@budibase/server 1.0.123-alpha.0 → 1.0.123

package/dist/api/routes/application.js

@@ -1,44 +1,18 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const router_1 = __importDefault(require("@koa/router"));
-const controller = __importStar(require("../controllers/application"));
-const authorized_1 = __importDefault(require("../../middleware/authorized"));
-const permissions_1 = require("@budibase/backend-core/permissions");
-const router = new router_1.default();
+const Router = require("@koa/router");
+const controller = require("../controllers/application");
+const authorized = require("../../middleware/authorized");
+const { BUILDER } = require("@budibase/backend-core/permissions");
+const usage = require("../../middleware/usageQuota");
+const router = Router();
 router
-    .post("/api/applications/:appId/sync", (0, authorized_1.default)(permissions_1.BUILDER), controller.sync)
-    .post("/api/applications", (0, authorized_1.default)(permissions_1.BUILDER), controller.create)
+    .post("/api/applications/:appId/sync", authorized(BUILDER), controller.sync)
+    .post("/api/applications", authorized(BUILDER), usage, controller.create)
     .get("/api/applications/:appId/definition", controller.fetchAppDefinition)
     .get("/api/applications", controller.fetch)
     .get("/api/applications/:appId/appPackage", controller.fetchAppPackage)
-    .put("/api/applications/:appId", (0, authorized_1.default)(permissions_1.BUILDER), controller.update)
-    .post("/api/applications/:appId/client/update", (0, authorized_1.default)(permissions_1.BUILDER), controller.updateClient)
-    .post("/api/applications/:appId/client/revert", (0, authorized_1.default)(permissions_1.BUILDER), controller.revertClient)
-    .delete("/api/applications/:appId", (0, authorized_1.default)(permissions_1.BUILDER), controller.destroy);
-exports.default = router;
+    .put("/api/applications/:appId", authorized(BUILDER), controller.update)
+    .post("/api/applications/:appId/client/update", authorized(BUILDER), controller.updateClient)
+    .post("/api/applications/:appId/client/revert", authorized(BUILDER), controller.revertClient)
+    .delete("/api/applications/:appId", authorized(BUILDER), usage, controller.delete);
+module.exports = router;

package/dist/api/routes/index.js

@@ -1,66 +1,61 @@
 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.mainRoutes = exports.publicRoutes = exports.staticRoutes = void 0;
-const auth_1 = __importDefault(require("./auth"));
-const layout_1 = __importDefault(require("./layout"));
-const screen_1 = __importDefault(require("./screen"));
-const user_1 = __importDefault(require("./user"));
-const application_1 = __importDefault(require("./application"));
-const table_1 = __importDefault(require("./table"));
-const row_1 = __importDefault(require("./row"));
-const view_1 = __importDefault(require("./view"));
-const component_1 = __importDefault(require("./component"));
-const automation_1 = __importDefault(require("./automation"));
-const webhook_1 = __importDefault(require("./webhook"));
-const role_1 = __importDefault(require("./role"));
-const deploy_1 = __importDefault(require("./deploy"));
-const apikeys_1 = __importDefault(require("./apikeys"));
-const templates_1 = __importDefault(require("./templates"));
-const analytics_1 = __importDefault(require("./analytics"));
-const routing_1 = __importDefault(require("./routing"));
-const integration_1 = __importDefault(require("./integration"));
-const permission_1 = __importDefault(require("./permission"));
-const datasource_1 = __importDefault(require("./datasource"));
-const query_1 = __importDefault(require("./query"));
-const backup_1 = __importDefault(require("./backup"));
-const metadata_1 = __importDefault(require("./metadata"));
-const dev_1 = __importDefault(require("./dev"));
-const cloud_1 = __importDefault(require("./cloud"));
-const migrations_1 = __importDefault(require("./migrations"));
-var static_1 = require("./static");
-Object.defineProperty(exports, "staticRoutes", { enumerable: true, get: function () { return __importDefault(static_1).default; } });
-var public_1 = require("./public");
-Object.defineProperty(exports, "publicRoutes", { enumerable: true, get: function () { return __importDefault(public_1).default; } });
+const authRoutes = require("./auth");
+const layoutRoutes = require("./layout");
+const screenRoutes = require("./screen");
+const userRoutes = require("./user");
+const applicationRoutes = require("./application");
+const tableRoutes = require("./table");
+const rowRoutes = require("./row");
+const viewRoutes = require("./view");
+const staticRoutes = require("./static");
+const componentRoutes = require("./component");
+const automationRoutes = require("./automation");
+const webhookRoutes = require("./webhook");
+const roleRoutes = require("./role");
+const deployRoutes = require("./deploy");
+const apiKeysRoutes = require("./apikeys");
+const templatesRoutes = require("./templates");
+const analyticsRoutes = require("./analytics");
+const routingRoutes = require("./routing");
+const integrationRoutes = require("./integration");
+const permissionRoutes = require("./permission");
+const datasourceRoutes = require("./datasource");
+const queryRoutes = require("./query");
+const backupRoutes = require("./backup");
+const metadataRoutes = require("./metadata");
+const devRoutes = require("./dev");
+const cloudRoutes = require("./cloud");
+const migrationRoutes = require("./migrations");
+const publicRoutes = require("./public");
 exports.mainRoutes = [
-    auth_1.default,
-    deploy_1.default,
-    layout_1.default,
-    screen_1.default,
-    user_1.default,
-    application_1.default,
-    automation_1.default,
-    view_1.default,
-    component_1.default,
-    role_1.default,
-    apikeys_1.default,
-    templates_1.default,
-    analytics_1.default,
-    webhook_1.default,
-    routing_1.default,
-    integration_1.default,
-    permission_1.default,
-    datasource_1.default,
-    query_1.default,
-    backup_1.default,
-    metadata_1.default,
-    dev_1.default,
-    cloud_1.default,
+    authRoutes,
+    deployRoutes,
+    layoutRoutes,
+    screenRoutes,
+    userRoutes,
+    applicationRoutes,
+    automationRoutes,
+    viewRoutes,
+    componentRoutes,
+    roleRoutes,
+    apiKeysRoutes,
+    templatesRoutes,
+    analyticsRoutes,
+    webhookRoutes,
+    routingRoutes,
+    integrationRoutes,
+    permissionRoutes,
+    datasourceRoutes,
+    queryRoutes,
+    backupRoutes,
+    metadataRoutes,
+    devRoutes,
+    cloudRoutes,
     // these need to be handled last as they still use /api/:tableId
     // this could be breaking as koa may recognise other routes as this
-    table_1.default,
-    row_1.default,
-    migrations_1.default,
+    tableRoutes,
+    rowRoutes,
+    migrationRoutes,
 ];
+exports.publicRoutes = publicRoutes;
+exports.staticRoutes = staticRoutes;

package/dist/api/routes/public/index.js

@@ -8,6 +8,7 @@ const queries_1 = __importDefault(require("./queries"));
 const tables_1 = __importDefault(require("./tables"));
 const rows_1 = __importDefault(require("./rows"));
 const users_1 = __importDefault(require("./users"));
+const usageQuota_1 = __importDefault(require("../../../middleware/usageQuota"));
 const authorized_1 = __importDefault(require("../../../middleware/authorized"));
 const publicApi_1 = __importDefault(require("../../../middleware/publicApi"));
 const resourceId_1 = require("../../../middleware/resourceId");
@@ -85,9 +86,9 @@ function addToRouter(endpoints) {
 }
 function applyRoutes(endpoints, permType, resource, subResource) {
     const paramMiddleware = subResource
-        ? (0, resourceId_1.paramSubResource)(resource, subResource)
-        : (0, resourceId_1.paramResource)(resource);
-    const publicApiMiddleware = (0, publicApi_1.default)({
+        ? resourceId_1.paramSubResource(resource, subResource)
+        : resourceId_1.paramResource(resource);
+    const publicApiMiddleware = publicApi_1.default({
         requiresAppId: permType !== PermissionTypes.APP && permType !== PermissionTypes.USER,
     });
     addMiddleware(endpoints.read, publicApiMiddleware);
@@ -96,8 +97,10 @@ function applyRoutes(endpoints, permType, resource, subResource) {
     addMiddleware(endpoints.read, paramMiddleware);
     addMiddleware(endpoints.write, paramMiddleware);
     // add the authorization middleware, using the correct perm type
-    addMiddleware(endpoints.read, (0, authorized_1.default)(permType, PermissionLevels.READ));
-    addMiddleware(endpoints.write, (0, authorized_1.default)(permType, PermissionLevels.WRITE));
+    addMiddleware(endpoints.read, authorized_1.default(permType, PermissionLevels.READ));
+    addMiddleware(endpoints.write, authorized_1.default(permType, PermissionLevels.WRITE));
+    // add the usage quota middleware
+    addMiddleware(endpoints.write, usageQuota_1.default);
     // add the output mapper middleware
     addMiddleware(endpoints.read, mapper_1.default, { output: true });
     addMiddleware(endpoints.write, mapper_1.default, { output: true });
@@ -110,4 +113,4 @@ applyRoutes(users_1.default, PermissionTypes.USER, "userId");
 applyRoutes(queries_1.default, PermissionTypes.QUERY, "queryId");
 // needs to be applied last for routing purposes, don't override other endpoints
 applyRoutes(rows_1.default, PermissionTypes.TABLE, "tableId", "rowId");
-exports.default = publicRouter;
+module.exports = publicRouter;

package/dist/api/routes/public/queries.js

@@ -66,5 +66,5 @@ write.push(new Endpoint_1.default("post", "/queries/:queryId", queries_1.default
  *               queries:
  *                 $ref: '#/components/examples/queries'
  */
-read.push(new Endpoint_1.default("post", "/queries/search", queries_1.default.search).addMiddleware((0, validators_1.nameValidator)()));
+read.push(new Endpoint_1.default("post", "/queries/search", queries_1.default.search).addMiddleware(validators_1.nameValidator()));
 exports.default = { read, write };

package/dist/api/routes/public/rows.js

@@ -225,5 +225,5 @@ read.push(new Endpoint_1.default("get", "/tables/:tableId/rows/:rowId", rows_1.d
  *               search:
  *                 $ref: '#/components/examples/rows'
  */
-read.push(new Endpoint_1.default("post", "/tables/:tableId/rows/search", rows_1.default.search).addMiddleware((0, validators_1.externalSearchValidator)()));
+read.push(new Endpoint_1.default("post", "/tables/:tableId/rows/search", rows_1.default.search).addMiddleware(validators_1.externalSearchValidator()));
 exports.default = { read, write };

package/dist/api/routes/public/tables.js

@@ -37,7 +37,7 @@ const read = [], write = [];
  *               table:
  *                 $ref: '#/components/examples/table'
  */
-write.push(new Endpoint_1.default("post", "/tables", tables_1.default.create).addMiddleware((0, validators_1.tableValidator)()));
+write.push(new Endpoint_1.default("post", "/tables", tables_1.default.create).addMiddleware(validators_1.tableValidator()));
 /**
  * @openapi
  * /tables/{tableId}:
@@ -68,7 +68,7 @@ write.push(new Endpoint_1.default("post", "/tables", tables_1.default.create).ad
  *               table:
  *                 $ref: '#/components/examples/table'
  */
-write.push(new Endpoint_1.default("put", "/tables/:tableId", tables_1.default.update).addMiddleware((0, validators_1.tableValidator)()));
+write.push(new Endpoint_1.default("put", "/tables/:tableId", tables_1.default.update).addMiddleware(validators_1.tableValidator()));
 /**
  * @openapi
  * /tables/{tableId}:
@@ -143,5 +143,5 @@ read.push(new Endpoint_1.default("get", "/tables/:tableId", tables_1.default.rea
  *               tables:
  *                 $ref: '#/components/examples/tables'
  */
-read.push(new Endpoint_1.default("post", "/tables/search", tables_1.default.search).addMiddleware((0, validators_1.nameValidator)()));
+read.push(new Endpoint_1.default("post", "/tables/search", tables_1.default.search).addMiddleware(validators_1.nameValidator()));
 exports.default = { read, write };

package/dist/api/routes/public/users.js

@@ -126,5 +126,5 @@ read.push(new Endpoint_1.default("get", "/users/:userId", users_1.default.read))
  *               users:
  *                 $ref: '#/components/examples/users'
  */
-read.push(new Endpoint_1.default("post", "/users/search", users_1.default.search).addMiddleware((0, validators_1.nameValidator)()));
+read.push(new Endpoint_1.default("post", "/users/search", users_1.default.search).addMiddleware(validators_1.nameValidator()));
 exports.default = { read, write };

package/dist/api/routes/row.js

@@ -1,38 +1,12 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const router_1 = __importDefault(require("@koa/router"));
-const rowController = __importStar(require("../controllers/row"));
-const authorized_1 = __importDefault(require("../../middleware/authorized"));
-const resourceId_1 = require("../../middleware/resourceId");
+const Router = require("@koa/router");
+const rowController = require("../controllers/row");
+const authorized = require("../../middleware/authorized");
+const usage = require("../../middleware/usageQuota");
+const { paramResource, paramSubResource, } = require("../../middleware/resourceId");
 const { PermissionLevels, PermissionTypes, } = require("@budibase/backend-core/permissions");
 const { internalSearchValidator } = require("./utils/validators");
-const router = new router_1.default();
+const router = Router();
 router
     /**
      * @api {get} /api/:tableId/:rowId/enrich Get an enriched row
@@ -48,7 +22,7 @@ router
      *
      * @apiSuccess {object} row The response body will be the enriched row.
      */
-    .get("/api/:tableId/:rowId/enrich", (0, resourceId_1.paramSubResource)("tableId", "rowId"), (0, authorized_1.default)(PermissionTypes.TABLE, PermissionLevels.READ), rowController.fetchEnrichedRow)
+    .get("/api/:tableId/:rowId/enrich", paramSubResource("tableId", "rowId"), authorized(PermissionTypes.TABLE, PermissionLevels.READ), rowController.fetchEnrichedRow)
     /**
      * @api {get} /api/:tableId/rows Get all rows in a table
      * @apiName Get all rows in a table
@@ -63,7 +37,7 @@ router
      *
      * @apiSuccess {object[]} rows The response body will be an array of all rows found.
      */
-    .get("/api/:tableId/rows", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionTypes.TABLE, PermissionLevels.READ), rowController.fetch)
+    .get("/api/:tableId/rows", paramResource("tableId"), authorized(PermissionTypes.TABLE, PermissionLevels.READ), rowController.fetch)
     /**
      * @api {get} /api/:tableId/rows/:rowId Retrieve a single row
      * @apiName Retrieve a single row
@@ -77,7 +51,7 @@ router
      *
      * @apiSuccess {object} body The response body will be the row that was found.
      */
-    .get("/api/:tableId/rows/:rowId", (0, resourceId_1.paramSubResource)("tableId", "rowId"), (0, authorized_1.default)(PermissionTypes.TABLE, PermissionLevels.READ), rowController.find)
+    .get("/api/:tableId/rows/:rowId", paramSubResource("tableId", "rowId"), authorized(PermissionTypes.TABLE, PermissionLevels.READ), rowController.find)
     /**
      * @api {post} /api/:tableId/search Search for rows in a table
      * @apiName Search for rows in a table
@@ -141,10 +115,10 @@ router
      * @apiSuccess {string} bookmark The bookmark to be sent with the next request to get the next
      * page.
      */
-    .post("/api/:tableId/search", internalSearchValidator(), (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionTypes.TABLE, PermissionLevels.READ), rowController.search)
+    .post("/api/:tableId/search", internalSearchValidator(), paramResource("tableId"), authorized(PermissionTypes.TABLE, PermissionLevels.READ), rowController.search)
     // DEPRECATED - this is an old API, but for backwards compat it needs to be
     // supported still
-    .post("/api/search/:tableId/rows", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionTypes.TABLE, PermissionLevels.READ), rowController.search)
+    .post("/api/search/:tableId/rows", paramResource("tableId"), authorized(PermissionTypes.TABLE, PermissionLevels.READ), rowController.search)
     /**
      * @api {post} /api/:tableId/rows Creates a new row
      * @apiName Creates a new row
@@ -169,7 +143,7 @@ router
      * @apiSuccess {string} [_rev] If saving to an internal table a revision will also be returned.
      * @apiSuccess {object} body The contents of the row that was saved will be returned as well.
      */
-    .post("/api/:tableId/rows", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionTypes.TABLE, PermissionLevels.WRITE), rowController.save)
+    .post("/api/:tableId/rows", paramResource("tableId"), authorized(PermissionTypes.TABLE, PermissionLevels.WRITE), usage, rowController.save)
     /**
      * @api {patch} /api/:tableId/rows Updates a row
      * @apiName Update a row
@@ -178,7 +152,7 @@ router
      * @apiDescription This endpoint is identical to the row creation endpoint but instead it will
      * error if an _id isn't provided, it will only function for existing rows.
      */
-    .patch("/api/:tableId/rows", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionTypes.TABLE, PermissionLevels.WRITE), rowController.patch)
+    .patch("/api/:tableId/rows", paramResource("tableId"), authorized(PermissionTypes.TABLE, PermissionLevels.WRITE), usage, rowController.patch)
     /**
      * @api {post} /api/:tableId/rows/validate Validate inputs for a row
      * @apiName Validate inputs for a row
@@ -199,7 +173,7 @@ router
      * which do not match the table schema. The key name will be the column names that have breached
      * the schema.
      */
-    .post("/api/:tableId/rows/validate", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionTypes.TABLE, PermissionLevels.WRITE), rowController.validate)
+    .post("/api/:tableId/rows/validate", paramResource("tableId"), authorized(PermissionTypes.TABLE, PermissionLevels.WRITE), rowController.validate)
     /**
      * @api {delete} /api/:tableId/rows Delete rows
      * @apiName Delete rows
@@ -220,7 +194,7 @@ router
      * of the deleted rows, if deleting a single row then the body will contain a "row" property which
      * is the deleted row.
      */
-    .delete("/api/:tableId/rows", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionTypes.TABLE, PermissionLevels.WRITE), rowController.destroy)
+    .delete("/api/:tableId/rows", paramResource("tableId"), authorized(PermissionTypes.TABLE, PermissionLevels.WRITE), usage, rowController.destroy)
     /**
      * @api {post} /api/:tableId/rows/exportRows Export Rows
      * @apiName Export rows
@@ -234,5 +208,5 @@ router
      *
      * @apiSuccess {object[]|object}
      */
-    .post("/api/:tableId/rows/exportRows", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionTypes.TABLE, PermissionLevels.WRITE), rowController.exportRows);
-exports.default = router;
+    .post("/api/:tableId/rows/exportRows", paramResource("tableId"), authorized(PermissionTypes.TABLE, PermissionLevels.WRITE), usage, rowController.export);
+module.exports = router;

package/dist/api/routes/static.js

@@ -1,27 +1,4 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
 var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
     function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
     return new (P || (P = Promise))(function (resolve, reject) {
@@ -31,18 +8,14 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
         step((generator = generator.apply(thisArg, _arguments || [])).next());
     });
 };
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const router_1 = __importDefault(require("@koa/router"));
-const controller = __importStar(require("../controllers/static"));
-const budibaseDir_1 = require("../../utilities/budibaseDir");
-const authorized_1 = __importDefault(require("../../middleware/authorized"));
-const permissions_1 = require("@budibase/backend-core/permissions");
-const env = __importStar(require("../../environment"));
-const resourceId_1 = require("../../middleware/resourceId");
-const router = new router_1.default();
+const Router = require("@koa/router");
+const controller = require("../controllers/static");
+const { budibaseTempDir } = require("../../utilities/budibaseDir");
+const authorized = require("../../middleware/authorized");
+const { BUILDER, PermissionTypes, PermissionLevels, } = require("@budibase/backend-core/permissions");
+const env = require("../../environment");
+const { paramResource } = require("../../middleware/resourceId");
+const router = Router();
 /* istanbul ignore next */
 router.param("file", (file, ctx, next) => __awaiter(void 0, void 0, void 0, function* () {
     ctx.file = file && file.includes(".") ? file : "index.html";
@@ -55,7 +28,7 @@ router.param("file", (file, ctx, next) => __awaiter(void 0, void 0, void 0, func
     }
     else if (env.isDev()) {
         // Serving the client library from your local dir in dev
-        ctx.devPath = (0, budibaseDir_1.budibaseTempDir)();
+        ctx.devPath = budibaseTempDir();
     }
     return next();
 }));
@@ -67,9 +40,9 @@ if (env.isDev()) {
 router
     // TODO: for now this builder endpoint is not authorized/secured, will need to be
     .get("/builder/:file*", controller.serveBuilder)
-    .post("/api/attachments/process", (0, authorized_1.default)(permissions_1.BUILDER), controller.uploadFile)
-    .post("/api/attachments/:tableId/upload", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(permissions_1.PermissionTypes.TABLE, permissions_1.PermissionLevels.WRITE), controller.uploadFile)
+    .post("/api/attachments/process", authorized(BUILDER), controller.uploadFile)
+    .post("/api/attachments/:tableId/upload", paramResource("tableId"), authorized(PermissionTypes.TABLE, PermissionLevels.WRITE), controller.uploadFile)
     .get("/:appId/:path*", controller.serveApp)
     .get("/app/:appUrl/:path*", controller.serveApp)
-    .post("/api/attachments/:datasourceId/url", (0, authorized_1.default)(permissions_1.PermissionTypes.TABLE, permissions_1.PermissionLevels.READ), controller.getSignedUploadURL);
-exports.default = router;
+    .post("/api/attachments/:datasourceId/url", authorized(PermissionTypes.TABLE, PermissionLevels.READ), controller.getSignedUploadURL);
+module.exports = router;