emdash 1.0.1 → 1.2.0

package/dist/media-IT8hQleU.mjs

@@ -0,0 +1,373 @@
+import { n as chunks, t as SQL_BATCH_SIZE } from "./chunks-Dr5Vr0zA.mjs";
+import { c as encodeCursor, s as decodeCursor } from "./types-C-Xp0CcN.mjs";
+import { n as normalizeFocalPoint } from "./focal-point-JX8kcOTQ.mjs";
+import { sql } from "kysely";
+import { ulid } from "ulidx";
+
+//#region src/database/repositories/media.ts
+/** Escape LIKE wildcard characters and the escape char itself in user-supplied values */
+function escapeLike(value) {
+	return value.replaceAll("\\", "\\\\").replaceAll("%", "\\%").replaceAll("_", "\\_");
+}
+/**
+* Normalize a mimeType filter (string or array) into a clean string[].
+* Entries that are empty strings are dropped.
+*/
+function normalizeMimeFilter(input) {
+	if (!input) return [];
+	return (Array.isArray(input) ? input : [input]).filter((entry) => typeof entry === "string" && entry.length > 0).map((entry) => entry.endsWith("/") ? entry.toLowerCase() : entry.split(";")[0].trim().toLowerCase());
+}
+function normalizeListLimit(limit) {
+	const integer = typeof limit === "number" && !Number.isNaN(limit) ? Math.trunc(limit) : 50;
+	return Math.min(Math.max(integer, 1), 100);
+}
+/**
+* Build a WHERE clause that matches `mime_type` against any of the given
+* filter entries — exact equality for full MIMEs, LIKE prefix for entries
+* ending in "/".
+*/
+function mimeMatchExpr(eb, filters) {
+	return eb.or(filters.map((entry) => entry.endsWith("/") ? sql`mime_type LIKE ${`${escapeLike(entry)}%`} ESCAPE '\\'` : eb("mime_type", "=", entry)));
+}
+const UPLOAD_ATTEMPT_CLEANUP_AGE_MS = 3600 * 1e3;
+const UPLOAD_ATTEMPT_CLEANUP_BATCH_SIZE = 100;
+/**
+* Media repository for database operations
+*/
+var MediaRepository = class {
+	constructor(db) {
+		this.db = db;
+	}
+	/**
+	* Create a new media item
+	*/
+	async create(input) {
+		const id = ulid();
+		const now = (/* @__PURE__ */ new Date()).toISOString();
+		const row = {
+			id,
+			filename: input.filename,
+			mime_type: input.mimeType,
+			size: input.size ?? null,
+			width: input.width ?? null,
+			height: input.height ?? null,
+			focal_x: null,
+			focal_y: null,
+			alt: input.alt ?? null,
+			caption: input.caption ?? null,
+			storage_key: input.storageKey,
+			content_hash: input.contentHash ?? null,
+			blurhash: input.blurhash ?? null,
+			dominant_color: input.dominantColor ?? null,
+			status: input.status ?? "ready",
+			created_at: now,
+			author_id: input.authorId ?? null,
+			folder_id: input.folderId ?? null
+		};
+		await this.db.insertInto("media").values(row).execute();
+		return this.rowToItem(row);
+	}
+	/**
+	* Create a pending media item (for signed URL upload flow)
+	*/
+	async createPending(input) {
+		return this.create({
+			...input,
+			status: "pending"
+		});
+	}
+	async createUploadAttempt(mediaId, storageKey) {
+		const now = (/* @__PURE__ */ new Date()).toISOString();
+		await this.db.insertInto("_emdash_media_upload_attempts").values({
+			media_id: mediaId,
+			storage_key: storageKey,
+			status: "active",
+			created_at: now,
+			updated_at: now
+		}).execute();
+	}
+	/**
+	* Register a stored object for cleanup before its media row is removed,
+	* so a failed storage delete is retried by the cleanup sweep instead of
+	* leaving the object unreferenced and unreachable.
+	*/
+	async trackStorageKeyForCleanup(mediaId, storageKey) {
+		const now = (/* @__PURE__ */ new Date()).toISOString();
+		await this.db.insertInto("_emdash_media_upload_attempts").values({
+			media_id: mediaId,
+			storage_key: storageKey,
+			status: "cleanup",
+			created_at: now,
+			updated_at: now
+		}).onConflict((oc) => oc.column("storage_key").doUpdateSet({
+			status: "cleanup",
+			updated_at: now
+		})).execute();
+	}
+	async hasUploadAttempt(storageKey) {
+		return await this.db.selectFrom("_emdash_media_upload_attempts").select("storage_key").where("storage_key", "=", storageKey).executeTakeFirst() !== void 0;
+	}
+	async claimUploadAttemptForCleanup(storageKey) {
+		const result = await this.db.updateTable("_emdash_media_upload_attempts").set({
+			status: "cleanup",
+			updated_at: (/* @__PURE__ */ new Date()).toISOString()
+		}).where("storage_key", "=", storageKey).where((eb) => eb.not(eb.exists(eb.selectFrom("media").select("media.id").whereRef("media.storage_key", "=", "_emdash_media_upload_attempts.storage_key")))).executeTakeFirst();
+		return Number(result.numUpdatedRows ?? 0) > 0;
+	}
+	async deleteUploadAttempt(storageKey) {
+		await this.db.deleteFrom("_emdash_media_upload_attempts").where("storage_key", "=", storageKey).execute();
+	}
+	async deferUploadAttemptCleanup(storageKey) {
+		await this.db.updateTable("_emdash_media_upload_attempts").set({ updated_at: (/* @__PURE__ */ new Date()).toISOString() }).where("storage_key", "=", storageKey).execute();
+	}
+	async deleteCompletedUploadAttempts() {
+		const result = await this.db.deleteFrom("_emdash_media_upload_attempts").where("status", "=", "active").where((eb) => eb.exists(eb.selectFrom("media").select("media.id").whereRef("media.id", "=", "_emdash_media_upload_attempts.media_id").whereRef("media.storage_key", "=", "_emdash_media_upload_attempts.storage_key").where("media.status", "=", "ready"))).executeTakeFirst();
+		return Number(result.numDeletedRows ?? 0);
+	}
+	async findUploadAttemptsForCleanup(maxAgeMs = UPLOAD_ATTEMPT_CLEANUP_AGE_MS, limit = UPLOAD_ATTEMPT_CLEANUP_BATCH_SIZE) {
+		const cutoff = new Date(Date.now() - maxAgeMs).toISOString();
+		return (await this.db.selectFrom("_emdash_media_upload_attempts").select("storage_key").where((eb) => eb.or([eb("status", "=", "cleanup"), eb("created_at", "<", cutoff)])).where((eb) => eb.not(eb.exists(eb.selectFrom("media").select("media.id").whereRef("media.storage_key", "=", "_emdash_media_upload_attempts.storage_key")))).orderBy("updated_at", "asc").limit(limit).execute()).map((row) => row.storage_key);
+	}
+	async publishPendingStorageKey(id, expectedStorageKey, storageKey, contentHash) {
+		const result = await this.db.updateTable("media").set({
+			storage_key: storageKey,
+			...contentHash !== void 0 ? { content_hash: contentHash } : {}
+		}).where("id", "=", id).where("status", "=", "pending").where("storage_key", "=", expectedStorageKey).where((eb) => eb.exists(eb.selectFrom("_emdash_media_upload_attempts").select("storage_key").where("media_id", "=", id).where("storage_key", "=", storageKey).where("status", "=", "active"))).executeTakeFirst();
+		return Number(result.numUpdatedRows ?? 0) > 0;
+	}
+	/**
+	* Confirm upload (mark as ready)
+	*/
+	async confirmUpload(id, metadata, expectedStorageKey) {
+		const updates = { status: "ready" };
+		if (metadata?.width !== void 0) updates.width = metadata.width;
+		if (metadata?.height !== void 0) updates.height = metadata.height;
+		if (metadata?.size !== void 0) updates.size = metadata.size;
+		if (metadata?.blurhash !== void 0) updates.blurhash = metadata.blurhash;
+		if (metadata?.dominantColor !== void 0) updates.dominant_color = metadata.dominantColor;
+		if (metadata?.contentHash !== void 0) updates.content_hash = metadata.contentHash;
+		let query = this.db.updateTable("media").set(updates).where("id", "=", id).where("status", "=", "pending");
+		if (expectedStorageKey !== void 0) query = query.where("storage_key", "=", expectedStorageKey);
+		const row = await query.returningAll().executeTakeFirst();
+		return row ? this.rowToItem(row) : null;
+	}
+	/**
+	* Mark upload as failed
+	*/
+	async markFailed(id, expectedStorageKey) {
+		let query = this.db.updateTable("media").set({ status: "failed" }).where("id", "=", id);
+		if (expectedStorageKey !== void 0) query = query.where("status", "=", "pending").where("storage_key", "=", expectedStorageKey);
+		const row = await query.returningAll().executeTakeFirst();
+		return row ? this.rowToItem(row) : null;
+	}
+	/**
+	* Find the pending media row minted for a signed upload URL.
+	*/
+	async findPendingByStorageKey(storageKey) {
+		const row = await this.db.selectFrom("media").selectAll().where("storage_key", "=", storageKey).where("status", "=", "pending").executeTakeFirst();
+		return row ? this.rowToItem(row) : null;
+	}
+	/**
+	* Find media by ID
+	*/
+	async findById(id) {
+		const row = await this.db.selectFrom("media").selectAll().where("id", "=", id).executeTakeFirst();
+		return row ? this.rowToItem(row) : null;
+	}
+	/**
+	* Find media by filename
+	* Useful for idempotent imports
+	*/
+	async findByFilename(filename) {
+		const row = await this.db.selectFrom("media").selectAll().where("filename", "=", filename).executeTakeFirst();
+		return row ? this.rowToItem(row) : null;
+	}
+	async findAvailableFilename(filename) {
+		const exists = async (candidate) => Boolean(await this.db.selectFrom("media").select("id").where(sql`lower(filename)`, "=", candidate.toLowerCase()).executeTakeFirst());
+		if (!await exists(filename)) return filename;
+		const extensionIndex = filename.lastIndexOf(".");
+		const hasExtension = extensionIndex > 0;
+		const extension = hasExtension ? filename.slice(extensionIndex) : "";
+		const stem = hasExtension ? filename.slice(0, extensionIndex) : filename;
+		let copyNumber = 2;
+		let candidate = `${stem}-${copyNumber}${extension}`;
+		while (await exists(candidate)) {
+			copyNumber += 1;
+			candidate = `${stem}-${copyNumber}${extension}`;
+		}
+		return candidate;
+	}
+	/**
+	* Find media by content hash
+	* Used for deduplication - same content = same hash
+	*/
+	async findByContentHash(contentHash) {
+		const row = await this.db.selectFrom("media").selectAll().where("content_hash", "=", contentHash).where("status", "=", "ready").executeTakeFirst();
+		return row ? this.rowToItem(row) : null;
+	}
+	/**
+	* Find many media items with cursor pagination
+	*
+	* Uses keyset pagination (cursor-based) for consistent results.
+	* The cursor encodes the created_at and id of the last item.
+	*/
+	async findMany(options = {}) {
+		const limit = normalizeListLimit(options.limit);
+		let query = this.applyListFilters(this.db.selectFrom("media"), options).selectAll().orderBy("created_at", "desc").orderBy("id", "desc").limit(limit + 1);
+		if (options.cursor) {
+			const { orderValue: createdAt, id: cursorId } = decodeCursor(options.cursor);
+			query = query.where((eb) => eb.or([eb("created_at", "<", createdAt), eb.and([eb("created_at", "=", createdAt), eb("id", "<", cursorId)])]));
+		}
+		const rows = await query.execute();
+		const hasMore = rows.length > limit;
+		const items = rows.slice(0, limit).map((row) => this.rowToItem(row));
+		let nextCursor;
+		if (hasMore && items.length > 0) {
+			const lastItem = items.at(-1);
+			nextCursor = encodeCursor(lastItem.createdAt, lastItem.id);
+		}
+		return {
+			items,
+			nextCursor
+		};
+	}
+	async findPage(options) {
+		const limit = normalizeListLimit(options.limit);
+		const offset = (options.page - 1) * limit;
+		const filtered = this.applyListFilters(this.db.selectFrom("media"), options);
+		const rows = await filtered.selectAll().orderBy("created_at", "desc").orderBy("id", "desc").limit(limit).offset(offset).execute();
+		const count = await filtered.select((eb) => eb.fn.count("id").as("count")).executeTakeFirst();
+		return {
+			items: rows.map((row) => this.rowToItem(row)),
+			totalCount: Number(count?.count ?? 0)
+		};
+	}
+	/**
+	* Update media metadata
+	*/
+	async update(id, input) {
+		if (!await this.findById(id)) return null;
+		const updates = {};
+		if (input.alt !== void 0) updates.alt = input.alt;
+		if (input.caption !== void 0) updates.caption = input.caption;
+		if (input.width !== void 0) updates.width = input.width;
+		if (input.height !== void 0) updates.height = input.height;
+		if (input.folderId !== void 0) updates.folder_id = input.folderId;
+		if (input.focalX !== void 0 && input.focalY !== void 0) {
+			updates.focal_x = input.focalX;
+			updates.focal_y = input.focalY;
+		}
+		if (Object.keys(updates).length > 0) await this.db.updateTable("media").set(updates).where("id", "=", id).execute();
+		return this.findById(id);
+	}
+	async updateReadyMetadata(id, input) {
+		const updates = {};
+		if (input.alt !== void 0) updates.alt = input.alt;
+		if (input.caption !== void 0) updates.caption = input.caption;
+		if (input.focalX !== void 0 && input.focalY !== void 0) {
+			updates.focal_x = input.focalX;
+			updates.focal_y = input.focalY;
+		}
+		if (Object.keys(updates).length === 0) throw new TypeError("Media metadata update requires at least one field");
+		const row = await this.db.updateTable("media").set(updates).where("id", "=", id).where("status", "=", "ready").returningAll().executeTakeFirst();
+		return row ? this.rowToItem(row) : null;
+	}
+	async replaceReadyFile(id, expectedStorageKey, input) {
+		const row = await this.db.updateTable("media").set({
+			size: input.size,
+			width: input.width,
+			height: input.height,
+			content_hash: input.contentHash,
+			blurhash: null,
+			dominant_color: null,
+			focal_x: null,
+			focal_y: null
+		}).where("id", "=", id).where("status", "=", "ready").where("storage_key", "=", expectedStorageKey).returningAll().executeTakeFirst();
+		return row ? this.rowToItem(row) : null;
+	}
+	/**
+	* Delete media item
+	*/
+	async deleteWithStorageKey(id) {
+		const deleted = await this.db.deleteFrom("media").where("id", "=", id).returning("storage_key").executeTakeFirst();
+		if (deleted) return deleted.storage_key;
+		return null;
+	}
+	async isStorageKeyReferenced(storageKey) {
+		return await this.db.selectFrom("media").select("id").where("storage_key", "=", storageKey).executeTakeFirst() !== void 0;
+	}
+	async delete(id) {
+		return await this.deleteWithStorageKey(id) !== null;
+	}
+	/**
+	* Count media items
+	*/
+	async count(mimeType) {
+		const filters = normalizeMimeFilter(mimeType);
+		let query = this.db.selectFrom("media").select((eb) => eb.fn.count("id").as("count"));
+		if (filters.length > 0) query = query.where((eb) => mimeMatchExpr(eb, filters));
+		const result = await query.executeTakeFirst();
+		return Number(result?.count || 0);
+	}
+	applyListFilters(query, options) {
+		const mimeFilters = normalizeMimeFilter(options.mimeType);
+		if (mimeFilters.length > 0) query = query.where((eb) => mimeMatchExpr(eb, mimeFilters));
+		const term = options.q?.trim();
+		if (term) {
+			const pattern = `%${escapeLike(term)}%`;
+			query = query.where(sql`lower(filename)`, "like", sql`lower(${pattern}) escape '\\'`);
+		}
+		if (options.status !== "all") query = query.where("status", "=", options.status ?? "ready");
+		if (options.folderId === null) query = query.where("folder_id", "is", null);
+		else if (options.folderId !== void 0) query = query.where("folder_id", "=", options.folderId);
+		return query;
+	}
+	/**
+	* Delete pending uploads older than the given age.
+	* Pending uploads that were never confirmed indicate abandoned upload flows.
+	*
+	* Returns the storage keys of deleted rows so callers can remove the
+	* corresponding files from object storage.
+	*/
+	async cleanupPendingUploads(maxAgeMs = 3600 * 1e3) {
+		const cutoff = new Date(Date.now() - maxAgeMs).toISOString();
+		const keys = (await this.db.deleteFrom("media").where("status", "=", "pending").where("created_at", "<", cutoff).returning("storage_key").execute()).map((r) => r.storage_key);
+		if (keys.length === 0) return keys;
+		const stillReferenced = /* @__PURE__ */ new Set();
+		for (const batch of chunks(keys, SQL_BATCH_SIZE)) {
+			const refs = await this.db.selectFrom("media").select("storage_key").where("storage_key", "in", batch).execute();
+			for (const ref of refs) stillReferenced.add(ref.storage_key);
+		}
+		return keys.filter((key) => !stillReferenced.has(key));
+	}
+	/**
+	* Convert database row to MediaItem
+	*/
+	rowToItem(row) {
+		const focalPoint = normalizeFocalPoint(row.focal_x, row.focal_y);
+		return {
+			id: row.id,
+			filename: row.filename,
+			mimeType: row.mime_type,
+			size: row.size,
+			width: row.width,
+			height: row.height,
+			focalX: focalPoint?.focalX ?? null,
+			focalY: focalPoint?.focalY ?? null,
+			alt: row.alt,
+			caption: row.caption,
+			storageKey: row.storage_key,
+			contentHash: row.content_hash,
+			blurhash: row.blurhash,
+			dominantColor: row.dominant_color,
+			status: row.status,
+			createdAt: row.created_at,
+			authorId: row.author_id,
+			folderId: row.folder_id
+		};
+	}
+};
+
+//#endregion
+export { MediaRepository as t };
+//# sourceMappingURL=media-IT8hQleU.mjs.map

package/dist/media-IT8hQleU.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"media-IT8hQleU.mjs","names":[],"sources":["../src/database/repositories/media.ts"],"sourcesContent":["import {\n\tsql,\n\ttype ExpressionBuilder,\n\ttype Kysely,\n\ttype SelectQueryBuilder,\n\ttype SqlBool,\n} from \"kysely\";\nimport { ulid } from \"ulidx\";\n\nimport { normalizeFocalPoint, type FocalPointUpdate } from \"../../media/focal-point.js\";\nimport { chunks, SQL_BATCH_SIZE } from \"../../utils/chunks.js\";\nimport type { Database, MediaRow } from \"../types.js\";\nimport type { FindManyResult } from \"./types.js\";\nimport { encodeCursor, decodeCursor } from \"./types.js\";\n\n/** Escape LIKE wildcard characters and the escape char itself in user-supplied values */\nfunction escapeLike(value: string): string {\n\treturn value.replaceAll(\"\\\\\", \"\\\\\\\\\").replaceAll(\"%\", \"\\\\%\").replaceAll(\"_\", \"\\\\_\");\n}\n\n/**\n * Normalize a mimeType filter (string or array) into a clean string[].\n * Entries that are empty strings are dropped.\n */\nfunction normalizeMimeFilter(input?: string | readonly string[]): string[] {\n\tif (!input) return [];\n\tconst arr = Array.isArray(input) ? input : [input];\n\treturn arr\n\t\t.filter((entry): entry is string => typeof entry === \"string\" && entry.length > 0)\n\t\t.map((entry) =>\n\t\t\tentry.endsWith(\"/\") ? entry.toLowerCase() : entry.split(\";\")[0].trim().toLowerCase(),\n\t\t);\n}\n\nfunction normalizeListLimit(limit: unknown): number {\n\tconst integer = typeof limit === \"number\" && !Number.isNaN(limit) ? Math.trunc(limit) : 50;\n\treturn Math.min(Math.max(integer, 1), 100);\n}\n\n/**\n * Build a WHERE clause that matches `mime_type` against any of the given\n * filter entries — exact equality for full MIMEs, LIKE prefix for entries\n * ending in \"/\".\n */\nfunction mimeMatchExpr(eb: ExpressionBuilder<Database, \"media\">, filters: string[]) {\n\treturn eb.or(\n\t\tfilters.map((entry) =>\n\t\t\tentry.endsWith(\"/\")\n\t\t\t\t? sql<SqlBool>`mime_type LIKE ${`${escapeLike(entry)}%`} ESCAPE '\\\\'`\n\t\t\t\t: eb(\"mime_type\", \"=\", entry),\n\t\t),\n\t);\n}\n\nexport type MediaStatus = \"pending\" | \"ready\" | \"failed\";\n\nexport interface MediaItem {\n\tid: string;\n\tfilename: string;\n\tmimeType: string;\n\tsize: number | null;\n\twidth: number | null;\n\theight: number | null;\n\tfocalX: number | null;\n\tfocalY: number | null;\n\talt: string | null;\n\tcaption: string | null;\n\tstorageKey: string;\n\tstatus: MediaStatus;\n\tcontentHash: string | null;\n\tblurhash: string | null;\n\tdominantColor: string | null;\n\tcreatedAt: string;\n\tauthorId: string | null;\n\tfolderId?: string | null;\n}\n\nexport interface CreateMediaInput {\n\tfilename: string;\n\tmimeType: string;\n\tsize?: number;\n\twidth?: number;\n\theight?: number;\n\talt?: string;\n\tcaption?: string;\n\tstorageKey: string;\n\tcontentHash?: string;\n\tblurhash?: string;\n\tdominantColor?: string;\n\tstatus?: MediaStatus;\n\tauthorId?: string;\n\tfolderId?: string | null;\n}\n\nexport interface FindManyMediaOptions {\n\tlimit?: number;\n\tcursor?: string;\n\t/** Filter by MIME type. Pass a string for a single prefix/exact, or an array to match any. Strings ending with \"/\" are treated as LIKE prefix matches; others are exact equality. */\n\tmimeType?: string | readonly string[];\n\tstatus?: MediaStatus | \"all\"; // Filter by status, defaults to \"ready\"\n\t/** Case-insensitive substring matched against the filename (covers filename and extension). */\n\tq?: string;\n\t/** Omit for all media, pass null for the Main library, or pass a folder ID. */\n\tfolderId?: string | null;\n}\n\nexport interface UpdateMediaInput extends FocalPointUpdate {\n\talt?: string | null;\n\tcaption?: string | null;\n\twidth?: number;\n\theight?: number;\n\tfolderId?: string | null;\n}\n\nexport interface ReplaceReadyMediaInput {\n\tsize: number;\n\twidth: number;\n\theight: number;\n\tcontentHash: string;\n}\n\nexport interface FindMediaPageOptions extends Omit<FindManyMediaOptions, \"cursor\"> {\n\tpage: number;\n}\n\nexport interface MediaPageResult {\n\titems: MediaItem[];\n\ttotalCount: number;\n}\n\nconst UPLOAD_ATTEMPT_CLEANUP_AGE_MS = 60 * 60 * 1000;\nconst UPLOAD_ATTEMPT_CLEANUP_BATCH_SIZE = 100;\n\n/**\n * Media repository for database operations\n */\nexport class MediaRepository {\n\tconstructor(private db: Kysely<Database>) {}\n\n\t/**\n\t * Create a new media item\n\t */\n\tasync create(input: CreateMediaInput): Promise<MediaItem> {\n\t\tconst id = ulid();\n\t\tconst now = new Date().toISOString();\n\n\t\tconst row: Omit<MediaRow, \"rowid\"> = {\n\t\t\tid,\n\t\t\tfilename: input.filename,\n\t\t\tmime_type: input.mimeType,\n\t\t\tsize: input.size ?? null,\n\t\t\twidth: input.width ?? null,\n\t\t\theight: input.height ?? null,\n\t\t\tfocal_x: null,\n\t\t\tfocal_y: null,\n\t\t\talt: input.alt ?? null,\n\t\t\tcaption: input.caption ?? null,\n\t\t\tstorage_key: input.storageKey,\n\t\t\tcontent_hash: input.contentHash ?? null,\n\t\t\tblurhash: input.blurhash ?? null,\n\t\t\tdominant_color: input.dominantColor ?? null,\n\t\t\tstatus: input.status ?? \"ready\",\n\t\t\tcreated_at: now,\n\t\t\tauthor_id: input.authorId ?? null,\n\t\t\tfolder_id: input.folderId ?? null,\n\t\t};\n\n\t\tawait this.db.insertInto(\"media\").values(row).execute();\n\n\t\treturn this.rowToItem(row);\n\t}\n\n\t/**\n\t * Create a pending media item (for signed URL upload flow)\n\t */\n\tasync createPending(input: {\n\t\tfilename: string;\n\t\tmimeType: string;\n\t\tsize?: number;\n\t\tstorageKey: string;\n\t\tcontentHash?: string;\n\t\tauthorId?: string;\n\t\tfolderId?: string | null;\n\t}): Promise<MediaItem> {\n\t\treturn this.create({\n\t\t\t...input,\n\t\t\tstatus: \"pending\",\n\t\t});\n\t}\n\n\tasync createUploadAttempt(mediaId: string, storageKey: string): Promise<void> {\n\t\tconst now = new Date().toISOString();\n\t\tawait this.db\n\t\t\t.insertInto(\"_emdash_media_upload_attempts\")\n\t\t\t.values({\n\t\t\t\tmedia_id: mediaId,\n\t\t\t\tstorage_key: storageKey,\n\t\t\t\tstatus: \"active\",\n\t\t\t\tcreated_at: now,\n\t\t\t\tupdated_at: now,\n\t\t\t})\n\t\t\t.execute();\n\t}\n\n\t/**\n\t * Register a stored object for cleanup before its media row is removed,\n\t * so a failed storage delete is retried by the cleanup sweep instead of\n\t * leaving the object unreferenced and unreachable.\n\t */\n\tasync trackStorageKeyForCleanup(mediaId: string, storageKey: string): Promise<void> {\n\t\tconst now = new Date().toISOString();\n\t\tawait this.db\n\t\t\t.insertInto(\"_emdash_media_upload_attempts\")\n\t\t\t.values({\n\t\t\t\tmedia_id: mediaId,\n\t\t\t\tstorage_key: storageKey,\n\t\t\t\tstatus: \"cleanup\",\n\t\t\t\tcreated_at: now,\n\t\t\t\tupdated_at: now,\n\t\t\t})\n\t\t\t.onConflict((oc) =>\n\t\t\t\toc.column(\"storage_key\").doUpdateSet({ status: \"cleanup\", updated_at: now }),\n\t\t\t)\n\t\t\t.execute();\n\t}\n\n\tasync hasUploadAttempt(storageKey: string): Promise<boolean> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"_emdash_media_upload_attempts\")\n\t\t\t.select(\"storage_key\")\n\t\t\t.where(\"storage_key\", \"=\", storageKey)\n\t\t\t.executeTakeFirst();\n\t\treturn row !== undefined;\n\t}\n\n\tasync claimUploadAttemptForCleanup(storageKey: string): Promise<boolean> {\n\t\tconst result = await this.db\n\t\t\t.updateTable(\"_emdash_media_upload_attempts\")\n\t\t\t.set({ status: \"cleanup\", updated_at: new Date().toISOString() })\n\t\t\t.where(\"storage_key\", \"=\", storageKey)\n\t\t\t.where((eb) =>\n\t\t\t\teb.not(\n\t\t\t\t\teb.exists(\n\t\t\t\t\t\teb\n\t\t\t\t\t\t\t.selectFrom(\"media\")\n\t\t\t\t\t\t\t.select(\"media.id\")\n\t\t\t\t\t\t\t.whereRef(\"media.storage_key\", \"=\", \"_emdash_media_upload_attempts.storage_key\"),\n\t\t\t\t\t),\n\t\t\t\t),\n\t\t\t)\n\t\t\t.executeTakeFirst();\n\n\t\treturn Number(result.numUpdatedRows ?? 0) > 0;\n\t}\n\n\tasync deleteUploadAttempt(storageKey: string): Promise<void> {\n\t\tawait this.db\n\t\t\t.deleteFrom(\"_emdash_media_upload_attempts\")\n\t\t\t.where(\"storage_key\", \"=\", storageKey)\n\t\t\t.execute();\n\t}\n\n\tasync deferUploadAttemptCleanup(storageKey: string): Promise<void> {\n\t\tawait this.db\n\t\t\t.updateTable(\"_emdash_media_upload_attempts\")\n\t\t\t.set({ updated_at: new Date().toISOString() })\n\t\t\t.where(\"storage_key\", \"=\", storageKey)\n\t\t\t.execute();\n\t}\n\n\tasync deleteCompletedUploadAttempts(): Promise<number> {\n\t\tconst result = await this.db\n\t\t\t.deleteFrom(\"_emdash_media_upload_attempts\")\n\t\t\t.where(\"status\", \"=\", \"active\")\n\t\t\t.where((eb) =>\n\t\t\t\teb.exists(\n\t\t\t\t\teb\n\t\t\t\t\t\t.selectFrom(\"media\")\n\t\t\t\t\t\t.select(\"media.id\")\n\t\t\t\t\t\t.whereRef(\"media.id\", \"=\", \"_emdash_media_upload_attempts.media_id\")\n\t\t\t\t\t\t.whereRef(\"media.storage_key\", \"=\", \"_emdash_media_upload_attempts.storage_key\")\n\t\t\t\t\t\t.where(\"media.status\", \"=\", \"ready\"),\n\t\t\t\t),\n\t\t\t)\n\t\t\t.executeTakeFirst();\n\t\treturn Number(result.numDeletedRows ?? 0);\n\t}\n\n\tasync findUploadAttemptsForCleanup(\n\t\tmaxAgeMs: number = UPLOAD_ATTEMPT_CLEANUP_AGE_MS,\n\t\tlimit: number = UPLOAD_ATTEMPT_CLEANUP_BATCH_SIZE,\n\t): Promise<string[]> {\n\t\tconst cutoff = new Date(Date.now() - maxAgeMs).toISOString();\n\t\tconst rows = await this.db\n\t\t\t.selectFrom(\"_emdash_media_upload_attempts\")\n\t\t\t.select(\"storage_key\")\n\t\t\t.where((eb) => eb.or([eb(\"status\", \"=\", \"cleanup\"), eb(\"created_at\", \"<\", cutoff)]))\n\t\t\t.where((eb) =>\n\t\t\t\teb.not(\n\t\t\t\t\teb.exists(\n\t\t\t\t\t\teb\n\t\t\t\t\t\t\t.selectFrom(\"media\")\n\t\t\t\t\t\t\t.select(\"media.id\")\n\t\t\t\t\t\t\t.whereRef(\"media.storage_key\", \"=\", \"_emdash_media_upload_attempts.storage_key\"),\n\t\t\t\t\t),\n\t\t\t\t),\n\t\t\t)\n\t\t\t.orderBy(\"updated_at\", \"asc\")\n\t\t\t.limit(limit)\n\t\t\t.execute();\n\n\t\treturn rows.map((row) => row.storage_key);\n\t}\n\n\tasync publishPendingStorageKey(\n\t\tid: string,\n\t\texpectedStorageKey: string,\n\t\tstorageKey: string,\n\t\tcontentHash?: string,\n\t): Promise<boolean> {\n\t\tconst result = await this.db\n\t\t\t.updateTable(\"media\")\n\t\t\t.set({\n\t\t\t\tstorage_key: storageKey,\n\t\t\t\t...(contentHash !== undefined ? { content_hash: contentHash } : {}),\n\t\t\t})\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.where(\"status\", \"=\", \"pending\")\n\t\t\t.where(\"storage_key\", \"=\", expectedStorageKey)\n\t\t\t.where((eb) =>\n\t\t\t\teb.exists(\n\t\t\t\t\teb\n\t\t\t\t\t\t.selectFrom(\"_emdash_media_upload_attempts\")\n\t\t\t\t\t\t.select(\"storage_key\")\n\t\t\t\t\t\t.where(\"media_id\", \"=\", id)\n\t\t\t\t\t\t.where(\"storage_key\", \"=\", storageKey)\n\t\t\t\t\t\t.where(\"status\", \"=\", \"active\"),\n\t\t\t\t),\n\t\t\t)\n\t\t\t.executeTakeFirst();\n\n\t\treturn Number(result.numUpdatedRows ?? 0) > 0;\n\t}\n\n\t/**\n\t * Confirm upload (mark as ready)\n\t */\n\tasync confirmUpload(\n\t\tid: string,\n\t\tmetadata?: {\n\t\t\twidth?: number;\n\t\t\theight?: number;\n\t\t\tsize?: number;\n\t\t\tblurhash?: string;\n\t\t\tdominantColor?: string;\n\t\t\tcontentHash?: string | null;\n\t\t},\n\t\texpectedStorageKey?: string,\n\t): Promise<MediaItem | null> {\n\t\tconst updates: Partial<MediaRow> = {\n\t\t\tstatus: \"ready\",\n\t\t};\n\t\tif (metadata?.width !== undefined) updates.width = metadata.width;\n\t\tif (metadata?.height !== undefined) updates.height = metadata.height;\n\t\tif (metadata?.size !== undefined) updates.size = metadata.size;\n\t\tif (metadata?.blurhash !== undefined) updates.blurhash = metadata.blurhash;\n\t\tif (metadata?.dominantColor !== undefined) updates.dominant_color = metadata.dominantColor;\n\t\tif (metadata?.contentHash !== undefined) updates.content_hash = metadata.contentHash;\n\n\t\tlet query = this.db\n\t\t\t.updateTable(\"media\")\n\t\t\t.set(updates)\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.where(\"status\", \"=\", \"pending\");\n\t\tif (expectedStorageKey !== undefined) {\n\t\t\tquery = query.where(\"storage_key\", \"=\", expectedStorageKey);\n\t\t}\n\n\t\tconst row = await query.returningAll().executeTakeFirst();\n\n\t\treturn row ? this.rowToItem(row) : null;\n\t}\n\n\t/**\n\t * Mark upload as failed\n\t */\n\tasync markFailed(id: string, expectedStorageKey?: string): Promise<MediaItem | null> {\n\t\tlet query = this.db.updateTable(\"media\").set({ status: \"failed\" }).where(\"id\", \"=\", id);\n\t\tif (expectedStorageKey !== undefined) {\n\t\t\tquery = query.where(\"status\", \"=\", \"pending\").where(\"storage_key\", \"=\", expectedStorageKey);\n\t\t}\n\n\t\tconst row = await query.returningAll().executeTakeFirst();\n\t\treturn row ? this.rowToItem(row) : null;\n\t}\n\n\t/**\n\t * Find the pending media row minted for a signed upload URL.\n\t */\n\tasync findPendingByStorageKey(storageKey: string): Promise<MediaItem | null> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"media\")\n\t\t\t.selectAll()\n\t\t\t.where(\"storage_key\", \"=\", storageKey)\n\t\t\t.where(\"status\", \"=\", \"pending\")\n\t\t\t.executeTakeFirst();\n\n\t\treturn row ? this.rowToItem(row) : null;\n\t}\n\n\t/**\n\t * Find media by ID\n\t */\n\tasync findById(id: string): Promise<MediaItem | null> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"media\")\n\t\t\t.selectAll()\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.executeTakeFirst();\n\n\t\treturn row ? this.rowToItem(row) : null;\n\t}\n\n\t/**\n\t * Find media by filename\n\t * Useful for idempotent imports\n\t */\n\tasync findByFilename(filename: string): Promise<MediaItem | null> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"media\")\n\t\t\t.selectAll()\n\t\t\t.where(\"filename\", \"=\", filename)\n\t\t\t.executeTakeFirst();\n\n\t\treturn row ? this.rowToItem(row) : null;\n\t}\n\n\tasync findAvailableFilename(filename: string): Promise<string> {\n\t\tconst exists = async (candidate: string) =>\n\t\t\tBoolean(\n\t\t\t\tawait this.db\n\t\t\t\t\t.selectFrom(\"media\")\n\t\t\t\t\t.select(\"id\")\n\t\t\t\t\t.where(sql<string>`lower(filename)`, \"=\", candidate.toLowerCase())\n\t\t\t\t\t.executeTakeFirst(),\n\t\t\t);\n\t\tif (!(await exists(filename))) return filename;\n\n\t\tconst extensionIndex = filename.lastIndexOf(\".\");\n\t\tconst hasExtension = extensionIndex > 0;\n\t\tconst extension = hasExtension ? filename.slice(extensionIndex) : \"\";\n\t\tconst stem = hasExtension ? filename.slice(0, extensionIndex) : filename;\n\t\tlet copyNumber = 2;\n\t\tlet candidate = `${stem}-${copyNumber}${extension}`;\n\t\twhile (await exists(candidate)) {\n\t\t\tcopyNumber += 1;\n\t\t\tcandidate = `${stem}-${copyNumber}${extension}`;\n\t\t}\n\t\treturn candidate;\n\t}\n\n\t/**\n\t * Find media by content hash\n\t * Used for deduplication - same content = same hash\n\t */\n\tasync findByContentHash(contentHash: string): Promise<MediaItem | null> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"media\")\n\t\t\t.selectAll()\n\t\t\t.where(\"content_hash\", \"=\", contentHash)\n\t\t\t.where(\"status\", \"=\", \"ready\")\n\t\t\t.executeTakeFirst();\n\n\t\treturn row ? this.rowToItem(row) : null;\n\t}\n\n\t/**\n\t * Find many media items with cursor pagination\n\t *\n\t * Uses keyset pagination (cursor-based) for consistent results.\n\t * The cursor encodes the created_at and id of the last item.\n\t */\n\tasync findMany(options: FindManyMediaOptions = {}): Promise<FindManyResult<MediaItem>> {\n\t\tconst limit = normalizeListLimit(options.limit);\n\n\t\tlet query = this.applyListFilters(this.db.selectFrom(\"media\"), options)\n\t\t\t.selectAll()\n\t\t\t.orderBy(\"created_at\", \"desc\")\n\t\t\t.orderBy(\"id\", \"desc\")\n\t\t\t.limit(limit + 1);\n\n\t\t// Handle cursor-based pagination — throws on invalid cursor.\n\t\tif (options.cursor) {\n\t\t\tconst { orderValue: createdAt, id: cursorId } = decodeCursor(options.cursor);\n\n\t\t\t// Keyset pagination: get items where (created_at, id) < cursor\n\t\t\tquery = query.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb(\"created_at\", \"<\", createdAt),\n\t\t\t\t\teb.and([eb(\"created_at\", \"=\", createdAt), eb(\"id\", \"<\", cursorId)]),\n\t\t\t\t]),\n\t\t\t);\n\t\t}\n\n\t\tconst rows = await query.execute();\n\n\t\tconst hasMore = rows.length > limit;\n\t\tconst items = rows.slice(0, limit).map((row) => this.rowToItem(row));\n\n\t\tlet nextCursor: string | undefined;\n\t\tif (hasMore && items.length > 0) {\n\t\t\tconst lastItem = items.at(-1)!;\n\t\t\tnextCursor = encodeCursor(lastItem.createdAt, lastItem.id);\n\t\t}\n\n\t\treturn { items, nextCursor };\n\t}\n\n\tasync findPage(options: FindMediaPageOptions): Promise<MediaPageResult> {\n\t\tconst limit = normalizeListLimit(options.limit);\n\t\tconst offset = (options.page - 1) * limit;\n\t\tconst filtered = this.applyListFilters(this.db.selectFrom(\"media\"), options);\n\t\tconst rows = await filtered\n\t\t\t.selectAll()\n\t\t\t.orderBy(\"created_at\", \"desc\")\n\t\t\t.orderBy(\"id\", \"desc\")\n\t\t\t.limit(limit)\n\t\t\t.offset(offset)\n\t\t\t.execute();\n\t\tconst count = await filtered\n\t\t\t.select((eb) => eb.fn.count<number>(\"id\").as(\"count\"))\n\t\t\t.executeTakeFirst();\n\n\t\treturn {\n\t\t\titems: rows.map((row) => this.rowToItem(row)),\n\t\t\ttotalCount: Number(count?.count ?? 0),\n\t\t};\n\t}\n\n\t/**\n\t * Update media metadata\n\t */\n\tasync update(id: string, input: UpdateMediaInput): Promise<MediaItem | null> {\n\t\tconst existing = await this.findById(id);\n\t\tif (!existing) {\n\t\t\treturn null;\n\t\t}\n\n\t\tconst updates: Partial<MediaRow> = {};\n\t\tif (input.alt !== undefined) updates.alt = input.alt;\n\t\tif (input.caption !== undefined) updates.caption = input.caption;\n\t\tif (input.width !== undefined) updates.width = input.width;\n\t\tif (input.height !== undefined) updates.height = input.height;\n\t\tif (input.folderId !== undefined) updates.folder_id = input.folderId;\n\t\tif (input.focalX !== undefined && input.focalY !== undefined) {\n\t\t\tupdates.focal_x = input.focalX;\n\t\t\tupdates.focal_y = input.focalY;\n\t\t}\n\n\t\tif (Object.keys(updates).length > 0) {\n\t\t\tawait this.db.updateTable(\"media\").set(updates).where(\"id\", \"=\", id).execute();\n\t\t}\n\n\t\treturn this.findById(id);\n\t}\n\n\tasync updateReadyMetadata(\n\t\tid: string,\n\t\tinput: Pick<UpdateMediaInput, \"alt\" | \"caption\" | \"focalX\" | \"focalY\">,\n\t): Promise<MediaItem | null> {\n\t\tconst updates: Partial<MediaRow> = {};\n\t\tif (input.alt !== undefined) updates.alt = input.alt;\n\t\tif (input.caption !== undefined) updates.caption = input.caption;\n\t\tif (input.focalX !== undefined && input.focalY !== undefined) {\n\t\t\tupdates.focal_x = input.focalX;\n\t\t\tupdates.focal_y = input.focalY;\n\t\t}\n\n\t\tif (Object.keys(updates).length === 0) {\n\t\t\tthrow new TypeError(\"Media metadata update requires at least one field\");\n\t\t}\n\n\t\tconst row = await this.db\n\t\t\t.updateTable(\"media\")\n\t\t\t.set(updates)\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.where(\"status\", \"=\", \"ready\")\n\t\t\t.returningAll()\n\t\t\t.executeTakeFirst();\n\t\treturn row ? this.rowToItem(row) : null;\n\t}\n\n\tasync replaceReadyFile(\n\t\tid: string,\n\t\texpectedStorageKey: string,\n\t\tinput: ReplaceReadyMediaInput,\n\t): Promise<MediaItem | null> {\n\t\tconst row = await this.db\n\t\t\t.updateTable(\"media\")\n\t\t\t.set({\n\t\t\t\tsize: input.size,\n\t\t\t\twidth: input.width,\n\t\t\t\theight: input.height,\n\t\t\t\tcontent_hash: input.contentHash,\n\t\t\t\tblurhash: null,\n\t\t\t\tdominant_color: null,\n\t\t\t\tfocal_x: null,\n\t\t\t\tfocal_y: null,\n\t\t\t})\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.where(\"status\", \"=\", \"ready\")\n\t\t\t.where(\"storage_key\", \"=\", expectedStorageKey)\n\t\t\t.returningAll()\n\t\t\t.executeTakeFirst();\n\n\t\treturn row ? this.rowToItem(row) : null;\n\t}\n\n\t/**\n\t * Delete media item\n\t */\n\tasync deleteWithStorageKey(id: string): Promise<string | null> {\n\t\tconst deleted = await this.db\n\t\t\t.deleteFrom(\"media\")\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.returning(\"storage_key\")\n\t\t\t.executeTakeFirst();\n\t\tif (deleted) return deleted.storage_key;\n\t\treturn null;\n\t}\n\n\tasync isStorageKeyReferenced(storageKey: string): Promise<boolean> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"media\")\n\t\t\t.select(\"id\")\n\t\t\t.where(\"storage_key\", \"=\", storageKey)\n\t\t\t.executeTakeFirst();\n\t\treturn row !== undefined;\n\t}\n\n\tasync delete(id: string): Promise<boolean> {\n\t\treturn (await this.deleteWithStorageKey(id)) !== null;\n\t}\n\n\t/**\n\t * Count media items\n\t */\n\tasync count(mimeType?: string | readonly string[]): Promise<number> {\n\t\tconst filters = normalizeMimeFilter(mimeType);\n\t\tlet query = this.db.selectFrom(\"media\").select((eb) => eb.fn.count<number>(\"id\").as(\"count\"));\n\n\t\tif (filters.length > 0) {\n\t\t\tquery = query.where((eb) => mimeMatchExpr(eb, filters));\n\t\t}\n\n\t\tconst result = await query.executeTakeFirst();\n\t\treturn Number(result?.count || 0);\n\t}\n\n\tprivate applyListFilters<O>(\n\t\tquery: SelectQueryBuilder<Database, \"media\", O>,\n\t\toptions: Omit<FindManyMediaOptions, \"cursor\" | \"limit\">,\n\t): SelectQueryBuilder<Database, \"media\", O> {\n\t\tconst mimeFilters = normalizeMimeFilter(options.mimeType);\n\t\tif (mimeFilters.length > 0) {\n\t\t\tquery = query.where((eb) => mimeMatchExpr(eb, mimeFilters));\n\t\t}\n\n\t\tconst term = options.q?.trim();\n\t\tif (term) {\n\t\t\tconst pattern = `%${escapeLike(term)}%`;\n\t\t\tquery = query.where(\n\t\t\t\tsql<string>`lower(filename)`,\n\t\t\t\t\"like\",\n\t\t\t\tsql<string>`lower(${pattern}) escape '\\\\'`,\n\t\t\t);\n\t\t}\n\n\t\tif (options.status !== \"all\") {\n\t\t\tquery = query.where(\"status\", \"=\", options.status ?? \"ready\");\n\t\t}\n\n\t\tif (options.folderId === null) {\n\t\t\tquery = query.where(\"folder_id\", \"is\", null);\n\t\t} else if (options.folderId !== undefined) {\n\t\t\tquery = query.where(\"folder_id\", \"=\", options.folderId);\n\t\t}\n\n\t\treturn query;\n\t}\n\n\t/**\n\t * Delete pending uploads older than the given age.\n\t * Pending uploads that were never confirmed indicate abandoned upload flows.\n\t *\n\t * Returns the storage keys of deleted rows so callers can remove the\n\t * corresponding files from object storage.\n\t */\n\tasync cleanupPendingUploads(maxAgeMs: number = 60 * 60 * 1000): Promise<string[]> {\n\t\tconst cutoff = new Date(Date.now() - maxAgeMs).toISOString();\n\n\t\tconst rows = await this.db\n\t\t\t.deleteFrom(\"media\")\n\t\t\t.where(\"status\", \"=\", \"pending\")\n\t\t\t.where(\"created_at\", \"<\", cutoff)\n\t\t\t.returning(\"storage_key\")\n\t\t\t.execute();\n\n\t\tconst keys = rows.map((r) => r.storage_key);\n\t\tif (keys.length === 0) return keys;\n\n\t\t// A stored object may still back another media row (for example after a\n\t\t// legacy duplicate registration); never hand such a key to storage deletion.\n\t\tconst stillReferenced = new Set<string>();\n\t\tfor (const batch of chunks(keys, SQL_BATCH_SIZE)) {\n\t\t\tconst refs = await this.db\n\t\t\t\t.selectFrom(\"media\")\n\t\t\t\t.select(\"storage_key\")\n\t\t\t\t.where(\"storage_key\", \"in\", batch)\n\t\t\t\t.execute();\n\t\t\tfor (const ref of refs) stillReferenced.add(ref.storage_key);\n\t\t}\n\n\t\treturn keys.filter((key) => !stillReferenced.has(key));\n\t}\n\n\t/**\n\t * Convert database row to MediaItem\n\t */\n\tprivate rowToItem(row: MediaRow): MediaItem {\n\t\tconst focalPoint = normalizeFocalPoint(row.focal_x, row.focal_y);\n\t\treturn {\n\t\t\tid: row.id,\n\t\t\tfilename: row.filename,\n\t\t\tmimeType: row.mime_type,\n\t\t\tsize: row.size,\n\t\t\twidth: row.width,\n\t\t\theight: row.height,\n\t\t\tfocalX: focalPoint?.focalX ?? null,\n\t\t\tfocalY: focalPoint?.focalY ?? null,\n\t\t\talt: row.alt,\n\t\t\tcaption: row.caption,\n\t\t\tstorageKey: row.storage_key,\n\t\t\tcontentHash: row.content_hash,\n\t\t\tblurhash: row.blurhash,\n\t\t\tdominantColor: row.dominant_color,\n\t\t\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- DB stores string; validated at insert but linter can't follow\n\t\t\tstatus: row.status as MediaStatus,\n\t\t\tcreatedAt: row.created_at,\n\t\t\tauthorId: row.author_id,\n\t\t\tfolderId: row.folder_id,\n\t\t};\n\t}\n}\n"],"mappings":";;;;;;;;AAgBA,SAAS,WAAW,OAAuB;AAC1C,QAAO,MAAM,WAAW,MAAM,OAAO,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,KAAK,MAAM;;;;;;AAOpF,SAAS,oBAAoB,OAA8C;AAC1E,KAAI,CAAC,MAAO,QAAO,EAAE;AAErB,SADY,MAAM,QAAQ,MAAM,GAAG,QAAQ,CAAC,MAAM,EAEhD,QAAQ,UAA2B,OAAO,UAAU,YAAY,MAAM,SAAS,EAAE,CACjF,KAAK,UACL,MAAM,SAAS,IAAI,GAAG,MAAM,aAAa,GAAG,MAAM,MAAM,IAAI,CAAC,GAAG,MAAM,CAAC,aAAa,CACpF;;AAGH,SAAS,mBAAmB,OAAwB;CACnD,MAAM,UAAU,OAAO,UAAU,YAAY,CAAC,OAAO,MAAM,MAAM,GAAG,KAAK,MAAM,MAAM,GAAG;AACxF,QAAO,KAAK,IAAI,KAAK,IAAI,SAAS,EAAE,EAAE,IAAI;;;;;;;AAQ3C,SAAS,cAAc,IAA0C,SAAmB;AACnF,QAAO,GAAG,GACT,QAAQ,KAAK,UACZ,MAAM,SAAS,IAAI,GAChB,GAAY,kBAAkB,GAAG,WAAW,MAAM,CAAC,GAAG,gBACtD,GAAG,aAAa,KAAK,MAAM,CAC9B,CACD;;AA+EF,MAAM,gCAAgC,OAAU;AAChD,MAAM,oCAAoC;;;;AAK1C,IAAa,kBAAb,MAA6B;CAC5B,YAAY,AAAQ,IAAsB;EAAtB;;;;;CAKpB,MAAM,OAAO,OAA6C;EACzD,MAAM,KAAK,MAAM;EACjB,MAAM,uBAAM,IAAI,MAAM,EAAC,aAAa;EAEpC,MAAM,MAA+B;GACpC;GACA,UAAU,MAAM;GAChB,WAAW,MAAM;GACjB,MAAM,MAAM,QAAQ;GACpB,OAAO,MAAM,SAAS;GACtB,QAAQ,MAAM,UAAU;GACxB,SAAS;GACT,SAAS;GACT,KAAK,MAAM,OAAO;GAClB,SAAS,MAAM,WAAW;GAC1B,aAAa,MAAM;GACnB,cAAc,MAAM,eAAe;GACnC,UAAU,MAAM,YAAY;GAC5B,gBAAgB,MAAM,iBAAiB;GACvC,QAAQ,MAAM,UAAU;GACxB,YAAY;GACZ,WAAW,MAAM,YAAY;GAC7B,WAAW,MAAM,YAAY;GAC7B;AAED,QAAM,KAAK,GAAG,WAAW,QAAQ,CAAC,OAAO,IAAI,CAAC,SAAS;AAEvD,SAAO,KAAK,UAAU,IAAI;;;;;CAM3B,MAAM,cAAc,OAQG;AACtB,SAAO,KAAK,OAAO;GAClB,GAAG;GACH,QAAQ;GACR,CAAC;;CAGH,MAAM,oBAAoB,SAAiB,YAAmC;EAC7E,MAAM,uBAAM,IAAI,MAAM,EAAC,aAAa;AACpC,QAAM,KAAK,GACT,WAAW,gCAAgC,CAC3C,OAAO;GACP,UAAU;GACV,aAAa;GACb,QAAQ;GACR,YAAY;GACZ,YAAY;GACZ,CAAC,CACD,SAAS;;;;;;;CAQZ,MAAM,0BAA0B,SAAiB,YAAmC;EACnF,MAAM,uBAAM,IAAI,MAAM,EAAC,aAAa;AACpC,QAAM,KAAK,GACT,WAAW,gCAAgC,CAC3C,OAAO;GACP,UAAU;GACV,aAAa;GACb,QAAQ;GACR,YAAY;GACZ,YAAY;GACZ,CAAC,CACD,YAAY,OACZ,GAAG,OAAO,cAAc,CAAC,YAAY;GAAE,QAAQ;GAAW,YAAY;GAAK,CAAC,CAC5E,CACA,SAAS;;CAGZ,MAAM,iBAAiB,YAAsC;AAM5D,SALY,MAAM,KAAK,GACrB,WAAW,gCAAgC,CAC3C,OAAO,cAAc,CACrB,MAAM,eAAe,KAAK,WAAW,CACrC,kBAAkB,KACL;;CAGhB,MAAM,6BAA6B,YAAsC;EACxE,MAAM,SAAS,MAAM,KAAK,GACxB,YAAY,gCAAgC,CAC5C,IAAI;GAAE,QAAQ;GAAW,6BAAY,IAAI,MAAM,EAAC,aAAa;GAAE,CAAC,CAChE,MAAM,eAAe,KAAK,WAAW,CACrC,OAAO,OACP,GAAG,IACF,GAAG,OACF,GACE,WAAW,QAAQ,CACnB,OAAO,WAAW,CAClB,SAAS,qBAAqB,KAAK,4CAA4C,CACjF,CACD,CACD,CACA,kBAAkB;AAEpB,SAAO,OAAO,OAAO,kBAAkB,EAAE,GAAG;;CAG7C,MAAM,oBAAoB,YAAmC;AAC5D,QAAM,KAAK,GACT,WAAW,gCAAgC,CAC3C,MAAM,eAAe,KAAK,WAAW,CACrC,SAAS;;CAGZ,MAAM,0BAA0B,YAAmC;AAClE,QAAM,KAAK,GACT,YAAY,gCAAgC,CAC5C,IAAI,EAAE,6BAAY,IAAI,MAAM,EAAC,aAAa,EAAE,CAAC,CAC7C,MAAM,eAAe,KAAK,WAAW,CACrC,SAAS;;CAGZ,MAAM,gCAAiD;EACtD,MAAM,SAAS,MAAM,KAAK,GACxB,WAAW,gCAAgC,CAC3C,MAAM,UAAU,KAAK,SAAS,CAC9B,OAAO,OACP,GAAG,OACF,GACE,WAAW,QAAQ,CACnB,OAAO,WAAW,CAClB,SAAS,YAAY,KAAK,yCAAyC,CACnE,SAAS,qBAAqB,KAAK,4CAA4C,CAC/E,MAAM,gBAAgB,KAAK,QAAQ,CACrC,CACD,CACA,kBAAkB;AACpB,SAAO,OAAO,OAAO,kBAAkB,EAAE;;CAG1C,MAAM,6BACL,WAAmB,+BACnB,QAAgB,mCACI;EACpB,MAAM,SAAS,IAAI,KAAK,KAAK,KAAK,GAAG,SAAS,CAAC,aAAa;AAmB5D,UAlBa,MAAM,KAAK,GACtB,WAAW,gCAAgC,CAC3C,OAAO,cAAc,CACrB,OAAO,OAAO,GAAG,GAAG,CAAC,GAAG,UAAU,KAAK,UAAU,EAAE,GAAG,cAAc,KAAK,OAAO,CAAC,CAAC,CAAC,CACnF,OAAO,OACP,GAAG,IACF,GAAG,OACF,GACE,WAAW,QAAQ,CACnB,OAAO,WAAW,CAClB,SAAS,qBAAqB,KAAK,4CAA4C,CACjF,CACD,CACD,CACA,QAAQ,cAAc,MAAM,CAC5B,MAAM,MAAM,CACZ,SAAS,EAEC,KAAK,QAAQ,IAAI,YAAY;;CAG1C,MAAM,yBACL,IACA,oBACA,YACA,aACmB;EACnB,MAAM,SAAS,MAAM,KAAK,GACxB,YAAY,QAAQ,CACpB,IAAI;GACJ,aAAa;GACb,GAAI,gBAAgB,SAAY,EAAE,cAAc,aAAa,GAAG,EAAE;GAClE,CAAC,CACD,MAAM,MAAM,KAAK,GAAG,CACpB,MAAM,UAAU,KAAK,UAAU,CAC/B,MAAM,eAAe,KAAK,mBAAmB,CAC7C,OAAO,OACP,GAAG,OACF,GACE,WAAW,gCAAgC,CAC3C,OAAO,cAAc,CACrB,MAAM,YAAY,KAAK,GAAG,CAC1B,MAAM,eAAe,KAAK,WAAW,CACrC,MAAM,UAAU,KAAK,SAAS,CAChC,CACD,CACA,kBAAkB;AAEpB,SAAO,OAAO,OAAO,kBAAkB,EAAE,GAAG;;;;;CAM7C,MAAM,cACL,IACA,UAQA,oBAC4B;EAC5B,MAAM,UAA6B,EAClC,QAAQ,SACR;AACD,MAAI,UAAU,UAAU,OAAW,SAAQ,QAAQ,SAAS;AAC5D,MAAI,UAAU,WAAW,OAAW,SAAQ,SAAS,SAAS;AAC9D,MAAI,UAAU,SAAS,OAAW,SAAQ,OAAO,SAAS;AAC1D,MAAI,UAAU,aAAa,OAAW,SAAQ,WAAW,SAAS;AAClE,MAAI,UAAU,kBAAkB,OAAW,SAAQ,iBAAiB,SAAS;AAC7E,MAAI,UAAU,gBAAgB,OAAW,SAAQ,eAAe,SAAS;EAEzE,IAAI,QAAQ,KAAK,GACf,YAAY,QAAQ,CACpB,IAAI,QAAQ,CACZ,MAAM,MAAM,KAAK,GAAG,CACpB,MAAM,UAAU,KAAK,UAAU;AACjC,MAAI,uBAAuB,OAC1B,SAAQ,MAAM,MAAM,eAAe,KAAK,mBAAmB;EAG5D,MAAM,MAAM,MAAM,MAAM,cAAc,CAAC,kBAAkB;AAEzD,SAAO,MAAM,KAAK,UAAU,IAAI,GAAG;;;;;CAMpC,MAAM,WAAW,IAAY,oBAAwD;EACpF,IAAI,QAAQ,KAAK,GAAG,YAAY,QAAQ,CAAC,IAAI,EAAE,QAAQ,UAAU,CAAC,CAAC,MAAM,MAAM,KAAK,GAAG;AACvF,MAAI,uBAAuB,OAC1B,SAAQ,MAAM,MAAM,UAAU,KAAK,UAAU,CAAC,MAAM,eAAe,KAAK,mBAAmB;EAG5F,MAAM,MAAM,MAAM,MAAM,cAAc,CAAC,kBAAkB;AACzD,SAAO,MAAM,KAAK,UAAU,IAAI,GAAG;;;;;CAMpC,MAAM,wBAAwB,YAA+C;EAC5E,MAAM,MAAM,MAAM,KAAK,GACrB,WAAW,QAAQ,CACnB,WAAW,CACX,MAAM,eAAe,KAAK,WAAW,CACrC,MAAM,UAAU,KAAK,UAAU,CAC/B,kBAAkB;AAEpB,SAAO,MAAM,KAAK,UAAU,IAAI,GAAG;;;;;CAMpC,MAAM,SAAS,IAAuC;EACrD,MAAM,MAAM,MAAM,KAAK,GACrB,WAAW,QAAQ,CACnB,WAAW,CACX,MAAM,MAAM,KAAK,GAAG,CACpB,kBAAkB;AAEpB,SAAO,MAAM,KAAK,UAAU,IAAI,GAAG;;;;;;CAOpC,MAAM,eAAe,UAA6C;EACjE,MAAM,MAAM,MAAM,KAAK,GACrB,WAAW,QAAQ,CACnB,WAAW,CACX,MAAM,YAAY,KAAK,SAAS,CAChC,kBAAkB;AAEpB,SAAO,MAAM,KAAK,UAAU,IAAI,GAAG;;CAGpC,MAAM,sBAAsB,UAAmC;EAC9D,MAAM,SAAS,OAAO,cACrB,QACC,MAAM,KAAK,GACT,WAAW,QAAQ,CACnB,OAAO,KAAK,CACZ,MAAM,GAAW,mBAAmB,KAAK,UAAU,aAAa,CAAC,CACjE,kBAAkB,CACpB;AACF,MAAI,CAAE,MAAM,OAAO,SAAS,CAAG,QAAO;EAEtC,MAAM,iBAAiB,SAAS,YAAY,IAAI;EAChD,MAAM,eAAe,iBAAiB;EACtC,MAAM,YAAY,eAAe,SAAS,MAAM,eAAe,GAAG;EAClE,MAAM,OAAO,eAAe,SAAS,MAAM,GAAG,eAAe,GAAG;EAChE,IAAI,aAAa;EACjB,IAAI,YAAY,GAAG,KAAK,GAAG,aAAa;AACxC,SAAO,MAAM,OAAO,UAAU,EAAE;AAC/B,iBAAc;AACd,eAAY,GAAG,KAAK,GAAG,aAAa;;AAErC,SAAO;;;;;;CAOR,MAAM,kBAAkB,aAAgD;EACvE,MAAM,MAAM,MAAM,KAAK,GACrB,WAAW,QAAQ,CACnB,WAAW,CACX,MAAM,gBAAgB,KAAK,YAAY,CACvC,MAAM,UAAU,KAAK,QAAQ,CAC7B,kBAAkB;AAEpB,SAAO,MAAM,KAAK,UAAU,IAAI,GAAG;;;;;;;;CASpC,MAAM,SAAS,UAAgC,EAAE,EAAsC;EACtF,MAAM,QAAQ,mBAAmB,QAAQ,MAAM;EAE/C,IAAI,QAAQ,KAAK,iBAAiB,KAAK,GAAG,WAAW,QAAQ,EAAE,QAAQ,CACrE,WAAW,CACX,QAAQ,cAAc,OAAO,CAC7B,QAAQ,MAAM,OAAO,CACrB,MAAM,QAAQ,EAAE;AAGlB,MAAI,QAAQ,QAAQ;GACnB,MAAM,EAAE,YAAY,WAAW,IAAI,aAAa,aAAa,QAAQ,OAAO;AAG5E,WAAQ,MAAM,OAAO,OACpB,GAAG,GAAG,CACL,GAAG,cAAc,KAAK,UAAU,EAChC,GAAG,IAAI,CAAC,GAAG,cAAc,KAAK,UAAU,EAAE,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CACnE,CAAC,CACF;;EAGF,MAAM,OAAO,MAAM,MAAM,SAAS;EAElC,MAAM,UAAU,KAAK,SAAS;EAC9B,MAAM,QAAQ,KAAK,MAAM,GAAG,MAAM,CAAC,KAAK,QAAQ,KAAK,UAAU,IAAI,CAAC;EAEpE,IAAI;AACJ,MAAI,WAAW,MAAM,SAAS,GAAG;GAChC,MAAM,WAAW,MAAM,GAAG,GAAG;AAC7B,gBAAa,aAAa,SAAS,WAAW,SAAS,GAAG;;AAG3D,SAAO;GAAE;GAAO;GAAY;;CAG7B,MAAM,SAAS,SAAyD;EACvE,MAAM,QAAQ,mBAAmB,QAAQ,MAAM;EAC/C,MAAM,UAAU,QAAQ,OAAO,KAAK;EACpC,MAAM,WAAW,KAAK,iBAAiB,KAAK,GAAG,WAAW,QAAQ,EAAE,QAAQ;EAC5E,MAAM,OAAO,MAAM,SACjB,WAAW,CACX,QAAQ,cAAc,OAAO,CAC7B,QAAQ,MAAM,OAAO,CACrB,MAAM,MAAM,CACZ,OAAO,OAAO,CACd,SAAS;EACX,MAAM,QAAQ,MAAM,SAClB,QAAQ,OAAO,GAAG,GAAG,MAAc,KAAK,CAAC,GAAG,QAAQ,CAAC,CACrD,kBAAkB;AAEpB,SAAO;GACN,OAAO,KAAK,KAAK,QAAQ,KAAK,UAAU,IAAI,CAAC;GAC7C,YAAY,OAAO,OAAO,SAAS,EAAE;GACrC;;;;;CAMF,MAAM,OAAO,IAAY,OAAoD;AAE5E,MAAI,CADa,MAAM,KAAK,SAAS,GAAG,CAEvC,QAAO;EAGR,MAAM,UAA6B,EAAE;AACrC,MAAI,MAAM,QAAQ,OAAW,SAAQ,MAAM,MAAM;AACjD,MAAI,MAAM,YAAY,OAAW,SAAQ,UAAU,MAAM;AACzD,MAAI,MAAM,UAAU,OAAW,SAAQ,QAAQ,MAAM;AACrD,MAAI,MAAM,WAAW,OAAW,SAAQ,SAAS,MAAM;AACvD,MAAI,MAAM,aAAa,OAAW,SAAQ,YAAY,MAAM;AAC5D,MAAI,MAAM,WAAW,UAAa,MAAM,WAAW,QAAW;AAC7D,WAAQ,UAAU,MAAM;AACxB,WAAQ,UAAU,MAAM;;AAGzB,MAAI,OAAO,KAAK,QAAQ,CAAC,SAAS,EACjC,OAAM,KAAK,GAAG,YAAY,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,MAAM,KAAK,GAAG,CAAC,SAAS;AAG/E,SAAO,KAAK,SAAS,GAAG;;CAGzB,MAAM,oBACL,IACA,OAC4B;EAC5B,MAAM,UAA6B,EAAE;AACrC,MAAI,MAAM,QAAQ,OAAW,SAAQ,MAAM,MAAM;AACjD,MAAI,MAAM,YAAY,OAAW,SAAQ,UAAU,MAAM;AACzD,MAAI,MAAM,WAAW,UAAa,MAAM,WAAW,QAAW;AAC7D,WAAQ,UAAU,MAAM;AACxB,WAAQ,UAAU,MAAM;;AAGzB,MAAI,OAAO,KAAK,QAAQ,CAAC,WAAW,EACnC,OAAM,IAAI,UAAU,oDAAoD;EAGzE,MAAM,MAAM,MAAM,KAAK,GACrB,YAAY,QAAQ,CACpB,IAAI,QAAQ,CACZ,MAAM,MAAM,KAAK,GAAG,CACpB,MAAM,UAAU,KAAK,QAAQ,CAC7B,cAAc,CACd,kBAAkB;AACpB,SAAO,MAAM,KAAK,UAAU,IAAI,GAAG;;CAGpC,MAAM,iBACL,IACA,oBACA,OAC4B;EAC5B,MAAM,MAAM,MAAM,KAAK,GACrB,YAAY,QAAQ,CACpB,IAAI;GACJ,MAAM,MAAM;GACZ,OAAO,MAAM;GACb,QAAQ,MAAM;GACd,cAAc,MAAM;GACpB,UAAU;GACV,gBAAgB;GAChB,SAAS;GACT,SAAS;GACT,CAAC,CACD,MAAM,MAAM,KAAK,GAAG,CACpB,MAAM,UAAU,KAAK,QAAQ,CAC7B,MAAM,eAAe,KAAK,mBAAmB,CAC7C,cAAc,CACd,kBAAkB;AAEpB,SAAO,MAAM,KAAK,UAAU,IAAI,GAAG;;;;;CAMpC,MAAM,qBAAqB,IAAoC;EAC9D,MAAM,UAAU,MAAM,KAAK,GACzB,WAAW,QAAQ,CACnB,MAAM,MAAM,KAAK,GAAG,CACpB,UAAU,cAAc,CACxB,kBAAkB;AACpB,MAAI,QAAS,QAAO,QAAQ;AAC5B,SAAO;;CAGR,MAAM,uBAAuB,YAAsC;AAMlE,SALY,MAAM,KAAK,GACrB,WAAW,QAAQ,CACnB,OAAO,KAAK,CACZ,MAAM,eAAe,KAAK,WAAW,CACrC,kBAAkB,KACL;;CAGhB,MAAM,OAAO,IAA8B;AAC1C,SAAQ,MAAM,KAAK,qBAAqB,GAAG,KAAM;;;;;CAMlD,MAAM,MAAM,UAAwD;EACnE,MAAM,UAAU,oBAAoB,SAAS;EAC7C,IAAI,QAAQ,KAAK,GAAG,WAAW,QAAQ,CAAC,QAAQ,OAAO,GAAG,GAAG,MAAc,KAAK,CAAC,GAAG,QAAQ,CAAC;AAE7F,MAAI,QAAQ,SAAS,EACpB,SAAQ,MAAM,OAAO,OAAO,cAAc,IAAI,QAAQ,CAAC;EAGxD,MAAM,SAAS,MAAM,MAAM,kBAAkB;AAC7C,SAAO,OAAO,QAAQ,SAAS,EAAE;;CAGlC,AAAQ,iBACP,OACA,SAC2C;EAC3C,MAAM,cAAc,oBAAoB,QAAQ,SAAS;AACzD,MAAI,YAAY,SAAS,EACxB,SAAQ,MAAM,OAAO,OAAO,cAAc,IAAI,YAAY,CAAC;EAG5D,MAAM,OAAO,QAAQ,GAAG,MAAM;AAC9B,MAAI,MAAM;GACT,MAAM,UAAU,IAAI,WAAW,KAAK,CAAC;AACrC,WAAQ,MAAM,MACb,GAAW,mBACX,QACA,GAAW,SAAS,QAAQ,eAC5B;;AAGF,MAAI,QAAQ,WAAW,MACtB,SAAQ,MAAM,MAAM,UAAU,KAAK,QAAQ,UAAU,QAAQ;AAG9D,MAAI,QAAQ,aAAa,KACxB,SAAQ,MAAM,MAAM,aAAa,MAAM,KAAK;WAClC,QAAQ,aAAa,OAC/B,SAAQ,MAAM,MAAM,aAAa,KAAK,QAAQ,SAAS;AAGxD,SAAO;;;;;;;;;CAUR,MAAM,sBAAsB,WAAmB,OAAU,KAAyB;EACjF,MAAM,SAAS,IAAI,KAAK,KAAK,KAAK,GAAG,SAAS,CAAC,aAAa;EAS5D,MAAM,QAPO,MAAM,KAAK,GACtB,WAAW,QAAQ,CACnB,MAAM,UAAU,KAAK,UAAU,CAC/B,MAAM,cAAc,KAAK,OAAO,CAChC,UAAU,cAAc,CACxB,SAAS,EAEO,KAAK,MAAM,EAAE,YAAY;AAC3C,MAAI,KAAK,WAAW,EAAG,QAAO;EAI9B,MAAM,kCAAkB,IAAI,KAAa;AACzC,OAAK,MAAM,SAAS,OAAO,MAAM,eAAe,EAAE;GACjD,MAAM,OAAO,MAAM,KAAK,GACtB,WAAW,QAAQ,CACnB,OAAO,cAAc,CACrB,MAAM,eAAe,MAAM,MAAM,CACjC,SAAS;AACX,QAAK,MAAM,OAAO,KAAM,iBAAgB,IAAI,IAAI,YAAY;;AAG7D,SAAO,KAAK,QAAQ,QAAQ,CAAC,gBAAgB,IAAI,IAAI,CAAC;;;;;CAMvD,AAAQ,UAAU,KAA0B;EAC3C,MAAM,aAAa,oBAAoB,IAAI,SAAS,IAAI,QAAQ;AAChE,SAAO;GACN,IAAI,IAAI;GACR,UAAU,IAAI;GACd,UAAU,IAAI;GACd,MAAM,IAAI;GACV,OAAO,IAAI;GACX,QAAQ,IAAI;GACZ,QAAQ,YAAY,UAAU;GAC9B,QAAQ,YAAY,UAAU;GAC9B,KAAK,IAAI;GACT,SAAS,IAAI;GACb,YAAY,IAAI;GAChB,aAAa,IAAI;GACjB,UAAU,IAAI;GACd,eAAe,IAAI;GAEnB,QAAQ,IAAI;GACZ,WAAW,IAAI;GACf,UAAU,IAAI;GACd,UAAU,IAAI;GACd"}

package/dist/media-allowlist-Ct6wvnT2.mjs

@@ -0,0 +1,45 @@
+import { r as parseAllowedMimeTypes } from "./mime-B5M9R53H.mjs";
+
+//#region src/api/handlers/media-allowlist.ts
+/**
+* MIME types allowed for upload by default (when no field-specific list
+* overrides this). Entries ending with "/" are prefix-matched (e.g.
+* "video/" matches "video/mp4", "video/webm", etc.).
+*
+* Image types are enumerated explicitly rather than using a bare "image/"
+* prefix so that "image/svg+xml" is excluded by default: there is no
+* upload-time content validation for SVG, so an unvalidated bare-prefix
+* allowlist would let a Contributor+ upload an SVG with an embedded
+* `<script>`. Fields that genuinely need SVG uploads can still opt in via
+* their own `allowedMimeTypes` (see `resolveFieldAllowlist` below), which is
+* unaffected by this default.
+*/
+const GLOBAL_UPLOAD_ALLOWLIST = [
+	"image/png",
+	"image/jpeg",
+	"image/gif",
+	"image/webp",
+	"image/avif",
+	"image/jxl",
+	"video/",
+	"audio/",
+	"application/pdf"
+];
+/**
+* Resolve the MIME allowlist for a specific field.
+*
+* Returns the field's `allowedMimeTypes` list when the field exists, is of
+* type "file" or "image", and has a non-empty list configured. Returns null
+* in all other cases — callers should fall back to GLOBAL_UPLOAD_ALLOWLIST.
+*
+* Authentication is the caller's responsibility (the upload routes already
+* gate on `media:upload`).
+*/
+async function resolveFieldAllowlist(db, fieldId) {
+	const row = await db.selectFrom("_emdash_fields").select(["type", "validation"]).where("id", "=", fieldId).where("type", "in", ["file", "image"]).executeTakeFirst();
+	return row ? parseAllowedMimeTypes(row.validation) : null;
+}
+
+//#endregion
+export { resolveFieldAllowlist as n, GLOBAL_UPLOAD_ALLOWLIST as t };
+//# sourceMappingURL=media-allowlist-Ct6wvnT2.mjs.map

package/dist/media-allowlist-Ct6wvnT2.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"media-allowlist-Ct6wvnT2.mjs","names":[],"sources":["../src/api/handlers/media-allowlist.ts"],"sourcesContent":["import type { Kysely } from \"kysely\";\n\nimport type { Database } from \"../../database/types.js\";\nimport { parseAllowedMimeTypes } from \"../../media/mime.js\";\n\n/**\n * MIME types allowed for upload by default (when no field-specific list\n * overrides this). Entries ending with \"/\" are prefix-matched (e.g.\n * \"video/\" matches \"video/mp4\", \"video/webm\", etc.).\n *\n * Image types are enumerated explicitly rather than using a bare \"image/\"\n * prefix so that \"image/svg+xml\" is excluded by default: there is no\n * upload-time content validation for SVG, so an unvalidated bare-prefix\n * allowlist would let a Contributor+ upload an SVG with an embedded\n * `<script>`. Fields that genuinely need SVG uploads can still opt in via\n * their own `allowedMimeTypes` (see `resolveFieldAllowlist` below), which is\n * unaffected by this default.\n */\nexport const GLOBAL_UPLOAD_ALLOWLIST: readonly string[] = [\n\t\"image/png\",\n\t\"image/jpeg\",\n\t\"image/gif\",\n\t\"image/webp\",\n\t\"image/avif\",\n\t\"image/jxl\",\n\t\"video/\",\n\t\"audio/\",\n\t\"application/pdf\",\n];\n\n/**\n * Resolve the MIME allowlist for a specific field.\n *\n * Returns the field's `allowedMimeTypes` list when the field exists, is of\n * type \"file\" or \"image\", and has a non-empty list configured. Returns null\n * in all other cases — callers should fall back to GLOBAL_UPLOAD_ALLOWLIST.\n *\n * Authentication is the caller's responsibility (the upload routes already\n * gate on `media:upload`).\n */\nexport async function resolveFieldAllowlist(\n\tdb: Kysely<Database>,\n\tfieldId: string,\n): Promise<string[] | null> {\n\tconst row = await db\n\t\t.selectFrom(\"_emdash_fields\")\n\t\t.select([\"type\", \"validation\"])\n\t\t.where(\"id\", \"=\", fieldId)\n\t\t.where(\"type\", \"in\", [\"file\", \"image\"])\n\t\t.executeTakeFirst();\n\n\treturn row ? parseAllowedMimeTypes(row.validation) : null;\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAkBA,MAAa,0BAA6C;CACzD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;;;;;;;;;;;AAYD,eAAsB,sBACrB,IACA,SAC2B;CAC3B,MAAM,MAAM,MAAM,GAChB,WAAW,iBAAiB,CAC5B,OAAO,CAAC,QAAQ,aAAa,CAAC,CAC9B,MAAM,MAAM,KAAK,QAAQ,CACzB,MAAM,QAAQ,MAAM,CAAC,QAAQ,QAAQ,CAAC,CACtC,kBAAkB;AAEpB,QAAO,MAAM,sBAAsB,IAAI,WAAW,GAAG"}