automaker/apps/server/src/routes/fs/routes/save-image.ts

/**
 * POST /save-image endpoint - Save image to .automaker images directory
 */

import type { Request, Response } from 'express';
import * as secureFs from '../../../lib/secure-fs.js';
import path from 'path';
import { getErrorMessage, logError } from '../common.js';
import { getImagesDir } from '@automaker/platform';
import { sanitizeFilename } from '@automaker/utils';

export function createSaveImageHandler() {
  return async (req: Request, res: Response): Promise<void> => {
    try {
      const { data, filename, projectPath } = req.body as {
        data: string;
        filename: string;
        projectPath: string;
      };

      if (!data || !filename || !projectPath) {
        res.status(400).json({
          success: false,
          error: 'data, filename, and projectPath are required',
        });
        return;
      }

      // Get images directory
      const imagesDir = getImagesDir(projectPath);
      await secureFs.mkdir(imagesDir, { recursive: true });

      // Decode base64 data (remove data URL prefix if present)
      // Use a regex that handles all data URL formats including those with extra params
      // e.g., data:image/gif;charset=utf-8;base64,R0lGOD...
      const base64Data = data.replace(/^data:[^,]+,/, '');
      const buffer = Buffer.from(base64Data, 'base64');

      // Generate unique filename with timestamp
      const timestamp = Date.now();
      const ext = path.extname(filename) || '.png';
      const baseName = sanitizeFilename(path.basename(filename, ext), 'image');
      const uniqueFilename = `${baseName}-${timestamp}${ext}`;
      const filePath = path.join(imagesDir, uniqueFilename);

      // Write file
      await secureFs.writeFile(filePath, buffer);

      // Return the absolute path
      res.json({ success: true, path: filePath });
    } catch (error) {
      logError(error, 'Save image failed');
      res.status(500).json({ success: false, error: getErrorMessage(error) });
    }
  };
}