@contember/engine-s3-plugin 2.1.0-alpha.3 → 2.1.0-alpha.35

package/dist/development/src/S3ObjectAuthorizator.cjs

@@ -1,46 +0,0 @@
-"use strict";
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const pm = require("picomatch");
-const graphqlUtils = require("@contember/graphql-utils");
-var __defProp = Object.defineProperty;
-var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
-var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);
-class S3ObjectAuthorizator {
-  constructor(uploadRules, readRules) {
-    __publicField(this, "uploadRules");
-    __publicField(this, "readRules");
-    this.uploadRules = uploadRules;
-    this.readRules = readRules;
-  }
-  verifyReadAccess({ key }) {
-    for (const rule of this.readRules) {
-      rule.matcher ?? (rule.matcher = pm(rule.pattern));
-      if (rule.matcher(key)) {
-        return;
-      }
-    }
-    throw new graphqlUtils.ForbiddenError(`Read access forbidden for object key ${key}`);
-  }
-  verifyUploadAccess({ key, size }) {
-    const matchedPatterns = [];
-    for (const rule of this.uploadRules) {
-      rule.matcher ?? (rule.matcher = pm(rule.pattern));
-      if (rule.matcher(key)) {
-        if (!rule.maxSize || size !== null && size <= rule.maxSize) {
-          return;
-        }
-        matchedPatterns.push(rule);
-      }
-    }
-    if (matchedPatterns.length > 0) {
-      if (size === null) {
-        throw new graphqlUtils.ForbiddenError("File size must be provided");
-      } else {
-        throw new graphqlUtils.ForbiddenError("Uploaded file is too large");
-      }
-    }
-    throw new graphqlUtils.ForbiddenError(`Upload access forbidden for object key ${key}`);
-  }
-}
-exports.S3ObjectAuthorizator = S3ObjectAuthorizator;
-//# sourceMappingURL=S3ObjectAuthorizator.cjs.map

package/dist/development/src/S3ObjectAuthorizator.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"S3ObjectAuthorizator.cjs","sources":["../../../../packages/engine-s3-plugin/src/S3ObjectAuthorizator.ts"],"sourcesContent":["// eslint-disable-next-line @typescript-eslint/triple-slash-reference\n/// <reference path=\"../types/picomatch/index.d.ts\" />\nimport pm from 'picomatch'\nimport { ForbiddenError } from '@contember/graphql-utils'\n\nexport type S3ObjectUploadRule = {\n\tpattern: string\n\tmaxSize?: number\n\tmatcher?: (key: string) => boolean\n}\n\nexport type S3ObjectReadRule = {\n\tpattern: string\n\tmatcher?: (key: string) => boolean\n}\n\nexport class S3ObjectAuthorizator {\n\tprivate readonly uploadRules: S3ObjectUploadRule[]\n\tprivate readonly readRules: S3ObjectReadRule[]\n\n\tconstructor(\n\t\tuploadRules: Omit<S3ObjectUploadRule, 'matcher'>[],\n\t\treadRules: Omit<S3ObjectReadRule, 'matcher'>[],\n\t) {\n\t\tthis.uploadRules = uploadRules\n\t\tthis.readRules = readRules\n\t}\n\n\tpublic verifyReadAccess({ key }: { key: string }): void {\n\t\tfor (const rule of this.readRules) {\n\t\t\trule.matcher ??= pm(rule.pattern)\n\n\t\t\tif (rule.matcher(key)) {\n\t\t\t\treturn\n\t\t\t}\n\t\t}\n\n\t\tthrow new ForbiddenError(`Read access forbidden for object key ${key}`)\n\t}\n\n\tpublic verifyUploadAccess({ key, size }: { key: string; size: number | null }): void {\n\t\tconst matchedPatterns: S3ObjectUploadRule[] = []\n\n\t\tfor (const rule of this.uploadRules) {\n\t\t\trule.matcher ??= pm(rule.pattern)\n\n\t\t\tif (rule.matcher(key)) {\n\t\t\t\tif (!rule.maxSize || (size !== null && size <= rule.maxSize)) {\n\t\t\t\t\treturn\n\t\t\t\t}\n\t\t\t\tmatchedPatterns.push(rule)\n\t\t\t}\n\t\t}\n\n\t\tif (matchedPatterns.length > 0) {\n\t\t\tif (size === null) {\n\t\t\t\tthrow new ForbiddenError('File size must be provided')\n\t\t\t} else {\n\t\t\t\tthrow new ForbiddenError('Uploaded file is too large')\n\t\t\t}\n\t\t}\n\n\t\tthrow new ForbiddenError(`Upload access forbidden for object key ${key}`)\n\t}\n}\n"],"names":["ForbiddenError"],"mappings":";;;;;;;AAgBO,MAAM,qBAAqB;AAAA,EAIjC,YACC,aACA,WACC;AANe,kBAAA,MAAA,aAAA;AACA,kBAAA,MAAA,WAAA;AAMhB,SAAK,cAAc;AACnB,SAAK,YAAY;AAAA,EAAA;AAAA,EAGX,iBAAiB,EAAE,OAA8B;AAC5C,eAAA,QAAQ,KAAK,WAAW;AAClC,WAAK,YAAL,KAAK,UAAY,GAAG,KAAK,OAAO;AAE5B,UAAA,KAAK,QAAQ,GAAG,GAAG;AACtB;AAAA,MAAA;AAAA,IACD;AAGD,UAAM,IAAIA,aAAAA,eAAe,wCAAwC,GAAG,EAAE;AAAA,EAAA;AAAA,EAGhE,mBAAmB,EAAE,KAAK,QAAoD;AACpF,UAAM,kBAAwC,CAAC;AAEpC,eAAA,QAAQ,KAAK,aAAa;AACpC,WAAK,YAAL,KAAK,UAAY,GAAG,KAAK,OAAO;AAE5B,UAAA,KAAK,QAAQ,GAAG,GAAG;AACtB,YAAI,CAAC,KAAK,WAAY,SAAS,QAAQ,QAAQ,KAAK,SAAU;AAC7D;AAAA,QAAA;AAED,wBAAgB,KAAK,IAAI;AAAA,MAAA;AAAA,IAC1B;AAGG,QAAA,gBAAgB,SAAS,GAAG;AAC/B,UAAI,SAAS,MAAM;AACZ,cAAA,IAAIA,4BAAe,4BAA4B;AAAA,MAAA,OAC/C;AACA,cAAA,IAAIA,4BAAe,4BAA4B;AAAA,MAAA;AAAA,IACtD;AAGD,UAAM,IAAIA,aAAAA,eAAe,0CAA0C,GAAG,EAAE;AAAA,EAAA;AAE1E;;"}

package/dist/development/src/S3ObjectAuthorizator.js

@@ -1,46 +0,0 @@
-import pm from "picomatch";
-import { ForbiddenError } from "@contember/graphql-utils";
-var __defProp = Object.defineProperty;
-var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
-var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);
-class S3ObjectAuthorizator {
-  constructor(uploadRules, readRules) {
-    __publicField(this, "uploadRules");
-    __publicField(this, "readRules");
-    this.uploadRules = uploadRules;
-    this.readRules = readRules;
-  }
-  verifyReadAccess({ key }) {
-    for (const rule of this.readRules) {
-      rule.matcher ?? (rule.matcher = pm(rule.pattern));
-      if (rule.matcher(key)) {
-        return;
-      }
-    }
-    throw new ForbiddenError(`Read access forbidden for object key ${key}`);
-  }
-  verifyUploadAccess({ key, size }) {
-    const matchedPatterns = [];
-    for (const rule of this.uploadRules) {
-      rule.matcher ?? (rule.matcher = pm(rule.pattern));
-      if (rule.matcher(key)) {
-        if (!rule.maxSize || size !== null && size <= rule.maxSize) {
-          return;
-        }
-        matchedPatterns.push(rule);
-      }
-    }
-    if (matchedPatterns.length > 0) {
-      if (size === null) {
-        throw new ForbiddenError("File size must be provided");
-      } else {
-        throw new ForbiddenError("Uploaded file is too large");
-      }
-    }
-    throw new ForbiddenError(`Upload access forbidden for object key ${key}`);
-  }
-}
-export {
-  S3ObjectAuthorizator
-};
-//# sourceMappingURL=S3ObjectAuthorizator.js.map

package/dist/development/src/S3ObjectAuthorizator.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"S3ObjectAuthorizator.js","sources":["../../../../packages/engine-s3-plugin/src/S3ObjectAuthorizator.ts"],"sourcesContent":["// eslint-disable-next-line @typescript-eslint/triple-slash-reference\n/// <reference path=\"../types/picomatch/index.d.ts\" />\nimport pm from 'picomatch'\nimport { ForbiddenError } from '@contember/graphql-utils'\n\nexport type S3ObjectUploadRule = {\n\tpattern: string\n\tmaxSize?: number\n\tmatcher?: (key: string) => boolean\n}\n\nexport type S3ObjectReadRule = {\n\tpattern: string\n\tmatcher?: (key: string) => boolean\n}\n\nexport class S3ObjectAuthorizator {\n\tprivate readonly uploadRules: S3ObjectUploadRule[]\n\tprivate readonly readRules: S3ObjectReadRule[]\n\n\tconstructor(\n\t\tuploadRules: Omit<S3ObjectUploadRule, 'matcher'>[],\n\t\treadRules: Omit<S3ObjectReadRule, 'matcher'>[],\n\t) {\n\t\tthis.uploadRules = uploadRules\n\t\tthis.readRules = readRules\n\t}\n\n\tpublic verifyReadAccess({ key }: { key: string }): void {\n\t\tfor (const rule of this.readRules) {\n\t\t\trule.matcher ??= pm(rule.pattern)\n\n\t\t\tif (rule.matcher(key)) {\n\t\t\t\treturn\n\t\t\t}\n\t\t}\n\n\t\tthrow new ForbiddenError(`Read access forbidden for object key ${key}`)\n\t}\n\n\tpublic verifyUploadAccess({ key, size }: { key: string; size: number | null }): void {\n\t\tconst matchedPatterns: S3ObjectUploadRule[] = []\n\n\t\tfor (const rule of this.uploadRules) {\n\t\t\trule.matcher ??= pm(rule.pattern)\n\n\t\t\tif (rule.matcher(key)) {\n\t\t\t\tif (!rule.maxSize || (size !== null && size <= rule.maxSize)) {\n\t\t\t\t\treturn\n\t\t\t\t}\n\t\t\t\tmatchedPatterns.push(rule)\n\t\t\t}\n\t\t}\n\n\t\tif (matchedPatterns.length > 0) {\n\t\t\tif (size === null) {\n\t\t\t\tthrow new ForbiddenError('File size must be provided')\n\t\t\t} else {\n\t\t\t\tthrow new ForbiddenError('Uploaded file is too large')\n\t\t\t}\n\t\t}\n\n\t\tthrow new ForbiddenError(`Upload access forbidden for object key ${key}`)\n\t}\n}\n"],"names":[],"mappings":";;;;;AAgBO,MAAM,qBAAqB;AAAA,EAIjC,YACC,aACA,WACC;AANe,kBAAA,MAAA,aAAA;AACA,kBAAA,MAAA,WAAA;AAMhB,SAAK,cAAc;AACnB,SAAK,YAAY;AAAA,EAAA;AAAA,EAGX,iBAAiB,EAAE,OAA8B;AAC5C,eAAA,QAAQ,KAAK,WAAW;AAClC,WAAK,YAAL,KAAK,UAAY,GAAG,KAAK,OAAO;AAE5B,UAAA,KAAK,QAAQ,GAAG,GAAG;AACtB;AAAA,MAAA;AAAA,IACD;AAGD,UAAM,IAAI,eAAe,wCAAwC,GAAG,EAAE;AAAA,EAAA;AAAA,EAGhE,mBAAmB,EAAE,KAAK,QAAoD;AACpF,UAAM,kBAAwC,CAAC;AAEpC,eAAA,QAAQ,KAAK,aAAa;AACpC,WAAK,YAAL,KAAK,UAAY,GAAG,KAAK,OAAO;AAE5B,UAAA,KAAK,QAAQ,GAAG,GAAG;AACtB,YAAI,CAAC,KAAK,WAAY,SAAS,QAAQ,QAAQ,KAAK,SAAU;AAC7D;AAAA,QAAA;AAED,wBAAgB,KAAK,IAAI;AAAA,MAAA;AAAA,IAC1B;AAGG,QAAA,gBAAgB,SAAS,GAAG;AAC/B,UAAI,SAAS,MAAM;AACZ,cAAA,IAAI,eAAe,4BAA4B;AAAA,MAAA,OAC/C;AACA,cAAA,IAAI,eAAe,4BAA4B;AAAA,MAAA;AAAA,IACtD;AAGD,UAAM,IAAI,eAAe,0CAA0C,GAAG,EAAE;AAAA,EAAA;AAE1E;"}

package/dist/development/src/S3SchemaContributor.cjs

@@ -1,107 +0,0 @@
-"use strict";
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const graphql = require("graphql");
-const Config = require("./Config.cjs");
-const S3SchemaTypes = require("./S3SchemaTypes.cjs");
-const S3ObjectAuthorizator = require("./S3ObjectAuthorizator.cjs");
-class S3SchemaContributor {
-  constructor(s3Factory, providers) {
-    this.s3Factory = s3Factory;
-    this.providers = providers;
-  }
-  getCacheKey({ project }) {
-    return project.s3 ? "yes" : "no";
-  }
-  createSchema(context) {
-    if (!context.project.s3) {
-      return void 0;
-    }
-    const rules = context.identity.projectRoles.flatMap(
-      (it) => Object.entries(context.schema.acl.roles[it]?.s3 || {})
-    );
-    const uploadRules = rules.filter(([, it]) => it.upload).map(([it, val]) => ({
-      pattern: it,
-      ...typeof val.upload !== "boolean" ? val.upload : {}
-    }));
-    const readRules = rules.filter(([, it]) => it.read).map(([it]) => ({
-      pattern: it
-    }));
-    if (uploadRules.length === 0 && readRules.length == 0) {
-      return void 0;
-    }
-    const authorizator = new S3ObjectAuthorizator.S3ObjectAuthorizator(uploadRules, readRules);
-    const uploadMutation = this.createUploadMutation(authorizator);
-    const readMutation = this.createReadMutation(authorizator);
-    const mutation = {
-      generateUploadUrl: uploadMutation,
-      generateReadUrl: readMutation
-    };
-    return {
-      mutation: new graphql.GraphQLObjectType({
-        name: "Mutation",
-        fields: () => mutation
-      }),
-      query: new graphql.GraphQLObjectType({
-        name: "Query",
-        fields: () => ({
-          s3DummyQuery: {
-            type: graphql.GraphQLString
-          }
-        })
-      })
-    };
-  }
-  createReadMutation(authorizator) {
-    return {
-      type: new graphql.GraphQLNonNull(S3SchemaTypes.S3SignedRead),
-      args: {
-        objectKey: {
-          type: new graphql.GraphQLNonNull(graphql.GraphQLString)
-        },
-        expiration: {
-          type: graphql.GraphQLInt
-        }
-      },
-      resolve: async (parent, args, ctx) => {
-        if (!ctx.project.s3) {
-          throw new graphql.GraphQLError("S3 is not configured for this project");
-        }
-        const s3Config = Config.resolveS3Config(ctx.project.s3);
-        const s3 = this.s3Factory.create(s3Config, this.providers, authorizator);
-        return s3.getSignedReadUrl({ objectKey: args.objectKey, expiration: args.expiration ?? null });
-      }
-    };
-  }
-  createUploadMutation(authorizator) {
-    return {
-      type: new graphql.GraphQLNonNull(S3SchemaTypes.S3SignedUpload),
-      args: {
-        input: { type: S3SchemaTypes.S3GenerateSignedUploadInput },
-        contentType: { type: graphql.GraphQLString, deprecationReason: "Use input.contentType" },
-        expiration: { type: graphql.GraphQLInt, deprecationReason: "Use input.expiration" },
-        prefix: { type: graphql.GraphQLString, deprecationReason: "Use input.prefix" },
-        acl: { type: S3SchemaTypes.S3Acl, deprecationReason: "Use input.acl" }
-      },
-      resolve: async (parent, args, ctx) => {
-        if (!ctx.project.s3) {
-          throw new graphql.GraphQLError("S3 is not configured for this project");
-        }
-        const s3Config = Config.resolveS3Config(ctx.project.s3);
-        const s3 = this.s3Factory.create(s3Config, this.providers, authorizator);
-        return s3.getSignedUploadUrl({
-          acl: args.input?.acl ?? args.acl ?? null,
-          contentDisposition: args.input?.contentDisposition ?? null,
-          contentType: args.input?.contentType ?? args.contentType ?? null,
-          expiration: args.input?.expiration ?? args.expiration ?? null,
-          extension: args.input?.extension ?? null,
-          fileName: args.input?.fileName ?? null,
-          prefix: args.input?.prefix ?? args.prefix ?? null,
-          suffix: args.input?.suffix ?? null,
-          size: args.input?.size ?? null
-        });
-      }
-    };
-  }
-}
-exports.S3SchemaContributor = S3SchemaContributor;
-//# sourceMappingURL=S3SchemaContributor.cjs.map

package/dist/development/src/S3SchemaContributor.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"S3SchemaContributor.cjs","sources":["../../../../packages/engine-s3-plugin/src/S3SchemaContributor.ts"],"sourcesContent":["import {\n\tGraphQLError,\n\tGraphQLFieldConfig,\n\tGraphQLInt,\n\tGraphQLNonNull,\n\tGraphQLObjectType,\n\tGraphQLSchema,\n\tGraphQLSchemaConfig,\n\tGraphQLString,\n} from 'graphql'\nimport { S3Service, S3ServiceFactory } from './S3Service'\nimport { Project3Config, resolveS3Config, S3Config } from './Config'\nimport { GraphQLSchemaContributor, GraphQLSchemaContributorContext, Providers } from '@contember/engine-plugins'\nimport * as types from './S3SchemaTypes'\nimport { S3Acl, S3GenerateSignedUploadInput, S3SignedRead, S3SignedUpload } from './S3SchemaTypes'\nimport { S3ObjectAuthorizator } from './S3ObjectAuthorizator'\n\ninterface Identity {\n\tprojectRoles: string[]\n}\n\nexport type S3SchemaUploadAcl =\n\t| boolean\n\t| {\n\t\tmaxSize?: number\n\t}\n\nexport type S3SchemaAcl = Record<\n\tstring, // public/*.jpg\n\t{\n\t\tread?: boolean\n\t\tupload?: S3SchemaUploadAcl\n\t}\n>\n\n\nexport class S3SchemaContributor implements GraphQLSchemaContributor {\n\tconstructor(\n\t\tprivate readonly s3Factory: S3ServiceFactory,\n\t\tprivate readonly providers: Providers,\n\t) {}\n\n\tgetCacheKey?({ project }: GraphQLSchemaContributorContext): string {\n\t\treturn project.s3 ? 'yes' : 'no'\n\t}\n\n\tcreateSchema(context: GraphQLSchemaContributorContext): GraphQLSchemaConfig | undefined {\n\t\tif (!context.project.s3) {\n\t\t\treturn undefined\n\t\t}\n\t\tconst rules = context.identity.projectRoles.flatMap(it =>\n\t\t\tObject.entries((context.schema.acl.roles[it]?.s3 as S3SchemaAcl) || {}),\n\t\t)\n\n\n\t\tconst uploadRules = rules.filter(([, it]) => it.upload).map(([it, val]) => ({\n\t\t\tpattern: it,\n\t\t\t...(typeof val.upload !== 'boolean' ? val.upload : {}),\n\t\t}))\n\t\tconst readRules = rules.filter(([, it]) => it.read).map(([it]) => ({\n\t\t\tpattern: it,\n\t\t}))\n\n\t\tif (uploadRules.length === 0 && readRules.length == 0) {\n\t\t\treturn undefined\n\t\t}\n\n\t\tconst authorizator = new S3ObjectAuthorizator(uploadRules, readRules)\n\t\tconst uploadMutation = this.createUploadMutation(authorizator)\n\t\tconst readMutation = this.createReadMutation(authorizator)\n\t\tconst mutation = {\n\t\t\tgenerateUploadUrl: uploadMutation as GraphQLFieldConfig<any, any, any>,\n\t\t\tgenerateReadUrl: readMutation,\n\t\t}\n\t\treturn {\n\t\t\tmutation: new GraphQLObjectType({\n\t\t\t\tname: 'Mutation',\n\t\t\t\tfields: () => mutation,\n\t\t\t}),\n\t\t\tquery: new GraphQLObjectType({\n\t\t\t\tname: 'Query',\n\t\t\t\tfields: () => ({\n\t\t\t\t\ts3DummyQuery: {\n\t\t\t\t\t\ttype: GraphQLString,\n\t\t\t\t\t},\n\t\t\t\t}),\n\t\t\t}),\n\t\t}\n\t}\n\n\tprivate createReadMutation(authorizator: S3ObjectAuthorizator): GraphQLFieldConfig<any, { project: Project3Config }, any> {\n\n\t\treturn {\n\t\t\ttype: new GraphQLNonNull(S3SignedRead),\n\t\t\targs: {\n\t\t\t\tobjectKey: {\n\t\t\t\t\ttype: new GraphQLNonNull(GraphQLString),\n\t\t\t\t},\n\t\t\t\texpiration: {\n\t\t\t\t\ttype: GraphQLInt,\n\t\t\t\t},\n\t\t\t},\n\t\t\tresolve: async (parent: any, args: { objectKey: string; expiration?: number }, ctx: { project: Project3Config }) => {\n\t\t\t\tif (!ctx.project.s3) {\n\t\t\t\t\tthrow new GraphQLError('S3 is not configured for this project')\n\t\t\t\t}\n\t\t\t\tconst s3Config = resolveS3Config(ctx.project.s3)\n\t\t\t\tconst s3 = this.s3Factory.create(s3Config, this.providers, authorizator)\n\t\t\t\treturn s3.getSignedReadUrl({ objectKey: args.objectKey, expiration: args.expiration ?? null })\n\t\t\t},\n\t\t} as GraphQLFieldConfig<any, any, any>\n\t}\n\n\tprivate createUploadMutation(authorizator: S3ObjectAuthorizator): GraphQLFieldConfig<any, any, any> {\n\t\treturn {\n\t\t\ttype: new GraphQLNonNull(S3SignedUpload),\n\t\t\targs: {\n\t\t\t\tinput: { type: types.S3GenerateSignedUploadInput },\n\t\t\t\tcontentType: { type: GraphQLString, deprecationReason: 'Use input.contentType' },\n\t\t\t\texpiration: { type: GraphQLInt, deprecationReason: 'Use input.expiration' },\n\t\t\t\tprefix: { type: GraphQLString, deprecationReason: 'Use input.prefix' },\n\t\t\t\tacl: { type: types.S3Acl, deprecationReason: 'Use input.acl' },\n\t\t\t},\n\t\t\tresolve: async (\n\t\t\t\tparent: any,\n\t\t\t\targs: { input?: Partial<S3GenerateSignedUploadInput>; contentType?: string; acl?: S3Acl; expiration?: number; prefix?: string },\n\t\t\t\tctx: { project: Project3Config },\n\t\t\t) => {\n\t\t\t\tif (!ctx.project.s3) {\n\t\t\t\t\tthrow new GraphQLError('S3 is not configured for this project')\n\t\t\t\t}\n\t\t\t\tconst s3Config = resolveS3Config(ctx.project.s3)\n\t\t\t\tconst s3 = this.s3Factory.create(s3Config, this.providers, authorizator)\n\t\t\t\treturn s3.getSignedUploadUrl({\n\t\t\t\t\tacl: args.input?.acl ?? args.acl ?? null,\n\t\t\t\t\tcontentDisposition: args.input?.contentDisposition ?? null,\n\t\t\t\t\tcontentType: args.input?.contentType ?? args.contentType ?? null,\n\t\t\t\t\texpiration: args.input?.expiration ?? args.expiration ?? null,\n\t\t\t\t\textension: args.input?.extension ?? null,\n\t\t\t\t\tfileName: args.input?.fileName ?? null,\n\t\t\t\t\tprefix: args.input?.prefix ?? args.prefix ?? null,\n\t\t\t\t\tsuffix: args.input?.suffix ?? null,\n\t\t\t\t\tsize: args.input?.size ?? null,\n\t\t\t\t})\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":["S3ObjectAuthorizator","GraphQLObjectType","GraphQLString","GraphQLNonNull","S3SignedRead","GraphQLInt","GraphQLError","resolveS3Config","S3SignedUpload","types.S3GenerateSignedUploadInput","types.S3Acl"],"mappings":";;;;;;AAoCO,MAAM,oBAAwD;AAAA,EACpE,YACkB,WACA,WAChB;AAFgB,SAAA,YAAA;AACA,SAAA,YAAA;AAAA,EAAA;AAAA,EAGlB,YAAa,EAAE,WAAoD;AAC3D,WAAA,QAAQ,KAAK,QAAQ;AAAA,EAAA;AAAA,EAG7B,aAAa,SAA2E;AACnF,QAAA,CAAC,QAAQ,QAAQ,IAAI;AACjB,aAAA;AAAA,IAAA;AAEF,UAAA,QAAQ,QAAQ,SAAS,aAAa;AAAA,MAAQ,CAAA,OACnD,OAAO,QAAS,QAAQ,OAAO,IAAI,MAAM,EAAE,GAAG,MAAsB,CAAE,CAAA;AAAA,IACvE;AAGA,UAAM,cAAc,MAAM,OAAO,CAAC,CAAG,EAAA,EAAE,MAAM,GAAG,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,GAAG,OAAO;AAAA,MAC3E,SAAS;AAAA,MACT,GAAI,OAAO,IAAI,WAAW,YAAY,IAAI,SAAS,CAAA;AAAA,IAAC,EACnD;AACF,UAAM,YAAY,MAAM,OAAO,CAAC,CAAA,EAAG,EAAE,MAAM,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,OAAO;AAAA,MAClE,SAAS;AAAA,IAAA,EACR;AAEF,QAAI,YAAY,WAAW,KAAK,UAAU,UAAU,GAAG;AAC/C,aAAA;AAAA,IAAA;AAGR,UAAM,eAAe,IAAIA,0CAAqB,aAAa,SAAS;AAC9D,UAAA,iBAAiB,KAAK,qBAAqB,YAAY;AACvD,UAAA,eAAe,KAAK,mBAAmB,YAAY;AACzD,UAAM,WAAW;AAAA,MAChB,mBAAmB;AAAA,MACnB,iBAAiB;AAAA,IAClB;AACO,WAAA;AAAA,MACN,UAAU,IAAIC,QAAAA,kBAAkB;AAAA,QAC/B,MAAM;AAAA,QACN,QAAQ,MAAM;AAAA,MAAA,CACd;AAAA,MACD,OAAO,IAAIA,QAAAA,kBAAkB;AAAA,QAC5B,MAAM;AAAA,QACN,QAAQ,OAAO;AAAA,UACd,cAAc;AAAA,YACb,MAAMC,QAAAA;AAAAA,UAAA;AAAA,QAER;AAAA,MACA,CAAA;AAAA,IACF;AAAA,EAAA;AAAA,EAGO,mBAAmB,cAA+F;AAElH,WAAA;AAAA,MACN,MAAM,IAAIC,QAAA,eAAeC,0BAAY;AAAA,MACrC,MAAM;AAAA,QACL,WAAW;AAAA,UACV,MAAM,IAAID,QAAAA,eAAeD,QAAa,aAAA;AAAA,QACvC;AAAA,QACA,YAAY;AAAA,UACX,MAAMG,QAAAA;AAAAA,QAAA;AAAA,MAER;AAAA,MACA,SAAS,OAAO,QAAa,MAAkD,QAAqC;AAC/G,YAAA,CAAC,IAAI,QAAQ,IAAI;AACd,gBAAA,IAAIC,qBAAa,uCAAuC;AAAA,QAAA;AAE/D,cAAM,WAAWC,OAAA,gBAAgB,IAAI,QAAQ,EAAE;AAC/C,cAAM,KAAK,KAAK,UAAU,OAAO,UAAU,KAAK,WAAW,YAAY;AAChE,eAAA,GAAG,iBAAiB,EAAE,WAAW,KAAK,WAAW,YAAY,KAAK,cAAc,MAAM;AAAA,MAAA;AAAA,IAE/F;AAAA,EAAA;AAAA,EAGO,qBAAqB,cAAuE;AAC5F,WAAA;AAAA,MACN,MAAM,IAAIJ,QAAA,eAAeK,4BAAc;AAAA,MACvC,MAAM;AAAA,QACL,OAAO,EAAE,MAAMC,0CAAkC;AAAA,QACjD,aAAa,EAAE,MAAMP,uBAAe,mBAAmB,wBAAwB;AAAA,QAC/E,YAAY,EAAE,MAAMG,oBAAY,mBAAmB,uBAAuB;AAAA,QAC1E,QAAQ,EAAE,MAAMH,uBAAe,mBAAmB,mBAAmB;AAAA,QACrE,KAAK,EAAE,MAAMQ,cAAM,OAAO,mBAAmB,gBAAgB;AAAA,MAC9D;AAAA,MACA,SAAS,OACR,QACA,MACA,QACI;AACA,YAAA,CAAC,IAAI,QAAQ,IAAI;AACd,gBAAA,IAAIJ,qBAAa,uCAAuC;AAAA,QAAA;AAE/D,cAAM,WAAWC,OAAA,gBAAgB,IAAI,QAAQ,EAAE;AAC/C,cAAM,KAAK,KAAK,UAAU,OAAO,UAAU,KAAK,WAAW,YAAY;AACvE,eAAO,GAAG,mBAAmB;AAAA,UAC5B,KAAK,KAAK,OAAO,OAAO,KAAK,OAAO;AAAA,UACpC,oBAAoB,KAAK,OAAO,sBAAsB;AAAA,UACtD,aAAa,KAAK,OAAO,eAAe,KAAK,eAAe;AAAA,UAC5D,YAAY,KAAK,OAAO,cAAc,KAAK,cAAc;AAAA,UACzD,WAAW,KAAK,OAAO,aAAa;AAAA,UACpC,UAAU,KAAK,OAAO,YAAY;AAAA,UAClC,QAAQ,KAAK,OAAO,UAAU,KAAK,UAAU;AAAA,UAC7C,QAAQ,KAAK,OAAO,UAAU;AAAA,UAC9B,MAAM,KAAK,OAAO,QAAQ;AAAA,QAAA,CAC1B;AAAA,MAAA;AAAA,IAEH;AAAA,EAAA;AAEF;;"}

package/dist/development/src/S3SchemaContributor.js

@@ -1,107 +0,0 @@
-import { GraphQLObjectType, GraphQLString, GraphQLNonNull, GraphQLInt, GraphQLError } from "graphql";
-import { resolveS3Config } from "./Config.js";
-import { S3SignedRead, S3SignedUpload, S3GenerateSignedUploadInput, S3Acl } from "./S3SchemaTypes.js";
-import { S3ObjectAuthorizator } from "./S3ObjectAuthorizator.js";
-class S3SchemaContributor {
-  constructor(s3Factory, providers) {
-    this.s3Factory = s3Factory;
-    this.providers = providers;
-  }
-  getCacheKey({ project }) {
-    return project.s3 ? "yes" : "no";
-  }
-  createSchema(context) {
-    if (!context.project.s3) {
-      return void 0;
-    }
-    const rules = context.identity.projectRoles.flatMap(
-      (it) => Object.entries(context.schema.acl.roles[it]?.s3 || {})
-    );
-    const uploadRules = rules.filter(([, it]) => it.upload).map(([it, val]) => ({
-      pattern: it,
-      ...typeof val.upload !== "boolean" ? val.upload : {}
-    }));
-    const readRules = rules.filter(([, it]) => it.read).map(([it]) => ({
-      pattern: it
-    }));
-    if (uploadRules.length === 0 && readRules.length == 0) {
-      return void 0;
-    }
-    const authorizator = new S3ObjectAuthorizator(uploadRules, readRules);
-    const uploadMutation = this.createUploadMutation(authorizator);
-    const readMutation = this.createReadMutation(authorizator);
-    const mutation = {
-      generateUploadUrl: uploadMutation,
-      generateReadUrl: readMutation
-    };
-    return {
-      mutation: new GraphQLObjectType({
-        name: "Mutation",
-        fields: () => mutation
-      }),
-      query: new GraphQLObjectType({
-        name: "Query",
-        fields: () => ({
-          s3DummyQuery: {
-            type: GraphQLString
-          }
-        })
-      })
-    };
-  }
-  createReadMutation(authorizator) {
-    return {
-      type: new GraphQLNonNull(S3SignedRead),
-      args: {
-        objectKey: {
-          type: new GraphQLNonNull(GraphQLString)
-        },
-        expiration: {
-          type: GraphQLInt
-        }
-      },
-      resolve: async (parent, args, ctx) => {
-        if (!ctx.project.s3) {
-          throw new GraphQLError("S3 is not configured for this project");
-        }
-        const s3Config = resolveS3Config(ctx.project.s3);
-        const s3 = this.s3Factory.create(s3Config, this.providers, authorizator);
-        return s3.getSignedReadUrl({ objectKey: args.objectKey, expiration: args.expiration ?? null });
-      }
-    };
-  }
-  createUploadMutation(authorizator) {
-    return {
-      type: new GraphQLNonNull(S3SignedUpload),
-      args: {
-        input: { type: S3GenerateSignedUploadInput },
-        contentType: { type: GraphQLString, deprecationReason: "Use input.contentType" },
-        expiration: { type: GraphQLInt, deprecationReason: "Use input.expiration" },
-        prefix: { type: GraphQLString, deprecationReason: "Use input.prefix" },
-        acl: { type: S3Acl, deprecationReason: "Use input.acl" }
-      },
-      resolve: async (parent, args, ctx) => {
-        if (!ctx.project.s3) {
-          throw new GraphQLError("S3 is not configured for this project");
-        }
-        const s3Config = resolveS3Config(ctx.project.s3);
-        const s3 = this.s3Factory.create(s3Config, this.providers, authorizator);
-        return s3.getSignedUploadUrl({
-          acl: args.input?.acl ?? args.acl ?? null,
-          contentDisposition: args.input?.contentDisposition ?? null,
-          contentType: args.input?.contentType ?? args.contentType ?? null,
-          expiration: args.input?.expiration ?? args.expiration ?? null,
-          extension: args.input?.extension ?? null,
-          fileName: args.input?.fileName ?? null,
-          prefix: args.input?.prefix ?? args.prefix ?? null,
-          suffix: args.input?.suffix ?? null,
-          size: args.input?.size ?? null
-        });
-      }
-    };
-  }
-}
-export {
-  S3SchemaContributor
-};
-//# sourceMappingURL=S3SchemaContributor.js.map

package/dist/development/src/S3SchemaContributor.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"S3SchemaContributor.js","sources":["../../../../packages/engine-s3-plugin/src/S3SchemaContributor.ts"],"sourcesContent":["import {\n\tGraphQLError,\n\tGraphQLFieldConfig,\n\tGraphQLInt,\n\tGraphQLNonNull,\n\tGraphQLObjectType,\n\tGraphQLSchema,\n\tGraphQLSchemaConfig,\n\tGraphQLString,\n} from 'graphql'\nimport { S3Service, S3ServiceFactory } from './S3Service'\nimport { Project3Config, resolveS3Config, S3Config } from './Config'\nimport { GraphQLSchemaContributor, GraphQLSchemaContributorContext, Providers } from '@contember/engine-plugins'\nimport * as types from './S3SchemaTypes'\nimport { S3Acl, S3GenerateSignedUploadInput, S3SignedRead, S3SignedUpload } from './S3SchemaTypes'\nimport { S3ObjectAuthorizator } from './S3ObjectAuthorizator'\n\ninterface Identity {\n\tprojectRoles: string[]\n}\n\nexport type S3SchemaUploadAcl =\n\t| boolean\n\t| {\n\t\tmaxSize?: number\n\t}\n\nexport type S3SchemaAcl = Record<\n\tstring, // public/*.jpg\n\t{\n\t\tread?: boolean\n\t\tupload?: S3SchemaUploadAcl\n\t}\n>\n\n\nexport class S3SchemaContributor implements GraphQLSchemaContributor {\n\tconstructor(\n\t\tprivate readonly s3Factory: S3ServiceFactory,\n\t\tprivate readonly providers: Providers,\n\t) {}\n\n\tgetCacheKey?({ project }: GraphQLSchemaContributorContext): string {\n\t\treturn project.s3 ? 'yes' : 'no'\n\t}\n\n\tcreateSchema(context: GraphQLSchemaContributorContext): GraphQLSchemaConfig | undefined {\n\t\tif (!context.project.s3) {\n\t\t\treturn undefined\n\t\t}\n\t\tconst rules = context.identity.projectRoles.flatMap(it =>\n\t\t\tObject.entries((context.schema.acl.roles[it]?.s3 as S3SchemaAcl) || {}),\n\t\t)\n\n\n\t\tconst uploadRules = rules.filter(([, it]) => it.upload).map(([it, val]) => ({\n\t\t\tpattern: it,\n\t\t\t...(typeof val.upload !== 'boolean' ? val.upload : {}),\n\t\t}))\n\t\tconst readRules = rules.filter(([, it]) => it.read).map(([it]) => ({\n\t\t\tpattern: it,\n\t\t}))\n\n\t\tif (uploadRules.length === 0 && readRules.length == 0) {\n\t\t\treturn undefined\n\t\t}\n\n\t\tconst authorizator = new S3ObjectAuthorizator(uploadRules, readRules)\n\t\tconst uploadMutation = this.createUploadMutation(authorizator)\n\t\tconst readMutation = this.createReadMutation(authorizator)\n\t\tconst mutation = {\n\t\t\tgenerateUploadUrl: uploadMutation as GraphQLFieldConfig<any, any, any>,\n\t\t\tgenerateReadUrl: readMutation,\n\t\t}\n\t\treturn {\n\t\t\tmutation: new GraphQLObjectType({\n\t\t\t\tname: 'Mutation',\n\t\t\t\tfields: () => mutation,\n\t\t\t}),\n\t\t\tquery: new GraphQLObjectType({\n\t\t\t\tname: 'Query',\n\t\t\t\tfields: () => ({\n\t\t\t\t\ts3DummyQuery: {\n\t\t\t\t\t\ttype: GraphQLString,\n\t\t\t\t\t},\n\t\t\t\t}),\n\t\t\t}),\n\t\t}\n\t}\n\n\tprivate createReadMutation(authorizator: S3ObjectAuthorizator): GraphQLFieldConfig<any, { project: Project3Config }, any> {\n\n\t\treturn {\n\t\t\ttype: new GraphQLNonNull(S3SignedRead),\n\t\t\targs: {\n\t\t\t\tobjectKey: {\n\t\t\t\t\ttype: new GraphQLNonNull(GraphQLString),\n\t\t\t\t},\n\t\t\t\texpiration: {\n\t\t\t\t\ttype: GraphQLInt,\n\t\t\t\t},\n\t\t\t},\n\t\t\tresolve: async (parent: any, args: { objectKey: string; expiration?: number }, ctx: { project: Project3Config }) => {\n\t\t\t\tif (!ctx.project.s3) {\n\t\t\t\t\tthrow new GraphQLError('S3 is not configured for this project')\n\t\t\t\t}\n\t\t\t\tconst s3Config = resolveS3Config(ctx.project.s3)\n\t\t\t\tconst s3 = this.s3Factory.create(s3Config, this.providers, authorizator)\n\t\t\t\treturn s3.getSignedReadUrl({ objectKey: args.objectKey, expiration: args.expiration ?? null })\n\t\t\t},\n\t\t} as GraphQLFieldConfig<any, any, any>\n\t}\n\n\tprivate createUploadMutation(authorizator: S3ObjectAuthorizator): GraphQLFieldConfig<any, any, any> {\n\t\treturn {\n\t\t\ttype: new GraphQLNonNull(S3SignedUpload),\n\t\t\targs: {\n\t\t\t\tinput: { type: types.S3GenerateSignedUploadInput },\n\t\t\t\tcontentType: { type: GraphQLString, deprecationReason: 'Use input.contentType' },\n\t\t\t\texpiration: { type: GraphQLInt, deprecationReason: 'Use input.expiration' },\n\t\t\t\tprefix: { type: GraphQLString, deprecationReason: 'Use input.prefix' },\n\t\t\t\tacl: { type: types.S3Acl, deprecationReason: 'Use input.acl' },\n\t\t\t},\n\t\t\tresolve: async (\n\t\t\t\tparent: any,\n\t\t\t\targs: { input?: Partial<S3GenerateSignedUploadInput>; contentType?: string; acl?: S3Acl; expiration?: number; prefix?: string },\n\t\t\t\tctx: { project: Project3Config },\n\t\t\t) => {\n\t\t\t\tif (!ctx.project.s3) {\n\t\t\t\t\tthrow new GraphQLError('S3 is not configured for this project')\n\t\t\t\t}\n\t\t\t\tconst s3Config = resolveS3Config(ctx.project.s3)\n\t\t\t\tconst s3 = this.s3Factory.create(s3Config, this.providers, authorizator)\n\t\t\t\treturn s3.getSignedUploadUrl({\n\t\t\t\t\tacl: args.input?.acl ?? args.acl ?? null,\n\t\t\t\t\tcontentDisposition: args.input?.contentDisposition ?? null,\n\t\t\t\t\tcontentType: args.input?.contentType ?? args.contentType ?? null,\n\t\t\t\t\texpiration: args.input?.expiration ?? args.expiration ?? null,\n\t\t\t\t\textension: args.input?.extension ?? null,\n\t\t\t\t\tfileName: args.input?.fileName ?? null,\n\t\t\t\t\tprefix: args.input?.prefix ?? args.prefix ?? null,\n\t\t\t\t\tsuffix: args.input?.suffix ?? null,\n\t\t\t\t\tsize: args.input?.size ?? null,\n\t\t\t\t})\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":["types.S3GenerateSignedUploadInput","types.S3Acl"],"mappings":";;;;AAoCO,MAAM,oBAAwD;AAAA,EACpE,YACkB,WACA,WAChB;AAFgB,SAAA,YAAA;AACA,SAAA,YAAA;AAAA,EAAA;AAAA,EAGlB,YAAa,EAAE,WAAoD;AAC3D,WAAA,QAAQ,KAAK,QAAQ;AAAA,EAAA;AAAA,EAG7B,aAAa,SAA2E;AACnF,QAAA,CAAC,QAAQ,QAAQ,IAAI;AACjB,aAAA;AAAA,IAAA;AAEF,UAAA,QAAQ,QAAQ,SAAS,aAAa;AAAA,MAAQ,CAAA,OACnD,OAAO,QAAS,QAAQ,OAAO,IAAI,MAAM,EAAE,GAAG,MAAsB,CAAE,CAAA;AAAA,IACvE;AAGA,UAAM,cAAc,MAAM,OAAO,CAAC,CAAG,EAAA,EAAE,MAAM,GAAG,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,GAAG,OAAO;AAAA,MAC3E,SAAS;AAAA,MACT,GAAI,OAAO,IAAI,WAAW,YAAY,IAAI,SAAS,CAAA;AAAA,IAAC,EACnD;AACF,UAAM,YAAY,MAAM,OAAO,CAAC,CAAA,EAAG,EAAE,MAAM,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,OAAO;AAAA,MAClE,SAAS;AAAA,IAAA,EACR;AAEF,QAAI,YAAY,WAAW,KAAK,UAAU,UAAU,GAAG;AAC/C,aAAA;AAAA,IAAA;AAGR,UAAM,eAAe,IAAI,qBAAqB,aAAa,SAAS;AAC9D,UAAA,iBAAiB,KAAK,qBAAqB,YAAY;AACvD,UAAA,eAAe,KAAK,mBAAmB,YAAY;AACzD,UAAM,WAAW;AAAA,MAChB,mBAAmB;AAAA,MACnB,iBAAiB;AAAA,IAClB;AACO,WAAA;AAAA,MACN,UAAU,IAAI,kBAAkB;AAAA,QAC/B,MAAM;AAAA,QACN,QAAQ,MAAM;AAAA,MAAA,CACd;AAAA,MACD,OAAO,IAAI,kBAAkB;AAAA,QAC5B,MAAM;AAAA,QACN,QAAQ,OAAO;AAAA,UACd,cAAc;AAAA,YACb,MAAM;AAAA,UAAA;AAAA,QAER;AAAA,MACA,CAAA;AAAA,IACF;AAAA,EAAA;AAAA,EAGO,mBAAmB,cAA+F;AAElH,WAAA;AAAA,MACN,MAAM,IAAI,eAAe,YAAY;AAAA,MACrC,MAAM;AAAA,QACL,WAAW;AAAA,UACV,MAAM,IAAI,eAAe,aAAa;AAAA,QACvC;AAAA,QACA,YAAY;AAAA,UACX,MAAM;AAAA,QAAA;AAAA,MAER;AAAA,MACA,SAAS,OAAO,QAAa,MAAkD,QAAqC;AAC/G,YAAA,CAAC,IAAI,QAAQ,IAAI;AACd,gBAAA,IAAI,aAAa,uCAAuC;AAAA,QAAA;AAE/D,cAAM,WAAW,gBAAgB,IAAI,QAAQ,EAAE;AAC/C,cAAM,KAAK,KAAK,UAAU,OAAO,UAAU,KAAK,WAAW,YAAY;AAChE,eAAA,GAAG,iBAAiB,EAAE,WAAW,KAAK,WAAW,YAAY,KAAK,cAAc,MAAM;AAAA,MAAA;AAAA,IAE/F;AAAA,EAAA;AAAA,EAGO,qBAAqB,cAAuE;AAC5F,WAAA;AAAA,MACN,MAAM,IAAI,eAAe,cAAc;AAAA,MACvC,MAAM;AAAA,QACL,OAAO,EAAE,MAAMA,4BAAkC;AAAA,QACjD,aAAa,EAAE,MAAM,eAAe,mBAAmB,wBAAwB;AAAA,QAC/E,YAAY,EAAE,MAAM,YAAY,mBAAmB,uBAAuB;AAAA,QAC1E,QAAQ,EAAE,MAAM,eAAe,mBAAmB,mBAAmB;AAAA,QACrE,KAAK,EAAE,MAAMC,OAAa,mBAAmB,gBAAgB;AAAA,MAC9D;AAAA,MACA,SAAS,OACR,QACA,MACA,QACI;AACA,YAAA,CAAC,IAAI,QAAQ,IAAI;AACd,gBAAA,IAAI,aAAa,uCAAuC;AAAA,QAAA;AAE/D,cAAM,WAAW,gBAAgB,IAAI,QAAQ,EAAE;AAC/C,cAAM,KAAK,KAAK,UAAU,OAAO,UAAU,KAAK,WAAW,YAAY;AACvE,eAAO,GAAG,mBAAmB;AAAA,UAC5B,KAAK,KAAK,OAAO,OAAO,KAAK,OAAO;AAAA,UACpC,oBAAoB,KAAK,OAAO,sBAAsB;AAAA,UACtD,aAAa,KAAK,OAAO,eAAe,KAAK,eAAe;AAAA,UAC5D,YAAY,KAAK,OAAO,cAAc,KAAK,cAAc;AAAA,UACzD,WAAW,KAAK,OAAO,aAAa;AAAA,UACpC,UAAU,KAAK,OAAO,YAAY;AAAA,UAClC,QAAQ,KAAK,OAAO,UAAU,KAAK,UAAU;AAAA,UAC7C,QAAQ,KAAK,OAAO,UAAU;AAAA,UAC9B,MAAM,KAAK,OAAO,QAAQ;AAAA,QAAA,CAC1B;AAAA,MAAA;AAAA,IAEH;AAAA,EAAA;AAEF;"}

package/dist/development/src/S3SchemaTypes.cjs

@@ -1,71 +0,0 @@
-"use strict";
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const graphql = require("graphql");
-const S3Header = new graphql.GraphQLObjectType({
-  name: "S3Header",
-  fields: {
-    key: { type: new graphql.GraphQLNonNull(graphql.GraphQLString) },
-    value: { type: new graphql.GraphQLNonNull(graphql.GraphQLString) }
-  }
-});
-const S3ContentDisposition = new graphql.GraphQLEnumType({
-  name: "S33ContentDisposition",
-  values: {
-    ATTACHMENT: {},
-    INLINE: {}
-  }
-});
-const S3SignedRead = new graphql.GraphQLObjectType({
-  name: "S3SignedRead",
-  fields: {
-    url: { type: new graphql.GraphQLNonNull(graphql.GraphQLString) },
-    headers: {
-      type: new graphql.GraphQLNonNull(new graphql.GraphQLList(new graphql.GraphQLNonNull(S3Header)))
-    },
-    method: { type: new graphql.GraphQLNonNull(graphql.GraphQLString) },
-    objectKey: { type: new graphql.GraphQLNonNull(graphql.GraphQLString) },
-    bucket: { type: new graphql.GraphQLNonNull(graphql.GraphQLString) }
-  }
-});
-const S3SignedUpload = new graphql.GraphQLObjectType({
-  name: "S3SignedUpload",
-  fields: {
-    url: { type: new graphql.GraphQLNonNull(graphql.GraphQLString) },
-    headers: {
-      type: new graphql.GraphQLNonNull(new graphql.GraphQLList(new graphql.GraphQLNonNull(S3Header)))
-    },
-    method: { type: new graphql.GraphQLNonNull(graphql.GraphQLString) },
-    objectKey: { type: new graphql.GraphQLNonNull(graphql.GraphQLString) },
-    bucket: { type: new graphql.GraphQLNonNull(graphql.GraphQLString) },
-    publicUrl: { type: new graphql.GraphQLNonNull(graphql.GraphQLString) }
-  }
-});
-const S3Acl = new graphql.GraphQLEnumType({
-  name: "S3Acl",
-  values: {
-    PUBLIC_READ: {},
-    PRIVATE: {},
-    NONE: {}
-  }
-});
-const S3GenerateSignedUploadInput = new graphql.GraphQLInputObjectType({
-  name: "S3GenerateSignedUploadInput",
-  fields: {
-    contentType: { type: graphql.GraphQLString },
-    extension: { type: graphql.GraphQLString, description: "If not provided, extension is detected from a content-type." },
-    expiration: { type: graphql.GraphQLInt, description: "Signed URL expiration." },
-    size: { type: graphql.GraphQLInt, description: "Uploaded file size. Required when you enable ACL size limits." },
-    prefix: { type: graphql.GraphQLString, description: 'Can be used as a "directory".' },
-    suffix: { type: graphql.GraphQLString, description: "Suffix after generated id and before the extension." },
-    fileName: { type: graphql.GraphQLString, description: "This only affects Content-disposition header. Does not affect actual object key." },
-    contentDisposition: { type: S3ContentDisposition },
-    acl: { type: S3Acl, description: "If not supported by S3 provider, an error is thrown." }
-  }
-});
-exports.S3Acl = S3Acl;
-exports.S3ContentDisposition = S3ContentDisposition;
-exports.S3GenerateSignedUploadInput = S3GenerateSignedUploadInput;
-exports.S3Header = S3Header;
-exports.S3SignedRead = S3SignedRead;
-exports.S3SignedUpload = S3SignedUpload;
-//# sourceMappingURL=S3SchemaTypes.cjs.map

package/dist/development/src/S3SchemaTypes.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"S3SchemaTypes.cjs","sources":["../../../../packages/engine-s3-plugin/src/S3SchemaTypes.ts"],"sourcesContent":["import {\n\tGraphQLEnumType,\n\tGraphQLInputObjectType,\n\tGraphQLInt,\n\tGraphQLList,\n\tGraphQLNonNull,\n\tGraphQLObjectType,\n\tGraphQLString,\n} from 'graphql'\n\nexport const S3Header = new GraphQLObjectType({\n\tname: 'S3Header',\n\tfields: {\n\t\tkey: { type: new GraphQLNonNull(GraphQLString) },\n\t\tvalue: { type: new GraphQLNonNull(GraphQLString) },\n\t},\n})\n\nexport const S3ContentDisposition = new GraphQLEnumType({\n\tname: 'S33ContentDisposition', values: {\n\t\tATTACHMENT: {},\n\t\tINLINE: {},\n\t},\n})\nexport type S3ContentDisposition = 'ATTACHMENT' | 'INLINE'\n\nexport const S3SignedRead = new GraphQLObjectType({\n\tname: 'S3SignedRead',\n\tfields: {\n\t\turl: { type: new GraphQLNonNull(GraphQLString) },\n\t\theaders: {\n\t\t\ttype: new GraphQLNonNull(new GraphQLList(new GraphQLNonNull(S3Header))),\n\t\t},\n\t\tmethod: { type: new GraphQLNonNull(GraphQLString) },\n\t\tobjectKey: { type: new GraphQLNonNull(GraphQLString) },\n\t\tbucket: { type: new GraphQLNonNull(GraphQLString) },\n\t},\n})\n\nexport const S3SignedUpload = new GraphQLObjectType({\n\tname: 'S3SignedUpload',\n\tfields: {\n\t\turl: { type: new GraphQLNonNull(GraphQLString) },\n\t\theaders: {\n\t\t\ttype: new GraphQLNonNull(new GraphQLList(new GraphQLNonNull(S3Header))),\n\t\t},\n\t\tmethod: { type: new GraphQLNonNull(GraphQLString) },\n\t\tobjectKey: { type: new GraphQLNonNull(GraphQLString) },\n\t\tbucket: { type: new GraphQLNonNull(GraphQLString) },\n\t\tpublicUrl: { type: new GraphQLNonNull(GraphQLString) },\n\t},\n})\n\nexport const S3Acl = new GraphQLEnumType({\n\tname: 'S3Acl',\n\tvalues: {\n\t\tPUBLIC_READ: {},\n\t\tPRIVATE: {},\n\t\tNONE: {},\n\t},\n})\n\nexport type S3Acl = 'PUBLIC_READ' | 'PRIVATE' | 'NONE'\n\nexport const S3GenerateSignedUploadInput = new GraphQLInputObjectType({\n\tname: 'S3GenerateSignedUploadInput',\n\tfields: {\n\t\tcontentType: { type: GraphQLString },\n\t\textension: { type: GraphQLString, description: 'If not provided, extension is detected from a content-type.' },\n\t\texpiration: { type: GraphQLInt, description: 'Signed URL expiration.' },\n\t\tsize: { type: GraphQLInt, description: 'Uploaded file size. Required when you enable ACL size limits.' },\n\t\tprefix: { type: GraphQLString, description: 'Can be used as a \"directory\".' },\n\t\tsuffix: { type: GraphQLString, description: 'Suffix after generated id and before the extension.' },\n\t\tfileName: { type: GraphQLString, description: 'This only affects Content-disposition header. Does not affect actual object key.' },\n\t\tcontentDisposition: { type: S3ContentDisposition },\n\t\tacl: { type: S3Acl, description: 'If not supported by S3 provider, an error is thrown.' },\n\t},\n})\nexport interface S3GenerateSignedUploadInput {\n\tcontentType: null | string\n\textension: null | string\n\texpiration: null | number\n\tsize: null | number\n\tprefix: null | string\n\tsuffix: null | string\n\tfileName: null | string\n\tcontentDisposition: null | S3ContentDisposition\n\tacl: null | S3Acl\n}\n"],"names":["GraphQLObjectType","GraphQLNonNull","GraphQLString","GraphQLEnumType","GraphQLList","GraphQLInputObjectType","GraphQLInt"],"mappings":";;;AAUa,MAAA,WAAW,IAAIA,QAAAA,kBAAkB;AAAA,EAC7C,MAAM;AAAA,EACN,QAAQ;AAAA,IACP,KAAK,EAAE,MAAM,IAAIC,QAAA,eAAeC,QAAa,aAAA,EAAE;AAAA,IAC/C,OAAO,EAAE,MAAM,IAAID,QAAAA,eAAeC,QAAAA,aAAa,EAAE;AAAA,EAAA;AAEnD,CAAC;AAEY,MAAA,uBAAuB,IAAIC,QAAAA,gBAAgB;AAAA,EACvD,MAAM;AAAA,EAAyB,QAAQ;AAAA,IACtC,YAAY,CAAC;AAAA,IACb,QAAQ,CAAA;AAAA,EAAC;AAEX,CAAC;AAGY,MAAA,eAAe,IAAIH,QAAAA,kBAAkB;AAAA,EACjD,MAAM;AAAA,EACN,QAAQ;AAAA,IACP,KAAK,EAAE,MAAM,IAAIC,QAAA,eAAeC,QAAa,aAAA,EAAE;AAAA,IAC/C,SAAS;AAAA,MACR,MAAM,IAAID,QAAAA,eAAe,IAAIG,oBAAY,IAAIH,QAAAA,eAAe,QAAQ,CAAC,CAAC;AAAA,IACvE;AAAA,IACA,QAAQ,EAAE,MAAM,IAAIA,QAAA,eAAeC,QAAa,aAAA,EAAE;AAAA,IAClD,WAAW,EAAE,MAAM,IAAID,QAAA,eAAeC,QAAa,aAAA,EAAE;AAAA,IACrD,QAAQ,EAAE,MAAM,IAAID,QAAAA,eAAeC,QAAAA,aAAa,EAAE;AAAA,EAAA;AAEpD,CAAC;AAEY,MAAA,iBAAiB,IAAIF,QAAAA,kBAAkB;AAAA,EACnD,MAAM;AAAA,EACN,QAAQ;AAAA,IACP,KAAK,EAAE,MAAM,IAAIC,QAAA,eAAeC,QAAa,aAAA,EAAE;AAAA,IAC/C,SAAS;AAAA,MACR,MAAM,IAAID,QAAAA,eAAe,IAAIG,oBAAY,IAAIH,QAAAA,eAAe,QAAQ,CAAC,CAAC;AAAA,IACvE;AAAA,IACA,QAAQ,EAAE,MAAM,IAAIA,QAAA,eAAeC,QAAa,aAAA,EAAE;AAAA,IAClD,WAAW,EAAE,MAAM,IAAID,QAAA,eAAeC,QAAa,aAAA,EAAE;AAAA,IACrD,QAAQ,EAAE,MAAM,IAAID,QAAA,eAAeC,QAAa,aAAA,EAAE;AAAA,IAClD,WAAW,EAAE,MAAM,IAAID,QAAAA,eAAeC,QAAAA,aAAa,EAAE;AAAA,EAAA;AAEvD,CAAC;AAEY,MAAA,QAAQ,IAAIC,QAAAA,gBAAgB;AAAA,EACxC,MAAM;AAAA,EACN,QAAQ;AAAA,IACP,aAAa,CAAC;AAAA,IACd,SAAS,CAAC;AAAA,IACV,MAAM,CAAA;AAAA,EAAC;AAET,CAAC;AAIY,MAAA,8BAA8B,IAAIE,QAAAA,uBAAuB;AAAA,EACrE,MAAM;AAAA,EACN,QAAQ;AAAA,IACP,aAAa,EAAE,MAAMH,sBAAc;AAAA,IACnC,WAAW,EAAE,MAAMA,uBAAe,aAAa,8DAA8D;AAAA,IAC7G,YAAY,EAAE,MAAMI,oBAAY,aAAa,yBAAyB;AAAA,IACtE,MAAM,EAAE,MAAMA,oBAAY,aAAa,gEAAgE;AAAA,IACvG,QAAQ,EAAE,MAAMJ,uBAAe,aAAa,gCAAgC;AAAA,IAC5E,QAAQ,EAAE,MAAMA,uBAAe,aAAa,sDAAsD;AAAA,IAClG,UAAU,EAAE,MAAMA,uBAAe,aAAa,mFAAmF;AAAA,IACjI,oBAAoB,EAAE,MAAM,qBAAqB;AAAA,IACjD,KAAK,EAAE,MAAM,OAAO,aAAa,uDAAuD;AAAA,EAAA;AAE1F,CAAC;;;;;;;"}

package/dist/development/src/S3SchemaTypes.js

@@ -1,71 +0,0 @@
-import { GraphQLObjectType, GraphQLNonNull, GraphQLString, GraphQLEnumType, GraphQLList, GraphQLInputObjectType, GraphQLInt } from "graphql";
-const S3Header = new GraphQLObjectType({
-  name: "S3Header",
-  fields: {
-    key: { type: new GraphQLNonNull(GraphQLString) },
-    value: { type: new GraphQLNonNull(GraphQLString) }
-  }
-});
-const S3ContentDisposition = new GraphQLEnumType({
-  name: "S33ContentDisposition",
-  values: {
-    ATTACHMENT: {},
-    INLINE: {}
-  }
-});
-const S3SignedRead = new GraphQLObjectType({
-  name: "S3SignedRead",
-  fields: {
-    url: { type: new GraphQLNonNull(GraphQLString) },
-    headers: {
-      type: new GraphQLNonNull(new GraphQLList(new GraphQLNonNull(S3Header)))
-    },
-    method: { type: new GraphQLNonNull(GraphQLString) },
-    objectKey: { type: new GraphQLNonNull(GraphQLString) },
-    bucket: { type: new GraphQLNonNull(GraphQLString) }
-  }
-});
-const S3SignedUpload = new GraphQLObjectType({
-  name: "S3SignedUpload",
-  fields: {
-    url: { type: new GraphQLNonNull(GraphQLString) },
-    headers: {
-      type: new GraphQLNonNull(new GraphQLList(new GraphQLNonNull(S3Header)))
-    },
-    method: { type: new GraphQLNonNull(GraphQLString) },
-    objectKey: { type: new GraphQLNonNull(GraphQLString) },
-    bucket: { type: new GraphQLNonNull(GraphQLString) },
-    publicUrl: { type: new GraphQLNonNull(GraphQLString) }
-  }
-});
-const S3Acl = new GraphQLEnumType({
-  name: "S3Acl",
-  values: {
-    PUBLIC_READ: {},
-    PRIVATE: {},
-    NONE: {}
-  }
-});
-const S3GenerateSignedUploadInput = new GraphQLInputObjectType({
-  name: "S3GenerateSignedUploadInput",
-  fields: {
-    contentType: { type: GraphQLString },
-    extension: { type: GraphQLString, description: "If not provided, extension is detected from a content-type." },
-    expiration: { type: GraphQLInt, description: "Signed URL expiration." },
-    size: { type: GraphQLInt, description: "Uploaded file size. Required when you enable ACL size limits." },
-    prefix: { type: GraphQLString, description: 'Can be used as a "directory".' },
-    suffix: { type: GraphQLString, description: "Suffix after generated id and before the extension." },
-    fileName: { type: GraphQLString, description: "This only affects Content-disposition header. Does not affect actual object key." },
-    contentDisposition: { type: S3ContentDisposition },
-    acl: { type: S3Acl, description: "If not supported by S3 provider, an error is thrown." }
-  }
-});
-export {
-  S3Acl,
-  S3ContentDisposition,
-  S3GenerateSignedUploadInput,
-  S3Header,
-  S3SignedRead,
-  S3SignedUpload
-};
-//# sourceMappingURL=S3SchemaTypes.js.map

package/dist/development/src/S3SchemaTypes.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"S3SchemaTypes.js","sources":["../../../../packages/engine-s3-plugin/src/S3SchemaTypes.ts"],"sourcesContent":["import {\n\tGraphQLEnumType,\n\tGraphQLInputObjectType,\n\tGraphQLInt,\n\tGraphQLList,\n\tGraphQLNonNull,\n\tGraphQLObjectType,\n\tGraphQLString,\n} from 'graphql'\n\nexport const S3Header = new GraphQLObjectType({\n\tname: 'S3Header',\n\tfields: {\n\t\tkey: { type: new GraphQLNonNull(GraphQLString) },\n\t\tvalue: { type: new GraphQLNonNull(GraphQLString) },\n\t},\n})\n\nexport const S3ContentDisposition = new GraphQLEnumType({\n\tname: 'S33ContentDisposition', values: {\n\t\tATTACHMENT: {},\n\t\tINLINE: {},\n\t},\n})\nexport type S3ContentDisposition = 'ATTACHMENT' | 'INLINE'\n\nexport const S3SignedRead = new GraphQLObjectType({\n\tname: 'S3SignedRead',\n\tfields: {\n\t\turl: { type: new GraphQLNonNull(GraphQLString) },\n\t\theaders: {\n\t\t\ttype: new GraphQLNonNull(new GraphQLList(new GraphQLNonNull(S3Header))),\n\t\t},\n\t\tmethod: { type: new GraphQLNonNull(GraphQLString) },\n\t\tobjectKey: { type: new GraphQLNonNull(GraphQLString) },\n\t\tbucket: { type: new GraphQLNonNull(GraphQLString) },\n\t},\n})\n\nexport const S3SignedUpload = new GraphQLObjectType({\n\tname: 'S3SignedUpload',\n\tfields: {\n\t\turl: { type: new GraphQLNonNull(GraphQLString) },\n\t\theaders: {\n\t\t\ttype: new GraphQLNonNull(new GraphQLList(new GraphQLNonNull(S3Header))),\n\t\t},\n\t\tmethod: { type: new GraphQLNonNull(GraphQLString) },\n\t\tobjectKey: { type: new GraphQLNonNull(GraphQLString) },\n\t\tbucket: { type: new GraphQLNonNull(GraphQLString) },\n\t\tpublicUrl: { type: new GraphQLNonNull(GraphQLString) },\n\t},\n})\n\nexport const S3Acl = new GraphQLEnumType({\n\tname: 'S3Acl',\n\tvalues: {\n\t\tPUBLIC_READ: {},\n\t\tPRIVATE: {},\n\t\tNONE: {},\n\t},\n})\n\nexport type S3Acl = 'PUBLIC_READ' | 'PRIVATE' | 'NONE'\n\nexport const S3GenerateSignedUploadInput = new GraphQLInputObjectType({\n\tname: 'S3GenerateSignedUploadInput',\n\tfields: {\n\t\tcontentType: { type: GraphQLString },\n\t\textension: { type: GraphQLString, description: 'If not provided, extension is detected from a content-type.' },\n\t\texpiration: { type: GraphQLInt, description: 'Signed URL expiration.' },\n\t\tsize: { type: GraphQLInt, description: 'Uploaded file size. Required when you enable ACL size limits.' },\n\t\tprefix: { type: GraphQLString, description: 'Can be used as a \"directory\".' },\n\t\tsuffix: { type: GraphQLString, description: 'Suffix after generated id and before the extension.' },\n\t\tfileName: { type: GraphQLString, description: 'This only affects Content-disposition header. Does not affect actual object key.' },\n\t\tcontentDisposition: { type: S3ContentDisposition },\n\t\tacl: { type: S3Acl, description: 'If not supported by S3 provider, an error is thrown.' },\n\t},\n})\nexport interface S3GenerateSignedUploadInput {\n\tcontentType: null | string\n\textension: null | string\n\texpiration: null | number\n\tsize: null | number\n\tprefix: null | string\n\tsuffix: null | string\n\tfileName: null | string\n\tcontentDisposition: null | S3ContentDisposition\n\tacl: null | S3Acl\n}\n"],"names":[],"mappings":";AAUa,MAAA,WAAW,IAAI,kBAAkB;AAAA,EAC7C,MAAM;AAAA,EACN,QAAQ;AAAA,IACP,KAAK,EAAE,MAAM,IAAI,eAAe,aAAa,EAAE;AAAA,IAC/C,OAAO,EAAE,MAAM,IAAI,eAAe,aAAa,EAAE;AAAA,EAAA;AAEnD,CAAC;AAEY,MAAA,uBAAuB,IAAI,gBAAgB;AAAA,EACvD,MAAM;AAAA,EAAyB,QAAQ;AAAA,IACtC,YAAY,CAAC;AAAA,IACb,QAAQ,CAAA;AAAA,EAAC;AAEX,CAAC;AAGY,MAAA,eAAe,IAAI,kBAAkB;AAAA,EACjD,MAAM;AAAA,EACN,QAAQ;AAAA,IACP,KAAK,EAAE,MAAM,IAAI,eAAe,aAAa,EAAE;AAAA,IAC/C,SAAS;AAAA,MACR,MAAM,IAAI,eAAe,IAAI,YAAY,IAAI,eAAe,QAAQ,CAAC,CAAC;AAAA,IACvE;AAAA,IACA,QAAQ,EAAE,MAAM,IAAI,eAAe,aAAa,EAAE;AAAA,IAClD,WAAW,EAAE,MAAM,IAAI,eAAe,aAAa,EAAE;AAAA,IACrD,QAAQ,EAAE,MAAM,IAAI,eAAe,aAAa,EAAE;AAAA,EAAA;AAEpD,CAAC;AAEY,MAAA,iBAAiB,IAAI,kBAAkB;AAAA,EACnD,MAAM;AAAA,EACN,QAAQ;AAAA,IACP,KAAK,EAAE,MAAM,IAAI,eAAe,aAAa,EAAE;AAAA,IAC/C,SAAS;AAAA,MACR,MAAM,IAAI,eAAe,IAAI,YAAY,IAAI,eAAe,QAAQ,CAAC,CAAC;AAAA,IACvE;AAAA,IACA,QAAQ,EAAE,MAAM,IAAI,eAAe,aAAa,EAAE;AAAA,IAClD,WAAW,EAAE,MAAM,IAAI,eAAe,aAAa,EAAE;AAAA,IACrD,QAAQ,EAAE,MAAM,IAAI,eAAe,aAAa,EAAE;AAAA,IAClD,WAAW,EAAE,MAAM,IAAI,eAAe,aAAa,EAAE;AAAA,EAAA;AAEvD,CAAC;AAEY,MAAA,QAAQ,IAAI,gBAAgB;AAAA,EACxC,MAAM;AAAA,EACN,QAAQ;AAAA,IACP,aAAa,CAAC;AAAA,IACd,SAAS,CAAC;AAAA,IACV,MAAM,CAAA;AAAA,EAAC;AAET,CAAC;AAIY,MAAA,8BAA8B,IAAI,uBAAuB;AAAA,EACrE,MAAM;AAAA,EACN,QAAQ;AAAA,IACP,aAAa,EAAE,MAAM,cAAc;AAAA,IACnC,WAAW,EAAE,MAAM,eAAe,aAAa,8DAA8D;AAAA,IAC7G,YAAY,EAAE,MAAM,YAAY,aAAa,yBAAyB;AAAA,IACtE,MAAM,EAAE,MAAM,YAAY,aAAa,gEAAgE;AAAA,IACvG,QAAQ,EAAE,MAAM,eAAe,aAAa,gCAAgC;AAAA,IAC5E,QAAQ,EAAE,MAAM,eAAe,aAAa,sDAAsD;AAAA,IAClG,UAAU,EAAE,MAAM,eAAe,aAAa,mFAAmF;AAAA,IACjI,oBAAoB,EAAE,MAAM,qBAAqB;AAAA,IACjD,KAAK,EAAE,MAAM,OAAO,aAAa,uDAAuD;AAAA,EAAA;AAE1F,CAAC;"}

package/dist/development/src/S3Service.cjs

@@ -1,105 +0,0 @@
-"use strict";
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const mimeTypes = require("mime-types");
-const Config = require("./Config.cjs");
-const graphqlUtils = require("@contember/graphql-utils");
-const S3Signer = require("./S3Signer.cjs");
-var __defProp = Object.defineProperty;
-var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
-var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);
-class S3Service {
-  constructor(config, providers, authorizator) {
-    this.config = config;
-    this.providers = providers;
-    this.authorizator = authorizator;
-    __publicField(this, "publicBaseUrl");
-    __publicField(this, "signer");
-    this.publicBaseUrl = Config.resolveS3PublicBaseUrl(config);
-    this.signer = new S3Signer.S3Signer(config, providers);
-  }
-  getSignedUploadUrl({ acl, contentDisposition, contentType, expiration, prefix, suffix, fileName, extension, size }) {
-    const ext = extension ?? ((contentType ? mimeTypes.extension(contentType) : null) || "bin");
-    const id = this.providers.uuid();
-    const localObjectKey = (prefix ? prefix + "/" : "") + `${id}${suffix ?? ""}.${ext}`;
-    this.authorizator.verifyUploadAccess({ key: localObjectKey, size });
-    const objectKey = (this.config.prefix ? this.config.prefix + "/" : "") + localObjectKey;
-    const bucket = this.config.bucket;
-    if (acl && this.config.noAcl) {
-      throw new graphqlUtils.UserInputError("ACL is not supported");
-    }
-    const headers = {
-      "Cache-Control": "immutable"
-    };
-    if (contentType) {
-      headers["Content-Type"] = contentType;
-    }
-    if (!this.config.noAcl && acl !== "NONE") {
-      const mapping = { PUBLIC_READ: "public-read", PRIVATE: "private" };
-      headers["x-amz-acl"] = mapping[acl ?? "PUBLIC_READ"];
-    }
-    if (fileName || contentDisposition) {
-      let contentDispositionHeader = contentDisposition?.toLowerCase() ?? "inline";
-      if (fileName) {
-        contentDispositionHeader += `; filename*=UTF-8''${encodeURIComponent(fileName)}`;
-      }
-      headers["Content-Disposition"] = contentDispositionHeader;
-    }
-    const headersToSend = Object.entries(headers).map(([key, value]) => ({ key, value }));
-    if (size) {
-      headers["Content-Length"] = String(size);
-    }
-    const url = this.signer.sign({
-      action: "upload",
-      expiration: expiration ?? 3600,
-      key: objectKey,
-      headers: { ...headers }
-    });
-    const publicUrl = this.formatPublicUrl(objectKey);
-    return {
-      bucket,
-      objectKey,
-      url,
-      publicUrl,
-      headers: headersToSend,
-      method: "PUT"
-    };
-  }
-  getSignedReadUrl({ objectKey, expiration }) {
-    const bucket = this.config.bucket;
-    const publicPrefix = this.formatPublicUrl("");
-    if (objectKey.startsWith(publicPrefix)) {
-      objectKey = objectKey.substring(publicPrefix.length);
-    }
-    if (this.config.prefix && !objectKey.startsWith(this.config.prefix)) {
-      throw new graphqlUtils.ForbiddenError(
-        `Given object key "${objectKey}" does not start with a project prefix "${this.config.prefix}"`
-      );
-    }
-    const localObjectKey = this.config.prefix ? objectKey.substring(this.config.prefix.length + 1) : objectKey;
-    this.authorizator.verifyReadAccess({ key: localObjectKey });
-    const url = this.signer.sign({
-      action: "read",
-      expiration: expiration ?? 3600,
-      key: objectKey,
-      headers: {}
-    });
-    return {
-      bucket,
-      objectKey,
-      url,
-      headers: [],
-      method: "GET"
-    };
-  }
-  formatPublicUrl(key) {
-    return `${this.publicBaseUrl}/${key}`;
-  }
-}
-class S3ServiceFactory {
-  create(config, providers, authorizator) {
-    return new S3Service(config, providers, authorizator);
-  }
-}
-exports.S3Service = S3Service;
-exports.S3ServiceFactory = S3ServiceFactory;
-//# sourceMappingURL=S3Service.cjs.map