@basaltkit/files 1.0.1 → 1.1.0

package/dist/files.d.ts

@@ -1,6 +1,8 @@
 import { BasaltError, type DurationInput, type HookBus } from '@basaltkit/core';
 import type { Disk } from '@basaltkit/storage';
 import { type FileRecord, type FileStore } from './store.js';
+/** Default upload cap (25 MiB) applied when `validate.maxSize` is not set. */
+export declare const DEFAULT_MAX_FILE_SIZE: number;
 export declare class FileTooLargeError extends BasaltError {
     readonly status = 413;
     constructor(size: number, max: number);
@@ -68,7 +70,15 @@ export declare class Files {
         record: FileRecord;
         content: Buffer;
     }>;
-    temporaryUrl(id: string, expiresIn: DurationInput, tenantId?: string): Promise<string>;
+    /**
+     * Signed download URL — served `Content-Disposition: attachment` by default
+     * so an uploaded HTML/SVG file can never render top-level on the storage
+     * origin; pass `{ disposition: 'inline' }` when in-browser rendering is
+     * deliberate (embedded <img>/<video> uses render regardless).
+     */
+    temporaryUrl(id: string, expiresIn: DurationInput, tenantId?: string, options?: {
+        disposition?: 'attachment' | 'inline';
+    }): Promise<string>;
     delete(id: string, tenantId?: string): Promise<void>;
     /** Records the result of an out-of-band scan (antivirus, moderation, …). */
     markScanned(id: string, result: {

package/dist/files.js

@@ -1,6 +1,8 @@
 import { createHash, randomUUID } from 'node:crypto';
 import { BasaltError, runWithContext, tryCtx } from '@basaltkit/core';
 import { MemoryFileStore } from './store.js';
+/** Default upload cap (25 MiB) applied when `validate.maxSize` is not set. */
+export const DEFAULT_MAX_FILE_SIZE = 25 * 1024 * 1024;
 export class FileTooLargeError extends BasaltError {
     status = 413;
     constructor(size, max) {
@@ -52,7 +54,9 @@ export class Files {
         this.disk = options.disk;
         this.store = options.store ?? new MemoryFileStore();
         this.hooks = options.hooks;
-        this.validation = options.validate ?? {};
+        // Secure by default (review 2026-08-b, S-3): uploads are capped even when
+        // the app configures nothing. Raise (or set Infinity) via validate.maxSize.
+        this.validation = { maxSize: DEFAULT_MAX_FILE_SIZE, ...options.validate };
         this.maxTotalBytes = options.maxTotalBytes;
         this.checkQuota = options.checkQuota;
         this.now = options.now ?? Date.now;
@@ -96,12 +100,18 @@ export class Files {
         const content = await this.inTenant(resolved, () => this.disk.get(record.path));
         return { record, content };
     }
-    async temporaryUrl(id, expiresIn, tenantId) {
+    /**
+     * Signed download URL — served `Content-Disposition: attachment` by default
+     * so an uploaded HTML/SVG file can never render top-level on the storage
+     * origin; pass `{ disposition: 'inline' }` when in-browser rendering is
+     * deliberate (embedded <img>/<video> uses render regardless).
+     */
+    async temporaryUrl(id, expiresIn, tenantId, options = {}) {
         const resolved = this.tenant(tenantId);
         const record = await this.store.find(resolved, id);
         if (!record)
             throw new FileNotFoundError();
-        return this.inTenant(resolved, () => this.disk.temporaryUrl(record.path, expiresIn));
+        return this.inTenant(resolved, () => this.disk.temporaryUrl(record.path, expiresIn, options));
     }
     async delete(id, tenantId) {
         const resolved = this.tenant(tenantId);

package/dist/index.d.ts

@@ -1,3 +1,3 @@
-export { Files, FileTooLargeError, FileTypeNotAllowedError, StorageQuotaExceededError, FileNotFoundError, FileTenantRequiredError, type FilesOptions, type FileValidation, type UploadInput, } from './files.js';
+export { Files, DEFAULT_MAX_FILE_SIZE, FileTooLargeError, FileTypeNotAllowedError, StorageQuotaExceededError, FileNotFoundError, FileTenantRequiredError, type FilesOptions, type FileValidation, type UploadInput, } from './files.js';
 export { MemoryFileStore, type FileRecord, type FileStore, type FilePatch, } from './store.js';
 export { filesPlugin, fileRoutes, FILES, type FilesPluginOptions } from './plugin.js';

package/dist/index.js

@@ -1,3 +1,3 @@
-export { Files, FileTooLargeError, FileTypeNotAllowedError, StorageQuotaExceededError, FileNotFoundError, FileTenantRequiredError, } from './files.js';
+export { Files, DEFAULT_MAX_FILE_SIZE, FileTooLargeError, FileTypeNotAllowedError, StorageQuotaExceededError, FileNotFoundError, FileTenantRequiredError, } from './files.js';
 export { MemoryFileStore, } from './store.js';
 export { filesPlugin, fileRoutes, FILES } from './plugin.js';

package/dist/plugin.d.ts

@@ -1,5 +1,5 @@
 import { type Disk } from '@basaltkit/storage';
-import { type BasaltRoute } from '@basaltkit/fastify';
+import { type BasaltRoute } from '@basaltkit/http';
 import { Files, type FileValidation, type FilesOptions } from './files.js';
 import type { FileRecord, FileStore } from './store.js';
 declare module '@basaltkit/core' {

package/dist/plugin.js

@@ -1,6 +1,6 @@
 import { createToken, ctx, definePlugin } from '@basaltkit/core';
 import { STORAGE } from '@basaltkit/storage';
-import { route } from '@basaltkit/fastify';
+import { route } from '@basaltkit/http';
 import { z } from 'zod';
 import { Files } from './files.js';
 export const FILES = createToken('files');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@basaltkit/files",
-  "version": "1.0.1",
+  "version": "1.1.0",
   "description": "File uploads for Basalt: validation (type/size), per-tenant storage quota, metadata records, signed URLs, and hooks (antivirus/thumbnails) over @basaltkit/storage.",
   "license": "MIT",
   "type": "module",
@@ -14,9 +14,9 @@
     "dist"
   ],
   "dependencies": {
-    "@basaltkit/core": "^1.1.2",
-    "@basaltkit/storage": "^1.2.1",
-    "@basaltkit/fastify": "^1.6.1"
+    "@basaltkit/core": "^1.3.0",
+    "@basaltkit/http": "^1.10.0",
+    "@basaltkit/storage": "^1.3.0"
   },
   "peerDependencies": {
     "zod": "^3.24.0 || ^4.0.0"
@@ -26,6 +26,7 @@
     "typescript": "^7.0.2",
     "vitest": "^4.1.11",
     "zod": "^3.24.0 || ^4.0.0",
+    "@basaltkit/fastify": "^1.7.0",
     "@basaltkit/tsconfig": "^0.24.0"
   },
   "publishConfig": {