@better-s3/server 3.1045.1 → 3.1046.0

package/dist/adapters/next.js

@@ -1,3 +1,669 @@
-import {createPresignedPost}from'@aws-sdk/s3-presigned-post';import {getSignedUrl}from'@aws-sdk/s3-request-presigner';import {PutObjectCommand,HeadObjectCommand,GetObjectCommand,DeleteObjectCommand,CreateMultipartUploadCommand,UploadPartCommand,ListPartsCommand,CompleteMultipartUploadCommand,AbortMultipartUploadCommand,GetObjectAclCommand}from'@aws-sdk/client-s3';async function b(e){try{let n=await e.json();return n&&typeof n=="object"?n:null}catch{return null}}function m(e,n){let t=typeof e=="string"?e.trim():"";return t||Response.json({message:`${n} is required`},{status:400})}function R(e){let n=Number(e);return Number.isFinite(n)&&n>0?Math.floor(n):600}function p(e){return async n=>{try{return await e(n)}catch(t){let r=t.code,s=r==="EAI_AGAIN"||r==="ECONNREFUSED"||r==="ECONNRESET"||r==="ETIMEDOUT"||r==="ENOTFOUND"?`S3 endpoint unreachable (${r}): check your endpoint URL and network connectivity`:t instanceof Error?t.message:"Internal server error";return console.error("[S3 API]",s),Response.json({message:s},{status:502})}}}async function d(e,n){if(!e)return null;try{return await e(n),null}catch(t){let r=t instanceof Error?t.message:"Forbidden",a=typeof t?.status=="number"?t.status:403;return Response.json({message:r},{status:a})}}function g(e){let n=e.replace(/[^\x20-\x7E]/g,"_").replace(/["\\]/g,"_"),t=encodeURIComponent(e);return `attachment; filename="${n}"; filename*=UTF-8''${t}`}function P(e,n,t,r){if(r!=="public-read"||!e)return;let a=e(n);if(a)return `${a.replace(/\/$/,"")}/${t}`}function T(e){if(!e)return;let n=e.match(/filename\*=UTF-8''([^;\s]+)/i);if(n)try{return decodeURIComponent(n[1])}catch{}return e.match(/filename="([^"]*)"/i)?.[1]}function M(e){return p(async n=>{let t=await b(n);if(!t)return Response.json({message:"Invalid JSON payload"},{status:400});let r=m(t.key,"key");if(r instanceof Response)return r;let a=t.bucket?.trim()||e.defaultBucket,s=R(t.expiresIn),o=t.acl==="public-read"?"public-read":"private",i=t.contentType?.trim()||"application/octet-stream",u=typeof t.fileSize=="number"&&t.fileSize>0?Math.floor(t.fileSize):null,c=await d(e.upload?.presignGuard,{request:n,key:r,bucket:a,contentType:t.contentType,fileSize:u??void 0,metadata:t.metadata,acl:o});if(c)return c;let l=e.upload?.method??"post";if(l==="put"&&e.upload?.requireFileSize&&u===null)return Response.json({message:"fileSize is required when upload.requireFileSize is enabled"},{status:400});if(l==="put"){let w={"Content-Type":i};t.fileName&&(w["Content-Disposition"]=g(t.fileName));let S=await getSignedUrl(e.s3,new PutObjectCommand({Bucket:a,Key:r,ContentType:i,ACL:o,...t.fileName?{ContentDisposition:g(t.fileName)}:{},...u!==null?{ContentLength:u}:{}}),{expiresIn:s,...u!==null?{signableHeaders:new Set(["content-length"])}:{}});return await e.upload?.onPresigned?.({request:n,key:r,bucket:a,contentType:t.contentType,metadata:t.metadata,acl:o,url:S,expiresIn:s}),Response.json({bucket:a,key:r,url:S,headers:w,expiresIn:s,method:"put"})}let C={acl:o,"Content-Type":i};if(t.fileName&&(C["Content-Disposition"]=g(t.fileName)),t.metadata)for(let[w,S]of Object.entries(t.metadata))C[`x-amz-meta-${w}`]=S;let y=u??1,H=u??void 0,{url:h,fields:j}=await createPresignedPost(e.s3,{Bucket:a,Key:r,Conditions:H!==void 0?[["content-length-range",y,H]]:[["content-length-range",y,Number.MAX_SAFE_INTEGER]],Fields:C,Expires:s});return await e.upload?.onPresigned?.({request:n,key:r,bucket:a,contentType:t.contentType,metadata:t.metadata,acl:o,url:h,expiresIn:s}),Response.json({bucket:a,key:r,url:h,fields:j,expiresIn:s,method:"post"})})}async function N(e,n,t){try{return (await e.send(new GetObjectAclCommand({Bucket:n,Key:t}))).Grants?.some(s=>s.Grantee?.URI==="http://acs.amazonaws.com/groups/global/AllUsers"&&(s.Permission==="READ"||s.Permission==="FULL_CONTROL"))?"public-read":"private"}catch{return "private"}}function v(e){return p(async n=>{let t=await b(n);if(!t)return Response.json({message:"Invalid JSON payload"},{status:400});let r=m(t.key,"key");if(r instanceof Response)return r;let a=t.bucket?.trim()||e.defaultBucket,s=await d(e.upload?.confirmGuard,{request:n,key:r,bucket:a});if(s)return s;let o=await e.s3.send(new HeadObjectCommand({Bucket:a,Key:r})),i=await N(e.s3,a,r),u=P(e.resolvePublicUrl,a,r,i),c=T(o.ContentDisposition),l={request:n,key:r,bucket:a,contentType:o.ContentType,contentLength:o.ContentLength??0,eTag:o.ETag?.replace(/"/g,""),metadata:o.Metadata,acl:i,fileName:c,publicUrl:u,versionId:o.VersionId,lastModified:o.LastModified?.toISOString()};return await e.upload?.onUploadConfirmed?.(l),Response.json({key:r,bucket:a,contentType:l.contentType,contentLength:l.contentLength,eTag:l.eTag,metadata:l.metadata??{},acl:i,fileName:c,publicUrl:u,versionId:l.versionId,lastModified:l.lastModified})})}function B(e){return p(async n=>{let{searchParams:t}=new URL(n.url),r=t.get("key")?.trim();if(!r)return Response.json({message:"key query parameter is required"},{status:400});let a=t.get("bucket")?.trim()||e.defaultBucket,s=R(t.get("expiresIn")),o=t.get("fileName")?.trim(),i=await d(e.download?.presignGuard,{request:n,key:r,bucket:a,fileName:o||void 0});if(i)return i;try{await e.s3.send(new HeadObjectCommand({Bucket:a,Key:r}));}catch(c){let l=c?.name;if(l==="NoSuchKey"||l==="NotFound")return Response.json({message:"Object not found"},{status:404});throw c}let u=await getSignedUrl(e.s3,new GetObjectCommand({Bucket:a,Key:r,ResponseContentDisposition:o?g(o):"attachment"}),{expiresIn:s});return await e.download?.onPresigned?.({request:n,key:r,bucket:a,fileName:o||void 0,url:u,expiresIn:s}),Response.json({bucket:a,key:r,url:u,expiresIn:s})})}function z(e){return p(async n=>{let{searchParams:t}=new URL(n.url),r=t.get("key")?.trim();if(!r)return Response.json({message:"key query parameter is required"},{status:400});let a=t.get("bucket")?.trim()||e.defaultBucket,s=await d(e.delete?.deleteGuard,{request:n,key:r,bucket:a});if(s)return s;try{await e.s3.send(new HeadObjectCommand({Bucket:a,Key:r}));}catch{return Response.json({message:"Object not found"},{status:404})}return await e.s3.send(new DeleteObjectCommand({Bucket:a,Key:r})),await e.delete?.onDeleted?.({request:n,key:r,bucket:a}),Response.json({success:!0,bucket:a,key:r})})}function A(e){return p(async n=>{let t=await b(n);if(!t)return Response.json({message:"Invalid JSON payload"},{status:400});let r=m(t.key,"key");if(r instanceof Response)return r;let a=t.bucket?.trim()||e.defaultBucket,s=t.acl==="public-read"?"public-read":"private",o=typeof t.fileSize=="number"&&t.fileSize>0?Math.floor(t.fileSize):void 0;if(e.multipart?.requireFileSize&&o===void 0)return Response.json({message:"fileSize is required when multipart.requireFileSize is enabled"},{status:400});let i=await d(e.multipart?.initGuard,{request:n,key:r,bucket:a,fileSize:o});if(i)return i;let{UploadId:u}=await e.s3.send(new CreateMultipartUploadCommand({Bucket:a,Key:r,ContentType:t.contentType,ContentDisposition:t.fileName?g(t.fileName):void 0,Metadata:t.metadata,ACL:s}));return await e.multipart?.onInit?.({request:n,key:r,bucket:a,uploadId:u,contentType:t.contentType,fileSize:o,metadata:t.metadata,acl:s}),Response.json({bucket:a,key:r,uploadId:u},{status:201})})}function L(e){return p(async n=>{let t=await b(n);if(!t)return Response.json({message:"Invalid JSON payload"},{status:400});let r=m(t.key,"key");if(r instanceof Response)return r;let a=m(t.uploadId,"uploadId");if(a instanceof Response)return a;let s=Number(t.partNumber);if(!Number.isInteger(s)||s<=0)return Response.json({message:"partNumber must be a positive integer"},{status:400});let o=t.bucket?.trim()||e.defaultBucket,i=R(t.expiresIn),u=typeof t.partSize=="number"&&t.partSize>0?Math.floor(t.partSize):null,c=await d(e.multipart?.partGuard,{request:n,key:r,bucket:o});if(c)return c;let l=await getSignedUrl(e.s3,new UploadPartCommand({Bucket:o,Key:r,UploadId:a,PartNumber:s,...u!==null?{ContentLength:u}:{}}),{expiresIn:i,...u!==null?{signableHeaders:new Set(["content-length"])}:{}});return Response.json({presignedUrl:l,partNumber:s,uploadId:a,bucket:o,expiresIn:i,...u!==null?{partSize:u}:{}})})}function F(e){return p(async n=>{let t=await b(n);if(!t)return Response.json({message:"Invalid JSON payload"},{status:400});let r=m(t.key,"key");if(r instanceof Response)return r;let a=m(t.uploadId,"uploadId");if(a instanceof Response)return a;let s=(Array.isArray(t.parts)?t.parts:[]).map(({partNumber:f})=>Number(f)).filter(f=>Number.isInteger(f)&&f>0).sort((f,I)=>f-I);if(!s.length)return Response.json({message:"At least one valid part is required"},{status:400});let o=t.bucket?.trim()||e.defaultBucket,i=await d(e.multipart?.completeGuard,{request:n,key:r,bucket:o});if(i)return i;let c=(await e.s3.send(new ListPartsCommand({Bucket:o,Key:r,UploadId:a}))).Parts??[],l=s.map(f=>{let I=c.find(q=>q.PartNumber===f);return {PartNumber:f,ETag:I?.ETag??""}}),C=await e.s3.send(new CompleteMultipartUploadCommand({Bucket:o,Key:r,UploadId:a,MultipartUpload:{Parts:l}})),y=await e.s3.send(new HeadObjectCommand({Bucket:o,Key:r}));for(let f=0;f<4&&!y.ContentLength;f++)await new Promise(I=>setTimeout(I,250*2**f)),y=await e.s3.send(new HeadObjectCommand({Bucket:o,Key:r}));let H=y.ContentLength??0,h=y.ContentType,j=(y.ETag??C.ETag??"").replace(/"/g,""),w=y.Metadata??{},S=y.VersionId,E=y.LastModified?.toISOString(),x=await N(e.s3,o,r),U=P(e.resolvePublicUrl,o,r,x),O=T(y.ContentDisposition);return await e.multipart?.onComplete?.({request:n,key:r,bucket:o,uploadId:a,contentLength:H,contentType:h,eTag:j,metadata:w,acl:x,fileName:O,publicUrl:U,versionId:S,lastModified:E}),Response.json({bucket:o,key:r,uploadId:a,contentLength:H,contentType:h,eTag:j,metadata:w,acl:x,fileName:O,publicUrl:U,versionId:S,lastModified:E})})}function K(e){return p(async n=>{let t=await b(n);if(!t)return Response.json({message:"Invalid JSON payload"},{status:400});let r=m(t.key,"key");if(r instanceof Response)return r;let a=m(t.uploadId,"uploadId");if(a instanceof Response)return a;let s=t.bucket?.trim()||e.defaultBucket,o=await d(e.multipart?.abortGuard,{request:n,key:r,bucket:s});return o||(await e.s3.send(new AbortMultipartUploadCommand({Bucket:s,Key:r,UploadId:a})),await e.multipart?.onAbort?.({request:n,key:r,bucket:s,uploadId:a}),Response.json({bucket:s,key:r,uploadId:a,aborted:!0}))})}function G(e){return {presign:{upload:M(e),confirm:v(e),download:B(e)},multipart:{init:A(e),part:L(e),complete:F(e),abort:K(e)},delete:z(e)}}var k=()=>Response.json({message:"Not Found"},{status:404});function $(e){let n=G(e),t=e.basePath.replace(/\/$/,"");return async r=>{let a=await d(e.guard,{request:r});if(a)return a;let o=new URL(r.url).pathname.slice(t.length).replace(/^\//,""),i=r.method;return i==="POST"&&o==="presign/upload"?e.upload?.enabled?n.presign.upload(r):k():i==="POST"&&o==="presign/upload/confirm"?e.upload?.enabled?n.presign.confirm(r):k():i==="GET"&&o==="presign/download"?e.download?.enabled?n.presign.download(r):k():i==="DELETE"&&o==="delete"?e.delete?.enabled?n.delete(r):k():i==="POST"&&o==="presign/multipart/init"?e.multipart?.enabled?n.multipart.init(r):k():i==="POST"&&o==="presign/multipart/part"?e.multipart?.enabled?n.multipart.part(r):k():i==="POST"&&o==="presign/multipart/complete"?e.multipart?.enabled?n.multipart.complete(r):k():i==="POST"&&o==="presign/multipart/abort"?e.multipart?.enabled?n.multipart.abort(r):k():Response.json({message:"Not Found"},{status:404})}}function ft(e){return $(e)}
-export{ft as createRouteHandler};//# sourceMappingURL=next.js.map
+import { createPresignedPost } from '@aws-sdk/s3-presigned-post';
+import { getSignedUrl } from '@aws-sdk/s3-request-presigner';
+import { PutObjectCommand, HeadObjectCommand, GetObjectCommand, DeleteObjectCommand, CreateMultipartUploadCommand, UploadPartCommand, ListPartsCommand, CompleteMultipartUploadCommand, AbortMultipartUploadCommand, GetObjectAclCommand } from '@aws-sdk/client-s3';
+
+// src/handlers/presign/upload.ts
+
+// src/internal-helpers.ts
+async function parseBody(request) {
+  try {
+    const body = await request.json();
+    return body && typeof body === "object" ? body : null;
+  } catch {
+    return null;
+  }
+}
+function requireString(value, name) {
+  const trimmed = typeof value === "string" ? value.trim() : "";
+  if (!trimmed) {
+    return Response.json({ message: `${name} is required` }, { status: 400 });
+  }
+  return trimmed;
+}
+function normalizeExpiresIn(value) {
+  const n = Number(value);
+  return Number.isFinite(n) && n > 0 ? Math.floor(n) : 600;
+}
+function withS3ErrorHandler(handler) {
+  return async (request) => {
+    try {
+      return await handler(request);
+    } catch (err) {
+      const code = err.code;
+      const isNetworkError = code === "EAI_AGAIN" || code === "ECONNREFUSED" || code === "ECONNRESET" || code === "ETIMEDOUT" || code === "ENOTFOUND";
+      const message = isNetworkError ? `S3 endpoint unreachable (${code}): check your endpoint URL and network connectivity` : err instanceof Error ? err.message : "Internal server error";
+      console.error("[S3 API]", message);
+      return Response.json({ message }, { status: 502 });
+    }
+  };
+}
+async function runHook(hook, context) {
+  if (!hook) return null;
+  try {
+    await hook(context);
+    return null;
+  } catch (err) {
+    const message = err instanceof Error ? err.message : "Forbidden";
+    const status = typeof err?.status === "number" ? err.status : 403;
+    return Response.json({ message }, { status });
+  }
+}
+
+// src/helpers/build-content-disposition.ts
+function buildContentDisposition(fileName) {
+  const ascii = fileName.replace(/[^\x20-\x7E]/g, "_").replace(/["\\]/g, "_");
+  const encoded = encodeURIComponent(fileName);
+  return `attachment; filename="${ascii}"; filename*=UTF-8''${encoded}`;
+}
+
+// src/helpers/parse-file-name.ts
+function parseFileName(contentDisposition) {
+  if (!contentDisposition) return void 0;
+  const utf8Match = contentDisposition.match(/filename\*=UTF-8''([^;\s]+)/i);
+  if (utf8Match) {
+    try {
+      return decodeURIComponent(utf8Match[1]);
+    } catch {
+    }
+  }
+  const asciiMatch = contentDisposition.match(/filename="([^"]*)"/i);
+  return asciiMatch?.[1];
+}
+
+// src/handlers/presign/upload.ts
+function createUploadHandler(config) {
+  return withS3ErrorHandler(async (request) => {
+    const body = await parseBody(request);
+    if (!body) {
+      return Response.json(
+        { message: "Invalid JSON payload" },
+        { status: 400 }
+      );
+    }
+    const key = requireString(body.key, "key");
+    if (key instanceof Response) return key;
+    const bucket = body.bucket?.trim() || config.defaultBucket;
+    const expiresIn = normalizeExpiresIn(body.expiresIn);
+    const acl = body.acl === "public-read" ? "public-read" : "private";
+    const contentType = body.contentType?.trim() || "application/octet-stream";
+    const fileSize = typeof body.fileSize === "number" && body.fileSize > 0 ? Math.floor(body.fileSize) : null;
+    const guardResult = await runHook(config.upload?.presignGuard, {
+      request,
+      key,
+      bucket,
+      contentType: body.contentType,
+      fileSize: fileSize ?? void 0,
+      metadata: body.metadata,
+      acl
+    });
+    if (guardResult) return guardResult;
+    const method = config.upload?.method ?? "post";
+    if (method === "put" && config.upload?.requireFileSize && fileSize === null) {
+      return Response.json(
+        {
+          message: "fileSize is required when upload.requireFileSize is enabled"
+        },
+        { status: 400 }
+      );
+    }
+    if (method === "put") {
+      const putHeaders = {
+        "Content-Type": contentType
+      };
+      if (body.fileName) {
+        putHeaders["Content-Disposition"] = buildContentDisposition(
+          body.fileName
+        );
+      }
+      const url2 = await getSignedUrl(
+        config.s3,
+        new PutObjectCommand({
+          Bucket: bucket,
+          Key: key,
+          ContentType: contentType,
+          ACL: acl,
+          ...body.fileName ? { ContentDisposition: buildContentDisposition(body.fileName) } : {},
+          ...fileSize !== null ? { ContentLength: fileSize } : {}
+        }),
+        {
+          expiresIn,
+          // Force content-length into X-Amz-SignedHeaders.  Without this the
+          // SDK omits it from the signed header set and size enforcement is lost.
+          ...fileSize !== null ? { signableHeaders: /* @__PURE__ */ new Set(["content-length"]) } : {}
+        }
+      );
+      await config.upload?.onPresigned?.({
+        request,
+        key,
+        bucket,
+        contentType: body.contentType,
+        metadata: body.metadata,
+        acl,
+        url: url2,
+        expiresIn
+      });
+      return Response.json({
+        bucket,
+        key,
+        url: url2,
+        headers: putHeaders,
+        expiresIn,
+        method: "put"
+      });
+    }
+    const fields = { acl, "Content-Type": contentType };
+    if (body.fileName) {
+      fields["Content-Disposition"] = buildContentDisposition(body.fileName);
+    }
+    if (body.metadata) {
+      for (const [k, v] of Object.entries(body.metadata)) {
+        fields[`x-amz-meta-${k}`] = v;
+      }
+    }
+    const rangeMin = fileSize ?? 1;
+    const rangeMax = fileSize ?? void 0;
+    const { url, fields: signedFields } = await createPresignedPost(config.s3, {
+      Bucket: bucket,
+      Key: key,
+      Conditions: rangeMax !== void 0 ? [["content-length-range", rangeMin, rangeMax]] : [["content-length-range", rangeMin, Number.MAX_SAFE_INTEGER]],
+      Fields: fields,
+      Expires: expiresIn
+    });
+    await config.upload?.onPresigned?.({
+      request,
+      key,
+      bucket,
+      contentType: body.contentType,
+      metadata: body.metadata,
+      acl,
+      url,
+      expiresIn
+    });
+    return Response.json({
+      bucket,
+      key,
+      url,
+      fields: signedFields,
+      expiresIn,
+      method: "post"
+    });
+  });
+}
+var DEFAULT_ACL_LOOKUP_TIMEOUT_MS = 1500;
+async function resolveObjectAcl(s3, bucket, key, timeoutMs = DEFAULT_ACL_LOOKUP_TIMEOUT_MS) {
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), timeoutMs);
+  try {
+    const result = await s3.send(
+      new GetObjectAclCommand({ Bucket: bucket, Key: key }),
+      { abortSignal: controller.signal }
+    );
+    const isPublic = result.Grants?.some(
+      (g) => g.Grantee?.URI === "http://acs.amazonaws.com/groups/global/AllUsers" && (g.Permission === "READ" || g.Permission === "FULL_CONTROL")
+    );
+    return isPublic ? "public-read" : "private";
+  } catch {
+    return void 0;
+  } finally {
+    clearTimeout(timeout);
+  }
+}
+
+// src/handlers/presign/confirm.ts
+function createConfirmHandler(config) {
+  return withS3ErrorHandler(async (request) => {
+    const body = await parseBody(request);
+    if (!body) {
+      return Response.json(
+        { message: "Invalid JSON payload" },
+        { status: 400 }
+      );
+    }
+    const key = requireString(body.key, "key");
+    if (key instanceof Response) return key;
+    const bucket = body.bucket?.trim() || config.defaultBucket;
+    const guardResult = await runHook(config.upload?.confirmGuard, {
+      request,
+      key,
+      bucket
+    });
+    if (guardResult) return guardResult;
+    const head = await config.s3.send(
+      new HeadObjectCommand({ Bucket: bucket, Key: key })
+    );
+    const acl = config.resolveObjectAcl ? await resolveObjectAcl(config.s3, bucket, key) : void 0;
+    const fileName = parseFileName(head.ContentDisposition);
+    const context = {
+      request,
+      key,
+      bucket,
+      contentType: head.ContentType,
+      contentLength: head.ContentLength ?? 0,
+      eTag: head.ETag?.replace(/"/g, ""),
+      metadata: head.Metadata,
+      acl,
+      fileName,
+      versionId: head.VersionId,
+      lastModified: head.LastModified?.toISOString()
+    };
+    await config.upload?.onUploadConfirmed?.(context);
+    return Response.json({
+      key,
+      bucket,
+      contentType: context.contentType,
+      contentLength: context.contentLength,
+      eTag: context.eTag,
+      metadata: context.metadata ?? {},
+      acl,
+      fileName,
+      versionId: context.versionId,
+      lastModified: context.lastModified
+    });
+  });
+}
+function createDownloadHandler(config) {
+  return withS3ErrorHandler(async (request) => {
+    const { searchParams } = new URL(request.url);
+    const key = searchParams.get("key")?.trim();
+    if (!key) {
+      return Response.json(
+        { message: "key query parameter is required" },
+        { status: 400 }
+      );
+    }
+    const bucket = searchParams.get("bucket")?.trim() || config.defaultBucket;
+    const expiresIn = normalizeExpiresIn(searchParams.get("expiresIn"));
+    const fileName = searchParams.get("fileName")?.trim();
+    const guardResult = await runHook(config.download?.presignGuard, {
+      request,
+      key,
+      bucket,
+      fileName: fileName || void 0
+    });
+    if (guardResult) return guardResult;
+    try {
+      await config.s3.send(new HeadObjectCommand({ Bucket: bucket, Key: key }));
+    } catch (err) {
+      const name = err?.name;
+      if (name === "NoSuchKey" || name === "NotFound") {
+        return Response.json({ message: "Object not found" }, { status: 404 });
+      }
+      throw err;
+    }
+    const url = await getSignedUrl(
+      config.s3,
+      new GetObjectCommand({
+        Bucket: bucket,
+        Key: key,
+        ResponseContentDisposition: fileName ? buildContentDisposition(fileName) : "attachment"
+      }),
+      { expiresIn }
+    );
+    await config.download?.onPresigned?.({
+      request,
+      key,
+      bucket,
+      fileName: fileName || void 0,
+      url,
+      expiresIn
+    });
+    return Response.json({ bucket, key, url, expiresIn });
+  });
+}
+function createDeleteHandler(config) {
+  return withS3ErrorHandler(async (request) => {
+    const { searchParams } = new URL(request.url);
+    const key = searchParams.get("key")?.trim();
+    if (!key) {
+      return Response.json(
+        { message: "key query parameter is required" },
+        { status: 400 }
+      );
+    }
+    const bucket = searchParams.get("bucket")?.trim() || config.defaultBucket;
+    const guardResult = await runHook(config.delete?.deleteGuard, {
+      request,
+      key,
+      bucket
+    });
+    if (guardResult) return guardResult;
+    try {
+      await config.s3.send(new HeadObjectCommand({ Bucket: bucket, Key: key }));
+    } catch {
+      return Response.json({ message: "Object not found" }, { status: 404 });
+    }
+    await config.s3.send(new DeleteObjectCommand({ Bucket: bucket, Key: key }));
+    await config.delete?.onDeleted?.({ request, key, bucket });
+    return Response.json({ success: true, bucket, key });
+  });
+}
+function createMultipartInitHandler(config) {
+  return withS3ErrorHandler(async (request) => {
+    const body = await parseBody(request);
+    if (!body) {
+      return Response.json(
+        { message: "Invalid JSON payload" },
+        { status: 400 }
+      );
+    }
+    const key = requireString(body.key, "key");
+    if (key instanceof Response) return key;
+    const bucket = body.bucket?.trim() || config.defaultBucket;
+    const acl = body.acl === "public-read" ? "public-read" : "private";
+    const fileSize = typeof body.fileSize === "number" && body.fileSize > 0 ? Math.floor(body.fileSize) : void 0;
+    if (config.multipart?.requireFileSize && fileSize === void 0) {
+      return Response.json(
+        {
+          message: "fileSize is required when multipart.requireFileSize is enabled"
+        },
+        { status: 400 }
+      );
+    }
+    const guardResult = await runHook(config.multipart?.initGuard, {
+      request,
+      key,
+      bucket,
+      fileSize
+    });
+    if (guardResult) return guardResult;
+    const { UploadId } = await config.s3.send(
+      new CreateMultipartUploadCommand({
+        Bucket: bucket,
+        Key: key,
+        ContentType: body.contentType,
+        ContentDisposition: body.fileName ? buildContentDisposition(body.fileName) : void 0,
+        Metadata: body.metadata,
+        ACL: acl
+      })
+    );
+    await config.multipart?.onInit?.({
+      request,
+      key,
+      bucket,
+      uploadId: UploadId,
+      contentType: body.contentType,
+      fileSize,
+      metadata: body.metadata,
+      acl
+    });
+    return Response.json({ bucket, key, uploadId: UploadId }, { status: 201 });
+  });
+}
+function createMultipartPartHandler(config) {
+  return withS3ErrorHandler(async (request) => {
+    const body = await parseBody(request);
+    if (!body) {
+      return Response.json(
+        { message: "Invalid JSON payload" },
+        { status: 400 }
+      );
+    }
+    const key = requireString(body.key, "key");
+    if (key instanceof Response) return key;
+    const uploadId = requireString(body.uploadId, "uploadId");
+    if (uploadId instanceof Response) return uploadId;
+    const partNumber = Number(body.partNumber);
+    if (!Number.isInteger(partNumber) || partNumber <= 0) {
+      return Response.json(
+        { message: "partNumber must be a positive integer" },
+        { status: 400 }
+      );
+    }
+    const bucket = body.bucket?.trim() || config.defaultBucket;
+    const expiresIn = normalizeExpiresIn(body.expiresIn);
+    const partSize = typeof body.partSize === "number" && body.partSize > 0 ? Math.floor(body.partSize) : null;
+    const guardResult = await runHook(config.multipart?.partGuard, {
+      request,
+      key,
+      bucket
+    });
+    if (guardResult) return guardResult;
+    const presignedUrl = await getSignedUrl(
+      config.s3,
+      new UploadPartCommand({
+        Bucket: bucket,
+        Key: key,
+        UploadId: uploadId,
+        PartNumber: partNumber,
+        ...partSize !== null ? { ContentLength: partSize } : {}
+      }),
+      {
+        expiresIn,
+        ...partSize !== null ? { signableHeaders: /* @__PURE__ */ new Set(["content-length"]) } : {}
+      }
+    );
+    return Response.json({
+      presignedUrl,
+      partNumber,
+      uploadId,
+      bucket,
+      expiresIn,
+      ...partSize !== null ? { partSize } : {}
+    });
+  });
+}
+function createMultipartCompleteHandler(config) {
+  return withS3ErrorHandler(async (request) => {
+    const body = await parseBody(request);
+    if (!body) {
+      return Response.json(
+        { message: "Invalid JSON payload" },
+        { status: 400 }
+      );
+    }
+    const key = requireString(body.key, "key");
+    if (key instanceof Response) return key;
+    const uploadId = requireString(body.uploadId, "uploadId");
+    if (uploadId instanceof Response) return uploadId;
+    const parts = (Array.isArray(body.parts) ? body.parts : []).map(({ partNumber }) => Number(partNumber)).filter((n) => Number.isInteger(n) && n > 0).sort((a, b) => a - b);
+    if (!parts.length) {
+      return Response.json(
+        { message: "At least one valid part is required" },
+        { status: 400 }
+      );
+    }
+    const bucket = body.bucket?.trim() || config.defaultBucket;
+    const guardResult = await runHook(config.multipart?.completeGuard, {
+      request,
+      key,
+      bucket
+    });
+    if (guardResult) return guardResult;
+    const listed = await config.s3.send(
+      new ListPartsCommand({ Bucket: bucket, Key: key, UploadId: uploadId })
+    );
+    const listedParts = listed.Parts ?? [];
+    const completeParts = parts.map((partNumber) => {
+      const found = listedParts.find((p) => p.PartNumber === partNumber);
+      return { PartNumber: partNumber, ETag: found?.ETag ?? "" };
+    });
+    const completeResult = await config.s3.send(
+      new CompleteMultipartUploadCommand({
+        Bucket: bucket,
+        Key: key,
+        UploadId: uploadId,
+        MultipartUpload: { Parts: completeParts }
+      })
+    );
+    let head = await config.s3.send(
+      new HeadObjectCommand({ Bucket: bucket, Key: key })
+    );
+    for (let attempt = 0; attempt < 4 && !head.ContentLength; attempt++) {
+      await new Promise((r) => setTimeout(r, 250 * 2 ** attempt));
+      head = await config.s3.send(
+        new HeadObjectCommand({ Bucket: bucket, Key: key })
+      );
+    }
+    const contentLength = head.ContentLength ?? 0;
+    const contentType = head.ContentType;
+    const eTag = (head.ETag ?? completeResult.ETag ?? "").replace(/"/g, "");
+    const metadata = head.Metadata ?? {};
+    const versionId = head.VersionId;
+    const lastModified = head.LastModified?.toISOString();
+    const acl = config.resolveObjectAcl ? await resolveObjectAcl(config.s3, bucket, key) : void 0;
+    const fileName = parseFileName(head.ContentDisposition);
+    await config.multipart?.onComplete?.({
+      request,
+      key,
+      bucket,
+      uploadId,
+      contentLength,
+      contentType,
+      eTag,
+      metadata,
+      acl,
+      fileName,
+      versionId,
+      lastModified
+    });
+    return Response.json({
+      bucket,
+      key,
+      uploadId,
+      contentLength,
+      contentType,
+      eTag,
+      metadata,
+      acl,
+      fileName,
+      versionId,
+      lastModified
+    });
+  });
+}
+function createMultipartAbortHandler(config) {
+  return withS3ErrorHandler(async (request) => {
+    const body = await parseBody(request);
+    if (!body) {
+      return Response.json(
+        { message: "Invalid JSON payload" },
+        { status: 400 }
+      );
+    }
+    const key = requireString(body.key, "key");
+    if (key instanceof Response) return key;
+    const uploadId = requireString(body.uploadId, "uploadId");
+    if (uploadId instanceof Response) return uploadId;
+    const bucket = body.bucket?.trim() || config.defaultBucket;
+    const guardResult = await runHook(config.multipart?.abortGuard, {
+      request,
+      key,
+      bucket
+    });
+    if (guardResult) return guardResult;
+    await config.s3.send(
+      new AbortMultipartUploadCommand({
+        Bucket: bucket,
+        Key: key,
+        UploadId: uploadId
+      })
+    );
+    await config.multipart?.onAbort?.({
+      request,
+      key,
+      bucket,
+      uploadId
+    });
+    return Response.json({ bucket, key, uploadId, aborted: true });
+  });
+}
+function createMultipartListPartsHandler(config) {
+  return withS3ErrorHandler(async (request) => {
+    const url = new URL(request.url);
+    const key = url.searchParams.get("key")?.trim() ?? "";
+    const uploadId = url.searchParams.get("uploadId")?.trim() ?? "";
+    const bucketParam = url.searchParams.get("bucket")?.trim();
+    if (!key) {
+      return Response.json({ message: "key is required" }, { status: 400 });
+    }
+    if (!uploadId) {
+      return Response.json(
+        { message: "uploadId is required" },
+        { status: 400 }
+      );
+    }
+    const bucket = bucketParam || config.defaultBucket;
+    const guardResult = await runHook(config.multipart?.listGuard, {
+      request,
+      key,
+      bucket,
+      uploadId
+    });
+    if (guardResult) return guardResult;
+    const response = await config.s3.send(
+      new ListPartsCommand({
+        Bucket: bucket,
+        Key: key,
+        UploadId: uploadId
+      })
+    );
+    const parts = (response.Parts ?? []).map((p) => ({
+      partNumber: p.PartNumber ?? 0,
+      size: p.Size ?? 0,
+      eTag: (p.ETag ?? "").replace(/"/g, "")
+    }));
+    await config.multipart?.onList?.({ request, key, bucket, uploadId, parts });
+    return Response.json({ parts });
+  });
+}
+
+// src/create-handlers.ts
+function createHandlers(config) {
+  return {
+    presign: {
+      upload: createUploadHandler(config),
+      confirm: createConfirmHandler(config),
+      download: createDownloadHandler(config)
+    },
+    multipart: {
+      init: createMultipartInitHandler(config),
+      part: createMultipartPartHandler(config),
+      complete: createMultipartCompleteHandler(config),
+      abort: createMultipartAbortHandler(config),
+      listParts: createMultipartListPartsHandler(config)
+    },
+    delete: createDeleteHandler(config)
+  };
+}
+
+// src/router.ts
+var disabled = () => Response.json({ message: "Not Found" }, { status: 404 });
+function createRouter(config) {
+  const handlers = createHandlers(config);
+  const base = config.basePath.replace(/\/$/, "");
+  return async (request) => {
+    const guardResult = await runHook(config.guard, { request });
+    if (guardResult) return guardResult;
+    const url = new URL(request.url);
+    const subpath = url.pathname.slice(base.length).replace(/^\//, "");
+    const method = request.method;
+    if (method === "POST" && subpath === "presign/upload")
+      return config.upload?.enabled ? handlers.presign.upload(request) : disabled();
+    if (method === "POST" && subpath === "presign/upload/confirm")
+      return config.upload?.enabled ? handlers.presign.confirm(request) : disabled();
+    if (method === "GET" && subpath === "presign/download")
+      return config.download?.enabled ? handlers.presign.download(request) : disabled();
+    if (method === "DELETE" && subpath === "delete")
+      return config.delete?.enabled ? handlers.delete(request) : disabled();
+    if (method === "POST" && subpath === "presign/multipart/init")
+      return config.multipart?.enabled ? handlers.multipart.init(request) : disabled();
+    if (method === "POST" && subpath === "presign/multipart/part")
+      return config.multipart?.enabled ? handlers.multipart.part(request) : disabled();
+    if (method === "POST" && subpath === "presign/multipart/complete")
+      return config.multipart?.enabled ? handlers.multipart.complete(request) : disabled();
+    if (method === "POST" && subpath === "presign/multipart/abort")
+      return config.multipart?.enabled ? handlers.multipart.abort(request) : disabled();
+    if (method === "GET" && subpath === "presign/multipart/parts")
+      return config.multipart?.enabled ? handlers.multipart.listParts(request) : disabled();
+    return Response.json({ message: "Not Found" }, { status: 404 });
+  };
+}
+
+// src/adapters/next.ts
+function createRouteHandler(config) {
+  return createRouter(config);
+}
+
+export { createRouteHandler };
+//# sourceMappingURL=next.js.map
 //# sourceMappingURL=next.js.map