. */
+    stop(): void;
+    /** Rows currently buffered (not yet flushed). */
+    readonly size: number;
+}
+export declare function createMetricsBuffer(opts: MetricsBufferOptions): MetricsBuffer;
+//# sourceMappingURL=metricsBuffer.d.ts.map

package/dist/server/metrics/metricsBuffer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metricsBuffer.d.ts","sourceRoot":"","sources":["../../../src/server/metrics/metricsBuffer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C;;;;;;;;GAQG;AAEH,MAAM,WAAW,SAAS;IACxB,gBAAgB;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,qDAAqD;IACrD,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,QAAQ,CAAC;IACb,0CAA0C;IAC1C,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,wEAAwE;IACxE,MAAM,CAAC,GAAG,EAAE,SAAS,GAAG,IAAI,CAAC;IAC7B,qEAAqE;IACrE,KAAK,IAAI,IAAI,CAAC;IACd,uDAAuD;IACvD,IAAI,IAAI,IAAI,CAAC;IACb,iDAAiD;IACjD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,oBAAoB,GAAG,aAAa,CAgD7E"}

package/dist/server/metrics/metricsBuffer.js

@@ -0,0 +1,37 @@
+export function createMetricsBuffer(opts) {
+    const { db, flushIntervalMs = 1500, maxSize = 5000 } = opts;
+    let buffer = [];
+    const insert = db.prepare(`INSERT INTO request_metrics (id, ts, method, route, status, duration_ms, bytes_out, user_id)
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?)`);
+    const insertMany = db.transaction((rows) => {
+        for (const r of rows) {
+            insert.run(crypto.randomUUID(), r.ts, r.method, r.route, r.status, r.durationMs, r.bytesOut, r.userId);
+        }
+    });
+    const flush = () => {
+        if (buffer.length === 0)
+            return;
+        const batch = buffer;
+        buffer = [];
+        insertMany(batch);
+    };
+    const timer = setInterval(flush, flushIntervalMs);
+    // Never let the metrics flusher hold the event loop / process open.
+    timer.unref?.();
+    return {
+        record(row) {
+            buffer.push(row);
+            if (buffer.length >= maxSize)
+                flush();
+        },
+        flush,
+        stop() {
+            clearInterval(timer);
+            flush();
+        },
+        get size() {
+            return buffer.length;
+        },
+    };
+}
+//# sourceMappingURL=metricsBuffer.js.map

package/dist/server/metrics/metricsBuffer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metricsBuffer.js","sourceRoot":"","sources":["../../../src/server/metrics/metricsBuffer.ts"],"names":[],"mappings":"AA2CA,MAAM,UAAU,mBAAmB,CAAC,IAA0B;IAC5D,MAAM,EAAE,EAAE,EAAE,eAAe,GAAG,IAAI,EAAE,OAAO,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;IAC5D,IAAI,MAAM,GAAgB,EAAE,CAAC;IAE7B,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CACvB;qCACiC,CAClC,CAAC;IACF,MAAM,UAAU,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,IAAiB,EAAE,EAAE;QACtD,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,CAAC,GAAG,CACR,MAAM,CAAC,UAAU,EAAE,EACnB,CAAC,CAAC,EAAE,EACJ,CAAC,CAAC,MAAM,EACR,CAAC,CAAC,KAAK,EACP,CAAC,CAAC,MAAM,EACR,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,QAAQ,EACV,CAAC,CAAC,MAAM,CACT,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,GAAS,EAAE;QACvB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAChC,MAAM,KAAK,GAAG,MAAM,CAAC;QACrB,MAAM,GAAG,EAAE,CAAC;QACZ,UAAU,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IAClD,oEAAoE;IACpE,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAEhB,OAAO;QACL,MAAM,CAAC,GAAG;YACR,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjB,IAAI,MAAM,CAAC,MAAM,IAAI,OAAO;gBAAE,KAAK,EAAE,CAAC;QACxC,CAAC;QACD,KAAK;QACL,IAAI;YACF,aAAa,CAAC,KAAK,CAAC,CAAC;YACrB,KAAK,EAAE,CAAC;QACV,CAAC;QACD,IAAI,IAAI;YACN,OAAO,MAAM,CAAC,MAAM,CAAC;QACvB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/server/metrics/normalizeRoute.d.ts

@@ -0,0 +1,6 @@
+import type { Context } from 'hono';
+export declare function normalizeRoute(c: Context): {
+    method: string;
+    route: string;
+};
+//# sourceMappingURL=normalizeRoute.d.ts.map

package/dist/server/metrics/normalizeRoute.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalizeRoute.d.ts","sourceRoot":"","sources":["../../../src/server/metrics/normalizeRoute.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAqCpC,wBAAgB,cAAc,CAAC,CAAC,EAAE,OAAO,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAyB5E"}

package/dist/server/metrics/normalizeRoute.js

@@ -0,0 +1,59 @@
+/**
+ * Turn a request into a stable, low-cardinality route label for metric aggregation
+ * (e.g. `/api/v1/notes/:id`). The method is tracked separately.
+ *
+ * Two wrinkles, same as the old Express normalizer:
+ *   1. ctgr GET-tunnelled mutations match the `/ctgr<xx>` twin route — we map them
+ *      back to the real verb + path so a POST and its ctgr twin aggregate together.
+ *   2. Unmatched requests (404s, static, the SPA fallback) have no matched route
+ *      pattern, so we collapse dynamic-looking segments to avoid unbounded
+ *      cardinality blowing up the metrics table.
+ */
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+const LONG_HEX_RE = /^[0-9a-f]{16,}$/i;
+// The ctgr twin URL is `/ctgr<last-2-of-method><url>`, so the two-letter suffix
+// recovers the original verb (POST→st, PUT→ut, PATCH→ch, DELETE→te).
+const CTGR_METHOD = { st: 'POST', ut: 'PUT', ch: 'PATCH', te: 'DELETE' };
+function collapseSegment(seg) {
+    if (!seg)
+        return seg;
+    if (/^\d+$/.test(seg))
+        return ':id';
+    if (UUID_RE.test(seg))
+        return ':id';
+    if (LONG_HEX_RE.test(seg))
+        return ':id';
+    // Long opaque tokens (encoded paths, blobs) collapse so they don't explode route
+    // cardinality. Plain words stay as-is.
+    if (seg.length >= 24)
+        return ':id';
+    return seg;
+}
+function collapsePath(path) {
+    const parts = path.split('/').filter(Boolean).map(collapseSegment);
+    return `/${parts.join('/')}`;
+}
+export function normalizeRoute(c) {
+    let method = c.req.method;
+    // Hono's matched route pattern (with :params) is the ideal label. A wildcard
+    // (`/*`, `*`) or empty pattern means "no real match" → collapse the raw path.
+    // `c.req.routePath` THROWS when nothing matched (e.g. a 404 / the SPA fallback),
+    // so guard it — an unmatched request must still produce a metrics label.
+    let matched;
+    try {
+        matched = c.req.routePath;
+    }
+    catch {
+        matched = undefined;
+    }
+    let route = matched && !matched.includes('*') ? matched : collapsePath(c.req.path.split('?')[0]) || '/';
+    // Map a ctgr GET-twin back to its real verb + url:
+    //   /api/ctgrch/notes/:id → PATCH /api/notes/:id
+    const ctgr = route.match(/\/ctgr([a-z]{2})(?=\/|$)/i);
+    if (ctgr) {
+        method = CTGR_METHOD[ctgr[1].toLowerCase()] ?? method;
+        route = route.replace(/\/ctgr[a-z]{2}/i, '') || '/';
+    }
+    return { method, route };
+}
+//# sourceMappingURL=normalizeRoute.js.map

package/dist/server/metrics/normalizeRoute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalizeRoute.js","sourceRoot":"","sources":["../../../src/server/metrics/normalizeRoute.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;GAUG;AAEH,MAAM,OAAO,GAAG,iEAAiE,CAAC;AAClF,MAAM,WAAW,GAAG,kBAAkB,CAAC;AAEvC,gFAAgF;AAChF,qEAAqE;AACrE,MAAM,WAAW,GAA2B,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;AAEjG,SAAS,eAAe,CAAC,GAAW;IAClC,IAAI,CAAC,GAAG;QAAE,OAAO,GAAG,CAAC;IACrB,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,iFAAiF;IACjF,uCAAuC;IACvC,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACnE,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,CAAU;IACvC,IAAI,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;IAE1B,6EAA6E;IAC7E,8EAA8E;IAC9E,iFAAiF;IACjF,yEAAyE;IACzE,IAAI,OAA2B,CAAC;IAChC,IAAI,CAAC;QACH,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,SAAS,CAAC;IACtB,CAAC;IACD,IAAI,KAAK,GACP,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;IAE9F,mDAAmD;IACnD,iDAAiD;IACjD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACtD,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,MAAM,CAAC;QACtD,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;IACtD,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC3B,CAAC"}

package/dist/server/middleware/correlationId.d.ts

@@ -0,0 +1,10 @@
+import type { MiddlewareHandler } from 'hono';
+import type { CursedbeltEnv } from '../context';
+/**
+ * Assign every request a correlation id: reuse a safe inbound `x-correlation-id`
+ * (so a trace survives the proxy hop), else mint a `crypto.randomUUID()`. Stored on
+ * `c.set('correlationId', id)` for downstream middleware (request logger, error
+ * envelope) and echoed on the response header. Mount this FIRST.
+ */
+export declare function correlationId(): MiddlewareHandler<CursedbeltEnv>;
+//# sourceMappingURL=correlationId.d.ts.map

package/dist/server/middleware/correlationId.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"correlationId.d.ts","sourceRoot":"","sources":["../../../src/server/middleware/correlationId.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAC9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAQhD;;;;;GAKG;AACH,wBAAgB,aAAa,IAAI,iBAAiB,CAAC,aAAa,CAAC,CAQhE"}

package/dist/server/middleware/correlationId.js

@@ -0,0 +1,21 @@
+const HEADER = 'x-correlation-id';
+// Accept a client-supplied id only if it is a sane, header-safe token (no CRLF /
+// control chars / unbounded length) — otherwise mint a fresh one. This both
+// preserves trace ids across a proxy hop and blocks response-header injection.
+const SAFE_ID = /^[A-Za-z0-9._:-]{1,200}$/;
+/**
+ * Assign every request a correlation id: reuse a safe inbound `x-correlation-id`
+ * (so a trace survives the proxy hop), else mint a `crypto.randomUUID()`. Stored on
+ * `c.set('correlationId', id)` for downstream middleware (request logger, error
+ * envelope) and echoed on the response header. Mount this FIRST.
+ */
+export function correlationId() {
+    return async (c, next) => {
+        const inbound = c.req.header(HEADER);
+        const id = inbound && SAFE_ID.test(inbound) ? inbound : crypto.randomUUID();
+        c.set('correlationId', id);
+        c.header(HEADER, id);
+        await next();
+    };
+}
+//# sourceMappingURL=correlationId.js.map

package/dist/server/middleware/correlationId.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"correlationId.js","sourceRoot":"","sources":["../../../src/server/middleware/correlationId.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,GAAG,kBAAkB,CAAC;AAClC,iFAAiF;AACjF,4EAA4E;AAC5E,+EAA+E;AAC/E,MAAM,OAAO,GAAG,0BAA0B,CAAC;AAE3C;;;;;GAKG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,EAAE,GAAG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QAC5E,CAAC,CAAC,GAAG,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QAC3B,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACrB,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;AACJ,CAAC"}

package/dist/server/middleware/errorEnvelope.d.ts

@@ -0,0 +1,14 @@
+import type { ErrorHandler } from 'hono';
+import type { CursedbeltEnv } from '../context';
+/**
+ * Hono `onError` handler. Converts ANY thrown value into the canonical
+ * `{ error: { message, code?, context? } }` envelope + the right HTTP status, and
+ * echoes the correlation id so a client can quote it in a bug report.
+ *
+ *   - `ApiError`        → its status + full envelope (message/code/context).
+ *   - `HTTPException`   → its status + message (Hono's own thrown errors).
+ *   - anything else     → 500 + a generic message; the real error is logged with
+ *                         the correlation id (never leaked to the client).
+ */
+export declare const errorEnvelope: ErrorHandler<CursedbeltEnv>;
+//# sourceMappingURL=errorEnvelope.d.ts.map

package/dist/server/middleware/errorEnvelope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errorEnvelope.d.ts","sourceRoot":"","sources":["../../../src/server/middleware/errorEnvelope.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,MAAM,CAAC;AAGzC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAGhD;;;;;;;;;GASG;AACH,eAAO,MAAM,aAAa,EAAE,YAAY,CAAC,aAAa,CAiBrD,CAAC"}