workerstack 0.1.0-beta.0

package/dist/storage/buckets.js

@@ -0,0 +1,177 @@
+// ---------------------------------------------------------------------------
+// parseSize
+// ---------------------------------------------------------------------------
+const SIZE_UNITS = {
+    b: 1,
+    kb: 1024,
+    mb: 1024 * 1024,
+    gb: 1024 * 1024 * 1024,
+};
+export function parseSize(value) {
+    if (typeof value === 'number') {
+        if (!Number.isFinite(value) || value < 0 || !Number.isInteger(value)) {
+            throw new Error(`[workerstack] invalid size "${value}"`);
+        }
+        return value;
+    }
+    const trimmed = value.trim();
+    if (trimmed === '')
+        throw new Error(`[workerstack] invalid size "${value}"`);
+    const match = /^(\d+(?:\.\d+)?)\s*([a-z]*)$/i.exec(trimmed);
+    if (!match)
+        throw new Error(`[workerstack] invalid size "${value}"`);
+    const numStr = match[1];
+    if (numStr === undefined)
+        throw new Error(`[workerstack] invalid size "${value}"`);
+    const num = parseFloat(numStr);
+    const unit = (match[2] ?? '').toLowerCase();
+    if (unit === '')
+        return Math.floor(num);
+    const multiplier = SIZE_UNITS[unit];
+    if (multiplier === undefined)
+        throw new Error(`[workerstack] invalid size "${value}"`);
+    return Math.floor(num * multiplier);
+}
+// ---------------------------------------------------------------------------
+// Platform override (Bunderhost & co.)
+// ---------------------------------------------------------------------------
+/**
+ * A deployment platform that injects WORKERSTACK_S3_ENDPOINT forces every
+ * bucket onto that backend — code-level `local`/per-bucket `s3` blocks are
+ * ignored so apps deploy unchanged. Logical buckets already prefix object
+ * keys ("<bucket>/<uuid>"), so one physical bucket per environment suffices.
+ */
+function platformS3Backend(env) {
+    const endpoint = env['WORKERSTACK_S3_ENDPOINT'];
+    if (!endpoint)
+        return undefined;
+    return {
+        type: 's3',
+        bucket: env['WORKERSTACK_S3_BUCKET'] ?? '',
+        region: env['WORKERSTACK_S3_REGION'] ?? 'auto',
+        endpoint,
+        accessKeyId: env['WORKERSTACK_S3_ACCESS_KEY_ID'] ?? '',
+        secretAccessKey: env['WORKERSTACK_S3_SECRET_ACCESS_KEY'] ?? '',
+        publicUrl: env['WORKERSTACK_S3_PUBLIC_URL'],
+    };
+}
+// ---------------------------------------------------------------------------
+// Shared backend resolution
+// ---------------------------------------------------------------------------
+function resolveSharedBackend(input, env) {
+    if (!input)
+        return { type: 'local', path: './uploads' };
+    if ('local' in input && input.local !== undefined) {
+        return {
+            type: 'local',
+            path: input.local === true ? './uploads' : input.local,
+        };
+    }
+    if ('s3' in input && input.s3 !== undefined) {
+        const s3Cfg = typeof input.s3 === 'object' ? input.s3 : {};
+        return {
+            type: 's3',
+            bucket: env['S3_BUCKET'] ?? '',
+            region: env['S3_REGION'] ?? 'us-east-1',
+            endpoint: s3Cfg.endpoint ?? env['S3_ENDPOINT'],
+            accessKeyId: env['S3_ACCESS_KEY_ID'] ?? '',
+            secretAccessKey: env['S3_SECRET_ACCESS_KEY'] ?? '',
+        };
+    }
+    return { type: 'local', path: './uploads' };
+}
+// ---------------------------------------------------------------------------
+// Per-bucket backend resolution
+// ---------------------------------------------------------------------------
+function resolveBucketBackend(bucketInput, sharedBackend, env) {
+    // Platform override active → sharedBackend IS the platform backend and
+    // code-level per-bucket backends are ignored.
+    if (env['WORKERSTACK_S3_ENDPOINT'])
+        return sharedBackend;
+    if ('s3' in bucketInput && bucketInput.s3 !== undefined) {
+        const block = bucketInput.s3;
+        return {
+            type: 's3',
+            bucket: block.bucket,
+            region: block.region ?? env['S3_REGION'] ?? 'us-east-1',
+            endpoint: block.endpoint ?? env['S3_ENDPOINT'],
+            accessKeyId: env['S3_ACCESS_KEY_ID'] ?? '',
+            secretAccessKey: env['S3_SECRET_ACCESS_KEY'] ?? '',
+            publicUrl: block.publicUrl,
+        };
+    }
+    if ('local' in bucketInput && bucketInput.local !== undefined) {
+        return { type: 'local', path: bucketInput.local };
+    }
+    return sharedBackend;
+}
+// ---------------------------------------------------------------------------
+// Bucket resolution
+// ---------------------------------------------------------------------------
+function resolveSingleBucket(name, input, sharedBackend, env) {
+    const visibility = input.visibility ?? 'private';
+    const backend = resolveBucketBackend(input, sharedBackend, env);
+    const defaultGet = visibility === 'public' ? 'public' : 'owner';
+    const access = {
+        create: input.access?.create ?? 'authenticated',
+        get: input.access?.get ?? defaultGet,
+        delete: input.access?.delete ?? 'owner',
+    };
+    let upload = undefined;
+    if (input.upload !== undefined) {
+        upload = {};
+        if (input.upload.maxSize !== undefined) {
+            upload.maxSizeBytes = parseSize(input.upload.maxSize);
+        }
+        if (input.upload.accept !== undefined) {
+            upload.accept = input.upload.accept;
+        }
+    }
+    let quota = undefined;
+    if (input.quota !== undefined) {
+        quota = {};
+        if (input.quota.perUser !== undefined) {
+            quota.perUserBytes = parseSize(input.quota.perUser);
+        }
+        if (input.quota.perScope !== undefined) {
+            quota.perScopeBytes = parseSize(input.quota.perScope);
+        }
+    }
+    return {
+        name,
+        backend,
+        visibility,
+        access,
+        upload,
+        readScope: input.scope?.read,
+        writeScope: input.scope?.write,
+        quota,
+    };
+}
+// ---------------------------------------------------------------------------
+// resolveBuckets
+// ---------------------------------------------------------------------------
+export function resolveBuckets(input, env = process.env) {
+    const sharedBackend = platformS3Backend(env) ?? resolveSharedBackend(input, env);
+    const bucketsInput = input?.buckets;
+    const declaredNames = bucketsInput ? Object.keys(bucketsInput) : [];
+    const defaultBucketName = input?.defaultBucket ??
+        // A single declared bucket is unambiguous — treat it as the default.
+        (declaredNames.length === 1 ? declaredNames[0] : 'default');
+    const buckets = new Map();
+    if (!bucketsInput || Object.keys(bucketsInput).length === 0) {
+        // Synthesize a single default bucket
+        const defaultBucket = resolveSingleBucket(defaultBucketName, {}, sharedBackend, env);
+        buckets.set(defaultBucketName, defaultBucket);
+        return { defaultBucket: defaultBucketName, buckets };
+    }
+    // Validate defaultBucket is declared
+    if (!(defaultBucketName in bucketsInput)) {
+        throw new Error(`[workerstack] defaultBucket "${defaultBucketName}" is not a declared bucket`);
+    }
+    for (const [name, bucketInput] of Object.entries(bucketsInput)) {
+        buckets.set(name, resolveSingleBucket(name, bucketInput, sharedBackend, env));
+    }
+    return { defaultBucket: defaultBucketName, buckets };
+}
+//# sourceMappingURL=buckets.js.map

package/dist/storage/buckets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"buckets.js","sourceRoot":"","sources":["../../src/storage/buckets.ts"],"names":[],"mappings":"AAwEA,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,MAAM,UAAU,GAA2B;IACzC,CAAC,EAAE,CAAC;IACJ,EAAE,EAAE,IAAI;IACR,EAAE,EAAE,IAAI,GAAG,IAAI;IACf,EAAE,EAAE,IAAI,GAAG,IAAI,GAAG,IAAI;CACvB,CAAA;AAED,MAAM,UAAU,SAAS,CAAC,KAAsB;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,GAAG,CAAC,CAAA;QAC1D,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IAC5B,IAAI,OAAO,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,GAAG,CAAC,CAAA;IAE5E,MAAM,KAAK,GAAG,+BAA+B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC3D,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,GAAG,CAAC,CAAA;IAEpE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;IACvB,IAAI,MAAM,KAAK,SAAS;QACtB,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,GAAG,CAAC,CAAA;IAC1D,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,CAAA;IAC9B,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;IAE3C,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAEvC,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;IACnC,IAAI,UAAU,KAAK,SAAS;QAC1B,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,GAAG,CAAC,CAAA;IAE1D,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,UAAU,CAAC,CAAA;AACrC,CAAC;AAED,8EAA8E;AAC9E,uCAAuC;AACvC,8EAA8E;AAE9E;;;;;GAKG;AACH,SAAS,iBAAiB,CACxB,GAAuC;IAEvC,MAAM,QAAQ,GAAG,GAAG,CAAC,yBAAyB,CAAC,CAAA;IAC/C,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAA;IAC/B,OAAO;QACL,IAAI,EAAE,IAAI;QACV,MAAM,EAAE,GAAG,CAAC,uBAAuB,CAAC,IAAI,EAAE;QAC1C,MAAM,EAAE,GAAG,CAAC,uBAAuB,CAAC,IAAI,MAAM;QAC9C,QAAQ;QACR,WAAW,EAAE,GAAG,CAAC,8BAA8B,CAAC,IAAI,EAAE;QACtD,eAAe,EAAE,GAAG,CAAC,kCAAkC,CAAC,IAAI,EAAE;QAC9D,SAAS,EAAE,GAAG,CAAC,2BAA2B,CAAC;KAC5C,CAAA;AACH,CAAC;AAED,8EAA8E;AAC9E,4BAA4B;AAC5B,8EAA8E;AAE9E,SAAS,oBAAoB,CAC3B,KAAqC,EACrC,GAAuC;IAEvC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAA;IAEvD,IAAI,OAAO,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAClD,OAAO;YACL,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK;SACvD,CAAA;IACH,CAAC;IAED,IAAI,IAAI,IAAI,KAAK,IAAI,KAAK,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAC1D,OAAO;YACL,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE;YAC9B,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC,IAAI,WAAW;YACvC,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,GAAG,CAAC,aAAa,CAAC;YAC9C,WAAW,EAAE,GAAG,CAAC,kBAAkB,CAAC,IAAI,EAAE;YAC1C,eAAe,EAAE,GAAG,CAAC,sBAAsB,CAAC,IAAI,EAAE;SACnD,CAAA;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAA;AAC7C,CAAC;AAED,8EAA8E;AAC9E,gCAAgC;AAChC,8EAA8E;AAE9E,SAAS,oBAAoB,CAC3B,WAA8B,EAC9B,aAA8B,EAC9B,GAAuC;IAEvC,uEAAuE;IACvE,8CAA8C;IAC9C,IAAI,GAAG,CAAC,yBAAyB,CAAC;QAAE,OAAO,aAAa,CAAA;IACxD,IAAI,IAAI,IAAI,WAAW,IAAI,WAAW,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;QACxD,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAA;QAC5B,OAAO;YACL,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,WAAW,CAAC,IAAI,WAAW;YACvD,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,GAAG,CAAC,aAAa,CAAC;YAC9C,WAAW,EAAE,GAAG,CAAC,kBAAkB,CAAC,IAAI,EAAE;YAC1C,eAAe,EAAE,GAAG,CAAC,sBAAsB,CAAC,IAAI,EAAE;YAClD,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAA;IACH,CAAC;IAED,IAAI,OAAO,IAAI,WAAW,IAAI,WAAW,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,KAAK,EAAE,CAAA;IACnD,CAAC;IAED,OAAO,aAAa,CAAA;AACtB,CAAC;AAED,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,SAAS,mBAAmB,CAC1B,IAAY,EACZ,KAAwB,EACxB,aAA8B,EAC9B,GAAuC;IAEvC,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,SAAS,CAAA;IAChD,MAAM,OAAO,GAAG,oBAAoB,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,CAAC,CAAA;IAE/D,MAAM,UAAU,GAAkB,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAA;IAE9E,MAAM,MAAM,GAA6B;QACvC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,eAAe;QAC/C,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,IAAI,UAAU;QACpC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,OAAO;KACxC,CAAA;IAED,IAAI,MAAM,GAAyC,SAAS,CAAA;IAC5D,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,GAAG,EAAE,CAAA;QACX,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACvC,MAAM,CAAC,YAAY,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QACvD,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAA;QACrC,CAAC;IACH,CAAC;IAED,IAAI,KAAK,GAAwC,SAAS,CAAA;IAC1D,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9B,KAAK,GAAG,EAAE,CAAA;QACV,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACtC,KAAK,CAAC,YAAY,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QACrD,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACvC,KAAK,CAAC,aAAa,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QACvD,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI;QACJ,OAAO;QACP,UAAU;QACV,MAAM;QACN,MAAM;QACN,SAAS,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI;QAC5B,UAAU,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK;QAC9B,KAAK;KACN,CAAA;AACH,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,MAAM,UAAU,cAAc,CAC5B,KAAqC,EACrC,MAA0C,OAAO,CAAC,GAAG;IAErD,MAAM,aAAa,GACjB,iBAAiB,CAAC,GAAG,CAAC,IAAI,oBAAoB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IAC5D,MAAM,YAAY,GAAG,KAAK,EAAE,OAAO,CAAA;IAEnC,MAAM,aAAa,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IACnE,MAAM,iBAAiB,GACrB,KAAK,EAAE,aAAa;QACpB,qEAAqE;QACrE,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IAE9D,MAAM,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAA;IAEjD,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5D,qCAAqC;QACrC,MAAM,aAAa,GAAG,mBAAmB,CACvC,iBAAiB,EACjB,EAAE,EACF,aAAa,EACb,GAAG,CACJ,CAAA;QACD,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAA;QAC7C,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAA;IACtD,CAAC;IAED,qCAAqC;IACrC,IAAI,CAAC,CAAC,iBAAiB,IAAI,YAAY,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CACb,gCAAgC,iBAAiB,4BAA4B,CAC9E,CAAA;IACH,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QAC/D,OAAO,CAAC,GAAG,CACT,IAAI,EACJ,mBAAmB,CAAC,IAAI,EAAE,WAAW,EAAE,aAAa,EAAE,GAAG,CAAC,CAC3D,CAAA;IACH,CAAC;IAED,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAA;AACtD,CAAC","sourcesContent":["// src/storage/buckets.ts\nimport type { OperationRule, ScopeResolver } from '../access'\n\n// ---------------------------------------------------------------------------\n// Input types (developer-facing config)\n// ---------------------------------------------------------------------------\n\nexport type BucketBackendInput =\n  | {\n      s3: {\n        bucket: string\n        region?: string\n        endpoint?: string\n        publicUrl?: string\n      }\n    }\n  | { local: string }\n\nexport type BucketConfigInput = {\n  visibility?: 'public' | 'private'\n  access?: {\n    create?: OperationRule\n    get?: OperationRule\n    delete?: OperationRule\n  }\n  upload?: { maxSize?: string | number; accept?: string[] }\n  scope?: {\n    read?: ScopeResolver\n    write?: ScopeResolver\n  }\n  quota?: { perUser?: string | number; perScope?: string | number }\n} & Partial<BucketBackendInput>\n\nexport type StorageConfigInput = {\n  s3?: true | { endpoint?: string }\n  local?: true | string\n  defaultBucket?: string\n  buckets?: Record<string, BucketConfigInput>\n}\n\n// ---------------------------------------------------------------------------\n// Resolved types (internal)\n// ---------------------------------------------------------------------------\n\nexport type ResolvedBackend =\n  | { type: 'local'; path: string }\n  | {\n      type: 's3'\n      bucket: string\n      region: string\n      endpoint?: string\n      accessKeyId: string\n      secretAccessKey: string\n      publicUrl?: string\n    }\n\nexport type ResolvedBucket = {\n  name: string\n  backend: ResolvedBackend\n  visibility: 'public' | 'private'\n  access: { create: OperationRule; get: OperationRule; delete: OperationRule }\n  upload?: { maxSizeBytes?: number; accept?: string[] }\n  readScope?: ScopeResolver\n  writeScope?: ScopeResolver\n  quota?: { perUserBytes?: number; perScopeBytes?: number }\n}\n\nexport type ResolvedStorageBuckets = {\n  defaultBucket: string\n  buckets: Map<string, ResolvedBucket>\n}\n\n// ---------------------------------------------------------------------------\n// parseSize\n// ---------------------------------------------------------------------------\n\nconst SIZE_UNITS: Record<string, number> = {\n  b: 1,\n  kb: 1024,\n  mb: 1024 * 1024,\n  gb: 1024 * 1024 * 1024,\n}\n\nexport function parseSize(value: string | number): number {\n  if (typeof value === 'number') {\n    if (!Number.isFinite(value) || value < 0 || !Number.isInteger(value)) {\n      throw new Error(`[workerstack] invalid size \"${value}\"`)\n    }\n    return value\n  }\n\n  const trimmed = value.trim()\n  if (trimmed === '') throw new Error(`[workerstack] invalid size \"${value}\"`)\n\n  const match = /^(\\d+(?:\\.\\d+)?)\\s*([a-z]*)$/i.exec(trimmed)\n  if (!match) throw new Error(`[workerstack] invalid size \"${value}\"`)\n\n  const numStr = match[1]\n  if (numStr === undefined)\n    throw new Error(`[workerstack] invalid size \"${value}\"`)\n  const num = parseFloat(numStr)\n  const unit = (match[2] ?? '').toLowerCase()\n\n  if (unit === '') return Math.floor(num)\n\n  const multiplier = SIZE_UNITS[unit]\n  if (multiplier === undefined)\n    throw new Error(`[workerstack] invalid size \"${value}\"`)\n\n  return Math.floor(num * multiplier)\n}\n\n// ---------------------------------------------------------------------------\n// Platform override (Bunderhost & co.)\n// ---------------------------------------------------------------------------\n\n/**\n * A deployment platform that injects WORKERSTACK_S3_ENDPOINT forces every\n * bucket onto that backend — code-level `local`/per-bucket `s3` blocks are\n * ignored so apps deploy unchanged. Logical buckets already prefix object\n * keys (\"<bucket>/<uuid>\"), so one physical bucket per environment suffices.\n */\nfunction platformS3Backend(\n  env: Record<string, string | undefined>,\n): ResolvedBackend | undefined {\n  const endpoint = env['WORKERSTACK_S3_ENDPOINT']\n  if (!endpoint) return undefined\n  return {\n    type: 's3',\n    bucket: env['WORKERSTACK_S3_BUCKET'] ?? '',\n    region: env['WORKERSTACK_S3_REGION'] ?? 'auto',\n    endpoint,\n    accessKeyId: env['WORKERSTACK_S3_ACCESS_KEY_ID'] ?? '',\n    secretAccessKey: env['WORKERSTACK_S3_SECRET_ACCESS_KEY'] ?? '',\n    publicUrl: env['WORKERSTACK_S3_PUBLIC_URL'],\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Shared backend resolution\n// ---------------------------------------------------------------------------\n\nfunction resolveSharedBackend(\n  input: StorageConfigInput | undefined,\n  env: Record<string, string | undefined>,\n): ResolvedBackend {\n  if (!input) return { type: 'local', path: './uploads' }\n\n  if ('local' in input && input.local !== undefined) {\n    return {\n      type: 'local',\n      path: input.local === true ? './uploads' : input.local,\n    }\n  }\n\n  if ('s3' in input && input.s3 !== undefined) {\n    const s3Cfg = typeof input.s3 === 'object' ? input.s3 : {}\n    return {\n      type: 's3',\n      bucket: env['S3_BUCKET'] ?? '',\n      region: env['S3_REGION'] ?? 'us-east-1',\n      endpoint: s3Cfg.endpoint ?? env['S3_ENDPOINT'],\n      accessKeyId: env['S3_ACCESS_KEY_ID'] ?? '',\n      secretAccessKey: env['S3_SECRET_ACCESS_KEY'] ?? '',\n    }\n  }\n\n  return { type: 'local', path: './uploads' }\n}\n\n// ---------------------------------------------------------------------------\n// Per-bucket backend resolution\n// ---------------------------------------------------------------------------\n\nfunction resolveBucketBackend(\n  bucketInput: BucketConfigInput,\n  sharedBackend: ResolvedBackend,\n  env: Record<string, string | undefined>,\n): ResolvedBackend {\n  // Platform override active → sharedBackend IS the platform backend and\n  // code-level per-bucket backends are ignored.\n  if (env['WORKERSTACK_S3_ENDPOINT']) return sharedBackend\n  if ('s3' in bucketInput && bucketInput.s3 !== undefined) {\n    const block = bucketInput.s3\n    return {\n      type: 's3',\n      bucket: block.bucket,\n      region: block.region ?? env['S3_REGION'] ?? 'us-east-1',\n      endpoint: block.endpoint ?? env['S3_ENDPOINT'],\n      accessKeyId: env['S3_ACCESS_KEY_ID'] ?? '',\n      secretAccessKey: env['S3_SECRET_ACCESS_KEY'] ?? '',\n      publicUrl: block.publicUrl,\n    }\n  }\n\n  if ('local' in bucketInput && bucketInput.local !== undefined) {\n    return { type: 'local', path: bucketInput.local }\n  }\n\n  return sharedBackend\n}\n\n// ---------------------------------------------------------------------------\n// Bucket resolution\n// ---------------------------------------------------------------------------\n\nfunction resolveSingleBucket(\n  name: string,\n  input: BucketConfigInput,\n  sharedBackend: ResolvedBackend,\n  env: Record<string, string | undefined>,\n): ResolvedBucket {\n  const visibility = input.visibility ?? 'private'\n  const backend = resolveBucketBackend(input, sharedBackend, env)\n\n  const defaultGet: OperationRule = visibility === 'public' ? 'public' : 'owner'\n\n  const access: ResolvedBucket['access'] = {\n    create: input.access?.create ?? 'authenticated',\n    get: input.access?.get ?? defaultGet,\n    delete: input.access?.delete ?? 'owner',\n  }\n\n  let upload: ResolvedBucket['upload'] | undefined = undefined\n  if (input.upload !== undefined) {\n    upload = {}\n    if (input.upload.maxSize !== undefined) {\n      upload.maxSizeBytes = parseSize(input.upload.maxSize)\n    }\n    if (input.upload.accept !== undefined) {\n      upload.accept = input.upload.accept\n    }\n  }\n\n  let quota: ResolvedBucket['quota'] | undefined = undefined\n  if (input.quota !== undefined) {\n    quota = {}\n    if (input.quota.perUser !== undefined) {\n      quota.perUserBytes = parseSize(input.quota.perUser)\n    }\n    if (input.quota.perScope !== undefined) {\n      quota.perScopeBytes = parseSize(input.quota.perScope)\n    }\n  }\n\n  return {\n    name,\n    backend,\n    visibility,\n    access,\n    upload,\n    readScope: input.scope?.read,\n    writeScope: input.scope?.write,\n    quota,\n  }\n}\n\n// ---------------------------------------------------------------------------\n// resolveBuckets\n// ---------------------------------------------------------------------------\n\nexport function resolveBuckets(\n  input: StorageConfigInput | undefined,\n  env: Record<string, string | undefined> = process.env,\n): ResolvedStorageBuckets {\n  const sharedBackend =\n    platformS3Backend(env) ?? resolveSharedBackend(input, env)\n  const bucketsInput = input?.buckets\n\n  const declaredNames = bucketsInput ? Object.keys(bucketsInput) : []\n  const defaultBucketName =\n    input?.defaultBucket ??\n    // A single declared bucket is unambiguous — treat it as the default.\n    (declaredNames.length === 1 ? declaredNames[0]! : 'default')\n\n  const buckets = new Map<string, ResolvedBucket>()\n\n  if (!bucketsInput || Object.keys(bucketsInput).length === 0) {\n    // Synthesize a single default bucket\n    const defaultBucket = resolveSingleBucket(\n      defaultBucketName,\n      {},\n      sharedBackend,\n      env,\n    )\n    buckets.set(defaultBucketName, defaultBucket)\n    return { defaultBucket: defaultBucketName, buckets }\n  }\n\n  // Validate defaultBucket is declared\n  if (!(defaultBucketName in bucketsInput)) {\n    throw new Error(\n      `[workerstack] defaultBucket \"${defaultBucketName}\" is not a declared bucket`,\n    )\n  }\n\n  for (const [name, bucketInput] of Object.entries(bucketsInput)) {\n    buckets.set(\n      name,\n      resolveSingleBucket(name, bucketInput, sharedBackend, env),\n    )\n  }\n\n  return { defaultBucket: defaultBucketName, buckets }\n}\n"]}

package/dist/storage/delete.d.ts

@@ -0,0 +1,8 @@
+import type { AnyDb } from '../dialect.js';
+import type { StorageAdapter } from './index.js';
+/**
+ * Delete a logical file: the object and its file-meta row. All deletion goes
+ * through this helper — never inline `adapter.delete`.
+ */
+export declare function deleteStoredFile(adapter: StorageAdapter, db: AnyDb, fileId: string): Promise<void>;
+//# sourceMappingURL=delete.d.ts.map

package/dist/storage/delete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../src/storage/delete.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AACvC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAI7C;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,cAAc,EACvB,EAAE,EAAE,KAAK,EACT,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAGf"}

package/dist/storage/delete.js

@@ -0,0 +1,10 @@
+import { deleteFileMetaRow } from './file-meta.js';
+/**
+ * Delete a logical file: the object and its file-meta row. All deletion goes
+ * through this helper — never inline `adapter.delete`.
+ */
+export async function deleteStoredFile(adapter, db, fileId) {
+    await adapter.delete(fileId);
+    await deleteFileMetaRow(db, fileId);
+}
+//# sourceMappingURL=delete.js.map

package/dist/storage/delete.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../src/storage/delete.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAE/C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAuB,EACvB,EAAS,EACT,MAAc;IAEd,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC5B,MAAM,iBAAiB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;AACrC,CAAC","sourcesContent":["// src/storage/delete.ts\nimport type { AnyDb } from '../dialect'\nimport type { StorageAdapter } from './index'\n\nimport { deleteFileMetaRow } from './file-meta'\n\n/**\n * Delete a logical file: the object and its file-meta row. All deletion goes\n * through this helper — never inline `adapter.delete`.\n */\nexport async function deleteStoredFile(\n  adapter: StorageAdapter,\n  db: AnyDb,\n  fileId: string,\n): Promise<void> {\n  await adapter.delete(fileId)\n  await deleteFileMetaRow(db, fileId)\n}\n"]}

package/dist/storage/file-meta.d.ts

@@ -0,0 +1,37 @@
+import type { ScopeMap } from '../access.js';
+import type { AnyDb } from '../dialect.js';
+import { workerstackFiles } from '../internal-tables.js';
+export type FileMetaRow = typeof workerstackFiles.$inferSelect;
+export declare function insertPendingFile(db: AnyDb, input: {
+    fileId: string;
+    bucket: string;
+    ownerId: string | null;
+    scopeJson: string | null;
+    filename: string | null;
+    contentType: string | null;
+}): Promise<void>;
+export declare function insertReadyFile(db: AnyDb, input: {
+    fileId: string;
+    bucket: string;
+    ownerId: string | null;
+    scopeJson: string | null;
+    filename: string | null;
+    contentType: string | null;
+    size: number | null;
+}): Promise<void>;
+export declare function markFileReady(db: AnyDb, fileId: string, patch: {
+    size: number | null;
+    contentType: string | null;
+}): Promise<void>;
+export declare function getFileMeta(db: AnyDb, fileId: string): Promise<FileMetaRow | null>;
+export declare function deleteFileMetaRow(db: AnyDb, fileId: string): Promise<void>;
+export declare function listStalePendingFiles(db: AnyDb, olderThanMs: number): Promise<FileMetaRow[]>;
+export declare function sumReadySize(db: AnyDb, q: {
+    bucket: string;
+    ownerId?: string;
+    scopeJson?: string;
+}): Promise<number>;
+export declare function scopeToJson(scope: ScopeMap | undefined | null): string | null;
+export declare function parseScopeJson(json: string | null): ScopeMap | null;
+export declare function fileMatchesScope(row: FileMetaRow, requesterScope: ScopeMap | undefined): boolean;
+//# sourceMappingURL=file-meta.d.ts.map

package/dist/storage/file-meta.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-meta.d.ts","sourceRoot":"","sources":["../../src/storage/file-meta.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAGvC,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAErD,MAAM,MAAM,WAAW,GAAG,OAAO,gBAAgB,CAAC,YAAY,CAAA;AAI9D,wBAAsB,iBAAiB,CACrC,EAAE,EAAE,KAAK,EACT,KAAK,EAAE;IACL,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B,GACA,OAAO,CAAC,IAAI,CAAC,CAcf;AAED,wBAAsB,eAAe,CACnC,EAAE,EAAE,KAAK,EACT,KAAK,EAAE;IACL,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CACpB,GACA,OAAO,CAAC,IAAI,CAAC,CAef;AAED,wBAAsB,aAAa,CACjC,EAAE,EAAE,KAAK,EACT,MAAM,EAAE,MAAM,EACd,KAAK,EAAE;IAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACzD,OAAO,CAAC,IAAI,CAAC,CAWf;AAED,wBAAsB,WAAW,CAC/B,EAAE,EAAE,KAAK,EACT,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAQ7B;AAED,wBAAsB,iBAAiB,CACrC,EAAE,EAAE,KAAK,EACT,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAGf;AAID,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,KAAK,EACT,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,WAAW,EAAE,CAAC,CAMxB;AAID,wBAAsB,YAAY,CAChC,EAAE,EAAE,KAAK,EACT,CAAC,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1D,OAAO,CAAC,MAAM,CAAC,CAmBjB;AAID,wBAAgB,WAAW,CAAC,KAAK,EAAE,QAAQ,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAW7E;AAeD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,QAAQ,GAAG,IAAI,CASnE;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,WAAW,EAChB,cAAc,EAAE,QAAQ,GAAG,SAAS,GACnC,OAAO,CAOT"}

package/dist/storage/file-meta.js

@@ -0,0 +1,166 @@
+/*
+ * DEFERRED — logical/physical blob/file split
+ *
+ * The current model is 1:1 logical-file = physical-object: one row in
+ * bunderstack_file_meta maps to exactly one object in storage. A future
+ * blob/file split would introduce:
+ *
+ *   workerstackBlob { key, bucket, size, contentType, refcount, createdAt }
+ *   workerstackFile { id, blobKey, ownerId, scopeJson, status, filename,
+ *                     createdAt, confirmedAt, deletedAt }
+ *
+ * This would enable:
+ *   - Soft/shadow delete (file.deletedAt + per-bucket retention policy)
+ *   - Transfer ownership/scope (mutate file.ownerId / scopeJson, no byte movement)
+ *   - Duplicate/share to many users or orgs by reference (refcount++) so sharing
+ *     to N users stores bytes once; or by-copy via S3 CopyObject.
+ *
+ * Deletion would decrement refcount; bytes removed only at 0; orphan sweep also
+ * reaps refcount=0 blobs (self-heals crash mid-decrement).
+ *
+ * Deferred because refcount correctness is a real cost vs. current need.
+ *
+ * Two forward-compat invariants keep this addable without breaking the public API:
+ *   1. fileId is opaque — clients never parse it.
+ *   2. All deletion goes through the storage delete helper, never inline.
+ *
+ * See docs/plans/2026-06-28-multi-bucket-storage-design.md §6 for full rationale.
+ */
+import { eq, and, lt, sql } from 'drizzle-orm';
+import { rowMatchesScope } from '../access.js';
+import { workerstackFiles } from '../internal-tables.js';
+// ─── CRUD ─────────────────────────────────────────────────────────────────────
+export async function insertPendingFile(db, input) {
+    const files = workerstackFiles;
+    await db.insert(files).values({
+        fileId: input.fileId,
+        bucket: input.bucket,
+        ownerId: input.ownerId,
+        scopeJson: input.scopeJson,
+        filename: input.filename,
+        contentType: input.contentType,
+        status: 'pending',
+        createdAt: Date.now(),
+        confirmedAt: null,
+        size: null,
+    });
+}
+export async function insertReadyFile(db, input) {
+    const files = workerstackFiles;
+    const now = Date.now();
+    await db.insert(files).values({
+        fileId: input.fileId,
+        bucket: input.bucket,
+        ownerId: input.ownerId,
+        scopeJson: input.scopeJson,
+        filename: input.filename,
+        contentType: input.contentType,
+        size: input.size,
+        status: 'ready',
+        createdAt: now,
+        confirmedAt: now,
+    });
+}
+export async function markFileReady(db, fileId, patch) {
+    const files = workerstackFiles;
+    await db
+        .update(files)
+        .set({
+        status: 'ready',
+        confirmedAt: Date.now(),
+        size: patch.size,
+        contentType: patch.contentType,
+    })
+        .where(eq(files.fileId, fileId));
+}
+export async function getFileMeta(db, fileId) {
+    const files = workerstackFiles;
+    const rows = await db
+        .select()
+        .from(files)
+        .where(eq(files.fileId, fileId))
+        .limit(1);
+    return rows[0] ?? null;
+}
+export async function deleteFileMetaRow(db, fileId) {
+    const files = workerstackFiles;
+    await db.delete(files).where(eq(files.fileId, fileId));
+}
+// ─── Sweep ────────────────────────────────────────────────────────────────────
+export async function listStalePendingFiles(db, olderThanMs) {
+    const files = workerstackFiles;
+    return db
+        .select()
+        .from(files)
+        .where(and(eq(files.status, 'pending'), lt(files.createdAt, olderThanMs)));
+}
+// ─── Quota ────────────────────────────────────────────────────────────────────
+export async function sumReadySize(db, q) {
+    const files = workerstackFiles;
+    const conditions = [eq(files.status, 'ready'), eq(files.bucket, q.bucket)];
+    if (q.ownerId !== undefined) {
+        conditions.push(eq(files.ownerId, q.ownerId));
+    }
+    if (q.scopeJson !== undefined) {
+        conditions.push(eq(files.scopeJson, q.scopeJson));
+    }
+    const rows = await db
+        .select({
+        total: sql `coalesce(sum(${files.size}), 0)`,
+    })
+        .from(files)
+        .where(and(...conditions));
+    const raw = rows[0]?.total ?? 0;
+    return Number(raw);
+}
+// ─── Scope helpers ────────────────────────────────────────────────────────────
+export function scopeToJson(scope) {
+    if (scope == null)
+        return null;
+    const keys = Object.keys(scope);
+    if (keys.length === 0)
+        return null;
+    const sorted = keys.sort();
+    const ordered = {};
+    for (const k of sorted) {
+        const value = scope[k];
+        if (value !== undefined)
+            ordered[k] = value;
+    }
+    return JSON.stringify(ordered);
+}
+function isScopeMap(value) {
+    if (value === null || typeof value !== 'object' || Array.isArray(value)) {
+        return false;
+    }
+    for (const item of Object.values(value)) {
+        if (typeof item === 'string')
+            continue;
+        if (Array.isArray(item) && item.every((entry) => typeof entry === 'string'))
+            continue;
+        return false;
+    }
+    return true;
+}
+export function parseScopeJson(json) {
+    if (json == null)
+        return null;
+    try {
+        const parsed = JSON.parse(json);
+        return isScopeMap(parsed) ? parsed : null;
+    }
+    catch {
+        // Corrupt/legacy scope_json should not crash a read; treat as no scope.
+        return null;
+    }
+}
+export function fileMatchesScope(row, requesterScope) {
+    if (requesterScope == null || Object.keys(requesterScope).length === 0) {
+        return true;
+    }
+    if (row.scopeJson == null)
+        return false;
+    const parsed = parseScopeJson(row.scopeJson) ?? {};
+    return rowMatchesScope(parsed, requesterScope);
+}
+//# sourceMappingURL=file-meta.js.map

package/dist/storage/file-meta.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-meta.js","sourceRoot":"","sources":["../../src/storage/file-meta.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAA;AAK9C,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAIrD,iFAAiF;AAEjF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,EAAS,EACT,KAOC;IAED,MAAM,KAAK,GAAG,gBAAgB,CAAA;IAC9B,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;QAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,MAAM,EAAE,SAAS;QACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,WAAW,EAAE,IAAI;QACjB,IAAI,EAAE,IAAI;KACX,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,EAAS,EACT,KAQC;IAED,MAAM,KAAK,GAAG,gBAAgB,CAAA;IAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IACtB,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;QAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,OAAO;QACf,SAAS,EAAE,GAAG;QACd,WAAW,EAAE,GAAG;KACjB,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,EAAS,EACT,MAAc,EACd,KAA0D;IAE1D,MAAM,KAAK,GAAG,gBAAgB,CAAA;IAC9B,MAAM,EAAE;SACL,MAAM,CAAC,KAAK,CAAC;SACb,GAAG,CAAC;QACH,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;QACvB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC;SACD,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,EAAS,EACT,MAAc;IAEd,MAAM,KAAK,GAAG,gBAAgB,CAAA;IAC9B,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,EAAE;SACR,IAAI,CAAC,KAAK,CAAC;SACX,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;SAC/B,KAAK,CAAC,CAAC,CAAC,CAAA;IACX,OAAQ,IAAI,CAAC,CAAC,CAA6B,IAAI,IAAI,CAAA;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,EAAS,EACT,MAAc;IAEd,MAAM,KAAK,GAAG,gBAAgB,CAAA;IAC9B,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;AACxD,CAAC;AAED,iFAAiF;AAEjF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,EAAS,EACT,WAAmB;IAEnB,MAAM,KAAK,GAAG,gBAAgB,CAAA;IAC9B,OAAO,EAAE;SACN,MAAM,EAAE;SACR,IAAI,CAAC,KAAK,CAAC;SACX,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,CAAA;AAC9E,CAAC;AAED,iFAAiF;AAEjF,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,EAAS,EACT,CAA2D;IAE3D,MAAM,KAAK,GAAG,gBAAgB,CAAA;IAC9B,MAAM,UAAU,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;IAC1E,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC5B,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAA;IAC/C,CAAC;IACD,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAC9B,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAA;IACnD,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,CAAC;QACN,KAAK,EAAE,GAAG,CAAQ,gBAAgB,KAAK,CAAC,IAAI,OAAO;KACpD,CAAC;SACD,IAAI,CAAC,KAAK,CAAC;SACX,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,CAAA;IAE5B,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAA;IAC/B,OAAO,MAAM,CAAC,GAAG,CAAC,CAAA;AACpB,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,WAAW,CAAC,KAAkC;IAC5D,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,IAAI,CAAA;IAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC/B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAClC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;IAC1B,MAAM,OAAO,GAAsC,EAAE,CAAA;IACrD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QACtB,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK,CAAA;IAC7C,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;AAChC,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,KAAK,CAAA;IACd,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,SAAQ;QACtC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;YACzE,SAAQ;QACV,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAmB;IAChD,IAAI,IAAI,IAAI,IAAI;QAAE,OAAO,IAAI,CAAA;IAC7B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC/B,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAA;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;QACxE,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,GAAgB,EAChB,cAAoC;IAEpC,IAAI,cAAc,IAAI,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvE,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,GAAG,CAAC,SAAS,IAAI,IAAI;QAAE,OAAO,KAAK,CAAA;IACvC,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAA;IAClD,OAAO,eAAe,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;AAChD,CAAC","sourcesContent":["/*\n * DEFERRED — logical/physical blob/file split\n *\n * The current model is 1:1 logical-file = physical-object: one row in\n * bunderstack_file_meta maps to exactly one object in storage. A future\n * blob/file split would introduce:\n *\n *   workerstackBlob { key, bucket, size, contentType, refcount, createdAt }\n *   workerstackFile { id, blobKey, ownerId, scopeJson, status, filename,\n *                     createdAt, confirmedAt, deletedAt }\n *\n * This would enable:\n *   - Soft/shadow delete (file.deletedAt + per-bucket retention policy)\n *   - Transfer ownership/scope (mutate file.ownerId / scopeJson, no byte movement)\n *   - Duplicate/share to many users or orgs by reference (refcount++) so sharing\n *     to N users stores bytes once; or by-copy via S3 CopyObject.\n *\n * Deletion would decrement refcount; bytes removed only at 0; orphan sweep also\n * reaps refcount=0 blobs (self-heals crash mid-decrement).\n *\n * Deferred because refcount correctness is a real cost vs. current need.\n *\n * Two forward-compat invariants keep this addable without breaking the public API:\n *   1. fileId is opaque — clients never parse it.\n *   2. All deletion goes through the storage delete helper, never inline.\n *\n * See docs/plans/2026-06-28-multi-bucket-storage-design.md §6 for full rationale.\n */\n\nimport { eq, and, lt, sql } from 'drizzle-orm'\n\nimport type { ScopeMap } from '../access'\nimport type { AnyDb } from '../dialect'\n\nimport { rowMatchesScope } from '../access'\nimport { workerstackFiles } from '../internal-tables'\n\nexport type FileMetaRow = typeof workerstackFiles.$inferSelect\n\n// ─── CRUD ─────────────────────────────────────────────────────────────────────\n\nexport async function insertPendingFile(\n  db: AnyDb,\n  input: {\n    fileId: string\n    bucket: string\n    ownerId: string | null\n    scopeJson: string | null\n    filename: string | null\n    contentType: string | null\n  },\n): Promise<void> {\n  const files = workerstackFiles\n  await db.insert(files).values({\n    fileId: input.fileId,\n    bucket: input.bucket,\n    ownerId: input.ownerId,\n    scopeJson: input.scopeJson,\n    filename: input.filename,\n    contentType: input.contentType,\n    status: 'pending',\n    createdAt: Date.now(),\n    confirmedAt: null,\n    size: null,\n  })\n}\n\nexport async function insertReadyFile(\n  db: AnyDb,\n  input: {\n    fileId: string\n    bucket: string\n    ownerId: string | null\n    scopeJson: string | null\n    filename: string | null\n    contentType: string | null\n    size: number | null\n  },\n): Promise<void> {\n  const files = workerstackFiles\n  const now = Date.now()\n  await db.insert(files).values({\n    fileId: input.fileId,\n    bucket: input.bucket,\n    ownerId: input.ownerId,\n    scopeJson: input.scopeJson,\n    filename: input.filename,\n    contentType: input.contentType,\n    size: input.size,\n    status: 'ready',\n    createdAt: now,\n    confirmedAt: now,\n  })\n}\n\nexport async function markFileReady(\n  db: AnyDb,\n  fileId: string,\n  patch: { size: number | null; contentType: string | null },\n): Promise<void> {\n  const files = workerstackFiles\n  await db\n    .update(files)\n    .set({\n      status: 'ready',\n      confirmedAt: Date.now(),\n      size: patch.size,\n      contentType: patch.contentType,\n    })\n    .where(eq(files.fileId, fileId))\n}\n\nexport async function getFileMeta(\n  db: AnyDb,\n  fileId: string,\n): Promise<FileMetaRow | null> {\n  const files = workerstackFiles\n  const rows = await db\n    .select()\n    .from(files)\n    .where(eq(files.fileId, fileId))\n    .limit(1)\n  return (rows[0] as FileMetaRow | undefined) ?? null\n}\n\nexport async function deleteFileMetaRow(\n  db: AnyDb,\n  fileId: string,\n): Promise<void> {\n  const files = workerstackFiles\n  await db.delete(files).where(eq(files.fileId, fileId))\n}\n\n// ─── Sweep ────────────────────────────────────────────────────────────────────\n\nexport async function listStalePendingFiles(\n  db: AnyDb,\n  olderThanMs: number,\n): Promise<FileMetaRow[]> {\n  const files = workerstackFiles\n  return db\n    .select()\n    .from(files)\n    .where(and(eq(files.status, 'pending'), lt(files.createdAt, olderThanMs)))\n}\n\n// ─── Quota ────────────────────────────────────────────────────────────────────\n\nexport async function sumReadySize(\n  db: AnyDb,\n  q: { bucket: string; ownerId?: string; scopeJson?: string },\n): Promise<number> {\n  const files = workerstackFiles\n  const conditions = [eq(files.status, 'ready'), eq(files.bucket, q.bucket)]\n  if (q.ownerId !== undefined) {\n    conditions.push(eq(files.ownerId, q.ownerId))\n  }\n  if (q.scopeJson !== undefined) {\n    conditions.push(eq(files.scopeJson, q.scopeJson))\n  }\n\n  const rows = await db\n    .select({\n      total: sql<number>`coalesce(sum(${files.size}), 0)`,\n    })\n    .from(files)\n    .where(and(...conditions))\n\n  const raw = rows[0]?.total ?? 0\n  return Number(raw)\n}\n\n// ─── Scope helpers ────────────────────────────────────────────────────────────\n\nexport function scopeToJson(scope: ScopeMap | undefined | null): string | null {\n  if (scope == null) return null\n  const keys = Object.keys(scope)\n  if (keys.length === 0) return null\n  const sorted = keys.sort()\n  const ordered: Record<string, string | string[]> = {}\n  for (const k of sorted) {\n    const value = scope[k]\n    if (value !== undefined) ordered[k] = value\n  }\n  return JSON.stringify(ordered)\n}\n\nfunction isScopeMap(value: unknown): value is ScopeMap {\n  if (value === null || typeof value !== 'object' || Array.isArray(value)) {\n    return false\n  }\n  for (const item of Object.values(value)) {\n    if (typeof item === 'string') continue\n    if (Array.isArray(item) && item.every((entry) => typeof entry === 'string'))\n      continue\n    return false\n  }\n  return true\n}\n\nexport function parseScopeJson(json: string | null): ScopeMap | null {\n  if (json == null) return null\n  try {\n    const parsed = JSON.parse(json)\n    return isScopeMap(parsed) ? parsed : null\n  } catch {\n    // Corrupt/legacy scope_json should not crash a read; treat as no scope.\n    return null\n  }\n}\n\nexport function fileMatchesScope(\n  row: FileMetaRow,\n  requesterScope: ScopeMap | undefined,\n): boolean {\n  if (requesterScope == null || Object.keys(requesterScope).length === 0) {\n    return true\n  }\n  if (row.scopeJson == null) return false\n  const parsed = parseScopeJson(row.scopeJson) ?? {}\n  return rowMatchesScope(parsed, requesterScope)\n}\n"]}

package/dist/storage/index.d.ts

@@ -0,0 +1,28 @@
+import { LocalStorageAdapter } from './local.js';
+import { S3StorageAdapter } from './s3.js';
+export type { LocalStorageAdapter, S3StorageAdapter };
+export { createStorageOperations } from './operations.js';
+export type { PrepareUploadResult, StorageDownload, StorageExecutionContext, StorageOperations, StorageOperationsOptions, } from './operations.js';
+export interface PresignPutOptions {
+    contentType?: string;
+    expiresIn: number;
+}
+export interface PresignGetOptions {
+    expiresIn: number;
+}
+export interface StorageAdapter {
+    upload(fileId: string, data: Blob | ArrayBuffer, contentType: string): Promise<void>;
+    get(fileId: string): Promise<Response>;
+    delete(fileId: string): Promise<void>;
+    exists(fileId: string): Promise<boolean>;
+    presignPut?(key: string, opts: PresignPutOptions): Promise<string>;
+    presignGet?(key: string, opts: PresignGetOptions): Promise<string>;
+    stat?(key: string): Promise<{
+        size: number;
+        contentType: string;
+    } | null>;
+    publicUrlFor?(key: string): string | undefined;
+    /** List full object keys under a prefix (used to reap transform derivatives). */
+    list?(prefix: string): Promise<string[]>;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/storage/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/storage/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAA;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,MAAM,CAAA;AAEvC,YAAY,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,CAAA;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAA;AACtD,YAAY,EACV,mBAAmB,EACnB,eAAe,EACf,uBAAuB,EACvB,iBAAiB,EACjB,wBAAwB,GACzB,MAAM,cAAc,CAAA;AAErB,MAAM,WAAW,iBAAiB;IAChC,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;CAClB;AACD,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,CACJ,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,IAAI,GAAG,WAAW,EACxB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC,CAAA;IAChB,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACtC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAExC,UAAU,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAClE,UAAU,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAClE,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAA;IACzE,YAAY,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;IAC9C,iFAAiF;IACjF,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;CACzC"}

package/dist/storage/index.js

@@ -0,0 +1,5 @@
+// src/storage/index.ts
+import { LocalStorageAdapter } from './local.js';
+import { S3StorageAdapter } from './s3.js';
+export { createStorageOperations } from './operations.js';
+//# sourceMappingURL=index.js.map

package/dist/storage/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/storage/index.ts"],"names":[],"mappings":"AAAA,uBAAuB;AACvB,OAAO,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAA;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,MAAM,CAAA;AAGvC,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAA","sourcesContent":["// src/storage/index.ts\nimport { LocalStorageAdapter } from './local'\nimport { S3StorageAdapter } from './s3'\n\nexport type { LocalStorageAdapter, S3StorageAdapter }\nexport { createStorageOperations } from './operations'\nexport type {\n  PrepareUploadResult,\n  StorageDownload,\n  StorageExecutionContext,\n  StorageOperations,\n  StorageOperationsOptions,\n} from './operations'\n\nexport interface PresignPutOptions {\n  contentType?: string\n  expiresIn: number\n}\nexport interface PresignGetOptions {\n  expiresIn: number\n}\n\nexport interface StorageAdapter {\n  upload(\n    fileId: string,\n    data: Blob | ArrayBuffer,\n    contentType: string,\n  ): Promise<void>\n  get(fileId: string): Promise<Response>\n  delete(fileId: string): Promise<void>\n  exists(fileId: string): Promise<boolean>\n  // Optional — present on S3, absent on local (router uses proxy path for local)\n  presignPut?(key: string, opts: PresignPutOptions): Promise<string>\n  presignGet?(key: string, opts: PresignGetOptions): Promise<string>\n  stat?(key: string): Promise<{ size: number; contentType: string } | null>\n  publicUrlFor?(key: string): string | undefined\n  /** List full object keys under a prefix (used to reap transform derivatives). */\n  list?(prefix: string): Promise<string[]>\n}\n"]}

package/dist/storage/local.d.ts

@@ -0,0 +1,15 @@
+export declare class LocalStorageAdapter {
+    private readonly basePath;
+    constructor(basePath: string);
+    private filePath;
+    upload(fileId: string, data: Blob | ArrayBuffer, contentType: string): Promise<void>;
+    get(fileId: string): Promise<Response>;
+    delete(fileId: string): Promise<void>;
+    exists(fileId: string): Promise<boolean>;
+    stat(key: string): Promise<{
+        size: number;
+        contentType: string;
+    } | null>;
+    list(prefix: string): Promise<string[]>;
+}
+//# sourceMappingURL=local.d.ts.map

package/dist/storage/local.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local.d.ts","sourceRoot":"","sources":["../../src/storage/local.ts"],"names":[],"mappings":"AAIA,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAQ;gBACrB,QAAQ,EAAE,MAAM;IAI5B,OAAO,CAAC,QAAQ;IAIV,MAAM,CACV,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,IAAI,GAAG,WAAW,EACxB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC;IASV,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAYtC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKrC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIxC,IAAI,CACR,GAAG,EAAE,MAAM,GACV,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAMlD,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;CAY9C"}

package/dist/storage/local.js

@@ -0,0 +1,56 @@
+// src/storage/local.ts
+import { mkdir, readdir } from 'node:fs/promises';
+import { join } from 'node:path';
+export class LocalStorageAdapter {
+    basePath;
+    constructor(basePath) {
+        this.basePath = basePath;
+    }
+    filePath(fileId) {
+        return join(this.basePath, fileId);
+    }
+    async upload(fileId, data, contentType) {
+        await mkdir(this.basePath, { recursive: true });
+        const bytes = data instanceof Blob ? await data.arrayBuffer() : data;
+        await Bun.write(Bun.file(this.filePath(fileId), { type: contentType }), bytes);
+    }
+    async get(fileId) {
+        const file = Bun.file(this.filePath(fileId));
+        if (!(await file.exists()))
+            return new Response('Not found', { status: 404 });
+        return new Response(file, {
+            headers: {
+                'Content-Type': file.type,
+                'Cache-Control': 'public, max-age=31536000',
+            },
+        });
+    }
+    async delete(fileId) {
+        const file = Bun.file(this.filePath(fileId));
+        if (await file.exists())
+            await file.unlink();
+    }
+    async exists(fileId) {
+        return Bun.file(this.filePath(fileId)).exists();
+    }
+    async stat(key) {
+        const file = Bun.file(this.filePath(key));
+        if (!(await file.exists()))
+            return null;
+        return { size: file.size, contentType: file.type };
+    }
+    async list(prefix) {
+        const cleanPrefix = prefix.replace(/\/$/, '');
+        const dir = join(this.basePath, cleanPrefix);
+        let entries;
+        try {
+            entries = await readdir(dir);
+        }
+        catch {
+            // Missing dir (or prefix isn't a directory) → no derivatives.
+            return [];
+        }
+        return entries.map((name) => `${cleanPrefix}/${name}`);
+    }
+}
+//# sourceMappingURL=local.js.map

package/dist/storage/local.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local.js","sourceRoot":"","sources":["../../src/storage/local.ts"],"names":[],"mappings":"AAAA,uBAAuB;AACvB,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,MAAM,OAAO,mBAAmB;IACb,QAAQ,CAAQ;IACjC,YAAY,QAAgB;QAC1B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;IAC1B,CAAC;IAEO,QAAQ,CAAC,MAAc;QAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IACpC,CAAC;IAED,KAAK,CAAC,MAAM,CACV,MAAc,EACd,IAAwB,EACxB,WAAmB;QAEnB,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC/C,MAAM,KAAK,GAAG,IAAI,YAAY,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;QACpE,MAAM,GAAG,CAAC,KAAK,CACb,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EACtD,KAAK,CACN,CAAA;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,MAAc;QACtB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;QAC5C,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;YACxB,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;QACnD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;YACxB,OAAO,EAAE;gBACP,cAAc,EAAE,IAAI,CAAC,IAAI;gBACzB,eAAe,EAAE,0BAA0B;aAC5C;SACF,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAc;QACzB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;QAC5C,IAAI,MAAM,IAAI,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,CAAC,MAAM,EAAE,CAAA;IAC9C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAc;QACzB,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAA;IACjD,CAAC;IAED,KAAK,CAAC,IAAI,CACR,GAAW;QAEX,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAA;QACzC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;YAAE,OAAO,IAAI,CAAA;QACvC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,CAAA;IACpD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAc;QACvB,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;QAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAA;QAC5C,IAAI,OAAiB,CAAA;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAA;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,8DAA8D;YAC9D,OAAO,EAAE,CAAA;QACX,CAAC;QACD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,WAAW,IAAI,IAAI,EAAE,CAAC,CAAA;IACxD,CAAC;CACF","sourcesContent":["// src/storage/local.ts\nimport { mkdir, readdir } from 'node:fs/promises'\nimport { join } from 'node:path'\n\nexport class LocalStorageAdapter {\n  private readonly basePath: string\n  constructor(basePath: string) {\n    this.basePath = basePath\n  }\n\n  private filePath(fileId: string) {\n    return join(this.basePath, fileId)\n  }\n\n  async upload(\n    fileId: string,\n    data: Blob | ArrayBuffer,\n    contentType: string,\n  ): Promise<void> {\n    await mkdir(this.basePath, { recursive: true })\n    const bytes = data instanceof Blob ? await data.arrayBuffer() : data\n    await Bun.write(\n      Bun.file(this.filePath(fileId), { type: contentType }),\n      bytes,\n    )\n  }\n\n  async get(fileId: string): Promise<Response> {\n    const file = Bun.file(this.filePath(fileId))\n    if (!(await file.exists()))\n      return new Response('Not found', { status: 404 })\n    return new Response(file, {\n      headers: {\n        'Content-Type': file.type,\n        'Cache-Control': 'public, max-age=31536000',\n      },\n    })\n  }\n\n  async delete(fileId: string): Promise<void> {\n    const file = Bun.file(this.filePath(fileId))\n    if (await file.exists()) await file.unlink()\n  }\n\n  async exists(fileId: string): Promise<boolean> {\n    return Bun.file(this.filePath(fileId)).exists()\n  }\n\n  async stat(\n    key: string,\n  ): Promise<{ size: number; contentType: string } | null> {\n    const file = Bun.file(this.filePath(key))\n    if (!(await file.exists())) return null\n    return { size: file.size, contentType: file.type }\n  }\n\n  async list(prefix: string): Promise<string[]> {\n    const cleanPrefix = prefix.replace(/\\/$/, '')\n    const dir = join(this.basePath, cleanPrefix)\n    let entries: string[]\n    try {\n      entries = await readdir(dir)\n    } catch {\n      // Missing dir (or prefix isn't a directory) → no derivatives.\n      return []\n    }\n    return entries.map((name) => `${cleanPrefix}/${name}`)\n  }\n}\n"]}