import { extname } from 'path' import { NextRequest } from 'next/server' import { sanitizeFilename } from './sanitize' import { ALL_ALLOWED_EXTENSIONS, MODEL_EXTENSIONS, VALID_DESTINATIONS, MAX_FILE_SIZE } from './constants' import type { ParsedFile } from './types' /** * Parse a multi-file FormData upload request. * Validates destination, file extensions, file sizes, and returns parsed files. */ export async function parseMultiUpload(req: NextRequest): Promise<{ folderName: string destination: string files: ParsedFile[] }> { const formData = await req.formData() const folderName = (formData.get('folderName') as string | null)?.trim() || 'assets' const safeFolderName = sanitizeFilename(folderName).replace(/[^a-zA-Z0-9-_]/g, '-') const rawDestination = (formData.get('destination') as string | null)?.trim() || 'general' if (!VALID_DESTINATIONS.has(rawDestination as never)) { throw new Error(`Destination invalide: "${rawDestination}"`) } const destination = rawDestination const rawFiles = formData.getAll('files') const fileTypes = formData.getAll('fileTypes') as string[] const textureNames = formData.getAll('textureNames') as string[] // Runtime validation: ensure entries are actual File objects const fileEntries: File[] = [] for (const entry of rawFiles) { if (!(entry instanceof File)) { throw new Error('Donnees de fichier invalides') } fileEntries.push(entry) } if (fileEntries.length === 0) { throw new Error('Aucun fichier recu') } const parsed: ParsedFile[] = [] for (let i = 0; i < fileEntries.length; i++) { const file = fileEntries[i] if (!file || file.size === 0) continue // File size limit if (file.size > MAX_FILE_SIZE) { throw new Error( `Fichier "${file.name}" trop volumineux (${(file.size / 1024 / 1024).toFixed(1)} MB). Maximum: ${MAX_FILE_SIZE / 1024 / 1024} MB.`, ) } const fileType = fileTypes[i] || 'model' const texName = textureNames[i] || '' const originalSafe = sanitizeFilename(file.name) const ext = extname(originalSafe).toLowerCase() if (!ALL_ALLOWED_EXTENSIONS.has(ext)) { throw new Error(`Extension non autorisee: "${ext}"`) } let filename: string if (fileType === 'texture' && texName) { filename = sanitizeFilename(texName) } else { filename = originalSafe } const isModel = MODEL_EXTENSIONS.has(ext) const buffer = Buffer.from(await file.arrayBuffer()) parsed.push({ filename, buffer, isModel, textureName: texName || undefined }) } return { folderName: safeFolderName, destination, files: parsed } }