millas 0.2.32 → 0.2.33

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "millas",
-  "version": "0.2.32",
+  "version": "0.2.33",
   "description": "A modern batteries-included backend framework for Node.js — built on Express, inspired by Laravel, Django, and FastAPI",
   "main": "src/index.js",
   "exports": {

package/src/http/MillasResponse.js

@@ -197,13 +197,50 @@ class MillasResponse {
     });
   }
 
-  /** File download / serve response */
-  static file(filePath, { download = false, name = null, headers = {} } = {}) {
+  /** File download / serve response.
+   *
+   * filePath can be:
+   *   - string  — path on disk
+   *   - Buffer  — in-memory buffer (requires mimetype)
+   *   - Readable — Node stream (requires mimetype)
+   *
+   * Options:
+   *   download    {boolean}        — force Content-Disposition: attachment
+   *   name        {string}         — filename for Content-Disposition
+   *   mimetype    {string}         — override Content-Type
+   *   maxAge      {number}         — Cache-Control max-age in seconds
+   *   lastModified {Date|string}   — override Last-Modified header
+   */
+  static file(filePath, { download = false, name = null, mimetype = null, maxAge = null, lastModified = null, headers = {} } = {}) {
+    const isBuffer   = Buffer.isBuffer(filePath);
+    const isStream   = filePath && typeof filePath.pipe === 'function';
+    const isInMemory = isBuffer || isStream;
+
+    const extraHeaders = {};
+    if (mimetype) extraHeaders['Content-Type'] = mimetype;
+    if (maxAge !== null) extraHeaders['Cache-Control'] = `public, max-age=${maxAge}`;
+    if (lastModified) extraHeaders['Last-Modified'] = new Date(lastModified).toUTCString();
+    if (download || name) {
+      extraHeaders['Content-Disposition'] =
+        `attachment; filename="${name || (typeof filePath === 'string' ? require('path').basename(filePath) : 'download')}"` ;
+    }
+
+    if (isInMemory) {
+      const { Readable } = require('stream');
+      const readable = isBuffer ? Readable.from(filePath) : filePath;
+      return new MillasResponse({
+        type: 'stream',
+        body: readable,
+        status: 200,
+        headers: { ...extraHeaders, ...headers },
+      });
+    }
+
     return new MillasResponse({
       type: 'file',
-      body: { path: filePath, download, name },
+      body: { path: filePath, download, name, mimetype, maxAge, lastModified },
       status: 200,
-      headers,
+      headers: { ...extraHeaders, ...headers },
     });
   }
 

package/src/http/adapters/ExpressAdapter.js

@@ -211,14 +211,17 @@ class ExpressAdapter extends HttpAdapter {
                 return expressRes.end();
 
             case 'file': {
-                const {path: filePath, download, name: fileName} = body;
+                const { path: filePath, download, name: fileName, mimetype } = body;
+                const sendOpts = {};
+                if (mimetype) expressRes.setHeader('Content-Type', mimetype);
                 if (download) {
                     return expressRes.download(
                         filePath,
-                        fileName || require('path').basename(filePath)
+                        fileName || require('path').basename(filePath),
+                        sendOpts
                     );
                 }
-                return expressRes.sendFile(require('path').resolve(filePath));
+                return expressRes.sendFile(require('path').resolve(filePath), sendOpts);
             }
 
             case 'view': {

package/src/http/helpers.js

@@ -46,16 +46,21 @@ function text(content, options = {}) {
 
 /**
  * Serve a file.
- * The path is automatically validated against app.storageRoot (config/app.js).
+ *
+ * filePath can be a string path, Buffer, or Readable stream.
+ * String paths are validated against app.storageRoot (config/app.js).
  * Any path that escapes the storage root throws a 403.
+ *
+ * Options: download, name, mimetype, maxAge, lastModified
  */
 function file(filePath, options = {}) {
-  const { resolveStoragePath, SafeFilePath } = require('./SafeFilePath');
-  const root = SafeFilePath.getStorageRoot();
-  if (root) {
-    // Throws PathTraversalError (403) if path escapes root
-    const safe = resolveStoragePath(filePath, root);
-    return MillasResponse.file(safe, options);
+  if (typeof filePath === 'string') {
+    const { resolveStoragePath, SafeFilePath } = require('./SafeFilePath');
+    const root = SafeFilePath.getStorageRoot();
+    if (root) {
+      const safe = resolveStoragePath(filePath, root);
+      return MillasResponse.file(safe, options);
+    }
   }
   return MillasResponse.file(filePath, options);
 }