@nocobase/plugin-file-manager 2.2.0-beta.13 → 2.2.0-beta.15

package/dist/node_modules/@aws-sdk/s3-request-presigner/dist-es/constants.js

@@ -0,0 +1,9 @@
+export const UNSIGNED_PAYLOAD = "UNSIGNED-PAYLOAD";
+export const SHA256_HEADER = "X-Amz-Content-Sha256";
+export const ALGORITHM_QUERY_PARAM = "X-Amz-Algorithm";
+export const CREDENTIAL_QUERY_PARAM = "X-Amz-Credential";
+export const AMZ_DATE_QUERY_PARAM = "X-Amz-Date";
+export const SIGNED_HEADERS_QUERY_PARAM = "X-Amz-SignedHeaders";
+export const EXPIRES_QUERY_PARAM = "X-Amz-Expires";
+export const HOST_HEADER = "host";
+export const ALGORITHM_IDENTIFIER = "AWS4-HMAC-SHA256";

package/dist/node_modules/@aws-sdk/s3-request-presigner/dist-es/getSignedUrl.js

@@ -0,0 +1,66 @@
+import { formatUrl } from "@aws-sdk/util-format-url";
+import { getEndpointFromInstructions } from "@smithy/middleware-endpoint";
+import { HttpRequest } from "@smithy/protocol-http";
+import { S3RequestPresigner } from "./presigner";
+export const getSignedUrl = async (client, command, options = {}) => {
+    let s3Presigner;
+    let region;
+    if (typeof client.config.endpointProvider === "function") {
+        const endpointV2 = await getEndpointFromInstructions(command.input, command.constructor, client.config);
+        const authScheme = endpointV2.properties?.authSchemes?.[0];
+        if (authScheme?.name === "sigv4a") {
+            region = authScheme?.signingRegionSet?.join(",");
+        }
+        else {
+            region = authScheme?.signingRegion;
+        }
+        s3Presigner = new S3RequestPresigner({
+            ...client.config,
+            signingName: authScheme?.signingName,
+            region: async () => region,
+        });
+    }
+    else {
+        s3Presigner = new S3RequestPresigner(client.config);
+    }
+    const presignInterceptMiddleware = (next, context) => async (args) => {
+        const { request } = args;
+        if (!HttpRequest.isInstance(request)) {
+            throw new Error("Request to be presigned is not an valid HTTP request.");
+        }
+        delete request.headers["amz-sdk-invocation-id"];
+        delete request.headers["amz-sdk-request"];
+        delete request.headers["x-amz-user-agent"];
+        let presigned;
+        const presignerOptions = {
+            ...options,
+            signingRegion: options.signingRegion ?? context["signing_region"] ?? region,
+            signingService: options.signingService ?? context["signing_service"],
+        };
+        if (context.s3ExpressIdentity) {
+            presigned = await s3Presigner.presignWithCredentials(request, context.s3ExpressIdentity, presignerOptions);
+        }
+        else {
+            presigned = await s3Presigner.presign(request, presignerOptions);
+        }
+        return {
+            response: {},
+            output: {
+                $metadata: { httpStatusCode: 200 },
+                presigned,
+            },
+        };
+    };
+    const middlewareName = "presignInterceptMiddleware";
+    const clientStack = client.middlewareStack.clone();
+    clientStack.addRelativeTo(presignInterceptMiddleware, {
+        name: middlewareName,
+        relation: "before",
+        toMiddleware: "awsAuthMiddleware",
+        override: true,
+    });
+    const handler = command.resolveMiddleware(clientStack, client.config, {});
+    const { output } = await handler({ input: command.input });
+    const { presigned } = output;
+    return formatUrl(presigned);
+};

package/dist/node_modules/@aws-sdk/s3-request-presigner/dist-es/index.js

@@ -0,0 +1,2 @@
+export * from "./getSignedUrl";
+export * from "./presigner";

package/dist/node_modules/@aws-sdk/s3-request-presigner/dist-es/presigner.js

@@ -0,0 +1,58 @@
+import { SignatureV4MultiRegion } from "@aws-sdk/signature-v4-multi-region";
+import { SHA256_HEADER, UNSIGNED_PAYLOAD } from "./constants";
+export class S3RequestPresigner {
+    signer;
+    constructor(options) {
+        const resolvedOptions = {
+            service: options.signingName || options.service || "s3",
+            uriEscapePath: options.uriEscapePath || false,
+            applyChecksum: options.applyChecksum || false,
+            ...options,
+        };
+        this.signer = new SignatureV4MultiRegion(resolvedOptions);
+    }
+    presign(requestToSign, { unsignableHeaders = new Set(), hoistableHeaders = new Set(), unhoistableHeaders = new Set(), ...options } = {}) {
+        this.prepareRequest(requestToSign, {
+            unsignableHeaders,
+            unhoistableHeaders,
+            hoistableHeaders,
+        });
+        return this.signer.presign(requestToSign, {
+            expiresIn: 900,
+            unsignableHeaders,
+            unhoistableHeaders,
+            ...options,
+        });
+    }
+    presignWithCredentials(requestToSign, credentials, { unsignableHeaders = new Set(), hoistableHeaders = new Set(), unhoistableHeaders = new Set(), ...options } = {}) {
+        this.prepareRequest(requestToSign, {
+            unsignableHeaders,
+            unhoistableHeaders,
+            hoistableHeaders,
+        });
+        return this.signer.presignWithCredentials(requestToSign, credentials, {
+            expiresIn: 900,
+            unsignableHeaders,
+            unhoistableHeaders,
+            ...options,
+        });
+    }
+    prepareRequest(requestToSign, { unsignableHeaders = new Set(), unhoistableHeaders = new Set(), hoistableHeaders = new Set(), } = {}) {
+        unsignableHeaders.add("content-type");
+        Object.keys(requestToSign.headers)
+            .map((header) => header.toLowerCase())
+            .filter((header) => header.startsWith("x-amz-server-side-encryption"))
+            .forEach((header) => {
+            if (!hoistableHeaders.has(header)) {
+                unhoistableHeaders.add(header);
+            }
+        });
+        requestToSign.headers[SHA256_HEADER] = UNSIGNED_PAYLOAD;
+        const currentHostHeader = requestToSign.headers.host;
+        const port = requestToSign.port;
+        const expectedHostHeader = `${requestToSign.hostname}${requestToSign.port != null ? ":" + port : ""}`;
+        if (!currentHostHeader || (currentHostHeader === requestToSign.hostname && requestToSign.port != null)) {
+            requestToSign.headers.host = expectedHostHeader;
+        }
+    }
+}

package/dist/node_modules/@aws-sdk/s3-request-presigner/dist-types/constants.d.ts

@@ -0,0 +1,9 @@
+export declare const UNSIGNED_PAYLOAD = "UNSIGNED-PAYLOAD";
+export declare const SHA256_HEADER = "X-Amz-Content-Sha256";
+export declare const ALGORITHM_QUERY_PARAM = "X-Amz-Algorithm";
+export declare const CREDENTIAL_QUERY_PARAM = "X-Amz-Credential";
+export declare const AMZ_DATE_QUERY_PARAM = "X-Amz-Date";
+export declare const SIGNED_HEADERS_QUERY_PARAM = "X-Amz-SignedHeaders";
+export declare const EXPIRES_QUERY_PARAM = "X-Amz-Expires";
+export declare const HOST_HEADER = "host";
+export declare const ALGORITHM_IDENTIFIER = "AWS4-HMAC-SHA256";

package/dist/node_modules/@aws-sdk/s3-request-presigner/dist-types/getSignedUrl.d.ts

@@ -0,0 +1,6 @@
+import { Client, Command } from "@smithy/smithy-client";
+import { MetadataBearer, RequestPresigningArguments } from "@smithy/types";
+/**
+ * @public
+ */
+export declare const getSignedUrl: <InputTypesUnion extends object, InputType extends InputTypesUnion, OutputType extends MetadataBearer = MetadataBearer>(client: Client<any, InputTypesUnion, MetadataBearer, any>, command: Command<InputType, OutputType, any, InputTypesUnion, MetadataBearer>, options?: RequestPresigningArguments) => Promise<string>;

package/dist/node_modules/@aws-sdk/s3-request-presigner/dist-types/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./getSignedUrl";
+export * from "./presigner";

package/dist/node_modules/@aws-sdk/s3-request-presigner/dist-types/presigner.d.ts

@@ -0,0 +1,15 @@
+import { SignatureV4MultiRegionInit } from "@aws-sdk/signature-v4-multi-region";
+import { AwsCredentialIdentity, RequestPresigner, RequestPresigningArguments } from "@smithy/types";
+import { HttpRequest as IHttpRequest } from "@smithy/types";
+type PartialBy<T, K extends keyof T> = Omit<T, K> & Partial<Pick<T, K>>;
+export type S3RequestPresignerOptions = PartialBy<SignatureV4MultiRegionInit, "service" | "uriEscapePath"> & {
+    signingName?: string;
+};
+export declare class S3RequestPresigner implements RequestPresigner {
+    private readonly signer;
+    constructor(options: S3RequestPresignerOptions);
+    presign(requestToSign: IHttpRequest, { unsignableHeaders, hoistableHeaders, unhoistableHeaders, ...options }?: RequestPresigningArguments): Promise<IHttpRequest>;
+    presignWithCredentials(requestToSign: IHttpRequest, credentials: AwsCredentialIdentity, { unsignableHeaders, hoistableHeaders, unhoistableHeaders, ...options }?: RequestPresigningArguments): Promise<IHttpRequest>;
+    private prepareRequest;
+}
+export {};

package/dist/node_modules/@aws-sdk/s3-request-presigner/dist-types/ts3.4/constants.d.ts

@@ -0,0 +1,9 @@
+export declare const UNSIGNED_PAYLOAD = "UNSIGNED-PAYLOAD";
+export declare const SHA256_HEADER = "X-Amz-Content-Sha256";
+export declare const ALGORITHM_QUERY_PARAM = "X-Amz-Algorithm";
+export declare const CREDENTIAL_QUERY_PARAM = "X-Amz-Credential";
+export declare const AMZ_DATE_QUERY_PARAM = "X-Amz-Date";
+export declare const SIGNED_HEADERS_QUERY_PARAM = "X-Amz-SignedHeaders";
+export declare const EXPIRES_QUERY_PARAM = "X-Amz-Expires";
+export declare const HOST_HEADER = "host";
+export declare const ALGORITHM_IDENTIFIER = "AWS4-HMAC-SHA256";

package/dist/node_modules/@aws-sdk/s3-request-presigner/dist-types/ts3.4/getSignedUrl.d.ts

@@ -0,0 +1,11 @@
+import { Client, Command } from "@smithy/smithy-client";
+import { MetadataBearer, RequestPresigningArguments } from "@smithy/types";
+export declare const getSignedUrl: <
+  InputTypesUnion extends object,
+  InputType extends InputTypesUnion,
+  OutputType extends MetadataBearer = MetadataBearer
+>(
+  client: Client<any, InputTypesUnion, MetadataBearer, any>,
+  command: Command<InputType, OutputType, any, InputTypesUnion, MetadataBearer>,
+  options?: RequestPresigningArguments
+) => Promise<string>;

package/dist/node_modules/@aws-sdk/s3-request-presigner/dist-types/ts3.4/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./getSignedUrl";
+export * from "./presigner";

package/dist/node_modules/@aws-sdk/s3-request-presigner/dist-types/ts3.4/presigner.d.ts

@@ -0,0 +1,40 @@
+import { SignatureV4MultiRegionInit } from "@aws-sdk/signature-v4-multi-region";
+import {
+  AwsCredentialIdentity,
+  RequestPresigner,
+  RequestPresigningArguments,
+} from "@smithy/types";
+import { HttpRequest as IHttpRequest } from "@smithy/types";
+type PartialBy<T, K extends keyof T> = Pick<T, Exclude<keyof T, K>> &
+  Partial<Pick<T, K>>;
+export type S3RequestPresignerOptions = PartialBy<
+  SignatureV4MultiRegionInit,
+  "service" | "uriEscapePath"
+> & {
+  signingName?: string;
+};
+export declare class S3RequestPresigner implements RequestPresigner {
+  private readonly signer;
+  constructor(options: S3RequestPresignerOptions);
+  presign(
+    requestToSign: IHttpRequest,
+    {
+      unsignableHeaders,
+      hoistableHeaders,
+      unhoistableHeaders,
+      ...options
+    }?: RequestPresigningArguments
+  ): Promise<IHttpRequest>;
+  presignWithCredentials(
+    requestToSign: IHttpRequest,
+    credentials: AwsCredentialIdentity,
+    {
+      unsignableHeaders,
+      hoistableHeaders,
+      unhoistableHeaders,
+      ...options
+    }?: RequestPresigningArguments
+  ): Promise<IHttpRequest>;
+  private prepareRequest;
+}
+export {};

package/dist/node_modules/@aws-sdk/s3-request-presigner/package.json

@@ -0,0 +1 @@
+{"name":"@aws-sdk/s3-request-presigner","version":"3.750.0","scripts":{"build":"concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'","build:cjs":"node ../../scripts/compilation/inline s3-request-presigner","build:es":"tsc -p tsconfig.es.json","build:include:deps":"lerna run --scope $npm_package_name --include-dependencies build","build:types":"tsc -p tsconfig.types.json","build:types:downlevel":"downlevel-dts dist-types dist-types/ts3.4","clean":"rimraf ./dist-* && rimraf *.tsbuildinfo","extract:docs":"api-extractor run --local","test":"yarn g:vitest run","test:watch":"yarn g:vitest watch"},"main":"./dist-cjs/index.js","module":"./dist-es/index.js","types":"./dist-types/index.d.ts","author":{"name":"AWS SDK for JavaScript Team","url":"https://aws.amazon.com/javascript/"},"license":"Apache-2.0","dependencies":{"@aws-sdk/signature-v4-multi-region":"3.750.0","@aws-sdk/types":"3.734.0","@aws-sdk/util-format-url":"3.734.0","@smithy/middleware-endpoint":"^4.0.5","@smithy/protocol-http":"^5.0.1","@smithy/smithy-client":"^4.1.5","@smithy/types":"^4.1.0","tslib":"^2.6.2"},"devDependencies":{"@aws-sdk/client-s3":"3.750.0","@smithy/hash-node":"^4.0.1","@tsconfig/recommended":"1.0.1","@types/node":"^18.19.69","concurrently":"7.0.0","downlevel-dts":"0.10.1","rimraf":"3.0.2","typescript":"~5.2.2"},"engines":{"node":">=18.0.0"},"typesVersions":{"<4.0":{"dist-types/*":["dist-types/ts3.4/*"]}},"files":["dist-*/**"],"homepage":"https://github.com/aws/aws-sdk-js-v3/tree/main/packages/s3-request-presigner","repository":{"type":"git","url":"https://github.com/aws/aws-sdk-js-v3.git","directory":"packages/s3-request-presigner"},"_lastModified":"2026-07-16T13:28:39.122Z"}

package/dist/node_modules/ali-oss/package.json

@@ -1 +1 @@
-{"name":"ali-oss","version":"6.20.0","description":"aliyun oss(object storage service) node client","main":"./lib/client.js","files":["lib","shims","dist"],"browser":{"./lib/client.js":"./dist/aliyun-oss-sdk.js","mime":"mime/lite","urllib":"./shims/xhr.js","utility":"./shims/utility.js","crypto":"./shims/crypto/crypto.js","debug":"./shims/debug","fs":false,"child_process":false,"is-type-of":"./shims/is-type-of.js"},"scripts":{"build-change-log":"standard-version","test":"npm run tsc && mocha -t 120000 -r should -r dotenv/config test/node/*.test.js test/node/**/*.test.js","test-cov":"npm run tsc && nyc --reporter=lcov node_modules/.bin/_mocha -t 120000 -r should test/node/*.test.js test/node/**/*.test.js","jshint":"jshint .","build-test":"MINIFY=1 node browser-build.js > test/browser/build/aliyun-oss-sdk.min.js && node -r dotenv/config task/browser-test-build.js > test/browser/build/tests.js","browser-test":"npm run build-test && karma start","build-dist":"npm run tsc && node browser-build.js > dist/aliyun-oss-sdk.js && MINIFY=1 node browser-build.js > dist/aliyun-oss-sdk.min.js","publish-to-npm":"node publish-npm-check.js && npm publish","publish-to-cdn":"node publish.js","snyk-protect":"snyk-protect","lint-staged":"lint-staged","detect-secrets":"node task/detect-secrets","tsc":"npm run tsc:clean && npm run tsc:build","tsc:build":"tsc -b tsconfig.json tsconfig-cjs.json","tsc:watch":"tsc -b tsconfig.json tsconfig-cjs.json --watch","tsc:clean":"tsc -b tsconfig.json tsconfig-cjs.json --clean ","prepare":"husky install"},"git-pre-hooks":{"pre-release":"npm run build-dist","post-release":["npm run publish-to-npm","npm run publish-to-cdn"]},"homepage":"https://github.com/ali-sdk/ali-oss","bugs":{"url":"https://github.com/ali-sdk/ali-oss/issues"},"publishConfig":{"registry":"https://registry.npmjs.org/","access":"public"},"repository":{"type":"git","url":"https://github.com/ali-sdk/ali-oss.git"},"keywords":["oss","client","file","aliyun"],"author":"dead_horse","license":"MIT","engines":{"node":">=8"},"devDependencies":{"@babel/core":"^7.11.6","@babel/plugin-transform-regenerator":"^7.10.4","@babel/plugin-transform-runtime":"^7.11.5","@babel/preset-env":"^7.11.5","@babel/runtime":"^7.11.2","@commitlint/cli":"^17.6.7","@commitlint/config-conventional":"^16.2.4","@octokit/core":"^5.0.0","@semantic-release/exec":"^6.0.3","@semantic-release/git":"^10.0.1","@semantic-release/npm":"^10.0.5","@snyk/protect":"^1.1196.0","@types/node":"^14.0.12","@typescript-eslint/eslint-plugin":"^5.0.0","@typescript-eslint/parser":"^5.0.0","aliasify":"^2.0.0","axios":"0.27.2","babelify":"^10.0.0","beautify-benchmark":"^0.2.4","benchmark":"^2.1.1","bluebird":"^3.1.5","browserify":"^17.0.0","core-js":"^3.6.5","crypto-js":"^3.1.9-1","dotenv":"^8.2.0","eslint":"^8.44.0","eslint-config-airbnb":"^19.0.4","eslint-config-ali":"^13.0.0","eslint-config-prettier":"^8.8.0","eslint-plugin-import":"^2.21.1","eslint-plugin-jsx-a11y":"^6.0.3","eslint-plugin-prettier":"^4.2.1","filereader":"^0.10.3","form-data":"^4.0.0","git-pre-hooks":"^1.2.0","husky":"^7.0.4","immediate":"^3.3.0","karma":"^6.3.4","karma-browserify":"^8.1.0","karma-chrome-launcher":"^2.2.0","karma-firefox-launcher":"^1.0.1","karma-ie-launcher":"^1.0.0","karma-mocha":"^2.0.1","karma-safari-launcher":"^1.0.0","lint-staged":"^12.4.1","mm":"^2.0.0","mocha":"^9.1.2","nyc":"^15.1.0","prettier":"^3.0.0","promise-polyfill":"^6.0.2","puppeteer":"19.0.0","semantic-release":"^21.1.1","should":"^11.0.0","sinon":"^15.2.0","standard-version":"^9.3.1","stream-equal":"^1.1.0","timemachine":"^0.3.0","typescript":"^3.9.5","uglify-js":"^3.14.2","watchify":"^4.0.0"},"dependencies":{"address":"^1.2.2","agentkeepalive":"^3.4.1","bowser":"^1.6.0","copy-to":"^2.0.1","dateformat":"^2.0.0","debug":"^4.3.4","destroy":"^1.0.4","end-or-error":"^1.0.1","get-ready":"^1.0.0","humanize-ms":"^1.2.0","is-type-of":"^1.4.0","js-base64":"^2.5.2","jstoxml":"^2.0.0","lodash":"^4.17.21","merge-descriptors":"^1.0.1","mime":"^2.4.5","platform":"^1.3.1","pump":"^3.0.0","qs":"^6.4.0","sdk-base":"^2.0.1","stream-http":"2.8.2","stream-wormhole":"^1.0.4","urllib":"2.41.0","utility":"^1.18.0","xml2js":"^0.6.2"},"snyk":true,"lint-staged":{"**/!(dist)/*":["npm run detect-secrets --"],"**/*.{js,ts}":["eslint --cache --fix --ext .js,.ts","prettier --write","git add"]},"_lastModified":"2026-07-11T16:39:04.994Z"}
+{"name":"ali-oss","version":"6.20.0","description":"aliyun oss(object storage service) node client","main":"./lib/client.js","files":["lib","shims","dist"],"browser":{"./lib/client.js":"./dist/aliyun-oss-sdk.js","mime":"mime/lite","urllib":"./shims/xhr.js","utility":"./shims/utility.js","crypto":"./shims/crypto/crypto.js","debug":"./shims/debug","fs":false,"child_process":false,"is-type-of":"./shims/is-type-of.js"},"scripts":{"build-change-log":"standard-version","test":"npm run tsc && mocha -t 120000 -r should -r dotenv/config test/node/*.test.js test/node/**/*.test.js","test-cov":"npm run tsc && nyc --reporter=lcov node_modules/.bin/_mocha -t 120000 -r should test/node/*.test.js test/node/**/*.test.js","jshint":"jshint .","build-test":"MINIFY=1 node browser-build.js > test/browser/build/aliyun-oss-sdk.min.js && node -r dotenv/config task/browser-test-build.js > test/browser/build/tests.js","browser-test":"npm run build-test && karma start","build-dist":"npm run tsc && node browser-build.js > dist/aliyun-oss-sdk.js && MINIFY=1 node browser-build.js > dist/aliyun-oss-sdk.min.js","publish-to-npm":"node publish-npm-check.js && npm publish","publish-to-cdn":"node publish.js","snyk-protect":"snyk-protect","lint-staged":"lint-staged","detect-secrets":"node task/detect-secrets","tsc":"npm run tsc:clean && npm run tsc:build","tsc:build":"tsc -b tsconfig.json tsconfig-cjs.json","tsc:watch":"tsc -b tsconfig.json tsconfig-cjs.json --watch","tsc:clean":"tsc -b tsconfig.json tsconfig-cjs.json --clean ","prepare":"husky install"},"git-pre-hooks":{"pre-release":"npm run build-dist","post-release":["npm run publish-to-npm","npm run publish-to-cdn"]},"homepage":"https://github.com/ali-sdk/ali-oss","bugs":{"url":"https://github.com/ali-sdk/ali-oss/issues"},"publishConfig":{"registry":"https://registry.npmjs.org/","access":"public"},"repository":{"type":"git","url":"https://github.com/ali-sdk/ali-oss.git"},"keywords":["oss","client","file","aliyun"],"author":"dead_horse","license":"MIT","engines":{"node":">=8"},"devDependencies":{"@babel/core":"^7.11.6","@babel/plugin-transform-regenerator":"^7.10.4","@babel/plugin-transform-runtime":"^7.11.5","@babel/preset-env":"^7.11.5","@babel/runtime":"^7.11.2","@commitlint/cli":"^17.6.7","@commitlint/config-conventional":"^16.2.4","@octokit/core":"^5.0.0","@semantic-release/exec":"^6.0.3","@semantic-release/git":"^10.0.1","@semantic-release/npm":"^10.0.5","@snyk/protect":"^1.1196.0","@types/node":"^14.0.12","@typescript-eslint/eslint-plugin":"^5.0.0","@typescript-eslint/parser":"^5.0.0","aliasify":"^2.0.0","axios":"0.27.2","babelify":"^10.0.0","beautify-benchmark":"^0.2.4","benchmark":"^2.1.1","bluebird":"^3.1.5","browserify":"^17.0.0","core-js":"^3.6.5","crypto-js":"^3.1.9-1","dotenv":"^8.2.0","eslint":"^8.44.0","eslint-config-airbnb":"^19.0.4","eslint-config-ali":"^13.0.0","eslint-config-prettier":"^8.8.0","eslint-plugin-import":"^2.21.1","eslint-plugin-jsx-a11y":"^6.0.3","eslint-plugin-prettier":"^4.2.1","filereader":"^0.10.3","form-data":"^4.0.0","git-pre-hooks":"^1.2.0","husky":"^7.0.4","immediate":"^3.3.0","karma":"^6.3.4","karma-browserify":"^8.1.0","karma-chrome-launcher":"^2.2.0","karma-firefox-launcher":"^1.0.1","karma-ie-launcher":"^1.0.0","karma-mocha":"^2.0.1","karma-safari-launcher":"^1.0.0","lint-staged":"^12.4.1","mm":"^2.0.0","mocha":"^9.1.2","nyc":"^15.1.0","prettier":"^3.0.0","promise-polyfill":"^6.0.2","puppeteer":"19.0.0","semantic-release":"^21.1.1","should":"^11.0.0","sinon":"^15.2.0","standard-version":"^9.3.1","stream-equal":"^1.1.0","timemachine":"^0.3.0","typescript":"^3.9.5","uglify-js":"^3.14.2","watchify":"^4.0.0"},"dependencies":{"address":"^1.2.2","agentkeepalive":"^3.4.1","bowser":"^1.6.0","copy-to":"^2.0.1","dateformat":"^2.0.0","debug":"^4.3.4","destroy":"^1.0.4","end-or-error":"^1.0.1","get-ready":"^1.0.0","humanize-ms":"^1.2.0","is-type-of":"^1.4.0","js-base64":"^2.5.2","jstoxml":"^2.0.0","lodash":"^4.17.21","merge-descriptors":"^1.0.1","mime":"^2.4.5","platform":"^1.3.1","pump":"^3.0.0","qs":"^6.4.0","sdk-base":"^2.0.1","stream-http":"2.8.2","stream-wormhole":"^1.0.4","urllib":"2.41.0","utility":"^1.18.0","xml2js":"^0.6.2"},"snyk":true,"lint-staged":{"**/!(dist)/*":["npm run detect-secrets --"],"**/*.{js,ts}":["eslint --cache --fix --ext .js,.ts","prettier --write","git add"]},"_lastModified":"2026-07-16T13:28:35.838Z"}

package/dist/node_modules/cos-nodejs-sdk-v5/package.json

@@ -1 +1 @@
-{"name":"cos-nodejs-sdk-v5","version":"2.12.6","description":"cos nodejs sdk v5","main":"index.js","types":"index.d.ts","scripts":{"prettier":"prettier --write sdk demo/demo.js test/test.js index.d.ts","demo":"node demo/demo.js","demo-sts":"node demo/demo-sts.js","demo-sts-scope":"node demo/demo-sts-scope.js","test":"mocha test/test.js","cov":"istanbul cover _mocha -- -u exports 'test/test.js'","nyc":"nyc --reporter=clover --reporter=cobertura mocha --reporter xunit --reporter-options output=mocha.xml test/test.js","csp":"mocha test/csp.js"},"repository":{"type":"git","url":"git+https://github.com/tencentyun/cos-nodejs-sdk-v5.git"},"keywords":["tencent","tencent cloud","qcloud","cos","cos-sdk"],"author":"carsonxu","license":"ISC","bugs":{"url":"https://github.com/tencentyun/cos-nodejs-sdk-v5/issues"},"homepage":"https://github.com/tencentyun/cos-nodejs-sdk-v5#readme","dependencies":{"conf":"^9.0.0","fast-xml-parser":"4.2.5","mime-types":"^2.1.24","request":"^2.88.2"},"devDependencies":{"@types/node":"^14.14.20","batch":"^0.6.1","crc64-ecma182.js":"^1.0.0","mocha":"^4.0.1","nyc":"^15.1.0","prettier":"^3.0.1","qcloud-cos-sts":"^3.0.0"},"engines":{"node":">= 6"},"_lastModified":"2026-07-11T16:39:11.662Z"}
+{"name":"cos-nodejs-sdk-v5","version":"2.12.6","description":"cos nodejs sdk v5","main":"index.js","types":"index.d.ts","scripts":{"prettier":"prettier --write sdk demo/demo.js test/test.js index.d.ts","demo":"node demo/demo.js","demo-sts":"node demo/demo-sts.js","demo-sts-scope":"node demo/demo-sts-scope.js","test":"mocha test/test.js","cov":"istanbul cover _mocha -- -u exports 'test/test.js'","nyc":"nyc --reporter=clover --reporter=cobertura mocha --reporter xunit --reporter-options output=mocha.xml test/test.js","csp":"mocha test/csp.js"},"repository":{"type":"git","url":"git+https://github.com/tencentyun/cos-nodejs-sdk-v5.git"},"keywords":["tencent","tencent cloud","qcloud","cos","cos-sdk"],"author":"carsonxu","license":"ISC","bugs":{"url":"https://github.com/tencentyun/cos-nodejs-sdk-v5/issues"},"homepage":"https://github.com/tencentyun/cos-nodejs-sdk-v5#readme","dependencies":{"conf":"^9.0.0","fast-xml-parser":"4.2.5","mime-types":"^2.1.24","request":"^2.88.2"},"devDependencies":{"@types/node":"^14.14.20","batch":"^0.6.1","crc64-ecma182.js":"^1.0.0","mocha":"^4.0.1","nyc":"^15.1.0","prettier":"^3.0.1","qcloud-cos-sts":"^3.0.0"},"engines":{"node":">= 6"},"_lastModified":"2026-07-16T13:28:42.743Z"}

package/dist/node_modules/mime-match/package.json

@@ -1 +1 @@
-{"name":"mime-match","version":"1.0.2","description":"A simple function to check whether a mimetype matches the specified mimetype (with wildcard support)","main":"index.js","scripts":{"test":"node test.js","gendocs":"gendocs > README.md"},"repository":{"type":"git","url":"https://github.com/DamonOehlman/mime-match.git"},"keywords":["mime","wildcard"],"author":"Damon Oehlman <damon.oehlman@gmail.com>","license":"ISC","bugs":{"url":"https://github.com/DamonOehlman/mime-match/issues"},"homepage":"https://github.com/DamonOehlman/mime-match","dependencies":{"wildcard":"^1.1.0"},"devDependencies":{"tape":"^4.5.1"},"_lastModified":"2026-07-11T16:39:00.242Z"}
+{"name":"mime-match","version":"1.0.2","description":"A simple function to check whether a mimetype matches the specified mimetype (with wildcard support)","main":"index.js","scripts":{"test":"node test.js","gendocs":"gendocs > README.md"},"repository":{"type":"git","url":"https://github.com/DamonOehlman/mime-match.git"},"keywords":["mime","wildcard"],"author":"Damon Oehlman <damon.oehlman@gmail.com>","license":"ISC","bugs":{"url":"https://github.com/DamonOehlman/mime-match/issues"},"homepage":"https://github.com/DamonOehlman/mime-match","dependencies":{"wildcard":"^1.1.0"},"devDependencies":{"tape":"^4.5.1"},"_lastModified":"2026-07-16T13:28:30.864Z"}

package/dist/node_modules/mime-types/package.json

@@ -1 +1 @@
-{"name":"mime-types","description":"The ultimate javascript content-type utility.","version":"3.0.1","contributors":["Douglas Christopher Wilson <doug@somethingdoug.com>","Jeremiah Senkpiel <fishrock123@rocketmail.com> (https://searchbeam.jit.su)","Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)"],"license":"MIT","keywords":["mime","types"],"repository":"jshttp/mime-types","dependencies":{"mime-db":"^1.54.0"},"devDependencies":{"eslint":"8.33.0","eslint-config-standard":"14.1.1","eslint-plugin-import":"2.27.5","eslint-plugin-markdown":"3.0.0","eslint-plugin-node":"11.1.0","eslint-plugin-promise":"6.1.1","eslint-plugin-standard":"4.1.0","mocha":"10.2.0","nyc":"15.1.0"},"files":["HISTORY.md","LICENSE","index.js","mimeScore.js"],"engines":{"node":">= 0.6"},"scripts":{"lint":"eslint .","test":"mocha --reporter spec test/test.js","test-ci":"nyc --reporter=lcov --reporter=text npm test","test-cov":"nyc --reporter=html --reporter=text npm test"},"_lastModified":"2026-07-11T16:39:00.566Z"}
+{"name":"mime-types","description":"The ultimate javascript content-type utility.","version":"3.0.1","contributors":["Douglas Christopher Wilson <doug@somethingdoug.com>","Jeremiah Senkpiel <fishrock123@rocketmail.com> (https://searchbeam.jit.su)","Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)"],"license":"MIT","keywords":["mime","types"],"repository":"jshttp/mime-types","dependencies":{"mime-db":"^1.54.0"},"devDependencies":{"eslint":"8.33.0","eslint-config-standard":"14.1.1","eslint-plugin-import":"2.27.5","eslint-plugin-markdown":"3.0.0","eslint-plugin-node":"11.1.0","eslint-plugin-promise":"6.1.1","eslint-plugin-standard":"4.1.0","mocha":"10.2.0","nyc":"15.1.0"},"files":["HISTORY.md","LICENSE","index.js","mimeScore.js"],"engines":{"node":">= 0.6"},"scripts":{"lint":"eslint .","test":"mocha --reporter spec test/test.js","test-ci":"nyc --reporter=lcov --reporter=text npm test","test-cov":"nyc --reporter=html --reporter=text npm test"},"_lastModified":"2026-07-16T13:28:31.194Z"}

package/dist/node_modules/mkdirp/package.json

@@ -1 +1 @@
-{"name":"mkdirp","description":"Recursively mkdir, like `mkdir -p`","version":"0.5.6","publishConfig":{"tag":"legacy"},"author":"James Halliday <mail@substack.net> (http://substack.net)","main":"index.js","keywords":["mkdir","directory"],"repository":{"type":"git","url":"https://github.com/substack/node-mkdirp.git"},"scripts":{"test":"tap test/*.js"},"dependencies":{"minimist":"^1.2.6"},"devDependencies":{"tap":"^16.0.1"},"bin":"bin/cmd.js","license":"MIT","files":["bin","index.js"],"_lastModified":"2026-07-11T16:39:05.102Z"}
+{"name":"mkdirp","description":"Recursively mkdir, like `mkdir -p`","version":"0.5.6","publishConfig":{"tag":"legacy"},"author":"James Halliday <mail@substack.net> (http://substack.net)","main":"index.js","keywords":["mkdir","directory"],"repository":{"type":"git","url":"https://github.com/substack/node-mkdirp.git"},"scripts":{"test":"tap test/*.js"},"dependencies":{"minimist":"^1.2.6"},"devDependencies":{"tap":"^16.0.1"},"bin":"bin/cmd.js","license":"MIT","files":["bin","index.js"],"_lastModified":"2026-07-16T13:28:36.254Z"}

package/dist/node_modules/url-join/package.json

@@ -1 +1 @@
-{"name":"url-join","version":"4.0.1","description":"Join urls and normalize as in path.join.","main":"lib/url-join.js","scripts":{"test":"mocha --require should"},"repository":{"type":"git","url":"git://github.com/jfromaniello/url-join.git"},"keywords":["url","join"],"author":"José F. Romaniello <jfromaniello@gmail.com> (http://joseoncode.com)","license":"MIT","devDependencies":{"conventional-changelog":"^1.1.10","mocha":"^3.2.0","should":"~1.2.1"},"_lastModified":"2026-07-11T16:39:00.352Z"}
+{"name":"url-join","version":"4.0.1","description":"Join urls and normalize as in path.join.","main":"lib/url-join.js","scripts":{"test":"mocha --require should"},"repository":{"type":"git","url":"git://github.com/jfromaniello/url-join.git"},"keywords":["url","join"],"author":"José F. Romaniello <jfromaniello@gmail.com> (http://joseoncode.com)","license":"MIT","devDependencies":{"conventional-changelog":"^1.1.10","mocha":"^3.2.0","should":"~1.2.1"},"_lastModified":"2026-07-16T13:28:30.973Z"}

package/dist/server/actions/get-file.d.ts

@@ -0,0 +1,13 @@
+/**
+ * This file is part of the NocoBase (R) project.
+ * Copyright (c) 2020-2024 NocoBase Co., Ltd.
+ * Authors: NocoBase Team.
+ *
+ * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.
+ * For more information, please refer to: https://www.nocobase.com/agreement.
+ */
+import type { Context, Next } from '@nocobase/actions';
+import type { DataSource } from '@nocobase/data-source-manager';
+export declare function getFile(ctx: Context, next: Next): Promise<never>;
+export declare function registerGetFileAccess(dataSource: DataSource): void;
+export declare function skipGetFileAcl(ctx: Context, next: Next): Promise<void>;

package/dist/server/actions/get-file.js

@@ -0,0 +1,133 @@
+/**
+ * This file is part of the NocoBase (R) project.
+ * Copyright (c) 2020-2024 NocoBase Co., Ltd.
+ * Authors: NocoBase Team.
+ *
+ * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.
+ * For more information, please refer to: https://www.nocobase.com/agreement.
+ */
+
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var get_file_exports = {};
+__export(get_file_exports, {
+  getFile: () => getFile,
+  registerGetFileAccess: () => registerGetFileAccess,
+  skipGetFileAcl: () => skipGetFileAcl
+});
+module.exports = __toCommonJS(get_file_exports);
+var import_temporary_access = require("../temporary-access");
+var import_utils = require("../utils");
+var import_resolve_file_access_filter = require("../resolve-file-access-filter");
+const GET_FILE_ACTION = "getFile";
+async function getFile(ctx, next) {
+  var _a, _b, _c, _d, _e, _f, _g, _h, _i;
+  const collection = ctx.dataSource.collectionManager.getCollection(ctx.action.resourceName);
+  if (!collection || collection.name !== "attachments" && ((_a = collection.options) == null ? void 0 : _a.template) !== "file") {
+    return ctx.throw(404);
+  }
+  if (!(0, import_utils.hasStandardFileId)(collection)) {
+    ctx.logger.error("file collection is missing standard id field", {
+      method: "file-manager.getFile",
+      collection: collection.name
+    });
+    return ctx.throw(500);
+  }
+  const plugin = ctx.app.pm.get("file-manager");
+  const id = ((_b = ctx.state.fileAccess) == null ? void 0 : _b.id) ?? ctx.action.params.filterByTk;
+  const temporaryAccess = Boolean((_c = ctx.state.fileAccess) == null ? void 0 : _c.temporaryAccess);
+  let temporaryAccessPayload;
+  if (temporaryAccess) {
+    ctx.set("Cache-Control", "private, no-store");
+    ctx.set("Referrer-Policy", "no-referrer");
+    const token = (_d = ctx.state.fileAccess) == null ? void 0 : _d.temporaryAccessToken;
+    if (typeof token !== "string" || !token) {
+      return ctx.throw(403);
+    }
+    try {
+      temporaryAccessPayload = (0, import_temporary_access.verifyTemporaryFileAccessToken)(plugin, token);
+    } catch (error) {
+      return ctx.throw(403);
+    }
+    const expectedResource = {
+      app: ctx.state.fileAccess.appName,
+      dataSource: ctx.state.fileAccess.dataSourceKey,
+      collection: collection.name,
+      id: String(id)
+    };
+    if (temporaryAccessPayload.app !== expectedResource.app || temporaryAccessPayload.dataSource !== expectedResource.dataSource || temporaryAccessPayload.collection !== expectedResource.collection || String(temporaryAccessPayload.id) !== expectedResource.id) {
+      return ctx.throw(403);
+    }
+  }
+  const fileAccessParams = ctx.state.fileAccess ? {
+    appName: ctx.state.fileAccess.appName,
+    dataSourceKey: ctx.state.fileAccess.dataSourceKey,
+    collectionName: collection.name,
+    id: String(id),
+    preview: Boolean(ctx.state.fileAccess.preview)
+  } : null;
+  const authorizedByExtension = fileAccessParams && !temporaryAccess ? await plugin.authorizeFileAccess(ctx, fileAccessParams) : false;
+  let filter = { id };
+  if (!temporaryAccess && !authorizedByExtension && ctx.app.options.acl !== false && ((_e = ctx.dataSource.options) == null ? void 0 : _e.useACL) !== false && ((_f = ctx.dataSource.options) == null ? void 0 : _f.acl) !== false) {
+    filter = await (0, import_resolve_file_access_filter.resolveFileAccessFilter)(ctx, collection, filter);
+  }
+  const file = await ctx.getCurrentRepository().findOne({
+    filter,
+    fields: ["id", "storageId", "path", "filename", "extname", "mimetype", "url", "meta"],
+    context: ctx
+  });
+  const storageId = (0, import_utils.getFileRecordValue)(file, "storageId");
+  if (!file || !storageId) {
+    return ctx.throw(404);
+  }
+  if (temporaryAccessPayload && String(temporaryAccessPayload.storageId) !== String(storageId)) {
+    return ctx.throw(403);
+  }
+  if (((_g = ctx.state.fileAccess) == null ? void 0 : _g.extname) && ctx.state.fileAccess.extname !== (0, import_utils.getFileRecordValue)(file, "extname")) {
+    return ctx.throw(404);
+  }
+  const download = !temporaryAccess && ctx.method === "GET" && ctx.query.download === "1";
+  const preview = download ? false : temporaryAccess ? false : Boolean((_h = ctx.state.fileAccess) == null ? void 0 : _h.preview);
+  const dataSource = ctx.dataSource;
+  const finalUrl = await ((_i = dataSource.resolveStorageFileURL) == null ? void 0 : _i.call(dataSource, {
+    collectionName: collection.name,
+    file: (0, import_utils.getFilePlainObject)(file),
+    preview,
+    download
+  })) || await plugin.getFileURL(file, preview, { download });
+  ctx.status = 302;
+  ctx.redirect(finalUrl);
+  await next();
+}
+function registerGetFileAccess(dataSource) {
+  dataSource.resourceManager.registerActionHandler(GET_FILE_ACTION, getFile);
+  dataSource.acl.use(skipGetFileAcl, { tag: "skipGetFileAcl", before: "core" });
+}
+async function skipGetFileAcl(ctx, next) {
+  var _a;
+  if (((_a = ctx.action) == null ? void 0 : _a.actionName) === GET_FILE_ACTION) {
+    ctx.permission.skip = true;
+  }
+  await next();
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  getFile,
+  registerGetFileAccess,
+  skipGetFileAcl
+});

package/dist/server/actions/index.d.ts

@@ -6,6 +6,4 @@
  * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.
  * For more information, please refer to: https://www.nocobase.com/agreement.
  */
-export default function ({ app }: {
-    app: any;
-}): void;
+export default function (plugin: any): void;

package/dist/server/actions/index.js

@@ -41,9 +41,16 @@ __export(actions_exports, {
 module.exports = __toCommonJS(actions_exports);
 var import_actions = __toESM(require("@nocobase/actions"));
 var import_attachments = require("./attachments");
+var import_get_file = require("./get-file");
 var import_storage_validation = require("./storage-validation");
 var storageActions = __toESM(require("./storages"));
-function actions_default({ app }) {
+var import_temporary_access = require("../temporary-access");
+function actions_default(plugin) {
+  const { app } = plugin;
+  app.dataSourceManager.afterAddDataSource((dataSource) => {
+    (0, import_get_file.registerGetFileAccess)(dataSource);
+    (0, import_temporary_access.registerTemporaryFileAccess)(dataSource);
+  });
   app.resourcer.define({
     name: "storages",
     actions: storageActions,

package/dist/server/commands/repair-filenames.js

@@ -102,6 +102,28 @@ async function loadFileCollections(app) {
   await ((_a = repository.setApp) == null ? void 0 : _a.call(repository, app));
   await ((_b = repository.load) == null ? void 0 : _b.call(repository));
 }
+function getColumnName(model, attribute) {
+  var _a;
+  return ((_a = model.rawAttributes[attribute]) == null ? void 0 : _a.field) || attribute;
+}
+function quotedColumn(app, model, attribute) {
+  return app.db.quoteIdentifier(getColumnName(model, attribute));
+}
+function quotedAlias(app, attribute) {
+  return app.db.quoteIdentifier(attribute);
+}
+async function findAttachmentRows(app, model, lastId, limit) {
+  const tableName = app.db.utils.quoteTable(model.getTableName());
+  const idColumn = quotedColumn(app, model, "id");
+  const columns = ["id", "path", "filename", "storageId", "url"].map((attribute) => `${quotedColumn(app, model, attribute)} as ${quotedAlias(app, attribute)}`).join(", ");
+  return await app.db.sequelize.query(
+    `select ${columns} from ${tableName}${lastId == null ? "" : ` where ${idColumn} > :lastId`} order by ${idColumn} asc limit ${limit}`,
+    {
+      replacements: { lastId },
+      type: import_sequelize.QueryTypes.SELECT
+    }
+  );
+}
 async function repairCollectionAttachmentFilenames({
   app,
   fileManager,
@@ -115,22 +137,17 @@ async function repairCollectionAttachmentFilenames({
   if (!collection) {
     return;
   }
-  const Model = collection.model;
+  const FileModel = collection.model;
   let lastId = null;
   while (result.scanned < limit) {
-    const rows = await Model.findAll({
-      attributes: ["id", "path", "filename", "storageId", "url"],
-      where: lastId ? { id: { [import_sequelize.Op.gt]: lastId } } : void 0,
-      order: [["id", "ASC"]],
-      limit: Math.min(batchSize, limit - result.scanned)
-    });
+    const rows = await findAttachmentRows(app, FileModel, lastId, Math.min(batchSize, limit - result.scanned));
     if (!rows.length) {
       break;
     }
     for (const row of rows) {
       result.scanned += 1;
-      lastId = row.get("id");
-      const record = row.toJSON();
+      lastId = row.id;
+      const record = row;
       if (!containsInvisibleChars(record.path) && !containsInvisibleChars(record.filename)) {
         continue;
       }
@@ -190,11 +207,14 @@ async function repairCollectionAttachmentFilenames({
         }
         if (apply) {
           await storageInstance.copy(record, newRecord);
-          await row.update({
-            path: newPath,
-            filename: newFilename,
-            url: updateUrlValue(record.url, oldKey, newKey)
-          });
+          await FileModel.update(
+            {
+              path: newPath,
+              filename: newFilename,
+              url: updateUrlValue(record.url, oldKey, newKey)
+            },
+            { where: { id: lastId } }
+          );
           try {
             const [deleted] = await storageInstance.delete([record]);
             if (!deleted) {

package/dist/server/file-access.d.ts

@@ -0,0 +1,11 @@
+/**
+ * This file is part of the NocoBase (R) project.
+ * Copyright (c) 2020-2024 NocoBase Co., Ltd.
+ * Authors: NocoBase Team.
+ *
+ * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.
+ * For more information, please refer to: https://www.nocobase.com/agreement.
+ */
+import type { Context, Next } from '@nocobase/actions';
+import type { PluginFileManagerServer } from './server';
+export declare function createFileAccessMiddleware(plugin: PluginFileManagerServer): (ctx: Context, next: Next) => Promise<any>;