@webiny/api-file-manager-server 0.0.0-unstable.0d717d18dd

package/graphql/ServerGraphQLSchema.js

@@ -0,0 +1,221 @@
+import p_map from "p-map";
+import { CoreGraphQLSchemaFactory } from "@webiny/api-graphql/graphql/abstractions.js";
+import { IdentityContext } from "@webiny/api-core/features/security/IdentityContext/index.js";
+import { ErrorResponse, Response } from "@webiny/api-graphql/responses.js";
+import { GetSettingsUseCase } from "@webiny/api-file-manager/features/settings/GetSettings/abstractions.js";
+import { GetUploadPayloadUseCase } from "@webiny/api-file-manager/features/upload/GetUploadPayload/index.js";
+import { CreateMultiPartUploadUseCase } from "@webiny/api-file-manager/features/upload/CreateMultiPartUpload/index.js";
+import { CompleteMultiPartUploadUseCase } from "@webiny/api-file-manager/features/upload/CompleteMultiPartUpload/index.js";
+import { FileNormalizer, checkPermissions } from "@webiny/api-file-manager/features/upload/index.js";
+const createNormalizer = ()=>new FileNormalizer();
+const TYPE_DEFS = `
+    type UploadFileResponseDataFile {
+        id: ID!
+        name: String!
+        type: String!
+        size: Long!
+        key: String!
+    }
+
+    input PreSignedPostPayloadInput {
+        id: ID
+        name: String!
+        type: String!
+        size: Long!
+        key: String
+        keyPrefix: String
+    }
+
+    type GetPreSignedPostPayloadResponseDataFile {
+        id: ID!
+        name: String!
+        type: String!
+        size: Long!
+        key: String!
+    }
+
+    type GetPreSignedPostPayloadResponseData {
+        # Contains data that is necessary for initiating a file upload.
+        data: JSON!
+        file: UploadFileResponseDataFile!
+    }
+
+    type GetPreSignedPostPayloadResponse {
+        error: FmError
+        data: GetPreSignedPostPayloadResponseData
+    }
+
+    type MultiPartUploadFilePart {
+        partNumber: Int!
+        url: String!
+    }
+
+    type CreateMultiPartUploadResponseData {
+        file: GetPreSignedPostPayloadResponseDataFile!
+        uploadId: String!
+        parts: [MultiPartUploadFilePart!]!
+    }
+
+    type CompleteMultiPartUploadResponse {
+        data: Boolean
+        error: FmError
+    }
+
+    type GetPreSignedPostPayloadsResponse {
+        error: FmError
+        data: [GetPreSignedPostPayloadResponseData!]!
+    }
+
+    extend type FmQuery {
+        getPreSignedPostPayload(data: PreSignedPostPayloadInput!): GetPreSignedPostPayloadResponse
+        getPreSignedPostPayloads(
+            data: [PreSignedPostPayloadInput]!
+        ): GetPreSignedPostPayloadsResponse
+    }
+
+    type CreateMultiPartUploadResponse {
+        data: CreateMultiPartUploadResponseData
+        error: FmError
+    }
+
+    input MultiPartUploadFilePartInput {
+        partNumber: Int!
+        etag: String!
+    }
+
+    extend type FmMutation {
+        createMultiPartUpload(
+            data: PreSignedPostPayloadInput!
+            numberOfParts: Number!
+        ): CreateMultiPartUploadResponse
+
+        completeMultiPartUpload(
+            fileKey: String!
+            uploadId: String!
+        ): CompleteMultiPartUploadResponse
+    }
+`;
+class ServerGraphQLSchemaImpl {
+    async execute(builder) {
+        builder.addTypeDefs(TYPE_DEFS);
+        builder.addResolver({
+            path: "FmQuery.getPreSignedPostPayload",
+            dependencies: [
+                IdentityContext,
+                GetSettingsUseCase,
+                GetUploadPayloadUseCase
+            ],
+            resolver (identityContext, getSettings, getUploadPayload) {
+                return async ({ args })=>{
+                    try {
+                        await checkPermissions(identityContext, {
+                            rwd: "w"
+                        });
+                        const settingsResult = await getSettings.execute();
+                        const settings = settingsResult.value;
+                        const normalizer = createNormalizer();
+                        const payload = await getUploadPayload.execute(await normalizer.normalizeFile(args.data), settings);
+                        return new Response(payload);
+                    } catch (e) {
+                        return new ErrorResponse({
+                            message: e.message,
+                            code: e.code,
+                            data: e.data
+                        });
+                    }
+                };
+            }
+        });
+        builder.addResolver({
+            path: "FmQuery.getPreSignedPostPayloads",
+            dependencies: [
+                IdentityContext,
+                GetSettingsUseCase,
+                GetUploadPayloadUseCase
+            ],
+            resolver (identityContext, getSettings, getUploadPayload) {
+                return async ({ args })=>{
+                    try {
+                        await checkPermissions(identityContext, {
+                            rwd: "w"
+                        });
+                        const settingsResult = await getSettings.execute();
+                        const settings = settingsResult.value;
+                        const normalizer = createNormalizer();
+                        const payloads = await p_map(args.data, async (data)=>getUploadPayload.execute(await normalizer.normalizeFile(data), settings));
+                        return new Response(payloads);
+                    } catch (e) {
+                        return new ErrorResponse({
+                            message: e.message,
+                            code: e.code,
+                            data: e.data
+                        });
+                    }
+                };
+            }
+        });
+        builder.addResolver({
+            path: "FmMutation.createMultiPartUpload",
+            dependencies: [
+                IdentityContext,
+                CreateMultiPartUploadUseCase
+            ],
+            resolver (identityContext, createMultiPartUpload) {
+                return async ({ args })=>{
+                    try {
+                        await checkPermissions(identityContext, {
+                            rwd: "w"
+                        });
+                        const normalizer = createNormalizer();
+                        const result = await createMultiPartUpload.execute({
+                            file: await normalizer.normalizeFile(args.data),
+                            numberOfParts: args.numberOfParts
+                        });
+                        return new Response(result);
+                    } catch (e) {
+                        return new ErrorResponse({
+                            message: e.message,
+                            code: e.code,
+                            data: e.data
+                        });
+                    }
+                };
+            }
+        });
+        builder.addResolver({
+            path: "FmMutation.completeMultiPartUpload",
+            dependencies: [
+                IdentityContext,
+                CompleteMultiPartUploadUseCase
+            ],
+            resolver (identityContext, completeMultiPartUpload) {
+                return async ({ args })=>{
+                    try {
+                        await checkPermissions(identityContext, {
+                            rwd: "w"
+                        });
+                        await completeMultiPartUpload.execute({
+                            fileKey: args.fileKey,
+                            uploadId: args.uploadId
+                        });
+                        return new Response(true);
+                    } catch (e) {
+                        return new ErrorResponse({
+                            message: e.message,
+                            code: e.code,
+                            data: e.data
+                        });
+                    }
+                };
+            }
+        });
+        return builder;
+    }
+}
+const ServerGraphQLSchema = CoreGraphQLSchemaFactory.createImplementation({
+    implementation: ServerGraphQLSchemaImpl,
+    dependencies: []
+});
+export { ServerGraphQLSchema };
+
+//# sourceMappingURL=ServerGraphQLSchema.js.map

package/graphql/ServerGraphQLSchema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graphql/ServerGraphQLSchema.js","sources":["../../src/graphql/ServerGraphQLSchema.ts"],"sourcesContent":["import pMap from \"p-map\";\nimport { CoreGraphQLSchemaFactory } from \"@webiny/api-graphql/graphql/abstractions.js\";\nimport { GraphQLSchemaBuilder } from \"@webiny/api-graphql/features/GraphQLSchemaBuilder/abstractions.js\";\nimport { IdentityContext } from \"@webiny/api-core/features/security/IdentityContext/index.js\";\nimport { ErrorResponse, Response } from \"@webiny/api-graphql/responses.js\";\nimport { GetSettingsUseCase } from \"@webiny/api-file-manager/features/settings/GetSettings/abstractions.js\";\nimport { GetUploadPayloadUseCase } from \"@webiny/api-file-manager/features/upload/GetUploadPayload/index.js\";\nimport { CreateMultiPartUploadUseCase } from \"@webiny/api-file-manager/features/upload/CreateMultiPartUpload/index.js\";\nimport { CompleteMultiPartUploadUseCase } from \"@webiny/api-file-manager/features/upload/CompleteMultiPartUpload/index.js\";\nimport {\n    checkPermissions,\n    FileNormalizer\n} from \"@webiny/api-file-manager/features/upload/index.js\";\nimport type { FileData } from \"@webiny/api-file-manager/features/upload/types.js\";\n\n// Build the normalizer WITHOUT the gql context: the domain's `createFileNormalizerFromContext` reads\n// `context.plugins.byType(...)` (the legacy plugins registry), which the DI-native server gql context\n// does not populate — calling it throws \"Cannot read properties of undefined (reading 'byType')\". The\n// modifier is optional; FileNormalizer still generates the id/type/key. The server has no legacy\n// FileUploadModifierPlugins, so an empty (no-modifier) normalizer is the correct behaviour here.\nconst createNormalizer = () => new FileNormalizer();\n\nconst TYPE_DEFS = /* GraphQL */ `\n    type UploadFileResponseDataFile {\n        id: ID!\n        name: String!\n        type: String!\n        size: Long!\n        key: String!\n    }\n\n    input PreSignedPostPayloadInput {\n        id: ID\n        name: String!\n        type: String!\n        size: Long!\n        key: String\n        keyPrefix: String\n    }\n\n    type GetPreSignedPostPayloadResponseDataFile {\n        id: ID!\n        name: String!\n        type: String!\n        size: Long!\n        key: String!\n    }\n\n    type GetPreSignedPostPayloadResponseData {\n        # Contains data that is necessary for initiating a file upload.\n        data: JSON!\n        file: UploadFileResponseDataFile!\n    }\n\n    type GetPreSignedPostPayloadResponse {\n        error: FmError\n        data: GetPreSignedPostPayloadResponseData\n    }\n\n    type MultiPartUploadFilePart {\n        partNumber: Int!\n        url: String!\n    }\n\n    type CreateMultiPartUploadResponseData {\n        file: GetPreSignedPostPayloadResponseDataFile!\n        uploadId: String!\n        parts: [MultiPartUploadFilePart!]!\n    }\n\n    type CompleteMultiPartUploadResponse {\n        data: Boolean\n        error: FmError\n    }\n\n    type GetPreSignedPostPayloadsResponse {\n        error: FmError\n        data: [GetPreSignedPostPayloadResponseData!]!\n    }\n\n    extend type FmQuery {\n        getPreSignedPostPayload(data: PreSignedPostPayloadInput!): GetPreSignedPostPayloadResponse\n        getPreSignedPostPayloads(\n            data: [PreSignedPostPayloadInput]!\n        ): GetPreSignedPostPayloadsResponse\n    }\n\n    type CreateMultiPartUploadResponse {\n        data: CreateMultiPartUploadResponseData\n        error: FmError\n    }\n\n    input MultiPartUploadFilePartInput {\n        partNumber: Int!\n        etag: String!\n    }\n\n    extend type FmMutation {\n        createMultiPartUpload(\n            data: PreSignedPostPayloadInput!\n            numberOfParts: Number!\n        ): CreateMultiPartUploadResponse\n\n        completeMultiPartUpload(\n            fileKey: String!\n            uploadId: String!\n        ): CompleteMultiPartUploadResponse\n    }\n`;\n\n/**\n * Upload GraphQL for the self-hosted (server) hosting type. Mirrors the SDL that `api-file-manager-s3`'s\n * `S3GraphQLSchema` contributes (same query/mutation names + `PreSignedPostPayloadInput`), so the\n * transport-agnostic SDK works unchanged. Only the resolvers differ from S3 — they resolve the server\n * upload use cases (local disk + the `/webiny-file-upload` HTTP routes) instead of an S3 client.\n */\nclass ServerGraphQLSchemaImpl implements CoreGraphQLSchemaFactory.Interface {\n    public async execute(builder: GraphQLSchemaBuilder.Interface): CoreGraphQLSchemaFactory.Return {\n        builder.addTypeDefs(TYPE_DEFS);\n\n        builder.addResolver<{ data: any }>({\n            path: \"FmQuery.getPreSignedPostPayload\",\n            dependencies: [IdentityContext, GetSettingsUseCase, GetUploadPayloadUseCase],\n            resolver(\n                identityContext: IdentityContext.Interface,\n                getSettings: GetSettingsUseCase.Interface,\n                getUploadPayload: GetUploadPayloadUseCase.Interface\n            ) {\n                return async ({ args }) => {\n                    try {\n                        await checkPermissions(identityContext, { rwd: \"w\" });\n\n                        const settingsResult = await getSettings.execute();\n                        const settings = settingsResult.value;\n\n                        const normalizer = createNormalizer();\n                        const payload = await getUploadPayload.execute(\n                            (await normalizer.normalizeFile(args.data)) as FileData,\n                            settings\n                        );\n\n                        return new Response(payload);\n                    } catch (e) {\n                        return new ErrorResponse({\n                            message: e.message,\n                            code: e.code,\n                            data: e.data\n                        });\n                    }\n                };\n            }\n        });\n\n        builder.addResolver<{ data: any[] }>({\n            path: \"FmQuery.getPreSignedPostPayloads\",\n            dependencies: [IdentityContext, GetSettingsUseCase, GetUploadPayloadUseCase],\n            resolver(\n                identityContext: IdentityContext.Interface,\n                getSettings: GetSettingsUseCase.Interface,\n                getUploadPayload: GetUploadPayloadUseCase.Interface\n            ) {\n                return async ({ args }) => {\n                    try {\n                        await checkPermissions(identityContext, { rwd: \"w\" });\n\n                        const settingsResult = await getSettings.execute();\n                        const settings = settingsResult.value;\n\n                        const normalizer = createNormalizer();\n                        const payloads = await pMap(args.data, async (data: any) => {\n                            return getUploadPayload.execute(\n                                (await normalizer.normalizeFile(data)) as FileData,\n                                settings\n                            );\n                        });\n\n                        return new Response(payloads);\n                    } catch (e) {\n                        return new ErrorResponse({\n                            message: e.message,\n                            code: e.code,\n                            data: e.data\n                        });\n                    }\n                };\n            }\n        });\n\n        builder.addResolver<{ data: any; numberOfParts: number }>({\n            path: \"FmMutation.createMultiPartUpload\",\n            dependencies: [IdentityContext, CreateMultiPartUploadUseCase],\n            resolver(\n                identityContext: IdentityContext.Interface,\n                createMultiPartUpload: CreateMultiPartUploadUseCase.Interface\n            ) {\n                return async ({ args }) => {\n                    try {\n                        await checkPermissions(identityContext, { rwd: \"w\" });\n\n                        const normalizer = createNormalizer();\n                        const result = await createMultiPartUpload.execute({\n                            file: (await normalizer.normalizeFile(args.data)) as FileData,\n                            numberOfParts: args.numberOfParts\n                        });\n\n                        return new Response(result);\n                    } catch (e) {\n                        return new ErrorResponse({\n                            message: e.message,\n                            code: e.code,\n                            data: e.data\n                        });\n                    }\n                };\n            }\n        });\n\n        builder.addResolver<{ fileKey: string; uploadId: string }>({\n            path: \"FmMutation.completeMultiPartUpload\",\n            dependencies: [IdentityContext, CompleteMultiPartUploadUseCase],\n            resolver(\n                identityContext: IdentityContext.Interface,\n                completeMultiPartUpload: CompleteMultiPartUploadUseCase.Interface\n            ) {\n                return async ({ args }) => {\n                    try {\n                        await checkPermissions(identityContext, { rwd: \"w\" });\n\n                        await completeMultiPartUpload.execute({\n                            fileKey: args.fileKey,\n                            uploadId: args.uploadId\n                        });\n\n                        return new Response(true);\n                    } catch (e) {\n                        return new ErrorResponse({\n                            message: e.message,\n                            code: e.code,\n                            data: e.data\n                        });\n                    }\n                };\n            }\n        });\n\n        return builder;\n    }\n}\n\nexport const ServerGraphQLSchema = CoreGraphQLSchemaFactory.createImplementation({\n    implementation: ServerGraphQLSchemaImpl,\n    dependencies: []\n});\n"],"names":["createNormalizer","FileNormalizer","TYPE_DEFS","ServerGraphQLSchemaImpl","builder","IdentityContext","GetSettingsUseCase","GetUploadPayloadUseCase","identityContext","getSettings","getUploadPayload","args","checkPermissions","settingsResult","settings","normalizer","payload","Response","e","ErrorResponse","payloads","pMap","data","CreateMultiPartUploadUseCase","createMultiPartUpload","result","CompleteMultiPartUploadUseCase","completeMultiPartUpload","ServerGraphQLSchema","CoreGraphQLSchemaFactory"],"mappings":";;;;;;;;;AAoBA,MAAMA,mBAAmB,IAAM,IAAIC;AAEnC,MAAMC,YAA0B,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsFjC,CAAC;AAQD,MAAMC;IACF,MAAa,QAAQC,OAAuC,EAAmC;QAC3FA,QAAQ,WAAW,CAACF;QAEpBE,QAAQ,WAAW,CAAgB;YAC/B,MAAM;YACN,cAAc;gBAACC;gBAAiBC;gBAAoBC;aAAwB;YAC5E,UACIC,eAA0C,EAC1CC,WAAyC,EACzCC,gBAAmD;gBAEnD,OAAO,OAAO,EAAEC,IAAI,EAAE;oBAClB,IAAI;wBACA,MAAMC,iBAAiBJ,iBAAiB;4BAAE,KAAK;wBAAI;wBAEnD,MAAMK,iBAAiB,MAAMJ,YAAY,OAAO;wBAChD,MAAMK,WAAWD,eAAe,KAAK;wBAErC,MAAME,aAAaf;wBACnB,MAAMgB,UAAU,MAAMN,iBAAiB,OAAO,CACzC,MAAMK,WAAW,aAAa,CAACJ,KAAK,IAAI,GACzCG;wBAGJ,OAAO,IAAIG,SAASD;oBACxB,EAAE,OAAOE,GAAG;wBACR,OAAO,IAAIC,cAAc;4BACrB,SAASD,EAAE,OAAO;4BAClB,MAAMA,EAAE,IAAI;4BACZ,MAAMA,EAAE,IAAI;wBAChB;oBACJ;gBACJ;YACJ;QACJ;QAEAd,QAAQ,WAAW,CAAkB;YACjC,MAAM;YACN,cAAc;gBAACC;gBAAiBC;gBAAoBC;aAAwB;YAC5E,UACIC,eAA0C,EAC1CC,WAAyC,EACzCC,gBAAmD;gBAEnD,OAAO,OAAO,EAAEC,IAAI,EAAE;oBAClB,IAAI;wBACA,MAAMC,iBAAiBJ,iBAAiB;4BAAE,KAAK;wBAAI;wBAEnD,MAAMK,iBAAiB,MAAMJ,YAAY,OAAO;wBAChD,MAAMK,WAAWD,eAAe,KAAK;wBAErC,MAAME,aAAaf;wBACnB,MAAMoB,WAAW,MAAMC,MAAKV,KAAK,IAAI,EAAE,OAAOW,OACnCZ,iBAAiB,OAAO,CAC1B,MAAMK,WAAW,aAAa,CAACO,OAChCR;wBAIR,OAAO,IAAIG,SAASG;oBACxB,EAAE,OAAOF,GAAG;wBACR,OAAO,IAAIC,cAAc;4BACrB,SAASD,EAAE,OAAO;4BAClB,MAAMA,EAAE,IAAI;4BACZ,MAAMA,EAAE,IAAI;wBAChB;oBACJ;gBACJ;YACJ;QACJ;QAEAd,QAAQ,WAAW,CAAuC;YACtD,MAAM;YACN,cAAc;gBAACC;gBAAiBkB;aAA6B;YAC7D,UACIf,eAA0C,EAC1CgB,qBAA6D;gBAE7D,OAAO,OAAO,EAAEb,IAAI,EAAE;oBAClB,IAAI;wBACA,MAAMC,iBAAiBJ,iBAAiB;4BAAE,KAAK;wBAAI;wBAEnD,MAAMO,aAAaf;wBACnB,MAAMyB,SAAS,MAAMD,sBAAsB,OAAO,CAAC;4BAC/C,MAAO,MAAMT,WAAW,aAAa,CAACJ,KAAK,IAAI;4BAC/C,eAAeA,KAAK,aAAa;wBACrC;wBAEA,OAAO,IAAIM,SAASQ;oBACxB,EAAE,OAAOP,GAAG;wBACR,OAAO,IAAIC,cAAc;4BACrB,SAASD,EAAE,OAAO;4BAClB,MAAMA,EAAE,IAAI;4BACZ,MAAMA,EAAE,IAAI;wBAChB;oBACJ;gBACJ;YACJ;QACJ;QAEAd,QAAQ,WAAW,CAAwC;YACvD,MAAM;YACN,cAAc;gBAACC;gBAAiBqB;aAA+B;YAC/D,UACIlB,eAA0C,EAC1CmB,uBAAiE;gBAEjE,OAAO,OAAO,EAAEhB,IAAI,EAAE;oBAClB,IAAI;wBACA,MAAMC,iBAAiBJ,iBAAiB;4BAAE,KAAK;wBAAI;wBAEnD,MAAMmB,wBAAwB,OAAO,CAAC;4BAClC,SAAShB,KAAK,OAAO;4BACrB,UAAUA,KAAK,QAAQ;wBAC3B;wBAEA,OAAO,IAAIM,SAAS;oBACxB,EAAE,OAAOC,GAAG;wBACR,OAAO,IAAIC,cAAc;4BACrB,SAASD,EAAE,OAAO;4BAClB,MAAMA,EAAE,IAAI;4BACZ,MAAMA,EAAE,IAAI;wBAChB;oBACJ;gBACJ;YACJ;QACJ;QAEA,OAAOd;IACX;AACJ;AAEO,MAAMwB,sBAAsBC,yBAAyB,oBAAoB,CAAC;IAC7E,gBAAgB1B;IAChB,cAAc,EAAE;AACpB"}

package/index.d.ts

@@ -0,0 +1,3 @@
+export { createFileUploadModifier } from "@webiny/api-file-manager/features/upload/index.js";
+export { createAssetDelivery } from "./assetDelivery/createAssetDelivery.js";
+export { FileManagerServerFeature } from "./FileManagerServerFeature.js";

package/index.js

@@ -0,0 +1,3 @@
+export { createFileUploadModifier } from "@webiny/api-file-manager/features/upload/index.js";
+export { createAssetDelivery } from "./assetDelivery/createAssetDelivery.js";
+export { FileManagerServerFeature } from "./FileManagerServerFeature.js";

package/package.json

@@ -0,0 +1,44 @@
+{
+	"name": "@webiny/api-file-manager-server",
+	"version": "0.0.0-unstable.0d717d18dd",
+	"type": "module",
+	"exports": {
+		".": "./index.js",
+		"./*": "./*"
+	},
+	"repository": {
+		"type": "git",
+		"url": "https://github.com/webiny/webiny-js.git"
+	},
+	"description": "File storage local server plugin for the @webiny/api-file-manager.",
+	"author": "Webiny Ltd",
+	"license": "MIT",
+	"dependencies": {
+		"@webiny/api-core": "0.0.0-unstable.0d717d18dd",
+		"@webiny/api-file-manager": "0.0.0-unstable.0d717d18dd",
+		"@webiny/api-graphql": "0.0.0-unstable.0d717d18dd",
+		"@webiny/background-tasks": "0.0.0-unstable.0d717d18dd",
+		"@webiny/event-handler-core": "0.0.0-unstable.0d717d18dd",
+		"@webiny/feature": "0.0.0-unstable.0d717d18dd",
+		"@webiny/handler": "0.0.0-unstable.0d717d18dd",
+		"@webiny/plugins": "0.0.0-unstable.0d717d18dd",
+		"@webiny/utils": "0.0.0-unstable.0d717d18dd",
+		"@webiny/validation": "0.0.0-unstable.0d717d18dd",
+		"exifreader": "4.41.3",
+		"p-map": "7.0.6",
+		"sharp": "0.35.3"
+	},
+	"devDependencies": {
+		"@webiny/build-tools": "0.0.0-unstable.0d717d18dd",
+		"rimraf": "6.1.3",
+		"typescript": "7.0.2",
+		"vitest": "4.1.10"
+	},
+	"publishConfig": {
+		"access": "public"
+	},
+	"gitHead": "8476da73b653c89cc1474d968baf55c1b0ae0e5f",
+	"webiny": {
+		"publishFrom": "dist"
+	}
+}

package/routes/UploadPartRoute/UploadPartRoute.d.ts

@@ -0,0 +1,14 @@
+import { HttpRoute } from "@webiny/event-handler-core";
+import type { IHttpRequest, IHttpResponse } from "@webiny/event-handler-core";
+import { FileManagerServerConfig } from "../../features/FileManagerServerConfig/abstractions.js";
+declare class UploadPartRouteImpl implements HttpRoute.Interface {
+    private readonly config;
+    readonly method = "PUT";
+    readonly path = "/webiny-file-upload/parts";
+    constructor(config: FileManagerServerConfig.Interface);
+    handle(request: IHttpRequest): Promise<IHttpResponse>;
+}
+export declare const UploadPartRoute: typeof UploadPartRouteImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/event-handler-core").IHttpRoute>;
+};
+export {};

package/routes/UploadPartRoute/UploadPartRoute.js

@@ -0,0 +1,66 @@
+import node_path from "node:path";
+import { createHash } from "node:crypto";
+import { mkdir, writeFile } from "node:fs/promises";
+import { HttpRoute } from "@webiny/event-handler-core";
+import { verifyUploadToken } from "../../utils/uploadToken.js";
+import { FileManagerServerConfig } from "../../features/FileManagerServerConfig/abstractions.js";
+import { isPathContained, json, toBuffer } from "../utils.js";
+class UploadPartRouteImpl {
+    constructor(config){
+        this.config = config;
+        this.method = "PUT";
+        this.path = "/webiny-file-upload/parts";
+    }
+    async handle(request) {
+        const storagePath = this.config.storagePath;
+        const secret = this.config.uploadSecret;
+        const query = request.query ?? {};
+        const uploadId = query["uploadId"];
+        const partNumberStr = query["partNumber"];
+        const token = query["token"];
+        if (!uploadId || !partNumberStr || !token) return json(400, {
+            error: "Missing uploadId, partNumber, or token."
+        });
+        const partNumber = parseInt(partNumberStr, 10);
+        if (isNaN(partNumber) || partNumber < 1) return json(400, {
+            error: "Invalid partNumber."
+        });
+        let payload;
+        try {
+            payload = verifyUploadToken(token, secret);
+        } catch (err) {
+            return json(400, {
+                error: err instanceof Error ? err.message : "Invalid token."
+            });
+        }
+        const expectedKey = `tenants/${payload.tenantId}/multipart/${uploadId}/part-${partNumber}`;
+        if (payload.key !== expectedKey) return json(400, {
+            error: "Token key mismatch."
+        });
+        const destPath = node_path.join(storagePath, expectedKey);
+        if (!isPathContained(destPath, storagePath)) return json(400, {
+            error: "Invalid path."
+        });
+        await mkdir(node_path.dirname(destPath), {
+            recursive: true
+        });
+        const body = toBuffer(request.body);
+        await writeFile(destPath, body);
+        const etag = createHash("md5").update(body).digest("hex");
+        return {
+            statusCode: 200,
+            headers: {
+                ETag: etag
+            }
+        };
+    }
+}
+const UploadPartRoute = HttpRoute.createImplementation({
+    implementation: UploadPartRouteImpl,
+    dependencies: [
+        FileManagerServerConfig
+    ]
+});
+export { UploadPartRoute };
+
+//# sourceMappingURL=UploadPartRoute.js.map

package/routes/UploadPartRoute/UploadPartRoute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes/UploadPartRoute/UploadPartRoute.js","sources":["../../../src/routes/UploadPartRoute/UploadPartRoute.ts"],"sourcesContent":["import path from \"node:path\";\nimport { createHash } from \"node:crypto\";\nimport { mkdir, writeFile } from \"node:fs/promises\";\nimport { HttpRoute } from \"@webiny/event-handler-core\";\nimport type { IHttpRequest, IHttpResponse } from \"@webiny/event-handler-core\";\nimport { verifyUploadToken } from \"~/utils/uploadToken.js\";\nimport { FileManagerServerConfig } from \"~/features/FileManagerServerConfig/abstractions.js\";\nimport { isPathContained, json, toBuffer } from \"../utils.js\";\n\nclass UploadPartRouteImpl implements HttpRoute.Interface {\n    public readonly method = \"PUT\";\n    public readonly path = \"/webiny-file-upload/parts\";\n\n    public constructor(private readonly config: FileManagerServerConfig.Interface) {}\n\n    public async handle(request: IHttpRequest): Promise<IHttpResponse> {\n        const storagePath = this.config.storagePath;\n        const secret = this.config.uploadSecret;\n\n        const query = request.query ?? {};\n        const uploadId = query[\"uploadId\"];\n        const partNumberStr = query[\"partNumber\"];\n        const token = query[\"token\"];\n\n        if (!uploadId || !partNumberStr || !token) {\n            return json(400, { error: \"Missing uploadId, partNumber, or token.\" });\n        }\n\n        const partNumber = parseInt(partNumberStr, 10);\n        if (isNaN(partNumber) || partNumber < 1) {\n            return json(400, { error: \"Invalid partNumber.\" });\n        }\n\n        let payload;\n        try {\n            payload = verifyUploadToken(token, secret);\n        } catch (err) {\n            return json(400, { error: err instanceof Error ? err.message : \"Invalid token.\" });\n        }\n\n        const expectedKey = `tenants/${payload.tenantId}/multipart/${uploadId}/part-${partNumber}`;\n        if (payload.key !== expectedKey) {\n            return json(400, { error: \"Token key mismatch.\" });\n        }\n\n        const destPath = path.join(storagePath, expectedKey);\n        if (!isPathContained(destPath, storagePath)) {\n            return json(400, { error: \"Invalid path.\" });\n        }\n\n        await mkdir(path.dirname(destPath), { recursive: true });\n\n        const body = toBuffer(request.body);\n        await writeFile(destPath, body);\n\n        const etag = createHash(\"md5\").update(body).digest(\"hex\");\n\n        return { statusCode: 200, headers: { ETag: etag } };\n    }\n}\n\nexport const UploadPartRoute = HttpRoute.createImplementation({\n    implementation: UploadPartRouteImpl,\n    dependencies: [FileManagerServerConfig]\n});\n"],"names":["UploadPartRouteImpl","config","request","storagePath","secret","query","uploadId","partNumberStr","token","json","partNumber","parseInt","isNaN","payload","verifyUploadToken","err","Error","expectedKey","destPath","path","isPathContained","mkdir","body","toBuffer","writeFile","etag","createHash","UploadPartRoute","HttpRoute","FileManagerServerConfig"],"mappings":";;;;;;;AASA,MAAMA;IAIF,YAAoCC,MAAyC,CAAE;aAA3CA,MAAM,GAANA;aAHpB,MAAM,GAAG;aACT,IAAI,GAAG;IAEyD;IAEhF,MAAa,OAAOC,OAAqB,EAA0B;QAC/D,MAAMC,cAAc,IAAI,CAAC,MAAM,CAAC,WAAW;QAC3C,MAAMC,SAAS,IAAI,CAAC,MAAM,CAAC,YAAY;QAEvC,MAAMC,QAAQH,QAAQ,KAAK,IAAI,CAAC;QAChC,MAAMI,WAAWD,KAAK,CAAC,WAAW;QAClC,MAAME,gBAAgBF,KAAK,CAAC,aAAa;QACzC,MAAMG,QAAQH,KAAK,CAAC,QAAQ;QAE5B,IAAI,CAACC,YAAY,CAACC,iBAAiB,CAACC,OAChC,OAAOC,KAAK,KAAK;YAAE,OAAO;QAA0C;QAGxE,MAAMC,aAAaC,SAASJ,eAAe;QAC3C,IAAIK,MAAMF,eAAeA,aAAa,GAClC,OAAOD,KAAK,KAAK;YAAE,OAAO;QAAsB;QAGpD,IAAII;QACJ,IAAI;YACAA,UAAUC,kBAAkBN,OAAOJ;QACvC,EAAE,OAAOW,KAAK;YACV,OAAON,KAAK,KAAK;gBAAE,OAAOM,eAAeC,QAAQD,IAAI,OAAO,GAAG;YAAiB;QACpF;QAEA,MAAME,cAAc,CAAC,QAAQ,EAAEJ,QAAQ,QAAQ,CAAC,WAAW,EAAEP,SAAS,MAAM,EAAEI,YAAY;QAC1F,IAAIG,QAAQ,GAAG,KAAKI,aAChB,OAAOR,KAAK,KAAK;YAAE,OAAO;QAAsB;QAGpD,MAAMS,WAAWC,UAAAA,IAAS,CAAChB,aAAac;QACxC,IAAI,CAACG,gBAAgBF,UAAUf,cAC3B,OAAOM,KAAK,KAAK;YAAE,OAAO;QAAgB;QAG9C,MAAMY,MAAMF,UAAAA,OAAY,CAACD,WAAW;YAAE,WAAW;QAAK;QAEtD,MAAMI,OAAOC,SAASrB,QAAQ,IAAI;QAClC,MAAMsB,UAAUN,UAAUI;QAE1B,MAAMG,OAAOC,WAAW,OAAO,MAAM,CAACJ,MAAM,MAAM,CAAC;QAEnD,OAAO;YAAE,YAAY;YAAK,SAAS;gBAAE,MAAMG;YAAK;QAAE;IACtD;AACJ;AAEO,MAAME,kBAAkBC,UAAU,oBAAoB,CAAC;IAC1D,gBAAgB5B;IAChB,cAAc;QAAC6B;KAAwB;AAC3C"}

package/routes/UploadPartRoute/feature.d.ts

@@ -0,0 +1,4 @@
+export declare const UploadPartRouteFeature: {
+    name: string;
+    register(container: import("@webiny/di").Container): void;
+};

package/routes/UploadPartRoute/feature.js

@@ -0,0 +1,11 @@
+import { createFeature } from "@webiny/feature/api";
+import { UploadPartRoute } from "./UploadPartRoute.js";
+const UploadPartRouteFeature = createFeature({
+    name: "FileManagerServer/UploadPartRoute",
+    register (container) {
+        container.register(UploadPartRoute);
+    }
+});
+export { UploadPartRouteFeature };
+
+//# sourceMappingURL=feature.js.map

package/routes/UploadPartRoute/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes/UploadPartRoute/feature.js","sources":["../../../src/routes/UploadPartRoute/feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { UploadPartRoute } from \"./UploadPartRoute.js\";\n\nexport const UploadPartRouteFeature = createFeature({\n    name: \"FileManagerServer/UploadPartRoute\",\n    register(container) {\n        container.register(UploadPartRoute);\n    }\n});\n"],"names":["UploadPartRouteFeature","createFeature","container","UploadPartRoute"],"mappings":";;AAGO,MAAMA,yBAAyBC,cAAc;IAChD,MAAM;IACN,UAASC,SAAS;QACdA,UAAU,QAAQ,CAACC;IACvB;AACJ"}

package/routes/UploadSingleFileRoute/UploadSingleFileRoute.d.ts

@@ -0,0 +1,14 @@
+import { HttpRoute } from "@webiny/event-handler-core";
+import type { IHttpRequest, IHttpResponse } from "@webiny/event-handler-core";
+import { FileManagerServerConfig } from "../../features/FileManagerServerConfig/abstractions.js";
+declare class UploadSingleFileRouteImpl implements HttpRoute.Interface {
+    private readonly config;
+    readonly method = "POST";
+    readonly path = "/webiny-file-upload";
+    constructor(config: FileManagerServerConfig.Interface);
+    handle(request: IHttpRequest): Promise<IHttpResponse>;
+}
+export declare const UploadSingleFileRoute: typeof UploadSingleFileRouteImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/event-handler-core").IHttpRoute>;
+};
+export {};

package/routes/UploadSingleFileRoute/UploadSingleFileRoute.js

@@ -0,0 +1,70 @@
+import node_path from "node:path";
+import { mkdir, writeFile } from "node:fs/promises";
+import { HttpRoute } from "@webiny/event-handler-core";
+import { verifyUploadToken } from "../../utils/uploadToken.js";
+import { FileManagerServerConfig } from "../../features/FileManagerServerConfig/abstractions.js";
+import { getBoundary, isPathContained, json, parseMultipart, toBuffer } from "../utils.js";
+class UploadSingleFileRouteImpl {
+    constructor(config){
+        this.config = config;
+        this.method = "POST";
+        this.path = "/webiny-file-upload";
+    }
+    async handle(request) {
+        const storagePath = this.config.storagePath;
+        const secret = this.config.uploadSecret;
+        const contentType = request.headers["content-type"] ?? request.headers["Content-Type"] ?? "";
+        const boundary = getBoundary(contentType);
+        if (!boundary) return json(400, {
+            error: "Expected multipart/form-data with a boundary."
+        });
+        const { fields, files } = parseMultipart(toBuffer(request.body), boundary);
+        const key = fields.find((field)=>"key" === field.name)?.value;
+        const token = fields.find((field)=>"token" === field.name)?.value;
+        const file = files[0];
+        if (!key || !token) return json(400, {
+            error: "Missing key or token."
+        });
+        if (!file) return json(400, {
+            error: "No file in request."
+        });
+        let payload;
+        try {
+            payload = verifyUploadToken(token, secret);
+        } catch (err) {
+            return json(400, {
+                error: err instanceof Error ? err.message : "Invalid token."
+            });
+        }
+        if (payload.key !== key) return json(400, {
+            error: "Token key mismatch."
+        });
+        const fileSize = file.data.length;
+        if (payload.uploadMaxFileSize > 0 && fileSize > payload.uploadMaxFileSize) return json(400, {
+            error: "File exceeds maximum allowed size."
+        });
+        if (payload.uploadMinFileSize > 0 && fileSize < payload.uploadMinFileSize) return json(400, {
+            error: "File is below minimum allowed size."
+        });
+        const destPath = node_path.join(storagePath, key);
+        if (!isPathContained(destPath, storagePath)) return json(400, {
+            error: "Invalid path."
+        });
+        await mkdir(node_path.dirname(destPath), {
+            recursive: true
+        });
+        await writeFile(destPath, file.data);
+        return {
+            statusCode: 204
+        };
+    }
+}
+const UploadSingleFileRoute = HttpRoute.createImplementation({
+    implementation: UploadSingleFileRouteImpl,
+    dependencies: [
+        FileManagerServerConfig
+    ]
+});
+export { UploadSingleFileRoute };
+
+//# sourceMappingURL=UploadSingleFileRoute.js.map

package/routes/UploadSingleFileRoute/UploadSingleFileRoute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes/UploadSingleFileRoute/UploadSingleFileRoute.js","sources":["../../../src/routes/UploadSingleFileRoute/UploadSingleFileRoute.ts"],"sourcesContent":["import path from \"node:path\";\nimport { mkdir, writeFile } from \"node:fs/promises\";\nimport { HttpRoute } from \"@webiny/event-handler-core\";\nimport type { IHttpRequest, IHttpResponse } from \"@webiny/event-handler-core\";\nimport { verifyUploadToken } from \"~/utils/uploadToken.js\";\nimport { FileManagerServerConfig } from \"~/features/FileManagerServerConfig/abstractions.js\";\nimport { isPathContained, json, toBuffer, parseMultipart, getBoundary } from \"../utils.js\";\n\nclass UploadSingleFileRouteImpl implements HttpRoute.Interface {\n    public readonly method = \"POST\";\n    public readonly path = \"/webiny-file-upload\";\n\n    public constructor(private readonly config: FileManagerServerConfig.Interface) {}\n\n    public async handle(request: IHttpRequest): Promise<IHttpResponse> {\n        const storagePath = this.config.storagePath;\n        const secret = this.config.uploadSecret;\n\n        const contentType =\n            request.headers[\"content-type\"] ?? request.headers[\"Content-Type\"] ?? \"\";\n        const boundary = getBoundary(contentType);\n        if (!boundary) {\n            return json(400, { error: \"Expected multipart/form-data with a boundary.\" });\n        }\n\n        const { fields, files } = parseMultipart(toBuffer(request.body), boundary);\n        const key = fields.find(field => field.name === \"key\")?.value;\n        const token = fields.find(field => field.name === \"token\")?.value;\n        const file = files[0];\n\n        if (!key || !token) {\n            return json(400, { error: \"Missing key or token.\" });\n        }\n\n        if (!file) {\n            return json(400, { error: \"No file in request.\" });\n        }\n\n        let payload;\n        try {\n            payload = verifyUploadToken(token, secret);\n        } catch (err) {\n            return json(400, { error: err instanceof Error ? err.message : \"Invalid token.\" });\n        }\n\n        if (payload.key !== key) {\n            return json(400, { error: \"Token key mismatch.\" });\n        }\n\n        const fileSize = file.data.length;\n        if (payload.uploadMaxFileSize > 0 && fileSize > payload.uploadMaxFileSize) {\n            return json(400, { error: \"File exceeds maximum allowed size.\" });\n        }\n\n        if (payload.uploadMinFileSize > 0 && fileSize < payload.uploadMinFileSize) {\n            return json(400, { error: \"File is below minimum allowed size.\" });\n        }\n\n        const destPath = path.join(storagePath, key);\n        if (!isPathContained(destPath, storagePath)) {\n            return json(400, { error: \"Invalid path.\" });\n        }\n\n        await mkdir(path.dirname(destPath), { recursive: true });\n        await writeFile(destPath, file.data);\n\n        return { statusCode: 204 };\n    }\n}\n\nexport const UploadSingleFileRoute = HttpRoute.createImplementation({\n    implementation: UploadSingleFileRouteImpl,\n    dependencies: [FileManagerServerConfig]\n});\n"],"names":["UploadSingleFileRouteImpl","config","request","storagePath","secret","contentType","boundary","getBoundary","json","fields","files","parseMultipart","toBuffer","key","field","token","file","payload","verifyUploadToken","err","Error","fileSize","destPath","path","isPathContained","mkdir","writeFile","UploadSingleFileRoute","HttpRoute","FileManagerServerConfig"],"mappings":";;;;;;AAQA,MAAMA;IAIF,YAAoCC,MAAyC,CAAE;aAA3CA,MAAM,GAANA;aAHpB,MAAM,GAAG;aACT,IAAI,GAAG;IAEyD;IAEhF,MAAa,OAAOC,OAAqB,EAA0B;QAC/D,MAAMC,cAAc,IAAI,CAAC,MAAM,CAAC,WAAW;QAC3C,MAAMC,SAAS,IAAI,CAAC,MAAM,CAAC,YAAY;QAEvC,MAAMC,cACFH,QAAQ,OAAO,CAAC,eAAe,IAAIA,QAAQ,OAAO,CAAC,eAAe,IAAI;QAC1E,MAAMI,WAAWC,YAAYF;QAC7B,IAAI,CAACC,UACD,OAAOE,KAAK,KAAK;YAAE,OAAO;QAAgD;QAG9E,MAAM,EAAEC,MAAM,EAAEC,KAAK,EAAE,GAAGC,eAAeC,SAASV,QAAQ,IAAI,GAAGI;QACjE,MAAMO,MAAMJ,OAAO,IAAI,CAACK,CAAAA,QAASA,AAAe,UAAfA,MAAM,IAAI,GAAa;QACxD,MAAMC,QAAQN,OAAO,IAAI,CAACK,CAAAA,QAASA,AAAe,YAAfA,MAAM,IAAI,GAAe;QAC5D,MAAME,OAAON,KAAK,CAAC,EAAE;QAErB,IAAI,CAACG,OAAO,CAACE,OACT,OAAOP,KAAK,KAAK;YAAE,OAAO;QAAwB;QAGtD,IAAI,CAACQ,MACD,OAAOR,KAAK,KAAK;YAAE,OAAO;QAAsB;QAGpD,IAAIS;QACJ,IAAI;YACAA,UAAUC,kBAAkBH,OAAOX;QACvC,EAAE,OAAOe,KAAK;YACV,OAAOX,KAAK,KAAK;gBAAE,OAAOW,eAAeC,QAAQD,IAAI,OAAO,GAAG;YAAiB;QACpF;QAEA,IAAIF,QAAQ,GAAG,KAAKJ,KAChB,OAAOL,KAAK,KAAK;YAAE,OAAO;QAAsB;QAGpD,MAAMa,WAAWL,KAAK,IAAI,CAAC,MAAM;QACjC,IAAIC,QAAQ,iBAAiB,GAAG,KAAKI,WAAWJ,QAAQ,iBAAiB,EACrE,OAAOT,KAAK,KAAK;YAAE,OAAO;QAAqC;QAGnE,IAAIS,QAAQ,iBAAiB,GAAG,KAAKI,WAAWJ,QAAQ,iBAAiB,EACrE,OAAOT,KAAK,KAAK;YAAE,OAAO;QAAsC;QAGpE,MAAMc,WAAWC,UAAAA,IAAS,CAACpB,aAAaU;QACxC,IAAI,CAACW,gBAAgBF,UAAUnB,cAC3B,OAAOK,KAAK,KAAK;YAAE,OAAO;QAAgB;QAG9C,MAAMiB,MAAMF,UAAAA,OAAY,CAACD,WAAW;YAAE,WAAW;QAAK;QACtD,MAAMI,UAAUJ,UAAUN,KAAK,IAAI;QAEnC,OAAO;YAAE,YAAY;QAAI;IAC7B;AACJ;AAEO,MAAMW,wBAAwBC,UAAU,oBAAoB,CAAC;IAChE,gBAAgB5B;IAChB,cAAc;QAAC6B;KAAwB;AAC3C"}

package/routes/UploadSingleFileRoute/feature.d.ts

@@ -0,0 +1,4 @@
+export declare const UploadSingleFileRouteFeature: {
+    name: string;
+    register(container: import("@webiny/di").Container): void;
+};

package/routes/UploadSingleFileRoute/feature.js

@@ -0,0 +1,11 @@
+import { createFeature } from "@webiny/feature/api";
+import { UploadSingleFileRoute } from "./UploadSingleFileRoute.js";
+const UploadSingleFileRouteFeature = createFeature({
+    name: "FileManagerServer/UploadSingleFileRoute",
+    register (container) {
+        container.register(UploadSingleFileRoute);
+    }
+});
+export { UploadSingleFileRouteFeature };
+
+//# sourceMappingURL=feature.js.map

package/routes/UploadSingleFileRoute/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes/UploadSingleFileRoute/feature.js","sources":["../../../src/routes/UploadSingleFileRoute/feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { UploadSingleFileRoute } from \"./UploadSingleFileRoute.js\";\n\nexport const UploadSingleFileRouteFeature = createFeature({\n    name: \"FileManagerServer/UploadSingleFileRoute\",\n    register(container) {\n        container.register(UploadSingleFileRoute);\n    }\n});\n"],"names":["UploadSingleFileRouteFeature","createFeature","container","UploadSingleFileRoute"],"mappings":";;AAGO,MAAMA,+BAA+BC,cAAc;IACtD,MAAM;IACN,UAASC,SAAS;QACdA,UAAU,QAAQ,CAACC;IACvB;AACJ"}

package/routes/utils.d.ts

@@ -0,0 +1,20 @@
+import type { IHttpResponse } from "@webiny/event-handler-core";
+export declare const isPathContained: (filePath: string, storagePath: string) => boolean;
+export declare const json: (statusCode: number, data: unknown) => IHttpResponse;
+export declare const toBuffer: (body: unknown) => Buffer;
+interface MultipartField {
+    name: string;
+    value: string;
+}
+interface MultipartFile {
+    name: string;
+    filename: string;
+    data: Buffer;
+}
+export interface MultipartResult {
+    fields: MultipartField[];
+    files: MultipartFile[];
+}
+export declare const parseMultipart: (buffer: Buffer, boundary: string) => MultipartResult;
+export declare const getBoundary: (contentType: string) => string | undefined;
+export {};

package/routes/utils.js

@@ -0,0 +1,62 @@
+import node_path from "node:path";
+const isPathContained = (filePath, storagePath)=>{
+    const resolved = node_path.resolve(filePath);
+    const root = node_path.resolve(storagePath);
+    return resolved === root || resolved.startsWith(root + node_path.sep);
+};
+const json = (statusCode, data)=>({
+        statusCode,
+        headers: {
+            "content-type": "application/json"
+        },
+        body: JSON.stringify(data)
+    });
+const toBuffer = (body)=>{
+    if (Buffer.isBuffer(body)) return body;
+    if (body instanceof Uint8Array) return Buffer.from(body);
+    if ("string" == typeof body) return Buffer.from(body, "base64");
+    return Buffer.alloc(0);
+};
+const parseMultipart = (buffer, boundary)=>{
+    const fields = [];
+    const files = [];
+    const separator = Buffer.from(`--${boundary}`);
+    let idx = buffer.indexOf(separator);
+    while(-1 !== idx){
+        const next = buffer.indexOf(separator, idx + separator.length);
+        if (-1 === next) break;
+        let part = buffer.subarray(idx + separator.length, next);
+        if ("\r\n" === part.subarray(0, 2).toString("latin1")) part = part.subarray(2);
+        if ("\r\n" === part.subarray(-2).toString("latin1")) part = part.subarray(0, -2);
+        const headerEnd = part.indexOf("\r\n\r\n");
+        if (-1 !== headerEnd) {
+            const rawHeaders = part.subarray(0, headerEnd).toString("utf8");
+            const content = part.subarray(headerEnd + 4);
+            const disposition = /content-disposition:[^\r\n]*/i.exec(rawHeaders)?.[0] ?? "";
+            const name = /name="([^"]*)"/i.exec(disposition)?.[1];
+            const filename = /filename="([^"]*)"/i.exec(disposition)?.[1];
+            if (void 0 !== name) if (void 0 !== filename) files.push({
+                name,
+                filename,
+                data: content
+            });
+            else fields.push({
+                name,
+                value: content.toString("utf8")
+            });
+        }
+        idx = next;
+    }
+    return {
+        fields,
+        files
+    };
+};
+const getBoundary = (contentType)=>{
+    const match = /boundary=(?:"([^"]+)"|([^;]+))/i.exec(contentType);
+    const value = match?.[1] ?? match?.[2];
+    return value?.trim();
+};
+export { getBoundary, isPathContained, json, parseMultipart, toBuffer };
+
+//# sourceMappingURL=utils.js.map

package/routes/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes/utils.js","sources":["../../src/routes/utils.ts"],"sourcesContent":["import path from \"node:path\";\nimport type { IHttpResponse } from \"@webiny/event-handler-core\";\n\nexport const isPathContained = (filePath: string, storagePath: string): boolean => {\n    const resolved = path.resolve(filePath);\n    const root = path.resolve(storagePath);\n    return resolved === root || resolved.startsWith(root + path.sep);\n};\n\nexport const json = (statusCode: number, data: unknown): IHttpResponse => ({\n    statusCode,\n    headers: { \"content-type\": \"application/json\" },\n    body: JSON.stringify(data)\n});\n\n/* Normalise a transport request body into a Buffer. */\nexport const toBuffer = (body: unknown): Buffer => {\n    if (Buffer.isBuffer(body)) {\n        return body;\n    }\n    if (body instanceof Uint8Array) {\n        return Buffer.from(body);\n    }\n    if (typeof body === \"string\") {\n        return Buffer.from(body, \"base64\");\n    }\n    return Buffer.alloc(0);\n};\n\ninterface MultipartField {\n    name: string;\n    value: string;\n}\n\ninterface MultipartFile {\n    name: string;\n    filename: string;\n    data: Buffer;\n}\n\nexport interface MultipartResult {\n    fields: MultipartField[];\n    files: MultipartFile[];\n}\n\n/* Minimal multipart/form-data parser operating on the raw body buffer. */\nexport const parseMultipart = (buffer: Buffer, boundary: string): MultipartResult => {\n    const fields: MultipartField[] = [];\n    const files: MultipartFile[] = [];\n    const separator = Buffer.from(`--${boundary}`);\n\n    let idx = buffer.indexOf(separator);\n    while (idx !== -1) {\n        const next = buffer.indexOf(separator, idx + separator.length);\n        if (next === -1) {\n            break;\n        }\n\n        let part = buffer.subarray(idx + separator.length, next);\n        if (part.subarray(0, 2).toString(\"latin1\") === \"\\r\\n\") {\n            part = part.subarray(2);\n        }\n        if (part.subarray(-2).toString(\"latin1\") === \"\\r\\n\") {\n            part = part.subarray(0, -2);\n        }\n\n        const headerEnd = part.indexOf(\"\\r\\n\\r\\n\");\n        if (headerEnd !== -1) {\n            const rawHeaders = part.subarray(0, headerEnd).toString(\"utf8\");\n            const content = part.subarray(headerEnd + 4);\n\n            const disposition = /content-disposition:[^\\r\\n]*/i.exec(rawHeaders)?.[0] ?? \"\";\n            const name = /name=\"([^\"]*)\"/i.exec(disposition)?.[1];\n            const filename = /filename=\"([^\"]*)\"/i.exec(disposition)?.[1];\n\n            if (name !== undefined) {\n                if (filename !== undefined) {\n                    files.push({ name, filename, data: content });\n                } else {\n                    fields.push({ name, value: content.toString(\"utf8\") });\n                }\n            }\n        }\n\n        idx = next;\n    }\n\n    return { fields, files };\n};\n\nexport const getBoundary = (contentType: string): string | undefined => {\n    const match = /boundary=(?:\"([^\"]+)\"|([^;]+))/i.exec(contentType);\n    const value = match?.[1] ?? match?.[2];\n    return value?.trim();\n};\n"],"names":["isPathContained","filePath","storagePath","resolved","path","root","json","statusCode","data","JSON","toBuffer","body","Buffer","Uint8Array","parseMultipart","buffer","boundary","fields","files","separator","idx","next","part","headerEnd","rawHeaders","content","disposition","name","filename","undefined","getBoundary","contentType","match","value"],"mappings":";AAGO,MAAMA,kBAAkB,CAACC,UAAkBC;IAC9C,MAAMC,WAAWC,UAAAA,OAAY,CAACH;IAC9B,MAAMI,OAAOD,UAAAA,OAAY,CAACF;IAC1B,OAAOC,aAAaE,QAAQF,SAAS,UAAU,CAACE,OAAOD,UAAAA,GAAQ;AACnE;AAEO,MAAME,OAAO,CAACC,YAAoBC,OAAkC;QACvED;QACA,SAAS;YAAE,gBAAgB;QAAmB;QAC9C,MAAME,KAAK,SAAS,CAACD;IACzB;AAGO,MAAME,WAAW,CAACC;IACrB,IAAIC,OAAO,QAAQ,CAACD,OAChB,OAAOA;IAEX,IAAIA,gBAAgBE,YAChB,OAAOD,OAAO,IAAI,CAACD;IAEvB,IAAI,AAAgB,YAAhB,OAAOA,MACP,OAAOC,OAAO,IAAI,CAACD,MAAM;IAE7B,OAAOC,OAAO,KAAK,CAAC;AACxB;AAmBO,MAAME,iBAAiB,CAACC,QAAgBC;IAC3C,MAAMC,SAA2B,EAAE;IACnC,MAAMC,QAAyB,EAAE;IACjC,MAAMC,YAAYP,OAAO,IAAI,CAAC,CAAC,EAAE,EAAEI,UAAU;IAE7C,IAAII,MAAML,OAAO,OAAO,CAACI;IACzB,MAAOC,AAAQ,OAARA,IAAY;QACf,MAAMC,OAAON,OAAO,OAAO,CAACI,WAAWC,MAAMD,UAAU,MAAM;QAC7D,IAAIE,AAAS,OAATA,MACA;QAGJ,IAAIC,OAAOP,OAAO,QAAQ,CAACK,MAAMD,UAAU,MAAM,EAAEE;QACnD,IAAIC,AAA2C,WAA3CA,KAAK,QAAQ,CAAC,GAAG,GAAG,QAAQ,CAAC,WAC7BA,OAAOA,KAAK,QAAQ,CAAC;QAEzB,IAAIA,AAAyC,WAAzCA,KAAK,QAAQ,CAAC,IAAI,QAAQ,CAAC,WAC3BA,OAAOA,KAAK,QAAQ,CAAC,GAAG;QAG5B,MAAMC,YAAYD,KAAK,OAAO,CAAC;QAC/B,IAAIC,AAAc,OAAdA,WAAkB;YAClB,MAAMC,aAAaF,KAAK,QAAQ,CAAC,GAAGC,WAAW,QAAQ,CAAC;YACxD,MAAME,UAAUH,KAAK,QAAQ,CAACC,YAAY;YAE1C,MAAMG,cAAc,gCAAgC,IAAI,CAACF,aAAa,CAAC,EAAE,IAAI;YAC7E,MAAMG,OAAO,kBAAkB,IAAI,CAACD,cAAc,CAAC,EAAE;YACrD,MAAME,WAAW,sBAAsB,IAAI,CAACF,cAAc,CAAC,EAAE;YAE7D,IAAIC,AAASE,WAATF,MACA,IAAIC,AAAaC,WAAbD,UACAV,MAAM,IAAI,CAAC;gBAAES;gBAAMC;gBAAU,MAAMH;YAAQ;iBAE3CR,OAAO,IAAI,CAAC;gBAAEU;gBAAM,OAAOF,QAAQ,QAAQ,CAAC;YAAQ;QAGhE;QAEAL,MAAMC;IACV;IAEA,OAAO;QAAEJ;QAAQC;IAAM;AAC3B;AAEO,MAAMY,cAAc,CAACC;IACxB,MAAMC,QAAQ,kCAAkC,IAAI,CAACD;IACrD,MAAME,QAAQD,OAAO,CAAC,EAAE,IAAIA,OAAO,CAAC,EAAE;IACtC,OAAOC,OAAO;AAClB"}