@rpcbase/server 0.594.0 → 0.596.0

package/dist/handler-BqlcQ9sE.js

@@ -0,0 +1,245 @@
+import { d as getUploadKeyHash, i as getBucketName, p as getUserId, u as getTenantId } from "./shared-DfrVDSp0.js";
+import { GridFSBucket, ObjectId } from "mongodb";
+import { getTenantFilesystemDb } from "@rpcbase/db";
+//#region src/uploads/api/files/handlers/deleteFile.ts
+var resolveHeaderString$1 = (value) => {
+	if (typeof value !== "string") return null;
+	const normalized = value.trim();
+	return normalized ? normalized : null;
+};
+var isFileNotFoundError = (error) => {
+	return (error instanceof Error ? error.message : String(error)).includes("FileNotFound");
+};
+var deleteGridFsFile = async (bucket, fileId) => {
+	try {
+		await bucket.delete(fileId);
+	} catch (error) {
+		if (!isFileNotFoundError(error)) throw error;
+	}
+};
+var deleteFile = async (_payload, ctx) => {
+	const tenantId = getTenantId(ctx);
+	if (!tenantId) {
+		ctx.res.status(400);
+		return {
+			ok: false,
+			error: "tenant_missing"
+		};
+	}
+	const fileIdRaw = String(ctx.req.params?.fileId ?? "").trim();
+	let fileObjectId;
+	try {
+		fileObjectId = new ObjectId(fileIdRaw);
+	} catch {
+		ctx.res.status(400);
+		return {
+			ok: false,
+			error: "invalid_file_id"
+		};
+	}
+	const nativeDb = (await getTenantFilesystemDb(tenantId)).db;
+	if (!nativeDb) {
+		ctx.res.status(500);
+		return {
+			ok: false,
+			error: "filesystem_db_unavailable"
+		};
+	}
+	const bucket = new GridFSBucket(nativeDb, { bucketName: getBucketName() });
+	const userId = getUserId(ctx);
+	const uploadKeyHash = getUploadKeyHash(ctx);
+	if (!userId && !uploadKeyHash) {
+		ctx.res.status(401);
+		return {
+			ok: false,
+			error: "unauthorized"
+		};
+	}
+	const [file] = await bucket.find({ _id: fileObjectId }).limit(1).toArray();
+	if (!file) {
+		ctx.res.status(204);
+		return { ok: true };
+	}
+	const metadataUserId = resolveHeaderString$1(file?.metadata?.userId);
+	const ownerKeyHash = resolveHeaderString$1(file?.metadata?.ownerKeyHash);
+	if (!Boolean(userId && metadataUserId && userId === metadataUserId) && !Boolean(uploadKeyHash && ownerKeyHash && uploadKeyHash === ownerKeyHash)) {
+		ctx.res.status(401);
+		return {
+			ok: false,
+			error: "unauthorized"
+		};
+	}
+	try {
+		const variantIds = (await bucket.find({ "metadata.variantOf": fileObjectId.toHexString() }).toArray()).map((variant) => variant?._id).filter((id) => id instanceof ObjectId);
+		await deleteGridFsFile(bucket, fileObjectId);
+		for (const variantId of variantIds) await deleteGridFsFile(bucket, variantId);
+	} catch {
+		ctx.res.status(500);
+		return {
+			ok: false,
+			error: "delete_failed"
+		};
+	}
+	ctx.res.status(204);
+	return { ok: true };
+};
+//#endregion
+//#region src/uploads/api/files/handlers/getFile.ts
+var resolveHeaderString = (value) => {
+	if (typeof value !== "string") return null;
+	const normalized = value.trim();
+	return normalized ? normalized : null;
+};
+var resolveHeaderBoolean = (value) => {
+	if (typeof value === "boolean") return value;
+	if (typeof value !== "string") return null;
+	const normalized = value.trim().toLowerCase();
+	if (!normalized) return null;
+	if (normalized === "true") return true;
+	if (normalized === "false") return false;
+	return null;
+};
+var escapeHeaderFilename = (filename) => filename.replace(/[\\"]/g, "_");
+var parseRequestedWidth = (value) => {
+	if (typeof value !== "string") return null;
+	const parsed = Number(value.trim());
+	if (!Number.isFinite(parsed) || parsed <= 0) return null;
+	return Math.floor(parsed);
+};
+var resolveImageVariants = (file) => {
+	const metadata = file?.metadata;
+	if (!metadata || typeof metadata !== "object") return null;
+	const image = metadata.image;
+	if (!image || typeof image !== "object") return null;
+	const variants = image.variants;
+	if (!variants || typeof variants !== "object") return null;
+	return variants;
+};
+var resolveVariantFileId = (variant) => {
+	if (!variant || typeof variant !== "object") return null;
+	const fileId = variant.fileId;
+	if (typeof fileId !== "string") return null;
+	try {
+		return new ObjectId(fileId);
+	} catch {
+		return null;
+	}
+};
+var selectVariantFileId = (file, requestedWidth, requestedVariant) => {
+	const variants = resolveImageVariants(file);
+	if (!variants) return null;
+	let aliasWidth = null;
+	if (typeof requestedVariant === "string") {
+		const normalized = requestedVariant.trim().toLowerCase();
+		aliasWidth = normalized === "thumb" ? 320 : normalized === "small" ? 640 : normalized === "medium" ? 960 : normalized === "large" ? 1600 : null;
+		if (aliasWidth) {
+			const variantFileId = resolveVariantFileId(variants[String(aliasWidth)]);
+			if (variantFileId) return variantFileId;
+		}
+	}
+	const targetWidth = aliasWidth ?? requestedWidth;
+	if (!targetWidth) return null;
+	const selectedWidth = Object.keys(variants).map((width) => Number(width)).filter((width) => Number.isInteger(width) && width > 0).sort((a, b) => a - b).reduce((selected, width) => {
+		if (selected === null) return width;
+		const selectedDistance = Math.abs(selected - targetWidth);
+		const distance = Math.abs(width - targetWidth);
+		if (distance < selectedDistance) return width;
+		if (distance === selectedDistance && width > selected) return width;
+		return selected;
+	}, null);
+	return selectedWidth ? resolveVariantFileId(variants[String(selectedWidth)]) : null;
+};
+var getFile = async (_payload, ctx) => {
+	const tenantId = getTenantId(ctx);
+	if (!tenantId) {
+		ctx.res.status(400).end();
+		return {};
+	}
+	const fileIdRaw = String(ctx.req.params?.fileId ?? "").trim();
+	let fileObjectId;
+	try {
+		fileObjectId = new ObjectId(fileIdRaw);
+	} catch {
+		ctx.res.status(400).end();
+		return {};
+	}
+	const nativeDb = (await getTenantFilesystemDb(tenantId)).db;
+	if (!nativeDb) {
+		ctx.res.status(500).end();
+		return {};
+	}
+	const bucket = new GridFSBucket(nativeDb, { bucketName: getBucketName() });
+	const [file] = await bucket.find({ _id: fileObjectId }).limit(1).toArray();
+	if (!file) {
+		ctx.res.status(404).end();
+		return {};
+	}
+	if (!(resolveHeaderBoolean(file?.metadata?.isPublic) ?? false)) {
+		const userId = getUserId(ctx);
+		const uploadKeyHash = getUploadKeyHash(ctx);
+		const metadataUserId = resolveHeaderString(file?.metadata?.userId);
+		const ownerKeyHash = resolveHeaderString(file?.metadata?.ownerKeyHash);
+		if (!Boolean(userId && metadataUserId && userId === metadataUserId) && !Boolean(uploadKeyHash && ownerKeyHash && uploadKeyHash === ownerKeyHash)) {
+			ctx.res.status(401).end();
+			return {};
+		}
+	}
+	const variantFileObjectId = selectVariantFileId(file, parseRequestedWidth(ctx.req.query?.w), ctx.req.query?.variant);
+	const [variantFile] = variantFileObjectId ? await bucket.find({ _id: variantFileObjectId }).limit(1).toArray() : [];
+	const selectedFileObjectId = variantFile ? variantFileObjectId : fileObjectId;
+	const selectedFile = variantFile ?? file;
+	const mimeType = resolveHeaderString(selectedFile?.metadata?.mimeType) ?? "application/octet-stream";
+	const filenameSafe = escapeHeaderFilename(resolveHeaderString(selectedFile?.filename) ?? fileIdRaw);
+	const cacheControl = "private, max-age=0, must-revalidate";
+	const md5 = resolveHeaderString(selectedFile?.md5);
+	const uploadDate = selectedFile?.uploadDate instanceof Date ? selectedFile.uploadDate : null;
+	const etagValue = md5 ?? `${selectedFileObjectId.toHexString()}-${String(selectedFile?.length ?? 0)}-${String(uploadDate?.getTime() ?? 0)}`;
+	const etag = md5 ? `"${etagValue}"` : `W/"${etagValue}"`;
+	const ifNoneMatch = resolveHeaderString(ctx.req.headers?.["if-none-match"]);
+	if (ifNoneMatch) {
+		const candidates = ifNoneMatch.split(",").map((value) => value.trim()).filter(Boolean);
+		if (candidates.includes("*") || candidates.includes(etag)) {
+			ctx.res.status(304);
+			ctx.res.setHeader("Cache-Control", cacheControl);
+			ctx.res.setHeader("ETag", etag);
+			ctx.res.end();
+			return {};
+		}
+	}
+	ctx.res.status(200);
+	ctx.res.setHeader("Content-Type", mimeType);
+	ctx.res.setHeader("Content-Length", String(selectedFile?.length ?? 0));
+	ctx.res.setHeader("Content-Disposition", `inline; filename="${filenameSafe}"`);
+	ctx.res.setHeader("Cache-Control", cacheControl);
+	ctx.res.setHeader("ETag", etag);
+	ctx.res.setHeader("X-Content-Type-Options", "nosniff");
+	if (mimeType === "image/svg+xml") ctx.res.setHeader("Content-Security-Policy", "default-src 'none'; style-src 'unsafe-inline'; sandbox; base-uri 'none'; form-action 'none'");
+	ctx.res.flushHeaders();
+	if (ctx.req.method === "HEAD") {
+		ctx.res.end();
+		return {};
+	}
+	const stream = bucket.openDownloadStream(selectedFileObjectId);
+	stream.on("error", () => {
+		try {
+			ctx.res.destroy();
+		} catch {}
+	});
+	stream.pipe(ctx.res);
+	return {};
+};
+//#endregion
+//#region src/uploads/api/files/index.ts
+var Route = "/api/rb/files/:fileId";
+var GetRoute = Route;
+var DeleteRoute = Route;
+//#endregion
+//#region src/uploads/api/files/handler.ts
+var handler_default = (api) => {
+	api.get(GetRoute, getFile);
+	api.delete(DeleteRoute, deleteFile);
+};
+//#endregion
+export { handler_default as default };
+
+//# sourceMappingURL=handler-BqlcQ9sE.js.map

package/dist/handler-BqlcQ9sE.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler-BqlcQ9sE.js","names":["ApiHandler","getTenantFilesystemDb","GridFSBucket","ObjectId","getBucketName","getTenantId","getUploadKeyHash","getUserId","SessionUser","DeleteResponsePayload","ok","error","resolveHeaderString","value","normalized","trim","isFileNotFoundError","message","Error","String","includes","deleteGridFsFile","bucket","fileId","Promise","delete","deleteFile","Record","_payload","ctx","tenantId","res","status","fileIdRaw","req","params","fileObjectId","fsDb","nativeDb","db","bucketName","userId","uploadKeyHash","file","find","_id","limit","toArray","metadataUserId","metadata","ownerKeyHash","authorizedByUser","Boolean","authorizedByKey","variants","toHexString","variantIds","map","variant","filter","id","variantId","ApiHandler","getTenantFilesystemDb","GridFSBucket","ObjectId","getBucketName","getTenantId","getUploadKeyHash","getUserId","SessionUser","resolveHeaderString","value","normalized","trim","resolveHeaderBoolean","toLowerCase","escapeHeaderFilename","filename","replace","parseRequestedWidth","parsed","Number","isFinite","Math","floor","resolveImageVariants","file","Record","metadata","image","variants","resolveVariantFileId","variant","fileId","selectVariantFileId","requestedWidth","requestedVariant","aliasWidth","variantFileId","String","targetWidth","widths","Object","keys","map","width","filter","isInteger","sort","a","b","selectedWidth","reduce","selected","selectedDistance","abs","distance","getFile","_payload","ctx","Promise","tenantId","res","status","end","fileIdRaw","req","params","fileObjectId","fsDb","nativeDb","db","bucketName","bucket","find","_id","limit","toArray","isPublic","userId","uploadKeyHash","metadataUserId","ownerKeyHash","authorizedByUser","Boolean","authorizedByKey","query","w","variantFileObjectId","variantFile","selectedFileObjectId","selectedFile","mimeTypeFromMetadata","mimeType","filenameFromDb","filenameSafe","cacheControl","md5","uploadDate","Date","etagValue","toHexString","length","getTime","etag","ifNoneMatch","headers","candidates","split","includes","setHeader","flushHeaders","method","stream","openDownloadStream","on","destroy","pipe","Route","GetRoute","DeleteRoute"],"sources":["../src/uploads/api/files/handlers/deleteFile.ts","../src/uploads/api/files/handlers/getFile.ts","../src/uploads/api/files/index.ts","../src/uploads/api/files/handler.ts"],"sourcesContent":["import { ApiHandler } from \"@rpcbase/api\"\nimport { getTenantFilesystemDb } from \"@rpcbase/db\"\nimport { GridFSBucket, ObjectId } from \"mongodb\"\n\nimport { getBucketName, getTenantId, getUploadKeyHash, getUserId, type SessionUser } from \"../../file-uploads/shared\"\n\n\ntype DeleteResponsePayload = {\n  ok: boolean\n  error?: string\n}\n\nconst resolveHeaderString = (value: unknown): string | null => {\n  if (typeof value !== \"string\") return null\n  const normalized = value.trim()\n  return normalized ? normalized : null\n}\n\nconst isFileNotFoundError = (error: unknown): boolean => {\n  const message = error instanceof Error ? error.message : String(error)\n  return message.includes(\"FileNotFound\")\n}\n\nconst deleteGridFsFile = async (bucket: GridFSBucket, fileId: ObjectId): Promise<void> => {\n  try {\n    await bucket.delete(fileId)\n  } catch (error) {\n    if (!isFileNotFoundError(error)) throw error\n  }\n}\n\nexport const deleteFile: ApiHandler<Record<string, never>, DeleteResponsePayload, SessionUser> = async (\n  _payload,\n  ctx,\n): Promise<DeleteResponsePayload> => {\n  const tenantId = getTenantId(ctx)\n  if (!tenantId) {\n    ctx.res.status(400)\n    return { ok: false, error: \"tenant_missing\" }\n  }\n\n  const fileIdRaw = String(ctx.req.params?.fileId ?? \"\").trim()\n  let fileObjectId: ObjectId\n  try {\n    fileObjectId = new ObjectId(fileIdRaw)\n  } catch {\n    ctx.res.status(400)\n    return { ok: false, error: \"invalid_file_id\" }\n  }\n\n  const fsDb = await getTenantFilesystemDb(tenantId)\n  const nativeDb = fsDb.db\n  if (!nativeDb) {\n    ctx.res.status(500)\n    return { ok: false, error: \"filesystem_db_unavailable\" }\n  }\n\n  const bucketName = getBucketName()\n  const bucket = new GridFSBucket(nativeDb, { bucketName })\n\n  const userId = getUserId(ctx)\n  const uploadKeyHash = getUploadKeyHash(ctx)\n  if (!userId && !uploadKeyHash) {\n    ctx.res.status(401)\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  const [file] = await bucket.find({ _id: fileObjectId }).limit(1).toArray()\n  if (!file) {\n    ctx.res.status(204)\n    return { ok: true }\n  }\n\n  const metadataUserId = resolveHeaderString((file as any)?.metadata?.userId)\n  const ownerKeyHash = resolveHeaderString((file as any)?.metadata?.ownerKeyHash)\n\n  const authorizedByUser = Boolean(userId && metadataUserId && userId === metadataUserId)\n  const authorizedByKey = Boolean(uploadKeyHash && ownerKeyHash && uploadKeyHash === ownerKeyHash)\n\n  if (!authorizedByUser && !authorizedByKey) {\n    ctx.res.status(401)\n    return { ok: false, error: \"unauthorized\" }\n  }\n\n  try {\n    const variants = await bucket.find({ \"metadata.variantOf\": fileObjectId.toHexString() }).toArray()\n    const variantIds = variants\n      .map((variant) => (variant as any)?._id)\n      .filter((id): id is ObjectId => id instanceof ObjectId)\n\n    await deleteGridFsFile(bucket, fileObjectId)\n    for (const variantId of variantIds) {\n      await deleteGridFsFile(bucket, variantId)\n    }\n  } catch {\n    ctx.res.status(500)\n    return { ok: false, error: \"delete_failed\" }\n  }\n\n  ctx.res.status(204)\n  return { ok: true }\n}\n","import { ApiHandler } from \"@rpcbase/api\"\nimport { getTenantFilesystemDb } from \"@rpcbase/db\"\nimport { GridFSBucket, ObjectId } from \"mongodb\"\n\nimport { getBucketName, getTenantId, getUploadKeyHash, getUserId, type SessionUser } from \"../../file-uploads/shared\"\n\n\nconst resolveHeaderString = (value: unknown): string | null => {\n  if (typeof value !== \"string\") return null\n  const normalized = value.trim()\n  return normalized ? normalized : null\n}\n\nconst resolveHeaderBoolean = (value: unknown): boolean | null => {\n  if (typeof value === \"boolean\") return value\n  if (typeof value !== \"string\") return null\n  const normalized = value.trim().toLowerCase()\n  if (!normalized) return null\n  if (normalized === \"true\") return true\n  if (normalized === \"false\") return false\n  return null\n}\n\nconst escapeHeaderFilename = (filename: string): string => filename.replace(/[\\\\\"]/g, \"_\")\n\nconst parseRequestedWidth = (value: unknown): number | null => {\n  if (typeof value !== \"string\") return null\n  const parsed = Number(value.trim())\n  if (!Number.isFinite(parsed) || parsed <= 0) return null\n  return Math.floor(parsed)\n}\n\nconst resolveImageVariants = (file: unknown): Record<string, unknown> | null => {\n  const metadata = (file as any)?.metadata\n  if (!metadata || typeof metadata !== \"object\") return null\n  const image = (metadata as Record<string, unknown>).image\n  if (!image || typeof image !== \"object\") return null\n  const variants = (image as Record<string, unknown>).variants\n  if (!variants || typeof variants !== \"object\") return null\n  return variants as Record<string, unknown>\n}\n\nconst resolveVariantFileId = (variant: unknown): ObjectId | null => {\n  if (!variant || typeof variant !== \"object\") return null\n  const fileId = (variant as Record<string, unknown>).fileId\n  if (typeof fileId !== \"string\") return null\n  try {\n    return new ObjectId(fileId)\n  } catch {\n    return null\n  }\n}\n\nconst selectVariantFileId = (file: unknown, requestedWidth: number | null, requestedVariant: unknown): ObjectId | null => {\n  const variants = resolveImageVariants(file)\n  if (!variants) return null\n\n  let aliasWidth: number | null = null\n  if (typeof requestedVariant === \"string\") {\n    const normalized = requestedVariant.trim().toLowerCase()\n    aliasWidth = normalized === \"thumb\" ? 320 : normalized === \"small\" ? 640 : normalized === \"medium\" ? 960 : normalized === \"large\" ? 1600 : null\n    if (aliasWidth) {\n      const variantFileId = resolveVariantFileId(variants[String(aliasWidth)])\n      if (variantFileId) return variantFileId\n    }\n  }\n\n  const targetWidth = aliasWidth ?? requestedWidth\n  if (!targetWidth) return null\n\n  const widths = Object.keys(variants)\n    .map((width) => Number(width))\n    .filter((width) => Number.isInteger(width) && width > 0)\n    .sort((a, b) => a - b)\n\n  const selectedWidth = widths.reduce<number | null>((selected, width) => {\n    if (selected === null) return width\n\n    const selectedDistance = Math.abs(selected - targetWidth)\n    const distance = Math.abs(width - targetWidth)\n    if (distance < selectedDistance) return width\n    if (distance === selectedDistance && width > selected) return width\n    return selected\n  }, null)\n  return selectedWidth ? resolveVariantFileId(variants[String(selectedWidth)]) : null\n}\n\nexport const getFile: ApiHandler<Record<string, never>, Record<string, never>, SessionUser> = async (\n  _payload,\n  ctx,\n): Promise<Record<string, never>> => {\n  const tenantId = getTenantId(ctx)\n  if (!tenantId) {\n    ctx.res.status(400).end()\n    return {}\n  }\n\n  const fileIdRaw = String(ctx.req.params?.fileId ?? \"\").trim()\n  let fileObjectId: ObjectId\n  try {\n    fileObjectId = new ObjectId(fileIdRaw)\n  } catch {\n    ctx.res.status(400).end()\n    return {}\n  }\n\n  const fsDb = await getTenantFilesystemDb(tenantId)\n  const nativeDb = fsDb.db\n  if (!nativeDb) {\n    ctx.res.status(500).end()\n    return {}\n  }\n\n  const bucketName = getBucketName()\n  const bucket = new GridFSBucket(nativeDb, { bucketName })\n\n  const [file] = await bucket.find({ _id: fileObjectId }).limit(1).toArray()\n  if (!file) {\n    ctx.res.status(404).end()\n    return {}\n  }\n\n  const isPublic = resolveHeaderBoolean((file as any)?.metadata?.isPublic) ?? false\n  if (!isPublic) {\n    const userId = getUserId(ctx)\n    const uploadKeyHash = getUploadKeyHash(ctx)\n    const metadataUserId = resolveHeaderString((file as any)?.metadata?.userId)\n    const ownerKeyHash = resolveHeaderString((file as any)?.metadata?.ownerKeyHash)\n\n    const authorizedByUser = Boolean(userId && metadataUserId && userId === metadataUserId)\n    const authorizedByKey = Boolean(uploadKeyHash && ownerKeyHash && uploadKeyHash === ownerKeyHash)\n\n    if (!authorizedByUser && !authorizedByKey) {\n      ctx.res.status(401).end()\n      return {}\n    }\n  }\n\n  const requestedWidth = parseRequestedWidth((ctx.req.query as any)?.w)\n  const variantFileObjectId = selectVariantFileId(file, requestedWidth, (ctx.req.query as any)?.variant)\n  const [variantFile] = variantFileObjectId\n    ? await bucket.find({ _id: variantFileObjectId }).limit(1).toArray()\n    : []\n  const selectedFileObjectId = variantFile ? variantFileObjectId as ObjectId : fileObjectId\n  const selectedFile = variantFile ?? file\n\n  const mimeTypeFromMetadata = resolveHeaderString((selectedFile as any)?.metadata?.mimeType)\n  const mimeType = mimeTypeFromMetadata ?? \"application/octet-stream\"\n  const filenameFromDb = resolveHeaderString((selectedFile as any)?.filename)\n  const filename = filenameFromDb ?? fileIdRaw\n  const filenameSafe = escapeHeaderFilename(filename)\n\n  const cacheControl = \"private, max-age=0, must-revalidate\"\n  const md5 = resolveHeaderString((selectedFile as any)?.md5)\n  const uploadDate = (selectedFile as any)?.uploadDate instanceof Date ? (selectedFile as any).uploadDate : null\n  const etagValue = md5 ?? `${selectedFileObjectId.toHexString()}-${String((selectedFile as any)?.length ?? 0)}-${String(uploadDate?.getTime() ?? 0)}`\n  const etag = md5 ? `\"${etagValue}\"` : `W/\"${etagValue}\"`\n  const ifNoneMatch = resolveHeaderString((ctx.req.headers as any)?.[\"if-none-match\"])\n  if (ifNoneMatch) {\n    const candidates = ifNoneMatch.split(\",\").map((value) => value.trim()).filter(Boolean)\n    if (candidates.includes(\"*\") || candidates.includes(etag)) {\n      ctx.res.status(304)\n      ctx.res.setHeader(\"Cache-Control\", cacheControl)\n      ctx.res.setHeader(\"ETag\", etag)\n      ctx.res.end()\n      return {}\n    }\n  }\n\n  ctx.res.status(200)\n  ctx.res.setHeader(\"Content-Type\", mimeType)\n  ctx.res.setHeader(\"Content-Length\", String((selectedFile as any)?.length ?? 0))\n  ctx.res.setHeader(\"Content-Disposition\", `inline; filename=\"${filenameSafe}\"`)\n  ctx.res.setHeader(\"Cache-Control\", cacheControl)\n  ctx.res.setHeader(\"ETag\", etag)\n  ctx.res.setHeader(\"X-Content-Type-Options\", \"nosniff\")\n  if (mimeType === \"image/svg+xml\") {\n    ctx.res.setHeader(\n      \"Content-Security-Policy\",\n      \"default-src 'none'; style-src 'unsafe-inline'; sandbox; base-uri 'none'; form-action 'none'\",\n    )\n  }\n  ctx.res.flushHeaders()\n\n  if (ctx.req.method === \"HEAD\") {\n    ctx.res.end()\n    return {}\n  }\n\n  const stream = bucket.openDownloadStream(selectedFileObjectId)\n\n  stream.on(\"error\", () => {\n    try {\n      ctx.res.destroy()\n    } catch {\n      //\n    }\n  })\n\n  stream.pipe(ctx.res)\n  return {}\n}\n","export const Route = \"/api/rb/files/:fileId\"\n\nexport const GetRoute = Route\nexport const DeleteRoute = Route\n","import { Api } from \"@rpcbase/api\"\n\nimport { deleteFile } from \"./handlers/deleteFile\"\nimport { getFile } from \"./handlers/getFile\"\n\nimport * as Files from \"./index\"\n\n\nexport default (api: Api) => {\n  api.get(Files.GetRoute, getFile)\n  api.delete(Files.DeleteRoute, deleteFile)\n}\n"],"mappings":";;;;AAYA,IAAMY,yBAAuBC,UAAkC;CAC7D,IAAI,OAAOA,UAAU,UAAU,OAAO;CACtC,MAAMC,aAAaD,MAAME,KAAK;CAC9B,OAAOD,aAAaA,aAAa;AACnC;AAEA,IAAME,uBAAuBL,UAA4B;CAEvD,QADgBA,iBAAiBO,QAAQP,MAAMM,UAAUE,OAAOR,KAAK,EAAA,CACtDS,SAAS,cAAc;AACxC;AAEA,IAAMC,mBAAmB,OAAOC,QAAsBC,WAAoC;CACxF,IAAI;EACF,MAAMD,OAAOG,OAAOF,MAAM;CAC5B,SAASZ,OAAO;EACd,IAAI,CAACK,oBAAoBL,KAAK,GAAG,MAAMA;CACzC;AACF;AAEA,IAAae,aAAoF,OAC/FE,UACAC,QACmC;CACnC,MAAMC,WAAWzB,YAAYwB,GAAG;CAChC,IAAI,CAACC,UAAU;EACbD,IAAIE,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEtB,IAAI;GAAOC,OAAO;EAAiB;CAC9C;CAEA,MAAMsB,YAAYd,OAAOU,IAAIK,IAAIC,QAAQZ,UAAU,EAAE,CAAC,CAACR,KAAK;CAC5D,IAAIqB;CACJ,IAAI;EACFA,eAAe,IAAIjC,SAAS8B,SAAS;CACvC,QAAQ;EACNJ,IAAIE,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEtB,IAAI;GAAOC,OAAO;EAAkB;CAC/C;CAGA,MAAM2B,YAAWD,MADEpC,sBAAsB6B,QAAQ,EAAA,CAC3BS;CACtB,IAAI,CAACD,UAAU;EACbT,IAAIE,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEtB,IAAI;GAAOC,OAAO;EAA4B;CACzD;CAGA,MAAMW,SAAS,IAAIpB,aAAaoC,UAAU,EAAEE,YADzBpC,cACyBoC,EAAW,CAAC;CAExD,MAAMC,SAASlC,UAAUsB,GAAG;CAC5B,MAAMa,gBAAgBpC,iBAAiBuB,GAAG;CAC1C,IAAI,CAACY,UAAU,CAACC,eAAe;EAC7Bb,IAAIE,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEtB,IAAI;GAAOC,OAAO;EAAe;CAC5C;CAEA,MAAM,CAACgC,QAAQ,MAAMrB,OAAOsB,KAAK,EAAEC,KAAKT,aAAa,CAAC,CAAC,CAACU,MAAM,CAAC,CAAC,CAACC,QAAQ;CACzE,IAAI,CAACJ,MAAM;EACTd,IAAIE,IAAIC,OAAO,GAAG;EAClB,OAAO,EAAEtB,IAAI,KAAK;CACpB;CAEA,MAAMsC,iBAAiBpC,sBAAqB+B,MAAcM,UAAUR,MAAM;CAC1E,MAAMS,eAAetC,sBAAqB+B,MAAcM,UAAUC,YAAY;CAK9E,IAAI,CAHqBE,QAAQX,UAAUO,kBAAkBP,WAAWO,cAGnEG,KAAoB,CAFDC,QAAQV,iBAAiBQ,gBAAgBR,kBAAkBQ,YAEzDG,GAAiB;EACzCxB,IAAIE,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEtB,IAAI;GAAOC,OAAO;EAAe;CAC5C;CAEA,IAAI;EAEF,MAAM6C,cAAaF,MADIhC,OAAOsB,KAAK,EAAE,sBAAsBR,aAAamB,YAAY,EAAE,CAAC,CAAC,CAACR,QAAQ,EAAA,CAE9FU,KAAKC,YAAaA,SAAiBb,GAAG,CAAC,CACvCc,QAAQC,OAAuBA,cAAczD,QAAQ;EAExD,MAAMkB,iBAAiBC,QAAQc,YAAY;EAC3C,KAAK,MAAMyB,aAAaL,YACtB,MAAMnC,iBAAiBC,QAAQuC,SAAS;CAE5C,QAAQ;EACNhC,IAAIE,IAAIC,OAAO,GAAG;EAClB,OAAO;GAAEtB,IAAI;GAAOC,OAAO;EAAgB;CAC7C;CAEAkB,IAAIE,IAAIC,OAAO,GAAG;CAClB,OAAO,EAAEtB,IAAI,KAAK;AACpB;;;AC9FA,IAAM6D,uBAAuBC,UAAkC;CAC7D,IAAI,OAAOA,UAAU,UAAU,OAAO;CACtC,MAAMC,aAAaD,MAAME,KAAK;CAC9B,OAAOD,aAAaA,aAAa;AACnC;AAEA,IAAME,wBAAwBH,UAAmC;CAC/D,IAAI,OAAOA,UAAU,WAAW,OAAOA;CACvC,IAAI,OAAOA,UAAU,UAAU,OAAO;CACtC,MAAMC,aAAaD,MAAME,KAAK,CAAC,CAACE,YAAY;CAC5C,IAAI,CAACH,YAAY,OAAO;CACxB,IAAIA,eAAe,QAAQ,OAAO;CAClC,IAAIA,eAAe,SAAS,OAAO;CACnC,OAAO;AACT;AAEA,IAAMI,wBAAwBC,aAA6BA,SAASC,QAAQ,UAAU,GAAG;AAEzF,IAAMC,uBAAuBR,UAAkC;CAC7D,IAAI,OAAOA,UAAU,UAAU,OAAO;CACtC,MAAMS,SAASC,OAAOV,MAAME,KAAK,CAAC;CAClC,IAAI,CAACQ,OAAOC,SAASF,MAAM,KAAKA,UAAU,GAAG,OAAO;CACpD,OAAOG,KAAKC,MAAMJ,MAAM;AAC1B;AAEA,IAAMK,wBAAwBC,SAAkD;CAC9E,MAAME,WAAYF,MAAcE;CAChC,IAAI,CAACA,YAAY,OAAOA,aAAa,UAAU,OAAO;CACtD,MAAMC,QAASD,SAAqCC;CACpD,IAAI,CAACA,SAAS,OAAOA,UAAU,UAAU,OAAO;CAChD,MAAMC,WAAYD,MAAkCC;CACpD,IAAI,CAACA,YAAY,OAAOA,aAAa,UAAU,OAAO;CACtD,OAAOA;AACT;AAEA,IAAMC,wBAAwBC,YAAsC;CAClE,IAAI,CAACA,WAAW,OAAOA,YAAY,UAAU,OAAO;CACpD,MAAMC,SAAUD,QAAoCC;CACpD,IAAI,OAAOA,WAAW,UAAU,OAAO;CACvC,IAAI;EACF,OAAO,IAAI7B,SAAS6B,MAAM;CAC5B,QAAQ;EACN,OAAO;CACT;AACF;AAEA,IAAMC,uBAAuBR,MAAeS,gBAA+BC,qBAA+C;CACxH,MAAMN,WAAWL,qBAAqBC,IAAI;CAC1C,IAAI,CAACI,UAAU,OAAO;CAEtB,IAAIO,aAA4B;CAChC,IAAI,OAAOD,qBAAqB,UAAU;EACxC,MAAMxB,aAAawB,iBAAiBvB,KAAK,CAAC,CAACE,YAAY;EACvDsB,aAAazB,eAAe,UAAU,MAAMA,eAAe,UAAU,MAAMA,eAAe,WAAW,MAAMA,eAAe,UAAU,OAAO;EAC3I,IAAIyB,YAAY;GACd,MAAMC,gBAAgBP,qBAAqBD,SAASS,OAAOF,UAAU,EAAE;GACvE,IAAIC,eAAe,OAAOA;EAC5B;CACF;CAEA,MAAME,cAAcH,cAAcF;CAClC,IAAI,CAACK,aAAa,OAAO;CAOzB,MAAMW,gBALST,OAAOC,KAAKb,QAAQ,CAAC,CACjCc,KAAKC,UAAUxB,OAAOwB,KAAK,CAAC,CAAC,CAC7BC,QAAQD,UAAUxB,OAAO0B,UAAUF,KAAK,KAAKA,QAAQ,CAAC,CAAC,CACvDG,MAAMC,GAAGC,MAAMD,IAAIC,CAEAT,CAAAA,CAAOW,QAAuBC,UAAUR,UAAU;EACtE,IAAIQ,aAAa,MAAM,OAAOR;EAE9B,MAAMS,mBAAmB/B,KAAKgC,IAAIF,WAAWb,WAAW;EACxD,MAAMgB,WAAWjC,KAAKgC,IAAIV,QAAQL,WAAW;EAC7C,IAAIgB,WAAWF,kBAAkB,OAAOT;EACxC,IAAIW,aAAaF,oBAAoBT,QAAQQ,UAAU,OAAOR;EAC9D,OAAOQ;CACT,GAAG,IAAI;CACP,OAAOF,gBAAgBpB,qBAAqBD,SAASS,OAAOY,aAAa,EAAE,IAAI;AACjF;AAEA,IAAaM,UAAiF,OAC5FC,UACAC,QACmC;CACnC,MAAME,WAAWvD,YAAYqD,GAAG;CAChC,IAAI,CAACE,UAAU;EACbF,IAAIG,IAAIC,OAAO,GAAG,CAAC,CAACC,IAAI;EACxB,OAAO,CAAC;CACV;CAEA,MAAMC,YAAY1B,OAAOoB,IAAIO,IAAIC,QAAQlC,UAAU,EAAE,CAAC,CAACpB,KAAK;CAC5D,IAAIuD;CACJ,IAAI;EACFA,eAAe,IAAIhE,SAAS6D,SAAS;CACvC,QAAQ;EACNN,IAAIG,IAAIC,OAAO,GAAG,CAAC,CAACC,IAAI;EACxB,OAAO,CAAC;CACV;CAGA,MAAMM,YAAWD,MADEnE,sBAAsB2D,QAAQ,EAAA,CAC3BU;CACtB,IAAI,CAACD,UAAU;EACbX,IAAIG,IAAIC,OAAO,GAAG,CAAC,CAACC,IAAI;EACxB,OAAO,CAAC;CACV;CAGA,MAAMS,SAAS,IAAItE,aAAamE,UAAU,EAAEE,YADzBnE,cACyBmE,EAAW,CAAC;CAExD,MAAM,CAAC9C,QAAQ,MAAM+C,OAAOC,KAAK,EAAEC,KAAKP,aAAa,CAAC,CAAC,CAACQ,MAAM,CAAC,CAAC,CAACC,QAAQ;CACzE,IAAI,CAACnD,MAAM;EACTiC,IAAIG,IAAIC,OAAO,GAAG,CAAC,CAACC,IAAI;EACxB,OAAO,CAAC;CACV;CAGA,IAAI,EADalD,qBAAsBY,MAAcE,UAAUkD,QAAQ,KAAK,QAC7D;EACb,MAAMC,SAASvE,UAAUmD,GAAG;EAC5B,MAAMqB,gBAAgBzE,iBAAiBoD,GAAG;EAC1C,MAAMsB,iBAAiBvE,oBAAqBgB,MAAcE,UAAUmD,MAAM;EAC1E,MAAMG,eAAexE,oBAAqBgB,MAAcE,UAAUsD,YAAY;EAK9E,IAAI,CAHqBE,QAAQL,UAAUE,kBAAkBF,WAAWE,cAGnEE,KAAoB,CAFDC,QAAQJ,iBAAiBE,gBAAgBF,kBAAkBE,YAEzDG,GAAiB;GACzC1B,IAAIG,IAAIC,OAAO,GAAG,CAAC,CAACC,IAAI;GACxB,OAAO,CAAC;EACV;CACF;CAGA,MAAMwB,sBAAsBtD,oBAAoBR,MADzBP,oBAAqBwC,IAAIO,IAAIoB,OAAeC,CACbpD,GAAiBwB,IAAIO,IAAIoB,OAAetD,OAAO;CACrG,MAAM,CAACyD,eAAeD,sBAClB,MAAMf,OAAOC,KAAK,EAAEC,KAAKa,oBAAoB,CAAC,CAAC,CAACZ,MAAM,CAAC,CAAC,CAACC,QAAQ,IACjE,CAAA;CACJ,MAAMa,uBAAuBD,cAAcD,sBAAkCpB;CAC7E,MAAMuB,eAAeF,eAAe/D;CAGpC,MAAMmE,WADuBnF,oBAAqBiF,cAAsB/D,UAAUiE,QACjED,KAAwB;CAGzC,MAAMG,eAAe/E,qBAFEN,oBAAqBiF,cAAsB1E,QACjD6E,KAAkB7B,SACe;CAElD,MAAM+B,eAAe;CACrB,MAAMC,MAAMvF,oBAAqBiF,cAAsBM,GAAG;CAC1D,MAAMC,aAAcP,cAAsBO,sBAAsBC,OAAQR,aAAqBO,aAAa;CAC1G,MAAME,YAAYH,OAAO,GAAGP,qBAAqBW,YAAY,EAAC,GAAI9D,OAAQoD,cAAsBW,UAAU,CAAC,EAAC,GAAI/D,OAAO2D,YAAYK,QAAQ,KAAK,CAAC;CACjJ,MAAMC,OAAOP,MAAM,IAAIG,UAAS,KAAM,MAAMA,UAAS;CACrD,MAAMK,cAAc/F,oBAAqBiD,IAAIO,IAAIwC,UAAkB,gBAAgB;CACnF,IAAID,aAAa;EACf,MAAME,aAAaF,YAAYG,MAAM,GAAG,CAAC,CAAChE,KAAKjC,UAAUA,MAAME,KAAK,CAAC,CAAC,CAACiC,OAAOsC,OAAO;EACrF,IAAIuB,WAAWE,SAAS,GAAG,KAAKF,WAAWE,SAASL,IAAI,GAAG;GACzD7C,IAAIG,IAAIC,OAAO,GAAG;GAClBJ,IAAIG,IAAIgD,UAAU,iBAAiBd,YAAY;GAC/CrC,IAAIG,IAAIgD,UAAU,QAAQN,IAAI;GAC9B7C,IAAIG,IAAIE,IAAI;GACZ,OAAO,CAAC;EACV;CACF;CAEAL,IAAIG,IAAIC,OAAO,GAAG;CAClBJ,IAAIG,IAAIgD,UAAU,gBAAgBjB,QAAQ;CAC1ClC,IAAIG,IAAIgD,UAAU,kBAAkBvE,OAAQoD,cAAsBW,UAAU,CAAC,CAAC;CAC9E3C,IAAIG,IAAIgD,UAAU,uBAAuB,qBAAqBf,aAAY,EAAG;CAC7EpC,IAAIG,IAAIgD,UAAU,iBAAiBd,YAAY;CAC/CrC,IAAIG,IAAIgD,UAAU,QAAQN,IAAI;CAC9B7C,IAAIG,IAAIgD,UAAU,0BAA0B,SAAS;CACrD,IAAIjB,aAAa,iBACflC,IAAIG,IAAIgD,UACN,2BACA,6FACF;CAEFnD,IAAIG,IAAIiD,aAAa;CAErB,IAAIpD,IAAIO,IAAI8C,WAAW,QAAQ;EAC7BrD,IAAIG,IAAIE,IAAI;EACZ,OAAO,CAAC;CACV;CAEA,MAAMiD,SAASxC,OAAOyC,mBAAmBxB,oBAAoB;CAE7DuB,OAAOE,GAAG,eAAe;EACvB,IAAI;GACFxD,IAAIG,IAAIsD,QAAQ;EAClB,QAAQ,CACN;CAEJ,CAAC;CAEDH,OAAOI,KAAK1D,IAAIG,GAAG;CACnB,OAAO,CAAC;AACV;;;ACzMA,IAAawD,QAAQ;AAErB,IAAaC,WAAWD;AACxB,IAAaE,cAAcF;;;ACK3B,IAAA,mBAAgB,QAAa;CAC3B,IAAI,IAAI,UAAgB,OAAO;CAC/B,IAAI,OAAO,aAAmB,UAAU;AAC1C"}