@sanvika/cloudinary 0.2.1 → 0.2.2

package/dist/index.js

@@ -512,10 +512,103 @@ function verifySanvikaWebhookSignature({ headers, rawBody, secret, toleranceSec
   const ok = crypto2.timingSafeEqual(a, b);
   return { valid: ok, reason: ok ? void 0 : "signature_mismatch" };
 }
+
+// src/cloudinaryValidation.js
+var MAX_IMAGE_SIZE = 5 * 1024 * 1024;
+var MAX_PROFILE_PIC_SIZE = 6 * 1024 * 1024;
+var MAX_VIDEO_SIZE = 100 * 1024 * 1024;
+var SUPPORTED_IMAGE_FORMATS = [".jpg", ".jpeg", ".png", ".webp"];
+var SUPPORTED_PROFILE_MIME_TYPES = ["image/jpeg", "image/jpg", "image/png"];
+var SUPPORTED_VIDEO_FORMATS = [".mp4", ".mov", ".avi", ".wmv", ".flv", ".mkv", ".webm", ".m4v"];
+function splitFileName(name) {
+  const safe = typeof name === "string" && name.trim() ? name.trim() : "";
+  const dotIdx = safe.lastIndexOf(".");
+  if (dotIdx <= 0) return { ext: "", base: safe || "asset" };
+  return { ext: safe.slice(dotIdx).toLowerCase(), base: safe.slice(0, dotIdx) };
+}
+function normalizeFolderPath(value, fallback) {
+  if (typeof value !== "string") return fallback;
+  const sanitized = value.trim().replace(/\\/g, "/").split("/").filter(Boolean).join("/");
+  return sanitized || fallback;
+}
+function createScopedPublicId({ baseName, userPrefix, timestamp }) {
+  const safeBaseName = baseName && baseName.trim() ? baseName.trim() : "asset";
+  const safePrefix = userPrefix && userPrefix.trim() ? userPrefix.trim() : "anon";
+  const safeTimestamp = timestamp && timestamp.trim() ? timestamp.trim() : Date.now().toString().slice(-6);
+  return `${safePrefix}_${safeTimestamp}_${safeBaseName}`;
+}
+function validateImageFile(file) {
+  const { ext: extFromName } = splitFileName(file.name || "");
+  const mimeExt = file.type ? `.${file.type.split("/")[1]}`.toLowerCase() : "";
+  const finalExt = extFromName || mimeExt;
+  if (!SUPPORTED_IMAGE_FORMATS.includes(finalExt)) {
+    return {
+      valid: false,
+      status: 415,
+      error: "INVALID_FORMAT",
+      message: `Unsupported format: ${finalExt}. Allowed: ${SUPPORTED_IMAGE_FORMATS.join(", ")}`
+    };
+  }
+  if (file.size > MAX_IMAGE_SIZE) {
+    return {
+      valid: false,
+      status: 413,
+      error: "FILE_TOO_LARGE",
+      message: `File size (${(file.size / 1024 / 1024).toFixed(2)}MB) exceeds the ${MAX_IMAGE_SIZE / 1024 / 1024}MB limit`
+    };
+  }
+  return { valid: true };
+}
+function validateProfilePicFile(file) {
+  if (!SUPPORTED_PROFILE_MIME_TYPES.includes(file.type)) {
+    return {
+      valid: false,
+      status: 415,
+      error: "INVALID_FORMAT",
+      message: "Unsupported format. Only JPG, JPEG, and PNG are allowed."
+    };
+  }
+  if (file.size > MAX_PROFILE_PIC_SIZE) {
+    return {
+      valid: false,
+      status: 413,
+      error: "FILE_TOO_LARGE",
+      message: `File size too large. Maximum is ${MAX_PROFILE_PIC_SIZE / 1024 / 1024}MB.`
+    };
+  }
+  return { valid: true };
+}
+function validateVideoFile(file) {
+  const { ext } = splitFileName(file.name || "");
+  if (!SUPPORTED_VIDEO_FORMATS.includes(ext)) {
+    return {
+      valid: false,
+      status: 415,
+      error: "INVALID_FORMAT",
+      message: `Unsupported format: ${ext}. Allowed: ${SUPPORTED_VIDEO_FORMATS.join(", ")}`
+    };
+  }
+  if (file.size > MAX_VIDEO_SIZE) {
+    return {
+      valid: false,
+      status: 413,
+      error: "FILE_TOO_LARGE",
+      message: `File size (${(file.size / 1024 / 1024).toFixed(2)}MB) exceeds the ${MAX_VIDEO_SIZE / 1024 / 1024}MB limit`
+    };
+  }
+  return { valid: true };
+}
 export {
   CloudinaryError,
+  MAX_IMAGE_SIZE,
+  MAX_PROFILE_PIC_SIZE,
+  MAX_VIDEO_SIZE,
+  SUPPORTED_IMAGE_FORMATS,
+  SUPPORTED_PROFILE_MIME_TYPES,
+  SUPPORTED_VIDEO_FORMATS,
   TRANSFORM_PRESETS,
   configureSanvikaCloudinary,
+  createScopedPublicId,
   deleteImage,
   deleteImages,
   extractPublicId,
@@ -530,14 +623,19 @@ export {
   isCloudinaryUrl,
   isProxyMode,
   isRetriableError,
+  normalizeFolderPath,
   pingCloudinary,
   runCloudinaryDiagnostics,
+  splitFileName,
   testCloudinaryWebhookSignature,
   uploadImage,
   uploadImages,
   uploadRawFile,
   uploadVideo,
+  validateImageFile,
+  validateProfilePicFile,
   validatePublicId,
+  validateVideoFile,
   verifySanvikaWebhookSignature,
   withRetry
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sanvika/cloudinary",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "Centralized Cloudinary SDK for the Sanvika ecosystem — proxy gateway mode (zero credentials) + legacy direct mode",
   "type": "module",
   "main": "./dist/index.js",