@exabugs/dynamodb-client 1.5.2 → 1.6.0

package/dist/server/media/process-handler.js

@@ -0,0 +1,153 @@
+import sharp from 'sharp';
+import { CopyObjectCommand, GetObjectCommand, HeadObjectCommand, PutObjectCommand, S3Client, } from '@aws-sdk/client-s3';
+import { SSMClient } from '@aws-sdk/client-ssm';
+import { createLogger } from '../../shared/index.js';
+import { handleFindMany } from '../operations/findMany.js';
+import { handleUpdateOne } from '../operations/updateOne.js';
+import { isProcessableImage, verifyMagicBytes } from './magicBytes.js';
+import { buildContentDisposition, decodeOriginalFilename, extractAppMetadata } from './metadata.js';
+import { getImagePolicy } from './ssmParams.js';
+const logger = createLogger({ service: 'media-process-handler' });
+const s3Client = new S3Client({ region: process.env.AWS_REGION });
+const ssmClient = new SSMClient({ region: process.env.AWS_REGION });
+/** sharp のDoS対策（極端に大きい画素数の画像を拒否） */
+const MAX_INPUT_PIXELS = 100_000_000;
+/**
+ * マジックナンバー照合に必要な先頭バイト数。現状の照合表（magicBytes.ts）は
+ * 最大12バイト程度までしか見ないが、将来の形式追加を見込んで余裕を持たせる。
+ */
+const MAGIC_BYTES_CHECK_RANGE = 255;
+async function streamToBuffer(body) {
+    const bytes = await body.transformToByteArray();
+    return Buffer.from(bytes);
+}
+/**
+ * マジックナンバー照合用に、先頭の一部バイトだけを取得する。
+ *
+ * 非画像ファイル（CopyObjectで足りる）は、これ以上ファイル全体をメモリに
+ * 読み込む必要が無い。大きな動画・PDF等でも、この先頭バイトの取得だけで
+ * 検証が完結し、Lambdaのメモリを無駄に消費しない（詳細: docs/adr/0002-media-design.md）。
+ */
+async function getHeadBytes(bucket, key) {
+    const result = await s3Client.send(new GetObjectCommand({ Bucket: bucket, Key: key, Range: `bytes=0-${MAGIC_BYTES_CHECK_RANGE}` }));
+    return streamToBuffer(result.Body);
+}
+async function writeMediaRecord(fileId, fields, requestId) {
+    const now = new Date().toISOString();
+    await handleUpdateOne('media', {
+        id: fileId,
+        data: {
+            $set: { ...fields, updatedAt: now },
+            $setOnInsert: { createdAt: now },
+        },
+        options: { upsert: true },
+    }, requestId);
+}
+async function processRecord(bucket, rawKey) {
+    const key = decodeURIComponent(rawKey.replace(/\+/g, ' '));
+    const fileId = key.replace(/^raw\//, '');
+    const requestId = `s3-event-${fileId}`;
+    // fileId→内容の不変性を保証する: 同じpresignのTTL内（既定30秒）に2回目のPOSTが
+    // 行われた場合、raw/{fileId}への2回目のPutObjectイベントが発火しうる。既にこの
+    // fileIdがcompletedとして処理済みなら、再処理してmasterを上書きしない
+    // （process-handler-dlq.tsの重複配信対策と同じガード。詳細: docs/media-design.md
+    // 「presigned POSTの再利用・master不変性について」）
+    const existing = await handleFindMany('media', { ids: [fileId] }, requestId);
+    const existingRecord = existing[0];
+    if (existingRecord?.status === 'completed') {
+        logger.warn('Media already completed, ignoring re-upload to the same fileId', {
+            requestId,
+            fileId,
+        });
+        return;
+    }
+    const head = await s3Client.send(new HeadObjectCommand({ Bucket: bucket, Key: key }));
+    const contentType = head.ContentType || 'application/octet-stream';
+    const metadata = head.Metadata || {};
+    const originalFilename = decodeOriginalFilename(metadata['original-filename']);
+    // マジックナンバー照合は先頭バイトのみで完結する。非画像（CopyObjectで足りる）
+    // の場合、このあとファイル全体を読み込む必要が無い
+    const headBytes = await getHeadBytes(bucket, key);
+    if (!verifyMagicBytes(contentType, headBytes)) {
+        logger.warn('Content type does not match file signature', { requestId, fileId, contentType });
+        await writeMediaRecord(fileId, {
+            status: 'failed',
+            contentType,
+            error: 'Content type does not match file signature',
+        }, requestId);
+        return;
+    }
+    const masterKey = `master/${fileId}`;
+    const appMetadata = extractAppMetadata(metadata);
+    if (isProcessableImage(contentType)) {
+        const imagePolicyParam = process.env.IMAGE_POLICY_PARAM;
+        if (!imagePolicyParam) {
+            throw new Error('IMAGE_POLICY_PARAM environment variable is not set');
+        }
+        const imagePolicy = await getImagePolicy(ssmClient, imagePolicyParam);
+        // 画像処理にはファイル全体が必要なため、ここで改めて全量を取得する
+        const getResult = await s3Client.send(new GetObjectCommand({ Bucket: bucket, Key: key }));
+        const buffer = await streamToBuffer(getResult.Body);
+        const image = sharp(buffer, { limitInputPixels: MAX_INPUT_PIXELS }).rotate();
+        const inputMeta = await image.metadata();
+        const maxDim = imagePolicy.masterMaxDimension;
+        if ((inputMeta.width ?? 0) > maxDim || (inputMeta.height ?? 0) > maxDim) {
+            image.resize(maxDim, maxDim, { fit: 'inside', withoutEnlargement: true });
+        }
+        const outputBuffer = await image.jpeg().toBuffer();
+        const outputMeta = await sharp(outputBuffer).metadata();
+        await s3Client.send(new PutObjectCommand({
+            Bucket: bucket,
+            Key: masterKey,
+            Body: outputBuffer,
+            ContentType: 'image/jpeg',
+        }));
+        await writeMediaRecord(fileId, {
+            status: 'completed',
+            contentType,
+            outputContentType: 'image/jpeg',
+            dimensions: { width: outputMeta.width ?? 0, height: outputMeta.height ?? 0 },
+            size: outputBuffer.length,
+            ...(originalFilename ? { originalFilename } : {}),
+            ...appMetadata,
+        }, requestId);
+    }
+    else {
+        await s3Client.send(new CopyObjectCommand({
+            Bucket: bucket,
+            Key: masterKey,
+            CopySource: `${bucket}/${key}`,
+            MetadataDirective: 'REPLACE',
+            ContentType: contentType,
+            ContentDisposition: buildContentDisposition(originalFilename),
+        }));
+        await writeMediaRecord(fileId, {
+            status: 'completed',
+            contentType,
+            outputContentType: contentType,
+            size: head.ContentLength ?? 0,
+            ...(originalFilename ? { originalFilename } : {}),
+            ...appMetadata,
+        }, requestId);
+    }
+    logger.info('Media processed', { requestId, fileId, contentType });
+}
+export const handler = async (event) => {
+    for (const record of event.Records) {
+        const bucket = record.s3.bucket.name;
+        const key = record.s3.object.key;
+        try {
+            await processRecord(bucket, key);
+        }
+        catch (error) {
+            logger.error('Failed to process media', {
+                bucket,
+                key,
+                error: error instanceof Error ? error.message : String(error),
+            });
+            // 再スロー: Lambda非同期呼び出しのリトライに乗せ、尽きたらon-failure宛先（DLQ）へ送る
+            throw error;
+        }
+    }
+};
+//# sourceMappingURL=process-handler.js.map

package/dist/server/media/process-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-handler.js","sourceRoot":"","sources":["../../../src/server/media/process-handler.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,QAAQ,GACT,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACpG,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAGhD,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC,CAAC;AAElE,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;AAClE,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;AAEpE,oCAAoC;AACpC,MAAM,gBAAgB,GAAG,WAAW,CAAC;AAErC;;;GAGG;AACH,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAEpC,KAAK,UAAU,cAAc,CAAC,IAAa;IACzC,MAAM,KAAK,GAAG,MACZ,IACD,CAAC,oBAAoB,EAAE,CAAC;IACzB,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,GAAW;IACrD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAChC,IAAI,gBAAgB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,uBAAuB,EAAE,EAAE,CAAC,CAChG,CAAC;IACF,OAAO,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACrC,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,MAAc,EACd,MAA+B,EAC/B,SAAiB;IAEjB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,eAAe,CACnB,OAAO,EACP;QACE,EAAE,EAAE,MAAM;QACV,IAAI,EAAE;YACJ,IAAI,EAAE,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE;YACnC,YAAY,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE;SACjC;QACD,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;KAC1B,EACD,SAAS,CACV,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,MAAc,EAAE,MAAc;IACzD,MAAM,GAAG,GAAG,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,YAAY,MAAM,EAAE,CAAC;IAEvC,sDAAsD;IACtD,oDAAoD;IACpD,+CAA+C;IAC/C,gEAAgE;IAChE,sCAAsC;IACtC,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IAC7E,MAAM,cAAc,GAAG,QAAQ,CAAC,CAAC,CAA4B,CAAC;IAC9D,IAAI,cAAc,EAAE,MAAM,KAAK,WAAW,EAAE,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,gEAAgE,EAAE;YAC5E,SAAS;YACT,MAAM;SACP,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IACtF,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,0BAA0B,CAAC;IACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;IACrC,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAE/E,8CAA8C;IAC9C,2BAA2B;IAC3B,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAElD,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QAC9F,MAAM,gBAAgB,CACpB,MAAM,EACN;YACE,MAAM,EAAE,QAAQ;YAChB,WAAW;YACX,KAAK,EAAE,4CAA4C;SACpD,EACD,SAAS,CACV,CAAC;QACF,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,UAAU,MAAM,EAAE,CAAC;IACrC,MAAM,WAAW,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAEjD,IAAI,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC;QACpC,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACxD,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;QAEtE,mCAAmC;QACnC,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAC1F,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAEpD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QAC7E,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,WAAW,CAAC,kBAAkB,CAAC;QAC9C,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,MAAM,EAAE,CAAC;YACxE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5E,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC;QACnD,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;QAExD,MAAM,QAAQ,CAAC,IAAI,CACjB,IAAI,gBAAgB,CAAC;YACnB,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,SAAS;YACd,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE,YAAY;SAC1B,CAAC,CACH,CAAC;QAEF,MAAM,gBAAgB,CACpB,MAAM,EACN;YACE,MAAM,EAAE,WAAW;YACnB,WAAW;YACX,iBAAiB,EAAE,YAAY;YAC/B,UAAU,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,IAAI,CAAC,EAAE;YAC5E,IAAI,EAAE,YAAY,CAAC,MAAM;YACzB,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,WAAW;SACf,EACD,SAAS,CACV,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,CAAC,IAAI,CACjB,IAAI,iBAAiB,CAAC;YACpB,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,SAAS;YACd,UAAU,EAAE,GAAG,MAAM,IAAI,GAAG,EAAE;YAC9B,iBAAiB,EAAE,SAAS;YAC5B,WAAW,EAAE,WAAW;YACxB,kBAAkB,EAAE,uBAAuB,CAAC,gBAAgB,CAAC;SAC9D,CAAC,CACH,CAAC;QAEF,MAAM,gBAAgB,CACpB,MAAM,EACN;YACE,MAAM,EAAE,WAAW;YACnB,WAAW;YACX,iBAAiB,EAAE,WAAW;YAC9B,IAAI,EAAE,IAAI,CAAC,aAAa,IAAI,CAAC;YAC7B,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,WAAW;SACf,EACD,SAAS,CACV,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,MAAM,OAAO,GAAc,KAAK,EAAE,KAAc,EAAiB,EAAE;IACxE,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;QACrC,MAAM,GAAG,GAAG,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;gBACtC,MAAM;gBACN,GAAG;gBACH,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,uDAAuD;YACvD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC,CAAC"}

package/dist/server/media/sign.d.ts

@@ -0,0 +1,11 @@
+import type { SignMediaUrlParams, SignMediaUrlResult } from './types.js';
+/**
+ * メディア配信用の署名付きURLを生成する。
+ *
+ * width指定時は /resize/{fileId}?width=N、省略時は /master/{fileId} に署名する
+ * （呼び出し元が具体的な幅を決めてから呼ぶこと。ワイルドカード署名はしない）。
+ *
+ * 秘密鍵の取得はこの関数の責務外（引数で受け取るだけ）。
+ */
+export declare function signMediaUrl(params: SignMediaUrlParams): SignMediaUrlResult;
+//# sourceMappingURL=sign.d.ts.map

package/dist/server/media/sign.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign.d.ts","sourceRoot":"","sources":["../../../src/server/media/sign.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAmBzE;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,kBAAkB,GAAG,kBAAkB,CAqB3E"}

package/dist/server/media/sign.js

@@ -0,0 +1,49 @@
+/**
+ * メディア配信用の署名付きURL生成（CloudFront Canned Policy）
+ *
+ * 「誰に署名URLを発行するか」の判断はこの関数の責務外（呼び出し側アプリが担う）。
+ * この関数は「有効なリクエストになら署名する」機構のみを提供する（詳細: docs/media-design.md）。
+ */
+import { getSignedUrl } from '@aws-sdk/cloudfront-signer';
+/**
+ * Expires（epoch seconds）を計算する。
+ *
+ * 生の「現在時刻+TTL」をそのまま使うと、署名APIを呼ぶたびに毎回異なる署名URLになり
+ * クライアント側のブラウザキャッシュが効かない。TTL単位の境界に切り上げることで、
+ * 同じ時間帯内は同一URLになりブラウザキャッシュも活用できる。
+ *
+ * 必ず「現在時刻+TTLを切り上げる」のであって、「現在時刻を切り上げる」のではない
+ * ことに注意する。後者だと、TTL境界の直前に発行した場合に有効期間がTTLよりずっと
+ * 短くなってしまう（例: TTL=3600秒で境界の1秒前に発行すると有効期間は1秒になる）。
+ * この実装は常に [TTL, 2*TTL) の範囲の有効期間を保証する。
+ */
+function computeExpiry(nowSeconds, ttlSeconds) {
+    const target = nowSeconds + ttlSeconds;
+    return Math.ceil(target / ttlSeconds) * ttlSeconds;
+}
+/**
+ * メディア配信用の署名付きURLを生成する。
+ *
+ * width指定時は /resize/{fileId}?width=N、省略時は /master/{fileId} に署名する
+ * （呼び出し元が具体的な幅を決めてから呼ぶこと。ワイルドカード署名はしない）。
+ *
+ * 秘密鍵の取得はこの関数の責務外（引数で受け取るだけ）。
+ */
+export function signMediaUrl(params) {
+    const { fileId, width, keyPairId, privateKey, baseUrl, expiresInSeconds } = params;
+    if (width !== undefined && width < 1) {
+        throw new Error(`Invalid width: ${width}`);
+    }
+    const path = width !== undefined ? `/resize/${fileId}?width=${width}` : `/master/${fileId}`;
+    const targetUrl = `${baseUrl.replace(/\/$/, '')}${path}`;
+    const nowSeconds = Math.floor(Date.now() / 1000);
+    const expiresAt = computeExpiry(nowSeconds, expiresInSeconds);
+    const url = getSignedUrl({
+        url: targetUrl,
+        dateLessThan: new Date(expiresAt * 1000).toISOString(),
+        keyPairId,
+        privateKey,
+    });
+    return { fileId, width, url, expiresAt };
+}
+//# sourceMappingURL=sign.js.map

package/dist/server/media/sign.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign.js","sourceRoot":"","sources":["../../../src/server/media/sign.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAI1D;;;;;;;;;;;GAWG;AACH,SAAS,aAAa,CAAC,UAAkB,EAAE,UAAkB;IAC3D,MAAM,MAAM,GAAG,UAAU,GAAG,UAAU,CAAC;IACvC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,GAAG,UAAU,CAAC;AACrD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,MAA0B;IACrD,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,gBAAgB,EAAE,GAAG,MAAM,CAAC;IAEnF,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,MAAM,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,WAAW,MAAM,EAAE,CAAC;IAC5F,MAAM,SAAS,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC;IAEzD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,aAAa,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;IAE9D,MAAM,GAAG,GAAG,YAAY,CAAC;QACvB,GAAG,EAAE,SAAS;QACd,YAAY,EAAE,IAAI,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;QACtD,SAAS;QACT,UAAU;KACX,CAAC,CAAC;IAEH,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;AAC3C,CAAC"}

package/dist/server/media/ssmParams.d.ts

@@ -0,0 +1,29 @@
+/**
+ * image policy・署名鍵をParameter Storeから取得する共通ロジック
+ *
+ * モジュールスコープにキャッシュし、コールドスタートごとに再取得する
+ * （詳細: docs/media-design.md「image policyの管理」）。
+ *
+ * 取得失敗時（未登録・不正なJSON）はfail-closedとする（例外を投げる）。
+ * 「取得できない＝無制限を許可」になる実装ミスを避けるため、呼び出し側は
+ * この例外をそのままリクエスト拒否として扱うこと。
+ */
+import { type SSMClient } from '@aws-sdk/client-ssm';
+import type { ImagePolicy } from './types.js';
+/**
+ * image policyをParameter Storeから取得する（モジュールスコープにキャッシュ）。
+ *
+ * @throws パラメータが未登録、または値が不正なJSON/スキーマの場合
+ */
+export declare function getImagePolicy(ssmClient: SSMClient, paramName: string): Promise<ImagePolicy>;
+/**
+ * 署名用秘密鍵をParameter Storeから取得する（モジュールスコープにキャッシュ）。
+ *
+ * @throws パラメータが未登録の場合
+ */
+export declare function getSigningPrivateKey(ssmClient: SSMClient, paramName: string): Promise<string>;
+/**
+ * キャッシュをクリアする（テスト専用）。
+ */
+export declare function clearSsmParamsCache(): void;
+//# sourceMappingURL=ssmParams.d.ts.map

package/dist/server/media/ssmParams.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssmParams.d.ts","sourceRoot":"","sources":["../../../src/server/media/ssmParams.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAuB,KAAK,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAE1E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAkB9C;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,SAAS,EAAE,SAAS,EACpB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,WAAW,CAAC,CAsBtB;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,SAAS,EACpB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,CAajB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,IAAI,CAG1C"}

package/dist/server/media/ssmParams.js

@@ -0,0 +1,74 @@
+/**
+ * image policy・署名鍵をParameter Storeから取得する共通ロジック
+ *
+ * モジュールスコープにキャッシュし、コールドスタートごとに再取得する
+ * （詳細: docs/media-design.md「image policyの管理」）。
+ *
+ * 取得失敗時（未登録・不正なJSON）はfail-closedとする（例外を投げる）。
+ * 「取得できない＝無制限を許可」になる実装ミスを避けるため、呼び出し側は
+ * この例外をそのままリクエスト拒否として扱うこと。
+ */
+import { GetParameterCommand } from '@aws-sdk/client-ssm';
+let cachedImagePolicy;
+let cachedSigningPrivateKey;
+function isValidImagePolicy(value) {
+    if (typeof value !== 'object' || value === null)
+        return false;
+    const v = value;
+    return (typeof v.masterMaxDimension === 'number' &&
+        v.masterMaxDimension > 0 &&
+        Array.isArray(v.allowedContentTypes) &&
+        v.allowedContentTypes.every((t) => typeof t === 'string') &&
+        typeof v.maxUploadSize === 'number' &&
+        v.maxUploadSize > 0);
+}
+/**
+ * image policyをParameter Storeから取得する（モジュールスコープにキャッシュ）。
+ *
+ * @throws パラメータが未登録、または値が不正なJSON/スキーマの場合
+ */
+export async function getImagePolicy(ssmClient, paramName) {
+    if (cachedImagePolicy)
+        return cachedImagePolicy;
+    const result = await ssmClient.send(new GetParameterCommand({ Name: paramName }));
+    const rawValue = result.Parameter?.Value;
+    if (!rawValue) {
+        throw new Error(`Image policy parameter not found: ${paramName}`);
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(rawValue);
+    }
+    catch {
+        throw new Error(`Image policy parameter is not valid JSON: ${paramName}`);
+    }
+    if (!isValidImagePolicy(parsed)) {
+        throw new Error(`Image policy parameter has invalid shape: ${paramName}`);
+    }
+    cachedImagePolicy = parsed;
+    return parsed;
+}
+/**
+ * 署名用秘密鍵をParameter Storeから取得する（モジュールスコープにキャッシュ）。
+ *
+ * @throws パラメータが未登録の場合
+ */
+export async function getSigningPrivateKey(ssmClient, paramName) {
+    if (cachedSigningPrivateKey)
+        return cachedSigningPrivateKey;
+    const result = await ssmClient.send(new GetParameterCommand({ Name: paramName, WithDecryption: true }));
+    const value = result.Parameter?.Value;
+    if (!value) {
+        throw new Error(`Signing private key parameter not found: ${paramName}`);
+    }
+    cachedSigningPrivateKey = value;
+    return value;
+}
+/**
+ * キャッシュをクリアする（テスト専用）。
+ */
+export function clearSsmParamsCache() {
+    cachedImagePolicy = undefined;
+    cachedSigningPrivateKey = undefined;
+}
+//# sourceMappingURL=ssmParams.js.map

package/dist/server/media/ssmParams.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssmParams.js","sourceRoot":"","sources":["../../../src/server/media/ssmParams.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,mBAAmB,EAAkB,MAAM,qBAAqB,CAAC;AAI1E,IAAI,iBAA0C,CAAC;AAC/C,IAAI,uBAA2C,CAAC;AAEhD,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,OAAO,CACL,OAAO,CAAC,CAAC,kBAAkB,KAAK,QAAQ;QACxC,CAAC,CAAC,kBAAkB,GAAG,CAAC;QACxB,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC;QACpC,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;QACzD,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ;QACnC,CAAC,CAAC,aAAa,GAAG,CAAC,CACpB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,SAAoB,EACpB,SAAiB;IAEjB,IAAI,iBAAiB;QAAE,OAAO,iBAAiB,CAAC;IAEhD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IAClF,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC;IACzC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,qCAAqC,SAAS,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,6CAA6C,SAAS,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,6CAA6C,SAAS,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,iBAAiB,GAAG,MAAM,CAAC;IAC3B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,SAAoB,EACpB,SAAiB;IAEjB,IAAI,uBAAuB;QAAE,OAAO,uBAAuB,CAAC;IAE5D,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CACjC,IAAI,mBAAmB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CACnE,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC;IACtC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,4CAA4C,SAAS,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,uBAAuB,GAAG,KAAK,CAAC;IAChC,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB;IACjC,iBAAiB,GAAG,SAAS,CAAC;IAC9B,uBAAuB,GAAG,SAAS,CAAC;AACtC,CAAC"}

package/dist/server/media/types.d.ts

@@ -0,0 +1,109 @@
+/**
+ * メディア機能の型定義
+ *
+ * 詳細設計: docs/media-design.md
+ */
+import type { S3Client } from '@aws-sdk/client-s3';
+/**
+ * メディアレコードの処理状態
+ *
+ * `pending`は存在しない。レコードが無ければ処理中を意味する
+ * （presign発行時点ではDynamoDBに触れない設計のため）。
+ */
+export type MediaStatus = 'completed' | 'failed';
+/**
+ * メディアレコード（共通フィールドのみ）
+ *
+ * アプリ固有の追加フィールドは、process-handlerがS3オブジェクトメタデータから
+ * 読み取った値をそのまま書き込む（本型はフィールド名を規定しない）。
+ */
+export interface MediaRecord {
+    /** fileId（ULID） */
+    id: string;
+    status: MediaStatus;
+    /** アップロード時に申告され、実バイトと照合済みのMIMEタイプ */
+    contentType: string;
+    /**
+     * masterとして実際に保存される形式（画像なら'image/jpeg'、それ以外はcontentTypeと同じ）。
+     * contentTypeとの不一致を明示的に区別する
+     */
+    outputContentType: string;
+    originalFilename?: string;
+    /** master（画像の場合のみ）の寸法 */
+    dimensions?: {
+        width: number;
+        height: number;
+    };
+    /** masterのファイルサイズ（バイト） */
+    size?: number;
+    error?: string;
+    createdAt: string;
+    updatedAt: string;
+    [key: string]: unknown;
+}
+/**
+ * image policy（Parameter Store経由で実行時取得するJSON）
+ *
+ * 呼び出し側のpresign発行処理（allowedContentTypes/maxUploadSize）、
+ * process-handler（masterMaxDimension）、
+ * media-handler（widthの健全性チェック上限として masterMaxDimension を流用）が参照する。
+ *
+ * 下限は固定 `1`（独立フィールドは持たない。署名付きURL必須のため、
+ * 健全性チェック以外の制約は不要という設計判断。詳細: docs/media-design.md）。
+ */
+export interface ImagePolicy {
+    /** process-handlerがmaster生成時に使う長辺上限。media-handlerのwidth上限チェックにも流用する */
+    masterMaxDimension: number;
+    /** presign発行時に使う許可MIMEタイプ */
+    allowedContentTypes: string[];
+    /** presign発行時に使う最大アップロードサイズ（バイト） */
+    maxUploadSize: number;
+}
+/**
+ * generatePresignedUpload の引数
+ */
+export interface PresignedUploadParams {
+    s3Client: S3Client;
+    bucket: string;
+    contentType: string;
+    originalFilename?: string;
+    fileSize: number;
+    allowedContentTypes: string[];
+    maxUploadSize: number;
+    /** x-amz-meta-{key} としてpolicyのeq条件に固定するアプリ固有メタデータ */
+    metadata: Record<string, string>;
+    /** presigned POSTの有効期限（秒）。省略時は30秒（presign.ts参照） */
+    expiresInSeconds?: number;
+}
+/**
+ * generatePresignedUpload の戻り値
+ */
+export interface PresignedUploadResult {
+    fileId: string;
+    uploadUrl: string;
+    fields: Record<string, string>;
+}
+/**
+ * signMediaUrl の引数
+ */
+export interface SignMediaUrlParams {
+    fileId: string;
+    /** 指定時は /resize/{fileId}?width=N、省略時は /master/{fileId} に署名する */
+    width?: number;
+    keyPairId: string;
+    privateKey: string;
+    baseUrl: string;
+    /** 有効期限（秒）。Expiresはこの粒度に切り上げてから署名する */
+    expiresInSeconds: number;
+}
+/**
+ * signMediaUrl の戻り値
+ */
+export interface SignMediaUrlResult {
+    fileId: string;
+    width?: number;
+    url: string;
+    /** 署名に使ったExpires（epoch seconds、丸め込み後） */
+    expiresAt: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/server/media/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/server/media/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAEnD;;;;;GAKG;AACH,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,QAAQ,CAAC;AAEjD;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,mBAAmB;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,WAAW,CAAC;IACpB,qCAAqC;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,yBAAyB;IACzB,UAAU,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,0BAA0B;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,WAAW;IAC1B,uEAAuE;IACvE,kBAAkB,EAAE,MAAM,CAAC;IAC3B,6BAA6B;IAC7B,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,oCAAoC;IACpC,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,QAAQ,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,aAAa,EAAE,MAAM,CAAC;IACtB,qDAAqD;IACrD,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,mDAAmD;IACnD,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,gEAAgE;IAChE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,uCAAuC;IACvC,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,yCAAyC;IACzC,SAAS,EAAE,MAAM,CAAC;CACnB"}

package/dist/server/media/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/server/media/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/server/media/types.ts"],"names":[],"mappings":""}

package/dist/server/media/upload-handler.d.ts

@@ -0,0 +1,50 @@
+/**
+ * presign発行・署名付きURL発行を扱うLambda Function URL用ハンドラー（標準実装）
+ *
+ * 「誰にpresign/署名URLを発行してよいか」の判断はこのライブラリの関心事ではない
+ * （詳細: docs/media-design.md）。このハンドラーは`authorize`フックを通じて
+ * 呼び出し側アプリの認証・認可ロジックを注入できるようにする。
+ *
+ * より高度な認可（例: リソース単位の権限チェック）が必要な場合、呼び出し側は
+ * このハンドラーを使わず、`./presign.js`・`./sign.js`を自前のルーティング・
+ * 認可レイヤーから直接呼び出すこともできる。
+ */
+import type { APIGatewayProxyEventV2, APIGatewayProxyStructuredResultV2 } from 'aws-lambda';
+import { S3Client } from '@aws-sdk/client-s3';
+import { SSMClient } from '@aws-sdk/client-ssm';
+/**
+ * リクエストを認可し、presign発行時にpolicyへ固定するメタデータを返す。
+ * 認可できない場合はnullを返す（401を返す）。
+ */
+export type AuthorizeFn = (event: APIGatewayProxyEventV2) => Promise<Record<string, string> | null>;
+export interface UploadHandlerConfig {
+    bucket: string;
+    imagePolicyParam: string;
+    signingPrivateKeyParam: string;
+    keyPairId: string;
+    baseUrl: string;
+    authorize: AuthorizeFn;
+    signExpiresInSeconds?: number;
+    s3Client?: S3Client;
+    ssmClient?: SSMClient;
+}
+/**
+ * 設定を注入してLambda Function URLハンドラーを生成する。
+ *
+ * @example
+ * ```ts
+ * export const handler = createUploadHandler({
+ *   bucket: process.env.MEDIA_BUCKET!,
+ *   imagePolicyParam: process.env.IMAGE_POLICY_PARAM!,
+ *   signingPrivateKeyParam: process.env.SIGNING_PRIVATE_KEY_PARAM!,
+ *   keyPairId: process.env.CLOUDFRONT_KEY_PAIR_ID!,
+ *   baseUrl: process.env.MEDIA_BASE_URL!,
+ *   authorize: async (event) => {
+ *     const userId = await verifyMyAppJwt(event.headers.authorization);
+ *     return userId ? { ownerId: userId } : null;
+ *   },
+ * });
+ * ```
+ */
+export declare function createUploadHandler(config: UploadHandlerConfig): (event: APIGatewayProxyEventV2) => Promise<APIGatewayProxyStructuredResultV2>;
+//# sourceMappingURL=upload-handler.d.ts.map

package/dist/server/media/upload-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload-handler.d.ts","sourceRoot":"","sources":["../../../src/server/media/upload-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,sBAAsB,EAAE,iCAAiC,EAAE,MAAM,YAAY,CAAC;AAE5F,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAWhD;;;GAGG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,KAAK,EAAE,sBAAsB,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;AAEpG,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,WAAW,CAAC;IACvB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB;AA0FD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,mBAAmB,GAC1B,CAAC,KAAK,EAAE,sBAAsB,KAAK,OAAO,CAAC,iCAAiC,CAAC,CAiC/E"}

package/dist/server/media/upload-handler.js

@@ -0,0 +1,115 @@
+import { S3Client } from '@aws-sdk/client-s3';
+import { SSMClient } from '@aws-sdk/client-ssm';
+import { createLogger } from '../../shared/index.js';
+import { generatePresignedUpload } from './presign.js';
+import { signMediaUrl } from './sign.js';
+import { getImagePolicy, getSigningPrivateKey } from './ssmParams.js';
+const logger = createLogger({ service: 'media-upload-handler' });
+const DEFAULT_SIGN_EXPIRES_IN_SECONDS = 3600;
+function jsonResponse(statusCode, body) {
+    return {
+        statusCode,
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify(body),
+    };
+}
+function parseBody(event) {
+    if (!event.body)
+        return {};
+    const raw = event.isBase64Encoded
+        ? Buffer.from(event.body, 'base64').toString('utf-8')
+        : event.body;
+    return JSON.parse(raw);
+}
+async function handlePresign(event, config, s3Client, ssmClient, metadata, requestId) {
+    const body = parseBody(event);
+    if (!body.contentType || !body.fileSize) {
+        return jsonResponse(400, { error: 'contentType and fileSize are required' });
+    }
+    const imagePolicy = await getImagePolicy(ssmClient, config.imagePolicyParam);
+    const result = await generatePresignedUpload({
+        s3Client,
+        bucket: config.bucket,
+        contentType: body.contentType,
+        originalFilename: body.originalFilename,
+        fileSize: body.fileSize,
+        allowedContentTypes: imagePolicy.allowedContentTypes,
+        maxUploadSize: imagePolicy.maxUploadSize,
+        metadata,
+    });
+    logger.info('Presign issued', { requestId, fileId: result.fileId });
+    return jsonResponse(200, result);
+}
+async function handleSign(event, config, ssmClient, requestId) {
+    const body = parseBody(event);
+    if (!Array.isArray(body.items) || body.items.length === 0) {
+        return jsonResponse(400, { error: 'items is required and must be non-empty' });
+    }
+    const privateKey = await getSigningPrivateKey(ssmClient, config.signingPrivateKeyParam);
+    const expiresInSeconds = config.signExpiresInSeconds ?? DEFAULT_SIGN_EXPIRES_IN_SECONDS;
+    const items = body.items.map((item) => {
+        if (!item.fileId) {
+            throw new Error('Each item must have fileId');
+        }
+        return signMediaUrl({
+            fileId: item.fileId,
+            width: item.width,
+            keyPairId: config.keyPairId,
+            privateKey,
+            baseUrl: config.baseUrl,
+            expiresInSeconds,
+        });
+    });
+    logger.info('Media URLs signed', { requestId, count: items.length });
+    return jsonResponse(200, { items });
+}
+/**
+ * 設定を注入してLambda Function URLハンドラーを生成する。
+ *
+ * @example
+ * ```ts
+ * export const handler = createUploadHandler({
+ *   bucket: process.env.MEDIA_BUCKET!,
+ *   imagePolicyParam: process.env.IMAGE_POLICY_PARAM!,
+ *   signingPrivateKeyParam: process.env.SIGNING_PRIVATE_KEY_PARAM!,
+ *   keyPairId: process.env.CLOUDFRONT_KEY_PAIR_ID!,
+ *   baseUrl: process.env.MEDIA_BASE_URL!,
+ *   authorize: async (event) => {
+ *     const userId = await verifyMyAppJwt(event.headers.authorization);
+ *     return userId ? { ownerId: userId } : null;
+ *   },
+ * });
+ * ```
+ */
+export function createUploadHandler(config) {
+    const s3Client = config.s3Client ?? new S3Client({ region: process.env.AWS_REGION });
+    const ssmClient = config.ssmClient ?? new SSMClient({ region: process.env.AWS_REGION });
+    return async (event) => {
+        const requestId = event.requestContext.requestId;
+        const method = event.requestContext.http.method;
+        const path = event.rawPath;
+        try {
+            const metadata = await config.authorize(event);
+            if (!metadata) {
+                return jsonResponse(401, { error: 'Unauthorized' });
+            }
+            if (method === 'POST' && path.endsWith('/presign')) {
+                return await handlePresign(event, config, s3Client, ssmClient, metadata, requestId);
+            }
+            if (method === 'POST' && path.endsWith('/sign')) {
+                return await handleSign(event, config, ssmClient, requestId);
+            }
+            return jsonResponse(404, { error: 'Not found' });
+        }
+        catch (error) {
+            logger.error('Upload handler error', {
+                requestId,
+                error: error instanceof Error ? error.message : String(error),
+            });
+            return jsonResponse(400, {
+                error: error instanceof Error ? error.message : 'Bad request',
+            });
+        }
+    };
+}
+//# sourceMappingURL=upload-handler.js.map

package/dist/server/media/upload-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload-handler.js","sourceRoot":"","sources":["../../../src/server/media/upload-handler.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAEtE,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;AAEjE,MAAM,+BAA+B,GAAG,IAAI,CAAC;AA8B7C,SAAS,YAAY,CAAC,UAAkB,EAAE,IAAa;IACrD,OAAO;QACL,UAAU;QACV,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAI,KAA6B;IACjD,IAAI,CAAC,KAAK,CAAC,IAAI;QAAE,OAAO,EAAO,CAAC;IAChC,MAAM,GAAG,GAAG,KAAK,CAAC,eAAe;QAC/B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;QACrD,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;IACf,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAM,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,KAA6B,EAC7B,MAA2B,EAC3B,QAAkB,EAClB,SAAoB,EACpB,QAAgC,EAChC,SAAiB;IAEjB,MAAM,IAAI,GAAG,SAAS,CAAqB,KAAK,CAAC,CAAC;IAClD,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACxC,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAE7E,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC;QAC3C,QAAQ;QACR,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,mBAAmB,EAAE,WAAW,CAAC,mBAAmB;QACpD,aAAa,EAAE,WAAW,CAAC,aAAa;QACxC,QAAQ;KACT,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACpE,OAAO,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACnC,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,KAA6B,EAC7B,MAA2B,EAC3B,SAAoB,EACpB,SAAiB;IAEjB,MAAM,IAAI,GAAG,SAAS,CAAkB,KAAK,CAAC,CAAC;IAC/C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1D,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,yCAAyC,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,SAAS,EAAE,MAAM,CAAC,sBAAsB,CAAC,CAAC;IACxF,MAAM,gBAAgB,GAAG,MAAM,CAAC,oBAAoB,IAAI,+BAA+B,CAAC;IAExF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACpC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,YAAY,CAAC;YAClB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,UAAU;YACV,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,gBAAgB;SACjB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACrE,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAA2B;IAE3B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,IAAI,QAAQ,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IACrF,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,IAAI,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IAExF,OAAO,KAAK,EAAE,KAA6B,EAA8C,EAAE;QACzF,MAAM,SAAS,GAAG,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC;QACjD,MAAM,MAAM,GAAG,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC;QAChD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC;QAE3B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YACtD,CAAC;YAED,IAAI,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBACnD,OAAO,MAAM,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;YACtF,CAAC;YACD,IAAI,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAChD,OAAO,MAAM,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;YAC/D,CAAC;YAED,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE;gBACnC,SAAS;gBACT,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,OAAO,YAAY,CAAC,GAAG,EAAE;gBACvB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa;aAC9D,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}