@payloadcms/figma 0.1.0-alpha.6 → 0.1.0-alpha.8

package/dist/utils/lambda-runtime/nextjs-cache.js

@@ -0,0 +1,162 @@
+import { deserialize, serialize } from 'node:v8';
+const MAX_CACHE_BYTES = 8 * 1024 * 1024;
+// Approximate Map entry and metadata overhead; actual heap use can differ.
+const ESTIMATED_ENTRY_OVERHEAD_BYTES = 64;
+const cache = new Map();
+let cacheBytes = 0;
+// Tag invalidation advances this counter to reject writes from earlier requests.
+let tagVersion = 0;
+/**
+ * A process-local, fresh-only Next.js cacheHandler. The CDN owns stale serving.
+ * No filesystem access: Lambda's code directory is read-only. Each cold process
+ * starts empty; Gatekeeper serves the separately uploaded static assets.
+ */ export default class NextjsCacheHandler {
+    constructor(){
+        this.tagVersion = tagVersion;
+    }
+    async get(key, context = {}) {
+        const cacheKey = getCacheKey(key, context.kind === 'FETCH');
+        const entry = cache.get(cacheKey);
+        if (!entry) {
+            observe('miss', context.kind);
+            return null;
+        }
+        const effectiveTTL = context.kind === 'FETCH' && context.revalidate !== undefined ? Math.min(entry.seconds, lifetime(context.revalidate)) : entry.seconds;
+        const ageMs = Math.max(0, Date.now() - entry.lastModified);
+        if (ageMs >= effectiveTTL * 1000) {
+            if (ageMs >= entry.seconds * 1000) {
+                remove(cacheKey);
+            }
+            observe('expired', context.kind);
+            return null;
+        }
+        // Clone cached buffers/maps so a caller cannot mutate the stored value.
+        // V8 can return Buffer views into its input, so copy the serialized bytes.
+        const value = deserialize(Buffer.from(entry.data));
+        if (value && [
+            'APP_PAGE',
+            'APP_ROUTE',
+            'PAGES'
+        ].includes(value.kind)) {
+            value.headers = withoutAge(value.headers);
+            value.headers.Age = String(Math.floor(ageMs / 1000));
+        }
+        cache.delete(cacheKey);
+        cache.set(cacheKey, entry);
+        observe('hit', context.kind);
+        return {
+            value,
+            lastModified: entry.lastModified
+        };
+    }
+    async set(key, value, context = {}) {
+        // A render that overlaps invalidation must not restore an old value.
+        if (this.tagVersion !== tagVersion) {
+            return;
+        }
+        const cacheKey = getCacheKey(key, context.fetchCache);
+        remove(cacheKey);
+        const seconds = lifetime(context.fetchCache ? value?.revalidate : context.cacheControl?.revalidate);
+        if (seconds === 0) {
+            return;
+        }
+        let data;
+        try {
+            data = serialize(value);
+        } catch  {
+            observe('unsupported', value?.kind);
+            return;
+        }
+        const size = data.byteLength + Buffer.byteLength(cacheKey) + ESTIMATED_ENTRY_OVERHEAD_BYTES;
+        if (size > MAX_CACHE_BYTES) {
+            observe('oversized', value?.kind);
+            return;
+        }
+        // Preserve an upstream Age, including a previous cached response that Next
+        // attempts to write again after an unsuccessful on-demand revalidation.
+        const age = responseAge(value);
+        if (age >= seconds) {
+            return;
+        }
+        while(cacheBytes + size > MAX_CACHE_BYTES){
+            remove(cache.keys().next().value);
+        }
+        cache.set(cacheKey, {
+            data,
+            size,
+            seconds,
+            lastModified: Date.now() - age * 1000
+        });
+        cacheBytes += size;
+    }
+    /**
+   * The revalidateTag function allows invalidating cached data on-demand based
+   * on the specified tags. For our purposes, since we are currently doing a
+   * local in-memory, per-process lambda cache, we can just go ahead and clear
+   * the cache. Eventually we will want to support doing tag invalidation at the
+   * CDN layer.
+   */ async revalidateTag(tags, _durations = {}) {
+        const tagsArr = Array.isArray(tags) ? tags : [
+            tags
+        ];
+        const hasValidTag = tagsArr.some((tag)=>typeof tag === 'string' && tag.length);
+        if (!hasValidTag) {
+            return;
+        }
+        cache.clear();
+        cacheBytes = 0;
+        tagVersion += 1;
+        observe('invalidated', 'local');
+    }
+    // Outstanding writes still belong to the request that started before invalidation.
+    resetRequestCache() {}
+}
+function getCacheKey(key, fetchCache) {
+    return `${fetchCache ? 'fetch' : 'route'}:${key}`;
+}
+function lifetime(revalidate) {
+    if (revalidate === false) {
+        return Infinity;
+    }
+    return Number.isSafeInteger(revalidate) && revalidate > 0 ? revalidate : 0;
+}
+function remove(key) {
+    const entry = cache.get(key);
+    if (entry) {
+        cacheBytes -= entry.size;
+    }
+    cache.delete(key);
+}
+function withoutAge(headers) {
+    return Object.fromEntries(Object.entries(headers ?? {}).filter(([name])=>name.toLowerCase() !== 'age'));
+}
+function responseAge(value) {
+    if (!value || value.kind === 'FETCH') {
+        return 0;
+    }
+    const age = Object.entries(value.headers ?? {}).find(([name])=>name.toLowerCase() === 'age')?.[1];
+    if (age === undefined) {
+        return 0;
+    }
+    if (typeof age !== 'number' && (typeof age !== 'string' || !/^\d+$/.test(age))) {
+        return Infinity;
+    }
+    const seconds = Number(age);
+    return Number.isSafeInteger(seconds) && seconds >= 0 ? seconds : Infinity;
+}
+function observe(result, kind) {
+    if (![
+        'APP_PAGE',
+        'APP_ROUTE',
+        'PAGES',
+        'local'
+    ].includes(kind)) {
+        return;
+    }
+    // Bounded fields only: never log cache keys, URLs, values, or tags.
+    console.info(JSON.stringify({
+        event: 'figma_nextjs_cache',
+        result,
+        kind
+    }));
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@payloadcms/figma",
-  "version": "0.1.0-alpha.6",
+  "version": "0.1.0-alpha.8",
   "license": "SEE LICENSE IN LICENSE.md",
   "type": "module",
   "exports": {
@@ -58,7 +58,11 @@
   "devDependencies": {
     "@payloadcms/eslint-config": "3.28.0",
     "@payloadcms/eslint-plugin": "3.28.0",
-    "@payloadcms/next": "4.0.0-canary.24",
+    "@payloadcms/next": "4.0.0-canary.28",
+    "@payloadcms/plugin-cloud-storage": "4.0.0-canary.28",
+    "@payloadcms/richtext-lexical": "4.0.0-canary.28",
+    "@payloadcms/translations": "4.0.0-canary.28",
+    "@payloadcms/ui": "4.0.0-canary.28",
     "@swc/cli": "0.7.7",
     "@types/archiver": "7.0.0",
     "@types/cross-spawn": "6.0.6",
@@ -69,17 +73,18 @@
     "eslint": "9.22.0",
     "next": "^16.2.6",
     "openapi-typescript": "^7.13.0",
+    "payload": "4.0.0-canary.28",
     "rimraf": "^6.1.3",
     "tsx": "4.20.6",
     "typescript": "5.7.3",
     "vitest": "4.0.15"
   },
   "peerDependencies": {
-    "@payloadcms/plugin-cloud-storage": ">=4.0.0-canary.24 <4.0.0-internal",
-    "@payloadcms/richtext-lexical": ">=4.0.0-canary.24 <4.0.0-internal",
-    "@payloadcms/translations": ">=4.0.0-canary.24 <4.0.0-internal",
-    "@payloadcms/ui": ">=4.0.0-canary.24 <4.0.0-internal",
-    "payload": ">=4.0.0-canary.24 <4.0.0-internal",
+    "@payloadcms/plugin-cloud-storage": ">=4.0.0-canary.28 <4.0.0-internal",
+    "@payloadcms/richtext-lexical": ">=4.0.0-canary.28 <4.0.0-internal",
+    "@payloadcms/translations": ">=4.0.0-canary.28 <4.0.0-internal",
+    "@payloadcms/ui": ">=4.0.0-canary.28 <4.0.0-internal",
+    "payload": ">=4.0.0-canary.28 <4.0.0-internal",
     "react": "^19.0.1 || ^19.1.2 || ^19.2.1"
   },
   "peerDependenciesMeta": {

package/dist/storage-content-api/buildBaseMediaResponseHeaders.d.ts

@@ -1 +0,0 @@
-export declare const buildBaseMediaResponseHeaders: () => Headers;

package/dist/storage-content-api/buildBaseMediaResponseHeaders.js

@@ -1,6 +0,0 @@
-export const buildBaseMediaResponseHeaders = ()=>new Headers({
-        'Accept-Ranges': 'bytes',
-        'Cache-Control': 'private, no-store',
-        Vary: 'Cookie',
-        'X-Content-Type-Options': 'nosniff'
-    });

package/dist/storage-content-api/buildClientUploadFetchBackHeaders.d.ts

@@ -1,10 +0,0 @@
-/**
- * Payload's server-side upload fetch-back uses the response Content-Type to decide whether to
- * inspect image dimensions. For an active image type such as SVG, omit the sanitized type so
- * Payload falls back to the original upload MIME type. Public file requests never use this helper.
- */
-export declare const buildClientUploadFetchBackHeaders: ({ fallbackContentType, filename, upstream, }: {
-    fallbackContentType?: string;
-    filename: string;
-    upstream: Headers;
-}) => Headers;

package/dist/storage-content-api/buildClientUploadFetchBackHeaders.js

@@ -1,21 +0,0 @@
-import { buildMediaResponseHeaders } from './buildMediaResponseHeaders.js';
-import { getInlineContentType } from './getInlineContentType.js';
-/**
- * Payload's server-side upload fetch-back uses the response Content-Type to decide whether to
- * inspect image dimensions. For an active image type such as SVG, omit the sanitized type so
- * Payload falls back to the original upload MIME type. Public file requests never use this helper.
- */ export const buildClientUploadFetchBackHeaders = ({ fallbackContentType, filename, upstream })=>{
-    const effectiveContentType = upstream.get('Content-Type') || fallbackContentType;
-    const upstreamWithFallback = new Headers(upstream);
-    if (effectiveContentType && !upstream.get('Content-Type')) {
-        upstreamWithFallback.set('Content-Type', effectiveContentType);
-    }
-    const headers = buildMediaResponseHeaders({
-        filename,
-        upstream: upstreamWithFallback
-    });
-    if (effectiveContentType && !getInlineContentType(effectiveContentType)) {
-        headers.delete('Content-Type');
-    }
-    return headers;
-};

package/dist/storage-content-api/buildMediaResponseHeaders.d.ts

@@ -1,4 +0,0 @@
-export declare const buildMediaResponseHeaders: ({ filename, upstream, }: {
-    filename: string;
-    upstream: Headers;
-}) => Headers;

package/dist/storage-content-api/buildMediaResponseHeaders.js

@@ -1,45 +0,0 @@
-import { buildBaseMediaResponseHeaders } from './buildBaseMediaResponseHeaders.js';
-import { getInlineContentType } from './getInlineContentType.js';
-const FORWARDED_MEDIA_RESPONSE_HEADERS = [
-    'Cache-Control',
-    'Content-Length',
-    'Content-Range',
-    'ETag',
-    'Last-Modified'
-];
-const ATTACHMENT_CSP = "sandbox; default-src 'none'; base-uri 'none'; form-action 'none'";
-export const buildMediaResponseHeaders = ({ filename, upstream })=>{
-    const headers = buildBaseMediaResponseHeaders();
-    for (const name of FORWARDED_MEDIA_RESPONSE_HEADERS){
-        const value = upstream.get(name);
-        if (value) {
-            headers.set(name, value);
-        }
-    }
-    const contentType = getInlineContentType(upstream.get('Content-Type'));
-    if (contentType) {
-        headers.set('Content-Type', contentType);
-    } else {
-        headers.set('Content-Type', 'application/octet-stream');
-        headers.set('Content-Disposition', attachmentDisposition(filename));
-        headers.set('Content-Security-Policy', ATTACHMENT_CSP);
-    }
-    return headers;
-};
-const attachmentDisposition = (filename)=>{
-    let decodedName;
-    try {
-        decodedName = decodeURIComponent(filename);
-    } catch  {
-        decodedName = 'download';
-    }
-    const sanitizedName = sanitizeFilename(decodedName);
-    const safeName = Array.from(sanitizedName).slice(0, 255).join('') || 'download';
-    const asciiName = safeName.replace(/[^\x20-\x7e]/g, '_').replace(/["\\]/g, '_');
-    const utf8Name = encodeURIComponent(safeName).replace(/[!'()*]/g, (character)=>`%${character.charCodeAt(0).toString(16).toUpperCase()}`);
-    return `attachment; filename="${asciiName}"; filename*=UTF-8''${utf8Name}`;
-};
-const sanitizeFilename = (filename)=>Array.from(filename, (character)=>{
-        const codePoint = character.codePointAt(0);
-        return codePoint < 32 || codePoint === 127 || character === '/' || character === '\\' ? '_' : character;
-    }).join('');

package/dist/storage-content-api/getInlineContentType.d.ts

@@ -1 +0,0 @@
-export declare const getInlineContentType: (value: null | string | undefined) => string | null;

package/dist/storage-content-api/getInlineContentType.js

@@ -1,33 +0,0 @@
-// Keep this allowlist aligned with Gatekeeper's presignedMediaHeaders.ts. The plugin cannot
-// import the private Gatekeeper service, but both same-origin media proxies need the same policy.
-const INLINE_CONTENT_TYPES = new Set([
-    'application/font-woff',
-    'audio/aac',
-    'audio/flac',
-    'audio/mp4',
-    'audio/mpeg',
-    'audio/ogg',
-    'audio/wav',
-    'audio/webm',
-    'font/otf',
-    'font/ttf',
-    'font/woff',
-    'font/woff2',
-    'image/avif',
-    'image/bmp',
-    'image/gif',
-    'image/jpeg',
-    'image/png',
-    'image/vnd.microsoft.icon',
-    'image/webp',
-    'image/x-icon',
-    'video/mp4',
-    'video/mpeg',
-    'video/ogg',
-    'video/quicktime',
-    'video/webm'
-]);
-export const getInlineContentType = (value)=>{
-    const normalized = value?.split(';', 1).at(0)?.trim().toLowerCase();
-    return normalized && INLINE_CONTENT_TYPES.has(normalized) ? normalized : null;
-};

package/dist/storage-content-api/hasSupportedContentEncoding.d.ts

@@ -1 +0,0 @@
-export declare const hasSupportedContentEncoding: (headers: Headers) => boolean;

package/dist/storage-content-api/hasSupportedContentEncoding.js

@@ -1,4 +0,0 @@
-export const hasSupportedContentEncoding = (headers)=>{
-    const contentEncoding = headers.get('content-encoding')?.trim().toLowerCase();
-    return contentEncoding == null || contentEncoding === '' || contentEncoding === 'identity';
-};

package/dist/storage-content-api/mediaErrorResponse.d.ts

@@ -1 +0,0 @@
-export declare const mediaErrorResponse: (status: number, body: string, contentRange?: string) => Response;

package/dist/storage-content-api/mediaErrorResponse.js

@@ -1,12 +0,0 @@
-import { buildBaseMediaResponseHeaders } from './buildBaseMediaResponseHeaders.js';
-export const mediaErrorResponse = (status, body, contentRange)=>{
-    const headers = buildBaseMediaResponseHeaders();
-    headers.set('Content-Type', 'text/plain;charset=UTF-8');
-    if (contentRange) {
-        headers.set('Content-Range', contentRange);
-    }
-    return new Response(body, {
-        headers,
-        status
-    });
-};