@sanvika/cloudinary 0.2.1 → 0.2.3

package/dist/index.js

@@ -228,6 +228,13 @@ async function getAppName() {
   await ensureConfigured();
   return _appName;
 }
+function stripAppPrefix(folder, appName) {
+  if (!folder || !appName) return folder || "";
+  const prefix = `${appName}/`;
+  if (folder === appName) return "";
+  if (folder.startsWith(prefix)) return folder.slice(prefix.length);
+  return folder;
+}
 async function uploadImage(fileOrBuffer, options = {}) {
   await ensureConfigured();
   const {
@@ -247,8 +254,9 @@ async function uploadImage(fileOrBuffer, options = {}) {
     maxAttempts = 3
   } = options;
   const eagerValue = eager || transforms;
+  const normalizedFolder = stripAppPrefix(folder || "", _appName);
   const uploadOptions = {
-    folder: folder || "",
+    folder: normalizedFolder,
     resourceType,
     tags: [_appName, ...tags],
     eager: eagerValue,
@@ -268,7 +276,7 @@ async function uploadImage(fileOrBuffer, options = {}) {
     });
   }
   const cloudinary = await loadLegacyCloudinary();
-  const uploadFolder = getFolderPath(_appName, folder);
+  const uploadFolder = getFolderPath(_appName, normalizedFolder);
   const uploadOpts = {
     folder: uploadFolder,
     resource_type: resourceType,
@@ -321,14 +329,15 @@ async function uploadRawFile(buffer, options = {}) {
   const { folder, filename, tags = [] } = options;
   if (!buffer || !Buffer.isBuffer(buffer)) throw new Error("Buffer is required for uploadRawFile");
   const baseName = filename ? filename.replace(/\.[^.]+$/, "") : "file";
+  const normalizedFolder = stripAppPrefix(folder || "", _appName);
   if (isProxyMode()) {
     return withRetry(
-      () => gatewayUpload(buffer, { folder: folder || "", resourceType: "raw", tags: ["raw", _appName, ...tags], publicId: baseName, overwrite: true, filename }),
+      () => gatewayUpload(buffer, { folder: normalizedFolder, resourceType: "raw", tags: ["raw", _appName, ...tags], publicId: baseName, overwrite: true, filename }),
       { operationName: "uploadRawFile", maxAttempts: 3 }
     );
   }
   const cloudinary = await loadLegacyCloudinary();
-  const uploadFolder = getFolderPath(_appName, folder);
+  const uploadFolder = getFolderPath(_appName, normalizedFolder);
   return withRetry(
     () => new Promise((resolve, reject) => {
       const stream = cloudinary.uploader.upload_stream(
@@ -512,10 +521,103 @@ function verifySanvikaWebhookSignature({ headers, rawBody, secret, toleranceSec
   const ok = crypto2.timingSafeEqual(a, b);
   return { valid: ok, reason: ok ? void 0 : "signature_mismatch" };
 }
+
+// src/cloudinaryValidation.js
+var MAX_IMAGE_SIZE = 5 * 1024 * 1024;
+var MAX_PROFILE_PIC_SIZE = 6 * 1024 * 1024;
+var MAX_VIDEO_SIZE = 100 * 1024 * 1024;
+var SUPPORTED_IMAGE_FORMATS = [".jpg", ".jpeg", ".png", ".webp"];
+var SUPPORTED_PROFILE_MIME_TYPES = ["image/jpeg", "image/jpg", "image/png"];
+var SUPPORTED_VIDEO_FORMATS = [".mp4", ".mov", ".avi", ".wmv", ".flv", ".mkv", ".webm", ".m4v"];
+function splitFileName(name) {
+  const safe = typeof name === "string" && name.trim() ? name.trim() : "";
+  const dotIdx = safe.lastIndexOf(".");
+  if (dotIdx <= 0) return { ext: "", base: safe || "asset" };
+  return { ext: safe.slice(dotIdx).toLowerCase(), base: safe.slice(0, dotIdx) };
+}
+function normalizeFolderPath(value, fallback) {
+  if (typeof value !== "string") return fallback;
+  const sanitized = value.trim().replace(/\\/g, "/").split("/").filter(Boolean).join("/");
+  return sanitized || fallback;
+}
+function createScopedPublicId({ baseName, userPrefix, timestamp }) {
+  const safeBaseName = baseName && baseName.trim() ? baseName.trim() : "asset";
+  const safePrefix = userPrefix && userPrefix.trim() ? userPrefix.trim() : "anon";
+  const safeTimestamp = timestamp && timestamp.trim() ? timestamp.trim() : Date.now().toString().slice(-6);
+  return `${safePrefix}_${safeTimestamp}_${safeBaseName}`;
+}
+function validateImageFile(file) {
+  const { ext: extFromName } = splitFileName(file.name || "");
+  const mimeExt = file.type ? `.${file.type.split("/")[1]}`.toLowerCase() : "";
+  const finalExt = extFromName || mimeExt;
+  if (!SUPPORTED_IMAGE_FORMATS.includes(finalExt)) {
+    return {
+      valid: false,
+      status: 415,
+      error: "INVALID_FORMAT",
+      message: `Unsupported format: ${finalExt}. Allowed: ${SUPPORTED_IMAGE_FORMATS.join(", ")}`
+    };
+  }
+  if (file.size > MAX_IMAGE_SIZE) {
+    return {
+      valid: false,
+      status: 413,
+      error: "FILE_TOO_LARGE",
+      message: `File size (${(file.size / 1024 / 1024).toFixed(2)}MB) exceeds the ${MAX_IMAGE_SIZE / 1024 / 1024}MB limit`
+    };
+  }
+  return { valid: true };
+}
+function validateProfilePicFile(file) {
+  if (!SUPPORTED_PROFILE_MIME_TYPES.includes(file.type)) {
+    return {
+      valid: false,
+      status: 415,
+      error: "INVALID_FORMAT",
+      message: "Unsupported format. Only JPG, JPEG, and PNG are allowed."
+    };
+  }
+  if (file.size > MAX_PROFILE_PIC_SIZE) {
+    return {
+      valid: false,
+      status: 413,
+      error: "FILE_TOO_LARGE",
+      message: `File size too large. Maximum is ${MAX_PROFILE_PIC_SIZE / 1024 / 1024}MB.`
+    };
+  }
+  return { valid: true };
+}
+function validateVideoFile(file) {
+  const { ext } = splitFileName(file.name || "");
+  if (!SUPPORTED_VIDEO_FORMATS.includes(ext)) {
+    return {
+      valid: false,
+      status: 415,
+      error: "INVALID_FORMAT",
+      message: `Unsupported format: ${ext}. Allowed: ${SUPPORTED_VIDEO_FORMATS.join(", ")}`
+    };
+  }
+  if (file.size > MAX_VIDEO_SIZE) {
+    return {
+      valid: false,
+      status: 413,
+      error: "FILE_TOO_LARGE",
+      message: `File size (${(file.size / 1024 / 1024).toFixed(2)}MB) exceeds the ${MAX_VIDEO_SIZE / 1024 / 1024}MB limit`
+    };
+  }
+  return { valid: true };
+}
 export {
   CloudinaryError,
+  MAX_IMAGE_SIZE,
+  MAX_PROFILE_PIC_SIZE,
+  MAX_VIDEO_SIZE,
+  SUPPORTED_IMAGE_FORMATS,
+  SUPPORTED_PROFILE_MIME_TYPES,
+  SUPPORTED_VIDEO_FORMATS,
   TRANSFORM_PRESETS,
   configureSanvikaCloudinary,
+  createScopedPublicId,
   deleteImage,
   deleteImages,
   extractPublicId,
@@ -530,14 +632,19 @@ export {
   isCloudinaryUrl,
   isProxyMode,
   isRetriableError,
+  normalizeFolderPath,
   pingCloudinary,
   runCloudinaryDiagnostics,
+  splitFileName,
   testCloudinaryWebhookSignature,
   uploadImage,
   uploadImages,
   uploadRawFile,
   uploadVideo,
+  validateImageFile,
+  validateProfilePicFile,
   validatePublicId,
+  validateVideoFile,
   verifySanvikaWebhookSignature,
   withRetry
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sanvika/cloudinary",
-  "version": "0.2.1",
+  "version": "0.2.3",
   "description": "Centralized Cloudinary SDK for the Sanvika ecosystem — proxy gateway mode (zero credentials) + legacy direct mode",
   "type": "module",
   "main": "./dist/index.js",