@webiny/api-file-manager-standalone 6.6.0-alpha.4

package/features/GetUploadPayload/GetUploadPayloadUseCase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/GetUploadPayload/GetUploadPayloadUseCase.js","sources":["../../../src/features/GetUploadPayload/GetUploadPayloadUseCase.ts"],"sourcesContent":["import { validation } from \"@webiny/validation\";\nimport { TenantContext } from \"@webiny/api-core/features/tenancy/TenantContext/index.js\";\nimport { GetUploadPayloadUseCase as GetUploadPayloadUseCaseAbstraction } from \"@webiny/api-file-manager/features/upload/GetUploadPayload/index.js\";\nimport type { FileData } from \"@webiny/api-file-manager/features/upload/types.js\";\nimport type { UploadPayloadResponse } from \"@webiny/api-file-manager/features/upload/types.js\";\nimport type { FileManagerSettings } from \"@webiny/api-file-manager/domain/settings/types.js\";\nimport { createUploadToken } from \"~/utils/uploadToken.js\";\nimport { FileManagerStandaloneConfig } from \"~/features/FileManagerStandaloneConfig/abstractions.js\";\n\nconst UPLOAD_MAX_FILE_SIZE_DEFAULT = 1099511627776; /* 1TB */\n\nconst sanitizeFileSizeValue = (value: number, defaultValue: number): number => {\n    try {\n        validation.validateSync(value, \"required,numeric,gte:0\");\n        return value;\n    } catch {\n        return defaultValue;\n    }\n};\n\nclass GetUploadPayloadUseCaseImpl implements GetUploadPayloadUseCaseAbstraction.Interface {\n    public constructor(\n        private readonly tenantContext: TenantContext.Interface,\n        private readonly config: FileManagerStandaloneConfig.Interface\n    ) {}\n\n    public async execute(\n        file: FileData,\n        settings: FileManagerSettings\n    ): Promise<UploadPayloadResponse> {\n        const uploadMinFileSize = sanitizeFileSizeValue(settings.uploadMinFileSize, 0);\n        const uploadMaxFileSize = sanitizeFileSizeValue(\n            settings.uploadMaxFileSize,\n            UPLOAD_MAX_FILE_SIZE_DEFAULT\n        );\n\n        const tenant = this.tenantContext.getTenant();\n        const storageKey = `tenants/${tenant.id}/files/${file.key}`;\n        const secret = this.config.uploadSecret;\n        const expiresAt = Date.now() + 60_000;\n\n        const token = createUploadToken(\n            {\n                key: storageKey,\n                tenantId: tenant.id,\n                expiresAt,\n                uploadMinFileSize,\n                uploadMaxFileSize\n            },\n            secret\n        );\n\n        const serverUrl = this.config.apiUrl;\n\n        const data = {\n            url: `${serverUrl}/webiny-file-upload`,\n            fields: {\n                key: storageKey,\n                token\n            }\n        };\n\n        return {\n            data: data as unknown as Record<string, unknown>,\n            file\n        };\n    }\n}\n\nexport const GetUploadPayloadUseCase = GetUploadPayloadUseCaseAbstraction.createImplementation({\n    implementation: GetUploadPayloadUseCaseImpl,\n    dependencies: [TenantContext, FileManagerStandaloneConfig]\n});\n"],"names":["UPLOAD_MAX_FILE_SIZE_DEFAULT","sanitizeFileSizeValue","value","defaultValue","validation","GetUploadPayloadUseCaseImpl","tenantContext","config","file","settings","uploadMinFileSize","uploadMaxFileSize","tenant","storageKey","secret","expiresAt","Date","token","createUploadToken","serverUrl","data","GetUploadPayloadUseCase","GetUploadPayloadUseCaseAbstraction","TenantContext","FileManagerStandaloneConfig"],"mappings":";;;;;AASA,MAAMA,+BAA+B;AAErC,MAAMC,wBAAwB,CAACC,OAAeC;IAC1C,IAAI;QACAC,WAAW,YAAY,CAACF,OAAO;QAC/B,OAAOA;IACX,EAAE,OAAM;QACJ,OAAOC;IACX;AACJ;AAEA,MAAME;IACF,YACqBC,aAAsC,EACtCC,MAA6C,CAChE;aAFmBD,aAAa,GAAbA;aACAC,MAAM,GAANA;IAClB;IAEH,MAAa,QACTC,IAAc,EACdC,QAA6B,EACC;QAC9B,MAAMC,oBAAoBT,sBAAsBQ,SAAS,iBAAiB,EAAE;QAC5E,MAAME,oBAAoBV,sBACtBQ,SAAS,iBAAiB,EAC1BT;QAGJ,MAAMY,SAAS,IAAI,CAAC,aAAa,CAAC,SAAS;QAC3C,MAAMC,aAAa,CAAC,QAAQ,EAAED,OAAO,EAAE,CAAC,OAAO,EAAEJ,KAAK,GAAG,EAAE;QAC3D,MAAMM,SAAS,IAAI,CAAC,MAAM,CAAC,YAAY;QACvC,MAAMC,YAAYC,KAAK,GAAG,KAAK;QAE/B,MAAMC,QAAQC,kBACV;YACI,KAAKL;YACL,UAAUD,OAAO,EAAE;YACnBG;YACAL;YACAC;QACJ,GACAG;QAGJ,MAAMK,YAAY,IAAI,CAAC,MAAM,CAAC,MAAM;QAEpC,MAAMC,OAAO;YACT,KAAK,GAAGD,UAAU,mBAAmB,CAAC;YACtC,QAAQ;gBACJ,KAAKN;gBACLI;YACJ;QACJ;QAEA,OAAO;YACH,MAAMG;YACNZ;QACJ;IACJ;AACJ;AAEO,MAAMa,kDAA0BC,wBAAAA,oBAAuD,CAAC;IAC3F,gBAAgBjB;IAChB,cAAc;QAACkB;QAAeC;KAA4B;AAC9D"}

package/features/GetUploadPayload/feature.d.ts

@@ -0,0 +1,4 @@
+export declare const GetUploadPayloadFeature: {
+    name: string;
+    register(container: import("@webiny/di").Container): void;
+};

package/features/GetUploadPayload/feature.js

@@ -0,0 +1,11 @@
+import { createFeature } from "@webiny/feature/api";
+import { GetUploadPayloadUseCase } from "./GetUploadPayloadUseCase.js";
+const GetUploadPayloadFeature = createFeature({
+    name: "FileManagerServer/GetUploadPayload",
+    register (container) {
+        container.register(GetUploadPayloadUseCase);
+    }
+});
+export { GetUploadPayloadFeature };
+
+//# sourceMappingURL=feature.js.map

package/features/GetUploadPayload/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/GetUploadPayload/feature.js","sources":["../../../src/features/GetUploadPayload/feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { GetUploadPayloadUseCase } from \"./GetUploadPayloadUseCase.js\";\n\nexport const GetUploadPayloadFeature = createFeature({\n    name: \"FileManagerServer/GetUploadPayload\",\n    register(container) {\n        container.register(GetUploadPayloadUseCase);\n    }\n});\n"],"names":["GetUploadPayloadFeature","createFeature","container","GetUploadPayloadUseCase"],"mappings":";;AAGO,MAAMA,0BAA0BC,cAAc;IACjD,MAAM;IACN,UAASC,SAAS;QACdA,UAAU,QAAQ,CAACC;IACvB;AACJ"}

package/graphql/StandaloneGraphQLSchema.d.ts

@@ -0,0 +1,15 @@
+import { CoreGraphQLSchemaFactory } from "@webiny/api-graphql/graphql/abstractions.js";
+import { GraphQLSchemaBuilder } from "@webiny/api-graphql/features/GraphQLSchemaBuilder/abstractions.js";
+/**
+ * Upload GraphQL for the standalone hosting type. Mirrors the SDL that `api-file-manager-s3`'s
+ * `S3GraphQLSchema` contributes (same query/mutation names + `PreSignedPostPayloadInput`), so the
+ * transport-agnostic SDK works unchanged. Only the resolvers differ from S3 — they resolve the server
+ * upload use cases (local disk + the `/webiny-file-upload` HTTP routes) instead of an S3 client.
+ */
+declare class StandaloneGraphQLSchemaImpl implements CoreGraphQLSchemaFactory.Interface {
+    execute(builder: GraphQLSchemaBuilder.Interface): CoreGraphQLSchemaFactory.Return;
+}
+export declare const StandaloneGraphQLSchema: typeof StandaloneGraphQLSchemaImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/api-graphql/graphql/abstractions.core").ICoreGraphQLSchemaFactory>;
+};
+export {};

package/graphql/StandaloneGraphQLSchema.js

@@ -0,0 +1,221 @@
+import p_map from "p-map";
+import { CoreGraphQLSchemaFactory } from "@webiny/api-graphql/graphql/abstractions.js";
+import { IdentityContext } from "@webiny/api-core/features/security/IdentityContext/index.js";
+import { ErrorResponse, Response } from "@webiny/api-graphql/responses.js";
+import { GetSettingsUseCase } from "@webiny/api-file-manager/features/settings/GetSettings/abstractions.js";
+import { GetUploadPayloadUseCase } from "@webiny/api-file-manager/features/upload/GetUploadPayload/index.js";
+import { CreateMultiPartUploadUseCase } from "@webiny/api-file-manager/features/upload/CreateMultiPartUpload/index.js";
+import { CompleteMultiPartUploadUseCase } from "@webiny/api-file-manager/features/upload/CompleteMultiPartUpload/index.js";
+import { FileNormalizer, checkPermissions } from "@webiny/api-file-manager/features/upload/index.js";
+const createNormalizer = ()=>new FileNormalizer();
+const TYPE_DEFS = `
+    type UploadFileResponseDataFile {
+        id: ID!
+        name: String!
+        type: String!
+        size: Long!
+        key: String!
+    }
+
+    input PreSignedPostPayloadInput {
+        id: ID
+        name: String!
+        type: String!
+        size: Long!
+        key: String
+        keyPrefix: String
+    }
+
+    type GetPreSignedPostPayloadResponseDataFile {
+        id: ID!
+        name: String!
+        type: String!
+        size: Long!
+        key: String!
+    }
+
+    type GetPreSignedPostPayloadResponseData {
+        # Contains data that is necessary for initiating a file upload.
+        data: JSON!
+        file: UploadFileResponseDataFile!
+    }
+
+    type GetPreSignedPostPayloadResponse {
+        error: FmError
+        data: GetPreSignedPostPayloadResponseData
+    }
+
+    type MultiPartUploadFilePart {
+        partNumber: Int!
+        url: String!
+    }
+
+    type CreateMultiPartUploadResponseData {
+        file: GetPreSignedPostPayloadResponseDataFile!
+        uploadId: String!
+        parts: [MultiPartUploadFilePart!]!
+    }
+
+    type CompleteMultiPartUploadResponse {
+        data: Boolean
+        error: FmError
+    }
+
+    type GetPreSignedPostPayloadsResponse {
+        error: FmError
+        data: [GetPreSignedPostPayloadResponseData!]!
+    }
+
+    extend type FmQuery {
+        getPreSignedPostPayload(data: PreSignedPostPayloadInput!): GetPreSignedPostPayloadResponse
+        getPreSignedPostPayloads(
+            data: [PreSignedPostPayloadInput]!
+        ): GetPreSignedPostPayloadsResponse
+    }
+
+    type CreateMultiPartUploadResponse {
+        data: CreateMultiPartUploadResponseData
+        error: FmError
+    }
+
+    input MultiPartUploadFilePartInput {
+        partNumber: Int!
+        etag: String!
+    }
+
+    extend type FmMutation {
+        createMultiPartUpload(
+            data: PreSignedPostPayloadInput!
+            numberOfParts: Number!
+        ): CreateMultiPartUploadResponse
+
+        completeMultiPartUpload(
+            fileKey: String!
+            uploadId: String!
+        ): CompleteMultiPartUploadResponse
+    }
+`;
+class StandaloneGraphQLSchemaImpl {
+    async execute(builder) {
+        builder.addTypeDefs(TYPE_DEFS);
+        builder.addResolver({
+            path: "FmQuery.getPreSignedPostPayload",
+            dependencies: [
+                IdentityContext,
+                GetSettingsUseCase,
+                GetUploadPayloadUseCase
+            ],
+            resolver (identityContext, getSettings, getUploadPayload) {
+                return async ({ args })=>{
+                    try {
+                        await checkPermissions(identityContext, {
+                            rwd: "w"
+                        });
+                        const settingsResult = await getSettings.execute();
+                        const settings = settingsResult.value;
+                        const normalizer = createNormalizer();
+                        const payload = await getUploadPayload.execute(await normalizer.normalizeFile(args.data), settings);
+                        return new Response(payload);
+                    } catch (e) {
+                        return new ErrorResponse({
+                            message: e.message,
+                            code: e.code,
+                            data: e.data
+                        });
+                    }
+                };
+            }
+        });
+        builder.addResolver({
+            path: "FmQuery.getPreSignedPostPayloads",
+            dependencies: [
+                IdentityContext,
+                GetSettingsUseCase,
+                GetUploadPayloadUseCase
+            ],
+            resolver (identityContext, getSettings, getUploadPayload) {
+                return async ({ args })=>{
+                    try {
+                        await checkPermissions(identityContext, {
+                            rwd: "w"
+                        });
+                        const settingsResult = await getSettings.execute();
+                        const settings = settingsResult.value;
+                        const normalizer = createNormalizer();
+                        const payloads = await p_map(args.data, async (data)=>getUploadPayload.execute(await normalizer.normalizeFile(data), settings));
+                        return new Response(payloads);
+                    } catch (e) {
+                        return new ErrorResponse({
+                            message: e.message,
+                            code: e.code,
+                            data: e.data
+                        });
+                    }
+                };
+            }
+        });
+        builder.addResolver({
+            path: "FmMutation.createMultiPartUpload",
+            dependencies: [
+                IdentityContext,
+                CreateMultiPartUploadUseCase
+            ],
+            resolver (identityContext, createMultiPartUpload) {
+                return async ({ args })=>{
+                    try {
+                        await checkPermissions(identityContext, {
+                            rwd: "w"
+                        });
+                        const normalizer = createNormalizer();
+                        const result = await createMultiPartUpload.execute({
+                            file: await normalizer.normalizeFile(args.data),
+                            numberOfParts: args.numberOfParts
+                        });
+                        return new Response(result);
+                    } catch (e) {
+                        return new ErrorResponse({
+                            message: e.message,
+                            code: e.code,
+                            data: e.data
+                        });
+                    }
+                };
+            }
+        });
+        builder.addResolver({
+            path: "FmMutation.completeMultiPartUpload",
+            dependencies: [
+                IdentityContext,
+                CompleteMultiPartUploadUseCase
+            ],
+            resolver (identityContext, completeMultiPartUpload) {
+                return async ({ args })=>{
+                    try {
+                        await checkPermissions(identityContext, {
+                            rwd: "w"
+                        });
+                        await completeMultiPartUpload.execute({
+                            fileKey: args.fileKey,
+                            uploadId: args.uploadId
+                        });
+                        return new Response(true);
+                    } catch (e) {
+                        return new ErrorResponse({
+                            message: e.message,
+                            code: e.code,
+                            data: e.data
+                        });
+                    }
+                };
+            }
+        });
+        return builder;
+    }
+}
+const StandaloneGraphQLSchema = CoreGraphQLSchemaFactory.createImplementation({
+    implementation: StandaloneGraphQLSchemaImpl,
+    dependencies: []
+});
+export { StandaloneGraphQLSchema };
+
+//# sourceMappingURL=StandaloneGraphQLSchema.js.map

package/graphql/StandaloneGraphQLSchema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graphql/StandaloneGraphQLSchema.js","sources":["../../src/graphql/StandaloneGraphQLSchema.ts"],"sourcesContent":["import pMap from \"p-map\";\nimport { CoreGraphQLSchemaFactory } from \"@webiny/api-graphql/graphql/abstractions.js\";\nimport { GraphQLSchemaBuilder } from \"@webiny/api-graphql/features/GraphQLSchemaBuilder/abstractions.js\";\nimport { IdentityContext } from \"@webiny/api-core/features/security/IdentityContext/index.js\";\nimport { ErrorResponse, Response } from \"@webiny/api-graphql/responses.js\";\nimport { GetSettingsUseCase } from \"@webiny/api-file-manager/features/settings/GetSettings/abstractions.js\";\nimport { GetUploadPayloadUseCase } from \"@webiny/api-file-manager/features/upload/GetUploadPayload/index.js\";\nimport { CreateMultiPartUploadUseCase } from \"@webiny/api-file-manager/features/upload/CreateMultiPartUpload/index.js\";\nimport { CompleteMultiPartUploadUseCase } from \"@webiny/api-file-manager/features/upload/CompleteMultiPartUpload/index.js\";\nimport {\n    checkPermissions,\n    FileNormalizer\n} from \"@webiny/api-file-manager/features/upload/index.js\";\nimport type { FileData } from \"@webiny/api-file-manager/features/upload/types.js\";\n\n// Build the normalizer WITHOUT the gql context: the domain's `createFileNormalizerFromContext` reads\n// `context.plugins.byType(...)` (the legacy plugins registry), which the DI-native server gql context\n// does not populate — calling it throws \"Cannot read properties of undefined (reading 'byType')\". The\n// modifier is optional; FileNormalizer still generates the id/type/key. The server has no legacy\n// FileUploadModifierPlugins, so an empty (no-modifier) normalizer is the correct behaviour here.\nconst createNormalizer = () => new FileNormalizer();\n\nconst TYPE_DEFS = /* GraphQL */ `\n    type UploadFileResponseDataFile {\n        id: ID!\n        name: String!\n        type: String!\n        size: Long!\n        key: String!\n    }\n\n    input PreSignedPostPayloadInput {\n        id: ID\n        name: String!\n        type: String!\n        size: Long!\n        key: String\n        keyPrefix: String\n    }\n\n    type GetPreSignedPostPayloadResponseDataFile {\n        id: ID!\n        name: String!\n        type: String!\n        size: Long!\n        key: String!\n    }\n\n    type GetPreSignedPostPayloadResponseData {\n        # Contains data that is necessary for initiating a file upload.\n        data: JSON!\n        file: UploadFileResponseDataFile!\n    }\n\n    type GetPreSignedPostPayloadResponse {\n        error: FmError\n        data: GetPreSignedPostPayloadResponseData\n    }\n\n    type MultiPartUploadFilePart {\n        partNumber: Int!\n        url: String!\n    }\n\n    type CreateMultiPartUploadResponseData {\n        file: GetPreSignedPostPayloadResponseDataFile!\n        uploadId: String!\n        parts: [MultiPartUploadFilePart!]!\n    }\n\n    type CompleteMultiPartUploadResponse {\n        data: Boolean\n        error: FmError\n    }\n\n    type GetPreSignedPostPayloadsResponse {\n        error: FmError\n        data: [GetPreSignedPostPayloadResponseData!]!\n    }\n\n    extend type FmQuery {\n        getPreSignedPostPayload(data: PreSignedPostPayloadInput!): GetPreSignedPostPayloadResponse\n        getPreSignedPostPayloads(\n            data: [PreSignedPostPayloadInput]!\n        ): GetPreSignedPostPayloadsResponse\n    }\n\n    type CreateMultiPartUploadResponse {\n        data: CreateMultiPartUploadResponseData\n        error: FmError\n    }\n\n    input MultiPartUploadFilePartInput {\n        partNumber: Int!\n        etag: String!\n    }\n\n    extend type FmMutation {\n        createMultiPartUpload(\n            data: PreSignedPostPayloadInput!\n            numberOfParts: Number!\n        ): CreateMultiPartUploadResponse\n\n        completeMultiPartUpload(\n            fileKey: String!\n            uploadId: String!\n        ): CompleteMultiPartUploadResponse\n    }\n`;\n\n/**\n * Upload GraphQL for the standalone hosting type. Mirrors the SDL that `api-file-manager-s3`'s\n * `S3GraphQLSchema` contributes (same query/mutation names + `PreSignedPostPayloadInput`), so the\n * transport-agnostic SDK works unchanged. Only the resolvers differ from S3 — they resolve the server\n * upload use cases (local disk + the `/webiny-file-upload` HTTP routes) instead of an S3 client.\n */\nclass StandaloneGraphQLSchemaImpl implements CoreGraphQLSchemaFactory.Interface {\n    public async execute(builder: GraphQLSchemaBuilder.Interface): CoreGraphQLSchemaFactory.Return {\n        builder.addTypeDefs(TYPE_DEFS);\n\n        builder.addResolver<{ data: any }>({\n            path: \"FmQuery.getPreSignedPostPayload\",\n            dependencies: [IdentityContext, GetSettingsUseCase, GetUploadPayloadUseCase],\n            resolver(\n                identityContext: IdentityContext.Interface,\n                getSettings: GetSettingsUseCase.Interface,\n                getUploadPayload: GetUploadPayloadUseCase.Interface\n            ) {\n                return async ({ args }) => {\n                    try {\n                        await checkPermissions(identityContext, { rwd: \"w\" });\n\n                        const settingsResult = await getSettings.execute();\n                        const settings = settingsResult.value;\n\n                        const normalizer = createNormalizer();\n                        const payload = await getUploadPayload.execute(\n                            (await normalizer.normalizeFile(args.data)) as FileData,\n                            settings\n                        );\n\n                        return new Response(payload);\n                    } catch (e) {\n                        return new ErrorResponse({\n                            message: e.message,\n                            code: e.code,\n                            data: e.data\n                        });\n                    }\n                };\n            }\n        });\n\n        builder.addResolver<{ data: any[] }>({\n            path: \"FmQuery.getPreSignedPostPayloads\",\n            dependencies: [IdentityContext, GetSettingsUseCase, GetUploadPayloadUseCase],\n            resolver(\n                identityContext: IdentityContext.Interface,\n                getSettings: GetSettingsUseCase.Interface,\n                getUploadPayload: GetUploadPayloadUseCase.Interface\n            ) {\n                return async ({ args }) => {\n                    try {\n                        await checkPermissions(identityContext, { rwd: \"w\" });\n\n                        const settingsResult = await getSettings.execute();\n                        const settings = settingsResult.value;\n\n                        const normalizer = createNormalizer();\n                        const payloads = await pMap(args.data, async (data: any) => {\n                            return getUploadPayload.execute(\n                                (await normalizer.normalizeFile(data)) as FileData,\n                                settings\n                            );\n                        });\n\n                        return new Response(payloads);\n                    } catch (e) {\n                        return new ErrorResponse({\n                            message: e.message,\n                            code: e.code,\n                            data: e.data\n                        });\n                    }\n                };\n            }\n        });\n\n        builder.addResolver<{ data: any; numberOfParts: number }>({\n            path: \"FmMutation.createMultiPartUpload\",\n            dependencies: [IdentityContext, CreateMultiPartUploadUseCase],\n            resolver(\n                identityContext: IdentityContext.Interface,\n                createMultiPartUpload: CreateMultiPartUploadUseCase.Interface\n            ) {\n                return async ({ args }) => {\n                    try {\n                        await checkPermissions(identityContext, { rwd: \"w\" });\n\n                        const normalizer = createNormalizer();\n                        const result = await createMultiPartUpload.execute({\n                            file: (await normalizer.normalizeFile(args.data)) as FileData,\n                            numberOfParts: args.numberOfParts\n                        });\n\n                        return new Response(result);\n                    } catch (e) {\n                        return new ErrorResponse({\n                            message: e.message,\n                            code: e.code,\n                            data: e.data\n                        });\n                    }\n                };\n            }\n        });\n\n        builder.addResolver<{ fileKey: string; uploadId: string }>({\n            path: \"FmMutation.completeMultiPartUpload\",\n            dependencies: [IdentityContext, CompleteMultiPartUploadUseCase],\n            resolver(\n                identityContext: IdentityContext.Interface,\n                completeMultiPartUpload: CompleteMultiPartUploadUseCase.Interface\n            ) {\n                return async ({ args }) => {\n                    try {\n                        await checkPermissions(identityContext, { rwd: \"w\" });\n\n                        await completeMultiPartUpload.execute({\n                            fileKey: args.fileKey,\n                            uploadId: args.uploadId\n                        });\n\n                        return new Response(true);\n                    } catch (e) {\n                        return new ErrorResponse({\n                            message: e.message,\n                            code: e.code,\n                            data: e.data\n                        });\n                    }\n                };\n            }\n        });\n\n        return builder;\n    }\n}\n\nexport const StandaloneGraphQLSchema = CoreGraphQLSchemaFactory.createImplementation({\n    implementation: StandaloneGraphQLSchemaImpl,\n    dependencies: []\n});\n"],"names":["createNormalizer","FileNormalizer","TYPE_DEFS","StandaloneGraphQLSchemaImpl","builder","IdentityContext","GetSettingsUseCase","GetUploadPayloadUseCase","identityContext","getSettings","getUploadPayload","args","checkPermissions","settingsResult","settings","normalizer","payload","Response","e","ErrorResponse","payloads","pMap","data","CreateMultiPartUploadUseCase","createMultiPartUpload","result","CompleteMultiPartUploadUseCase","completeMultiPartUpload","StandaloneGraphQLSchema","CoreGraphQLSchemaFactory"],"mappings":";;;;;;;;;AAoBA,MAAMA,mBAAmB,IAAM,IAAIC;AAEnC,MAAMC,YAA0B,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsFjC,CAAC;AAQD,MAAMC;IACF,MAAa,QAAQC,OAAuC,EAAmC;QAC3FA,QAAQ,WAAW,CAACF;QAEpBE,QAAQ,WAAW,CAAgB;YAC/B,MAAM;YACN,cAAc;gBAACC;gBAAiBC;gBAAoBC;aAAwB;YAC5E,UACIC,eAA0C,EAC1CC,WAAyC,EACzCC,gBAAmD;gBAEnD,OAAO,OAAO,EAAEC,IAAI,EAAE;oBAClB,IAAI;wBACA,MAAMC,iBAAiBJ,iBAAiB;4BAAE,KAAK;wBAAI;wBAEnD,MAAMK,iBAAiB,MAAMJ,YAAY,OAAO;wBAChD,MAAMK,WAAWD,eAAe,KAAK;wBAErC,MAAME,aAAaf;wBACnB,MAAMgB,UAAU,MAAMN,iBAAiB,OAAO,CACzC,MAAMK,WAAW,aAAa,CAACJ,KAAK,IAAI,GACzCG;wBAGJ,OAAO,IAAIG,SAASD;oBACxB,EAAE,OAAOE,GAAG;wBACR,OAAO,IAAIC,cAAc;4BACrB,SAASD,EAAE,OAAO;4BAClB,MAAMA,EAAE,IAAI;4BACZ,MAAMA,EAAE,IAAI;wBAChB;oBACJ;gBACJ;YACJ;QACJ;QAEAd,QAAQ,WAAW,CAAkB;YACjC,MAAM;YACN,cAAc;gBAACC;gBAAiBC;gBAAoBC;aAAwB;YAC5E,UACIC,eAA0C,EAC1CC,WAAyC,EACzCC,gBAAmD;gBAEnD,OAAO,OAAO,EAAEC,IAAI,EAAE;oBAClB,IAAI;wBACA,MAAMC,iBAAiBJ,iBAAiB;4BAAE,KAAK;wBAAI;wBAEnD,MAAMK,iBAAiB,MAAMJ,YAAY,OAAO;wBAChD,MAAMK,WAAWD,eAAe,KAAK;wBAErC,MAAME,aAAaf;wBACnB,MAAMoB,WAAW,MAAMC,MAAKV,KAAK,IAAI,EAAE,OAAOW,OACnCZ,iBAAiB,OAAO,CAC1B,MAAMK,WAAW,aAAa,CAACO,OAChCR;wBAIR,OAAO,IAAIG,SAASG;oBACxB,EAAE,OAAOF,GAAG;wBACR,OAAO,IAAIC,cAAc;4BACrB,SAASD,EAAE,OAAO;4BAClB,MAAMA,EAAE,IAAI;4BACZ,MAAMA,EAAE,IAAI;wBAChB;oBACJ;gBACJ;YACJ;QACJ;QAEAd,QAAQ,WAAW,CAAuC;YACtD,MAAM;YACN,cAAc;gBAACC;gBAAiBkB;aAA6B;YAC7D,UACIf,eAA0C,EAC1CgB,qBAA6D;gBAE7D,OAAO,OAAO,EAAEb,IAAI,EAAE;oBAClB,IAAI;wBACA,MAAMC,iBAAiBJ,iBAAiB;4BAAE,KAAK;wBAAI;wBAEnD,MAAMO,aAAaf;wBACnB,MAAMyB,SAAS,MAAMD,sBAAsB,OAAO,CAAC;4BAC/C,MAAO,MAAMT,WAAW,aAAa,CAACJ,KAAK,IAAI;4BAC/C,eAAeA,KAAK,aAAa;wBACrC;wBAEA,OAAO,IAAIM,SAASQ;oBACxB,EAAE,OAAOP,GAAG;wBACR,OAAO,IAAIC,cAAc;4BACrB,SAASD,EAAE,OAAO;4BAClB,MAAMA,EAAE,IAAI;4BACZ,MAAMA,EAAE,IAAI;wBAChB;oBACJ;gBACJ;YACJ;QACJ;QAEAd,QAAQ,WAAW,CAAwC;YACvD,MAAM;YACN,cAAc;gBAACC;gBAAiBqB;aAA+B;YAC/D,UACIlB,eAA0C,EAC1CmB,uBAAiE;gBAEjE,OAAO,OAAO,EAAEhB,IAAI,EAAE;oBAClB,IAAI;wBACA,MAAMC,iBAAiBJ,iBAAiB;4BAAE,KAAK;wBAAI;wBAEnD,MAAMmB,wBAAwB,OAAO,CAAC;4BAClC,SAAShB,KAAK,OAAO;4BACrB,UAAUA,KAAK,QAAQ;wBAC3B;wBAEA,OAAO,IAAIM,SAAS;oBACxB,EAAE,OAAOC,GAAG;wBACR,OAAO,IAAIC,cAAc;4BACrB,SAASD,EAAE,OAAO;4BAClB,MAAMA,EAAE,IAAI;4BACZ,MAAMA,EAAE,IAAI;wBAChB;oBACJ;gBACJ;YACJ;QACJ;QAEA,OAAOd;IACX;AACJ;AAEO,MAAMwB,0BAA0BC,yBAAyB,oBAAoB,CAAC;IACjF,gBAAgB1B;IAChB,cAAc,EAAE;AACpB"}

package/index.d.ts

@@ -0,0 +1,3 @@
+export { createFileUploadModifier } from "@webiny/api-file-manager/features/upload/index.js";
+export { createAssetDelivery } from "./assetDelivery/createAssetDelivery.js";
+export { FileManagerStandaloneFeature } from "./FileManagerStandaloneFeature.js";

package/index.js

@@ -0,0 +1,3 @@
+export { createFileUploadModifier } from "@webiny/api-file-manager/features/upload/index.js";
+export { createAssetDelivery } from "./assetDelivery/createAssetDelivery.js";
+export { FileManagerStandaloneFeature } from "./FileManagerStandaloneFeature.js";

package/package.json

@@ -0,0 +1,44 @@
+{
+	"name": "@webiny/api-file-manager-standalone",
+	"version": "6.6.0-alpha.4",
+	"type": "module",
+	"exports": {
+		".": "./index.js",
+		"./*": "./*"
+	},
+	"repository": {
+		"type": "git",
+		"url": "https://github.com/webiny/webiny-js.git"
+	},
+	"description": "File storage plugin for the @webiny/api-file-manager, for standalone Webiny projects.",
+	"author": "Webiny Ltd",
+	"license": "MIT",
+	"dependencies": {
+		"@webiny/api-core": "6.6.0-alpha.4",
+		"@webiny/api-file-manager": "6.6.0-alpha.4",
+		"@webiny/api-graphql": "6.6.0-alpha.4",
+		"@webiny/background-tasks": "6.6.0-alpha.4",
+		"@webiny/event-handler-core": "6.6.0-alpha.4",
+		"@webiny/feature": "6.6.0-alpha.4",
+		"@webiny/handler": "6.6.0-alpha.4",
+		"@webiny/plugins": "6.6.0-alpha.4",
+		"@webiny/utils": "6.6.0-alpha.4",
+		"@webiny/validation": "6.6.0-alpha.4",
+		"exifreader": "4.43.0",
+		"p-map": "7.0.6",
+		"sharp": "0.35.3"
+	},
+	"devDependencies": {
+		"@webiny/build-tools": "6.6.0-alpha.4",
+		"rimraf": "6.1.3",
+		"typescript": "7.0.2",
+		"vitest": "4.1.11"
+	},
+	"publishConfig": {
+		"access": "public"
+	},
+	"gitHead": "8476da73b653c89cc1474d968baf55c1b0ae0e5f",
+	"webiny": {
+		"publishFrom": "dist"
+	}
+}

package/routes/UploadPartRoute/UploadPartRoute.d.ts

@@ -0,0 +1,23 @@
+import { HttpRouteDefinition, HttpRouteHandler } from "@webiny/event-handler-core";
+import { FileManagerStandaloneConfig } from "../../features/FileManagerStandaloneConfig/abstractions.js";
+declare class UploadPartRouteImpl implements HttpRouteHandler.Interface {
+    private readonly config;
+    constructor(config: FileManagerStandaloneConfig.Interface);
+    handle(request: HttpRouteHandler.Request, response: HttpRouteHandler.Response): Promise<import("@webiny/event-handler-core").IHttpResponseBuilder>;
+}
+export declare const UploadPartRoute: typeof UploadPartRouteImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/event-handler-core").IHttpRoute>;
+};
+declare class UploadPartRouteDefinitionImpl implements HttpRouteDefinition.Interface {
+    readonly name = "upload-part";
+    readonly method = "PUT";
+    readonly path = "/webiny-file-upload/parts";
+    readonly handler: typeof UploadPartRouteImpl & {
+        __abstraction: import("@webiny/di").Abstraction<import("@webiny/event-handler-core").IHttpRoute>;
+    };
+}
+/** What the router matches on. Zero dependencies, so building it costs nothing. */
+export declare const UploadPartRouteDefinition: typeof UploadPartRouteDefinitionImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/event-handler-core").IHttpRouteDefinition>;
+};
+export {};

package/routes/UploadPartRoute/UploadPartRoute.js

@@ -0,0 +1,71 @@
+import node_path from "node:path";
+import { createHash } from "node:crypto";
+import { mkdir, writeFile } from "node:fs/promises";
+import { HttpRouteDefinition, HttpRouteHandler } from "@webiny/event-handler-core";
+import { verifyUploadToken } from "../../utils/uploadToken.js";
+import { FileManagerStandaloneConfig } from "../../features/FileManagerStandaloneConfig/abstractions.js";
+import { isPathContained, toBuffer } from "../utils.js";
+class UploadPartRouteImpl {
+    constructor(config){
+        this.config = config;
+    }
+    async handle(request, response) {
+        const storagePath = this.config.storagePath;
+        const secret = this.config.uploadSecret;
+        const query = request.query ?? {};
+        const uploadId = query["uploadId"];
+        const partNumberStr = query["partNumber"];
+        const token = query["token"];
+        if (!uploadId || !partNumberStr || !token) return response.status(400).json({
+            error: "Missing uploadId, partNumber, or token."
+        });
+        const partNumber = parseInt(partNumberStr, 10);
+        if (isNaN(partNumber) || partNumber < 1) return response.status(400).json({
+            error: "Invalid partNumber."
+        });
+        let payload;
+        try {
+            payload = verifyUploadToken(token, secret);
+        } catch (err) {
+            return response.status(400).json({
+                error: err instanceof Error ? err.message : "Invalid token."
+            });
+        }
+        const expectedKey = `tenants/${payload.tenantId}/multipart/${uploadId}/part-${partNumber}`;
+        if (payload.key !== expectedKey) return response.status(400).json({
+            error: "Token key mismatch."
+        });
+        const destPath = node_path.join(storagePath, expectedKey);
+        if (!isPathContained(destPath, storagePath)) return response.status(400).json({
+            error: "Invalid path."
+        });
+        await mkdir(node_path.dirname(destPath), {
+            recursive: true
+        });
+        const body = toBuffer(request.body);
+        await writeFile(destPath, body);
+        const etag = createHash("md5").update(body).digest("hex");
+        return response.header("etag", etag);
+    }
+}
+const UploadPartRoute = HttpRouteHandler.createImplementation({
+    implementation: UploadPartRouteImpl,
+    dependencies: [
+        FileManagerStandaloneConfig
+    ]
+});
+class UploadPartRouteDefinitionImpl {
+    constructor(){
+        this.name = "upload-part";
+        this.method = "PUT";
+        this.path = "/webiny-file-upload/parts";
+        this.handler = UploadPartRoute;
+    }
+}
+const UploadPartRouteDefinition = HttpRouteDefinition.createImplementation({
+    implementation: UploadPartRouteDefinitionImpl,
+    dependencies: []
+});
+export { UploadPartRoute, UploadPartRouteDefinition };
+
+//# sourceMappingURL=UploadPartRoute.js.map

package/routes/UploadPartRoute/UploadPartRoute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes/UploadPartRoute/UploadPartRoute.js","sources":["../../../src/routes/UploadPartRoute/UploadPartRoute.ts"],"sourcesContent":["import path from \"node:path\";\nimport { createHash } from \"node:crypto\";\nimport { mkdir, writeFile } from \"node:fs/promises\";\nimport { HttpRouteDefinition, HttpRouteHandler } from \"@webiny/event-handler-core\";\nimport { verifyUploadToken } from \"~/utils/uploadToken.js\";\nimport { FileManagerStandaloneConfig } from \"~/features/FileManagerStandaloneConfig/abstractions.js\";\nimport { isPathContained, toBuffer } from \"../utils.js\";\n\nclass UploadPartRouteImpl implements HttpRouteHandler.Interface {\n    public constructor(private readonly config: FileManagerStandaloneConfig.Interface) {}\n\n    public async handle(request: HttpRouteHandler.Request, response: HttpRouteHandler.Response) {\n        const storagePath = this.config.storagePath;\n        const secret = this.config.uploadSecret;\n\n        const query = request.query ?? {};\n        const uploadId = query[\"uploadId\"];\n        const partNumberStr = query[\"partNumber\"];\n        const token = query[\"token\"];\n\n        if (!uploadId || !partNumberStr || !token) {\n            return response.status(400).json({ error: \"Missing uploadId, partNumber, or token.\" });\n        }\n\n        const partNumber = parseInt(partNumberStr, 10);\n        if (isNaN(partNumber) || partNumber < 1) {\n            return response.status(400).json({ error: \"Invalid partNumber.\" });\n        }\n\n        let payload;\n        try {\n            payload = verifyUploadToken(token, secret);\n        } catch (err) {\n            return response\n                .status(400)\n                .json({ error: err instanceof Error ? err.message : \"Invalid token.\" });\n        }\n\n        const expectedKey = `tenants/${payload.tenantId}/multipart/${uploadId}/part-${partNumber}`;\n        if (payload.key !== expectedKey) {\n            return response.status(400).json({ error: \"Token key mismatch.\" });\n        }\n\n        const destPath = path.join(storagePath, expectedKey);\n        if (!isPathContained(destPath, storagePath)) {\n            return response.status(400).json({ error: \"Invalid path.\" });\n        }\n\n        await mkdir(path.dirname(destPath), { recursive: true });\n\n        const body = toBuffer(request.body);\n        await writeFile(destPath, body);\n\n        const etag = createHash(\"md5\").update(body).digest(\"hex\");\n\n        return response.header(\"etag\", etag);\n    }\n}\n\nexport const UploadPartRoute = HttpRouteHandler.createImplementation({\n    implementation: UploadPartRouteImpl,\n    dependencies: [FileManagerStandaloneConfig]\n});\n\nclass UploadPartRouteDefinitionImpl implements HttpRouteDefinition.Interface {\n    readonly name = \"upload-part\";\n    readonly method = \"PUT\";\n    readonly path = \"/webiny-file-upload/parts\";\n    readonly handler = UploadPartRoute;\n}\n\n/** What the router matches on. Zero dependencies, so building it costs nothing. */\nexport const UploadPartRouteDefinition = HttpRouteDefinition.createImplementation({\n    implementation: UploadPartRouteDefinitionImpl,\n    dependencies: []\n});\n"],"names":["UploadPartRouteImpl","config","request","response","storagePath","secret","query","uploadId","partNumberStr","token","partNumber","parseInt","isNaN","payload","verifyUploadToken","err","Error","expectedKey","destPath","path","isPathContained","mkdir","body","toBuffer","writeFile","etag","createHash","UploadPartRoute","HttpRouteHandler","FileManagerStandaloneConfig","UploadPartRouteDefinitionImpl","UploadPartRouteDefinition","HttpRouteDefinition"],"mappings":";;;;;;;AAQA,MAAMA;IACF,YAAoCC,MAA6C,CAAE;aAA/CA,MAAM,GAANA;IAAgD;IAEpF,MAAa,OAAOC,OAAiC,EAAEC,QAAmC,EAAE;QACxF,MAAMC,cAAc,IAAI,CAAC,MAAM,CAAC,WAAW;QAC3C,MAAMC,SAAS,IAAI,CAAC,MAAM,CAAC,YAAY;QAEvC,MAAMC,QAAQJ,QAAQ,KAAK,IAAI,CAAC;QAChC,MAAMK,WAAWD,KAAK,CAAC,WAAW;QAClC,MAAME,gBAAgBF,KAAK,CAAC,aAAa;QACzC,MAAMG,QAAQH,KAAK,CAAC,QAAQ;QAE5B,IAAI,CAACC,YAAY,CAACC,iBAAiB,CAACC,OAChC,OAAON,SAAS,MAAM,CAAC,KAAK,IAAI,CAAC;YAAE,OAAO;QAA0C;QAGxF,MAAMO,aAAaC,SAASH,eAAe;QAC3C,IAAII,MAAMF,eAAeA,aAAa,GAClC,OAAOP,SAAS,MAAM,CAAC,KAAK,IAAI,CAAC;YAAE,OAAO;QAAsB;QAGpE,IAAIU;QACJ,IAAI;YACAA,UAAUC,kBAAkBL,OAAOJ;QACvC,EAAE,OAAOU,KAAK;YACV,OAAOZ,SACF,MAAM,CAAC,KACP,IAAI,CAAC;gBAAE,OAAOY,eAAeC,QAAQD,IAAI,OAAO,GAAG;YAAiB;QAC7E;QAEA,MAAME,cAAc,CAAC,QAAQ,EAAEJ,QAAQ,QAAQ,CAAC,WAAW,EAAEN,SAAS,MAAM,EAAEG,YAAY;QAC1F,IAAIG,QAAQ,GAAG,KAAKI,aAChB,OAAOd,SAAS,MAAM,CAAC,KAAK,IAAI,CAAC;YAAE,OAAO;QAAsB;QAGpE,MAAMe,WAAWC,UAAAA,IAAS,CAACf,aAAaa;QACxC,IAAI,CAACG,gBAAgBF,UAAUd,cAC3B,OAAOD,SAAS,MAAM,CAAC,KAAK,IAAI,CAAC;YAAE,OAAO;QAAgB;QAG9D,MAAMkB,MAAMF,UAAAA,OAAY,CAACD,WAAW;YAAE,WAAW;QAAK;QAEtD,MAAMI,OAAOC,SAASrB,QAAQ,IAAI;QAClC,MAAMsB,UAAUN,UAAUI;QAE1B,MAAMG,OAAOC,WAAW,OAAO,MAAM,CAACJ,MAAM,MAAM,CAAC;QAEnD,OAAOnB,SAAS,MAAM,CAAC,QAAQsB;IACnC;AACJ;AAEO,MAAME,kBAAkBC,iBAAiB,oBAAoB,CAAC;IACjE,gBAAgB5B;IAChB,cAAc;QAAC6B;KAA4B;AAC/C;AAEA,MAAMC;;aACO,IAAI,GAAG;aACP,MAAM,GAAG;aACT,IAAI,GAAG;aACP,OAAO,GAAGH;;AACvB;AAGO,MAAMI,4BAA4BC,oBAAoB,oBAAoB,CAAC;IAC9E,gBAAgBF;IAChB,cAAc,EAAE;AACpB"}

package/routes/UploadPartRoute/feature.d.ts

@@ -0,0 +1,4 @@
+export declare const UploadPartRouteFeature: {
+    name: string;
+    register(container: import("@webiny/di").Container): void;
+};

package/routes/UploadPartRoute/feature.js

@@ -0,0 +1,11 @@
+import { createFeature } from "@webiny/feature/api";
+import { UploadPartRouteDefinition } from "./UploadPartRoute.js";
+const UploadPartRouteFeature = createFeature({
+    name: "FileManagerServer/UploadPartRoute",
+    register (container) {
+        container.register(UploadPartRouteDefinition);
+    }
+});
+export { UploadPartRouteFeature };
+
+//# sourceMappingURL=feature.js.map

package/routes/UploadPartRoute/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes/UploadPartRoute/feature.js","sources":["../../../src/routes/UploadPartRoute/feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { UploadPartRouteDefinition } from \"./UploadPartRoute.js\";\n\nexport const UploadPartRouteFeature = createFeature({\n    name: \"FileManagerServer/UploadPartRoute\",\n    register(container) {\n        container.register(UploadPartRouteDefinition);\n    }\n});\n"],"names":["UploadPartRouteFeature","createFeature","container","UploadPartRouteDefinition"],"mappings":";;AAGO,MAAMA,yBAAyBC,cAAc;IAChD,MAAM;IACN,UAASC,SAAS;QACdA,UAAU,QAAQ,CAACC;IACvB;AACJ"}

package/routes/UploadSingleFileRoute/UploadSingleFileRoute.d.ts

@@ -0,0 +1,23 @@
+import { HttpRouteDefinition, HttpRouteHandler } from "@webiny/event-handler-core";
+import { FileManagerStandaloneConfig } from "../../features/FileManagerStandaloneConfig/abstractions.js";
+declare class UploadSingleFileRouteImpl implements HttpRouteHandler.Interface {
+    private readonly config;
+    constructor(config: FileManagerStandaloneConfig.Interface);
+    handle(request: HttpRouteHandler.Request, response: HttpRouteHandler.Response): Promise<import("@webiny/event-handler-core").IHttpResponseBuilder>;
+}
+export declare const UploadSingleFileRoute: typeof UploadSingleFileRouteImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/event-handler-core").IHttpRoute>;
+};
+declare class UploadSingleFileRouteDefinitionImpl implements HttpRouteDefinition.Interface {
+    readonly name = "upload-single-file";
+    readonly method = "POST";
+    readonly path = "/webiny-file-upload";
+    readonly handler: typeof UploadSingleFileRouteImpl & {
+        __abstraction: import("@webiny/di").Abstraction<import("@webiny/event-handler-core").IHttpRoute>;
+    };
+}
+/** What the router matches on. Zero dependencies, so building it costs nothing. */
+export declare const UploadSingleFileRouteDefinition: typeof UploadSingleFileRouteDefinitionImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/event-handler-core").IHttpRouteDefinition>;
+};
+export {};

package/routes/UploadSingleFileRoute/UploadSingleFileRoute.js

@@ -0,0 +1,78 @@
+import node_path from "node:path";
+import { mkdir, writeFile } from "node:fs/promises";
+import { HttpRouteDefinition, HttpRouteHandler } from "@webiny/event-handler-core";
+import { verifyUploadToken } from "../../utils/uploadToken.js";
+import { FileManagerStandaloneConfig } from "../../features/FileManagerStandaloneConfig/abstractions.js";
+import { getBoundary, isPathContained, parseMultipart, toBuffer } from "../utils.js";
+class UploadSingleFileRouteImpl {
+    constructor(config){
+        this.config = config;
+    }
+    async handle(request, response) {
+        const storagePath = this.config.storagePath;
+        const secret = this.config.uploadSecret;
+        const contentType = request.headers["content-type"] ?? request.headers["Content-Type"] ?? "";
+        const boundary = getBoundary(contentType);
+        if (!boundary) return response.status(400).json({
+            error: "Expected multipart/form-data with a boundary."
+        });
+        const { fields, files } = parseMultipart(toBuffer(request.body), boundary);
+        const key = fields.find((field)=>"key" === field.name)?.value;
+        const token = fields.find((field)=>"token" === field.name)?.value;
+        const file = files[0];
+        if (!key || !token) return response.status(400).json({
+            error: "Missing key or token."
+        });
+        if (!file) return response.status(400).json({
+            error: "No file in request."
+        });
+        let payload;
+        try {
+            payload = verifyUploadToken(token, secret);
+        } catch (err) {
+            return response.status(400).json({
+                error: err instanceof Error ? err.message : "Invalid token."
+            });
+        }
+        if (payload.key !== key) return response.status(400).json({
+            error: "Token key mismatch."
+        });
+        const fileSize = file.data.length;
+        if (payload.uploadMaxFileSize > 0 && fileSize > payload.uploadMaxFileSize) return response.status(400).json({
+            error: "File exceeds maximum allowed size."
+        });
+        if (payload.uploadMinFileSize > 0 && fileSize < payload.uploadMinFileSize) return response.status(400).json({
+            error: "File is below minimum allowed size."
+        });
+        const destPath = node_path.join(storagePath, key);
+        if (!isPathContained(destPath, storagePath)) return response.status(400).json({
+            error: "Invalid path."
+        });
+        await mkdir(node_path.dirname(destPath), {
+            recursive: true
+        });
+        await writeFile(destPath, file.data);
+        return response.status(204);
+    }
+}
+const UploadSingleFileRoute = HttpRouteHandler.createImplementation({
+    implementation: UploadSingleFileRouteImpl,
+    dependencies: [
+        FileManagerStandaloneConfig
+    ]
+});
+class UploadSingleFileRouteDefinitionImpl {
+    constructor(){
+        this.name = "upload-single-file";
+        this.method = "POST";
+        this.path = "/webiny-file-upload";
+        this.handler = UploadSingleFileRoute;
+    }
+}
+const UploadSingleFileRouteDefinition = HttpRouteDefinition.createImplementation({
+    implementation: UploadSingleFileRouteDefinitionImpl,
+    dependencies: []
+});
+export { UploadSingleFileRoute, UploadSingleFileRouteDefinition };
+
+//# sourceMappingURL=UploadSingleFileRoute.js.map

package/routes/UploadSingleFileRoute/UploadSingleFileRoute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes/UploadSingleFileRoute/UploadSingleFileRoute.js","sources":["../../../src/routes/UploadSingleFileRoute/UploadSingleFileRoute.ts"],"sourcesContent":["import path from \"node:path\";\nimport { mkdir, writeFile } from \"node:fs/promises\";\nimport { HttpRouteDefinition, HttpRouteHandler } from \"@webiny/event-handler-core\";\nimport { verifyUploadToken } from \"~/utils/uploadToken.js\";\nimport { FileManagerStandaloneConfig } from \"~/features/FileManagerStandaloneConfig/abstractions.js\";\nimport { isPathContained, toBuffer, parseMultipart, getBoundary } from \"../utils.js\";\n\nclass UploadSingleFileRouteImpl implements HttpRouteHandler.Interface {\n    public constructor(private readonly config: FileManagerStandaloneConfig.Interface) {}\n\n    public async handle(request: HttpRouteHandler.Request, response: HttpRouteHandler.Response) {\n        const storagePath = this.config.storagePath;\n        const secret = this.config.uploadSecret;\n\n        const contentType =\n            request.headers[\"content-type\"] ?? request.headers[\"Content-Type\"] ?? \"\";\n        const boundary = getBoundary(contentType);\n        if (!boundary) {\n            return response\n                .status(400)\n                .json({ error: \"Expected multipart/form-data with a boundary.\" });\n        }\n\n        const { fields, files } = parseMultipart(toBuffer(request.body), boundary);\n        const key = fields.find(field => field.name === \"key\")?.value;\n        const token = fields.find(field => field.name === \"token\")?.value;\n        const file = files[0];\n\n        if (!key || !token) {\n            return response.status(400).json({ error: \"Missing key or token.\" });\n        }\n\n        if (!file) {\n            return response.status(400).json({ error: \"No file in request.\" });\n        }\n\n        let payload;\n        try {\n            payload = verifyUploadToken(token, secret);\n        } catch (err) {\n            return response\n                .status(400)\n                .json({ error: err instanceof Error ? err.message : \"Invalid token.\" });\n        }\n\n        if (payload.key !== key) {\n            return response.status(400).json({ error: \"Token key mismatch.\" });\n        }\n\n        const fileSize = file.data.length;\n        if (payload.uploadMaxFileSize > 0 && fileSize > payload.uploadMaxFileSize) {\n            return response.status(400).json({ error: \"File exceeds maximum allowed size.\" });\n        }\n\n        if (payload.uploadMinFileSize > 0 && fileSize < payload.uploadMinFileSize) {\n            return response.status(400).json({ error: \"File is below minimum allowed size.\" });\n        }\n\n        const destPath = path.join(storagePath, key);\n        if (!isPathContained(destPath, storagePath)) {\n            return response.status(400).json({ error: \"Invalid path.\" });\n        }\n\n        await mkdir(path.dirname(destPath), { recursive: true });\n        await writeFile(destPath, file.data);\n\n        return response.status(204);\n    }\n}\n\nexport const UploadSingleFileRoute = HttpRouteHandler.createImplementation({\n    implementation: UploadSingleFileRouteImpl,\n    dependencies: [FileManagerStandaloneConfig]\n});\n\nclass UploadSingleFileRouteDefinitionImpl implements HttpRouteDefinition.Interface {\n    readonly name = \"upload-single-file\";\n    readonly method = \"POST\";\n    readonly path = \"/webiny-file-upload\";\n    readonly handler = UploadSingleFileRoute;\n}\n\n/** What the router matches on. Zero dependencies, so building it costs nothing. */\nexport const UploadSingleFileRouteDefinition = HttpRouteDefinition.createImplementation({\n    implementation: UploadSingleFileRouteDefinitionImpl,\n    dependencies: []\n});\n"],"names":["UploadSingleFileRouteImpl","config","request","response","storagePath","secret","contentType","boundary","getBoundary","fields","files","parseMultipart","toBuffer","key","field","token","file","payload","verifyUploadToken","err","Error","fileSize","destPath","path","isPathContained","mkdir","writeFile","UploadSingleFileRoute","HttpRouteHandler","FileManagerStandaloneConfig","UploadSingleFileRouteDefinitionImpl","UploadSingleFileRouteDefinition","HttpRouteDefinition"],"mappings":";;;;;;AAOA,MAAMA;IACF,YAAoCC,MAA6C,CAAE;aAA/CA,MAAM,GAANA;IAAgD;IAEpF,MAAa,OAAOC,OAAiC,EAAEC,QAAmC,EAAE;QACxF,MAAMC,cAAc,IAAI,CAAC,MAAM,CAAC,WAAW;QAC3C,MAAMC,SAAS,IAAI,CAAC,MAAM,CAAC,YAAY;QAEvC,MAAMC,cACFJ,QAAQ,OAAO,CAAC,eAAe,IAAIA,QAAQ,OAAO,CAAC,eAAe,IAAI;QAC1E,MAAMK,WAAWC,YAAYF;QAC7B,IAAI,CAACC,UACD,OAAOJ,SACF,MAAM,CAAC,KACP,IAAI,CAAC;YAAE,OAAO;QAAgD;QAGvE,MAAM,EAAEM,MAAM,EAAEC,KAAK,EAAE,GAAGC,eAAeC,SAASV,QAAQ,IAAI,GAAGK;QACjE,MAAMM,MAAMJ,OAAO,IAAI,CAACK,CAAAA,QAASA,AAAe,UAAfA,MAAM,IAAI,GAAa;QACxD,MAAMC,QAAQN,OAAO,IAAI,CAACK,CAAAA,QAASA,AAAe,YAAfA,MAAM,IAAI,GAAe;QAC5D,MAAME,OAAON,KAAK,CAAC,EAAE;QAErB,IAAI,CAACG,OAAO,CAACE,OACT,OAAOZ,SAAS,MAAM,CAAC,KAAK,IAAI,CAAC;YAAE,OAAO;QAAwB;QAGtE,IAAI,CAACa,MACD,OAAOb,SAAS,MAAM,CAAC,KAAK,IAAI,CAAC;YAAE,OAAO;QAAsB;QAGpE,IAAIc;QACJ,IAAI;YACAA,UAAUC,kBAAkBH,OAAOV;QACvC,EAAE,OAAOc,KAAK;YACV,OAAOhB,SACF,MAAM,CAAC,KACP,IAAI,CAAC;gBAAE,OAAOgB,eAAeC,QAAQD,IAAI,OAAO,GAAG;YAAiB;QAC7E;QAEA,IAAIF,QAAQ,GAAG,KAAKJ,KAChB,OAAOV,SAAS,MAAM,CAAC,KAAK,IAAI,CAAC;YAAE,OAAO;QAAsB;QAGpE,MAAMkB,WAAWL,KAAK,IAAI,CAAC,MAAM;QACjC,IAAIC,QAAQ,iBAAiB,GAAG,KAAKI,WAAWJ,QAAQ,iBAAiB,EACrE,OAAOd,SAAS,MAAM,CAAC,KAAK,IAAI,CAAC;YAAE,OAAO;QAAqC;QAGnF,IAAIc,QAAQ,iBAAiB,GAAG,KAAKI,WAAWJ,QAAQ,iBAAiB,EACrE,OAAOd,SAAS,MAAM,CAAC,KAAK,IAAI,CAAC;YAAE,OAAO;QAAsC;QAGpF,MAAMmB,WAAWC,UAAAA,IAAS,CAACnB,aAAaS;QACxC,IAAI,CAACW,gBAAgBF,UAAUlB,cAC3B,OAAOD,SAAS,MAAM,CAAC,KAAK,IAAI,CAAC;YAAE,OAAO;QAAgB;QAG9D,MAAMsB,MAAMF,UAAAA,OAAY,CAACD,WAAW;YAAE,WAAW;QAAK;QACtD,MAAMI,UAAUJ,UAAUN,KAAK,IAAI;QAEnC,OAAOb,SAAS,MAAM,CAAC;IAC3B;AACJ;AAEO,MAAMwB,wBAAwBC,iBAAiB,oBAAoB,CAAC;IACvE,gBAAgB5B;IAChB,cAAc;QAAC6B;KAA4B;AAC/C;AAEA,MAAMC;;aACO,IAAI,GAAG;aACP,MAAM,GAAG;aACT,IAAI,GAAG;aACP,OAAO,GAAGH;;AACvB;AAGO,MAAMI,kCAAkCC,oBAAoB,oBAAoB,CAAC;IACpF,gBAAgBF;IAChB,cAAc,EAAE;AACpB"}

package/routes/UploadSingleFileRoute/feature.d.ts

@@ -0,0 +1,4 @@
+export declare const UploadSingleFileRouteFeature: {
+    name: string;
+    register(container: import("@webiny/di").Container): void;
+};

package/routes/UploadSingleFileRoute/feature.js

@@ -0,0 +1,11 @@
+import { createFeature } from "@webiny/feature/api";
+import { UploadSingleFileRouteDefinition } from "./UploadSingleFileRoute.js";
+const UploadSingleFileRouteFeature = createFeature({
+    name: "FileManagerServer/UploadSingleFileRoute",
+    register (container) {
+        container.register(UploadSingleFileRouteDefinition);
+    }
+});
+export { UploadSingleFileRouteFeature };
+
+//# sourceMappingURL=feature.js.map

package/routes/UploadSingleFileRoute/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes/UploadSingleFileRoute/feature.js","sources":["../../../src/routes/UploadSingleFileRoute/feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { UploadSingleFileRouteDefinition } from \"./UploadSingleFileRoute.js\";\n\nexport const UploadSingleFileRouteFeature = createFeature({\n    name: \"FileManagerServer/UploadSingleFileRoute\",\n    register(container) {\n        container.register(UploadSingleFileRouteDefinition);\n    }\n});\n"],"names":["UploadSingleFileRouteFeature","createFeature","container","UploadSingleFileRouteDefinition"],"mappings":";;AAGO,MAAMA,+BAA+BC,cAAc;IACtD,MAAM;IACN,UAASC,SAAS;QACdA,UAAU,QAAQ,CAACC;IACvB;AACJ"}