import { extname } from 'path' import { NextRequest } from 'next/server' import { sanitizeFilename } from './sanitize' import { ALL_ALLOWED_EXTENSIONS, MODEL_EXTENSIONS, VALID_DESTINATIONS, MAX_FILE_SIZE } from './constants' import type { ParsedFile } from './types' export interface ParsedUpload { folderName: string destination: string files: ParsedFile[] /** Any extra string fields from the FormData (e.g. "action") */ extra: Record } /** * Parse a multi-file FormData upload request. * Validates destination, file extensions, file sizes, and returns parsed files. * Extra string fields (beyond folderName, destination, files, fileTypes, textureNames) * are returned in `extra`. */ export async function parseMultiUpload(req: NextRequest): Promise { const formData = await req.formData() const folderName = (formData.get('folderName') as string | null)?.trim() || 'assets' const safeFolderName = sanitizeFilename(folderName).replace(/[^a-zA-Z0-9-_]/g, '-') const rawDestination = (formData.get('destination') as string | null)?.trim() || 'general' if (!VALID_DESTINATIONS.has(rawDestination)) { throw new Error(`Destination invalide: "${rawDestination}"`) } const destination = rawDestination const rawFiles = formData.getAll('files') const fileTypes = formData.getAll('fileTypes') as string[] const textureNames = formData.getAll('textureNames') as string[] // Collect extra string fields const knownKeys = new Set(['folderName', 'destination', 'files', 'fileTypes', 'textureNames']) const extra: Record = {} for (const [key, value] of formData.entries()) { if (!knownKeys.has(key) && typeof value === 'string') { extra[key] = value } } // Runtime validation: ensure entries are actual File objects const fileEntries: File[] = [] for (const entry of rawFiles) { if (!(entry instanceof File)) { throw new Error('Donnees de fichier invalides') } fileEntries.push(entry) } if (fileEntries.length === 0) { throw new Error('Aucun fichier recu') } const parsed: ParsedFile[] = [] for (let i = 0; i < fileEntries.length; i++) { const file = fileEntries[i] if (!file || file.size === 0) continue // File size limit if (file.size > MAX_FILE_SIZE) { throw new Error( `Fichier "${file.name}" trop volumineux (${(file.size / 1024 / 1024).toFixed(1)} MB). Maximum: ${MAX_FILE_SIZE / 1024 / 1024} MB.`, ) } const fileType = fileTypes[i] || 'model' const texName = textureNames[i] || '' const originalSafe = sanitizeFilename(file.name) const ext = extname(originalSafe).toLowerCase() if (!ALL_ALLOWED_EXTENSIONS.has(ext)) { throw new Error(`Extension non autorisee: "${ext}"`) } let filename: string if (fileType === 'texture' && texName) { filename = sanitizeFilename(texName) } else { filename = originalSafe } const isModel = MODEL_EXTENSIONS.has(ext) const buffer = Buffer.from(await file.arrayBuffer()) parsed.push({ filename, buffer, isModel }) } return { folderName: safeFolderName, destination, files: parsed, extra } }