60 lines
1.7 KiB
TypeScript
60 lines
1.7 KiB
TypeScript
import { writeFileSync, mkdirSync } from "node:fs";
|
|
import { join, dirname } from "node:path";
|
|
import { homedir } from "node:os";
|
|
|
|
export const dynamic = "force-dynamic";
|
|
export const runtime = "nodejs";
|
|
|
|
const MAX_SIZE = 25 * 1024 * 1024; // 25 MB
|
|
|
|
/** Hidden uploads dir in the user's home directory — persists forever, invisible to users. */
|
|
const UPLOADS_DIR = join(homedir(), ".ironclaw", "uploads");
|
|
|
|
/**
|
|
* POST /api/workspace/upload
|
|
* Accepts multipart form data with a "file" field.
|
|
* Saves to a temp directory and returns the absolute path.
|
|
*/
|
|
export async function POST(req: Request) {
|
|
let formData: FormData;
|
|
try {
|
|
formData = await req.formData();
|
|
} catch {
|
|
return Response.json({ error: "Invalid form data" }, { status: 400 });
|
|
}
|
|
|
|
const file = formData.get("file");
|
|
if (!file || !(file instanceof File)) {
|
|
return Response.json(
|
|
{ error: "Missing 'file' field" },
|
|
{ status: 400 },
|
|
);
|
|
}
|
|
|
|
// Validate size
|
|
if (file.size > MAX_SIZE) {
|
|
return Response.json(
|
|
{ error: "File is too large (max 25 MB)" },
|
|
{ status: 400 },
|
|
);
|
|
}
|
|
|
|
// Build a safe filename: timestamp + sanitized original name
|
|
const safeName = file.name
|
|
.replace(/[^a-zA-Z0-9._-]/g, "_")
|
|
.replace(/_{2,}/g, "_");
|
|
const absPath = join(UPLOADS_DIR, `${Date.now()}-${safeName}`);
|
|
|
|
try {
|
|
mkdirSync(dirname(absPath), { recursive: true });
|
|
const buffer = Buffer.from(await file.arrayBuffer());
|
|
writeFileSync(absPath, buffer);
|
|
return Response.json({ ok: true, path: absPath });
|
|
} catch (err) {
|
|
return Response.json(
|
|
{ error: err instanceof Error ? err.message : "Upload failed" },
|
|
{ status: 500 },
|
|
);
|
|
}
|
|
}
|