@webiny/api-file-manager-s3 0.0.0-mt-2 → 0.0.0-unstable.06b2ede40f

package/assetDelivery/s3/transformation/utils.d.ts

@@ -0,0 +1,11 @@
+declare const SUPPORTED_TRANSFORMABLE_IMAGES: string[];
+declare const OPTIMIZED_TRANSFORMED_IMAGE_PREFIX = "img-o-t-";
+declare const OPTIMIZED_IMAGE_PREFIX = "img-o-";
+declare const getOptimizedImageKeyPrefix: (key: string) => string;
+declare const getOptimizedTransformedImageKeyPrefix: (key: string, transformationsHash: string) => string;
+interface GetImageKeyParams {
+    key: string;
+    transformations?: any;
+}
+declare const getImageKey: ({ key, transformations }: GetImageKeyParams) => string;
+export { SUPPORTED_TRANSFORMABLE_IMAGES, OPTIMIZED_TRANSFORMED_IMAGE_PREFIX, OPTIMIZED_IMAGE_PREFIX, getImageKey, getOptimizedImageKeyPrefix, getOptimizedTransformedImageKeyPrefix };

package/assetDelivery/s3/transformation/utils.js

@@ -0,0 +1,33 @@
+"use strict";
+
+var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault").default;
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.getOptimizedTransformedImageKeyPrefix = exports.getOptimizedImageKeyPrefix = exports.getImageKey = exports.SUPPORTED_TRANSFORMABLE_IMAGES = exports.OPTIMIZED_TRANSFORMED_IMAGE_PREFIX = exports.OPTIMIZED_IMAGE_PREFIX = void 0;
+var _objectHash = _interopRequireDefault(require("object-hash"));
+const SUPPORTED_TRANSFORMABLE_IMAGES = exports.SUPPORTED_TRANSFORMABLE_IMAGES = ["jpg", "jpeg", "png", "webp"];
+const OPTIMIZED_TRANSFORMED_IMAGE_PREFIX = exports.OPTIMIZED_TRANSFORMED_IMAGE_PREFIX = "img-o-t-";
+const OPTIMIZED_IMAGE_PREFIX = exports.OPTIMIZED_IMAGE_PREFIX = "img-o-";
+const getOptimizedImageKeyPrefix = key => {
+  const [id, name] = key.split("/");
+  return `${id}/${OPTIMIZED_IMAGE_PREFIX}${name}`;
+};
+exports.getOptimizedImageKeyPrefix = getOptimizedImageKeyPrefix;
+const getOptimizedTransformedImageKeyPrefix = (key, transformationsHash) => {
+  const [id, name] = key.split("/");
+  return `${id}/${OPTIMIZED_TRANSFORMED_IMAGE_PREFIX}${transformationsHash}-${name}`;
+};
+exports.getOptimizedTransformedImageKeyPrefix = getOptimizedTransformedImageKeyPrefix;
+const getImageKey = ({
+  key,
+  transformations
+}) => {
+  if (!transformations) {
+    return getOptimizedImageKeyPrefix(key);
+  }
+  return getOptimizedTransformedImageKeyPrefix(key, (0, _objectHash.default)(transformations));
+};
+exports.getImageKey = getImageKey;
+
+//# sourceMappingURL=utils.js.map

package/assetDelivery/s3/transformation/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_objectHash","_interopRequireDefault","require","SUPPORTED_TRANSFORMABLE_IMAGES","exports","OPTIMIZED_TRANSFORMED_IMAGE_PREFIX","OPTIMIZED_IMAGE_PREFIX","getOptimizedImageKeyPrefix","key","id","name","split","getOptimizedTransformedImageKeyPrefix","transformationsHash","getImageKey","transformations","objectHash"],"sources":["utils.ts"],"sourcesContent":["import objectHash from \"object-hash\";\n\nconst SUPPORTED_TRANSFORMABLE_IMAGES = [\"jpg\", \"jpeg\", \"png\", \"webp\"];\nconst OPTIMIZED_TRANSFORMED_IMAGE_PREFIX = \"img-o-t-\";\nconst OPTIMIZED_IMAGE_PREFIX = \"img-o-\";\n\nconst getOptimizedImageKeyPrefix = (key: string): string => {\n    const [id, name] = key.split(\"/\");\n    return `${id}/${OPTIMIZED_IMAGE_PREFIX}${name}`;\n};\n\nconst getOptimizedTransformedImageKeyPrefix = (\n    key: string,\n    transformationsHash: string\n): string => {\n    const [id, name] = key.split(\"/\");\n    return `${id}/${OPTIMIZED_TRANSFORMED_IMAGE_PREFIX}${transformationsHash}-${name}`;\n};\n\ninterface GetImageKeyParams {\n    key: string;\n    transformations?: any;\n}\n\nconst getImageKey = ({ key, transformations }: GetImageKeyParams): string => {\n    if (!transformations) {\n        return getOptimizedImageKeyPrefix(key);\n    }\n\n    return getOptimizedTransformedImageKeyPrefix(key, objectHash(transformations));\n};\n\nexport {\n    SUPPORTED_TRANSFORMABLE_IMAGES,\n    OPTIMIZED_TRANSFORMED_IMAGE_PREFIX,\n    OPTIMIZED_IMAGE_PREFIX,\n    getImageKey,\n    getOptimizedImageKeyPrefix,\n    getOptimizedTransformedImageKeyPrefix\n};\n"],"mappings":";;;;;;;AAAA,IAAAA,WAAA,GAAAC,sBAAA,CAAAC,OAAA;AAEA,MAAMC,8BAA8B,GAAAC,OAAA,CAAAD,8BAAA,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC;AACrE,MAAME,kCAAkC,GAAAD,OAAA,CAAAC,kCAAA,GAAG,UAAU;AACrD,MAAMC,sBAAsB,GAAAF,OAAA,CAAAE,sBAAA,GAAG,QAAQ;AAEvC,MAAMC,0BAA0B,GAAIC,GAAW,IAAa;EACxD,MAAM,CAACC,EAAE,EAAEC,IAAI,CAAC,GAAGF,GAAG,CAACG,KAAK,CAAC,GAAG,CAAC;EACjC,OAAO,GAAGF,EAAE,IAAIH,sBAAsB,GAAGI,IAAI,EAAE;AACnD,CAAC;AAACN,OAAA,CAAAG,0BAAA,GAAAA,0BAAA;AAEF,MAAMK,qCAAqC,GAAGA,CAC1CJ,GAAW,EACXK,mBAA2B,KAClB;EACT,MAAM,CAACJ,EAAE,EAAEC,IAAI,CAAC,GAAGF,GAAG,CAACG,KAAK,CAAC,GAAG,CAAC;EACjC,OAAO,GAAGF,EAAE,IAAIJ,kCAAkC,GAAGQ,mBAAmB,IAAIH,IAAI,EAAE;AACtF,CAAC;AAACN,OAAA,CAAAQ,qCAAA,GAAAA,qCAAA;AAOF,MAAME,WAAW,GAAGA,CAAC;EAAEN,GAAG;EAAEO;AAAmC,CAAC,KAAa;EACzE,IAAI,CAACA,eAAe,EAAE;IAClB,OAAOR,0BAA0B,CAACC,GAAG,CAAC;EAC1C;EAEA,OAAOI,qCAAqC,CAACJ,GAAG,EAAE,IAAAQ,mBAAU,EAACD,eAAe,CAAC,CAAC;AAClF,CAAC;AAACX,OAAA,CAAAU,WAAA,GAAAA,WAAA","ignoreList":[]}

package/assetDelivery/threatDetection/createThreatDetectionEventHandler.d.ts

@@ -0,0 +1,2 @@
+import type { GuardDutyEvent } from "./types";
+export declare const createThreatDetectionEventHandler: () => (import("@webiny/handler").HandlerOnRequestPlugin<import("@webiny/handler/types").Context> | import("@webiny/handler-aws").EventBridgeEventHandler<"GuardDuty Malware Protection Object Scan Result", GuardDutyEvent, any>)[];

package/assetDelivery/threatDetection/createThreatDetectionEventHandler.js

@@ -0,0 +1,62 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.createThreatDetectionEventHandler = void 0;
+var _clientS = require("@webiny/aws-sdk/client-s3");
+var _handlerAws = require("@webiny/handler-aws");
+var _handler = require("@webiny/handler");
+var _processThreatScanResult = require("./processThreatScanResult");
+var _S3AssetMetadataReader = require("../s3/S3AssetMetadataReader");
+const detailType = "GuardDuty Malware Protection Object Scan Result";
+const bucket = process.env.S3_BUCKET;
+const region = process.env.AWS_REGION;
+const createThreatDetectionEventHandler = () => {
+  const s3 = new _clientS.S3({
+    region
+  });
+  const handlerOnRequest = (0, _handler.createHandlerOnRequest)(async request => {
+    const payload = request.body;
+    if (payload["detail-type"] !== detailType) {
+      return;
+    }
+    const objectKey = payload.detail.s3ObjectDetails.objectKey;
+    if (objectKey.endsWith(".metadata")) {
+      return;
+    }
+    try {
+      const s3Metadata = new _S3AssetMetadataReader.S3AssetMetadataReader(s3, bucket);
+      const metadata = await s3Metadata.getMetadata(payload.detail.s3ObjectDetails.objectKey);
+      request.headers = {
+        ...request.headers,
+        "x-tenant": metadata.tenant,
+        "x-i18n-locale": `default:${metadata.locale};content:${metadata.locale};`
+      };
+    } catch {
+      // If metadata can't be loaded, we ignore the file.
+      // Most likely it's because the file is a rendition of the original file,
+      // so we don't need to do anything with it.
+    }
+  });
+  // Guard Duty event handler.
+  const threatScanEventHandler = (0, _handlerAws.createEventBridgeEventHandler)(async ({
+    payload,
+    next,
+    ...rest
+  }) => {
+    const context = rest.context;
+    const threatDetectionEnabled = context.wcp.canUseFileManagerThreatDetection();
+    if (!threatDetectionEnabled || payload["detail-type"] !== detailType) {
+      return next();
+    }
+    await (0, _processThreatScanResult.processThreatScanResult)(context, payload.detail);
+  });
+
+  // Assign a human-readable name for easier debugging.
+  threatScanEventHandler.name = threatScanEventHandler.type + ".threatDetectionEventHandler";
+  return [handlerOnRequest, threatScanEventHandler];
+};
+exports.createThreatDetectionEventHandler = createThreatDetectionEventHandler;
+
+//# sourceMappingURL=createThreatDetectionEventHandler.js.map

package/assetDelivery/threatDetection/createThreatDetectionEventHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_clientS","require","_handlerAws","_handler","_processThreatScanResult","_S3AssetMetadataReader","detailType","bucket","process","env","S3_BUCKET","region","AWS_REGION","createThreatDetectionEventHandler","s3","S3","handlerOnRequest","createHandlerOnRequest","request","payload","body","objectKey","detail","s3ObjectDetails","endsWith","s3Metadata","S3AssetMetadataReader","metadata","getMetadata","headers","tenant","locale","threatScanEventHandler","createEventBridgeEventHandler","next","rest","context","threatDetectionEnabled","wcp","canUseFileManagerThreatDetection","processThreatScanResult","name","type","exports"],"sources":["createThreatDetectionEventHandler.ts"],"sourcesContent":["import { S3 } from \"@webiny/aws-sdk/client-s3\";\nimport { createEventBridgeEventHandler } from \"@webiny/handler-aws\";\nimport { createHandlerOnRequest } from \"@webiny/handler\";\nimport type { GuardDutyEvent, ThreatDetectionContext } from \"./types\";\nimport { processThreatScanResult } from \"./processThreatScanResult\";\nimport { S3AssetMetadataReader } from \"~/assetDelivery/s3/S3AssetMetadataReader\";\nimport type { EventBridgeEvent } from \"@webiny/aws-sdk/types\";\n\nconst detailType = \"GuardDuty Malware Protection Object Scan Result\";\n\nconst bucket = process.env.S3_BUCKET as string;\nconst region = process.env.AWS_REGION as string;\n\nexport const createThreatDetectionEventHandler = () => {\n    const s3 = new S3({ region });\n\n    const handlerOnRequest = createHandlerOnRequest(async request => {\n        const payload = request.body as EventBridgeEvent<string, GuardDutyEvent>;\n\n        if (payload[\"detail-type\"] !== detailType) {\n            return;\n        }\n\n        const objectKey = payload.detail.s3ObjectDetails.objectKey;\n        if (objectKey.endsWith(\".metadata\")) {\n            return;\n        }\n\n        try {\n            const s3Metadata = new S3AssetMetadataReader(s3, bucket);\n            const metadata = await s3Metadata.getMetadata(payload.detail.s3ObjectDetails.objectKey);\n\n            request.headers = {\n                ...request.headers,\n                \"x-tenant\": metadata.tenant,\n                \"x-i18n-locale\": `default:${metadata.locale};content:${metadata.locale};`\n            };\n        } catch {\n            // If metadata can't be loaded, we ignore the file.\n            // Most likely it's because the file is a rendition of the original file,\n            // so we don't need to do anything with it.\n        }\n    });\n    // Guard Duty event handler.\n    const threatScanEventHandler = createEventBridgeEventHandler<typeof detailType, GuardDutyEvent>(\n        async ({ payload, next, ...rest }) => {\n            const context = rest.context as ThreatDetectionContext;\n\n            const threatDetectionEnabled = context.wcp.canUseFileManagerThreatDetection();\n\n            if (!threatDetectionEnabled || payload[\"detail-type\"] !== detailType) {\n                return next();\n            }\n\n            await processThreatScanResult(context, payload.detail);\n        }\n    );\n\n    // Assign a human-readable name for easier debugging.\n    threatScanEventHandler.name = threatScanEventHandler.type + \".threatDetectionEventHandler\";\n\n    return [handlerOnRequest, threatScanEventHandler];\n};\n"],"mappings":";;;;;;AAAA,IAAAA,QAAA,GAAAC,OAAA;AACA,IAAAC,WAAA,GAAAD,OAAA;AACA,IAAAE,QAAA,GAAAF,OAAA;AAEA,IAAAG,wBAAA,GAAAH,OAAA;AACA,IAAAI,sBAAA,GAAAJ,OAAA;AAGA,MAAMK,UAAU,GAAG,iDAAiD;AAEpE,MAAMC,MAAM,GAAGC,OAAO,CAACC,GAAG,CAACC,SAAmB;AAC9C,MAAMC,MAAM,GAAGH,OAAO,CAACC,GAAG,CAACG,UAAoB;AAExC,MAAMC,iCAAiC,GAAGA,CAAA,KAAM;EACnD,MAAMC,EAAE,GAAG,IAAIC,WAAE,CAAC;IAAEJ;EAAO,CAAC,CAAC;EAE7B,MAAMK,gBAAgB,GAAG,IAAAC,+BAAsB,EAAC,MAAMC,OAAO,IAAI;IAC7D,MAAMC,OAAO,GAAGD,OAAO,CAACE,IAAgD;IAExE,IAAID,OAAO,CAAC,aAAa,CAAC,KAAKb,UAAU,EAAE;MACvC;IACJ;IAEA,MAAMe,SAAS,GAAGF,OAAO,CAACG,MAAM,CAACC,eAAe,CAACF,SAAS;IAC1D,IAAIA,SAAS,CAACG,QAAQ,CAAC,WAAW,CAAC,EAAE;MACjC;IACJ;IAEA,IAAI;MACA,MAAMC,UAAU,GAAG,IAAIC,4CAAqB,CAACZ,EAAE,EAAEP,MAAM,CAAC;MACxD,MAAMoB,QAAQ,GAAG,MAAMF,UAAU,CAACG,WAAW,CAACT,OAAO,CAACG,MAAM,CAACC,eAAe,CAACF,SAAS,CAAC;MAEvFH,OAAO,CAACW,OAAO,GAAG;QACd,GAAGX,OAAO,CAACW,OAAO;QAClB,UAAU,EAAEF,QAAQ,CAACG,MAAM;QAC3B,eAAe,EAAE,WAAWH,QAAQ,CAACI,MAAM,YAAYJ,QAAQ,CAACI,MAAM;MAC1E,CAAC;IACL,CAAC,CAAC,MAAM;MACJ;MACA;MACA;IAAA;EAER,CAAC,CAAC;EACF;EACA,MAAMC,sBAAsB,GAAG,IAAAC,yCAA6B,EACxD,OAAO;IAAEd,OAAO;IAAEe,IAAI;IAAE,GAAGC;EAAK,CAAC,KAAK;IAClC,MAAMC,OAAO,GAAGD,IAAI,CAACC,OAAiC;IAEtD,MAAMC,sBAAsB,GAAGD,OAAO,CAACE,GAAG,CAACC,gCAAgC,CAAC,CAAC;IAE7E,IAAI,CAACF,sBAAsB,IAAIlB,OAAO,CAAC,aAAa,CAAC,KAAKb,UAAU,EAAE;MAClE,OAAO4B,IAAI,CAAC,CAAC;IACjB;IAEA,MAAM,IAAAM,gDAAuB,EAACJ,OAAO,EAAEjB,OAAO,CAACG,MAAM,CAAC;EAC1D,CACJ,CAAC;;EAED;EACAU,sBAAsB,CAACS,IAAI,GAAGT,sBAAsB,CAACU,IAAI,GAAG,8BAA8B;EAE1F,OAAO,CAAC1B,gBAAgB,EAAEgB,sBAAsB,CAAC;AACrD,CAAC;AAACW,OAAA,CAAA9B,iCAAA,GAAAA,iCAAA","ignoreList":[]}

package/assetDelivery/threatDetection/createThreatDetectionPluginLoader.d.ts

@@ -0,0 +1,2 @@
+import type { PluginFactory } from "@webiny/plugins/types";
+export declare const createThreatDetectionPluginLoader: (cb: PluginFactory) => PluginFactory;

package/assetDelivery/threatDetection/createThreatDetectionPluginLoader.js

@@ -0,0 +1,13 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.createThreatDetectionPluginLoader = void 0;
+var _api = require("@webiny/api");
+const createThreatDetectionPluginLoader = cb => {
+  return (0, _api.createConditionalPluginFactory)(() => process.env.WEBINY_FUNCTION_TYPE === "threat-detection-event-handler", cb);
+};
+exports.createThreatDetectionPluginLoader = createThreatDetectionPluginLoader;
+
+//# sourceMappingURL=createThreatDetectionPluginLoader.js.map

package/assetDelivery/threatDetection/createThreatDetectionPluginLoader.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_api","require","createThreatDetectionPluginLoader","cb","createConditionalPluginFactory","process","env","WEBINY_FUNCTION_TYPE","exports"],"sources":["createThreatDetectionPluginLoader.ts"],"sourcesContent":["import type { PluginFactory } from \"@webiny/plugins/types\";\nimport { createConditionalPluginFactory } from \"@webiny/api\";\n\nexport const createThreatDetectionPluginLoader = (cb: PluginFactory) => {\n    return createConditionalPluginFactory(\n        () => process.env.WEBINY_FUNCTION_TYPE === \"threat-detection-event-handler\",\n        cb\n    );\n};\n"],"mappings":";;;;;;AACA,IAAAA,IAAA,GAAAC,OAAA;AAEO,MAAMC,iCAAiC,GAAIC,EAAiB,IAAK;EACpE,OAAO,IAAAC,mCAA8B,EACjC,MAAMC,OAAO,CAACC,GAAG,CAACC,oBAAoB,KAAK,gCAAgC,EAC3EJ,EACJ,CAAC;AACL,CAAC;AAACK,OAAA,CAAAN,iCAAA,GAAAA,iCAAA","ignoreList":[]}

package/assetDelivery/threatDetection/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./createThreatDetectionEventHandler";
+export * from "./createThreatDetectionPluginLoader";

package/assetDelivery/threatDetection/index.js

@@ -0,0 +1,29 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+var _createThreatDetectionEventHandler = require("./createThreatDetectionEventHandler");
+Object.keys(_createThreatDetectionEventHandler).forEach(function (key) {
+  if (key === "default" || key === "__esModule") return;
+  if (key in exports && exports[key] === _createThreatDetectionEventHandler[key]) return;
+  Object.defineProperty(exports, key, {
+    enumerable: true,
+    get: function () {
+      return _createThreatDetectionEventHandler[key];
+    }
+  });
+});
+var _createThreatDetectionPluginLoader = require("./createThreatDetectionPluginLoader");
+Object.keys(_createThreatDetectionPluginLoader).forEach(function (key) {
+  if (key === "default" || key === "__esModule") return;
+  if (key in exports && exports[key] === _createThreatDetectionPluginLoader[key]) return;
+  Object.defineProperty(exports, key, {
+    enumerable: true,
+    get: function () {
+      return _createThreatDetectionPluginLoader[key];
+    }
+  });
+});
+
+//# sourceMappingURL=index.js.map

package/assetDelivery/threatDetection/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_createThreatDetectionEventHandler","require","Object","keys","forEach","key","exports","defineProperty","enumerable","get","_createThreatDetectionPluginLoader"],"sources":["index.ts"],"sourcesContent":["export * from \"./createThreatDetectionEventHandler\";\nexport * from \"./createThreatDetectionPluginLoader\";\n"],"mappings":";;;;;AAAA,IAAAA,kCAAA,GAAAC,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAH,kCAAA,EAAAI,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAL,kCAAA,CAAAK,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAT,kCAAA,CAAAK,GAAA;IAAA;EAAA;AAAA;AACA,IAAAK,kCAAA,GAAAT,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAO,kCAAA,EAAAN,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAK,kCAAA,CAAAL,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAC,kCAAA,CAAAL,GAAA;IAAA;EAAA;AAAA","ignoreList":[]}

package/assetDelivery/threatDetection/processThreatScanResult.d.ts

@@ -0,0 +1,2 @@
+import type { GuardDutyEvent, ThreatDetectionContext } from "./types";
+export declare const processThreatScanResult: (context: ThreatDetectionContext, eventDetail: GuardDutyEvent) => Promise<void>;

package/assetDelivery/threatDetection/processThreatScanResult.js

@@ -0,0 +1,66 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.processThreatScanResult = void 0;
+const processThreatScanResult = async (context, eventDetail) => {
+  await context.security.withoutAuthorization(async () => {
+    try {
+      const scanStatus = eventDetail.scanResultDetails.scanResultStatus;
+      const s3Object = eventDetail.s3ObjectDetails;
+      const [[file]] = await context.fileManager.listFiles({
+        limit: 1,
+        where: {
+          key: s3Object.objectKey
+        }
+      });
+      if (!file) {
+        return;
+      }
+      const allConnections = await context.websockets.listConnections();
+      if (scanStatus === "NO_THREATS_FOUND") {
+        const newTags = file.tags.filter(tag => tag !== "threatScanInProgress");
+        await context.fileManager.updateFile(file.id, {
+          tags: newTags,
+          savedBy: file.savedBy
+        });
+        await context.websockets.sendToConnections(allConnections, {
+          action: "fm.threatScan.noThreatFound",
+          data: {
+            id: file.id,
+            tags: newTags
+          }
+        });
+        return;
+      }
+      if (scanStatus === "THREATS_FOUND") {
+        // Delete infected file.
+        await context.fileManager.deleteFile(file.id);
+        await context.websockets.sendToConnections(allConnections, {
+          action: "fm.threatScan.threatDetected",
+          data: {
+            id: file.id,
+            name: file.name
+          }
+        });
+        return;
+      }
+
+      // For all other outcomes, we delete the file, until better logic is implemented.
+      await context.fileManager.deleteFile(file.id);
+      await context.websockets.sendToConnections(allConnections, {
+        action: "fm.threatScan.unsupported",
+        data: {
+          id: file.id,
+          name: file.name
+        }
+      });
+    } catch (e) {
+      console.log(e.message);
+    }
+  });
+};
+exports.processThreatScanResult = processThreatScanResult;
+
+//# sourceMappingURL=processThreatScanResult.js.map

package/assetDelivery/threatDetection/processThreatScanResult.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["processThreatScanResult","context","eventDetail","security","withoutAuthorization","scanStatus","scanResultDetails","scanResultStatus","s3Object","s3ObjectDetails","file","fileManager","listFiles","limit","where","key","objectKey","allConnections","websockets","listConnections","newTags","tags","filter","tag","updateFile","id","savedBy","sendToConnections","action","data","deleteFile","name","e","console","log","message","exports"],"sources":["processThreatScanResult.ts"],"sourcesContent":["import type { GuardDutyEvent, ThreatDetectionContext } from \"./types\";\n\nexport const processThreatScanResult = async (\n    context: ThreatDetectionContext,\n    eventDetail: GuardDutyEvent\n) => {\n    await context.security.withoutAuthorization(async () => {\n        try {\n            const scanStatus = eventDetail.scanResultDetails.scanResultStatus;\n            const s3Object = eventDetail.s3ObjectDetails;\n\n            const [[file]] = await context.fileManager.listFiles({\n                limit: 1,\n                where: {\n                    key: s3Object.objectKey\n                }\n            });\n\n            if (!file) {\n                return;\n            }\n\n            const allConnections = await context.websockets.listConnections();\n\n            if (scanStatus === \"NO_THREATS_FOUND\") {\n                const newTags = file.tags.filter(tag => tag !== \"threatScanInProgress\");\n                await context.fileManager.updateFile(file.id, {\n                    tags: newTags,\n                    savedBy: file.savedBy\n                });\n\n                await context.websockets.sendToConnections(allConnections, {\n                    action: \"fm.threatScan.noThreatFound\",\n                    data: {\n                        id: file.id,\n                        tags: newTags\n                    }\n                });\n\n                return;\n            }\n\n            if (scanStatus === \"THREATS_FOUND\") {\n                // Delete infected file.\n                await context.fileManager.deleteFile(file.id);\n\n                await context.websockets.sendToConnections(allConnections, {\n                    action: \"fm.threatScan.threatDetected\",\n                    data: {\n                        id: file.id,\n                        name: file.name\n                    }\n                });\n\n                return;\n            }\n\n            // For all other outcomes, we delete the file, until better logic is implemented.\n            await context.fileManager.deleteFile(file.id);\n\n            await context.websockets.sendToConnections(allConnections, {\n                action: \"fm.threatScan.unsupported\",\n                data: {\n                    id: file.id,\n                    name: file.name\n                }\n            });\n        } catch (e) {\n            console.log(e.message);\n        }\n    });\n};\n"],"mappings":";;;;;;AAEO,MAAMA,uBAAuB,GAAG,MAAAA,CACnCC,OAA+B,EAC/BC,WAA2B,KAC1B;EACD,MAAMD,OAAO,CAACE,QAAQ,CAACC,oBAAoB,CAAC,YAAY;IACpD,IAAI;MACA,MAAMC,UAAU,GAAGH,WAAW,CAACI,iBAAiB,CAACC,gBAAgB;MACjE,MAAMC,QAAQ,GAAGN,WAAW,CAACO,eAAe;MAE5C,MAAM,CAAC,CAACC,IAAI,CAAC,CAAC,GAAG,MAAMT,OAAO,CAACU,WAAW,CAACC,SAAS,CAAC;QACjDC,KAAK,EAAE,CAAC;QACRC,KAAK,EAAE;UACHC,GAAG,EAAEP,QAAQ,CAACQ;QAClB;MACJ,CAAC,CAAC;MAEF,IAAI,CAACN,IAAI,EAAE;QACP;MACJ;MAEA,MAAMO,cAAc,GAAG,MAAMhB,OAAO,CAACiB,UAAU,CAACC,eAAe,CAAC,CAAC;MAEjE,IAAId,UAAU,KAAK,kBAAkB,EAAE;QACnC,MAAMe,OAAO,GAAGV,IAAI,CAACW,IAAI,CAACC,MAAM,CAACC,GAAG,IAAIA,GAAG,KAAK,sBAAsB,CAAC;QACvE,MAAMtB,OAAO,CAACU,WAAW,CAACa,UAAU,CAACd,IAAI,CAACe,EAAE,EAAE;UAC1CJ,IAAI,EAAED,OAAO;UACbM,OAAO,EAAEhB,IAAI,CAACgB;QAClB,CAAC,CAAC;QAEF,MAAMzB,OAAO,CAACiB,UAAU,CAACS,iBAAiB,CAACV,cAAc,EAAE;UACvDW,MAAM,EAAE,6BAA6B;UACrCC,IAAI,EAAE;YACFJ,EAAE,EAAEf,IAAI,CAACe,EAAE;YACXJ,IAAI,EAAED;UACV;QACJ,CAAC,CAAC;QAEF;MACJ;MAEA,IAAIf,UAAU,KAAK,eAAe,EAAE;QAChC;QACA,MAAMJ,OAAO,CAACU,WAAW,CAACmB,UAAU,CAACpB,IAAI,CAACe,EAAE,CAAC;QAE7C,MAAMxB,OAAO,CAACiB,UAAU,CAACS,iBAAiB,CAACV,cAAc,EAAE;UACvDW,MAAM,EAAE,8BAA8B;UACtCC,IAAI,EAAE;YACFJ,EAAE,EAAEf,IAAI,CAACe,EAAE;YACXM,IAAI,EAAErB,IAAI,CAACqB;UACf;QACJ,CAAC,CAAC;QAEF;MACJ;;MAEA;MACA,MAAM9B,OAAO,CAACU,WAAW,CAACmB,UAAU,CAACpB,IAAI,CAACe,EAAE,CAAC;MAE7C,MAAMxB,OAAO,CAACiB,UAAU,CAACS,iBAAiB,CAACV,cAAc,EAAE;QACvDW,MAAM,EAAE,2BAA2B;QACnCC,IAAI,EAAE;UACFJ,EAAE,EAAEf,IAAI,CAACe,EAAE;UACXM,IAAI,EAAErB,IAAI,CAACqB;QACf;MACJ,CAAC,CAAC;IACN,CAAC,CAAC,OAAOC,CAAC,EAAE;MACRC,OAAO,CAACC,GAAG,CAACF,CAAC,CAACG,OAAO,CAAC;IAC1B;EACJ,CAAC,CAAC;AACN,CAAC;AAACC,OAAA,CAAApC,uBAAA,GAAAA,uBAAA","ignoreList":[]}

package/assetDelivery/threatDetection/types.d.ts

@@ -0,0 +1,13 @@
+import type { Context as IWebsocketsContext } from "@webiny/api-websockets";
+import type { WcpContext } from "@webiny/api-wcp/types";
+import type { FileManagerContext } from "@webiny/api-file-manager/types";
+export type ThreatDetectionContext = FileManagerContext & IWebsocketsContext & WcpContext;
+export type GuardDutyEvent = {
+    scanResultDetails: {
+        scanResultStatus: "UNSUPPORTED" | "FAILED" | "ACCESS_DENIED" | "THREATS_FOUND" | "NO_THREATS_FOUND";
+    };
+    s3ObjectDetails: {
+        bucketName: string;
+        objectKey: string;
+    };
+};

package/assetDelivery/threatDetection/types.js

@@ -0,0 +1,7 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+
+//# sourceMappingURL=types.js.map

package/assetDelivery/threatDetection/types.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":["types.ts"],"sourcesContent":["import type { Context as IWebsocketsContext } from \"@webiny/api-websockets\";\nimport type { WcpContext } from \"@webiny/api-wcp/types\";\nimport type { FileManagerContext } from \"@webiny/api-file-manager/types\";\n\nexport type ThreatDetectionContext = FileManagerContext & IWebsocketsContext & WcpContext;\n\nexport type GuardDutyEvent = {\n    scanResultDetails: {\n        scanResultStatus:\n            | \"UNSUPPORTED\"\n            | \"FAILED\"\n            | \"ACCESS_DENIED\"\n            | \"THREATS_FOUND\"\n            | \"NO_THREATS_FOUND\";\n    };\n    s3ObjectDetails: {\n        bucketName: string;\n        objectKey: string;\n    };\n};\n"],"mappings":"","ignoreList":[]}

package/assetDelivery/types.d.ts

@@ -0,0 +1,11 @@
+import type { createAssetDelivery as createBaseAssetDelivery } from "@webiny/api-file-manager";
+export type AssetDeliveryParams = Parameters<typeof createBaseAssetDelivery>[0] & {
+    imageResizeWidths?: number[];
+    /**
+     * BE CAREFUL!
+     * Setting this to more than 1 hour may cause your URLs to still expire before the desired expiration time.
+     * @see https://repost.aws/knowledge-center/presigned-url-s3-bucket-expiration
+     */
+    presignedUrlTtl?: number;
+    assetStreamingMaxSize?: number;
+};

package/assetDelivery/types.js

@@ -0,0 +1,7 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+
+//# sourceMappingURL=types.js.map

package/assetDelivery/types.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":["types.ts"],"sourcesContent":["import type { createAssetDelivery as createBaseAssetDelivery } from \"@webiny/api-file-manager\";\n\nexport type AssetDeliveryParams = Parameters<typeof createBaseAssetDelivery>[0] & {\n    imageResizeWidths?: number[];\n    /**\n     * BE CAREFUL!\n     * Setting this to more than 1 hour may cause your URLs to still expire before the desired expiration time.\n     * @see https://repost.aws/knowledge-center/presigned-url-s3-bucket-expiration\n     */\n    presignedUrlTtl?: number;\n    assetStreamingMaxSize?: number;\n};\n"],"mappings":"","ignoreList":[]}

package/flushCdnCache/CdnPathsGenerator.d.ts

@@ -0,0 +1,4 @@
+import type { File } from "@webiny/api-file-manager/types";
+export declare class CdnPathsGenerator {
+    generate(file: File): string[];
+}

package/flushCdnCache/CdnPathsGenerator.js

@@ -0,0 +1,14 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.CdnPathsGenerator = void 0;
+class CdnPathsGenerator {
+  generate(file) {
+    return [`/files/${file.key}*`, `/private/${file.key}*`, ...file.aliases];
+  }
+}
+exports.CdnPathsGenerator = CdnPathsGenerator;
+
+//# sourceMappingURL=CdnPathsGenerator.js.map

package/flushCdnCache/CdnPathsGenerator.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["CdnPathsGenerator","generate","file","key","aliases","exports"],"sources":["CdnPathsGenerator.ts"],"sourcesContent":["import type { File } from \"@webiny/api-file-manager/types\";\n\nexport class CdnPathsGenerator {\n    generate(file: File) {\n        return [`/files/${file.key}*`, `/private/${file.key}*`, ...file.aliases];\n    }\n}\n"],"mappings":";;;;;;AAEO,MAAMA,iBAAiB,CAAC;EAC3BC,QAAQA,CAACC,IAAU,EAAE;IACjB,OAAO,CAAC,UAAUA,IAAI,CAACC,GAAG,GAAG,EAAE,YAAYD,IAAI,CAACC,GAAG,GAAG,EAAE,GAAGD,IAAI,CAACE,OAAO,CAAC;EAC5E;AACJ;AAACC,OAAA,CAAAL,iBAAA,GAAAA,iBAAA","ignoreList":[]}

package/flushCdnCache/InvalidateCacheTask.d.ts

@@ -0,0 +1,18 @@
+import type { ITaskRunParams } from "@webiny/tasks/types";
+import type { FileManagerContext } from "@webiny/api-file-manager/types";
+import type { ITaskResponseResult } from "@webiny/tasks/response/abstractions";
+export interface InvalidateCacheInput {
+    /**
+     * Caller of the task (e.g., `fm-before-update`, `fm-after-delete`).
+     */
+    caller: string;
+    /**
+     * Cache paths to invalidate.
+     */
+    paths: string[];
+}
+export declare class InvalidateCloudfrontCacheTask {
+    private continueIfCode;
+    run({ input, response, isCloseToTimeout }: ITaskRunParams<FileManagerContext, InvalidateCacheInput>): Promise<ITaskResponseResult>;
+    private invalidateCache;
+}

package/flushCdnCache/InvalidateCacheTask.js

@@ -0,0 +1,78 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.InvalidateCloudfrontCacheTask = void 0;
+var _api = require("@webiny/api");
+var _clientCloudfront = require("@webiny/aws-sdk/client-cloudfront");
+var _utils = require("@webiny/utils");
+class ReturnContinue extends Error {}
+class InvalidateCloudfrontCacheTask {
+  continueIfCode = ["TooManyInvalidationsInProgress", "Throttling"];
+  async run({
+    input,
+    response,
+    isCloseToTimeout
+  }) {
+    const manifest = await _api.ServiceDiscovery.load();
+    if (!manifest) {
+      return response.error({
+        message: `Unable to invalidate cache due to a missing service manifest.`,
+        code: "MISSING_SERVICE_MANIFEST",
+        data: {
+          manifest: "api"
+        }
+      });
+    }
+    const {
+      distributionId
+    } = manifest.api.cloudfront;
+    const invalidateCache = () => {
+      return this.invalidateCache(input.caller, distributionId, input.paths);
+    };
+    try {
+      await (0, _utils.executeWithRetry)(invalidateCache, {
+        minTimeout: 2000,
+        forever: true,
+        onFailedAttempt: err => {
+          if (this.continueIfCode.includes(err.name)) {
+            throw new ReturnContinue();
+          }
+          if (err.message.includes("not authorized to perform")) {
+            throw err;
+          }
+          if (isCloseToTimeout()) {
+            throw new ReturnContinue();
+          }
+        }
+      });
+    } catch (error) {
+      if (error instanceof ReturnContinue) {
+        return response.continue(input);
+      }
+      return response.error({
+        message: error.message,
+        code: "EXECUTE_WITH_RETRY_FAILED",
+        data: input.paths
+      });
+    }
+    return response.done();
+  }
+  async invalidateCache(caller, distributionId, paths) {
+    const cloudfront = new _clientCloudfront.CloudFront();
+    await cloudfront.createInvalidation({
+      DistributionId: distributionId,
+      InvalidationBatch: {
+        CallerReference: `${new Date().getTime()}-${caller}`,
+        Paths: {
+          Quantity: paths.length,
+          Items: paths
+        }
+      }
+    });
+  }
+}
+exports.InvalidateCloudfrontCacheTask = InvalidateCloudfrontCacheTask;
+
+//# sourceMappingURL=InvalidateCacheTask.js.map

package/flushCdnCache/InvalidateCacheTask.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_api","require","_clientCloudfront","_utils","ReturnContinue","Error","InvalidateCloudfrontCacheTask","continueIfCode","run","input","response","isCloseToTimeout","manifest","ServiceDiscovery","load","error","message","code","data","distributionId","api","cloudfront","invalidateCache","caller","paths","executeWithRetry","minTimeout","forever","onFailedAttempt","err","includes","name","continue","done","CloudFront","createInvalidation","DistributionId","InvalidationBatch","CallerReference","Date","getTime","Paths","Quantity","length","Items","exports"],"sources":["InvalidateCacheTask.ts"],"sourcesContent":["import { ServiceDiscovery } from \"@webiny/api\";\nimport { CloudFront } from \"@webiny/aws-sdk/client-cloudfront\";\nimport type { ITaskRunParams } from \"@webiny/tasks/types\";\nimport type { FileManagerContext } from \"@webiny/api-file-manager/types\";\nimport { executeWithRetry } from \"@webiny/utils\";\nimport type { ITaskResponseResult } from \"@webiny/tasks/response/abstractions\";\n\nclass ReturnContinue extends Error {}\n\nexport interface InvalidateCacheInput {\n    /**\n     * Caller of the task (e.g., `fm-before-update`, `fm-after-delete`).\n     */\n    caller: string;\n    /**\n     * Cache paths to invalidate.\n     */\n    paths: string[];\n}\n\nexport class InvalidateCloudfrontCacheTask {\n    private continueIfCode = [\"TooManyInvalidationsInProgress\", \"Throttling\"];\n\n    public async run({\n        input,\n        response,\n        isCloseToTimeout\n    }: ITaskRunParams<FileManagerContext, InvalidateCacheInput>): Promise<ITaskResponseResult> {\n        const manifest = await ServiceDiscovery.load();\n\n        if (!manifest) {\n            return response.error({\n                message: `Unable to invalidate cache due to a missing service manifest.`,\n                code: \"MISSING_SERVICE_MANIFEST\",\n                data: {\n                    manifest: \"api\"\n                }\n            });\n        }\n\n        const { distributionId } = manifest.api.cloudfront;\n\n        const invalidateCache = () => {\n            return this.invalidateCache(input.caller, distributionId as string, input.paths);\n        };\n\n        try {\n            await executeWithRetry(invalidateCache, {\n                minTimeout: 2000,\n                forever: true,\n                onFailedAttempt: err => {\n                    if (this.continueIfCode.includes(err.name)) {\n                        throw new ReturnContinue();\n                    }\n\n                    if (err.message.includes(\"not authorized to perform\")) {\n                        throw err;\n                    }\n\n                    if (isCloseToTimeout()) {\n                        throw new ReturnContinue();\n                    }\n                }\n            });\n        } catch (error) {\n            if (error instanceof ReturnContinue) {\n                return response.continue(input);\n            }\n\n            return response.error({\n                message: error.message,\n                code: \"EXECUTE_WITH_RETRY_FAILED\",\n                data: input.paths\n            });\n        }\n\n        return response.done();\n    }\n\n    private async invalidateCache(\n        caller: string,\n        distributionId: string,\n        paths: string[]\n    ): Promise<void> {\n        const cloudfront = new CloudFront();\n        await cloudfront.createInvalidation({\n            DistributionId: distributionId,\n            InvalidationBatch: {\n                CallerReference: `${new Date().getTime()}-${caller}`,\n                Paths: {\n                    Quantity: paths.length,\n                    Items: paths\n                }\n            }\n        });\n    }\n}\n"],"mappings":";;;;;;AAAA,IAAAA,IAAA,GAAAC,OAAA;AACA,IAAAC,iBAAA,GAAAD,OAAA;AAGA,IAAAE,MAAA,GAAAF,OAAA;AAGA,MAAMG,cAAc,SAASC,KAAK,CAAC;AAa5B,MAAMC,6BAA6B,CAAC;EAC/BC,cAAc,GAAG,CAAC,gCAAgC,EAAE,YAAY,CAAC;EAEzE,MAAaC,GAAGA,CAAC;IACbC,KAAK;IACLC,QAAQ;IACRC;EACsD,CAAC,EAAgC;IACvF,MAAMC,QAAQ,GAAG,MAAMC,qBAAgB,CAACC,IAAI,CAAC,CAAC;IAE9C,IAAI,CAACF,QAAQ,EAAE;MACX,OAAOF,QAAQ,CAACK,KAAK,CAAC;QAClBC,OAAO,EAAE,+DAA+D;QACxEC,IAAI,EAAE,0BAA0B;QAChCC,IAAI,EAAE;UACFN,QAAQ,EAAE;QACd;MACJ,CAAC,CAAC;IACN;IAEA,MAAM;MAAEO;IAAe,CAAC,GAAGP,QAAQ,CAACQ,GAAG,CAACC,UAAU;IAElD,MAAMC,eAAe,GAAGA,CAAA,KAAM;MAC1B,OAAO,IAAI,CAACA,eAAe,CAACb,KAAK,CAACc,MAAM,EAAEJ,cAAc,EAAYV,KAAK,CAACe,KAAK,CAAC;IACpF,CAAC;IAED,IAAI;MACA,MAAM,IAAAC,uBAAgB,EAACH,eAAe,EAAE;QACpCI,UAAU,EAAE,IAAI;QAChBC,OAAO,EAAE,IAAI;QACbC,eAAe,EAAEC,GAAG,IAAI;UACpB,IAAI,IAAI,CAACtB,cAAc,CAACuB,QAAQ,CAACD,GAAG,CAACE,IAAI,CAAC,EAAE;YACxC,MAAM,IAAI3B,cAAc,CAAC,CAAC;UAC9B;UAEA,IAAIyB,GAAG,CAACb,OAAO,CAACc,QAAQ,CAAC,2BAA2B,CAAC,EAAE;YACnD,MAAMD,GAAG;UACb;UAEA,IAAIlB,gBAAgB,CAAC,CAAC,EAAE;YACpB,MAAM,IAAIP,cAAc,CAAC,CAAC;UAC9B;QACJ;MACJ,CAAC,CAAC;IACN,CAAC,CAAC,OAAOW,KAAK,EAAE;MACZ,IAAIA,KAAK,YAAYX,cAAc,EAAE;QACjC,OAAOM,QAAQ,CAACsB,QAAQ,CAACvB,KAAK,CAAC;MACnC;MAEA,OAAOC,QAAQ,CAACK,KAAK,CAAC;QAClBC,OAAO,EAAED,KAAK,CAACC,OAAO;QACtBC,IAAI,EAAE,2BAA2B;QACjCC,IAAI,EAAET,KAAK,CAACe;MAChB,CAAC,CAAC;IACN;IAEA,OAAOd,QAAQ,CAACuB,IAAI,CAAC,CAAC;EAC1B;EAEA,MAAcX,eAAeA,CACzBC,MAAc,EACdJ,cAAsB,EACtBK,KAAe,EACF;IACb,MAAMH,UAAU,GAAG,IAAIa,4BAAU,CAAC,CAAC;IACnC,MAAMb,UAAU,CAACc,kBAAkB,CAAC;MAChCC,cAAc,EAAEjB,cAAc;MAC9BkB,iBAAiB,EAAE;QACfC,eAAe,EAAE,GAAG,IAAIC,IAAI,CAAC,CAAC,CAACC,OAAO,CAAC,CAAC,IAAIjB,MAAM,EAAE;QACpDkB,KAAK,EAAE;UACHC,QAAQ,EAAElB,KAAK,CAACmB,MAAM;UACtBC,KAAK,EAAEpB;QACX;MACJ;IACJ,CAAC,CAAC;EACN;AACJ;AAACqB,OAAA,CAAAvC,6BAAA,GAAAA,6BAAA","ignoreList":[]}

package/flushCdnCache/flushCacheOnFileDelete.d.ts

@@ -0,0 +1,3 @@
+import { ContextPlugin } from "@webiny/api";
+import type { FileManagerContext } from "@webiny/api-file-manager/types";
+export declare const flushCacheOnFileDelete: () => ContextPlugin<FileManagerContext>;

package/flushCdnCache/flushCacheOnFileDelete.js

@@ -0,0 +1,34 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.flushCacheOnFileDelete = void 0;
+var _api = require("@webiny/api");
+var _CdnPathsGenerator = require("./CdnPathsGenerator");
+class FlushCacheOnFileDelete {
+  constructor(context) {
+    this.pathsGenerator = new _CdnPathsGenerator.CdnPathsGenerator();
+    this.context = context;
+    context.fileManager.onFileAfterDelete.subscribe(this.onFileAfterDelete);
+  }
+  onFileAfterDelete = async ({
+    file
+  }) => {
+    await this.context.tasks.trigger({
+      definition: "cloudfrontInvalidateCache",
+      input: {
+        caller: "fm-before-delete",
+        paths: this.pathsGenerator.generate(file)
+      }
+    });
+  };
+}
+const flushCacheOnFileDelete = () => {
+  return new _api.ContextPlugin(context => {
+    new FlushCacheOnFileDelete(context);
+  });
+};
+exports.flushCacheOnFileDelete = flushCacheOnFileDelete;
+
+//# sourceMappingURL=flushCacheOnFileDelete.js.map

package/flushCdnCache/flushCacheOnFileDelete.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_api","require","_CdnPathsGenerator","FlushCacheOnFileDelete","constructor","context","pathsGenerator","CdnPathsGenerator","fileManager","onFileAfterDelete","subscribe","file","tasks","trigger","definition","input","caller","paths","generate","flushCacheOnFileDelete","ContextPlugin","exports"],"sources":["flushCacheOnFileDelete.ts"],"sourcesContent":["import { ContextPlugin } from \"@webiny/api\";\nimport type {\n    FileManagerContext,\n    OnFileBeforeUpdateTopicParams\n} from \"@webiny/api-file-manager/types\";\nimport { CdnPathsGenerator } from \"~/flushCdnCache/CdnPathsGenerator\";\n\nclass FlushCacheOnFileDelete {\n    private readonly context: FileManagerContext;\n    private readonly pathsGenerator: CdnPathsGenerator;\n\n    constructor(context: FileManagerContext) {\n        this.pathsGenerator = new CdnPathsGenerator();\n        this.context = context;\n        context.fileManager.onFileAfterDelete.subscribe(this.onFileAfterDelete);\n    }\n\n    private onFileAfterDelete = async ({ file }: OnFileBeforeUpdateTopicParams) => {\n        await this.context.tasks.trigger({\n            definition: \"cloudfrontInvalidateCache\",\n            input: {\n                caller: \"fm-before-delete\",\n                paths: this.pathsGenerator.generate(file)\n            }\n        });\n    };\n}\n\nexport const flushCacheOnFileDelete = () => {\n    return new ContextPlugin<FileManagerContext>(context => {\n        new FlushCacheOnFileDelete(context);\n    });\n};\n"],"mappings":";;;;;;AAAA,IAAAA,IAAA,GAAAC,OAAA;AAKA,IAAAC,kBAAA,GAAAD,OAAA;AAEA,MAAME,sBAAsB,CAAC;EAIzBC,WAAWA,CAACC,OAA2B,EAAE;IACrC,IAAI,CAACC,cAAc,GAAG,IAAIC,oCAAiB,CAAC,CAAC;IAC7C,IAAI,CAACF,OAAO,GAAGA,OAAO;IACtBA,OAAO,CAACG,WAAW,CAACC,iBAAiB,CAACC,SAAS,CAAC,IAAI,CAACD,iBAAiB,CAAC;EAC3E;EAEQA,iBAAiB,GAAG,MAAAA,CAAO;IAAEE;EAAoC,CAAC,KAAK;IAC3E,MAAM,IAAI,CAACN,OAAO,CAACO,KAAK,CAACC,OAAO,CAAC;MAC7BC,UAAU,EAAE,2BAA2B;MACvCC,KAAK,EAAE;QACHC,MAAM,EAAE,kBAAkB;QAC1BC,KAAK,EAAE,IAAI,CAACX,cAAc,CAACY,QAAQ,CAACP,IAAI;MAC5C;IACJ,CAAC,CAAC;EACN,CAAC;AACL;AAEO,MAAMQ,sBAAsB,GAAGA,CAAA,KAAM;EACxC,OAAO,IAAIC,kBAAa,CAAqBf,OAAO,IAAI;IACpD,IAAIF,sBAAsB,CAACE,OAAO,CAAC;EACvC,CAAC,CAAC;AACN,CAAC;AAACgB,OAAA,CAAAF,sBAAA,GAAAA,sBAAA","ignoreList":[]}

package/flushCdnCache/flushCacheOnFileUpdate.d.ts

@@ -0,0 +1,3 @@
+import { ContextPlugin } from "@webiny/api";
+import type { FileManagerContext } from "@webiny/api-file-manager/types";
+export declare const flushCacheOnFileUpdate: () => ContextPlugin<FileManagerContext>;

package/flushCdnCache/flushCacheOnFileUpdate.js

@@ -0,0 +1,40 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.flushCacheOnFileUpdate = void 0;
+var _api = require("@webiny/api");
+var _CdnPathsGenerator = require("./CdnPathsGenerator");
+class FlushCacheOnFileUpdate {
+  constructor(context) {
+    this.pathsGenerator = new _CdnPathsGenerator.CdnPathsGenerator();
+    this.context = context;
+    context.fileManager.onFileBeforeUpdate.subscribe(this.onFileBeforeUpdate);
+  }
+  onFileBeforeUpdate = async ({
+    file,
+    original
+  }) => {
+    const prevAccessControl = original.accessControl;
+    const newAccessControl = file.accessControl;
+    if (prevAccessControl?.type === newAccessControl?.type) {
+      return;
+    }
+    await this.context.tasks.trigger({
+      definition: "cloudfrontInvalidateCache",
+      input: {
+        caller: "fm-before-update",
+        paths: this.pathsGenerator.generate(file)
+      }
+    });
+  };
+}
+const flushCacheOnFileUpdate = () => {
+  return new _api.ContextPlugin(context => {
+    new FlushCacheOnFileUpdate(context);
+  });
+};
+exports.flushCacheOnFileUpdate = flushCacheOnFileUpdate;
+
+//# sourceMappingURL=flushCacheOnFileUpdate.js.map

package/flushCdnCache/flushCacheOnFileUpdate.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_api","require","_CdnPathsGenerator","FlushCacheOnFileUpdate","constructor","context","pathsGenerator","CdnPathsGenerator","fileManager","onFileBeforeUpdate","subscribe","file","original","prevAccessControl","accessControl","newAccessControl","type","tasks","trigger","definition","input","caller","paths","generate","flushCacheOnFileUpdate","ContextPlugin","exports"],"sources":["flushCacheOnFileUpdate.ts"],"sourcesContent":["import { ContextPlugin } from \"@webiny/api\";\nimport type {\n    FileManagerContext,\n    OnFileBeforeUpdateTopicParams\n} from \"@webiny/api-file-manager/types\";\nimport { CdnPathsGenerator } from \"~/flushCdnCache/CdnPathsGenerator\";\n\nclass FlushCacheOnFileUpdate {\n    private readonly context: FileManagerContext;\n    private readonly pathsGenerator: CdnPathsGenerator;\n\n    constructor(context: FileManagerContext) {\n        this.pathsGenerator = new CdnPathsGenerator();\n        this.context = context;\n        context.fileManager.onFileBeforeUpdate.subscribe(this.onFileBeforeUpdate);\n    }\n\n    private onFileBeforeUpdate = async ({ file, original }: OnFileBeforeUpdateTopicParams) => {\n        const prevAccessControl = original.accessControl;\n        const newAccessControl = file.accessControl;\n\n        if (prevAccessControl?.type === newAccessControl?.type) {\n            return;\n        }\n\n        await this.context.tasks.trigger({\n            definition: \"cloudfrontInvalidateCache\",\n            input: {\n                caller: \"fm-before-update\",\n                paths: this.pathsGenerator.generate(file)\n            }\n        });\n    };\n}\n\nexport const flushCacheOnFileUpdate = () => {\n    return new ContextPlugin<FileManagerContext>(context => {\n        new FlushCacheOnFileUpdate(context);\n    });\n};\n"],"mappings":";;;;;;AAAA,IAAAA,IAAA,GAAAC,OAAA;AAKA,IAAAC,kBAAA,GAAAD,OAAA;AAEA,MAAME,sBAAsB,CAAC;EAIzBC,WAAWA,CAACC,OAA2B,EAAE;IACrC,IAAI,CAACC,cAAc,GAAG,IAAIC,oCAAiB,CAAC,CAAC;IAC7C,IAAI,CAACF,OAAO,GAAGA,OAAO;IACtBA,OAAO,CAACG,WAAW,CAACC,kBAAkB,CAACC,SAAS,CAAC,IAAI,CAACD,kBAAkB,CAAC;EAC7E;EAEQA,kBAAkB,GAAG,MAAAA,CAAO;IAAEE,IAAI;IAAEC;EAAwC,CAAC,KAAK;IACtF,MAAMC,iBAAiB,GAAGD,QAAQ,CAACE,aAAa;IAChD,MAAMC,gBAAgB,GAAGJ,IAAI,CAACG,aAAa;IAE3C,IAAID,iBAAiB,EAAEG,IAAI,KAAKD,gBAAgB,EAAEC,IAAI,EAAE;MACpD;IACJ;IAEA,MAAM,IAAI,CAACX,OAAO,CAACY,KAAK,CAACC,OAAO,CAAC;MAC7BC,UAAU,EAAE,2BAA2B;MACvCC,KAAK,EAAE;QACHC,MAAM,EAAE,kBAAkB;QAC1BC,KAAK,EAAE,IAAI,CAAChB,cAAc,CAACiB,QAAQ,CAACZ,IAAI;MAC5C;IACJ,CAAC,CAAC;EACN,CAAC;AACL;AAEO,MAAMa,sBAAsB,GAAGA,CAAA,KAAM;EACxC,OAAO,IAAIC,kBAAa,CAAqBpB,OAAO,IAAI;IACpD,IAAIF,sBAAsB,CAACE,OAAO,CAAC;EACvC,CAAC,CAAC;AACN,CAAC;AAACqB,OAAA,CAAAF,sBAAA,GAAAA,sBAAA","ignoreList":[]}

package/flushCdnCache/index.d.ts

@@ -0,0 +1 @@
+export declare const flushCdnCache: () => (import("@webiny/api").ContextPlugin<import("@webiny/api-file-manager/types").FileManagerContext> | import("@webiny/tasks").TaskDefinitionPlugin<import("@webiny/api-file-manager/types").FileManagerContext, any, import("@webiny/tasks").ITaskResponseDoneResultOutput>)[];

package/flushCdnCache/index.js

@@ -0,0 +1,15 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.flushCdnCache = void 0;
+var _flushCacheOnFileUpdate = require("./flushCacheOnFileUpdate");
+var _flushCacheOnFileDelete = require("./flushCacheOnFileDelete");
+var _invalidateCacheTaskDefinition = require("./invalidateCacheTaskDefinition");
+const flushCdnCache = () => {
+  return [(0, _flushCacheOnFileUpdate.flushCacheOnFileUpdate)(), (0, _flushCacheOnFileDelete.flushCacheOnFileDelete)(), (0, _invalidateCacheTaskDefinition.createInvalidateCacheTask)()];
+};
+exports.flushCdnCache = flushCdnCache;
+
+//# sourceMappingURL=index.js.map

package/flushCdnCache/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_flushCacheOnFileUpdate","require","_flushCacheOnFileDelete","_invalidateCacheTaskDefinition","flushCdnCache","flushCacheOnFileUpdate","flushCacheOnFileDelete","createInvalidateCacheTask","exports"],"sources":["index.ts"],"sourcesContent":["import { flushCacheOnFileUpdate } from \"~/flushCdnCache/flushCacheOnFileUpdate\";\nimport { flushCacheOnFileDelete } from \"~/flushCdnCache/flushCacheOnFileDelete\";\nimport { createInvalidateCacheTask } from \"./invalidateCacheTaskDefinition\";\n\nexport const flushCdnCache = () => {\n    return [flushCacheOnFileUpdate(), flushCacheOnFileDelete(), createInvalidateCacheTask()];\n};\n"],"mappings":";;;;;;AAAA,IAAAA,uBAAA,GAAAC,OAAA;AACA,IAAAC,uBAAA,GAAAD,OAAA;AACA,IAAAE,8BAAA,GAAAF,OAAA;AAEO,MAAMG,aAAa,GAAGA,CAAA,KAAM;EAC/B,OAAO,CAAC,IAAAC,8CAAsB,EAAC,CAAC,EAAE,IAAAC,8CAAsB,EAAC,CAAC,EAAE,IAAAC,wDAAyB,EAAC,CAAC,CAAC;AAC5F,CAAC;AAACC,OAAA,CAAAJ,aAAA,GAAAA,aAAA","ignoreList":[]}

package/flushCdnCache/invalidateCacheTaskDefinition.d.ts

@@ -0,0 +1,2 @@
+import type { FileManagerContext } from "@webiny/api-file-manager/types";
+export declare const createInvalidateCacheTask: () => import("@webiny/tasks").TaskDefinitionPlugin<FileManagerContext, any, import("@webiny/tasks").ITaskResponseDoneResultOutput>;

package/flushCdnCache/invalidateCacheTaskDefinition.js

@@ -0,0 +1,22 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.createInvalidateCacheTask = void 0;
+var _tasks = require("@webiny/tasks");
+var _InvalidateCacheTask = require("./InvalidateCacheTask");
+const createInvalidateCacheTask = () => {
+  return (0, _tasks.createPrivateTaskDefinition)({
+    id: "cloudfrontInvalidateCache",
+    title: "Invalidate Cloudfront Cache",
+    description: "A task to invalidate Cloudfront cache by given paths.",
+    run(params) {
+      const taskRunner = new _InvalidateCacheTask.InvalidateCloudfrontCacheTask();
+      return taskRunner.run(params);
+    }
+  });
+};
+exports.createInvalidateCacheTask = createInvalidateCacheTask;
+
+//# sourceMappingURL=invalidateCacheTaskDefinition.js.map