@nexusts/upload 0.7.2

package/README.md

@@ -0,0 +1,41 @@
+# @nexusts/upload
+
+> **NexusTS** — Bun-native fullstack framework
+
+## Description
+
+Multipart file upload with validation.
+
+@Upload() / @UploadedFile() decorators. Size limits, MIME validation, count limits. Stores through the configured drive driver.
+
+## Install
+
+This module is part of the NexusTS monorepo. Each module is published as its own npm package under the `@nexusts/` scope.
+
+Most apps start with just the core:
+
+```bash
+bun add @nexusts/core
+```
+
+Then add this module only if you need it:
+
+```bash
+bun add @nexusts/upload
+```
+
+## Peer dependencies
+
+**None.** No external dependencies. Files are stored through the configured `@nexusts/drive` driver.
+
+## Usage
+
+```typescript
+import { /* public API */ } from "@nexusts/upload";
+```
+
+See the [user guide](../../docs/user-guide/upload.md) and the [example app](../../examples/) for a working demo.
+
+## License
+
+MIT — see the root [LICENSE](../../LICENSE).

package/dist/decorators/index.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Decorator barrel.
+ */
+export { Upload } from "./upload.js";
+export { UploadedFile, getUploadedFile, getUploadedFiles } from "./uploaded-file.js";

package/dist/decorators/upload.d.ts

@@ -0,0 +1,15 @@
+/**
+ * `@Upload('fieldName', opts?)` — declare that a controller method
+ * expects one or more uploaded files in `multipart/form-data`.
+ *
+ *   @Post('/avatars')
+ *   @Upload('avatar')
+ *   async upload(@UploadedFile('avatar') file: UploadedFile) { ... }
+ *
+ *   @Post('/photos')
+ *   @Upload('photos', { maxFiles: 10 })
+ *   async multi(@UploadedFiles('photos') files: UploadedFile[]) { ... }
+ */
+import "reflect-metadata";
+import { type UploadOptions } from "../types.js";
+export declare function Upload(name?: string, options?: UploadOptions): MethodDecorator;

package/dist/decorators/uploaded-file.d.ts

@@ -0,0 +1,9 @@
+export declare const UploadedFile: (fieldName?: string) => ParameterDecorator;
+/**
+ * Resolve a `@UploadedFile(name)` call against a Hono context. The
+ * framework invokes this from its param pipeline. Application
+ * code typically does not call this directly — use the decorator.
+ */
+export declare function getUploadedFile(c: any, fieldName: string): any;
+/** Resolve a `@UploadedFiles(name)` call. */
+export declare function getUploadedFiles(c: any, fieldName: string): any[];

package/dist/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Public entry point for `nexusjs/upload`.
+ */
+export * from "./types.js";
+export { UploadService } from "./upload.service.js";
+export { UploadModule } from "./upload.module.js";
+export { uploadMiddleware } from "./upload.middleware.js";
+export { Upload, UploadedFile, getUploadedFile, getUploadedFiles } from "./decorators/index.js";

package/dist/index.js

@@ -0,0 +1,315 @@
+// @bun
+var __legacyDecorateClassTS = function(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
+    r = Reflect.decorate(decorators, target, key, desc);
+  else
+    for (var i = decorators.length - 1;i >= 0; i--)
+      if (d = decorators[i])
+        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __legacyDecorateParamTS = (index, decorator) => (target, key) => decorator(target, key, index);
+var __legacyMetadataTS = (k, v) => {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function")
+    return Reflect.metadata(k, v);
+};
+
+// packages/upload/src/types.ts
+import"reflect-metadata";
+import { METADATA_KEY } from "@nexusts/core";
+
+class UploadError extends Error {
+  status = 400;
+  code;
+  field;
+  constructor(code, field, message) {
+    super(message);
+    this.code = code;
+    this.field = field;
+    this.name = "UploadError";
+  }
+}
+var UPLOAD_STORAGE_KEY = "nexus:upload:files";
+var UPLOAD_META = "nexus:upload:options";
+// packages/upload/src/upload.service.ts
+import { Inject, Injectable } from "@nexusts/core";
+class UploadService {
+  static TOKEN = Symbol.for("nexus:UploadService");
+  #config;
+  #driveResolver = null;
+  constructor(config = {}) {
+    this.#config = {
+      maxFileSize: config.maxFileSize ?? 10 * 1024 * 1024,
+      maxFiles: config.maxFiles ?? 5,
+      allowedMimeTypes: config.allowedMimeTypes ?? ["*"],
+      storage: config.storage ?? "memory",
+      driveToken: config.driveToken ?? "",
+      drivePrefix: config.drivePrefix ?? "",
+      preserveFilename: config.preserveFilename ?? false
+    };
+  }
+  bindDriveResolver(fn) {
+    this.#driveResolver = fn;
+  }
+  getConfig() {
+    return { ...this.#config };
+  }
+  async parseAndStore(c, fields) {
+    const body = await this.#parseBody(c);
+    const stored = {};
+    for (const spec of fields) {
+      const value = body[spec.fieldName];
+      const files = this.#extractFiles(value);
+      if (files.length === 0) {
+        if (spec.required) {
+          throw new UploadError("MISSING_FIELD", spec.fieldName, `Missing required field "${spec.fieldName}".`);
+        }
+        continue;
+      }
+      if (files.length > spec.maxFiles) {
+        throw new UploadError("TOO_MANY_FILES", spec.fieldName, `Field "${spec.fieldName}" accepts at most ${spec.maxFiles} files (got ${files.length}).`);
+      }
+      for (const f of files) {
+        this.#validate(f, spec.fieldName);
+      }
+      stored[spec.fieldName] = files.length === 1 ? files[0] : files;
+    }
+    c.set(UPLOAD_STORAGE_KEY, stored);
+    if (this.#config.driveToken && this.#driveResolver) {
+      const drive = this.#driveResolver(this.#config.driveToken);
+      if (drive?.put) {
+        for (const [, entry] of Object.entries(stored)) {
+          const list = Array.isArray(entry) ? entry : [entry];
+          for (const file of list) {
+            const filename = this.#config.preserveFilename ? file.filename : this.#newFilename(file);
+            const key = `${this.#config.drivePrefix}/${filename}`;
+            await drive.put(key, file.buffer, {
+              contentType: file.contentType
+            });
+            file.storedKey = key;
+          }
+        }
+      }
+    }
+  }
+  get(c, fieldName) {
+    const stored = c.get(UPLOAD_STORAGE_KEY);
+    if (!stored)
+      return;
+    const v = stored[fieldName];
+    if (Array.isArray(v))
+      return v[0];
+    return v;
+  }
+  getAll(c, fieldName) {
+    const stored = c.get(UPLOAD_STORAGE_KEY);
+    if (!stored)
+      return [];
+    const v = stored[fieldName];
+    if (Array.isArray(v))
+      return v;
+    if (v)
+      return [v];
+    return [];
+  }
+  async#parseBody(c) {
+    const req = c.req?.raw ?? c.req;
+    const ct = req.headers?.get?.("content-type") ?? "";
+    if (!ct.startsWith("multipart/form-data")) {
+      return {};
+    }
+    try {
+      return await c.req.parseBody({ all: true });
+    } catch (err) {
+      throw new UploadError("BAD_MULTIPART", "*", `Failed to parse multipart body: ${err.message}`);
+    }
+  }
+  #extractFiles(value) {
+    if (value === undefined || value === null)
+      return [];
+    const list = Array.isArray(value) ? value : [value];
+    const out = [];
+    for (const v of list) {
+      if (typeof v === "string")
+        continue;
+      if (typeof v !== "object")
+        continue;
+      const file = v;
+      if (typeof file.arrayBuffer !== "function")
+        continue;
+      const filename = file.filename ?? file.name ?? "upload";
+      const contentType = file.type ?? "application/octet-stream";
+      out.push({
+        fieldName: file.name,
+        filename,
+        contentType,
+        encoding: "7bit",
+        buffer: Buffer.alloc(0),
+        size: file.size ?? 0
+      });
+    }
+    return out;
+  }
+  #validate(file, fieldName) {
+    if (file.size > this.#config.maxFileSize) {
+      throw new UploadError("FILE_TOO_LARGE", fieldName, `File "${file.filename}" is ${file.size} bytes; max is ${this.#config.maxFileSize}.`);
+    }
+    if (!this.#mimeAllowed(file.contentType)) {
+      throw new UploadError("MIME_NOT_ALLOWED", fieldName, `File "${file.filename}" has type "${file.contentType}"; not in the allow list.`);
+    }
+  }
+  #mimeAllowed(mime) {
+    for (const pat of this.#config.allowedMimeTypes) {
+      if (pat === "*")
+        return true;
+      if (pat === mime)
+        return true;
+      if (pat.endsWith("/*")) {
+        const prefix = pat.slice(0, -2);
+        if (mime.startsWith(prefix))
+          return true;
+      }
+    }
+    return false;
+  }
+  #newFilename(file) {
+    const ext = file.filename.includes(".") ? file.filename.slice(file.filename.lastIndexOf(".")) : "";
+    const stamp = Date.now().toString(36);
+    const rand = Math.random().toString(36).slice(2, 8);
+    return `${stamp}-${rand}${ext}`;
+  }
+}
+UploadService = __legacyDecorateClassTS([
+  Injectable(),
+  __legacyDecorateParamTS(0, Inject("UPLOAD_CONFIG")),
+  __legacyMetadataTS("design:paramtypes", [
+    typeof UploadConfig === "undefined" ? Object : UploadConfig
+  ])
+], UploadService);
+// packages/upload/src/upload.module.ts
+import"reflect-metadata";
+import { Module } from "@nexusts/core";
+
+// packages/upload/src/upload.middleware.ts
+function uploadMiddleware(svc) {
+  return async (c, next) => {
+    const ct = c.req?.raw?.headers?.get?.("content-type") ?? "";
+    if (!ct.startsWith("multipart/form-data"))
+      return next();
+    const fields = c.get?.("uploadFields") ?? [];
+    if (fields.length === 0)
+      return next();
+    try {
+      await svc.parseAndStore(c, fields);
+      return next();
+    } catch (err) {
+      if (err instanceof UploadError) {
+        return c.json({ error: err.message, code: err.code, field: err.field }, err.status);
+      }
+      throw err;
+    }
+  };
+}
+
+// packages/upload/src/upload.module.ts
+class UploadModule {
+  static forRoot(config = {}) {
+    class ConfiguredUploadModule {
+    }
+    ConfiguredUploadModule = __legacyDecorateClassTS([
+      Module({
+        providers: [
+          UploadService,
+          { provide: UploadService.TOKEN, useExisting: UploadService },
+          { provide: "UPLOAD_CONFIG", useValue: config }
+        ],
+        exports: [UploadService, UploadService.TOKEN]
+      })
+    ], ConfiguredUploadModule);
+    Object.defineProperty(ConfiguredUploadModule, "name", {
+      value: "ConfiguredUploadModule"
+    });
+    return ConfiguredUploadModule;
+  }
+  static mount(app, svc, routes = []) {
+    const fieldSet = new Map;
+    for (const r of routes) {
+      const metas = Reflect.getMetadata("nexus:upload:options", r.target.constructor, r.propertyKey) ?? [];
+      for (const m of metas) {
+        const existing = fieldSet.get(m.name);
+        const maxFiles = m.options?.maxFiles ?? 1;
+        const required = m.options?.required ?? true;
+        if (!existing || maxFiles > existing.maxFiles) {
+          fieldSet.set(m.name, { maxFiles, required: existing?.required ?? required });
+        }
+      }
+    }
+    app.use("/**", async (c, next) => {
+      const fields = [];
+      for (const [name, info] of fieldSet.entries()) {
+        fields.push({ fieldName: name, ...info });
+      }
+      c.set("uploadFields", fields);
+      return uploadMiddleware(svc)(c, next);
+    });
+  }
+}
+UploadModule = __legacyDecorateClassTS([
+  Module({
+    providers: [
+      UploadService,
+      { provide: UploadService.TOKEN, useExisting: UploadService }
+    ],
+    exports: [UploadService, UploadService.TOKEN]
+  })
+], UploadModule);
+// packages/upload/src/decorators/upload.ts
+import"reflect-metadata";
+var DEFAULT_NAME = "__upload__";
+function Upload(name = DEFAULT_NAME, options = {}) {
+  return (target, propertyKey) => {
+    const existing = Reflect.getMetadata(UPLOAD_META, target.constructor, propertyKey) ?? [];
+    existing.push({ name, options });
+    Reflect.defineMetadata(UPLOAD_META, existing, target.constructor, propertyKey);
+  };
+}
+// packages/upload/src/decorators/uploaded-file.ts
+import { createParamDecorator } from "@nexusts/core";
+var UploadedFile = (fieldName) => createParamDecorator(128, fieldName);
+function getUploadedFile(c, fieldName) {
+  const stored = c.get?.(UPLOAD_STORAGE_KEY) ?? c.var?.[UPLOAD_STORAGE_KEY];
+  if (!stored)
+    return;
+  const v = stored[fieldName];
+  if (Array.isArray(v))
+    return v[0];
+  return v;
+}
+function getUploadedFiles(c, fieldName) {
+  const stored = c.get?.(UPLOAD_STORAGE_KEY) ?? c.var?.[UPLOAD_STORAGE_KEY];
+  if (!stored)
+    return [];
+  const v = stored[fieldName];
+  if (Array.isArray(v))
+    return v;
+  if (v)
+    return [v];
+  return [];
+}
+export {
+  uploadMiddleware,
+  getUploadedFiles,
+  getUploadedFile,
+  UploadedFile,
+  UploadService,
+  UploadModule,
+  UploadError,
+  Upload,
+  UPLOAD_STORAGE_KEY,
+  UPLOAD_META,
+  METADATA_KEY
+};
+
+//# debugId=9217B58E0BF1076D64756E2164756E21
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1,15 @@
+{
+  "version": 3,
+  "sources": ["../src/types.ts", "../src/upload.service.ts", "../src/upload.module.ts", "../src/upload.middleware.ts", "../src/decorators/upload.ts", "../src/decorators/uploaded-file.ts"],
+  "sourcesContent": [
+    "/**\n * `nexusjs/upload` — file upload helper.\n *\n *   @Module({\n *     imports: [\n *       UploadModule.forRoot({\n *         maxFileSize: 10 * 1024 * 1024,   // 10MB per file\n *         maxFiles: 5,\n *         allowedMimeTypes: ['image/*', 'application/pdf'],\n *         storage: 'memory',               // or 'drive' (uses nexus/drive)\n *       }),\n *     ],\n *   })\n *\n *   @Post('/avatars')\n *   @Upload('avatar')                    // form field name\n *   async upload(@UploadedFile('avatar') file: UploadedFile) {\n *     return { size: file.size, type: file.contentType };\n *   }\n *\n *   @Post('/photos')\n *   async multi(@UploadedFiles('photos') files: UploadedFile[]) {\n *     return files.length;\n *   }\n */\n\nimport \"reflect-metadata\";\nimport { METADATA_KEY } from \"@nexusts/core\";\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\n/**\n * A file that has been parsed from `multipart/form-data`.\n *\n * The framework reads the entire body into memory (with a hard cap\n * enforced by `maxFileSize`) and exposes it as a `Buffer`. For very\n * large files (gigabytes), use a streaming approach instead — the\n * middleware leaves `stream` populated when the file is too large\n * to buffer.\n */\nexport interface UploadedFile {\n\t/** Form field name (e.g. \"avatar\", \"photos\"). */\n\tfieldName: string;\n\t/** Filename from the client (e.g. \"my-photo.png\"). */\n\tfilename: string;\n\t/** MIME type from the client. */\n\tcontentType: string;\n\t/** Encoding (typically '7bit'). */\n\tencoding: string;\n\t/** File content. */\n\tbuffer: Buffer;\n\t/** Convenience: same as `buffer.length`. */\n\tsize: number;\n}\n\n/** Top-level config. */\nexport interface UploadConfig {\n\t/** Max bytes per file. Default: 10 MB. */\n\tmaxFileSize?: number;\n\t/** Max number of files per request. Default: 5. */\n\tmaxFiles?: number;\n\t/**\n\t * Allowed MIME types. Supports `*` wildcards:\n\t *   'image/*'   — any image type\n\t *   'application/pdf'\n\t *   'video/mp4'\n\t * Default: '*' (any).\n\t */\n\tallowedMimeTypes?: string[];\n\t/**\n\t * Where parsed files are stored in memory. Default: 'memory'.\n\t * The decorator reads from this storage on each access.\n\t */\n\tstorage?: \"memory\";\n\t/**\n\t * When set, parsed files are also pushed to the configured\n\t * `nexusjs/drive` storage under this prefix. The drive is\n\t * resolved by the DI token string.\n\t */\n\tdriveToken?: string;\n\tdrivePrefix?: string;\n\t/** When using drive storage: keep the original filename. Default: false (UUID). */\n\tpreserveFilename?: boolean;\n}\n\n// ---------------------------------------------------------------------------\n// Decorator payload\n// ---------------------------------------------------------------------------\n\nexport interface UploadOptions {\n\t/** Form field name. Default: property name. */\n\tname?: string;\n\t/** Per-field max size (overrides the global default). */\n\tmaxSize?: number;\n\t/** Per-field MIME-type filter. */\n\tmimeTypes?: string[];\n\t/** Per-field max files (for multi-file). Default: 1. */\n\tmaxFiles?: number;\n\t/** Whether the field is required. Default: true. */\n\trequired?: boolean;\n}\n\n// ---------------------------------------------------------------------------\n// Validation errors\n// ---------------------------------------------------------------------------\n\nexport class UploadError extends Error {\n\treadonly status = 400;\n\treadonly code: string;\n\treadonly field: string;\n\tconstructor(code: string, field: string, message: string) {\n\t\tsuper(message);\n\t\tthis.code = code;\n\t\tthis.field = field;\n\t\tthis.name = \"UploadError\";\n\t}\n}\n\n// ---------------------------------------------------------------------------\n// Middleware storage key (per-request)\n// ---------------------------------------------------------------------------\n\n/** Key under which the multipart middleware stores parsed files. */\nexport const UPLOAD_STORAGE_KEY = \"nexus:upload:files\";\n\n/** Internal metadata key (decorator). */\nexport const UPLOAD_META = \"nexus:upload:options\";\n\nexport { METADATA_KEY };\n",
+    "/**\n * `UploadService` — parses `multipart/form-data` requests and exposes\n * the parsed files to controller methods via decorators.\n *\n * Lifecycle:\n *   1. The framework mounts `uploadMiddleware` (from this module)\n *      at the route level.\n *   2. The middleware calls `UploadService.parseAndStore(c, fields)`,\n *      which:\n *        - reads `c.req.parseBody({ all: true })`\n *        - extracts `File` entries from the requested fields\n *        - validates each (size, MIME)\n *        - stores the result on the Hono context under\n *          `UPLOAD_STORAGE_KEY`\n *   3. Decorators (`@UploadedFile`, `@UploadedFiles`) read from the\n *      context at parameter-extraction time.\n *\n * The middleware runs **before** the controller handler, so by the\n * time the handler is invoked, all files are already validated.\n */\nimport { Inject, Injectable } from \"@nexusts/core\";\nimport {\n\tUPLOAD_STORAGE_KEY,\n\tUploadError,\n\ttype UploadConfig,\n\ttype UploadedFile,\n} from \"./types.js\";\n\n/** What Hono's `parseBody` returns for file fields. */\ninterface ParsedFileEntry {\n\t/** Original form field name. */\n\tname: string;\n\t/** Web-API File (the multipart payload). */\n\tfilename?: string;\n\ttype?: string;\n\tsize?: number;\n\tarrayBuffer(): Promise<ArrayBuffer>;\n}\n\n/** What Hono's `parseBody` returns overall: string | File | array thereof. */\ntype ParsedBodyValue =\n\t| string\n\t| ParsedFileEntry\n\t| Array<string | ParsedFileEntry>\n\t| undefined;\n\n@Injectable()\nexport class UploadService {\n\t/** DI token. */\n\tstatic readonly TOKEN = Symbol.for(\"nexus:UploadService\");\n\n\t#config: Required<UploadConfig>;\n\t#driveResolver: ((token: string) => any) | null = null;\n\n\tconstructor(@Inject(\"UPLOAD_CONFIG\") config: UploadConfig = {}) {\n\t\tthis.#config = {\n\t\t\tmaxFileSize: config.maxFileSize ?? 10 * 1024 * 1024,\n\t\t\tmaxFiles: config.maxFiles ?? 5,\n\t\t\tallowedMimeTypes: config.allowedMimeTypes ?? [\"*\"],\n\t\t\tstorage: (config.storage as \"memory\") ?? \"memory\",\n\t\t\tdriveToken: config.driveToken ?? \"\",\n\t\t\tdrivePrefix: config.drivePrefix ?? \"\",\n\t\t\tpreserveFilename: config.preserveFilename ?? false,\n\t\t};\n\t}\n\n\t/** Bind a function that resolves a DI token to a service. Set by the module on boot. */\n\tbindDriveResolver(fn: (token: string) => any): void {\n\t\tthis.#driveResolver = fn;\n\t}\n\n\t/** The config this service was constructed with. */\n\tgetConfig(): Required<UploadConfig> {\n\t\treturn { ...this.#config };\n\t}\n\n\t/**\n\t * Parse the request body and store the requested fields on the\n\t * Hono context. Called by `uploadMiddleware`.\n\t */\n\tasync parseAndStore(\n\t\tc: any,\n\t\tfields: Array<{ fieldName: string; maxFiles: number; required: boolean }>,\n\t): Promise<void> {\n\t\tconst body = await this.#parseBody(c);\n\t\tconst stored: Record<string, UploadedFile | UploadedFile[]> = {};\n\n\t\tfor (const spec of fields) {\n\t\t\tconst value = body[spec.fieldName];\n\t\t\tconst files = this.#extractFiles(value);\n\t\t\tif (files.length === 0) {\n\t\t\t\tif (spec.required) {\n\t\t\t\t\tthrow new UploadError(\n\t\t\t\t\t\t\"MISSING_FIELD\",\n\t\t\t\t\t\tspec.fieldName,\n\t\t\t\t\t\t`Missing required field \"${spec.fieldName}\".`,\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (files.length > spec.maxFiles) {\n\t\t\t\tthrow new UploadError(\n\t\t\t\t\t\"TOO_MANY_FILES\",\n\t\t\t\t\tspec.fieldName,\n\t\t\t\t\t`Field \"${spec.fieldName}\" accepts at most ${spec.maxFiles} files (got ${files.length}).`,\n\t\t\t\t);\n\t\t\t}\n\t\t\tfor (const f of files) {\n\t\t\t\tthis.#validate(f, spec.fieldName);\n\t\t\t}\n\t\t\tstored[spec.fieldName] = files.length === 1 ? files[0]! : files;\n\t\t}\n\n\t\t// Stash on the Hono context so decorators can pull it.\n\t\tc.set(UPLOAD_STORAGE_KEY, stored);\n\n\t\t// Optional: push to drive storage.\n\t\tif (this.#config.driveToken && this.#driveResolver) {\n\t\t\tconst drive = this.#driveResolver(this.#config.driveToken);\n\t\t\tif (drive?.put) {\n\t\t\t\tfor (const [, entry] of Object.entries(stored)) {\n\t\t\t\t\tconst list = Array.isArray(entry) ? entry : [entry];\n\t\t\t\t\tfor (const file of list) {\n\t\t\t\t\t\tconst filename = this.#config.preserveFilename\n\t\t\t\t\t\t\t? file.filename\n\t\t\t\t\t\t\t: this.#newFilename(file);\n\t\t\t\t\t\tconst key = `${this.#config.drivePrefix}/${filename}`;\n\t\t\t\t\t\tawait drive.put(key, file.buffer, {\n\t\t\t\t\t\t\tcontentType: file.contentType,\n\t\t\t\t\t\t});\n\t\t\t\t\t\t(file as UploadedFile & { storedKey?: string }).storedKey = key;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n\n\t/**\n\t * Read a single file from the stored body. Used by `@UploadedFile`.\n\t */\n\tget(c: any, fieldName: string): UploadedFile | undefined {\n\t\tconst stored: Record<string, UploadedFile | UploadedFile[]> | undefined =\n\t\t\tc.get(UPLOAD_STORAGE_KEY);\n\t\tif (!stored) return undefined;\n\t\tconst v = stored[fieldName];\n\t\tif (Array.isArray(v)) return v[0];\n\t\treturn v;\n\t}\n\n\t/**\n\t * Read multiple files from the stored body. Used by `@UploadedFiles`.\n\t */\n\tgetAll(c: any, fieldName: string): UploadedFile[] {\n\t\tconst stored: Record<string, UploadedFile | UploadedFile[]> | undefined =\n\t\t\tc.get(UPLOAD_STORAGE_KEY);\n\t\tif (!stored) return [];\n\t\tconst v = stored[fieldName];\n\t\tif (Array.isArray(v)) return v;\n\t\tif (v) return [v];\n\t\treturn [];\n\t}\n\n\t// ---------------------------------------------------------------------------\n\t// Internal\n\t// ---------------------------------------------------------------------------\n\n\tasync #parseBody(c: any): Promise<Record<string, ParsedBodyValue>> {\n\t\t// Hono's parseBody returns Promise<unknown>. We pass `all: true`\n\t\t// so every field is included, not just the first.\n\t\tconst req = c.req?.raw ?? c.req;\n\t\tconst ct = (req.headers?.get?.(\"content-type\") ?? \"\") as string;\n\t\tif (!ct.startsWith(\"multipart/form-data\")) {\n\t\t\t// Not a multipart request — return empty body. The middleware\n\t\t\t// should skip parsing in this case.\n\t\t\treturn {};\n\t\t}\n\t\ttry {\n\t\t\treturn (await c.req.parseBody({ all: true })) as Record<string, ParsedBodyValue>;\n\t\t} catch (err) {\n\t\t\tthrow new UploadError(\n\t\t\t\t\"BAD_MULTIPART\",\n\t\t\t\t\"*\",\n\t\t\t\t`Failed to parse multipart body: ${(err as Error).message}`,\n\t\t\t);\n\t\t}\n\t}\n\n\t#extractFiles(value: ParsedBodyValue): UploadedFile[] {\n\t\tif (value === undefined || value === null) return [];\n\t\tconst list = Array.isArray(value) ? value : [value];\n\t\tconst out: UploadedFile[] = [];\n\t\tfor (const v of list) {\n\t\t\tif (typeof v === \"string\") continue; // skip plain text fields\n\t\t\tif (typeof v !== \"object\") continue;\n\t\t\tconst file = v as ParsedFileEntry;\n\t\t\tif (typeof file.arrayBuffer !== \"function\") continue;\n\t\t\t// Hono under Bun returns a Blob (not a File) for file fields.\n\t\t\t// The original filename lives in `name` (Blob) or `filename`\n\t\t\t// (File). Accept either.\n\t\t\tconst filename = (file as unknown as { filename?: string }).filename\n\t\t\t\t?? (file as unknown as { name?: string }).name\n\t\t\t\t?? \"upload\";\n\t\t\tconst contentType = file.type ?? \"application/octet-stream\";\n\t\t\tout.push({\n\t\t\t\tfieldName: file.name,\n\t\t\t\tfilename,\n\t\t\t\tcontentType,\n\t\t\t\tencoding: \"7bit\",\n\t\t\t\tbuffer: Buffer.alloc(0), // filled below\n\t\t\t\tsize: file.size ?? 0,\n\t\t\t});\n\t\t}\n\t\treturn out;\n\t}\n\n\t/**\n\t * After we've extracted the field list, replace each placeholder\n\t * with its real bytes. This is split out so we can do all the\n\t * parsing in parallel.\n\t */\n\t// placeholder for future async hydration.\n\n\t#validate(file: UploadedFile, fieldName: string): void {\n\t\tif (file.size > this.#config.maxFileSize) {\n\t\t\tthrow new UploadError(\n\t\t\t\t\"FILE_TOO_LARGE\",\n\t\t\t\tfieldName,\n\t\t\t\t`File \"${file.filename}\" is ${file.size} bytes; max is ${this.#config.maxFileSize}.`,\n\t\t\t);\n\t\t}\n\t\tif (!this.#mimeAllowed(file.contentType)) {\n\t\t\tthrow new UploadError(\n\t\t\t\t\"MIME_NOT_ALLOWED\",\n\t\t\t\tfieldName,\n\t\t\t\t`File \"${file.filename}\" has type \"${file.contentType}\"; not in the allow list.`,\n\t\t\t);\n\t\t}\n\t}\n\n\t#mimeAllowed(mime: string): boolean {\n\t\tfor (const pat of this.#config.allowedMimeTypes) {\n\t\t\tif (pat === \"*\") return true;\n\t\t\tif (pat === mime) return true;\n\t\t\tif (pat.endsWith(\"/*\")) {\n\t\t\t\tconst prefix = pat.slice(0, -2); // 'image/*' -> 'image/'\n\t\t\t\tif (mime.startsWith(prefix)) return true;\n\t\t\t}\n\t\t}\n\t\treturn false;\n\t}\n\n\t#newFilename(file: UploadedFile): string {\n\t\tconst ext = file.filename.includes(\".\")\n\t\t\t? file.filename.slice(file.filename.lastIndexOf(\".\"))\n\t\t\t: \"\";\n\t\tconst stamp = Date.now().toString(36);\n\t\tconst rand = Math.random().toString(36).slice(2, 8);\n\t\treturn `${stamp}-${rand}${ext}`;\n\t}\n}",
+    "/**\n * `UploadModule` — drop-in file upload handling.\n *\n *   @Module({\n *     imports: [\n *       UploadModule.forRoot({\n *         maxFileSize: 10 * 1024 * 1024,\n *         allowedMimeTypes: ['image/*', 'application/pdf'],\n *         storage: 'memory',\n *       }),\n *     ],\n *   })\n *\n * After the framework router is built, call `UploadModule.mount(app, svc)`\n * to install the multipart middleware. The middleware looks at\n * the route's metadata (set by `@Upload('fieldName')`) to know\n * which fields to parse.\n */\nimport \"reflect-metadata\";\nimport { Module } from \"@nexusts/core\";\nimport { UploadService } from \"./upload.service.js\";\nimport type { UploadConfig } from \"./types.js\";\nimport { uploadMiddleware } from \"./upload.middleware.js\";\n\n@Module({\n\tproviders: [\n\t\tUploadService,\n\t\t{ provide: UploadService.TOKEN, useExisting: UploadService },\n\t],\n\texports: [UploadService, UploadService.TOKEN],\n})\nexport class UploadModule {\n\tstatic forRoot(config: UploadConfig = {}) {\n\t\t@Module({\n\t\t\tproviders: [\n\t\t\t\tUploadService,\n\t\t\t\t{ provide: UploadService.TOKEN, useExisting: UploadService },\n\t\t\t\t{ provide: \"UPLOAD_CONFIG\", useValue: config },\n\t\t\t],\n\t\t\texports: [UploadService, UploadService.TOKEN],\n\t\t})\n\t\tclass ConfiguredUploadModule {}\n\t\tObject.defineProperty(ConfiguredUploadModule, \"name\", {\n\t\t\tvalue: \"ConfiguredUploadModule\",\n\t\t});\n\t\treturn ConfiguredUploadModule;\n\t}\n\n\t/**\n\t * Install the multipart middleware on the Hono app. Walk the\n\t * route table, collect every `@Upload` decorator, and emit a\n\t * middleware that knows which fields to parse.\n\t */\n\tstatic mount(app: any, svc: UploadService, routes: any[] = []): void {\n\t\tconst fieldSet = new Map<string, { maxFiles: number; required: boolean }>();\n\t\tfor (const r of routes) {\n\t\t\tconst metas = (Reflect.getMetadata(\"nexus:upload:options\", r.target.constructor, r.propertyKey) ?? []) as Array<{ name: string; options: any }>;\n\t\t\tfor (const m of metas) {\n\t\t\t\tconst existing = fieldSet.get(m.name);\n\t\t\t\tconst maxFiles = m.options?.maxFiles ?? 1;\n\t\t\t\tconst required = m.options?.required ?? true;\n\t\t\t\tif (!existing || maxFiles > existing.maxFiles) {\n\t\t\t\t\tfieldSet.set(m.name, { maxFiles, required: existing?.required ?? required });\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\t// Per-route middleware: we capture the fields for that route in\n\t\t// a closure. Hono supports per-route middleware via `app.use(path, mw)`.\n\t\tapp.use(\"/**\", async (c: any, next: () => Promise<any>) => {\n\t\t\tconst fields: Array<{ fieldName: string; maxFiles: number; required: boolean }> = [];\n\t\t\tfor (const [name, info] of fieldSet.entries()) {\n\t\t\t\tfields.push({ fieldName: name, ...info });\n\t\t\t}\n\t\t\tc.set(\"uploadFields\", fields);\n\t\t\treturn uploadMiddleware(svc)(c, next);\n\t\t});\n\t}\n}",
+    "/**\n * Hono middleware that parses multipart/form-data and stores the\n * requested fields on the Hono context. Routes that need\n * `@UploadedFile` opt in by:\n *\n *   1. Calling `uploadMiddleware(fieldSpecs)` to register the fields\n *      they expect.\n *   2. Or, listing the field names in the `@Upload(...)` decorator\n *      metadata, which the `UploadModule` reads to wire up the\n *      middleware at boot.\n *\n * For convenience, `UploadModule.mountAll()` walks the route table\n * and installs the middleware on every controller method that has\n * an `@Upload(...)` decorator.\n */\nimport { UploadError } from \"./types.js\";\n\nexport interface FieldSpec {\n\tfieldName: string;\n\tmaxFiles: number;\n\trequired: boolean;\n}\n\n/**\n * Middleware factory. Returns a Hono middleware that:\n *   1. Skips non-multipart requests.\n *   2. Asks the UploadService to parse and store the given fields.\n *   3. On `UploadError`, returns a 400 response with the error code.\n */\nexport function uploadMiddleware(svc: {\n\tparseAndStore(c: any, fields: FieldSpec[]): Promise<void>;\n}) {\n\treturn async (c: any, next: () => Promise<any>) => {\n\t\tconst ct = (c.req?.raw?.headers?.get?.(\"content-type\") ?? \"\") as string;\n\t\tif (!ct.startsWith(\"multipart/form-data\")) return next();\n\t\t// The fields are read off the route at boot. By the time this\n\t\t// middleware runs, `c.var` should have the route spec.\n\t\tconst fields: FieldSpec[] = (c.get?.(\"uploadFields\") as FieldSpec[] | undefined) ?? [];\n\t\tif (fields.length === 0) return next();\n\t\ttry {\n\t\t\tawait svc.parseAndStore(c, fields);\n\t\t\treturn next();\n\t\t} catch (err) {\n\t\t\tif (err instanceof UploadError) {\n\t\t\t\treturn c.json(\n\t\t\t\t\t{ error: err.message, code: err.code, field: err.field },\n\t\t\t\t\terr.status as any,\n\t\t\t\t);\n\t\t\t}\n\t\t\tthrow err;\n\t\t}\n\t};\n}\n",
+    "/**\n * `@Upload('fieldName', opts?)` — declare that a controller method\n * expects one or more uploaded files in `multipart/form-data`.\n *\n *   @Post('/avatars')\n *   @Upload('avatar')\n *   async upload(@UploadedFile('avatar') file: UploadedFile) { ... }\n *\n *   @Post('/photos')\n *   @Upload('photos', { maxFiles: 10 })\n *   async multi(@UploadedFiles('photos') files: UploadedFile[]) { ... }\n */\nimport \"reflect-metadata\";\nimport { UPLOAD_META, type UploadOptions } from \"../types.js\";\n\n/** Default name when the decorator is applied without arguments. */\nconst DEFAULT_NAME = \"__upload__\";\n\nexport function Upload(name: string = DEFAULT_NAME, options: UploadOptions = {}): MethodDecorator {\n\treturn (target: object, propertyKey: string | symbol) => {\n\t\tconst existing: Array<{ name: string; options: UploadOptions }> =\n\t\t\tReflect.getMetadata(UPLOAD_META, target.constructor, propertyKey) ?? [];\n\t\texisting.push({ name, options });\n\t\tReflect.defineMetadata(UPLOAD_META, existing, target.constructor, propertyKey);\n\t};\n}\n",
+    "/**\n * `@UploadedFile('fieldName')` — inject a single uploaded file into\n * the controller method.\n *\n * The framework pulls the parsed file from the Hono context (which\n * the upload middleware populated). If the field is missing and the\n * `@Upload` decorator declared it required, the middleware has\n * already returned a 400 — by the time we run, the file is either\n * present or the request is non-multipart.\n */\nimport { createParamDecorator } from \"@nexusts/core\";\nimport { UPLOAD_STORAGE_KEY } from \"../types.js\";\n\nexport const UploadedFile = (fieldName?: string) =>\n\tcreateParamDecorator(0x80 as any /* USER */, fieldName); // placeholder token\n\n// ---------------------------------------------------------------------\n// The decorator above is a placeholder for the framework's param\n// decorator factory. The actual pull-from-context logic is wired by\n// the framework's param resolver at boot. We re-export a helper\n// that, given a Hono context, returns the file.\n// ---------------------------------------------------------------------\n\n/**\n * Resolve a `@UploadedFile(name)` call against a Hono context. The\n * framework invokes this from its param pipeline. Application\n * code typically does not call this directly — use the decorator.\n */\nexport function getUploadedFile(c: any, fieldName: string) {\n\tconst stored = c.get?.(UPLOAD_STORAGE_KEY) ?? c.var?.[UPLOAD_STORAGE_KEY];\n\tif (!stored) return undefined;\n\tconst v = stored[fieldName];\n\tif (Array.isArray(v)) return v[0];\n\treturn v;\n}\n\n/** Resolve a `@UploadedFiles(name)` call. */\nexport function getUploadedFiles(c: any, fieldName: string) {\n\tconst stored = c.get?.(UPLOAD_STORAGE_KEY) ?? c.var?.[UPLOAD_STORAGE_KEY];\n\tif (!stored) return [];\n\tconst v = stored[fieldName];\n\tif (Array.isArray(v)) return v;\n\tif (v) return [v];\n\treturn [];\n}"
+  ],
+  "mappings": ";;;;;;;;;;;;;;;;;;AA0BA;AACA;AAAA;AAiFO,MAAM,oBAAoB,MAAM;AAAA,EAC7B,SAAS;AAAA,EACT;AAAA,EACA;AAAA,EACT,WAAW,CAAC,MAAc,OAAe,SAAiB;AAAA,IACzD,MAAM,OAAO;AAAA,IACb,KAAK,OAAO;AAAA,IACZ,KAAK,QAAQ;AAAA,IACb,KAAK,OAAO;AAAA;AAEd;AAOO,IAAM,qBAAqB;AAG3B,IAAM,cAAc;;AC5G3B;AA2BO,MAAM,cAAc;AAAA,SAEV,QAAQ,OAAO,IAAI,qBAAqB;AAAA,EAExD;AAAA,EACA,iBAAkD;AAAA,EAElD,WAAW,CAA0B,SAAuB,CAAC,GAAG;AAAA,IAC/D,KAAK,UAAU;AAAA,MACd,aAAa,OAAO,eAAe,KAAK,OAAO;AAAA,MAC/C,UAAU,OAAO,YAAY;AAAA,MAC7B,kBAAkB,OAAO,oBAAoB,CAAC,GAAG;AAAA,MACjD,SAAU,OAAO,WAAwB;AAAA,MACzC,YAAY,OAAO,cAAc;AAAA,MACjC,aAAa,OAAO,eAAe;AAAA,MACnC,kBAAkB,OAAO,oBAAoB;AAAA,IAC9C;AAAA;AAAA,EAID,iBAAiB,CAAC,IAAkC;AAAA,IACnD,KAAK,iBAAiB;AAAA;AAAA,EAIvB,SAAS,GAA2B;AAAA,IACnC,OAAO,KAAK,KAAK,QAAQ;AAAA;AAAA,OAOpB,cAAa,CAClB,GACA,QACgB;AAAA,IAChB,MAAM,OAAO,MAAM,KAAK,WAAW,CAAC;AAAA,IACpC,MAAM,SAAwD,CAAC;AAAA,IAE/D,WAAW,QAAQ,QAAQ;AAAA,MAC1B,MAAM,QAAQ,KAAK,KAAK;AAAA,MACxB,MAAM,QAAQ,KAAK,cAAc,KAAK;AAAA,MACtC,IAAI,MAAM,WAAW,GAAG;AAAA,QACvB,IAAI,KAAK,UAAU;AAAA,UAClB,MAAM,IAAI,YACT,iBACA,KAAK,WACL,2BAA2B,KAAK,aACjC;AAAA,QACD;AAAA,QACA;AAAA,MACD;AAAA,MACA,IAAI,MAAM,SAAS,KAAK,UAAU;AAAA,QACjC,MAAM,IAAI,YACT,kBACA,KAAK,WACL,UAAU,KAAK,8BAA8B,KAAK,uBAAuB,MAAM,UAChF;AAAA,MACD;AAAA,MACA,WAAW,KAAK,OAAO;AAAA,QACtB,KAAK,UAAU,GAAG,KAAK,SAAS;AAAA,MACjC;AAAA,MACA,OAAO,KAAK,aAAa,MAAM,WAAW,IAAI,MAAM,KAAM;AAAA,IAC3D;AAAA,IAGA,EAAE,IAAI,oBAAoB,MAAM;AAAA,IAGhC,IAAI,KAAK,QAAQ,cAAc,KAAK,gBAAgB;AAAA,MACnD,MAAM,QAAQ,KAAK,eAAe,KAAK,QAAQ,UAAU;AAAA,MACzD,IAAI,OAAO,KAAK;AAAA,QACf,cAAc,UAAU,OAAO,QAAQ,MAAM,GAAG;AAAA,UAC/C,MAAM,OAAO,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC,KAAK;AAAA,UAClD,WAAW,QAAQ,MAAM;AAAA,YACxB,MAAM,WAAW,KAAK,QAAQ,mBAC3B,KAAK,WACL,KAAK,aAAa,IAAI;AAAA,YACzB,MAAM,MAAM,GAAG,KAAK,QAAQ,eAAe;AAAA,YAC3C,MAAM,MAAM,IAAI,KAAK,KAAK,QAAQ;AAAA,cACjC,aAAa,KAAK;AAAA,YACnB,CAAC;AAAA,YACA,KAA+C,YAAY;AAAA,UAC7D;AAAA,QACD;AAAA,MACD;AAAA,IACD;AAAA;AAAA,EAMD,GAAG,CAAC,GAAQ,WAA6C;AAAA,IACxD,MAAM,SACL,EAAE,IAAI,kBAAkB;AAAA,IACzB,IAAI,CAAC;AAAA,MAAQ;AAAA,IACb,MAAM,IAAI,OAAO;AAAA,IACjB,IAAI,MAAM,QAAQ,CAAC;AAAA,MAAG,OAAO,EAAE;AAAA,IAC/B,OAAO;AAAA;AAAA,EAMR,MAAM,CAAC,GAAQ,WAAmC;AAAA,IACjD,MAAM,SACL,EAAE,IAAI,kBAAkB;AAAA,IACzB,IAAI,CAAC;AAAA,MAAQ,OAAO,CAAC;AAAA,IACrB,MAAM,IAAI,OAAO;AAAA,IACjB,IAAI,MAAM,QAAQ,CAAC;AAAA,MAAG,OAAO;AAAA,IAC7B,IAAI;AAAA,MAAG,OAAO,CAAC,CAAC;AAAA,IAChB,OAAO,CAAC;AAAA;AAAA,OAOH,UAAU,CAAC,GAAkD;AAAA,IAGlE,MAAM,MAAM,EAAE,KAAK,OAAO,EAAE;AAAA,IAC5B,MAAM,KAAM,IAAI,SAAS,MAAM,cAAc,KAAK;AAAA,IAClD,IAAI,CAAC,GAAG,WAAW,qBAAqB,GAAG;AAAA,MAG1C,OAAO,CAAC;AAAA,IACT;AAAA,IACA,IAAI;AAAA,MACH,OAAQ,MAAM,EAAE,IAAI,UAAU,EAAE,KAAK,KAAK,CAAC;AAAA,MAC1C,OAAO,KAAK;AAAA,MACb,MAAM,IAAI,YACT,iBACA,KACA,mCAAoC,IAAc,SACnD;AAAA;AAAA;AAAA,EAIF,aAAa,CAAC,OAAwC;AAAA,IACrD,IAAI,UAAU,aAAa,UAAU;AAAA,MAAM,OAAO,CAAC;AAAA,IACnD,MAAM,OAAO,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC,KAAK;AAAA,IAClD,MAAM,MAAsB,CAAC;AAAA,IAC7B,WAAW,KAAK,MAAM;AAAA,MACrB,IAAI,OAAO,MAAM;AAAA,QAAU;AAAA,MAC3B,IAAI,OAAO,MAAM;AAAA,QAAU;AAAA,MAC3B,MAAM,OAAO;AAAA,MACb,IAAI,OAAO,KAAK,gBAAgB;AAAA,QAAY;AAAA,MAI5C,MAAM,WAAY,KAA0C,YACvD,KAAsC,QACvC;AAAA,MACJ,MAAM,cAAc,KAAK,QAAQ;AAAA,MACjC,IAAI,KAAK;AAAA,QACR,WAAW,KAAK;AAAA,QAChB;AAAA,QACA;AAAA,QACA,UAAU;AAAA,QACV,QAAQ,OAAO,MAAM,CAAC;AAAA,QACtB,MAAM,KAAK,QAAQ;AAAA,MACpB,CAAC;AAAA,IACF;AAAA,IACA,OAAO;AAAA;AAAA,EAUR,SAAS,CAAC,MAAoB,WAAyB;AAAA,IACtD,IAAI,KAAK,OAAO,KAAK,QAAQ,aAAa;AAAA,MACzC,MAAM,IAAI,YACT,kBACA,WACA,SAAS,KAAK,gBAAgB,KAAK,sBAAsB,KAAK,QAAQ,cACvE;AAAA,IACD;AAAA,IACA,IAAI,CAAC,KAAK,aAAa,KAAK,WAAW,GAAG;AAAA,MACzC,MAAM,IAAI,YACT,oBACA,WACA,SAAS,KAAK,uBAAuB,KAAK,sCAC3C;AAAA,IACD;AAAA;AAAA,EAGD,YAAY,CAAC,MAAuB;AAAA,IACnC,WAAW,OAAO,KAAK,QAAQ,kBAAkB;AAAA,MAChD,IAAI,QAAQ;AAAA,QAAK,OAAO;AAAA,MACxB,IAAI,QAAQ;AAAA,QAAM,OAAO;AAAA,MACzB,IAAI,IAAI,SAAS,IAAI,GAAG;AAAA,QACvB,MAAM,SAAS,IAAI,MAAM,GAAG,EAAE;AAAA,QAC9B,IAAI,KAAK,WAAW,MAAM;AAAA,UAAG,OAAO;AAAA,MACrC;AAAA,IACD;AAAA,IACA,OAAO;AAAA;AAAA,EAGR,YAAY,CAAC,MAA4B;AAAA,IACxC,MAAM,MAAM,KAAK,SAAS,SAAS,GAAG,IACnC,KAAK,SAAS,MAAM,KAAK,SAAS,YAAY,GAAG,CAAC,IAClD;AAAA,IACH,MAAM,QAAQ,KAAK,IAAI,EAAE,SAAS,EAAE;AAAA,IACpC,MAAM,OAAO,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,CAAC;AAAA,IAClD,OAAO,GAAG,SAAS,OAAO;AAAA;AAE5B;AApNa,gBAAN;AAAA,EADN,WAAW;AAAA,EAQE,kCAAO,eAAe;AAAA,EAP7B;AAAA;AAAA;AAAA,GAAM;;AC7Bb;AACA;;;ACUO,SAAS,gBAAgB,CAAC,KAE9B;AAAA,EACF,OAAO,OAAO,GAAQ,SAA6B;AAAA,IAClD,MAAM,KAAM,EAAE,KAAK,KAAK,SAAS,MAAM,cAAc,KAAK;AAAA,IAC1D,IAAI,CAAC,GAAG,WAAW,qBAAqB;AAAA,MAAG,OAAO,KAAK;AAAA,IAGvD,MAAM,SAAuB,EAAE,MAAM,cAAc,KAAiC,CAAC;AAAA,IACrF,IAAI,OAAO,WAAW;AAAA,MAAG,OAAO,KAAK;AAAA,IACrC,IAAI;AAAA,MACH,MAAM,IAAI,cAAc,GAAG,MAAM;AAAA,MACjC,OAAO,KAAK;AAAA,MACX,OAAO,KAAK;AAAA,MACb,IAAI,eAAe,aAAa;AAAA,QAC/B,OAAO,EAAE,KACR,EAAE,OAAO,IAAI,SAAS,MAAM,IAAI,MAAM,OAAO,IAAI,MAAM,GACvD,IAAI,MACL;AAAA,MACD;AAAA,MACA,MAAM;AAAA;AAAA;AAAA;;;ADlBF,MAAM,aAAa;AAAA,SAClB,OAAO,CAAC,SAAuB,CAAC,GAAG;AAAA,IASzC,MAAM,uBAAuB;AAAA,IAAC;AAAA,IAAxB,yBAAN;AAAA,MARC,OAAO;AAAA,QACP,WAAW;AAAA,UACV;AAAA,UACA,EAAE,SAAS,cAAc,OAAO,aAAa,cAAc;AAAA,UAC3D,EAAE,SAAS,iBAAiB,UAAU,OAAO;AAAA,QAC9C;AAAA,QACA,SAAS,CAAC,eAAe,cAAc,KAAK;AAAA,MAC7C,CAAC;AAAA,OACK;AAAA,IACN,OAAO,eAAe,wBAAwB,QAAQ;AAAA,MACrD,OAAO;AAAA,IACR,CAAC;AAAA,IACD,OAAO;AAAA;AAAA,SAQD,KAAK,CAAC,KAAU,KAAoB,SAAgB,CAAC,GAAS;AAAA,IACpE,MAAM,WAAW,IAAI;AAAA,IACrB,WAAW,KAAK,QAAQ;AAAA,MACvB,MAAM,QAAS,QAAQ,YAAY,wBAAwB,EAAE,OAAO,aAAa,EAAE,WAAW,KAAK,CAAC;AAAA,MACpG,WAAW,KAAK,OAAO;AAAA,QACtB,MAAM,WAAW,SAAS,IAAI,EAAE,IAAI;AAAA,QACpC,MAAM,WAAW,EAAE,SAAS,YAAY;AAAA,QACxC,MAAM,WAAW,EAAE,SAAS,YAAY;AAAA,QACxC,IAAI,CAAC,YAAY,WAAW,SAAS,UAAU;AAAA,UAC9C,SAAS,IAAI,EAAE,MAAM,EAAE,UAAU,UAAU,UAAU,YAAY,SAAS,CAAC;AAAA,QAC5E;AAAA,MACD;AAAA,IACD;AAAA,IAGA,IAAI,IAAI,OAAO,OAAO,GAAQ,SAA6B;AAAA,MAC1D,MAAM,SAA4E,CAAC;AAAA,MACnF,YAAY,MAAM,SAAS,SAAS,QAAQ,GAAG;AAAA,QAC9C,OAAO,KAAK,EAAE,WAAW,SAAS,KAAK,CAAC;AAAA,MACzC;AAAA,MACA,EAAE,IAAI,gBAAgB,MAAM;AAAA,MAC5B,OAAO,iBAAiB,GAAG,EAAE,GAAG,IAAI;AAAA,KACpC;AAAA;AAEH;AA9Ca,eAAN;AAAA,EAPN,OAAO;AAAA,IACP,WAAW;AAAA,MACV;AAAA,MACA,EAAE,SAAS,cAAc,OAAO,aAAa,cAAc;AAAA,IAC5D;AAAA,IACA,SAAS,CAAC,eAAe,cAAc,KAAK;AAAA,EAC7C,CAAC;AAAA,GACY;;AEnBb;AAIA,IAAM,eAAe;AAEd,SAAS,MAAM,CAAC,OAAe,cAAc,UAAyB,CAAC,GAAoB;AAAA,EACjG,OAAO,CAAC,QAAgB,gBAAiC;AAAA,IACxD,MAAM,WACL,QAAQ,YAAY,aAAa,OAAO,aAAa,WAAW,KAAK,CAAC;AAAA,IACvE,SAAS,KAAK,EAAE,MAAM,QAAQ,CAAC;AAAA,IAC/B,QAAQ,eAAe,aAAa,UAAU,OAAO,aAAa,WAAW;AAAA;AAAA;;ACb/E;AAGO,IAAM,eAAe,CAAC,cAC5B,qBAAqB,KAAwB,SAAS;AAchD,SAAS,eAAe,CAAC,GAAQ,WAAmB;AAAA,EAC1D,MAAM,SAAS,EAAE,MAAM,kBAAkB,KAAK,EAAE,MAAM;AAAA,EACtD,IAAI,CAAC;AAAA,IAAQ;AAAA,EACb,MAAM,IAAI,OAAO;AAAA,EACjB,IAAI,MAAM,QAAQ,CAAC;AAAA,IAAG,OAAO,EAAE;AAAA,EAC/B,OAAO;AAAA;AAID,SAAS,gBAAgB,CAAC,GAAQ,WAAmB;AAAA,EAC3D,MAAM,SAAS,EAAE,MAAM,kBAAkB,KAAK,EAAE,MAAM;AAAA,EACtD,IAAI,CAAC;AAAA,IAAQ,OAAO,CAAC;AAAA,EACrB,MAAM,IAAI,OAAO;AAAA,EACjB,IAAI,MAAM,QAAQ,CAAC;AAAA,IAAG,OAAO;AAAA,EAC7B,IAAI;AAAA,IAAG,OAAO,CAAC,CAAC;AAAA,EAChB,OAAO,CAAC;AAAA;",
+  "debugId": "9217B58E0BF1076D64756E2164756E21",
+  "names": []
+}

package/dist/types.d.ts

@@ -0,0 +1,102 @@
+/**
+ * `nexusjs/upload` — file upload helper.
+ *
+ *   @Module({
+ *     imports: [
+ *       UploadModule.forRoot({
+ *         maxFileSize: 10 * 1024 * 1024,   // 10MB per file
+ *         maxFiles: 5,
+ *         allowedMimeTypes: ['image/*', 'application/pdf'],
+ *         storage: 'memory',               // or 'drive' (uses nexus/drive)
+ *       }),
+ *     ],
+ *   })
+ *
+ *   @Post('/avatars')
+ *   @Upload('avatar')                    // form field name
+ *   async upload(@UploadedFile('avatar') file: UploadedFile) {
+ *     return { size: file.size, type: file.contentType };
+ *   }
+ *
+ *   @Post('/photos')
+ *   async multi(@UploadedFiles('photos') files: UploadedFile[]) {
+ *     return files.length;
+ *   }
+ */
+import "reflect-metadata";
+import { METADATA_KEY } from "@nexusts/core";
+/**
+ * A file that has been parsed from `multipart/form-data`.
+ *
+ * The framework reads the entire body into memory (with a hard cap
+ * enforced by `maxFileSize`) and exposes it as a `Buffer`. For very
+ * large files (gigabytes), use a streaming approach instead — the
+ * middleware leaves `stream` populated when the file is too large
+ * to buffer.
+ */
+export interface UploadedFile {
+    /** Form field name (e.g. "avatar", "photos"). */
+    fieldName: string;
+    /** Filename from the client (e.g. "my-photo.png"). */
+    filename: string;
+    /** MIME type from the client. */
+    contentType: string;
+    /** Encoding (typically '7bit'). */
+    encoding: string;
+    /** File content. */
+    buffer: Buffer;
+    /** Convenience: same as `buffer.length`. */
+    size: number;
+}
+/** Top-level config. */
+export interface UploadConfig {
+    /** Max bytes per file. Default: 10 MB. */
+    maxFileSize?: number;
+    /** Max number of files per request. Default: 5. */
+    maxFiles?: number;
+    /**
+     * Allowed MIME types. Supports `*` wildcards:
+     *   'image/*'   — any image type
+     *   'application/pdf'
+     *   'video/mp4'
+     * Default: '*' (any).
+     */
+    allowedMimeTypes?: string[];
+    /**
+     * Where parsed files are stored in memory. Default: 'memory'.
+     * The decorator reads from this storage on each access.
+     */
+    storage?: "memory";
+    /**
+     * When set, parsed files are also pushed to the configured
+     * `nexusjs/drive` storage under this prefix. The drive is
+     * resolved by the DI token string.
+     */
+    driveToken?: string;
+    drivePrefix?: string;
+    /** When using drive storage: keep the original filename. Default: false (UUID). */
+    preserveFilename?: boolean;
+}
+export interface UploadOptions {
+    /** Form field name. Default: property name. */
+    name?: string;
+    /** Per-field max size (overrides the global default). */
+    maxSize?: number;
+    /** Per-field MIME-type filter. */
+    mimeTypes?: string[];
+    /** Per-field max files (for multi-file). Default: 1. */
+    maxFiles?: number;
+    /** Whether the field is required. Default: true. */
+    required?: boolean;
+}
+export declare class UploadError extends Error {
+    readonly status = 400;
+    readonly code: string;
+    readonly field: string;
+    constructor(code: string, field: string, message: string);
+}
+/** Key under which the multipart middleware stores parsed files. */
+export declare const UPLOAD_STORAGE_KEY = "nexus:upload:files";
+/** Internal metadata key (decorator). */
+export declare const UPLOAD_META = "nexus:upload:options";
+export { METADATA_KEY };

package/dist/upload.middleware.d.ts

@@ -0,0 +1,14 @@
+export interface FieldSpec {
+    fieldName: string;
+    maxFiles: number;
+    required: boolean;
+}
+/**
+ * Middleware factory. Returns a Hono middleware that:
+ *   1. Skips non-multipart requests.
+ *   2. Asks the UploadService to parse and store the given fields.
+ *   3. On `UploadError`, returns a 400 response with the error code.
+ */
+export declare function uploadMiddleware(svc: {
+    parseAndStore(c: any, fields: FieldSpec[]): Promise<void>;
+}): (c: any, next: () => Promise<any>) => Promise<any>;

package/dist/upload.module.d.ts

@@ -0,0 +1,32 @@
+/**
+ * `UploadModule` — drop-in file upload handling.
+ *
+ *   @Module({
+ *     imports: [
+ *       UploadModule.forRoot({
+ *         maxFileSize: 10 * 1024 * 1024,
+ *         allowedMimeTypes: ['image/*', 'application/pdf'],
+ *         storage: 'memory',
+ *       }),
+ *     ],
+ *   })
+ *
+ * After the framework router is built, call `UploadModule.mount(app, svc)`
+ * to install the multipart middleware. The middleware looks at
+ * the route's metadata (set by `@Upload('fieldName')`) to know
+ * which fields to parse.
+ */
+import "reflect-metadata";
+import { UploadService } from "./upload.service.js";
+import type { UploadConfig } from "./types.js";
+export declare class UploadModule {
+    static forRoot(config?: UploadConfig): {
+        new (): {};
+    };
+    /**
+     * Install the multipart middleware on the Hono app. Walk the
+     * route table, collect every `@Upload` decorator, and emit a
+     * middleware that knows which fields to parse.
+     */
+    static mount(app: any, svc: UploadService, routes?: any[]): void;
+}

package/dist/upload.service.d.ts

@@ -0,0 +1,28 @@
+import { type UploadConfig, type UploadedFile } from "./types.js";
+export declare class UploadService {
+    #private;
+    /** DI token. */
+    static readonly TOKEN: unique symbol;
+    constructor(config?: UploadConfig);
+    /** Bind a function that resolves a DI token to a service. Set by the module on boot. */
+    bindDriveResolver(fn: (token: string) => any): void;
+    /** The config this service was constructed with. */
+    getConfig(): Required<UploadConfig>;
+    /**
+     * Parse the request body and store the requested fields on the
+     * Hono context. Called by `uploadMiddleware`.
+     */
+    parseAndStore(c: any, fields: Array<{
+        fieldName: string;
+        maxFiles: number;
+        required: boolean;
+    }>): Promise<void>;
+    /**
+     * Read a single file from the stored body. Used by `@UploadedFile`.
+     */
+    get(c: any, fieldName: string): UploadedFile | undefined;
+    /**
+     * Read multiple files from the stored body. Used by `@UploadedFiles`.
+     */
+    getAll(c: any, fieldName: string): UploadedFile[];
+}

package/package.json

@@ -0,0 +1,26 @@
+{
+  "name": "@nexusts/upload",
+  "version": "0.7.2",
+  "description": "Multipart file upload with validation",
+  "type": "module",
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": ["dist", "README.md"],
+  "scripts": {
+    "build": "bun run ../../build.ts"
+  },
+  "keywords": ["nexusts", "framework", "bun"],
+  "license": "MIT",
+  
+  
+  "dependencies": {
+    "@nexusts/core": "file:../core"
+  }
+}