bunsane 0.3.2 → 0.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (214) hide show
  1. package/CHANGELOG.md +445 -370
  2. package/core/BatchLoader.ts +56 -32
  3. package/core/Entity.ts +85 -1020
  4. package/core/EntityHookManager.ts +52 -754
  5. package/core/Logger.ts +10 -0
  6. package/core/RequestContext.ts +94 -85
  7. package/core/RequestLoaders.ts +98 -5
  8. package/core/SchedulerManager.ts +28 -600
  9. package/core/app/cors.ts +2 -11
  10. package/core/app/preparedStatementWarmup.ts +9 -49
  11. package/core/app/requestRouter.ts +9 -8
  12. package/core/app/restRegistry.ts +8 -0
  13. package/core/archetype/fieldResolvers.ts +85 -40
  14. package/core/archetype/relationLoader.ts +135 -92
  15. package/core/cache/CacheManager.ts +91 -302
  16. package/core/cache/CompressionUtils.ts +34 -3
  17. package/core/cache/MemoryCache.ts +40 -37
  18. package/core/cache/RedisCache.ts +4 -4
  19. package/core/cache/health.ts +30 -0
  20. package/core/cache/invalidation.ts +96 -0
  21. package/core/cache/strategies/writeInvalidate.ts +111 -0
  22. package/core/cache/strategies/writeThrough.ts +233 -0
  23. package/core/components/BaseComponent.ts +16 -8
  24. package/core/components/ComponentRegistry.ts +28 -0
  25. package/core/decorators/IndexedField.ts +1 -1
  26. package/core/entity/cacheStrategies.ts +97 -0
  27. package/core/entity/componentAccess.ts +364 -0
  28. package/core/entity/finders.ts +202 -0
  29. package/core/entity/pendingOps.ts +72 -0
  30. package/core/entity/saveEntity.ts +377 -0
  31. package/core/hooks/dispatcher.ts +439 -0
  32. package/core/hooks/guards.ts +155 -0
  33. package/core/hooks/registry.ts +247 -0
  34. package/core/metadata/definitions/Component.ts +1 -1
  35. package/core/metadata/index.ts +15 -4
  36. package/core/middleware/RateLimit.ts +102 -105
  37. package/core/middleware/RequestId.ts +2 -9
  38. package/core/middleware/SecurityHeaders.ts +2 -11
  39. package/core/middleware/headers.ts +28 -0
  40. package/core/remote/OutboxWorker.ts +213 -183
  41. package/core/remote/RemoteManager.ts +401 -400
  42. package/core/remote/types.ts +153 -151
  43. package/core/requestScope.ts +34 -0
  44. package/core/scheduler/cronEvaluator.ts +174 -0
  45. package/core/scheduler/lifecycleHooks.ts +21 -0
  46. package/core/scheduler/lockCoordinator.ts +27 -0
  47. package/core/scheduler/metrics.ts +14 -0
  48. package/core/scheduler/taskRunner.ts +420 -0
  49. package/database/DatabaseHelper.ts +128 -101
  50. package/database/IndexingStrategy.ts +72 -2
  51. package/database/PreparedStatementCache.ts +8 -2
  52. package/database/cancellable.ts +35 -22
  53. package/database/index.ts +15 -3
  54. package/database/instrumentedDb.ts +141 -141
  55. package/endpoints/archetypes.ts +2 -8
  56. package/endpoints/tables.ts +6 -1
  57. package/gql/index.ts +1 -1
  58. package/gql/visitors/ResolverGeneratorVisitor.ts +25 -4
  59. package/package.json +22 -1
  60. package/query/CTENode.ts +5 -3
  61. package/query/ComponentInclusionNode.ts +240 -13
  62. package/query/OrNode.ts +6 -5
  63. package/query/Query.ts +157 -46
  64. package/query/QueryContext.ts +6 -0
  65. package/query/QueryDAG.ts +7 -2
  66. package/query/membershipSource.ts +66 -0
  67. package/storage/LocalStorageProvider.ts +8 -3
  68. package/studio/dist/assets/index-BMZ67Npg.js +254 -0
  69. package/studio/dist/assets/index-BpbuYz9g.css +1 -0
  70. package/studio/{index.html → dist/index.html} +3 -2
  71. package/swagger/generator.ts +11 -1
  72. package/upload/UploadManager.ts +8 -6
  73. package/utils/uuid.ts +40 -10
  74. package/.claude/scheduled_tasks.lock +0 -1
  75. package/.claude/settings.local.json +0 -47
  76. package/.prettierrc +0 -4
  77. package/.serena/memories/architectural-decision-no-dependency-injection.md +0 -76
  78. package/.serena/memories/architecture.md +0 -154
  79. package/.serena/memories/cache-interface-refactoring-2026-01-24.md +0 -165
  80. package/.serena/memories/code_style_and_conventions.md +0 -76
  81. package/.serena/memories/project_overview.md +0 -43
  82. package/.serena/memories/schema-dsl-plan.md +0 -107
  83. package/.serena/memories/suggested_commands.md +0 -80
  84. package/.serena/memories/typescript-compilation-status.md +0 -54
  85. package/.serena/project.yml +0 -114
  86. package/BunSane.jpg +0 -0
  87. package/CLAUDE.md +0 -198
  88. package/TODO.md +0 -2
  89. package/bun.lock +0 -302
  90. package/bunfig.toml +0 -10
  91. package/docs/RFC_APP_REFACTOR.md +0 -248
  92. package/docs/RFC_REFACTOR_TARGETS.md +0 -251
  93. package/docs/SCALABILITY_PLAN.md +0 -175
  94. package/studio/bun.lock +0 -482
  95. package/studio/package.json +0 -39
  96. package/studio/postcss.config.js +0 -6
  97. package/studio/src/components/DataTable.tsx +0 -211
  98. package/studio/src/components/Layout.tsx +0 -13
  99. package/studio/src/components/PageContainer.tsx +0 -9
  100. package/studio/src/components/PageHeader.tsx +0 -13
  101. package/studio/src/components/SearchBar.tsx +0 -57
  102. package/studio/src/components/Sidebar.tsx +0 -294
  103. package/studio/src/components/ui/button.tsx +0 -56
  104. package/studio/src/components/ui/checkbox.tsx +0 -26
  105. package/studio/src/components/ui/input.tsx +0 -25
  106. package/studio/src/hooks/useDataTable.ts +0 -131
  107. package/studio/src/index.css +0 -36
  108. package/studio/src/lib/api.ts +0 -186
  109. package/studio/src/lib/utils.ts +0 -13
  110. package/studio/src/main.tsx +0 -17
  111. package/studio/src/pages/ArcheType.tsx +0 -239
  112. package/studio/src/pages/Components.tsx +0 -124
  113. package/studio/src/pages/EntityInspector.tsx +0 -302
  114. package/studio/src/pages/QueryRunner.tsx +0 -246
  115. package/studio/src/pages/Table.tsx +0 -94
  116. package/studio/src/pages/Welcome.tsx +0 -241
  117. package/studio/src/routes.tsx +0 -45
  118. package/studio/src/store/archeTypeSettings.ts +0 -30
  119. package/studio/src/store/studio.ts +0 -65
  120. package/studio/src/utils/columnHelpers.tsx +0 -114
  121. package/studio/studio-instructions.md +0 -81
  122. package/studio/tailwind.config.js +0 -77
  123. package/studio/utils.ts +0 -54
  124. package/studio/vite.config.js +0 -19
  125. package/tests/benchmark/BENCHMARK_DATABASES_PLAN.md +0 -338
  126. package/tests/benchmark/bunfig.toml +0 -9
  127. package/tests/benchmark/fixtures/EcommerceComponents.ts +0 -283
  128. package/tests/benchmark/fixtures/EcommerceDataGenerators.ts +0 -301
  129. package/tests/benchmark/fixtures/RelationTracker.ts +0 -159
  130. package/tests/benchmark/fixtures/index.ts +0 -6
  131. package/tests/benchmark/index.ts +0 -22
  132. package/tests/benchmark/noop-preload.ts +0 -3
  133. package/tests/benchmark/query-lateral-benchmark.test.ts +0 -372
  134. package/tests/benchmark/runners/BenchmarkLoader.ts +0 -132
  135. package/tests/benchmark/runners/index.ts +0 -4
  136. package/tests/benchmark/scenarios/query-benchmarks.test.ts +0 -465
  137. package/tests/benchmark/scripts/generate-db.ts +0 -344
  138. package/tests/benchmark/scripts/run-benchmarks.ts +0 -97
  139. package/tests/e2e/http.test.ts +0 -130
  140. package/tests/fixtures/archetypes/TestUserArchetype.ts +0 -21
  141. package/tests/fixtures/components/TestOrder.ts +0 -23
  142. package/tests/fixtures/components/TestProduct.ts +0 -23
  143. package/tests/fixtures/components/TestUser.ts +0 -20
  144. package/tests/fixtures/components/index.ts +0 -6
  145. package/tests/graphql/SchemaGeneration.test.ts +0 -90
  146. package/tests/graphql/builders/ResolverBuilder.test.ts +0 -223
  147. package/tests/graphql/builders/TypeDefBuilder.test.ts +0 -153
  148. package/tests/helpers/MockRedisClient.ts +0 -113
  149. package/tests/helpers/MockRedisStreamServer.ts +0 -448
  150. package/tests/integration/archetype/ArcheType.persistence.test.ts +0 -241
  151. package/tests/integration/cache/CacheInvalidation.test.ts +0 -259
  152. package/tests/integration/entity/Entity.persistence.test.ts +0 -333
  153. package/tests/integration/entity/Entity.saveTimeout.test.ts +0 -110
  154. package/tests/integration/loaders/RequestLoaders.abort.test.ts +0 -82
  155. package/tests/integration/query/Query.abort.test.ts +0 -66
  156. package/tests/integration/query/Query.complexAnalysis.test.ts +0 -557
  157. package/tests/integration/query/Query.edgeCases.test.ts +0 -595
  158. package/tests/integration/query/Query.exec.test.ts +0 -576
  159. package/tests/integration/query/Query.explainAnalyze.test.ts +0 -233
  160. package/tests/integration/query/Query.jsonbArray.test.ts +0 -214
  161. package/tests/integration/remote/dlq.test.ts +0 -175
  162. package/tests/integration/remote/event-dispatch.test.ts +0 -114
  163. package/tests/integration/remote/outbox.test.ts +0 -130
  164. package/tests/integration/remote/rpc.test.ts +0 -177
  165. package/tests/pglite-setup.ts +0 -62
  166. package/tests/setup.ts +0 -164
  167. package/tests/stress/BenchmarkRunner.ts +0 -203
  168. package/tests/stress/DataSeeder.ts +0 -190
  169. package/tests/stress/StressTestReporter.ts +0 -229
  170. package/tests/stress/cursor-perf-test.ts +0 -171
  171. package/tests/stress/fixtures/RealisticComponents.ts +0 -235
  172. package/tests/stress/fixtures/StressTestComponents.ts +0 -58
  173. package/tests/stress/index.ts +0 -7
  174. package/tests/stress/scenarios/query-benchmarks.test.ts +0 -285
  175. package/tests/stress/scenarios/realistic-scenarios.test.ts +0 -1081
  176. package/tests/stress/scenarios/timeout-investigation.test.ts +0 -522
  177. package/tests/unit/BatchLoader.test.ts +0 -196
  178. package/tests/unit/archetype/ArcheType.test.ts +0 -107
  179. package/tests/unit/cache/CacheManager.test.ts +0 -498
  180. package/tests/unit/cache/MemoryCache.test.ts +0 -260
  181. package/tests/unit/cache/RedisCache.test.ts +0 -411
  182. package/tests/unit/database/cancellable.test.ts +0 -81
  183. package/tests/unit/database/instrumentedDb.test.ts +0 -160
  184. package/tests/unit/entity/Entity.components.test.ts +0 -317
  185. package/tests/unit/entity/Entity.drainSideEffects.test.ts +0 -51
  186. package/tests/unit/entity/Entity.reload.test.ts +0 -63
  187. package/tests/unit/entity/Entity.requireComponents.test.ts +0 -72
  188. package/tests/unit/entity/Entity.test.ts +0 -345
  189. package/tests/unit/gql/depthLimit.test.ts +0 -203
  190. package/tests/unit/gql/operationMiddleware.test.ts +0 -293
  191. package/tests/unit/health/Health.test.ts +0 -129
  192. package/tests/unit/middleware/AccessLog.test.ts +0 -37
  193. package/tests/unit/middleware/Middleware.test.ts +0 -98
  194. package/tests/unit/middleware/RequestId.test.ts +0 -54
  195. package/tests/unit/middleware/SecurityHeaders.test.ts +0 -66
  196. package/tests/unit/query/FilterBuilder.test.ts +0 -111
  197. package/tests/unit/query/JsonbArrayBuilder.test.ts +0 -178
  198. package/tests/unit/query/Query.emptyString.test.ts +0 -69
  199. package/tests/unit/query/Query.test.ts +0 -310
  200. package/tests/unit/remote/CircuitBreaker.test.ts +0 -159
  201. package/tests/unit/remote/RemoteError.test.ts +0 -55
  202. package/tests/unit/remote/decorators.test.ts +0 -195
  203. package/tests/unit/remote/metrics.test.ts +0 -115
  204. package/tests/unit/remote/mockRedisStreamServer.test.ts +0 -104
  205. package/tests/unit/scheduler/DistributedLock.test.ts +0 -274
  206. package/tests/unit/scheduler/SchedulerManager.timeBased.test.ts +0 -95
  207. package/tests/unit/schema/schema-integration.test.ts +0 -426
  208. package/tests/unit/schema/schema.test.ts +0 -580
  209. package/tests/unit/storage/S3StorageProvider.test.ts +0 -567
  210. package/tests/unit/upload/RestUpload.test.ts +0 -267
  211. package/tests/unit/validateEnv.test.ts +0 -82
  212. package/tests/utils/entity-tracker.ts +0 -57
  213. package/tests/utils/index.ts +0 -13
  214. package/tests/utils/test-context.ts +0 -149
@@ -1,567 +0,0 @@
1
- import { describe, it, expect, beforeEach, mock } from "bun:test";
2
- import { S3StorageProvider } from "../../../storage/S3StorageProvider";
3
- import type { FileMetadata, UploadConfiguration } from "../../../types/upload.types";
4
-
5
- function createMockS3Client(overrides: Record<string, any> = {}) {
6
- return {
7
- list: mock(async () => ({
8
- contents: [],
9
- isTruncated: false,
10
- keyCount: 0,
11
- maxKeys: 1000,
12
- name: "test-bucket",
13
- })),
14
- write: mock(async () => {}),
15
- delete: mock(async () => {}),
16
- exists: mock(async () => true),
17
- stat: mock(async () => ({
18
- size: 1024,
19
- lastModified: new Date("2026-01-01"),
20
- etag: '"abc123"',
21
- type: "image/png",
22
- })),
23
- file: mock((key: string) => ({
24
- stream: () => new ReadableStream(),
25
- arrayBuffer: async () => new ArrayBuffer(1024),
26
- })),
27
- presign: mock((key: string, opts?: any) => `https://s3.example.com/${key}?signed=true`),
28
- ...overrides,
29
- } as any;
30
- }
31
-
32
- function createTestMetadata(overrides: Partial<FileMetadata> = {}): FileMetadata {
33
- return {
34
- uploadId: "test-upload-id",
35
- fileName: "test-image.png",
36
- originalFileName: "my-photo.png",
37
- mimeType: "image/png",
38
- size: 1024,
39
- extension: ".png",
40
- uploadedAt: new Date().toISOString(),
41
- ...overrides,
42
- };
43
- }
44
-
45
- function createTestConfig(overrides: Partial<UploadConfiguration> = {}): UploadConfiguration {
46
- return {
47
- maxFileSize: 10 * 1024 * 1024,
48
- allowedMimeTypes: ["image/png", "image/jpeg"],
49
- allowedExtensions: [".png", ".jpg"],
50
- validateFileSignature: true,
51
- sanitizeFileName: true,
52
- preserveOriginalName: false,
53
- generateThumbnails: false,
54
- uploadPath: "uploads",
55
- namingStrategy: "uuid",
56
- ...overrides,
57
- };
58
- }
59
-
60
- describe("S3StorageProvider", () => {
61
- describe("constructor", () => {
62
- it("throws if bucket is missing", () => {
63
- const client = createMockS3Client();
64
- expect(
65
- () => new S3StorageProvider({ bucket: "" }, client),
66
- ).toThrow("bucket is required");
67
- });
68
-
69
- it("creates with required config", () => {
70
- const client = createMockS3Client();
71
- const provider = new S3StorageProvider(
72
- { bucket: "my-bucket" },
73
- client,
74
- );
75
- expect(provider.getName()).toBe("s3");
76
- });
77
-
78
- it("applies default config values", () => {
79
- const client = createMockS3Client();
80
- const provider = new S3StorageProvider(
81
- { bucket: "my-bucket" },
82
- client,
83
- );
84
- expect(provider).toBeDefined();
85
- });
86
- });
87
-
88
- describe("initialize", () => {
89
- it("verifies S3 connectivity via list", async () => {
90
- const client = createMockS3Client();
91
- const provider = new S3StorageProvider(
92
- { bucket: "my-bucket" },
93
- client,
94
- );
95
- await provider.initialize();
96
- expect(client.list).toHaveBeenCalledWith({ maxKeys: 1 });
97
- });
98
-
99
- it("throws on connectivity failure", async () => {
100
- const client = createMockS3Client({
101
- list: mock(async () => {
102
- throw new Error("Access Denied");
103
- }),
104
- });
105
- const provider = new S3StorageProvider(
106
- { bucket: "my-bucket" },
107
- client,
108
- );
109
- await expect(provider.initialize()).rejects.toThrow(
110
- "S3 initialization failed: Access Denied",
111
- );
112
- });
113
- });
114
-
115
- describe("store", () => {
116
- it("writes file with correct key and options", async () => {
117
- const client = createMockS3Client();
118
- const provider = new S3StorageProvider(
119
- { bucket: "my-bucket", keyPrefix: "app/" },
120
- client,
121
- );
122
- const metadata = createTestMetadata();
123
- const config = createTestConfig();
124
- const file = new File(["data"], "test.png", { type: "image/png" });
125
-
126
- const result = await provider.store(file, metadata, config);
127
-
128
- expect(client.write).toHaveBeenCalled();
129
- const [key, body, opts] = client.write.mock.calls[0];
130
- expect(key).toBe("app/uploads/test-image.png");
131
- expect(body).toBeInstanceOf(File);
132
- expect(opts.type).toBe("image/png");
133
- expect(opts.acl).toBe("private");
134
- expect(result.path).toBe("app/uploads/test-image.png");
135
- expect(result.url).toBeTypeOf("string");
136
- expect(result.metadata?.bucket).toBe("my-bucket");
137
- });
138
-
139
- it("uses configured acl", async () => {
140
- const client = createMockS3Client();
141
- const provider = new S3StorageProvider(
142
- { bucket: "my-bucket", acl: "public-read" },
143
- client,
144
- );
145
- const file = new File(["data"], "test.png", { type: "image/png" });
146
-
147
- await provider.store(file, createTestMetadata(), createTestConfig());
148
-
149
- const [, , opts] = client.write.mock.calls[0];
150
- expect(opts.acl).toBe("public-read");
151
- });
152
-
153
- it("throws on write failure", async () => {
154
- const client = createMockS3Client({
155
- write: mock(async () => {
156
- throw new Error("Write failed");
157
- }),
158
- });
159
- const provider = new S3StorageProvider(
160
- { bucket: "my-bucket" },
161
- client,
162
- );
163
- const file = new File(["data"], "test.png", { type: "image/png" });
164
-
165
- await expect(
166
- provider.store(file, createTestMetadata(), createTestConfig()),
167
- ).rejects.toThrow("Failed to store file to S3");
168
- });
169
- });
170
-
171
- describe("delete", () => {
172
- it("deletes and returns true on success", async () => {
173
- const client = createMockS3Client();
174
- const provider = new S3StorageProvider(
175
- { bucket: "my-bucket" },
176
- client,
177
- );
178
-
179
- const result = await provider.delete("uploads/file.png");
180
- expect(result).toBe(true);
181
- expect(client.delete).toHaveBeenCalledWith("uploads/file.png");
182
- });
183
-
184
- it("returns false on failure", async () => {
185
- const client = createMockS3Client({
186
- delete: mock(async () => {
187
- throw new Error("Not found");
188
- }),
189
- });
190
- const provider = new S3StorageProvider(
191
- { bucket: "my-bucket" },
192
- client,
193
- );
194
-
195
- const result = await provider.delete("uploads/file.png");
196
- expect(result).toBe(false);
197
- });
198
-
199
- it("sanitizes path traversal attempts", async () => {
200
- const client = createMockS3Client();
201
- const provider = new S3StorageProvider(
202
- { bucket: "my-bucket" },
203
- client,
204
- );
205
-
206
- await provider.delete("../../../etc/passwd");
207
- const [key] = client.delete.mock.calls[0];
208
- expect(key).not.toContain("..");
209
- });
210
- });
211
-
212
- describe("getUrl", () => {
213
- it("returns presigned URL", async () => {
214
- const client = createMockS3Client();
215
- const provider = new S3StorageProvider(
216
- { bucket: "my-bucket" },
217
- client,
218
- );
219
-
220
- const url = await provider.getUrl("uploads/file.png");
221
- expect(url).toContain("uploads/file.png");
222
- expect(client.presign).toHaveBeenCalled();
223
- });
224
- });
225
-
226
- describe("exists", () => {
227
- it("delegates to client.exists", async () => {
228
- const client = createMockS3Client();
229
- const provider = new S3StorageProvider(
230
- { bucket: "my-bucket" },
231
- client,
232
- );
233
-
234
- const result = await provider.exists("uploads/file.png");
235
- expect(result).toBe(true);
236
- expect(client.exists).toHaveBeenCalledWith("uploads/file.png");
237
- });
238
-
239
- it("returns false on error", async () => {
240
- const client = createMockS3Client({
241
- exists: mock(async () => {
242
- throw new Error("Network error");
243
- }),
244
- });
245
- const provider = new S3StorageProvider(
246
- { bucket: "my-bucket" },
247
- client,
248
- );
249
-
250
- const result = await provider.exists("uploads/file.png");
251
- expect(result).toBe(false);
252
- });
253
- });
254
-
255
- describe("getMetadata", () => {
256
- it("returns metadata from stat", async () => {
257
- const client = createMockS3Client();
258
- const provider = new S3StorageProvider(
259
- { bucket: "my-bucket" },
260
- client,
261
- );
262
-
263
- const meta = await provider.getMetadata("uploads/photo.png");
264
- expect(meta).not.toBeNull();
265
- expect(meta!.size).toBe(1024);
266
- expect(meta!.mimeType).toBe("image/png");
267
- expect(meta!.fileName).toBe("photo.png");
268
- expect(meta!.extension).toBe(".png");
269
- });
270
-
271
- it("returns null on error", async () => {
272
- const client = createMockS3Client({
273
- stat: mock(async () => {
274
- throw new Error("Not found");
275
- }),
276
- });
277
- const provider = new S3StorageProvider(
278
- { bucket: "my-bucket" },
279
- client,
280
- );
281
-
282
- const meta = await provider.getMetadata("uploads/missing.png");
283
- expect(meta).toBeNull();
284
- });
285
- });
286
-
287
- describe("list", () => {
288
- it("returns keys from paginated list", async () => {
289
- let callCount = 0;
290
- const client = createMockS3Client({
291
- list: mock(async () => {
292
- callCount++;
293
- if (callCount === 1) {
294
- return {
295
- contents: [
296
- { key: "uploads/a.png", size: 100 },
297
- { key: "uploads/b.png", size: 200 },
298
- ],
299
- isTruncated: true,
300
- nextContinuationToken: "page2",
301
- keyCount: 2,
302
- maxKeys: 1000,
303
- name: "test-bucket",
304
- };
305
- }
306
- return {
307
- contents: [{ key: "uploads/c.png", size: 300 }],
308
- isTruncated: false,
309
- keyCount: 1,
310
- maxKeys: 1000,
311
- name: "test-bucket",
312
- };
313
- }),
314
- });
315
- const provider = new S3StorageProvider(
316
- { bucket: "my-bucket" },
317
- client,
318
- );
319
-
320
- const keys = await provider.list("uploads");
321
- expect(keys).toEqual([
322
- "uploads/a.png",
323
- "uploads/b.png",
324
- "uploads/c.png",
325
- ]);
326
- expect(client.list).toHaveBeenCalledTimes(2);
327
- });
328
-
329
- it("returns empty array on error", async () => {
330
- const client = createMockS3Client({
331
- list: mock(async () => {
332
- throw new Error("Forbidden");
333
- }),
334
- });
335
- const provider = new S3StorageProvider(
336
- { bucket: "my-bucket" },
337
- client,
338
- );
339
-
340
- const keys = await provider.list("uploads");
341
- expect(keys).toEqual([]);
342
- });
343
- });
344
-
345
- describe("getStream", () => {
346
- it("returns a ReadableStream from S3File", async () => {
347
- const client = createMockS3Client();
348
- const provider = new S3StorageProvider(
349
- { bucket: "my-bucket" },
350
- client,
351
- );
352
-
353
- const stream = await provider.getStream("uploads/file.png");
354
- expect(stream).toBeInstanceOf(ReadableStream);
355
- expect(client.file).toHaveBeenCalledWith("uploads/file.png");
356
- });
357
- });
358
-
359
- describe("copy", () => {
360
- it("reads source and writes to destination", async () => {
361
- const client = createMockS3Client();
362
- const provider = new S3StorageProvider(
363
- { bucket: "my-bucket" },
364
- client,
365
- );
366
-
367
- const result = await provider.copy(
368
- "uploads/src.png",
369
- "uploads/dst.png",
370
- );
371
- expect(result).toBe(true);
372
- expect(client.file).toHaveBeenCalledWith("uploads/src.png");
373
- expect(client.stat).toHaveBeenCalledWith("uploads/src.png");
374
- expect(client.write).toHaveBeenCalled();
375
- const [destKey] = client.write.mock.calls[0];
376
- expect(destKey).toBe("uploads/dst.png");
377
- });
378
-
379
- it("returns false on failure", async () => {
380
- const client = createMockS3Client({
381
- stat: mock(async () => {
382
- throw new Error("Stat failed");
383
- }),
384
- });
385
- const provider = new S3StorageProvider(
386
- { bucket: "my-bucket" },
387
- client,
388
- );
389
-
390
- const result = await provider.copy("src.png", "dst.png");
391
- expect(result).toBe(false);
392
- });
393
- });
394
-
395
- describe("move", () => {
396
- it("copies then deletes source", async () => {
397
- const client = createMockS3Client();
398
- const provider = new S3StorageProvider(
399
- { bucket: "my-bucket" },
400
- client,
401
- );
402
-
403
- const result = await provider.move(
404
- "uploads/src.png",
405
- "uploads/dst.png",
406
- );
407
- expect(result).toBe(true);
408
- expect(client.write).toHaveBeenCalled();
409
- expect(client.delete).toHaveBeenCalledWith("uploads/src.png");
410
- });
411
-
412
- it("returns false if copy fails", async () => {
413
- const client = createMockS3Client({
414
- stat: mock(async () => {
415
- throw new Error("Stat failed");
416
- }),
417
- });
418
- const provider = new S3StorageProvider(
419
- { bucket: "my-bucket" },
420
- client,
421
- );
422
-
423
- const result = await provider.move("src.png", "dst.png");
424
- expect(result).toBe(false);
425
- expect(client.delete).not.toHaveBeenCalled();
426
- });
427
- });
428
-
429
- describe("getStats", () => {
430
- it("sums files and sizes from list", async () => {
431
- const client = createMockS3Client({
432
- list: mock(async () => ({
433
- contents: [
434
- { key: "a.png", size: 100 },
435
- { key: "b.png", size: 200 },
436
- ],
437
- isTruncated: false,
438
- keyCount: 2,
439
- maxKeys: 1000,
440
- name: "test-bucket",
441
- })),
442
- });
443
- const provider = new S3StorageProvider(
444
- { bucket: "my-bucket" },
445
- client,
446
- );
447
-
448
- const stats = await provider.getStats();
449
- expect(stats.totalFiles).toBe(2);
450
- expect(stats.totalSize).toBe(300);
451
- });
452
- });
453
-
454
- describe("cleanup", () => {
455
- it("is a no-op that resolves", async () => {
456
- const client = createMockS3Client();
457
- const provider = new S3StorageProvider(
458
- { bucket: "my-bucket" },
459
- client,
460
- );
461
- await expect(provider.cleanup()).resolves.toBeUndefined();
462
- });
463
- });
464
-
465
- describe("resolveKey with keyPrefix", () => {
466
- it("prepends keyPrefix when missing from path", async () => {
467
- const client = createMockS3Client();
468
- const provider = new S3StorageProvider(
469
- { bucket: "my-bucket", keyPrefix: "app/" },
470
- client,
471
- );
472
-
473
- await provider.delete("uploads/file.png");
474
- const [key] = client.delete.mock.calls[0];
475
- expect(key).toBe("app/uploads/file.png");
476
- });
477
-
478
- it("does not double-prefix when path already has prefix", async () => {
479
- const client = createMockS3Client();
480
- const provider = new S3StorageProvider(
481
- { bucket: "my-bucket", keyPrefix: "app/" },
482
- client,
483
- );
484
-
485
- await provider.delete("app/uploads/file.png");
486
- const [key] = client.delete.mock.calls[0];
487
- expect(key).toBe("app/uploads/file.png");
488
- });
489
-
490
- it("normalizes keyPrefix to add trailing slash", () => {
491
- const client = createMockS3Client();
492
- const provider = new S3StorageProvider(
493
- { bucket: "my-bucket", keyPrefix: "app" },
494
- client,
495
- );
496
-
497
- // Verify via a store call that the key is correctly prefixed
498
- const file = new File(["data"], "test.png", { type: "image/png" });
499
- provider.store(file, createTestMetadata(), createTestConfig());
500
- const [key] = client.write.mock.calls[0];
501
- expect(key).toStartWith("app/");
502
- });
503
- });
504
-
505
- describe("config validation", () => {
506
- it("throws if presignExpiry is zero or negative", () => {
507
- const client = createMockS3Client();
508
- expect(
509
- () => new S3StorageProvider({ bucket: "my-bucket", presignExpiry: 0 }, client),
510
- ).toThrow("presignExpiry must be positive");
511
- });
512
-
513
- it("throws if publicPresignExpiry is zero or negative", () => {
514
- const client = createMockS3Client();
515
- expect(
516
- () => new S3StorageProvider({ bucket: "my-bucket", publicPresignExpiry: -1 }, client),
517
- ).toThrow("publicPresignExpiry must be positive");
518
- });
519
- });
520
-
521
- describe("sanitizePath security", () => {
522
- it("prevents nested path traversal bypass (....//)", async () => {
523
- const client = createMockS3Client();
524
- const provider = new S3StorageProvider(
525
- { bucket: "my-bucket" },
526
- client,
527
- );
528
-
529
- await provider.delete("....//....//etc/passwd");
530
- const [key] = client.delete.mock.calls[0];
531
- // After iterative sanitization, no ".." sequences should remain
532
- expect(key).not.toContain("..");
533
- });
534
-
535
- it("handles deeply nested traversal patterns", async () => {
536
- const client = createMockS3Client();
537
- const provider = new S3StorageProvider(
538
- { bucket: "my-bucket" },
539
- client,
540
- );
541
-
542
- await provider.delete("......///secret/file.txt");
543
- const [key] = client.delete.mock.calls[0];
544
- expect(key).not.toContain("..");
545
- });
546
- });
547
-
548
- describe("store error cleanup", () => {
549
- it("attempts to delete key on write failure", async () => {
550
- const client = createMockS3Client({
551
- write: mock(async () => {
552
- throw new Error("Write failed");
553
- }),
554
- });
555
- const provider = new S3StorageProvider(
556
- { bucket: "my-bucket" },
557
- client,
558
- );
559
- const file = new File(["data"], "test.png", { type: "image/png" });
560
-
561
- await expect(
562
- provider.store(file, createTestMetadata(), createTestConfig()),
563
- ).rejects.toThrow("Failed to store file to S3");
564
- expect(client.delete).toHaveBeenCalled();
565
- });
566
- });
567
- });