r2store.rb 0.1.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: b97625de127487dcfefd8fafeda4cc9ef4d25baaabceab605f125a32b0a6a238
+  data.tar.gz: d675b5461d2be041dbddab00cecda1fca934ca705569ba2e67747084aa5d1459
+SHA512:
+  metadata.gz: 0a23dca220a9883a0c4477716bfb1a399a90ab362574ce0f44851533c416ee299ab92ad9e5c1937257bf885dab5f4a250cd28008e4b0d5f7ccd74bdf31bd3088
+  data.tar.gz: f08d8a2c80e20bcec42bdca9504389cffd325be1e75ca1899e97a36632f78d25a50a1175cea43b6715fc6f43abee2026aea9a0d9b8ddd9462e8fb32dd4c0f266

data/lib/r2store/configuration.rb

@@ -0,0 +1,10 @@
+module R2Store
+  class Configuration
+    attr_accessor :endpoint, :access_key_id, :secret_access_key,
+                  :bucket, :region, :webhook_secret
+
+    def initialize
+      @region = "auto"
+    end
+  end
+end

data/lib/r2store/errors.rb

@@ -0,0 +1,6 @@
+module R2Store
+  class Error < StandardError; end
+  class PathTraversalError < Error; end
+  class WebhookVerificationError < Error; end
+  class ManifestError < Error; end
+end

data/lib/r2store/manifest.rb

@@ -0,0 +1,61 @@
+module R2Store
+  module Manifest
+    REQUIRED_KEYS = %w[title description price currency files previews].freeze
+    OPTIONAL_KEYS = %w[tags draft].freeze
+    ALLOWED_KEYS = (REQUIRED_KEYS + OPTIONAL_KEYS).freeze
+    VALID_CURRENCIES = %w[USDC EURC].freeze
+
+    class << self
+      def parse(yaml_string)
+        validate!(yaml_string)
+      end
+
+      def validate!(yaml_string)
+        data = YAML.safe_load(yaml_string)
+        raise ManifestError, "manifest must be a YAML mapping" unless data.is_a?(Hash)
+
+        unknown = data.keys - ALLOWED_KEYS
+        unless unknown.empty?
+          raise ManifestError, "unknown keys: #{unknown.join(', ')}"
+        end
+
+        REQUIRED_KEYS.each do |key|
+          raise ManifestError, "missing required field: #{key}" unless data.key?(key)
+        end
+
+        raise ManifestError, "title must be a string" unless data["title"].is_a?(String)
+        raise ManifestError, "description must be a string" unless data["description"].is_a?(String)
+
+        unless data["price"].is_a?(Numeric) && data["price"] > 0
+          raise ManifestError, "price must be a positive number"
+        end
+
+        unless VALID_CURRENCIES.include?(data["currency"])
+          raise ManifestError, "currency must be one of: #{VALID_CURRENCIES.join(', ')}"
+        end
+
+        raise ManifestError, "files must be an array" unless data["files"].is_a?(Array)
+        raise ManifestError, "previews must be an array" unless data["previews"].is_a?(Array)
+
+        if data.key?("tags") && !data["tags"].is_a?(Array)
+          raise ManifestError, "tags must be an array"
+        end
+
+        if data.key?("draft") && ![true, false].include?(data["draft"])
+          raise ManifestError, "draft must be a boolean"
+        end
+
+        Product.new(
+          title: data["title"],
+          description: data["description"],
+          price: data["price"],
+          currency: data["currency"],
+          files: data["files"],
+          previews: data["previews"],
+          tags: data["tags"] || [],
+          draft: data.fetch("draft", false)
+        )
+      end
+    end
+  end
+end

data/lib/r2store/product.rb

@@ -0,0 +1,12 @@
+module R2Store
+  Product = Struct.new(:title, :description, :price, :currency,
+                       :files, :previews, :tags, :draft, keyword_init: true) do
+    def initialize(**)
+      super
+      self.files    ||= []
+      self.previews ||= []
+      self.tags     ||= []
+      self.draft      = false if self.draft.nil?
+    end
+  end
+end

data/lib/r2store/storage.rb

@@ -0,0 +1,100 @@
+module R2Store
+  module Storage
+    class << self
+      def presigned_put(seller:, path:, content_type:, max_size:, expires_in: 3600)
+        key = scoped_key(seller, path)
+        presigner.presigned_url(:put_object,
+          bucket: config.bucket,
+          key: key,
+          content_type: content_type,
+          content_length: max_size,
+          expires_in: expires_in
+        )
+      end
+
+      def presigned_get(seller:, path:, expires_in: 3600)
+        key = scoped_key(seller, path)
+        presigner.presigned_url(:get_object,
+          bucket: config.bucket,
+          key: key,
+          expires_in: expires_in
+        )
+      end
+
+      def head(seller:, path:)
+        key = scoped_key(seller, path)
+        resp = client.head_object(bucket: config.bucket, key: key)
+        {
+          size: resp.content_length,
+          etag: resp.etag,
+          content_type: resp.content_type
+        }
+      rescue Aws::S3::Errors::NotFound
+        nil
+      end
+
+      def fetch(seller:, path:)
+        key = scoped_key(seller, path)
+        resp = client.get_object(bucket: config.bucket, key: key)
+        resp.body.read
+      end
+
+      def delete(seller:, path:)
+        key = scoped_key(seller, path)
+        client.delete_object(bucket: config.bucket, key: key)
+      end
+
+      def list(seller:, prefix: nil)
+        full_prefix = "sellers/#{seller}/"
+        full_prefix += prefix if prefix
+        validate_path!(full_prefix)
+
+        resp = client.list_objects_v2(bucket: config.bucket, prefix: full_prefix)
+        resp.contents.map do |obj|
+          { key: obj.key, size: obj.size, etag: obj.etag }
+        end
+      end
+
+      private
+
+      def scoped_key(seller, path)
+        validate_path!(path)
+        "sellers/#{seller}/#{path}"
+      end
+
+      def validate_path!(path)
+        raise PathTraversalError, "path traversal not allowed" if path.include?("..")
+      end
+
+      def config
+        R2Store.configuration
+      end
+
+      def client
+        @client = nil if @client_config != client_config_hash
+        @client_config = client_config_hash
+        @client ||= Aws::S3::Client.new(s3_client_options)
+      end
+
+      def presigner
+        @presigner = nil if @presigner_config != client_config_hash
+        @presigner_config = client_config_hash
+        @presigner ||= Aws::S3::Presigner.new(client: client)
+      end
+
+      def client_config_hash
+        [config.endpoint, config.access_key_id, config.secret_access_key, config.region]
+      end
+
+      def s3_client_options
+        {
+          endpoint: config.endpoint,
+          access_key_id: config.access_key_id,
+          secret_access_key: config.secret_access_key,
+          region: config.region,
+          force_path_style: true
+        }
+      end
+    end
+  end
+end

data/lib/r2store/webhook.rb

@@ -0,0 +1,105 @@
+module R2Store
+  module Webhook
+    Event = Struct.new(:type, :key, :size, :etag, :bucket, keyword_init: true) do
+      def seller
+        parts = key.split("/")
+        return parts[1] if parts[0] == "sellers" && parts.length >= 3
+      end
+
+      def path
+        parts = key.split("/")
+        return parts[2..].join("/") if parts[0] == "sellers" && parts.length >= 3
+      end
+
+      def product_manifest?
+        path&.end_with?("product.yml") || false
+      end
+
+      def preview?
+        p = path
+        return false unless p
+
+        # Files under a previews/ subfolder with image extensions
+        if p.match?(%r{(?:^|/)previews/.+\.(?:png|jpg|jpeg|gif|webp|svg)\z}i)
+          return true
+        end
+
+        # Files named preview.* with image extensions
+        if p.match?(%r{(?:^|/)preview\.(?:png|jpg|jpeg|gif|webp|svg)\z}i)
+          return true
+        end
+
+        false
+      end
+    end
+
+    EVENT_TYPE_MAP = {
+      "s3:ObjectCreated:*" => :object_created,
+      "s3:ObjectCreated:Put" => :object_created,
+      "s3:ObjectCreated:CompleteMultipartUpload" => :object_created,
+      "s3:ObjectRemoved:*" => :object_deleted,
+      "s3:ObjectRemoved:Delete" => :object_deleted
+    }.freeze
+
+    class << self
+      def process(request, secret: nil)
+        signing_secret = secret || R2Store.configuration.webhook_secret
+        body = read_body(request)
+        signature = extract_signature(request)
+
+        verify_signature!(body, signature, signing_secret)
+
+        payload = JSON.parse(body)
+        event = build_event(payload)
+        yield event if block_given?
+        event
+      end
+
+      private
+
+      def read_body(request)
+        if request.respond_to?(:body)
+          b = request.body
+          b.rewind if b.respond_to?(:rewind)
+          b.read
+        else
+          request.to_s
+        end
+      end
+
+      def extract_signature(request)
+        if request.respond_to?(:get_header)
+          request.get_header("HTTP_X_WEBHOOK_SIGNATURE")
+        elsif request.respond_to?(:[])
+          request["HTTP_X_WEBHOOK_SIGNATURE"] || request["X-Webhook-Signature"]
+        end
+      end
+
+      def verify_signature!(body, signature, secret)
+        raise WebhookVerificationError, "missing signature" unless signature
+        raise WebhookVerificationError, "missing webhook secret" unless secret
+
+        expected = OpenSSL::HMAC.hexdigest("SHA256", secret, body)
+        unless Rack::Utils.secure_compare(expected, signature)
+          raise WebhookVerificationError, "signature mismatch"
+        end
+      end
+
+      def build_event(payload)
+        record = payload.is_a?(Hash) && payload["Records"] ? payload["Records"][0] : payload
+        event_name = record.dig("eventName") || record.dig("event_name")
+        s3_data = record["s3"] || {}
+        object_data = s3_data["object"] || record.fetch("object", {})
+        bucket_data = s3_data["bucket"] || record.fetch("bucket", {})
+
+        Event.new(
+          type: EVENT_TYPE_MAP.fetch(event_name, event_name&.to_sym),
+          key: object_data["key"],
+          size: object_data["size"],
+          etag: object_data["eTag"] || object_data["etag"],
+          bucket: bucket_data["name"] || bucket_data.to_s
+        )
+      end
+    end
+  end
+end

data/lib/r2store.rb

@@ -0,0 +1,28 @@
+require "aws-sdk-s3"
+require "json"
+require "yaml"
+require "openssl"
+require "rack"
+
+require_relative "r2store/errors"
+require_relative "r2store/configuration"
+require_relative "r2store/product"
+require_relative "r2store/storage"
+require_relative "r2store/webhook"
+require_relative "r2store/manifest"
+
+module R2Store
+  class << self
+    def configuration
+      @configuration ||= Configuration.new
+    end
+
+    def configure
+      yield(configuration)
+    end
+
+    def reset_configuration!
+      @configuration = Configuration.new
+    end
+  end
+end

metadata

@@ -0,0 +1,101 @@
+--- !ruby/object:Gem::Specification
+name: r2store.rb
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: ruby
+authors:
+- Filippo
+bindir: bin
+cert_chain: []
+date: 1980-01-02 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: aws-sdk-s3
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
+- !ruby/object:Gem::Dependency
+  name: rack
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '2.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '2.0'
+- !ruby/object:Gem::Dependency
+  name: rexml
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+description: Manages presigned uploads/downloads, webhook processing, and product
+  manifest parsing for Cloudflare R2.
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/r2store.rb
+- lib/r2store/configuration.rb
+- lib/r2store/errors.rb
+- lib/r2store/manifest.rb
+- lib/r2store/product.rb
+- lib/r2store/storage.rb
+- lib/r2store/webhook.rb
+licenses:
+- MIT
+metadata: {}
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '3.1'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 4.0.8
+specification_version: 4
+summary: Digital product storage on Cloudflare R2
+test_files: []