libre-webui 0.21.3 → 0.22.0

package/backend/dist/platform/storage/blobReferenceRepository.js

@@ -0,0 +1,117 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ */
+const mapReference = (row) => ({
+    blobId: row.blob_id,
+    ownerUserId: row.owner_user_id,
+    resourceType: row.resource_type,
+    resourceId: row.resource_id,
+    purpose: row.purpose,
+    createdAt: Number(row.created_at),
+});
+export class SQLiteBlobReferenceRepository {
+    constructor(database) {
+        this.database = database;
+    }
+    async attach(reference) {
+        this.database
+            .prepare(`INSERT INTO platform_blob_references (
+           blob_id, owner_user_id, resource_type, resource_id, purpose, created_at
+         ) VALUES (?, ?, ?, ?, ?, ?)
+         ON CONFLICT(resource_type, resource_id, purpose) DO UPDATE SET
+           blob_id = excluded.blob_id,
+           owner_user_id = excluded.owner_user_id,
+           created_at = excluded.created_at`)
+            .run(reference.blobId, reference.ownerUserId, reference.resourceType, reference.resourceId, reference.purpose, reference.createdAt);
+    }
+    async find(resourceType, resourceId, purpose) {
+        const row = this.database
+            .prepare(`SELECT blob_id, owner_user_id, resource_type, resource_id, purpose,
+                created_at
+           FROM platform_blob_references
+          WHERE resource_type = ? AND resource_id = ? AND purpose = ?`)
+            .get(resourceType, resourceId, purpose);
+        return row ? mapReference(row) : undefined;
+    }
+    async detach(resourceType, resourceId, purpose) {
+        const existing = await this.find(resourceType, resourceId, purpose);
+        if (!existing)
+            return undefined;
+        this.database
+            .prepare(`DELETE FROM platform_blob_references
+          WHERE resource_type = ? AND resource_id = ? AND purpose = ?`)
+            .run(resourceType, resourceId, purpose);
+        return existing;
+    }
+    async isReferenced(blobId) {
+        return Boolean(this.database
+            .prepare('SELECT 1 FROM platform_blob_references WHERE blob_id = ?')
+            .get(blobId));
+    }
+    async listByOwner(ownerUserId, limit = 10000) {
+        if (!Number.isSafeInteger(limit) || limit < 1 || limit > 100000) {
+            throw new Error('Invalid blob reference inventory limit');
+        }
+        const rows = this.database
+            .prepare(`SELECT blob_id, owner_user_id, resource_type, resource_id, purpose,
+                created_at
+           FROM platform_blob_references
+          WHERE owner_user_id = ? ORDER BY created_at, blob_id LIMIT ?`)
+            .all(ownerUserId, limit);
+        return rows.map(mapReference);
+    }
+}
+export class PostgresBlobReferenceRepository {
+    constructor(database) {
+        this.database = database;
+    }
+    async attach(reference) {
+        await this.database.query(`INSERT INTO platform_blob_references (
+         blob_id, owner_user_id, resource_type, resource_id, purpose, created_at
+       ) VALUES ($1, $2, $3, $4, $5, $6)
+       ON CONFLICT(resource_type, resource_id, purpose) DO UPDATE SET
+         blob_id = EXCLUDED.blob_id,
+         owner_user_id = EXCLUDED.owner_user_id,
+         created_at = EXCLUDED.created_at`, [
+            reference.blobId,
+            reference.ownerUserId,
+            reference.resourceType,
+            reference.resourceId,
+            reference.purpose,
+            reference.createdAt,
+        ]);
+    }
+    async find(resourceType, resourceId, purpose) {
+        const result = await this.database.query(`SELECT blob_id, owner_user_id, resource_type, resource_id, purpose,
+              created_at
+         FROM platform_blob_references
+        WHERE resource_type = $1 AND resource_id = $2 AND purpose = $3`, [resourceType, resourceId, purpose]);
+        return result.rows[0] ? mapReference(result.rows[0]) : undefined;
+    }
+    async detach(resourceType, resourceId, purpose) {
+        const result = await this.database.query(`DELETE FROM platform_blob_references
+        WHERE resource_type = $1 AND resource_id = $2 AND purpose = $3
+      RETURNING blob_id, owner_user_id, resource_type, resource_id, purpose,
+                created_at`, [resourceType, resourceId, purpose]);
+        return result.rows[0] ? mapReference(result.rows[0]) : undefined;
+    }
+    async isReferenced(blobId) {
+        const result = await this.database.query(`SELECT EXISTS(
+         SELECT 1 FROM platform_blob_references WHERE blob_id = $1
+       ) AS present`, [blobId]);
+        return result.rows[0]?.present === true;
+    }
+    async listByOwner(ownerUserId, limit = 10000) {
+        if (!Number.isSafeInteger(limit) || limit < 1 || limit > 100000) {
+            throw new Error('Invalid blob reference inventory limit');
+        }
+        const result = await this.database.query(`SELECT blob_id, owner_user_id, resource_type, resource_id, purpose,
+              created_at
+         FROM platform_blob_references
+        WHERE owner_user_id = $1 ORDER BY created_at, blob_id LIMIT $2`, [ownerUserId, limit]);
+        return result.rows.map(mapReference);
+    }
+}
+//# sourceMappingURL=blobReferenceRepository.js.map

package/backend/dist/platform/storage/blobReferenceRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blobReferenceRepository.js","sourceRoot":"","sources":["../../../src/platform/storage/blobReferenceRepository.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAuCH,MAAM,YAAY,GAAG,CAAC,GAAiB,EAAiB,EAAE,CAAC,CAAC;IAC1D,MAAM,EAAE,GAAG,CAAC,OAAO;IACnB,WAAW,EAAE,GAAG,CAAC,aAAa;IAC9B,YAAY,EAAE,GAAG,CAAC,aAAa;IAC/B,UAAU,EAAE,GAAG,CAAC,WAAW;IAC3B,OAAO,EAAE,GAAG,CAAC,OAAO;IACpB,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;CAClC,CAAC,CAAC;AAEH,MAAM,OAAO,6BAA6B;IACxC,YAA6B,QAA2B;wBAA3B,QAAQ;IAAsB,CAAC;IAE5D,KAAK,CAAC,MAAM,CAAC,SAAwB;QACnC,IAAI,CAAC,QAAQ;aACV,OAAO,CACN;;;;;;4CAMoC,CACrC;aACA,GAAG,CACF,SAAS,CAAC,MAAM,EAChB,SAAS,CAAC,WAAW,EACrB,SAAS,CAAC,YAAY,EACtB,SAAS,CAAC,UAAU,EACpB,SAAS,CAAC,OAAO,EACjB,SAAS,CAAC,SAAS,CACpB,CAAC;IACN,CAAC;IAED,KAAK,CAAC,IAAI,CACR,YAAoB,EACpB,UAAkB,EAClB,OAAe;QAEf,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ;aACtB,OAAO,CACN;;;sEAG8D,CAC/D;aACA,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,CAA6B,CAAC;QACtE,OAAO,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,MAAM,CACV,YAAoB,EACpB,UAAkB,EAClB,OAAe;QAEf,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QACpE,IAAI,CAAC,QAAQ;YAAE,OAAO,SAAS,CAAC;QAChC,IAAI,CAAC,QAAQ;aACV,OAAO,CACN;sEAC8D,CAC/D;aACA,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QAC1C,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAc;QAC/B,OAAO,OAAO,CACZ,IAAI,CAAC,QAAQ;aACV,OAAO,CAAC,0DAA0D,CAAC;aACnE,GAAG,CAAC,MAAM,CAAC,CACf,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CACf,WAAmB,EACnB,KAAK,GAAG,KAAM;QAEd,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,MAAO,EAAE,CAAC;YACjE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ;aACvB,OAAO,CACN;;;uEAG+D,CAChE;aACA,GAAG,CAAC,WAAW,EAAE,KAAK,CAAmB,CAAC;QAC7C,OAAO,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAChC,CAAC;CACF;AAED,MAAM,OAAO,+BAA+B;IAC1C,YAA6B,QAA+B;wBAA/B,QAAQ;IAA0B,CAAC;IAEhE,KAAK,CAAC,MAAM,CAAC,SAAwB;QACnC,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CACvB;;;;;;0CAMoC,EACpC;YACE,SAAS,CAAC,MAAM;YAChB,SAAS,CAAC,WAAW;YACrB,SAAS,CAAC,YAAY;YACtB,SAAS,CAAC,UAAU;YACpB,SAAS,CAAC,OAAO;YACjB,SAAS,CAAC,SAAS;SACpB,CACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CACR,YAAoB,EACpB,UAAkB,EAClB,OAAe;QAEf,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CACtC;;;uEAGiE,EACjE,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,CAAC,CACpC,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,MAAM,CACV,YAAoB,EACpB,UAAkB,EAClB,OAAe;QAEf,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CACtC;;;2BAGqB,EACrB,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,CAAC,CACpC,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAc;QAC/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CACtC;;oBAEc,EACd,CAAC,MAAM,CAAC,CACT,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,WAAW,CACf,WAAmB,EACnB,KAAK,GAAG,KAAM;QAEd,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,MAAO,EAAE,CAAC;YACjE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CACtC;;;uEAGiE,EACjE,CAAC,WAAW,EAAE,KAAK,CAAC,CACrB,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACvC,CAAC;CACF"}

package/backend/dist/platform/storage/blobStore.d.ts

@@ -0,0 +1,111 @@
+import type { Readable } from 'node:stream';
+export type BlobSource = AsyncIterable<Uint8Array>;
+export interface BlobDescriptor {
+    id: string;
+    ownerUserId: string;
+    purpose: string;
+    contentType: string;
+    originalFilename?: string;
+    metadata: Readonly<Record<string, string>>;
+    size: number;
+    sha256: string;
+    createdAt: string;
+    encryptionKeyId: string;
+    formatVersion: number;
+}
+export interface BlobPutRequest {
+    ownerUserId: string;
+    purpose: string;
+    contentType: string;
+    source: BlobSource;
+    expectedSize?: number;
+    originalFilename?: string;
+    metadata?: Readonly<Record<string, string>>;
+    signal?: AbortSignal;
+}
+export interface BlobByteRange {
+    start: number;
+    /** Inclusive. An omitted end reads through the final byte. */
+    end?: number;
+}
+export interface BlobReadRequest {
+    id: string;
+    ownerUserId: string;
+    range?: BlobByteRange;
+    signal?: AbortSignal;
+}
+export interface BlobContentRange {
+    start: number;
+    end: number;
+    total: number;
+    length: number;
+}
+export interface BlobReadResult {
+    descriptor: BlobDescriptor;
+    range: BlobContentRange | null;
+    body: Readable;
+}
+export interface BlobDeleteRequest {
+    id: string;
+    ownerUserId: string;
+    signal?: AbortSignal;
+}
+/**
+ * BlobStore is deliberately owner-scoped. Resource services must resolve
+ * sharing ACLs before invoking it and must never expose physical object keys.
+ */
+export interface BlobStore {
+    put(request: BlobPutRequest): Promise<BlobDescriptor>;
+    stat(id: string, ownerUserId: string): Promise<BlobDescriptor>;
+    open(request: BlobReadRequest): Promise<BlobReadResult>;
+    /** Missing objects are an idempotent success; cross-owner access is hidden. */
+    delete(request: BlobDeleteRequest): Promise<boolean>;
+}
+export interface BlobQuotaReservation {
+    /** Called incrementally while plaintext bytes arrive. */
+    consume(bytes: number): Promise<void>;
+    /** Commits the reservation only after the object is atomically visible. */
+    commit(descriptor: BlobDescriptor): Promise<void>;
+    /** Must be idempotent and safe after a failed commit. */
+    release(): Promise<void>;
+}
+export interface BlobQuotaPolicy {
+    /**
+     * Implementations must reserve expected bytes atomically across writers.
+     * `consume` reports the actual stream size; it refines the same reservation
+     * and must not count `expectedSize` a second time. Stored-usage release stays
+     * in the caller's relational resource transaction, independently of physical
+     * object garbage collection.
+     */
+    reserve(request: {
+        ownerUserId: string;
+        purpose: string;
+        expectedSize?: number;
+    }): Promise<BlobQuotaReservation>;
+}
+/** Optional atomic hook when metadata and quota use the same SQL transaction. */
+export interface TransactionalBlobQuotaReservation extends BlobQuotaReservation {
+    commitWithMetadata?(descriptor: BlobDescriptor, operation: (executor: unknown) => Promise<void>): Promise<void>;
+}
+export interface TransactionalBlobQuotaPolicy extends BlobQuotaPolicy {
+    releaseStoredWithMetadata?(request: {
+        id: string;
+        ownerUserId: string;
+    }, operation: (executor: unknown) => Promise<void>): Promise<void>;
+}
+export declare class NoopBlobQuotaPolicy implements BlobQuotaPolicy {
+    reserve(): Promise<BlobQuotaReservation>;
+}
+export type BlobStoreErrorCode = 'aborted' | 'corrupt' | 'invalid-input' | 'invalid-range' | 'not-found' | 'quota-exceeded' | 'unavailable' | 'verification-limit';
+export declare class BlobStoreError extends Error {
+    readonly code: BlobStoreErrorCode;
+    readonly cause?: unknown;
+    constructor(code: BlobStoreErrorCode, message: string, cause?: unknown);
+}
+export declare class BlobNotFoundError extends BlobStoreError {
+    constructor();
+}
+export declare class BlobQuotaExceededError extends BlobStoreError {
+    constructor(message?: string);
+}
+//# sourceMappingURL=blobStore.d.ts.map

package/backend/dist/platform/storage/blobStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blobStore.d.ts","sourceRoot":"","sources":["../../../src/platform/storage/blobStore.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,MAAM,UAAU,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;AAEnD,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,UAAU,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5C,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,8DAA8D;IAC9D,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,cAAc,CAAC;IAC3B,KAAK,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAC/B,IAAI,EAAE,QAAQ,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB,GAAG,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACtD,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC/D,IAAI,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACxD,+EAA+E;IAC/E,MAAM,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtD;AAED,MAAM,WAAW,oBAAoB;IACnC,yDAAyD;IACzD,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,2EAA2E;IAC3E,MAAM,CAAC,UAAU,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,yDAAyD;IACzD,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B;;;;;;OAMG;IACH,OAAO,CAAC,OAAO,EAAE;QACf,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;CACnC;AAED,iFAAiF;AACjF,MAAM,WAAW,iCAAkC,SAAQ,oBAAoB;IAC7E,kBAAkB,CAAC,CACjB,UAAU,EAAE,cAAc,EAC1B,SAAS,EAAE,CAAC,QAAQ,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,GAC9C,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAED,MAAM,WAAW,4BAA6B,SAAQ,eAAe;IACnE,yBAAyB,CAAC,CACxB,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,EAC5C,SAAS,EAAE,CAAC,QAAQ,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,GAC9C,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAED,qBAAa,mBAAoB,YAAW,eAAe;IACnD,OAAO,IAAI,OAAO,CAAC,oBAAoB,CAAC,CAM7C;CACF;AAED,MAAM,MAAM,kBAAkB,GAC1B,SAAS,GACT,SAAS,GACT,eAAe,GACf,eAAe,GACf,WAAW,GACX,gBAAgB,GAChB,aAAa,GACb,oBAAoB,CAAC;AAEzB,qBAAa,cAAe,SAAQ,KAAK;IAErC,QAAQ,CAAC,IAAI,EAAE,kBAAkB;IAEjC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO;IAH1B,YACW,IAAI,EAAE,kBAAkB,EACjC,OAAO,EAAE,MAAM,EACN,KAAK,CAAC,EAAE,OAAO,EAIzB;CACF;AAED,qBAAa,iBAAkB,SAAQ,cAAc;IACnD,cAGC;CACF;AAED,qBAAa,sBAAuB,SAAQ,cAAc;IACxD,YAAY,OAAO,SAAwB,EAG1C;CACF"}

package/backend/dist/platform/storage/blobStore.js

@@ -0,0 +1,46 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+export class NoopBlobQuotaPolicy {
+    async reserve() {
+        return {
+            consume: async () => undefined,
+            commit: async () => undefined,
+            release: async () => undefined,
+        };
+    }
+}
+export class BlobStoreError extends Error {
+    constructor(code, message, cause) {
+        super(message);
+        this.code = code;
+        this.cause = cause;
+        this.name = 'BlobStoreError';
+    }
+}
+export class BlobNotFoundError extends BlobStoreError {
+    constructor() {
+        super('not-found', 'Blob not found');
+        this.name = 'BlobNotFoundError';
+    }
+}
+export class BlobQuotaExceededError extends BlobStoreError {
+    constructor(message = 'Blob quota exceeded') {
+        super('quota-exceeded', message);
+        this.name = 'BlobQuotaExceededError';
+    }
+}
+//# sourceMappingURL=blobStore.js.map

package/backend/dist/platform/storage/blobStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blobStore.js","sourceRoot":"","sources":["../../../src/platform/storage/blobStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAkHH,MAAM,OAAO,mBAAmB;IAC9B,KAAK,CAAC,OAAO;QACX,OAAO;YACL,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;YAC9B,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;YAC7B,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;SAC/B,CAAC;IACJ,CAAC;CACF;AAYD,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC,YACW,IAAwB,EACjC,OAAe,EACN,KAAe;QAExB,KAAK,CAAC,OAAO,CAAC,CAAC;oBAJN,IAAI;qBAEJ,KAAK;QAGd,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED,MAAM,OAAO,iBAAkB,SAAQ,cAAc;IACnD;QACE,KAAK,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,MAAM,OAAO,sBAAuB,SAAQ,cAAc;IACxD,YAAY,OAAO,GAAG,qBAAqB;QACzC,KAAK,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF"}

package/backend/dist/platform/storage/documentVectorIndex.d.ts

@@ -0,0 +1,44 @@
+import type { DocumentChunk } from '../../types/index.js';
+export declare const DOCUMENT_VECTOR_NAMESPACE = "document-chunk";
+export declare const DOCUMENT_VECTOR_VERSION = "v1";
+export declare const DOCUMENT_CHUNKER_VERSION = "v1";
+export declare const DOCUMENT_INDEX_METADATA_KEY = "embeddingIndex";
+export interface DocumentVectorExecutionSpec {
+    model: string;
+    version: string;
+    chunkerVersion: string;
+    chunkSize: number;
+    chunkOverlap: number;
+    similarityThreshold: number;
+}
+export interface DocumentEmbeddingIndexMetadata {
+    model: string;
+    version: string;
+    chunkerVersion: string;
+    chunkSize: number;
+    chunkOverlap: number;
+    similarityThreshold: number;
+    dimensions: number | null;
+    aggregateRevision: string;
+    indexedAt: number;
+}
+export type EmbeddedDocumentChunk = DocumentChunk & {
+    embedding: number[];
+};
+export declare const documentChunkSourceRevision: (chunk: Pick<DocumentChunk, 'content'>) => string;
+export declare const embeddedDocumentChunks: (chunks: readonly DocumentChunk[]) => EmbeddedDocumentChunk[];
+export declare const documentEmbeddingDimensions: (chunks: readonly EmbeddedDocumentChunk[]) => number | null;
+/**
+ * Content-addressed publication revision shared by online indexing and the
+ * SQLite-to-team provenance gate. Keep this independent from provider state.
+ */
+export declare const aggregateDocumentIndexRevision: (chunks: readonly EmbeddedDocumentChunk[], spec: Readonly<DocumentVectorExecutionSpec>) => string;
+export declare const aggregateDocumentIndexRevisionFromEntries: (entries: readonly {
+    id: string;
+    sourceRevision: string;
+    dimensions: number;
+}[], spec: Readonly<DocumentVectorExecutionSpec>) => string;
+export declare const readDocumentIndexMetadata: (metadata: Record<string, unknown> | undefined) => DocumentEmbeddingIndexMetadata | undefined;
+export declare const documentIndexMatchesSpec: (metadata: DocumentEmbeddingIndexMetadata | undefined, spec: Readonly<DocumentVectorExecutionSpec>) => metadata is DocumentEmbeddingIndexMetadata;
+export declare const createDocumentIndexMetadata: (chunks: readonly DocumentChunk[], spec: Readonly<DocumentVectorExecutionSpec>, indexedAt?: number) => DocumentEmbeddingIndexMetadata;
+//# sourceMappingURL=documentVectorIndex.d.ts.map

package/backend/dist/platform/storage/documentVectorIndex.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"documentVectorIndex.d.ts","sourceRoot":"","sources":["../../../src/platform/storage/documentVectorIndex.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE1D,eAAO,MAAM,yBAAyB,mBAAmB,CAAC;AAC1D,eAAO,MAAM,uBAAuB,OAAO,CAAC;AAC5C,eAAO,MAAM,wBAAwB,OAAO,CAAC;AAC7C,eAAO,MAAM,2BAA2B,mBAAmB,CAAC;AAE5D,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,8BAA8B;IAC7C,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,qBAAqB,GAAG,aAAa,GAAG;IAAE,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAE5E,eAAO,MAAM,2BAA2B,UAC/B,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,KACpC,MACsE,CAAC;AAE1E,eAAO,MAAM,sBAAsB,WACzB,SAAS,aAAa,EAAE,KAC/B,qBAAqB,EAIrB,CAAC;AAEJ,eAAO,MAAM,2BAA2B,WAC9B,SAAS,qBAAqB,EAAE,KACvC,MAAM,GAAG,IAMX,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,8BAA8B,WACjC,SAAS,qBAAqB,EAAE,QAClC,QAAQ,CAAC,2BAA2B,CAAC,KAC1C,MAQA,CAAC;AAEJ,eAAO,MAAM,yCAAyC,YAC3C,SAAS;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;CACpB,EAAE,QACG,QAAQ,CAAC,2BAA2B,CAAC,KAC1C,MAuBF,CAAC;AAEF,eAAO,MAAM,yBAAyB,aAC1B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,KAC5C,8BAA8B,GAAG,SAsCnC,CAAC;AAEF,eAAO,MAAM,wBAAwB,aACzB,8BAA8B,GAAG,SAAS,QAC9C,QAAQ,CAAC,2BAA2B,CAAC,KAC1C,QAAQ,IAAI,8BAM8B,CAAC;AAE9C,eAAO,MAAM,2BAA2B,WAC9B,SAAS,aAAa,EAAE,QAC1B,QAAQ,CAAC,2BAA2B,CAAC,yBAE1C,8BAaF,CAAC"}

package/backend/dist/platform/storage/documentVectorIndex.js

@@ -0,0 +1,110 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ */
+import crypto from 'node:crypto';
+export const DOCUMENT_VECTOR_NAMESPACE = 'document-chunk';
+export const DOCUMENT_VECTOR_VERSION = 'v1';
+export const DOCUMENT_CHUNKER_VERSION = 'v1';
+export const DOCUMENT_INDEX_METADATA_KEY = 'embeddingIndex';
+export const documentChunkSourceRevision = (chunk) => crypto.createHash('sha256').update(chunk.content, 'utf8').digest('hex');
+export const embeddedDocumentChunks = (chunks) => chunks.filter((chunk) => Array.isArray(chunk.embedding) && chunk.embedding.length > 0);
+export const documentEmbeddingDimensions = (chunks) => {
+    const dimensions = new Set(chunks.map(chunk => chunk.embedding.length));
+    if (dimensions.size > 1) {
+        throw new Error('Embedding model returned inconsistent vector dimensions');
+    }
+    return dimensions.values().next().value ?? null;
+};
+/**
+ * Content-addressed publication revision shared by online indexing and the
+ * SQLite-to-team provenance gate. Keep this independent from provider state.
+ */
+export const aggregateDocumentIndexRevision = (chunks, spec) => aggregateDocumentIndexRevisionFromEntries(chunks.map(chunk => ({
+    id: chunk.id,
+    sourceRevision: documentChunkSourceRevision(chunk),
+    dimensions: chunk.embedding.length,
+})), spec);
+export const aggregateDocumentIndexRevisionFromEntries = (entries, spec) => {
+    const hash = crypto
+        .createHash('sha256')
+        .update('libre-document-index-v1\u0000')
+        .update(spec.model)
+        .update('\u0000')
+        .update(spec.version)
+        .update('\u0000')
+        .update(spec.chunkerVersion)
+        .update('\u0000')
+        .update(String(spec.chunkSize))
+        .update('\u0000')
+        .update(String(spec.chunkOverlap));
+    for (const entry of entries) {
+        hash
+            .update('\u0000')
+            .update(entry.id)
+            .update('\u0000')
+            .update(entry.sourceRevision)
+            .update('\u0000')
+            .update(String(entry.dimensions));
+    }
+    return hash.digest('hex');
+};
+export const readDocumentIndexMetadata = (metadata) => {
+    const value = metadata?.[DOCUMENT_INDEX_METADATA_KEY];
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        return undefined;
+    }
+    const record = value;
+    if (typeof record.model !== 'string' ||
+        Buffer.byteLength(record.model, 'utf8') < 1 ||
+        Buffer.byteLength(record.model, 'utf8') > 256 ||
+        typeof record.version !== 'string' ||
+        Buffer.byteLength(record.version, 'utf8') < 1 ||
+        Buffer.byteLength(record.version, 'utf8') > 256 ||
+        typeof record.chunkerVersion !== 'string' ||
+        Buffer.byteLength(record.chunkerVersion, 'utf8') < 1 ||
+        Buffer.byteLength(record.chunkerVersion, 'utf8') > 256 ||
+        !Number.isSafeInteger(record.chunkSize) ||
+        record.chunkSize < 1 ||
+        record.chunkSize > 1000000 ||
+        !Number.isSafeInteger(record.chunkOverlap) ||
+        record.chunkOverlap < 0 ||
+        record.chunkOverlap >= record.chunkSize ||
+        typeof record.similarityThreshold !== 'number' ||
+        !Number.isFinite(record.similarityThreshold) ||
+        record.similarityThreshold < -1 ||
+        record.similarityThreshold > 1 ||
+        (record.dimensions !== null &&
+            (!Number.isSafeInteger(record.dimensions) ||
+                record.dimensions < 1 ||
+                record.dimensions > 65536)) ||
+        typeof record.aggregateRevision !== 'string' ||
+        !/^[0-9a-f]{64}$/.test(record.aggregateRevision) ||
+        !Number.isSafeInteger(record.indexedAt) ||
+        record.indexedAt < 0) {
+        return undefined;
+    }
+    return record;
+};
+export const documentIndexMatchesSpec = (metadata, spec) => metadata !== undefined &&
+    metadata.model === spec.model &&
+    metadata.version === spec.version &&
+    metadata.chunkerVersion === spec.chunkerVersion &&
+    metadata.chunkSize === spec.chunkSize &&
+    metadata.chunkOverlap === spec.chunkOverlap;
+export const createDocumentIndexMetadata = (chunks, spec, indexedAt = Date.now()) => {
+    const embedded = embeddedDocumentChunks(chunks);
+    return {
+        model: spec.model,
+        version: spec.version,
+        chunkerVersion: spec.chunkerVersion,
+        chunkSize: spec.chunkSize,
+        chunkOverlap: spec.chunkOverlap,
+        similarityThreshold: spec.similarityThreshold,
+        dimensions: documentEmbeddingDimensions(embedded),
+        aggregateRevision: aggregateDocumentIndexRevision(embedded, spec),
+        indexedAt,
+    };
+};
+//# sourceMappingURL=documentVectorIndex.js.map

package/backend/dist/platform/storage/documentVectorIndex.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documentVectorIndex.js","sourceRoot":"","sources":["../../../src/platform/storage/documentVectorIndex.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AAGjC,MAAM,CAAC,MAAM,yBAAyB,GAAG,gBAAgB,CAAC;AAC1D,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAC5C,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC;AAC7C,MAAM,CAAC,MAAM,2BAA2B,GAAG,gBAAgB,CAAC;AAyB5D,MAAM,CAAC,MAAM,2BAA2B,GAAG,CACzC,KAAqC,EAC7B,EAAE,CACV,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAE1E,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,MAAgC,EACP,EAAE,CAC3B,MAAM,CAAC,MAAM,CACX,CAAC,KAAK,EAAkC,EAAE,CACxC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAC/D,CAAC;AAEJ,MAAM,CAAC,MAAM,2BAA2B,GAAG,CACzC,MAAwC,EACzB,EAAE;IACjB,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACxE,IAAI,UAAU,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,IAAI,IAAI,CAAC;AAClD,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAC5C,MAAwC,EACxC,IAA2C,EACnC,EAAE,CACV,yCAAyC,CACvC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACnB,EAAE,EAAE,KAAK,CAAC,EAAE;IACZ,cAAc,EAAE,2BAA2B,CAAC,KAAK,CAAC;IAClD,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM;CACnC,CAAC,CAAC,EACH,IAAI,CACL,CAAC;AAEJ,MAAM,CAAC,MAAM,yCAAyC,GAAG,CACvD,OAIG,EACH,IAA2C,EACnC,EAAE;IACV,MAAM,IAAI,GAAG,MAAM;SAChB,UAAU,CAAC,QAAQ,CAAC;SACpB,MAAM,CAAC,+BAA+B,CAAC;SACvC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;SAClB,MAAM,CAAC,QAAQ,CAAC;SAChB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;SACpB,MAAM,CAAC,QAAQ,CAAC;SAChB,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC;SAC3B,MAAM,CAAC,QAAQ,CAAC;SAChB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;SAC9B,MAAM,CAAC,QAAQ,CAAC;SAChB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IACrC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI;aACD,MAAM,CAAC,QAAQ,CAAC;aAChB,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;aAChB,MAAM,CAAC,QAAQ,CAAC;aAChB,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC;aAC5B,MAAM,CAAC,QAAQ,CAAC;aAChB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACvC,QAA6C,EACD,EAAE;IAC9C,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC,2BAA2B,CAAC,CAAC;IACtD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,IACE,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;QAChC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;QAC3C,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,GAAG;QAC7C,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;QAClC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC;QAC7C,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,GAAG;QAC/C,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ;QACzC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,GAAG,CAAC;QACpD,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,GAAG,GAAG;QACtD,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC;QACtC,MAAM,CAAC,SAAoB,GAAG,CAAC;QAC/B,MAAM,CAAC,SAAoB,GAAG,OAAS;QACxC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC;QACzC,MAAM,CAAC,YAAuB,GAAG,CAAC;QAClC,MAAM,CAAC,YAAuB,IAAK,MAAM,CAAC,SAAoB;QAC/D,OAAO,MAAM,CAAC,mBAAmB,KAAK,QAAQ;QAC9C,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,mBAAmB,CAAC;QAC5C,MAAM,CAAC,mBAAmB,GAAG,CAAC,CAAC;QAC/B,MAAM,CAAC,mBAAmB,GAAG,CAAC;QAC9B,CAAC,MAAM,CAAC,UAAU,KAAK,IAAI;YACzB,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC;gBACtC,MAAM,CAAC,UAAqB,GAAG,CAAC;gBAChC,MAAM,CAAC,UAAqB,GAAG,KAAM,CAAC,CAAC;QAC5C,OAAO,MAAM,CAAC,iBAAiB,KAAK,QAAQ;QAC5C,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC;QAChD,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC;QACtC,MAAM,CAAC,SAAoB,GAAG,CAAC,EAChC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,MAAmD,CAAC;AAC7D,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CACtC,QAAoD,EACpD,IAA2C,EACC,EAAE,CAC9C,QAAQ,KAAK,SAAS;IACtB,QAAQ,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;IAC7B,QAAQ,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO;IACjC,QAAQ,CAAC,cAAc,KAAK,IAAI,CAAC,cAAc;IAC/C,QAAQ,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;IACrC,QAAQ,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY,CAAC;AAE9C,MAAM,CAAC,MAAM,2BAA2B,GAAG,CACzC,MAAgC,EAChC,IAA2C,EAC3C,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EACU,EAAE;IAClC,MAAM,QAAQ,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAChD,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,UAAU,EAAE,2BAA2B,CAAC,QAAQ,CAAC;QACjD,iBAAiB,EAAE,8BAA8B,CAAC,QAAQ,EAAE,IAAI,CAAC;QACjE,SAAS;KACV,CAAC;AACJ,CAAC,CAAC"}

package/backend/dist/platform/storage/durableBlobQuotaPolicy.d.ts

@@ -0,0 +1,82 @@
+import type Database from 'better-sqlite3';
+import type { PostgresDatabase } from '../../persistence/postgresDatabase.js';
+import { type BlobQuotaPolicy, type BlobQuotaReservation, type TransactionalBlobQuotaPolicy } from './blobStore.js';
+export interface DurableBlobQuotaOptions {
+    maximumBytesPerOwner?: number;
+    reservationTtlMs?: number;
+    now?: () => number;
+}
+export interface BlobQuotaReconciliationResult {
+    releasedReservations: number;
+    releasedBytes: number;
+}
+export interface BlobQuotaObjectReconciliationResult {
+    releasedObjects: number;
+    releasedBytes: number;
+    inspectedObjects: number;
+}
+export interface ReconciledBlobQuotaPolicy extends BlobQuotaPolicy {
+    reconcileExpiredReservations(now?: number): Promise<BlobQuotaReconciliationResult>;
+    reconcileMissingStoredObjects(isStored: (object: {
+        id: string;
+        ownerUserId: string;
+    }) => Promise<boolean>, maximumObjects?: number): Promise<BlobQuotaObjectReconciliationResult>;
+    listStoredObjectIdsByOwner(ownerUserId: string, limit?: number): Promise<string[]>;
+}
+/**
+ * SQLite quota accounting uses IMMEDIATE transactions. Every growing stream
+ * atomically checks stored + all reserved bytes, so concurrent writers and
+ * multiple processes cannot both spend the same remaining allowance.
+ */
+export declare class SQLiteDurableBlobQuotaPolicy implements ReconciledBlobQuotaPolicy {
+    private readonly database;
+    private readonly maximumBytesPerOwner;
+    private readonly reservationTtlMs;
+    private readonly now;
+    constructor(database: Database.Database, options?: DurableBlobQuotaOptions);
+    reserve(request: {
+        ownerUserId: string;
+        purpose: string;
+        expectedSize?: number;
+    }): Promise<BlobQuotaReservation>;
+    releaseStored(request: {
+        id: string;
+        ownerUserId: string;
+    }): Promise<void>;
+    reconcileExpiredReservations(now?: number): Promise<BlobQuotaReconciliationResult>;
+    reconcileMissingStoredObjects(isStored: (object: {
+        id: string;
+        ownerUserId: string;
+    }) => Promise<boolean>, maximumObjects?: number): Promise<BlobQuotaObjectReconciliationResult>;
+    listStoredObjectIdsByOwner(ownerUserId: string, limit?: number): Promise<string[]>;
+}
+/** Same accounting contract using row locks and serializable transactions. */
+export declare class PostgresDurableBlobQuotaPolicy implements ReconciledBlobQuotaPolicy, TransactionalBlobQuotaPolicy {
+    private readonly database;
+    private readonly maximumBytesPerOwner;
+    private readonly reservationTtlMs;
+    private readonly now;
+    constructor(database: PostgresDatabase, options?: DurableBlobQuotaOptions);
+    private lockUsage;
+    reserve(request: {
+        ownerUserId: string;
+        purpose: string;
+        expectedSize?: number;
+    }): Promise<BlobQuotaReservation>;
+    releaseStored(request: {
+        id: string;
+        ownerUserId: string;
+    }): Promise<void>;
+    releaseStoredWithMetadata(request: {
+        id: string;
+        ownerUserId: string;
+    }, operation: (executor: unknown) => Promise<void>): Promise<void>;
+    reconcileExpiredReservations(now?: number): Promise<BlobQuotaReconciliationResult>;
+    reconcileMissingStoredObjects(isStored: (object: {
+        id: string;
+        ownerUserId: string;
+    }) => Promise<boolean>, maximumObjects?: number): Promise<BlobQuotaObjectReconciliationResult>;
+    listStoredObjectIdsByOwner(ownerUserId: string, limit?: number): Promise<string[]>;
+}
+export declare const resolveBlobQuotaOptions: (env?: NodeJS.ProcessEnv) => DurableBlobQuotaOptions;
+//# sourceMappingURL=durableBlobQuotaPolicy.d.ts.map

package/backend/dist/platform/storage/durableBlobQuotaPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"durableBlobQuotaPolicy.d.ts","sourceRoot":"","sources":["../../../src/platform/storage/durableBlobQuotaPolicy.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EACV,gBAAgB,EAEjB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAIL,KAAK,eAAe,EACpB,KAAK,oBAAoB,EAEzB,KAAK,4BAA4B,EAClC,MAAM,gBAAgB,CAAC;AAKxB,MAAM,WAAW,uBAAuB;IACtC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,6BAA6B;IAC5C,oBAAoB,EAAE,MAAM,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,mCAAmC;IAClD,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,yBAA0B,SAAQ,eAAe;IAChE,4BAA4B,CAC1B,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,6BAA6B,CAAC,CAAC;IAC1C,6BAA6B,CAC3B,QAAQ,EAAE,CAAC,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,EAC3E,cAAc,CAAC,EAAE,MAAM,GACtB,OAAO,CAAC,mCAAmC,CAAC,CAAC;IAChD,0BAA0B,CACxB,WAAW,EAAE,MAAM,EACnB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CACtB;AAqED;;;;GAIG;AACH,qBAAa,4BAA6B,YAAW,yBAAyB;IAM1E,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAL3B,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAS;IAC9C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IAEnC,YACmB,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAC5C,OAAO,GAAE,uBAA4B,EAMtC;IAEK,OAAO,CAAC,OAAO,EAAE;QACrB,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAwNhC;IAEK,aAAa,CAAC,OAAO,EAAE;QAC3B,EAAE,EAAE,MAAM,CAAC;QACX,WAAW,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,IAAI,CAAC,CA0BhB;IAEK,4BAA4B,CAChC,GAAG,SAAa,GACf,OAAO,CAAC,6BAA6B,CAAC,CA6BxC;IAEK,6BAA6B,CACjC,QAAQ,EAAE,CAAC,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,EAC3E,cAAc,SAAS,GACtB,OAAO,CAAC,mCAAmC,CAAC,CA+B9C;IAEK,0BAA0B,CAC9B,WAAW,EAAE,MAAM,EACnB,KAAK,SAAS,GACb,OAAO,CAAC,MAAM,EAAE,CAAC,CAcnB;CACF;AAED,8EAA8E;AAC9E,qBAAa,8BACX,YAAW,yBAAyB,EAAE,4BAA4B;IAOhE,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAL3B,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAS;IAC9C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IAEnC,YACmB,QAAQ,EAAE,gBAAgB,EAC3C,OAAO,GAAE,uBAA4B,EAMtC;YAEa,SAAS;IA0BjB,OAAO,CAAC,OAAO,EAAE;QACrB,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAqQhC;IAEK,aAAa,CAAC,OAAO,EAAE;QAC3B,EAAE,EAAE,MAAM,CAAC;QACX,WAAW,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,IAAI,CAAC,CAkChB;IAEK,yBAAyB,CAC7B,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,EAC5C,SAAS,EAAE,CAAC,QAAQ,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,GAC9C,OAAO,CAAC,IAAI,CAAC,CAmCf;IAEK,4BAA4B,CAChC,GAAG,SAAa,GACf,OAAO,CAAC,6BAA6B,CAAC,CAkCxC;IAEK,6BAA6B,CACjC,QAAQ,EAAE,CAAC,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,EAC3E,cAAc,SAAS,GACtB,OAAO,CAAC,mCAAmC,CAAC,CAoC9C;IAEK,0BAA0B,CAC9B,WAAW,EAAE,MAAM,EACnB,KAAK,SAAS,GACb,OAAO,CAAC,MAAM,EAAE,CAAC,CAiBnB;CACF;AAED,eAAO,MAAM,uBAAuB,SAC7B,MAAM,CAAC,UAAU,KACrB,uBAuBF,CAAC"}