@zedtech/zedkit-storage

Sanitise keys and presign uploads

Block `..` and control characters; optional `keyPrefix` from config.

At a glance

Who: Handlers that accept user filenames and return short-lived upload URLs.
What: Block .. and control characters; optional keyPrefix from config.
Use when: Direct-to-storage uploads from the browser or mobile app.
Avoid when: Public anonymous buckets without presigning — configure IAM separately.

Install

pnpm add @zedtech/zedkit-storage

Latest: 0.1.0 (via changesets).

Example

Usage

import { presignPutUrl, sanitizeFilename } from "@zedtech/zedkit-storage";
const safe = sanitizeFilename(userName);
await presignPutUrl(client, config, { key: `${userId}/${safe}`, contentType: "image/png" });

Wraps: @aws-sdk/s3-request-presigner (peer)

Load storage config and create a client

Fail fast on missing env vars; explicit access keys only (no default credential chain).

Public URLs and response headers

Build CDN URLs from config; ship cache and CSP defaults for SVG objects.

On this page

At a glance Install Example