@eik/core 2.2.3 → 2.4.0

package/CHANGELOG.md

@@ -1,3 +1,17 @@
+# [2.4.0](https://github.com/eik-lib/core/compare/v2.3.0...v2.4.0) (2026-08-25)
+
+
+### Features
+
+* replace pipeline-based reads and writes with buffer operations ([#649](https://github.com/eik-lib/core/issues/649)) ([ace642f](https://github.com/eik-lib/core/commit/ace642f66ac08abcbda86c51b181bf107df68c5c))
+
+# [2.3.0](https://github.com/eik-lib/core/compare/v2.2.3...v2.3.0) (2026-08-24)
+
+
+### Features
+
+* add traceId to upload logs and improve observability ([#647](https://github.com/eik-lib/core/issues/647)) ([32f8d38](https://github.com/eik-lib/core/commit/32f8d38290fab142cad9febc8379cd12f791cd70))
+
 ## [2.2.3](https://github.com/eik-lib/core/compare/v2.2.2...v2.2.3) (2026-08-22)
 
 

package/lib/handlers/alias.post.js

@@ -153,6 +153,7 @@ const AliasPost = class AliasPost {
 	 */
 	async handler(req, user, type, name, alias) {
 		const end = this._histogram.timer();
+		const traceId = req.traceId;
 
 		const pAlias = decodeUriComponent(alias);
 		const pName = decodeUriComponent(name);
@@ -163,7 +164,7 @@ const AliasPost = class AliasPost {
 			validators.type(type);
 		} catch (error) {
 			this._log.info(
-				`alias:post - Validation failed - ${error instanceof Error ? error.message : String(error)}`,
+				`alias:post - Validation failed - ${error instanceof Error ? error.message : String(error)} - TraceId: ${traceId}`,
 			);
 			const e = new HttpError.NotFound();
 			end({ labels: { success: false, status: e.status } });
@@ -175,7 +176,7 @@ const AliasPost = class AliasPost {
 
 		if (!org) {
 			this._log.debug(
-				`alias:post - Hostname does not match a configured organization - ${url.hostname}`,
+				`alias:post - Hostname does not match a configured organization - ${url.hostname} - TraceId: ${traceId}`,
 			);
 			const e = new HttpError.BadRequest();
 			end({ labels: { success: false, status: e.status, type } });
@@ -195,14 +196,18 @@ const AliasPost = class AliasPost {
 		const exist = await this._exist(incoming);
 		if (!exist) {
 			this._log.info(
-				`alias:post - Alias does not exists - Org: ${org} - Type: ${type} - Name: ${pName} - Alias: ${pAlias}`,
+				`alias:post - Alias does not exists - Org: ${org} - Type: ${type} - Name: ${pName} - Alias: ${pAlias} - TraceId: ${traceId}`,
 			);
 			const e = new HttpError.NotFound();
 			end({ labels: { success: false, status: e.status, type } });
 			throw e;
 		}
 
-		await this._parser(incoming);
+		const resolvedAlias = await this._parser(incoming);
+
+		this._log.info(
+			`alias:post - Alias created - Org: ${org} - Type: ${type} - Name: ${pName} - Alias: ${pAlias} - Version: ${resolvedAlias.version} - TraceId: ${traceId}`,
+		);
 
 		const outgoing = new HttpOutgoing();
 		outgoing.cacheControl = this._cacheControl || "";

package/lib/handlers/alias.put.js

@@ -94,7 +94,7 @@ const AliasPut = class AliasPut {
 						if (this._sink) await this._sink.read(path);
 					} catch (error) {
 						this._log.error(
-							`alias:post - Unable to locate requested published package version - Version ${alias.name}@${alias.version}`,
+							`alias:put - Unable to locate requested published package version - Version ${alias.name}@${alias.version}`,
 						);
 						this._log.trace(error);
 						throw new HttpError.NotFound();
@@ -153,6 +153,7 @@ const AliasPut = class AliasPut {
 	 */
 	async handler(req, user, type, name, alias) {
 		const end = this._histogram.timer();
+		const traceId = req.traceId;
 
 		const pAlias = decodeUriComponent(alias);
 		const pName = decodeUriComponent(name);
@@ -163,7 +164,7 @@ const AliasPut = class AliasPut {
 			validators.type(type);
 		} catch (error) {
 			this._log.info(
-				`alias:put - Validation failed - ${error instanceof Error ? error.message : String(error)}`,
+				`alias:put - Validation failed - ${error instanceof Error ? error.message : String(error)} - TraceId: ${traceId}`,
 			);
 			const e = new HttpError.BadRequest();
 			end({ labels: { success: false, status: e.status } });
@@ -175,7 +176,7 @@ const AliasPut = class AliasPut {
 
 		if (!org) {
 			this._log.debug(
-				`alias:put - Hostname does not match a configured organization - ${url.hostname}`,
+				`alias:put - Hostname does not match a configured organization - ${url.hostname} - TraceId: ${traceId}`,
 			);
 			const e = new HttpError.BadRequest();
 			end({ labels: { success: false, status: e.status, type } });
@@ -195,14 +196,18 @@ const AliasPut = class AliasPut {
 		const exist = await this._exist(incoming);
 		if (exist) {
 			this._log.info(
-				`alias:put - Alias exists - Org: ${org} - Type: ${type} - Name: ${pName} - Alias: ${pAlias}`,
+				`alias:put - Alias exists - Org: ${org} - Type: ${type} - Name: ${pName} - Alias: ${pAlias} - TraceId: ${traceId}`,
 			);
 			const e = new HttpError.Conflict();
 			end({ labels: { success: false, status: e.status, type } });
 			throw e;
 		}
 
-		await this._parser(incoming);
+		const resolvedAlias = await this._parser(incoming);
+
+		this._log.info(
+			`alias:put - Alias updated - Org: ${org} - Type: ${type} - Name: ${pName} - Alias: ${pAlias} - Version: ${resolvedAlias.version} - TraceId: ${traceId}`,
+		);
 
 		const outgoing = new HttpOutgoing();
 		outgoing.cacheControl = this._cacheControl || "";

package/lib/handlers/map.put.js

@@ -179,12 +179,14 @@ const MapPut = class MapPut {
 
 		if (!this._sink) throw new Error("No sink configured");
 
+		const traceId = incoming.request?.traceId;
+
 		try {
 			await this._sink.exist(path);
 		} catch {
 			// File does not exist — this is a new import map.
 			this._log.info(
-				`map:put - Version meta file did not exist in sink - Create new - Pathname: ${path}`,
+				`map:put - Version meta file did not exist in sink - Create new - Pathname: ${path} - TraceId: ${traceId}`,
 			);
 			return new Versions(incoming);
 		}
@@ -195,7 +197,7 @@ const MapPut = class MapPut {
 		// entire version history.
 		const obj = await readJSON(this._sink, path);
 		this._log.info(
-			`map:put - Successfully read version meta file from sink - Pathname: ${path}`,
+			`map:put - Successfully read version meta file from sink - Pathname: ${path} - TraceId: ${traceId}`,
 		);
 		return new Versions(obj);
 	}
@@ -206,9 +208,10 @@ const MapPut = class MapPut {
 	 */
 	async _writeVersions(incoming, versions) {
 		const path = createFilePathToVersion(incoming);
+		const traceId = incoming.request?.traceId;
 		await writeJSON(this._sink, path, versions, "application/json");
 		this._log.info(
-			`map:put - Successfully wrote version meta file to sink - Pathname: ${path}`,
+			`map:put - Successfully wrote version meta file to sink - Pathname: ${path} - TraceId: ${traceId}`,
 		);
 	}
 
@@ -220,6 +223,7 @@ const MapPut = class MapPut {
 	 */
 	async handler(req, user, name, version) {
 		const end = this._histogram.timer();
+		const traceId = req.traceId;
 
 		const pVersion = decodeUriComponent(version);
 		const pName = decodeUriComponent(name);
@@ -229,7 +233,7 @@ const MapPut = class MapPut {
 			validators.name(pName);
 		} catch (error) {
 			this._log.info(
-				`map:put - Validation failed - ${error instanceof Error ? error.message : String(error)}`,
+				`map:put - Validation failed - ${error instanceof Error ? error.message : String(error)} - TraceId: ${traceId}`,
 			);
 			const e = new HttpError.BadRequest();
 			end({ labels: { success: false, status: e.status } });
@@ -241,7 +245,7 @@ const MapPut = class MapPut {
 
 		if (!org) {
 			this._log.debug(
-				`map:put - Hostname does not match a configured organization - ${url.hostname}`,
+				`map:put - Hostname does not match a configured organization - ${url.hostname} - TraceId: ${traceId}`,
 			);
 			const e = new HttpError.BadRequest();
 			end({ labels: { success: false, status: e.status, type: "map" } });
@@ -266,7 +270,7 @@ const MapPut = class MapPut {
 
 		if (!versions.check(pVersion)) {
 			this._log.info(
-				`map:put - Semver version is lower than previous version of the package - Org: ${org} - Name: ${pName} - Version: ${pVersion}`,
+				`map:put - Semver version is lower than previous version of the package - Org: ${org} - Name: ${pName} - Version: ${pVersion} - TraceId: ${traceId}`,
 			);
 			const e = new HttpError.Conflict();
 			end({ labels: { success: false, status: e.status, type: "map" } });

package/lib/handlers/pkg.put.js

@@ -136,7 +136,7 @@ const PkgPut = class PkgPut {
 			"application/json",
 		);
 		this._log.info(
-			`pkg:put - Successfully wrote eik.json to sink - Pathname: ${eikJsonPath}`,
+			`pkg:put - Successfully wrote eik.json to sink - Pathname: ${eikJsonPath} - TraceId: ${incoming.request?.traceId}`,
 		);
 
 		const asset = new Asset({
@@ -167,7 +167,7 @@ const PkgPut = class PkgPut {
 		} catch {
 			// File does not exist — this is a new package.
 			this._log.info(
-				`pkg:put - Version meta file did not exist in sink - Create new - Pathname: ${path}`,
+				`pkg:put - Version meta file did not exist in sink - Create new - Pathname: ${path} - TraceId: ${incoming.request?.traceId}`,
 			);
 			return new Versions(incoming);
 		}
@@ -178,7 +178,7 @@ const PkgPut = class PkgPut {
 		// overwrite the index and erase the entire version history.
 		const obj = await readJSON(this._sink, path);
 		this._log.info(
-			`pkg:put - Successfully read version meta file from sink - Pathname: ${path}`,
+			`pkg:put - Successfully read version meta file from sink - Pathname: ${path} - TraceId: ${incoming.request?.traceId}`,
 		);
 		return new Versions(obj);
 	}
@@ -191,14 +191,14 @@ const PkgPut = class PkgPut {
 		try {
 			await readEikJson(this._sink, path);
 			this._log.info(
-				`pkg:put - Found version meta file from sink - Pathname: ${path}`,
+				`pkg:put - Found version meta file from sink - Pathname: ${path} - TraceId: ${incoming.request?.traceId}`,
 			);
 			return true;
 			// eslint-disable-next-line no-unused-vars
 		} catch (error) {
 			// File does not exist, its probably a new package
 			this._log.info(
-				`pkg:put - Did not find meta file in sink - Create new - Pathname: ${path}`,
+				`pkg:put - Did not find meta file in sink - Create new - Pathname: ${path} - TraceId: ${incoming.request?.traceId}`,
 			);
 			return false;
 		}
@@ -212,7 +212,7 @@ const PkgPut = class PkgPut {
 		const path = createFilePathToVersion(incoming);
 		await writeJSON(this._sink, path, versions, "application/json");
 		this._log.info(
-			`pkg:put - Successfully wrote version meta file to sink - Pathname: ${path}`,
+			`pkg:put - Successfully wrote version meta file to sink - Pathname: ${path} - TraceId: ${incoming.request?.traceId}`,
 		);
 	}
 
@@ -225,6 +225,7 @@ const PkgPut = class PkgPut {
 	 */
 	async handler(req, user, type, name, version) {
 		const end = this._histogram.timer();
+		const traceId = req.traceId;
 
 		const pVersion = decodeUriComponent(version);
 		const pName = decodeUriComponent(name);
@@ -235,7 +236,7 @@ const PkgPut = class PkgPut {
 			validators.type(type);
 		} catch (error) {
 			this._log.info(
-				`pkg:put - Validation failed - ${error instanceof Error ? error.message : String(error)}`,
+				`pkg:put - Validation failed - ${error instanceof Error ? error.message : String(error)} - TraceId: ${traceId}`,
 			);
 			const e = new HttpError.BadRequest();
 			end({ labels: { success: false, status: e.status } });
@@ -247,7 +248,7 @@ const PkgPut = class PkgPut {
 
 		if (!org) {
 			this._log.debug(
-				`pkg:put - Hostname does not match a configured organization - ${url.hostname}`,
+				`pkg:put - Hostname does not match a configured organization - ${url.hostname} - TraceId: ${traceId}`,
 			);
 			const e = new HttpError.BadRequest();
 			end({ labels: { success: false, status: e.status, type } });
@@ -264,11 +265,15 @@ const PkgPut = class PkgPut {
 			org,
 		});
 
+		this._log.info(
+			`pkg:put - Received upload - Name: ${pName} - Version: ${pVersion} - TraceId: ${traceId}`,
+		);
+
 		const versionExists = await this._readVersion(incoming);
 
 		if (versionExists) {
 			this._log.info(
-				`pkg:put - Semver version already exists for the package - Org: ${org} - Name: ${pName} - Version: ${pVersion}`,
+				`pkg:put - Semver version already exists for the package - Org: ${org} - Name: ${pName} - Version: ${pVersion} - TraceId: ${traceId}`,
 			);
 			const e = new HttpError.Conflict();
 			end({ labels: { success: false, status: e.status, type } });
@@ -276,6 +281,9 @@ const PkgPut = class PkgPut {
 		}
 
 		const versions = await this._readVersions(incoming).catch(() => {
+			this._log.error(
+				`pkg:put - Failed to read version meta from sink - Name: ${pName} - Version: ${pVersion} - TraceId: ${traceId}`,
+			);
 			const e = new HttpError.BadGateway();
 			end({ labels: { success: false, status: e.status, type } });
 			throw e;
@@ -290,6 +298,9 @@ const PkgPut = class PkgPut {
 			eikJsonAsset = await this._writeEikJson(incoming, eikJson);
 			// eslint-disable-next-line no-unused-vars
 		} catch (error) {
+			this._log.error(
+				`pkg:put - Failed to write eik.json to sink - Name: ${pName} - Version: ${pVersion} - TraceId: ${traceId}`,
+			);
 			const e = new HttpError.BadGateway();
 			end({ labels: { success: false, status: e.status, type } });
 			throw e;
@@ -300,10 +311,13 @@ const PkgPut = class PkgPut {
 			const pkgMetaPath = createFilePathToPackage(pkg);
 			await writeJSON(this._sink, pkgMetaPath, pkg, "application/json");
 			this._log.info(
-				`pkg:put - Successfully wrote package meta file to sink - Pathname: ${pkgMetaPath}`,
+				`pkg:put - Successfully wrote package meta file to sink - Pathname: ${pkgMetaPath} - TraceId: ${traceId}`,
 			);
 			// eslint-disable-next-line no-unused-vars
 		} catch (error) {
+			this._log.error(
+				`pkg:put - Failed to write package meta to sink - Name: ${pName} - Version: ${pVersion} - TraceId: ${traceId}`,
+			);
 			const e = new HttpError.BadGateway();
 			end({ labels: { success: false, status: e.status, type } });
 			throw e;
@@ -315,6 +329,9 @@ const PkgPut = class PkgPut {
 			await this._writeVersions(incoming, versions);
 			// eslint-disable-next-line no-unused-vars
 		} catch (error) {
+			this._log.error(
+				`pkg:put - Failed to write version meta to sink - Name: ${pName} - Version: ${pVersion} - TraceId: ${traceId}`,
+			);
 			const e = new HttpError.BadGateway();
 			end({ labels: { success: false, status: e.status, type } });
 			throw e;
@@ -325,6 +342,10 @@ const PkgPut = class PkgPut {
 		outgoing.statusCode = 303;
 		outgoing.location = createURIPathToPkgLog(pkg);
 
+		this._log.info(
+			`pkg:put - Upload completed - Name: ${pName} - Version: ${pVersion} - TraceId: ${traceId}`,
+		);
+
 		end({ labels: { status: outgoing.statusCode, type } });
 
 		return outgoing;

package/lib/multipart/parser.js

@@ -148,8 +148,10 @@ const MultipartParser = class MultipartParser {
 	 */
 	_handleFile({ fieldname, file, filename, incoming }) {
 		return new Promise((resolve, reject) => {
+			const traceId = incoming.request?.traceId;
+
 			this._log.info(
-				`multipart - Start extracting package - Field: ${fieldname} - Filename: ${filename}`,
+				`multipart - Start extracting package - Field: ${fieldname} - Filename: ${filename} - Name: ${incoming.name} - Version: ${incoming.version} - TraceId: ${traceId}`,
 			);
 
 			const ac = new AbortController();
@@ -167,6 +169,10 @@ const MultipartParser = class MultipartParser {
 			/** @type {import("tar").ReadEntry[]} */
 			const pendingEntries = [];
 
+			let totalFiles = 0;
+			let writtenFiles = 0;
+			let failedFiles = 0;
+
 			const drainPending = () => {
 				while (
 					runningWrites < MAX_CONCURRENT_WRITES &&
@@ -180,20 +186,34 @@ const MultipartParser = class MultipartParser {
 						incoming,
 						entry,
 						signal: ac.signal,
-					}).finally(() => {
+					});
+					// Track counts on the raw promise without altering its
+					// resolve/reject value so the queue still propagates
+					// errors to Promise.all and resolves with Asset objects.
+					persist
+						.then(() => {
+							writtenFiles++;
+						})
+						.catch(() => {
+							failedFiles++;
+						});
+					const tracked = persist.finally(() => {
 						runningWrites--;
 						drainPending();
 					});
-					persist.catch(() => {});
-					queue.push(persist);
+					tracked.catch(() => {});
+					queue.push(tracked);
 				}
 			};
 
 			file.once("limit", () => {
 				this._log.warn(
-					`multipart - Uploaded package exceeds the max allowed file size - Field: ${fieldname} - Filename: ${filename} - Name: ${incoming.name} - Version: ${incoming.version} - Type: ${incoming.type} - Limit: ${this._pkgMaxFileSize} bytes`,
+					`multipart - Uploaded package exceeds the max allowed file size - Field: ${fieldname} - Filename: ${filename} - Name: ${incoming.name} - Version: ${incoming.version} - Type: ${incoming.type} - Limit: ${this._pkgMaxFileSize} bytes - TraceId: ${traceId}`,
 				);
 				ac.abort();
+				this._log.info(
+					`multipart - Upload aborted - Field: ${fieldname} - Running: ${runningWrites} - Pending: ${pendingEntries.length} - TraceId: ${traceId}`,
+				);
 				file.emit("error", new HttpError.PayloadTooLarge());
 			});
 
@@ -222,6 +242,9 @@ const MultipartParser = class MultipartParser {
 								capturedEikJson = JSON.parse(
 									Buffer.concat(chunks).toString("utf8"),
 								);
+								this._log.debug(
+									`multipart - Found eik.json in tar - Field: ${fieldname} - TraceId: ${traceId}`,
+								);
 							} catch {
 								// Malformed eik.json in tar — proceed without it.
 							}
@@ -235,6 +258,7 @@ const MultipartParser = class MultipartParser {
 					// Holding an entry without piping it blocks the tar parser
 					// at that position in the archive, creating natural
 					// backpressure on the upstream upload stream.
+					totalFiles++;
 					pendingEntries.push(entry);
 					drainPending();
 				},
@@ -243,7 +267,7 @@ const MultipartParser = class MultipartParser {
 			pipeline(file, extract, (error) => {
 				if (error) {
 					this._log.info(
-						`multipart - Uploaded package could not be extracted properly - Field: ${fieldname} - Filename: ${filename}`,
+						`multipart - Uploaded package could not be extracted properly - Field: ${fieldname} - Filename: ${filename} - Name: ${incoming.name} - Version: ${incoming.version} - Total: ${totalFiles} - Written: ${writtenFiles} - Failed: ${failedFiles} - TraceId: ${traceId}`,
 					);
 					this._log.trace(error);
 
@@ -272,8 +296,17 @@ const MultipartParser = class MultipartParser {
 					return;
 				}
 
+				if (!capturedEikJson) {
+					this._log.debug(
+						`multipart - No eik.json in tar, server will generate it - Field: ${fieldname} - TraceId: ${traceId}`,
+					);
+				}
+
 				Promise.all(queue)
 					.then((result) => {
+						this._log.info(
+							`multipart - Tar successfully unpacked - Field: ${fieldname} - Filename: ${filename} - Name: ${incoming.name} - Version: ${incoming.version} - Total: ${totalFiles} - Written: ${writtenFiles} - Failed: ${failedFiles} - TraceId: ${traceId}`,
+						);
 						const formFile = new FormFile({
 							name: fieldname,
 							value: result,
@@ -292,6 +325,8 @@ const MultipartParser = class MultipartParser {
 	 * @param {{ incoming: any, entry: any, signal: AbortSignal }} options
 	 */
 	async _persistFile({ incoming, entry, signal }) {
+		const traceId = incoming.request?.traceId;
+
 		const asset = new Asset({
 			pathname: entry.path,
 			version: incoming.version,
@@ -301,60 +336,56 @@ const MultipartParser = class MultipartParser {
 		});
 		asset.size = entry.size;
 
-		const path = createFilePathToAsset(asset);
+		const assetPath = createFilePathToAsset(asset);
 
-		this._log.info(
-			`multipart - Start writing asset to sink - Pathname: ${path}`,
+		this._log.debug(
+			`multipart - Start writing asset to sink - Pathname: ${assetPath} - TraceId: ${traceId}`,
 		);
 
 		if (!this._sink) {
 			throw new Error("No sink configured");
 		}
-		const writer = await this._sink.write(path, asset.mimeType);
-
-		const integrityStream = ssri.integrityStream({ single: true });
-		let hash = "";
-		integrityStream.once("integrity", (/** @type {any} */ integrity) => {
-			hash = integrity;
-		});
 
-		return new Promise((resolve, reject) => {
-			const onAbort = () => {
-				entry.destroy();
-				integrityStream.destroy();
-				writer.destroy();
-			};
+		if (signal.aborted) {
+			entry.resume();
+			throw new Error("Aborted");
+		}
 
+		// Buffer all chunks from the tar entry — no pipeline or stream Transform needed
+		const chunks = [];
+		for await (const chunk of entry) {
 			if (signal.aborted) {
-				onAbort();
-				reject(new Error("Aborted"));
-				return;
+				throw new Error("Aborted");
 			}
+			chunks.push(chunk);
+		}
+		const buffer = Buffer.concat(chunks);
 
-			signal.addEventListener("abort", onAbort, { once: true });
-
-			pipeline(entry, integrityStream, writer, (error) => {
-				signal.removeEventListener("abort", onAbort);
-
-				if (error) {
-					this._log.error(
-						`multipart - Failed writing asset to sink - Pathname: ${path}`,
-					);
-					this._log.trace(error);
+		if (signal.aborted) {
+			throw new Error("Aborted");
+		}
 
-					reject(error);
-					return;
-				}
+		// Compute integrity hash directly from the buffer
+		const integrity = ssri.fromData(buffer, { single: true });
+		asset.integrity = integrity.toString();
 
-				asset.integrity = hash.toString();
+		try {
+			await this._sink.writeBuffer(assetPath, asset.mimeType, buffer, {
+				traceId,
+			});
+		} catch (error) {
+			this._log.error(
+				`multipart - Failed writing asset to sink - Pathname: ${assetPath} - TraceId: ${traceId}`,
+			);
+			this._log.trace(error);
+			throw error;
+		}
 
-				this._log.info(
-					`multipart - Successfully wrote asset to sink - Pathname: ${path}`,
-				);
+		this._log.debug(
+			`multipart - Successfully wrote asset to sink - Pathname: ${assetPath} - TraceId: ${traceId}`,
+		);
 
-				resolve(asset);
-			});
-		});
+		return asset;
 	}
 };
 export default MultipartParser;

package/lib/sinks/test.js

@@ -109,6 +109,63 @@ export default class SinkTest extends Sink {
 
 	// Common SINK API
 
+	/**
+	 * @param {string} filePath
+	 * @param {string} contentType
+	 * @param {Buffer} buffer
+	 * @param {{ traceId?: string }} [options]
+	 * @returns {Promise<void>}
+	 */
+	// eslint-disable-next-line no-unused-vars
+	async writeBuffer(filePath, contentType, buffer, options = {}) {
+		const operation = "write";
+		try {
+			Sink.validateFilePath(filePath);
+			Sink.validateContentType(contentType);
+		} catch (error) {
+			this._counter.inc({ labels: { operation } });
+			throw error;
+		}
+		const pathname = toUrlPathname(path.join(this._rootPath, filePath));
+		if (pathname.indexOf(this._rootPath) !== 0) {
+			this._counter.inc({ labels: { operation } });
+			throw new Error(`Directory traversal - ${filePath}`);
+		}
+		const entry = new Entry({ mimeType: contentType, payload: [buffer] });
+		this._state.set(pathname, entry);
+		this._counter.inc({ labels: { success: true, access: true, operation } });
+	}
+
+	/**
+	 * @param {string} filePath
+	 * @returns {Promise<Buffer>}
+	 */
+	async readBuffer(filePath) {
+		const operation = "read";
+		try {
+			Sink.validateFilePath(filePath);
+		} catch (error) {
+			this._counter.inc({ labels: { operation } });
+			throw error;
+		}
+		const pathname = toUrlPathname(path.join(this._rootPath, filePath));
+		if (pathname.indexOf(this._rootPath) !== 0) {
+			this._counter.inc({ labels: { operation } });
+			throw new Error(`Directory traversal - ${filePath}`);
+		}
+		const entry = this._state.get(pathname);
+		if (!entry) {
+			this._counter.inc({ labels: { access: true, operation } });
+			throw new Error(`${filePath} does not exist`);
+		}
+		this._counter.inc({ labels: { success: true, access: true, operation } });
+		return Buffer.concat(
+			(entry.payload || []).map((/** @type {any} */ item) =>
+				Buffer.isBuffer(item) ? item : Buffer.from(item),
+			),
+		);
+	}
+
 	/**
 	 * @param {string} filePath
 	 * @param {string} contentType

package/lib/utils/utils.js

@@ -1,39 +1,14 @@
-import { Writable, Readable, pipeline } from "node:stream";
+import { Writable, pipeline } from "node:stream";
 
 /**
  * @param {any} sink
  * @param {string} path
  */
-const readJSON = (sink, path) =>
-	// eslint-disable-next-line no-async-promise-executor
-	new Promise(async (resolve, reject) => {
-		try {
-			/** @type {any[]} */
-			const buffer = [];
-			const from = await sink.read(path);
-
-			const to = new Writable({
-				objectMode: false,
-				write(chunk, encoding, callback) {
-					buffer.push(chunk);
-					callback();
-				},
-			});
+const readJSON = async (sink, path) => {
+	const buffer = await sink.readBuffer(path);
+	return JSON.parse(buffer.toString("utf8"));
+};
 
-			pipeline(from.stream, to, (error) => {
-				if (error) return reject(error);
-				const str = Buffer.concat(buffer).toString("utf8");
-				try {
-					const obj = JSON.parse(str);
-					return resolve(obj);
-				} catch (err) {
-					return reject(err);
-				}
-			});
-		} catch (error) {
-			reject(error);
-		}
-	});
 /**
  * @param {any} sink
  * @param {string} path
@@ -46,30 +21,12 @@ const readEikJson = (sink, path) => sink.exist(path);
  * @param {any} obj
  * @param {string} contentType
  */
-const writeJSON = (sink, path, obj, contentType) =>
-	// eslint-disable-next-line no-async-promise-executor
-	new Promise(async (resolve, reject) => {
-		try {
-			const buffer = Buffer.from(JSON.stringify(obj));
-
-			const from = new Readable({
-				objectMode: false,
-				read() {
-					this.push(buffer);
-					this.push(null);
-				},
-			});
-
-			const to = await sink.write(path, contentType);
+const writeJSON = async (sink, path, obj, contentType) => {
+	const buffer = Buffer.from(JSON.stringify(obj));
+	await sink.writeBuffer(path, contentType, buffer);
+	return buffer;
+};
 
-			pipeline(from, to, (error) => {
-				if (error) return reject(error);
-				return resolve(buffer);
-			});
-		} catch (error) {
-			reject(error);
-		}
-	});
 /**
  * @param {any} from
  */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@eik/core",
-  "version": "2.2.3",
+  "version": "2.4.0",
   "description": "Core server package",
   "main": "lib/main.js",
   "types": "./types/main.d.ts",
@@ -29,9 +29,9 @@
   "author": "",
   "license": "MIT",
   "dependencies": {
-    "@eik/sink": "1.2.7",
-    "@eik/sink-file-system": "2.2.0",
-    "@eik/sink-memory": "2.2.2",
+    "@eik/sink": "1.4.0",
+    "@eik/sink-file-system": "2.4.0",
+    "@eik/sink-memory": "2.4.0",
     "@metrics/client": "2.5.5",
     "abslog": "2.4.4",
     "busboy": "1.6.0",

package/types/handlers/alias.post.d.ts

@@ -55,7 +55,36 @@ declare const AliasPost: {
                 incoming: any;
                 entry: any;
                 signal: AbortSignal;
-            }): Promise<any>;
+            }): Promise<{
+                _mimeType: string;
+                _type: string;
+                _size: number;
+                _integrity: string;
+                _pathname: string;
+                _version: string;
+                _name: string;
+                _org: string;
+                get integrity(): string;
+                set integrity(value: string);
+                get pathname(): string;
+                get mimeType(): string;
+                get version(): string;
+                get asset(): string;
+                get name(): string;
+                get type(): string;
+                set type(value: string);
+                get size(): number;
+                set size(value: number);
+                get org(): string;
+                toJSON(): {
+                    integrity: string;
+                    pathname: string;
+                    mimeType: string;
+                    type: string;
+                    size: number;
+                };
+                get [Symbol.toStringTag](): string;
+            }>;
             get [Symbol.toStringTag](): string;
         };
         get metrics(): Metrics;

package/types/handlers/alias.put.d.ts

@@ -55,7 +55,36 @@ declare const AliasPut: {
                 incoming: any;
                 entry: any;
                 signal: AbortSignal;
-            }): Promise<any>;
+            }): Promise<{
+                _mimeType: string;
+                _type: string;
+                _size: number;
+                _integrity: string;
+                _pathname: string;
+                _version: string;
+                _name: string;
+                _org: string;
+                get integrity(): string;
+                set integrity(value: string);
+                get pathname(): string;
+                get mimeType(): string;
+                get version(): string;
+                get asset(): string;
+                get name(): string;
+                get type(): string;
+                set type(value: string);
+                get size(): number;
+                set size(value: number);
+                get org(): string;
+                toJSON(): {
+                    integrity: string;
+                    pathname: string;
+                    mimeType: string;
+                    type: string;
+                    size: number;
+                };
+                get [Symbol.toStringTag](): string;
+            }>;
             get [Symbol.toStringTag](): string;
         };
         get metrics(): Metrics;

package/types/handlers/auth.post.d.ts

@@ -55,7 +55,36 @@ declare const AuthPost: {
                 incoming: any;
                 entry: any;
                 signal: AbortSignal;
-            }): Promise<any>;
+            }): Promise<{
+                _mimeType: string;
+                _type: string;
+                _size: number;
+                _integrity: string;
+                _pathname: string;
+                _version: string;
+                _name: string;
+                _org: string;
+                get integrity(): string;
+                set integrity(value: string);
+                get pathname(): string;
+                get mimeType(): string;
+                get version(): string;
+                get asset(): string;
+                get name(): string;
+                get type(): string;
+                set type(value: string);
+                get size(): number;
+                set size(value: number);
+                get org(): string;
+                toJSON(): {
+                    integrity: string;
+                    pathname: string;
+                    mimeType: string;
+                    type: string;
+                    size: number;
+                };
+                get [Symbol.toStringTag](): string;
+            }>;
             get [Symbol.toStringTag](): string;
         };
         get metrics(): Metrics;

package/types/handlers/pkg.put.d.ts

@@ -58,7 +58,36 @@ declare const PkgPut: {
                 incoming: any;
                 entry: any;
                 signal: AbortSignal;
-            }): Promise<any>;
+            }): Promise<{
+                _mimeType: string;
+                _type: string;
+                _size: number;
+                _integrity: string;
+                _pathname: string;
+                _version: string;
+                _name: string;
+                _org: string;
+                get integrity(): string;
+                set integrity(value: string);
+                get pathname(): string;
+                get mimeType(): string;
+                get version(): string;
+                get asset(): string;
+                get name(): string;
+                get type(): string;
+                set type(value: string);
+                get size(): number;
+                set size(value: number);
+                get org(): string;
+                toJSON(): {
+                    integrity: string;
+                    pathname: string;
+                    mimeType: string;
+                    type: string;
+                    size: number;
+                };
+                get [Symbol.toStringTag](): string;
+            }>;
             get [Symbol.toStringTag](): string;
         };
         get metrics(): Metrics;

package/types/multipart/parser.d.ts

@@ -58,7 +58,36 @@ declare const MultipartParser: {
             incoming: any;
             entry: any;
             signal: AbortSignal;
-        }): Promise<any>;
+        }): Promise<{
+            _mimeType: string;
+            _type: string;
+            _size: number;
+            _integrity: string;
+            _pathname: string;
+            _version: string;
+            _name: string;
+            _org: string;
+            get integrity(): string;
+            set integrity(value: string);
+            get pathname(): string;
+            get mimeType(): string;
+            get version(): string;
+            get asset(): string;
+            get name(): string;
+            get type(): string;
+            set type(value: string);
+            get size(): number;
+            set size(value: number);
+            get org(): string;
+            toJSON(): {
+                integrity: string;
+                pathname: string;
+                mimeType: string;
+                type: string;
+                size: number;
+            };
+            get [Symbol.toStringTag](): string;
+        }>;
         get [Symbol.toStringTag](): string;
     };
 };

package/types/utils/utils.d.ts

@@ -9,7 +9,7 @@ export function readJSON(sink: any, path: string): Promise<any>;
  * @param {any} obj
  * @param {string} contentType
  */
-export function writeJSON(sink: any, path: string, obj: any, contentType: string): Promise<any>;
+export function writeJSON(sink: any, path: string, obj: any, contentType: string): Promise<Buffer<ArrayBuffer>>;
 /**
  * @param {any} from
  */