@autonomys/file-server 1.6.0 → 1.6.2

package/dist/http/headers.d.ts

@@ -1,6 +1,6 @@
 import { Request, Response } from 'express';
 import { ByteRange, DownloadMetadata, DownloadOptions } from '../models.js';
-export declare const handleDownloadResponseHeaders: (req: Request, res: Response, metadata: DownloadMetadata, options: DownloadOptions) => void;
+export declare const handleDownloadResponseHeaders: (req: Request, res: Response, metadata: DownloadMetadata, { byteRange, rawMode }: DownloadOptions) => void;
 export declare const handleS3DownloadResponseHeaders: (req: Request, res: Response, metadata: DownloadMetadata) => void;
 export declare const getByteRange: (req: Request) => ByteRange | undefined;
 //# sourceMappingURL=headers.d.ts.map

package/dist/http/headers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"headers.d.ts","sourceRoot":"","sources":["../../src/http/headers.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAC3C,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAS3E,eAAO,MAAM,6BAA6B,GACxC,KAAK,OAAO,EACZ,KAAK,QAAQ,EACb,UAAU,gBAAgB,EAC1B,SAAS,eAAe,SAsBzB,CAAA;AA+CD,eAAO,MAAM,+BAA+B,GAC1C,KAAK,OAAO,EACZ,KAAK,QAAQ,EACb,UAAU,gBAAgB,SAS3B,CAAA;AAED,eAAO,MAAM,YAAY,GAAI,KAAK,OAAO,KAAG,SAAS,GAAG,SAgBvD,CAAA"}
+{"version":3,"file":"headers.d.ts","sourceRoot":"","sources":["../../src/http/headers.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAC3C,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AA8C3E,eAAO,MAAM,6BAA6B,GACxC,KAAK,OAAO,EACZ,KAAK,QAAQ,EACb,UAAU,gBAAgB,EAC1B,wBAA4C,eAAe,SAoC5D,CAAA;AAED,eAAO,MAAM,+BAA+B,GAC1C,KAAK,OAAO,EACZ,KAAK,QAAQ,EACb,UAAU,gBAAgB,SAS3B,CAAA;AAED,eAAO,MAAM,YAAY,GAAI,KAAK,OAAO,KAAG,SAAS,GAAG,SAgBvD,CAAA"}

package/dist/http/headers.js

@@ -1,45 +1,73 @@
 import { CompressionAlgorithm, EncryptionAlgorithm } from '@autonomys/auto-dag-data';
-const isExpectedDocument = (req) => {
-    return (req.headers['sec-fetch-site'] === 'none' ||
-        (req.headers['sec-fetch-site'] === 'same-site' && req.headers['sec-fetch-mode'] === 'navigate'));
+// Check if this is actually a document navigation (based on headers only)
+// Used to determine if browser will auto-decompress Content-Encoding
+const isDocumentNavigation = (req) => {
+    const destHeader = req.headers['sec-fetch-dest'];
+    const dest = (Array.isArray(destHeader) ? destHeader[0] : (destHeader !== null && destHeader !== void 0 ? destHeader : '')).toLowerCase();
+    if (dest && dest !== 'document')
+        return false; // e.g. <img>, fetch(), etc.
+    const modeHeader = req.headers['sec-fetch-mode'];
+    const mode = (Array.isArray(modeHeader) ? modeHeader[0] : (modeHeader !== null && modeHeader !== void 0 ? modeHeader : '')).toLowerCase();
+    if (mode && mode !== 'navigate')
+        return false; // programmatic fetch
+    return true;
 };
-export const handleDownloadResponseHeaders = (req, res, metadata, options) => {
-    const safeName = encodeURIComponent(metadata.name || 'download');
-    const documentExpected = isExpectedDocument(req);
-    const shouldHandleEncoding = req.query.ignoreEncoding
-        ? req.query.ignoreEncoding !== 'true'
-        : documentExpected;
-    const isEncrypted = metadata.isEncrypted;
-    if (metadata.type === 'file') {
-        setFileResponseHeaders(res, metadata, isEncrypted, documentExpected, shouldHandleEncoding, safeName, options);
-    }
-    else {
-        setFolderResponseHeaders(res, isEncrypted, documentExpected, safeName);
-    }
+const isInlineDocument = (req) => {
+    // Check explicit query parameters - treat presence as boolean flag
+    // ?download or ?download=true triggers attachment, ?download=false is ignored
+    if (req.query.download === 'true' || req.query.download === '')
+        return false;
+    // ?inline or ?inline=true triggers inline, ?inline=false is ignored
+    if (req.query.inline === 'true' || req.query.inline === '')
+        return true;
+    // Fall back to header-based detection
+    return isDocumentNavigation(req);
+};
+// Helper to create an ASCII-safe fallback for filename parameter (RFC 2183/6266)
+const toAsciiFallback = (name) => name
+    .replace(/[^\x20-\x7E]+/g, '_') // replace non-ASCII with underscore
+    .replace(/["\\]/g, '\\$&'); // escape quotes and backslashes
+// RFC 5987 encoding for filename* parameter
+const rfc5987Encode = (str) => encodeURIComponent(str)
+    .replace(/['()]/g, (c) => '%' + c.charCodeAt(0).toString(16).toUpperCase())
+    .replace(/\*/g, '%2A');
+const buildDisposition = (req, filename) => {
+    const fallbackName = toAsciiFallback(filename || 'download');
+    const encoded = rfc5987Encode(filename || 'download');
+    const type = isInlineDocument(req) ? 'inline' : 'attachment';
+    return `${type}; filename="${fallbackName}"; filename*=UTF-8''${encoded}`;
 };
-const setFileResponseHeaders = (res, metadata, isEncrypted, isExpectedDocument, shouldHandleEncoding, safeName, { byteRange = undefined, rawMode = false }) => {
+export const handleDownloadResponseHeaders = (req, res, metadata, { byteRange = undefined, rawMode = false }) => {
     var _a;
-    const contentType = (!isEncrypted && !rawMode && metadata.mimeType) || 'application/octet-stream';
-    res.set('Content-Type', contentType);
-    res.set('Content-Disposition', `${isExpectedDocument ? 'inline' : 'attachment'}; filename="${safeName}"`);
-    const compressedButNoEncrypted = metadata.isCompressed && !isEncrypted;
-    if (compressedButNoEncrypted && shouldHandleEncoding && !rawMode && !byteRange) {
-        res.set('Content-Encoding', 'deflate');
-    }
-    if (byteRange) {
-        res.status(206);
-        res.set('Content-Range', `bytes ${byteRange[0]}-${byteRange[1]}/${metadata.size}`);
-        const upperBound = (_a = byteRange[1]) !== null && _a !== void 0 ? _a : Number(metadata.size) - 1;
-        res.set('Content-Length', (upperBound - byteRange[0] + 1).toString());
+    const baseName = metadata.name || 'download';
+    const fileName = metadata.type === 'file' ? baseName : `${baseName}.zip`;
+    if (metadata.type === 'file') {
+        const contentType = (!metadata.isEncrypted && !rawMode && metadata.mimeType) || 'application/octet-stream';
+        res.set('Content-Type', contentType);
+        const compressedButNoEncrypted = metadata.isCompressed && !metadata.isEncrypted;
+        // Only set Content-Encoding for document navigations where browsers auto-decompress
+        // Don't set it for <img>, fetch(), etc. as browsers won't auto-decompress those
+        const shouldHandleEncoding = req.query.ignoreEncoding
+            ? req.query.ignoreEncoding !== 'true'
+            : isDocumentNavigation(req);
+        if (compressedButNoEncrypted && shouldHandleEncoding && !rawMode && !byteRange) {
+            res.set('Content-Encoding', 'deflate');
+        }
+        if (byteRange) {
+            res.status(206);
+            res.set('Content-Range', `bytes ${byteRange[0]}-${byteRange[1]}/${metadata.size}`);
+            const upperBound = (_a = byteRange[1]) !== null && _a !== void 0 ? _a : Number(metadata.size) - 1;
+            res.set('Content-Length', (upperBound - byteRange[0] + 1).toString());
+        }
+        else if (metadata.size) {
+            res.set('Content-Length', metadata.size.toString());
+        }
     }
-    else if (metadata.size) {
-        res.set('Content-Length', metadata.size.toString());
+    else {
+        const contentType = metadata.isEncrypted ? 'application/octet-stream' : 'application/zip';
+        res.set('Content-Type', contentType);
     }
-};
-const setFolderResponseHeaders = (res, isEncrypted, isExpectedDocument, safeName) => {
-    const contentType = isEncrypted ? 'application/octet-stream' : 'application/zip';
-    res.set('Content-Type', contentType);
-    res.set('Content-Disposition', `${isExpectedDocument ? 'inline' : 'attachment'}; filename="${safeName}.zip"`);
+    res.set('Content-Disposition', buildDisposition(req, fileName));
 };
 export const handleS3DownloadResponseHeaders = (req, res, metadata) => {
     if (metadata.isEncrypted) {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@autonomys/file-server",
   "packageManager": "yarn@4.7.0",
-  "version": "1.6.0",
+  "version": "1.6.2",
   "license": "MIT",
   "type": "module",
   "repository": {
@@ -19,7 +19,8 @@
     "node": ">=20.8.0"
   },
   "scripts": {
-    "build": "yarn tsc"
+    "build": "yarn tsc",
+    "test": "node --experimental-vm-modules ../../../node_modules/jest/bin/jest.js --config ./jest.config.cjs"
   },
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -47,9 +48,9 @@
     "typescript": "^5.8.3"
   },
   "dependencies": {
-    "@autonomys/asynchronous": "^1.6.0",
-    "@autonomys/auto-dag-data": "^1.6.0",
-    "@autonomys/auto-utils": "^1.6.0",
+    "@autonomys/asynchronous": "^1.6.2",
+    "@autonomys/auto-dag-data": "^1.6.2",
+    "@autonomys/auto-utils": "^1.6.2",
     "@keyvhq/sqlite": "^2.1.7",
     "cache-manager": "^6.4.2",
     "express": "^4.19.2",
@@ -61,5 +62,5 @@
     "uuid": "^11.1.0",
     "zod": "^3.24.2"
   },
-  "gitHead": "a0a448db8d1a26006c4123ad9a0e53a8c9293255"
+  "gitHead": "910aff6c92f736b87f7986780d667035b9c72217"
 }