@openinary/core 1.1.0

package/dist/config/deps.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=deps.js.map

package/dist/config/deps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deps.js","sourceRoot":"","sources":["../../src/config/deps.ts"],"names":[],"mappings":""}

package/dist/index.d.ts

@@ -0,0 +1,27 @@
+export { TransformService, type TransformRequest, type TransformResult, type CacheCheckResult, } from "./services/transform.service";
+export { VideoJobQueue, type VideoJob, type JobStatus } from "./utils/video-job-queue";
+export type { VideoJobStore, VideoJob as VideoJobRecord, JobStats, } from "./utils/video/queue-store";
+export { SqliteVideoJobStore } from "./utils/video/sqlite-video-job-store";
+export { THUMBNAIL_PRIORITY, TRANSFORMATION_PRIORITY, LOW_PRIORITY, } from "./utils/video/config";
+export { CloudStorage, StorageCache, S3ClientWrapper, KeyGenerator, createStorageClient, createOptimizedStorageClient, type StorageConfig, type CacheEntry, } from "./utils/storage/index";
+export type { StorageClientOptions } from "./types";
+export { invalidateListingCache } from "./utils/storage/listing-cache";
+export type { RouteDeps } from "./config/deps";
+export { createTransformRoute } from "./routes/transform";
+export { createAuthenticatedRoute } from "./routes/authenticated";
+export { createStorageRoute } from "./routes/storage";
+export { createDownloadRoute } from "./routes/download";
+export { createDownloadFolderRoute } from "./routes/download-folder";
+export { createDownloadZipRoute } from "./routes/download-zip";
+export { createVideoStatusRoute } from "./routes/video-status";
+export { createQueueEventsRoute } from "./routes/queue-events";
+export { createQueueRoute } from "./routes/queue";
+export { createInvalidateRoute } from "./routes/invalidate";
+export { getUniqueFilePath } from "./utils/get-unique-file-path";
+export { getCachePath } from "./utils/cache";
+export { parseParams } from "./utils/parser";
+export { validateApiSecret } from "./utils/signature";
+export { generateUploadSignature, verifyUploadSignature } from "./utils/upload-signature";
+export { deleteAssetCompletely, type DeleteAssetResult } from "./utils/asset-deletion";
+export { default as logger, serializeError } from "./utils/logger";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,gBAAgB,EAChB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,gBAAgB,GACtB,MAAM,8BAA8B,CAAC;AAGtC,OAAO,EAAE,aAAa,EAAE,KAAK,QAAQ,EAAE,KAAK,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACvF,YAAY,EACV,aAAa,EACb,QAAQ,IAAI,cAAc,EAC1B,QAAQ,GACT,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAC3E,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,YAAY,GACb,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,mBAAmB,EACnB,4BAA4B,EAC5B,KAAK,aAAa,EAClB,KAAK,UAAU,GAChB,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAGvE,YAAY,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAG5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAC1F,OAAO,EAAE,qBAAqB,EAAE,KAAK,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AACvF,OAAO,EAAE,OAAO,IAAI,MAAM,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/index.js

@@ -0,0 +1,28 @@
+// Transform engine
+export { TransformService, } from "./services/transform.service.js";
+// Video job queue
+export { VideoJobQueue } from "./utils/video-job-queue.js";
+export { SqliteVideoJobStore } from "./utils/video/sqlite-video-job-store.js";
+export { THUMBNAIL_PRIORITY, TRANSFORMATION_PRIORITY, LOW_PRIORITY, } from "./utils/video/config.js";
+// Storage
+export { CloudStorage, StorageCache, S3ClientWrapper, KeyGenerator, createStorageClient, createOptimizedStorageClient, } from "./utils/storage/index.js";
+export { invalidateListingCache } from "./utils/storage/listing-cache.js";
+export { createTransformRoute } from "./routes/transform.js";
+export { createAuthenticatedRoute } from "./routes/authenticated.js";
+export { createStorageRoute } from "./routes/storage.js";
+export { createDownloadRoute } from "./routes/download.js";
+export { createDownloadFolderRoute } from "./routes/download-folder.js";
+export { createDownloadZipRoute } from "./routes/download-zip.js";
+export { createVideoStatusRoute } from "./routes/video-status.js";
+export { createQueueEventsRoute } from "./routes/queue-events.js";
+export { createQueueRoute } from "./routes/queue.js";
+export { createInvalidateRoute } from "./routes/invalidate.js";
+// Shared utilities
+export { getUniqueFilePath } from "./utils/get-unique-file-path.js";
+export { getCachePath } from "./utils/cache.js";
+export { parseParams } from "./utils/parser.js";
+export { validateApiSecret } from "./utils/signature.js";
+export { generateUploadSignature, verifyUploadSignature } from "./utils/upload-signature.js";
+export { deleteAssetCompletely } from "./utils/asset-deletion.js";
+export { default as logger, serializeError } from "./utils/logger.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,mBAAmB;AACnB,OAAO,EACL,gBAAgB,GAIjB,MAAM,8BAA8B,CAAC;AAEtC,kBAAkB;AAClB,OAAO,EAAE,aAAa,EAAiC,MAAM,yBAAyB,CAAC;AAMvF,OAAO,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAC3E,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,YAAY,GACb,MAAM,sBAAsB,CAAC;AAE9B,UAAU;AACV,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,mBAAmB,EACnB,4BAA4B,GAG7B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAIvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAE5D,mBAAmB;AACnB,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAC1F,OAAO,EAAE,qBAAqB,EAA0B,MAAM,wBAAwB,CAAC;AACvF,OAAO,EAAE,OAAO,IAAI,MAAM,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/routes/authenticated.d.ts

@@ -0,0 +1,4 @@
+import { Hono } from "hono";
+import type { RouteDeps } from "../config/deps";
+export declare function createAuthenticatedRoute(deps: RouteDeps): Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=authenticated.d.ts.map

package/dist/routes/authenticated.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticated.d.ts","sourceRoot":"","sources":["../../src/routes/authenticated.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAYhD,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,SAAS,8EAwKvD"}

package/dist/routes/authenticated.js

@@ -0,0 +1,130 @@
+import { Hono } from "hono";
+import { TransformService } from "../services/transform.service.js";
+import logger, { serializeError } from "../utils/logger.js";
+import { verifySignature, SIGNATURE_LENGTH, sanitizeFilePath, } from "../utils/signature.js";
+import { isTransformSegment } from "../utils/parser.js";
+// Get API_SECRET from environment variables
+const API_SECRET = process.env.API_SECRET;
+export function createAuthenticatedRoute(deps) {
+    const transformService = new TransformService(deps.storage, deps.queue);
+    const t = new Hono();
+    t.get("/*", async (c) => {
+        const path = c.req.path;
+        const userAgent = c.req.header("User-Agent") ?? "";
+        const acceptHeader = c.req.header("Accept");
+        try {
+            // Parse the authenticated URL format: /s--{signature}/{transformations}/{route}
+            const segments = path.split("/").slice(2); // Remove '/authenticated' prefix
+            if (segments.length < 2) {
+                return c.text("Invalid authenticated URL format. Expected: /s--{signature}/{transformations}/{route}", 400);
+            }
+            // Extract signature from first segment (format: s--{signature})
+            const firstSegment = segments[0];
+            if (!firstSegment.startsWith("s--")) {
+                return c.text("Invalid signature format. Expected: s--{signature}", 400);
+            }
+            const signature = firstSegment.slice(3); // Remove 's--' prefix
+            if (signature.length !== SIGNATURE_LENGTH) {
+                return c.text(`Invalid signature length. Expected ${SIGNATURE_LENGTH} characters.`, 400);
+            }
+            // Extract transformations and route from remaining segments
+            const routeSegments = segments.slice(1);
+            if (routeSegments.length < 1) {
+                return c.text("No route specified.", 400);
+            }
+            // Determine transformation string and file path
+            // Format: {transformations}/{route}
+            const hasTransform = routeSegments.length > 0 && isTransformSegment(routeSegments[0]);
+            const transformations = hasTransform ? routeSegments[0] : "";
+            const filePathSegments = hasTransform
+                ? routeSegments.slice(1)
+                : routeSegments;
+            const filePath = filePathSegments.join("/");
+            if (!filePath) {
+                return c.text("No file path specified.", 400);
+            }
+            // Sanitize the file path to prevent path traversal attacks
+            let sanitizedFilePath;
+            try {
+                sanitizedFilePath = sanitizeFilePath(filePath);
+            }
+            catch (error) {
+                logger.warn({
+                    path,
+                    filePath,
+                    error,
+                }, "Path traversal attempt detected in authenticated request");
+                return c.text("Invalid file path", 400);
+            }
+            // Verify the signature using timing-safe comparison and HMAC-SHA256
+            if (!API_SECRET) {
+                return c.text("API_SECRET not configured on server.", 500);
+            }
+            const isValidSignature = verifySignature(signature, transformations, sanitizedFilePath, API_SECRET);
+            if (!isValidSignature) {
+                logger.warn({
+                    path,
+                    signature,
+                    transformations,
+                    filePath: sanitizedFilePath,
+                }, "Invalid signature for authenticated request");
+                return c.text("Invalid signature", 401);
+            }
+            // Construct the path for the transform service using the sanitized path
+            // Format: /t/{transformations}/{filePath}
+            const transformPath = `/t/${transformations ? `${transformations}/` : ""}${sanitizedFilePath}`;
+            // Use the transform service with the constructed path
+            const result = await transformService.transform({
+                path: transformPath,
+                userAgent,
+                acceptHeader,
+                context: c,
+            });
+            // Set response headers
+            Object.entries(result.headers).forEach(([key, value]) => {
+                c.header(key, value);
+            });
+            // Determine content type if not set in headers
+            if (!result.contentType) {
+                // Extract file extension from sanitized path
+                const ext = sanitizedFilePath.split(".").pop()?.toLowerCase();
+                const contentTypeMap = {
+                    jpg: "image/jpeg",
+                    jpeg: "image/jpeg",
+                    png: "image/png",
+                    webp: "image/webp",
+                    avif: "image/avif",
+                    gif: "image/gif",
+                    mp4: "video/mp4",
+                    mov: "video/quicktime",
+                    webm: "video/webm",
+                };
+                const contentType = contentTypeMap[ext || ""] || "application/octet-stream";
+                c.header("Content-Type", contentType);
+            }
+            else {
+                c.header("Content-Type", result.contentType);
+            }
+            // Large payloads (e.g. original videos during processing) are streamed
+            if (result.stream) {
+                return c.body(result.stream);
+            }
+            // Check if this is an error response
+            if (result.contentType === "text/plain" &&
+                result.buffer.toString().includes("failed")) {
+                const errorMessage = result.buffer.toString();
+                if (errorMessage.includes("File not found")) {
+                    return c.text(errorMessage, 404);
+                }
+                return c.text(errorMessage, 500);
+            }
+            return c.body(new Uint8Array(result.buffer));
+        }
+        catch (error) {
+            logger.error({ error: serializeError(error), path }, "Authenticated transform route error");
+            return c.text("Internal server error", 500);
+        }
+    });
+    return t;
+}
+//# sourceMappingURL=authenticated.js.map

package/dist/routes/authenticated.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticated.js","sourceRoot":"","sources":["../../src/routes/authenticated.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAEjE,OAAO,MAAM,EAAE,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAErD,4CAA4C;AAC5C,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;AAE1C,MAAM,UAAU,wBAAwB,CAAC,IAAe;IACtD,MAAM,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACxE,MAAM,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;IAErB,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtB,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;QACxB,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QACnD,MAAM,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAE5C,IAAI,CAAC;YACH,gFAAgF;YAChF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,iCAAiC;YAE5E,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,OAAO,CAAC,CAAC,IAAI,CACX,uFAAuF,EACvF,GAAG,CACJ,CAAC;YACJ,CAAC;YAED,gEAAgE;YAChE,MAAM,YAAY,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpC,OAAO,CAAC,CAAC,IAAI,CACX,oDAAoD,EACpD,GAAG,CACJ,CAAC;YACJ,CAAC;YAED,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB;YAE/D,IAAI,SAAS,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;gBAC1C,OAAO,CAAC,CAAC,IAAI,CACX,sCAAsC,gBAAgB,cAAc,EACpE,GAAG,CACJ,CAAC;YACJ,CAAC;YAED,4DAA4D;YAC5D,MAAM,aAAa,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACxC,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,OAAO,CAAC,CAAC,IAAI,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;YAC5C,CAAC;YAED,gDAAgD;YAChD,oCAAoC;YACpC,MAAM,YAAY,GAChB,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,kBAAkB,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;YAEnE,MAAM,eAAe,GAAG,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,MAAM,gBAAgB,GAAG,YAAY;gBACnC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;gBACxB,CAAC,CAAC,aAAa,CAAC;YAClB,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAE5C,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,CAAC,CAAC,IAAI,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;YAChD,CAAC;YAED,2DAA2D;YAC3D,IAAI,iBAAyB,CAAC;YAC9B,IAAI,CAAC;gBACH,iBAAiB,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YACjD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CACT;oBACE,IAAI;oBACJ,QAAQ;oBACR,KAAK;iBACN,EACD,0DAA0D,CAC3D,CAAC;gBACF,OAAO,CAAC,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;YAC1C,CAAC;YAED,oEAAoE;YACpE,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,OAAO,CAAC,CAAC,IAAI,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAC;YAC7D,CAAC;YAED,MAAM,gBAAgB,GAAG,eAAe,CACtC,SAAS,EACT,eAAe,EACf,iBAAiB,EACjB,UAAU,CACX,CAAC;YAEF,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,MAAM,CAAC,IAAI,CACT;oBACE,IAAI;oBACJ,SAAS;oBACT,eAAe;oBACf,QAAQ,EAAE,iBAAiB;iBAC5B,EACD,6CAA6C,CAC9C,CAAC;gBAEF,OAAO,CAAC,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;YAC1C,CAAC;YAED,wEAAwE;YACxE,0CAA0C;YAC1C,MAAM,aAAa,GAAG,MAAM,eAAe,CAAC,CAAC,CAAC,GAAG,eAAe,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,iBAAiB,EAAE,CAAC;YAE/F,sDAAsD;YACtD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,SAAS,CAAC;gBAC9C,IAAI,EAAE,aAAa;gBACnB,SAAS;gBACT,YAAY;gBACZ,OAAO,EAAE,CAAC;aACX,CAAC,CAAC;YAEH,uBAAuB;YACvB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;gBACtD,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACvB,CAAC,CAAC,CAAC;YAEH,+CAA+C;YAC/C,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;gBACxB,6CAA6C;gBAC7C,MAAM,GAAG,GAAG,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,CAAC;gBAC9D,MAAM,cAAc,GAA2B;oBAC7C,GAAG,EAAE,YAAY;oBACjB,IAAI,EAAE,YAAY;oBAClB,GAAG,EAAE,WAAW;oBAChB,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,YAAY;oBAClB,GAAG,EAAE,WAAW;oBAChB,GAAG,EAAE,WAAW;oBAChB,GAAG,EAAE,iBAAiB;oBACtB,IAAI,EAAE,YAAY;iBACnB,CAAC;gBACF,MAAM,WAAW,GACf,cAAc,CAAC,GAAG,IAAI,EAAE,CAAC,IAAI,0BAA0B,CAAC;gBAC1D,CAAC,CAAC,MAAM,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;YACxC,CAAC;iBAAM,CAAC;gBACN,CAAC,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;YAC/C,CAAC;YAED,uEAAuE;YACvE,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC/B,CAAC;YAED,qCAAqC;YACrC,IACE,MAAM,CAAC,WAAW,KAAK,YAAY;gBACnC,MAAM,CAAC,MAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAC5C,CAAC;gBACD,MAAM,YAAY,GAAG,MAAM,CAAC,MAAO,CAAC,QAAQ,EAAE,CAAC;gBAC/C,IAAI,YAAY,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;oBAC5C,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;gBACnC,CAAC;gBACD,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;YACnC,CAAC;YAED,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,MAAO,CAAC,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CACV,EAAE,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,EACtC,qCAAqC,CACtC,CAAC;YACF,OAAO,CAAC,CAAC,IAAI,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/routes/download-folder.d.ts

@@ -0,0 +1,4 @@
+import { Hono } from "hono";
+import type { RouteDeps } from "../config/deps";
+export declare function createDownloadFolderRoute(deps: RouteDeps): Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=download-folder.d.ts.map

package/dist/routes/download-folder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"download-folder.d.ts","sourceRoot":"","sources":["../../src/routes/download-folder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAwBhD,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,SAAS,8EAoGxD"}

package/dist/routes/download-folder.js

@@ -0,0 +1,101 @@
+import { Hono } from "hono";
+import { zipSync } from "fflate";
+import fs from "fs";
+import path from "path";
+import logger, { serializeError } from "../utils/logger.js";
+function collectLocalFiles(dir, base) {
+    const results = [];
+    if (!fs.existsSync(dir))
+        return results;
+    for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
+        const full = path.join(dir, entry.name);
+        const rel = path.join(base, entry.name);
+        if (entry.isDirectory()) {
+            results.push(...collectLocalFiles(full, rel));
+        }
+        else {
+            results.push({ arcPath: rel.replace(/\\/g, "/"), fullPath: full });
+        }
+    }
+    return results;
+}
+export function createDownloadFolderRoute(deps) {
+    const { storage } = deps;
+    const downloadFolder = new Hono();
+    /**
+     * GET /download-folder/:path
+     * Returns all files under the given folder path as a ZIP archive.
+     */
+    downloadFolder.get("/*", async (c) => {
+        const requestPath = c.req.path;
+        const rawFolderPath = requestPath.replace(/^\/download-folder\/?/, "");
+        if (!rawFolderPath) {
+            return c.text("Folder path is required", 400);
+        }
+        let folderPath;
+        try {
+            folderPath = decodeURIComponent(rawFolderPath)
+                .replace(/\.\./g, "")
+                .replace(/\\/g, "/")
+                .replace(/\/+/g, "/")
+                .replace(/^\/+/, "")
+                .replace(/\/+$/, "");
+        }
+        catch {
+            return c.text("Invalid folder path", 400);
+        }
+        if (!folderPath) {
+            return c.text("Invalid folder path", 400);
+        }
+        const folderName = folderPath.split("/").pop() ?? folderPath;
+        try {
+            const zipFiles = {};
+            if (storage) {
+                // Cloud storage: list all objects under the prefix
+                const prefix = `public/${folderPath}/`;
+                const objects = await storage.list(prefix);
+                if (objects.length === 0) {
+                    return c.text("Folder not found or empty", 404);
+                }
+                for (const obj of objects) {
+                    // obj.key looks like "public/videos/clip.mp4"
+                    const relPath = obj.key.replace(`public/${folderPath}/`, "");
+                    // Skip folder marker objects (empty keys or keys ending in /)
+                    if (!relPath || relPath.endsWith("/"))
+                        continue;
+                    const buffer = await storage.downloadOriginal(`${folderPath}/${relPath}`);
+                    zipFiles[relPath] = new Uint8Array(buffer);
+                }
+            }
+            else {
+                // Local storage
+                const localDir = path.join("./public", folderPath);
+                if (!fs.existsSync(localDir) || !fs.statSync(localDir).isDirectory()) {
+                    return c.text("Folder not found", 404);
+                }
+                const entries = collectLocalFiles(localDir, "");
+                if (entries.length === 0) {
+                    return c.text("Folder is empty", 404);
+                }
+                for (const entry of entries) {
+                    zipFiles[entry.arcPath] = new Uint8Array(fs.readFileSync(entry.fullPath));
+                }
+            }
+            if (Object.keys(zipFiles).length === 0) {
+                return c.text("Folder is empty", 404);
+            }
+            const zipBuffer = zipSync(zipFiles);
+            c.header("Content-Type", "application/zip");
+            c.header("Content-Disposition", `attachment; filename="${encodeURIComponent(folderName)}.zip"`);
+            c.header("Content-Length", zipBuffer.length.toString());
+            c.header("Cache-Control", "private, no-store");
+            return c.body(zipBuffer);
+        }
+        catch (error) {
+            logger.error({ error: serializeError(error), folderPath }, "Folder download failed");
+            return c.text("Internal server error", 500);
+        }
+    });
+    return downloadFolder;
+}
+//# sourceMappingURL=download-folder.js.map

package/dist/routes/download-folder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"download-folder.js","sourceRoot":"","sources":["../../src/routes/download-folder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,OAAO,EAAW,MAAM,QAAQ,CAAC;AAC1C,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,MAAM,EAAE,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEzD,SAAS,iBAAiB,CACxB,GAAW,EACX,IAAY;IAEZ,MAAM,OAAO,GAA4C,EAAE,CAAC;IAC5D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QAChD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,IAAe;IACvD,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACzB,MAAM,cAAc,GAAG,IAAI,IAAI,EAAE,CAAC;IAElC;;;OAGG;IACH,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnC,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;QAC/B,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC;QAEvE,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,CAAC,CAAC,IAAI,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;QAED,IAAI,UAAkB,CAAC;QACvB,IAAI,CAAC;YACH,UAAU,GAAG,kBAAkB,CAAC,aAAa,CAAC;iBAC3C,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;iBACpB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;iBACnB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;iBACpB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;iBACnB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,CAAC,CAAC,IAAI,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,UAAU,CAAC;QAE7D,IAAI,CAAC;YACH,MAAM,QAAQ,GAA+B,EAAE,CAAC;YAEhD,IAAI,OAAO,EAAE,CAAC;gBACZ,mDAAmD;gBACnD,MAAM,MAAM,GAAG,UAAU,UAAU,GAAG,CAAC;gBACvC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAE3C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACzB,OAAO,CAAC,CAAC,IAAI,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAC;gBAClD,CAAC;gBAED,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;oBAC1B,8CAA8C;oBAC9C,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,UAAU,GAAG,EAAE,EAAE,CAAC,CAAC;oBAC7D,8DAA8D;oBAC9D,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;wBAAE,SAAS;oBAEhD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAC3C,GAAG,UAAU,IAAI,OAAO,EAAE,CAC3B,CAAC;oBACF,QAAQ,CAAC,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;gBAC7C,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,gBAAgB;gBAChB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;gBACnD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;oBACrE,OAAO,CAAC,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;gBACzC,CAAC;gBAED,MAAM,OAAO,GAAG,iBAAiB,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBAChD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACzB,OAAO,CAAC,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;gBACxC,CAAC;gBAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;oBAC5B,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,IAAI,UAAU,CACtC,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAChC,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvC,OAAO,CAAC,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;YACxC,CAAC;YAED,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;YAEpC,CAAC,CAAC,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;YAC5C,CAAC,CAAC,MAAM,CACN,qBAAqB,EACrB,yBAAyB,kBAAkB,CAAC,UAAU,CAAC,OAAO,CAC/D,CAAC;YACF,CAAC,CAAC,MAAM,CAAC,gBAAgB,EAAE,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YACxD,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC;YAC/C,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CACV,EAAE,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,EAC5C,wBAAwB,CACzB,CAAC;YACF,OAAO,CAAC,CAAC,IAAI,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,cAAc,CAAC;AACxB,CAAC"}

package/dist/routes/download-zip.d.ts

@@ -0,0 +1,15 @@
+import { Hono } from "hono";
+import type { RouteDeps } from "../config/deps";
+/**
+ * POST /download-zip
+ * body: { items: { path: string; kind?: "file" | "folder" }[] } or { paths: string[] }
+ * Bundles multiple files and/or folders (mixed) into a single ZIP archive.
+ * Entries keep their full relative path so items with the same filename in
+ * different folders don't collide inside the archive.
+ *
+ * When the caller already knows an item's kind, passing it via `items` skips
+ * the folderExists probe (an extra HeadObject + ListObjects round trip per
+ * item) and lets every item download in parallel instead of one at a time.
+ */
+export declare function createDownloadZipRoute(deps: RouteDeps): Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=download-zip.d.ts.map

package/dist/routes/download-zip.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"download-zip.d.ts","sourceRoot":"","sources":["../../src/routes/download-zip.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAqChD;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,SAAS,8EAwIrD"}

package/dist/routes/download-zip.js

@@ -0,0 +1,147 @@
+import { Hono } from "hono";
+import { zipSync } from "fflate";
+import fs from "fs";
+import path from "path";
+import logger, { serializeError } from "../utils/logger.js";
+const MAX_PATHS = 200;
+function sanitizePath(raw) {
+    return decodeURIComponent(raw)
+        .replace(/\.\./g, "")
+        .replace(/\\/g, "/")
+        .replace(/\/+/g, "/")
+        .replace(/^\/+/, "")
+        .replace(/\/+$/, "");
+}
+function collectLocalFiles(dir, base) {
+    const results = [];
+    if (!fs.existsSync(dir))
+        return results;
+    for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
+        const full = path.join(dir, entry.name);
+        const rel = path.join(base, entry.name);
+        if (entry.isDirectory()) {
+            results.push(...collectLocalFiles(full, rel));
+        }
+        else {
+            results.push({ arcPath: rel.replace(/\\/g, "/"), fullPath: full });
+        }
+    }
+    return results;
+}
+/**
+ * POST /download-zip
+ * body: { items: { path: string; kind?: "file" | "folder" }[] } or { paths: string[] }
+ * Bundles multiple files and/or folders (mixed) into a single ZIP archive.
+ * Entries keep their full relative path so items with the same filename in
+ * different folders don't collide inside the archive.
+ *
+ * When the caller already knows an item's kind, passing it via `items` skips
+ * the folderExists probe (an extra HeadObject + ListObjects round trip per
+ * item) and lets every item download in parallel instead of one at a time.
+ */
+export function createDownloadZipRoute(deps) {
+    const { storage } = deps;
+    const downloadZip = new Hono();
+    downloadZip.post("/", async (c) => {
+        let body = {};
+        try {
+            body = await c.req.json();
+        }
+        catch {
+            return c.json({ error: "Bad request", message: "Invalid JSON body" }, 400);
+        }
+        const items = Array.isArray(body.items)
+            ? body.items
+                .filter((i) => typeof i === "object" &&
+                i !== null &&
+                typeof i.path === "string")
+                .map((i) => ({
+                path: i.path,
+                kind: i.kind === "file" || i.kind === "folder" ? i.kind : undefined,
+            }))
+            : Array.isArray(body.paths)
+                ? body.paths
+                    .filter((p) => typeof p === "string")
+                    .map((path) => ({ path }))
+                : [];
+        if (items.length === 0) {
+            return c.json({
+                error: "Bad request",
+                message: "A non-empty 'items' or 'paths' array is required",
+            }, 400);
+        }
+        if (items.length > MAX_PATHS) {
+            return c.json({
+                error: "Bad request",
+                message: `Too many items requested (max ${MAX_PATHS})`,
+            }, 400);
+        }
+        try {
+            const zipFiles = {};
+            const addFolder = async (cleanPath) => {
+                const prefix = `public/${cleanPath}/`;
+                const objects = await storage.list(prefix);
+                await Promise.all(objects.map(async (obj) => {
+                    const relPath = obj.key.replace(`public/${cleanPath}/`, "");
+                    if (!relPath || relPath.endsWith("/"))
+                        return;
+                    const buffer = await storage.downloadOriginal(`${cleanPath}/${relPath}`);
+                    zipFiles[`${cleanPath}/${relPath}`] = new Uint8Array(buffer);
+                }));
+            };
+            await Promise.all(items.map(async ({ path: raw, kind }) => {
+                const cleanPath = sanitizePath(raw);
+                if (!cleanPath)
+                    return;
+                if (storage) {
+                    const isFolder = kind
+                        ? kind === "folder"
+                        : await storage.folderExists(cleanPath);
+                    if (isFolder) {
+                        await addFolder(cleanPath);
+                    }
+                    else {
+                        try {
+                            const buffer = await storage.downloadOriginal(cleanPath);
+                            zipFiles[cleanPath] = new Uint8Array(buffer);
+                        }
+                        catch {
+                            // Skip missing files rather than failing the whole archive
+                        }
+                    }
+                }
+                else {
+                    const localPath = path.join("./public", cleanPath);
+                    if (!fs.existsSync(localPath))
+                        return;
+                    if (fs.statSync(localPath).isDirectory()) {
+                        for (const entry of collectLocalFiles(localPath, cleanPath)) {
+                            zipFiles[entry.arcPath] = new Uint8Array(fs.readFileSync(entry.fullPath));
+                        }
+                    }
+                    else {
+                        zipFiles[cleanPath] = new Uint8Array(fs.readFileSync(localPath));
+                    }
+                }
+            }));
+            if (Object.keys(zipFiles).length === 0) {
+                return c.json({ error: "Not found", message: "No files found for the given paths" }, 404);
+            }
+            const zipBuffer = zipSync(zipFiles);
+            c.header("Content-Type", "application/zip");
+            c.header("Content-Disposition", `attachment; filename="download.zip"`);
+            c.header("Content-Length", zipBuffer.length.toString());
+            c.header("Cache-Control", "private, no-store");
+            return c.body(zipBuffer);
+        }
+        catch (error) {
+            logger.error({ error: serializeError(error) }, "Bulk zip download failed");
+            return c.json({
+                error: "Internal server error",
+                message: error instanceof Error ? error.message : "Unknown error",
+            }, 500);
+        }
+    });
+    return downloadZip;
+}
+//# sourceMappingURL=download-zip.js.map

package/dist/routes/download-zip.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"download-zip.js","sourceRoot":"","sources":["../../src/routes/download-zip.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACjC,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,MAAM,EAAE,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEzD,MAAM,SAAS,GAAG,GAAG,CAAC;AAItB,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,kBAAkB,CAAC,GAAG,CAAC;SAC3B,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;SACpB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;SACnB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,iBAAiB,CACxB,GAAW,EACX,IAAY;IAEZ,MAAM,OAAO,GAA4C,EAAE,CAAC;IAC5D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QAChD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAe;IACpD,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACzB,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;IAE/B,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAChC,IAAI,IAAI,GAAyC,EAAE,CAAC;QACpD,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,mBAAmB,EAAE,EACtD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAc,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;YAChD,CAAC,CAAC,IAAI,CAAC,KAAK;iBACP,MAAM,CACL,CAAC,CAAC,EAA0C,EAAE,CAC5C,OAAO,CAAC,KAAK,QAAQ;gBACrB,CAAC,KAAK,IAAI;gBACV,OAAQ,CAAS,CAAC,IAAI,KAAK,QAAQ,CACtC;iBACA,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,IAAc;gBACtB,IAAI,EAAE,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;aACpE,CAAC,CAAC;YACP,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;gBACzB,CAAC,CAAC,IAAI,CAAC,KAAK;qBACP,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;qBACjD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC9B,CAAC,CAAC,EAAE,CAAC;QAET,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,aAAa;gBACpB,OAAO,EAAE,kDAAkD;aAC5D,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;YAC7B,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,aAAa;gBACpB,OAAO,EAAE,iCAAiC,SAAS,GAAG;aACvD,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAA+B,EAAE,CAAC;YAEhD,MAAM,SAAS,GAAG,KAAK,EAAE,SAAiB,EAAE,EAAE;gBAC5C,MAAM,MAAM,GAAG,UAAU,SAAS,GAAG,CAAC;gBACtC,MAAM,OAAO,GAAG,MAAM,OAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC5C,MAAM,OAAO,CAAC,GAAG,CACf,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;oBACxB,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,SAAS,GAAG,EAAE,EAAE,CAAC,CAAC;oBAC5D,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;wBAAE,OAAO;oBAC9C,MAAM,MAAM,GAAG,MAAM,OAAQ,CAAC,gBAAgB,CAC5C,GAAG,SAAS,IAAI,OAAO,EAAE,CAC1B,CAAC;oBACF,QAAQ,CAAC,GAAG,SAAS,IAAI,OAAO,EAAE,CAAC,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;gBAC/D,CAAC,CAAC,CACH,CAAC;YACJ,CAAC,CAAC;YAEF,MAAM,OAAO,CAAC,GAAG,CACf,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE;gBACtC,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;gBACpC,IAAI,CAAC,SAAS;oBAAE,OAAO;gBAEvB,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,QAAQ,GAAG,IAAI;wBACnB,CAAC,CAAC,IAAI,KAAK,QAAQ;wBACnB,CAAC,CAAC,MAAM,OAAO,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;oBAC1C,IAAI,QAAQ,EAAE,CAAC;wBACb,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;oBAC7B,CAAC;yBAAM,CAAC;wBACN,IAAI,CAAC;4BACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;4BACzD,QAAQ,CAAC,SAAS,CAAC,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;wBAC/C,CAAC;wBAAC,MAAM,CAAC;4BACP,2DAA2D;wBAC7D,CAAC;oBACH,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;oBACnD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;wBAAE,OAAO;oBACtC,IAAI,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;wBACzC,KAAK,MAAM,KAAK,IAAI,iBAAiB,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC;4BAC5D,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,IAAI,UAAU,CACtC,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAChC,CAAC;wBACJ,CAAC;oBACH,CAAC;yBAAM,CAAC;wBACN,QAAQ,CAAC,SAAS,CAAC,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;oBACnE,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CACH,CAAC;YAEF,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvC,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,oCAAoC,EAAE,EACrE,GAAG,CACJ,CAAC;YACJ,CAAC;YAED,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;YAEpC,CAAC,CAAC,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;YAC5C,CAAC,CAAC,MAAM,CAAC,qBAAqB,EAAE,qCAAqC,CAAC,CAAC;YACvE,CAAC,CAAC,MAAM,CAAC,gBAAgB,EAAE,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YACxD,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC;YAC/C,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CACV,EAAE,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,EAChC,0BAA0B,CAC3B,CAAC;YACF,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,uBAAuB;gBAC9B,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aAClE,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,WAAW,CAAC;AACrB,CAAC"}

package/dist/routes/download.d.ts

@@ -0,0 +1,4 @@
+import { Hono } from "hono";
+import type { RouteDeps } from "../config/deps";
+export declare function createDownloadRoute(deps: RouteDeps): Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=download.d.ts.map

package/dist/routes/download.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"download.d.ts","sourceRoot":"","sources":["../../src/routes/download.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAKhD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,SAAS,8EA0FlD"}

package/dist/routes/download.js

@@ -0,0 +1,83 @@
+import { Hono } from "hono";
+import fs from "fs";
+import path from "path";
+import logger, { serializeError } from "../utils/logger.js";
+export function createDownloadRoute(deps) {
+    const { storage } = deps;
+    const download = new Hono();
+    /**
+     * GET /download/:path
+     * Serves the original stored file as an attachment (no transformation applied).
+     * Public route, consistent with /t/* which is also public.
+     */
+    download.get("/*", async (c) => {
+        const requestPath = c.req.path;
+        // Strip leading /download/ prefix
+        const rawFilePath = requestPath.replace(/^\/download\/?/, "");
+        if (!rawFilePath) {
+            return c.text("File path is required", 400);
+        }
+        // Decode and sanitise path (prevent directory traversal)
+        let filePath;
+        try {
+            filePath = decodeURIComponent(rawFilePath)
+                .replace(/\.\./g, "")
+                .replace(/\\/g, "/")
+                .replace(/\/+/g, "/")
+                .replace(/^\/+/, "");
+        }
+        catch {
+            return c.text("Invalid file path", 400);
+        }
+        if (!filePath) {
+            return c.text("Invalid file path", 400);
+        }
+        const filename = path.basename(filePath);
+        try {
+            let buffer;
+            if (storage) {
+                // Cloud storage
+                try {
+                    buffer = await storage.downloadOriginal(filePath);
+                }
+                catch {
+                    return c.text("File not found", 404);
+                }
+            }
+            else {
+                // Local storage
+                const localPath = path.join("./public", filePath);
+                if (!fs.existsSync(localPath) || fs.statSync(localPath).isDirectory()) {
+                    return c.text("File not found", 404);
+                }
+                buffer = fs.readFileSync(localPath);
+            }
+            // Derive a safe Content-Type from the extension
+            const ext = filename.split(".").pop()?.toLowerCase() ?? "";
+            const contentTypeMap = {
+                jpg: "image/jpeg",
+                jpeg: "image/jpeg",
+                png: "image/png",
+                webp: "image/webp",
+                avif: "image/avif",
+                gif: "image/gif",
+                psd: "image/vnd.adobe.photoshop",
+                mp4: "video/mp4",
+                mov: "video/quicktime",
+                webm: "video/webm",
+            };
+            const contentType = contentTypeMap[ext] ?? "application/octet-stream";
+            c.header("Content-Type", contentType);
+            c.header("Content-Disposition", `attachment; filename="${encodeURIComponent(filename)}"`);
+            c.header("Content-Length", buffer.length.toString());
+            c.header("Cache-Control", "private, no-store");
+            return c.body(new Uint8Array(buffer));
+        }
+        catch (error) {
+            logger.error({ error: serializeError(error), filePath }, "Download failed");
+            return c.text("Internal server error", 500);
+        }
+    });
+    return download;
+}
+//# sourceMappingURL=download.js.map

package/dist/routes/download.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"download.js","sourceRoot":"","sources":["../../src/routes/download.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,MAAM,EAAE,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEzD,MAAM,UAAU,mBAAmB,CAAC,IAAe;IACjD,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACzB,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC;IAE5B;;;;OAIG;IACH,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7B,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;QAE/B,kCAAkC;QAClC,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;QAE9D,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,CAAC,CAAC,IAAI,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;QAC9C,CAAC;QAED,yDAAyD;QACzD,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,kBAAkB,CAAC,WAAW,CAAC;iBACvC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;iBACpB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;iBACnB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;iBACpB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;QAC1C,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAEzC,IAAI,CAAC;YACH,IAAI,MAAc,CAAC;YAEnB,IAAI,OAAO,EAAE,CAAC;gBACZ,gBAAgB;gBAChB,IAAI,CAAC;oBACH,MAAM,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;gBACpD,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;gBACvC,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,gBAAgB;gBAChB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;gBAClD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;oBACtE,OAAO,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;gBACvC,CAAC;gBACD,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;YACtC,CAAC;YAED,gDAAgD;YAChD,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;YAC3D,MAAM,cAAc,GAA2B;gBAC7C,GAAG,EAAE,YAAY;gBACjB,IAAI,EAAE,YAAY;gBAClB,GAAG,EAAE,WAAW;gBAChB,IAAI,EAAE,YAAY;gBAClB,IAAI,EAAE,YAAY;gBAClB,GAAG,EAAE,WAAW;gBAChB,GAAG,EAAE,2BAA2B;gBAChC,GAAG,EAAE,WAAW;gBAChB,GAAG,EAAE,iBAAiB;gBACtB,IAAI,EAAE,YAAY;aACnB,CAAC;YACF,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAC;YAEtE,CAAC,CAAC,MAAM,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;YACtC,CAAC,CAAC,MAAM,CACN,qBAAqB,EACrB,yBAAyB,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CACzD,CAAC;YACF,CAAC,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YACrD,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC;YAC/C,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CACV,EAAE,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,EAC1C,iBAAiB,CAClB,CAAC;YACF,OAAO,CAAC,CAAC,IAAI,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/routes/invalidate.d.ts

@@ -0,0 +1,4 @@
+import { Hono } from "hono";
+import type { RouteDeps } from "../config/deps";
+export declare function createInvalidateRoute(deps: RouteDeps): Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=invalidate.d.ts.map