@webiny/api-file-manager-s3 0.0.0-unstable.eb196ccd2f → 0.0.0-unstable.eb81deee7e

package/assetDelivery/s3/transformation/utils.js

@@ -1,33 +1,31 @@
-"use strict";
-
-var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault").default;
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.getOptimizedTransformedImageKeyPrefix = exports.getOptimizedImageKeyPrefix = exports.getImageKey = exports.SUPPORTED_TRANSFORMABLE_IMAGES = exports.OPTIMIZED_TRANSFORMED_IMAGE_PREFIX = exports.OPTIMIZED_IMAGE_PREFIX = void 0;
-var _objectHash = _interopRequireDefault(require("object-hash"));
-const SUPPORTED_TRANSFORMABLE_IMAGES = exports.SUPPORTED_TRANSFORMABLE_IMAGES = ["jpg", "jpeg", "png", "webp"];
-const OPTIMIZED_TRANSFORMED_IMAGE_PREFIX = exports.OPTIMIZED_TRANSFORMED_IMAGE_PREFIX = "img-o-t-";
-const OPTIMIZED_IMAGE_PREFIX = exports.OPTIMIZED_IMAGE_PREFIX = "img-o-";
-const getOptimizedImageKeyPrefix = key => {
-  const [id, name] = key.split("/");
-  return `${id}/${OPTIMIZED_IMAGE_PREFIX}${name}`;
+import object_hash from "object-hash";
+import node_path from "node:path";
+const SUPPORTED_TRANSFORMABLE_IMAGES = [
+    "jpg",
+    "jpeg",
+    "png",
+    "webp"
+];
+const parseKey = (key)=>{
+    const filename = node_path.basename(key);
+    const dirname = node_path.dirname(key);
+    return {
+        filename,
+        dirname
+    };
+};
+const getOptimizedImageKeyPrefix = (key)=>{
+    const { filename, dirname } = parseKey(key);
+    return `${dirname}/optimized/${filename}`;
 };
-exports.getOptimizedImageKeyPrefix = getOptimizedImageKeyPrefix;
-const getOptimizedTransformedImageKeyPrefix = (key, transformationsHash) => {
-  const [id, name] = key.split("/");
-  return `${id}/${OPTIMIZED_TRANSFORMED_IMAGE_PREFIX}${transformationsHash}-${name}`;
+const getOptimizedTransformedImageKeyPrefix = (key, transformationsHash)=>{
+    const { filename, dirname } = parseKey(key);
+    return `${dirname}/optimized/${transformationsHash}-${filename}`;
 };
-exports.getOptimizedTransformedImageKeyPrefix = getOptimizedTransformedImageKeyPrefix;
-const getImageKey = ({
-  key,
-  transformations
-}) => {
-  if (!transformations) {
-    return getOptimizedImageKeyPrefix(key);
-  }
-  return getOptimizedTransformedImageKeyPrefix(key, (0, _objectHash.default)(transformations));
+const getImageKey = ({ key, transformations })=>{
+    if (!transformations) return getOptimizedImageKeyPrefix(key);
+    return getOptimizedTransformedImageKeyPrefix(key, object_hash(transformations));
 };
-exports.getImageKey = getImageKey;
+export { SUPPORTED_TRANSFORMABLE_IMAGES, getImageKey, getOptimizedImageKeyPrefix, getOptimizedTransformedImageKeyPrefix };
 
 //# sourceMappingURL=utils.js.map

package/assetDelivery/s3/transformation/utils.js.map

@@ -1 +1 @@
-{"version":3,"names":["_objectHash","_interopRequireDefault","require","SUPPORTED_TRANSFORMABLE_IMAGES","exports","OPTIMIZED_TRANSFORMED_IMAGE_PREFIX","OPTIMIZED_IMAGE_PREFIX","getOptimizedImageKeyPrefix","key","id","name","split","getOptimizedTransformedImageKeyPrefix","transformationsHash","getImageKey","transformations","objectHash"],"sources":["utils.ts"],"sourcesContent":["import objectHash from \"object-hash\";\n\nconst SUPPORTED_TRANSFORMABLE_IMAGES = [\"jpg\", \"jpeg\", \"png\", \"webp\"];\nconst OPTIMIZED_TRANSFORMED_IMAGE_PREFIX = \"img-o-t-\";\nconst OPTIMIZED_IMAGE_PREFIX = \"img-o-\";\n\nconst getOptimizedImageKeyPrefix = (key: string): string => {\n    const [id, name] = key.split(\"/\");\n    return `${id}/${OPTIMIZED_IMAGE_PREFIX}${name}`;\n};\n\nconst getOptimizedTransformedImageKeyPrefix = (\n    key: string,\n    transformationsHash: string\n): string => {\n    const [id, name] = key.split(\"/\");\n    return `${id}/${OPTIMIZED_TRANSFORMED_IMAGE_PREFIX}${transformationsHash}-${name}`;\n};\n\ninterface GetImageKeyParams {\n    key: string;\n    transformations?: any;\n}\n\nconst getImageKey = ({ key, transformations }: GetImageKeyParams): string => {\n    if (!transformations) {\n        return getOptimizedImageKeyPrefix(key);\n    }\n\n    return getOptimizedTransformedImageKeyPrefix(key, objectHash(transformations));\n};\n\nexport {\n    SUPPORTED_TRANSFORMABLE_IMAGES,\n    OPTIMIZED_TRANSFORMED_IMAGE_PREFIX,\n    OPTIMIZED_IMAGE_PREFIX,\n    getImageKey,\n    getOptimizedImageKeyPrefix,\n    getOptimizedTransformedImageKeyPrefix\n};\n"],"mappings":";;;;;;;AAAA,IAAAA,WAAA,GAAAC,sBAAA,CAAAC,OAAA;AAEA,MAAMC,8BAA8B,GAAAC,OAAA,CAAAD,8BAAA,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC;AACrE,MAAME,kCAAkC,GAAAD,OAAA,CAAAC,kCAAA,GAAG,UAAU;AACrD,MAAMC,sBAAsB,GAAAF,OAAA,CAAAE,sBAAA,GAAG,QAAQ;AAEvC,MAAMC,0BAA0B,GAAIC,GAAW,IAAa;EACxD,MAAM,CAACC,EAAE,EAAEC,IAAI,CAAC,GAAGF,GAAG,CAACG,KAAK,CAAC,GAAG,CAAC;EACjC,OAAO,GAAGF,EAAE,IAAIH,sBAAsB,GAAGI,IAAI,EAAE;AACnD,CAAC;AAACN,OAAA,CAAAG,0BAAA,GAAAA,0BAAA;AAEF,MAAMK,qCAAqC,GAAGA,CAC1CJ,GAAW,EACXK,mBAA2B,KAClB;EACT,MAAM,CAACJ,EAAE,EAAEC,IAAI,CAAC,GAAGF,GAAG,CAACG,KAAK,CAAC,GAAG,CAAC;EACjC,OAAO,GAAGF,EAAE,IAAIJ,kCAAkC,GAAGQ,mBAAmB,IAAIH,IAAI,EAAE;AACtF,CAAC;AAACN,OAAA,CAAAQ,qCAAA,GAAAA,qCAAA;AAOF,MAAME,WAAW,GAAGA,CAAC;EAAEN,GAAG;EAAEO;AAAmC,CAAC,KAAa;EACzE,IAAI,CAACA,eAAe,EAAE;IAClB,OAAOR,0BAA0B,CAACC,GAAG,CAAC;EAC1C;EAEA,OAAOI,qCAAqC,CAACJ,GAAG,EAAE,IAAAQ,mBAAU,EAACD,eAAe,CAAC,CAAC;AAClF,CAAC;AAACX,OAAA,CAAAU,WAAA,GAAAA,WAAA","ignoreList":[]}
+{"version":3,"file":"assetDelivery/s3/transformation/utils.js","sources":["../../../../src/assetDelivery/s3/transformation/utils.ts"],"sourcesContent":["import objectHash from \"object-hash\";\nimport path from \"node:path\";\n\nconst SUPPORTED_TRANSFORMABLE_IMAGES = [\"jpg\", \"jpeg\", \"png\", \"webp\"];\n\nconst parseKey = (key: string) => {\n    const filename = path.basename(key);\n    const dirname = path.dirname(key);\n\n    return { filename, dirname };\n};\n\nconst getOptimizedImageKeyPrefix = (key: string): string => {\n    const { filename, dirname } = parseKey(key);\n\n    return `${dirname}/optimized/${filename}`;\n};\n\nconst getOptimizedTransformedImageKeyPrefix = (\n    key: string,\n    transformationsHash: string\n): string => {\n    const { filename, dirname } = parseKey(key);\n\n    return `${dirname}/optimized/${transformationsHash}-${filename}`;\n};\n\ninterface GetImageKeyParams {\n    key: string;\n    transformations?: any;\n}\n\nconst getImageKey = ({ key, transformations }: GetImageKeyParams): string => {\n    if (!transformations) {\n        return getOptimizedImageKeyPrefix(key);\n    }\n\n    return getOptimizedTransformedImageKeyPrefix(key, objectHash(transformations));\n};\n\nexport {\n    SUPPORTED_TRANSFORMABLE_IMAGES,\n    getImageKey,\n    getOptimizedImageKeyPrefix,\n    getOptimizedTransformedImageKeyPrefix\n};\n"],"names":["SUPPORTED_TRANSFORMABLE_IMAGES","parseKey","key","filename","path","dirname","getOptimizedImageKeyPrefix","getOptimizedTransformedImageKeyPrefix","transformationsHash","getImageKey","transformations","objectHash"],"mappings":";;AAGA,MAAMA,iCAAiC;IAAC;IAAO;IAAQ;IAAO;CAAO;AAErE,MAAMC,WAAW,CAACC;IACd,MAAMC,WAAWC,UAAAA,QAAa,CAACF;IAC/B,MAAMG,UAAUD,UAAAA,OAAY,CAACF;IAE7B,OAAO;QAAEC;QAAUE;IAAQ;AAC/B;AAEA,MAAMC,6BAA6B,CAACJ;IAChC,MAAM,EAAEC,QAAQ,EAAEE,OAAO,EAAE,GAAGJ,SAASC;IAEvC,OAAO,GAAGG,QAAQ,WAAW,EAAEF,UAAU;AAC7C;AAEA,MAAMI,wCAAwC,CAC1CL,KACAM;IAEA,MAAM,EAAEL,QAAQ,EAAEE,OAAO,EAAE,GAAGJ,SAASC;IAEvC,OAAO,GAAGG,QAAQ,WAAW,EAAEG,oBAAoB,CAAC,EAAEL,UAAU;AACpE;AAOA,MAAMM,cAAc,CAAC,EAAEP,GAAG,EAAEQ,eAAe,EAAqB;IAC5D,IAAI,CAACA,iBACD,OAAOJ,2BAA2BJ;IAGtC,OAAOK,sCAAsCL,KAAKS,YAAWD;AACjE"}

package/assetDelivery/threatDetection/ObjectKey.d.ts

@@ -0,0 +1,7 @@
+export declare class ObjectKey {
+    private bucketKey;
+    static from(key: string): ObjectKey;
+    private constructor();
+    id(): string;
+    relativeKey(): string;
+}

package/assetDelivery/threatDetection/ObjectKey.js

@@ -0,0 +1,18 @@
+class ObjectKey {
+    static from(key) {
+        return new ObjectKey(key);
+    }
+    constructor(key){
+        this.bucketKey = key;
+    }
+    id() {
+        const [id] = this.relativeKey().split("/");
+        return id;
+    }
+    relativeKey() {
+        return this.bucketKey.replace(/^tenants\/[^/]+\/files\//, "");
+    }
+}
+export { ObjectKey };
+
+//# sourceMappingURL=ObjectKey.js.map

package/assetDelivery/threatDetection/ObjectKey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assetDelivery/threatDetection/ObjectKey.js","sources":["../../../src/assetDelivery/threatDetection/ObjectKey.ts"],"sourcesContent":["export class ObjectKey {\n    private bucketKey: string;\n\n    static from(key: string) {\n        return new ObjectKey(key);\n    }\n\n    private constructor(key: string) {\n        this.bucketKey = key;\n    }\n\n    id() {\n        const [id] = this.relativeKey().split(\"/\");\n        return id;\n    }\n\n    relativeKey() {\n        return this.bucketKey.replace(/^tenants\\/[^/]+\\/files\\//, \"\");\n    }\n}\n"],"names":["ObjectKey","key","id"],"mappings":"AAAO,MAAMA;IAGT,OAAO,KAAKC,GAAW,EAAE;QACrB,OAAO,IAAID,UAAUC;IACzB;IAEA,YAAoBA,GAAW,CAAE;QAC7B,IAAI,CAAC,SAAS,GAAGA;IACrB;IAEA,KAAK;QACD,MAAM,CAACC,GAAG,GAAG,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QACtC,OAAOA;IACX;IAEA,cAAc;QACV,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,4BAA4B;IAC9D;AACJ"}

package/assetDelivery/threatDetection/createThreatDetectionEventHandler.d.ts

@@ -1,2 +1,22 @@
-import type { GuardDutyEvent } from "./types";
-export declare const createThreatDetectionEventHandler: () => (import("@webiny/handler").HandlerOnRequestPlugin<import("@webiny/handler/types").Context> | import("@webiny/handler-aws").EventBridgeEventHandler<"GuardDuty Malware Protection Object Scan Result", GuardDutyEvent, any>)[];
+import type { Container } from "@webiny/feature/api";
+import type { EventBridgeEvent } from "@webiny/aws-sdk/types/index.js";
+import { EventBridgeEventHandler, type EventBridgeResult } from "@webiny/event-handler-aws/abstractions/handlers/EventBridgeEventHandler.js";
+import type { ITenantContext } from "@webiny/api-core/features/tenancy/TenantContext/abstractions.js";
+import type { IGetTenantByIdUseCase } from "@webiny/api-core/features/tenancy/GetTenantById/abstractions.js";
+import type { EventContext, NextFunction } from "@webiny/event-handler-core";
+import type { GuardDutyEvent } from "./types.js";
+declare class ThreatDetectionEventBridgeLambdaHandlerImpl implements EventBridgeEventHandler.Interface {
+    private container;
+    private tenantCtx;
+    private getTenantById;
+    constructor(container: Container, tenantCtx: ITenantContext, getTenantById: IGetTenantByIdUseCase);
+    execute(eventCtx: EventContext<EventBridgeEvent<string, GuardDutyEvent>>, _next: NextFunction): Promise<EventBridgeResult>;
+}
+export declare const ThreatDetectionEventBridgeLambdaHandler: typeof ThreatDetectionEventBridgeLambdaHandlerImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/event-handler-aws/abstractions/handlers/EventBridgeEventHandler.js").IEventBridgeEventHandler>;
+};
+/**
+ * @deprecated Use ThreatDetectionEventBridgeLambdaHandler instead.
+ */
+export declare const createThreatDetectionEventHandler: () => never[];
+export {};

package/assetDelivery/threatDetection/createThreatDetectionEventHandler.js

@@ -1,62 +1,53 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.createThreatDetectionEventHandler = void 0;
-var _clientS = require("@webiny/aws-sdk/client-s3");
-var _handlerAws = require("@webiny/handler-aws");
-var _handler = require("@webiny/handler");
-var _processThreatScanResult = require("./processThreatScanResult");
-var _S3AssetMetadataReader = require("../s3/S3AssetMetadataReader");
-const detailType = "GuardDuty Malware Protection Object Scan Result";
-const bucket = process.env.S3_BUCKET;
-const region = process.env.AWS_REGION;
-const createThreatDetectionEventHandler = () => {
-  const s3 = new _clientS.S3({
-    region
-  });
-  const handlerOnRequest = (0, _handler.createHandlerOnRequest)(async request => {
-    const payload = request.body;
-    if (payload["detail-type"] !== detailType) {
-      return;
-    }
-    const objectKey = payload.detail.s3ObjectDetails.objectKey;
-    if (objectKey.endsWith(".metadata")) {
-      return;
+import { EventBridgeEventHandler } from "@webiny/event-handler-aws/abstractions/handlers/EventBridgeEventHandler.js";
+import { RequestContainer } from "@webiny/event-handler-core";
+import { TenantContext } from "@webiny/api-core/features/tenancy/TenantContext/index.js";
+import { GetTenantByIdUseCase } from "@webiny/api-core/features/tenancy/GetTenantById/index.js";
+import { FeatureFlags } from "@webiny/api-core/features/featureFlags/abstractions.js";
+import { GlobalKeyValueStore } from "@webiny/api-core/features/keyValueStore/index.js";
+import { processThreatScanResult } from "./processThreatScanResult.js";
+import { ObjectKey } from "./ObjectKey.js";
+const DETAIL_TYPE = "GuardDuty Malware Protection Object Scan Result";
+class ThreatDetectionEventBridgeLambdaHandlerImpl {
+    constructor(container, tenantCtx, getTenantById){
+        this.container = container;
+        this.tenantCtx = tenantCtx;
+        this.getTenantById = getTenantById;
     }
-    try {
-      const s3Metadata = new _S3AssetMetadataReader.S3AssetMetadataReader(s3, bucket);
-      const metadata = await s3Metadata.getMetadata(payload.detail.s3ObjectDetails.objectKey);
-      request.headers = {
-        ...request.headers,
-        "x-tenant": metadata.tenant,
-        "x-i18n-locale": `default:${metadata.locale};content:${metadata.locale};`
-      };
-    } catch {
-      // If metadata can't be loaded, we ignore the file.
-      // Most likely it's because the file is a rendition of the original file,
-      // so we don't need to do anything with it.
+    async execute(eventCtx, _next) {
+        const payload = eventCtx.event;
+        if (payload["detail-type"] !== DETAIL_TYPE) return {
+            success: true
+        };
+        if (!this.container.resolve(FeatureFlags).get().isEnabled("fileManager.threatDetection")) return {
+            success: true
+        };
+        const objectKey = payload.detail.s3ObjectDetails.objectKey;
+        const keyValueStore = this.container.resolve(GlobalKeyValueStore);
+        try {
+            const fileId = ObjectKey.from(objectKey).id();
+            const result = await keyValueStore.get(`FileManager/File/${fileId}/Metadata`);
+            if (result.isOk()) {
+                const tenantResult = await this.getTenantById.execute(result.value.tenant);
+                if (tenantResult.isOk()) this.tenantCtx.setTenant(tenantResult.value);
+            }
+        } catch  {}
+        await processThreatScanResult({
+            container: this.container
+        }, payload.detail);
+        return {
+            success: true
+        };
     }
-  });
-  // Guard Duty event handler.
-  const threatScanEventHandler = (0, _handlerAws.createEventBridgeEventHandler)(async ({
-    payload,
-    next,
-    ...rest
-  }) => {
-    const context = rest.context;
-    const threatDetectionEnabled = context.wcp.canUseFileManagerThreatDetection();
-    if (!threatDetectionEnabled || payload["detail-type"] !== detailType) {
-      return next();
-    }
-    await (0, _processThreatScanResult.processThreatScanResult)(context, payload.detail);
-  });
-
-  // Assign a human-readable name for easier debugging.
-  threatScanEventHandler.name = threatScanEventHandler.type + ".threatDetectionEventHandler";
-  return [handlerOnRequest, threatScanEventHandler];
-};
-exports.createThreatDetectionEventHandler = createThreatDetectionEventHandler;
+}
+const ThreatDetectionEventBridgeLambdaHandler = EventBridgeEventHandler.createImplementation({
+    implementation: ThreatDetectionEventBridgeLambdaHandlerImpl,
+    dependencies: [
+        RequestContainer,
+        TenantContext,
+        GetTenantByIdUseCase
+    ]
+});
+const createThreatDetectionEventHandler = ()=>[];
+export { ThreatDetectionEventBridgeLambdaHandler, createThreatDetectionEventHandler };
 
 //# sourceMappingURL=createThreatDetectionEventHandler.js.map

package/assetDelivery/threatDetection/createThreatDetectionEventHandler.js.map

@@ -1 +1 @@
-{"version":3,"names":["_clientS","require","_handlerAws","_handler","_processThreatScanResult","_S3AssetMetadataReader","detailType","bucket","process","env","S3_BUCKET","region","AWS_REGION","createThreatDetectionEventHandler","s3","S3","handlerOnRequest","createHandlerOnRequest","request","payload","body","objectKey","detail","s3ObjectDetails","endsWith","s3Metadata","S3AssetMetadataReader","metadata","getMetadata","headers","tenant","locale","threatScanEventHandler","createEventBridgeEventHandler","next","rest","context","threatDetectionEnabled","wcp","canUseFileManagerThreatDetection","processThreatScanResult","name","type","exports"],"sources":["createThreatDetectionEventHandler.ts"],"sourcesContent":["import { S3 } from \"@webiny/aws-sdk/client-s3\";\nimport { createEventBridgeEventHandler } from \"@webiny/handler-aws\";\nimport { createHandlerOnRequest } from \"@webiny/handler\";\nimport type { GuardDutyEvent, ThreatDetectionContext } from \"./types\";\nimport { processThreatScanResult } from \"./processThreatScanResult\";\nimport { S3AssetMetadataReader } from \"~/assetDelivery/s3/S3AssetMetadataReader\";\nimport type { EventBridgeEvent } from \"@webiny/aws-sdk/types\";\n\nconst detailType = \"GuardDuty Malware Protection Object Scan Result\";\n\nconst bucket = process.env.S3_BUCKET as string;\nconst region = process.env.AWS_REGION as string;\n\nexport const createThreatDetectionEventHandler = () => {\n    const s3 = new S3({ region });\n\n    const handlerOnRequest = createHandlerOnRequest(async request => {\n        const payload = request.body as EventBridgeEvent<string, GuardDutyEvent>;\n\n        if (payload[\"detail-type\"] !== detailType) {\n            return;\n        }\n\n        const objectKey = payload.detail.s3ObjectDetails.objectKey;\n        if (objectKey.endsWith(\".metadata\")) {\n            return;\n        }\n\n        try {\n            const s3Metadata = new S3AssetMetadataReader(s3, bucket);\n            const metadata = await s3Metadata.getMetadata(payload.detail.s3ObjectDetails.objectKey);\n\n            request.headers = {\n                ...request.headers,\n                \"x-tenant\": metadata.tenant,\n                \"x-i18n-locale\": `default:${metadata.locale};content:${metadata.locale};`\n            };\n        } catch {\n            // If metadata can't be loaded, we ignore the file.\n            // Most likely it's because the file is a rendition of the original file,\n            // so we don't need to do anything with it.\n        }\n    });\n    // Guard Duty event handler.\n    const threatScanEventHandler = createEventBridgeEventHandler<typeof detailType, GuardDutyEvent>(\n        async ({ payload, next, ...rest }) => {\n            const context = rest.context as ThreatDetectionContext;\n\n            const threatDetectionEnabled = context.wcp.canUseFileManagerThreatDetection();\n\n            if (!threatDetectionEnabled || payload[\"detail-type\"] !== detailType) {\n                return next();\n            }\n\n            await processThreatScanResult(context, payload.detail);\n        }\n    );\n\n    // Assign a human-readable name for easier debugging.\n    threatScanEventHandler.name = threatScanEventHandler.type + \".threatDetectionEventHandler\";\n\n    return [handlerOnRequest, threatScanEventHandler];\n};\n"],"mappings":";;;;;;AAAA,IAAAA,QAAA,GAAAC,OAAA;AACA,IAAAC,WAAA,GAAAD,OAAA;AACA,IAAAE,QAAA,GAAAF,OAAA;AAEA,IAAAG,wBAAA,GAAAH,OAAA;AACA,IAAAI,sBAAA,GAAAJ,OAAA;AAGA,MAAMK,UAAU,GAAG,iDAAiD;AAEpE,MAAMC,MAAM,GAAGC,OAAO,CAACC,GAAG,CAACC,SAAmB;AAC9C,MAAMC,MAAM,GAAGH,OAAO,CAACC,GAAG,CAACG,UAAoB;AAExC,MAAMC,iCAAiC,GAAGA,CAAA,KAAM;EACnD,MAAMC,EAAE,GAAG,IAAIC,WAAE,CAAC;IAAEJ;EAAO,CAAC,CAAC;EAE7B,MAAMK,gBAAgB,GAAG,IAAAC,+BAAsB,EAAC,MAAMC,OAAO,IAAI;IAC7D,MAAMC,OAAO,GAAGD,OAAO,CAACE,IAAgD;IAExE,IAAID,OAAO,CAAC,aAAa,CAAC,KAAKb,UAAU,EAAE;MACvC;IACJ;IAEA,MAAMe,SAAS,GAAGF,OAAO,CAACG,MAAM,CAACC,eAAe,CAACF,SAAS;IAC1D,IAAIA,SAAS,CAACG,QAAQ,CAAC,WAAW,CAAC,EAAE;MACjC;IACJ;IAEA,IAAI;MACA,MAAMC,UAAU,GAAG,IAAIC,4CAAqB,CAACZ,EAAE,EAAEP,MAAM,CAAC;MACxD,MAAMoB,QAAQ,GAAG,MAAMF,UAAU,CAACG,WAAW,CAACT,OAAO,CAACG,MAAM,CAACC,eAAe,CAACF,SAAS,CAAC;MAEvFH,OAAO,CAACW,OAAO,GAAG;QACd,GAAGX,OAAO,CAACW,OAAO;QAClB,UAAU,EAAEF,QAAQ,CAACG,MAAM;QAC3B,eAAe,EAAE,WAAWH,QAAQ,CAACI,MAAM,YAAYJ,QAAQ,CAACI,MAAM;MAC1E,CAAC;IACL,CAAC,CAAC,MAAM;MACJ;MACA;MACA;IAAA;EAER,CAAC,CAAC;EACF;EACA,MAAMC,sBAAsB,GAAG,IAAAC,yCAA6B,EACxD,OAAO;IAAEd,OAAO;IAAEe,IAAI;IAAE,GAAGC;EAAK,CAAC,KAAK;IAClC,MAAMC,OAAO,GAAGD,IAAI,CAACC,OAAiC;IAEtD,MAAMC,sBAAsB,GAAGD,OAAO,CAACE,GAAG,CAACC,gCAAgC,CAAC,CAAC;IAE7E,IAAI,CAACF,sBAAsB,IAAIlB,OAAO,CAAC,aAAa,CAAC,KAAKb,UAAU,EAAE;MAClE,OAAO4B,IAAI,CAAC,CAAC;IACjB;IAEA,MAAM,IAAAM,gDAAuB,EAACJ,OAAO,EAAEjB,OAAO,CAACG,MAAM,CAAC;EAC1D,CACJ,CAAC;;EAED;EACAU,sBAAsB,CAACS,IAAI,GAAGT,sBAAsB,CAACU,IAAI,GAAG,8BAA8B;EAE1F,OAAO,CAAC1B,gBAAgB,EAAEgB,sBAAsB,CAAC;AACrD,CAAC;AAACW,OAAA,CAAA9B,iCAAA,GAAAA,iCAAA","ignoreList":[]}
+{"version":3,"file":"assetDelivery/threatDetection/createThreatDetectionEventHandler.js","sources":["../../../src/assetDelivery/threatDetection/createThreatDetectionEventHandler.ts"],"sourcesContent":["import type { Container } from \"@webiny/feature/api\";\nimport type { EventBridgeEvent } from \"@webiny/aws-sdk/types/index.js\";\nimport {\n    EventBridgeEventHandler,\n    type EventBridgeResult\n} from \"@webiny/event-handler-aws/abstractions/handlers/EventBridgeEventHandler.js\";\nimport { RequestContainer } from \"@webiny/event-handler-core\";\nimport { TenantContext } from \"@webiny/api-core/features/tenancy/TenantContext/index.js\";\nimport { GetTenantByIdUseCase } from \"@webiny/api-core/features/tenancy/GetTenantById/index.js\";\nimport type { ITenantContext } from \"@webiny/api-core/features/tenancy/TenantContext/abstractions.js\";\nimport type { IGetTenantByIdUseCase } from \"@webiny/api-core/features/tenancy/GetTenantById/abstractions.js\";\nimport type { EventContext, NextFunction } from \"@webiny/event-handler-core\";\nimport type { ApiCoreContext } from \"@webiny/api-core/types/core.js\";\nimport { FeatureFlags } from \"@webiny/api-core/features/featureFlags/abstractions.js\";\nimport { GlobalKeyValueStore } from \"@webiny/api-core/features/keyValueStore/index.js\";\nimport { processThreatScanResult } from \"./processThreatScanResult.js\";\nimport { ObjectKey } from \"./ObjectKey.js\";\nimport type { GuardDutyEvent } from \"./types.js\";\n\nconst DETAIL_TYPE = \"GuardDuty Malware Protection Object Scan Result\";\n\nclass ThreatDetectionEventBridgeLambdaHandlerImpl implements EventBridgeEventHandler.Interface {\n    constructor(\n        private container: Container,\n        private tenantCtx: ITenantContext,\n        private getTenantById: IGetTenantByIdUseCase\n    ) {}\n\n    async execute(\n        eventCtx: EventContext<EventBridgeEvent<string, GuardDutyEvent>>,\n        _next: NextFunction\n    ): Promise<EventBridgeResult> {\n        const payload = eventCtx.event;\n        if (payload[\"detail-type\"] !== DETAIL_TYPE) {\n            return { success: true };\n        }\n\n        if (!this.container.resolve(FeatureFlags).get().isEnabled(\"fileManager.threatDetection\")) {\n            return { success: true };\n        }\n\n        const objectKey = payload.detail.s3ObjectDetails.objectKey;\n        const keyValueStore = this.container.resolve(GlobalKeyValueStore);\n\n        try {\n            const fileId = ObjectKey.from(objectKey).id();\n            const result = await keyValueStore.get<{ tenant: string }>(\n                `FileManager/File/${fileId}/Metadata`\n            );\n\n            if (result.isOk()) {\n                const tenantResult = await this.getTenantById.execute(result.value.tenant);\n                if (tenantResult.isOk()) {\n                    this.tenantCtx.setTenant(tenantResult.value);\n                }\n            }\n        } catch {\n            // If metadata can't be loaded, ignore — likely a rendition file.\n        }\n\n        await processThreatScanResult(\n            { container: this.container } as unknown as ApiCoreContext,\n            payload.detail\n        );\n        return { success: true };\n    }\n}\n\nexport const ThreatDetectionEventBridgeLambdaHandler = EventBridgeEventHandler.createImplementation(\n    {\n        implementation: ThreatDetectionEventBridgeLambdaHandlerImpl,\n        dependencies: [RequestContainer, TenantContext, GetTenantByIdUseCase]\n    }\n);\n\n/**\n * @deprecated Use ThreatDetectionEventBridgeLambdaHandler instead.\n */\nexport const createThreatDetectionEventHandler = () => {\n    return [];\n};\n"],"names":["DETAIL_TYPE","ThreatDetectionEventBridgeLambdaHandlerImpl","container","tenantCtx","getTenantById","eventCtx","_next","payload","FeatureFlags","objectKey","keyValueStore","GlobalKeyValueStore","fileId","ObjectKey","result","tenantResult","processThreatScanResult","ThreatDetectionEventBridgeLambdaHandler","EventBridgeEventHandler","RequestContainer","TenantContext","GetTenantByIdUseCase","createThreatDetectionEventHandler"],"mappings":";;;;;;;;AAmBA,MAAMA,cAAc;AAEpB,MAAMC;IACF,YACYC,SAAoB,EACpBC,SAAyB,EACzBC,aAAoC,CAC9C;aAHUF,SAAS,GAATA;aACAC,SAAS,GAATA;aACAC,aAAa,GAAbA;IACT;IAEH,MAAM,QACFC,QAAgE,EAChEC,KAAmB,EACO;QAC1B,MAAMC,UAAUF,SAAS,KAAK;QAC9B,IAAIE,OAAO,CAAC,cAAc,KAAKP,aAC3B,OAAO;YAAE,SAAS;QAAK;QAG3B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAACQ,cAAc,GAAG,GAAG,SAAS,CAAC,gCACtD,OAAO;YAAE,SAAS;QAAK;QAG3B,MAAMC,YAAYF,QAAQ,MAAM,CAAC,eAAe,CAAC,SAAS;QAC1D,MAAMG,gBAAgB,IAAI,CAAC,SAAS,CAAC,OAAO,CAACC;QAE7C,IAAI;YACA,MAAMC,SAASC,UAAU,IAAI,CAACJ,WAAW,EAAE;YAC3C,MAAMK,SAAS,MAAMJ,cAAc,GAAG,CAClC,CAAC,iBAAiB,EAAEE,OAAO,SAAS,CAAC;YAGzC,IAAIE,OAAO,IAAI,IAAI;gBACf,MAAMC,eAAe,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAACD,OAAO,KAAK,CAAC,MAAM;gBACzE,IAAIC,aAAa,IAAI,IACjB,IAAI,CAAC,SAAS,CAAC,SAAS,CAACA,aAAa,KAAK;YAEnD;QACJ,EAAE,OAAM,CAER;QAEA,MAAMC,wBACF;YAAE,WAAW,IAAI,CAAC,SAAS;QAAC,GAC5BT,QAAQ,MAAM;QAElB,OAAO;YAAE,SAAS;QAAK;IAC3B;AACJ;AAEO,MAAMU,0CAA0CC,wBAAwB,oBAAoB,CAC/F;IACI,gBAAgBjB;IAChB,cAAc;QAACkB;QAAkBC;QAAeC;KAAqB;AACzE;AAMG,MAAMC,oCAAoC,IACtC,EAAE"}

package/assetDelivery/threatDetection/createThreatDetectionPluginLoader.d.ts

@@ -1,2 +1,2 @@
-import type { PluginFactory } from "@webiny/plugins/types";
+import type { PluginFactory } from "@webiny/plugins/types.js";
 export declare const createThreatDetectionPluginLoader: (cb: PluginFactory) => PluginFactory;

package/assetDelivery/threatDetection/createThreatDetectionPluginLoader.js

@@ -1,13 +1,5 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.createThreatDetectionPluginLoader = void 0;
-var _api = require("@webiny/api");
-const createThreatDetectionPluginLoader = cb => {
-  return (0, _api.createConditionalPluginFactory)(() => process.env.WEBINY_FUNCTION_TYPE === "threat-detection-event-handler", cb);
-};
-exports.createThreatDetectionPluginLoader = createThreatDetectionPluginLoader;
+import { createConditionalPluginFactory } from "@webiny/api";
+const createThreatDetectionPluginLoader = (cb)=>createConditionalPluginFactory(()=>"threat-detection-event-handler" === process.env.WEBINY_FUNCTION_TYPE, cb);
+export { createThreatDetectionPluginLoader };
 
 //# sourceMappingURL=createThreatDetectionPluginLoader.js.map

package/assetDelivery/threatDetection/createThreatDetectionPluginLoader.js.map

@@ -1 +1 @@
-{"version":3,"names":["_api","require","createThreatDetectionPluginLoader","cb","createConditionalPluginFactory","process","env","WEBINY_FUNCTION_TYPE","exports"],"sources":["createThreatDetectionPluginLoader.ts"],"sourcesContent":["import type { PluginFactory } from \"@webiny/plugins/types\";\nimport { createConditionalPluginFactory } from \"@webiny/api\";\n\nexport const createThreatDetectionPluginLoader = (cb: PluginFactory) => {\n    return createConditionalPluginFactory(\n        () => process.env.WEBINY_FUNCTION_TYPE === \"threat-detection-event-handler\",\n        cb\n    );\n};\n"],"mappings":";;;;;;AACA,IAAAA,IAAA,GAAAC,OAAA;AAEO,MAAMC,iCAAiC,GAAIC,EAAiB,IAAK;EACpE,OAAO,IAAAC,mCAA8B,EACjC,MAAMC,OAAO,CAACC,GAAG,CAACC,oBAAoB,KAAK,gCAAgC,EAC3EJ,EACJ,CAAC;AACL,CAAC;AAACK,OAAA,CAAAN,iCAAA,GAAAA,iCAAA","ignoreList":[]}
+{"version":3,"file":"assetDelivery/threatDetection/createThreatDetectionPluginLoader.js","sources":["../../../src/assetDelivery/threatDetection/createThreatDetectionPluginLoader.ts"],"sourcesContent":["import type { PluginFactory } from \"@webiny/plugins/types.js\";\nimport { createConditionalPluginFactory } from \"@webiny/api\";\n\nexport const createThreatDetectionPluginLoader = (cb: PluginFactory) => {\n    return createConditionalPluginFactory(\n        () => process.env.WEBINY_FUNCTION_TYPE === \"threat-detection-event-handler\",\n        cb\n    );\n};\n"],"names":["createThreatDetectionPluginLoader","cb","createConditionalPluginFactory","process"],"mappings":";AAGO,MAAMA,oCAAoC,CAACC,KACvCC,+BACH,IAAMC,AAAqC,qCAArCA,QAAQ,GAAG,CAAC,oBAAoB,EACtCF"}

package/assetDelivery/threatDetection/index.d.ts

@@ -1,2 +1,2 @@
-export * from "./createThreatDetectionEventHandler";
-export * from "./createThreatDetectionPluginLoader";
+export * from "./createThreatDetectionEventHandler.js";
+export * from "./createThreatDetectionPluginLoader.js";

package/assetDelivery/threatDetection/index.js

@@ -1,29 +1,2 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-var _createThreatDetectionEventHandler = require("./createThreatDetectionEventHandler");
-Object.keys(_createThreatDetectionEventHandler).forEach(function (key) {
-  if (key === "default" || key === "__esModule") return;
-  if (key in exports && exports[key] === _createThreatDetectionEventHandler[key]) return;
-  Object.defineProperty(exports, key, {
-    enumerable: true,
-    get: function () {
-      return _createThreatDetectionEventHandler[key];
-    }
-  });
-});
-var _createThreatDetectionPluginLoader = require("./createThreatDetectionPluginLoader");
-Object.keys(_createThreatDetectionPluginLoader).forEach(function (key) {
-  if (key === "default" || key === "__esModule") return;
-  if (key in exports && exports[key] === _createThreatDetectionPluginLoader[key]) return;
-  Object.defineProperty(exports, key, {
-    enumerable: true,
-    get: function () {
-      return _createThreatDetectionPluginLoader[key];
-    }
-  });
-});
-
-//# sourceMappingURL=index.js.map
+export * from "./createThreatDetectionEventHandler.js";
+export * from "./createThreatDetectionPluginLoader.js";

package/assetDelivery/threatDetection/processThreatScanResult.d.ts

@@ -1,2 +1,3 @@
-import type { GuardDutyEvent, ThreatDetectionContext } from "./types";
-export declare const processThreatScanResult: (context: ThreatDetectionContext, eventDetail: GuardDutyEvent) => Promise<void>;
+import type { ApiCoreContext } from "@webiny/api-core/types/core.js";
+import type { GuardDutyEvent } from "./types.js";
+export declare const processThreatScanResult: (context: ApiCoreContext, eventDetail: GuardDutyEvent) => Promise<void>;

package/assetDelivery/threatDetection/processThreatScanResult.js

@@ -1,66 +1,61 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.processThreatScanResult = void 0;
-const processThreatScanResult = async (context, eventDetail) => {
-  await context.security.withoutAuthorization(async () => {
-    try {
-      const scanStatus = eventDetail.scanResultDetails.scanResultStatus;
-      const s3Object = eventDetail.s3ObjectDetails;
-      const [[file]] = await context.fileManager.listFiles({
-        limit: 1,
-        where: {
-          key: s3Object.objectKey
+import { UpdateFileUseCase } from "@webiny/api-file-manager/features/file/UpdateFile/index.js";
+import { DeleteFileUseCase } from "@webiny/api-file-manager/features/file/DeleteFile/index.js";
+import { WebsocketsListConnectionsUseCase, WebsocketsSendToConnectionsUseCase } from "@webiny/api-websockets/exports/api.js";
+import { ObjectKey } from "./ObjectKey.js";
+import { GetFileUseCase } from "@webiny/api-file-manager/features/file/GetFile/index.js";
+import { IdentityContext } from "@webiny/api-core/features/security/IdentityContext/abstractions.js";
+const processThreatScanResult = async (context, eventDetail)=>{
+    const listConnections = context.container.resolve(WebsocketsListConnectionsUseCase);
+    const sendToConnections = context.container.resolve(WebsocketsSendToConnectionsUseCase);
+    const getFile = context.container.resolve(GetFileUseCase);
+    const updateFile = context.container.resolve(UpdateFileUseCase);
+    const deleteFile = context.container.resolve(DeleteFileUseCase);
+    await context.container.resolve(IdentityContext).withoutAuthorization(async ()=>{
+        const scanStatus = eventDetail.scanResultDetails.scanResultStatus;
+        const s3Object = eventDetail.s3ObjectDetails;
+        const fileId = ObjectKey.from(s3Object.objectKey).id();
+        const fileResult = await getFile.execute(fileId);
+        if (fileResult.isFail()) return;
+        const file = fileResult.value;
+        let allConnections = [];
+        const connectionsResult = await listConnections.execute();
+        if (connectionsResult.isOk()) allConnections = connectionsResult.value;
+        if ("NO_THREATS_FOUND" === scanStatus) {
+            const newTags = file.tags.filter((tag)=>"threatScanInProgress" !== tag);
+            await updateFile.execute({
+                id: file.id,
+                tags: newTags
+            });
+            await sendToConnections.execute(allConnections, {
+                action: "fm.threatScan.noThreatFound",
+                data: {
+                    id: file.id,
+                    tags: newTags
+                }
+            });
+            return;
         }
-      });
-      if (!file) {
-        return;
-      }
-      const allConnections = await context.websockets.listConnections();
-      if (scanStatus === "NO_THREATS_FOUND") {
-        const newTags = file.tags.filter(tag => tag !== "threatScanInProgress");
-        await context.fileManager.updateFile(file.id, {
-          tags: newTags,
-          savedBy: file.savedBy
-        });
-        await context.websockets.sendToConnections(allConnections, {
-          action: "fm.threatScan.noThreatFound",
-          data: {
-            id: file.id,
-            tags: newTags
-          }
-        });
-        return;
-      }
-      if (scanStatus === "THREATS_FOUND") {
-        // Delete infected file.
-        await context.fileManager.deleteFile(file.id);
-        await context.websockets.sendToConnections(allConnections, {
-          action: "fm.threatScan.threatDetected",
-          data: {
-            id: file.id,
-            name: file.name
-          }
-        });
-        return;
-      }
-
-      // For all other outcomes, we delete the file, until better logic is implemented.
-      await context.fileManager.deleteFile(file.id);
-      await context.websockets.sendToConnections(allConnections, {
-        action: "fm.threatScan.unsupported",
-        data: {
-          id: file.id,
-          name: file.name
+        if ("THREATS_FOUND" === scanStatus) {
+            await deleteFile.execute(file.id);
+            await sendToConnections.execute(allConnections, {
+                action: "fm.threatScan.threatDetected",
+                data: {
+                    id: file.id,
+                    name: file.name
+                }
+            });
+            return;
         }
-      });
-    } catch (e) {
-      console.log(e.message);
-    }
-  });
+        await deleteFile.execute(file.id);
+        await sendToConnections.execute(allConnections, {
+            action: "fm.threatScan.unsupported",
+            data: {
+                id: file.id,
+                name: file.name
+            }
+        });
+    });
 };
-exports.processThreatScanResult = processThreatScanResult;
+export { processThreatScanResult };
 
 //# sourceMappingURL=processThreatScanResult.js.map

package/assetDelivery/threatDetection/processThreatScanResult.js.map

@@ -1 +1 @@
-{"version":3,"names":["processThreatScanResult","context","eventDetail","security","withoutAuthorization","scanStatus","scanResultDetails","scanResultStatus","s3Object","s3ObjectDetails","file","fileManager","listFiles","limit","where","key","objectKey","allConnections","websockets","listConnections","newTags","tags","filter","tag","updateFile","id","savedBy","sendToConnections","action","data","deleteFile","name","e","console","log","message","exports"],"sources":["processThreatScanResult.ts"],"sourcesContent":["import type { GuardDutyEvent, ThreatDetectionContext } from \"./types\";\n\nexport const processThreatScanResult = async (\n    context: ThreatDetectionContext,\n    eventDetail: GuardDutyEvent\n) => {\n    await context.security.withoutAuthorization(async () => {\n        try {\n            const scanStatus = eventDetail.scanResultDetails.scanResultStatus;\n            const s3Object = eventDetail.s3ObjectDetails;\n\n            const [[file]] = await context.fileManager.listFiles({\n                limit: 1,\n                where: {\n                    key: s3Object.objectKey\n                }\n            });\n\n            if (!file) {\n                return;\n            }\n\n            const allConnections = await context.websockets.listConnections();\n\n            if (scanStatus === \"NO_THREATS_FOUND\") {\n                const newTags = file.tags.filter(tag => tag !== \"threatScanInProgress\");\n                await context.fileManager.updateFile(file.id, {\n                    tags: newTags,\n                    savedBy: file.savedBy\n                });\n\n                await context.websockets.sendToConnections(allConnections, {\n                    action: \"fm.threatScan.noThreatFound\",\n                    data: {\n                        id: file.id,\n                        tags: newTags\n                    }\n                });\n\n                return;\n            }\n\n            if (scanStatus === \"THREATS_FOUND\") {\n                // Delete infected file.\n                await context.fileManager.deleteFile(file.id);\n\n                await context.websockets.sendToConnections(allConnections, {\n                    action: \"fm.threatScan.threatDetected\",\n                    data: {\n                        id: file.id,\n                        name: file.name\n                    }\n                });\n\n                return;\n            }\n\n            // For all other outcomes, we delete the file, until better logic is implemented.\n            await context.fileManager.deleteFile(file.id);\n\n            await context.websockets.sendToConnections(allConnections, {\n                action: \"fm.threatScan.unsupported\",\n                data: {\n                    id: file.id,\n                    name: file.name\n                }\n            });\n        } catch (e) {\n            console.log(e.message);\n        }\n    });\n};\n"],"mappings":";;;;;;AAEO,MAAMA,uBAAuB,GAAG,MAAAA,CACnCC,OAA+B,EAC/BC,WAA2B,KAC1B;EACD,MAAMD,OAAO,CAACE,QAAQ,CAACC,oBAAoB,CAAC,YAAY;IACpD,IAAI;MACA,MAAMC,UAAU,GAAGH,WAAW,CAACI,iBAAiB,CAACC,gBAAgB;MACjE,MAAMC,QAAQ,GAAGN,WAAW,CAACO,eAAe;MAE5C,MAAM,CAAC,CAACC,IAAI,CAAC,CAAC,GAAG,MAAMT,OAAO,CAACU,WAAW,CAACC,SAAS,CAAC;QACjDC,KAAK,EAAE,CAAC;QACRC,KAAK,EAAE;UACHC,GAAG,EAAEP,QAAQ,CAACQ;QAClB;MACJ,CAAC,CAAC;MAEF,IAAI,CAACN,IAAI,EAAE;QACP;MACJ;MAEA,MAAMO,cAAc,GAAG,MAAMhB,OAAO,CAACiB,UAAU,CAACC,eAAe,CAAC,CAAC;MAEjE,IAAId,UAAU,KAAK,kBAAkB,EAAE;QACnC,MAAMe,OAAO,GAAGV,IAAI,CAACW,IAAI,CAACC,MAAM,CAACC,GAAG,IAAIA,GAAG,KAAK,sBAAsB,CAAC;QACvE,MAAMtB,OAAO,CAACU,WAAW,CAACa,UAAU,CAACd,IAAI,CAACe,EAAE,EAAE;UAC1CJ,IAAI,EAAED,OAAO;UACbM,OAAO,EAAEhB,IAAI,CAACgB;QAClB,CAAC,CAAC;QAEF,MAAMzB,OAAO,CAACiB,UAAU,CAACS,iBAAiB,CAACV,cAAc,EAAE;UACvDW,MAAM,EAAE,6BAA6B;UACrCC,IAAI,EAAE;YACFJ,EAAE,EAAEf,IAAI,CAACe,EAAE;YACXJ,IAAI,EAAED;UACV;QACJ,CAAC,CAAC;QAEF;MACJ;MAEA,IAAIf,UAAU,KAAK,eAAe,EAAE;QAChC;QACA,MAAMJ,OAAO,CAACU,WAAW,CAACmB,UAAU,CAACpB,IAAI,CAACe,EAAE,CAAC;QAE7C,MAAMxB,OAAO,CAACiB,UAAU,CAACS,iBAAiB,CAACV,cAAc,EAAE;UACvDW,MAAM,EAAE,8BAA8B;UACtCC,IAAI,EAAE;YACFJ,EAAE,EAAEf,IAAI,CAACe,EAAE;YACXM,IAAI,EAAErB,IAAI,CAACqB;UACf;QACJ,CAAC,CAAC;QAEF;MACJ;;MAEA;MACA,MAAM9B,OAAO,CAACU,WAAW,CAACmB,UAAU,CAACpB,IAAI,CAACe,EAAE,CAAC;MAE7C,MAAMxB,OAAO,CAACiB,UAAU,CAACS,iBAAiB,CAACV,cAAc,EAAE;QACvDW,MAAM,EAAE,2BAA2B;QACnCC,IAAI,EAAE;UACFJ,EAAE,EAAEf,IAAI,CAACe,EAAE;UACXM,IAAI,EAAErB,IAAI,CAACqB;QACf;MACJ,CAAC,CAAC;IACN,CAAC,CAAC,OAAOC,CAAC,EAAE;MACRC,OAAO,CAACC,GAAG,CAACF,CAAC,CAACG,OAAO,CAAC;IAC1B;EACJ,CAAC,CAAC;AACN,CAAC;AAACC,OAAA,CAAApC,uBAAA,GAAAA,uBAAA","ignoreList":[]}
+{"version":3,"file":"assetDelivery/threatDetection/processThreatScanResult.js","sources":["../../../src/assetDelivery/threatDetection/processThreatScanResult.ts"],"sourcesContent":["import type { ApiCoreContext } from \"@webiny/api-core/types/core.js\";\nimport { UpdateFileUseCase } from \"@webiny/api-file-manager/features/file/UpdateFile/index.js\";\nimport { DeleteFileUseCase } from \"@webiny/api-file-manager/features/file/DeleteFile/index.js\";\nimport {\n    WebsocketsListConnectionsUseCase,\n    WebsocketsSendToConnectionsUseCase,\n    ConnectionRegistry\n} from \"@webiny/api-websockets/exports/api.js\";\nimport type { GuardDutyEvent } from \"./types.js\";\nimport { ObjectKey } from \"./ObjectKey.js\";\nimport { GetFileUseCase } from \"@webiny/api-file-manager/features/file/GetFile/index.js\";\nimport { IdentityContext } from \"@webiny/api-core/features/security/IdentityContext/abstractions.js\";\n\nexport const processThreatScanResult = async (\n    context: ApiCoreContext,\n    eventDetail: GuardDutyEvent\n) => {\n    const listConnections = context.container.resolve(WebsocketsListConnectionsUseCase);\n    const sendToConnections = context.container.resolve(WebsocketsSendToConnectionsUseCase);\n    const getFile = context.container.resolve(GetFileUseCase);\n    const updateFile = context.container.resolve(UpdateFileUseCase);\n    const deleteFile = context.container.resolve(DeleteFileUseCase);\n\n    await context.container.resolve(IdentityContext).withoutAuthorization(async () => {\n        const scanStatus = eventDetail.scanResultDetails.scanResultStatus;\n        const s3Object = eventDetail.s3ObjectDetails;\n\n        const fileId = ObjectKey.from(s3Object.objectKey).id();\n        const fileResult = await getFile.execute(fileId);\n\n        if (fileResult.isFail()) {\n            return;\n        }\n\n        const file = fileResult.value;\n\n        let allConnections: ConnectionRegistry.Data[] = [];\n        const connectionsResult = await listConnections.execute();\n        if (connectionsResult.isOk()) {\n            allConnections = connectionsResult.value;\n        }\n\n        if (scanStatus === \"NO_THREATS_FOUND\") {\n            const newTags = file.tags.filter(tag => tag !== \"threatScanInProgress\");\n            await updateFile.execute({\n                id: file.id,\n                tags: newTags\n            });\n\n            await sendToConnections.execute(allConnections, {\n                action: \"fm.threatScan.noThreatFound\",\n                data: {\n                    id: file.id,\n                    tags: newTags\n                }\n            });\n\n            return;\n        }\n\n        if (scanStatus === \"THREATS_FOUND\") {\n            // Delete the infected file.\n            await deleteFile.execute(file.id);\n\n            await sendToConnections.execute(allConnections, {\n                action: \"fm.threatScan.threatDetected\",\n                data: {\n                    id: file.id,\n                    name: file.name\n                }\n            });\n\n            return;\n        }\n\n        // For all other outcomes, we delete the file, until better logic is implemented.\n        await deleteFile.execute(file.id);\n\n        await sendToConnections.execute(allConnections, {\n            action: \"fm.threatScan.unsupported\",\n            data: {\n                id: file.id,\n                name: file.name\n            }\n        });\n    });\n};\n"],"names":["processThreatScanResult","context","eventDetail","listConnections","WebsocketsListConnectionsUseCase","sendToConnections","WebsocketsSendToConnectionsUseCase","getFile","GetFileUseCase","updateFile","UpdateFileUseCase","deleteFile","DeleteFileUseCase","IdentityContext","scanStatus","s3Object","fileId","ObjectKey","fileResult","file","allConnections","connectionsResult","newTags","tag"],"mappings":";;;;;;AAaO,MAAMA,0BAA0B,OACnCC,SACAC;IAEA,MAAMC,kBAAkBF,QAAQ,SAAS,CAAC,OAAO,CAACG;IAClD,MAAMC,oBAAoBJ,QAAQ,SAAS,CAAC,OAAO,CAACK;IACpD,MAAMC,UAAUN,QAAQ,SAAS,CAAC,OAAO,CAACO;IAC1C,MAAMC,aAAaR,QAAQ,SAAS,CAAC,OAAO,CAACS;IAC7C,MAAMC,aAAaV,QAAQ,SAAS,CAAC,OAAO,CAACW;IAE7C,MAAMX,QAAQ,SAAS,CAAC,OAAO,CAACY,iBAAiB,oBAAoB,CAAC;QAClE,MAAMC,aAAaZ,YAAY,iBAAiB,CAAC,gBAAgB;QACjE,MAAMa,WAAWb,YAAY,eAAe;QAE5C,MAAMc,SAASC,UAAU,IAAI,CAACF,SAAS,SAAS,EAAE,EAAE;QACpD,MAAMG,aAAa,MAAMX,QAAQ,OAAO,CAACS;QAEzC,IAAIE,WAAW,MAAM,IACjB;QAGJ,MAAMC,OAAOD,WAAW,KAAK;QAE7B,IAAIE,iBAA4C,EAAE;QAClD,MAAMC,oBAAoB,MAAMlB,gBAAgB,OAAO;QACvD,IAAIkB,kBAAkB,IAAI,IACtBD,iBAAiBC,kBAAkB,KAAK;QAG5C,IAAIP,AAAe,uBAAfA,YAAmC;YACnC,MAAMQ,UAAUH,KAAK,IAAI,CAAC,MAAM,CAACI,CAAAA,MAAOA,AAAQ,2BAARA;YACxC,MAAMd,WAAW,OAAO,CAAC;gBACrB,IAAIU,KAAK,EAAE;gBACX,MAAMG;YACV;YAEA,MAAMjB,kBAAkB,OAAO,CAACe,gBAAgB;gBAC5C,QAAQ;gBACR,MAAM;oBACF,IAAID,KAAK,EAAE;oBACX,MAAMG;gBACV;YACJ;YAEA;QACJ;QAEA,IAAIR,AAAe,oBAAfA,YAAgC;YAEhC,MAAMH,WAAW,OAAO,CAACQ,KAAK,EAAE;YAEhC,MAAMd,kBAAkB,OAAO,CAACe,gBAAgB;gBAC5C,QAAQ;gBACR,MAAM;oBACF,IAAID,KAAK,EAAE;oBACX,MAAMA,KAAK,IAAI;gBACnB;YACJ;YAEA;QACJ;QAGA,MAAMR,WAAW,OAAO,CAACQ,KAAK,EAAE;QAEhC,MAAMd,kBAAkB,OAAO,CAACe,gBAAgB;YAC5C,QAAQ;YACR,MAAM;gBACF,IAAID,KAAK,EAAE;gBACX,MAAMA,KAAK,IAAI;YACnB;QACJ;IACJ;AACJ"}

package/assetDelivery/threatDetection/types.d.ts

@@ -1,7 +1,3 @@
-import type { Context as IWebsocketsContext } from "@webiny/api-websockets";
-import type { WcpContext } from "@webiny/api-wcp/types";
-import type { FileManagerContext } from "@webiny/api-file-manager/types";
-export type ThreatDetectionContext = FileManagerContext & IWebsocketsContext & WcpContext;
 export type GuardDutyEvent = {
     scanResultDetails: {
         scanResultStatus: "UNSUPPORTED" | "FAILED" | "ACCESS_DENIED" | "THREATS_FOUND" | "NO_THREATS_FOUND";

package/assetDelivery/threatDetection/types.js

@@ -1,7 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-
-//# sourceMappingURL=types.js.map

package/assetDelivery/types.d.ts

@@ -1,6 +1,8 @@
-import type { createAssetDelivery as createBaseAssetDelivery } from "@webiny/api-file-manager";
-export type AssetDeliveryParams = Parameters<typeof createBaseAssetDelivery>[0] & {
+import type { ImageFormat } from "@webiny/api-file-manager/features/assetDelivery/transformation/index.js";
+export type AssetDeliveryParams = {
     imageResizeWidths?: number[];
+    /** Per-format encoder quality (1-100). Merged over the built-in defaults. */
+    imageQuality?: Partial<Record<ImageFormat, number>>;
     /**
      * BE CAREFUL!
      * Setting this to more than 1 hour may cause your URLs to still expire before the desired expiration time.

package/assetDelivery/types.js

@@ -1,7 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-
-//# sourceMappingURL=types.js.map

package/enterprise/ApplyThreatScanning/CreateFileWithThreatScanDecorator.d.ts

@@ -0,0 +1,13 @@
+import { CreateFileUseCase } from "@webiny/api-file-manager/features/file/CreateFile/abstractions.js";
+import type { CreateFileInput } from "@webiny/api-file-manager/features/file/CreateFile/abstractions.js";
+import { FeatureFlags } from "@webiny/api-core/features/featureFlags/abstractions.js";
+declare class CreateFileWithThreatScanDecoratorImpl implements CreateFileUseCase.Interface {
+    private featureFlags;
+    private decoratee;
+    constructor(featureFlags: FeatureFlags.Interface, decoratee: CreateFileUseCase.Interface);
+    execute(input: CreateFileInput, meta?: Record<string, any>): ReturnType<CreateFileUseCase.Interface["execute"]>;
+}
+export declare const CreateFileWithThreatScanDecorator: typeof CreateFileWithThreatScanDecoratorImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/api-file-manager/features/file/CreateFile/abstractions.js").ICreateFileUseCase>;
+};
+export {};