betterstart-cli 0.0.63 → 0.0.64

package/dist/assets/adapters/next/integrations/r2/integration.ts

@@ -7,7 +7,7 @@ export const r2Integration: BetterstartIntegrationDefinition = {
   kind: 'storage',
   version: '1.0.0',
   dependencies: [],
-  conflicts: [],
+  conflicts: ['vercel-blob', 'railway-bucket'],
   files: [
     {
       outputPath: 'lib/actions/r2/provider.ts',

package/dist/assets/adapters/next/integrations/railway-bucket/actions/railway-bucket.ts

@@ -0,0 +1,93 @@
+import { randomUUID } from 'node:crypto'
+import type { AdminStorageProvider, AdminStorageUploadInput } from '@admin/actions/storage/types'
+import { GetObjectCommand, PutObjectCommand, S3Client } from '@aws-sdk/client-s3'
+import { getSignedUrl } from '@aws-sdk/s3-request-presigner'
+
+let railwayBucketClient: S3Client | null = null
+
+function getConfig() {
+  return {
+    endpoint: process.env.BETTERSTART_RAILWAY_BUCKET_ENDPOINT?.trim() ?? '',
+    accessKeyId: process.env.BETTERSTART_RAILWAY_BUCKET_ACCESS_KEY_ID?.trim() ?? '',
+    secretAccessKey: process.env.BETTERSTART_RAILWAY_BUCKET_SECRET_ACCESS_KEY?.trim() ?? '',
+    bucketName: process.env.BETTERSTART_RAILWAY_BUCKET_NAME?.trim() ?? '',
+    region: process.env.BETTERSTART_RAILWAY_BUCKET_REGION?.trim() ?? '',
+    urlStyle: process.env.BETTERSTART_RAILWAY_BUCKET_URL_STYLE?.trim() ?? ''
+  }
+}
+
+function sanitizeFilename(filename: string): string {
+  return filename.replace(/[^a-zA-Z0-9.-]/g, '_')
+}
+
+function buildKey(filename: string, prefix = 'uploads'): string {
+  return `${prefix}/${Date.now()}-${randomUUID()}-${sanitizeFilename(filename)}`
+}
+
+function stableReadUrl(key: string): string {
+  return `/api/admin/storage/${Buffer.from(key, 'utf-8').toString('base64url')}`
+}
+
+function getClient(): S3Client {
+  if (railwayBucketClient) return railwayBucketClient
+
+  const config = getConfig()
+  railwayBucketClient = new S3Client({
+    region: config.region,
+    endpoint: config.endpoint,
+    forcePathStyle: config.urlStyle.toLowerCase().includes('path'),
+    credentials: {
+      accessKeyId: config.accessKeyId,
+      secretAccessKey: config.secretAccessKey
+    }
+  })
+  return railwayBucketClient
+}
+
+export const railwayBucketStorageProvider = {
+  id: 'railway-bucket',
+  isConfigured() {
+    const config = getConfig()
+    return Boolean(
+      config.endpoint &&
+        config.accessKeyId &&
+        config.secretAccessKey &&
+        config.bucketName &&
+        config.region &&
+        config.urlStyle
+    )
+  },
+  async saveFile(input: AdminStorageUploadInput) {
+    const config = getConfig()
+    if (!this.isConfigured()) {
+      throw new Error('Railway Bucket is not fully configured.')
+    }
+
+    const key = buildKey(input.filename, input.prefix)
+    await getClient().send(
+      new PutObjectCommand({
+        Bucket: config.bucketName,
+        Key: key,
+        Body: input.buffer,
+        ContentType: input.contentType,
+        ContentLength: input.contentLength
+      })
+    )
+
+    return { key, url: stableReadUrl(key) }
+  },
+  async createReadUrl(key: string) {
+    const config = getConfig()
+    if (!this.isConfigured()) {
+      throw new Error('Railway Bucket is not fully configured.')
+    }
+
+    return getSignedUrl(
+      getClient(),
+      new GetObjectCommand({ Bucket: config.bucketName, Key: key }),
+      { expiresIn: 300 }
+    )
+  }
+} satisfies AdminStorageProvider & {
+  createReadUrl(key: string): Promise<string>
+}

package/dist/assets/adapters/next/integrations/railway-bucket/integration.ts

@@ -0,0 +1,40 @@
+import type { BetterstartIntegrationDefinition } from '@integration-engine/types.js'
+
+export const railwayBucketIntegration: BetterstartIntegrationDefinition = {
+  id: 'railway-bucket',
+  title: 'Railway Bucket',
+  description: 'Private S3-compatible media storage on Railway with signed reads',
+  kind: 'storage',
+  version: '1.0.0',
+  dependencies: [],
+  conflicts: ['r2', 'vercel-blob'],
+  files: [
+    {
+      outputPath: 'lib/actions/railway-bucket/provider.ts',
+      templatePath: 'actions/railway-bucket.ts'
+    }
+  ],
+  packageDependencies: ['@aws-sdk/client-s3', '@aws-sdk/s3-request-presigner'],
+  devDependencies: [],
+  capabilities: {
+    storageProvider: {
+      provider: 'railway-bucket',
+      importPath: '@admin/actions/railway-bucket/provider',
+      exportName: 'railwayBucketStorageProvider'
+    }
+  },
+  envSections: [
+    {
+      header: 'Storage (Railway Bucket)',
+      vars: [
+        { key: 'BETTERSTART_RAILWAY_BUCKET_ENDPOINT', value: '' },
+        { key: 'BETTERSTART_RAILWAY_BUCKET_ACCESS_KEY_ID', value: '' },
+        { key: 'BETTERSTART_RAILWAY_BUCKET_SECRET_ACCESS_KEY', value: '' },
+        { key: 'BETTERSTART_RAILWAY_BUCKET_NAME', value: '' },
+        { key: 'BETTERSTART_RAILWAY_BUCKET_REGION', value: '' },
+        { key: 'BETTERSTART_RAILWAY_BUCKET_URL_STYLE', value: '' }
+      ]
+    }
+  ],
+  configure: 'railway-bucket'
+}

package/dist/assets/adapters/next/integrations/vercel-blob/integration.ts

@@ -7,7 +7,7 @@ export const vercelBlobIntegration: BetterstartIntegrationDefinition = {
   kind: 'storage',
   version: '1.0.0',
   dependencies: [],
-  conflicts: [],
+  conflicts: ['r2', 'railway-bucket'],
   files: [
     {
       outputPath: 'lib/actions/vercel-blob/provider.ts',

package/dist/assets/adapters/next/templates/init/api/storage-read-route.ts

@@ -0,0 +1,43 @@
+import { getStorageProvider } from '@admin/actions/storage/provider'
+import { type NextRequest, NextResponse } from 'next/server'
+
+type SignedReadStorageProvider = ReturnType<typeof getStorageProvider> & {
+  createReadUrl?: (storageKey: string) => Promise<string>
+}
+
+function decodeStorageKey(encodedKey: string): string | undefined {
+  try {
+    const key = Buffer.from(encodedKey, 'base64url').toString('utf-8')
+    const canonicalKey = Buffer.from(key, 'utf-8').toString('base64url')
+    return key && canonicalKey === encodedKey ? key : undefined
+  } catch {
+    return undefined
+  }
+}
+
+function storageError(error: string, status: number) {
+  return NextResponse.json({ error }, { status })
+}
+
+export async function GET(request: NextRequest) {
+  const encodedKey = request.nextUrl.pathname.split('/').filter(Boolean).at(-1)
+  const key = encodedKey ? decodeStorageKey(encodedKey) : undefined
+  const provider: SignedReadStorageProvider = getStorageProvider()
+
+  if (!key || !provider.createReadUrl) {
+    return storageError('Media object not found', 404)
+  }
+
+  try {
+    const signedUrl = await provider.createReadUrl(key)
+    return new NextResponse(null, {
+      status: 307,
+      headers: {
+        Location: signedUrl,
+        'Cache-Control': 'no-store'
+      }
+    })
+  } catch {
+    return storageError('Could not create a media read URL', 502)
+  }
+}

package/dist/assets/adapters/next/templates/init/lib/actions/storage/types.ts

@@ -14,5 +14,6 @@ export interface AdminStorageUploadResult {
 export interface AdminStorageProvider {
   id: string
   isConfigured: () => boolean
-  saveFile: (input: AdminStorageUploadInput) => Promise<AdminStorageUploadResult>
+  saveFile(input: AdminStorageUploadInput): Promise<AdminStorageUploadResult>
+  createReadUrl?: (key: string) => Promise<string>
 }