openhands
8c12fc6c60
- fix(studio): stop markBatchDone infinite recursion so batches complete - refactor(api): merge api-response into api and drop the duplicate module - refactor(media): extract shared media loader and URL validator - refactor(ui): extract shared LoadingSpinner for site and admin groups - refactor(dates): consolidate raw date formatting into formatDate util - refactor(logs): share a single generic log-list loader across tables - refactor(theme): merge both ColorField components and reuse contrast helpers - refactor(import): extract shared ImportErrorBanner and SearchInput - chore(): remove dead theme-editor-tabs after inlining tab components
96 lines
2.4 KiB
TypeScript
96 lines
2.4 KiB
TypeScript
import { promises as fs } from "node:fs";
|
|
import { desc, eq } from "drizzle-orm";
|
|
import { apiError, apiOk } from "@/lib/api";
|
|
import { withAdmin } from "@/lib/api-handler";
|
|
import { db, Soundtracks } from "@/lib/db";
|
|
import { logger } from "@/lib/logger";
|
|
import { PERMS } from "@/lib/permissions";
|
|
import {
|
|
extractMp3Duration,
|
|
getSoundtrackPath,
|
|
isSafeSoundtrackCode,
|
|
MAX_SOUNDTRACK_SIZE,
|
|
validateMp3Bytes,
|
|
writeSoundtrackFile,
|
|
} from "@/lib/services/soundtracks";
|
|
|
|
export const POST = withAdmin(
|
|
{ permission: PERMS.CATALOG_EDIT, requireCsrf: true },
|
|
async (request) => {
|
|
const formData = await request.formData();
|
|
const file = formData.get("file");
|
|
const name = String(formData.get("name") ?? "").trim();
|
|
const author = String(formData.get("author") ?? "").trim();
|
|
|
|
if (!(file instanceof File)) {
|
|
return apiError("No file uploaded", 400);
|
|
}
|
|
if (!name) {
|
|
return apiError("Name is required", 400);
|
|
}
|
|
if (file.size > MAX_SOUNDTRACK_SIZE) {
|
|
return apiError("File exceeds 10 MB limit", 413);
|
|
}
|
|
if (file.size === 0) {
|
|
return apiError("File is empty", 400);
|
|
}
|
|
|
|
const buf = Buffer.from(await file.arrayBuffer());
|
|
if (!validateMp3Bytes(buf)) {
|
|
return apiError("File is not a valid MP3", 415);
|
|
}
|
|
|
|
const duration = await extractMp3Duration(buf);
|
|
|
|
const maxRow = await db
|
|
.select({ maxId: Soundtracks.id })
|
|
.from(Soundtracks)
|
|
.orderBy(desc(Soundtracks.id))
|
|
.limit(1)
|
|
.then((rows) => rows[0]?.maxId ?? 0)
|
|
.catch(() => 0);
|
|
|
|
const nextId = maxRow + 1;
|
|
const code = `song_${nextId}`;
|
|
|
|
if (!isSafeSoundtrackCode(code)) {
|
|
return apiError("Generated code is invalid", 500);
|
|
}
|
|
|
|
const existing = await db
|
|
.select({ id: Soundtracks.id })
|
|
.from(Soundtracks)
|
|
.where(eq(Soundtracks.code, code))
|
|
.limit(1)
|
|
.catch(() => null);
|
|
|
|
if (existing && existing.length > 0) {
|
|
return apiError("Song code already exists", 409);
|
|
}
|
|
|
|
await writeSoundtrackFile(code, buf);
|
|
|
|
let id: number;
|
|
try {
|
|
const result = await db.insert(Soundtracks).values({
|
|
code,
|
|
name: name.slice(0, 100),
|
|
author: author.slice(0, 50),
|
|
track: "",
|
|
length: duration,
|
|
});
|
|
id = Number(result[0].insertId);
|
|
} catch (err) {
|
|
logger.error("Failed to insert soundtrack record", { err, code });
|
|
try {
|
|
await fs.unlink(getSoundtrackPath(code));
|
|
} catch {
|
|
/* ignore cleanup failure */
|
|
}
|
|
return apiError("Failed to save soundtrack", 500);
|
|
}
|
|
|
|
return apiOk({ ok: true, id, code });
|
|
},
|
|
);
|