@muhgholy/next-drive 4.23.3 → 4.23.5

package/dist/{chunk-R43JCXQB.js → chunk-GV4HB2G6.js}

@@ -5,9 +5,9 @@ import os2 from 'os';
 import crypto2 from 'crypto';
 import mongoose, { Schema, isValidObjectId } from 'mongoose';
 import sharp2 from 'sharp';
-import { z } from 'zod';
 import ffmpeg from 'fluent-ffmpeg';
 import { google } from 'googleapis';
+import { z } from 'zod';
 
 // src/server/index.ts
 var informationSchema = new Schema({
@@ -324,35 +324,6 @@ var getDriveInformation = async (input) => {
   }
   return config.information(input);
 };
-var StorageAccountSchema = new Schema(
-  {
-    owner: { type: Schema.Types.Mixed, default: null },
-    name: { type: String, required: true },
-    metadata: {
-      provider: { type: String, enum: ["GOOGLE"], required: true },
-      google: {
-        email: { type: String, required: true },
-        credentials: { type: Schema.Types.Mixed, required: true }
-      }
-    },
-    createdAt: { type: Date, default: Date.now }
-  },
-  { minimize: false }
-);
-StorageAccountSchema.index({ owner: 1, "metadata.provider": 1 });
-StorageAccountSchema.index({ owner: 1, "metadata.google.email": 1 });
-StorageAccountSchema.method("toClient", async function() {
-  const data = this.toJSON();
-  return {
-    id: String(data._id),
-    owner: data.owner,
-    name: data.name,
-    metadata: data.metadata,
-    createdAt: data.createdAt
-  };
-});
-var StorageAccount = mongoose.models.StorageAccount || mongoose.model("StorageAccount", StorageAccountSchema);
-var account_default = StorageAccount;
 var validateMimeType = (mime, allowedTypes) => {
   if (allowedTypes.includes("*/*")) return true;
   return allowedTypes.some((pattern) => {
@@ -516,97 +487,6 @@ var getImageSettings = (fileSizeInBytes, qualityPreset, display, size, fit, posi
     ...resolvedPosition && { position: resolvedPosition }
   };
 };
-var objectIdSchema = z.string().refine((val) => isValidObjectId(val), {
-  message: "Invalid ObjectId format"
-});
-var sanitizeFilename = (name) => {
-  return name.replace(/[<>:"|?*\x00-\x1F]/g, "").replace(/^\.+/, "").replace(/\.+$/, "").replace(/\\/g, "/").replace(/\/+/g, "/").replace(/\.\.\//g, "").replace(/\.\.+/g, "").split("/").pop() || "".trim().slice(0, 255);
-};
-var sanitizeRegexInput = (input) => {
-  return input.replace(/[.*+?^${}()|[\]\\]/g, "\\$&").slice(0, 100);
-};
-var nameSchema = z.string().min(1, "Name is required").max(255, "Name too long").transform(sanitizeFilename).refine((val) => val.length > 0, { message: "Invalid name after sanitization" });
-var uploadChunkSchema = z.object({
-  chunkIndex: z.number().int().min(0).max(1e4),
-  totalChunks: z.number().int().min(1).max(1e4),
-  driveId: z.string().optional(),
-  fileName: nameSchema,
-  fileSize: z.number().int().min(0).max(Number.MAX_SAFE_INTEGER),
-  fileType: z.string().min(1).max(255),
-  folderId: z.string().optional()
-}).refine((data) => data.chunkIndex < data.totalChunks, {
-  message: "Chunk index must be less than total chunks"
-});
-var listQuerySchema = z.object({
-  folderId: z.union([z.literal("root"), objectIdSchema, z.undefined()]),
-  limit: z.string().optional().transform((val) => {
-    const num = parseInt(val || "50", 10);
-    return Math.min(Math.max(1, num), 100);
-  }),
-  afterId: objectIdSchema.optional()
-});
-z.object({
-  id: objectIdSchema,
-  token: z.string().optional()
-});
-z.object({
-  id: objectIdSchema,
-  size: z.enum(["small", "medium", "large"]).optional().default("medium"),
-  token: z.string().optional()
-});
-var renameBodySchema = z.object({
-  id: objectIdSchema,
-  newName: nameSchema
-});
-var deleteQuerySchema = z.object({
-  id: objectIdSchema
-});
-z.object({
-  ids: z.array(objectIdSchema).min(1).max(1e3)
-});
-var createFolderBodySchema = z.object({
-  name: nameSchema,
-  parentId: z.union([z.literal("root"), objectIdSchema, z.string().length(0), z.undefined()]).optional()
-});
-var moveBodySchema = z.object({
-  ids: z.array(objectIdSchema).min(1).max(1e3),
-  targetFolderId: z.union([z.literal("root"), objectIdSchema, z.undefined()]).optional()
-});
-z.object({
-  ids: z.array(objectIdSchema).min(1).max(1e3)
-});
-var searchQuerySchema = z.object({
-  q: z.string().min(1).max(100).transform(sanitizeRegexInput),
-  folderId: z.union([z.literal("root"), objectIdSchema, z.undefined()]).optional(),
-  limit: z.string().optional().transform((val) => {
-    const num = parseInt(val || "50", 10);
-    return Math.min(Math.max(1, num), 100);
-  }),
-  trashed: z.string().optional().transform((val) => val === "true")
-});
-z.object({
-  id: objectIdSchema
-});
-var cancelQuerySchema = z.object({
-  id: z.string().uuid()
-});
-z.object({
-  days: z.number().int().min(1).max(365).optional()
-});
-var driveFileSchemaZod = z.object({
-  id: z.string(),
-  file: z.object({
-    name: z.string(),
-    mime: z.string(),
-    size: z.number()
-  })
-});
-
-// src/server/security/cryptoUtils.ts
-function sanitizeContentDispositionFilename(filename) {
-  const basename = filename.replace(/^.*[\\\/]/, "");
-  return basename.replace(/["\r\n]/g, "").replace(/[^\x20-\x7E]/g, "").slice(0, 255);
-}
 var generatePlaceholderThumbnail = async (outputPath, mimeType) => {
   const typeParts = mimeType.split("/");
   const subtype = typeParts[1] || "file";
@@ -803,6 +683,37 @@ var LocalStorageProvider = {
   revokeToken: async (owner, accountId) => {
   }
 };
+var StorageAccountSchema = new Schema(
+  {
+    owner: { type: Schema.Types.Mixed, default: null },
+    name: { type: String, required: true },
+    metadata: {
+      provider: { type: String, enum: ["GOOGLE"], required: true },
+      google: {
+        email: { type: String, required: true },
+        credentials: { type: Schema.Types.Mixed, required: true }
+      }
+    },
+    createdAt: { type: Date, default: Date.now }
+  },
+  { minimize: false }
+);
+StorageAccountSchema.index({ owner: 1, "metadata.provider": 1 });
+StorageAccountSchema.index({ owner: 1, "metadata.google.email": 1 });
+StorageAccountSchema.method("toClient", async function() {
+  const data = this.toJSON();
+  return {
+    id: String(data._id),
+    owner: data.owner,
+    name: data.name,
+    metadata: data.metadata,
+    createdAt: data.createdAt
+  };
+});
+var StorageAccount = mongoose.models.StorageAccount || mongoose.model("StorageAccount", StorageAccountSchema);
+var account_default = StorageAccount;
+
+// src/server/providers/google.ts
 var createAuthClient = async (owner, accountId) => {
   const query = { owner, "metadata.provider": "GOOGLE" };
   if (accountId) query._id = accountId;
@@ -1269,6 +1180,8 @@ var GoogleDriveProvider = {
     }
   }
 };
+
+// src/server/controllers/drive.ts
 var getNextOrderValue = async (owner) => {
   const lastItem = await drive_default.findOne({ owner }, {}, { sort: { order: -1 } });
   return lastItem ? lastItem.order + 1 : 0;
@@ -1289,7 +1202,22 @@ var driveGetUrl = (fileId, options) => {
   }
   const signature = crypto2.createHmac("sha256", secret).update(`${fileId}:${expiryTimestamp}`).digest("hex");
   const token = Buffer.from(`${expiryTimestamp}:${signature}`).toString("base64url");
-  return `/api/drive?action=serve&id=${fileId}&token=${token}`;
+  return `${config.apiUrl || "/api/drive"}?action=serve&id=${fileId}&token=${token}`;
+};
+var driveAddSignedUrlToken = (item, config) => {
+  let token;
+  if (config.security?.signedUrls?.enabled && config.security.signedUrls.secret) {
+    const { secret, expiresIn } = config.security.signedUrls;
+    const expiryTimestamp = Math.floor(Date.now() / 1e3) + expiresIn;
+    const signature = crypto2.createHmac("sha256", secret).update(`${item.id}:${expiryTimestamp}`).digest("hex");
+    token = Buffer.from(`${expiryTimestamp}:${signature}`).toString("base64url");
+  }
+  const apiUrl = config.apiUrl || "/api/drive";
+  const url = `${apiUrl}?action=serve&id=${item.id}${token ? `&token=${token}` : ""}`;
+  return { ...item, token, url };
+};
+var driveAddSignedUrlTokens = (items, config) => {
+  return items.map((item) => driveAddSignedUrlToken(item, config));
 };
 var driveReadFile = async (file) => {
   let drive;
@@ -1449,7 +1377,8 @@ var driveList = async (options) => {
     query._id = { $lt: afterId };
   }
   const items = await drive_default.find(query, {}, { sort: { order: 1, _id: -1 }, limit });
-  return await Promise.all(items.map((item) => item.toClient()));
+  const config = getDriveConfig();
+  return driveAddSignedUrlTokens(await Promise.all(items.map((item) => item.toClient())), config);
 };
 var driveListFiles = async (options) => {
   const { key, folderId, accountId } = options;
@@ -1485,8 +1414,9 @@ var driveListFiles = async (options) => {
     drive_default.find(query, {}, { sort: { createdAt: -1 }, skip, limit })
   ]);
   const totalPages = Math.ceil(totalCount / limit);
+  const config = getDriveConfig();
   return {
-    items: await Promise.all(items.map((item) => item.toClient())),
+    items: driveAddSignedUrlTokens(await Promise.all(items.map((item) => item.toClient())), config),
     pagination: {
       page,
       limit,
@@ -1778,8 +1708,97 @@ var driveCleanup = async () => {
   }
   return { removed, totalFreedInBytes };
 };
+var objectIdSchema = z.string().refine((val) => isValidObjectId(val), {
+  message: "Invalid ObjectId format"
+});
+var sanitizeFilename = (name) => {
+  return name.replace(/[<>:"|?*\x00-\x1F]/g, "").replace(/^\.+/, "").replace(/\.+$/, "").replace(/\\/g, "/").replace(/\/+/g, "/").replace(/\.\.\//g, "").replace(/\.\.+/g, "").split("/").pop() || "".trim().slice(0, 255);
+};
+var sanitizeRegexInput = (input) => {
+  return input.replace(/[.*+?^${}()|[\]\\]/g, "\\$&").slice(0, 100);
+};
+var nameSchema = z.string().min(1, "Name is required").max(255, "Name too long").transform(sanitizeFilename).refine((val) => val.length > 0, { message: "Invalid name after sanitization" });
+var uploadChunkSchema = z.object({
+  chunkIndex: z.number().int().min(0).max(1e4),
+  totalChunks: z.number().int().min(1).max(1e4),
+  driveId: z.string().optional(),
+  fileName: nameSchema,
+  fileSize: z.number().int().min(0).max(Number.MAX_SAFE_INTEGER),
+  fileType: z.string().min(1).max(255),
+  folderId: z.string().optional()
+}).refine((data) => data.chunkIndex < data.totalChunks, {
+  message: "Chunk index must be less than total chunks"
+});
+var listQuerySchema = z.object({
+  folderId: z.union([z.literal("root"), objectIdSchema, z.undefined()]),
+  limit: z.string().optional().transform((val) => {
+    const num = parseInt(val || "50", 10);
+    return Math.min(Math.max(1, num), 100);
+  }),
+  afterId: objectIdSchema.optional()
+});
+z.object({
+  id: objectIdSchema,
+  token: z.string().optional()
+});
+z.object({
+  id: objectIdSchema,
+  size: z.enum(["small", "medium", "large"]).optional().default("medium"),
+  token: z.string().optional()
+});
+var renameBodySchema = z.object({
+  id: objectIdSchema,
+  newName: nameSchema
+});
+var deleteQuerySchema = z.object({
+  id: objectIdSchema
+});
+z.object({
+  ids: z.array(objectIdSchema).min(1).max(1e3)
+});
+var createFolderBodySchema = z.object({
+  name: nameSchema,
+  parentId: z.union([z.literal("root"), objectIdSchema, z.string().length(0), z.undefined()]).optional()
+});
+var moveBodySchema = z.object({
+  ids: z.array(objectIdSchema).min(1).max(1e3),
+  targetFolderId: z.union([z.literal("root"), objectIdSchema, z.undefined()]).optional()
+});
+z.object({
+  ids: z.array(objectIdSchema).min(1).max(1e3)
+});
+var searchQuerySchema = z.object({
+  q: z.string().min(1).max(100).transform(sanitizeRegexInput),
+  folderId: z.union([z.literal("root"), objectIdSchema, z.undefined()]).optional(),
+  limit: z.string().optional().transform((val) => {
+    const num = parseInt(val || "50", 10);
+    return Math.min(Math.max(1, num), 100);
+  }),
+  trashed: z.string().optional().transform((val) => val === "true")
+});
+z.object({
+  id: objectIdSchema
+});
+var cancelQuerySchema = z.object({
+  id: z.string().uuid()
+});
+z.object({
+  days: z.number().int().min(1).max(365).optional()
+});
+var driveFileSchemaZod = z.object({
+  id: z.string(),
+  file: z.object({
+    name: z.string(),
+    mime: z.string(),
+    size: z.number()
+  })
+});
 
-// src/server/index.ts
+// src/server/security/cryptoUtils.ts
+function sanitizeContentDispositionFilename(filename) {
+  const basename = filename.replace(/^.*[\\\/]/, "");
+  return basename.replace(/["\r\n]/g, "").replace(/[^\x20-\x7E]/g, "").slice(0, 255);
+}
 var getProvider = async (req, owner) => {
   const accountId = req.headers["x-drive-account"];
   if (!accountId || accountId === "LOCAL") {
@@ -1793,19 +1812,10 @@ var getProvider = async (req, owner) => {
   return { provider: LocalStorageProvider };
 };
 var addSignedUrlToken = (item, config) => {
-  if (!config.security?.signedUrls?.enabled || !config.security.signedUrls.secret) {
-    return item;
-  }
-  const { secret, expiresIn } = config.security.signedUrls;
-  const expiryTimestamp = Math.floor(Date.now() / 1e3) + expiresIn;
-  const signature = crypto2.createHmac("sha256", secret).update(`${item.id}:${expiryTimestamp}`).digest("hex");
-  return { ...item, token: Buffer.from(`${expiryTimestamp}:${signature}`).toString("base64url") };
+  return driveAddSignedUrlToken(item, config);
 };
 var addSignedUrlTokens = (items, config) => {
-  if (!config.security?.signedUrls?.enabled || !config.security.signedUrls.secret) {
-    return items;
-  }
-  return items.map((item) => addSignedUrlToken(item, config));
+  return driveAddSignedUrlTokens(items, config);
 };
 var applyCorsHeaders = (req, res, config) => {
   const cors = config.cors;
@@ -2525,5 +2535,5 @@ var driveAPIHandler = async (req, res) => {
 };
 
 export { driveAPIHandler, driveCleanup, driveConfiguration, driveDelete, driveFilePath, driveFileSchemaZod, driveGetUrl, driveInfo, driveList, driveListFiles, driveReadFile, driveUpload, drive_default, getDriveConfig, getDriveInformation };
-//# sourceMappingURL=chunk-R43JCXQB.js.map
-//# sourceMappingURL=chunk-R43JCXQB.js.map
+//# sourceMappingURL=chunk-GV4HB2G6.js.map
+//# sourceMappingURL=chunk-GV4HB2G6.js.map