morphosx 0.4.0__tar.gz

morphosx-0.4.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Davide Di Criscito
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

morphosx-0.4.0/PKG-INFO

@@ -0,0 +1,188 @@
+Metadata-Version: 2.3
+Name: morphosx
+Version: 0.4.0
+Summary: high-performance media processing engine for on-the-fly image transformations and storage.
+License: MIT
+Keywords: media,image-processing,cdn,fastapi,bim,ifc,3d,on-the-fly
+Author: Davide Di Criscito
+Requires-Python: >=3.11,<3.15
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Topic :: Multimedia :: Graphics :: Graphics Conversion
+Provides-Extra: 3d
+Provides-Extra: bim
+Provides-Extra: full
+Provides-Extra: modern
+Provides-Extra: office
+Provides-Extra: pdf
+Provides-Extra: raw
+Provides-Extra: video
+Provides-Extra: vips
+Requires-Dist: aioboto3 (>=15.5.0,<16.0.0)
+Requires-Dist: aiofiles (>=25.1.0,<26.0.0)
+Requires-Dist: fastapi (>=0.132.0,<0.133.0)
+Requires-Dist: ffmpeg-python (>=0.2.0,<0.3.0) ; extra == "video"
+Requires-Dist: ffmpeg-python ; extra == "full"
+Requires-Dist: ifcopenshell (>=0.8.4.post1,<0.9.0) ; extra == "bim"
+Requires-Dist: ifcopenshell ; extra == "full"
+Requires-Dist: imageio (>=2.37.2,<3.0.0) ; extra == "raw"
+Requires-Dist: imageio ; extra == "full"
+Requires-Dist: markdown (>=3.10.2,<4.0.0)
+Requires-Dist: numpy (<2.0.0) ; extra == "raw"
+Requires-Dist: numpy ; extra == "full"
+Requires-Dist: openpyxl (>=3.1.5,<4.0.0) ; extra == "office"
+Requires-Dist: openpyxl ; extra == "full"
+Requires-Dist: passlib[bcrypt] (>=1.7.4,<2.0.0)
+Requires-Dist: pillow (>=12.1.1,<13.0.0)
+Requires-Dist: pillow-avif-plugin (>=1.5.5,<2.0.0) ; extra == "modern"
+Requires-Dist: pillow-avif-plugin ; extra == "full"
+Requires-Dist: pillow-heif (>=1.2.1,<2.0.0) ; extra == "modern"
+Requires-Dist: pillow-heif ; extra == "full"
+Requires-Dist: pydantic-settings (>=2.13.1,<3.0.0)
+Requires-Dist: pygltflib (>=1.16.5,<2.0.0) ; extra == "3d"
+Requires-Dist: pygltflib ; extra == "full"
+Requires-Dist: pygments (>=2.19.2,<3.0.0)
+Requires-Dist: pymupdf (>=1.27.1,<2.0.0) ; extra == "pdf"
+Requires-Dist: pymupdf ; extra == "full"
+Requires-Dist: python-docx (>=1.2.0,<2.0.0) ; extra == "office"
+Requires-Dist: python-docx ; extra == "full"
+Requires-Dist: python-jose[cryptography] (>=3.5.0,<4.0.0)
+Requires-Dist: python-multipart (>=0.0.22,<0.0.23)
+Requires-Dist: python-pptx (>=1.0.2,<2.0.0) ; extra == "office"
+Requires-Dist: python-pptx ; extra == "full"
+Requires-Dist: pyvips (>=3.1.1,<4.0.0) ; extra == "vips"
+Requires-Dist: pyvips ; extra == "full"
+Requires-Dist: rawpy (>=0.26.1,<0.27.0) ; extra == "raw"
+Requires-Dist: rawpy ; extra == "full"
+Requires-Dist: trimesh (>=4.11.2,<5.0.0) ; extra == "3d"
+Requires-Dist: trimesh ; extra == "full"
+Requires-Dist: uvicorn (>=0.41.0,<0.42.0)
+Description-Content-Type: text/markdown
+
+<p align="center">
+  <img src="morphosx-banner.png" alt="morphosx banner" width="600px">
+</p>
+
+# morphosx 🧬
+
+> **High performance, low footprint.**  
+> Self-hosted, open-source media engine for on-the-fly image processing and delivery.
+
+`morphosx` is a high-speed, minimal cloud storage and media manipulation server. It converts almost any media type into a optimized, web-ready image derivative on-the-fly.
+
+---
+
+## ⚡ Core Features
+
+- **User-Bound Security**: Protected assets and HMAC signatures tied to specific **JWT-authenticated** users.
+- **Private Folders**: Secure per-user storage using the `users/{user_id}/` path convention.
+- **Universal Rendering**: Support for BIM (IFC), 3D (STL/OBJ/GLB), Office, Font Specimen, Archives, Video, Audio and RAW.
+- **Modern Engines**: Choice between **Pillow** and **PyVips** (ultra-fast).
+- **Cloud Ready**: Pluggable storage system (Local & **Amazon S3**).
+
+---
+
+## 🚀 Installation & Deployment
+
+### 1. Using Docker (Recommended)
+
+The easiest way to run Morphosx with all features and system dependencies pre-installed.
+
+```bash
+docker run -p 8000:8000 --env-file .env ghcr.io/dcdavidev/morphosx:latest
+```
+
+### 2. Using pip (from PyPI)
+
+You can install Morphosx as a library or a standalone CLI tool.
+
+```bash
+# Core installation (standard images only)
+pip install morphosx
+
+# Full installation (all media types support)
+pip install "morphosx[full]"
+
+# Selective installation
+pip install "morphosx[video,pdf,3d]"
+```
+
+**Note**: Some extras require system libraries (e.g., `ffmpeg` for video, `libvips` for vips engine).
+
+---
+
+## 📖 Usage Guide
+
+### Start the Server
+
+If installed via pip, you can use the global command:
+
+```bash
+morphosx start --port 8000 --reload
+```
+
+### 1. Uploading Assets
+
+**Public Upload**
+
+```bash
+curl -X POST "http://localhost:8000/v1/assets/upload?folder=news" -F "file=@img.jpg"
+```
+
+**Private Upload**
+
+```bash
+curl -X POST "http://localhost:8000/v1/assets/upload?private=true" \
+     -H "Authorization: Bearer <TOKEN>" -F "file=@secret.pdf"
+```
+
+### 2. Listing Files
+
+```text
+GET /v1/assets/list/originals/news
+```
+
+---
+
+## ✨ Smart Presets
+
+Use predefined aliases in `settings.py` for cleaner URLs:
+
+- `preset=thumb`: 150x150 WebP.
+- `preset=hero`: 1920px WebP.
+- `preset=social`: 1200x630 JPEG.
+
+---
+
+## 🛡️ Advanced Security
+
+Morphosx uses **HMAC-SHA256** to prevent DoS attacks.
+The signature payload includes: `asset_id | width | height | format | quality | preset | user_id`.
+
+---
+
+## 🧪 Supported Media Table
+
+| Category       | Extra      | Extensions          | Output Type            |
+| :------------- | :--------- | :------------------ | :--------------------- |
+| **BIM**        | `[bim]`    | ifc                 | Technical Project Card |
+| **3D**         | `[3d]`     | stl, obj, glb, gltf | Technical Blueprint    |
+| **Images**     | Core       | jpg, png, webp      | Processed Image        |
+| **Modern Img** | `[modern]` | heic, avif          | Processed Image        |
+| **RAW**        | `[raw]`    | cr2, nef, dng, arw  | Developed Image        |
+| **Video**      | `[video]`  | mp4, mov, webm, avi | Frame @ timestamp      |
+| **Audio**      | `[video]`  | mp3, wav, ogg, flac | Waveform Image         |
+| **Docs**       | `[pdf]`    | pdf                 | Page Render            |
+| **Office**     | `[office]` | docx, pptx, xlsx    | Summary Card           |
+| **Text**       | Core       | json, xml, md, txt  | Syntax-highlighted     |
+| **Typography** | Core       | ttf, otf            | Font Specimen          |
+| **Archives**   | Core       | zip, tar            | Content List           |
+
+---
+
+## 📜 License
+
+MIT - Built for the Open Source community.
+

morphosx-0.4.0/README.md

@@ -0,0 +1,124 @@
+<p align="center">
+  <img src="morphosx-banner.png" alt="morphosx banner" width="600px">
+</p>
+
+# morphosx 🧬
+
+> **High performance, low footprint.**  
+> Self-hosted, open-source media engine for on-the-fly image processing and delivery.
+
+`morphosx` is a high-speed, minimal cloud storage and media manipulation server. It converts almost any media type into a optimized, web-ready image derivative on-the-fly.
+
+---
+
+## ⚡ Core Features
+
+- **User-Bound Security**: Protected assets and HMAC signatures tied to specific **JWT-authenticated** users.
+- **Private Folders**: Secure per-user storage using the `users/{user_id}/` path convention.
+- **Universal Rendering**: Support for BIM (IFC), 3D (STL/OBJ/GLB), Office, Font Specimen, Archives, Video, Audio and RAW.
+- **Modern Engines**: Choice between **Pillow** and **PyVips** (ultra-fast).
+- **Cloud Ready**: Pluggable storage system (Local & **Amazon S3**).
+
+---
+
+## 🚀 Installation & Deployment
+
+### 1. Using Docker (Recommended)
+
+The easiest way to run Morphosx with all features and system dependencies pre-installed.
+
+```bash
+docker run -p 8000:8000 --env-file .env ghcr.io/dcdavidev/morphosx:latest
+```
+
+### 2. Using pip (from PyPI)
+
+You can install Morphosx as a library or a standalone CLI tool.
+
+```bash
+# Core installation (standard images only)
+pip install morphosx
+
+# Full installation (all media types support)
+pip install "morphosx[full]"
+
+# Selective installation
+pip install "morphosx[video,pdf,3d]"
+```
+
+**Note**: Some extras require system libraries (e.g., `ffmpeg` for video, `libvips` for vips engine).
+
+---
+
+## 📖 Usage Guide
+
+### Start the Server
+
+If installed via pip, you can use the global command:
+
+```bash
+morphosx start --port 8000 --reload
+```
+
+### 1. Uploading Assets
+
+**Public Upload**
+
+```bash
+curl -X POST "http://localhost:8000/v1/assets/upload?folder=news" -F "file=@img.jpg"
+```
+
+**Private Upload**
+
+```bash
+curl -X POST "http://localhost:8000/v1/assets/upload?private=true" \
+     -H "Authorization: Bearer <TOKEN>" -F "file=@secret.pdf"
+```
+
+### 2. Listing Files
+
+```text
+GET /v1/assets/list/originals/news
+```
+
+---
+
+## ✨ Smart Presets
+
+Use predefined aliases in `settings.py` for cleaner URLs:
+
+- `preset=thumb`: 150x150 WebP.
+- `preset=hero`: 1920px WebP.
+- `preset=social`: 1200x630 JPEG.
+
+---
+
+## 🛡️ Advanced Security
+
+Morphosx uses **HMAC-SHA256** to prevent DoS attacks.
+The signature payload includes: `asset_id | width | height | format | quality | preset | user_id`.
+
+---
+
+## 🧪 Supported Media Table
+
+| Category       | Extra      | Extensions          | Output Type            |
+| :------------- | :--------- | :------------------ | :--------------------- |
+| **BIM**        | `[bim]`    | ifc                 | Technical Project Card |
+| **3D**         | `[3d]`     | stl, obj, glb, gltf | Technical Blueprint    |
+| **Images**     | Core       | jpg, png, webp      | Processed Image        |
+| **Modern Img** | `[modern]` | heic, avif          | Processed Image        |
+| **RAW**        | `[raw]`    | cr2, nef, dng, arw  | Developed Image        |
+| **Video**      | `[video]`  | mp4, mov, webm, avi | Frame @ timestamp      |
+| **Audio**      | `[video]`  | mp3, wav, ogg, flac | Waveform Image         |
+| **Docs**       | `[pdf]`    | pdf                 | Page Render            |
+| **Office**     | `[office]` | docx, pptx, xlsx    | Summary Card           |
+| **Text**       | Core       | json, xml, md, txt  | Syntax-highlighted     |
+| **Typography** | Core       | ttf, otf            | Font Specimen          |
+| **Archives**   | Core       | zip, tar            | Content List           |
+
+---
+
+## 📜 License
+
+MIT - Built for the Open Source community.

morphosx-0.4.0/morphosx/app/api/assets.py

@@ -0,0 +1,346 @@
+from pathlib import Path
+import uuid
+from mimetypes import guess_extension
+from typing import Optional
+from fastapi import APIRouter, Depends, HTTPException, Query, Response, UploadFile, File
+
+from morphosx.app.core.security import verify_signature, generate_signature
+from morphosx.app.core.auth import get_current_user
+from morphosx.app.engine.processor import ImageProcessor, ProcessingOptions, ImageFormat
+from morphosx.app.engine.video import VideoProcessor
+from morphosx.app.engine.audio import AudioProcessor
+from morphosx.app.engine.document import DocumentProcessor
+from morphosx.app.engine.raw import RawProcessor
+from morphosx.app.engine.vips import VipsProcessor
+from morphosx.app.engine.text import TextProcessor
+from morphosx.app.engine.office import OfficeProcessor
+from morphosx.app.engine.font import FontProcessor
+from morphosx.app.engine.model3d import Model3DProcessor
+from morphosx.app.engine.archive import ArchiveProcessor
+from morphosx.app.engine.bim import BIMProcessor
+from morphosx.app.storage.local import LocalStorage
+from morphosx.app.storage.s3 import S3Storage
+from morphosx.app.settings import settings
+
+
+router = APIRouter(prefix="/assets", tags=["Assets"])
+
+# Singleton instances factory
+def get_storage():
+    if settings.storage_type == "s3":
+        if not settings.s3_bucket:
+            raise ValueError("S3_BUCKET is required for s3 storage_type")
+        return S3Storage(
+            bucket_name=settings.s3_bucket,
+            region_name=settings.s3_region,
+            endpoint_url=settings.s3_endpoint,
+            access_key_id=settings.s3_access_key,
+            secret_access_key=settings.s3_secret_key
+        )
+    return LocalStorage(base_directory=settings.storage_root)
+
+def get_processor():
+    if settings.engine_type == "vips":
+        return VipsProcessor()
+    return ImageProcessor()
+
+storage = get_storage()
+processor = get_processor()
+video_processor = VideoProcessor()
+audio_processor = AudioProcessor()
+document_processor = DocumentProcessor()
+raw_processor = RawProcessor()
+text_processor = TextProcessor()
+office_processor = OfficeProcessor()
+font_processor = FontProcessor()
+model3d_processor = Model3DProcessor()
+archive_processor = ArchiveProcessor()
+bim_processor = BIMProcessor()
+
+VIDEO_EXTENSIONS = {".mp4", ".webm", ".mov", ".avi"}
+AUDIO_EXTENSIONS = {".mp3", ".wav", ".ogg", ".flac"}
+DOCUMENT_EXTENSIONS = {".pdf"}
+RAW_EXTENSIONS = {".cr2", ".nef", ".dng", ".arw"}
+TEXT_EXTENSIONS = {".json", ".xml", ".md"}
+OFFICE_EXTENSIONS = {".docx", ".pptx", ".xlsx"}
+FONT_EXTENSIONS = {".ttf", ".otf"}
+MODEL3D_EXTENSIONS = {".stl", ".obj", ".glb", ".gltf"}
+ARCHIVE_EXTENSIONS = {".zip", ".tar", ".gz"}
+BIM_EXTENSIONS = {".ifc"}
+
+
+
+@router.post("/upload")
+async def upload_asset(
+    file: UploadFile = File(...),
+    private: bool = Query(False),
+    folder: Optional[str] = Query(None),
+    current_user: Optional[str] = Depends(get_current_user)
+):
+    """
+    Upload a new asset.
+    - If 'private=True' and user is logged in: saved to 'users/{user_id}/{folder}/'
+    - Otherwise: saved to 'originals/{folder}/'
+    """
+    asset_uuid = str(uuid.uuid4())
+    ext = guess_extension(file.content_type) or ".bin"
+    
+    # Determine base prefix
+    if private:
+        if not current_user:
+            raise HTTPException(status_code=401, detail="Authentication required for private uploads")
+        base_prefix = f"users/{current_user}"
+    else:
+        base_prefix = "originals"
+    
+    # Sanitize and add custom folder if provided
+    path_parts = [base_prefix]
+    if folder:
+        sanitized_folder = folder.strip("/")
+        if sanitized_folder:
+            path_parts.append(sanitized_folder)
+            
+    asset_id = f"{'/'.join(path_parts)}/{asset_uuid}{ext}"
+
+    try:
+        content = await file.read()
+        saved_id = await storage.save_asset(asset_id, content)
+        
+        # Clean ID for the response (for private assets we keep the user prefix)
+        clean_id = saved_id if private else Path(saved_id).name
+        
+        # Determine if it's a video to suggest thumbnail params
+        is_video = ext.lower() in VIDEO_EXTENSIONS
+        
+        # Generate a sample signed URL
+        sample_fmt = ImageFormat.WEBP
+        sample_q = settings.default_quality
+        sig = generate_signature(
+            asset_id=clean_id, 
+            width=None, 
+            height=None, 
+            format=sample_fmt.value.lower(), 
+            quality=sample_q, 
+            secret_key=settings.secret_key,
+            user_id=current_user if private else None
+        )
+        
+        url = f"{settings.api_prefix}/assets/{clean_id}?s={sig}"
+        if is_video:
+            url += "&t=1"
+
+        return {
+            "asset_id": clean_id,
+            "url": url,
+            "is_private": private,
+            "owner": current_user if private else "public",
+            "mime_type": file.content_type,
+            "size": len(content)
+        }
+    except Exception as e:
+        raise HTTPException(status_code=500, detail=f"Upload failed: {str(e)}")
+
+
+@router.get("/{asset_id:path}")
+async def get_processed_asset(
+    asset_id: str,
+    w: Optional[int] = Query(None, alias="width", ge=1, le=settings.max_image_dimension),
+    h: Optional[int] = Query(None, alias="height", ge=1, le=settings.max_image_dimension),
+    fmt: Optional[ImageFormat] = Query(None, alias="format"),
+    q: Optional[int] = Query(None, alias="quality", ge=1, le=100),
+    preset: Optional[str] = Query(None, alias="preset"),
+    t: float = Query(0.0, alias="time", ge=0.0),
+    p: int = Query(1, alias="page", ge=1),
+    s: str = Query(..., alias="signature", description="HMAC-SHA256 signature"),
+    current_user: Optional[str] = Depends(get_current_user),
+):
+    """
+    Retrieve and process an asset.
+    Supports Smart Presets and User-bound protected assets.
+    """
+    # 0. Apply Preset Logic
+    target_w = w
+    target_h = h
+    target_fmt = fmt
+    target_q = q if q else settings.default_quality
+
+    if preset:
+        if preset not in settings.presets:
+            raise HTTPException(status_code=400, detail=f"Invalid preset: {preset}")
+        
+        config = settings.presets[preset]
+        # Preset values act as defaults, explicit query params override them
+        target_w = w if w else config.get("width")
+        target_h = h if h else config.get("height")
+        target_fmt = fmt if fmt else ImageFormat(config.get("format").upper())
+        target_q = q if q else config.get("quality", settings.default_quality)
+
+    # 1. Signature Verification (SECURITY FIRST)
+    # We enforce that if an asset is in the "users/" directory, it MUST have a matching current_user
+    is_private = asset_id.startswith("users/")
+    if is_private:
+        # Extract owner ID from path: "users/{user_id}/file.jpg"
+        parts = asset_id.split("/")
+        if len(parts) < 3:
+             raise HTTPException(status_code=400, detail="Invalid private asset path")
+        
+        owner_id = parts[1]
+        if current_user != owner_id:
+             raise HTTPException(status_code=403, detail="Not authorized to access this private asset")
+
+    is_valid = verify_signature(
+        asset_id=asset_id,
+        width=w, 
+        height=h,
+        format=fmt.value.lower() if fmt else "",
+        quality=q if q else 0,
+        signature_to_verify=s,
+        secret_key=settings.secret_key,
+        preset=preset,
+        user_id=current_user
+    )
+    
+    if not is_valid:
+        raise HTTPException(status_code=403, detail="Invalid signature")
+
+    options = ProcessingOptions(
+        width=target_w,
+        height=target_h,
+        format=fmt_val,
+        quality=target_q
+    )
+    
+    # 2. Define Cache Paths (Include timestamp or page for media derivatives)
+    cache_key = options.get_cache_key()
+    is_video = Path(asset_id).suffix.lower() in VIDEO_EXTENSIONS
+    is_document = Path(asset_id).suffix.lower() in DOCUMENT_EXTENSIONS
+    
+    if is_video:
+        cache_key = f"t{t}_{cache_key}"
+    elif is_document:
+        cache_key = f"p{p}_{cache_key}"
+
+    derivative_id = f"cache/{asset_id}/{cache_key}"
+
+    try:
+        # 3. Cache Check (HIT)
+        try:
+            derivative_bytes = await storage.get_asset(derivative_id)
+            return Response(
+                content=derivative_bytes,
+                media_type=f"image/{options.format.value.lower()}",
+                headers={
+                    "Cache-Control": "public, max-age=31536000, immutable",
+                    "X-MorphosX-Cache": "HIT"
+                }
+            )
+        except FileNotFoundError:
+            # 4. Cache Miss (MISS)
+            pass
+
+        # 5. Fetch Original (Always from originals/ folder)
+        original_id = f"originals/{asset_id}"
+        source_bytes = await storage.get_asset(original_id)
+        
+        # 6. Transform Pipeline
+        is_audio = Path(asset_id).suffix.lower() in AUDIO_EXTENSIONS
+        is_raw = Path(asset_id).suffix.lower() in RAW_EXTENSIONS
+        is_text = Path(asset_id).suffix.lower() in TEXT_EXTENSIONS
+        is_office = Path(asset_id).suffix.lower() in OFFICE_EXTENSIONS
+        is_font = Path(asset_id).suffix.lower() in FONT_EXTENSIONS
+        is_model3d = Path(asset_id).suffix.lower() in MODEL3D_EXTENSIONS
+        is_archive = Path(asset_id).suffix.lower() in ARCHIVE_EXTENSIONS
+        is_bim = Path(asset_id).suffix.lower() in BIM_EXTENSIONS
+
+        if is_video:
+            # Video: Extract Frame -> Process as Image
+            frame_bytes = video_processor.extract_thumbnail(source_bytes, t)
+            processed_data, mime_type = processor.process(frame_bytes, options)
+        elif is_audio:
+            # Audio: Generate Waveform -> Process as Image
+            waveform_bytes = audio_processor.generate_waveform(source_bytes, w or 800, h or 200)
+            processed_data, mime_type = processor.process(waveform_bytes, options)
+        elif is_document:
+            # Document: Extract Page -> Process as Image
+            # We extract at 150 DPI to ensure crisp text before potential downscaling
+            page_bytes = document_processor.extract_page_as_image(source_bytes, p, dpi=150)
+            processed_data, mime_type = processor.process(page_bytes, options)
+        elif is_raw:
+            # RAW: Extract Preview -> Process as Image
+            preview_bytes = raw_processor.extract_preview(source_bytes)
+            processed_data, mime_type = processor.process(preview_bytes, options)
+        elif is_text:
+            # Text: Render to Image -> Process as Image
+            rendered_bytes = text_processor.render_to_image(source_bytes, asset_id, options)
+            processed_data, mime_type = processor.process(rendered_bytes, options)
+        elif is_office:
+            # Office: Generate Summary Card -> Process as Image
+            office_card_bytes = office_processor.render_thumbnail(source_bytes, asset_id)
+            processed_data, mime_type = processor.process(office_card_bytes, options)
+        elif is_font:
+            # Font: Render Specimen -> Process as Image
+            specimen_bytes = font_processor.render_specimen(source_bytes, {})
+            processed_data, mime_type = processor.process(specimen_bytes, options)
+        elif is_model3d:
+            # 3D: Generate Blueprint -> Process as Image
+            model_bytes = model3d_processor.render_thumbnail(source_bytes, asset_id)
+            processed_data, mime_type = processor.process(model_bytes, options)
+        elif is_archive:
+            # Archive: Generate Content List -> Process as Image
+            archive_bytes = archive_processor.render_thumbnail(source_bytes, asset_id)
+            processed_data, mime_type = processor.process(archive_bytes, options)
+        elif is_bim:
+            # BIM: Generate Building Data Card -> Process as Image
+            bim_bytes = bim_processor.render_summary(source_bytes, asset_id)
+            processed_data, mime_type = processor.process(bim_bytes, options)
+        else:
+            # Image: Process directly
+            processed_data, mime_type = processor.process(source_bytes, options)
+        
+        # 7. Store derivative for future requests
+        await storage.save_asset(derivative_id, processed_data)
+        
+        return Response(
+            content=processed_data,
+            media_type=mime_type,
+            headers={
+                "Cache-Control": "public, max-age=31536000, immutable",
+                "X-MorphosX-Cache": "MISS"
+            }
+        )
+        
+    except FileNotFoundError:
+        raise HTTPException(status_code=404, detail="Asset not found")
+            except Exception as e:
+            raise HTTPException(status_code=500, detail=f"Processing error: {str(e)}")
+    
+    
+    @router.get("/list/{path:path}")
+    async def list_assets(
+        path: str = "",
+        current_user: Optional[str] = Depends(get_current_user)
+    ):
+        """
+        List files and folders in a given path.
+        """
+        # Security: If path starts with users/, verify ownership
+        if path.startswith("users/"):
+            parts = path.split("/")
+            if len(parts) >= 2:
+                owner_id = parts[1]
+                if current_user != owner_id:
+                    raise HTTPException(status_code=403, detail="Not authorized to browse this folder")
+        
+        # If path is empty, default to listing 'originals/' (public root)
+        if not path:
+            path = "originals"
+    
+        try:
+            items = await storage.list_assets(path)
+            return {
+                "path": path,
+                "items": items
+            }
+        except Exception as e:
+            raise HTTPException(status_code=500, detail=f"Listing failed: {str(e)}")
+