@warlock.js/core 4.4.0 → 4.6.0

package/esm/storage/drivers/do-spaces-driver.mjs

@@ -43,7 +43,7 @@ var DOSpacesDriver = class extends CloudDriver {
 	* Note: DO Spaces includes automatic CDN with the `.cdn.` subdomain
 	*/
 	url(location) {
-		if (this.options.urlPrefix) location = `${this.options.urlPrefix.replace(/\/+$/, "")}/${ltrim(location, "/")}`;
+		if (this.options.urlPrefix) return `${this.options.urlPrefix.replace(/\/+$/, "")}/${ltrim(location, "/")}`;
 		return `https://${this.options.bucket}.${this.options.region}.cdn.digitaloceanspaces.com/${location}`;
 	}
 };

package/esm/storage/drivers/do-spaces-driver.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"do-spaces-driver.mjs","names":[],"sources":["../../../../../../../../@warlock.js/core/src/storage/drivers/do-spaces-driver.ts"],"sourcesContent":["import { ltrim } from \"@mongez/reinforcements\";\nimport type { CloudStorageDriverOptions } from \"../types\";\nimport { CloudDriver } from \"./cloud-driver\";\n\n/**\n * DigitalOcean Spaces Storage Driver\n *\n * Spaces is S3-compatible with a different URL structure.\n *\n * URL Patterns:\n * - With urlPrefix: {urlPrefix}/{key}\n * - CDN URL: https://{bucket}.{region}.cdn.digitaloceanspaces.com/{key}\n * - Origin URL: https://{bucket}.{region}.digitaloceanspaces.com/{key}\n *\n * Regions: nyc3, sfo3, ams3, sgp1, fra1, etc.\n *\n * @example\n * ```typescript\n * const driver = new DOSpacesDriver({\n *   bucket: \"my-space\",\n *   region: \"nyc3\",\n *   accessKeyId: process.env.DO_SPACES_KEY,\n *   secretAccessKey: process.env.DO_SPACES_SECRET,\n * });\n * ```\n */\nexport class DOSpacesDriver extends CloudDriver<CloudStorageDriverOptions> {\n  /**\n   * Driver name\n   */\n  public readonly name = \"spaces\";\n\n  /**\n   * Get Spaces endpoint URL\n   *\n   * Spaces endpoint format: https://{region}.digitaloceanspaces.com\n   */\n  protected getEndpoint(): string {\n    return this.options.endpoint || `https://${this.options.region}.digitaloceanspaces.com`;\n  }\n\n  /**\n   * Get public URL for file\n   *\n   * Note: DO Spaces includes automatic CDN with the `.cdn.` subdomain\n   */\n  public url(location: string): string {\n    // 1. Use urlPrefix if configured\n    if (this.options.urlPrefix) {\n      const prefix = this.options.urlPrefix.replace(/\\/+$/, \"\");\n      location = `${prefix}/${ltrim(location, \"/\")}`;\n    }\n\n    // 2. Default Spaces CDN URL\n    return `https://${this.options.bucket}.${this.options.region}.cdn.digitaloceanspaces.com/${location}`;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AA0BA,IAAa,iBAAb,cAAoC,YAAuC;;;cAIlD;;;;;;;CAOvB,AAAU,cAAsB;EAC9B,OAAO,KAAK,QAAQ,YAAY,WAAW,KAAK,QAAQ,OAAO;CACjE;;;;;;CAOA,AAAO,IAAI,UAA0B;EAEnC,IAAI,KAAK,QAAQ,WAEf,WAAW,GADI,KAAK,QAAQ,UAAU,QAAQ,QAAQ,EACnC,EAAE,GAAG,MAAM,UAAU,GAAG;EAI7C,OAAO,WAAW,KAAK,QAAQ,OAAO,GAAG,KAAK,QAAQ,OAAO,8BAA8B;CAC7F;AACF"}
+{"version":3,"file":"do-spaces-driver.mjs","names":[],"sources":["../../../../../../../../@warlock.js/core/src/storage/drivers/do-spaces-driver.ts"],"sourcesContent":["import { ltrim } from \"@mongez/reinforcements\";\nimport type { CloudStorageDriverOptions } from \"../types\";\nimport { CloudDriver } from \"./cloud-driver\";\n\n/**\n * DigitalOcean Spaces Storage Driver\n *\n * Spaces is S3-compatible with a different URL structure.\n *\n * URL Patterns:\n * - With urlPrefix: {urlPrefix}/{key}\n * - CDN URL: https://{bucket}.{region}.cdn.digitaloceanspaces.com/{key}\n * - Origin URL: https://{bucket}.{region}.digitaloceanspaces.com/{key}\n *\n * Regions: nyc3, sfo3, ams3, sgp1, fra1, etc.\n *\n * @example\n * ```typescript\n * const driver = new DOSpacesDriver({\n *   bucket: \"my-space\",\n *   region: \"nyc3\",\n *   accessKeyId: process.env.DO_SPACES_KEY,\n *   secretAccessKey: process.env.DO_SPACES_SECRET,\n * });\n * ```\n */\nexport class DOSpacesDriver extends CloudDriver<CloudStorageDriverOptions> {\n  /**\n   * Driver name\n   */\n  public readonly name = \"spaces\";\n\n  /**\n   * Get Spaces endpoint URL\n   *\n   * Spaces endpoint format: https://{region}.digitaloceanspaces.com\n   */\n  protected getEndpoint(): string {\n    return this.options.endpoint || `https://${this.options.region}.digitaloceanspaces.com`;\n  }\n\n  /**\n   * Get public URL for file\n   *\n   * Note: DO Spaces includes automatic CDN with the `.cdn.` subdomain\n   */\n  public url(location: string): string {\n    // 1. Use urlPrefix if configured — return it directly so the CDN-host\n    // URL below is NOT appended (which would yield a double-host URL).\n    if (this.options.urlPrefix) {\n      const prefix = this.options.urlPrefix.replace(/\\/+$/, \"\");\n      return `${prefix}/${ltrim(location, \"/\")}`;\n    }\n\n    // 2. Default Spaces CDN URL\n    return `https://${this.options.bucket}.${this.options.region}.cdn.digitaloceanspaces.com/${location}`;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AA0BA,IAAa,iBAAb,cAAoC,YAAuC;;;cAIlD;;;;;;;CAOvB,AAAU,cAAsB;EAC9B,OAAO,KAAK,QAAQ,YAAY,WAAW,KAAK,QAAQ,OAAO;CACjE;;;;;;CAOA,AAAO,IAAI,UAA0B;EAGnC,IAAI,KAAK,QAAQ,WAEf,OAAO,GADQ,KAAK,QAAQ,UAAU,QAAQ,QAAQ,EACvC,EAAE,GAAG,MAAM,UAAU,GAAG;EAIzC,OAAO,WAAW,KAAK,QAAQ,OAAO,GAAG,KAAK,QAAQ,OAAO,8BAA8B;CAC7F;AACF"}

package/esm/storage/drivers/local-driver.d.mts

@@ -75,6 +75,10 @@ declare class LocalDriver implements StorageDriverContract {
   deleteMany(locations: string[]): Promise<DeleteManyResult[]>;
   /**
    * Delete directory
+   *
+   * The directory path is resolved through {@link getAbsolutePath} so it is
+   * contained within the storage root — the raw, caller-supplied argument is
+   * never handed to the filesystem (preventing `../` traversal deletes).
    */
   deleteDirectory(directoryPath: string): Promise<boolean>;
   /**
@@ -137,6 +141,10 @@ declare class LocalDriver implements StorageDriverContract {
   getRoot(): string;
   /**
    * Get absolute file path
+   *
+   * Routes through {@link resolveWithinRoot} so a location can never escape
+   * the configured storage root via `..` traversal, an absolute path, or a
+   * prefix breakout.
    */
   protected getAbsolutePath(location: string): string;
   /**

package/esm/storage/drivers/local-driver.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"local-driver.d.mts","names":[],"sources":["../../../../../../../../@warlock.js/core/src/storage/drivers/local-driver.ts"],"mappings":";;;;;;;;AAyCA;;;;;;cAAa,WAAA,YAAuB,qBAAA;EA+BR,OAAA,EAAS,yBAAA;EAgD3B;;;EAAA,SA3EQ,IAAA,EAAM,iBAAA;EA8EnB;;;EAAA,UAzEO,IAAA;EAuGP;;;EAAA,UAlGO,SAAA;EA2IgC;;;EAAA,UAtIhC,kBAAA;EAuLwC;;;EAAA,UAlLxC,YAAA;EA4P0C;;;EAAA,UAvP1C,SAAA,EAAS,GAAA,SAAA,eAAA;cAEO,OAAA,GAAS,yBAAA;EA0WU;;;;;;;;;EAtVtC,WAAA,CAAY,QAAA;EAuea;;;EA5cnB,GAAA,CACX,IAAA,EAAM,MAAA,YAAkB,YAAA,EACxB,QAAA,UACA,OAAA,GAAU,UAAA,GACT,OAAA,CAAQ,eAAA;EAlFuB;;;EA4GrB,SAAA,CACX,MAAA,EAAQ,QAAA,EACR,QAAA,UACA,OAAA,GAAU,UAAA,GACT,OAAA,CAAQ,eAAA;EA5GW;;;EAwIT,GAAA,CAAI,QAAA,WAAmB,OAAA,CAAQ,MAAA;EApHlC;;;EAiIG,SAAA,CAAU,QAAA,WAAmB,OAAA,CAAQ,QAAA;;;;EAarC,MAAA,CAAO,QAAA,WAAmB,OAAA;EAnHpB;;;EAiIN,UAAA,CAAW,SAAA,aAAsB,OAAA,CAAQ,gBAAA;EArGpD;;;EA2HW,eAAA,CAAgB,aAAA,WAAqB,OAAA;EAxH/C;;;EAiIU,MAAA,CAAO,QAAA,WAAmB,OAAA;EAtGrC;;;EAkHK,GAAA,CAAI,QAAA;EA/GR;;;;;;;EA0HU,YAAA,CAAa,QAAA,UAAkB,SAAA,YAAmB,OAAA;EAjFrB;;;;;;EAmGnC,oBAAA,CAAqB,QAAA,UAAkB,SAAA;EAxEA;;;;;;EAgGjC,sBAAA,CAAuB,KAAA,WAAgB,OAAA,CAAQ,wBAAA;EAjErB;;;EA6I1B,QAAA,CAAS,QAAA,WAAmB,OAAA,CAAQ,eAAA;EAtHvB;;;EAmJb,IAAA,CAAK,QAAA,WAAmB,OAAA;EAjIT;;;EA6If,IAAA,CAAK,IAAA,UAAc,EAAA,WAAa,OAAA,CAAQ,eAAA;EArHD;;;EAiJvC,IAAA,CAAK,IAAA,UAAc,EAAA,WAAa,OAAA,CAAQ,eAAA;EArEZ;;;EAiG5B,IAAA,CAAK,SAAA,UAAmB,OAAA,GAAU,WAAA,GAAc,OAAA,CAAQ,eAAA;EApEhC;;;EAoH9B,IAAA,CAAK,QAAA;EAxGiC;;;EA+GtC,OAAA;EAnFyB;;;EAAA,UA8FtB,eAAA,CAAgB,QAAA;EAlER;;;EAAA,UA0EF,QAAA,CAAS,IAAA,EAAM,MAAA,YAAkB,YAAA,GAAe,OAAA,CAAQ,MAAA;EA1EH;;;EAAA,UAyF3D,aAAA,CAAc,MAAA,EAAQ,MAAA;EAvBtB;;;EAAA,UA8BA,aAAA,CAAc,QAAA;AAAA"}
+{"version":3,"file":"local-driver.d.mts","names":[],"sources":["../../../../../../../../@warlock.js/core/src/storage/drivers/local-driver.ts"],"mappings":";;;;;;;;AA0CA;;;;;;cAAa,WAAA,YAAuB,qBAAA;EA+BR,OAAA,EAAS,yBAAA;EAmD3B;;;EAAA,SA9EQ,IAAA,EAAM,iBAAA;EAiFnB;;;EAAA,UA5EO,IAAA;EA6GP;;;EAAA,UAxGO,SAAA;EAoJgC;;;EAAA,UA/IhC,kBAAA;EAwMwC;;;EAAA,UAnMxC,YAAA;EA+Q0C;;;EAAA,UA1Q1C,SAAA,EAAS,GAAA,SAAA,eAAA;cAEO,OAAA,GAAS,yBAAA;EA6XU;;;;;;;;;EAtWtC,WAAA,CAAY,QAAA;EAkgBa;;;EAvenB,GAAA,CACX,IAAA,EAAM,MAAA,YAAkB,YAAA,EACxB,QAAA,UACA,OAAA,GAAU,UAAA,GACT,OAAA,CAAQ,eAAA;EArFuB;;;EAkHrB,SAAA,CACX,MAAA,EAAQ,QAAA,EACR,QAAA,UACA,OAAA,GAAU,UAAA,GACT,OAAA,CAAQ,eAAA;EAlHW;;;EAiJT,GAAA,CAAI,QAAA,WAAmB,OAAA,CAAQ,MAAA;EA7HlC;;;EA0IG,SAAA,CAAU,QAAA,WAAmB,OAAA,CAAQ,QAAA;;;;EAarC,MAAA,CAAO,QAAA,WAAmB,OAAA;EAzHpB;;;EA2IN,UAAA,CAAW,SAAA,aAAsB,OAAA,CAAQ,gBAAA;EA/GpD;;;;;;;EAyIW,eAAA,CAAgB,aAAA,WAAqB,OAAA;EAxGhD;;;EAmHW,MAAA,CAAO,QAAA,WAAmB,OAAA;EAhHpC;;;EA4HI,GAAA,CAAI,QAAA;EA7FyB;;;;;;;EAwGvB,YAAA,CAAa,QAAA,UAAkB,SAAA,YAAmB,OAAA;EA9ExB;;;;;;EAgGhC,oBAAA,CAAqB,QAAA,UAAkB,SAAA;EApDI;;;;;;EA4ErC,sBAAA,CAAuB,KAAA,WAAgB,OAAA,CAAQ,wBAAA;EA1ClC;;;EAsHb,QAAA,CAAS,QAAA,WAAmB,OAAA,CAAQ,eAAA;EApGrB;;;EAiIf,IAAA,CAAK,QAAA,WAAmB,OAAA;EAzGe;;;EAqHvC,IAAA,CAAK,IAAA,UAAc,EAAA,WAAa,OAAA,CAAQ,eAAA;EAzCZ;;;EAwE5B,IAAA,CAAK,IAAA,UAAc,EAAA,WAAa,OAAA,CAAQ,eAAA;EA3ChB;;;EA2ExB,IAAA,CAAK,SAAA,UAAmB,OAAA,GAAU,WAAA,GAAc,OAAA,CAAQ,eAAA;EA/DxB;;;EA+GtC,IAAA,CAAK,QAAA;EAhFoB;;;EAuFzB,OAAA;EAvDW;;;;;;;EAAA,UAsER,eAAA,CAAgB,QAAA;EAAhB;;;EAAA,UAQM,QAAA,CAAS,IAAA,EAAM,MAAA,YAAkB,YAAA,GAAe,OAAA,CAAQ,MAAA;EAAvB;;;EAAA,UAevC,aAAA,CAAc,MAAA,EAAQ,MAAA;EAAtB;;;EAAA,UAOA,aAAA,CAAc,QAAA;AAAA"}

package/esm/storage/drivers/local-driver.mjs

@@ -2,7 +2,8 @@ import { storagePath } from "../../utils/paths.mjs";
 import { url } from "../../utils/urls.mjs";
 import { storageDriverContext } from "../context/storage-driver-context.mjs";
 import { getMimeType } from "../utils/mime.mjs";
-import { dirname, join } from "path";
+import { resolveWithinRoot } from "../utils/contain-path.mjs";
+import { dirname, join, resolve } from "path";
 import { ltrim } from "@mongez/reinforcements";
 import { directoryExistsAsync, ensureDirectoryAsync, fileExistsAsync, removeDirectoryAsync, unlinkAsync } from "@warlock.js/fs";
 import { createReadStream, createWriteStream } from "fs";
@@ -26,7 +27,7 @@ var LocalDriver = class {
 		this.name = "local";
 		this.urlPrefix = "";
 		this._metadata = /* @__PURE__ */ new Map();
-		this.root = options.root ?? storagePath();
+		this.root = resolve(options.root ?? storagePath());
 		this.urlPrefix = options.urlPrefix ?? "";
 		this.temporaryUrlPrefix = options.temporaryUrlPrefix ?? "/temp-files";
 		this.signatureKey = options.signatureKey;
@@ -57,6 +58,7 @@ var LocalDriver = class {
 		const fileBuffer = await this.toBuffer(file);
 		const hash = this.calculateHash(fileBuffer);
 		await writeFile(absolutePath, new Uint8Array(fileBuffer));
+		this._metadata.delete(location);
 		const stats = await stat(absolutePath);
 		const mimeType = options?.mimeType || this.guessMimeType(location);
 		return {
@@ -75,6 +77,7 @@ var LocalDriver = class {
 		const absolutePath = this.getAbsolutePath(location);
 		await ensureDirectoryAsync(dirname(absolutePath));
 		await pipeline(stream, createWriteStream(absolutePath));
+		this._metadata.delete(location);
 		const fileBuffer = await readFile(absolutePath);
 		const hash = this.calculateHash(fileBuffer);
 		const stats = await stat(absolutePath);
@@ -111,6 +114,7 @@ var LocalDriver = class {
 		const absolutePath = this.getAbsolutePath(location);
 		if (!await fileExistsAsync(absolutePath)) return false;
 		await unlinkAsync(absolutePath);
+		this._metadata.delete(location);
 		return true;
 	}
 	/**
@@ -135,9 +139,13 @@ var LocalDriver = class {
 	}
 	/**
 	* Delete directory
+	*
+	* The directory path is resolved through {@link getAbsolutePath} so it is
+	* contained within the storage root — the raw, caller-supplied argument is
+	* never handed to the filesystem (preventing `../` traversal deletes).
 	*/
 	async deleteDirectory(directoryPath) {
-		await removeDirectoryAsync(directoryPath);
+		await removeDirectoryAsync(this.getAbsolutePath(directoryPath));
 		return true;
 	}
 	/**
@@ -273,6 +281,7 @@ var LocalDriver = class {
 		if (!await fileExistsAsync(fromPath)) throw new Error(`Source file not found: ${from}`);
 		await ensureDirectoryAsync(dirname(toPath));
 		await copyFile(fromPath, toPath);
+		this._metadata.delete(to);
 		const fileBuffer = await readFile(toPath);
 		const hash = this.calculateHash(fileBuffer);
 		const stats = await stat(toPath);
@@ -294,6 +303,8 @@ var LocalDriver = class {
 		if (!await fileExistsAsync(fromPath)) throw new Error(`Source file not found: ${from}`);
 		await ensureDirectoryAsync(dirname(toPath));
 		await rename(fromPath, toPath);
+		this._metadata.delete(from);
+		this._metadata.delete(to);
 		const fileBuffer = await readFile(toPath);
 		const hash = this.calculateHash(fileBuffer);
 		const stats = await stat(toPath);
@@ -347,10 +358,14 @@ var LocalDriver = class {
 	}
 	/**
 	* Get absolute file path
+	*
+	* Routes through {@link resolveWithinRoot} so a location can never escape
+	* the configured storage root via `..` traversal, an absolute path, or a
+	* prefix breakout.
 	*/
 	getAbsolutePath(location) {
 		const prefixedLocation = this.applyPrefix(location);
-		return join(this.root, prefixedLocation);
+		return resolveWithinRoot(this.root, prefixedLocation);
 	}
 	/**
 	* Convert various input types to Buffer

package/esm/storage/drivers/local-driver.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"local-driver.mjs","names":[],"sources":["../../../../../../../../@warlock.js/core/src/storage/drivers/local-driver.ts"],"sourcesContent":["import {\r\n  directoryExistsAsync,\r\n  ensureDirectoryAsync,\r\n  fileExistsAsync,\r\n  removeDirectoryAsync,\r\n  unlinkAsync,\r\n} from \"@warlock.js/fs\";\r\nimport { ltrim } from \"@mongez/reinforcements\";\r\nimport crypto from \"crypto\";\r\nimport { createReadStream, createWriteStream } from \"fs\";\r\nimport { copyFile, readFile, readdir, rename, stat, writeFile } from \"fs/promises\";\r\nimport { dirname, join } from \"path\";\r\nimport type { Readable } from \"stream\";\r\nimport { pipeline } from \"stream/promises\";\r\nimport { UploadedFile } from \"../../http\";\r\nimport { storagePath } from \"../../utils/paths\";\r\nimport { url } from \"../../utils/urls\";\r\nimport { storageDriverContext } from \"../context/storage-driver-context\";\r\nimport type {\r\n  DeleteManyResult,\r\n  ListOptions,\r\n  LocalStorageDriverOptions,\r\n  PutOptions,\r\n  StorageDriverContract,\r\n  StorageDriverType,\r\n  StorageFileData,\r\n  StorageFileInfo,\r\n  TemporaryTokenPayload,\r\n  TemporaryTokenValidation,\r\n} from \"../types\";\r\nimport { getMimeType } from \"../utils/mime\";\r\n\r\n/**\r\n * Local filesystem storage driver\r\n *\r\n * Stores files on the local filesystem with support for:\r\n * - File operations (put, get, delete, copy, move)\r\n * - Stream operations for large files\r\n * - Batch operations\r\n * - Signed temporary URLs\r\n */\r\nexport class LocalDriver implements StorageDriverContract {\r\n  /**\r\n   * Driver name\r\n   */\r\n  public readonly name: StorageDriverType = \"local\";\r\n\r\n  /**\r\n   * Root path for storage\r\n   */\r\n  protected root: string;\r\n\r\n  /**\r\n   * URL prefix for file URLs\r\n   */\r\n  protected urlPrefix: string = \"\";\r\n\r\n  /**\r\n   * URL prefix for temporary file URLs\r\n   */\r\n  protected temporaryUrlPrefix: string;\r\n\r\n  /**\r\n   * Secret key for signing temporary URLs\r\n   */\r\n  protected signatureKey?: string;\r\n\r\n  /**\r\n   * Cached Storage File Metadata\r\n   */\r\n  protected _metadata = new Map<string, StorageFileInfo>();\r\n\r\n  public constructor(public options: LocalStorageDriverOptions = {}) {\r\n    this.root = options.root ?? storagePath();\r\n    this.urlPrefix = options.urlPrefix ?? \"\";\r\n    this.temporaryUrlPrefix = options.temporaryUrlPrefix ?? \"/temp-files\";\r\n    this.signatureKey = options.signatureKey;\r\n  }\r\n\r\n  // ============================================================\r\n  // Prefix Operations\r\n  // ============================================================\r\n\r\n  /**\r\n   * Apply prefix to location path\r\n   *\r\n   * Priority: context prefix > driver options prefix > no prefix\r\n   * This allows multi-tenant scenarios where context overrides driver config.\r\n   *\r\n   * @param location - Original location path\r\n   * @returns Location with prefix applied if one exists\r\n   */\r\n  public applyPrefix(location: string): string {\r\n    // Check context prefix first (highest priority)\r\n    const contextPrefix = storageDriverContext.getPrefix();\r\n    const prefix = contextPrefix || this.options.prefix;\r\n\r\n    if (!prefix) {\r\n      return location;\r\n    }\r\n\r\n    const cleanPrefix = prefix.replace(/\\/+$/, \"\");\r\n    const cleanLocation = location.replace(/^\\/+/, \"\");\r\n\r\n    // Avoid double-prefixing\r\n    if (cleanLocation.startsWith(cleanPrefix + \"/\") || cleanLocation === cleanPrefix) {\r\n      return cleanLocation;\r\n    }\r\n\r\n    return `${cleanPrefix}/${cleanLocation}`;\r\n  }\r\n\r\n  // ============================================================\r\n  // Core File Operations\r\n  // ============================================================\r\n\r\n  /**\r\n   * Put file to local storage\r\n   */\r\n  public async put(\r\n    file: Buffer | string | UploadedFile,\r\n    location: string,\r\n    options?: PutOptions,\r\n  ): Promise<StorageFileData> {\r\n    const absolutePath = this.getAbsolutePath(location);\r\n\r\n    await ensureDirectoryAsync(dirname(absolutePath));\r\n\r\n    const fileBuffer = await this.toBuffer(file);\r\n    const hash = this.calculateHash(fileBuffer);\r\n\r\n    await writeFile(absolutePath, new Uint8Array(fileBuffer));\r\n\r\n    const stats = await stat(absolutePath);\r\n    const mimeType = options?.mimeType || this.guessMimeType(location);\r\n\r\n    return {\r\n      path: location,\r\n      url: this.url(location),\r\n      size: stats.size,\r\n      hash,\r\n      mimeType,\r\n      driver: this.name,\r\n    };\r\n  }\r\n\r\n  /**\r\n   * Put file from a readable stream (for large files)\r\n   */\r\n  public async putStream(\r\n    stream: Readable,\r\n    location: string,\r\n    options?: PutOptions,\r\n  ): Promise<StorageFileData> {\r\n    const absolutePath = this.getAbsolutePath(location);\r\n\r\n    await ensureDirectoryAsync(dirname(absolutePath));\r\n\r\n    // Create write stream and pipe\r\n    const writeStream = createWriteStream(absolutePath);\r\n    await pipeline(stream, writeStream);\r\n\r\n    // Calculate hash and get stats\r\n    const fileBuffer = await readFile(absolutePath);\r\n    const hash = this.calculateHash(fileBuffer);\r\n    const stats = await stat(absolutePath);\r\n    const mimeType = options?.mimeType || this.guessMimeType(location);\r\n\r\n    return {\r\n      path: location,\r\n      url: this.url(location),\r\n      size: stats.size,\r\n      hash,\r\n      mimeType,\r\n      driver: this.name,\r\n    };\r\n  }\r\n\r\n  /**\r\n   * Get file contents as Buffer\r\n   */\r\n  public async get(location: string): Promise<Buffer> {\r\n    const absolutePath = this.getAbsolutePath(location);\r\n\r\n    if (!(await fileExistsAsync(absolutePath))) {\r\n      throw new Error(`File not found: ${location}`);\r\n    }\r\n\r\n    return readFile(absolutePath);\r\n  }\r\n\r\n  /**\r\n   * Get file as a readable stream (for large files)\r\n   */\r\n  public async getStream(location: string): Promise<Readable> {\r\n    const absolutePath = this.getAbsolutePath(location);\r\n\r\n    if (!(await fileExistsAsync(absolutePath))) {\r\n      throw new Error(`File not found: ${location}`);\r\n    }\r\n\r\n    return createReadStream(absolutePath);\r\n  }\r\n\r\n  /**\r\n   * Delete a file\r\n   */\r\n  public async delete(location: string): Promise<boolean> {\r\n    const absolutePath = this.getAbsolutePath(location);\r\n\r\n    if (!(await fileExistsAsync(absolutePath))) {\r\n      return false;\r\n    }\r\n\r\n    await unlinkAsync(absolutePath);\r\n    return true;\r\n  }\r\n\r\n  /**\r\n   * Delete multiple files at once\r\n   */\r\n  public async deleteMany(locations: string[]): Promise<DeleteManyResult[]> {\r\n    const results: DeleteManyResult[] = [];\r\n\r\n    for (const location of locations) {\r\n      try {\r\n        const deleted = await this.delete(location);\r\n        results.push({ location, deleted });\r\n      } catch (error) {\r\n        results.push({\r\n          location,\r\n          deleted: false,\r\n          error: error instanceof Error ? error.message : \"Unknown error\",\r\n        });\r\n      }\r\n    }\r\n\r\n    return results;\r\n  }\r\n\r\n  /**\r\n   * Delete directory\r\n   */\r\n  public async deleteDirectory(directoryPath: string) {\r\n    await removeDirectoryAsync(directoryPath);\r\n\r\n    return true;\r\n  }\r\n\r\n  /**\r\n   * Check if file exists\r\n   */\r\n  public async exists(location: string): Promise<boolean> {\r\n    const absolutePath = this.getAbsolutePath(location);\r\n    return Boolean(await fileExistsAsync(absolutePath));\r\n  }\r\n\r\n  // ============================================================\r\n  // URL Operations\r\n  // ============================================================\r\n\r\n  /**\r\n   * Get public URL for file\r\n   */\r\n  public url(location: string): string {\r\n    return url(this.urlPrefix + \"/\" + ltrim(location, \"/\"));\r\n  }\r\n\r\n  /**\r\n   * Get a temporary signed URL that expires\r\n   * Returns a clean URL with encoded token: {temporaryUrlPrefix}/{token}\r\n   *\r\n   * @param location - File path\r\n   * @param expiresIn - Seconds until expiration (default: 3600)\r\n   */\r\n  public async temporaryUrl(location: string, expiresIn = 3600): Promise<string> {\r\n    if (!this.signatureKey) {\r\n      throw new Error(\r\n        \"Temporary URLs require a signatureKey in LocalDriver options. \" +\r\n          \"Configure storage.drivers.local.signatureKey in your config.\",\r\n      );\r\n    }\r\n\r\n    const token = this.encodeTemporaryToken(location, expiresIn);\r\n    return `${this.temporaryUrlPrefix}/${token}`;\r\n  }\r\n\r\n  /**\r\n   * Encode a temporary token containing path, expiry, and signature\r\n   *\r\n   * @param location - File path\r\n   * @param expiresIn - Seconds until expiration\r\n   */\r\n  public encodeTemporaryToken(location: string, expiresIn: number): string {\r\n    if (!this.signatureKey) {\r\n      throw new Error(\"Temporary tokens require a signatureKey\");\r\n    }\r\n\r\n    const exp = Math.floor(Date.now() / 1000) + expiresIn;\r\n    const sig = crypto\r\n      .createHmac(\"sha256\", this.signatureKey)\r\n      .update(`${location}:${exp}`)\r\n      .digest(\"hex\");\r\n\r\n    const payload: TemporaryTokenPayload = { path: location, exp, sig };\r\n    const json = JSON.stringify(payload);\r\n\r\n    // Use base64url encoding (URL-safe base64)\r\n    return Buffer.from(json).toString(\"base64url\");\r\n  }\r\n\r\n  /**\r\n   * Validate a temporary URL token\r\n   * Returns a result object with validation status, file info, and convenience methods\r\n   *\r\n   * @param token - The token from the URL\r\n   */\r\n  public async validateTemporaryToken(token: string): Promise<TemporaryTokenValidation> {\r\n    // Check signature key\r\n    if (!this.signatureKey) {\r\n      return { valid: false, error: \"missing_key\" };\r\n    }\r\n\r\n    // Decode token\r\n    let payload: TemporaryTokenPayload;\r\n    try {\r\n      const json = Buffer.from(token, \"base64url\").toString(\"utf-8\");\r\n      payload = JSON.parse(json);\r\n    } catch {\r\n      return { valid: false, error: \"invalid_token\" };\r\n    }\r\n\r\n    // Validate payload structure\r\n    if (!payload.path || !payload.exp || !payload.sig) {\r\n      return { valid: false, error: \"invalid_token\" };\r\n    }\r\n\r\n    // Check expiration\r\n    const now = Math.floor(Date.now() / 1000);\r\n    if (payload.exp < now) {\r\n      return { valid: false, error: \"expired\" };\r\n    }\r\n\r\n    // Verify signature\r\n    const expectedSig = crypto\r\n      .createHmac(\"sha256\", this.signatureKey)\r\n      .update(`${payload.path}:${payload.exp}`)\r\n      .digest(\"hex\");\r\n\r\n    const sigBuffer = Buffer.from(payload.sig, \"hex\");\r\n    const expectedBuffer = Buffer.from(expectedSig, \"hex\");\r\n\r\n    if (sigBuffer.length !== expectedBuffer.length) {\r\n      return { valid: false, error: \"invalid_signature\" };\r\n    }\r\n\r\n    const isValidSig = crypto.timingSafeEqual(\r\n      new Uint8Array(sigBuffer),\r\n      new Uint8Array(expectedBuffer),\r\n    );\r\n\r\n    if (!isValidSig) {\r\n      return { valid: false, error: \"invalid_signature\" };\r\n    }\r\n\r\n    // Check file exists\r\n    const absolutePath = this.getAbsolutePath(payload.path);\r\n    if (!(await fileExistsAsync(absolutePath))) {\r\n      return { valid: false, error: \"file_not_found\" };\r\n    }\r\n\r\n    // Build successful result with convenience methods\r\n    const result: TemporaryTokenValidation = {\r\n      valid: true,\r\n      path: payload.path,\r\n      absolutePath,\r\n      expiresAt: new Date(payload.exp * 1000),\r\n      mimeType: this.guessMimeType(payload.path),\r\n      driver: this,\r\n      getFile: () => this.get(payload.path),\r\n      getStream: () => this.getStream(payload.path),\r\n    };\r\n\r\n    return result;\r\n  }\r\n\r\n  // ============================================================\r\n  // Metadata Operations\r\n  // ============================================================\r\n\r\n  /**\r\n   * Get file info/metadata without downloading\r\n   */\r\n  public async metadata(location: string): Promise<StorageFileInfo> {\r\n    if (this._metadata.has(location)) {\r\n      return this._metadata.get(location)!;\r\n    }\r\n\r\n    const absolutePath = this.getAbsolutePath(location);\r\n\r\n    if (!(await fileExistsAsync(absolutePath))) {\r\n      throw new Error(`File not found: ${absolutePath}`);\r\n    }\r\n\r\n    const stats = await stat(absolutePath);\r\n    const name = location.split(\"/\").pop() || \"\";\r\n\r\n    this._metadata.set(location, {\r\n      path: location,\r\n      name,\r\n      size: stats.size,\r\n      isDirectory: stats.isDirectory(),\r\n      lastModified: stats.mtime,\r\n      mimeType: this.guessMimeType(location),\r\n    });\r\n\r\n    return this._metadata.get(location)!;\r\n  }\r\n\r\n  /**\r\n   * Get file size in bytes (shortcut for metadata().size)\r\n   */\r\n  public async size(location: string): Promise<number> {\r\n    const metadata = await this.metadata(location);\r\n    return metadata.size;\r\n  }\r\n\r\n  // ============================================================\r\n  // File Operations\r\n  // ============================================================\r\n\r\n  /**\r\n   * Copy file to a new location\r\n   */\r\n  public async copy(from: string, to: string): Promise<StorageFileData> {\r\n    const fromPath = this.getAbsolutePath(from);\r\n    const toPath = this.getAbsolutePath(to);\r\n\r\n    if (!(await fileExistsAsync(fromPath))) {\r\n      throw new Error(`Source file not found: ${from}`);\r\n    }\r\n\r\n    await ensureDirectoryAsync(dirname(toPath));\r\n    await copyFile(fromPath, toPath);\r\n\r\n    const fileBuffer = await readFile(toPath);\r\n    const hash = this.calculateHash(fileBuffer);\r\n    const stats = await stat(toPath);\r\n\r\n    return {\r\n      path: to,\r\n      url: this.url(to),\r\n      size: stats.size,\r\n      hash,\r\n      mimeType: this.guessMimeType(to),\r\n      driver: this.name,\r\n    };\r\n  }\r\n\r\n  /**\r\n   * Move file to a new location\r\n   */\r\n  public async move(from: string, to: string): Promise<StorageFileData> {\r\n    const fromPath = this.getAbsolutePath(from);\r\n    const toPath = this.getAbsolutePath(to);\r\n\r\n    if (!(await fileExistsAsync(fromPath))) {\r\n      throw new Error(`Source file not found: ${from}`);\r\n    }\r\n\r\n    await ensureDirectoryAsync(dirname(toPath));\r\n    await rename(fromPath, toPath);\r\n\r\n    const fileBuffer = await readFile(toPath);\r\n    const hash = this.calculateHash(fileBuffer);\r\n    const stats = await stat(toPath);\r\n\r\n    return {\r\n      path: to,\r\n      url: this.url(to),\r\n      size: stats.size,\r\n      hash,\r\n      mimeType: this.guessMimeType(to),\r\n      driver: this.name,\r\n    };\r\n  }\r\n\r\n  /**\r\n   * List files in a directory\r\n   */\r\n  public async list(directory: string, options?: ListOptions): Promise<StorageFileInfo[]> {\r\n    const absolutePath = this.getAbsolutePath(directory);\r\n    const files: StorageFileInfo[] = [];\r\n\r\n    // A listing target is a DIRECTORY, so guard with `directoryExistsAsync`.\r\n    // `fileExistsAsync` resolves `false` for a folder, which would make `list`\r\n    // always return [] for a real, populated directory.\r\n    if (!(await directoryExistsAsync(absolutePath))) {\r\n      return files;\r\n    }\r\n\r\n    const entries = await readdir(absolutePath, { withFileTypes: true });\r\n\r\n    for (const entry of entries) {\r\n      const entryPath = join(directory, entry.name);\r\n      const entryStats = await stat(this.getAbsolutePath(entryPath));\r\n\r\n      files.push({\r\n        path: entryPath,\r\n        name: entry.name,\r\n        size: entryStats.size,\r\n        isDirectory: entry.isDirectory(),\r\n        lastModified: entryStats.mtime,\r\n        mimeType: entry.isFile() ? this.guessMimeType(entry.name) : undefined,\r\n      });\r\n\r\n      // Recursively list subdirectories if requested\r\n      if (options?.recursive && entry.isDirectory()) {\r\n        const subFiles = await this.list(entryPath, options);\r\n        files.push(...subFiles);\r\n      }\r\n\r\n      // Respect limit\r\n      if (options?.limit && files.length >= options.limit) {\r\n        break;\r\n      }\r\n    }\r\n\r\n    return files;\r\n  }\r\n\r\n  // ============================================================\r\n  // Path Operations\r\n  // ============================================================\r\n\r\n  /**\r\n   * Get absolute filesystem path for a location\r\n   */\r\n  public path(location: string): string {\r\n    return this.getAbsolutePath(location);\r\n  }\r\n\r\n  /**\r\n   * Get the storage root directory\r\n   */\r\n  public getRoot(): string {\r\n    return this.root;\r\n  }\r\n\r\n  // ============================================================\r\n  // Utilities\r\n  // ============================================================\r\n\r\n  /**\r\n   * Get absolute file path\r\n   */\r\n  protected getAbsolutePath(location: string): string {\r\n    const prefixedLocation = this.applyPrefix(location);\r\n    return join(this.root, prefixedLocation);\r\n  }\r\n\r\n  /**\r\n   * Convert various input types to Buffer\r\n   */\r\n  protected async toBuffer(file: Buffer | string | UploadedFile): Promise<Buffer> {\r\n    if (Buffer.isBuffer(file)) {\r\n      return file;\r\n    }\r\n\r\n    if (typeof file === \"string\") {\r\n      return readFile(file);\r\n    }\r\n\r\n    return file.buffer();\r\n  }\r\n\r\n  /**\r\n   * Calculate SHA-256 hash\r\n   */\r\n  protected calculateHash(buffer: Buffer): string {\r\n    return crypto.createHash(\"sha256\").update(new Uint8Array(buffer)).digest(\"hex\");\r\n  }\r\n\r\n  /**\r\n   * Guess MIME type from file extension\r\n   */\r\n  protected guessMimeType(location: string): string {\r\n    return getMimeType(location);\r\n  }\r\n}\r\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAyCA,IAAa,cAAb,MAA0D;CA+BxD,AAAO,YAAY,AAAO,UAAqC,CAAC,GAAG;EAAzC;cA3BgB;mBAUZ;mCAeR,IAAI,IAA6B;EAGrD,KAAK,OAAO,QAAQ,QAAQ,YAAY;EACxC,KAAK,YAAY,QAAQ,aAAa;EACtC,KAAK,qBAAqB,QAAQ,sBAAsB;EACxD,KAAK,eAAe,QAAQ;CAC9B;;;;;;;;;;CAeA,AAAO,YAAY,UAA0B;EAG3C,MAAM,SADgB,qBAAqB,UAChB,KAAK,KAAK,QAAQ;EAE7C,IAAI,CAAC,QACH,OAAO;EAGT,MAAM,cAAc,OAAO,QAAQ,QAAQ,EAAE;EAC7C,MAAM,gBAAgB,SAAS,QAAQ,QAAQ,EAAE;EAGjD,IAAI,cAAc,WAAW,cAAc,GAAG,KAAK,kBAAkB,aACnE,OAAO;EAGT,OAAO,GAAG,YAAY,GAAG;CAC3B;;;;CASA,MAAa,IACX,MACA,UACA,SAC0B;EAC1B,MAAM,eAAe,KAAK,gBAAgB,QAAQ;EAElD,MAAM,qBAAqB,QAAQ,YAAY,CAAC;EAEhD,MAAM,aAAa,MAAM,KAAK,SAAS,IAAI;EAC3C,MAAM,OAAO,KAAK,cAAc,UAAU;EAE1C,MAAM,UAAU,cAAc,IAAI,WAAW,UAAU,CAAC;EAExD,MAAM,QAAQ,MAAM,KAAK,YAAY;EACrC,MAAM,WAAW,SAAS,YAAY,KAAK,cAAc,QAAQ;EAEjE,OAAO;GACL,MAAM;GACN,KAAK,KAAK,IAAI,QAAQ;GACtB,MAAM,MAAM;GACZ;GACA;GACA,QAAQ,KAAK;EACf;CACF;;;;CAKA,MAAa,UACX,QACA,UACA,SAC0B;EAC1B,MAAM,eAAe,KAAK,gBAAgB,QAAQ;EAElD,MAAM,qBAAqB,QAAQ,YAAY,CAAC;EAIhD,MAAM,SAAS,QADK,kBAAkB,YACL,CAAC;EAGlC,MAAM,aAAa,MAAM,SAAS,YAAY;EAC9C,MAAM,OAAO,KAAK,cAAc,UAAU;EAC1C,MAAM,QAAQ,MAAM,KAAK,YAAY;EACrC,MAAM,WAAW,SAAS,YAAY,KAAK,cAAc,QAAQ;EAEjE,OAAO;GACL,MAAM;GACN,KAAK,KAAK,IAAI,QAAQ;GACtB,MAAM,MAAM;GACZ;GACA;GACA,QAAQ,KAAK;EACf;CACF;;;;CAKA,MAAa,IAAI,UAAmC;EAClD,MAAM,eAAe,KAAK,gBAAgB,QAAQ;EAElD,IAAI,CAAE,MAAM,gBAAgB,YAAY,GACtC,MAAM,IAAI,MAAM,mBAAmB,UAAU;EAG/C,OAAO,SAAS,YAAY;CAC9B;;;;CAKA,MAAa,UAAU,UAAqC;EAC1D,MAAM,eAAe,KAAK,gBAAgB,QAAQ;EAElD,IAAI,CAAE,MAAM,gBAAgB,YAAY,GACtC,MAAM,IAAI,MAAM,mBAAmB,UAAU;EAG/C,OAAO,iBAAiB,YAAY;CACtC;;;;CAKA,MAAa,OAAO,UAAoC;EACtD,MAAM,eAAe,KAAK,gBAAgB,QAAQ;EAElD,IAAI,CAAE,MAAM,gBAAgB,YAAY,GACtC,OAAO;EAGT,MAAM,YAAY,YAAY;EAC9B,OAAO;CACT;;;;CAKA,MAAa,WAAW,WAAkD;EACxE,MAAM,UAA8B,CAAC;EAErC,KAAK,MAAM,YAAY,WACrB,IAAI;GACF,MAAM,UAAU,MAAM,KAAK,OAAO,QAAQ;GAC1C,QAAQ,KAAK;IAAE;IAAU;GAAQ,CAAC;EACpC,SAAS,OAAO;GACd,QAAQ,KAAK;IACX;IACA,SAAS;IACT,OAAO,iBAAiB,QAAQ,MAAM,UAAU;GAClD,CAAC;EACH;EAGF,OAAO;CACT;;;;CAKA,MAAa,gBAAgB,eAAuB;EAClD,MAAM,qBAAqB,aAAa;EAExC,OAAO;CACT;;;;CAKA,MAAa,OAAO,UAAoC;EACtD,MAAM,eAAe,KAAK,gBAAgB,QAAQ;EAClD,OAAO,QAAQ,MAAM,gBAAgB,YAAY,CAAC;CACpD;;;;CASA,AAAO,IAAI,UAA0B;EACnC,OAAO,IAAI,KAAK,YAAY,MAAM,MAAM,UAAU,GAAG,CAAC;CACxD;;;;;;;;CASA,MAAa,aAAa,UAAkB,YAAY,MAAuB;EAC7E,IAAI,CAAC,KAAK,cACR,MAAM,IAAI,MACR,4HAEF;EAGF,MAAM,QAAQ,KAAK,qBAAqB,UAAU,SAAS;EAC3D,OAAO,GAAG,KAAK,mBAAmB,GAAG;CACvC;;;;;;;CAQA,AAAO,qBAAqB,UAAkB,WAA2B;EACvE,IAAI,CAAC,KAAK,cACR,MAAM,IAAI,MAAM,yCAAyC;EAG3D,MAAM,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,IAAI;EAM5C,MAAM,UAAiC;GAAE,MAAM;GAAU;GAAK,KALlD,OACT,WAAW,UAAU,KAAK,YAAY,CAAC,CACvC,OAAO,GAAG,SAAS,GAAG,KAAK,CAAC,CAC5B,OAAO,KAEsD;EAAE;EAClE,MAAM,OAAO,KAAK,UAAU,OAAO;EAGnC,OAAO,OAAO,KAAK,IAAI,CAAC,CAAC,SAAS,WAAW;CAC/C;;;;;;;CAQA,MAAa,uBAAuB,OAAkD;EAEpF,IAAI,CAAC,KAAK,cACR,OAAO;GAAE,OAAO;GAAO,OAAO;EAAc;EAI9C,IAAI;EACJ,IAAI;GACF,MAAM,OAAO,OAAO,KAAK,OAAO,WAAW,CAAC,CAAC,SAAS,OAAO;GAC7D,UAAU,KAAK,MAAM,IAAI;EAC3B,QAAQ;GACN,OAAO;IAAE,OAAO;IAAO,OAAO;GAAgB;EAChD;EAGA,IAAI,CAAC,QAAQ,QAAQ,CAAC,QAAQ,OAAO,CAAC,QAAQ,KAC5C,OAAO;GAAE,OAAO;GAAO,OAAO;EAAgB;EAIhD,MAAM,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;EACxC,IAAI,QAAQ,MAAM,KAChB,OAAO;GAAE,OAAO;GAAO,OAAO;EAAU;EAI1C,MAAM,cAAc,OACjB,WAAW,UAAU,KAAK,YAAY,CAAC,CACvC,OAAO,GAAG,QAAQ,KAAK,GAAG,QAAQ,KAAK,CAAC,CACxC,OAAO,KAAK;EAEf,MAAM,YAAY,OAAO,KAAK,QAAQ,KAAK,KAAK;EAChD,MAAM,iBAAiB,OAAO,KAAK,aAAa,KAAK;EAErD,IAAI,UAAU,WAAW,eAAe,QACtC,OAAO;GAAE,OAAO;GAAO,OAAO;EAAoB;EAQpD,IAAI,CALe,OAAO,gBACxB,IAAI,WAAW,SAAS,GACxB,IAAI,WAAW,cAAc,CAGjB,GACZ,OAAO;GAAE,OAAO;GAAO,OAAO;EAAoB;EAIpD,MAAM,eAAe,KAAK,gBAAgB,QAAQ,IAAI;EACtD,IAAI,CAAE,MAAM,gBAAgB,YAAY,GACtC,OAAO;GAAE,OAAO;GAAO,OAAO;EAAiB;EAejD,OAAO;GAVL,OAAO;GACP,MAAM,QAAQ;GACd;GACA,2BAAW,IAAI,KAAK,QAAQ,MAAM,GAAI;GACtC,UAAU,KAAK,cAAc,QAAQ,IAAI;GACzC,QAAQ;GACR,eAAe,KAAK,IAAI,QAAQ,IAAI;GACpC,iBAAiB,KAAK,UAAU,QAAQ,IAAI;EAGlC;CACd;;;;CASA,MAAa,SAAS,UAA4C;EAChE,IAAI,KAAK,UAAU,IAAI,QAAQ,GAC7B,OAAO,KAAK,UAAU,IAAI,QAAQ;EAGpC,MAAM,eAAe,KAAK,gBAAgB,QAAQ;EAElD,IAAI,CAAE,MAAM,gBAAgB,YAAY,GACtC,MAAM,IAAI,MAAM,mBAAmB,cAAc;EAGnD,MAAM,QAAQ,MAAM,KAAK,YAAY;EACrC,MAAM,OAAO,SAAS,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK;EAE1C,KAAK,UAAU,IAAI,UAAU;GAC3B,MAAM;GACN;GACA,MAAM,MAAM;GACZ,aAAa,MAAM,YAAY;GAC/B,cAAc,MAAM;GACpB,UAAU,KAAK,cAAc,QAAQ;EACvC,CAAC;EAED,OAAO,KAAK,UAAU,IAAI,QAAQ;CACpC;;;;CAKA,MAAa,KAAK,UAAmC;EAEnD,QAAO,MADgB,KAAK,SAAS,QAAQ,EAC9B,CAAC;CAClB;;;;CASA,MAAa,KAAK,MAAc,IAAsC;EACpE,MAAM,WAAW,KAAK,gBAAgB,IAAI;EAC1C,MAAM,SAAS,KAAK,gBAAgB,EAAE;EAEtC,IAAI,CAAE,MAAM,gBAAgB,QAAQ,GAClC,MAAM,IAAI,MAAM,0BAA0B,MAAM;EAGlD,MAAM,qBAAqB,QAAQ,MAAM,CAAC;EAC1C,MAAM,SAAS,UAAU,MAAM;EAE/B,MAAM,aAAa,MAAM,SAAS,MAAM;EACxC,MAAM,OAAO,KAAK,cAAc,UAAU;EAC1C,MAAM,QAAQ,MAAM,KAAK,MAAM;EAE/B,OAAO;GACL,MAAM;GACN,KAAK,KAAK,IAAI,EAAE;GAChB,MAAM,MAAM;GACZ;GACA,UAAU,KAAK,cAAc,EAAE;GAC/B,QAAQ,KAAK;EACf;CACF;;;;CAKA,MAAa,KAAK,MAAc,IAAsC;EACpE,MAAM,WAAW,KAAK,gBAAgB,IAAI;EAC1C,MAAM,SAAS,KAAK,gBAAgB,EAAE;EAEtC,IAAI,CAAE,MAAM,gBAAgB,QAAQ,GAClC,MAAM,IAAI,MAAM,0BAA0B,MAAM;EAGlD,MAAM,qBAAqB,QAAQ,MAAM,CAAC;EAC1C,MAAM,OAAO,UAAU,MAAM;EAE7B,MAAM,aAAa,MAAM,SAAS,MAAM;EACxC,MAAM,OAAO,KAAK,cAAc,UAAU;EAC1C,MAAM,QAAQ,MAAM,KAAK,MAAM;EAE/B,OAAO;GACL,MAAM;GACN,KAAK,KAAK,IAAI,EAAE;GAChB,MAAM,MAAM;GACZ;GACA,UAAU,KAAK,cAAc,EAAE;GAC/B,QAAQ,KAAK;EACf;CACF;;;;CAKA,MAAa,KAAK,WAAmB,SAAmD;EACtF,MAAM,eAAe,KAAK,gBAAgB,SAAS;EACnD,MAAM,QAA2B,CAAC;EAKlC,IAAI,CAAE,MAAM,qBAAqB,YAAY,GAC3C,OAAO;EAGT,MAAM,UAAU,MAAM,QAAQ,cAAc,EAAE,eAAe,KAAK,CAAC;EAEnE,KAAK,MAAM,SAAS,SAAS;GAC3B,MAAM,YAAY,KAAK,WAAW,MAAM,IAAI;GAC5C,MAAM,aAAa,MAAM,KAAK,KAAK,gBAAgB,SAAS,CAAC;GAE7D,MAAM,KAAK;IACT,MAAM;IACN,MAAM,MAAM;IACZ,MAAM,WAAW;IACjB,aAAa,MAAM,YAAY;IAC/B,cAAc,WAAW;IACzB,UAAU,MAAM,OAAO,IAAI,KAAK,cAAc,MAAM,IAAI,IAAI;GAC9D,CAAC;GAGD,IAAI,SAAS,aAAa,MAAM,YAAY,GAAG;IAC7C,MAAM,WAAW,MAAM,KAAK,KAAK,WAAW,OAAO;IACnD,MAAM,KAAK,GAAG,QAAQ;GACxB;GAGA,IAAI,SAAS,SAAS,MAAM,UAAU,QAAQ,OAC5C;EAEJ;EAEA,OAAO;CACT;;;;CASA,AAAO,KAAK,UAA0B;EACpC,OAAO,KAAK,gBAAgB,QAAQ;CACtC;;;;CAKA,AAAO,UAAkB;EACvB,OAAO,KAAK;CACd;;;;CASA,AAAU,gBAAgB,UAA0B;EAClD,MAAM,mBAAmB,KAAK,YAAY,QAAQ;EAClD,OAAO,KAAK,KAAK,MAAM,gBAAgB;CACzC;;;;CAKA,MAAgB,SAAS,MAAuD;EAC9E,IAAI,OAAO,SAAS,IAAI,GACtB,OAAO;EAGT,IAAI,OAAO,SAAS,UAClB,OAAO,SAAS,IAAI;EAGtB,OAAO,KAAK,OAAO;CACrB;;;;CAKA,AAAU,cAAc,QAAwB;EAC9C,OAAO,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,IAAI,WAAW,MAAM,CAAC,CAAC,CAAC,OAAO,KAAK;CAChF;;;;CAKA,AAAU,cAAc,UAA0B;EAChD,OAAO,YAAY,QAAQ;CAC7B;AACF"}
+{"version":3,"file":"local-driver.mjs","names":[],"sources":["../../../../../../../../@warlock.js/core/src/storage/drivers/local-driver.ts"],"sourcesContent":["import {\n  directoryExistsAsync,\n  ensureDirectoryAsync,\n  fileExistsAsync,\n  removeDirectoryAsync,\n  unlinkAsync,\n} from \"@warlock.js/fs\";\nimport { ltrim } from \"@mongez/reinforcements\";\nimport crypto from \"crypto\";\nimport { createReadStream, createWriteStream } from \"fs\";\nimport { copyFile, readFile, readdir, rename, stat, writeFile } from \"fs/promises\";\nimport { dirname, join, resolve } from \"path\";\nimport type { Readable } from \"stream\";\nimport { pipeline } from \"stream/promises\";\nimport { UploadedFile } from \"../../http\";\nimport { storagePath } from \"../../utils/paths\";\nimport { url } from \"../../utils/urls\";\nimport { storageDriverContext } from \"../context/storage-driver-context\";\nimport { resolveWithinRoot } from \"../utils/contain-path\";\nimport type {\n  DeleteManyResult,\n  ListOptions,\n  LocalStorageDriverOptions,\n  PutOptions,\n  StorageDriverContract,\n  StorageDriverType,\n  StorageFileData,\n  StorageFileInfo,\n  TemporaryTokenPayload,\n  TemporaryTokenValidation,\n} from \"../types\";\nimport { getMimeType } from \"../utils/mime\";\n\n/**\n * Local filesystem storage driver\n *\n * Stores files on the local filesystem with support for:\n * - File operations (put, get, delete, copy, move)\n * - Stream operations for large files\n * - Batch operations\n * - Signed temporary URLs\n */\nexport class LocalDriver implements StorageDriverContract {\n  /**\n   * Driver name\n   */\n  public readonly name: StorageDriverType = \"local\";\n\n  /**\n   * Root path for storage\n   */\n  protected root: string;\n\n  /**\n   * URL prefix for file URLs\n   */\n  protected urlPrefix: string = \"\";\n\n  /**\n   * URL prefix for temporary file URLs\n   */\n  protected temporaryUrlPrefix: string;\n\n  /**\n   * Secret key for signing temporary URLs\n   */\n  protected signatureKey?: string;\n\n  /**\n   * Cached Storage File Metadata\n   */\n  protected _metadata = new Map<string, StorageFileInfo>();\n\n  public constructor(public options: LocalStorageDriverOptions = {}) {\n    // Resolve the root to an absolute, normalized path up front so the\n    // path-traversal containment check (resolveWithinRoot) has a stable\n    // anchor to compare resolved locations against.\n    this.root = resolve(options.root ?? storagePath());\n    this.urlPrefix = options.urlPrefix ?? \"\";\n    this.temporaryUrlPrefix = options.temporaryUrlPrefix ?? \"/temp-files\";\n    this.signatureKey = options.signatureKey;\n  }\n\n  // ============================================================\n  // Prefix Operations\n  // ============================================================\n\n  /**\n   * Apply prefix to location path\n   *\n   * Priority: context prefix > driver options prefix > no prefix\n   * This allows multi-tenant scenarios where context overrides driver config.\n   *\n   * @param location - Original location path\n   * @returns Location with prefix applied if one exists\n   */\n  public applyPrefix(location: string): string {\n    // Check context prefix first (highest priority)\n    const contextPrefix = storageDriverContext.getPrefix();\n    const prefix = contextPrefix || this.options.prefix;\n\n    if (!prefix) {\n      return location;\n    }\n\n    const cleanPrefix = prefix.replace(/\\/+$/, \"\");\n    const cleanLocation = location.replace(/^\\/+/, \"\");\n\n    // Avoid double-prefixing\n    if (cleanLocation.startsWith(cleanPrefix + \"/\") || cleanLocation === cleanPrefix) {\n      return cleanLocation;\n    }\n\n    return `${cleanPrefix}/${cleanLocation}`;\n  }\n\n  // ============================================================\n  // Core File Operations\n  // ============================================================\n\n  /**\n   * Put file to local storage\n   */\n  public async put(\n    file: Buffer | string | UploadedFile,\n    location: string,\n    options?: PutOptions,\n  ): Promise<StorageFileData> {\n    const absolutePath = this.getAbsolutePath(location);\n\n    await ensureDirectoryAsync(dirname(absolutePath));\n\n    const fileBuffer = await this.toBuffer(file);\n    const hash = this.calculateHash(fileBuffer);\n\n    await writeFile(absolutePath, new Uint8Array(fileBuffer));\n\n    // Invalidate any stale cached metadata for this location.\n    this._metadata.delete(location);\n\n    const stats = await stat(absolutePath);\n    const mimeType = options?.mimeType || this.guessMimeType(location);\n\n    return {\n      path: location,\n      url: this.url(location),\n      size: stats.size,\n      hash,\n      mimeType,\n      driver: this.name,\n    };\n  }\n\n  /**\n   * Put file from a readable stream (for large files)\n   */\n  public async putStream(\n    stream: Readable,\n    location: string,\n    options?: PutOptions,\n  ): Promise<StorageFileData> {\n    const absolutePath = this.getAbsolutePath(location);\n\n    await ensureDirectoryAsync(dirname(absolutePath));\n\n    // Create write stream and pipe\n    const writeStream = createWriteStream(absolutePath);\n    await pipeline(stream, writeStream);\n\n    // Invalidate any stale cached metadata for this location.\n    this._metadata.delete(location);\n\n    // Calculate hash and get stats\n    const fileBuffer = await readFile(absolutePath);\n    const hash = this.calculateHash(fileBuffer);\n    const stats = await stat(absolutePath);\n    const mimeType = options?.mimeType || this.guessMimeType(location);\n\n    return {\n      path: location,\n      url: this.url(location),\n      size: stats.size,\n      hash,\n      mimeType,\n      driver: this.name,\n    };\n  }\n\n  /**\n   * Get file contents as Buffer\n   */\n  public async get(location: string): Promise<Buffer> {\n    const absolutePath = this.getAbsolutePath(location);\n\n    if (!(await fileExistsAsync(absolutePath))) {\n      throw new Error(`File not found: ${location}`);\n    }\n\n    return readFile(absolutePath);\n  }\n\n  /**\n   * Get file as a readable stream (for large files)\n   */\n  public async getStream(location: string): Promise<Readable> {\n    const absolutePath = this.getAbsolutePath(location);\n\n    if (!(await fileExistsAsync(absolutePath))) {\n      throw new Error(`File not found: ${location}`);\n    }\n\n    return createReadStream(absolutePath);\n  }\n\n  /**\n   * Delete a file\n   */\n  public async delete(location: string): Promise<boolean> {\n    const absolutePath = this.getAbsolutePath(location);\n\n    if (!(await fileExistsAsync(absolutePath))) {\n      return false;\n    }\n\n    await unlinkAsync(absolutePath);\n\n    // Invalidate any stale cached metadata for this location.\n    this._metadata.delete(location);\n\n    return true;\n  }\n\n  /**\n   * Delete multiple files at once\n   */\n  public async deleteMany(locations: string[]): Promise<DeleteManyResult[]> {\n    const results: DeleteManyResult[] = [];\n\n    for (const location of locations) {\n      try {\n        const deleted = await this.delete(location);\n        results.push({ location, deleted });\n      } catch (error) {\n        results.push({\n          location,\n          deleted: false,\n          error: error instanceof Error ? error.message : \"Unknown error\",\n        });\n      }\n    }\n\n    return results;\n  }\n\n  /**\n   * Delete directory\n   *\n   * The directory path is resolved through {@link getAbsolutePath} so it is\n   * contained within the storage root — the raw, caller-supplied argument is\n   * never handed to the filesystem (preventing `../` traversal deletes).\n   */\n  public async deleteDirectory(directoryPath: string) {\n    const absolutePath = this.getAbsolutePath(directoryPath);\n\n    await removeDirectoryAsync(absolutePath);\n\n    return true;\n  }\n\n  /**\n   * Check if file exists\n   */\n  public async exists(location: string): Promise<boolean> {\n    const absolutePath = this.getAbsolutePath(location);\n    return Boolean(await fileExistsAsync(absolutePath));\n  }\n\n  // ============================================================\n  // URL Operations\n  // ============================================================\n\n  /**\n   * Get public URL for file\n   */\n  public url(location: string): string {\n    return url(this.urlPrefix + \"/\" + ltrim(location, \"/\"));\n  }\n\n  /**\n   * Get a temporary signed URL that expires\n   * Returns a clean URL with encoded token: {temporaryUrlPrefix}/{token}\n   *\n   * @param location - File path\n   * @param expiresIn - Seconds until expiration (default: 3600)\n   */\n  public async temporaryUrl(location: string, expiresIn = 3600): Promise<string> {\n    if (!this.signatureKey) {\n      throw new Error(\n        \"Temporary URLs require a signatureKey in LocalDriver options. \" +\n          \"Configure storage.drivers.local.signatureKey in your config.\",\n      );\n    }\n\n    const token = this.encodeTemporaryToken(location, expiresIn);\n    return `${this.temporaryUrlPrefix}/${token}`;\n  }\n\n  /**\n   * Encode a temporary token containing path, expiry, and signature\n   *\n   * @param location - File path\n   * @param expiresIn - Seconds until expiration\n   */\n  public encodeTemporaryToken(location: string, expiresIn: number): string {\n    if (!this.signatureKey) {\n      throw new Error(\"Temporary tokens require a signatureKey\");\n    }\n\n    const exp = Math.floor(Date.now() / 1000) + expiresIn;\n    const sig = crypto\n      .createHmac(\"sha256\", this.signatureKey)\n      .update(`${location}:${exp}`)\n      .digest(\"hex\");\n\n    const payload: TemporaryTokenPayload = { path: location, exp, sig };\n    const json = JSON.stringify(payload);\n\n    // Use base64url encoding (URL-safe base64)\n    return Buffer.from(json).toString(\"base64url\");\n  }\n\n  /**\n   * Validate a temporary URL token\n   * Returns a result object with validation status, file info, and convenience methods\n   *\n   * @param token - The token from the URL\n   */\n  public async validateTemporaryToken(token: string): Promise<TemporaryTokenValidation> {\n    // Check signature key\n    if (!this.signatureKey) {\n      return { valid: false, error: \"missing_key\" };\n    }\n\n    // Decode token\n    let payload: TemporaryTokenPayload;\n    try {\n      const json = Buffer.from(token, \"base64url\").toString(\"utf-8\");\n      payload = JSON.parse(json);\n    } catch {\n      return { valid: false, error: \"invalid_token\" };\n    }\n\n    // Validate payload structure\n    if (!payload.path || !payload.exp || !payload.sig) {\n      return { valid: false, error: \"invalid_token\" };\n    }\n\n    // Check expiration\n    const now = Math.floor(Date.now() / 1000);\n    if (payload.exp < now) {\n      return { valid: false, error: \"expired\" };\n    }\n\n    // Verify signature\n    const expectedSig = crypto\n      .createHmac(\"sha256\", this.signatureKey)\n      .update(`${payload.path}:${payload.exp}`)\n      .digest(\"hex\");\n\n    const sigBuffer = Buffer.from(payload.sig, \"hex\");\n    const expectedBuffer = Buffer.from(expectedSig, \"hex\");\n\n    if (sigBuffer.length !== expectedBuffer.length) {\n      return { valid: false, error: \"invalid_signature\" };\n    }\n\n    const isValidSig = crypto.timingSafeEqual(\n      new Uint8Array(sigBuffer),\n      new Uint8Array(expectedBuffer),\n    );\n\n    if (!isValidSig) {\n      return { valid: false, error: \"invalid_signature\" };\n    }\n\n    // Check file exists\n    const absolutePath = this.getAbsolutePath(payload.path);\n    if (!(await fileExistsAsync(absolutePath))) {\n      return { valid: false, error: \"file_not_found\" };\n    }\n\n    // Build successful result with convenience methods\n    const result: TemporaryTokenValidation = {\n      valid: true,\n      path: payload.path,\n      absolutePath,\n      expiresAt: new Date(payload.exp * 1000),\n      mimeType: this.guessMimeType(payload.path),\n      driver: this,\n      getFile: () => this.get(payload.path),\n      getStream: () => this.getStream(payload.path),\n    };\n\n    return result;\n  }\n\n  // ============================================================\n  // Metadata Operations\n  // ============================================================\n\n  /**\n   * Get file info/metadata without downloading\n   */\n  public async metadata(location: string): Promise<StorageFileInfo> {\n    if (this._metadata.has(location)) {\n      return this._metadata.get(location)!;\n    }\n\n    const absolutePath = this.getAbsolutePath(location);\n\n    if (!(await fileExistsAsync(absolutePath))) {\n      throw new Error(`File not found: ${absolutePath}`);\n    }\n\n    const stats = await stat(absolutePath);\n    const name = location.split(\"/\").pop() || \"\";\n\n    this._metadata.set(location, {\n      path: location,\n      name,\n      size: stats.size,\n      isDirectory: stats.isDirectory(),\n      lastModified: stats.mtime,\n      mimeType: this.guessMimeType(location),\n    });\n\n    return this._metadata.get(location)!;\n  }\n\n  /**\n   * Get file size in bytes (shortcut for metadata().size)\n   */\n  public async size(location: string): Promise<number> {\n    const metadata = await this.metadata(location);\n    return metadata.size;\n  }\n\n  // ============================================================\n  // File Operations\n  // ============================================================\n\n  /**\n   * Copy file to a new location\n   */\n  public async copy(from: string, to: string): Promise<StorageFileData> {\n    const fromPath = this.getAbsolutePath(from);\n    const toPath = this.getAbsolutePath(to);\n\n    if (!(await fileExistsAsync(fromPath))) {\n      throw new Error(`Source file not found: ${from}`);\n    }\n\n    await ensureDirectoryAsync(dirname(toPath));\n    await copyFile(fromPath, toPath);\n\n    // Invalidate any stale cached metadata for the destination.\n    this._metadata.delete(to);\n\n    const fileBuffer = await readFile(toPath);\n    const hash = this.calculateHash(fileBuffer);\n    const stats = await stat(toPath);\n\n    return {\n      path: to,\n      url: this.url(to),\n      size: stats.size,\n      hash,\n      mimeType: this.guessMimeType(to),\n      driver: this.name,\n    };\n  }\n\n  /**\n   * Move file to a new location\n   */\n  public async move(from: string, to: string): Promise<StorageFileData> {\n    const fromPath = this.getAbsolutePath(from);\n    const toPath = this.getAbsolutePath(to);\n\n    if (!(await fileExistsAsync(fromPath))) {\n      throw new Error(`Source file not found: ${from}`);\n    }\n\n    await ensureDirectoryAsync(dirname(toPath));\n    await rename(fromPath, toPath);\n\n    // Invalidate any stale cached metadata for both source and destination.\n    this._metadata.delete(from);\n    this._metadata.delete(to);\n\n    const fileBuffer = await readFile(toPath);\n    const hash = this.calculateHash(fileBuffer);\n    const stats = await stat(toPath);\n\n    return {\n      path: to,\n      url: this.url(to),\n      size: stats.size,\n      hash,\n      mimeType: this.guessMimeType(to),\n      driver: this.name,\n    };\n  }\n\n  /**\n   * List files in a directory\n   */\n  public async list(directory: string, options?: ListOptions): Promise<StorageFileInfo[]> {\n    const absolutePath = this.getAbsolutePath(directory);\n    const files: StorageFileInfo[] = [];\n\n    // A listing target is a DIRECTORY, so guard with `directoryExistsAsync`.\n    // `fileExistsAsync` resolves `false` for a folder, which would make `list`\n    // always return [] for a real, populated directory.\n    if (!(await directoryExistsAsync(absolutePath))) {\n      return files;\n    }\n\n    const entries = await readdir(absolutePath, { withFileTypes: true });\n\n    for (const entry of entries) {\n      const entryPath = join(directory, entry.name);\n      const entryStats = await stat(this.getAbsolutePath(entryPath));\n\n      files.push({\n        path: entryPath,\n        name: entry.name,\n        size: entryStats.size,\n        isDirectory: entry.isDirectory(),\n        lastModified: entryStats.mtime,\n        mimeType: entry.isFile() ? this.guessMimeType(entry.name) : undefined,\n      });\n\n      // Recursively list subdirectories if requested\n      if (options?.recursive && entry.isDirectory()) {\n        const subFiles = await this.list(entryPath, options);\n        files.push(...subFiles);\n      }\n\n      // Respect limit\n      if (options?.limit && files.length >= options.limit) {\n        break;\n      }\n    }\n\n    return files;\n  }\n\n  // ============================================================\n  // Path Operations\n  // ============================================================\n\n  /**\n   * Get absolute filesystem path for a location\n   */\n  public path(location: string): string {\n    return this.getAbsolutePath(location);\n  }\n\n  /**\n   * Get the storage root directory\n   */\n  public getRoot(): string {\n    return this.root;\n  }\n\n  // ============================================================\n  // Utilities\n  // ============================================================\n\n  /**\n   * Get absolute file path\n   *\n   * Routes through {@link resolveWithinRoot} so a location can never escape\n   * the configured storage root via `..` traversal, an absolute path, or a\n   * prefix breakout.\n   */\n  protected getAbsolutePath(location: string): string {\n    const prefixedLocation = this.applyPrefix(location);\n    return resolveWithinRoot(this.root, prefixedLocation);\n  }\n\n  /**\n   * Convert various input types to Buffer\n   */\n  protected async toBuffer(file: Buffer | string | UploadedFile): Promise<Buffer> {\n    if (Buffer.isBuffer(file)) {\n      return file;\n    }\n\n    if (typeof file === \"string\") {\n      return readFile(file);\n    }\n\n    return file.buffer();\n  }\n\n  /**\n   * Calculate SHA-256 hash\n   */\n  protected calculateHash(buffer: Buffer): string {\n    return crypto.createHash(\"sha256\").update(new Uint8Array(buffer)).digest(\"hex\");\n  }\n\n  /**\n   * Guess MIME type from file extension\n   */\n  protected guessMimeType(location: string): string {\n    return getMimeType(location);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AA0CA,IAAa,cAAb,MAA0D;CA+BxD,AAAO,YAAY,AAAO,UAAqC,CAAC,GAAG;EAAzC;cA3BgB;mBAUZ;mCAeR,IAAI,IAA6B;EAMrD,KAAK,OAAO,QAAQ,QAAQ,QAAQ,YAAY,CAAC;EACjD,KAAK,YAAY,QAAQ,aAAa;EACtC,KAAK,qBAAqB,QAAQ,sBAAsB;EACxD,KAAK,eAAe,QAAQ;CAC9B;;;;;;;;;;CAeA,AAAO,YAAY,UAA0B;EAG3C,MAAM,SADgB,qBAAqB,UAChB,KAAK,KAAK,QAAQ;EAE7C,IAAI,CAAC,QACH,OAAO;EAGT,MAAM,cAAc,OAAO,QAAQ,QAAQ,EAAE;EAC7C,MAAM,gBAAgB,SAAS,QAAQ,QAAQ,EAAE;EAGjD,IAAI,cAAc,WAAW,cAAc,GAAG,KAAK,kBAAkB,aACnE,OAAO;EAGT,OAAO,GAAG,YAAY,GAAG;CAC3B;;;;CASA,MAAa,IACX,MACA,UACA,SAC0B;EAC1B,MAAM,eAAe,KAAK,gBAAgB,QAAQ;EAElD,MAAM,qBAAqB,QAAQ,YAAY,CAAC;EAEhD,MAAM,aAAa,MAAM,KAAK,SAAS,IAAI;EAC3C,MAAM,OAAO,KAAK,cAAc,UAAU;EAE1C,MAAM,UAAU,cAAc,IAAI,WAAW,UAAU,CAAC;EAGxD,KAAK,UAAU,OAAO,QAAQ;EAE9B,MAAM,QAAQ,MAAM,KAAK,YAAY;EACrC,MAAM,WAAW,SAAS,YAAY,KAAK,cAAc,QAAQ;EAEjE,OAAO;GACL,MAAM;GACN,KAAK,KAAK,IAAI,QAAQ;GACtB,MAAM,MAAM;GACZ;GACA;GACA,QAAQ,KAAK;EACf;CACF;;;;CAKA,MAAa,UACX,QACA,UACA,SAC0B;EAC1B,MAAM,eAAe,KAAK,gBAAgB,QAAQ;EAElD,MAAM,qBAAqB,QAAQ,YAAY,CAAC;EAIhD,MAAM,SAAS,QADK,kBAAkB,YACL,CAAC;EAGlC,KAAK,UAAU,OAAO,QAAQ;EAG9B,MAAM,aAAa,MAAM,SAAS,YAAY;EAC9C,MAAM,OAAO,KAAK,cAAc,UAAU;EAC1C,MAAM,QAAQ,MAAM,KAAK,YAAY;EACrC,MAAM,WAAW,SAAS,YAAY,KAAK,cAAc,QAAQ;EAEjE,OAAO;GACL,MAAM;GACN,KAAK,KAAK,IAAI,QAAQ;GACtB,MAAM,MAAM;GACZ;GACA;GACA,QAAQ,KAAK;EACf;CACF;;;;CAKA,MAAa,IAAI,UAAmC;EAClD,MAAM,eAAe,KAAK,gBAAgB,QAAQ;EAElD,IAAI,CAAE,MAAM,gBAAgB,YAAY,GACtC,MAAM,IAAI,MAAM,mBAAmB,UAAU;EAG/C,OAAO,SAAS,YAAY;CAC9B;;;;CAKA,MAAa,UAAU,UAAqC;EAC1D,MAAM,eAAe,KAAK,gBAAgB,QAAQ;EAElD,IAAI,CAAE,MAAM,gBAAgB,YAAY,GACtC,MAAM,IAAI,MAAM,mBAAmB,UAAU;EAG/C,OAAO,iBAAiB,YAAY;CACtC;;;;CAKA,MAAa,OAAO,UAAoC;EACtD,MAAM,eAAe,KAAK,gBAAgB,QAAQ;EAElD,IAAI,CAAE,MAAM,gBAAgB,YAAY,GACtC,OAAO;EAGT,MAAM,YAAY,YAAY;EAG9B,KAAK,UAAU,OAAO,QAAQ;EAE9B,OAAO;CACT;;;;CAKA,MAAa,WAAW,WAAkD;EACxE,MAAM,UAA8B,CAAC;EAErC,KAAK,MAAM,YAAY,WACrB,IAAI;GACF,MAAM,UAAU,MAAM,KAAK,OAAO,QAAQ;GAC1C,QAAQ,KAAK;IAAE;IAAU;GAAQ,CAAC;EACpC,SAAS,OAAO;GACd,QAAQ,KAAK;IACX;IACA,SAAS;IACT,OAAO,iBAAiB,QAAQ,MAAM,UAAU;GAClD,CAAC;EACH;EAGF,OAAO;CACT;;;;;;;;CASA,MAAa,gBAAgB,eAAuB;EAGlD,MAAM,qBAFe,KAAK,gBAAgB,aAEJ,CAAC;EAEvC,OAAO;CACT;;;;CAKA,MAAa,OAAO,UAAoC;EACtD,MAAM,eAAe,KAAK,gBAAgB,QAAQ;EAClD,OAAO,QAAQ,MAAM,gBAAgB,YAAY,CAAC;CACpD;;;;CASA,AAAO,IAAI,UAA0B;EACnC,OAAO,IAAI,KAAK,YAAY,MAAM,MAAM,UAAU,GAAG,CAAC;CACxD;;;;;;;;CASA,MAAa,aAAa,UAAkB,YAAY,MAAuB;EAC7E,IAAI,CAAC,KAAK,cACR,MAAM,IAAI,MACR,4HAEF;EAGF,MAAM,QAAQ,KAAK,qBAAqB,UAAU,SAAS;EAC3D,OAAO,GAAG,KAAK,mBAAmB,GAAG;CACvC;;;;;;;CAQA,AAAO,qBAAqB,UAAkB,WAA2B;EACvE,IAAI,CAAC,KAAK,cACR,MAAM,IAAI,MAAM,yCAAyC;EAG3D,MAAM,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,IAAI;EAM5C,MAAM,UAAiC;GAAE,MAAM;GAAU;GAAK,KALlD,OACT,WAAW,UAAU,KAAK,YAAY,CAAC,CACvC,OAAO,GAAG,SAAS,GAAG,KAAK,CAAC,CAC5B,OAAO,KAEsD;EAAE;EAClE,MAAM,OAAO,KAAK,UAAU,OAAO;EAGnC,OAAO,OAAO,KAAK,IAAI,CAAC,CAAC,SAAS,WAAW;CAC/C;;;;;;;CAQA,MAAa,uBAAuB,OAAkD;EAEpF,IAAI,CAAC,KAAK,cACR,OAAO;GAAE,OAAO;GAAO,OAAO;EAAc;EAI9C,IAAI;EACJ,IAAI;GACF,MAAM,OAAO,OAAO,KAAK,OAAO,WAAW,CAAC,CAAC,SAAS,OAAO;GAC7D,UAAU,KAAK,MAAM,IAAI;EAC3B,QAAQ;GACN,OAAO;IAAE,OAAO;IAAO,OAAO;GAAgB;EAChD;EAGA,IAAI,CAAC,QAAQ,QAAQ,CAAC,QAAQ,OAAO,CAAC,QAAQ,KAC5C,OAAO;GAAE,OAAO;GAAO,OAAO;EAAgB;EAIhD,MAAM,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;EACxC,IAAI,QAAQ,MAAM,KAChB,OAAO;GAAE,OAAO;GAAO,OAAO;EAAU;EAI1C,MAAM,cAAc,OACjB,WAAW,UAAU,KAAK,YAAY,CAAC,CACvC,OAAO,GAAG,QAAQ,KAAK,GAAG,QAAQ,KAAK,CAAC,CACxC,OAAO,KAAK;EAEf,MAAM,YAAY,OAAO,KAAK,QAAQ,KAAK,KAAK;EAChD,MAAM,iBAAiB,OAAO,KAAK,aAAa,KAAK;EAErD,IAAI,UAAU,WAAW,eAAe,QACtC,OAAO;GAAE,OAAO;GAAO,OAAO;EAAoB;EAQpD,IAAI,CALe,OAAO,gBACxB,IAAI,WAAW,SAAS,GACxB,IAAI,WAAW,cAAc,CAGjB,GACZ,OAAO;GAAE,OAAO;GAAO,OAAO;EAAoB;EAIpD,MAAM,eAAe,KAAK,gBAAgB,QAAQ,IAAI;EACtD,IAAI,CAAE,MAAM,gBAAgB,YAAY,GACtC,OAAO;GAAE,OAAO;GAAO,OAAO;EAAiB;EAejD,OAAO;GAVL,OAAO;GACP,MAAM,QAAQ;GACd;GACA,2BAAW,IAAI,KAAK,QAAQ,MAAM,GAAI;GACtC,UAAU,KAAK,cAAc,QAAQ,IAAI;GACzC,QAAQ;GACR,eAAe,KAAK,IAAI,QAAQ,IAAI;GACpC,iBAAiB,KAAK,UAAU,QAAQ,IAAI;EAGlC;CACd;;;;CASA,MAAa,SAAS,UAA4C;EAChE,IAAI,KAAK,UAAU,IAAI,QAAQ,GAC7B,OAAO,KAAK,UAAU,IAAI,QAAQ;EAGpC,MAAM,eAAe,KAAK,gBAAgB,QAAQ;EAElD,IAAI,CAAE,MAAM,gBAAgB,YAAY,GACtC,MAAM,IAAI,MAAM,mBAAmB,cAAc;EAGnD,MAAM,QAAQ,MAAM,KAAK,YAAY;EACrC,MAAM,OAAO,SAAS,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK;EAE1C,KAAK,UAAU,IAAI,UAAU;GAC3B,MAAM;GACN;GACA,MAAM,MAAM;GACZ,aAAa,MAAM,YAAY;GAC/B,cAAc,MAAM;GACpB,UAAU,KAAK,cAAc,QAAQ;EACvC,CAAC;EAED,OAAO,KAAK,UAAU,IAAI,QAAQ;CACpC;;;;CAKA,MAAa,KAAK,UAAmC;EAEnD,QAAO,MADgB,KAAK,SAAS,QAAQ,EAC9B,CAAC;CAClB;;;;CASA,MAAa,KAAK,MAAc,IAAsC;EACpE,MAAM,WAAW,KAAK,gBAAgB,IAAI;EAC1C,MAAM,SAAS,KAAK,gBAAgB,EAAE;EAEtC,IAAI,CAAE,MAAM,gBAAgB,QAAQ,GAClC,MAAM,IAAI,MAAM,0BAA0B,MAAM;EAGlD,MAAM,qBAAqB,QAAQ,MAAM,CAAC;EAC1C,MAAM,SAAS,UAAU,MAAM;EAG/B,KAAK,UAAU,OAAO,EAAE;EAExB,MAAM,aAAa,MAAM,SAAS,MAAM;EACxC,MAAM,OAAO,KAAK,cAAc,UAAU;EAC1C,MAAM,QAAQ,MAAM,KAAK,MAAM;EAE/B,OAAO;GACL,MAAM;GACN,KAAK,KAAK,IAAI,EAAE;GAChB,MAAM,MAAM;GACZ;GACA,UAAU,KAAK,cAAc,EAAE;GAC/B,QAAQ,KAAK;EACf;CACF;;;;CAKA,MAAa,KAAK,MAAc,IAAsC;EACpE,MAAM,WAAW,KAAK,gBAAgB,IAAI;EAC1C,MAAM,SAAS,KAAK,gBAAgB,EAAE;EAEtC,IAAI,CAAE,MAAM,gBAAgB,QAAQ,GAClC,MAAM,IAAI,MAAM,0BAA0B,MAAM;EAGlD,MAAM,qBAAqB,QAAQ,MAAM,CAAC;EAC1C,MAAM,OAAO,UAAU,MAAM;EAG7B,KAAK,UAAU,OAAO,IAAI;EAC1B,KAAK,UAAU,OAAO,EAAE;EAExB,MAAM,aAAa,MAAM,SAAS,MAAM;EACxC,MAAM,OAAO,KAAK,cAAc,UAAU;EAC1C,MAAM,QAAQ,MAAM,KAAK,MAAM;EAE/B,OAAO;GACL,MAAM;GACN,KAAK,KAAK,IAAI,EAAE;GAChB,MAAM,MAAM;GACZ;GACA,UAAU,KAAK,cAAc,EAAE;GAC/B,QAAQ,KAAK;EACf;CACF;;;;CAKA,MAAa,KAAK,WAAmB,SAAmD;EACtF,MAAM,eAAe,KAAK,gBAAgB,SAAS;EACnD,MAAM,QAA2B,CAAC;EAKlC,IAAI,CAAE,MAAM,qBAAqB,YAAY,GAC3C,OAAO;EAGT,MAAM,UAAU,MAAM,QAAQ,cAAc,EAAE,eAAe,KAAK,CAAC;EAEnE,KAAK,MAAM,SAAS,SAAS;GAC3B,MAAM,YAAY,KAAK,WAAW,MAAM,IAAI;GAC5C,MAAM,aAAa,MAAM,KAAK,KAAK,gBAAgB,SAAS,CAAC;GAE7D,MAAM,KAAK;IACT,MAAM;IACN,MAAM,MAAM;IACZ,MAAM,WAAW;IACjB,aAAa,MAAM,YAAY;IAC/B,cAAc,WAAW;IACzB,UAAU,MAAM,OAAO,IAAI,KAAK,cAAc,MAAM,IAAI,IAAI;GAC9D,CAAC;GAGD,IAAI,SAAS,aAAa,MAAM,YAAY,GAAG;IAC7C,MAAM,WAAW,MAAM,KAAK,KAAK,WAAW,OAAO;IACnD,MAAM,KAAK,GAAG,QAAQ;GACxB;GAGA,IAAI,SAAS,SAAS,MAAM,UAAU,QAAQ,OAC5C;EAEJ;EAEA,OAAO;CACT;;;;CASA,AAAO,KAAK,UAA0B;EACpC,OAAO,KAAK,gBAAgB,QAAQ;CACtC;;;;CAKA,AAAO,UAAkB;EACvB,OAAO,KAAK;CACd;;;;;;;;CAaA,AAAU,gBAAgB,UAA0B;EAClD,MAAM,mBAAmB,KAAK,YAAY,QAAQ;EAClD,OAAO,kBAAkB,KAAK,MAAM,gBAAgB;CACtD;;;;CAKA,MAAgB,SAAS,MAAuD;EAC9E,IAAI,OAAO,SAAS,IAAI,GACtB,OAAO;EAGT,IAAI,OAAO,SAAS,UAClB,OAAO,SAAS,IAAI;EAGtB,OAAO,KAAK,OAAO;CACrB;;;;CAKA,AAAU,cAAc,QAAwB;EAC9C,OAAO,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,IAAI,WAAW,MAAM,CAAC,CAAC,CAAC,OAAO,KAAK;CAChF;;;;CAKA,AAAU,cAAc,UAA0B;EAChD,OAAO,YAAY,QAAQ;CAC7B;AACF"}

package/esm/storage/drivers/r2-driver.mjs

@@ -47,7 +47,7 @@ var R2Driver = class extends CloudDriver {
 	* - Or use a custom domain through Cloudflare
 	*/
 	url(location) {
-		if (this.options.urlPrefix) location = `${this.options.urlPrefix.replace(/\/+$/, "")}/${ltrim(location, "/")}`;
+		if (this.options.urlPrefix) return `${this.options.urlPrefix.replace(/\/+$/, "")}/${ltrim(location, "/")}`;
 		if (this.options.publicDomain) return `${this.options.publicDomain.replace(/\/+$/, "")}/${location}`;
 		return `https://pub-${this.options.accountId}.r2.dev/${location}`;
 	}

package/esm/storage/drivers/r2-driver.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"r2-driver.mjs","names":[],"sources":["../../../../../../../../@warlock.js/core/src/storage/drivers/r2-driver.ts"],"sourcesContent":["import { ltrim } from \"@mongez/reinforcements\";\nimport type { R2StorageDriverOptions } from \"../types\";\nimport { CloudDriver } from \"./cloud-driver\";\n\n/**\n * Cloudflare R2 Storage Driver\n *\n * R2 is S3-compatible but uses a different URL structure and doesn't require regions.\n *\n * URL Patterns:\n * - With publicDomain: https://{publicDomain}/{key}\n * - With urlPrefix: {urlPrefix}/{key}\n * - Default public bucket: https://pub-{accountId}.r2.dev/{key}\n *\n * @example\n * ```typescript\n * const driver = new R2Driver({\n *   bucket: \"my-bucket\",\n *   region: \"auto\", // R2 doesn't use traditional regions\n *   accessKeyId: process.env.R2_ACCESS_KEY_ID,\n *   secretAccessKey: process.env.R2_SECRET_ACCESS_KEY,\n *   accountId: process.env.R2_ACCOUNT_ID,\n *   publicDomain: \"assets.example.com\", // Optional custom domain\n * });\n * ```\n */\nexport class R2Driver extends CloudDriver<R2StorageDriverOptions> {\n  /**\n   * Driver name\n   */\n  public readonly name = \"r2\";\n\n  /**\n   * Get R2 endpoint URL\n   *\n   * R2 endpoint format: https://{accountId}.r2.cloudflarestorage.com\n   */\n  protected getEndpoint(): string {\n    return this.options.endpoint || `https://${this.options.accountId}.r2.cloudflarestorage.com`;\n  }\n\n  /**\n   * Get public URL for file\n   *\n   * Priority: urlPrefix > publicDomain > default R2 URL\n   *\n   * Note: For R2 public access, you typically need to:\n   * - Enable public access on the bucket\n   * - Or use a custom domain through Cloudflare\n   */\n  public url(location: string): string {\n    // 1. Use urlPrefix if configured\n    if (this.options.urlPrefix) {\n      const prefix = this.options.urlPrefix.replace(/\\/+$/, \"\");\n      location = `${prefix}/${ltrim(location, \"/\")}`;\n    }\n\n    // 2. Use publicDomain if configured\n    if (this.options.publicDomain) {\n      const domain = this.options.publicDomain.replace(/\\/+$/, \"\");\n      return `${domain}/${location}`;\n    }\n\n    // 3. Fallback to R2 public bucket URL\n    // Note: Public access must be enabled on the bucket for this to work\n    return `https://pub-${this.options.accountId}.r2.dev/${location}`;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AA0BA,IAAa,WAAb,cAA8B,YAAoC;;;cAIzC;;;;;;;CAOvB,AAAU,cAAsB;EAC9B,OAAO,KAAK,QAAQ,YAAY,WAAW,KAAK,QAAQ,UAAU;CACpE;;;;;;;;;;CAWA,AAAO,IAAI,UAA0B;EAEnC,IAAI,KAAK,QAAQ,WAEf,WAAW,GADI,KAAK,QAAQ,UAAU,QAAQ,QAAQ,EACnC,EAAE,GAAG,MAAM,UAAU,GAAG;EAI7C,IAAI,KAAK,QAAQ,cAEf,OAAO,GADQ,KAAK,QAAQ,aAAa,QAAQ,QAAQ,EAC1C,EAAE,GAAG;EAKtB,OAAO,eAAe,KAAK,QAAQ,UAAU,UAAU;CACzD;AACF"}
+{"version":3,"file":"r2-driver.mjs","names":[],"sources":["../../../../../../../../@warlock.js/core/src/storage/drivers/r2-driver.ts"],"sourcesContent":["import { ltrim } from \"@mongez/reinforcements\";\nimport type { R2StorageDriverOptions } from \"../types\";\nimport { CloudDriver } from \"./cloud-driver\";\n\n/**\n * Cloudflare R2 Storage Driver\n *\n * R2 is S3-compatible but uses a different URL structure and doesn't require regions.\n *\n * URL Patterns:\n * - With publicDomain: https://{publicDomain}/{key}\n * - With urlPrefix: {urlPrefix}/{key}\n * - Default public bucket: https://pub-{accountId}.r2.dev/{key}\n *\n * @example\n * ```typescript\n * const driver = new R2Driver({\n *   bucket: \"my-bucket\",\n *   region: \"auto\", // R2 doesn't use traditional regions\n *   accessKeyId: process.env.R2_ACCESS_KEY_ID,\n *   secretAccessKey: process.env.R2_SECRET_ACCESS_KEY,\n *   accountId: process.env.R2_ACCOUNT_ID,\n *   publicDomain: \"assets.example.com\", // Optional custom domain\n * });\n * ```\n */\nexport class R2Driver extends CloudDriver<R2StorageDriverOptions> {\n  /**\n   * Driver name\n   */\n  public readonly name = \"r2\";\n\n  /**\n   * Get R2 endpoint URL\n   *\n   * R2 endpoint format: https://{accountId}.r2.cloudflarestorage.com\n   */\n  protected getEndpoint(): string {\n    return this.options.endpoint || `https://${this.options.accountId}.r2.cloudflarestorage.com`;\n  }\n\n  /**\n   * Get public URL for file\n   *\n   * Priority: urlPrefix > publicDomain > default R2 URL\n   *\n   * Note: For R2 public access, you typically need to:\n   * - Enable public access on the bucket\n   * - Or use a custom domain through Cloudflare\n   */\n  public url(location: string): string {\n    // 1. Use urlPrefix if configured — return it directly so the\n    // publicDomain / default-host URLs below are NOT appended (which would\n    // yield a double-host URL).\n    if (this.options.urlPrefix) {\n      const prefix = this.options.urlPrefix.replace(/\\/+$/, \"\");\n      return `${prefix}/${ltrim(location, \"/\")}`;\n    }\n\n    // 2. Use publicDomain if configured\n    if (this.options.publicDomain) {\n      const domain = this.options.publicDomain.replace(/\\/+$/, \"\");\n      return `${domain}/${location}`;\n    }\n\n    // 3. Fallback to R2 public bucket URL\n    // Note: Public access must be enabled on the bucket for this to work\n    return `https://pub-${this.options.accountId}.r2.dev/${location}`;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AA0BA,IAAa,WAAb,cAA8B,YAAoC;;;cAIzC;;;;;;;CAOvB,AAAU,cAAsB;EAC9B,OAAO,KAAK,QAAQ,YAAY,WAAW,KAAK,QAAQ,UAAU;CACpE;;;;;;;;;;CAWA,AAAO,IAAI,UAA0B;EAInC,IAAI,KAAK,QAAQ,WAEf,OAAO,GADQ,KAAK,QAAQ,UAAU,QAAQ,QAAQ,EACvC,EAAE,GAAG,MAAM,UAAU,GAAG;EAIzC,IAAI,KAAK,QAAQ,cAEf,OAAO,GADQ,KAAK,QAAQ,aAAa,QAAQ,QAAQ,EAC1C,EAAE,GAAG;EAKtB,OAAO,eAAe,KAAK,QAAQ,UAAU,UAAU;CACzD;AACF"}

package/esm/storage/drivers/s3-driver.mjs

@@ -30,7 +30,7 @@ var S3Driver = class extends CloudDriver {
 	* - Default: https://{bucket}.s3.{region}.amazonaws.com/{key}
 	*/
 	url(location) {
-		if (this.options.urlPrefix) location = `${this.options.urlPrefix.replace(/\/+$/, "")}/${ltrim(location, "/")}`;
+		if (this.options.urlPrefix) return `${this.options.urlPrefix.replace(/\/+$/, "")}/${ltrim(location, "/")}`;
 		return `https://${this.options.bucket}.s3.${this.options.region}.amazonaws.com/${location}`;
 	}
 };

package/esm/storage/drivers/s3-driver.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"s3-driver.mjs","names":[],"sources":["../../../../../../../../@warlock.js/core/src/storage/drivers/s3-driver.ts"],"sourcesContent":["import { ltrim } from \"@mongez/reinforcements\";\nimport type { CloudStorageDriverOptions } from \"../types\";\nimport { CloudDriver } from \"./cloud-driver\";\n\n/**\n * AWS S3 Storage Driver\n *\n * URL Pattern: https://{bucket}.s3.{region}.amazonaws.com/{key}\n *\n * @example\n * ```typescript\n * const driver = new S3Driver({\n *   bucket: \"my-bucket\",\n *   region: \"us-east-1\",\n *   accessKeyId: process.env.AWS_ACCESS_KEY_ID,\n *   secretAccessKey: process.env.AWS_SECRET_ACCESS_KEY,\n * });\n * ```\n */\nexport class S3Driver extends CloudDriver<CloudStorageDriverOptions> {\n  /**\n   * Driver name\n   */\n  public readonly name = \"s3\";\n\n  /**\n   * Get public URL for file\n   *\n   * URL formats:\n   * - With urlPrefix: {urlPrefix}/{key}\n   * - Default: https://{bucket}.s3.{region}.amazonaws.com/{key}\n   */\n  public url(location: string): string {\n    // 1. Use urlPrefix if configured\n    if (this.options.urlPrefix) {\n      const prefix = this.options.urlPrefix.replace(/\\/+$/, \"\");\n      location = `${prefix}/${ltrim(location, \"/\")}`;\n    }\n\n    // 2. Default S3 URL\n    return `https://${this.options.bucket}.s3.${this.options.region}.amazonaws.com/${location}`;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAmBA,IAAa,WAAb,cAA8B,YAAuC;;;cAI5C;;;;;;;;;CASvB,AAAO,IAAI,UAA0B;EAEnC,IAAI,KAAK,QAAQ,WAEf,WAAW,GADI,KAAK,QAAQ,UAAU,QAAQ,QAAQ,EACnC,EAAE,GAAG,MAAM,UAAU,GAAG;EAI7C,OAAO,WAAW,KAAK,QAAQ,OAAO,MAAM,KAAK,QAAQ,OAAO,iBAAiB;CACnF;AACF"}
+{"version":3,"file":"s3-driver.mjs","names":[],"sources":["../../../../../../../../@warlock.js/core/src/storage/drivers/s3-driver.ts"],"sourcesContent":["import { ltrim } from \"@mongez/reinforcements\";\nimport type { CloudStorageDriverOptions } from \"../types\";\nimport { CloudDriver } from \"./cloud-driver\";\n\n/**\n * AWS S3 Storage Driver\n *\n * URL Pattern: https://{bucket}.s3.{region}.amazonaws.com/{key}\n *\n * @example\n * ```typescript\n * const driver = new S3Driver({\n *   bucket: \"my-bucket\",\n *   region: \"us-east-1\",\n *   accessKeyId: process.env.AWS_ACCESS_KEY_ID,\n *   secretAccessKey: process.env.AWS_SECRET_ACCESS_KEY,\n * });\n * ```\n */\nexport class S3Driver extends CloudDriver<CloudStorageDriverOptions> {\n  /**\n   * Driver name\n   */\n  public readonly name = \"s3\";\n\n  /**\n   * Get public URL for file\n   *\n   * URL formats:\n   * - With urlPrefix: {urlPrefix}/{key}\n   * - Default: https://{bucket}.s3.{region}.amazonaws.com/{key}\n   */\n  public url(location: string): string {\n    // 1. Use urlPrefix if configured (e.g. a CDN domain) — return it directly\n    // so the bucket-host URL below is NOT appended (which would yield a\n    // double-host URL like https://bucket.s3.../https://cdn.../key).\n    if (this.options.urlPrefix) {\n      const prefix = this.options.urlPrefix.replace(/\\/+$/, \"\");\n      return `${prefix}/${ltrim(location, \"/\")}`;\n    }\n\n    // 2. Default S3 URL\n    return `https://${this.options.bucket}.s3.${this.options.region}.amazonaws.com/${location}`;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAmBA,IAAa,WAAb,cAA8B,YAAuC;;;cAI5C;;;;;;;;;CASvB,AAAO,IAAI,UAA0B;EAInC,IAAI,KAAK,QAAQ,WAEf,OAAO,GADQ,KAAK,QAAQ,UAAU,QAAQ,QAAQ,EACvC,EAAE,GAAG,MAAM,UAAU,GAAG;EAIzC,OAAO,WAAW,KAAK,QAAQ,OAAO,MAAM,KAAK,QAAQ,OAAO,iBAAiB;CACnF;AACF"}

package/esm/storage/index.d.mts

@@ -1,10 +1,13 @@
 import { StorageFile } from "./storage-file.mjs";
-import { CloudStorageDriverContract, CloudStorageDriverOptions, CloudStorageFileData, DeleteManyResult, EventSubscription, FileVisibility, ListOptions, LocalStorageDriverOptions, PresignedOptions, PresignedUploadOptions, PutDirectoryOptions, PutDirectoryResult, PutOptions, R2StorageDriverOptions, ScopedStorageContract, StorageConfigurations, StorageCopyEventPayload, StorageDriverConfig, StorageDriverContract, StorageDriverName, StorageDriverRegistry, StorageDriverType, StorageEventHandler, StorageEventPayload, StorageEventType, StorageFileData, StorageFileInfo, StorageManagerContract, StoragePutEventPayload, TemporaryTokenError, TemporaryTokenPayload, TemporaryTokenValidation } from "./types.mjs";
+import { CloudStorageDriverContract, CloudStorageDriverOptions, CloudStorageFileData, DeleteManyResult, EventSubscription, FileVisibility, ListOptions, LocalStorageDriverOptions, PresignedOptions, PresignedUploadOptions, PutDirectoryOptions, PutDirectoryResult, PutFromUrlOptions, PutOptions, R2StorageDriverOptions, ScopedStorageContract, StorageConfigurations, StorageCopyEventPayload, StorageDriverConfig, StorageDriverContract, StorageDriverName, StorageDriverRegistry, StorageDriverType, StorageEventHandler, StorageEventPayload, StorageEventType, StorageFileData, StorageFileInfo, StorageManagerContract, StoragePutEventPayload, TemporaryTokenError, TemporaryTokenPayload, TemporaryTokenValidation } from "./types.mjs";
 import { storageConfig, storageConfigurations } from "./config.mjs";
 import { ScopedStorage } from "./scoped-storage.mjs";
 import { Storage, storage } from "./storage.mjs";
 import { StorageDriverContextStore, storageDriverContext } from "./context/storage-driver-context.mjs";
+import { resolveWithinRoot } from "./utils/contain-path.mjs";
 import { MimeTypes, getMimeType } from "./utils/mime.mjs";
+import { SafeFetchOptions, SafeFetchResult, isPrivateOrReservedIp, safeFetchToBuffer } from "./utils/safe-fetch.mjs";
+import { StorageError, StorageErrorOptions } from "./utils/storage-error.mjs";
 import { CloudDriver, loadS3 } from "./drivers/cloud-driver.mjs";
 import { DOSpacesDriver } from "./drivers/do-spaces-driver.mjs";
 import { LocalDriver } from "./drivers/local-driver.mjs";

package/esm/storage/index.mjs

@@ -1,10 +1,13 @@
 import { storageConfig, storageConfigurations } from "./config.mjs";
 import { StorageFile } from "./storage-file.mjs";
+import { StorageError } from "./utils/storage-error.mjs";
+import { isPrivateOrReservedIp, safeFetchToBuffer } from "./utils/safe-fetch.mjs";
 import { ScopedStorage } from "./scoped-storage.mjs";
 import { storageDriverContext } from "./context/storage-driver-context.mjs";
 import { MimeTypes, getMimeType } from "./utils/mime.mjs";
 import { CloudDriver, loadS3 } from "./drivers/cloud-driver.mjs";
 import { DOSpacesDriver } from "./drivers/do-spaces-driver.mjs";
+import { resolveWithinRoot } from "./utils/contain-path.mjs";
 import { LocalDriver } from "./drivers/local-driver.mjs";
 import { R2Driver } from "./drivers/r2-driver.mjs";
 import { S3Driver } from "./drivers/s3-driver.mjs";

package/esm/storage/scoped-storage.d.mts

@@ -1,5 +1,5 @@
 import { StorageFile } from "./storage-file.mjs";
-import { DeleteManyResult, ListOptions, PutDirectoryOptions, PutDirectoryResult, PutOptions, ScopedStorageContract, StorageDriverContract, StorageDriverType, StorageFileInfo } from "./types.mjs";
+import { DeleteManyResult, ListOptions, PutDirectoryOptions, PutDirectoryResult, PutFromUrlOptions, PutOptions, ScopedStorageContract, StorageDriverContract, StorageDriverType, StorageFileInfo } from "./types.mjs";
 import { UploadedFile } from "../http/uploaded-file.mjs";
 import { Readable } from "stream";
 
@@ -110,11 +110,15 @@ declare class ScopedStorage implements ScopedStorageContract {
   /**
    * Store a file from a URL
    *
-   * Downloads the file from the URL and stores it.
+   * Downloads the file from the URL and stores it. The download is
+   * SSRF-guarded by default: the URL scheme must be https/http, the host
+   * must not resolve to a private / loopback / link-local / cloud-metadata
+   * address, the body is capped, and the request times out. Tune or relax
+   * via the {@link PutFromUrlOptions} guard fields.
    *
    * @param url - URL to download from
    * @param location - Destination path in storage
-   * @param options - Optional storage options
+   * @param options - Storage + outbound-download guard options
    * @returns StorageFile instance
    *
    * @example
@@ -125,7 +129,7 @@ declare class ScopedStorage implements ScopedStorageContract {
    * );
    * ```
    */
-  putFromUrl(url: string, location: string, options?: PutOptions): Promise<StorageFile>;
+  putFromUrl(url: string, location: string, options?: PutFromUrlOptions): Promise<StorageFile>;
   /**
    * Store a file from base64 data URL
    *

package/esm/storage/scoped-storage.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"scoped-storage.d.mts","names":[],"sources":["../../../../../../../@warlock.js/core/src/storage/scoped-storage.ts"],"mappings":";;;;;;;;;AAwCA;;;;;;;;;;;;;;;;;;cAAa,aAAA,YAAyB,qBAAA;EA8IzB;;;;EAAA,UAzID,OAAA,EAAS,qBAAA;EAyMyB;;;;;cAlMzB,MAAA,EAAQ,qBAAA;EAqQ2B;;;;;EAAA,IAxP3C,IAAA,IAAQ,iBAAA;EA0SwC;;;;;;;EAAA,IA/RhD,aAAA,IAAiB,qBAAA;EA8azB;;;;;;;;EAAA,IAlaQ,YAAA,IAAgB,qBAAA;EAipBI;;;;;;;;;;;;;;;;;;;;;;;;;;EA/mBlB,GAAA,CACX,IAAA,EAAM,YAAA,GAAe,MAAA,YAAkB,QAAA,EACvC,QAAA,UACA,OAAA,GAAU,UAAA,GACT,OAAA,CAAQ,WAAA;EAHY;;;;;;;;;;;;;;;;;;;EA4BV,SAAA,CACX,MAAA,EAAQ,QAAA,EACR,QAAA,UACA,OAAA,GAAU,UAAA,GACT,OAAA,CAAQ,WAAA;EA0BT;;;;;;;;;;;;;;;;;;EAHW,UAAA,CACX,GAAA,UACA,QAAA,UACA,OAAA,GAAU,UAAA,GACT,OAAA,CAAQ,WAAA;EAwG4B;;;;;;;;;;;;;;;;EA7E1B,aAAA,CACX,OAAA,UACA,QAAA,UACA,OAAA,GAAU,UAAA,GACT,OAAA,CAAQ,WAAA;EAsJgD;;;;;;;;;;;;;;;;EArH9C,GAAA,CAAI,QAAA,WAAmB,OAAA,CAAQ,MAAA;EA6N9B;;;;;;;;;;;;;;;;EAzMD,SAAA,CAAU,QAAA,WAAmB,OAAA,CAAQ,QAAA;EA6WZ;;;;;;;;;;;;;;;;EAzVzB,MAAA,CAAO,QAAA,WAAmB,WAAA,GAAc,OAAA;EA2czC;;;;;;;;;;;;;;;;;;;;;;EAhbC,UAAA,CAAW,SAAA,aAAsB,OAAA,CAAQ,gBAAA;EAwhBtB;;AAAc;;;EA/gBjC,eAAA,CAAgB,aAAA,WAAwB,OAAA;;;;;;;;;;;;;;EAiBxC,MAAA,CAAO,QAAA,WAAmB,OAAA;;;;;;;;;;;;;;;;;;;;;EAwB1B,IAAA,CAAK,IAAA,WAAe,WAAA,EAAa,EAAA,WAAa,OAAA,CAAQ,WAAA;;;;;;;;;;;;;;;;;;;;;EA0BtD,IAAA,CAAK,IAAA,WAAe,WAAA,EAAa,EAAA,WAAa,OAAA,CAAQ,WAAA;;;;;;;;;;;;;;;;;;;;;;;;EA6BtD,aAAA,CACX,IAAA,UACA,EAAA,UACA,OAAA;IAAY,WAAA;EAAA,IACX,OAAA;;;;;;;;;;;;;;;;;;EA0CU,aAAA,CACX,IAAA,UACA,EAAA,UACA,OAAA;IAAY,WAAA;EAAA,IACX,OAAA;;;;;;;;;;;;;;;;;;;;;;;;;EAkCU,YAAA,CACX,YAAA,UACA,WAAA,UACA,OAAA,GAAU,mBAAA,GACT,OAAA,CAAQ,kBAAA;;;;;;;;UAkDG,kBAAA;;;;;;;;;;;;;;;EAsCD,cAAA,CAAe,IAAA,WAAe,OAAA;;;;;;;;;;;;;;;;;;;;;;;EAqC9B,IAAA,CAAK,SAAA,WAAoB,OAAA,GAAU,WAAA,GAAc,OAAA,CAAQ,eAAA;;;;;;;;;;;;;;;;;;EAyB/D,GAAA,CAAI,QAAA;;;;;;;;;;;;;;;;;;;;;EAwBE,YAAA,CAAa,QAAA,UAAkB,SAAA,YAAqB,OAAA;;;;;;;;;;;;;;;;;;;EA0BpD,QAAA,CAAS,QAAA,WAAmB,OAAA,CAAQ,eAAA;;;;;;;;;;EAapC,IAAA,CAAK,QAAA,WAAmB,OAAA;;;;;;;;;;;;;;;;;;;;;;;EA0B9B,IAAA,CAAK,QAAA,WAAmB,WAAA;;;;;;;;YAef,QAAA,CAAS,IAAA,EAAM,YAAA,GAAe,MAAA,YAAkB,QAAA,GAAW,OAAA,CAAQ,MAAA;;;;;;;;YA+BzE,UAAA,CAAW,KAAA,YAAiB,KAAA,IAAS,QAAA;;;;;;;;YAgB/B,cAAA,CAAe,MAAA,EAAQ,QAAA,GAAW,OAAA,CAAQ,MAAA;;;;;;;;;;;;;;;;EAuBnD,OAAA,CAAQ,MAAA,UAAgB,QAAA;;;;;;;;;;;;;;;;EAmBxB,MAAA,CAAO,QAAA,UAAkB,MAAA;AAAA"}
+{"version":3,"file":"scoped-storage.d.mts","names":[],"sources":["../../../../../../../@warlock.js/core/src/storage/scoped-storage.ts"],"mappings":";;;;;;;;;AA0CA;;;;;;;;;;;;;;;;;;cAAa,aAAA,YAAyB,qBAAA;EAkJzB;;;;EAAA,UA7ID,OAAA,EAAS,qBAAA;EA0NyB;;;;;cAnNzB,MAAA,EAAQ,qBAAA;EAsR2B;;;;;EAAA,IAzQ3C,IAAA,IAAQ,iBAAA;EA2TwC;;;;;;;EAAA,IAhThD,aAAA,IAAiB,qBAAA;EA+bzB;;;;;;;;EAAA,IAnbQ,YAAA,IAAgB,qBAAA;EAkqBI;;;;;;;;;;;;;;;;;;;;;;;;;;EAhoBlB,GAAA,CACX,IAAA,EAAM,YAAA,GAAe,MAAA,YAAkB,QAAA,EACvC,QAAA,UACA,OAAA,GAAU,UAAA,GACT,OAAA,CAAQ,WAAA;EAHY;;;;;;;;;;;;;;;;;;;EA4BV,SAAA,CACX,MAAA,EAAQ,QAAA,EACR,QAAA,UACA,OAAA,GAAU,UAAA,GACT,OAAA,CAAQ,WAAA;EA8BT;;;;;;;;;;;;;;;;;;;;;;EAHW,UAAA,CACX,GAAA,UACA,QAAA,UACA,OAAA,GAAU,iBAAA,GACT,OAAA,CAAQ,WAAA;EAgJa;;;;;;;;;;;;;;;;EAxGX,aAAA,CACX,OAAA,UACA,QAAA,UACA,OAAA,GAAU,UAAA,GACT,OAAA,CAAQ,WAAA;EAgLO;;;;;;;;;;;;;;;;EA/IL,GAAA,CAAI,QAAA,WAAmB,OAAA,CAAQ,MAAA;EAiQ1C;;;;;;;;;;;;;;;;EA7OW,SAAA,CAAU,QAAA,WAAmB,OAAA,CAAQ,QAAA;EAsYvC;;;;;;;;;;;;;;;;EAlXE,MAAA,CAAO,QAAA,WAAmB,WAAA,GAAc,OAAA;EA0dP;;;;;;;;;;;;;;;;;;;;;AAyFA;EAxhBjC,UAAA,CAAW,SAAA,aAAsB,OAAA,CAAQ,gBAAA;;;;;;EASzC,eAAA,CAAgB,aAAA,WAAwB,OAAA;;;;;;;;;;;;;;EAiBxC,MAAA,CAAO,QAAA,WAAmB,OAAA;;;;;;;;;;;;;;;;;;;;;EAwB1B,IAAA,CAAK,IAAA,WAAe,WAAA,EAAa,EAAA,WAAa,OAAA,CAAQ,WAAA;;;;;;;;;;;;;;;;;;;;;EA0BtD,IAAA,CAAK,IAAA,WAAe,WAAA,EAAa,EAAA,WAAa,OAAA,CAAQ,WAAA;;;;;;;;;;;;;;;;;;;;;;;;EA6BtD,aAAA,CACX,IAAA,UACA,EAAA,UACA,OAAA;IAAY,WAAA;EAAA,IACX,OAAA;;;;;;;;;;;;;;;;;;EA0CU,aAAA,CACX,IAAA,UACA,EAAA,UACA,OAAA;IAAY,WAAA;EAAA,IACX,OAAA;;;;;;;;;;;;;;;;;;;;;;;;;EAkCU,YAAA,CACX,YAAA,UACA,WAAA,UACA,OAAA,GAAU,mBAAA,GACT,OAAA,CAAQ,kBAAA;;;;;;;;UAkDG,kBAAA;;;;;;;;;;;;;;;EAsCD,cAAA,CAAe,IAAA,WAAe,OAAA;;;;;;;;;;;;;;;;;;;;;;;EAqC9B,IAAA,CAAK,SAAA,WAAoB,OAAA,GAAU,WAAA,GAAc,OAAA,CAAQ,eAAA;;;;;;;;;;;;;;;;;;EAyB/D,GAAA,CAAI,QAAA;;;;;;;;;;;;;;;;;;;;;EAwBE,YAAA,CAAa,QAAA,UAAkB,SAAA,YAAqB,OAAA;;;;;;;;;;;;;;;;;;;EA0BpD,QAAA,CAAS,QAAA,WAAmB,OAAA,CAAQ,eAAA;;;;;;;;;;EAapC,IAAA,CAAK,QAAA,WAAmB,OAAA;;;;;;;;;;;;;;;;;;;;;;;EA0B9B,IAAA,CAAK,QAAA,WAAmB,WAAA;;;;;;;;YAef,QAAA,CAAS,IAAA,EAAM,YAAA,GAAe,MAAA,YAAkB,QAAA,GAAW,OAAA,CAAQ,MAAA;;;;;;;;YA+BzE,UAAA,CAAW,KAAA,YAAiB,KAAA,IAAS,QAAA;;;;;;;;YAgB/B,cAAA,CAAe,MAAA,EAAQ,QAAA,GAAW,OAAA,CAAQ,MAAA;;;;;;;;;;;;;;;;EAuBnD,OAAA,CAAQ,MAAA,UAAgB,QAAA;;;;;;;;;;;;;;;;EAmBxB,MAAA,CAAO,QAAA,UAAkB,MAAA;AAAA"}

package/esm/storage/scoped-storage.mjs

@@ -1,4 +1,5 @@
 import { StorageFile } from "./storage-file.mjs";
+import { safeFetchToBuffer } from "./utils/safe-fetch.mjs";
 import path from "path";
 import { fileExistsAsync } from "@warlock.js/fs";
 import { createReadStream } from "fs";
@@ -121,11 +122,15 @@ var ScopedStorage = class {
 	/**
 	* Store a file from a URL
 	*
-	* Downloads the file from the URL and stores it.
+	* Downloads the file from the URL and stores it. The download is
+	* SSRF-guarded by default: the URL scheme must be https/http, the host
+	* must not resolve to a private / loopback / link-local / cloud-metadata
+	* address, the body is capped, and the request times out. Tune or relax
+	* via the {@link PutFromUrlOptions} guard fields.
 	*
 	* @param url - URL to download from
 	* @param location - Destination path in storage
-	* @param options - Optional storage options
+	* @param options - Storage + outbound-download guard options
 	* @returns StorageFile instance
 	*
 	* @example
@@ -137,10 +142,20 @@ var ScopedStorage = class {
 	* ```
 	*/
 	async putFromUrl(url, location, options) {
-		const response = await fetch(url);
-		if (!response.ok) throw new Error(`Failed to fetch file from ${url}: ${response.statusText}`);
-		const buffer = Buffer.from(await response.arrayBuffer());
-		return this.put(buffer, location, options);
+		const { allowPrivateHosts, maxBytes, timeoutMs, allowedSchemes, ...putOptions } = options ?? {};
+		const result = await safeFetchToBuffer(url, {
+			allowPrivateHosts,
+			maxBytes,
+			timeoutMs,
+			allowedSchemes
+		});
+		if (!result.ok) throw new Error(`Failed to fetch file from ${url}: ${result.statusText}`);
+		if (!result.contentType) throw new Error(`Failed to fetch file from ${url}: missing content-type header`);
+		const mimeType = putOptions.mimeType || result.contentType;
+		return this.put(result.buffer, location, {
+			...putOptions,
+			mimeType
+		});
 	}
 	/**
 	* Store a file from base64 data URL