@webiny/api-file-manager-server 0.0.0-unstable.9f53ea597d

package/features/GetFileContentsById/GetFileContentsByIdUseCase.js

@@ -0,0 +1,35 @@
+import { promises } from "node:fs";
+import { Result } from "@webiny/feature/api";
+import { GetFileContentsByIdUseCase } from "@webiny/api-file-manager/features/file/GetFileContentsById/index.js";
+import { FileNotFoundError, FilePersistenceError } from "@webiny/api-file-manager/domain/file/errors.js";
+import { MetadataReader } from "@webiny/api-file-manager/features/upload/ReadFileMetadata/abstractions.js";
+class GetFileContentsByIdUseCaseImpl {
+    constructor(metadataReader){
+        this.metadataReader = metadataReader;
+    }
+    async execute(fileId) {
+        const metadata = await this.metadataReader.read(fileId);
+        if (!metadata) return Result.fail(new FileNotFoundError(fileId));
+        const storagePath = String(process.env.WEBINY_LOCAL_STORAGE_PATH);
+        try {
+            const filePath = `${storagePath}/${metadata.bucketKey}`;
+            const buffer = await promises.readFile(filePath);
+            return Result.ok({
+                buffer,
+                contentType: metadata.contentType
+            });
+        } catch (error) {
+            if ("ENOENT" === error.code) return Result.fail(new FileNotFoundError(fileId));
+            return Result.fail(new FilePersistenceError(error instanceof Error ? error : new Error(String(error))));
+        }
+    }
+}
+const GetFileContentsByIdUseCaseImplementation = GetFileContentsByIdUseCase.createImplementation({
+    implementation: GetFileContentsByIdUseCaseImpl,
+    dependencies: [
+        MetadataReader
+    ]
+});
+export { GetFileContentsByIdUseCaseImplementation };
+
+//# sourceMappingURL=GetFileContentsByIdUseCase.js.map

package/features/GetFileContentsById/GetFileContentsByIdUseCase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/GetFileContentsById/GetFileContentsByIdUseCase.js","sources":["../../../src/features/GetFileContentsById/GetFileContentsByIdUseCase.ts"],"sourcesContent":["import { promises as fs } from \"node:fs\";\nimport { Result } from \"@webiny/feature/api\";\nimport { GetFileContentsByIdUseCase } from \"@webiny/api-file-manager/features/file/GetFileContentsById/index.js\";\nimport type { FileContents } from \"@webiny/api-file-manager/features/file/GetFileContentsById/index.js\";\nimport {\n    FileNotFoundError,\n    FilePersistenceError\n} from \"@webiny/api-file-manager/domain/file/errors.js\";\nimport { MetadataReader } from \"@webiny/api-file-manager/features/upload/ReadFileMetadata/abstractions.js\";\n\nclass GetFileContentsByIdUseCaseImpl implements GetFileContentsByIdUseCase.Interface {\n    private readonly metadataReader: MetadataReader.Interface;\n\n    public constructor(metadataReader: MetadataReader.Interface) {\n        this.metadataReader = metadataReader;\n    }\n\n    public async execute(\n        fileId: string\n    ): Promise<Result<FileContents, GetFileContentsByIdUseCase.Error>> {\n        const metadata = await this.metadataReader.read(fileId);\n        if (!metadata) {\n            return Result.fail(new FileNotFoundError(fileId));\n        }\n\n        const storagePath = String(process.env.WEBINY_LOCAL_STORAGE_PATH);\n\n        try {\n            const filePath = `${storagePath}/${metadata.bucketKey}`;\n            const buffer = await fs.readFile(filePath);\n            return Result.ok({ buffer, contentType: metadata.contentType });\n        } catch (error) {\n            if ((error as NodeJS.ErrnoException).code === \"ENOENT\") {\n                return Result.fail(new FileNotFoundError(fileId));\n            }\n            return Result.fail(\n                new FilePersistenceError(error instanceof Error ? error : new Error(String(error)))\n            );\n        }\n    }\n}\n\nexport const GetFileContentsByIdUseCaseImplementation =\n    GetFileContentsByIdUseCase.createImplementation({\n        implementation: GetFileContentsByIdUseCaseImpl,\n        dependencies: [MetadataReader]\n    });\n"],"names":["GetFileContentsByIdUseCaseImpl","metadataReader","fileId","metadata","Result","FileNotFoundError","storagePath","String","process","filePath","buffer","fs","error","FilePersistenceError","Error","GetFileContentsByIdUseCaseImplementation","GetFileContentsByIdUseCase","MetadataReader"],"mappings":";;;;;AAUA,MAAMA;IAGF,YAAmBC,cAAwC,CAAE;QACzD,IAAI,CAAC,cAAc,GAAGA;IAC1B;IAEA,MAAa,QACTC,MAAc,EACiD;QAC/D,MAAMC,WAAW,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAACD;QAChD,IAAI,CAACC,UACD,OAAOC,OAAO,IAAI,CAAC,IAAIC,kBAAkBH;QAG7C,MAAMI,cAAcC,OAAOC,QAAQ,GAAG,CAAC,yBAAyB;QAEhE,IAAI;YACA,MAAMC,WAAW,GAAGH,YAAY,CAAC,EAAEH,SAAS,SAAS,EAAE;YACvD,MAAMO,SAAS,MAAMC,SAAAA,QAAW,CAACF;YACjC,OAAOL,OAAO,EAAE,CAAC;gBAAEM;gBAAQ,aAAaP,SAAS,WAAW;YAAC;QACjE,EAAE,OAAOS,OAAO;YACZ,IAAKA,AAAyC,aAAzCA,MAAgC,IAAI,EACrC,OAAOR,OAAO,IAAI,CAAC,IAAIC,kBAAkBH;YAE7C,OAAOE,OAAO,IAAI,CACd,IAAIS,qBAAqBD,iBAAiBE,QAAQF,QAAQ,IAAIE,MAAMP,OAAOK;QAEnF;IACJ;AACJ;AAEO,MAAMG,2CACTC,2BAA2B,oBAAoB,CAAC;IAC5C,gBAAgBhB;IAChB,cAAc;QAACiB;KAAe;AAClC"}

package/features/GetFileContentsById/feature.d.ts

@@ -0,0 +1,4 @@
+export declare const GetFileContentsByIdFeature: {
+    name: string;
+    register(container: import("@webiny/di").Container): void;
+};

package/features/GetFileContentsById/feature.js

@@ -0,0 +1,11 @@
+import { createFeature } from "@webiny/feature/api";
+import { GetFileContentsByIdUseCaseImplementation } from "./GetFileContentsByIdUseCase.js";
+const GetFileContentsByIdFeature = createFeature({
+    name: "FileManagerServer/GetFileContentsById",
+    register (container) {
+        container.register(GetFileContentsByIdUseCaseImplementation);
+    }
+});
+export { GetFileContentsByIdFeature };
+
+//# sourceMappingURL=feature.js.map

package/features/GetFileContentsById/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/GetFileContentsById/feature.js","sources":["../../../src/features/GetFileContentsById/feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { GetFileContentsByIdUseCaseImplementation } from \"./GetFileContentsByIdUseCase.js\";\n\nexport const GetFileContentsByIdFeature = createFeature({\n    name: \"FileManagerServer/GetFileContentsById\",\n    register(container) {\n        container.register(GetFileContentsByIdUseCaseImplementation);\n    }\n});\n"],"names":["GetFileContentsByIdFeature","createFeature","container","GetFileContentsByIdUseCaseImplementation"],"mappings":";;AAGO,MAAMA,6BAA6BC,cAAc;IACpD,MAAM;IACN,UAASC,SAAS;QACdA,UAAU,QAAQ,CAACC;IACvB;AACJ"}

package/features/GetFileContentsByKey/GetFileContentsByKeyUseCase.d.ts

@@ -0,0 +1,13 @@
+import { Result } from "@webiny/feature/api";
+import { TenantContext } from "@webiny/api-core/features/tenancy/TenantContext/index.js";
+import { GetFileContentsByKeyUseCase } from "@webiny/api-file-manager/features/file/GetFileContentsByKey/index.js";
+import type { FileContents } from "@webiny/api-file-manager/features/file/GetFileContentsById/index.js";
+declare class GetFileContentsByKeyUseCaseImpl implements GetFileContentsByKeyUseCase.Interface {
+    private readonly tenantContext;
+    constructor(tenantContext: TenantContext.Interface);
+    execute(key: string): Promise<Result<FileContents, GetFileContentsByKeyUseCase.Error>>;
+}
+export declare const GetFileContentsByKeyUseCaseImplementation: typeof GetFileContentsByKeyUseCaseImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/api-file-manager/features/file/GetFileContentsByKey/abstractions").IGetFileContentsByKeyUseCase>;
+};
+export {};

package/features/GetFileContentsByKey/GetFileContentsByKeyUseCase.js

@@ -0,0 +1,69 @@
+import { promises } from "node:fs";
+import { Result } from "@webiny/feature/api";
+import { TenantContext } from "@webiny/api-core/features/tenancy/TenantContext/index.js";
+import { GetFileContentsByKeyUseCase } from "@webiny/api-file-manager/features/file/GetFileContentsByKey/index.js";
+import { FileNotFoundError, FilePersistenceError } from "@webiny/api-file-manager/domain/file/errors.js";
+const CONTENT_TYPE_MAP = {
+    jpg: "image/jpeg",
+    jpeg: "image/jpeg",
+    png: "image/png",
+    gif: "image/gif",
+    webp: "image/webp",
+    svg: "image/svg+xml",
+    ico: "image/x-icon",
+    bmp: "image/bmp",
+    tiff: "image/tiff",
+    tif: "image/tiff",
+    pdf: "application/pdf",
+    json: "application/json",
+    xml: "application/xml",
+    zip: "application/zip",
+    gz: "application/gzip",
+    txt: "text/plain",
+    html: "text/html",
+    htm: "text/html",
+    css: "text/css",
+    js: "application/javascript",
+    ts: "application/typescript",
+    mp4: "video/mp4",
+    webm: "video/webm",
+    mp3: "audio/mpeg",
+    wav: "audio/wav",
+    ogg: "audio/ogg"
+};
+function resolveContentType(key) {
+    const ext = key.split(".").pop()?.toLowerCase();
+    if (!ext) return "application/octet-stream";
+    return CONTENT_TYPE_MAP[ext] ?? "application/octet-stream";
+}
+class GetFileContentsByKeyUseCaseImpl {
+    constructor(tenantContext){
+        this.tenantContext = tenantContext;
+    }
+    async execute(key) {
+        const tenant = this.tenantContext.getTenant();
+        const bucketKey = `tenants/${tenant.id}/files/${key}`;
+        const storagePath = String(process.env.WEBINY_LOCAL_STORAGE_PATH);
+        const filePath = `${storagePath}/${bucketKey}`;
+        try {
+            const buffer = await promises.readFile(filePath);
+            const contentType = resolveContentType(key);
+            return Result.ok({
+                buffer,
+                contentType
+            });
+        } catch (error) {
+            if ("ENOENT" === error.code) return Result.fail(new FileNotFoundError(key));
+            return Result.fail(new FilePersistenceError(error instanceof Error ? error : new Error(String(error))));
+        }
+    }
+}
+const GetFileContentsByKeyUseCaseImplementation = GetFileContentsByKeyUseCase.createImplementation({
+    implementation: GetFileContentsByKeyUseCaseImpl,
+    dependencies: [
+        TenantContext
+    ]
+});
+export { GetFileContentsByKeyUseCaseImplementation };
+
+//# sourceMappingURL=GetFileContentsByKeyUseCase.js.map

package/features/GetFileContentsByKey/GetFileContentsByKeyUseCase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/GetFileContentsByKey/GetFileContentsByKeyUseCase.js","sources":["../../../src/features/GetFileContentsByKey/GetFileContentsByKeyUseCase.ts"],"sourcesContent":["import { promises as fs } from \"node:fs\";\nimport { Result } from \"@webiny/feature/api\";\nimport { TenantContext } from \"@webiny/api-core/features/tenancy/TenantContext/index.js\";\nimport { GetFileContentsByKeyUseCase } from \"@webiny/api-file-manager/features/file/GetFileContentsByKey/index.js\";\nimport type { FileContents } from \"@webiny/api-file-manager/features/file/GetFileContentsById/index.js\";\nimport {\n    FileNotFoundError,\n    FilePersistenceError\n} from \"@webiny/api-file-manager/domain/file/errors.js\";\n\nconst CONTENT_TYPE_MAP: Record<string, string> = {\n    jpg: \"image/jpeg\",\n    jpeg: \"image/jpeg\",\n    png: \"image/png\",\n    gif: \"image/gif\",\n    webp: \"image/webp\",\n    svg: \"image/svg+xml\",\n    ico: \"image/x-icon\",\n    bmp: \"image/bmp\",\n    tiff: \"image/tiff\",\n    tif: \"image/tiff\",\n    pdf: \"application/pdf\",\n    json: \"application/json\",\n    xml: \"application/xml\",\n    zip: \"application/zip\",\n    gz: \"application/gzip\",\n    txt: \"text/plain\",\n    html: \"text/html\",\n    htm: \"text/html\",\n    css: \"text/css\",\n    js: \"application/javascript\",\n    ts: \"application/typescript\",\n    mp4: \"video/mp4\",\n    webm: \"video/webm\",\n    mp3: \"audio/mpeg\",\n    wav: \"audio/wav\",\n    ogg: \"audio/ogg\"\n};\n\nfunction resolveContentType(key: string): string {\n    const ext = key.split(\".\").pop()?.toLowerCase();\n    if (!ext) {\n        return \"application/octet-stream\";\n    }\n    return CONTENT_TYPE_MAP[ext] ?? \"application/octet-stream\";\n}\n\nclass GetFileContentsByKeyUseCaseImpl implements GetFileContentsByKeyUseCase.Interface {\n    constructor(private readonly tenantContext: TenantContext.Interface) {}\n\n    async execute(key: string): Promise<Result<FileContents, GetFileContentsByKeyUseCase.Error>> {\n        const tenant = this.tenantContext.getTenant();\n        const bucketKey = `tenants/${tenant.id}/files/${key}`;\n        const storagePath = String(process.env.WEBINY_LOCAL_STORAGE_PATH);\n        const filePath = `${storagePath}/${bucketKey}`;\n\n        try {\n            const buffer = await fs.readFile(filePath);\n            const contentType = resolveContentType(key);\n            return Result.ok({ buffer, contentType });\n        } catch (error) {\n            if ((error as NodeJS.ErrnoException).code === \"ENOENT\") {\n                return Result.fail(new FileNotFoundError(key));\n            }\n            return Result.fail(\n                new FilePersistenceError(error instanceof Error ? error : new Error(String(error)))\n            );\n        }\n    }\n}\n\nexport const GetFileContentsByKeyUseCaseImplementation =\n    GetFileContentsByKeyUseCase.createImplementation({\n        implementation: GetFileContentsByKeyUseCaseImpl,\n        dependencies: [TenantContext]\n    });\n"],"names":["CONTENT_TYPE_MAP","resolveContentType","key","ext","GetFileContentsByKeyUseCaseImpl","tenantContext","tenant","bucketKey","storagePath","String","process","filePath","buffer","fs","contentType","Result","error","FileNotFoundError","FilePersistenceError","Error","GetFileContentsByKeyUseCaseImplementation","GetFileContentsByKeyUseCase","TenantContext"],"mappings":";;;;;AAUA,MAAMA,mBAA2C;IAC7C,KAAK;IACL,MAAM;IACN,KAAK;IACL,KAAK;IACL,MAAM;IACN,KAAK;IACL,KAAK;IACL,KAAK;IACL,MAAM;IACN,KAAK;IACL,KAAK;IACL,MAAM;IACN,KAAK;IACL,KAAK;IACL,IAAI;IACJ,KAAK;IACL,MAAM;IACN,KAAK;IACL,KAAK;IACL,IAAI;IACJ,IAAI;IACJ,KAAK;IACL,MAAM;IACN,KAAK;IACL,KAAK;IACL,KAAK;AACT;AAEA,SAASC,mBAAmBC,GAAW;IACnC,MAAMC,MAAMD,IAAI,KAAK,CAAC,KAAK,GAAG,IAAI;IAClC,IAAI,CAACC,KACD,OAAO;IAEX,OAAOH,gBAAgB,CAACG,IAAI,IAAI;AACpC;AAEA,MAAMC;IACF,YAA6BC,aAAsC,CAAE;aAAxCA,aAAa,GAAbA;IAAyC;IAEtE,MAAM,QAAQH,GAAW,EAAoE;QACzF,MAAMI,SAAS,IAAI,CAAC,aAAa,CAAC,SAAS;QAC3C,MAAMC,YAAY,CAAC,QAAQ,EAAED,OAAO,EAAE,CAAC,OAAO,EAAEJ,KAAK;QACrD,MAAMM,cAAcC,OAAOC,QAAQ,GAAG,CAAC,yBAAyB;QAChE,MAAMC,WAAW,GAAGH,YAAY,CAAC,EAAED,WAAW;QAE9C,IAAI;YACA,MAAMK,SAAS,MAAMC,SAAAA,QAAW,CAACF;YACjC,MAAMG,cAAcb,mBAAmBC;YACvC,OAAOa,OAAO,EAAE,CAAC;gBAAEH;gBAAQE;YAAY;QAC3C,EAAE,OAAOE,OAAO;YACZ,IAAKA,AAAyC,aAAzCA,MAAgC,IAAI,EACrC,OAAOD,OAAO,IAAI,CAAC,IAAIE,kBAAkBf;YAE7C,OAAOa,OAAO,IAAI,CACd,IAAIG,qBAAqBF,iBAAiBG,QAAQH,QAAQ,IAAIG,MAAMV,OAAOO;QAEnF;IACJ;AACJ;AAEO,MAAMI,4CACTC,4BAA4B,oBAAoB,CAAC;IAC7C,gBAAgBjB;IAChB,cAAc;QAACkB;KAAc;AACjC"}

package/features/GetFileContentsByKey/feature.d.ts

@@ -0,0 +1,4 @@
+export declare const GetFileContentsByKeyFeature: {
+    name: string;
+    register(container: import("@webiny/di").Container): void;
+};

package/features/GetFileContentsByKey/feature.js

@@ -0,0 +1,11 @@
+import { createFeature } from "@webiny/feature/api";
+import { GetFileContentsByKeyUseCaseImplementation } from "./GetFileContentsByKeyUseCase.js";
+const GetFileContentsByKeyFeature = createFeature({
+    name: "FileManagerServer/GetFileContentsByKey",
+    register (container) {
+        container.register(GetFileContentsByKeyUseCaseImplementation);
+    }
+});
+export { GetFileContentsByKeyFeature };
+
+//# sourceMappingURL=feature.js.map

package/features/GetFileContentsByKey/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/GetFileContentsByKey/feature.js","sources":["../../../src/features/GetFileContentsByKey/feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { GetFileContentsByKeyUseCaseImplementation } from \"./GetFileContentsByKeyUseCase.js\";\n\nexport const GetFileContentsByKeyFeature = createFeature({\n    name: \"FileManagerServer/GetFileContentsByKey\",\n    register(container) {\n        container.register(GetFileContentsByKeyUseCaseImplementation);\n    }\n});\n"],"names":["GetFileContentsByKeyFeature","createFeature","container","GetFileContentsByKeyUseCaseImplementation"],"mappings":";;AAGO,MAAMA,8BAA8BC,cAAc;IACrD,MAAM;IACN,UAASC,SAAS;QACdA,UAAU,QAAQ,CAACC;IACvB;AACJ"}

package/features/GetUploadPayload/GetUploadPayloadUseCase.d.ts

@@ -0,0 +1,16 @@
+import { TenantContext } from "@webiny/api-core/features/tenancy/TenantContext/index.js";
+import { Request } from "@webiny/handler/abstractions/Request.js";
+import { GetUploadPayloadUseCase } from "@webiny/api-file-manager/features/upload/GetUploadPayload/index.js";
+import type { FileData } from "@webiny/api-file-manager/features/upload/types.js";
+import type { UploadPayloadResponse } from "@webiny/api-file-manager/features/upload/types.js";
+import type { FileManagerSettings } from "@webiny/api-file-manager/domain/settings/types.js";
+declare class GetUploadPayloadUseCaseImpl implements GetUploadPayloadUseCase.Interface {
+    private readonly tenantContext;
+    private readonly request;
+    constructor(tenantContext: TenantContext.Interface, request: Request.Interface);
+    execute(file: FileData, settings: FileManagerSettings): Promise<UploadPayloadResponse>;
+}
+export declare const GetUploadPayloadUseCaseImplementation: typeof GetUploadPayloadUseCaseImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/api-file-manager/features/upload/GetUploadPayload/abstractions").IGetUploadPayloadUseCase>;
+};
+export {};

package/features/GetUploadPayload/GetUploadPayloadUseCase.js

@@ -0,0 +1,58 @@
+import { validation } from "@webiny/validation";
+import { TenantContext } from "@webiny/api-core/features/tenancy/TenantContext/index.js";
+import { Request } from "@webiny/handler/abstractions/Request.js";
+import { GetUploadPayloadUseCase } from "@webiny/api-file-manager/features/upload/GetUploadPayload/index.js";
+import { createUploadToken } from "../../utils/uploadToken.js";
+import { resolveServerUrl } from "../../utils/resolveServerUrl.js";
+const UPLOAD_MAX_FILE_SIZE_DEFAULT = 1099511627776;
+const sanitizeFileSizeValue = (value, defaultValue)=>{
+    try {
+        validation.validateSync(value, "required,numeric,gte:0");
+        return value;
+    } catch  {
+        return defaultValue;
+    }
+};
+class GetUploadPayloadUseCaseImpl {
+    constructor(tenantContext, request){
+        this.tenantContext = tenantContext;
+        this.request = request;
+    }
+    async execute(file, settings) {
+        const uploadMinFileSize = sanitizeFileSizeValue(settings.uploadMinFileSize, 0);
+        const uploadMaxFileSize = sanitizeFileSizeValue(settings.uploadMaxFileSize, UPLOAD_MAX_FILE_SIZE_DEFAULT);
+        const tenant = this.tenantContext.getTenant();
+        const storageKey = `tenants/${tenant.id}/files/${file.key}`;
+        const secret = process.env.WEBINY_UPLOAD_SECRET;
+        const expiresAt = Date.now() + 60000;
+        const token = createUploadToken({
+            key: storageKey,
+            tenantId: tenant.id,
+            expiresAt,
+            uploadMinFileSize,
+            uploadMaxFileSize
+        }, secret);
+        const serverUrl = await resolveServerUrl(this.request);
+        const data = {
+            url: `${serverUrl}/webiny-file-upload`,
+            fields: {
+                key: storageKey,
+                token
+            }
+        };
+        return {
+            data: data,
+            file
+        };
+    }
+}
+const GetUploadPayloadUseCaseImplementation = GetUploadPayloadUseCase.createImplementation({
+    implementation: GetUploadPayloadUseCaseImpl,
+    dependencies: [
+        TenantContext,
+        Request
+    ]
+});
+export { GetUploadPayloadUseCaseImplementation };
+
+//# sourceMappingURL=GetUploadPayloadUseCase.js.map

package/features/GetUploadPayload/GetUploadPayloadUseCase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/GetUploadPayload/GetUploadPayloadUseCase.js","sources":["../../../src/features/GetUploadPayload/GetUploadPayloadUseCase.ts"],"sourcesContent":["import { validation } from \"@webiny/validation\";\nimport { TenantContext } from \"@webiny/api-core/features/tenancy/TenantContext/index.js\";\nimport { Request } from \"@webiny/handler/abstractions/Request.js\";\nimport { GetUploadPayloadUseCase } from \"@webiny/api-file-manager/features/upload/GetUploadPayload/index.js\";\nimport type { FileData } from \"@webiny/api-file-manager/features/upload/types.js\";\nimport type { UploadPayloadResponse } from \"@webiny/api-file-manager/features/upload/types.js\";\nimport type { FileManagerSettings } from \"@webiny/api-file-manager/domain/settings/types.js\";\nimport { createUploadToken } from \"~/utils/uploadToken.js\";\nimport { resolveServerUrl } from \"~/utils/resolveServerUrl.js\";\n\nconst UPLOAD_MAX_FILE_SIZE_DEFAULT = 1099511627776; /* 1TB */\n\nconst sanitizeFileSizeValue = (value: number, defaultValue: number): number => {\n    try {\n        validation.validateSync(value, \"required,numeric,gte:0\");\n        return value;\n    } catch {\n        return defaultValue;\n    }\n};\n\nclass GetUploadPayloadUseCaseImpl implements GetUploadPayloadUseCase.Interface {\n    public constructor(\n        private readonly tenantContext: TenantContext.Interface,\n        private readonly request: Request.Interface\n    ) {}\n\n    public async execute(\n        file: FileData,\n        settings: FileManagerSettings\n    ): Promise<UploadPayloadResponse> {\n        const uploadMinFileSize = sanitizeFileSizeValue(settings.uploadMinFileSize, 0);\n        const uploadMaxFileSize = sanitizeFileSizeValue(\n            settings.uploadMaxFileSize,\n            UPLOAD_MAX_FILE_SIZE_DEFAULT\n        );\n\n        const tenant = this.tenantContext.getTenant();\n        const storageKey = `tenants/${tenant.id}/files/${file.key}`;\n        const secret = process.env.WEBINY_UPLOAD_SECRET as string;\n        const expiresAt = Date.now() + 60_000;\n\n        const token = createUploadToken(\n            {\n                key: storageKey,\n                tenantId: tenant.id,\n                expiresAt,\n                uploadMinFileSize,\n                uploadMaxFileSize\n            },\n            secret\n        );\n\n        const serverUrl = await resolveServerUrl(this.request);\n\n        const data = {\n            url: `${serverUrl}/webiny-file-upload`,\n            fields: {\n                key: storageKey,\n                token\n            }\n        };\n\n        return {\n            data: data as unknown as Record<string, unknown>,\n            file\n        };\n    }\n}\n\nexport const GetUploadPayloadUseCaseImplementation = GetUploadPayloadUseCase.createImplementation({\n    implementation: GetUploadPayloadUseCaseImpl,\n    dependencies: [TenantContext, Request]\n});\n"],"names":["UPLOAD_MAX_FILE_SIZE_DEFAULT","sanitizeFileSizeValue","value","defaultValue","validation","GetUploadPayloadUseCaseImpl","tenantContext","request","file","settings","uploadMinFileSize","uploadMaxFileSize","tenant","storageKey","secret","process","expiresAt","Date","token","createUploadToken","serverUrl","resolveServerUrl","data","GetUploadPayloadUseCaseImplementation","GetUploadPayloadUseCase","TenantContext","Request"],"mappings":";;;;;;AAUA,MAAMA,+BAA+B;AAErC,MAAMC,wBAAwB,CAACC,OAAeC;IAC1C,IAAI;QACAC,WAAW,YAAY,CAACF,OAAO;QAC/B,OAAOA;IACX,EAAE,OAAM;QACJ,OAAOC;IACX;AACJ;AAEA,MAAME;IACF,YACqBC,aAAsC,EACtCC,OAA0B,CAC7C;aAFmBD,aAAa,GAAbA;aACAC,OAAO,GAAPA;IAClB;IAEH,MAAa,QACTC,IAAc,EACdC,QAA6B,EACC;QAC9B,MAAMC,oBAAoBT,sBAAsBQ,SAAS,iBAAiB,EAAE;QAC5E,MAAME,oBAAoBV,sBACtBQ,SAAS,iBAAiB,EAC1BT;QAGJ,MAAMY,SAAS,IAAI,CAAC,aAAa,CAAC,SAAS;QAC3C,MAAMC,aAAa,CAAC,QAAQ,EAAED,OAAO,EAAE,CAAC,OAAO,EAAEJ,KAAK,GAAG,EAAE;QAC3D,MAAMM,SAASC,QAAQ,GAAG,CAAC,oBAAoB;QAC/C,MAAMC,YAAYC,KAAK,GAAG,KAAK;QAE/B,MAAMC,QAAQC,kBACV;YACI,KAAKN;YACL,UAAUD,OAAO,EAAE;YACnBI;YACAN;YACAC;QACJ,GACAG;QAGJ,MAAMM,YAAY,MAAMC,iBAAiB,IAAI,CAAC,OAAO;QAErD,MAAMC,OAAO;YACT,KAAK,GAAGF,UAAU,mBAAmB,CAAC;YACtC,QAAQ;gBACJ,KAAKP;gBACLK;YACJ;QACJ;QAEA,OAAO;YACH,MAAMI;YACNd;QACJ;IACJ;AACJ;AAEO,MAAMe,wCAAwCC,wBAAwB,oBAAoB,CAAC;IAC9F,gBAAgBnB;IAChB,cAAc;QAACoB;QAAeC;KAAQ;AAC1C"}

package/features/GetUploadPayload/feature.d.ts

@@ -0,0 +1,4 @@
+export declare const GetUploadPayloadFeature: {
+    name: string;
+    register(container: import("@webiny/di").Container): void;
+};

package/features/GetUploadPayload/feature.js

@@ -0,0 +1,11 @@
+import { createFeature } from "@webiny/feature/api";
+import { GetUploadPayloadUseCaseImplementation } from "./GetUploadPayloadUseCase.js";
+const GetUploadPayloadFeature = createFeature({
+    name: "FileManagerServer/GetUploadPayload",
+    register (container) {
+        container.register(GetUploadPayloadUseCaseImplementation);
+    }
+});
+export { GetUploadPayloadFeature };
+
+//# sourceMappingURL=feature.js.map

package/features/GetUploadPayload/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/GetUploadPayload/feature.js","sources":["../../../src/features/GetUploadPayload/feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { GetUploadPayloadUseCaseImplementation } from \"./GetUploadPayloadUseCase.js\";\n\nexport const GetUploadPayloadFeature = createFeature({\n    name: \"FileManagerServer/GetUploadPayload\",\n    register(container) {\n        container.register(GetUploadPayloadUseCaseImplementation);\n    }\n});\n"],"names":["GetUploadPayloadFeature","createFeature","container","GetUploadPayloadUseCaseImplementation"],"mappings":";;AAGO,MAAMA,0BAA0BC,cAAc;IACjD,MAAM;IACN,UAASC,SAAS;QACdA,UAAU,QAAQ,CAACC;IACvB;AACJ"}

package/index.d.ts

@@ -0,0 +1,4 @@
+import { ContextPlugin } from "@webiny/api";
+export { createFileUploadModifier } from "@webiny/api-file-manager/features/upload/index.js";
+export { createAssetDelivery } from "./assetDelivery/createAssetDelivery.js";
+export declare const createFileManagerServer: () => (ContextPlugin<import("@webiny/api/types.js").Context> | import("@webiny/handler/index.js").ModifyFastifyPlugin | import("@webiny/handler/index.js").RoutePlugin<import("@webiny/handler/types.js").Context>)[];

package/index.js

@@ -0,0 +1,42 @@
+import { existsSync, mkdirSync } from "node:fs";
+import { ContextPlugin } from "@webiny/api";
+import { modifyFastifyPlugin, uploadRoutesPlugin } from "./routes/uploadRoutes.js";
+import { CleanupStaleMultipartUploadsFeature } from "./features/CleanupStaleMultipartUploads/feature.js";
+import { DeleteFileFromDiskFeature } from "./features/DeleteFileFromDisk/feature.js";
+import { ExtractMetadataFeature } from "./features/ExtractMetadata/feature.js";
+import { FlushCacheFeature } from "./features/FlushCache/feature.js";
+import { GetFileContentsByIdFeature } from "./features/GetFileContentsById/feature.js";
+import { GetFileContentsByKeyFeature } from "./features/GetFileContentsByKey/feature.js";
+import { GetUploadPayloadFeature } from "./features/GetUploadPayload/feature.js";
+import { CreateMultiPartUploadFeature } from "./features/CreateMultiPartUpload/feature.js";
+import { CompleteMultiPartUploadFeature } from "./features/CompleteMultiPartUpload/feature.js";
+const contextPlugin = new ContextPlugin((context)=>{
+    const storagePath = process.env["WEBINY_LOCAL_STORAGE_PATH"];
+    if (!storagePath) throw new Error('"WEBINY_LOCAL_STORAGE_PATH" environment variable is not defined. Please set it to a valid local path.');
+    const uploadSecret = process.env["WEBINY_UPLOAD_SECRET"];
+    if (!uploadSecret) throw new Error('"WEBINY_UPLOAD_SECRET" environment variable is not defined. Please set it to a secret string used to sign upload tokens.');
+    if (!existsSync(storagePath)) mkdirSync(storagePath, {
+        recursive: true
+    });
+    const container = context.container;
+    FlushCacheFeature.register(container);
+    DeleteFileFromDiskFeature.register(container);
+    ExtractMetadataFeature.register(container);
+    GetFileContentsByIdFeature.register(container);
+    GetFileContentsByKeyFeature.register(container);
+    GetUploadPayloadFeature.register(container);
+    CreateMultiPartUploadFeature.register(container);
+    CompleteMultiPartUploadFeature.register(container);
+    CleanupStaleMultipartUploadsFeature.register(container);
+});
+contextPlugin.name = "fileManagerServer.context";
+const createFileManagerServer = ()=>[
+        contextPlugin,
+        uploadRoutesPlugin,
+        modifyFastifyPlugin
+    ];
+export { createFileUploadModifier } from "@webiny/api-file-manager/features/upload/index.js";
+export { createAssetDelivery } from "./assetDelivery/createAssetDelivery.js";
+export { createFileManagerServer };
+
+//# sourceMappingURL=index.js.map

package/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sources":["../src/index.ts"],"sourcesContent":["import { existsSync } from \"node:fs\";\nimport { mkdirSync } from \"node:fs\";\nimport { ContextPlugin } from \"@webiny/api\";\nimport { uploadRoutesPlugin } from \"~/routes/uploadRoutes.js\";\nimport { modifyFastifyPlugin } from \"~/routes/uploadRoutes.js\";\nimport { CleanupStaleMultipartUploadsFeature } from \"~/features/CleanupStaleMultipartUploads/feature.js\";\nimport { DeleteFileFromDiskFeature } from \"~/features/DeleteFileFromDisk/feature.js\";\nimport { ExtractMetadataFeature } from \"~/features/ExtractMetadata/feature.js\";\nimport { FlushCacheFeature } from \"~/features/FlushCache/feature.js\";\nimport { GetFileContentsByIdFeature } from \"~/features/GetFileContentsById/feature.js\";\nimport { GetFileContentsByKeyFeature } from \"~/features/GetFileContentsByKey/feature.js\";\nimport { GetUploadPayloadFeature } from \"~/features/GetUploadPayload/feature.js\";\nimport { CreateMultiPartUploadFeature } from \"~/features/CreateMultiPartUpload/feature.js\";\nimport { CompleteMultiPartUploadFeature } from \"~/features/CompleteMultiPartUpload/feature.js\";\nexport { createFileUploadModifier } from \"@webiny/api-file-manager/features/upload/index.js\";\nexport { createAssetDelivery } from \"./assetDelivery/createAssetDelivery.js\";\n\nconst contextPlugin = new ContextPlugin(context => {\n    const storagePath = process.env[\"WEBINY_LOCAL_STORAGE_PATH\"];\n    if (!storagePath) {\n        throw new Error(\n            `\"WEBINY_LOCAL_STORAGE_PATH\" environment variable is not defined. Please set it to a valid local path.`\n        );\n    }\n\n    const uploadSecret = process.env[\"WEBINY_UPLOAD_SECRET\"];\n    if (!uploadSecret) {\n        throw new Error(\n            `\"WEBINY_UPLOAD_SECRET\" environment variable is not defined. Please set it to a secret string used to sign upload tokens.`\n        );\n    }\n\n    if (!existsSync(storagePath)) {\n        mkdirSync(storagePath, { recursive: true });\n    }\n\n    const container = context.container;\n\n    FlushCacheFeature.register(container);\n    DeleteFileFromDiskFeature.register(container);\n    ExtractMetadataFeature.register(container);\n    GetFileContentsByIdFeature.register(container);\n    GetFileContentsByKeyFeature.register(container);\n    GetUploadPayloadFeature.register(container);\n    CreateMultiPartUploadFeature.register(container);\n    CompleteMultiPartUploadFeature.register(container);\n    CleanupStaleMultipartUploadsFeature.register(container);\n});\n\ncontextPlugin.name = `fileManagerServer.context`;\n\nexport const createFileManagerServer = () => [\n    contextPlugin,\n    uploadRoutesPlugin,\n    modifyFastifyPlugin\n];\n"],"names":["contextPlugin","ContextPlugin","context","storagePath","process","Error","uploadSecret","existsSync","mkdirSync","container","FlushCacheFeature","DeleteFileFromDiskFeature","ExtractMetadataFeature","GetFileContentsByIdFeature","GetFileContentsByKeyFeature","GetUploadPayloadFeature","CreateMultiPartUploadFeature","CompleteMultiPartUploadFeature","CleanupStaleMultipartUploadsFeature","createFileManagerServer","uploadRoutesPlugin","modifyFastifyPlugin"],"mappings":";;;;;;;;;;;;AAiBA,MAAMA,gBAAgB,IAAIC,cAAcC,CAAAA;IACpC,MAAMC,cAAcC,QAAQ,GAAG,CAAC,4BAA4B;IAC5D,IAAI,CAACD,aACD,MAAM,IAAIE,MACN;IAIR,MAAMC,eAAeF,QAAQ,GAAG,CAAC,uBAAuB;IACxD,IAAI,CAACE,cACD,MAAM,IAAID,MACN;IAIR,IAAI,CAACE,WAAWJ,cACZK,UAAUL,aAAa;QAAE,WAAW;IAAK;IAG7C,MAAMM,YAAYP,QAAQ,SAAS;IAEnCQ,kBAAkB,QAAQ,CAACD;IAC3BE,0BAA0B,QAAQ,CAACF;IACnCG,uBAAuB,QAAQ,CAACH;IAChCI,2BAA2B,QAAQ,CAACJ;IACpCK,4BAA4B,QAAQ,CAACL;IACrCM,wBAAwB,QAAQ,CAACN;IACjCO,6BAA6B,QAAQ,CAACP;IACtCQ,+BAA+B,QAAQ,CAACR;IACxCS,oCAAoC,QAAQ,CAACT;AACjD;AAEAT,cAAc,IAAI,GAAG;AAEd,MAAMmB,0BAA0B,IAAM;QACzCnB;QACAoB;QACAC;KACH"}

package/package.json

@@ -0,0 +1,44 @@
+{
+	"name": "@webiny/api-file-manager-server",
+	"version": "0.0.0-unstable.9f53ea597d",
+	"type": "module",
+	"exports": {
+		".": "./index.js",
+		"./*": "./*"
+	},
+	"repository": {
+		"type": "git",
+		"url": "https://github.com/webiny/webiny-js.git"
+	},
+	"description": "File storage local server plugin for the @webiny/api-file-manager.",
+	"author": "Webiny Ltd",
+	"license": "MIT",
+	"dependencies": {
+		"@fastify/multipart": "10.1.0",
+		"@webiny/api": "0.0.0-unstable.9f53ea597d",
+		"@webiny/api-core": "0.0.0-unstable.9f53ea597d",
+		"@webiny/api-file-manager": "0.0.0-unstable.9f53ea597d",
+		"@webiny/background-tasks": "0.0.0-unstable.9f53ea597d",
+		"@webiny/feature": "0.0.0-unstable.9f53ea597d",
+		"@webiny/handler": "0.0.0-unstable.9f53ea597d",
+		"@webiny/plugins": "0.0.0-unstable.9f53ea597d",
+		"@webiny/utils": "0.0.0-unstable.9f53ea597d",
+		"@webiny/validation": "0.0.0-unstable.9f53ea597d",
+		"exifreader": "4.41.3",
+		"fastify": "5.10.0",
+		"sharp": "0.35.3"
+	},
+	"devDependencies": {
+		"@webiny/build-tools": "0.0.0-unstable.9f53ea597d",
+		"rimraf": "6.1.3",
+		"typescript": "7.0.2",
+		"vitest": "4.1.10"
+	},
+	"publishConfig": {
+		"access": "public"
+	},
+	"gitHead": "8476da73b653c89cc1474d968baf55c1b0ae0e5f",
+	"webiny": {
+		"publishFrom": "dist"
+	}
+}

package/routes/uploadRoutes.d.ts

@@ -0,0 +1,4 @@
+import { RoutePlugin } from "@webiny/handler/plugins/RoutePlugin.js";
+import { ModifyFastifyPlugin } from "@webiny/handler/plugins/ModifyFastifyPlugin.js";
+export declare const modifyFastifyPlugin: ModifyFastifyPlugin;
+export declare const uploadRoutesPlugin: RoutePlugin<import("@webiny/handler/types").Context>;

package/routes/uploadRoutes.js

@@ -0,0 +1,130 @@
+import node_path from "node:path";
+import { Readable } from "node:stream";
+import { createHash } from "node:crypto";
+import { mkdir, writeFile } from "node:fs/promises";
+import { createWriteStream } from "node:fs";
+import { pipeline } from "node:stream/promises";
+import { RoutePlugin } from "@webiny/handler/plugins/RoutePlugin.js";
+import { ModifyFastifyPlugin } from "@webiny/handler/plugins/ModifyFastifyPlugin.js";
+import { verifyUploadToken } from "../utils/uploadToken.js";
+const getStoragePath = ()=>String(process.env.WEBINY_LOCAL_STORAGE_PATH);
+const getUploadSecret = ()=>String(process.env.WEBINY_UPLOAD_SECRET);
+const isPathContained = (filePath, storagePath)=>{
+    const resolved = node_path.resolve(filePath);
+    const root = node_path.resolve(storagePath);
+    if (!resolved.startsWith(root + node_path.sep) && resolved !== root) return false;
+    return true;
+};
+const modifyFastifyPlugin = new ModifyFastifyPlugin((app)=>{
+    app.register(import("@fastify/multipart"), {
+        limits: {
+            fileSize: 5368709120
+        }
+    });
+    app.addContentTypeParser("application/octet-stream", {
+        parseAs: "buffer"
+    }, (_request, body, done)=>{
+        done(null, body);
+    });
+});
+modifyFastifyPlugin.name = "fileManagerServer.modifyFastify";
+const uploadRoutesPlugin = new RoutePlugin(({ onPost, onPut })=>{
+    onPost("/webiny-file-upload", async (request, reply)=>{
+        const storagePath = getStoragePath();
+        const secret = getUploadSecret();
+        let key;
+        let token;
+        let fileChunks;
+        let fileSize = 0;
+        const parts = request.parts();
+        for await (const part of parts)if ("field" === part.type) {
+            if ("key" === part.fieldname) key = part.value;
+            else if ("token" === part.fieldname) token = part.value;
+        } else if ("file" === part.type) {
+            const chunks = [];
+            for await (const chunk of part.file){
+                chunks.push(chunk);
+                fileSize += chunk.length;
+            }
+            fileChunks = chunks;
+        }
+        if (!key || !token) return reply.code(400).send({
+            error: "Missing key or token."
+        });
+        if (!fileChunks) return reply.code(400).send({
+            error: "No file in request."
+        });
+        let payload;
+        try {
+            payload = verifyUploadToken(token, secret);
+        } catch (err) {
+            return reply.code(400).send({
+                error: err instanceof Error ? err.message : "Invalid token."
+            });
+        }
+        if (payload.key !== key) return reply.code(400).send({
+            error: "Token key mismatch."
+        });
+        if (payload.uploadMaxFileSize > 0 && fileSize > payload.uploadMaxFileSize) return reply.code(400).send({
+            error: "File exceeds maximum allowed size."
+        });
+        if (payload.uploadMinFileSize > 0 && fileSize < payload.uploadMinFileSize) return reply.code(400).send({
+            error: "File is below minimum allowed size."
+        });
+        const destPath = node_path.join(storagePath, key);
+        if (!isPathContained(destPath, storagePath)) return reply.code(400).send({
+            error: "Invalid path."
+        });
+        const destDir = node_path.dirname(destPath);
+        await mkdir(destDir, {
+            recursive: true
+        });
+        const writeStream = createWriteStream(destPath);
+        const readable = Readable.from(fileChunks);
+        await pipeline(readable, writeStream);
+        return reply.code(204).send();
+    });
+    onPut("/webiny-file-upload/parts", async (request, reply)=>{
+        const storagePath = getStoragePath();
+        const secret = getUploadSecret();
+        const query = request.query;
+        const uploadId = query["uploadId"];
+        const partNumberStr = query["partNumber"];
+        const token = query["token"];
+        if (!uploadId || !partNumberStr || !token) return reply.code(400).send({
+            error: "Missing uploadId, partNumber, or token."
+        });
+        const partNumber = parseInt(partNumberStr, 10);
+        if (isNaN(partNumber) || partNumber < 1) return reply.code(400).send({
+            error: "Invalid partNumber."
+        });
+        let payload;
+        try {
+            payload = verifyUploadToken(token, secret);
+        } catch (err) {
+            return reply.code(400).send({
+                error: err instanceof Error ? err.message : "Invalid token."
+            });
+        }
+        const expectedKey = `tenants/${payload.tenantId}/multipart/${uploadId}/part-${partNumber}`;
+        if (payload.key !== expectedKey) return reply.code(400).send({
+            error: "Token key mismatch."
+        });
+        const destPath = node_path.join(storagePath, expectedKey);
+        if (!isPathContained(destPath, storagePath)) return reply.code(400).send({
+            error: "Invalid path."
+        });
+        const destDir = node_path.dirname(destPath);
+        await mkdir(destDir, {
+            recursive: true
+        });
+        const body = request.body;
+        await writeFile(destPath, body);
+        const etag = createHash("md5").update(body).digest("hex");
+        return reply.code(200).header("ETag", etag).send();
+    });
+});
+uploadRoutesPlugin.name = "fileManagerServer.uploadRoutes";
+export { modifyFastifyPlugin, uploadRoutesPlugin };
+
+//# sourceMappingURL=uploadRoutes.js.map

package/routes/uploadRoutes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes/uploadRoutes.js","sources":["../../src/routes/uploadRoutes.ts"],"sourcesContent":["import path from \"node:path\";\nimport { Readable } from \"node:stream\";\nimport { createHash } from \"node:crypto\";\nimport { mkdir } from \"node:fs/promises\";\nimport { writeFile } from \"node:fs/promises\";\nimport { createWriteStream } from \"node:fs\";\nimport { pipeline } from \"node:stream/promises\";\nimport { RoutePlugin } from \"@webiny/handler/plugins/RoutePlugin.js\";\nimport { ModifyFastifyPlugin } from \"@webiny/handler/plugins/ModifyFastifyPlugin.js\";\nimport { verifyUploadToken } from \"~/utils/uploadToken.js\";\n\nconst getStoragePath = (): string => {\n    return String(process.env.WEBINY_LOCAL_STORAGE_PATH);\n};\n\nconst getUploadSecret = (): string => {\n    return String(process.env.WEBINY_UPLOAD_SECRET);\n};\n\nconst isPathContained = (filePath: string, storagePath: string): boolean => {\n    const resolved = path.resolve(filePath);\n    const root = path.resolve(storagePath);\n    if (!resolved.startsWith(root + path.sep) && resolved !== root) {\n        return false;\n    }\n    return true;\n};\n\nexport const modifyFastifyPlugin = new ModifyFastifyPlugin(app => {\n    app.register(import(\"@fastify/multipart\"), {\n        limits: {\n            fileSize: 5 * 1024 * 1024 * 1024 /* 5 GB */\n        }\n    });\n\n    app.addContentTypeParser(\n        \"application/octet-stream\",\n        { parseAs: \"buffer\" },\n        (_request, body, done) => {\n            done(null, body);\n        }\n    );\n});\n\nmodifyFastifyPlugin.name = \"fileManagerServer.modifyFastify\";\n\nexport const uploadRoutesPlugin = new RoutePlugin(({ onPost, onPut }) => {\n    /* POST /webiny-file-upload — simple single-file upload via multipart/form-data.\n       Form fields: key (storage path), token (HMAC upload token).\n       File field: the raw file bytes (any field name). */\n    onPost(\"/webiny-file-upload\", async (request, reply) => {\n        const storagePath = getStoragePath();\n        const secret = getUploadSecret();\n\n        let key: string | undefined;\n        let token: string | undefined;\n        let fileChunks: Buffer[] | undefined;\n        let fileSize = 0;\n\n        const parts = request.parts();\n\n        for await (const part of parts) {\n            if (part.type === \"field\") {\n                if (part.fieldname === \"key\") {\n                    key = part.value as string;\n                } else if (part.fieldname === \"token\") {\n                    token = part.value as string;\n                }\n            } else if (part.type === \"file\") {\n                /* Collect the file stream into memory so we can measure and hash it. */\n                const chunks: Buffer[] = [];\n                for await (const chunk of part.file) {\n                    chunks.push(chunk as Buffer);\n                    fileSize += (chunk as Buffer).length;\n                }\n                fileChunks = chunks;\n            }\n        }\n\n        if (!key || !token) {\n            return reply.code(400).send({ error: \"Missing key or token.\" });\n        }\n\n        if (!fileChunks) {\n            return reply.code(400).send({ error: \"No file in request.\" });\n        }\n\n        let payload;\n        try {\n            payload = verifyUploadToken(token, secret);\n        } catch (err) {\n            return reply\n                .code(400)\n                .send({ error: err instanceof Error ? err.message : \"Invalid token.\" });\n        }\n\n        if (payload.key !== key) {\n            return reply.code(400).send({ error: \"Token key mismatch.\" });\n        }\n\n        if (payload.uploadMaxFileSize > 0 && fileSize > payload.uploadMaxFileSize) {\n            return reply.code(400).send({ error: \"File exceeds maximum allowed size.\" });\n        }\n\n        if (payload.uploadMinFileSize > 0 && fileSize < payload.uploadMinFileSize) {\n            return reply.code(400).send({ error: \"File is below minimum allowed size.\" });\n        }\n\n        const destPath = path.join(storagePath, key);\n\n        if (!isPathContained(destPath, storagePath)) {\n            return reply.code(400).send({ error: \"Invalid path.\" });\n        }\n\n        const destDir = path.dirname(destPath);\n        await mkdir(destDir, { recursive: true });\n\n        const writeStream = createWriteStream(destPath);\n        const readable = Readable.from(fileChunks);\n\n        await pipeline(readable, writeStream);\n\n        return reply.code(204).send();\n    });\n\n    /* PUT /webiny-file-upload/parts — multipart chunk upload via raw binary body.\n       Query params: uploadId, partNumber, token.\n       Body: raw binary chunk (application/octet-stream). */\n    onPut(\"/webiny-file-upload/parts\", async (request, reply) => {\n        const storagePath = getStoragePath();\n        const secret = getUploadSecret();\n\n        const query = request.query as Record<string, string | undefined>;\n        const uploadId = query[\"uploadId\"];\n        const partNumberStr = query[\"partNumber\"];\n        const token = query[\"token\"];\n\n        if (!uploadId || !partNumberStr || !token) {\n            return reply.code(400).send({ error: \"Missing uploadId, partNumber, or token.\" });\n        }\n\n        const partNumber = parseInt(partNumberStr, 10);\n        if (isNaN(partNumber) || partNumber < 1) {\n            return reply.code(400).send({ error: \"Invalid partNumber.\" });\n        }\n\n        let payload;\n        try {\n            payload = verifyUploadToken(token, secret);\n        } catch (err) {\n            return reply\n                .code(400)\n                .send({ error: err instanceof Error ? err.message : \"Invalid token.\" });\n        }\n\n        const expectedKey = `tenants/${payload.tenantId}/multipart/${uploadId}/part-${partNumber}`;\n\n        if (payload.key !== expectedKey) {\n            return reply.code(400).send({ error: \"Token key mismatch.\" });\n        }\n\n        const destPath = path.join(storagePath, expectedKey);\n\n        if (!isPathContained(destPath, storagePath)) {\n            return reply.code(400).send({ error: \"Invalid path.\" });\n        }\n\n        const destDir = path.dirname(destPath);\n        await mkdir(destDir, { recursive: true });\n\n        const body = request.body as Buffer;\n\n        await writeFile(destPath, body);\n\n        const etag = createHash(\"md5\").update(body).digest(\"hex\");\n\n        return reply.code(200).header(\"ETag\", etag).send();\n    });\n});\n\nuploadRoutesPlugin.name = \"fileManagerServer.uploadRoutes\";\n"],"names":["getStoragePath","String","process","getUploadSecret","isPathContained","filePath","storagePath","resolved","path","root","modifyFastifyPlugin","ModifyFastifyPlugin","app","_request","body","done","uploadRoutesPlugin","RoutePlugin","onPost","onPut","request","reply","secret","key","token","fileChunks","fileSize","parts","part","chunks","chunk","payload","verifyUploadToken","err","Error","destPath","destDir","mkdir","writeStream","createWriteStream","readable","Readable","pipeline","query","uploadId","partNumberStr","partNumber","parseInt","isNaN","expectedKey","writeFile","etag","createHash"],"mappings":";;;;;;;;;AAWA,MAAMA,iBAAiB,IACZC,OAAOC,QAAQ,GAAG,CAAC,yBAAyB;AAGvD,MAAMC,kBAAkB,IACbF,OAAOC,QAAQ,GAAG,CAAC,oBAAoB;AAGlD,MAAME,kBAAkB,CAACC,UAAkBC;IACvC,MAAMC,WAAWC,UAAAA,OAAY,CAACH;IAC9B,MAAMI,OAAOD,UAAAA,OAAY,CAACF;IAC1B,IAAI,CAACC,SAAS,UAAU,CAACE,OAAOD,UAAAA,GAAQ,KAAKD,aAAaE,MACtD,OAAO;IAEX,OAAO;AACX;AAEO,MAAMC,sBAAsB,IAAIC,oBAAoBC,CAAAA;IACvDA,IAAI,QAAQ,CAAC,MAAM,CAAC,uBAAuB;QACvC,QAAQ;YACJ,UAAU;QACd;IACJ;IAEAA,IAAI,oBAAoB,CACpB,4BACA;QAAE,SAAS;IAAS,GACpB,CAACC,UAAUC,MAAMC;QACbA,KAAK,MAAMD;IACf;AAER;AAEAJ,oBAAoB,IAAI,GAAG;AAEpB,MAAMM,qBAAqB,IAAIC,YAAY,CAAC,EAAEC,MAAM,EAAEC,KAAK,EAAE;IAIhED,OAAO,uBAAuB,OAAOE,SAASC;QAC1C,MAAMf,cAAcN;QACpB,MAAMsB,SAASnB;QAEf,IAAIoB;QACJ,IAAIC;QACJ,IAAIC;QACJ,IAAIC,WAAW;QAEf,MAAMC,QAAQP,QAAQ,KAAK;QAE3B,WAAW,MAAMQ,QAAQD,MACrB,IAAIC,AAAc,YAAdA,KAAK,IAAI,EACT;YAAA,IAAIA,AAAmB,UAAnBA,KAAK,SAAS,EACdL,MAAMK,KAAK,KAAK;iBACb,IAAIA,AAAmB,YAAnBA,KAAK,SAAS,EACrBJ,QAAQI,KAAK,KAAK;QACtB,OACG,IAAIA,AAAc,WAAdA,KAAK,IAAI,EAAa;YAE7B,MAAMC,SAAmB,EAAE;YAC3B,WAAW,MAAMC,SAASF,KAAK,IAAI,CAAE;gBACjCC,OAAO,IAAI,CAACC;gBACZJ,YAAaI,MAAiB,MAAM;YACxC;YACAL,aAAaI;QACjB;QAGJ,IAAI,CAACN,OAAO,CAACC,OACT,OAAOH,MAAM,IAAI,CAAC,KAAK,IAAI,CAAC;YAAE,OAAO;QAAwB;QAGjE,IAAI,CAACI,YACD,OAAOJ,MAAM,IAAI,CAAC,KAAK,IAAI,CAAC;YAAE,OAAO;QAAsB;QAG/D,IAAIU;QACJ,IAAI;YACAA,UAAUC,kBAAkBR,OAAOF;QACvC,EAAE,OAAOW,KAAK;YACV,OAAOZ,MACF,IAAI,CAAC,KACL,IAAI,CAAC;gBAAE,OAAOY,eAAeC,QAAQD,IAAI,OAAO,GAAG;YAAiB;QAC7E;QAEA,IAAIF,QAAQ,GAAG,KAAKR,KAChB,OAAOF,MAAM,IAAI,CAAC,KAAK,IAAI,CAAC;YAAE,OAAO;QAAsB;QAG/D,IAAIU,QAAQ,iBAAiB,GAAG,KAAKL,WAAWK,QAAQ,iBAAiB,EACrE,OAAOV,MAAM,IAAI,CAAC,KAAK,IAAI,CAAC;YAAE,OAAO;QAAqC;QAG9E,IAAIU,QAAQ,iBAAiB,GAAG,KAAKL,WAAWK,QAAQ,iBAAiB,EACrE,OAAOV,MAAM,IAAI,CAAC,KAAK,IAAI,CAAC;YAAE,OAAO;QAAsC;QAG/E,MAAMc,WAAW3B,UAAAA,IAAS,CAACF,aAAaiB;QAExC,IAAI,CAACnB,gBAAgB+B,UAAU7B,cAC3B,OAAOe,MAAM,IAAI,CAAC,KAAK,IAAI,CAAC;YAAE,OAAO;QAAgB;QAGzD,MAAMe,UAAU5B,UAAAA,OAAY,CAAC2B;QAC7B,MAAME,MAAMD,SAAS;YAAE,WAAW;QAAK;QAEvC,MAAME,cAAcC,kBAAkBJ;QACtC,MAAMK,WAAWC,SAAS,IAAI,CAAChB;QAE/B,MAAMiB,SAASF,UAAUF;QAEzB,OAAOjB,MAAM,IAAI,CAAC,KAAK,IAAI;IAC/B;IAKAF,MAAM,6BAA6B,OAAOC,SAASC;QAC/C,MAAMf,cAAcN;QACpB,MAAMsB,SAASnB;QAEf,MAAMwC,QAAQvB,QAAQ,KAAK;QAC3B,MAAMwB,WAAWD,KAAK,CAAC,WAAW;QAClC,MAAME,gBAAgBF,KAAK,CAAC,aAAa;QACzC,MAAMnB,QAAQmB,KAAK,CAAC,QAAQ;QAE5B,IAAI,CAACC,YAAY,CAACC,iBAAiB,CAACrB,OAChC,OAAOH,MAAM,IAAI,CAAC,KAAK,IAAI,CAAC;YAAE,OAAO;QAA0C;QAGnF,MAAMyB,aAAaC,SAASF,eAAe;QAC3C,IAAIG,MAAMF,eAAeA,aAAa,GAClC,OAAOzB,MAAM,IAAI,CAAC,KAAK,IAAI,CAAC;YAAE,OAAO;QAAsB;QAG/D,IAAIU;QACJ,IAAI;YACAA,UAAUC,kBAAkBR,OAAOF;QACvC,EAAE,OAAOW,KAAK;YACV,OAAOZ,MACF,IAAI,CAAC,KACL,IAAI,CAAC;gBAAE,OAAOY,eAAeC,QAAQD,IAAI,OAAO,GAAG;YAAiB;QAC7E;QAEA,MAAMgB,cAAc,CAAC,QAAQ,EAAElB,QAAQ,QAAQ,CAAC,WAAW,EAAEa,SAAS,MAAM,EAAEE,YAAY;QAE1F,IAAIf,QAAQ,GAAG,KAAKkB,aAChB,OAAO5B,MAAM,IAAI,CAAC,KAAK,IAAI,CAAC;YAAE,OAAO;QAAsB;QAG/D,MAAMc,WAAW3B,UAAAA,IAAS,CAACF,aAAa2C;QAExC,IAAI,CAAC7C,gBAAgB+B,UAAU7B,cAC3B,OAAOe,MAAM,IAAI,CAAC,KAAK,IAAI,CAAC;YAAE,OAAO;QAAgB;QAGzD,MAAMe,UAAU5B,UAAAA,OAAY,CAAC2B;QAC7B,MAAME,MAAMD,SAAS;YAAE,WAAW;QAAK;QAEvC,MAAMtB,OAAOM,QAAQ,IAAI;QAEzB,MAAM8B,UAAUf,UAAUrB;QAE1B,MAAMqC,OAAOC,WAAW,OAAO,MAAM,CAACtC,MAAM,MAAM,CAAC;QAEnD,OAAOO,MAAM,IAAI,CAAC,KAAK,MAAM,CAAC,QAAQ8B,MAAM,IAAI;IACpD;AACJ;AAEAnC,mBAAmB,IAAI,GAAG"}

package/types.d.ts

@@ -0,0 +1,10 @@
+import "@webiny/background-tasks/api/features/TaskController/augmentation.js";
+export type { PresignedPostPayloadData } from "@webiny/api-file-manager/features/upload/index.js";
+export type { FileData } from "@webiny/api-file-manager/features/upload/index.js";
+export interface UploadTokenPayload {
+    key: string;
+    tenantId: string;
+    expiresAt: number;
+    uploadMinFileSize: number;
+    uploadMaxFileSize: number;
+}

package/types.js

@@ -0,0 +1 @@
+import "@webiny/background-tasks/api/features/TaskController/augmentation.js";

package/utils/resolveServerUrl.d.ts

@@ -0,0 +1,2 @@
+import type { FastifyRequest } from "fastify";
+export declare const resolveServerUrl: (request: FastifyRequest) => Promise<string>;

package/utils/resolveServerUrl.js

@@ -0,0 +1,10 @@
+import { ServiceDiscovery } from "@webiny/api-core/features/serviceDiscovery/ServiceDiscovery.js";
+const resolveServerUrl = async (request)=>{
+    const manifest = await ServiceDiscovery.load();
+    const domain = manifest?.api?.cloudfront?.domain;
+    if (domain) return domain;
+    return `${request.protocol}://${request.hostname}`;
+};
+export { resolveServerUrl };
+
+//# sourceMappingURL=resolveServerUrl.js.map

package/utils/resolveServerUrl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils/resolveServerUrl.js","sources":["../../src/utils/resolveServerUrl.ts"],"sourcesContent":["import { ServiceDiscovery } from \"@webiny/api-core/features/serviceDiscovery/ServiceDiscovery.js\";\nimport type { FastifyRequest } from \"fastify\";\n\nexport const resolveServerUrl = async (request: FastifyRequest): Promise<string> => {\n    const manifest = await ServiceDiscovery.load();\n    const domain = manifest?.api?.cloudfront?.domain;\n    if (domain) {\n        return domain as string;\n    }\n\n    return `${request.protocol}://${request.hostname}`;\n};\n"],"names":["resolveServerUrl","request","manifest","ServiceDiscovery","domain"],"mappings":";AAGO,MAAMA,mBAAmB,OAAOC;IACnC,MAAMC,WAAW,MAAMC,iBAAiB,IAAI;IAC5C,MAAMC,SAASF,UAAU,KAAK,YAAY;IAC1C,IAAIE,QACA,OAAOA;IAGX,OAAO,GAAGH,QAAQ,QAAQ,CAAC,GAAG,EAAEA,QAAQ,QAAQ,EAAE;AACtD"}

package/utils/uploadToken.d.ts

@@ -0,0 +1,3 @@
+import type { UploadTokenPayload } from "../types.js";
+export declare const createUploadToken: (payload: UploadTokenPayload, secret: string) => string;
+export declare const verifyUploadToken: (token: string, secret: string) => UploadTokenPayload;