r2-explorer 1.0.6 → 1.1.0

package/dist/index.mjs

@@ -1 +1,771 @@
-import{createCors as e}from"itty-router";import{OpenAPIRoute as t,Path as a,Query as s,RequestBody as o,Int as r,OpenAPIRouter as n}from"@cloudflare/itty-router-openapi";import{z as c}from"zod";const i=!0,u=!1,d="1.0.6";class p extends t{static schema={operationId:"get-bucket-list-objects",tags:["Buckets"],summary:"List objects",parameters:{bucket:a(String),limit:s(Number,{required:!1}),prefix:s(c.string().optional().describe("base64 encoded prefix")),cursor:s(c.string().optional()),delimiter:s(c.string().optional()),include:s(c.string().array().optional())}};async handle(e,t,a,s){const o=t[s.params.bucket];return await o.list({limit:s.query.limit,prefix:s.query.prefix?decodeURIComponent(escape(atob(s.query.prefix))):void 0,cursor:s.query.cursor,delimiter:s.query.delimiter,include:s.query.include})}}class l extends t{static schema={operationId:"post-bucket-move-object",tags:["Buckets"],summary:"Move object",parameters:{bucket:a(String)},requestBody:{oldKey:c.string().describe("base64 encoded file key"),newKey:c.string().describe("base64 encoded file key")}};async handle(e,t,a,s){if(!0===a.config.readonly)return Response.json({msg:"unauthorized"},{status:401});const o=t[s.params.bucket],r=decodeURIComponent(escape(atob(s.body.oldKey))),n=decodeURIComponent(escape(atob(s.body.newKey))),c=await o.get(r),i=await o.put(n,c.body,{customMetadata:c.customMetadata,httpMetadata:c.httpMetadata});return await o.delete(r),i}}class m extends t{static schema={operationId:"post-bucket-create-folder",tags:["Buckets"],summary:"Create folder",parameters:{bucket:a(String)},requestBody:{key:c.string().describe("base64 encoded file key")}};async handle(e,t,a,s){if(!0===a.config.readonly)return Response.json({msg:"unauthorized"},{status:401});const o=t[s.params.bucket],r=decodeURIComponent(escape(atob(s.body.key)));return await o.put(r,"R2 Explorer Folder")}}class y extends t{static schema={operationId:"post-bucket-upload-object",tags:["Buckets"],summary:"Upload object",requestBody:new o({content:{"application/octet-stream":{schema:{type:"string",format:"binary"}}}}),parameters:{bucket:a(String),key:s(c.string().describe("base64 encoded file key")),customMetadata:s(c.string().optional().describe("base64 encoded json string")),httpMetadata:s(c.string().optional().describe("base64 encoded json string"))}};async handle(e,t,a,s){if(!0===a.config.readonly)return Response.json({msg:"unauthorized"},{status:401});const o=t[s.params.bucket];let r,n,c=decodeURIComponent(escape(atob(s.query.key)));return s.query.customMetadata&&(r=JSON.parse(decodeURIComponent(escape(atob(s.query.customMetadata))))),s.query.httpMetadata&&(n=JSON.parse(decodeURIComponent(escape(atob(s.query.httpMetadata))))),await o.put(c,e.body,{customMetadata:r,httpMetadata:n})}}class b extends t{static schema={operationId:"post-bucket-delete-object",tags:["Buckets"],summary:"Delete object",parameters:{bucket:a(String)},requestBody:{key:c.string().describe("base64 encoded file key")}};async handle(e,t,a,s){if(!0===a.config.readonly)return Response.json({msg:"unauthorized"},{status:401});const o=t[s.params.bucket],r=decodeURIComponent(escape(atob(s.body.key)));return await o.delete(r),{}}}class g extends t{static schema={operationId:"post-multipart-create-upload",tags:["Multipart"],summary:"Create upload",parameters:{bucket:a(String),key:s(c.string().describe("base64 encoded file key")),customMetadata:s(c.string().optional().describe("base64 encoded json string")),httpMetadata:s(c.string().optional().describe("base64 encoded json string"))}};async handle(e,t,a,s){if(!0===a.config.readonly)return Response.json({msg:"unauthorized"},{status:401});const o=t[s.params.bucket],r=decodeURIComponent(escape(atob(s.query.key)));let n,c;return s.query.customMetadata&&(n=JSON.parse(decodeURIComponent(escape(atob(s.query.customMetadata))))),s.query.httpMetadata&&(c=JSON.parse(decodeURIComponent(escape(atob(s.query.httpMetadata))))),await o.createMultipartUpload(r,{customMetadata:n,httpMetadata:c})}}class f extends t{static schema={operationId:"post-multipart-part-upload",tags:["Multipart"],summary:"Part upload",requestBody:new o({content:{"application/octet-stream":{schema:{type:"string",format:"binary"}}}}),parameters:{bucket:a(String),key:s(c.string().describe("base64 encoded file key")),uploadId:s(String),partNumber:s(r)}};async handle(e,t,a,s){if(!0===a.config.readonly)return Response.json({msg:"unauthorized"},{status:401});const o=t[s.params.bucket],r=decodeURIComponent(escape(atob(s.query.key))),n=o.resumeMultipartUpload(r,s.query.uploadId);try{return await n.uploadPart(s.query.partNumber,e.body)}catch(e){return new Response(e.message,{status:400})}}}class h extends t{static schema={operationId:"post-multipart-complete-upload",tags:["Multipart"],summary:"Complete upload",parameters:{bucket:a(String)},requestBody:{uploadId:String,key:c.string().describe("base64 encoded file key"),parts:[{etag:String,partNumber:r}]}};async handle(e,t,a,s){if(!0===a.config.readonly)return Response.json({msg:"unauthorized"},{status:401});const o=t[s.params.bucket],r=s.body.uploadId,n=decodeURIComponent(escape(atob(s.body.key))),c=s.body.parts,i=await o.resumeMultipartUpload(n,r);try{return{success:!0,str:await i.complete(c)}}catch(e){return Response.json({msg:e.message},{status:400})}}}class k extends t{static schema={operationId:"get-bucket-object",tags:["Buckets"],summary:"Get Object",parameters:{bucket:a(String),key:a(c.string().describe("base64 encoded file key"))},responses:{200:{description:"File binary",schema:c.string().openapi({format:"binary"})}}};async handle(e,t,a,s){const o=t[s.params.bucket],r=decodeURIComponent(escape(atob(s.params.key))),n=await o.get(r);if(null===n)return Response.json({msg:"Object Not Found"},{status:404});const c=new Headers;return n.writeHttpMetadata(c),c.set("etag",n.httpEtag),c.set("Content-Disposition",`attachment; filename="${r.split("/").pop()}"`),new Response(n.body,{headers:c})}}class w extends t{static schema={operationId:"Head-bucket-object",tags:["Buckets"],summary:"Get Object",parameters:{bucket:a(String),key:s(c.string().describe("base64 encoded file key"))}};async handle(e,t,a,s){const o=t[s.params.bucket],r=decodeURIComponent(escape(atob(s.params.key))),n=await o.head(r);return null===n?Response.json({msg:"Object Not Found"},{status:404}):n}}class j extends t{static schema={operationId:"post-bucket-put-object-metadata",tags:["Buckets"],summary:"Update object metadata",parameters:{bucket:a(String),key:a(c.string().describe("base64 encoded file key"))},requestBody:{customMetadata:c.record(c.string(),c.any())}};async handle(e,t,a,s){if(!0===a.config.readonly)return Response.json({msg:"unauthorized"},{status:401});const o=t[s.params.bucket],r=decodeURIComponent(escape(atob(s.params.key))),n=await o.get(r);return await o.put(r,n.body,{customMetadata:s.body.customMetadata})}}const R=n({base:"/api/buckets",raiseUnknownParameters:i,generateOperationIds:u});R.get("",class extends t{static schema={operationId:"get-bucket-list",tags:["Buckets"],summary:"List buckets"};async handle(e,t,a,s){const o=[];for(const[e,a]of Object.entries(t))a.get&&a.put&&o.push({name:e});return{buckets:o}}}),R.get("/:bucket",p),R.post("/:bucket/move",l),R.post("/:bucket/folder",m),R.post("/:bucket/upload",y),R.post("/:bucket/multipart/create",g),R.post("/:bucket/multipart/upload",f),R.post("/:bucket/multipart/complete",h),R.post("/:bucket/delete",b),R.head("/:bucket/:key",w),R.get("/:bucket/:key",k),R.post("/:bucket/:key",j);let I={},x=0;function M(e){return`https://${e}.cloudflareaccess.com`}async function C(e,t,a){let s=!1;try{s=await async function(e,t){const a=function(e){const t=e.headers.get("cf-access-jwt-assertion");if(!t)return null;return t.trim()}(e);if(null===a)return!1;(0===Object.keys(I).length||Math.floor(Date.now()/1e3)<x)&&(I=await async function(e){let t=`${M(e.cfAccessTeamName)}/cdn-cgi/access/certs`;const a=await fetch(t,{method:"GET",cf:{cacheTtlByStatus:{"200-299":30,"300-599":0}},headers:{"Content-Type":"application/json; charset=UTF-8"}}),s=await a.json();x=Math.floor(Date.now()/1e3)+3600;const o={};for(const e of s.keys)o[e.kid]=await crypto.subtle.importKey("jwk",e,{name:"RSASSA-PKCS1-v1_5",hash:"SHA-256"},!1,["verify"]);return o}(t));let s;try{s=function(e){const t=e.split("."),a=JSON.parse(atob(t[0])),s=JSON.parse(atob(t[1])),o=atob(t[2].replace(/_/g,"/").replace(/-/g,"+"));return{header:a,payload:s,signature:o,raw:{header:t[0],payload:t[1],signature:t[2]}}}(a)}catch(e){return!1}const o=new Date(1e3*s.payload.exp),r=new Date(Date.now());if(o<=r)return console.log("expired token"),!1;if(s.payload?.iss!==M(t.cfAccessTeamName))return console.log("invalid access signer"),!1;if(!async function(e){const t=(new TextEncoder).encode([e.raw.header,e.raw.payload].join(".")),a=new Uint8Array(Array.from(e.signature).map((e=>e.charCodeAt(0))));for(const e of Object.values(I)){if(await S(e,a,t))return!0}return!1}(s))return!1;return s}(e,a.config)}catch(e){}if(!1===s)return Response.json({success:!1,errors:[{code:1e4,message:"Authentication error! Verify that the Cloudflare Access Team name is correct"}]},{status:401});a.username=s.payload.email}async function S(e,t,a){return crypto.subtle.verify("RSASSA-PKCS1-v1_5",e,t,a)}async function U(e,t,a){const s=caches.default;let o,r=new URL(e.url).pathname;if(r.includes(".")||(r="/"),!1!==a.config.cacheAssets&&(o=await s.match(e),o))return o;let n="https://demo.r2explorer.dev";a.config?.dashboardUrl&&(n=a.config.dashboardUrl.endsWith("/")?a.config.dashboardUrl.slice(0,-1):a.config.dashboardUrl);const c=await fetch(`${n}${r}`);return o=new Response(await c.body,{status:c.status,headers:{"Content-Type":c.headers.get("Content-Type"),"Access-Control-Allow-Origin":"*","Cache-Control":"max-age: 300"}}),200===c.status&&!1!==a.config.cacheAssets&&a.executionContext.waitUntil(s.put(e,o.clone())),o}const A=require("postal-mime/dist/node").postalMime.default;async function q(e,t,a){let s;if(a.config?.emailRouting?.targetBucket&&t[a.config.emailRouting.targetBucket]&&(s=t[a.config.emailRouting.targetBucket]),!s)for(const[e,a]of Object.entries(t))if(a.get&&a.put){s=a;break}const o=await async function(e,t){let a=new Uint8Array(t),s=0;const o=e.getReader();for(;;){const{done:e,value:t}=await o.read();if(e)break;a.set(t,s),s+=t.length}return a}(e.raw,e.rawSize),r=new A,n=await r.parse(o),c=`${Math.floor(Date.now())}-${crypto.randomUUID()}`;await s.put(`.r2-explorer/emails/inbox/${c}.json`,JSON.stringify(n),{customMetadata:{subject:n.subject,from_address:n.from?.address,from_name:n.from?.name,to_address:n.to.length>0?n.to[0].address:null,to_name:n.to.length>0?n.to[0].name:null,has_attachments:n.attachments.length>0,read:!1,timestamp:Date.now()}});for(const e of n.attachments)await s.put(`.r2-explorer/emails/inbox/${c}/${e.filename}`,e.content)}const B=n({base:"/api/server",raiseUnknownParameters:i,generateOperationIds:u});async function v(e,t,a){let s,o=!1;try{o=function(e){const t=e.headers.get("Authorization");if(!t)return null;return atob(t.replace("Basic","").trim())}(e).split(":"),Array.isArray(a.config.basicAuth)||(a.config.basicAuth=[a.config.basicAuth]);for(const e of a.config.basicAuth)if(e.username===o[0]&&e.password===o[1]){s=e.username;break}}catch(e){}if(!1===o||void 0===s)return Response.json({success:!1,errors:[{code:1e4,message:"Authentication error! This server requires Basic Auth"}]},{status:401});a.username=s}function O(t){!1!==(t=t||{}).readonly&&(t.readonly=!0);const a={info:{title:"R2 Explorer API",version:d}};t.basicAuth&&(a.security=[{basicAuth:[]}]);const s=n({schema:a}),{preflight:o,corsify:r}=e();return!0===t.cors&&s.all("/api*",o),t.cfAccessTeamName&&s.all("*",C),t.basicAuth&&(s.registry.registerComponent("securitySchemes","basicAuth",{type:"http",scheme:"basic"}),s.all("/api*",v)),s.all("/api/server/*",B),s.all("/api/buckets/*",R),s.original.get("*",U),s.all("*",(()=>Response.json({msg:"404, not found!"},{status:404}))),{async email(e,a,s){await q(e,a,{executionContext:s,config:t})},async fetch(e,a,o){let n=await s.handle(e,a,{executionContext:o,config:t});return!0===t.cors&&(n=r(n)),n}}}B.get("/config",class extends t{static schema={operationId:"get-server-info",tags:["Server"],summary:"Get server info"};async handle(e,t,a,s){const o={...a.config};return delete o.basicAuth,{version:d,config:o,user:{username:a.username}}}});export{O as R2Explorer};
+// src/index.ts
+import { cloudflareAccess } from "@hono/cloudflare-access";
+import {
+  extendZodWithOpenApi,
+  fromHono
+} from "chanfana";
+import { Hono } from "hono";
+import { basicAuth } from "hono/basic-auth";
+import { cors } from "hono/cors";
+import { z as z13 } from "zod";
+
+// src/foundation/middlewares/readonly.ts
+async function readOnlyMiddleware(c, next) {
+  const config = c.get("config");
+  if (config.readonly === true && !["GET", "HEAD"].includes(c.req.method)) {
+    return Response.json(
+      {
+        success: false,
+        errors: [
+          {
+            code: 10005,
+            message: "This instance is in ReadOnly Mode, no changes are allowed!"
+          }
+        ]
+      },
+      { status: 401 }
+    );
+  }
+  await next();
+}
+
+// package.json
+var version = "1.1.0";
+
+// src/foundation/settings.ts
+var settings = {
+  version
+};
+
+// src/modules/buckets/createFolder.ts
+import { OpenAPIRoute } from "chanfana";
+import { z } from "zod";
+var CreateFolder = class extends OpenAPIRoute {
+  schema = {
+    operationId: "post-bucket-create-folder",
+    tags: ["Buckets"],
+    summary: "Create folder",
+    request: {
+      params: z.object({
+        bucket: z.string()
+      }),
+      body: {
+        content: {
+          "application/json": {
+            schema: z.object({
+              key: z.string().describe("base64 encoded file key")
+            })
+          }
+        }
+      }
+    }
+  };
+  async handle(c) {
+    const data = await this.getValidatedData();
+    const bucket = c.env[data.params.bucket];
+    const key = decodeURIComponent(escape(atob(data.body.key)));
+    return await bucket.put(key, "R2 Explorer Folder");
+  }
+};
+
+// src/modules/buckets/deleteObject.ts
+import { OpenAPIRoute as OpenAPIRoute2 } from "chanfana";
+import { z as z2 } from "zod";
+var DeleteObject = class extends OpenAPIRoute2 {
+  schema = {
+    operationId: "post-bucket-delete-object",
+    tags: ["Buckets"],
+    summary: "Delete object",
+    request: {
+      params: z2.object({
+        bucket: z2.string()
+      }),
+      body: {
+        content: {
+          "application/json": {
+            schema: z2.object({
+              key: z2.string().describe("base64 encoded file key")
+            })
+          }
+        }
+      }
+    }
+  };
+  async handle(c) {
+    const data = await this.getValidatedData();
+    const bucket = c.env[data.params.bucket];
+    const key = decodeURIComponent(escape(atob(data.body.key)));
+    await bucket.delete(key);
+    return { success: true };
+  }
+};
+
+// src/modules/buckets/getObject.ts
+import { OpenAPIRoute as OpenAPIRoute3 } from "chanfana";
+import { z as z3 } from "zod";
+var GetObject = class extends OpenAPIRoute3 {
+  schema = {
+    operationId: "get-bucket-object",
+    tags: ["Buckets"],
+    summary: "Get Object",
+    request: {
+      params: z3.object({
+        bucket: z3.string(),
+        key: z3.string().describe("base64 encoded file key")
+      })
+    },
+    responses: {
+      "200": {
+        description: "File binary",
+        schema: z3.string().openapi({ format: "binary" })
+      }
+    }
+  };
+  async handle(c) {
+    const data = await this.getValidatedData();
+    const bucket = c.env[data.params.bucket];
+    let filePath;
+    try {
+      filePath = decodeURIComponent(escape(atob(data.params.key)));
+    } catch (e) {
+      filePath = decodeURIComponent(
+        escape(atob(decodeURIComponent(data.params.key)))
+      );
+    }
+    const object = await bucket.get(filePath);
+    if (object === null) {
+      return Response.json({ msg: "Object Not Found" }, { status: 404 });
+    }
+    const headers = new Headers();
+    object.writeHttpMetadata(headers);
+    headers.set("etag", object.httpEtag);
+    headers.set(
+      "Content-Disposition",
+      `attachment; filename="${filePath.split("/").pop()}"`
+    );
+    return new Response(object.body, {
+      headers
+    });
+  }
+};
+
+// src/modules/buckets/headObject.ts
+import { OpenAPIRoute as OpenAPIRoute4 } from "chanfana";
+import { z as z4 } from "zod";
+var HeadObject = class extends OpenAPIRoute4 {
+  schema = {
+    operationId: "Head-bucket-object",
+    tags: ["Buckets"],
+    summary: "Get Object",
+    request: {
+      params: z4.object({
+        bucket: z4.string(),
+        key: z4.string().describe("base64 encoded file key")
+      })
+    }
+  };
+  async handle(c) {
+    const data = await this.getValidatedData();
+    const bucket = c.env[data.params.bucket];
+    let filePath;
+    try {
+      filePath = decodeURIComponent(escape(atob(data.params.key)));
+    } catch (e) {
+      filePath = decodeURIComponent(
+        escape(atob(decodeURIComponent(data.params.key)))
+      );
+    }
+    const object = await bucket.head(filePath);
+    if (object === null) {
+      return Response.json({ msg: "Object Not Found" }, { status: 404 });
+    }
+    return object;
+  }
+};
+
+// src/modules/buckets/listBuckets.ts
+import { OpenAPIRoute as OpenAPIRoute5 } from "chanfana";
+var ListBuckets = class extends OpenAPIRoute5 {
+  schema = {
+    operationId: "get-bucket-list",
+    tags: ["Buckets"],
+    summary: "List buckets"
+  };
+  async handle(c) {
+    const buckets = [];
+    for (const [key, value] of Object.entries(c.env)) {
+      if (value.get && value.put && value.get.toString().includes("function") && value.put.toString().includes("function")) {
+        buckets.push({ name: key });
+      }
+    }
+    return {
+      buckets
+    };
+  }
+};
+
+// src/modules/buckets/listObjects.ts
+import { OpenAPIRoute as OpenAPIRoute6 } from "chanfana";
+import { z as z5 } from "zod";
+var ListObjects = class extends OpenAPIRoute6 {
+  schema = {
+    operationId: "get-bucket-list-objects",
+    tags: ["Buckets"],
+    summary: "List objects",
+    request: {
+      params: z5.object({
+        bucket: z5.string()
+      }),
+      query: z5.object({
+        limit: z5.number().optional(),
+        prefix: z5.string().nullable().optional().describe("base64 encoded prefix"),
+        cursor: z5.string().nullable().optional(),
+        delimiter: z5.string().nullable().optional(),
+        startAfter: z5.string().nullable().optional(),
+        include: z5.enum(["httpMetadata", "customMetadata"]).array().optional()
+      })
+    }
+  };
+  async handle(c) {
+    const data = await this.getValidatedData();
+    const bucket = c.env[data.params.bucket];
+    c.header("Access-Control-Allow-Credentials", "asads");
+    return await bucket.list({
+      limit: data.query.limit,
+      prefix: data.query.prefix ? decodeURIComponent(escape(atob(data.query.prefix))) : void 0,
+      cursor: data.query.cursor,
+      startAfter: data.query.startAfter,
+      delimiter: data.query.delimiter ? data.query.delimiter : "",
+      // @ts-ignore
+      include: data.query.include
+    });
+  }
+};
+
+// src/modules/buckets/moveObject.ts
+import { OpenAPIRoute as OpenAPIRoute7 } from "chanfana";
+import { z as z6 } from "zod";
+var MoveObject = class extends OpenAPIRoute7 {
+  schema = {
+    operationId: "post-bucket-move-object",
+    tags: ["Buckets"],
+    summary: "Move object",
+    request: {
+      params: z6.object({
+        bucket: z6.string()
+      }),
+      body: {
+        content: {
+          "application/json": {
+            schema: z6.object({
+              oldKey: z6.string().describe("base64 encoded file key"),
+              newKey: z6.string().describe("base64 encoded file key")
+            })
+          }
+        }
+      }
+    }
+  };
+  async handle(c) {
+    const data = await this.getValidatedData();
+    const bucket = c.env[data.params.bucket];
+    const oldKey = decodeURIComponent(escape(atob(data.body.oldKey)));
+    const newKey = decodeURIComponent(escape(atob(data.body.newKey)));
+    const object = await bucket.get(oldKey);
+    const resp = await bucket.put(newKey, object.body, {
+      customMetadata: object.customMetadata,
+      httpMetadata: object.httpMetadata
+    });
+    await bucket.delete(oldKey);
+    return resp;
+  }
+};
+
+// src/modules/buckets/multipart/completeUpload.ts
+import { OpenAPIRoute as OpenAPIRoute8 } from "chanfana";
+import { z as z7 } from "zod";
+var CompleteUpload = class extends OpenAPIRoute8 {
+  schema = {
+    operationId: "post-multipart-complete-upload",
+    tags: ["Multipart"],
+    summary: "Complete upload",
+    request: {
+      params: z7.object({
+        bucket: z7.string()
+      }),
+      body: {
+        content: {
+          "application/json": {
+            schema: z7.object({
+              uploadId: z7.string(),
+              parts: z7.object({
+                etag: z7.string(),
+                partNumber: z7.number().int()
+              }).array(),
+              key: z7.string().describe("base64 encoded file key")
+            })
+          }
+        }
+      }
+    }
+  };
+  async handle(c) {
+    const data = await this.getValidatedData();
+    const bucket = c.env[data.params.bucket];
+    const uploadId = data.body.uploadId;
+    const key = decodeURIComponent(escape(atob(data.body.key)));
+    const parts = data.body.parts;
+    const multipartUpload = await bucket.resumeMultipartUpload(key, uploadId);
+    try {
+      const resp = await multipartUpload.complete(parts);
+      return {
+        success: true,
+        str: resp
+      };
+    } catch (error) {
+      return Response.json({ msg: error.message }, { status: 400 });
+    }
+  }
+};
+
+// src/modules/buckets/multipart/createUpload.ts
+import { OpenAPIRoute as OpenAPIRoute9 } from "chanfana";
+import { z as z8 } from "zod";
+var CreateUpload = class extends OpenAPIRoute9 {
+  schema = {
+    operationId: "post-multipart-create-upload",
+    tags: ["Multipart"],
+    summary: "Create upload",
+    request: {
+      params: z8.object({
+        bucket: z8.string()
+      }),
+      query: z8.object({
+        key: z8.string().describe("base64 encoded file key"),
+        customMetadata: z8.string().nullable().optional().describe("base64 encoded json string"),
+        httpMetadata: z8.string().nullable().optional().describe("base64 encoded json string")
+      })
+    }
+  };
+  async handle(c) {
+    const data = await this.getValidatedData();
+    const bucket = c.env[data.params.bucket];
+    const key = decodeURIComponent(escape(atob(data.query.key)));
+    let customMetadata = void 0;
+    if (data.query.customMetadata) {
+      customMetadata = JSON.parse(
+        decodeURIComponent(escape(atob(data.query.customMetadata)))
+      );
+    }
+    let httpMetadata = void 0;
+    if (data.query.httpMetadata) {
+      httpMetadata = JSON.parse(
+        decodeURIComponent(escape(atob(data.query.httpMetadata)))
+      );
+    }
+    return await bucket.createMultipartUpload(key, {
+      customMetadata,
+      httpMetadata
+    });
+  }
+};
+
+// src/modules/buckets/multipart/partUpload.ts
+import { OpenAPIRoute as OpenAPIRoute10 } from "chanfana";
+import { z as z9 } from "zod";
+var PartUpload = class extends OpenAPIRoute10 {
+  schema = {
+    operationId: "post-multipart-part-upload",
+    tags: ["Multipart"],
+    summary: "Part upload",
+    request: {
+      body: {
+        content: {
+          "application/octet-stream": {
+            schema: z9.object({}).openapi({
+              type: "string",
+              format: "binary"
+            })
+          }
+        }
+      },
+      params: z9.object({
+        bucket: z9.string()
+      }),
+      query: z9.object({
+        key: z9.string().describe("base64 encoded file key"),
+        uploadId: z9.string(),
+        partNumber: z9.number().int()
+      })
+    }
+  };
+  async handle(c) {
+    const data = await this.getValidatedData();
+    const bucket = c.env[data.params.bucket];
+    const key = decodeURIComponent(escape(atob(data.query.key)));
+    const multipartUpload = bucket.resumeMultipartUpload(
+      key,
+      data.query.uploadId
+    );
+    try {
+      return await multipartUpload.uploadPart(
+        data.query.partNumber,
+        c.req.raw.body
+      );
+    } catch (error) {
+      return new Response(error.message, { status: 400 });
+    }
+  }
+};
+
+// src/modules/buckets/putMetadata.ts
+import { OpenAPIRoute as OpenAPIRoute11 } from "chanfana";
+import { z as z10 } from "zod";
+var PutMetadata = class extends OpenAPIRoute11 {
+  schema = {
+    operationId: "post-bucket-put-object-metadata",
+    tags: ["Buckets"],
+    summary: "Update object metadata",
+    request: {
+      params: z10.object({
+        bucket: z10.string(),
+        key: z10.string().describe("base64 encoded file key")
+      }),
+      body: {
+        content: {
+          "application/json": {
+            schema: z10.object({
+              customMetadata: z10.record(z10.string(), z10.any())
+            }).openapi("Object metadata")
+          }
+        }
+      }
+    }
+  };
+  async handle(c) {
+    const data = await this.getValidatedData();
+    const bucket = c.env[data.params.bucket];
+    let filePath;
+    try {
+      filePath = decodeURIComponent(escape(atob(data.params.key)));
+    } catch (e) {
+      filePath = decodeURIComponent(
+        escape(atob(decodeURIComponent(data.params.key)))
+      );
+    }
+    const object = await bucket.get(filePath);
+    return await bucket.put(filePath, object.body, {
+      customMetadata: data.body.customMetadata
+    });
+  }
+};
+
+// src/modules/buckets/putObject.ts
+import { OpenAPIRoute as OpenAPIRoute12 } from "chanfana";
+import { z as z11 } from "zod";
+var PutObject = class extends OpenAPIRoute12 {
+  schema = {
+    operationId: "post-bucket-upload-object",
+    tags: ["Buckets"],
+    summary: "Upload object",
+    request: {
+      body: {
+        content: {
+          "application/octet-stream": {
+            schema: z11.object({}).openapi({
+              type: "string",
+              format: "binary"
+            })
+          }
+        }
+      },
+      params: z11.object({
+        bucket: z11.string()
+      }),
+      query: z11.object({
+        key: z11.string().describe("base64 encoded file key"),
+        customMetadata: z11.string().nullable().optional().describe("base64 encoded json string"),
+        httpMetadata: z11.string().nullable().optional().describe("base64 encoded json string")
+      })
+    }
+  };
+  async handle(c) {
+    const data = await this.getValidatedData();
+    const bucket = c.env[data.params.bucket];
+    const key = decodeURIComponent(escape(atob(data.query.key)));
+    let customMetadata = void 0;
+    if (data.query.customMetadata) {
+      customMetadata = JSON.parse(
+        decodeURIComponent(escape(atob(data.query.customMetadata)))
+      );
+    }
+    let httpMetadata = void 0;
+    if (data.query.httpMetadata) {
+      httpMetadata = JSON.parse(
+        decodeURIComponent(escape(atob(data.query.httpMetadata)))
+      );
+    }
+    return await bucket.put(key, c.req.raw.body, {
+      customMetadata,
+      httpMetadata
+    });
+  }
+};
+
+// src/modules/dashboard.ts
+function dashboardIndex(c) {
+  if (c.env.ASSETS === void 0) {
+    return c.text(
+      "ASSETS binding is not defined, learn more here: https://r2explorer.dev/guides/migrating-to-1.1/",
+      500
+    );
+  }
+  return c.text(
+    "ASSETS binding is not pointing to a valid dashboard, learn more here: https://r2explorer.dev/guides/migrating-to-1.1/",
+    500
+  );
+}
+async function dashboardRedirect(c, next) {
+  if (c.env.ASSETS === void 0) {
+    return c.text(
+      "ASSETS binding is not defined, learn more here: https://r2explorer.dev/guides/migrating-to-1.1/",
+      500
+    );
+  }
+  const url = new URL(c.req.url);
+  if (!url.pathname.includes(".")) {
+    return c.env.ASSETS.fetch(new Request(url.origin));
+  }
+  await next();
+}
+
+// src/modules/emails/receiveEmail.ts
+import PostalMime from "postal-mime";
+
+// src/foundation/dates.ts
+function getCurrentTimestampMilliseconds() {
+  return Math.floor(Date.now());
+}
+
+// src/modules/emails/receiveEmail.ts
+async function streamToArrayBuffer(stream, streamSize) {
+  const result = new Uint8Array(streamSize);
+  let bytesRead = 0;
+  const reader = stream.getReader();
+  while (true) {
+    const { done, value } = await reader.read();
+    if (done) {
+      break;
+    }
+    result.set(value, bytesRead);
+    bytesRead += value.length;
+  }
+  return result;
+}
+async function receiveEmail(event, env, ctx, config) {
+  let bucket;
+  if (config?.emailRouting?.targetBucket && env[config.emailRouting.targetBucket]) {
+    bucket = env[config.emailRouting.targetBucket];
+  }
+  if (!bucket) {
+    for (const [key, value] of Object.entries(env)) {
+      if (value.get && value.put) {
+        bucket = value;
+        break;
+      }
+    }
+  }
+  const rawEmail = await streamToArrayBuffer(event.raw, event.rawSize);
+  const parser = new PostalMime();
+  const parsedEmail = await parser.parse(rawEmail);
+  const emailPath = `${getCurrentTimestampMilliseconds()}-${crypto.randomUUID()}`;
+  await bucket.put(
+    `.r2-explorer/emails/inbox/${emailPath}.json`,
+    JSON.stringify(parsedEmail),
+    {
+      customMetadata: {
+        subject: parsedEmail.subject,
+        from_address: parsedEmail.from?.address,
+        from_name: parsedEmail.from?.name,
+        to_address: parsedEmail.to.length > 0 ? parsedEmail.to[0].address : null,
+        to_name: parsedEmail.to.length > 0 ? parsedEmail.to[0].name : null,
+        has_attachments: parsedEmail.attachments.length > 0,
+        read: false,
+        timestamp: Date.now()
+      }
+    }
+  );
+  for (const att of parsedEmail.attachments) {
+    await bucket.put(
+      `.r2-explorer/emails/inbox/${emailPath}/${att.filename}`,
+      att.content
+    );
+  }
+}
+
+// src/modules/emails/sendEmail.ts
+import { OpenAPIRoute as OpenAPIRoute13, Str } from "chanfana";
+import { z as z12 } from "zod";
+var SendEmail = class extends OpenAPIRoute13 {
+  schema = {
+    operationId: "post-email-send",
+    tags: ["Emails"],
+    summary: "Send Email",
+    request: {
+      body: {
+        content: {
+          "application/json": {
+            schema: z12.object({
+              subject: Str({ example: "Look! No servers" }),
+              from: z12.object({
+                email: Str({ example: "sender@example.com" }),
+                name: Str({ example: "Workers - MailChannels integration" })
+              }),
+              to: z12.object({
+                email: Str({ example: "test@example.com" }),
+                name: Str({ example: "Test Recipient" })
+              }).array(),
+              content: z12.object({}).catchall(z12.string())
+            })
+          }
+        }
+      }
+    }
+  };
+  async handle(c) {
+    if (c.get("config").readonly === true)
+      return Response.json({ msg: "unauthorized" }, { status: 401 });
+    return {
+      success: false,
+      error: "unavailable"
+    };
+  }
+};
+
+// src/modules/server/getInfo.ts
+import { OpenAPIRoute as OpenAPIRoute14 } from "chanfana";
+var GetInfo = class extends OpenAPIRoute14 {
+  schema = {
+    operationId: "get-server-info",
+    tags: ["Server"],
+    summary: "Get server info"
+  };
+  async handle(c) {
+    const { basicAuth: basicAuth2, ...config } = c.get("config");
+    return {
+      version: settings.version,
+      config,
+      auth: c.get("authentication_type") ? {
+        type: c.get("authentication_type"),
+        username: c.get("authentication_username")
+      } : void 0
+    };
+  }
+};
+
+// src/index.ts
+function R2Explorer(config) {
+  extendZodWithOpenApi(z13);
+  config = config || {};
+  if (config.readonly !== false) config.readonly = true;
+  const openapiSchema = {
+    openapi: "3.1.0",
+    info: {
+      title: "R2 Explorer API",
+      version: settings.version
+    }
+  };
+  if (config.basicAuth) {
+    openapiSchema["security"] = [
+      {
+        basicAuth: []
+      }
+    ];
+  }
+  const app = new Hono();
+  app.use("*", async (c, next) => {
+    c.set("config", config);
+    await next();
+  });
+  const openapi = fromHono(app, {
+    schema: openapiSchema,
+    raiseUnknownParameters: true,
+    generateOperationIds: false
+  });
+  if (config.cors === true) {
+    app.use(
+      "*",
+      cors({
+        origin: "*",
+        allowMethods: ["*"],
+        credentials: true
+      })
+    );
+  }
+  if (config.readonly === true) {
+    app.use("*", readOnlyMiddleware);
+  }
+  if (config.cfAccessTeamName) {
+    app.use("*", cloudflareAccess(config.cfAccessTeamName));
+    app.use("*", async (c, next) => {
+      c.set("authentication_type", "cloudflare-access");
+      c.set("authentication_username", c.get("accessPayload").email);
+      await next();
+    });
+  }
+  if (config.basicAuth) {
+    openapi.registry.registerComponent("securitySchemes", "basicAuth", {
+      type: "http",
+      scheme: "basic"
+    });
+    app.use(
+      "*",
+      basicAuth({
+        verifyUser: (username, password, c) => {
+          const users = Array.isArray(c.get("config").basicAuth) ? c.get("config").basicAuth : [c.get("config").basicAuth];
+          for (const user of users) {
+            if (user.username === username && user.password === password) {
+              c.set("authentication_type", "basic-auth");
+              c.set("authentication_username", username);
+              return true;
+            }
+          }
+          return false;
+        }
+      })
+    );
+  }
+  openapi.get("/api/server/config", GetInfo);
+  openapi.get("/api/buckets", ListBuckets);
+  openapi.get("/api/buckets/:bucket", ListObjects);
+  openapi.post("/api/buckets/:bucket/move", MoveObject);
+  openapi.post("/api/buckets/:bucket/folder", CreateFolder);
+  openapi.post("/api/buckets/:bucket/upload", PutObject);
+  openapi.post("/api/buckets/:bucket/multipart/create", CreateUpload);
+  openapi.post("/api/buckets/:bucket/multipart/upload", PartUpload);
+  openapi.post("/api/buckets/:bucket/multipart/complete", CompleteUpload);
+  openapi.post("/api/buckets/:bucket/delete", DeleteObject);
+  openapi.on("head", "/api/buckets/:bucket/:key", HeadObject);
+  openapi.get("/api/buckets/:bucket/:key/head", HeadObject);
+  openapi.get("/api/buckets/:bucket/:key", GetObject);
+  openapi.post("/api/buckets/:bucket/:key", PutMetadata);
+  openapi.post("/api/emails/send", SendEmail);
+  openapi.get("/", dashboardIndex);
+  openapi.get("*", dashboardRedirect);
+  app.all(
+    "*",
+    () => Response.json({ msg: "404, not found!" }, { status: 404 })
+  );
+  return {
+    // TODO: improve event type
+    async email(event, env, context) {
+      await receiveEmail(event, env, context, config);
+    },
+    async fetch(request, env, context) {
+      return app.fetch(request, env, context);
+    }
+  };
+}
+export {
+  R2Explorer
+};