@blocklet/pages-kit-block-studio 0.0.12 → 0.0.13

package/lib/cjs/utils/helper.js

@@ -3,7 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.libDir = exports.logger = void 0;
+exports.isDev = exports.isPathSafe = exports.libDir = exports.logger = void 0;
 exports.setBlockEntryFilesPattern = setBlockEntryFilesPattern;
 exports.getBlockEntryFilesPattern = getBlockEntryFilesPattern;
 exports.findComponentFiles = findComponentFiles;
@@ -54,3 +54,10 @@ function getBlockName(entry) {
 exports.logger = console;
 function generateBlockYml() { }
 exports.libDir = 'lib';
+const isPathSafe = (filePath) => {
+    const normalizedPath = path_1.default.normalize(filePath);
+    const pwd = process.env.PWD || process.cwd();
+    return (!normalizedPath.includes('../') && !normalizedPath.includes('..\\') && path_1.default.resolve(normalizedPath).startsWith(pwd));
+};
+exports.isPathSafe = isPathSafe;
+exports.isDev = process.env.BLOCKLET_MODE === 'development';

package/lib/esm/middlewares/init-block-studio-router.js

@@ -0,0 +1,75 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { Router } from 'express';
+import fs from 'fs';
+import path from 'path';
+import { isPathSafe, isDev } from '../utils/helper';
+export const initBlockStudioRouter = Router();
+const BINARY_EXTENSIONS = ['.png', '.jpg', '.jpeg', '.gif', '.webp', '.ico', '.svg'];
+initBlockStudioRouter.get('/', (req, res) => __awaiter(void 0, void 0, void 0, function* () {
+    if (!isDev) {
+        return res.status(403).json({ error: 'Only available in development mode' });
+    }
+    const filePath = req.query.path;
+    if (!filePath) {
+        return res.status(400).json({ error: 'Path parameter is required' });
+    }
+    if (!isPathSafe(filePath)) {
+        return res.status(403).json({ error: 'Invalid path' });
+    }
+    try {
+        if (!fs.existsSync(filePath)) {
+            return res.json(null);
+        }
+        const ext = path.extname(filePath).toLowerCase();
+        if (BINARY_EXTENSIONS.includes(ext)) {
+            // For images, stream the file directly
+            const mimeType = `image/${ext.slice(1)}`;
+            res.setHeader('Content-Type', mimeType);
+            return fs.createReadStream(filePath).pipe(res);
+        }
+        // For text files, try to parse as JSON
+        const content = fs.readFileSync(filePath, 'utf-8');
+        try {
+            return res.json(JSON.parse(content));
+        }
+        catch (_a) {
+            // If JSON parsing fails, return as plain text
+            return res.json(content);
+        }
+    }
+    catch (error) {
+        return res.status(500).json({ error: 'Failed to read file' });
+    }
+}));
+initBlockStudioRouter.post('/', (req, res) => __awaiter(void 0, void 0, void 0, function* () {
+    if (!isDev) {
+        return res.status(403).json({ error: 'Only available in development mode' });
+    }
+    const { path: filePath, content } = req.body;
+    if (!filePath || content === undefined) {
+        return res.status(400).json({ error: 'Path and content are required' });
+    }
+    if (!isPathSafe(filePath)) {
+        return res.status(403).json({ error: 'Invalid path' });
+    }
+    try {
+        const dir = path.dirname(filePath);
+        if (!fs.existsSync(dir)) {
+            fs.mkdirSync(dir, { recursive: true });
+        }
+        fs.writeFileSync(filePath, JSON.stringify(content, null, 2));
+        return res.json({ success: true });
+    }
+    catch (error) {
+        return res.status(500).json({ error: 'Failed to write file' });
+    }
+}));
+export default initBlockStudioRouter;

package/lib/esm/middlewares/init-uploader-router.js

@@ -0,0 +1,2 @@
+"use strict";
+// init uploader router