# v2 git bundle af8949de02fbc5e5ba17d0557a6d653298f88488 refs/heads/bundle af8949de02fbc5e5ba17d0557a6d653298f88488 HEAD PACKxj0ໞb-%lYlIkh޾zJ eFꈂ^ڨǨ;7XoZK؉CFeɌgg=`[M0R y %Je]0TssmlʾABNLK|Emvbx 0 @QQnpaLpbCb;KURR\8/=oe2sy(Gl䆢((UI9x^Jtd-%-QJRqmtVͣr &xKJD19EId] O$wn Fg2G0N4qYZjѧDfܺؒBst"XQ9gqRryةnܟXC4N:VRAifN*LjR&xtree d30b39423b88932fdd600a95d4638fd1c4a44146 parent 340c12d671b01882edbb484794470468dca76b09 author asepharyana 1783431581 +0700 committer asepharyana 1783431581 +0700 ci: migrate deployment to gitea actions ?OP.xtree b5ae1180008e9e6584ade076724b3da53037013f parent 144ebe6dd333efb8f43ef034e90349e831d97a90 author asepharyana 1783429095 +0700 committer asepharyana 1783429095 +0700 feat: implement authentication routes with login, logout, and user info retrieval feat: add S3 bucket versioning support and related XML response handling refactor: rename temporary file paths from 'teleuploader' to 'filedrop' for consistency fix: update Swagger documentation to reflect new API name and descriptions test: add unit tests for authentication routes and utilities test: implement end-to-end tests for S3 bucket configuration and versioning chore: update environment variable defaults for new service name x tree 90a8a449433282e779324f5219106e6d1f15e9dc parent fbfff3d9ec64620737d7bf17d538a4fa5cc5fcb0 author asepharyana 1783386502 +0700 committer asepharyana 1783386502 +0700 feat: implement chunked storage for Telegram file uploads and retrieval f\xtree 7b5e5d255c4fb56134aecd43a5557d936bb4e171 parent 1ef73fefa93cbc60927cb03612898f86113f3d35 author asepharyana 1783380438 +0700 committer asepharyana 1783380438 +0700 fix: normalize web object sizes Mx!tree 35479cd691cab732c2ae1c63f186bc903820c6c0 parent bc806313b115dc7f500f881b54f7ba6933cfbf98 author asepharyana 1783379509 +0700 committer asepharyana 1783379509 +0700 fix: restore multipart part order validation (without strict ETag check) p\xtree 16e66173099d1f84a9b4285e8d3dc8bebe2493b0 parent d1c8cc9d23339793d48292bc3c764d79f67e4a6b author asepharyana 1783379057 +0700 committer asepharyana 1783379057 +0700 fix: use safe LIKE prefix matching instead of non-character range YHx7tree 47cd6b8eb27629dbaa3c909f8725a9046264a374 parent 34962eb08a476d0c5b5a68fe5045afb1977e49f6 author asepharyana 1783378936 +0700 committer asepharyana 1783378936 +0700 fix: ensure S3_DEFAULT_REGION and S3_VHOST_DOMAINS env vars are properly set in docker-compose "ax"tree 4c9323551dc76df9c07a24b80b7ef190413f2685 parent 8e6ccf211081ef674b692e6d792c2a7e200f04cc author asepharyana 1783378064 +0700 committer asepharyana 1783378064 +0700 chore: update S3 vhost domains to include asepharana.web.id root/wildcard I\dCx=tree 4008191d82a36efb4eab6b93c73fb72fc1711986 parent 6aee3723fb0f46b1ed4465fc92a95abc0d2a9c7e author asepharyana 1783377563 +0700 committer asepharyana 1783377563 +0700 feat: S3 client compatibility — virtual-hosted style, CORS, presigned multi-method, ListMultipartUploads, edge case fixes - Virtual-hosted bucket detection from Host header (extractS3BucketFromHost) - S3 CORS headers + OPTIONS preflight + x-amz-id-2/HostId everywhere - Presigned GET/PUT/HEAD/DELETE via centralized auth (no GET-only restriction) - ListMultipartUploads with DB/xml helpers - UploadPart partNumber range validation (1-10000) - CompleteMultipartUpload ETag matching and ascending order validation - DeleteObjects quiet mode support - CopyObject URL-decode and conditional if-match/if-none-match - encoding-type=url support in ListObjects V1/V2 XML - Safe range-based prefix matching (replaces SQL LIKE) - STREAMING-AWS4-HMAC-SHA256-PAYLOAD → 501 NotImplemented - Traefik wildcard HostRegex for virtual-hosted style - S3_VHOST_DOMAINS config env var Coٟxtree 73fd8dbc7828afeb7c827cb5714bb76900e87433 parent ad3f4ce75e4d3ca66ca55a9fea26dfd0845ab388 author asepharyana 1783374524 +0700 committer asepharyana 1783374524 +0700 fix: remove home page CSS lint warning Pxtree bffdddab98c0a1de10b5ccc0f7264d9f99493743 parent 339f788dc94b76f6f43b34bf096a19b28a4814dd author asepharyana 1783374427 +0700 committer asepharyana 1783374427 +0700 test: enable strict AWS SDK multipart coverage @Saxtree b351aef5ba9803a6158e0fb271eb022b186170c3 parent 2e447ee58ad012c493c159fd879b791515ec333e author asepharyana 1783374127 +0700 committer asepharyana 1783374127 +0700 fix: ensure multipart part sizeBytes are Numbers, not DB strings 4Y xtree 861683a0c327f3aa2ce691e2b296ba93ff5ba95f parent ad454041321d8c1d67d384067859c1b393d9de8e author asepharyana 1783373840 +0700 committer asepharyana 1783373840 +0700 fix: stream complete multipart S3 objects 9Qx 1783373364 +0700 committer asepharyana 1783373404 +0700 feat: support ranged S3 GetObject responses Wire createGetObjectResponse into single-part GetObject handler for proper Range/Content-Range support (200, 206, 416). Update presigned E2E test to require 200. Add SDK Range request test. вIx tree 824dca7591c3a568cf536b1300b7f12fdb7cf757 parent 5253fb384dd91d59d0a3bdcf0941b4b9fb529204 author asepharyana 1783372992 +0700 committer asepharyana 1783373105 +0700 feat: stream S3 object bodies from Telegram parts z#Sx tree 935dc3eda21023563e9998da74eb7ae60642eb7d parent 85aa54592ae6618a766c13deb7e089d7171e2743 author asepharyana 1783372657 +0700 committer asepharyana 1783372861 +0700 fix: verify presigned S3 URLs against public host ) SNxtree 3f93cf947048150fc6aacf4f132596f96c437218 parent 2bf0fa5af5694fadd04fd964159dac83cf49053d author asepharyana 1783372270 +0700 committer asepharyana 1783372450 +0700 feat: add S3 byte range parser yLxtree 9a30e3aaa192813d74c9db714d50fec0a43585b8 parent dbdc5ed1ee8138d08c4fb094be95633a39db25bf author asepharyana 1783371791 +0700 committer asepharyana 1783371791 +0700 docs: plan S3 compatibility completion kQxtree 60e0dddafd0fa557d1da93fb0e9cc4c425df0059 parent 9a48fbf2279edc0855ca3faadd9aaf3e1bad4df6 author asepharyana 1783371400 +0700 committer asepharyana 1783371400 +0700 docs: design remaining S3 compatibility fixes %U 6xctree c07a79aaddbba44cc386980483275d04162f4681 parent 06f93e30f633d8f244d0be06665ae81217baeadd author asepharyana 1783368471 +0700 committer asepharyana 1783368471 +0700 fix: satisfy deploy lint gate for S3 compatibility work - Apply Biome organize-import/formatting fixes across changed S3 files - Replace remaining string concatenations with template literals for lint - Make home page inline handlers explicit via window.* and add button types - Clean S3 auth lint issues with dot-property access and optional chaining - Keep GetObject proxy and production/S3 SDK tests passing Verification: - bun run lint (0 errors, 1 CSS specificity warning) - S3_SECRET_KEY= bun test test/production-e2e.test.ts (29 pass) - S3_SECRET_KEY= bun test test/s3-sdk.test.ts (20 pass) - bun test test/s3-auth.test.ts (5 pass) hz%7xqtree d2967ae6c1acb9d81da923a28496e930a767c1fa parent f88ac1a124eaf0cf8ad0dc488672a282bde8ace7 author asepharyana 1783367691 +0700 committer asepharyana 1783367691 +0700 feat: proxy GetObject from Telegram CDN for real S3 client compatibility - Add proxyS3Get config (PROXY_S3_GET env, default true) to env.ts - Proxy handleGetObject and handleGetMultipartObject: fetch from Telegram CDN and return 200 with streaming body instead of 302 redirect - Real S3 clients (AWS SDK v3) expect 200+body on GetObject, not redirect - Legacy 302 redirect path preserved when proxyS3Get=false - Updated production-e2e: GetObject asserts 200 with body content - Updated s3-sdk.test.ts: GetObject asserts 200 with body (removed try/catch) - Cleaned up unused multipart imports in s3-sdk.test.ts All 49 tests pass (29 production-e2e + 20 s3-sdk). %ې8xtree 782cd369b90c96353e35f3bca8bb50ee12691c64 parent 57f2740df967ba7e36faa525b3d74aef4c0e0817 author asepharyana 1783364357 +0700 committer asepharyana 1783364357 +0700 test: add real AWS SDK v3 S3 compatibility tests (20 tests) Tests use @aws-sdk/client-s3 against https://upload.asepharyana.my.id with forcePathStyle=true. Covers all standard S3 operations: ListBuckets, CreateBucket, HeadBucket, DeleteBucket, PutObject, GetObject, HeadObject, ListObjectsV1/V2 (prefix, delimiter), CopyObject, DeleteObject, DeleteObjects (batch), error handling. Multipart is excluded from SDK tests — the SDK adds amz-sdk-* / x-amz-user-agent to signed headers, which can differ between signing time and the actual request through Cloudflare, causing 403 SignatureDoesNotMatch. Multipart is verified via manual SigV4 signing in test/production-e2e.test.ts. t2~;xFtree 84855ac5479687c8c0778706ac075d05e4f788ca parent b731ddd7e1e5f950ff9b2b96c32ec57a78ee7ca4 author asepharyana 1783360185 +0700 committer asepharyana 1783360185 +0700 fix: production bugs + comprehensive production e2e tests Fixes: - RowList bug: postgres.js returns array directly, not {rows}. Fix in buckets.ts, files-ext.ts, multipart.ts (3 files, 8 functions) - S3 ListBuckets routing: GET / was intercepted by handleHome route - Presigned URL detection: isS3Request() only checked Authorization header - FK constraint on bucket delete: cascade-delete files & multipart rows first - docker-compose.yml: pass S3_ACCESS_KEY / S3_SECRET_KEY to container - Dockerfile: copy home.html to runner stage for handleHome Tests: - test/production-e2e.test.ts: 29 tests (11 Web API + 18 S3 SigV4) All pass against https://upload.asepharyana.my.id - Creates and cleans up real buckets/objects on production YAxtree 9577dbadb4df24f07d1e90c599b854956855eec3 parent 245138e23a67720380ef2d58d8654c7acc18502f author asepharyana 1783353059 +0700 committer asepharyana 1783353059 +0700 fix: sequential test execution to avoid mock pollution between files 0[L%xQtree b08cc1ac8b0e16e7dcc71abd0e17c56e868da78c parent 2d3d7891a0f00868e220e941b6b8e335bc78a59c author asepharyana 1783352175 +0700 committer asepharyana 1783352175 +0700 Refactor code for improved readability and consistency - Updated formatting in web-api.ts for better alignment and readability. - Enhanced XML builders in xml.ts for clearer structure and maintainability. - Improved test cases in s3-auth.test.ts and s3-operations.test.ts for better clarity and consistency. - Refactored mock data in web-api.test.ts for improved readability. Qx&tree 41b7a36cfe9477c2c79db5b0baec1dcb5b163c86 parent 0ad783b79480ee80e3170fb28e35b0e400c6e6cc author asepharyana 1783351926 +0700 committer asepharyana 1783351926 +0700 refactor: auto-run DB migration at startup, robust schema.sql path resolution _x0tree 5b53efb9170ade30aff42c221836e4eac896dfac parent e175a275129be6ee26ceec51ab5b43a13b2f59f5 author asepharyana 1783348697 +0700 committer asepharyana 1783348697 +0700 fix: PutObject raw body, presigned URL auth guard, DeleteObjects tracking, home.ts path bgx tree 148bef42f2fb9f67b76bb9278e6edcb10cdda798 parent 5e38f80267f838a33ef98fc1f3beb7b9a4e0c242 author asepharyana 1783347326 +0700 committer asepharyana 1783347326 +0700 test: add S3 auth, operations, and web API tests 8Sx tree ae6d20f54ccc818b65e18f908f80f602ca8ad173 parent a4f902a37b77eef4376546a880c66cf1fa0578d0 author asepharyana 1783346215 +0700 committer asepharyana 1783346215 +0700 feat: add web file manager UI and S3 catch-all route xS˗xtree 6eb4478f8887bd4e2d908dff5c5f9ea86d46cde7 parent dd61e7e0fc3952d2ea610c014d6899c11a829808 author asepharyana 1783329017 +0700 committer asepharyana 1783329017 +0700 feat: add JSON v1 web API for S3 management UI Px6tree 3a2ab7ef72b1ce9f523324e2c331c74fe1688606 parent 084ff3fb9dfce2b2af1aa2180410897adbb5df9a author asepharyana 1783327962 +0700 committer asepharyana 1783327962 +0700 feat: implement S3 protocol dispatcher with bucket, object, listing, and multipart operations "e`xGtree 8176c6ad5841cb67eb75d2e0edc2807a74fc6422 parent ee758aa939ca32954b5d581784b67b33847c10db author asepharyana 1783326666 +0700 committer asepharyana 1783326666 +0700 fix: add region validation, fix presigned URL canonical request (add method, fix headers), normalizeUri decode 4ixtree aee21a516531b02faefa52d54f6ac9fa8b3f492c parent a2ca4890395e36f1482b4cb4e783a4274d3177c6 author asepharyana 1783324599 +0700 committer asepharyana 1783324599 +0700 feat: add S3 SigV4 auth verification and XML builders Tx@tree 6529aed94e761b73682eb20d1db856de2189fe8f parent caef31c7039d55c431340344ce2efdf44407a475 author asepharyana 1783323207 +0700 committer asepharyana 1783323207 +0700 fix: add explicit snake_case-to-camelCase mapping for S3FileRecord, add missing findOrphanFilesByBucket @]gxtree d57a456e9fecef18f63a6c104ca24150bd57640b parent e37fb00295ce61b167ad947e84684403fc53e463 author asepharyana 1783322617 +0700 committer asepharyana 1783322617 +0700 feat: add DB CRUD layer for buckets, multipart, and S3 file extensions :Yxtree 2d0b1befd0d175379a370d1cfd2574dc228dfa6f parent 0d0d7a5dfab54cdd8e0f3ebd3ef1e12ba80e940d author asepharyana 1783321143 +0700 committer asepharyana 1783321143 +0700 feat: add S3 env config, bucket and multipart DB schema VĞxtree b3b7a0cb1de20c6be7867550e5f03a10d1d3138c parent 52bd704d21ba4f98c14b2866dcf5a541673c5aa8 author asepharyana 1783275937 +0700 committer asepharyana 1783275937 +0700 chore: remove GitHub Actions workflow for notifying parent repository I\x/tree 0ba5ec7d813cc04427bf5fd6147f18b40e68fe3b parent bbf420759b5ab1e3d0542cad582d71061535f7b4 author asepharyana 1783275918 +0700 committer asepharyana 1783275918 +0700 refactor: enhance file handling and metrics tracking; remove unused bot health tracker NbLx7tree ea46106775c0d829717e4b7d290c55d750f2dcc7 parent 20b622c4c2f063750fe24025c096d93a5564cf62 author asepharyana 1783264012 +0700 committer asepharyana 1783264012 +0700 chore: update Dockerfile and docker-compose for improved deployment process; add deploy script d($xGtree 50836317caeff4cbbdf33a22ee664d5b25a5ba0b parent 50176e57643789119a65e676bff1e0f87380bb0e author MythEclipse 1781968910 +0700 committer MythEclipse 1781969063 +0700 fix(core): resolve wrong file_id error and zip stream memory leaks - Refactored Telegram bot pool iteration to handle 'wrong file_id' properly by verifying against all active bots - Upgraded TelegramFileInfo interface to track owner bot_token - Patched MaxListenersExceededWarning memory leak in zip.ts stream writes with events.once and async iteration KxYtree 5f380722e9e8946983bb3632685b1ca1f85e9941 parent 2a833d3908837f566462adacddbf144de1cfe576 author MythEclipse 1780724366 +0700 committer MythEclipse 1780724366 +0700 chore: migrate domain asepharyana.tech to asepharyana.my.id Co-Authored-By: Claude Opus 4.8 cnx#tree d75b0711d31f1e74391c8844b1585c795ef43102 parent 3ca5ab798337709088caea811611d3ad045a84de author MythEclipse 1780074935 +0700 committer MythEclipse 1780074935 +0700 feat: include bot token in file info response for Telegram API Z?xKtree 3325ba98b39acdd21bb6681262fedb89d3bb9a6a parent cc0f1dde7949c12c45c6ccb5999a9be330dec98e author MythEclipse 1780048435 +0700 committer MythEclipse 1780048435 +0700 refactor: update Telegram file handling to use new getFileInfo function and include bot token in cache kxYtree 78d9e919fbfc54e362f63e56be99ba94d54bfd8e parent e88e5dbc392154c49abcff683c62d96c13f0fbdc author Asep Haryana Saputra <90584806+MythEclipse@users.noreply.github.com> 1780041600 +0700 committer Asep Haryana Saputra <90584806+MythEclipse@users.noreply.github.com> 1780041600 +0700 ci: remove obsolete deploy.yml, replaced by notify-parent.ymloxctree b439dcdff2e7b191f925d41eaa77b8f55b599cf5 parent 0e2f09012f2bb79021edb301924de8769cd51469 author Asep Haryana Saputra <90584806+MythEclipse@users.noreply.github.com> 1780038530 +0700 committer Asep Haryana Saputra <90584806+MythEclipse@users.noreply.github.com> 1780038530 +0700 ci: slim deploy.yml to test-only; build/push/deploy handled by monorepo/r.xStree 41f17987446a2336b626cd9040fa9df827c99abc parent 134a7d4bf6623ed4bb2c5cce42224c064eddb269 author Asep Haryana Saputra <90584806+MythEclipse@users.noreply.github.com> 1780038501 +0700 committer Asep Haryana Saputra <90584806+MythEclipse@users.noreply.github.com> 1780038501 +0700 ci: add notify-parent workflow for monorepo integration`0lžxNtree 0cd4b387f5537b1635ef431311ec88947c890c1b parent 8508b360268f649e19763d1fb8b02f95b2fbe593 author MythEclipse 1780001157 +0700 committer MythEclipse 1780001157 +0700 feat: update Traefik router rules to support additional domains and change TLS certresolver to Cloudflare 'k>x<tree ac3ed7af1266d9e266206b434af38d3adef03aa7 parent 5425f6d33ddc7d85095e40ca3922189a26893ba6 author MythEclipse 1780001029 +0700 committer MythEclipse 1780001029 +0700 feat: update file handling to redirect to Telegram CDN and adjust Swagger documentation 6XdAxtree 238174bcfd5b14b21326dc41f8a1bc43b4ff05e4 parent be813b1c0ed57ffa0cd2b817f52111a736ed474c author MythEclipse 1780000419 +0700 committer MythEclipse 1780000419 +0700 feat: enhance configuration and rate limiting - Added new configuration options: trustProxy, uploadConcurrency, batchMaxItems, batchMaxSizeBytes, and maxRequestBodyBytes to AppConfig. - Implemented utility functions for parsing environment variables and masking sensitive data. - Updated rate limiting logic to use configurable window size and maximum requests per window. - Introduced a middleware for rate limiting on specific routes. - Refactored file handling routes to support streaming downloads instead of redirects. - Improved error handling and response formatting in file routes. - Added support for oversized request rejection based on Content-Length header. - Updated Swagger documentation to reflect changes in API behavior and responses. - Enhanced tests to cover new features and ensure proper functionality. Wux/tree eb2e4f5ae7b4a602a9144f420c5b994bd90d26a3 parent db5de1367d10b0cfe302307583f978f4e7f26004 author MythEclipse 1779998270 +0700 committer MythEclipse 1779998270 +0700 feat: update Traefik router rule to use new domain for file upload service '<`Gx_tree 870f0ecb920364bbe6c1511897218c87fffd8d7f parent 56b929ffb1a7cccce64fa6cde1f8fa808a4a084e author MythEclipse 1779385909 +0700 committer MythEclipse 1779385909 +0700 feat: extend file schema with archive metadata, implement batch upload processing, and add zip utilities for file handling usxStree df8f3dc68c75626ac4ca4f8733add8369318fafe parent fd5eb98586471e609a95402cf692bfd9f60c9235 author MythEclipse 1779384594 +0700 committer MythEclipse 1779384594 +0700 feat: enhance file upload process with temporary file handling, improved error management, and metrics logging jnśxKtree e80f5aca7db2726df26b0d123f0ef07b757aafcc parent 10c968cf0105ed08e1a4412c3f142ac455ce3036 author MythEclipse 1779381109 +0700 committer MythEclipse 1779381109 +0700 feat: implement caching for file info, add rate limiting, and enhance upload handling with retry logic rjĜx\tree 7e46ef0b3eed0d72890844e9974c87f7b077b4c0 parent 52340ee77db8ba46d74ebfb07b2e780845f21562 author MythEclipse 1779378942 +0700 committer MythEclipse 1779378942 +0700 feat: add file_hash column and related index to files table; refactor Telegram API utilities for improved file handling ` p{xJtree 196111f2329d8bc2a06fd00a354bec88d3b8281e parent 06844f1fa1a7fe8ba4f54fabc11568eab5812585 author MythEclipse 1779377515 +0700 committer MythEclipse 1779377515 +0700 feat: enhance file upload handling with improved file detection, size limits, and response formatting jיx9tree 12cc495bebb3300cb0faa4045d81152d5c5e4f7b parent 884710fd4244224b457994c4a99d1ac8d2bace4f author MythEclipse 1779116635 +0700 committer MythEclipse 1779116635 +0700 docs: update CLAUDE.md to include details on temporary file handling for API uploads c8xEtree fd0ef86635ba8f7a6beb75d82254954d3d48a530 parent cc3f85284bdbf2e52f3e9dae6e3ffac3f17737c1 author MythEclipse 1779116486 +0700 committer MythEclipse 1779116486 +0700 feat: implement temporary file handling for uploads and update tests for dynamic ID verification 'j x)tree e8326c34eab734e18713aca125193a30a1ad623a parent d58b2390efbce1b1b9e2778c0a6a926d6482f84d author MythEclipse 1779116097 +0700 committer MythEclipse 1779116097 +0700 docs: add dynamic image fetching details for unit tests in CLAUDE.md \].xCtree 3644f9a34a5457778c3db5200636be15a1fe80c6 parent b91b276214729c7cd46cdf79ecaadd89032d4869 author MythEclipse 1779116079 +0700 committer MythEclipse 1779116079 +0700 refactor: remove concurrency limit from Telegram upload queue and enhance media group handling hx;tree 8d3360c90815ffd41372b1bf9565554b62586b0c parent 0bc12651db86c9a33f01caeb3263540ee4295c38 author MythEclipse 1779114680 +0700 committer MythEclipse 1779114680 +0700 feat: add support for batch uploads of media groups to Telegram with debounce handling ɥcx>tree c6c031f2c1522f0d4c4e1a748aae55cbeea212bf parent 825e9695698d6c406fda99caea74099cc36851ed author MythEclipse 1779113978 +0700 committer MythEclipse 1779113978 +0700 fix: clean up logger info message formatting and remove unused import in rate limit tests gfxOtree fe4b94f9ecfc7b2003fd32faf0a2664807481b9b parent 721fa3db7d80cf49e75bee8ede46240346eeee95 author MythEclipse 1779113896 +0700 committer MythEclipse 1779113896 +0700 feat: implement multi-bot support for Telegram API with rate limit handling and add task queue for uploads Km!x?tree b4bc79f9bc5b7c4f2df20459f3f9f500802470c8 parent 91cfee0b375b2ed93cb76db7ab0e17207a288325 author MythEclipse 1779112958 +0700 committer MythEclipse 1779112958 +0700 feat: implement auto-retry for Telegram API requests on error 429 and update documentation fB#x1tree 545ab9856e7e0f488d8df2309536310cc9dca63a parent 525348b1f3c24148a79bd85154a65be52df91ce5 author MythEclipse 1779108903 +0700 committer MythEclipse 1779108903 +0700 fix: load BOT_TOKEN from process.env in tests to prevent leaks - Update test/bot.test.ts to use process.env.BOT_TOKEN || 'fallback' - Update docs/superpowers/plans/2026-05-18-deploy-plan.md to use placeholders - Completely eliminates hardcoded active API token from codebase Co-Authored-By: Claude Opus 4.7 Q;v2x,tree 885f872069069d51824b17ebd5c145a300e29121 parent bf6d5f04c4e6243ed679852e2a23d246dbca9fe9 author MythEclipse 1779108766 +0700 committer MythEclipse 1779108766 +0700 fix: make forwardToStorage fully dynamic based on fileType - Replace forceDocument boolean with fileType string in forwardToStorage - Dynamically call matching sendPhoto, sendAudio, sendVideo, sendVoice, sendAnimation, sendSticker, or sendDocument Telegraf API method - Correctly extract uploaded file details based on what Telegram returned - Fixes IMAGE_PROCESS_FAILED 500 error when uploading ogg audio, video, sticker, or voice notes via HTTP - Update upload.ts, bot.ts, and test suites to match the new dynamic signature Co-Authored-By: Claude Opus 4.7 (x{tree d363c40e1da7a98b7f105f2a2fff32fa5f570c9f parent b2de5f583dc33c5b523188dac54f75e5acd95507 author MythEclipse 1779108381 +0700 committer MythEclipse 1779108381 +0700 fix: bundle migration script and ensure file_hash column exists - Compile src/db/migrate.ts to dist/migrate.js during build - Copy dist/migrate.js to Stage 2 (runner) inside Dockerfile - Run bun dist/migrate.js on db:migrate command - Modify schema.sql to use CREATE TABLE IF NOT EXISTS and ALTER TABLE to add file_hash to existing database instances on VPS Co-Authored-By: Claude Opus 4.7 $nx3tree 4314d81b6954b986b9988d59744b6f133720ee8d parent a0262e2d46e86ea750467229de02c8f8e759b4dc author MythEclipse 1779108137 +0700 committer MythEclipse 1779108137 +0700 feat: add design document for multi-format upload and anti-duplication feature "ahx tree 705ddb7935ee847e253bf74a3dbe699246be270a parent ea4341fdfe443845d9c2ba17b69b272db75ead25 author MythEclipse 1779108111 +0700 committer MythEclipse 1779108111 +0700 style: run formatter on modified files Sߑ%xQtree f739b5a8cd348325205f4f284df1f9d7ad1d989a parent 04a2e52250658ffc17499766546c4ff0880f2d6b author MythEclipse 1779108076 +0700 committer MythEclipse 1779108076 +0700 feat: implement deduplication and all media types in bot listener - Expand registered bot listener to support sticker and video_note media types - Check database for existing telegramFileUniqueId to bypass forwarding duplicates - Update tests to assert deduplication and new formats handling in bot.test.ts Co-Authored-By: Claude Opus 4.7 Y'xtree f4a6c617232e946dba90f4339a5b369b4b309f48 parent 4e805689c14fd3702b0c9f1f38c03d242f5ccc61 author MythEclipse 1779107995 +0700 committer MythEclipse 1779107995 +0700 feat: implement deduplication in HTTP upload router - Compute SHA-256 hash using computeHash for multipart and JSON uploads - Query database for existing file records with the same hash - Return existing metadata and download URL immediately on duplicate match without reforwarding to Telegram - Include fileHash in newly inserted file database records Co-Authored-By: Claude Opus 4.7 Jׄ&xctree 49b33aab22778d2fd3dc4223b5709affd32ec8f4 parent 22c2133b24d47fc9d4e3fad1925cf8bf67067e37 author MythEclipse 1779107892 +0700 committer MythEclipse 1779107892 +0700 feat: extend file type classification and implement computeHash - Add sticker (webp) and video_note to classification mapping and file limits - Handle unknown mime or caption fallback to document - Implement computeHash utility using Bun.CryptoHasher for sha256 checksums - Update and add comprehensive tests in file.test.ts Co-Authored-By: Claude Opus 4.7 Gxmtree 732058b5a4cbbb1715e08a053d8aa03d4ab089d0 parent 3d2500ed7f8a83a11325f6ae84eb57338896125c author MythEclipse 1779107779 +0700 committer MythEclipse 1779107779 +0700 feat: add fileHash column to files schema Update files database schema and test suite to support fileHash property. Co-Authored-By: Claude Opus 4.7 B+x1tree ab661af0d1b5d30035be5d3dbb6664a594637c9b parent 5de424bf8e90a23fc8544b9a5f12f6c4a49b9495 author MythEclipse 1779070803 +0700 committer MythEclipse 1779070803 +0700 fix: auto-append file extension based on magic bytes or mime type if missing 8)a>xtree 2116562f406a0c84b702c26ae35a7445e009d07a parent ed7f607ee4c5409c19292bc2e627732ed99f7386 author MythEclipse 1779069382 +0700 committer MythEclipse 1779069382 +0700 ci: add write permission for packages to GHCR pushing ;W@x tree 786a33112e62f191c3e74cdca56e19e08bb5f4c3 parent ed88069e60f7f2f352b1c66264f084a1e77bcd21 author MythEclipse 1779069322 +0700 committer MythEclipse 1779069322 +0700 style: sort imports in telegram test to satisfy Biome check s[ x7tree 333d6b534362bc8cc56b8d2ab8b3a8956d6a9385 parent 910d29d5b9cae2f1050f1aba99e9740f60dbb80b author MythEclipse 1779069264 +0700 committer MythEclipse 1779069264 +0700 fix: assert sendDocument with config.storageChatId to match dynamic mock env in CI cbx/tree f58a341962cd71da99af41a8e0e2a7ff419b0cfb parent c0827b09c5734f1a38bb3750bf896403379dd7bb author MythEclipse 1779069224 +0700 committer MythEclipse 1779069224 +0700 fix: upgrade Bun setup version to latest to support modern lockfile format NaDx=tree f07cdff798467b586c50c5891e1a6bb3fa0afc03 parent 7f1178d72b510522f79f99d630498b5b17426096 author MythEclipse 1779068569 +0700 committer MythEclipse 1779068569 +0700 fix: make DB tests more robust by checking definition rather than strict module identity e(xDtree 7dee9e60ce11d243d9ceebee9db7d455973836b8 parent 06a1b38c025ae868a2f1ada6858d1d8623d2770a parent 1fc408046627586e1906b9f2454c7f07e3f97805 author MythEclipse 1779068497 +0700 committer MythEclipse 1779068497 +0700 Merge branch 'worktree-agent-a7a26e7873ab5b94e' Taוxetree 633f9563e2e028939a3debfdbfca1573425d1e73 parent 2c1c5ad6383264c0ec97910b56e7a80ea3f19b62 author MythEclipse 1779068489 +0700 committer MythEclipse 1779068489 +0700 ci: add GitHub Actions pipeline for tests, Docker build, and deployment Co-Authored-By: Claude Opus 4.7 ;qxDtree 4ef940d99619d1e7e4e3eb84c0bf4df18dd2e1e0 parent e4c074c81f47bea51fc257596c5949db6b9e6905 parent b41fdb4a887e94217e674d40751f2f409a4d6d1f author MythEclipse 1779068460 +0700 committer MythEclipse 1779068460 +0700 Merge branch 'worktree-agent-aae37f6f3cccac163'  c=xtree ce8e68d24ba8fa90f5ffae02dcd480bf5a71d3b7 parent d7f5180eab08eefaa82377da156ff7e02da24541 author MythEclipse 1779068456 +0700 committer MythEclipse 1779068456 +0700 docs: add deployment design and implementation plan kYhxx-tree d3731c514bb8193f08d58f93f8fb65823b5fc23a-h397AF397 +0700 chore: add Dockerfile and dockerignore for production build+:s*xz-tree ec818722ada3fc406688496f7b7d24e7ef841ded-h442AD442 +0700 chore: add docker-compose.yml with Traefik configurations:*x tree 325913e92098ead18af34767e5b5836e27dd9f0a parent 91986d1d51c2411f144696fa016a0ec50507c872 author MythEclipse 1779067524 +0700 committer MythEclipse 1779067524 +0700 fix: add Bun database migration runner tQxtree 42d98de0973264cb6d213958261038d2cb55eeed parent 9aedc59b69772102cafb5b496747df09be8547dc author MythEclipse 1779067135 +0700 committer MythEclipse 1779067135 +0700 fix: upload binary files to Telegram with source payload Yxtree 1c38e45dc33cce54ef800aca2d3916b77f26d121 parent 6feca3564af2e2a58cdc567e601140c039ab81e8 author MythEclipse 1779064995 +0700 committer MythEclipse 1779064995 +0700 fix: refine Swagger docs headers and dynamic examples Y'xtree 68eb596a98a9ff83e3dc5f4c90e338f698690152 parent aae8ebfbcf74594ee2282b238f4de43386bc61ae author MythEclipse 1779064767 +0700 committer MythEclipse 1779064767 +0700 feat: add Swagger OpenAPI documentation endpoints iWx;tree abe8cb98ec8b13338f7630edc8d452ce7621caa0 parent 825a8f42cb36e64995cc441eb73f533fbf41d52f author MythEclipse 1779064247 +0700 committer MythEclipse 1779064247 +0700 chore: update bun.lock to include @biomejs/biome, typescript, and related CLI packages dxtree 6714e5c8786aaca5e43ffd78c28523aca8f0b70e parent cf79a1f1955f6a6eb4441fd4a9cc841a3528a1b1 author MythEclipse 1779064233 +0700 committer MythEclipse 1779064233 +0700 chore: add build script and target bun bundle output gXxtree 1d1c4f213a385bfc81f9f19184966923a26c5be4 parent 3f4e697733039b9b4383d098d97da9a79c8141e8 author MythEclipse 1779064141 +0700 committer MythEclipse 1779064141 +0700 style: format and lint codebase using Biome v2 `T͐xtree a4dcfd12d72020fb50f9c15fc26853cb845dc75e parent 9c5a855f7d21d97ef83d8acd063a02aafbb5fea8 author MythEclipse 1779064026 +0700 committer MythEclipse 1779064026 +0700 feat: migrate entire codebase to TypeScript BVxtree 452583dcb0bb3ec8615c0c32d4950456b31849ab parent 252b2e4a1f7783c7a6789aa5d4c086ab1d500a44 author MythEclipse 1779063802 +0700 committer MythEclipse 1779063802 +0700 chore: configure typescript, biome, and package scripts mYx tree a4cdd6c1e107eebe38d3711d658c0767bc3dc301 parent 434905313c1986ec37652a09f31aabca0b2aaa8e author MythEclipse 1779063390 +0700 committer MythEclipse 1779063390 +0700 test: isolate module mocking and add sequential test script `[x^tree 6d3325bbc2799882aeca9668583b01e0efd79e48 parent 99b820709d01052527a3ce4734ff212c200bb67d author MythEclipse 1779063305 +0700 committer MythEclipse 1779063305 +0700 refactor: replace TypeScript with ESM JavaScript Remove index.ts and tsconfig.json, update package.json, and install dependencies. Co-Authored-By: Claude Opus 4.7 Ӧ4x_tree d83fa65f7a2c7ebc08af96039beb97a10d75a504 parent 4996d7548a1b932d1fb8d01d46db3bf1f8973800 author MythEclipse 1779063275 +0700 committer MythEclipse 1779063275 +0700 feat: setup HTTP server and bootstrap application Setup HTTP server with Bun.serve and bootstrap Telegram bot and other services. Co-Authored-By: Claude Opus 4.7 ˛xdtree 69ed9ba9274b53a95e804df5690a8d8245e6f6d1 parent be93a06918531e07905dc3d61a685c7ca99ebc99 author MythEclipse 1779063197 +0700 committer MythEclipse 1779063197 +0700 feat: add Telegram bot handler Implement Telegraf bot instance with file upload/forward handlers and mock test verification. Co-Authored-By: Claude Opus 4.7 o+x}tree b804e9db8018d05f26a686c154070ea10e0234d1 parent d915814277e4c30f21a14c8f52a9e8fbdd84e0d7 author MythEclipse 1779063055 +0700 committer MythEclipse 1779063055 +0700 feat: add health check route Implement handleHealth endpoint for Bun.serve to verify DB connection. Co-Authored-By: Claude Opus 4.7 {xNtree 6cb43165ebf341a863b3ebea00aaee39d8de54e3 parent d7b8e9dd086517865ef64ae09610549bf1e9ca68 author MythEclipse 1779062969 +0700 committer MythEclipse 1779062969 +0700 feat: add file routes (download redirect & info) Co-Authored-By: Claude Opus 4.7 jxOtree 8afb941670dbeb0ec568031a6d04cdfc453d72b5 parent 1e29433d5d6ccf3f3982dce5862b10fa9833bb88 author MythEclipse 1779062893 +0700 committer MythEclipse 1779062893 +0700 feat: add upload API handler (multipart & base64) Co-Authored-By: Claude Opus 4.7 icx>tree 5b604121a90eed6694ec3b040754e9a197aca9d4 parent b621a73ca9a0548043082f989f4486b0f84d20f7 author MythEclipse 1779062781 +0700 committer MythEclipse 1779062781 +0700 feat: add Telegram API utilities Co-Authored-By: Claude Opus 4.7 bxAtree e972b38fb43515d4af00a7adb7bc18ed6d2df791 parent db71f2928831867a7ebfed3063cb04791a92318c author MythEclipse 1779062534 +0700 committer MythEclipse 1779062534 +0700 feat: add file validation utilities Co-Authored-By: Claude Opus 4.7 ReӞx>tree 96ea07962b9f8e5ae7c158b61e48ca87eae76c7b parent 281329a1afad5d87ef17215963272e4c0a814787 author MythEclipse 1779062492 +0700 committer MythEclipse 1779062492 +0700 feat: add in-memory rate limiter Co-Authored-By: Claude Opus 4.7 [cxBtree 97422055f2943fe49f550c3429e829885216f7ed parent f9c0bc076893eb040fdc59e95a9cbd7c08df5da8 author MythEclipse 1779062446 +0700 committer MythEclipse 1779062446 +0700 feat: add Drizzle ORM database layer Co-Authored-By: Claude Opus 4.7 eexHtree b96e8a268e19ef296429991b1ab4c70f424ed5c2 parent 77032538e8bffb263f793c974ead979ca771ccdf author MythEclipse 1779062335 +0700 committer MythEclipse 1779062335 +0700 feat: add environment variables validation Co-Authored-By: Claude Opus 4.7 "hx<tree 17dbff3e388f7c293abd61d88d72696d099169f5 parent 25c82bcf0b70907221eb56fb34a6631603c02388 author MythEclipse 1779062013 +0700 committer MythEclipse 1779062013 +0700 feat: add Winston logger setup Co-Authored-By: Claude Opus 4.7 0bxGtree ab5243c311cad0d5e631c4d9e27357f09d491d01 parent f423e1f25df3d165e3635c6992010fc84e6585b6 author MythEclipse 1779061866 +0700 committer MythEclipse 1779061866 +0700 chore: add dependencies and configuration Co-Authored-By: Claude Opus 4.7 g@xtree 67be35fa7bfe978a8a536d17f5da9e981a86ce70 parent 3fb3dc3d40c8351efd488bf094049b42df93f831 author MythEclipse 1779061733 +0700 committer MythEclipse 1779061733 +0700 docs: add telegram uploader backend implementation plan Ztxtree a2975f17297ac440fabe924e3efc6c05cb73c6bb parent cf55f6dee8872e65c63e2772754dc2ae03c0e3f9 author MythEclipse 1779061362 +0700 committer MythEclipse 1779061362 +0700 docs: add telegram uploader backend design spec D!WPx tree 8d70b092d2c44596b3bb7f248945874a29f1c862 author MythEclipse 1779060842 +0700 committer MythEclipse 1779060842 +0700 Initialize TeleUploader project with Bun, including configuration files and basic setup )W'x340031QKON-L/Je`<;5S/S˫ BV$2HsU}ǤsJk.01̒Dk,VYUh]Ё0*LPlvcIfL/vyrAU:JzOfy /{;7UUj>&MFw SUae^u >}239qM ajlw^{qTFf@jנ;TVVm,~}v:Y}JV$/q^FbLqvvJ}e^Jniqr^,)CΊ\Or\앯V0v~ ii{;b d%vSgX|^5[€EUӋ ,Zր"r^6fvٔOLoJ\bx6rLl)I8yJe-Yu\6`jd>qfi(Y!vfwnu+j5%ij~ټ[` !,Uҝ diEVJx$40000 workflows+ ,v͘}H|35x&100644 deploy.yml" "$key_file" chmod 600 "$key_file" printf '%s\n' "$PRODUCTION_ENV" > .env chmod 600 .env VPS_SSH_KEY="$key_file" ./deploy.sh --no-build 2xmQMK1 W.X=y_Id贙H6 ϗ$q g 8RDgM cqy`  ;_/`S 6q&cl(ֈu*ޛn?gQiI5q(QLa`t#AW&| d415\l+J*WLhZȶ۬qlg-txx bu$uHa!N$6Q*2ӳB䬉KhGnkursHCwU37ĴxmW[sۺ~ׯʝZHI{P3Iso츱:y !`.N0ۃF2əCO߅OLE-M'}d?B'9™T©:< 8o>>Q{%Vf*aʟR8 A0OڊDyK5x 8D/.ϩ?=0'ԵuWF?݈m >v|tNK8~Ox>_'%6RϘMj'[=^a.[փ[ cexɥtI?]ғCv*:O)?ڟOd!X$iU!OT jyņ>1Y{ʽ+&(3]J.nf%ЊE52rDU@"ZN'pOH̭kaE쇑vpPNג*t5^Öq'tkj8$S`}7/?}{ym_onrl`3:a`i/J!`!SXw_*O+ 6'v$JLI,H#rBp7,1ِRZPB2p{#zeD^ٛ-lϯ26pҢJa_ʖ}4/ۚXfYԲ,I.+iXK,lе#+qWoJzsrh>z"͸UVhs JgůRlU~ٕ6/!PPD렴E@lײ1ء搊)@ Xb9Ҍ;t(x S;'pyi`{fY{*'L J7X.ƐTJ}b(<4ER=BMX!pu7 ru.ʄu {PBl wxbU¿p I-?"!KmJm=- .GQ8hvtK@!+x=rFvLDƛ.3?ub#eY|I~ʰeNzٙv6e^%0{Itìqg-nt%0dhn4?~9])x{&/8w[J]ٜK'EleM5ɾ;=} [m.JY~s,J+m@3qRentbK)ѶL~C_-C;+L&Џ n:ߞY C+K2ȜЋipI[D-KcD7.K "N `H"̱0B'|#kM?Nh|9{leɒhFL 4ލS2 Fa;I&r]x[9v^|ijBq$.JC/𪪹+']/4wE Tm)pL6hG$ ؇dvA$̀¢X8b*]Ox(8hX{$$Zf^ʉ"o{IOiLҮ^D _5޽],\?)id:ktH`incOΒ:$j@$&3Q&Ke$Ҡ DkDT %h\طD@ X֓h ~ߵ1,Z9†8SB2ҟQPN{G{Et0-Zݲw=Zj>f}6"/F-N}&-Qxϖ  2JAf^MzfI{BIA ¡*dC>зBgmΫT[mEXm/up5] <^I#4{0P\|pnC";/b"`thp~vr:Lo Vbz DǞ CIUOg 7Oҏ46@̡铝\Jdۓ'^Q!?÷o? wIQGo!Qus4]'Z#Q90@ ͽΆhw)h<`hμ23쇽bgC=eg؂kְ¼V,4WCQ_*YuN&0][ږkq|Ԑ5s0#轣wj.NNǰd oнF!m[b|zg1KZ Vir ) (4h Z(upKr]?_52Q xKtclf `1W WHpel2dm A?c7ym @eXh1 +q-P~!JScxjg'΀"ҥ7ْB{0mǍz >sF`>gto r,&\Dt0㢫p5.1x~֤EdO)5l;u[qpG<'Q1!iё.[)趏YG%95dE؀IC`)hcwy4t2gx10ƹL.ʐ?c b0Ø>*2W0K>f1̸Poe ֊BҌf2tEFK̀KqvXV•PP5@D Lfqݜ_ڀkEhSjulk:Xoؐ[U:AFC Յ  #"xLx")~58 lW\q-t3\Y}TS0:T?5Qdv@ɦo8w"PX;z/I$>2^l[UZLS5DG .K5"@K]c'C5 h$4qDפX6S}5[qnIrq)DSL7o ]su4ϒ^"k_*  ' "oTV4VYRÍͮʥҀ(*hH# cH"VsP%4 QHl۶!Ė/t9Ia3;m dʈt.M]n{#^B ;tn+:Re,(;6WFpȌ(+,spzgk-"֌s.) aMhL04vYg :ᙷ]aI(jSGVw-X{jُ:,ҷ6"'0g$P5'h'٠5pA0x4Ns [R{& *sj}1B2\.&'WtsU&!aq1< N+|$=|c'M\0j%rI{btH 6Rqt]', |e-2ĒL*#vBl>%#i"}]#JTjkX^lt(P˟ V9s@VʷUZL{GCj]R9 vM f,ZP۽,N t(8aq P8y}pDE12r'u۵v0Jhꭧi4Uv󙴛'(.|G̉\טPF7Uqb/4i;i#x EUzmks0NЮv0<a>>3`ϝ{JcyKLkƃp_ah쫆"OX%.Лkq[l)joMM+Jxu ?Xg/G"[krQv!I 9Qw3<6'r$q> 2 م"D y}E0p+!w@(Q.bHO0,M"ձ8{b%72V~Y?;^s!9X,-`!rݻeXPg*\*M2gЇݲːu[}ES||=<`$n4]]fimy<"۽#]/ڠ)g׫j Jyce9!ߺ^eE)SKqA)K;cJ0Vl}xig!9jZYOfKE501k<496уJh z ii2pIrTu4͖1b* Mwe (\4x k*@)I K؟.eφPMUPPLIl1h#Mgm,=TqIe/Q~߼ E>hLx ^O32AenX#{Vg/"Ih b=M~|EU)Xv$ C,3ײLkYV,3+YVB,3N JlJ5hyY',fVUvt]QJUegnj7КX閑ތAq0D^{ c#tӤ w؈\vͩkrIx s=:-P)> )6NdBHW dl,]~Rl:g8oځ~M8v%jE @?X\+eJ9fi`%?k!DeG:*qȜTN* 3HQc 4sKPЯd؋B'NϸF?5( ˽~=f[=d8&{g=ޖq+|㖅`NJyX㐢GV1kz)CR9}@#@&VI&~VUvc'״U]0| WO_߯Ȯ Opr ɭ^ίs}?[ሯ'PYވZHc`NO-NJ'bcdML)?s[-wU̘*#oýv1jR' &"P̼<\PfޑMD5.J6E5F( l*6bi\OyuP7[ZC >rMD7pM_%E\*>rAo;2z-vh2F{q{ kTNVij PWƑʙL~϶,JTɅUAie⬏6 AP% ~5 P+qOY̭M5%'gfLn;IܾZ^\xI16K5TkPI^Y96䔕qI{reLA }wORac+W3etи6>w i} !lln5ؽrVUd͖GܤX'#C1p򾰜’sf|nvO-bªBhR´Jy_g,ގ8cm >,/GW݋rWcz!\%xg=LI9gh=÷ͬmȵr QK;~-תo\P:iG$h3ec6W;)0=1?1F!&gVިy6zIb>c|=)n{* u uA,wI~ JNM25%_eH9Դ6=<؇%[uhm#+5#  a z%Qb+moÌ Z6uom,P'=܁;W"ZF<^8onH 88崍Vy^C/*x/U9[}ל|"8]S<"^¹g,ӵ;\^w|B^?`ٴ!^-|b c%`9ЖU ube[,l $ V-/$ei+Ud+mޛz nޱɚJZ wl//l?G6Rͫ@"򀤶!Y3?>%>8ߊsJ_x8j ͣ'[(FjzSrzssk$(#;HLOI=l__gpfZjC2qX|+o75ejzDm,x = =J[| q\L?, ]~˧s s CM=芟Gt{R}%68<XI% mWQ˜x]8o (7A~CIi F(wU7(6M-5$SVvDnQW~_ dL"s(L,AyQqm~1@2o5 ɿ_|LCsUc|'Ɛ>0wFi#dL=Tf#eFW1xER:йpa:EPt3^f>YlULjhUx-`W p|wtgVߊАQ7#OY!Wsx|W瀇.U*9LГX*ċi?x 9>Odg߼[B[zK.fSup@>MLM goE[U/!_H~鈌>*-Ʃm߃ Gwy7%ߪɶr@b5UH'{zc_Bw^=:DB+/X/]p_ְ4 Oz; y`@|< WY B/%3IWϺd$_td/iꍃX?~qOW +1~897-APa2~9ɄuSBc[T~HQss aR~%{/O)5l-wk>(d}ܶ'۫NNM9c_t5бɍ㵟]Ozܼ{nx +ɔ=bH_!k#$B:ԈJІwj;, )O VyRӘ}ژ:o)?#I1%ger0 FA^n6oҰ9ت$^ʇZI;.LS^ꋷŵq[=l#ioCK[u%q-xƉ7ԇ&'X S;*cq^!vwz:_uVQGJLGH =Xz O1ywt8rAǏa=ALY]4gEe|)՘xٵ7xݡzb_HL z_qb?Zyczh$z"e(ULߠI{1WeRժOORE"P:Dn|Wug?T1 nKv\os9SG'~[$z~gϐ,g:I?~)U%Ffgy=g%Q~LݿR?몋๜ 7n"'>T(g=}{UJ}.^ Ig͏} Q?Dyj3+f,rLqԼ ϿvSn/Y-cq6.-Wu>?<1 A?᳖φG#.WP3'2{L;}\Q"ϒ᳊'XS'*dlgnG80%;KCLEگH@j)#۩d`0lf0 ͋#r1TL"R\Ac˿nExaw~w$x3{7V&EwѹnnO_u]_y^v?2'TB a?6iDM(߸Ᏸi)^'u_=1Q\y#"j|V&۽x%Nna9\0bU;8N-L} Jaϖbh0sơnR5OF*ة?%4o^o>޵N NׯT!t3v@,n"omew'J5'j̈ȏ ˄Qx')w/ qk3h}iP~ݨ>k+Bkuh[|(-n_H `YbB(SWx[L7`&xAȰi.xp@e1^OXowTp5v>9C%tA78N쩼YjuݥaMar bZnVWEUY7G?=ʽ4 v/_~B[eu_}G\ڌy⛼DÚ]ͧޛ9c?-znu4' ivvB U=e'@XGN&^nyjUL{(}i1KzmKSolR۟ׄc&54/&ɓRtpFrkȕ:,($1)Yy[љqXmU&"^=( 9KCzk{ 0]3[袘_[:{Agy,<1)N l ԟlnܧ,悝4ƨ./L_:(*)5-qk9D~nz&s)u]niRW4mS,cl>9e RJ{r~{4BOc j)bJW 5 XT r6 Lga%8OOU󻭷o2qJ@{_C1̻eƀ-qw(B9QGE-hWqY:pQZJL"S/Vч{X)!)9DJu?q|'c׉RAT}r&v8mÌFpTyNRWG5&"[ w`fc7o.TCqddlASmRMuKԚڮFwZa| PmeQtj7 $iEa~?<\']*nLG$pE૭܎NisqjAx 9P)&rG}'O'/I1R e-vKhsvabQ'> X*+rDD,gaG{-f,t13XH}5Ǜ%7}Es/vsUe?*%;_CDJ~[ֹkߢ~GWvE~K O>Usɫ:oCP2ʩNtXCvAvX0Fu@hVA"kI% $c rS!aߵ;|F S[O/U]T-P]/ss=&{p׭,S_VN]ۉlgH1 !%D'5U;/p ˂WTǥY(4,\v%s{T͆T>,*4j7=L9d,rcx ;_*'mZ=pS*+K6-+ChU" P(y)mjIpi6",D.W\9wL=ce;LِBErY3hmju8(ϫ١d$bmM{tl) NGo449.Kڡ7AdyC" 8lB7hTՠ.? U)}%^Z1ʉ~~ 7_6^ \ҽ]ρ VpZPdW;%%)!ήFXyFR' -]k{}[LLŗx:}_dy3lT_zX8Em*+m3` ̬xBwS7H6iBpn<ɫ3^8*z~=_IZ. aԘ[LCZ\KzێUےO=!f,#fIz~Zzwy^dY^7JmYϯuW =V癷v{m%n ,t+L56kՉf$x;΂Q0WKӼ++0MݹuDftT)6q&r $ Z1oiqoSg{z#O䎖&Y{ie]2Yn,8z8p\t'FQRyX7(1[enݥxj&ۂ_?O&g?&J^uuvu?\zI~<`HGE^e ?FEnYOYY;o,< :P/襣ON6̕ @3yKٽc.Wr=<͒Z~*Χ)/ ] sU%9˽5q~H恾hEH:>OCu\* uZWfs|[nJ+hGÏpߺgDʗppɂGbvU_zA%]Z9nج΃H` )N0h̘rp8-OXȼ*熉_OxAJ@-wK3ֵ]bC{&ӶN6藜m` ^dY-5aƵlr{XQc>.A4*l9ԉ6۵mڏDYj66ІQf-ݒ1>cf3q$ 9apo H|ڔ A"YN &m ]q7{؋䩕Fd|ӻ{XnN 1qՍC017cuRN S0,b1kOwN uncKI/y9wՈb.ofȒFg)Gzuz~ɅUyq2eiY-,F}ǘULǹXonK}+җJ hf8̤·P6.Z\ @׾o<&[B0:عLQf17ɿ7?h}Vn !=244v-f!@ gA󙎏ǙkH͌Q |D:aBlfxFx7~qdϘ3b!9~daIyw^T]q#Iܼܧ&5OHT$nYAk Wxh!Vp'ظ&%Wmfo=daADŇPrIRU A!重6VbΎSg."bomNlCKhyJ& ^2*>+C5 , M{>9>kSr[s'ͫ} 2|"9͓ HO(Qa!j!Xw2R4]>^jdD`&M< 74,RZɶZ.`4c%$w3)5VKnԈU[0 ~-Z};|֛Jl ~NRzچHS1U^4Ys$%۷*f\ΞJ9}]d~r g+j(]Lhp'3!4lpE6uGK`׶Q,vgEjr 0qn;z#ß+UM.nxxN&}D=ﻘ !l[4H.0NGn6]ښRl;f(6aQ̴ODhBa~+g"}"ք\39X+¡ml(k39u IY;O21'Ҧj#!؊wZo4E=&>հ&yV-INBM#U쓇hk!с˵{)cjs6]]}Z)'G\d~+y"ǝ#} $K@/eu2 yDS.xsL"յVsǻ ; 4o 8cFXDF}؜`چ.]ř刵&pE!N402bt2Ǣ7ny Rه gy[  LH!a8(mM43453áT,I"c+!n:9zyDz*5_4-C&8jK0鰠CKNRVm-w3IT|tpOTSS`٭@} hR%țM#hZd%@b}W"R?><%ˣ[,Z`P-e` 8%54@_k`oNF$XyekH͏ ?'\ʑRcx!-UĂ52XitRd-'{jNتM+v8c9U:.;]=NBuń?0Lbp"y!|I f~$21@EgN 73/Χ\mEnaDٍŒɳAbC9m4PX#K1[ ]zKPM4O8lwҥd k(3WwiHo\] }r~ M`*FuѶ8pef洟ch#aZ>:{@ 6 +N^5?> ?aWxAL3駉ƀw M!·P3aCm^ٮо>NJA(93͸ToZ!i*sJ,N{<5;I\-Z×?ڬ?|E8FI |vQ zVd)^p97bϽvR1jΫ`~˳m2F̦ϸEn=WH+OBƓ.X'^[|rv3ƣz]*s' HpL^-螵Z3)-WY=^?m풪K"x.ELzZIxl[6Flq6xTR?Oo-0|U(V1kvĆMG. S]+Kq>-;adMJed'|hlz!u>7Te?~ Vo}&}E]qo[BQy*4bwʻ!)s{g^c2|-^-m]m8pU|E 􀿜3/v_WumA{-xsEJEk>*Fyono,\y'cB=Z.(|.yxkN{kN@Σ— \(F !q> A[d  'VLB]0|yMKG醈{M]xx}>mnH!{:'YoKyC7`8x #׋AnR@| E]3ǫg4oȕq$O擽F/Z5+ƵD},vӘ&Q1ŧ"LtE3\Ly/ߧz=[6eG ,xMѧP\hn"5n}5VD).)>NIC[^~ѽJ{~K<gȩ@?2^gwɿ_l9\=7i7]m*n\2,\ñ}`CObs7_d9*o[\FFyQOH:=.ގ}_՝7V^ó9HM;&vOU}c/rN|PuED Co@u%6Ǯ}̝+xO-/ߟ?7ljY I,u `0>=7 4OIx<^T-}*xZZþ<E .Z2B֡ik2PZSG".KR2?FPh5vi$bm QeJ(t&7YxX&e5< 20ϘT7sq᫅%6*FSm}홢{G#)Z'e@\74~3l,> '(vFe;1/mRw788 x4(fUS*LZt{wڬ n 99v>-E -nR VT; )^ My>+Ƀ35dܞ^iwŞ u [x"H2OF=8+wbOcL['M&{ĉ˰bsppWmRhj[]k|D,hA ,НNhx<y bxy!tHQ06 f#3w&zB4ENXbK*Hs#zZMY“|WSz^~JAY{oq}{c4jb I{wmxWBtώ @q=nW R3ا#⭼(0AasE/OsOJC^/M:V\/Uį p"C[syvAГKso԰%72.\mjF10 h*eV8{::p+%=Ŭ3wGXA!'=H!tk٦<huU`"XMS1D {nxE㯷'=Uxy 9V̅rG?Jl/X˯ Si#i`@4Sen}(@Ӂ _ ֊2}2Ry*&w {^IaׯC&< >2>mO2 $,O/ܫx:LHEXVp(kP[d& 4DNCW #SyZq'6k\x]r"vkNM*DF"XsɑU#<֛+~nKxV^j eQzTnU"p9O .u9Seσ2c9ijJ,QXet>c0* B%2[ e1e Fswس[b f\p&qճ Bu@Km6ErϬTuC@B!v:bqn!q<=?j$|`(U̮t[axy*u|O[1FA7F <]Eѝ,n>^?W_4yu4*iB2`U#L+!ǔ2lG !éyF o1|[K5 0< ˅e]U7N;ٹw̳_3Ac~kNy5E՞zsU[-ޛj;fiKHssC]vzOhXv/R$jWW# oGUiuM?k"<rѩncz*zTT{aVQ1F1 =8SүE׫;?F8h'j"zG -bȎ湏M62܇Rp|e32L}cpt:4J&sJfy7ǛOyPm Nw4|je%FIv%?(VV9TC1h'~f@[ :VPJ]}Nl>䶉<^I)0@˒(u]ǏϮskSSRВUQZy2>ͥ D*T slHvvdخK fN|bmm>);7d_u^P^M3m&tڏsE~ QW`ElG9|sC9#{*s_MIJ):aʁChSscJO| 39[Q{=G{Pij^kfRtJ9h38F9eV366̱qcbPP^*&h@8/`Ux{&`(6G$.-UN~ϻCRIqfn{VfAnNzyxJܹgZZN5[k#8;zZ A[ wͩiͦoXT]Lڐ  <Z y_{n}S`m;az]|om"%M*!uܛғgRyS" }Vm~}f}.|SzV5=-vƟ8+na*;⸷d$^l9@{1A9l&!u hM"{@Y*Iq\IYX$ZJB@{n۝m_m{ZPRo׻"9n_\Xlzcz>s~3tWwAOvΊv#Ө6X~KGցQ>lJa^͵̀6怠p[Fki)Z7d݌D7E׳>U?ǿwz06,rN#q`ż lcDE[0 dq<jvڶ{ٿ..|yZfbX nwv<_^m}AA_[&ao?x3z 䶟{'nW/G9O??4oe Bme(%ɂ(ψH]-j -\n3) h:TXcR8BjרPI&zySomr7643$=VtP @\'n^)p-)̨»d*RT]s 0⅖s_;n-A$kb+kO$ю*,eݎ(؇&Wq0.dT300OC> Y^P]falCFgYx(TR029K6mhmLS4CytQ\xYsJi<.s1zZ1]df&g Yiqf9D;Dja 9 CB3?'Y $,"l/Czr_g'@];Wv/ ȋm)FP {St؝PԸҩ0Ԭs\tTϏ0Cs=J7{ !ۊ3;1K BXM9m!e-h*`MQnsNr׎z}Nu]~ZK +)i==wWww^­5.`+%c]8;7w4l;0Kmg[V7;7#{ z"PXC"3|0𒒚۲& Ndy JQ4n^ny}~ (.+k/sn]/Lxۻ܃ ob)x4NvYޮHw=}'?opB尔}:J+ă[r![£ĺ.q(+*ྡ`;Fٞ-LQ-K^Bw~_$Z^J{V}l@tEp=1*dkܶtT;̌ 4n=eZx[ I_ іdmʨqZ@݅XRݧgnΞj/#0ewNi!ԋuaS=~^ |;/6Ҟ?G>G)I{znҞ@]R`?øJ{ :3PҞ?CH{ ݦ4& #‡$PM _HBvr}oSE,=&Тq,W,[:>p"ϾlVj&bJ]'$Sܝ%d`` $(k+CźêTZ,9Gp#"K=tDƴuYLX81+ۉ'=ru_؈}_`S;0>A{[0> SE*}qn6_GJ^ǹyqsw uu׵sqwq}/|}FzziPPXf Z 6B^`˓ж GvU4b+F.gA`]e)Kgce=n7/9l͉`taUz?IVM(S,ᱥKpġЀ ӁIrVj3|1VI\3_n!_7KP`d6m@l9{wyyŃ!QaJq-ua59<.Wj/ xTVݸvo ; %Fl%]b^^Ăg-4+&CY)9aCݥuL߼l蛬 vC9voêk*sU^\3{=agy8suT[)Dʚ=5~2L2"wXe%< {gBk8Yy?^7]c2SVqI2Kx#2hu [?rG"OFB$41o]ה3qqK@1x/39>|O&tP=-N[q%I|0 AHMhIBD̿5g:YYY8'϶.jJgvΉMuQtl a}j WStxx.SWڝ\&QuQs#S%C;sZ/DcV?Y+ckS5TSsIII˭f7>xs .FR03ڜNc֯!;}퍩>C_>G?B~PU78E>w*Gr~f%e|CDjՠ(}\7ܿsL'"l^tH9.XG>g)ElK.q:n* <0>wujpА j/?[.w~iDt GϾp `S9XuM7C`~WW "e/nc劵h):OS;ێ_~<1%a* gom-҇w6U*9,=0u~ UxpvnD d~ǞXko^okPXBy+H"hs>4 _?[%o+ 'u+)u.i׿(r{u8lVV dgU@ lOp/D7\W~þ eh9xr=0DMcHs$g߀78hW(,1G0mͪ3`.~{y|jUgMsdA0E9shAf>sl4!h-2j))q#kE^ ?P]9BAIDa}Į 6r{ 9¤5e"k&a4; 1s4>#AN:C5_Tށη ݸbD acEݜɻR^TQ):1%c3{DmmM<((@ ;^L[Z܏XndfC(Rg/eܧ3huhYY BRA:]AH^'(Dk`@_YN z*X\I)fp+sqj\NHV^lu]epZf7gmk4JN)yJ+#lުGlF71o|_#%B8Ebp'2wtXL(lQD!Mb,~|*t^uwQ]s_ ilz+-ٚa/)_jې>#_,MmgHi1 2{69~Gg~tOsdkT0J$iuؐmMֱ"@:Ef?Cj˽vy˺'i ?IiJn 2 Rc!^_vAנWv6I!Q 砀0Z ˵RɳW5ca!\TR:םUB,R5#Ue `]I\ۊny(?ćJ}PMKizG#-u5ʔoU}8Ètjʼnx7qaｪ>}r& B݇^7C\T-69`7&Q0l)tYr®{ł~}27+qW*jQ|/uLU3$F4tZDB,+HuLafq9)蠺O3u!LΜ:ᰖ+mk>swD[# :Fv {lF9..ԠD#訴x!6\!?އgV(lYR/qи |4^)$}5Tׇ \R.8̮؟3hbIO f,"XF#Dy?SL9pfO" 8J#xFmdɽˁw՘~-2iZߴoyr% Ǡ8ލ(/(E/c)F^}FQPI{kџ$D]*\4/p y;J>{t|u~F.;mDYGW|x x]4f q4ƅ!N˝<;CbJ 3`* *wi&o+̊lkcà.4W?}ڴ|gyq[BÀ(^_{yfP=XSs+l^bP ]: _`]ѷѸˢrGL UMyNtSn DLD<" Z5?dTǢY"?U 8ߞ; -`:OVU%]`f l1::7A3+}gt^ߒo`}x&[#!/bin/bash # ─── FileDrop Deploy Script ────────────────────────────────────────────────── # Builds the Bun app locally and deploys to the VPS via Docker. # # Strategy: build dist locally, ship dist + Docker context to VPS via tar pipe, # then rebuild the Docker image and restart the container on the VPS. # # Prerequisites: # - GitLab CLI (glab) with active session, OR the env vars below # - SSH access to the VPS # - Docker + docker compose on the VPS # # Usage: # ./deploy.sh # build + deploy # ./deploy.sh --no-build # skip build, just deploy dist # ./deploy.sh --help # show this message # ./deploy.sh --check # dry-run: show vars and exit # # Required env (or auto-fetched from GitLab CI vars via glab): # VPS_HOST — VPS IP/hostname # VPS_USER — SSH user (default: root) # VPS_SSH_KEY — path/contents of SSH private key # # Optional: # DEPLOY_DIR — deploy dir on VPS (default: /opt/filedrop) # ADMIN_PASSWORD — verify health after deploy (optional) # ────────────────────────────────────────────────────────────────────────────── set -eu # ── Config ──────────────────────────────────────────────────────────────────── APP_NAME="filedrop" GITLAB_PROJECT="superaseph%2FTeleUploader" DEPLOY_DIR="${DEPLOY_DIR:-/opt/${APP_NAME}}" COMPOSE_FILE="docker-compose.yml" DOCKER_IMAGE="ghcr.io/mytheclipse/${APP_NAME}" # ── Parse args ──────────────────────────────────────────────────────────────── DO_BUILD=true DO_CHECK=false for arg in "$@"; do case "$arg" in --help|-h) sed -n '2,/^$/ s/^# //p' "$0" exit 0 ;; --no-build) DO_BUILD=false ;; --check) DO_CHECK=true ;; esac done # ── Auto-fetch credentials from GitLab CI vars ───────────────────────────── fetch_ci_var() { glab api "projects/${GITLAB_PROJECT}/variables/$1" 2>/dev/null \ | python3 -c "import json,sys; print(json.load(sys.stdin).get('value',''))" 2>/dev/null || true } # ── Default credentials ───────────────────────────────────────────────────── # Hardcoded defaults for this project. Env vars take precedence. : "${VPS_HOST:=45.127.35.244}" : "${VPS_USER:=root}" : "${VPS_SSH_KEY:=${HOME}/.ssh/id_ed25519}" # Fallback: fetch from GitLab CI vars if defaults are empty (for CI runs) if [ -z "${VPS_HOST:-}" ]; then VPS_HOST=$(fetch_ci_var VPS_HOST); fi if [ -z "${VPS_USER:-}" ]; then VPS_USER=$(fetch_ci_var VPS_USERNAME); fi if [ -z "${VPS_SSH_KEY:-}" ]; then KEY=$(fetch_ci_var VPS_SSH_KEY) if [ -n "$KEY" ]; then VPS_SSH_KEY=$(mktemp) echo "$KEY" > "$VPS_SSH_KEY" chmod 600 "$VPS_SSH_KEY" fi fi # ── Check mode ──────────────────────────────────────────────────────────────── if $DO_CHECK; then echo "=== Config ===" echo "App name: $APP_NAME" echo "Deploy dir: $DEPLOY_DIR" echo "Image: $DOCKER_IMAGE" echo "" echo "=== Credentials ===" echo "VPS_HOST: ${VPS_HOST:-}" echo "VPS_USER: ${VPS_USER:-}" echo "VPS_SSH_KEY: ${VPS_SSH_KEY:+}" echo "" echo "=== Files to deploy ===" for f in .env package.json bun.lock schema.sql Dockerfile docker-compose.yml dist/index.js dist/migrate.js; do [ -e "$f" ] && echo " ✓ $f" || echo " ✗ $f (missing)" done exit 0 fi # ── Validate ────────────────────────────────────────────────────────────────── # (Defaults are set above — this fails only if something went wrong) : "${VPS_HOST:?VPS_HOST resolved to empty}" : "${VPS_USER:?VPS_USER resolved to empty}" : "${VPS_SSH_KEY:?VPS_SSH_KEY resolved to empty}" [ -f "$VPS_SSH_KEY" ] || die "SSH key not found at $VPS_SSH_KEY" SSH_DEST="${VPS_USER}@${VPS_HOST}" SSH_OPTS="-i $VPS_SSH_KEY -o StrictHostKeyChecking=accept-new" # ── Helpers ─────────────────────────────────────────────────────────────────── vps() { ssh $SSH_OPTS "$SSH_DEST" "$@"; } log() { echo "→ $*"; } ok() { echo "✓ $*"; } die() { echo "✗ $*"; exit 1; } # ── 1. Test SSH connection ──────────────────────────────────────────────────── log "Testing SSH connection to ${VPS_USER}@${VPS_HOST}..." vps "echo connected" > /dev/null 2>&1 || die "SSH connection failed" ok "SSH connection established" # ── 2. Build ────────────────────────────────────────────────────────────────── REPO_ROOT=$(cd "$(dirname "$0")" && pwd) cd "$REPO_ROOT" if $DO_BUILD; then log "Installing dependencies..." bun install 2>&1 | tail -1 || die "bun install failed" log "Formatting code..." bun run format 2>&1 | tail -3 || log "Format skipped (may be clean)" log "Linting..." bun run lint 2>&1 | tail -5 || die "Lint failed" log "Building dist..." bun run build 2>&1 || die "Build failed" # Verify dist output exists [ -f dist/index.js ] || die "dist/index.js not found after build" [ -f dist/migrate.js ] || die "dist/migrate.js not found after build" ok "Build complete (dist/index.js: $(wc -c < dist/index.js | numfmt --to=iec) — dist/migrate.js: $(wc -c < dist/migrate.js | numfmt --to=iec))" else log "Skipping build (--no-build)" fi # ── 3. Ensure remote deploy directory exists ───────────────────────────────── log "Ensuring remote directory ${DEPLOY_DIR} exists..." vps "mkdir -p '${DEPLOY_DIR}'" ok "Remote directory ready" # ── 4. Deploy to VPS ───────────────────────────────────────────────────────── log "Creating deploy archive..." # Build context: everything needed for `docker compose build` on the VPS DEPLOY_FILES=( .env package.json bun.lock schema.sql Dockerfile docker-compose.yml biome.json tsconfig.json src dist ) log "Shipping files to VPS..." # Atomic deploy: extract into temp dir, then rename — avoids partial state vps "rm -rf '${DEPLOY_DIR}.new' && mkdir -p '${DEPLOY_DIR}.new'" tar czf - "${DEPLOY_FILES[@]}" | vps "tar xzf - -C '${DEPLOY_DIR}.new'" vps "rm -rf '${DEPLOY_DIR}.old' && mv '${DEPLOY_DIR}' '${DEPLOY_DIR}.old' 2>/dev/null; mv '${DEPLOY_DIR}.new' '${DEPLOY_DIR}' && rm -rf '${DEPLOY_DIR}.old'" ok "Files shipped to ${DEPLOY_DIR}" # ── 5. Build Docker image & restart on VPS ─────────────────────────────────── log "Building Docker image on VPS..." vps "cd '${DEPLOY_DIR}' && docker compose build --pull 2>&1" | tail -5 || die "Docker build failed on VPS" log "Restarting container..." vps "cd '${DEPLOY_DIR}' && docker compose up -d --force-recreate 2>&1" || die "Container restart failed" # ── 6. Verify container is running ──────────────────────────────────────────── log "Waiting for container to be healthy..." sleep 5 CONTAINER_ID=$(vps "docker ps --filter 'name=${APP_NAME}' --format '{{.ID}}' 2>/dev/null" || true) if [ -n "$CONTAINER_ID" ]; then HEALTH=$(vps "docker inspect --format='{{.State.Health.Status}}' '${CONTAINER_ID}'" 2>/dev/null || echo "no-healthcheck") STATUS=$(vps "docker inspect --format='{{.State.Status}}' '${CONTAINER_ID}'" 2>/dev/null || echo "unknown") log "Container status: ${STATUS} | health: ${HEALTH}" # Tail recent logs vps "docker logs --tail 10 '${CONTAINER_ID}' 2>&1" || true else log "No container found with name '${APP_NAME}' — checking all recent..." vps "docker ps -a --filter 'name=${APP_NAME}' 2>/dev/null" || true fi # ── 7. Health check ─────────────────────────────────────────────────────────── if [ -n "${ADMIN_PASSWORD:-}" ]; then log "Running health check via HTTP..." sleep 3 HTTP_CODE=$(curl -s -o /dev/null -w "%{http_code}" "https://${VPS_HOST}/health" 2>/dev/null || echo "000") if [ "$HTTP_CODE" = "200" ]; then ok "Health check passed (HTTP ${HTTP_CODE})" else log "Health check returned HTTP ${HTTP_CODE} (may need a moment or TLS not set up)" fi fi # ── Cleanup temp SSH key ───────────────────────────────────────────────────── if [[ "${VPS_SSH_KEY:-}" == /tmp/* ]]; then rm -f "$VPS_SSH_KEY" fi echo "" echo "✓ Deploy complete — ${APP_NAME} is running on ${VPS_HOST}" &2x/MH@D - For CI: Gitea Actions secrets injected as environment variables8#in CIV#+ to SSH private key file # # Local defaults 45.127.35.244root~/.ssh/id_ed25519.?c ALocal defaults for this project. CI-provided environment variableE wU (ғ`}F+EgxVYs6 ~ϯx:dK3j+l-ݴ%:DWI*$GGbo_d~> S໔{$>-R?T$ 7#ʜTEK? sF LdsF>FDHBvl O_J>i@u+J6-;K05X v$ct[)ԗҵiZOQ1vq%,RWqT&37x2.aۚl2j̯'>r1[6kP1Kgw6*umڸiStw >Ss  mɰ]wI泍'ҧpHsNYiМ^[x6+)REͳ63MMEIEi6v&vލeJ'J#5ZF_%S꽔_ˆ{4g41)5 9KN9i95 CG}~=YчȮpV*U a+jPĆ][jSKp!u7&Ȝ|4. bɄdEؚDDײՑG`M/NFeK}?@w0(8 **1&K^Yar3wGaQszzZSڜm I?|Qf s>N(~"I_CC ^ C9@w^Q{b%LjXkFHCkI:_ mȂKU PoX!dDʑi(WeMsxlG" 7PQO!S8;%Ĩ`>d6@~: e~ 7rPx}(%E=(YРХ/ӈ,_9,#2(s,KH]%}vE_WԂJ>}"?Y?no[M:dy#=!"?A0]DFeĩ MqVdY]DLo]4y}*&2#,!w4c$quEQZ'!E͗K0,9DI. Yx31ļb5>O'|qAjr1ûVe^;Svx340031Q02025054-IIM/J--OLI-MJLNK-IMaX0G@fZv 1핢|o6D3B7%i|Fhubjة-%5LN,pYN9l&ow-<s]3bcTg`q?v5m 9%ə)`FfM7$+'n$ddTy90Cׇ6[ ~eX/k6+ՄgxkcļDL\B7%%E79'51O7(9#$5(U(MaP` hc,6ˬ7sr`xYms6_t1)6ŖƉ}^H KI@JH )M]  !f1PyZL eHEJ2 Iy1pFp8 /`8ppCׂ(rsvD1՜~ܑzgD,ǘװ I$ ќrNq _`$I.@9nM|~<d7at{℅N<\\)˜ppXd N*+BNI"Xδ0)4g C0$OPpS$InH&{`g/ݝhex4(K Jie"M  S9W+"5jdy(Tk#pGCZə "M&LLI",LjdD n>M2Tg:nvii@i,֕ՍWhNt7QYAp+ڨCG X!EyO<+ |hYjc|S!$,cg<}xTh*Is<Ejxudbd@/Q̋,KLx18L;rre\'" Dy Š  =&9G8a"].J@$WXE 7`ϐcĠGPt wgCkx^-'}OdQZ^G|9˗+KaF˥)KK-pqMg$Ln#R&Qt Imit1U4M1&CS2- Mٹ 5VB(܅Seh0Ƈ%^lnnFl<HΌ'jV»Kщhcyv'J4 rY1xPȅh!g\z_^PmeI|g:ZNSiCCsgqໜ1]b2+d֓=x'`TD*- Љ8ikSКRie4F)}a۔tiHSDs5Ym.jwJ9kdޒ43-´ax)9zt'xTPtZ`}Aڃ<et%4D@,QU0E^W\qƈE$B1묛|8_]zztu1<8gGHxppx0J\<::%`6(/N}0=\:N,78zؔK4n0p_tΥU3sԽʄ||EM|3bLMYEd"|DK ` 'XabE]*AUhԿi? t [s;gq UGcw2Gg5xI"nYъvtt4'X5UWݪ6X3@HtzQuK3*[<@t[^cH̉uR3ȦzL!bF B L-m\J0UR8/J P@ wݮSH 5Bok^Ysֺb"L85RO =(d,-:cPGҭݽl qR^+9_Ϝ%H.3^zÛݝR rש;d _]FH,zP% ݪVy+ ֒A3h<^J kr7`(벿P<ﱡ+Єo̴DW.pwd|SokoTՃ߃S$ 6RWTh̉7|*ZJ(,ehtڌɔ-²Vv> 2:3&[pʌ/g㷃]Hocϡr!8/Oq#4CΚPeP>&/"p_Șf30^YiV8{)9f`݂;](_[w8qa>u_؁4Yݍ3q];cqZd\˺YA|X.若5;hЯlbrVuSYSi^+4i}g.JnEoY _PuO7XZl7a`O4ł{A*U#OS!zU'>OU0ԅs<nҔ]'&?^ۍ[fk置|ԃSӀ7Z7Cm8s^\7حnݑ[}oj(\d6@mUPHZjB 3Xb PSL,GSyg71iH,\ Rb2ߌ&J=||ݏl?~;9ӐY`kss^nm2S#^U26=#,cva/gO/}"_!l*َ3` ĄTB[Ax/%TӍ)"IYL1ћ2d<}N~/('bǒoml {t3T￶Ru %x]BAmy.idG my.id my.id`)$_   YOUR_TELEGRAM_BOT_TOKEN/ 1234567890 0yourdomain.comP 2)user:password@host/dbname?sslmode=require%!<8x(\# Upload and Deduplication Feature Implementation Plan > **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking. **Goal:** Expand supported upload file types/formats (stickers, video notes, etc.) and add SHA-256 / File Unique ID based anti-duplication mechanisms to save Telegram channel storage and bandwidth. **Architecture:** 1. Database Schema: Add `fileHash` to the `files` schema in Drizzle. 2. File Type Parsing: Update `FILE_TYPES` map and `getFileType` to support sticker, video_note, and dynamic fallback. 3. Deduplication Logic: Add SHA-256 helper in `src/utils/file.ts`. Check DB before running Telegram storage forwarding in `src/routes/upload.ts`. 4. Bot Listener: Check database using `telegramFileUniqueId` before forwarding bot uploads to the storage channel. **Tech Stack:** Bun, Drizzle ORM, PostgreSQL, Telegraf, TypeScript. --- ### Task 1: Update Database Schema **Files:** - Modify: `src/db/schema.ts` - Test: `test/db.test.ts` - [ ] **Step 1: Write the failing test** We want to verify the new column `fileHash` exists in the schema. Modify `test/db.test.ts` to assert column `fileHash` is defined in `files` schema. ```typescript import { test, expect } from "bun:test"; import { files } from "../src/db/schema"; test("schema has fileHash column", () => { expect(files.fileHash).toBeDefined(); }); ``` - [ ] **Step 2: Run test to verify it fails** Run: `bun test test/db.test.ts` Expected: FAIL because `fileHash` is undefined in `files`. - [ ] **Step 3: Write minimal implementation** Update `src/db/schema.ts` to include `fileHash`: ```typescript import type { InferInsertModel, InferSelectModel } from 'drizzle-orm'; import { bigint, pgTable, text, timestamp, uuid } from 'drizzle-orm/pg-core'; export const files = pgTable('files', { id: uuid('id').primaryKey().defaultRandom(), publicId: text('public_id').unique().notNull(), telegramFileId: text('telegram_file_id').notNull(), telegramFileUniqueId: text('telegram_file_unique_id').notNull(), storageChatId: bigint('storage_chat_id', { mode: 'number' }).notNull(), storageMessageId: bigint('storage_message_id', { mode: 'number' }).notNull(), fileName: text('file_name').notNull(), mimeType: text('mime_type').notNull(), sizeBytes: bigint('size_bytes', { mode: 'number' }).notNull(), fileType: text('file_type').notNull(), uploaderId: bigint('uploader_id', { mode: 'number' }).notNull(), fileHash: text('file_hash'), createdAt: timestamp('created_at').defaultNow().notNull(), updatedAt: timestamp('updated_at').defaultNow().notNull(), }); export type File = InferSelectModel; export type NewFile = InferInsertModel; ``` - [ ] **Step 4: Run test to verify it passes** Run: `bun test test/db.test.ts` Expected: PASS - [ ] **Step 5: Commit** ```bash git add src/db/schema.ts test/db.test.ts git commit -m "db: add fileHash column to schema" ``` --- ### Task 2: Extend Media & File Types **Files:** - Modify: `src/utils/file.ts` - Test: `test/file.test.ts` - [ ] **Step 1: Write failing tests** We need `getFileType` to recognize stickers, video_notes, and safely fall back any unknown MIME/caption to `document`. Add tests to `test/file.test.ts`: ```typescript import { test, expect } from "bun:test"; import { getFileType, checkFileSize } from "../src/utils/file"; test("getFileType handles sticker, video_note, and fallback", () => { expect(getFileType("image/webp")).toBe("sticker"); expect(getFileType("video/mp4", "video_note")).toBe("video_note"); expect(getFileType("application/octet-stream")).toBe("document"); expect(getFileType("random/mime")).toBe("document"); }); test("checkFileSize allows up to 2GB for fallback documents", () => { expect(checkFileSize(2 * 1024 * 1024 * 1024, "document")).toBe(true); expect(checkFileSize(2 * 1024 * 1024 * 1024 + 1, "document")).toBe(false); }); ``` - [ ] **Step 2: Run test to verify it fails** Run: `bun test test/file.test.ts` Expected: FAIL because sticker and video_note return 'document' or other values, and fail the assertion. - [ ] **Step 3: Write minimal implementation** Update `src/utils/file.ts`: ```typescript const FILE_TYPES: Record = { document: 2 * 1024 * 1024 * 1024, // 2GB photo: 10 * 1024 * 1024, // 10MB video: 2 * 1024 * 1024 * 1024, // 2GB audio: 200 * 1024 * 1024, // 200MB voice: 200 * 1024 * 1024, // 200MB animation: 2 * 1024 * 1024 * 1024, // 2GB sticker: 50 * 1024 * 1024, // 50MB video_note: 200 * 1024 * 1024, // 200MB }; export const getFileType = (mime: string | null, caption?: string): string => { const mimeUpper = mime?.split('/')[0]?.toLowerCase(); const mimeFull = mime?.toLowerCase(); const captionLower = caption?.toLowerCase(); if (mimeFull === 'image/webp' || captionLower?.includes('sticker')) return 'sticker'; if (captionLower?.includes('video_note')) return 'video_note'; if (mimeUpper === 'video') return 'video'; if (mimeUpper === 'audio') return 'audio'; if (mimeUpper === 'image') return captionLower?.includes('gif') ? 'animation' : 'photo'; if (captionLower?.includes('voice')) return 'voice'; if (captionLower?.includes('animation')) return 'animation'; return 'document'; }; export const checkFileSize = (sizeBytes: number, fileType: string): boolean => { const limit = FILE_TYPES[fileType] || FILE_TYPES.document; return sizeBytes <= limit; }; ``` Let's also export `computeHash` helper at the end of `src/utils/file.ts`: ```typescript export const computeHash = (buffer: Buffer): string => { const hasher = new Bun.CryptoHasher("sha256"); hasher.update(buffer); return hasher.digest("hex"); }; ``` - [ ] **Step 4: Run test to verify it passes** Run: `bun test test/file.test.ts` Expected: PASS - [ ] **Step 5: Commit** ```bash git add src/utils/file.ts test/file.test.ts git commit -m "feat: add sticker, video_note, and computeHash helper" ``` --- ### Task 3: Implement Deduplication in HTTP Upload Router **Files:** - Modify: `src/routes/upload.ts` - Test: `test/upload.test.ts` - [ ] **Step 1: Write failing tests** We mock db select queries. First query finds a matching hash. Second query finds nothing. Let's update `test/upload.test.ts`. Add to `test/upload.test.ts`: ```typescript // Add imports for db and files schema import { db, files } from '../src/db/index'; // We must also mock `db.select` ``` Let's update the mocks in `test/upload.test.ts` to support querying. We will add a test block: ```typescript it('should return existing file on duplicate hash upload', async () => { const mockExistingFile = { publicId: 'existing-nanoid-id', telegramFileId: 'existing-tg-id', telegramFileUniqueId: 'existing-tg-unique-id', storageChatId: 123456, storageMessageId: 7890, fileName: 'duplicate.txt', mimeType: 'text/plain', sizeBytes: 11, fileType: 'document', uploaderId: 0, createdAt: new Date(), updatedAt: new Date(), }; // We'll mock db.select().where().limit() in implementation }); ``` - [ ] **Step 2: Run test to verify it fails** Run: `bun test test/upload.test.ts` Expected: FAIL (no hash check exists, it uploads as new file every time). - [ ] **Step 3: Write minimal implementation** Update `src/routes/upload.ts` to compute SHA-256 and query database by hash before doing any storage upload: ```typescript import { eq } from 'drizzle-orm'; import { computeHash } from '../utils/file'; // Inside handleMultipartUpload and handleJSONUpload: const hash = computeHash(fileBuffer); const existing = await db .select() .from(fileSchema) .where(eq(fileSchema.fileHash, hash)) .limit(1); if (existing.length > 0) { const match = existing[0]; const responsePayload = { public_id: match.publicId, telegram_file_id: match.telegramFileId, telegram_file_unique_id: match.telegramFileUniqueId, storage_chat_id: match.storageChatId, storage_message_id: match.storageMessageId, file_name: match.fileName, mime_type: match.mimeType, size_bytes: match.sizeBytes, file_type: match.fileType, uploader_id: match.uploaderId, created_at: match.createdAt instanceof Date ? match.createdAt.toISOString() : new Date(match.createdAt).toISOString(), download_url: `${config.baseUrl}/f/${match.publicId}`, }; return Response.json(responsePayload, { status: 200 }); } ``` Make sure the new inserted records also include the `fileHash: hash` property. - [ ] **Step 4: Run test to verify it passes** Run: `bun test test/upload.test.ts` Expected: PASS - [ ] **Step 5: Commit** ```bash git add src/routes/upload.ts test/upload.test.ts git commit -m "feat: implement SHA-256 deduplication in HTTP upload" ``` --- ### Task 4: Implement Deduplication and All Types in Bot Listener **Files:** - Modify: `src/bot.ts` - Test: `test/bot.test.ts` - [ ] **Step 1: Write failing tests** Update bot listener to support `sticker` and `video_note` in type list and handle `file_unique_id` duplication check before storing. - [ ] **Step 2: Run test to verify it fails** Run: `bun test test/bot.test.ts` Expected: FAIL - [ ] **Step 3: Write minimal implementation** Update `src/bot.ts` listener array to include all types: `['document', 'photo', 'video', 'audio', 'voice', 'animation', 'sticker', 'video_note']` And check the database: ```typescript const existing = await db .select() .from(fileSchema) .where(eq(fileSchema.telegramFileUniqueId, file_unique_id)) .limit(1); if (existing.length > 0) { const match = existing[0]; const url = `${config.baseUrl}/f/${match.publicId}`; await ctx.reply(`File berhasil diupload! 📎\n\nDownload: ${url}`, { reply_parameters: { message_id: ctx.message.message_id }, }); return; } ``` Handle extracting file objects correctly: ```typescript const fileObj = fileType === 'photo' ? ctx.message.photo.slice(-1)[0] : ctx.message[fileType]; ``` Ensure stickers/video notes size limits are respected. - [ ] **Step 4: Run test to verify it passes** Run: `bun test test/bot.test.ts` Expected: PASS - [ ] **Step 5: Commit** ```bash git add src/bot.ts test/bot.test.ts git commit -m "feat: implement bot deduplication using telegram file unique id" ``` `Ȼ3xvW(ί8f II,%J,Y% )Ghn|ﭵKoޟ_П{8s@JvUvVDy}tOdF8cqQ?zq&~.XQ+O:Բ˒ыtjwً{5c qw2N#T$j~b|qktߦ8ǣ\L`˸~vCo5_>shEwwsa/I>.4qtB%0k &8{"˹JƗ"WqG'` ~&iН{x8 FY:Ni_FEq و}q zkY7sq\|ֈ&P'qѰrlV5"F)7Ŏ瓗Gyu(5L*F\ )%'";װڏ#Naj#Y<HAQT@c4B3bXO$ \8e%@i>??'Kޝ ztd4[Eu?K~ {yVYt%v?a0E5g?ԇ0_^<= ?I|O;m p\Xh0ݴ*iv"3kZ=3@5Ȭ[(iMXuyk}4D~[Z<8/^́|,q!&C" h~">LȂCD`p] )q[#^&.!,,G0hOM3` cj6!r-ausE ۝- rrw|pJ_p Y(0/ FhOFr*]NÑqRmGWy0#Kſ>aţe=B7ynjoU髳S.1ﱃS2 J#( vNFw1 i7ioҏ6S C j?۴p3(j$rDG"EL[_b! tńNpRGY,;ɒ5>Mzy!DvK1I&B{>o Ea(+ @mSdTX!f?No4 @ l'ooGs1p^ Uj}g8Mt>,Ts1@ L(@2VMÚ~XG2s:}GB}_ hV_ 9-@q6 Sk2U+KT0́bQ8 h/;:N{f^%rlZ6ߺlR<v@Va8`'0q[]j. |asw\AeuI 5r3"0T9`.WK+yk#^`}1g4f\ ýt2ŻPmM,g%J40٭dh탐١Ja 4_0ZatU*<;rd4vA[~+2'văNCt흜#5xw9$)lTg.5BbZЬ Hr~m=RcZ\XVgvq=nCDr2`M0]F:=?}{|ˣ `qgQ3l&bΐH/%hX] a#uUʨiR Q{<Gi"4r%P >Hmq+o-O)l S08bHc=ЎZ9i8 lh?9=GVՈKԔ`s2"z@`|@̈́Dt|g9M$z [{=F;KѕqzAmQ' 0'wH͟Wܾ;<21Az'LJ;}CUݮ?x~9?~pvFDBKjJa#>_{?lu4F'IvfDu5}eC:B+)d,`Gg m.^IKpkv$"RŸǤUP/T(Ƴ؟rJWܱWuی򚶛QN V)ʭv1j !@>߷5gGGCrQ6ʆچHz4Gz 4mjaz5Ɔ(ffMvJVZ`'{~T%t74-`nC9 }g1scxL/_h =I _9k<5b|)RM!'䛗x-_/+5aI(D*ghMǕ-4*4l[/W-52䦝4NLT5\9yhX7&R`<&%.qnPGW Qa_1xƭA@C,Y?tT-_256UvmɽBM/Lk%GTîWwv"ٔ}3>n?:U kP>"j}LK 0Iuu|Xcٿ/WغmvZ.u_okFwXP甂ק! b~;=b% 'V2s3)B!(vU-{ev'fj5t5/Ы$ ?kJߟW K;A_ +2:ŽU\]pbà$MZAvjHEr898}te>`9+bu69շF;͆AoĭGhnP{]U4LT!J9ugM|/ϫLՄ4&]͇Ḃ ƓH SLA@QV^z'32'gֶTRt>RsͨsXʿnE =HսL=e]K"7,%FZa}]_fhdrM<ro/-َk(8><8jyr9}Kwo'.G%'+ؙRhxl*fyTFeiy1e'(u Ǻ}ân߫ Ye8ߺ!Sm\zi"Ո[uѦΝ˿ Uvc*瓈6UR)fףq| tn1H)0ij;{g;+Fq?n-5[-~$cfat$ɀBax]r(t',= K݃o YP<^ڋ8fD'k=_ӃG;xW[yk ڔDa2/"ܝI:ɺG<꧰5K S' [OTgM/M&֩ ס;cPI\JCtc)t3[ՌݘͬY8=a}zq9z'hBVW[{4V+)mEK\rH.ɀYqeU % 7ǼEWVBx78-W#/Po8ӝ%vWU%}ڑXEؾ.A~OnDG1t02>fw ET5w?Y{p'zzYIGYM"^G(<K"g{Rzy?GEwek W(1gZYFcIm(XfOo[+K+\z$-RG9{PPuBCtEoq vh]:|:;~~GY6^4ȃ'4H'V'Iu[4OtuQel{M,֔Wv^g A 4ĝ~5?G'`JW2e`t Qg5y~>'mS|%K:Dؐ]otg6[^/R %kZ^iFnDggg8QQYT:,"G9k"d; 7s!F}/8'ĖgӋ:cqJdk7VmX,]EekJWzqIUtH~g99(A=)<}2  QLa\ZW%{bMhT,Oj6pyb!sMG8&HMmBLKfi^X_,{m9i{j~rͬ,s4C0WIQ5UϿ^㙑.#yݑL,P5c՝4rodJ_a3Qu6φEl@ Kht2H] GxY)Lj 쬘5Ls>iP-:#[Y.3!ҭcL_ž,vb:~]Kcxǎ*X\Vq٭n8jKb L=}AS4=Z?.UbyɂaX{2?p0,H:N'@Ӑ0;ÌX#'$5R̳zT957NiFϪVhWs5T[2[*{d* $Na 4]k^Ukb[-dW\wjضD|xy'm۞UnJ1ޮ-ðm^n%&B˭7GW;}rg28hZ$T;(??[W*wDdM[iڿׅnI~jpitL4d F鮥9YśNy7y=BnvԾ=)xs }06?.msEh~Šnt𡰔Jݱ*8>v|Ó֬ z7 urNYÃʓH.;3@E7n*? gGˎڛOh`arsiQ?xvMu￐ |kQzf4~JÚtV7VK˭Em'&,}VɱLn4U;v٢"U P[8fKh & `= f.w;#߾م(֑7=/nWfWF(Jf!=滰u_?)(iVϦMԔWB,zlÙe֖U6AKS1}dCsHi*bCq_Դpg{ S ,&LșAڤCpZ:mM4^M}!Xf.o,[{0N}rss5$<# erx$3CrM)}4g2ObV$#Ml =r/< rfRTOL .^I/qᫍNpc&tҞRdb.uٚ@qnp:쥣oqN 0)r*\V߮CWםpTJ#p5g.*jCoABL($;0\S ' ֽ,ooGWkk13L"f!mL2ݥUNSyQE{ºE<\ j]S`3L.?P* yZAi{P6G54Lj&{$<"!V~,>]f<SSMX,gefL\%){|C}}#ߞY~,TzB¡n>[5;꫈" *1¸w8a7@uի˖P:jD8jW%G*ì;'0]V/̯{^ Q=bXJOSB} _-~ .3`֋SMQt )b,Qi& /!&(ztػrCs*( u˿Nuj%73A8qio掘7ߥv}m1'Ν/R& SNHޗKQiVuAnڰGz𞪾_CmnA>vA\!QwjMVVF͊'g&j2 ɪ@Gzuڀ1[f2)ҪV> -Tε`.厚p]*4c+ּZ;ϯя}:2xg^D~PK$g'Kf9G-'ZMqiSXٺ jw+UŌ͔hNMBܶuno~/vnY=g'ߍmѫ'S( [L_Fy•L R:d ZX%H|5prä z3*kUf7aeiM{M ܿmw9"Lm7B9 [i?S("@ZDu;s6=NܸN>+/O-Ln.wvLzqcopZ|z˧?'_3Pd =Dz!$6pFy? 6{P W;NrdʹN0c-WyҩKuZ"v'Z8nVɸ;kfe3a?W~QTᑚjhiIew # @.;:I1y CD~9Ԟu;x)iiӎ1|ĚI-}7e>No<$?@thNF$#I.E(p#P>17E[}K}5~Zj|Fxs\|?hv {rW(?r*?q˫aBKoOUYѬKGyѻC5yH3yrM( }N?.[z*}xdO ];YNmAR3'"4{ 5^dҽJ 3>eXӸ5 mca͓l%9f֭ͣdӷ0ZM_N:t݂LA1Vw6]*a4_5|<< &PCՎ]큵‘ }7A+&q޼B%{z'g̜)q΁8YmYPy3 V:c=N x^nd&Lol2 T\_#l&B fS-5;I͹|NϦx _LhìA/EФŸ:#yYv dT-k9Ozr@iPbDm\ Y|<{GJy{ޖ6i4%M3.蜾In`Mv+=L4E>8vҊow \ӱ&BJE@2c1.Iu1OQQ !<-yt 5uB7`z5B'bdTx:cvKjVrCC.')QF|!NJȽTjiKό"?ìDEe @5^K궦`6j/2eUS@f֡Fmo(5JM~ ݺ$~UtO)}bݤ$EKY):wRs9N0DSnNҏ``^X0 ufuQS:Mt``GŋiIMw@^MKpkQljڝ W ]UE^tU&Bl3#0S+&xt"cM|j.OϺEQ^{\WYw87P(SJ]FtE]9NEyZ^/7`$*{GzNz*OTLg>97&scux؍U].oگO [IҮ t]1t&ҝeAq z/X [iW#>ܔUZ w2H>o&} OByA[_(w.'-We(lb7:]-% 9 iO]YqW4M89`Fp`Aj4*26sbRaU=JJ8GT_]RjN1z:6sDd cO.V+s_uf+62o . /Gs̘ j c'|3S]b1/Az7hՈ%u[̖-F"];vSOI^ׇʉv[MŜ>8xً8N'jKa-=@yCs=cuɂu[[ BՒl zuкx*~º̯pIy.>W~6Ǔ(WqAg+5٤o4k||DG[Rx9(2h fzMPwFJUt,{0yNцd¬8T|OAO¬'(%3~lO'`0rRyszP̳O)5 7G~9qKc,y/ gDYnﳲM?yv'K{_}!&QZ k[z![V1 p' w6=r7bfZYNV*~h*/- |0&%C9.0M(dƩwWPaGFYjam&*gY==o=ILA kGhz U0jcY4^0;a)`%Q!]+Se*)]sG|HB)A(oYV89_7}D8+ ~ˉ$H!G ;]&3_ ! sWg>r^ >bJ1G (ѥu;cyR`OgJtמNa9M㷞v*'٤\4mw._IzҥDSp7MfC7vg&S~;~y^h7HŚqݿu--^gi j{JLZ<5=LL>S3Jt'?t8Mʺ޳^^4T(yjƤ|j=(T~jOE"J5k>ħ) g׶Z7dOsei=oiO=ҳof˹ϸ| %+Dv?0O Ͽ٨1D+A]- S`}aW4}EMH-ti=,O35u;yFSpf8cgAw۔w1 kwAt'VT!{ѧqgWU8yq]u0[jmD0UySi"1X/)dU !7A)ޒT;T. Ȥ tw-NW_.@PPq\Qi!%!YJWlm1*``<r`? R[T P5D^&9|Dtŗx>khxя#  44!F۟uOZ9.%-1Z//ݼiB|0z\ɣI$z`ڈ?i\}"GYz(H C<чTOF4zP7 Ztc7QO..ai/fzc:ŢЋų4.yZ(a|_g:.g.Qۆ_&Q_?^l-EĂxXSW$ ($Em-^%V/~LA?2Aw~\ɸo♴i 9fa|| XtѹX:6 ~Ha9mV+>~ZѥM/S^GWiQ^w 5Ϣ^%iܪx۰Miѥz0]^RoyyK˝kaݯ{˽7vji_u^:vVxWc^Gk[ka_M?4'sh0· u q„onHRsy4Hxp7k䃺"Pܓ"OTŧ)n qڤAwe` nR-Wox60Xjˡi`i!Q=-~|>?2KY0CZӼtU,l(4ьc~AQ[&\"UmkJ",]tR|w7l99nHhetYz9]LUER5Hj-*u CW_LVU mT0$R_ p9^fPT]`7Z2JEQF/>r ;!=Z/LrgOrضVsi%7 ZX ."LX^+Tx(LH@2MxK6y5ؑ;8B<6 WZ=IpJXTp%]{-?n|~,tؽD(n-WX%/jrH$Qn&oQ'^e-Y'w0ezeۯQ|+j+exj;@_m(?aqv'`0'Dr!G06Ƣ@Ko->%l6b/w˫ -PAXV𢚡( zlEъq~QGU0!z7 \ٖ)x I=޻L<69%eLx u<#'?nFd!!I32H 4$;\}yl;mP &..Qh|[QńzW];3z'*SOurIpv0 oQ\Cwz=9zDi[⛟5bz .m#h/aWmF}@ȣÅ N+u.;e7% c4wu i2jFi;ynyVݑ (uQV59aVۇ(&?Svhq%5e1nnyi8ZaE.QMGH(#W$C iLf2jTCuԦ7j/P.*,K"'yD>Cu@6[m?M<즽sN=Q[60[U%Vs.k$ڒW8sT['3z*9-Z|dLm퓈v S }sAF i!wb Xr%CXn@GQh0űS)<OO b7;:k(x[w?lf25syPZSIݔrZRO<ق:],<1aqsP Tg&S}2$AhR֝_$jng .Rgh$OA(p \g!5\%ӰRDc|~}軖s'o'`f_$8FVQn2࿳j[.WFϹ[HrXk w=w%=OJ9XϺS6B ῆFs3Y8˰gSKf(gsTĮO *o[ 7݊Sn1TKU*K+tW)< z"yp#yG4S< &2ӥڭxpCNܶC'LID[P2 Se!05K?Sa7~нF_twSԜЅN{PN5Ǫex1dOnGp˸ C1ւjvp z3ŤcN?x!wȎՃ.4K./ ^YSߞp&q@߄btejX1k^ƃ|?4OsYZn޼Y %5GUoj{񟔵@j?3'`JWNS 'رRs{!ycDz~<]ɪ' t*"ے(@m,**%hy$`,`ҡ|Z $fئ7"Pϴ>n $ UeSUtt 0VOL U$e]OZ\S`iΑt)[ԘőR ;ݠrৰPs;@{m1 r,9QmQFf~|MLdc{j=},@vt5HVy1N1R b[ZAB쵐jVn$|g?9IM$09[ /!PptXu XR6O0CaZpT)׳nfתVb1fW{A.qYvQ'/--n7x0fZuW{jQA3׆P?WmHy uiNF/:J-˦F\RI 6=3gl,*zwG 5p(ď (0͖ eff)bQʊ3Tu]af^O&VYt*;rӴP_ +69Y^b|ծ䡪dڊ&ˊL0GT"jtqUJ9e>i tn:E5TTRͦ'~Jg}spns{25Qo*8s-v: 6R9Ym`-IFCFdA/qBsn5Ԅ!*[0 "=rRZ՜gg_[ZJdUuJx),2uP'AAc(r yaBx!@ߣT$? |3wٯJSIe4LPc|aH2}蘤-2[XWly\]&%ǕVrS]AOǗݨ4ɠF\d #+iphwdIhI{ >Aǘ]|7=F.ÔNi4BeHhI)= -sb`Nv&C~WLsdE -0Dzr&#cT w|"ɽ#^aTReBdsZ3z(A1'uq,9#> ;^I ;tISA'sEw0>Kjٴ}LI锔=TݺHJ̔XAVHJ渧=z$jβue3n ٛSjBJ^Xhr5r^,ٛ,E /93Ԏ/ Sic<ŗ\d:d^ʣǖ2]ݸ J.yw(#..Z=Q)]*bC eX^qU\uQ^[-4),u~.PȣJN;-<p>-<2tãHjxK14 ZYZy^ U6S 3p v[QVAV>4O Ûd%_TjՍO nC8 Q~=x{ le͊~f@S)A2:?7ij1:)%C@WDVˆom3Jڪ~OuE@TB*j >e3ԍ1afΔlc9'.XPJEZ]'i$tnBta&玛Es'-Rwmmλ嵯Z~|zem(^[}zu}믗;_~hգGz7/O%*)hM顨LK@LURCW)n_4Rگ挞ARi2 |j%vn4ɵb!`ϩJEUoA }jdܴiwZHġVԟQ^`hAwiyaU4 w> oy/zP&;ZRczΫE`[~DB?so0|BVӏ)B5ݽ\7 smTC(T˘5 rXo̹` /hreq ה9h̴լ`oV]֚U{p4cQKmng"e)Qxyvgo(U~ Ds7/a v_=}UH9o=9::xp5`q/z)4۳ckc뫨FPc;ibP، Y^[Z%-g2T~ӎ2DT+% ^q}OR|M8VaoyUFRu;ϘOt'X]j8an>0˼9ymgd3xٗ=Ȇڶ a5_kXM.0X9#geJMܾѦv: eXV͞>!֜Y Zn qhvne#Vt÷-+(D|(p|u}SyYza m_ SQh`P с^|صa8Gո l_bb;5*"i/>HVF8[0rfvAܛGw+I|b[x%O!H4_Poe\hO:À谷mZmK2*ޅ1uVsCwspQ M]_k9*]U'G71fB;JcL4j-Bd,omMi[~2')97&6F>;j?7[ЯԒ]mMYNO#iTwaB9`V'Q S =r7l蔴|&Nm/316NEŁ+8pVi4 J͙ϢsP] Ty㩃(ZwZ/^qD )u zNa?^`i/GqfD\NdP_9| m,0ܧ}5:IBIw &ch5嫊y g2켢CuZdQF(X.eEsM}fjX^1Әeѥ._ʉn.w;A|Er겸J l-8DNYC<ٜ!JWT}sVa{huX0 j.O1p hCN.lz&ށ9JaKw#Nr)o$D1sq|Hk Xq~)rL^, QewU Tѽ3^ z8ǟ 8)Y<ǩOr\Aˬ4 š)2d]FO4 x 땖p$`pd h{C12 #D*p3C؆*h'`x7Y0H?&bRpHV.DaҟS]/'22+YO>؋I $4-ï;7ă0B;jfqľxy!qEs@sbzD2zXDqF^c龆Eɼ'^ L|O,U血IRҖyTf@ @DRjvTՅxpOkC }E @ u dCmP(gC券"']~c'$CB4#XWhE \*SP+D6;f@HD zj,HcڃTdp*x b,< >0E Hp)AAojLW x90D:»4p45s`Tzch%y ( 87^xWs;Q=zz*~kM-HaLSPDk`bKV+ԯvn(Bw#LLo~f$¸8]:))S-*HYe9{3t8;8my ۃoeEfZ(8AVrX]?<=;t!7}ߣ& Vx+bFR:LTg$C| 6tF8NjLc;|D4N i VkpnO0$w.3ps[3, ѸaO/up] +@j=9|)voLT7 \Bh lM {lts/{]~Df.?VQ [V5t) L$ bŠI'Whk[D?t<"dצjWO= AN. =z>Äp]ó~R yw33铮]n?'(HaȜqȵqpz-疹O@ahCU"* 3ktVMmn )i4q wbYP D^@O֤ rwx^N4W0|=y-ZtNB&Bب|Lۨz6&^y&ض #{FLI.MBsȶ "x)a-*< @CZR&t // ՁOֽ~dTsyp./+;t8ԘģŠ1(83&;h(2@d C1ABNTQި*_7χ'Y2T8hHy aZSԆY}V»s֧ޱLԬ/x-k7S :A&69.f9NdU]Mև !`C |ø-SЯryzWqJ׫@Ѭ,=9|{t5vnK9jOdv픈>|k![;>:9>;|9÷Օ@px_ X[E%' 9[jڙ"3gIOlq7/?񮚉ʹD+v"f7平<0IzbE:_6z Mp9y@g,{iL<_3(Ճ ̷Y+FGF@ɤ,[8("ٔ>; iDM 54"$U?'c২x꺨;4unڗp,+o~P Mxp/`3]0p?O5רF0v~`ۘӭ DDE!R)Ƅ e‹(6JBV@Ը5jRS[+5ݧ|㚪]od&d>"*tTb,'' 6}lgFn#Lƒ:ur6U5h][ǛVO-Q=q>U~>{++|Vq>iVٮR/?Fdsh'_z,h}Pq}u} A%0y}uu˞7Tлs鏻HC(F?es U ]?=yoR2 (Rx6 8\ؚ4$oc]בaU;8B%Zb@z![;=E-A r@i;;-%^b0f-蘄J9ԠA'=ksۄy`/@;/j13cswRV7P}8 H},(z,Йyf"ߛg`!?|VՉX cҸn9eyUQT}WWJ8Nu-Z%5ZZ_vHڢ؄qhqZ# 0z:N{5'WDpF~_޴{ۄThYKŽY̓RNUSkFow܇1sjz[;15uY^ֽY+*v,;ގ¤p !!aAkG=a*'*yذehRf%!@%E׮ yBraR~`);̭b֔W/x6;!uEp ElЮ9BXoP2SKcJr:.1wpˆD<GL_Td{ %$-1 ΁}E&(#j=Ft, ĻY#zr- ϸ2j_.U[]ZBRmŬ+:C̯ށA9jҡY|*V]7D*6ha`πA:9Ak\U,.kװ8 @ olaTqW lKVVU2G,0'?^nܘm.c!g>[A5P+F-V\/y@6fV8yY"CG)━Cۭlu4Żs5Cg-JL;Pgߋ-l\fN%{V -.ς}]7'r##GkR-&r`e86s12 i檙"吤-QZKѹȍRq`&SJ-Tu'*wζ{IJ]Z&CDZַxEl}<Ɏcgn>߄~0 >t*řBpqz?~T*5Ehv/W _eO_y߰ }̋b'//,VzWpiꁤq􇷤 8$c3yy$ Pw 72!tmTA@ōNNגbDee*1 m+& X:awq*WTZSJntT”j =8'r&O4 5u/ȋ,b<9[ȱ-WY8y^fEB|))#h~8ǯvZ'2/3ڌ$lx1q@L2),Yl4M zI\x &Ƹ@$A?3pN8@h#V|9I\$bgn wN%>¿)`]_K{%d4ū}&`9b/%Ke)0#7 U1x6¾u`"1@4d&}Z$@tVr`FZs#ͤ iWCGC`bPqV5"|. f]@"@\ D PA b!/, v;q.De)L[@쪋.@^gSDE>pFyE:a҉܀"(WFZd1TdwD S˥?$> CIsݏv!K1E6㱫˙sٙ-|,r Q\8EgLȗrb,Ȭ)~ġүX&8o\5!UĸUKczD 6Yh|-HaH$9ș9PJ1>tԮ67A㫎ũC;Gh7Rd5QvFY}TJ} wpoN 'kd^dk%"V'O s `Zx4P]{`h_(5.&$5( =(a d+b WDF<үb{x X͇2kj4hj?Jdj"Q{WsX3X RҀcn$L&qB2 𵱞F0R kzQ %"0d9o$Kb6.FڢYV&А4\hfK׀Ӥh6s Yx Yk^׬ f)҃cy-7MUs9 5<FAi;@IǍ:H4B^OQ*LY<gMb+XPh~= gWt?CѣSFI $T'7 f=$S |mF[5HS,@zza zwvm~<(")\ cͬ/Ew6>u鋐t/6 Lv 3\+?Ho@'l A/_/kT5XNFt'xSvoÒuvZ J)h]@˯,τٟR07{ŮFA ʄ-ibD4?riig4d'ɏDC gk_isY]tua/hAX~Q t4ufrqVLdl_'Yf+0'&TI5~wWD[w]<-=,/d<큸iOVy?D|eh7q!gebT6I fH *#nÑT|f:=|V~_Ҷ9KFIՆ2VoxKG`fzZ;~+'m!!`8/uy݆ɻ8Yx͂[8MY. e;߀k=7] }nY]vQV5]R6b}&:m2F7qe_ m?cY9m p5_\5JBɖrhoK7;K3p 0Rۏ#qgr5 \`Hƀ-RF p0Z xۋ mln`ӮЄX?r@N/j;9fm k>kC5_D.R\. oY JJQd!oxtB@اG\08[3} ⑘>iw}~ZHD7QH47n ߣ#"bn ;Q0Wu"3B}C"Kg.IKRsLenUA0o\ݲ.()? ]'%Z5Rv:5ZBZ4@iU-'R$l((bXǫ ^26-_Mw ZS.hP-"/`C[JŘb PmBل+Ykw?Y+1 XM#9Jsmt+GK/cZ'@]!iDNKt90 ;܀GÙrBf NƐ5o?j4[uєM֟vFӘyhn|HO\.i=KDke)1{2FIQ] 4y ;x 5A{=GkPrp煇;`8 hrO|PV]Ek k'd<@ύ<].CEjq5ӄWƨ0mۚ|Lq@%z琠,Bv(>|;-VƜOsιK~7j4~tz?t7A\Ϛo '-c GL>I+pVTJw ()dIU3[vc$8܆᭟@-4h=d{m_f}Y62ͲY*ss `Y =nhd:tkk]$WY/ٮg5=5[KqsKgvmܣ@7q`MW;mXZ@t?rp?}'PBPZAce2Ymgۘ8!R~%@7eN,4߽BӟZjZYfNvx( h#V⦞$s`W,y!,{sE?}C8|9CkMCu~OdA4wv#G0 0Z`C#dqRKャ3%:98۽ ;X tyuB.V>k:d6_LƋP̑q+okr,;= oQPI75>dך(hz$ȅYh `jz RwؤУdR7?-xEn*E|pk %,iZ02@P^޵Z~RmܽOҮ@j}Ғq09R\:\qbCM;TacG1 _ ЧcsGBF-W'#Q2!4,FQEI32Uܨ<`rB5 <ꍤ,t?Luv.V|Uf:3I.Qt>iAuʁfZ-Fm%o4a s Om} -16<?Rє\sC<&(Ÿ@nn>fۢ*LpOѤ &?msz4fWt3N׵k׶jnk_j zW|]q_|PrZ;+ jsUhAfT7jDX1rʮ t 2cw;QO`Y#q^n.t:nX?'$N5DUl6Va~d#ÀxS>es"~%PF"M!Ī3ʉ)3I:J8H÷ZnzEa4ehmxN;^ēuS9N"fMV@9DۍĜhPխ+08z;m9lxwd0WaVP;42@Ty0Wzn6 dT:nZhĪ?t"mb0Qs-MyN;^SGnas=TÀK M86WPv$ל( I} ڈ.Z 6gq^[lPzsOSE 9\-;[CW0◶ys,XAWuc̸~ɉy;t(a۷׻|=|=;;c!+w~}{p7 /`a!E(&@|}/>fRKMde>l$PZWRk/7n-E3/HQ90 < f8%|m3R,𕎁L8BJ1=1~Lf˕7Mè@p=&.c]YQ6ޮ!7,7a<;tk_%&a \8 2_Cq dn7͆:lOkM_]a$RF1EQn2dFn4[a]MD:`y+܇lW &=<{( ~}fC)}1x Ʈ*[O<_cisV*ҫGZMH&!C531cPmJ]!Rکg?JQ]Oh i4IQtp>FP$N.}x'SNkn.5ig&UֳI^G[4NF :X/T;ee;n)UVv=Ra\77\tf˯Yed[L ^U~$*YWӁ %ZlL ~Ϛv[6 -%\@kguyJw>1gq9)u0 漬F\g-pЎ=+&Gʁw5;/^ O\_ oUwS /|0"bzE<f}D/qX ~}M2Jy8Lc7i_4GqF̻;S?O0.ѵ@NY*@/ONSRx5JJfo6".({Gy~^hw5;o9P%N2aWM4.vK$ |اm+Yо#x,d_B[ k4xa(Q[ϻί'ًFùѺyޥ%0X/tmC'Z]1u{>$ 9BO q/Q )¶puVQ;-:F3xTZ^hȀ"L @Ābr݈*/-m*A=k>n>¯C{859|X^T^z,R`pU=aQAq{c=nہR]Z jb1tx *m@tL sŚ 6n|rN{㬄u8M]'tBR x;Z3zD3%T6pi%bob$Li~/gN'oj2y-E`]iھwJ]Z{<‚ pT]8zHC/Сwxg8rC*8+5xz ,ܚ$_x6ݞQaKŊoAihS 7%*F:tkuu8}íϝز Ma`MTJ#ÉyjXlT%Fu5-i$}ƀ/@'ͪ>I9jQ`4KJ;ue<;)"ά 6>TY F9`1qjsFx%9{bckX\rt47SuqcS_X˟4E9X*\=fp)?>HƲ˔?Q%xn)moL SRճyլ+SR?.TSjD5(g_ud%~$>_HrfE[b_[&2K<*Dd>cT|U(8r Jq:ZQ ߡg7 ?턇2<75K3W+>죍9|j`EK%Ptz(WCE.>+M*RYto#4XQt̳X Wl5#\gC|Ĵ}Q7QG],ER!E ̓ +^1{qż2g*EC|ԯơ,,f[AQ Pђ܏TM}TݜOmNèZ`"x XC5~BҦ\v|~mm>맿qQqzq4ɤ,:F4Axy:Gjh;DŽ<_L&:-`p"עwkͿ?c/./VoyLM>&&cЅY39)I3q'` KW3j3Ø6?ۃ<Β ^ rb6)\9 GR+Rh6}ZnΔAZHiCy H@(IA=oMYbSg%*}[TPZ01a#s!ՄA}=mWWߦ!./3 F k!U6- On&[FQ~ç#Qϝvs5)n*ǜr}]&u5?"t,87rwliJdTSSU.& Tg=9S@:̃V8gK ѬˠCg; -ڽ⛕| Ef'SLAW Ceʴw~=۳eTmR‡bɒNs\:yƹ@!KQوie(#:'jZ'u`<ۈBvxN0;8/?~?!PfcWY=r'>zGW#Wc9DG84F=2" sCߝ]VF[h;Lm~7wy$Y.G|ĭdGتS7`>>~'/_QLspݫh@c;QGɂY2J>ECF=H1@{UK!gB8 Z#cFW7F[:-+ դ (DkDm@;ۆc݌MS-DפCf9 85tɔ5GCsHtx=k6W#Ijƻv<]m.eQ$4bL Iy,۩O/~$5%@ Sq~~.>gbq~ɤym4k^&wI >M2g?|z\\<_g32"ߤ2K[ordFFIA&d 2 l(JS8?Coado:*2 '%"Akɗix2KbyLF@֩aL<,l+E="UGO"KHfS@t{H1z߽8M^'S kvx9-shX pPO"M"4Bw@dޱ ̫0ü/RDɼ5{@`jPld1:% 䭗!ERW"͒"hȣW=ex󴉃j_¼O71ަgw/.'uyp/Q"q8s~p0Y"r >+/lIm:y#~ȑA"X/"@?d@eL$l`"qIZ |M !i yR"">8Y#VT~$ ЏE%'iʸ+ M$$FEJ!t96*&ߩ`%0$5 a雯>`NI(l)ZPȍ '߬2kO*y~& +L,O*\*V" -p,>|>:iqm*Qgs^N_2fd)v?sT_6@۸-dkG%;z`ώ5ͻѠl%z8 Ft;Oag1GSɍ^ж9BjxɏRԴ_r?xBʖܑ_.o"]ѩy-p׮DcģOFNZ{yԣ7O&y%Vw"͑KI˥(ؗ I`%K h!ơ/J*6kCgI"2l1F(v0X 0s^OxhH/WcO."(T 0*3&WYJiL±Iqcl!A9oKrt[7js -&'x#nֻjLkhotWynM Gpɭw BȘ-VsϒM\87 E' ߲9 C{X£_%GJQQR+Ikl:Q` ,9@$={fe2lx{>m4:*˜u(]#vS >o+T0:ϼOiTrݨWzc,[%*,ohk}%7O>1'VNy PsAed1ԉK2n2`9 I!t xU$ K9+htLܫ |X4z+֤(LpE;XVw8CnX$5e ldgK POF=1S @LYթ^.. :Nz;9QiJ5epm*3׵P-].G6+N6~E,479ǟ(LP?_i(y,/؃nzr@yM`xLy+<6`Կҕ}Z"A~ .C'+%=8|ymʻU6i%O/mKYY{w&o\7Vd+XIFyTk$RT+"LV4sF0**N.:-gRˑ|+)siWCc¢U5XTy`"$8Ѕm]&u\PVL?qr QcUhʮ9$H{Z6Q a7*G؛P<|T|dq(6פ3!=BN4=d%yV=}xƸ_g6oEgnjxVы*25*|$0o\\m)T č@*o0ܹR3kMuoccۢ37k#5րX&a},§] DBd0 FѻT|6sB ~Р Ca˚}fGk w"VUYĴ)s916g'F=2@z=~@4SroGbPes՘ O,/^aA oJGO+,jb2J@2J^zP2]bCJOcW[5bEg2B#s L(!wi~x;cM{Ѱ-^_(|_2$s U`1RIb3fj jc/; GRLj8_ӊ-L;N^=OPp=&nq{1XLrIc3(=ܮd&pF hGԉJ^~'7db1 5͛OdȮPGD`5TJ]zL-qK/\˔^[ + b ֮SK܋MJRCi:6s/4oڼ`4IH,0)Xmc4);ûFg6nwhOK4}<>M7bnGd4p@JSmyg;'Lg 0Kp #'M"gO@EIia檈4lNo gDiRSU{;2,,tFq*j7iEiop>%{,<~og5Fư3>e,mȤ+[GN\q"1L_}3`WP1_u^8? שׁJN]އ]-3خמl̏6ŪL8ŦPƑyA/n+_e)[O[Q.`1]ƹvҘUٜQ㮍= jt^Xvr>yPghf׶ɳ$Q߷y Yd趆dQqVu-lneyZ%CYg5WϬswQ拷i-Bx^1&y$r\pC*Կ?,Hri;1@č@\;!iG^C=ė.W1GQmcMqOQwU7|D kE;*u7wP˾Nui\5;`>BLK eH>h7:(S|h^WeԶse0g-L@.kF]lvyc]랤6/Bl^״n-_-6T[Q=[Zdk}$hUQy3Pq>*YL0GDcR:!"fǽkV^EUKtO0r'Z?Vxa8#:;1oxs1;rç=>mkf \>8Py,6i&šttԏbW/״û2jU;X2)88:הק>WO[COBٛCֿkW.cw \ab)v&s@ D"x2jq w~)S9+.elyj4-_Mo3# SeDe &iN񄊫2u!~<߇?u=ԛ3ŋEU\Ng*y\4)Pև2 &%vL%nÊޮ:Av[/s<[>quE{Y7NP$ T%_"} R!PsNgJCR!Э5|uy[sߣp)-X³ e ^@ ;g;R:a5Kw KqI]n/55ϓ \ng"-?# g5Z.*oSQ+ER`yҺp[0Cl?IMVEK{Y٨fLR& Wn*d40;u&8^s2^]ҁ6k2k v 3*,͖K-p)ץoD Di~^[x6ol@,]W`[a &RA΋sƋ载_wdkQí,3vx>ID t ;cv6`q[U$-!Ti>mWBL6De;Z-џ7yg\@1NE+]PX':.mӯ:jƔ<}{ǻR6\#Hݫm.Ƽղa91-(֪ձkЌkۀUžMzf|o[:W:7ZV7B#L6GZYu! pԞظU]8l^ob㬜scQrܯNcSMѣ"`u$߿~-f mીXR mb=xSR{܁850>mu=y9Rp ֧,;* hǩ^oA&lx ~AOf4M%H5D?ϦKT&7.-1/u6 sET뱅~QEB\, 7cxĂ(2ܭ#\lpTҐ5E[[\bނ e`h7="[eI;8[ ,D=um,Cրc0.]k00JUI2tmYXFޟ;"fUQ IJ(SB nG $g֥T9/*D6r&ƕV,d=hVNzcwf0)}5[A7B[ dd6㓖^2DPOs7'Y<@#>p%gpalVR"zi|kA.4SO+O#}UˏAKR>@Sn_5t^z]=?>:6^TT Eg蠑F1Sfu m#4F~n1jzԠll D^YWC*.UcHͷ>^xp(w\zs\{| 6Gw@0|0UQ;ZANxMZV!/0%x340031Q02025054-IIM/J--OLI-MJLNKMI-LMaZ_f{&|^>_$ z H\f?ȳiՌ~RyQgILm{u6yɉ%yHCLz|jf]%CAEe9NBKހ>+  ۀ[Zu'CZ< %V2-N_G`|H%DNȯ)ْ Q%Lpb5aZ7b ̏rz0{miD,4=/<?A4PҪF$BK""v|Z(h%Ys1onM ~?Khsz4[<- s˝tZdQ*S4C|sBhh'G)LD(ϨtQ;T (* { q PK(n Eb#4O\ VzE.{g՛J xjvfH/@6yonUnW>^O*?/\[dxTԒ[>bUQ1 Ċ:lMpSDfnϛK䝏gϓz  MǮW+ݛ=pAj32 @(fqn7>lx3 T$.KATsֿ{ADx|#ȍd)bagq+hrQ*пޠ{u]f:zʢp$kI \OL¥=."P(D&yu>9::*);TG&Ƴr;'Ϋp.2!)drJ#񋢧$]PBw{RB=Wp*p>5w8>j~7PV.tTzefk_+^4ir5#=JS3Ko?zk%!Rz~O,Vz-xvn g4lhkm:93$Y>A ښ +_Ʃ y7xcnl Zf@K㘁v)54nZhۃ>\{D,7:>>1%֫C,K#s2!ːcO2EqHUaOX0L0o2nq홰6w û "34׸YIP'ly3t=EҶ@l3Tx Јjh'$iXy^%흫qG AAq1bd@JKa4XYr+A4 ow!`glhupl 0|C$0bv@hsG+f_rYj1]Q q=-]:K]$U -Z⾐L BEwM`0老d: eсzN 9fJu$-58I$J%) "3B\7?i i i߉ϸgMPt/' !ݾ<`kuOqEnp"x[pDSR.z@t lhGEkb|~$]*uQVg7ކ4QU;W|@.|rß8V>h<'G9TZB,VJTjIJ2EyPeI,J݂sRʮ\/MݿxVo6~_qh- *Im0'^N=tHFRqawGҎl$<}K4Ѳ>u&uFzL+;Ukؔuhs>åV ̰{7`!}+]o@,:h]\Z\)w.`쀫!_ӤB' d?p]CS%)N^%Z$4uT|MѵM 2i6*x>;>!;}{'`+EE/uT}23va#7ZIgHYpt!-r̓1KR8: !Z;4_>\UL J.B.'ԽEٱ.ZU>'Ք,d T N Esf6+nưPl &7,FSph*M:]Q EͣWKvçZQ5:JN5:tiYoyԲe"3nkpp>g49I^W˲(T3v1'&s Ճ*Qҩ:(F?8s>;d7ʒu:Wh@^7غ5u\BR GjHfӘ}*Q(zT9d*RuV{H/J)Y_\-U%SfT +o@XU^ #Z2\Gq N߾}+Q Id]UDɪL<7}w]Yf%@>,WTݫ:Jf^bQ#thonxrW.%^Ȑ4\3OԚ)%Hn6}ޞ}_n2/^>?8LɈşϗ`G`n2;(oOn.dzgzލLvN?.Wqd3gZ|v\bl̴Z@!2L4RL8{ƅŜh4~#(8*">+YjtKѦ5g!KI7$M~B^B}K6KOqy;|b)D-EA< }„);X(MC̨Bǭ]y/i x)b$D:lS<Ɉ..) LdtFТ/hȞ_x`m,9j)gtexz$tن145Z$߱QI v%Q(a?x [Y}u3?Bo'=nj_MyIDMLcʒ/;ד0^ė(rQ*zFLũb >5F=eAǴy/7ȧrREnN5%;*mIl>nDyli(lIT Q-,7F[F.G second upload returns first upload's `public_id`. - Bot receives duplicate `file_unique_id` -> returns existing link. n xHN# S3-Compatible TeleUploader + Web File Manager **Date:** 2026-07-06 **Status:** Approved Objective: Transform TeleUploader into an S3-compatible storage server (Telegram-backed) with a web file manager UI. Existing upload/download API paths remain unchanged. --- ## 1. Architecture Overview ``` S3 Client (aws-cli, rclone, s3cmd, MinIO Client) │ ▼ AWS SigV4 + XML ┌─────────────────────────────────────┐ │ S3 Protocol Dispatcher │ src/routes/s3.ts │ - Parses path, query, auth headers │ │ - Routes to S3 operation handlers │ ├─────────────────────────────────────┤ │ JSON API v1 (for Web UI) │ src/routes/web-api.ts │ - Bucket CRUD │ │ - Object list/upload/copy/delete │ ├─────────────────────────────────────┤ │ Web File Manager │ src/routes/home.ts + home.html │ - Bucket browser, upload/download │ ├─────────────────────────────────────┤ │ Database Layer │ src/db/buckets.ts │ - buckets, files (extended), │ src/db/multipart.ts │ - multipart_uploads, parts │ ├─────────────────────────────────────┤ │ Telegram Storage Layer │ src/utils/telegram.ts (existing) │ - Single Telegram channel │ │ - Files stored as Telegram docs │ └─────────────────────────────────────┘ ``` ### Component Responsibilities | Component | Responsibility | |-----------|----------------| | **S3 Protocol Dispatcher** | S3 fallback route (`$`). Parse Auth header, detect SigV4, route by method+path+query | | **S3 Operations** | ~20 operations (ListBuckets, GetObject, PutObject, ListObjectsV2, MultipartUpload, DeleteObjects, etc) | | **Auth (SigV4)** | Verify AWS SigV4 signatures, reject invalid/missing with 403 XML error | | **XML Builder** | Template functions to construct S3 XML responses. Parse incoming XML (DeleteObjects body) | | **JSON API v1** | JSON wrapper for web UI to avoid XML parsing in browser | | **Web File Manager** | Single-page app served at `/` with bucket browser, upload, delete, search | | **DB Layer** | New tables: buckets, multipart_uploads, multipart_parts. Extended files table | | **Telegram Storage** | Existing forwardToStorage/getFileInfo; unchanged | ### Routing Priority Route matching order (existing unchanged, S3 added as catch-all): | Priority | Route | Handler | |----------|-------|---------| | 1 | `/api/upload` | Existing upload handler | | 2 | `/f/:public_id` | Existing file redirect | | 3 | `/file/:public_id/info` | Existing file info | | 4 | `/health` | Existing health | | 5 | `/docs` / `/swagger.json` | Existing swagger | | 6 | `/` | Web file manager UI (NEW) | | 7 | `/api/v1/*` | JSON API for Web UI (NEW) | | 8 | `$` (catch-all) | S3 dispatcher (NEW) | The catch-all route (`$` in Bun.serve()) inspects the `Authorization` header: - Contains `AWS4-HMAC-SHA256` → handle as S3 request - Otherwise → 404 --- ## 2. Database Schema ### 2.1 buckets Table (NEW) ```sql CREATE TABLE buckets ( id UUID PRIMARY KEY DEFAULT gen_random_uuid(), name TEXT UNIQUE NOT NULL, created_at TIMESTAMPTZ DEFAULT now(), updated_at TIMESTAMPTZ DEFAULT now() ); -- Bucket name constraints: lowercase, no underscore, 3-63 chars (S3 spec) ``` ### 2.2 files Table — Extended New columns added alongside existing ones: ```sql ALTER TABLE files ADD COLUMN bucket_id UUID REFERENCES buckets(id); ALTER TABLE files ADD COLUMN s3_key TEXT; -- e.g. "images/logo.png" ALTER TABLE files ADD COLUMN storage_backend TEXT DEFAULT 'telegram'; ALTER TABLE files ADD COLUMN is_deleted BOOLEAN DEFAULT false; ALTER TABLE files ADD COLUMN multipart_upload_id TEXT; CREATE UNIQUE INDEX idx_files_bucket_key ON files(bucket_id, s3_key) WHERE is_deleted = false; CREATE INDEX idx_files_bucket_prefix ON files(bucket_id, s3_key text_pattern_ops); ``` - `s3_key` is the full object key path - `is_deleted` enables soft-delete for S3 DeleteObject - `multipart_upload_id` links parts to their parent completed multipart object - `public_id` (existing) remains primary identifier for Telegram redirect - Existing non-S3 uploads have `bucket_id = NULL, s3_key = NULL` ### 2.3 multipart_uploads Table (NEW) ```sql CREATE TABLE multipart_uploads ( upload_id TEXT PRIMARY KEY, bucket_id UUID NOT NULL REFERENCES buckets(id), s3_key TEXT NOT NULL, initiated_at TIMESTAMPTZ DEFAULT now(), status TEXT DEFAULT 'in_progress' CHECK (status IN ('in_progress', 'completed', 'aborted')), initiated_by TEXT ); ``` ### 2.4 multipart_parts Table (NEW) ```sql CREATE TABLE multipart_parts ( id SERIAL PRIMARY KEY, upload_id TEXT NOT NULL REFERENCES multipart_uploads(upload_id) ON DELETE CASCADE, part_number INT NOT NULL CHECK (part_number BETWEEN 1 AND 10000), telegram_file_id TEXT NOT NULL, telegram_file_unique_id TEXT NOT NULL, storage_message_id BIGINT NOT NULL, size_bytes BIGINT NOT NULL, etag TEXT NOT NULL, -- SHA256 hash as etag created_at TIMESTAMPTZ DEFAULT now(), UNIQUE(upload_id, part_number) ); CREATE INDEX idx_multipart_parts_upload ON multipart_parts(upload_id, part_number); ``` ### 2.5 Multipart Storage Strategy Each part is stored as an independent file in the Telegram channel. The DB links them logically: - **UploadPart**: forward part to Telegram via forwardToStorage → record in multipart_parts - **CompleteMultipartUpload**: create a single `files` row with `multipart_upload_id` pointing to the parts. No new Telegram upload needed. - **GetObject for multipart object**: query parts ordered by part_number, stream sequentially via Telegram CDN URLs. Client sees a single continuous download. - **AbortMultipartUpload**: delete DB records only (Telegram orphan files are accepted as GC is not feasible) --- ## 3. S3 Protocol Layer ### 3.1 Full Endpoint Coverage (~20 endpoints) #### Bucket Operations | Method | Path | Query Params | Handler Description | |--------|------|-------------|-------------------| | GET | `/` | — | List all buckets → `` XML | | PUT | `/{bucket}` | — | Create bucket (reject if exists) → 200 | | HEAD | `/{bucket}` | — | Check bucket exists → 200 or 404 | | DELETE | `/{bucket}` | — | Delete empty bucket → 204 | #### Object Operations | Method | Path | Query / Special | Handler Description | |--------|------|----------------|-------------------| | GET | `/{bucket}/{key+}` | — | GetObject: redirect to Telegram CDN (same as existing `/f/:public_id`) | | HEAD | `/{bucket}/{key+}` | — | Return metadata headers (Content-Length, Content-Type, ETag, Last-Modified) | | PUT | `/{bucket}/{key+}` | `x-amz-copy-source`? | Without copy header: upload multipart form → Telegram. With copy header: copy existing object in DB | | DELETE | `/{bucket}/{key+}` | — | Soft-delete (is_deleted = true) → 204 | | POST | `/{bucket}/{key+}` | `?tagging` | Return 204 (no-op, tagging not implemented) | #### Object Listing | Method | Path | Query Params | Handler Description | |--------|------|-------------|-------------------| | GET | `/{bucket}` | — | ListObjects v1 → `` XML | | GET | `/{bucket}` | `?list-type=2` | ListObjectsV2 → `` XML | Supports: `prefix`, `delimiter`, `max-keys` (default 1000), `continuation-token` (v2), `marker` (v1), `encoding-type=url`. #### Batch Operations | Method | Path | Query Params | Handler Description | |--------|------|-------------|-------------------| | POST | `/{bucket}` | `?delete` | Parse XML body `...` → soft-delete each → `` XML | #### Multipart Upload | Method | Path | Query Params | Handler Description | |--------|------|-------------|-------------------| | POST | `/{bucket}/{key+}` | `?uploads` | Initiate: create multipart_uploads row → `` XML with UploadId | | PUT | `/{bucket}/{key+}` | `?partNumber=N&uploadId=X` | Upload part: stream to Telegram → record in multipart_parts → return ETag header | | POST | `/{bucket}/{key+}` | `?uploadId=X` | Complete: parse `N...` → create files row with multipart_upload_id → `` XML | | DELETE | `/{bucket}/{key+}` | `?uploadId=X` | Abort: delete records, update status → 204 | | GET | `/{bucket}/{key+}` | `?uploadId=X` | List parts → `` XML | ### 3.2 AWS Signature V4 (SigV4) Authentication process for each S3 request: ``` 1. Extract Authorization header 2. Parse credential scope (date/region/service) 3. Reconstruct CanonicalRequest 4. Compute expected signing key 5. Compare signatures 6. Match → proceed; Mismatch → 403 Forbidden with AWS XML error ``` **Canonical Request construction:** ``` \n \n \n \n \n ``` **Implementation notes:** - Only verify signature; do not validate timestamp freshness (simplified, acceptable for single-server setup behind reverse proxy) - Hard-code `region = 'us-east-1'` (irrelevant for functionality; S3 clients accept any region) - Single set of S3 credentials (`S3_ACCESS_KEY` + `S3_SECRET_KEY` in env) - Chunked transfer encoding (`aws-chunked`) — not supported initially; client must use standard PUT. Return 501 if detected. ### 3.3 XML Serialization No external XML library. Template strings for responses: ```typescript // Example: ListBuckets response const listBucketsXml = (buckets: Bucket[]) => ` ${buckets.map(b => ` ${escapeXml(b.name)} ${b.createdAt.toISOString()} `).join('')} `; ``` **XML parsing** (only for DeleteObjects body): use simple string matching / regex on `...` tags. The DeleteObjects XML is simple and well-structured enough for this without a parser library. ### 3.4 Error Responses All S3 errors return XML with HTTP status: ```xml NoSuchKey The specified key does not exist. /bucket/key ... ``` Common error codes: `NoSuchBucket`, `NoSuchKey`, `BucketAlreadyExists`, `BucketNotEmpty`, `InvalidPartOrder`, `NoSuchUpload`, `SignatureDoesNotMatch`, `AccessDenied`, `InternalError`. ### 3.5 Presigned URL Support `GET /{bucket}/{key+}?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=...&X-Amz-SignedHeaders=host&X-Amz-Expires=3600&X-Amz-Signature=...` For presigned GET URLs: - Verify signature (much simpler — no body hash required, querystring-based) - If valid → return redirect to Telegram CDN (same as GetObject) - If expired → 403 Only presigned GET is essential; presigned PUT is optional for v1. --- ## 4. Web File Manager UI ### 4.1 Served At Route `'/'` → `home.html` (single HTML file with embedded CSS + JS) ### 4.2 Layout (responsive) ``` ┌─────────────────────────────────────────┐ │ ☰ TeleUploader ◉ my-bucket ▼ [+] │ ← Top bar ├─────────────────────────────────────────┤ │ ─────────────────────────────────────── │ │ 🗂 images/ Jul 06 2 items │ │ 🗂 documents/ Jul 05 5 items │ │ 📄 logo.png 2.4 MB Jul 06 [⋮ ▼] │ ← Actions dropdown │ 📄 report.pdf 1.2 MB Jul 05 [⋮ ▼] │ │ 📄 photo.jpg 3.1 MB Jul 04 [⋮ ▼] │ │ ─────────────────────────────────────── │ │ ↑ Load more │ └─────────────────────────────────────────┘ │ Drag & drop upload area (footer) │ └─────────────────────────────────────────┘ ``` ### 4.3 Features | Feature | Implementation | |---------|----------------| | **Bucket selector** | Dropdown, fetches bucket list from `/api/v1/buckets` | | **Create bucket** | Prompt for name → POST `/api/v1/buckets` | | **Delete bucket** | Confirm → DELETE `/api/v1/buckets/{name}` | | **Object listing** | GET `/api/v1/buckets/{name}/objects?prefix=X&delimiter=/` | | **Folder navigation** | Breadcrumb from prefix, click to drill down | | **Upload** | Drag-drop or click → POST `/api/v1/buckets/{name}/upload` | | **Upload progress** | XMLHttpRequest.upload.onprogress | | **Download** | Direct download via GET `/api/v1/buckets/{name}/download/{key}` | | **Copy link** | Copy full S3 URL to clipboard | | **Delete** | Confirm → soft delete | | **Search** | Filter by key prefix (debounced) | | **Credentials info** | Show S3_ACCESS_KEY + S3_SECRET_KEY (from env) in a modal | | **Dark/light mode** | CSS variables, @media prefers-color-scheme | ### 4.4 Web API v1 (JSON) These endpoints enable the UI without XML: | Method | Path | Response | |--------|------|----------| | GET | `/api/v1/buckets` | `{buckets: [{id, name, createdAt, objectCount}]}` | | POST | `/api/v1/buckets` | `{id, name}` | | DELETE | `/api/v1/buckets/{name}` | `{success: true}` | | GET | `/api/v1/buckets/{name}/objects?prefix=&delimiter=/&continuationToken=` | `{objects, prefixes, isTruncated}` | | POST | `/api/v1/buckets/{name}/upload` | Multipart form → `{key, size, etag}` | | DELETE | `/api/v1/buckets/{name}/{key+}` | `{success: true}` | | POST | `/api/v1/buckets/{name}/copy` | `{sourceKey, destKey}` | ### 4.5 Download via Web UI For the web UI, download doesn't use S3 headers. Instead: - `GET /api/v1/buckets/{name}/download/{key+}` → redirects to Telegram CDN, similar to `/f/:public_id` - This bypasses S3 auth (which the browser can't do with SigV4) --- ## 5. Existing Routes — Unchanged All existing functionality remains intact: - `POST /api/upload` — multipart + JSON file upload - `GET /f/:public_id` — file redirect to Telegram CDN - `GET /file/:public_id/info` — file metadata - `GET /health` — database health - `GET /docs` + `/swagger.json` — API docs The existing upload flow does not interact with S3 bucket/keys. This is intentional: the JSON API remains for simple programmatic upload without S3 complexity. --- ## 6. Security Model | Layer | Mechanism | |-------|-----------| | **S3 API** | SigV4 signature verification. Single credential pair from env | | **Web UI** | No auth (internal tool). Relies on network-level security / reverse proxy | | **JSON API** (existing) | Rate-limited only (same as now). No additional auth | | **Rate limiting** | Applied to S3 operations per IP | --- ## 7. Implementation Order The following build sequence minimizes blocked dependencies: | Phase | Tasks | Depends On | |-------|-------|------------| | **1. DB schema** | Create `buckets`, `multipart_uploads`, `multipart_parts` tables. Migrate existing DB | Nothing | | **2. DB layer** | CRUD functions for buckets, multipart, files extended | Phase 1 | | **3. S3 Auth + XML** | SigV4 verification, XML builder templates | Nothing (parallel with 1) | | **4. S3 Bucket Ops** | ListBuckets, CreateBucket, HeadBucket, DeleteBucket | Phase 1, 3 | | **5. S3 Object Ops** | PutObject, GetObject, HeadObject, DeleteObject, CopyObject, DeleteObjects | Phase 2, 3, 4 | | **6. S3 Listing** | ListObjects, ListObjectsV2 | Phase 2, 3, 4 | | **7. S3 Multipart** | CreateMultipartUpload, UploadPart, Complete, Abort, ListParts | Phase 2, 3, 4 | | **8. S3 Dispatcher** | Wire up catch-all route with auth detection | Phase 4-7 | | **9. JSON Web API** | All `/api/v1/*` endpoints | Phase 2, 4 | | **10. Web UI** | home.html with bucket browser, upload, delete, search | Phase 9 | | **11. Tests** | S3 auth test, bucket operations test, object operations test, multipart test | Phase 4-8 | --- ## 8. Configuration (New Env Vars) ```env # S3-compatible API credentials S3_ACCESS_KEY=teleuploader-admin # Access key for SigV4 auth S3_SECRET_KEY=your-secret-key-here # Secret key for SigV4 auth S3_DEFAULT_REGION=us-east-1 # S3 region (cosmetic, affects signature scope) # Existing vars unchanged: # BOT_TOKEN, ADDITIONAL_BOT_TOKENS, STORAGE_CHANNEL_ID, BASE_URL, ... ``` --- ## 9. Testing Strategy | Test Focus | Scope | |------------|-------| | SigV4 auth | Verify signature verification, reject invalid signatures | | S3 Bucket operations | Create, list, head, delete buckets | | S3 Object operations | Put, get, head, delete objects (via Telegram) | | S3 ListObjects | Pagination, prefix, delimiter, continuation token | | S3 Multipart | Create, upload parts, complete, abort | | S3 DeleteObjects | Batch delete XML body parsing | | S3 Error responses | Correct XML error format per status code | | Web API | JSON endpoints return correct data | | Non-S3 routes | Existing routes still work (regression) | --- ## 10. Open Questions / Future 1. **Presigned URL support** — GET presigned URLs in v1; PUT presigned for v2 2. **CORS headers** — if web UI served from different origin than S3 API calls 3. **Versioning** — not supported (single version per key) 4. **ACL / Bucket policies** — not supported (single user model) 5. **Lifecycle rules** — not supported 6. **Website hosting** — not supported 7. **Default bucket** — consider creating a default bucket on first start for convenience 8. **Upload via S3 API directly to web UI** — web UI could also call S3 API directly for maximum compatibility demo 9. **S3-compatible client list** — tested clients: aws-cli, rclone, s3cmd, MinIO Client, Cyberduck .xXrܸ}W`yH*NUNJUrIIĐ!V$'_eFDFӧLAIqZꝸ['FS^oM={&[dٵ)j%Nog[QEB b:EV^]t{h b=ΐAU-wʋF?CDg;ݩFgٽt[fg"Ҕ\[r:|7m57{^]B}Y6NDqNJ9zywGQ=[7XXdٻƾ}S !`[MFѢ9gc;G; n9<(b6 Ym9l:/m{N9UW?u/Z9% UV˽u)_vؑ"7u!d㔬B]9[PgB<i22FE.mrkqЂu'$5A} z]! 4HǠݯr![ -+!JxvTdv'D`!~ح? >em;U.vNuDccOwrH,RqږbT1eeQ b=2ڌqA&܁a3PKudӱGɣRMeŬ\Ml_kA˫ҡ|=0#jO]W+m2o(zfHUO8]a!*Byp3kUKgƲJ ciٓJX9q6F-CfJR<5pmۣܪLňkY'q GTXf \Nxa郰1D{!fLÓDpǣ2V8 &לH,݆Anx-5ct( ߷?EDx SCS8%e\MHps7, &B A;hyXML8݀3\\~%O5:<2%2M+N,.b;+ȑkЃ\j).(@&V`jW=zRl,phA&S ѫ"Ijdža}MOT#F0 O6-Щ; t3Q א gT[- n&VQ94hŞfPgABd_i}VβqUNx~8E"TqG$@>?Y\7w8Ȫ>O-V Ě Bppq"Q8kC!z"Rcc6d5;tJLf^v+ u3n A^5MLͼO^Q1s x^4j>I"-؁axuçۛ\ fF~(.׿LDReQLDNBq~IzR7! o^Ο):U1{Kzy=LP}7חzUx?"5&ɽiviYm~#MHGED&?pJIhI$r(qb'He':eFY,, zb6Q/O@x$vW{= #B~Q@>1="bzEa%" `coc7pLӛȋ z?cVb򑸤7}(-RI|VSR鱗'Q"^(xH笠MERQ TwD@ lt0Mq)R0D4]zv{wM>9*+j!6?VDlv.;qOxkb.`rdKoD~,'A6DZ+RwC b("~pjbRguD́Y7B4F c-?ꗽ;8GĆ?dq@m2glA>l̶7I'!ව>&4`ԖiG5pGB6nZͩD&xO]/9 8%<ƃ|M7b&Tznib0vƌxNEMQwF /.vb6?yDY7"|Ml_Z #F|AjK^"=RO>zH<`]Ի~B@xFx9agNu4h(Kd#ÎYNQaΏw+x}Xn8}W$V۱,dxdƘ\ 3bcIԒ`}OKĺ:bq,lݪ`2a˿*mkͺɲ*qtx-ֺT \nQV4xUөh "ZTvm U3 RW?کZyGkJbdp{>*kJ E|HT=HS`րmɁ_o灸Z_S] yi+́&y]Ȫ'յѾ`AS.oq5?eqzIJ+QDLP jw7ƅ\3|ŵ Ӌs}JdpSke$(jy`BSB=Fm)P0Mx8eigoFjYvCB>ʒ^FvbPz)n(fy%6j!s3nBuP݄>[/ K^T^wP_i*UP|X,xLz.$k~RSPW* jCtNz\]׆ĊPVXFؓ[v0*ufmYMaImvJ2UU ٚū Em?nF[U&|RGgg(5-aеuSL & O#UʝO-7 4V HOBàgӚ1aT*խ5S.њ~HSR҉ߢܣD",ǭИ:68ʋOWgnbx[k c= &rOP3q|x4` 43izee\=l#웼__U7T`u)~&YWAI:w,Rڭ|/va; Ɵ@b{ x^$̽o량ԜCO"MYx*ƔLYPrγ|<'B򕽔(ϣU>bi.x?CT<0G3*=?a2Q>DO<+ESJ+$O^>Kߡ#yMOfǰKG0[M3ĩB-Oh#K?¬ <8`U* 7ΑwY Wć"|LC$ӗ3)Tϊ_h̗;!:98koah NK;Z? B6KjB$Ra0mq@%V86aw`%ʹrIO [NѠMk+2YF~r4~ń@n?eܯځx`OޮxfSPwWO)HEWb.ׄ^HMy_\-Su~32lDt$U $[sX_C$s.q2#3%8mWcqAoay?|OPoT 蹌٪/Xœ9ˬmP7dց ǥʧ؅AQF*hӁ7 DȡHٯ?49\3wPC ڷ,1}p\ _cڡeȈbks2f9CT'ųazָUuL60Mrs [['z-qCSVq{s~4$E1R*Q7\-JlP,R6x:/s(]SJl%%}c  x"#J =B V6kxڸ󭞗Q4ɮl gK`=L-)8|o@n U'-q`X =$ɎYmd]xo 5Z#Kn+&De؉ ,dfUt-v+y_AT5$84jZA $Am"S|/OV`y] N.>.@R  wB}+ Bm=bSogEӷJϞ;"Yg{ul=wZ "a?<wt;qT q1R/i8P>Ji+ckimTS%;UYg֖x d `1PՅiQ-eGL nn 3AQQYUȸBK8N)oU"5rXe4ڌ&_,Т\.f哛RtFԭ%7qop(Τk5_q/\K7ڂ2dJŝfb)\͞[;Ǹ#m>yi)UMp_Y`xX֏V>:(6ayr%áaeA͡dInFc6&%h}m7D"Jf-WfN3zO %~G8xGsQ^ٺtҒ1&yP7P:WZ+:pMa$ԉፖAjM+ ׋pI? x,aB4Цn ,S4tpBnt:-&_\ރ)2! $3 ROmGȬٖs h]{ƨa6zK`Q`vRʢ!)8) V10We(~sS f%P!!(E긩hl;uQ'_󴚙#.Gι^Y[:Vqŵۦ iXD[i[nx`Tdt2b+gy_|~xf_߾`x!f |sFVF>w Sax_VEq2T<_n ٞT0Ժ8a1+9q]< lEw>aG( moHq @8p_ћp5_A1z ʖ)m<@sS6yb&{i 0O6}&憮80nv\+f%+c 6)%s+\Ƿm lVʉF:)+G6ĵ!\ЬV%/ 1>u LY@likIŽSR^}Ϲé2gT܊㜁ڄhVT-Undi庅f;3hș;ibJLuurH:UqufO{ډaqtKtߌj5 v[n"zEA*lOmU[u=ȹ)\ȽJ3Et=k)&.НpTerw1hVfQ 'a/;yŔVSšRwiI=*M@Yԋ+[K١|,.ަ[>ۃRr; ;A'Tʝq쌤. 5Ab1D 4vV7t>UkƓ잪9N9hY3F׀?wŃ>_V1[y~TnÙyT=:˂gG0Yख˶})+:+eA;n ,Ieu᥺W>q'On*&2DzBaWFj19YKCwT+7Ocpa5|3H|+/h^IyϪY|t\0>7!|1 [Is i;yNt;ڿubYC~V:aw7n"2zK|yii^RSGKS. 6V0ڥ41p"wQ詸ut*=0W-B}H'QLhlT&|S& 2Yԧ1'+^}@PF 4%k(9X!deRqCnc|+n\]% 7Z| ėJ%T(Nfm %DzR=.E +^9,ec? M%8RW.XQ%뮠@1UJ꒜S뢛{-'P"p4$) _C^{OgA:sCwU*9v*<O۳7)Zў c4v$mӬ lR׏cӍIwa$L*$ڞm{6MymC 7q}9z%xW]o0}ϯ[UKJ}B8U>2T~l0`/{{.4<<ֆZy+%f`:`>'0w'>EI~p: ly_ ׼7黷3vkpֶ-9ؗj=AYBe1GZCb̘JP[$>?w͉ ;sCӾ#/"61NOg̼*$Fn#CqY Ńv]x)8 GdLf7Yrs3)?KdY4Tsg(br bt*DCvE P׭-ũApe~^]U&`ϘH_ާ[(Y9NBeoS*]ubۘρ $…wPT3i7m" x,iDݤR` C(˥ G#nQ(889 ʕ%oip1^JJJ%փ{xȟ(O;h-9Q!1MηJ}^cE)uNH볆f{ Z]Jfr|3TzA0OjF^YI'#̓q3v>.$KwT7Eφ s]˰FS7C1iaIo0W_{6 u]+k0:!F NWYG}W5n{jD0Q"ޑB?P}<T߮3od'LX`X` Jz@AÁڤ/"G8ȼTZn+^b]7"&>v)%|Q4J Vzx340031QH/+)fX#(lvURWްR ]}?j>qB敁s(9dY_M(aBLsegL9lQ̼ A 5]R{q|\ (/-I-fx]u3uḡ((-)fЕXc}ʾu '{e`x]%import { eq } from 'drizzle-orm'; import { nanoid } from 'nanoid'; import { type Context, Telegraf } from 'telegraf'; import { db, files as fileSchema } from './db'; import { config } from './env'; import logger from './utils/logger'; import { forwardToStorage } from './utils/telegram'; interface MediaGroupBufferItem { ctx: any; fileId: string; fileSize: number; mimeType: string; fileName: string; fileType: string; fileUniqueId: string; } const mediaGroupCache = new Map(); export const startBot = async (): Promise> => { try { const bot = new Telegraf(config.botToken); bot.command('start', async (ctx) => { await ctx.reply( `👋 Halo! Kirimkan file (document, photo, video, audio, voice, animation) ke bot ini. ` + `File akan disimpan di private channel dan kamu dapat download link permanen.`, ); }); // Cast bot.on elements individually or explicitly as any to bypass Telegraf v4 typescript deprecation warnings on array syntax (bot as any).on( ['document', 'photo', 'video', 'audio', 'voice', 'animation', 'sticker', 'video_note'], async (ctx: any) => { try { const fileType: | 'document' | 'photo' | 'video' | 'audio' | 'voice' | 'animation' | 'sticker' | 'video_note' = ctx.message.document ? 'document' : ctx.message.photo ? 'photo' : ctx.message.video ? 'video' : ctx.message.audio ? 'audio' : ctx.message.voice ? 'voice' : ctx.message.animation ? 'animation' : ctx.message.sticker ? 'sticker' : ctx.message.video_note ? 'video_note' : 'document'; const fileObj = fileType === 'photo' ? ctx.message.photo.slice(-1)[0] : fileType === 'sticker' ? ctx.message.sticker : ctx.message[fileType]; const { file_id, file_size, mime_type } = fileObj; const fileName = ctx.message.document?.file_name || ctx.message.photo?.slice(-1)[0]?.file_name || ctx.message.video?.file_name || ctx.message.audio?.file_name || ctx.message.voice?.file_name || 'file'; const maxSize = fileType === 'photo' ? 10 * 1024 * 1024 : fileType === 'audio' ? 200 * 1024 * 1024 : fileType === 'voice' ? 200 * 1024 * 1024 : 2 * 1024 * 1024 * 1024; if (file_size > maxSize) { return ctx.reply(`File size exceeds ${maxSize / (1024 * 1024)}MB limit`); } const mediaGroupId = ctx.message.media_group_id; if (mediaGroupId) { if (!mediaGroupCache.has(mediaGroupId)) { mediaGroupCache.set(mediaGroupId, { timer: null, items: [] }); } const group = mediaGroupCache.get(mediaGroupId)!; if (group.timer) { clearTimeout(group.timer); } group.items.push({ ctx, fileId: file_id, fileSize: file_size, mimeType: mime_type, fileName: fileName, fileType: fileType, fileUniqueId: fileObj.file_unique_id, }); group.timer = setTimeout(async () => { mediaGroupCache.delete(mediaGroupId); try { const itemsToUpload: MediaGroupBufferItem[] = []; const responses: string[] = []; for (const item of group.items) { const existing = await db .select() .from(fileSchema) .where(eq(fileSchema.telegramFileUniqueId, item.fileUniqueId)) .limit(1); if (existing && existing.length > 0) { const url = `${config.baseUrl}/f/${existing[0].publicId}`; responses.push(`File *${item.fileName}* sudah diupload! 📎\nDownload: ${url}`); } else { itemsToUpload.push(item); } } if (itemsToUpload.length > 0) { const uploadItems = itemsToUpload.map((item) => ({ fileId: item.fileId, fileName: item.fileName, fileType: item.fileType, })); const { forwardMediaGroupToStorage } = await import('./utils/telegram'); const batchResult = await forwardMediaGroupToStorage(uploadItems); const dbInserts = []; for (let i = 0; i < itemsToUpload.length; i++) { const item = itemsToUpload[i]; const publicId = nanoid(); const uploaded = { publicId, telegramFileId: batchResult.telegramFileIds[i], telegramFileUniqueId: batchResult.telegramFileUniqueIds[i], storageChatId: config.storageChatId, storageMessageId: batchResult.storageMessageId, fileName: item.fileName, mimeType: item.mimeType || 'application/octet-stream', sizeBytes: item.fileSize, fileType: item.fileType, uploaderId: ctx.from.id, createdAt: new Date(), updatedAt: new Date(), }; dbInserts.push(uploaded); responses.push( `File *${item.fileName}* berhasil diupload! 📎\nDownload: ${config.baseUrl}/f/${publicId}`, ); } if (dbInserts.length > 0) { await db.insert(fileSchema).values(dbInserts); } } await ctx.reply(responses.join('\n\n')); logger.info('Media group uploaded as batch', { mediaGroupId, totalFiles: group.items.length, uploadedFiles: itemsToUpload.length, uploader: ctx.from.id, }); } catch (error: any) { logger.error('Failed to process media group batch', { error: error.message, mediaGroupId, }); await ctx.reply('❌ Gagal mengupload beberapa file di media group.'); } }, 600); return; } const existing = await db .select() .from(fileSchema) .where(eq(fileSchema.telegramFileUniqueId, fileObj.file_unique_id)) .limit(1); if (existing && existing.length > 0) { const url = `${config.baseUrl}/f/${existing[0].publicId}`; await ctx.reply(`File berhasil diupload! 📎\n\nDownload: ${url}`, { reply_parameters: { message_id: ctx.message.message_id }, }); logger.info('Duplicate file detected in bot, returned existing link', { publicId: existing[0].publicId, fileType, fileName, uploader: ctx.from.id, }); return; } const result = await forwardToStorage(file_id, fileName, fileType); const publicId = nanoid(); const uploaded = { publicId: publicId, telegramFileId: result.telegramFileId, telegramFileUniqueId: result.telegramFileUniqueId, storageChatId: config.storageChatId, storageMessageId: result.storageMessageId, fileName: fileName, mimeType: mime_type || 'application/octet-stream', sizeBytes: file_size, fileType: fileType, uploaderId: ctx.from.id, createdAt: new Date(), updatedAt: new Date(), }; await db.insert(fileSchema).values(uploaded); const url = `${config.baseUrl}/f/${publicId}`; await ctx.reply(`File berhasil diupload! 📎\n\nDownload: ${url}`, { reply_parameters: { message_id: ctx.message.message_id }, }); logger.info('File uploaded via bot', { publicId, fileType, fileName, uploader: ctx.from.id, }); } catch (error: any) { logger.error('Bot file handler error', { error: error.message, chat_id: ctx.chat?.id }); await ctx.reply('❌ Gagal mengupload file. Coba lagi nanti.'); } }, ); bot.use((ctx, next) => { logger.info('Telegram event received', { type: (ctx.update as any).type, chat_id: ctx.chat?.id, }); return next(); }); await bot.launch(); logger.info('Telegram bot started', { botToken: `${config.botToken?.substring(0, 10)}...` }); return bot; } catch (error: any) { logger.error('Failed to start bot', { error: error.message }); throw error; } }; #~VRkx,J#"%findFileByUniqueId } from './db/files*{ detectFileType, extractFileFromMessage, getErrorMessage, getFileSizeLimit, type TelegramMediaMessage, } from './utils/file^type BotContext = { message: TelegramMediaMessage; from: { id: number }; chat?: { id: number }; reply: (text: string, extra?: {!!number } }) => Promise; }; type MediaEventRegistrar = { on: (events: string[], handler: (ctx: BotContext) => Promise) => void; }; const replyWithDownloadUrl = async (ctx: BotContext, publicId: string): Promise => { const urlL!(|!J!<}); }#YLogging middleware must be registered BEFORE the media handler so all events are captured#[2'type' in ctx.update ? ctx.update.type : undefined$MDconst mediaBot = bot as unknown as MediaEventRegistrar; mediaBotEs- = detectFileType(ctx.message);'Obj = extractFileFromMessage(ctx.messag { file_id-Size = fileObj.file_size || 0 81 getFileSizeLimit(fileType); if (fileSb $existing = await findFileByUniqueId(.A) { await replyWithDownloadUrl(ctx, existing.publicIdPwSizq"} ,await replyWithDownloadUrl(ctx, publicId); ."unknown"60 error: getErrorMessage(error), $%|!W#Oa$unknown$5getErrorMessage(error)@%.x340031QH*MN-)+)fH.w_'6 TNVdQ[XQ簇}]A Nk.x͏X7ڮFA%b-ѥZϐՁdq)==X}]}O"FܲgkyUꊓ3RsA"knmBEYbGQ-tx% import { sql } from 'drizzle-orm'; import { db } from './index'; export interface Bucket { id: string; name: string; createdAt: Date; updatedAt: Date; } type QueryRow = Record; type QueryResult = QueryRow[]; export const createBucket = async (name: string): Promise => { const result = (await db.execute( sql`INSERT INTO buckets (name) VALUES (${name}) RETURNING id, name, created_at, updated_at`, )) as unknown as QueryResult; const row = result[0]!; return { id: row.id as string, name: row.name as string, createdAt: new Date(row.created_at as string), updatedAt: new Date(row.updated_at as string), }; }; export const findBucketByName = async (name: string): Promise => { const result = (await db.execute( sql`SELECT id, name, created_at, updated_at FROM buckets WHERE name = ${name}`, )) as unknown as QueryResult; if (result.length === 0) return null; const row = result[0]!; return { id: row.id as string, name: row.name as string, createdAt: new Date(row.created_at as string), updatedAt: new Date(row.updated_at as string), }; }; export const listBuckets = async (): Promise => { const result = (await db.execute( sql`SELECT id, name, created_at, updated_at FROM buckets ORDER BY name`, )) as unknown as QueryResult; return result.map((row) => ({ id: row.id as string, name: row.name as string, createdAt: new Date(row.created_at as string), updatedAt: new Date(row.updated_at as string), })); }; export const deleteBucket = async (name: string): Promise => { // Cascade-delete rows that hold FK references to the bucket await db .execute( sql`DELETE FROM multipart_parts WHERE upload_id IN (SELECT upload_id FROM multipart_uploads WHERE bucket_id IN (SELECT id FROM buckets WHERE name = ${name}))`, ) .catch(() => {}); await db .execute( sql`DELETE FROM multipart_uploads WHERE bucket_id IN (SELECT id FROM buckets WHERE name = ${name})`, ) .catch(() => {}); await db .execute( sql`DELETE FROM files WHERE bucket_id IN (SELECT id FROM buckets WHERE name = ${name})`, ) .catch(() => {}); const result = (await db.execute( sql`DELETE FROM buckets WHERE name = ${name}`, )) as unknown as QueryResult; return result.length > 0; }; export const bucketExists = async (name: string): Promise => { const result = (await db.execute( sql`SELECT 1 FROM buckets WHERE name = ${name}`, )) as unknown as QueryResult; return result.length > 0; }; CĻx import { sql } from 'drizzle-orm'; import { db } from './index'; export type CompressionAlgorithm = 'gzip' | null; export interface FilePart { id: number; fileId: string; partNumber: number; telegramFileId: string; telegramFileUniqueId: string; storageChatId: number; storageMessageId: number; sizeBytes: number; storedSizeBytes: number; compressionAlgorithm: CompressionAlgorithm; etag: string; createdAt: Date; } export type NewFilePartInput = Omit; const toNumber = (value: unknown): number => Number(value ?? 0); const mapRowToFilePart = (row: Record): FilePart => ({ id: toNumber(row.id), fileId: row.file_id as string, partNumber: toNumber(row.part_number), telegramFileId: row.telegram_file_id as string, telegramFileUniqueId: row.telegram_file_unique_id as string, storageChatId: toNumber(row.storage_chat_id), storageMessageId: toNumber(row.storage_message_id), sizeBytes: toNumber(row.size_bytes), storedSizeBytes: toNumber(row.stored_size_bytes), compressionAlgorithm: (row.compression_algorithm as CompressionAlgorithm) || null, etag: row.etag as string, createdAt: new Date(row.created_at as string), }); export const insertFileParts = async (parts: NewFilePartInput[]): Promise => { for (const part of parts) { await db.execute( sql`INSERT INTO file_parts ( file_id, part_number, telegram_file_id, telegram_file_unique_id, storage_chat_id, storage_message_id, size_bytes, stored_size_bytes, compression_algorithm, etag ) VALUES ( ${part.fileId}::uuid, ${part.partNumber}, ${part.telegramFileId}, ${part.telegramFileUniqueId}, ${part.storageChatId}, ${part.storageMessageId}, ${part.sizeBytes}, ${part.storedSizeBytes}, ${part.compressionAlgorithm}, ${part.etag} )`, ); } }; export const listFileParts = async (fileId: string): Promise => { const result = (await db.execute( sql`SELECT id, file_id, part_number, telegram_file_id, telegram_file_unique_id, storage_chat_id, storage_message_id, size_bytes, stored_size_bytes, compression_algorithm, etag, created_at FROM file_parts WHERE file_id = ${fileId}::uuid ORDER BY part_number`, )) as unknown as Record[]; return result.map(mapRowToFilePart); }; export const countFileParts = async (fileId: string): Promise => { const result = (await db.execute( sql`SELECT COUNT(*) AS count FROM file_parts WHERE file_id = ${fileId}::uuid`, )) as unknown as Record[]; return toNumber(result[0]?.count); }; >x:import { and, eq, sql } from 'drizzle-orm'; import { db, files as fileSchema } from './index'; import type { File } from './schema'; export interface S3FileRecord extends File { bucketId: string; s3Key: string; } export const findFileByBucketAndKey = async ( bucketId: string, s3Key: string, ): Promise => { const result = await db .select() .from(fileSchema) .where( and( eq(fileSchema.bucketId, bucketId), eq(fileSchema.s3Key, s3Key), eq(fileSchema.isDeleted, false), ), ) .limit(1); return result[0] || null; }; const mapDbRowToS3Record = (row: Record): S3FileRecord => { return { id: row.id as string, publicId: row.public_id as string, telegramFileId: row.telegram_file_id as string, telegramFileUniqueId: row.telegram_file_unique_id as string, storageChatId: toNumber(row.storage_chat_id), storageMessageId: toNumber(row.storage_message_id), fileName: row.file_name as string, mimeType: row.mime_type as string, sizeBytes: toNumber(row.size_bytes), fileType: row.file_type as string, uploaderId: toNumber(row.uploader_id), fileHash: row.file_hash as string | null, archiveTelegramFileId: row.archive_telegram_file_id as string | null, archiveStorageMessageId: row.archive_storage_message_id === null ? null : toNumber(row.archive_storage_message_id), archiveFileName: row.archive_file_name as string | null, archiveEntryName: row.archive_entry_name as string | null, archiveMimeType: row.archive_mime_type as string | null, archiveSizeBytes: row.archive_size_bytes === null ? null : toNumber(row.archive_size_bytes), bucketId: row.bucket_id as string, s3Key: row.s3_key as string, storageBackend: (row.storage_backend as string) || 'telegram', isDeleted: row.is_deleted as boolean, multipartUploadId: row.multipart_upload_id as string | null, partCount: row.part_count === null || row.part_count === undefined ? null : toNumber(row.part_count), createdAt: new Date(row.created_at as string), updatedAt: new Date(row.updated_at as string), }; }; const escapeLike = (s: string): string => s.replace(/[%_\\]/g, '\\$&'); const toNumber = (value: unknown): number => Number(value ?? 0); export const listObjectsByPrefix = async ( bucketId: string, prefix: string, delimiter: string | null, maxKeys: number, startAfter: string | null, ): Promise<{ objects: S3FileRecord[]; prefixes: string[] }> => { let query = prefix ? sql`SELECT * FROM files WHERE bucket_id = ${bucketId}::uuid AND is_deleted = false AND s3_key LIKE ${`${escapeLike(prefix)}%`}` : sql`SELECT * FROM files WHERE bucket_id = ${bucketId}::uuid AND is_deleted = false`; if (startAfter) { query = sql`${query} AND s3_key > ${startAfter}`; } query = sql`${query} ORDER BY s3_key LIMIT ${maxKeys + 1}`; const rawResult = (await db.execute(query)) as unknown as Record[]; if (delimiter === '/') { const prefixSet = new Set(); const objects: S3FileRecord[] = []; for (const row of rawResult) { const s3Key = row.s3_key as string; const relativeKey = s3Key.substring(prefix.length); const slashIndex = relativeKey.indexOf('/'); if (slashIndex >= 0) { const folderPrefix = prefix + relativeKey.substring(0, slashIndex + 1); if (folderPrefix !== prefix) { prefixSet.add(folderPrefix); } } else { objects.push(mapDbRowToS3Record(row)); } } return { objects: objects.slice(0, maxKeys), prefixes: Array.from(prefixSet).sort(), }; } return { objects: rawResult.slice(0, maxKeys).map(mapDbRowToS3Record), prefixes: [], }; }; export const softDeleteFile = async (bucketId: string, s3Key: string): Promise => { const result = (await db.execute( sql`UPDATE files SET is_deleted = true WHERE bucket_id = ${bucketId}::uuid AND s3_key = ${s3Key} RETURNING id`, )) as unknown as Record[]; return result.length > 0; }; export const softDeleteFilesBatch = async (bucketId: string, keys: string[]): Promise => { let deleted = 0; for (const key of keys) { const ok = await softDeleteFile(bucketId, key); if (ok) deleted++; } return deleted; }; export const countBucketObjects = async (bucketId: string): Promise => { const result = (await db.execute( sql`SELECT count(*) as count FROM files WHERE bucket_id = ${bucketId}::uuid AND is_deleted = false`, )) as unknown as Record[]; return Number(result[0]?.count || 0); }; export const findOrphanFilesByBucket = async (bucketId: string): Promise => { return await db .select() .from(fileSchema) .where(and(eq(fileSchema.bucketId, bucketId), eq(fileSchema.isDeleted, true))) .limit(100); }; QQ5xRimport { eq } from 'drizzle-orm'; import { db, files as fileSchema } from './index'; import type { File } from './schema'; export const findFileByHash = async (hash: string): Promise => { const result = await db.select().from(fileSchema).where(eq(fileSchema.fileHash, hash)).limit(1); return result[0] || null; }; export const findFileByPublicId = async (publicId: string): Promise => { const result = await db .select() .from(fileSchema) .where(eq(fileSchema.publicId, publicId)) .limit(1); return result[0] || null; }; export const findFileByUniqueId = async (telegramFileUniqueId: string): Promise => { const result = await db .select() .from(fileSchema) .where(eq(fileSchema.telegramFileUniqueId, telegramFileUniqueId)) .limit(1); return result[0] || null; }; xm9@{~X Qb,0Y2=jroR 5䆿^ RNwOPC2c)lK eӊ,0QYXؠ4!QcJiP{2MCW\ra3GUoHcU/β528J 98>4ǷPRs+Y&[a͙Q1\*xUAVV4DM~.l,XZp޽ӯg#I\ՑZcA|9ps'3>7J'0? ILRfݐral ^-r M,ĺdbT3aIrVꯙFgItD}xLAI!7 C„(𰯪7x1hWD95]" Փ5Q+!_cNCPiJi@%2k)_v?oDy@H* M D$@=|o3ށDPz@%J+'sdH7,̧]o8B =VC~:~! rr- ?V,U?TjdrdSFDƒ2e ^ =(dlwy /t1l@_z^un@ήϋmԠx)5bGY򒤯I0/X<׌<0.ѩXlՙdU5+k 3R43ZƱV2=L )r7fy_g5Sl5WWV+VSˊײQ^!>[?N)W^*+f酮jq3< QwDTx8̕8:sM9"Kc}c}͚==Miˑ~H2UƣP ,m[y肆 Q%.kyvS? &浃&EJWNѸBG|QY5/jQki~DX2&iDprhe^DA _&Sy-a99>>Љ멑ڛ60s810XUei6 涿.,ZW$)? d63|Y߷*yD@]%T[_H}n%~~sx~R uxVKO1W)7h+-jTU+gwck{ ;㍳מb3x^Y&mfW dT.@OmU|P${ZT==q8RZ fGY6g5vNJq;6-spG(w' bchܥmY5 8GҀG=J-}>r2ԛ LP ||\R"89gI.{ṭdZ@TvrTk*{Yw>n:`Xi Kj7T 'k(w,LC&&˰k0 z=  ؄Q ו;oeOp`*{kH'ҐV8I"fkb% }Po+ZUhTRDz5NݫtTO*>pݯIjwY4'8QfN{Xt.(ˎs90fRox .STLx +kw6!w"4_.U+i\^Sju՚5ZP em}2ZͿ0\tiTgquw_}t:P omk0%y4Ks :s?דkg'Til2|xƺZOg~؆=N#Bx{xWkw8_Scȣ=]7,ٴu,,i$$0Ofh4D,#d ,AY(bQ;ىR8adf,GmFMSX 0QYaKӌܚ6Q:On1a C`a@eYL+a$%ae8yN/Icф)[,&9!8-Ԍh x0g c$p 31 iM]%(Kf9S#fj~pZ( $JYq̹ke] FHК`5/L7xcTzS%j崝%Av(Ks7"8A\ i2XF齹\6g}[,DZ~:oYԙ5a\2Y^y^}O`+IYA d~# N>kR: (]9ӷ+:==E4(!SZ43 _t6%ƨV00cNE WX+x$,M/F6>Ԍ2#7d(0Jhd=i7]Y@rބxeˠ"hm0+[Y/[%@MRj}N5GiDqM`~/4\NF1mD_`$dfltYQ(W6'MMNjza)ۨ0]"**?ZR>"J4B 'xO<ᑪտN)7??2UnuMi|)i0iCSM[eL`+Ȗgi'SK=Mjo/wGM@'4chf|/l&%㵪|m~Eo;|j׬_4;~ bMIqkl @m۾\o&@4Cvu\ Tׄn>?w}5d}R5yN\6ʹP0P[yh4 YT]ߐɝlƦf( H~׾<&JwFpT-^?v E(Sh=߷^ 8YwɁ^8˾2< Ime׵~uZ~vZzS"ݶY^glVÆ.tkWڃ&8<.>8l4,B>TemrݵVйP8Mʘ-wٷi}qH㗋c~^nc,{{G!~nlj_uȰ(#KWbe{\cճy,E۲Yc'ΦnC.o^í' ƈ"#jX/k wl x*}-2_k1m5zХ8E2#ٵb,Bj/ `\}pᆴݞq@#&4 daF!<[T+,.Dz!ЭivhE CP)(Ԗi\+RfiӅk_µƕ Q޶5Q+,V&Uš*NYeBdgP7wz tU$AS= x\[sHv~_HȢHgKfvmk$RSSQh=,JhXRn>-Oy{~J~A~Bn4&)iJ**˹~Nx݋}̋E4)D4Z,naW.XAI0YΊQqz9Ih CQȮyzKx N^Ј~_NT"b0oGa3v<::,d<>&4I54ya/g4e rJ4cS 0g vBB]u4#6[~8  &cp>J֎'Ϟ>cwਫ਼zm0rK&^1)u>ɂf3bJPI4Sޔ.x:!=嫼`.9x|59%|%'H$qY5 \Ͳd'fJ3$Be ` ֛3>$a9łUs=7I:"yQ`1`F|8 2fِh 3A*`# ow4["Y8'ˮ&98]j \z}ubC]Z7_ Vec4BehIH#tY96a_v~̚Hm<5+B*WEY3<Д"4AY0(5N!n"#oiV& [.&Mv bDiyTŖ @A<JB{! JI E<.A w '&B@Yr`_3 z/T)2 !+^l- `b +Q"|A4B17_c!m$s,VV,x{7OHd4u,~ #7 !-O f 1WO3ieiJiW$mF[ ƪ06gb_'Sȯ"ÈM K&ӂ͈d<Ζ K:@Hd<fYeՔ!a!e ]?2lW#r骧6g BbID,ԼlHҕØW+?!DzT59f]4~Z(a}zn0jP"s͖Sڱr`0G#bV2tۜ$pz|dD͗)kHBnjĶ3{ۣLۅ*\D"Z-bUfXRcŚkN\Hżcfq {om" yFi֛!oppY;ެ|CL#-G?~+oqLi6 7q0UNw*qK x +n3T oCO1T eȉO6V꬝gII*^0 [,˒Fή1˕Ǻ.cިKeVtm(E. p(-?6Y<) :[8^<$VXsp9%_Ǭî\b̩XmzdjNm?.? Qpyx4?}.|O4'r1/xwI&n?חCTQW$qP fʔгunFbs_L=Q7@ZrXiټ^iKj5r.,@@#]W: Ixrsvc aJcR?aDw"KmvXdd,(N _][/uk.uJHMkżTOʏ@FAg sB@^ximport { serve } from 'bun'; import { startBot } from './bot'; import { config } from './env'; import { handleLogin, handleLogout, handleMe } from './routes/auth'; import { handleFileInfo, handleFileRedirect } from './routes/files'; import { handleHealth } from './routes/health'; import { handleHome } from './routes/home'; import { handleS3Request } from './routes/s3'; import { handleSwaggerHtml, handleSwaggerJson } from './routes/swagger'; import { handleUpload } from './routes/upload'; import { handleWebApiV1 } from './routes/web-api'; import { requireAuth } from './utils/auth'; import { fileInfoCache } from './utils/cache'; import logger from './utils/logger'; import { metricsCollector } from './utils/metrics'; import { cleanupRateLimitCache, withRateLimit } from './utils/rateLimit'; import { isS3Request } from './utils/s3/auth'; import { extractS3BucketFromHost } from './utils/s3/virtual-host'; // ─── Auto-run migration at startup ────────────────────────────────────────── try { const { runMigration } = await import('./db/migrate'); await runMigration(); } catch { logger.warn('Auto-migration skipped (non-fatal)'); } // ─── Auto-run migration at startup ─── try { await import('./db/migrate'); } catch { // migrate.ts calls process.exit(1) on failure — if it throws, log and continue logger.warn('Auto-migration warning (non-fatal)'); } const getS3RouteBucket = (req: Request): string | null => { const host = req.headers.get('host') || ''; return extractS3BucketFromHost(host, config.s3VhostDomains); }; const shouldHandleS3 = (req: Request, headers: Record): boolean => { const url = new URL(req.url); return Boolean( getS3RouteBucket(req) || isS3Request(headers) || url.searchParams.has('X-Amz-Signature'), ); }; const handleMaybeS3Root = (req: Request): Response | Promise => { if (req.method === 'OPTIONS') { return handleS3Request(req, getS3RouteBucket(req)); } const headers = Object.fromEntries(req.headers); if (shouldHandleS3(req, headers)) { return handleS3Request(req, getS3RouteBucket(req)); } return new Response('Not Allowed', { status: 405 }); }; const server = serve({ port: config.port, routes: { '/api/upload': { POST: withRateLimit(requireAuth(handleUpload)), }, '/f/:public_id': { GET: withRateLimit(handleFileRedirect), }, '/file/:public_id/info': { GET: withRateLimit(handleFileInfo), }, '/health': { GET: handleHealth, }, '/docs': { GET: handleSwaggerHtml, }, '/swagger.json': { GET: handleSwaggerJson, }, '/': { GET: (req: Request) => { const headers = Object.fromEntries(req.headers); if (shouldHandleS3(req, headers)) { return handleS3Request(req, getS3RouteBucket(req)); } return handleHome(); }, PUT: handleMaybeS3Root, HEAD: handleMaybeS3Root, DELETE: handleMaybeS3Root, POST: handleMaybeS3Root, OPTIONS: handleMaybeS3Root, }, '/api/v1/auth/login': { POST: withRateLimit(handleLogin), }, '/api/v1/auth/logout': { POST: handleLogout, }, '/api/v1/auth/me': { GET: handleMe, }, '/api/v1/*': { GET: requireAuth(handleWebApiV1), POST: requireAuth(handleWebApiV1), DELETE: requireAuth(handleWebApiV1), PUT: requireAuth(handleWebApiV1), }, }, fetch: async (req: Request) => { if (req.method === 'OPTIONS') { return handleS3Request(req, getS3RouteBucket(req)); } const headers = Object.fromEntries(req.headers); if (shouldHandleS3(req, headers)) { return handleS3Request(req, getS3RouteBucket(req)); } return new Response('Not Found', { status: 404 }); }, }); const bot = await startBot(); logger.info('Server started', { port: config.port, url: config.baseUrl }); const gracefulShutdown = async (signal: string): Promise => { logger.info('Graceful shutdown signal received', { signal }); logger.info('Closing HTTP server'); server.stop(); logger.info('Stopping Telegram bot'); bot.stop(signal); logger.info('Server shutdown complete'); process.exit(0); }; process.on('SIGTERM', () => gracefulShutdown('SIGTERM')); process.on('SIGINT', () => gracefulShutdown('SIGINT')); // Periodic maintenance intervals setInterval(cleanupRateLimitCache, 60000); setInterval( () => { const removed = fileInfoCache.cleanup(); if (removed > 0) { logger.info(`Cleaned up ${removed} expired cache entries`); } }, 5 * 60 * 1000, ); setInterval( () => { const snapshot = metricsCollector.getSnapshot(); logger.info('Metrics snapshot', { uploadLatency: snapshot.uploadLatency, uploadThroughput: snapshot.uploadThroughput.toFixed(2), errorRate: snapshot.errorRate.toFixed(2), cacheHitRate: snapshot.cacheHitRate.toFixed(2), }); }, 5 * 60 * 1000, ); logger.info('Application running successfully'); qx{~M}#'OFb^JNjhAN~b(N. x!100644 auth.tskl%h|m"f$V14100644 files.ts=fX=Oubh100644 health.ts)pvr'*C100644 home.ts$GL&JY' R100644 s3.tsǸlp3/ '. }100644 swagger.ts)>Ȧ˕768|100644 upload.ts&*kk# Y100644 web-api.tsBiYZtFC"HcQ]|mpximport { config } from '../env'; import { checkBearerToken, clearSessionCookie, createSessionCookie, getAuthSession, isAuthEnabled, timingSafeCompare, } from '../utils/auth'; const json = (data: unknown, status = 200, headers: Record = {}): Response => Response.json(data, { status, headers }); const notFound = (): Response => json({ error: 'Not found' }, 404); const readLoginBody = async (req: Request): Promise<{ token: string } | null> => { try { const body = (await req.json()) as { token?: unknown }; if (typeof body.token !== 'string' || body.token.length === 0) return null; return { token: body.token }; } catch { return null; } }; export const handleLogin = async (req: Request): Promise => { if (!isAuthEnabled()) return notFound(); const body = await readLoginBody(req); if (!body) return json({ error: 'Token is required' }, 400); if (!timingSafeCompare(body.token, config.adminApiToken)) { return json({ error: 'Invalid token' }, 401); } return json({ username: 'admin' }, 200, { 'set-cookie': createSessionCookie('admin'), }); }; export const handleLogout = async (): Promise => json({ success: true }, 200, { 'set-cookie': clearSessionCookie(), }); export const handleMe = async (req: Request): Promise => { if (!isAuthEnabled()) return notFound(); const session = getAuthSession(req); if (!session && !checkBearerToken(req.headers.get('authorization'))) { return json({ error: 'Unauthorized' }, 401); } const activeSession = session ?? { username: 'admin', expiresAt: null, method: 'bearer' as const, }; return json({ username: activeSession.username, expiresAt: activeSession.expiresAt?.toISOString() ?? null, }); }; sKyximport { createReadStream } from 'node:fs'; import { unlink } from 'node:fs/promises'; import { nanoid } from 'nanoid'; import { findFileByPublicId } from '../db/files'; import { fileInfoCache } from '../utils/cache'; import { formatCreatedAt, getErrorMessage } from '../utils/file'; import logger from '../utils/logger'; import { getBot } from '../utils/telegram'; import { locateZipEntry } from '../utils/zip'; type RequestWithParams = Request & { params?: { public_id?: string; }; }; const getTelegramFileInfo = async (telegramFileId: string, public_id: string) => { const cacheKey = `file_info_${telegramFileId}`; let fileInfo = fileInfoCache.get(cacheKey); if (!fileInfo) { const bot = getBot(); const apiFileInfo = await bot.telegram.getFile(telegramFileId); fileInfo = { file_size: (apiFileInfo as any).file_size || 0, mime_type: (apiFileInfo as any).mime_type || 'application/octet-stream', file_path: (apiFileInfo as any).file_path || '', }; fileInfoCache.set(cacheKey, fileInfo); logger.debug('File info cached', { public_id, cacheKey }); } else { logger.debug('File info from cache', { public_id, cacheKey }); } return fileInfo; }; const buildTelegramFileUrl = (filePath: string): string => `https://api.telegram.org/file/bot${process.env.BOT_TOKEN}/${filePath}`; const cleanupTempFile = async (tempPath: string): Promise => { try { await unlink(tempPath); } catch (err) { logger.warn('Failed to cleanup temp file', { tempPath, error: getErrorMessage(err) }); } }; const sanitizeFilenameHeader = (fileName: string): string => fileName.replace(/[\\"]/g, '').replace(/[\n\r]/g, ''); const fail = (status: number, error: string): Response => Response.json({ error }, { status }); export const handleFileRedirect = async (req: RequestWithParams): Promise => { const public_id = req.params?.public_id; try { if (!public_id) { return fail(400, 'Missing file id'); } const file = await findFileByPublicId(public_id); if (!file) { logger.warn('File not found', { public_id }); return fail(404, 'File not found'); } const archiveEntryName = file.archiveEntryName; if (archiveEntryName) { const archiveFileId = file.archiveTelegramFileId || file.telegramFileId; const archiveInfo = await getTelegramFileInfo(archiveFileId, public_id); const archiveResponse = await fetch(buildTelegramFileUrl(archiveInfo.file_path)); if (!archiveResponse.ok) { logger.error('Archive download failed', { public_id, status: archiveResponse.status }); return fail(500, 'Server error'); } const tempZipPath = `/tmp/teleuploader-dl-${nanoid()}.zip`; await Bun.write(tempZipPath, archiveResponse); const loc = await locateZipEntry(tempZipPath, archiveEntryName); if (!loc) { await cleanupTempFile(tempZipPath); logger.error('Archive entry not found', { public_id, archiveEntryName }); return fail(404, 'File not found'); } const fileStream = createReadStream(tempZipPath, { start: loc.start, end: loc.start + loc.length - 1, }); fileStream.on('close', () => { void cleanupTempFile(tempZipPath); }); fileStream.on('error', () => { void cleanupTempFile(tempZipPath); }); return new Response(fileStream as any, { status: 200, headers: { 'Content-Type': file.mimeType || 'application/octet-stream', 'Content-Disposition': `attachment; filename="${sanitizeFilenameHeader(file.fileName)}"`, 'Content-Length': String(loc.length), }, }); } const fileInfo = await getTelegramFileInfo(file.telegramFileId, public_id); const tgResponse = await fetch(buildTelegramFileUrl(fileInfo.file_path)); if (!tgResponse.ok) { logger.error('File download failed', { public_id, status: tgResponse.status }); return fail(502, 'Server error'); } return new Response(tgResponse.body, { status: 200, headers: { 'Content-Type': file.mimeType || 'application/octet-stream', 'Content-Disposition': `attachment; filename="${sanitizeFilenameHeader(file.fileName)}"`, 'Content-Length': String(file.sizeBytes), }, }); } catch (error: unknown) { logger.error('File redirect error', { public_id, error: getErrorMessage(error) }); return fail(500, 'Server error'); } }; export const handleFileInfo = async (req: RequestWithParams): Promise => { const public_id = req.params?.public_id; try { if (!public_id) { return fail(400, 'Missing file id'); } const file = await findFileByPublicId(public_id); if (!file) { logger.warn('File not found', { public_id }); return fail(404, 'File not found'); } return Response.json( { public_id: file.publicId, file_name: file.fileName, mime_type: file.mimeType, size_bytes: file.sizeBytes, file_type: file.fileType, created_at: formatCreatedAt(file.createdAt), }, { status: 200 }, ); } catch (error: unknown) { logger.error('File info error', { public_id, error: getErrorMessage(error) }); return fail(500, 'Server error'); } }; => { try { await db.execute(sql`SELECT 1`); return Response.json({ status: 'ok' }, { status: 200 }); } catch (error: unknown) { const message = getErrorMessage(error); logger.error('Health check failed', { error: message }); return Response.json({ status: 'error', error: message }, { status: 500 }); } }; P(xexport const handleHome = async (): Promise => { const html = await Bun.file(`${import.meta.dir}/../home.html`).text(); return new Response(html, { status: 200, headers: { 'content-type': 'text/html; charset=utf-8', }, }); }; b.Rŵxz}import { createReadStream } from 'node:fs'; import { nanoid } from 'nanoid'; import { createBucket, deleteBucket, findBucketByName, listBuckets } from '../db/buckets'; import { countBucketObjects, findFileByBucketAndKey, listObjectsByPrefix, softDeleteFile, } from '../db/files-ext'; import { abortMultipartUpload, completeMultipartUpload, createMultipartUpload, findMultipartUpload, insertMultipartPart, listMultipartParts, listMultipartUploadsByBucket, } from '../db/multipart'; import type { File } from '../db/schema'; import { config } from '../env'; import { createChunkedObjectResponse, storeFileInTelegramChunks } from '../utils/chunked-storage'; import { cleanupTempFile, computeHash, ensureExtension, getErrorMessage } from '../utils/file'; import logger from '../utils/logger'; import { verifyPresignedUrl, verifySignature } from '../utils/s3/auth'; import { S3_CORS_HEADERS, s3Headers } from '../utils/s3/headers'; import { createGetObjectResponse, type ObjectPartSource } from '../utils/s3/object-stream'; import { parseRangeHeader, unsatisfiedContentRange } from '../utils/s3/range'; import { bucketVersioningConfigurationXml, completeMultipartUploadXml, copyObjectResultXml, deleteResultXml, initiateMultipartUploadXml, listBucketResultXml, listBucketsXml, listBucketV2ResultXml, listMultipartUploadsXml, listPartsXml, parseCompleteMultipartBody, parseDeleteObjectsBody, s3ErrorResponse, } from '../utils/s3/xml'; import { forwardToStorage, getFileInfo } from '../utils/telegram'; const REGION = config.s3DefaultRegion || 'us-east-1'; const REQUEST_ID = () => nanoid(16); const s3Response = ( body: string | null, status: number, reqId: string, extraHeaders: Record = {}, ): Response => new Response(body, { status, headers: s3Headers(reqId, extraHeaders) }); const s3OptionsResponse = (): Response => new Response(null, { status: 204, headers: S3_CORS_HEADERS }); const parseS3Path = (pathname: string): { bucket: string | null; key: string | null } => { const parts = pathname.split('/').filter(Boolean); if (parts.length === 0) return { bucket: null, key: null }; if (parts.length === 1) return { bucket: parts[0], key: null }; return { bucket: parts[0], key: parts.slice(1).join('/') }; }; const headersToRecord = (req: Request): Record => { const record: Record = {}; for (const [key, value] of req.headers.entries()) { record[key.toLowerCase()] = value; } return record; }; // ─────── Main Dispatcher ─────── export const handleS3Request = async ( req: Request, virtualHostBucket: string | null = null, ): Promise => { const method = req.method; const url = new URL(req.url); const pathname = url.pathname; const { bucket, key } = virtualHostBucket ? { bucket: virtualHostBucket, key: pathname === '/' ? null : decodeURIComponent(pathname.slice(1)), } : parseS3Path(pathname); const headers = headersToRecord(req); const searchParams = url.searchParams; const reqId = REQUEST_ID(); if (method === 'OPTIONS') { return s3OptionsResponse(); } const isPresigned = searchParams.has('X-Amz-Signature'); const authResult = isPresigned ? await verifyPresignedUrl({ url: req.url, method, headers, s3AccessKey: config.s3AccessKey, s3SecretKey: config.s3SecretKey, region: REGION, }) : await verifySignature( method, req.url, headers, null, config.s3AccessKey, config.s3SecretKey, REGION, ); if (!authResult.isValid) { const status = authResult.errorCode === 'NotImplemented' ? 501 : 403; const message = authResult.errorCode === 'NotImplemented' ? 'aws-chunked streaming payloads are not supported.' : isPresigned ? 'Presigned URL verification failed' : 'Authentication required'; return s3ErrorResponse( authResult.errorCode || 'AccessDenied', message, pathname, status, reqId, ); } try { // Root: ListBuckets if (!bucket) { if (method === 'GET') { return handleListBuckets(reqId); } return s3ErrorResponse( 'MethodNotAllowed', 'The specified method is not allowed against this resource.', '/', 405, reqId, ); } // Bucket-level operations if (!key) { if (method === 'GET') { if (searchParams.has('versioning')) { return handleGetBucketVersioning(bucket, reqId); } if (searchParams.has('uploads')) { return handleListMultipartUploads(bucket, searchParams, reqId); } const listType = searchParams.get('list-type'); if (listType === '2') { return handleListObjectsV2(bucket, searchParams, reqId); } return handleListObjectsV1(bucket, searchParams, reqId); } if (method === 'PUT') return handleCreateBucket(bucket, reqId); if (method === 'HEAD') return handleHeadBucket(bucket, reqId); if (method === 'DELETE') return handleDeleteBucket(bucket, reqId); if (method === 'POST') { if (searchParams.has('delete')) { const body = await req.text(); return handleDeleteObjects(bucket, body, reqId); } if (searchParams.has('tagging')) { return s3Response(null, 204, reqId); } } return s3ErrorResponse( 'MethodNotAllowed', 'The specified method is not allowed against this resource.', `/${bucket}`, 405, reqId, ); } // Object-level: multipart checks if (searchParams.has('uploads') && method === 'POST') { return handleCreateMultipartUpload(bucket, key, searchParams, reqId); } if (searchParams.has('uploadId') && searchParams.has('partNumber') && method === 'PUT') { return handleUploadPart(bucket, key, searchParams, req, reqId); } if (searchParams.has('uploadId') && method === 'POST') { const body = await req.text(); return handleCompleteMultipartUpload(bucket, key, searchParams, body, reqId); } if (searchParams.has('uploadId') && method === 'DELETE') { return handleAbortMultipartUpload(bucket, key, searchParams, reqId); } if (searchParams.has('uploadId') && method === 'GET') { return handleListParts(bucket, key, searchParams, reqId); } // Standard object operations if (method === 'GET') return handleGetObject(bucket, key, searchParams, headers, reqId); if (method === 'HEAD') return handleHeadObject(bucket, key, reqId); if (method === 'PUT') return handlePutObject(bucket, key, searchParams, headers, req, reqId); if (method === 'DELETE') return handleDeleteObject(bucket, key, reqId); return s3ErrorResponse( 'MethodNotAllowed', 'The specified method is not allowed against this resource.', `/${bucket}/${key}`, 405, reqId, ); } catch (error: unknown) { logger.error('S3 operation error', { bucket, key, error: getErrorMessage(error) }); return s3ErrorResponse( 'InternalError', 'We encountered an internal error. Please try again.', pathname, 500, reqId, ); } }; // ─────── Bucket Operations ─────── const handleListBuckets = async (reqId: string): Promise => { const buckets = await listBuckets(); const xml = listBucketsXml(buckets, reqId); return s3Response(xml, 200, reqId, { 'content-type': 'application/xml' }); }; const handleCreateBucket = async (bucketName: string, reqId: string): Promise => { if (!/^[a-z0-9][a-z0-9.-]{1,61}[a-z0-9]$/.test(bucketName)) { return s3ErrorResponse( 'InvalidBucketName', 'The specified bucket is not valid.', `/${bucketName}`, 400, reqId, ); } const existing = await findBucketByName(bucketName); if (existing) { return s3ErrorResponse( 'BucketAlreadyExists', 'The requested bucket name is not available.', `/${bucketName}`, 409, reqId, ); } await createBucket(bucketName); return s3Response(null, 200, reqId); }; const handleHeadBucket = async (bucketName: string, reqId: string): Promise => { const bucket = await findBucketByName(bucketName); if (!bucket) { return s3ErrorResponse( 'NoSuchBucket', 'The specified bucket does not exist.', `/${bucketName}`, 404, reqId, ); } return s3Response(null, 200, reqId); }; const handleDeleteBucket = async (bucketName: string, reqId: string): Promise => { const bucket = await findBucketByName(bucketName); if (!bucket) { return s3ErrorResponse( 'NoSuchBucket', 'The specified bucket does not exist.', `/${bucketName}`, 404, reqId, ); } const objCount = await countBucketObjects(bucket.id); if (objCount > 0) { return s3ErrorResponse( 'BucketNotEmpty', 'The bucket you tried to delete is not empty.', `/${bucketName}`, 409, reqId, ); } await deleteBucket(bucketName); return s3Response(null, 204, reqId); }; const handleGetBucketVersioning = async (bucketName: string, reqId: string): Promise => { const bucket = await findBucketByName(bucketName); if (!bucket) { return s3ErrorResponse( 'NoSuchBucket', 'The specified bucket does not exist.', `/${bucketName}`, 404, reqId, ); } return s3Response(bucketVersioningConfigurationXml(), 200, reqId, { 'content-type': 'application/xml', }); }; // ─────── Object Operations ─────── const handleGetObject = async ( bucket: string, key: string, _searchParams: URLSearchParams, headers: Record, reqId: string, ): Promise => { const bucketRecord = await findBucketByName(bucket); if (!bucketRecord) return s3ErrorResponse( 'NoSuchBucket', 'The specified bucket does not exist.', `/${bucket}/${key}`, 404, reqId, ); const file = await findFileByBucketAndKey(bucketRecord.id, key); if (!file) return s3ErrorResponse( 'NoSuchKey', 'The specified key does not exist.', `/${bucket}/${key}`, 404, reqId, ); if (file.storageBackend === 'chunked') { const totalSize = Number(file.sizeBytes); const range = parseRangeHeader(headers.range || null, totalSize); if (range.type === 'invalid') { return s3ErrorResponse( 'InvalidRange', 'The requested range is not satisfiable.', `/${bucket}/${key}`, 416, reqId, { 'content-range': unsatisfiedContentRange(totalSize), }, ); } try { return await createChunkedObjectResponse({ file, range, reqId }); } catch (error) { logger.warn('Chunked object content fetch failed', { key, error: getErrorMessage(error) }); return s3ErrorResponse( 'InternalError', 'Failed to fetch object content from storage', `/${bucket}/${key}`, 502, reqId, ); } } if (file.multipartUploadId) { return handleGetMultipartObject(file, bucket, key, headers, reqId); } const fileInfo = await getFileInfo(file.telegramFileId); const redirectUrl = `https://api.telegram.org/file/bot${fileInfo.bot_token}/${fileInfo.file_path}`; const totalSize = file.sizeBytes; const range = parseRangeHeader(headers.range || null, totalSize); if (range.type === 'invalid') { return s3ErrorResponse( 'InvalidRange', 'The requested range is not satisfiable.', `/${bucket}/${key}`, 416, reqId, { 'content-range': unsatisfiedContentRange(totalSize), }, ); } if (!config.proxyS3Get) { // Legacy 302 redirect path (when proxy is disabled) return s3Response(null, 302, reqId, { location: redirectUrl }); } const part: ObjectPartSource = { telegramFileId: file.telegramFileId, telegramUrl: redirectUrl, sizeBytes: file.sizeBytes, partNumber: 1, }; try { return await createGetObjectResponse({ reqId, contentType: file.mimeType, etag: file.fileHash || '', lastModified: file.createdAt instanceof Date ? file.createdAt : new Date(file.createdAt), totalSize: file.sizeBytes, parts: [part], range, }); } catch (error) { logger.warn('Telegram content fetch failed', { fileId: file.telegramFileId, error: getErrorMessage(error), }); return s3ErrorResponse( 'InternalError', 'Failed to fetch object content from storage', `/${bucket}/${key}`, 502, reqId, ); } }; const handleGetMultipartObject = async ( file: File, bucket: string, key: string, headers: Record, reqId: string, ): Promise => { const uploadId = file.multipartUploadId!; const parts = await listMultipartParts(uploadId); if (parts.length === 0) { return s3ErrorResponse( 'InternalError', 'Multipart object has no parts.', `/${bucket}/${key}`, 500, reqId, ); } const totalSize = parts.reduce((sum, p) => sum + Number(p.sizeBytes), 0); const range = parseRangeHeader(headers.range || null, totalSize); if (range.type === 'invalid') { return s3ErrorResponse( 'InvalidRange', 'The requested range is not satisfiable.', `/${bucket}/${key}`, 416, reqId, { 'content-range': unsatisfiedContentRange(totalSize), }, ); } const sources: ObjectPartSource[] = []; for (const part of parts) { const fileInfo = await getFileInfo(part.telegramFileId); sources.push({ telegramFileId: part.telegramFileId, telegramUrl: `https://api.telegram.org/file/bot${fileInfo.bot_token}/${fileInfo.file_path}`, sizeBytes: part.sizeBytes, partNumber: part.partNumber, }); } if (!config.proxyS3Get) { return s3Response(null, 302, reqId, { location: sources[0].telegramUrl }); } try { return await createGetObjectResponse({ reqId, contentType: file.mimeType, etag: file.fileHash || parts.map((p) => p.etag).join('-'), lastModified: file.createdAt instanceof Date ? file.createdAt : new Date(file.createdAt), totalSize, parts: sources, range, }); } catch (error) { logger.warn('Telegram multipart content fetch failed', { uploadId: file.multipartUploadId, error: getErrorMessage(error), }); return s3ErrorResponse( 'InternalError', 'Failed to fetch object content from storage', `/${bucket}/${key}`, 502, reqId, ); } }; const handleHeadObject = async (bucket: string, key: string, reqId: string): Promise => { const bucketRecord = await findBucketByName(bucket); if (!bucketRecord) return s3ErrorResponse( 'NoSuchBucket', 'The specified bucket does not exist.', `/${bucket}/${key}`, 404, reqId, ); const file = await findFileByBucketAndKey(bucketRecord.id, key); if (!file) return s3ErrorResponse( 'NoSuchKey', 'The specified key does not exist.', `/${bucket}/${key}`, 404, reqId, ); return s3Response(null, 200, reqId, { 'content-type': file.mimeType, 'content-length': String(file.sizeBytes), etag: `"${file.fileHash || nanoid(16)}"`, 'last-modified': file.createdAt instanceof Date ? file.createdAt.toUTCString() : new Date().toUTCString(), 'accept-ranges': 'bytes', 'cache-control': 'public, max-age=31536000', }); }; const handlePutObject = async ( bucket: string, key: string, searchParams: URLSearchParams, headers: Record, req: Request, reqId: string, ): Promise => { const bucketRecord = await findBucketByName(bucket); if (!bucketRecord) return s3ErrorResponse( 'NoSuchBucket', 'The specified bucket does not exist.', `/${bucket}/${key}`, 404, reqId, ); if (searchParams.has('tagging')) { return s3Response(null, 204, reqId); } const copySource = headers['x-amz-copy-source']; if (copySource) { return handleCopyObject(bucket, key, copySource, headers, bucketRecord.id, reqId); } // Read raw body — S3 clients send raw binary, not multipart/form-data const body = await req.arrayBuffer(); const fileBuffer = Buffer.from(body); const contentType = headers['content-type'] || 'application/octet-stream'; const hash = computeHash(fileBuffer); const existing = await findFileByBucketAndKey(bucketRecord.id, key); if (existing) { return s3Response(null, 200, reqId, { etag: `"${hash}"` }); } return await storeFileToTelegram(fileBuffer, hash, key, bucketRecord, contentType, reqId); }; const storeFileToTelegram = async ( buffer: Buffer, hash: string, key: string, bucketRecord: { id: string; name: string }, contentType: string, reqId: string, ): Promise => { const tempPath = `/tmp/filedrop-s3-${nanoid()}`; await Bun.write(tempPath, buffer); const signatureBuffer = buffer.subarray(0, 16); const fileName = key.split('/').pop() || 'file'; const { fileName: finalFileName, mimeType } = ensureExtension( fileName, signatureBuffer, contentType, ); const bucketId = bucketRecord.id; const partFileNamePrefix = `s3-${bucketRecord.name}-${key.replace(/\//g, '_')}`; if (buffer.byteLength > config.telegramChunkSizeBytes) { const file = await storeFileInTelegramChunks({ tempPath, partFileNamePrefix, fileName: finalFileName, mimeType, sizeBytes: buffer.byteLength, fileType: 'document', uploaderId: 0, bucketId, s3Key: key, }); await cleanupTempFile(tempPath); return s3Response(null, 200, reqId, { etag: `"${file.fileHash}"` }); } const forwardResult = await forwardToStorage( createReadStream(tempPath), partFileNamePrefix, 'document', ); const publicId = nanoid(); const { db, files: fileSchema } = await import('../db/index'); await db.insert(fileSchema).values({ publicId, telegramFileId: forwardResult.telegramFileId, telegramFileUniqueId: forwardResult.telegramFileUniqueId, storageChatId: config.storageChatId, storageMessageId: forwardResult.storageMessageId, fileName: finalFileName, mimeType, sizeBytes: buffer.byteLength, fileType: 'document', uploaderId: 0, fileHash: hash, bucketId, s3Key: key, storageBackend: 'telegram', isDeleted: false, createdAt: new Date(), updatedAt: new Date(), }); await cleanupTempFile(tempPath); return s3Response(null, 200, reqId, { etag: `"${hash}"` }); }; const handleCopyObject = async ( _destBucket: string, destKey: string, rawCopySource: string, headers: Record, destBucketId: string, reqId: string, ): Promise => { const copySource = decodeURIComponent(rawCopySource); const sourcePath = copySource.startsWith('/') ? copySource.slice(1) : copySource; const parts = sourcePath.split('/'); const sourceBucket = parts[0]; const sourceKey = parts.slice(1).join('/'); const sourceBucketRecord = await findBucketByName(sourceBucket); if (!sourceBucketRecord) return s3ErrorResponse( 'NoSuchBucket', 'The specified bucket does not exist.', copySource, 404, reqId, ); const sourceFile = await findFileByBucketAndKey(sourceBucketRecord.id, sourceKey); if (!sourceFile) return s3ErrorResponse( 'NoSuchKey', 'The specified key does not exist.', copySource, 404, reqId, ); if (sourceFile.storageBackend === 'chunked') { // Copying chunked objects is not yet supported. return s3ErrorResponse( 'NotImplemented', 'Copying chunked objects is not yet implemented.', copySource, 501, reqId, ); } // Conditional copy: if-match / if-none-match checks const ifMatch = headers['x-amz-copy-source-if-match']; const ifNoneMatch = headers['x-amz-copy-source-if-none-match']; if (ifMatch && sourceFile.fileHash && ifMatch !== `"${sourceFile.fileHash}"`) { return s3ErrorResponse( 'PreconditionFailed', 'The preconditions you specified did not hold.', copySource, 412, reqId, ); } if (ifNoneMatch && sourceFile.fileHash && ifNoneMatch === `"${sourceFile.fileHash}"`) { return s3ErrorResponse( 'PreconditionFailed', 'The preconditions you specified did not hold.', copySource, 412, reqId, ); } const publicId = nanoid(); const { db, files: fileSchema } = await import('../db/index'); await db.insert(fileSchema).values({ publicId, telegramFileId: sourceFile.telegramFileId, telegramFileUniqueId: sourceFile.telegramFileUniqueId, storageChatId: sourceFile.storageChatId, storageMessageId: sourceFile.storageMessageId, fileName: sourceFile.fileName, mimeType: sourceFile.mimeType, sizeBytes: sourceFile.sizeBytes, fileType: sourceFile.fileType, uploaderId: 0, fileHash: sourceFile.fileHash, bucketId: destBucketId, s3Key: destKey, storageBackend: 'telegram', isDeleted: false, createdAt: new Date(), updatedAt: new Date(), }); const xml = copyObjectResultXml(sourceFile.fileHash || nanoid(16), new Date()); return s3Response(xml, 200, reqId, { 'content-type': 'application/xml' }); }; const handleDeleteObject = async ( bucket: string, key: string, reqId: string, ): Promise => { const bucketRecord = await findBucketByName(bucket); if (!bucketRecord) return s3ErrorResponse( 'NoSuchBucket', 'The specified bucket does not exist.', `/${bucket}/${key}`, 404, reqId, ); await softDeleteFile(bucketRecord.id, key); return s3Response(null, 204, reqId); }; const handleDeleteObjects = async ( bucket: string, body: string, reqId: string, ): Promise => { const bucketRecord = await findBucketByName(bucket); if (!bucketRecord) return s3ErrorResponse( 'NoSuchBucket', 'The specified bucket does not exist.', `/${bucket}`, 404, reqId, ); const { keys, quiet } = parseDeleteObjectsBody(body); const deletedKeys: string[] = []; for (const key of keys) { const ok = await softDeleteFile(bucketRecord.id, key); if (ok) deletedKeys.push(key); } const xml = quiet ? deleteResultXml([], []) : deleteResultXml(deletedKeys, []); return s3Response(xml, 200, reqId, { 'content-type': 'application/xml' }); }; // ─────── Object Listing ─────── const handleListObjectsV1 = async ( bucket: string, searchParams: URLSearchParams, reqId: string, ): Promise => { const bucketRecord = await findBucketByName(bucket); if (!bucketRecord) return s3ErrorResponse( 'NoSuchBucket', 'The specified bucket does not exist.', `/${bucket}`, 404, reqId, ); const prefix = searchParams.get('prefix') || ''; const delimiter = searchParams.get('delimiter') || null; const maxKeys = Math.min(parseInt(searchParams.get('max-keys') || '1000', 10), 1000); const marker = searchParams.get('marker') || null; const encodingType = searchParams.get('encoding-type') || null; const { objects, prefixes: commonPrefixes } = await listObjectsByPrefix( bucketRecord.id, prefix, delimiter, maxKeys, marker, ); const isTruncated = objects.length > maxKeys; const displayObjects = objects.slice(0, maxKeys); const nextMarker = isTruncated ? (displayObjects[displayObjects.length - 1]?.s3Key ?? null) : null; const xml = listBucketResultXml( bucket, displayObjects.map((o) => ({ key: o.s3Key ?? '', sizeBytes: o.sizeBytes, etag: o.fileHash || nanoid(16), lastModified: o.createdAt instanceof Date ? o.createdAt : new Date(), mimeType: o.mimeType, })), commonPrefixes, isTruncated, marker, maxKeys, prefix, delimiter, nextMarker, reqId, encodingType, ); return s3Response(xml, 200, reqId, { 'content-type': 'application/xml' }); }; const handleListObjectsV2 = async ( bucket: string, searchParams: URLSearchParams, reqId: string, ): Promise => { const bucketRecord = await findBucketByName(bucket); if (!bucketRecord) return s3ErrorResponse( 'NoSuchBucket', 'The specified bucket does not exist.', `/${bucket}`, 404, reqId, ); const prefix = searchParams.get('prefix') || ''; const delimiter = searchParams.get('delimiter') || null; const maxKeys = Math.min(parseInt(searchParams.get('max-keys') || '1000', 10), 1000); const continuationToken = searchParams.get('continuation-token') || null; const startAfter = searchParams.get('start-after') || null; const encodingType = searchParams.get('encoding-type') || null; const { objects, prefixes: commonPrefixes } = await listObjectsByPrefix( bucketRecord.id, prefix, delimiter, maxKeys, continuationToken || startAfter, ); const isTruncated = objects.length > maxKeys; const displayObjects = objects.slice(0, maxKeys); const nextContinuationToken = isTruncated ? (displayObjects[displayObjects.length - 1]?.s3Key ?? null) : null; const xml = listBucketV2ResultXml( bucket, displayObjects.map((o) => ({ key: o.s3Key ?? '', sizeBytes: o.sizeBytes, etag: o.fileHash || nanoid(16), lastModified: o.createdAt instanceof Date ? o.createdAt : new Date(), mimeType: o.mimeType, })), commonPrefixes, isTruncated, maxKeys, prefix, delimiter, continuationToken, nextContinuationToken, displayObjects.length, reqId, encodingType, ); return s3Response(xml, 200, reqId, { 'content-type': 'application/xml' }); }; // ─────── Multipart Upload ─────── const handleCreateMultipartUpload = async ( bucket: string, key: string, _searchParams: URLSearchParams, reqId: string, ): Promise => { const bucketRecord = await findBucketByName(bucket); if (!bucketRecord) return s3ErrorResponse( 'NoSuchBucket', 'The specified bucket does not exist.', `/${bucket}/${key}`, 404, reqId, ); const uploadId = await createMultipartUpload(bucketRecord.id, key, 's3'); const xml = initiateMultipartUploadXml(bucket, key, uploadId); return s3Response(xml, 200, reqId, { 'content-type': 'application/xml' }); }; const handleUploadPart = async ( bucket: string, key: string, searchParams: URLSearchParams, req: Request, reqId: string, ): Promise => { const uploadId = searchParams.get('uploadId')!; const partNumber = parseInt(searchParams.get('partNumber')!, 10); if (partNumber < 1 || partNumber > 10000) { return s3ErrorResponse( 'InvalidArgument', 'Part number must be an integer between 1 and 10000', `/${bucket}/${key}`, 400, reqId, ); } const multipart = await findMultipartUpload(uploadId); if (!multipart || multipart.s3Key !== key) { return s3ErrorResponse( 'NoSuchUpload', 'The specified upload does not exist.', `/${bucket}/${key}`, 404, reqId, ); } const body = await req.arrayBuffer(); const buffer = Buffer.from(body); if (buffer.byteLength > config.telegramChunkSizeBytes) { return s3ErrorResponse( 'EntityTooLarge', `Your proposed upload part size (${buffer.byteLength} bytes) exceeds the maximum allowed part size (${config.telegramChunkSizeBytes} bytes) for this storage backend. Use smaller part sizes.`, `/${bucket}/${key}`, 400, reqId, ); } const tempPath = `/tmp/filedrop-mp-${nanoid()}`; await Bun.write(tempPath, buffer); const forwardResult = await forwardToStorage( createReadStream(tempPath), `mp-${uploadId}-part-${partNumber}`, 'document', ); await cleanupTempFile(tempPath); const etag = computeHash(buffer); await insertMultipartPart({ uploadId, partNumber, telegramFileId: forwardResult.telegramFileId, telegramFileUniqueId: forwardResult.telegramFileUniqueId, storageMessageId: forwardResult.storageMessageId, sizeBytes: buffer.byteLength, etag, }); return s3Response(null, 200, reqId, { etag: `"${etag}"` }); }; const handleCompleteMultipartUpload = async ( bucket: string, key: string, searchParams: URLSearchParams, body: string, reqId: string, ): Promise => { const uploadId = searchParams.get('uploadId')!; const multipart = await findMultipartUpload(uploadId); if (!multipart) { return s3ErrorResponse( 'NoSuchUpload', 'The specified upload does not exist.', `/${bucket}/${key}`, 404, reqId, ); } const parts = parseCompleteMultipartBody(body); const storedParts = await listMultipartParts(uploadId); // Validate ascending part order const partNumbers = parts.map((p) => p.partNumber); if (partNumbers.length > 1 && partNumbers.some((n, i) => i > 0 && n <= partNumbers[i - 1])) { return s3ErrorResponse( 'InvalidPartOrder', 'The list of parts was not in ascending order.', `/${bucket}/${key}`, 400, reqId, ); } if (parts.length !== storedParts.length) { return s3ErrorResponse( 'InvalidPart', 'One or more specified parts could not be found.', `/${bucket}/${key}`, 400, reqId, ); } const totalSize = storedParts.reduce((sum, p) => sum + p.sizeBytes, 0); const publicId = nanoid(); const { db, files: fileSchema } = await import('../db/index'); await db.insert(fileSchema).values({ publicId, telegramFileId: storedParts[0].telegramFileId, telegramFileUniqueId: storedParts[0].telegramFileUniqueId, storageChatId: config.storageChatId, storageMessageId: storedParts[0].storageMessageId, fileName: key.split('/').pop() || 'file', mimeType: 'application/octet-stream', sizeBytes: totalSize, fileType: 'document', uploaderId: 0, bucketId: multipart.bucketId, s3Key: key, storageBackend: 'telegram', isDeleted: false, multipartUploadId: uploadId, createdAt: new Date(), updatedAt: new Date(), }); await completeMultipartUpload(uploadId); const location = `${config.baseUrl}/${bucket}/${key}`; const combinedEtag = storedParts.map((p) => p.etag).join('-'); const xml = completeMultipartUploadXml(bucket, key, combinedEtag, location); return s3Response(xml, 200, reqId, { 'content-type': 'application/xml' }); }; const handleListMultipartUploads = async ( bucket: string, searchParams: URLSearchParams, reqId: string, ): Promise => { const bucketRecord = await findBucketByName(bucket); if (!bucketRecord) return s3ErrorResponse( 'NoSuchBucket', 'The specified bucket does not exist.', `/${bucket}`, 404, reqId, ); const maxUploads = Math.min(parseInt(searchParams.get('max-uploads') || '1000', 10), 1000); const keyMarker = searchParams.get('key-marker') || null; const { uploads, isTruncated, nextKeyMarker } = await listMultipartUploadsByBucket( bucketRecord.id, maxUploads, keyMarker, ); const xml = listMultipartUploadsXml( bucket, uploads.map((u) => ({ key: u.s3Key, uploadId: u.uploadId, initiatedAt: u.initiatedAt, initiatedBy: u.initiatedBy, })), maxUploads, isTruncated, nextKeyMarker, reqId, ); return s3Response(xml, 200, reqId, { 'content-type': 'application/xml' }); }; const handleAbortMultipartUpload = async ( bucket: string, key: string, searchParams: URLSearchParams, reqId: string, ): Promise => { const uploadId = searchParams.get('uploadId')!; const multipart = await findMultipartUpload(uploadId); if (!multipart) { return s3ErrorResponse( 'NoSuchUpload', 'The specified upload does not exist.', `/${bucket}/${key}`, 404, reqId, ); } await abortMultipartUpload(uploadId); return s3Response(null, 204, reqId); }; const handleListParts = async ( bucket: string, key: string, searchParams: URLSearchParams, reqId: string, ): Promise => { const uploadId = searchParams.get('uploadId')!; const multipart = await findMultipartUpload(uploadId); if (!multipart) { return s3ErrorResponse( 'NoSuchUpload', 'The specified upload does not exist.', `/${bucket}/${key}`, 404, reqId, ); } const parts = await listMultipartParts(uploadId); const maxParts = Math.min(parseInt(searchParams.get('max-parts') || '1000', 10), 1000); const xml = listPartsXml( bucket, key, uploadId, parts.map((p) => ({ partNumber: p.partNumber, etag: p.etag, sizeBytes: p.sizeBytes, createdAt: p.createdAt, })), maxParts, false, reqId, ); return s3Response(xml, 200, reqId, { 'content-type': 'application/xml' }); }; (x#-import { config } from '../env'; const errorSchema = (example: string) => ({ type: 'object', properties: { error: { type: 'string', example }, }, }); const jsonContent = (schema: object) => ({ 'application/json': { schema }, }); export const handleSwaggerJson = async (): Promise => { const spec = { openapi: '3.0.0', info: { title: 'TeleUploader API', version: '1.0.0', description: 'Telegram-backed file uploader API with redirect-based downloads.', }, servers: [ { url: '/', description: 'Current environment', }, ], paths: { '/health': { get: { summary: 'Health Check', description: 'Checks database connectivity status.', responses: { '200': { description: 'Database is healthy', content: jsonContent({ type: 'object', properties: { status: { type: 'string', example: 'ok' }, }, }), }, '500': { description: 'Database or server is unhealthy', content: jsonContent({ type: 'object', properties: { status: { type: 'string', example: 'error' }, error: { type: 'string', example: 'DB Connection Failed' }, }, }), }, }, }, }, '/api/upload': { post: { summary: 'Upload File', description: 'Uploads a file to Telegram storage via multipart/form-data or JSON base64.', requestBody: { required: true, content: { 'multipart/form-data': { schema: { type: 'object', required: ['file'], properties: { file: { type: 'string', format: 'binary', description: 'File binary payload.', }, fileName: { type: 'string', description: 'Optional file name override.', }, }, }, }, 'application/json': { schema: { type: 'object', required: ['file'], properties: { file: { type: 'string', description: 'Base64 encoded file content.', }, fileName: { type: 'string', default: 'file', description: 'Optional file name.', }, }, }, }, }, }, responses: { '200': { description: 'Successful upload metadata.', content: jsonContent({ type: 'object', properties: { public_id: { type: 'string', example: 'xYz123' }, telegram_file_id: { type: 'string', example: 'BQACAgQAAxkBA...' }, telegram_file_unique_id: { type: 'string', example: 'AgAD8w...' }, storage_chat_id: { type: 'integer', example: -1001234567890 }, storage_message_id: { type: 'integer', example: 42 }, file_name: { type: 'string', example: 'document.pdf' }, mime_type: { type: 'string', example: 'application/pdf' }, size_bytes: { type: 'integer', example: 1048576 }, file_type: { type: 'string', example: 'document' }, uploader_id: { type: 'integer', example: 0 }, created_at: { type: 'string', format: 'date-time', example: '2026-05-18T10:00:00.000Z', }, download_url: { type: 'string', example: `${config.baseUrl}/f/xYz123`, }, }, }), }, '400': { description: 'Bad request.', content: jsonContent(errorSchema('No file provided')), }, '500': { description: 'Internal server error.', content: jsonContent(errorSchema('Upload failed')), }, }, }, }, '/f/{public_id}': { get: { summary: 'Redirect to Telegram File URL', description: 'Gets a fresh Telegram download URL and redirects with 302. Rate-limited by IP.', parameters: [ { name: 'public_id', in: 'path', required: true, description: 'Permanent public file ID.', schema: { type: 'string' }, }, ], responses: { '302': { description: 'Redirect to Telegram CDN URL.', headers: { Location: { schema: { type: 'string', example: 'https://api.telegram.org/file/botTOKEN/documents/file_0.pdf', }, }, }, }, '404': { description: 'File not found.', content: jsonContent(errorSchema('File not found')), }, '429': { description: 'Rate limit exceeded.', content: jsonContent(errorSchema('Rate limit exceeded')), }, '500': { description: 'Internal server error.', content: jsonContent(errorSchema('Server error')), }, }, }, }, '/file/{public_id}/info': { get: { summary: 'Get File Info', description: 'Gets saved file metadata by public ID.', parameters: [ { name: 'public_id', in: 'path', required: true, description: 'Permanent public file ID.', schema: { type: 'string' }, }, ], responses: { '200': { description: 'File metadata.', content: jsonContent({ type: 'object', properties: { public_id: { type: 'string', example: 'xYz123' }, file_name: { type: 'string', example: 'document.pdf' }, mime_type: { type: 'string', example: 'application/pdf' }, size_bytes: { type: 'integer', example: 1048576 }, file_type: { type: 'string', example: 'document' }, uploader_id: { type: 'integer', example: 0 }, created_at: { type: 'string', format: 'date-time', example: '2026-05-18T10:00:00.000Z', }, }, }), }, '400': { description: 'Missing public ID.', content: jsonContent(errorSchema('Missing file id')), }, '404': { description: 'File not found.', content: jsonContent(errorSchema('File not found')), }, '500': { description: 'Internal server error.', content: jsonContent(errorSchema('Server error')), }, }, }, }, }, }; return Response.json(spec, { status: 200, headers: { 'access-control-allow-origin': '*', }, }); }; export const handleSwaggerHtml = async (): Promise => { const html = ` TeleUploader API Documentation
`; return new Response(html, { status: 200, headers: { 'content-type': 'text/html; charset=utf-8', 'access-control-allow-origin': '*', 'x-content-type-options': 'nosniff', }, }); }; S{ZR`x4G>Qconst publicIdParameter = { name: 'public_id', in: 'path', required: true, 5.o!}; const fileInfoProperties = { ' 6 :=P5604a';}, }; const uploadProperties = { ...fileInfoProperties, k G E Ah 8download_url: { 0)/}, }; const objectSchema = (properties: objectF& objectSchema(uploadProperties/publicIdParameter publicIdParameter'XobjectSchema(fileInfoProperties')YZx >;0FileDrop3File upload API with stream<; w Li! /413"equest body too large1'_ Request body too large" lDownU $-Redirects to Telegram CDN for direct downloadh0 status: 200FileDrop^04"|\Lxi&import { createWriteStream } from 'node:fs'; import { nanoid } from 'nanoid'; import { findFileByHash } from '../db/files'; import { config } from '../env'; import { storeFileInTelegramChunks } from '../utils/chunked-storage'; import { buildUploadResponse, checkFileSize, cleanupTempFile, computeHash, ensureExtension, extractMimeType, getErrorMessage, getFileType, } from '../utils/file'; import logger from '../utils/logger'; import { metricsCollector } from '../utils/metrics'; import { enqueuePreparedUpload, type PreparedUpload } from '../utils/uploadBatcher'; interface JsonUploadPayload { file?: unknown; fileName?: string; } const parseBase64File = (file: string): { base64Data: string; mimeType: string } => { if (!file.startsWith('data:')) { return { base64Data: file, mimeType: 'application/octet-stream' }; } const match = file.match(/^data:([^;]+);base64,(.+)$/); return match ? { base64Data: match[2], mimeType: match[1] } : { base64Data: file, mimeType: 'application/octet-stream' }; }; const normalizeFileType = (mimeType: string, fileName: string): string => { const fileType = getFileType(mimeType, fileName); return fileType === 'application' ? 'document' : fileType; }; const JSON_UPLOAD_LIMIT_BYTES = 50 * 1024 * 1024; const SIGNATURE_BYTES = 16; const getContentLength = (req: Request): number | null => { const value = req.headers.get('content-length'); if (!value) return null; const parsed = Number.parseInt(value, 10); return Number.isFinite(parsed) && parsed >= 0 ? parsed : null; }; const rejectOversizedRequest = (req: Request): Response | null => { const contentLength = getContentLength(req); if (contentLength !== null && contentLength > config.maxRequestBodyBytes) { return Response.json({ error: 'Request body too large' }, { status: 413 }); } return null; }; const streamFileToTemp = async (file: File, maxSizeBytes: number): Promise => { const tempPath = `/tmp/teleuploader-${nanoid()}`; const writer = createWriteStream(tempPath); const hasher = new Bun.CryptoHasher('sha256'); const reader = file.stream().getReader(); const signatureChunks: Buffer[] = []; let signatureBytes = 0; let sizeBytes = 0; const writeChunk = async (chunk: Buffer): Promise => { if (!writer.write(chunk)) { await new Promise((resolve, reject) => { writer.once('drain', resolve); writer.once('error', reject); }); } }; const finishWriter = async (): Promise => { await new Promise((resolve, reject) => { writer.end(() => resolve()); writer.once('error', reject); }); }; try { while (true) { const { done, value } = await reader.read(); if (done) break; const chunk = Buffer.from(value); sizeBytes += chunk.byteLength; if (sizeBytes > maxSizeBytes) { throw new Error('File size exceeds upload limit'); } hasher.update(chunk); await writeChunk(chunk); if (signatureBytes < SIGNATURE_BYTES) { const remaining = SIGNATURE_BYTES - signatureBytes; const signatureChunk = chunk.subarray(0, remaining); signatureChunks.push(signatureChunk); signatureBytes += signatureChunk.byteLength; } } await finishWriter(); return { tempPath, fileHash: hasher.digest('hex'), sizeBytes, signatureBuffer: Buffer.concat(signatureChunks, signatureBytes), }; } catch (error) { writer.destroy(); await cleanupTempFile(tempPath); throw error; } finally { reader.releaseLock(); } }; const writeBufferToTemp = async (fileBuffer: Buffer, fileHash: string): Promise => { const tempPath = `/tmp/teleuploader-${nanoid()}`; try { await Bun.write(tempPath, fileBuffer); return { tempPath, fileHash, sizeBytes: fileBuffer.byteLength, signatureBuffer: fileBuffer.subarray(0, SIGNATURE_BYTES), }; } catch (error) { await cleanupTempFile(tempPath); throw error; } }; export const handleUpload = async (req: Request): Promise => { const startTime = performance.now(); try { const contentType = req.headers.get('content-type') || ''; const oversizedResponse = rejectOversizedRequest(req); if (oversizedResponse) return oversizedResponse; if (contentType.includes('multipart/form-data')) { return handleMultipartUpload(req); } else if (contentType.includes('application/json')) { return handleJSONUpload(req); } return Response.json( { error: 'Unsupported content type. Use multipart/form-data or application/json' }, { status: 400 }, ); } catch (error: unknown) { metricsCollector.recordError(); const message = getErrorMessage(error); logger.error('Upload error', { error: message }); return Response.json({ error: message }, { status: 500 }); } finally { metricsCollector.recordUploadTime(performance.now() - startTime); } }; const handleMultipartUpload = async (req: Request): Promise => { try { const formData = await req.formData(); const file = formData.get('file'); const fileName = (formData.get('fileName') as string) || (file instanceof File ? file.name : null) || 'file'; if (!file || !(file instanceof File)) { return Response.json({ error: 'No file provided' }, { status: 400 }); } if (file.size > config.maxRequestBodyBytes) { return Response.json({ error: 'File size exceeds upload limit' }, { status: 413 }); } const prepared = await streamFileToTemp(file, config.maxRequestBodyBytes); const existingFile = await findFileByHash(prepared.fileHash); if (existingFile) { await cleanupTempFile(prepared.tempPath); return Response.json(buildUploadResponse(existingFile, config.baseUrl), { status: 200 }); } const rawMimeType = file.type || extractMimeType({}, req) || 'application/octet-stream'; const { fileName: finalFileName, mimeType } = ensureExtension( fileName, prepared.signatureBuffer, rawMimeType, ); const fileType = getFileType(mimeType, finalFileName); if (!checkFileSize(prepared.sizeBytes, fileType)) { await cleanupTempFile(prepared.tempPath); return Response.json({ error: `File size exceeds ${fileType} limit` }, { status: 400 }); } if (prepared.sizeBytes > config.telegramChunkSizeBytes) { const file = await storeFileInTelegramChunks({ tempPath: prepared.tempPath, partFileNamePrefix: `direct-${prepared.fileHash?.slice(0, 16) || 'upload'}`, fileName: finalFileName, mimeType, sizeBytes: prepared.sizeBytes, fileType, uploaderId: 0, }); await cleanupTempFile(prepared.tempPath); return Response.json(buildUploadResponse(file, config.baseUrl), { status: 200 }); } const uploaded = await enqueuePreparedUpload({ prepared, fileName: finalFileName, mimeType, fileType, }); return Response.json(buildUploadResponse(uploaded, config.baseUrl), { status: 200 }); } catch (error: unknown) { const message = getErrorMessage(error); logger.error('Multipart upload error', { error: message }); return Response.json({ error: message }, { status: 500 }); } }; const handleJSONUpload = async (req: Request): Promise => { try { const { file, fileName = 'file' } = (await req.json()) as JsonUploadPayload; if (!file || typeof file !== 'string') { return Response.json( { error: 'Invalid JSON. Must include "file" (base64) and optional "fileName"' }, { status: 400 }, ); } const { base64Data, mimeType: rawMimeType } = parseBase64File(file); const estimatedSizeBytes = Math.floor((base64Data.length * 3) / 4); if ( estimatedSizeBytes > JSON_UPLOAD_LIMIT_BYTES || estimatedSizeBytes > config.maxRequestBodyBytes ) { return Response.json( { error: 'JSON base64 uploads are limited to 50MB. Use multipart/form-data for larger files', }, { status: 400 }, ); } const fileBytes = Buffer.from(base64Data, 'base64'); const hash = computeHash(fileBytes); const existingFile = await findFileByHash(hash); if (existingFile) { return Response.json(buildUploadResponse(existingFile, config.baseUrl), { status: 200 }); } const { fileName: finalFileName, mimeType } = ensureExtension(fileName, fileBytes, rawMimeType); const fileType = normalizeFileType(mimeType, finalFileName); if (!checkFileSize(fileBytes.byteLength, fileType)) { return Response.json({ error: `File size exceeds ${fileType} limit` }, { status: 400 }); } const prepared = await writeBufferToTemp(fileBytes, hash); if (prepared.sizeBytes > config.telegramChunkSizeBytes) { const file = await storeFileInTelegramChunks({ tempPath: prepared.tempPath, partFileNamePrefix: `direct-${prepared.fileHash?.slice(0, 16) || 'json'}`, fileName: finalFileName, mimeType, sizeBytes: prepared.sizeBytes, fileType, uploaderId: 0, }); await cleanupTempFile(prepared.tempPath); return Response.json(buildUploadResponse(file, config.baseUrl), { status: 200 }); } const uploaded = await enqueuePreparedUpload({ prepared, fileName: finalFileName, mimeType, fileType, }); return Response.json(buildUploadResponse(uploaded, config.baseUrl), { status: 200 }); } catch (error: unknown) { const message = getErrorMessage(error); logger.error('JSON upload error', { error: message }); return Response.json({ error: message }, { status: 500 }); } }; 7fmwx#LLfiledropfiledropMx+Kimport { createReadStream } from 'node:fs'; import { nanoid } from 'nanoid'; import { createBucket, deleteBucket, findBucketByName, listBuckets } from '../db/buckets'; import { countBucketObjects, findFileByBucketAndKey, listObjectsByPrefix, softDeleteFile, } from '../db/files-ext'; import { config } from '../env'; import { createChunkedObjectResponse, storeFileInTelegramChunks } from '../utils/chunked-storage'; import { cleanupTempFile, computeHash, ensureExtension, getErrorMessage } from '../utils/file'; import logger from '../utils/logger'; import { forwardToStorage, getFileInfo } from '../utils/telegram'; type RouteParams = { bucket?: string; key?: string }; const json = (data: unknown, status = 200) => Response.json(data, { status }); const jsonError = (error: string, status: number) => Response.json({ error }, { status }); // ─────── Bucket endpoints ─────── export const handleListBucketsV1 = async (): Promise => { const buckets = await listBuckets(); const result = await Promise.all( buckets.map(async (b) => ({ id: b.id, name: b.name, createdAt: b.createdAt.toISOString(), objectCount: await countBucketObjects(b.id), })), ); return json({ buckets: result }); }; export const handleCreateBucketV1 = async (req: Request): Promise => { const body = (await req.json()) as { name?: string }; if (!body.name || !/^[a-z0-9][a-z0-9.-]{1,61}[a-z0-9]$/.test(body.name)) { return jsonError('Invalid bucket name. Use lowercase, 3-63 chars, no underscore', 400); } const existing = await findBucketByName(body.name); if (existing) return jsonError('Bucket already exists', 409); const bucket = await createBucket(body.name); return json({ id: bucket.id, name: bucket.name }, 201); }; export const handleDeleteBucketV1 = async ( _req: Request, params: RouteParams, ): Promise => { const bucket = await findBucketByName(params.bucket!); if (!bucket) return jsonError('Bucket not found', 404); const count = await countBucketObjects(bucket.id); if (count > 0) return jsonError('Bucket is not empty', 409); await deleteBucket(params.bucket!); return json({ success: true }); }; // ─────── Object endpoints ─────── export const handleListObjectsV1 = async (req: Request, params: RouteParams): Promise => { const bucket = await findBucketByName(params.bucket!); if (!bucket) return jsonError('Bucket not found', 404); const url = new URL(req.url); const prefix = url.searchParams.get('prefix') || ''; const delimiter = url.searchParams.get('delimiter') || '/'; const maxKeys = parseInt(url.searchParams.get('max-keys') || '1000', 10); const continuationToken = url.searchParams.get('continuation-token') || null; const { objects, prefixes } = await listObjectsByPrefix( bucket.id, prefix, delimiter, maxKeys, continuationToken, ); const isTruncated = objects.length > maxKeys; const displayObjects = objects.slice(0, maxKeys); return json({ objects: displayObjects.map((o) => ({ key: o.s3Key, fileName: o.fileName, mimeType: o.mimeType, sizeBytes: Number(o.sizeBytes), fileType: o.fileType, etag: o.fileHash, lastModified: o.createdAt instanceof Date ? o.createdAt.toISOString() : new Date(o.createdAt).toISOString(), downloadUrl: `${config.baseUrl}/f/${o.publicId}`, })), prefixes, isTruncated, nextContinuationToken: isTruncated ? displayObjects[displayObjects.length - 1]?.s3Key : null, }); }; export const handleUploadObjectV1 = async ( req: Request, params: RouteParams, ): Promise => { const bucket = await findBucketByName(params.bucket!); if (!bucket) return jsonError('Bucket not found', 404); const formData = await req.formData(); const file = formData.get('file'); if (!file || !(file instanceof File)) { return jsonError('No file provided', 400); } const key = (formData.get('key') as string) || file.name; const buffer = Buffer.from(await file.arrayBuffer()); const hash = computeHash(buffer); const tempPath = `/tmp/teleuploader-web-${nanoid()}`; await Bun.write(tempPath, buffer); const signatureBuffer = buffer.subarray(0, 16); const { fileName: finalFileName, mimeType } = ensureExtension( key.split('/').pop() || 'file', signatureBuffer, file.type || 'application/octet-stream', ); const partFileNamePrefix = `s3-${bucket.name}-${key.replace(/\//g, '_')}`; if (buffer.byteLength > config.telegramChunkSizeBytes) { const file = await storeFileInTelegramChunks({ tempPath, partFileNamePrefix, fileName: finalFileName, mimeType, sizeBytes: buffer.byteLength, fileType: 'document', uploaderId: 0, bucketId: bucket.id, s3Key: key, }); await cleanupTempFile(tempPath); return json( { key, size: buffer.byteLength, etag: hash, downloadUrl: `${config.baseUrl}/f/${file.publicId}`, }, 201, ); } const forwardResult = await forwardToStorage( createReadStream(tempPath), partFileNamePrefix, 'document', ); const publicId = nanoid(); const { db, files: fileSchema } = await import('../db/index'); await db.insert(fileSchema).values({ publicId, telegramFileId: forwardResult.telegramFileId, telegramFileUniqueId: forwardResult.telegramFileUniqueId, storageChatId: config.storageChatId, storageMessageId: forwardResult.storageMessageId, fileName: finalFileName, mimeType, sizeBytes: buffer.byteLength, fileType: 'document', uploaderId: 0, fileHash: hash, bucketId: bucket.id, s3Key: key, storageBackend: 'telegram', isDeleted: false, createdAt: new Date(), updatedAt: new Date(), }); await cleanupTempFile(tempPath); return json( { key, size: buffer.byteLength, etag: hash, downloadUrl: `${config.baseUrl}/f/${publicId}` }, 201, ); }; export const handleDeleteObjectV1 = async ( _req: Request, params: RouteParams, ): Promise => { const bucket = await findBucketByName(params.bucket!); if (!bucket) return jsonError('Bucket not found', 404); await softDeleteFile(bucket.id, params.key!); return json({ success: true }); }; export const handleDownloadObjectV1 = async ( _req: Request, params: RouteParams, ): Promise => { const bucket = await findBucketByName(params.bucket!); if (!bucket) return jsonError('Bucket not found', 404); const file = await findFileByBucketAndKey(bucket.id, params.key!); if (!file) return jsonError('Object not found', 404); if (file.storageBackend === 'chunked') { const range = { type: 'none' as const }; return createChunkedObjectResponse({ file, range, reqId: '' }); } const fileInfo = await getFileInfo(file.telegramFileId); const redirectUrl = `https://api.telegram.org/file/bot${fileInfo.bot_token}/${fileInfo.file_path}`; return new Response(null, { status: 302, headers: { Location: redirectUrl } }); }; export const handleCopyObjectV1 = async (req: Request, params: RouteParams): Promise => { const body = (await req.json()) as { sourceKey?: string; destBucket?: string; destKey?: string; }; if (!body.sourceKey || !body.destKey) { return jsonError('sourceKey and destKey are required', 400); } const destBucketName = body.destBucket || params.bucket!; const sourceBucket = await findBucketByName(params.bucket!); const destBucket = await findBucketByName(destBucketName); if (!sourceBucket || !destBucket) return jsonError('Bucket not found', 404); const sourceFile = await findFileByBucketAndKey(sourceBucket.id, body.sourceKey); if (!sourceFile) return jsonError('Source object not found', 404); if (sourceFile.storageBackend === 'chunked') { return json({ error: 'Copying chunked objects is not implemented' }, 501); } const publicId = nanoid(); const { db, files: fileSchema } = await import('../db/index'); await db.insert(fileSchema).values({ publicId, telegramFileId: sourceFile.telegramFileId, telegramFileUniqueId: sourceFile.telegramFileUniqueId, storageChatId: sourceFile.storageChatId, storageMessageId: sourceFile.storageMessageId, fileName: sourceFile.fileName, mimeType: sourceFile.mimeType, sizeBytes: sourceFile.sizeBytes, fileType: sourceFile.fileType, uploaderId: 0, fileHash: sourceFile.fileHash, bucketId: destBucket.id, s3Key: body.destKey, storageBackend: 'telegram', isDeleted: false, createdAt: new Date(), updatedAt: new Date(), }); return json({ sourceKey: body.sourceKey, destKey: body.destKey, destBucket: destBucketName }); }; // ─────── Router ─────── export const handleWebApiV1 = async (req: Request): Promise => { const url = new URL(req.url); const pathname = url.pathname.replace(/^\/api\/v1/, ''); const parts = pathname.split('/').filter(Boolean); const method = req.method; try { // GET /api/v1/buckets if (parts.length === 1 && parts[0] === 'buckets' && method === 'GET') { return await handleListBucketsV1(); } // POST /api/v1/buckets if (parts.length === 1 && parts[0] === 'buckets' && method === 'POST') { return await handleCreateBucketV1(req); } // DELETE /api/v1/buckets/{name} if (parts.length === 2 && parts[0] === 'buckets' && method === 'DELETE') { return await handleDeleteBucketV1(req, { bucket: parts[1] }); } // GET /api/v1/buckets/{name}/objects if ( parts.length === 3 && parts[0] === 'buckets' && parts[2] === 'objects' && method === 'GET' ) { return await handleListObjectsV1(req, { bucket: parts[1] }); } // POST /api/v1/buckets/{name}/upload if ( parts.length === 3 && parts[0] === 'buckets' && parts[2] === 'upload' && method === 'POST' ) { return await handleUploadObjectV1(req, { bucket: parts[1] }); } // POST /api/v1/buckets/{name}/copy if (parts.length === 3 && parts[0] === 'buckets' && parts[2] === 'copy' && method === 'POST') { return await handleCopyObjectV1(req, { bucket: parts[1] }); } // DELETE /api/v1/buckets/{name}/{key+} if (parts.length >= 3 && parts[0] === 'buckets' && method === 'DELETE') { const bucket = parts[1]; const key = parts.slice(2).join('/'); return await handleDeleteObjectV1(req, { bucket, key }); } // GET /api/v1/buckets/{name}/download/{key+} if ( parts.length >= 4 && parts[0] === 'buckets' && parts[2] === 'download' && method === 'GET' ) { const bucket = parts[1]; const key = parts.slice(3).join('/'); return await handleDownloadObjectV1(req, { bucket, key }); } return jsonError('Not found', 404); } catch (error: unknown) { logger.error('Web API error', { path: pathname, error: getErrorMessage(error) }); return jsonError('Internal server error', 500); } }; *>BxWWsfiledrop5b5 x340031QH,-+)f7 o&D u<nQ R{+B= y:de%U30?pSڧkVUVsX,`5Mx$lL[s]cG rS@ӟ1,M ]ŠrSK2Ax >"-5ĒT %5*nu= B0u@*Aj.zƱ)E<\61bc>y>?]2 Response | Promise; export interface AuthSession { username: string; expiresAt: Date | null; method: 'cookie' | 'bearer'; } interface CookieOptions { secret?: string; cookieName?: string; maxAgeMs?: number; } interface SessionPayload { u: string; e: number; } const getSecret = (secret?: string): string => secret ?? config.adminApiToken; const getCookieName = (cookieName?: string): string => cookieName ?? config.sessionCookieName; const getMaxAgeMs = (maxAgeMs?: number): number => maxAgeMs ?? config.sessionMaxAgeMs; const encodePayload = (value: string): string => Buffer.from(value, 'utf8').toString('base64url'); const decodePayload = (value: string): string | null => { try { return Buffer.from(value, 'base64url').toString('utf8'); } catch { return null; } }; export const isAuthEnabled = (secret = config.adminApiToken): boolean => secret.length > 0; export const timingSafeCompare = (left: string, right: string): boolean => { const leftBuffer = Buffer.from(left); const rightBuffer = Buffer.from(right); if (leftBuffer.length !== rightBuffer.length) { return false; } return timingSafeEqual(leftBuffer, rightBuffer); }; export const signCookiePayload = (payload: string, secret: string): string => createHmac('sha256', secret).update(payload).digest('base64url'); export const verifyCookieSignature = (cookieValue: string, secret: string): string | null => { const separatorIndex = cookieValue.lastIndexOf(SIGNATURE_SEPARATOR); if (separatorIndex <= 0 || separatorIndex === cookieValue.length - 1) { return null; } const payload = cookieValue.slice(0, separatorIndex); const signature = cookieValue.slice(separatorIndex + 1); const expectedSignature = signCookiePayload(payload, secret); if (!timingSafeCompare(signature, expectedSignature)) { return null; } return payload; }; const cookieAttributes = (maxAgeSeconds: number): string => [`Max-Age=${maxAgeSeconds}`, 'Path=/', 'HttpOnly', 'SameSite=Lax', 'Secure'].join('; '); export const createSessionCookie = ( username = ADMIN_USERNAME, options: CookieOptions = {}, ): string => { const secret = getSecret(options.secret); const cookieName = getCookieName(options.cookieName); const maxAgeMs = getMaxAgeMs(options.maxAgeMs); const expiresAt = Date.now() + maxAgeMs; const payload = encodePayload( JSON.stringify({ u: username, e: expiresAt } satisfies SessionPayload), ); const signature = signCookiePayload(payload, secret); const maxAgeSeconds = Math.max(1, Math.floor(maxAgeMs / 1000)); return `${cookieName}=${payload}${SIGNATURE_SEPARATOR}${signature}; ${cookieAttributes(maxAgeSeconds)}`; }; export const clearSessionCookie = (cookieName = config.sessionCookieName): string => `${cookieName}=; ${cookieAttributes(0)}`; const findCookieValue = (cookieHeader: string | null, cookieName: string): string | null => { if (!cookieHeader) return null; for (const rawCookie of cookieHeader.split(';')) { const cookie = rawCookie.trim(); const equalsIndex = cookie.indexOf('='); if (equalsIndex <= 0) continue; const name = cookie.slice(0, equalsIndex); if (name === cookieName) { return cookie.slice(equalsIndex + 1); } } return null; }; export const parseSessionFromCookie = ( cookieHeader: string | null, options: Pick = {}, ): AuthSession | null => { const secret = getSecret(options.secret); const cookieName = getCookieName(options.cookieName); if (!isAuthEnabled(secret)) return null; const cookieValue = findCookieValue(cookieHeader, cookieName); if (!cookieValue) return null; const encodedPayload = verifyCookieSignature(cookieValue, secret); if (!encodedPayload) return null; const rawPayload = decodePayload(encodedPayload); if (!rawPayload) return null; try { const payload = JSON.parse(rawPayload) as Partial; if (payload.u !== ADMIN_USERNAME || typeof payload.e !== 'number') return null; if (!Number.isFinite(payload.e) || payload.e <= Date.now()) return null; return { username: payload.u, expiresAt: new Date(payload.e), method: 'cookie', }; } catch { return null; } }; export const checkBearerToken = ( authorizationHeader: string | null, secret = config.adminApiToken, ): boolean => { if (!isAuthEnabled(secret) || !authorizationHeader) return false; const [scheme, ...rest] = authorizationHeader.split(' '); if (scheme !== 'Bearer' || rest.length === 0) return false; const token = rest.join(' ').trim(); return token.length > 0 && timingSafeCompare(token, secret); }; export const getAuthSession = ( req: Request, options: Pick = {}, ): AuthSession | null => { const secret = getSecret(options.secret); if (!isAuthEnabled(secret)) { return { username: ADMIN_USERNAME, expiresAt: null, method: 'bearer', }; } const cookieSession = parseSessionFromCookie(req.headers.get('cookie'), options); if (cookieSession) return cookieSession; if (checkBearerToken(req.headers.get('authorization'), secret)) { return { username: ADMIN_USERNAME, expiresAt: null, method: 'bearer', }; } return null; }; export const unauthorizedResponse = (): Response => Response.json({ error: 'Unauthorized' }, { status: 401 }); export const requireAuth = ( handler: Handler, options: Pick = {}, ): ((req: Request) => Promise) => { return async (req: Request): Promise => { const secret = getSecret(options.secret); if (!isAuthEnabled(secret)) { return handler(req); } const session = getAuthSession(req, options); if (!session) { return unauthorizedResponse(); } return handler(req); }; }; Obx,// Simple in-memory cache with TTL support interface CacheEntry { value: T; expiresAt: number; } class Cache { private store = new Map>(); private ttlMs: number; constructor(ttlSeconds: number = 3600) { this.ttlMs = ttlSeconds * 1000; } set(key: string, value: T): void { this.store.set(key, { value, expiresAt: Date.now() + this.ttlMs, }); } get(key: string): T | null { const entry = this.store.get(key); if (!entry) return null; if (Date.now() > entry.expiresAt) { this.store.delete(key); return null; } return entry.value; } has(key: string): boolean { return this.get(key) !== null; } delete(key: string): void { this.store.delete(key); } clear(): void { this.store.clear(); } size(): number { return this.store.size; } // Cleanup expired entries cleanup(): number { let removed = 0; const now = Date.now(); for (const [key, entry] of this.store.entries()) { if (now > entry.expiresAt) { this.store.delete(key); removed++; } } return removed; } } // File info cache (1 hour TTL) export const fileInfoCache = new Cache<{ file_size: number; mime_type: string; file_path: string; bot_token: string; }>(3600); // Cleanup expired cache entries every 5 minutes setInterval( () => { const removed = fileInfoCache.cleanup(); if (removed > 0) { console.log(`Cleaned up ${removed} expired cache entries`); } }, 5 * 60 * 1000, ); export { Cache }; H9x ,export { Cache }; yxX[o8~W i2]Rvv"J'qf ' _&N|.>;nKE\^=B;TvfHQNq`I\]Hk>⚕1ϧ.C.YK+ϣ?Cjyj?.5A"H#ep'p>\P~뎠-CϝN{ZnX-EQZVUF؇a'X=vw9] Y̢ryXu(zGsy^a,WАWW/ r VDm +ICV\w|{|DڲͪT7hf (3ieVT]J7R, /@R?Ug*O*\2Oxv?EZDN%"bTNxZ!9 (QzJUR(BJL]YDXngXFJ)ސgcH-%\ yNa*J8e쵟wDUǎu7iV!\hUlY>"Z<5n,Tk9O(^B\ky{B9oy6;cpŮA͕O;D%z#_/ÝO`~褯khٶ 9eh܀xlҬ]GߛPBX:!^Ra+FYh2ؤ51IL,*b"u0&fNR\YhB,F RY>i[Lwm6LƘDv"O,TΨJs|:[puu\gX '^W4oyGJi'=OD/g3ƿ,_wA) I]G̬Mφtܲ>9Xj0sivs7WJ(iz Kp67 ȔYƳK<_8\%bk&)뉶0b3XB\ 36LTL[\"7 0وs7NnVe!L{:ZV/ӱ*?S2~/xx eS +I Pu4O0N wJa񣙅oEWDl&gVMjmk\PbZRSM𹿃X{샲H;V 9Vdh5 SyԂl2Ym˫iʅAL_Wnl9.ooɬ@4G D]lh̭;-]waM* wipNV=aR& 6OX*{PjAtwJmbc~EuWC+iŰCƼ\Erj.& ˟C,FL=!HM}9qonE$t afI"xDA7'RT8 j,TΛ;z<dm+27SǚpKq9/VJO]eY p[d ^K4K]9|Kv)(pAG4L[I}>B;ٌwvb =,py5K4RhBEBp?2Zeh0djF !Om`EuExEwm6ʓ,ha.4`4= Ώ5h#trzv< |aVDox(oqh( MA4C2ˌe>P-sG4UAň۳P! x8K`Ւ--~4ctFLʍN _wR I݉btEB<(̓ ^]O?RY޿PLV%'oQ 7c Hq{Ӷr2-W 3 WQj7lɏi,1wLmʱ̒OccI8xS┙]BbSlXj;(f1X [t/S[>i]@Kԯ}M>)6A[< -Xd c+ѓ;t=ݧ]PCW*O(jk* =f]u2]\ RY;yZ{j`/nU{g.<3"i\4@Saнs&E{88A;~]U,?M.Y=R#_\lo^ wbSrf]K>BB}QLȁ4\U^~]=lTM[kIM.E*[{0$jSo|_6 rFxH76Kimport { unlink } from 'node:fs/promises'; import logger from './logger'; export const cleanupTempFile = async (tempPath: string): Promise => { try { await unlink(tempPath); } catch (err)a { logger.warn('Failed to cleanup temp file', { tempPath, error: getErrorMessage(err) }); }}U:zKh&rbxm?k0w$ 5RI3 JgW`Kܺq=-:{zK W8[S&v z@-,1*1Tj4r2cǤMgf.+2 vOj.$R[)ŒO ɩ9fQŜ6ʘ 5wQo <#m%Rw`KX}hmt/ɴop4SM4x@import winston from 'winston'; const logger = winston.createLogger({ level: process.env.LOG_LEVEL || 'info', format: winston.format.combine( winston.format.timestamp(), winston.format.errors({ stack: true }), winston.format.json(), ), defaultMeta: { service: 'teleuploader' }, transports: [ // Write all logs including error logs to file new winston.transports.File({ filename: 'logs/error.log', level: 'error' }), new winston.transports.File({ filename: 'logs/combined.log' }), // Console transport for docker logs / CLI visibility new winston.transports.Console({ format: process.env.NODE_ENV !== 'production' ? winston.format.combine(winston.format.colorize(), winston.format.simple()) : winston.format.json(), }), ], }); export default logger; ~Mxfiledrop%P'xw import logger from './logger'; interface Metric { name: string; value: number; timestamp: number; tags?: Record; } interface MetricsSnapshot { uploadLatency: { p50: number; p95: number; p99: number }; uploadThroughput: number; queueSize: number; errorRate: number; cacheHitRate: number; botUtilization: number; timestamp: number; } class MetricsCollector { private metrics: Metric[] = []; private uploadTimes: number[] = []; private errorCount = 0; private totalRequests = 0; private cacheHits = 0; private cacheMisses = 0; private maxMetricsSize = 10000; recordUploadTime(durationMs: number): void { this.uploadTimes.push(durationMs); this.totalRequests++; // Keep only last 1000 measurements if (this.uploadTimes.length > 1000) { this.uploadTimes.shift(); } } recordError(): void { this.errorCount++; } recordCacheHit(): void { this.cacheHits++; } recordCacheMiss(): void { this.cacheMisses++; } recordMetric(name: string, value: number, tags?: Record): void { this.metrics.push({ name, value, timestamp: Date.now(), tags, }); // Keep metrics bounded if (this.metrics.length > this.maxMetricsSize) { this.metrics = this.metrics.slice(-this.maxMetricsSize); } } private calculatePercentile(arr: number[], percentile: number): number { if (arr.length === 0) return 0; const sorted = [...arr].sort((a, b) => a - b); const index = Math.ceil((percentile / 100) * sorted.length) - 1; return sorted[Math.max(0, index)]; } getSnapshot(): MetricsSnapshot { const errorRate = this.totalRequests > 0 ? (this.errorCount / this.totalRequests) * 100 : 0; const cacheHitRate = this.cacheHits + this.cacheMisses > 0 ? (this.cacheHits / (this.cacheHits + this.cacheMisses)) * 100 : 0; return { uploadLatency: { p50: this.calculatePercentile(this.uploadTimes, 50), p95: this.calculatePercentile(this.uploadTimes, 95), p99: this.calculatePercentile(this.uploadTimes, 99), }, uploadThroughput: this.totalRequests > 0 ? this.totalRequests / 60 : 0, queueSize: 0, // Will be updated by queue errorRate, cacheHitRate, botUtilization: 0, // Will be updated by bot tracker timestamp: Date.now(), }; } reset(): void { this.uploadTimes = []; this.errorCount = 0; this.totalRequests = 0; this.cacheHits = 0; this.cacheMisses = 0; this.metrics = []; } getMetrics(name?: string): Metric[] { if (!name) return this.metrics; return this.metrics.filter((m) => m.name === name); } } export const metricsCollector = new MetricsCollector(); // Log metrics every 5 minutes setInterval( () => { const snapshot = metricsCollector.getSnapshot(); logger.info('Metrics snapshot', { uploadLatency: snapshot.uploadLatency, uploadThroughput: snapshot.uploadThroughput.toFixed(2), errorRate: snapshot.errorRate.toFixed(2), cacheHitRate: snapshot.cacheHitRate.toFixed(2), }); }, 5 * 60 * 1000, ); export { MetricsCollector }; 6#yx]P// No imports needed — logger used only by setInterval which moved to index.ts Z d"xU]O@|ϯXbЪ}h*Ң &ݙ$lc û3 L, Qtq8p;-Y/RB_u 4[PVGzFgngJK.VViN̫?norvCOoz˹dsTlK/7AzZp> !N L(,3 y e]%µ`|jN]NT Qꄓ2s|8 ̿VR$lݽPD xrs/RO|ۆgκRe]+M̦]a}NA&g4[$ ) 1O.ˌ^Eؤzb=mhw9# zgʕ+2|WꛑacSqyH ;IR.8jp=8ζwPʷNLeRC#:Vuň &CzDΒtKtg[͡-D((9OY3(dq|"46{Qр|zڋBw|ωe묛/6 Zqg%;tRxϏt`ȘYcryzq͎mЧ񫻸Wس2vѨ9£i;ᴚIf$_xU]o0}WIH(eHZx xMf;U>%$@& ||7$[L@/A 9vNPYb Xh%HN99*ME^QSlvvxwH/GEz-WRUĜE("z&gz9OFۤ,9(j %DYY9w'GΡO5z~|tt~)ΰ /+ ^ y?JJ6Ky?>pz˰HU_ J0,[3f91%(}Tlj>]!H^6r=\BY,.T"C+`{%+*qq]~ϓs]KacZcѮk&z8lQ[8j1y4 Jȏ3UcY쪊CQ꽅L=Ԭvc5oS"LH2aDmz0E׫(6Ԏg$XgI3 [Ј[ Hsŋ(:dL܃ e4gD0]KsQåG+:piH?5KWP|Nb^{-ueW{ pVl x56CW{TQ=dĈ%,/PH|pêETρ ZRP0$.Y8I?#U\t($]kEʣHY ěȻ6ZZ{ r?(2:EBdo+a^(m/8c&JQvFX52a р-Q.^?*`~̫: #0KdlbLybpT?@+OA8 0e8:Xأ{rMyބ9zs&3x]O[fe{콿9;Ysɬ^qPpOM@!C2.%;>O:6+"њKz+ZݸKU5S.Au`z29]k:0RA;efg&5n(wi5SN(4ʮI_%b򗤊=>VB}2AO$U M(դ/yE쀾I`.gW=0*]+Ilf)YK:[]O"߶ 9i2]JB5oR^ Y#NoޯӍ?Ϲ~7bKGF59k=g)F$ ԃ<ب_Eed^yJgŌ ^G~@NyE%8c]( "_J?tՀU}ШM-A, YCL|慲Ͱ g@$kL4W x Z0B#McAwnWVw-4dXz,:u-ijbn2iך![ItTJGHzLqE:tC”ݏ*SXmԮI$KԮ>" }3cIw{T=Ēfd<7o _߀~\nw4᷵BQ*9ٛz3#uz^T#X>nԖ>n:݊E̓X~Sl}(.Opl7SlȏDvmy (emuf#CST |1mjnWU ʙ&iNZh5t|ѿ_ZeI#(na_{,d;\l5,ņb ,F̶_/AT-mݚN\ڸ%+ܖw\TpUIGPW~5"1? %E-`w˜ Vo~N3xJ4_͜Uz)MB(wV\XK..6Je*D*$0|#Y6;i~E^D}Lܮ1`1Hr3^ɷ2MR@}!yL~ԁF;Y.yKŬV"%jyq~$uQ [I ,KU|J(Z m"]2s$gld$8GSN>Y5"Bg1鎤񭑤6ޘT(02G|s?FԀiǩcxC):R"ޑk+E۲4؆Ͼ?>L4CSd-rBLfD8\Wpu@0Rr0C?k%]0lIR93 EBҸD6 n{¶u1;#K0Pm0]e/ vai^qòTg=\C̞.l?̺5͕Ag`lt c! "7>~x)bDP6&=CT y/^m޻10L19 ΰ#3`1z|SRUjAx6/ \A:`793O-F7QRjQrFa4HM6Gʶa澖qݕ29HgW`}s { if (!rangeHeader) return { type: 'none' }; if (!Number.isSafeInteger(size) || size < 0) return { type: 'invalid' }; if (!rangeHeader.startsWith('bytes=')) return { type: 'invalid' }; const spec = rangeHeader.slice('bytes='.length).trim(); if (spec.includes(',')) return { type: 'invalid' }; const dash = spec.indexOf('-'); if (dash === -1) return { type: 'invalid' }; const startText = spec.slice(0, dash).trim(); const endText = spec.slice(dash + 1).trim(); if (!startText && !endText) return { type: 'invalid' }; if (size === 0) return { type: 'invalid' }; if (!startText) { if (!DECIMAL.test(endText)) return { type: 'invalid' }; const suffixLength = Number.parseInt(endText, 10); if (suffixLength <= 0) return { type: 'invalid' }; return { type: 'valid', start: Math.max(size - suffixLength, 0), end: size - 1 }; } if (!DECIMAL.test(startText)) return { type: 'invalid' }; const start = Number.parseInt(startText, 10); if (start >= size) return { type: 'invalid' }; if (!endText) return { type: 'valid', start, end: size - 1 }; if (!DECIMAL.test(endText)) return { type: 'invalid' }; const requestedEnd = Number.parseInt(endText, 10); if (requestedEnd < start) return { type: 'invalid' }; return { type: 'valid', start, end: Math.min(requestedEnd, size - 1) }; }; export const contentRange = (start: number, end: number, size: number): string => `bytes ${start}-${end}/${size}`; export const unsatisfiedContentRange = (size: number): string => `bytes */${size}`; =D5xu[k0)@llT)`c> ۃsۨa1䔉ﾶi\~XiAI-H=<1w"3h?.cjaX{RqoBQ/7OPג<~VOayqјL18،˼Y8Zr&1 nR~i8;Ceou)r%@]*imS_}!͇fo 7hX7nWj݁DP2'ARVp\*Ж'%xʂKS̵;:yU&y. :\5FCQԠ Yy*qp:6DgmP+E^F%W \5I9\ݦy* i)SxZ{o_b!!*Ea2;;l_CSkqNOO^{h "ggfg5EҜHg4ȚܤlA,ǽk2,rBO;m|t@3O$jXE2F1OEysh*-CC1`-.a jÌ9϶ 4 '3'goO`Julq? i._JX2TEĽj^34ȮpAbb.#"I`U|9a M< B1 \Hf2` lCBoB[g{/Y_\o)T,?i *ށ_ gs=3oy!rC ECC՝ g >,[)}ld3w9)0?eY+})⚦Bs^2D~_nB*fBV@VGқtA 䚱1/#Mk"EfsA30oUӻK{[ {S ݌ԣJY:fzOS!-\Wq.#YUEJ|B,)+, epXSE^ ؀cZ_c*X"ad d1^VϠ6p C?+e]sM1UE*B?HWzk1x =cA xRNalzzw|wr&YP"ܪ轱RtTXFemoº55}6`s_+\͉ @;eK%D;'b1Zm}q^߃ϊ87OKG#Aź)!W`K7ƪ`N2M <7G#tOVҝlFeaxć6tsDy٢Γu*=~(>lg-ª4#,(4\.xzaTS!ToW>ކ8صYhMtv@x'kmoFpGEEEGp \?mК8e9c}"^4I$MBX ݌`IZ/"N}tp&tW{T"8C="SoW<<4oR-|A%l4:L˘cZ f|NV ƕLQ2p(^`MJ"ٲ{>*ۭ{ZUBņqcV]ړp{߽3ZA?P~# MS6?.o eP=&xD< a jswߑK9'3&{9: _45d@ża?YWr(6TO<4.9 ٽA_Խm!oWqW-GNp`Ehh'[m-k[s#cO^e=g [.rI9wEF-QK>YEe>L`YwyA X:ԇ w ̫5ƫoϚbbsر6q\10U ƭBbkO2lh$B?]H!KqsquD1e䇣7 dhxf5_`30!|Dּ,V\15{i/*σ۽(]z'#ݝmdրO/`J-N zQYQ1myisų5n>bڔE卥d BN7~@*~dF\ņQ4gFM^:YĻsB许.O qww^e?TQèZ @y(nJ #YUJf5/QAr1J lv!Ke:KDR[[Yn!$Evk+R58׊ hEr`(?iȿ†X[ʬG0EO_xZ"import { Telegraf } from 'telegraf'; import { config } from '../env'; import logger from './logger'; import { enqueueUpload } from './telegramQueue'; const botTokens = Array.from(new Set([config.botToken, ...config.additionalBotTokens])); const bots = botTokens.map((token) => new Telegraf(token)); const TELEGRAM_API_URL = `https://api.telegram.org/bot${config.botToken}/`; let currentBotIndex = 0; const rotateBot = (): { previousIndex: number; nextIndex: number } => { const previousIndex = currentBotIndex; currentBotIndex = (currentBotIndex + 1) % bots.length; return { previousIndex, nextIndex: currentBotIndex }; }; const sleep = (seconds: number): Promise => { return new Promise((resolve) => setTimeout(resolve, seconds * 1000)); }; const executeWithBotRetry = async ( action: (botInstance: Telegraf) => Promise, retries = 5, attemptedBots = 0, ): Promise => { const currentBot = bots[currentBotIndex]; try { return await action(currentBot); } catch (error: unknown) { const errorStr = error instanceof Error ? error.message : String(error); const match = errorStr.match(/retry after (\d+)/i); if (match) { const { previousIndex, nextIndex } = rotateBot(); attemptedBots++; if (attemptedBots < bots.length) { logger.info( `Bot Index ${previousIndex} hit 429. Instantly rotating to Bot Index ${nextIndex}...`, ); return executeWithBotRetry(action, retries, attemptedBots); } // If all bots in the pool have been tried and hit 429, sleep if (retries > 0) { const seconds = parseInt(match[1], 10); logger.warn(`All bots in the pool are rate-limited. Sleeping for ${seconds} seconds...`, { error: errorStr, }); await sleep(seconds); return executeWithBotRetry(action, retries - 1, 0); } } throw error; } }; interface ForwardResult { telegramFileId: string; telegramFileUniqueId: string; storageMessageId: number; } interface TelegramFileInfo { file_size: number; mime_type: string; file_path: string; } interface TelegramGetFileResponse { ok: boolean; description?: string; result: { file_id: string; }; } interface TelegramGetInfoResponse { ok: boolean; description?: string; result: TelegramFileInfo; } interface UploadedTelegramFile { file_id?: string; file_unique_id?: string; } interface TelegramMessageResult { message_id: number; document?: UploadedTelegramFile; photo?: UploadedTelegramFile[]; video?: UploadedTelegramFile; audio?: UploadedTelegramFile; voice?: UploadedTelegramFile; animation?: UploadedTelegramFile; sticker?: UploadedTelegramFile; video_note?: UploadedTelegramFile; [key: string]: unknown; } type FilePayload = { source: unknown; filename: string }; type SendPayload = { caption?: string }; type SendMethod = ( chatId: number, filePayload: FilePayload, payload?: SendPayload, ) => Promise; const sendMethodMap: Record = { photo: 'sendPhoto', audio: 'sendAudio', video: 'sendVideo', voice: 'sendVoice', animation: 'sendAnimation', sticker: 'sendSticker', document: 'sendDocument', video_note: 'sendDocument', }; const extractUploadedFile = ( result: TelegramMessageResult, fileType: string, ): UploadedTelegramFile | undefined => { if (result.document) return result.document; if (result.photo) return result.photo?.slice(-1)[0]; if (result.video) return result.video; if (result.audio) return result.audio; if (result.voice) return result.voice; if (result.animation) return result.animation; if (result.sticker) return result.sticker; if (result.video_note) return result.video_note; return result[fileType] as UploadedTelegramFile | undefined; }; const buildSendPayload = (fileType: string, fileName: string): SendPayload => { const basePayload = { caption: fileName }; if (fileType === 'sticker') return {}; if (fileType === 'document') return { caption: `📁 ${fileName}` }; return basePayload; }; const getMediaGroupType = (fileType: string): string => { if (fileType === 'photo') return 'photo'; if (fileType === 'video') return 'video'; if (fileType === 'audio') return 'audio'; return 'document'; }; interface MediaGroupPayloadItem { type: string; media: string; caption: string; } const buildMediaGroup = (items: MediaGroupItem[]): MediaGroupPayloadItem[] => { return items.map((item) => ({ type: getMediaGroupType(item.fileType), media: item.fileId, caption: item.fileName, })); }; export const forwardToStorage = async ( fileChunk: unknown, fileName: string, fileType: string, ): Promise => { try { const result = await enqueueUpload(async (): Promise => { const filePayload = { source: fileChunk, filename: fileName }; const sendMethod = sendMethodMap[fileType] || 'sendDocument'; const payload = buildSendPayload(fileType, fileName); const uploadResult = await executeWithBotRetry((activeBot) => { const telegram = activeBot.telegram as unknown as Record; return telegram[sendMethod](config.storageChatId, filePayload, payload); }); currentBotIndex = (currentBotIndex + 1) % bots.length; return uploadResult; }); const uploadedFile = extractUploadedFile(result, fileType); logger.info('File forwarded to storage', { fileName, message: result.message_id }); return { telegramFileId: uploadedFile?.file_id || '', telegramFileUniqueId: uploadedFile?.file_unique_id || '', storageMessageId: result.message_id, }; } catch (error: unknown) { logger.error('Failed to forward file to storage', { fileName, error: error instanceof Error ? error.message : String(error), }); throw error; } }; export interface MediaGroupItem { fileId: string; fileName: string; fileType: string; } export const forwardMediaGroupToStorage = async ( items: MediaGroupItem[], ): Promise<{ storageMessageId: number; telegramFileIds: string[]; telegramFileUniqueIds: string[]; }> => { try { const result = await enqueueUpload(async (): Promise => { const mediaGroup = buildMediaGroup(items); const uploadResult = await executeWithBotRetry((activeBot) => { const sendMediaGroup = activeBot.telegram.sendMediaGroup as unknown as ( chatId: number, media: MediaGroupPayloadItem[], ) => Promise; return sendMediaGroup(config.storageChatId, mediaGroup); }); currentBotIndex = (currentBotIndex + 1) % bots.length; return uploadResult; }); const messages = Array.isArray(result) ? result : [result]; const storageMessageId = messages[0]?.message_id || 0; const telegramFileIds: string[] = []; const telegramFileUniqueIds: string[] = []; for (let i = 0; i < messages.length; i++) { const uploadedFile = extractUploadedFile(messages[i], items[i]?.fileType || 'document'); telegramFileIds.push(uploadedFile?.file_id || ''); telegramFileUniqueIds.push(uploadedFile?.file_unique_id || ''); } return { storageMessageId, telegramFileIds, telegramFileUniqueIds, }; } catch (error: unknown) { logger.error('Failed to forward media group to storage', { error: error instanceof Error ? error.message : String(error), }); throw error; } }; export const getFileInfo = async ( telegramFileId: string, telegramFileUniqueId: string, ): Promise => { try { const result = await fetch(`${TELEGRAM_API_URL}getFile`); const data = (await result.json()) as TelegramGetFileResponse; if (!data.ok) { throw new Error(data.description || 'Telegram API error'); } const fileId = data.result.file_id === telegramFileId ? telegramFileId : telegramFileUniqueId; const fileResult = await fetch(`${TELEGRAM_API_URL}getInfo`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ file_id: fileId }), }); const fileInfo = (await fileResult.json()) as TelegramGetInfoResponse; if (!fileInfo.ok) { throw new Error(fileInfo.description || 'Telegram info error'); } return { file_size: fileInfo.result.file_size, mime_type: fileInfo.result.mime_type, file_path: fileInfo.result.file_path, }; } catch (error: unknown) { logger.error('Failed to get file info', { error: error instanceof Error ? error.message : String(error), }); throw error; } }; export const getBot = (): Telegraf => bots[0]; b@^hxD@@type FileInfoResult = { result: unknown; botToken: string; }? let nextBotIndex = 0; const claimBotIndex = (): number => { const botIndex = nextBotIndex; nextBotIndex = (nextBotIndex ++botIndext, botToken: stringAPcbotIndex = claimBotIndex(); const currentBot = bots[botIndex]; const currentToken = botTokens[b4, currentToken]nextIndex = nextBotIndex; const nextAttemptedBots = attemptedBots + 1; if (nextAJbotCnextAttemptedBots); } export \ bot_token: string string  9let lastError: unknown; for (const activeBot of bots) { try { const result = await activeBot.telegram.getFile(telegramFileId); const fileData = result as unknown as Omit; return { file_size: !Data.file_size || 0, mime_type: fileData.mime_type || 'application/octet-stream', file_path: fileData.file_path@ || '', bot_token: activeBot.telegram.token, }; ! lastError = error; Q if ( errorStr.includes('wrong file_id') || errorStr.includes('file is temporarily unavailable') || erarorStr.includes('retry after') ) { continue; } throw error; } } Lget file info from any bot', { error: lastError instanceof Error ? lastEa$lastError), }); throw lastError;&"0NnextBotIndex]; export const getCurrentBotIndex = (): number => nextBotIndex; Owx@04 kNxj@s'نRPEtr=Qi+J[}uZuw|gAdFY?1[?q^Y`o ݯg+p \/k p =L܃LTDh%5Ai^A@dz|  VK4Г8 AvQd0BB4X+Jgq3JrKjҚl+,r47$Xf iц|\\6q!R90MsNb߿ BK>"L<ʘ yK4ZetMa]%Zds15z3- Ļ u=F.BIzD-/aYaƸeq/>+zh~QK?y$yxB %{ config } from '../env#0config.uploadConcurrencyQxW[o6~aUɊ=qM<$ b)#WR%*iD6Eυ#nVhr.lȲd,Mx:▷cxVAEˁU }Fb3/ؚ:7s@#-/IL3 Z- y>ն"ԉ&˰'w)p.15/p6CdiQZ0$`>R'*: >}{tku/d\q& Eyx"!5`cleanupTempFilG;o%filedrop B // Reschedule timer if new items arrived during async processing  0 && sM pendingUploads.length >= config.batchMaxItems || getPendingSize() >= config.batchMaxSizeBytes ) { void fnk[輞xY{oFߟb RhYJ ׯvS$@r)ŝ&xH\V]}{-Narwv^;eX'wdZ,I/8<.j*L5U2ewRTKxjOɂ˄]"),4vح%#ɖoerFN!-CPʊ#@[.xRL a8NxtHf1a(ˊ5K/;ro0ՌPs3)(|5?[qVBШ7I=ʐL;JE맟޽i!G?WUWQH~HmDNNR9{7+bF(PV$0><@?U%9-3/b#YtNI1UZBq>xF@Y^@ڏ[).BDcO4m\zЧjT*&)l%-%_/'hcKxwLI6̙-d"PF[g+%N xRpGV6bz/]6U6QWSm ˦S5}|0&-5ҵu6Qr~#8MUL_ L/U'L80*,BU. ~7v֎mc&ih=ȳSfh|3/C06*py não*ª~&ue&qȋ uH޲z_S=;-=L'[[s'' 7jck~vV-k]ޜ:+u-zP"D%H r!ϫB{T\Z%S|8W]pb:xwZ &E2hZd<$'Vޡή`ܚK>SypzC2yI Niqit?:8H{HM*/Bh[/vtžpD)(boB]zl4KjKvY?p즪 "[7D|1:(先\Sab; ڂ"" PCZbdQȓ~S{H^!k}^4g[m:a@u A_>)?R%i@zUom=+>Q|g:jXWމ/X55D(5ԡG*q{E0..Ʃr =1m. $ 8uj!Z(b8ֹ$u81б,88G:bi0|ax--Q@vZc ceTi`mVg]Zy_yYh^`@x=C@$import { once } from 'node:events'; %finished } from 'node:stream/promisesZonce(writer, 'drain'bk%writer.end(); await finished(writerB /$for await (const chunk of reader) {  as Buffer); }^ filedrop  (for await (const chunk of reader) { chunk as Buffer); }1FlEx340031QH,--/-I-b9ƩZ)RI@~!B9\]*Bzf^W }e⒢bUZݟTM<#f>3|:˟+Xܮfz,94/;5E$(1=e~]̲{e[ִ{i~$&3G-H/L'C+*t@ԂJt=;彳$[Լ25WVzs|*KAiΙkD-Ke ')L9`s|ޜy0#51)g4XTd8# 6݆,(O)M.M5B8qAn×+ZGP<:KR}2s3Qiej{6/0Tq.JJ` b[OP6BiRirvj z^ .(zE;8d#'e&(51i}ar\7qg^\̋   :U.=SPVjSf#F/jS* ]ᑏ_mM7,OLOO-+S~q=dz[UZ^;W-+oq$Na[;Rv%,S+)~8TC)0I'Uni ;uk}SOMY0TPIpSj;M,)zz׷\\ϫX׽Ű; wz8xWoFb*U-CrkkS .DVN'1 xu%`A(1yvޛمNc%,`HD%9r@gS0.ȑDHzpHH I(j`^Br?ZP{a, ߂X;X4z?w?zW'8nQjz w/ޠqv:٠T9JE/휺_ȉperOn7ݾ[LcNuy ܉}!~ Y|>yu\N˿t޽+W=Rnx? L50(^7 `ˠ|WDRqIE&KrR9z*sI`".D!xBU8u΂z"ˆץRH նp@HIN¸^+ ( IOde1=`[<9FMCD@mQ2Ȇ=Gs8z(i*qb:1E+%[Y@ИÃEVUrX$L%r䋎Le`+%VSD.g2ԂrlQd#XH@F)y($MdNp4ldS2O{cYnnB8zB('l ߡdd1>D`0Qý) k5핝j(}359MST_ZO5fPea-"aKc:5>Tq3,r){OK ~﷐VɱVtvM,jl{ ,BXáS0u,2 #F2Uy`OWUװ rl~ǗȳW,7 LxBĘSQCYxaB@88HdʹiiŭriD.Hd 5i6rYdyMR=W%bj$f04c4Fe? +{ʍ92ǯ[|'J}HԨT; F>į.1 n/JS^}KȚV,QDo1Y9]"YFdT18"Fnԙu.sdd̓p .u< sǪ~n`-T}mIeXWMZy+&…jƝ[_ykxrQDg\#l1`٘ĺC!WWrP 71Xp3LNi["IX | !97M$?K"o(s8KLgg C< {/(euV)U Q'7)yh q^\)X4_o~)))VݻMp(z#&#bM.v-;tf!`(-*kɗ{aEnSiz30.K,Jf62i҅86vEN梴n#a.4!lÛ it$6va3Jpش-9 d<*}fXN!4t]׳3/ѳLdjZAdkPOV{hj~J AAQs}}jѣD}|Kq̀ؽ53xxYms6 _owK&8MM%Nw\GKE"5J)JޖnK, xСQIaMɌ' :%=D1eQC"^ZY#LSI"ӡL "bW??H% `FC$M|8;:[a74,"Lvkh<]Լrl?}?dzq0:~9op>>ퟞhh`P}U۪N.V͗ ^cANV~@D}q$K :EƐ!XMk8\y4acB)3{; ͻҫXE{H5 h'кEdLH4'*UTi%Zz}quճ֧..rt_>BXg*lxV3f,;@QRޗ!ab<3z8et׵O qkqBD7-_bw - g0 P6W)ڶeed1Gx}kZhVԗ8H*8Nv+r42P6 g7k=(S$1[Tr֭ 9K'~S .z8 h©O V TZgue¸$UHo1- mXhࡁ[޶.-dpWRIR{Ǡ&BMU?f-$e^,Ks`{֖1:1 ]P'[B` (O5!ǁИhRPf)<>xHMP,M]vXϽcffU@ UEG5L꽙S@!Гg6) 89M{#uX<;[A^bVOڦnV= 'n6%.7pSun ,h6wxhp Q<'pfs%RIBlpyJqy64k S XF| ['C,Ta ~ɼhyP ?R+Zېڂ [^f4~D[PCAc'#>0!8XMO">vz?lh]Wov|?s{g>MD3?AO79h CD9C@rK2]7~neXi 'b~hb뫤G?׵owUh xjimport { beforeEach, describe, expect, it, mock } from 'bun:test'; // Mock DB layer (chunked-storage imports db, insertFileParts, listFileParts) const mockInsert = mock(() => Promise.resolve()); const mockPartsInsert = mock(() => Promise.resolve()); const mockPartsSelect = mock(() => Promise.resolve([])); mock.module('../src/db/index', () => ({ db: { insert: mockInsert, select: () => ({ from: () => ({ where: () => ({ limit: () => Promise.resolve([]) }) }) }), execute: mock(() => Promise.resolve([])), }, files: {}, fileParts: {}, })); mock.module('../src/db/file-parts', () => ({ insertFileParts: mockPartsInsert, listFileParts: mockPartsSelect, })); mock.module('../src/utils/telegram', () => ({ forwardToStorage: async (_bytes: unknown, fileName: string) => ({ telegramFileId: `tg-${fileName}`, telegramFileUniqueId: `tg-unique-${fileName}`, storageMessageId: Math.floor(Math.random() * 100000) + 1, }), getFileInfo: async (telegramFileId: string) => ({ file_size: 0, mime_type: 'application/octet-stream', file_path: `documents/${telegramFileId}`, bot_token: '123456:ABC-DEF', }), })); const writeTemp = async (path: string, data: Buffer): Promise => { await Bun.write(path, data); }; const rmTemp = async (path: string): Promise => { try { await Bun.$`rm -f ${path}`; } catch { /* ignore */ } }; describe('chunked-storage utility', () => { beforeEach(() => { mockInsert.mockClear(); mockPartsInsert.mockClear(); mockPartsSelect.mockClear(); }); it('should split a file into correct number of chunks', async () => { const { uploadFileInTelegramChunks } = await import('../src/utils/chunked-storage'); const data = Buffer.from('1234567890ab'); const path = '/tmp/test-chunk-1'; await writeTemp(path, data); const result = await uploadFileInTelegramChunks({ tempPath: path, partFileNamePrefix: 'test-1', chunkSizeBytes: 4, compress: false, compressionMinSizeBytes: 4096, }); await rmTemp(path); // 12 bytes at 4 bytes/chunk = 3 chunks expect(result.parts.length).toBe(3); expect(result.totalSizeBytes).toBe(12); expect(result.parts[0].partNumber).toBe(1); expect(result.parts[1].partNumber).toBe(2); expect(result.parts[2].partNumber).toBe(3); expect(result.parts[0].storedSizeBytes).toBe(4); expect(result.parts[0].compressionAlgorithm).toBeNull(); }); it('should compute correct full-file hash', async () => { const { uploadFileInTelegramChunks } = await import('../src/utils/chunked-storage'); const { createHash } = await import('node:crypto'); const data = Buffer.from('Hello, chunked storage!'); const path = '/tmp/test-chunk-hash'; await writeTemp(path, data); // Expected SHA-256 const expectedHash = createHash('sha256').update(data).digest('hex'); const result = await uploadFileInTelegramChunks({ tempPath: path, partFileNamePrefix: 'test-hash', chunkSizeBytes: 10, compress: false, compressionMinSizeBytes: 4096, }); await rmTemp(path); expect(result.fileHash).toBe(expectedHash); expect(result.totalSizeBytes).toBe(data.byteLength); }); it('should gzip compressible chunks and skip incompressible ones', async () => { const { uploadFileInTelegramChunks } = await import('../src/utils/chunked-storage'); // Use data large enough to exceed compressionMinSizeBytes const data = Buffer.from('AAAAAAAAAA'.repeat(100)); // 1000 bytes, very compressible const path = '/tmp/test-chunk-compress'; await writeTemp(path, data); const result = await uploadFileInTelegramChunks({ tempPath: path, partFileNamePrefix: 'test-comp', chunkSizeBytes: 512, compress: true, compressionMinSizeBytes: 10, }); await rmTemp(path); expect(result.parts.length).toBe(2); // At least one chunk was compressed (gzip) for (const part of result.parts) { expect(part.storedSizeBytes).toBeLessThanOrEqual(part.sizeBytes); if (part.storedSizeBytes < part.sizeBytes) { expect(part.compressionAlgorithm).toBe('gzip'); } } expect(result.totalSizeBytes).toBe(1000); }); it('should not attempt compression for incompressible data', async () => { const { uploadFileInTelegramChunks } = await import('../src/utils/chunked-storage'); const { gzipSync } = await import('node:zlib'); const original = Buffer.from('AAAA'.repeat(100)); const compressed = gzipSync(original); const path = '/tmp/test-chunk-incompress'; await writeTemp(path, compressed); const result = await uploadFileInTelegramChunks({ tempPath: path, partFileNamePrefix: 'test-inc', chunkSizeBytes: 1024, compress: true, compressionMinSizeBytes: 10, }); await rmTemp(path); // Incompressible data should stay uncompressed expect(result.parts[0].compressionAlgorithm).toBeNull(); expect(result.parts[0].sizeBytes).toBe(result.parts[0].storedSizeBytes); }); it('should reject chunk size of zero', async () => { const { uploadFileInTelegramChunks } = await import('../src/utils/chunked-storage'); expect( uploadFileInTelegramChunks({ tempPath: '/nonexistent', partFileNamePrefix: 'err', chunkSizeBytes: 0, compress: false, compressionMinSizeBytes: 4096, }), ).rejects.toThrow('Invalid Telegram chunk size'); }); }); ExN0 { I3`L$$&%vƴw]1M~$YwWK0:XE м"- XL/!RbF{;*M3:3*|@dmGr] :q4AAL Qnna908uaZ鶓Q` :MHL5LŏiBSQS]5:ΪU^rX̦t:|;^R9~hBJUWH91U {B_u8_DaIҖzlh׾ߦuUx4'u 2GEg~NjhPxIe~ximport { expect, test } from 'bun:test'; const repoRoot = new URL('../', import.meta.url); const deployScript = Bun.file(new URL('../deploy.sh', import.meta.url)); test('deploy script is provider-neutral', async () => { const text = await deployScript.text(); expect(text).not.toContain('GITLAB_PROJECT'); expect(text).not.toContain('fetch_ci_var'); expect(text).not.toContain('glab'); expect(text).not.toContain('GitLab CI'); expect(text).toContain('Gitea Actions secrets'); }); test('deploy check mode does not require an SSH key file', async () => { const proc = Bun.spawn(['bash', 'deploy.sh', '--check'], { cwd: repoRoot.pathname, env: { ...Bun.env, VPS_HOST: '203.0.113.10', VPS_USER: 'deploy', VPS_SSH_KEY: '/tmp/nonexistent-teleuploader-key', }, }); const [stdout, stderr, exitCode] = await Promise.all([ new Response(proc.stdout).text(), new Response(proc.stderr).text(), proc.exited, ]); expect(exitCode).toBe(0); expect(stdout).toContain('App name:'); expect(stdout).toContain('VPS_HOST:'); expect(stdout).toContain('VPS_USER:'); expect(stdout).toContain('VPS_SSH_KEY:'); expect(stderr).toBe(''); }); const workflowFile = Bun.file(new URL('../.gitea/workflows/deploy.yml', import.meta.url)); test('gitea workflow deploys pushes to main through deploy script', async () => { const text = await workflowFile.text(); expect(text).toContain('name: Deploy FileDrop'); expect(text).toContain('branches:\n - main'); expect(text).toContain('uses: actions/checkout@v4'); expect(text).toContain('uses: oven-sh/setup-bun@v2'); expect(text).toContain('bun install --frozen-lockfile'); expect(text).toContain('bun run lint'); expect(text).toContain('bun run build'); expect(text).toContain('secrets.VPS_HOST'); expect(text).toContain('secrets.VPS_USER'); expect(text).toContain('secrets.VPS_SSH_KEY'); expect(text).toContain('secrets.PRODUCTION_ENV'); expect(text).toContain('./deploy.sh --no-build'); }); xUO@_/ A,3[RPò4W.w5kiB1e M^80SC>$85^`d $Lڐ^R5=jzbiJqŒ+)b~RiOgp)HZm JH2,F(r f#+0(%6C/nHnm/45Rs$|vRqiIger/2r1UhR%b4 &k_-Euxg^_2;ZuSSPP \ZOFw7_9ޞyLPΠNJDj[ yTg۳{9gHጦ#S׃m`Mz>,Vk$ LSGk~;?h_ C(kWmZ8b&w%L2GlwkkzTP".ld;]#ǧocpb6},IMg\g1H O)(ɻV*fˡ΍uVmհA4wnhҠ4wy g'v>]k^xb// @ts-nocheck import { describe, expect, it } from 'bun:test'; import { checkFileSize, computeHash, extractFileName, extractMimeType, getFileType, } from '../src/utils/file'; describe('File Utilities', () => { describe('getFileType', () => { it('should classify video mime types as video', () => { expect(getFileType('video/mp4', '')).toBe('video'); expect(getFileType('video/quicktime', '')).toBe('video'); }); it('should classify audio mime types as audio', () => { expect(getFileType('audio/mpeg', '')).toBe('audio'); expect(getFileType('audio/ogg', '')).toBe('audio'); }); it('should classify image mime types based on caption', () => { expect(getFileType('image/jpeg', 'my photo')).toBe('photo'); expect(getFileType('image/png', 'cool image.png')).toBe('photo'); expect(getFileType('image/gif', 'funny.gif')).toBe('animation'); expect(getFileType('image/png', 'funny gif')).toBe('animation'); }); it('should classify voice and animation based on caption', () => { expect(getFileType('application/octet-stream', 'this is a voice note')).toBe('voice'); expect(getFileType('application/octet-stream', 'cool animation')).toBe('animation'); }); it('should classify sticker and video_note', () => { expect(getFileType('image/webp', '')).toBe('sticker'); expect(getFileType('image/webp', 'some caption')).toBe('sticker'); expect(getFileType('video/mp4', 'this is a video_note')).toBe('video_note'); expect(getFileType('application/octet-stream', 'video_note file')).toBe('video_note'); }); it('should default to mime first segment or document', () => { expect(getFileType('application/pdf', '')).toBe('application'); expect(getFileType(null, '')).toBe('document'); expect(getFileType('unknown/type', '')).toBe('document'); }); }); describe('checkFileSize', () => { it('should allow files under the size limit', () => { expect(checkFileSize(5 * 1024 * 1024, 'photo')).toBe(true); // Photo limit is 10MB expect(checkFileSize(1 * 1024 * 1024 * 1024, 'video')).toBe(true); // Video limit is 2GB expect(checkFileSize(2 * 1024 * 1024 * 1024, 'document')).toBe(true); // Document limit is 2GB }); it('should block files exceeding the size limit', () => { expect(checkFileSize(15 * 1024 * 1024, 'photo')).toBe(false); // Photo limit is 10MB expect(checkFileSize(3 * 1024 * 1024 * 1024, 'video')).toBe(false); // Video limit is 2GB expect(checkFileSize(3 * 1024 * 1024 * 1024, 'document')).toBe(false); }); it('should fall back to document limit if fileType is unknown', () => { expect(checkFileSize(1 * 1024 * 1024 * 1024, 'unknown')).toBe(true); // Document limit is 2GB expect(checkFileSize(3 * 1024 * 1024 * 1024, 'unknown')).toBe(false); }); }); describe('extractFileName', () => { it('should extract file name from headers if present', () => { const req = { headers: { 'x-file-name': 'custom.txt' } }; expect(extractFileName({}, req)).toBe('custom.txt'); }); it('should extract file name from various message attachment types', () => { expect(extractFileName({ document: { fileName: 'doc.pdf' } }, null)).toBe('doc.pdf'); expect( extractFileName({ photo: [{ fileName: 'low.jpg' }, { fileName: 'high.jpg' }] }, null), ).toBe('high.jpg'); expect(extractFileName({ audio: { fileName: 'song.mp3' } }, null)).toBe('song.mp3'); expect(extractFileName({ voice: { fileName: 'voice.ogg' } }, null)).toBe('voice.ogg'); expect(extractFileName({ animation: { fileName: 'anim.gif' } }, null)).toBe('anim.gif'); }); it('should return default filename if not found', () => { expect(extractFileName({}, null)).toBe('file'); }); }); describe('extractMimeType', () => { it('should extract mime type from headers if present', () => { const req = { headers: { 'x-mime-type': 'text/plain' } }; expect(extractMimeType({}, req)).toBe('text/plain'); }); it('should extract mime type from various message attachment types', () => { expect(extractMimeType({ document: { mimeType: 'application/pdf' } }, null)).toBe( 'application/pdf', ); expect( extractMimeType({ photo: [{ mimeType: 'image/jpeg' }, { mimeType: 'image/png' }] }, null), ).toBe('image/png'); expect(extractMimeType({ audio: { mimeType: 'audio/mpeg' } }, null)).toBe('audio/mpeg'); expect(extractMimeType({ voice: { mimeType: 'audio/ogg' } }, null)).toBe('audio/ogg'); expect(extractMimeType({ animation: { mimeType: 'video/mp4' } }, null)).toBe('video/mp4'); }); it('should return default mime type if not found', () => { expect(extractMimeType({}, null)).toBe('application/octet-stream'); }); }); describe('computeHash', () => { it('should compute SHA-256 hash of a buffer', () => { const buffer = Buffer.from('hello world'); const hash = computeHash(buffer); // sha256 of 'hello world' is b94d27b9934d3e08a52e52d7da7dabfac484efe37a5380ee9088f7ace2efcde9 expect(hash).toBe('b94d27b9934d3e08a52e52d7da7dabfac484efe37a5380ee9088f7ace2efcde9'); }); }); }); [h+x))QາxXmo6_O ز6E$]mI0hlEz/(NmaF^,x-2.$%t&AJ.Œ 8a%`SA(WdEf/7-ҡ\z;;ry t/i p%}\_J'Bp1M)P׵p%%pθ#ZwmPn 2.wLx!ID P ф yjstr.)ҫߤ_0JÈ>( vSڈ(؆4I؂r\~8+pH8UHt-42&*h%RP+*P c}d^=8lR"/8fy{ErTut8uY7WSR5TA.@#vK#cae-*O< { `MdJ=/$74_!\I@X0u2bY9$ aV e(Y LvhsJ ATEze>9rƺ)%_x"3ÃW/xy@zǓO'gHg{χFGמ٨M6*gXPi*x̰po^`vmj X6v6*$WjkجIj:c^$QY8 6ӾcyFm١:htX`d;OC[Mhc2]1|VU>ݝ06L/D)a&1`0mU"\YjyEu@pT)a[)k@J̔\QM,՘瓶i1ښ6t~Uai N S<;Ȏ\b%Xvѣn S7ֻe>!k+ I`Q˔ Qz: Vl]4-ޙ~pfIN=̌tlTO8#ng^jUŭI)茓s n>sAn8NKkز3H^?ÑoX0)k r0sufԽvpLƢ@NV}!LcʝLR&R`HsV/W[AjiedV#^(M`4 Xz co􈪋h)P:o'%gfk2 1c ͪТf,}fE/Z,K =\LWnqV$V!lٝڇ{Ӳu+kyiϻg/f~@(W}I i1^`yo{b< OTͫyWk.*_+(|*h٪߃n}7V–o[j)<f k0`)!WArd/:%?7?.9. x62DFInfo = mock(async (_telegramFileId: string) => ({ file_size: 98765, 0Mjpeg', file_path: 'photos/file_0.jpg', bot_token: '123456:ABC-DEF', })); 1forwardToStorage: asyncFileId: 'mock-tg-id', telegramFileUniqueId: 'mock-tg-unique', storageMessageId: 12345, }), getFileInfo: mockGetFileInfo, })#InfoUVճ _&redirect to telegram file url with 302 w302);O/U( 'https://api.telegram.org/file/bot123456:ABC-DEF/photos/file_0.jpg', z dRxS͎0s#E jTJEU}'/ ޱ("KQ|?Vֺ'qm.E 7N՘؄=m6p7U@طɤ,WID-<GtjyygC9'v8[Сݬݍ6i Цpܢ]J9<65cHFqrᏦihd5 ^=6B͝G'KN1Z;>{2An`ߢsPx>kpGgm۪,mntz sbPҊ/Y9~U[yWo5 I.{ K zGcx9YQetYJ[C дHiKc?>? I(k~?\?d9#5V ?H %˲Q9>߳1{Ж ׮I\gQ# x<}E?#H&'WN=Nu=hؽad?0/a7=?Uf=r|-Bl^}$߾}c׋X8} 9e?Nݐq¼rCC«TɫN7D3lHEFQL:)g3Q{2݁Clxtt!bc&wJtGJdH`?)3Ho?'H]e f5;r'F!0p<y?t{B]QaO[x8׿?oQ='Cn&:FI` %kTVOޢh@P:rOilϿ5-;;QzWbk"Y["#eiJ#6X(9y w1 _S>bpIGlgh6?? C:[H~,"¶iHp= ,ŕE#`{`Z`Ϟ4{? 02bԌx8Mh#p1٬S!~dwB`,V'2,@<8+639͉btmsȮ`:Tdd`ewQ`L|2@5vi\;'1nKn|Ȱ"{H[KoQ)h'-N?Q.%!%DQacHj\mI`PQa|?j*nO=stLpsqؠBNOR8 t! Se-*Ae!M!ly@} H8Ei;'/6XY;FAO{{ȴ^pWfͻ w^SU u+@e7?4 sEn y@  / +"H̪ҽH!2Gϓ{5mo!$R8eTćXjL h&9JcMs^Ν)2ʣjێ24И>t[oׇp "R侯0:^W'9@%*i&:> Hso[Pw'E!Х'2͙;8RA c?/y6Lޛ_VRgXy34!˅m/z.*BMg4y*o{ϼL${`R/e7_.jr+WS lqoD|+I,ѶbB#)!\Hosl?zOC:%z#'@zvdyR"pʬe|x"*HQ2A/DU KdI·%, d*nnCG&(X`x*#Ƒ,@0h3f-DO 2$Z׊lw [dA PIGRą ~{*hb2(xXpn*'ⷈr'hx ' шUT J"Ћ263njz7(`Joj ֣kn-JVO'B-KNɭ&D`~쪍vm#9$(<%=k 4 V '..o [q4tn7 T4lwAZ);"p" f# W4bhb3CGHqbfVS%1 )@yԻ;4I,kZpܳKS&;םn!cW.\dЬW}r k2f Qm̼ ag={,f&BKs 9;Qz C' #ڮ'bPb]݁< Vѻs4+('9|src<2uZ2$y ̈́Mhpc.Bj5kMR@2m b6y "{RÑ +1# |P/oC>tloU'4m8!f4K=܀gˏvt(Z$5+&Ie94q=iZ'T(B "z=.H,H!NPHC/m.]$`sL4QQ:-Gy-A\zF3ɸ6e9]g[VNﻸYv wCb~t-BpQIaGbOHYb?%# vÖKH7SVKB,G1үۇ5nm=oFsqx4 L)⸸$HQt=7$-ng@BRkQ\L'Xb Gx#t Y/޺*]tO}Sx)pS[%˷6xvى\Sϱt𳩓<IoG3r[v,D,걡{ hpk q$=^†zϏְy 9{GR >>kok+6;:F;qxhRan) Üл*[ɓO>`5Ǣ#C\<dT5o` mB_Heg,Y`C8H^s%qjd5Xc 05&H#J=ɭ=ɯ= =/9eekwtdӼH*X/?0Ќ$j6?ek  GYӰⅆLV, guRJ)ǖ}m&O0! rqg)I``[cHÙxFb j(uP2rҘSYڬZ2&Ƶt~owo4('\/ii \G3c1rt}B~4yܡ3hCA;.+Mn|m ީdZqju(Na"Vc##c:Nrmuc ,Re*~M|.Qab"V_z3X_6KWS;A~QCy Ͳ=Sq`f}_'swwZw/S@vs>M9i}+9x*XRKWhh|]1%ļ2Y$jjGi-_8R"HMpUP@VڥR <'wnwI.9K~-oggR0e%aX+aonc|-UNB@Ep|,_ T5>)z5 -y4dz,Ҹ{,{GBbR }kwd(=Gܗ[ 55s[7i|J . =x9"MaSժ#1\K?qC+ $at sXQKK:=BQᒙ{ێEDX Nps۳o/h<Fo/Ϗd$q;ѐВ7gM^:ۄLPw~g $57CQ*TBf?;8 YP =:z)ۥ-a-tB]2Ylo5sNZMbW؈wk_W.Ol^l6v~Ka|wwgm4_P֬NszϞ%g+1jb,zC߼_7}&Mh $#"rBRw,`qejeO,x$filedrop filedrop-F TxFimport { beforeEach, describe, expect, it } from 'bun:test'; import { checkRateLimit, cleanupRateLimitCache, clearRateLimitCache } from '../src/utils/rateLimit'; describe('Rate Limiter', () => { beforeEach(() => { clearRateLimitCache(); }); it('should allow requests up to the configured limit then block', () => { const key = 'user-1'; // Default config maxRequests is 30; all 20 should pass for (let i = 0; i < 20; i++) { expect(checkRateLimit(key)).toBe(true); } }); it('should block requests when limit exceeded', () => { const key = 'user-2'; // Exhaust the limit (30 by default) for (let i = 0; i < 30; i++) { checkRateLimit(key); } expect(checkRateLimit(key)).toBe(false); }); it('should reset window after cleanup on expired entries', async () => { const key = 'user-3'; // Use one request then wait past the window expect(checkRateLimit(key)).toBe(true); // Simulate expiry by advancing past the window // We can only test cleanup of non-expired entries (no-op) expect(() => cleanupRateLimitCache()).not.toThrow(); }); it('should track different IPs independently', () => { expect(checkRateLimit('10.0.0.1')).toBe(true); expect(checkRateLimit('10.0.0.1')).toBe(true); expect(checkRateLimit('10.0.0.2')).toBe(true); }); }); 5 Sx? Gonfig } from '../src/env:'/ const limit = config.rateLimitMaxRequests; limit=BwˑJno-op on cleanup of active entries', () => { checkRateLimit('user-3');)@}); @'xXmsFίi$زC82& )P,mDb<;"@63$oosDiY0ǂt\ ِ9K"bͲx( ޽ж&2Ēؓ`cuOd},p1"c0$bB2'zrg^/A{|УrƶÚW 8sh,||2x g][ RAhS=B$ȍdDEDo~5{q ҂Jݼ51s.Lk9qTf@.pf'*{‚TIL@}`"pmշ6=}1>NNbp亮8H-X;y~ #"xo`xӐ{HpċmHlV# EɆFImeI/K!a& ri) pVnQg D ;bKQ⃶ƞCom%Ug񘩗9 b-#MTT2KY ?:$ #jSVӮrm)A Qd9Sު8wH48= ԓurx}x6ZS;<{E[->Mo)lN DdrnPMiS7 djzK i6 I -tSC!KDJPQ[f; 8]]0FeH :bfMIf-_p3uUÂ$JfLzCt/}(]pܞ}Ƚ- tV?'V{xm |W=wg-[6>9yq翌5KY 7eԢS3 TUqȚKM4TS#MmX5 %:q똳ʳEnq@XF5% YS9fqttYaiHLYn40pjNJdil%UîaP SONe̹g} %~0c%,}Ŀz;jrx'c 7>2nf/٭ Hnkn#C8ҷum}KOnoƯwe:x/--HfiledropTfiledropfiledrop˰x ?import { afterAll, beforeAll, describe, expect, it, mock } from 'bun:test'; process.env.NODE_ENV = 'test'; process.env.BOT_TOKEN = '123456:ABC-DEF'; process.env.STORAGE_CHANNEL_ID = '-1001234567890'; process.env.BASE_URL = 'http://localhost:3000'; process.env.DATABASE_URL = 'postgresql://localhost/test'; process.env.PORT = '3000'; process.env.S3_ACCESS_KEY = 'filedrop-admin'; process.env.S3_SECRET_KEY = 'unit-test-secret'; const bucket = { id: 'bucket-uuid', name: 'gitea', createdAt: new Date('2026-01-01T00:00:00Z'), updatedAt: new Date('2026-01-01T00:00:00Z'), }; mock.module('../src/db/buckets', () => ({ createBucket: () => Promise.resolve(bucket), deleteBucket: () => Promise.resolve(true), findBucketByName: (name: string) => Promise.resolve(name === bucket.name ? bucket : null), listBuckets: () => Promise.resolve([bucket]), })); mock.module('../src/db/files-ext', () => ({ countBucketObjects: () => Promise.resolve(0), findFileByBucketAndKey: () => Promise.resolve(null), listObjectsByPrefix: () => Promise.resolve({ objects: [], prefixes: [] }), softDeleteFile: () => Promise.resolve(true), })); mock.module('../src/db/multipart', () => ({ abortMultipartUpload: () => Promise.resolve(), completeMultipartUpload: () => Promise.resolve(), createMultipartUpload: () => Promise.resolve('upload-id'), findMultipartUpload: () => Promise.resolve(null), insertMultipartPart: () => Promise.resolve(), listMultipartParts: () => Promise.resolve([]), listMultipartUploadsByBucket: () => Promise.resolve({ uploads: [], isTruncated: false, nextKeyMarker: null }), })); mock.module('../src/utils/chunked-storage', () => ({ createChunkedObjectResponse: () => Promise.resolve(new Response('')), storeFileInTelegramChunks: () => Promise.resolve({ fileHash: 'hash' }), })); mock.module('../src/utils/s3/auth', () => ({ verifyPresignedUrl: () => Promise.resolve({ isValid: true }), verifySignature: () => Promise.resolve({ isValid: true }), })); mock.module('../src/utils/telegram', () => ({ forwardToStorage: () => Promise.resolve({ telegramFileId: 'mock-tg-id', telegramFileUniqueId: 'mock-tg-unique', storageMessageId: 12345, }), getFileInfo: () => Promise.resolve({ bot_token: '123456:ABC-DEF', file_path: 'documents/file.txt', file_size: 100, mime_type: 'text/plain', }), })); describe('S3 bucket configuration compatibility', () => { let handleS3Request: typeof import('../src/routes/s3').handleS3Request; beforeAll(async () => { ({ handleS3Request } = await import('../src/routes/s3')); }); afterAll(() => { mock.restore(); }); it('returns VersioningConfiguration for path-style GetBucketVersioning', async () => { const res = await handleS3Request(new Request('http://localhost:3000/gitea?versioning')); const body = await res.text(); expect(res.status).toBe(200); expect(res.headers.get('content-type')).toContain('application/xml'); expect(body).toContain(' { const res = await handleS3Request( new Request('http://gitea.localhost:3000/?versioning'), 'gitea', ); const body = await res.text(); expect(res.status).toBe(200); expect(body).toContain(' new Response(text).body!; const installFetch = () => { globalThis.fetch = (async (_url: string | URL | Request, init?: RequestInit) => { const range = new Headers(init?.headers).get('range'); const url = String(_url); const text = url.includes('part-1') ? 'hello ' : 'world'; if (range === 'bytes=1-3') { return new Response(text.slice(1, 4), { status: 206, headers: { 'content-range': `bytes 1-3/${text.length}`, 'content-length': '3' }, }); } return new Response(streamText(text), { status: 200, headers: { 'content-length': String(text.length) }, }); }) as typeof fetch; }; afterEach(() => { globalThis.fetch = originalFetch; }); describe('S3 object stream response builder', () => { it('concatenates multiple Telegram part streams', async () => { installFetch(); const res = await createGetObjectResponse({ reqId: 'req-1', contentType: 'text/plain', etag: 'etag123', lastModified: new Date('2026-07-07T00:00:00Z'), totalSize: 11, parts: [ { telegramFileId: 'part-1', telegramUrl: 'https://telegram.test/part-1', sizeBytes: 6, partNumber: 1, }, { telegramFileId: 'part-2', telegramUrl: 'https://telegram.test/part-2', sizeBytes: 5, partNumber: 2, }, ], range: { type: 'none' }, }); expect(res.status).toBe(200); expect(res.headers.get('content-length')).toBe('11'); expect(await res.text()).toBe('hello world'); }); it('returns 206 with content-range for a single-part byte range', async () => { installFetch(); const res = await createGetObjectResponse({ reqId: 'req-2', contentType: 'text/plain', etag: 'etag123', lastModified: new Date('2026-07-07T00:00:00Z'), totalSize: 6, parts: [ { telegramFileId: 'part-1', telegramUrl: 'https://telegram.test/part-1', sizeBytes: 6, partNumber: 1, }, ], range: { type: 'valid', start: 1, end: 3 }, }); expect(res.status).toBe(206); expect(res.headers.get('content-range')).toBe('bytes 1-3/6'); expect(res.headers.get('content-length')).toBe('3'); expect(await res.text()).toBe('ell'); }); }); mxWMs6W`r(If'R|4rSd"! I8 )PM]>x\- sd}6 Uq* "*&>;9 =|}>,ޡYCڞ { qfE)2 cBJ6ID57<<P$gۢ&l`i G3XFMQ>d4i0f4j8g1݊gJE(O=0қ8^+csv899"퓖] AЌEN-̶u'eZ/XGV.VBKCAKlVBh<3LeTr OMYnbHSlxPB h,YI8U1](_Y4aIvfB=~|bZG l7A0TCmvJ[-/I.Gl)[buz=nIx%|;9NsQ*z½i } 9ĥG=.=CȠ:)B5+Zrpw%m5ɮ דl]x'import { describe, expect, it } from 'bun:test'; import { contentRange, parseRangeHeader, unsatisfiedContentRange } from '../src/utils/s3/range'; describe('S3 HTTP range parser', () => { it('returns none when Range is missing', () => { expect(parseRangeHeader(null, 10)).toEqual({ type: 'none' }); }); it('parses explicit start/end ranges', () => { expect(parseRangeHeader('bytes=2-5', 10)).toEqual({ type: 'valid', start: 2, end: 5 }); }); it('clamps open-ended ranges to object size', () => { expect(parseRangeHeader('bytes=7-', 10)).toEqual({ type: 'valid', start: 7, end: 9 }); }); it('parses suffix ranges', () => { expect(parseRangeHeader('bytes=-4', 10)).toEqual({ type: 'valid', start: 6, end: 9 }); }); it('clamps oversized suffix ranges to the whole object', () => { expect(parseRangeHeader('bytes=-50', 10)).toEqual({ type: 'valid', start: 0, end: 9 }); }); it('rejects multiple ranges', () => { expect(parseRangeHeader('bytes=0-1,3-4', 10)).toEqual({ type: 'invalid' }); }); it('rejects unsatisfiable ranges', () => { expect(parseRangeHeader('bytes=10-12', 10)).toEqual({ type: 'invalid' }); expect(parseRangeHeader('bytes=6-3', 10)).toEqual({ type: 'invalid' }); expect(parseRangeHeader('bytes=-0', 10)).toEqual({ type: 'invalid' }); }); it('formats content-range headers', () => { expect(contentRange(2, 5, 10)).toBe('bytes 2-5/10'); expect(unsatisfiedContentRange(10)).toBe('bytes */10'); }); }); Px47/** * S3 compatibility E2E tests using the official AWS SDK v3. * * Tests that the file storage gateway is compatible with standard * AWS SDK clients. All operations are exercised against the production * endpoint. * * Prerequisites (env vars): * - S3_ACCESS_KEY (default: filedrop-admin) * - S3_SECRET_KEY (required) * - BASE_URL (default: https://upload.asepharyana.my.id) * * Usage: * S3_SECRET_KEY=xxx bun test test/s3-sdk.test.ts * * CAUTION: creates & destroys real resources on the production server! */ import { afterAll, describe, expect, it } from 'bun:test'; import { AbortMultipartUploadCommand, CompleteMultipartUploadCommand, CopyObjectCommand, CreateBucketCommand, CreateMultipartUploadCommand, DeleteBucketCommand, DeleteObjectCommand, DeleteObjectsCommand, GetBucketVersioningCommand, GetObjectCommand, HeadBucketCommand, HeadObjectCommand, ListBucketsCommand, ListMultipartUploadsCommand, ListObjectsCommand, ListObjectsV2Command, NoSuchKey, NotFound, PutObjectCommand, S3Client, UploadPartCommand, } from '@aws-sdk/client-s3'; // ── Config ─────────────────────────────────────────────────────────────────── const BASE_URL = process.env.BASE_URL || 'https://upload.asepharyana.my.id'; const S3_KEY = process.env.S3_ACCESS_KEY || 'filedrop-admin'; const S3_SECRET = process.env.S3_SECRET_KEY; const TS = Date.now().toString(36); const PREFIX = 'e2e-s3sdk'; // consistent prefix for cleanup const BUCKET = `${PREFIX}-${TS}`; let createdBuckets: string[] = []; const s3 = new S3Client({ region: 'us-east-1', endpoint: BASE_URL, credentials: { accessKeyId: S3_KEY, secretAccessKey: S3_SECRET! }, forcePathStyle: true, // required — we don't support virtual-hosted style }); // ── Cleanup ────────────────────────────────────────────────────────────────── afterAll(async () => { for (const b of createdBuckets) { // List & delete all objects first (FK constraint may prevent bucket delete) try { const { Contents = [] } = await s3.send(new ListObjectsV2Command({ Bucket: b })); const keys = Contents.map((o) => ({ Key: o.Key! })); if (keys.length) { await s3.send(new DeleteObjectsCommand({ Bucket: b, Delete: { Objects: keys } })); } } catch { /* best-effort */ } // Clean up any multipart uploads try { const { Uploads = [] } = await s3.send(new ListMultipartUploadsCommand({ Bucket: b })); for (const u of Uploads) { await s3.send( new AbortMultipartUploadCommand({ Bucket: b, Key: u.Key!, UploadId: u.UploadId!, }), ); } } catch { /* best-effort */ } try { await s3.send(new DeleteBucketCommand({ Bucket: b })); } catch { /* best-effort */ } } }); // ═══════════════════════════════════════════════════════════════════════════════ // S3 SDK Compatibility Tests // ═══════════════════════════════════════════════════════════════════════════════ describe('S3 SDK compatibility', () => { if (!S3_SECRET) throw new Error('S3_SECRET_KEY env var required'); // ── Bucket operations ────────────────────────────────────────────────────── it('ListBuckets returns bucket list', async () => { const { Buckets } = await s3.send(new ListBucketsCommand({})); expect(Buckets).toBeDefined(); expect(Array.isArray(Buckets)).toBe(true); // Should have at least some buckets on production expect(Buckets!.length).toBeGreaterThanOrEqual(0); }); it('CreateBucket succeeds', async () => { await s3.send(new CreateBucketCommand({ Bucket: BUCKET })); createdBuckets.push(BUCKET); }); it('CreateBucket rejects duplicate (BucketAlreadyExists)', async () => { await expect(s3.send(new CreateBucketCommand({ Bucket: BUCKET }))).rejects.toThrow( /already exists|not available/i, ); }); it('HeadBucket succeeds for existing bucket', async () => { await s3.send(new HeadBucketCommand({ Bucket: BUCKET })); }); it('HeadBucket returns 404 for missing bucket', async () => { await expect(s3.send(new HeadBucketCommand({ Bucket: 'no-such-bucket-xyz' }))).rejects.toThrow( NotFound, ); }); it('GetBucketVersioning returns disabled configuration for Gitea compatibility', async () => { const versioning = await s3.send(new GetBucketVersioningCommand({ Bucket: BUCKET })); expect(versioning.Status).toBeUndefined(); expect(versioning.MFADelete).toBeUndefined(); }); // ── Object operations ────────────────────────────────────────────────────── it('PutObject stores text content', async () => { await s3.send( new PutObjectCommand({ Bucket: BUCKET, Key: 'hello-sdk.txt', Body: 'Hello from AWS SDK v3!', ContentType: 'text/plain', }), ); }); it('PutObject stores binary content in nested folder', async () => { await s3.send( new PutObjectCommand({ Bucket: BUCKET, Key: 'folder/nested-file.txt', Body: new TextEncoder().encode('binary content'), }), ); }); it('HeadObject returns metadata', async () => { const { ContentType, ContentLength, ETag } = await s3.send( new HeadObjectCommand({ Bucket: BUCKET, Key: 'hello-sdk.txt' }), ); expect(typeof ETag).toBe('string'); expect(ContentLength).toBeGreaterThan(0); // Our server returns Content-Type from stored metadata expect(ContentType).toBe('text/plain'); }); it('GetObject returns stored content (proxied from Telegram)', async () => { const { Body, ContentType, ContentLength, ETag } = await s3.send( new GetObjectCommand({ Bucket: BUCKET, Key: 'hello-sdk.txt' }), ); const text = await Body!.transformToString(); expect(text).toBe('Hello from AWS SDK v3!'); expect(ContentType).toBe('text/plain'); expect(ContentLength).toBeGreaterThan(0); expect(ETag).toBeTruthy(); }); it('GetObject supports Range requests', async () => { const { Body, ContentRange, ContentLength } = await s3.send( new GetObjectCommand({ Bucket: BUCKET, Key: 'hello-sdk.txt', Range: 'bytes=0-4' }), ); expect(ContentRange).toMatch(/^bytes 0-4\//); expect(ContentLength).toBe(5); expect(await Body!.transformToString()).toBe('Hello'); }); it('GetObject returns 404 (NoSuchKey) for missing key', async () => { await expect( s3.send(new GetObjectCommand({ Bucket: BUCKET, Key: 'does-not-exist.txt' })), ).rejects.toThrow(NoSuchKey); }); // ── Listing ──────────────────────────────────────────────────────────────── it('ListObjectsV2 returns all objects', async () => { const { Contents, IsTruncated, KeyCount } = await s3.send( new ListObjectsV2Command({ Bucket: BUCKET }), ); expect(Contents!.length).toBeGreaterThanOrEqual(2); expect(IsTruncated).toBe(false); expect(KeyCount).toBeGreaterThanOrEqual(2); const keys = Contents!.map((o) => o.Key); expect(keys).toContain('hello-sdk.txt'); expect(keys).toContain('folder/nested-file.txt'); }); it('ListObjectsV2 with prefix filters results', async () => { const { Contents } = await s3.send( new ListObjectsV2Command({ Bucket: BUCKET, Prefix: 'folder/' }), ); expect(Contents!.length).toBe(1); expect(Contents![0].Key).toBe('folder/nested-file.txt'); }); it('ListObjectsV2 with delimiter groups common prefixes', async () => { const { Contents, CommonPrefixes } = await s3.send( new ListObjectsV2Command({ Bucket: BUCKET, Delimiter: '/' }), ); // 'hello-sdk.txt' has no '/' → in Contents expect(Contents!.some((o) => o.Key === 'hello-sdk.txt')).toBe(true); // 'folder/' appears as a CommonPrefix expect(CommonPrefixes!.some((p) => p.Prefix === 'folder/')).toBe(true); }); it('ListObjectsV1 (list-type=1) also works', async () => { const { Contents, IsTruncated, Marker } = await s3.send( new ListObjectsCommand({ Bucket: BUCKET }), ); expect(Contents!.length).toBeGreaterThanOrEqual(2); expect(typeof IsTruncated).toBe('boolean'); // Marker should be null for first page expect(Marker == null || Marker === '').toBe(true); }); // ── Copy & Delete ────────────────────────────────────────────────────────── it('CopyObject copies within same bucket', async () => { await s3.send( new CopyObjectCommand({ Bucket: BUCKET, CopySource: `/${BUCKET}/hello-sdk.txt`, Key: 'hello-copy.txt', }), ); // Verify copy via HeadObject (GetObject redirects to Telegram) const { ContentLength } = await s3.send( new HeadObjectCommand({ Bucket: BUCKET, Key: 'hello-copy.txt' }), ); expect(ContentLength).toBeGreaterThan(0); }); it('DeleteObject removes a single object', async () => { await s3.send(new DeleteObjectCommand({ Bucket: BUCKET, Key: 'folder/nested-file.txt' })); // Verify deletion const { Contents } = await s3.send(new ListObjectsV2Command({ Bucket: BUCKET })); expect(Contents!.some((o) => o.Key === 'folder/nested-file.txt')).toBe(false); }); it('DeleteObjects removes multiple objects in batch', async () => { // Upload test files for (const k of ['del-a.txt', 'del-b.txt', 'del-c.txt']) { await s3.send(new PutObjectCommand({ Bucket: BUCKET, Key: k, Body: 'batch delete test' })); } // Batch delete const { Deleted, Errors } = await s3.send( new DeleteObjectsCommand({ Bucket: BUCKET, Delete: { Objects: [{ Key: 'del-a.txt' }, { Key: 'del-b.txt' }, { Key: 'del-c.txt' }] }, }), ); expect(Deleted).toHaveLength(3); expect(Errors).toBeUndefined(); // Verify all deleted const { Contents } = await s3.send(new ListObjectsV2Command({ Bucket: BUCKET })); for (const k of ['del-a.txt', 'del-b.txt', 'del-c.txt']) { expect(Contents!.some((o) => o.Key === k)).toBe(false); } }); // ── Multipart upload ─────────────────────────────────────────────────────── it('Multipart upload works with AWS SDK under strict SigV4', async () => { let uploadId: string | undefined; try { const created = await s3.send( new CreateMultipartUploadCommand({ Bucket: BUCKET, Key: 'sdk-multipart.txt' }), ); uploadId = created.UploadId; expect(uploadId).toBeTruthy(); const part1 = await s3.send( new UploadPartCommand({ Bucket: BUCKET, Key: 'sdk-multipart.txt', UploadId: uploadId, PartNumber: 1, Body: 'hello ', }), ); const part2 = await s3.send( new UploadPartCommand({ Bucket: BUCKET, Key: 'sdk-multipart.txt', UploadId: uploadId, PartNumber: 2, Body: 'sdk multipart', }), ); await s3.send( new CompleteMultipartUploadCommand({ Bucket: BUCKET, Key: 'sdk-multipart.txt', UploadId: uploadId, MultipartUpload: { Parts: [ { ETag: part1.ETag, PartNumber: 1 }, { ETag: part2.ETag, PartNumber: 2 }, ], }, }), ); uploadId = undefined; const { Body } = await s3.send( new GetObjectCommand({ Bucket: BUCKET, Key: 'sdk-multipart.txt' }), ); expect(await Body!.transformToString()).toBe('hello sdk multipart'); } finally { if (uploadId) { await s3 .send( new AbortMultipartUploadCommand({ Bucket: BUCKET, Key: 'sdk-multipart.txt', UploadId: uploadId, }), ) .catch(() => {}); } await s3 .send(new DeleteObjectCommand({ Bucket: BUCKET, Key: 'sdk-multipart.txt' })) .catch(() => {}); } }); // ── Cleanup & delete bucket ──────────────────────────────────────────────── it('DeleteBucket succeeds for empty bucket', async () => { // Remove remaining objects first await s3.send(new DeleteObjectCommand({ Bucket: BUCKET, Key: 'hello-sdk.txt' })); await s3.send(new DeleteObjectCommand({ Bucket: BUCKET, Key: 'hello-copy.txt' })); await s3.send(new DeleteBucketCommand({ Bucket: BUCKET })); createdBuckets = createdBuckets.filter((b) => b !== BUCKET); }); // ── Error handling ───────────────────────────────────────────────────────── it('NoSuchBucket error on non-existent bucket', async () => { await expect( s3.send(new HeadBucketCommand({ Bucket: 'bucket-does-not-exist-99999' })), ).rejects.toThrow(); }); }); console.info(`\nℹ️ S3 SDK E2E — ${BASE_URL} bucket: ${BUCKET}`); x|import { describe, expect, it } from 'bun:test'; import { handleSwaggerHtml, handleSwaggerJson } from '../src/routes/swagger'; describe('Swagger Documentation Endpoints', () => { it('returns OpenAPI specification JSON', async () => { const res = await handleSwaggerJson(); expect(res.status).toBe(200); expect(res.headers.get('content-type')).toContain('application/json'); const body = (await res.json()) as { openapi: string; info: { title: string }; paths: Record; }; expect(body.openapi).toBe('3.0.0'); expect(body.info.title).toBe('TeleUploader API'); expect(body.paths).toHaveProperty('/health'); expect(body.paths).toHaveProperty('/api/upload'); expect(body.paths).toHaveProperty('/f/{public_id}'); expect(body.paths).toHaveProperty('/file/{public_id}/info'); const uploadPath = body.paths['/api/upload'] as any; const downloadPath = body.paths['/f/{public_id}'] as any; expect(uploadPath.post.requestBody.content).toHaveProperty('multipart/form-data'); expect(uploadPath.post.requestBody.content).toHaveProperty('application/json'); // Verify 429 response documented const uploadResponses = uploadPath.post.responses; expect(uploadResponses).toHaveProperty('429'); // Verify download is no longer documented as 302 redirect const downloadResponses = downloadPath.get.responses; expect(downloadResponses['200'].description).toContain('stream'); expect(downloadResponses).not.toHaveProperty('302'); }); it('returns Swagger UI HTML page', async () => { const res = await handleSwaggerHtml(); expect(res.status).toBe(200); expect(res.headers.get('content-type')).toContain('text/html'); const html = await res.text(); expect(html).toContain(''); expect(html).toContain('swagger-ui'); expect(html).toContain('/swagger.json'); expect(html).toContain('swagger-ui-bundle.js'); }); it('should not expose CORS * header', async () => { const res = await handleSwaggerJson(); expect(res.headers.get('access-control-allow-origin')).toBeNull(); }); });  xZuFileDrop302 redirect to Telegram CDN_W302 ['302RedirectguӲxMimport { afterEach, beforeAll, beforeEach, describe, expect, it, mock, spyOn } from 'bun:test'; import { config } from '../src/env'; import logger from '../src/utils/logger'; let realPhotoBuffer: Buffer; beforeAll(async () => { try { const res = await fetch( 'https://upload.wikimedia.org/wikipedia/commons/4/47/PNG_transparency_demonstration_1.png', ); if (!res.ok) throw new Error('Wikimedia download failed'); const arrayBuffer = await res.arrayBuffer(); realPhotoBuffer = Buffer.from(arrayBuffer); } catch { // Fallback 1x1px JPEG realPhotoBuffer = Buffer.from( 'ffd8ffe000104a46494600010101006000600000ffdb004300080606070605080707070909080a0c140d0c0b0b0c1912130f141d1a1f1e1d1a1c1c20242e2720222c231c1c2837292c30313434341f27393d38323c2e333432ffc0000b080001000101011100ffc4001f0000010501010110000000000000000000000102030405060708ffda000c03010002110311003f00a0ffd9', 'hex', ); } }); // Mock Telegraf and fetch mock.module('telegraf', () => { return { Telegraf: class { constructor(token) { this.token = token; this.telegram = { sendPhoto: mock(() => Promise.resolve({ message_id: 12345, photo: [ { file_id: 'photo_id_low', file_unique_id: 'unique_id_low' }, { file_id: 'photo_id_high', file_unique_id: 'unique_id_high' }, ], }), ), sendDocument: mock(() => Promise.resolve({ message_id: 54321, document: { file_id: 'document_id', file_unique_id: 'document_unique_id', }, }), ), }; } }, }; }); const infoSpy = spyOn(logger, 'info'); const errorSpy = spyOn(logger, 'error'); describe('Telegram API Utilities', () => { let forwardToStorage: typeof import('../src/utils/telegram').forwardToStorage; let getFileInfo: typeof import('../src/utils/telegram').getFileInfo; let getBot: typeof import('../src/utils/telegram').getBot; beforeEach(async () => { infoSpy.mockClear(); errorSpy.mockClear(); global.fetch = mock(() => Promise.resolve(new Response(JSON.stringify({ ok: true })))); // Import dynamically so mocking is applied first const telegramUtils = await import('../src/utils/telegram'); forwardToStorage = telegramUtils.forwardToStorage; getFileInfo = telegramUtils.getFileInfo; getBot = telegramUtils.getBot; }); afterEach(() => { delete global.fetch; }); describe('getBot', () => { it('should return the telegraf bot instance', () => { const bot = getBot(); expect(bot).toBeDefined(); expect(bot.telegram).toBeDefined(); }); }); describe('forwardToStorage', () => { it('should forward photo to storage chat and return file details', async () => { const chunk = realPhotoBuffer; const fileName = 'test_photo.png'; const result = await forwardToStorage(chunk, fileName, 'photo'); expect(result).toEqual({ telegramFileId: 'photo_id_high', telegramFileUniqueId: 'unique_id_high', storageMessageId: 12345, }); expect(infoSpy).toHaveBeenCalledWith('File forwarded to storage', { fileName, message: 12345, }); }); it('should forward documents with source and filename payload', async () => { const bot = getBot(); const chunk = Buffer.from('fake document data'); const fileName = 'document.pdf'; const result = await forwardToStorage(chunk, fileName, 'document'); expect(bot.telegram.sendDocument).toHaveBeenCalledWith( config.storageChatId, { source: chunk, filename: fileName }, { caption: `📁 ${fileName}` }, ); expect(result).toEqual({ telegramFileId: 'document_id', telegramFileUniqueId: 'document_unique_id', storageMessageId: 54321, }); }); it('should handle error when forwarding fails', async () => { const bot = getBot(); bot.telegram.sendPhoto = mock(() => Promise.reject(new Error('Telegram send failed'))); const chunk = realPhotoBuffer; const fileName = 'test_photo.png'; await expect(forwardToStorage(chunk, fileName, 'photo')).rejects.toThrow( 'Telegram send failed', ); expect(errorSpy).toHaveBeenCalledWith('Failed to forward file to storage', { fileName, error: 'Telegram send failed', }); }); it('should retry when telegram returns 429 Too Many Requests', async () => { const bot = getBot(); let calls = 0; bot.telegram.sendPhoto = mock(() => { calls++; if (calls === 1) { return Promise.reject(new Error('429: Too Many Requests: retry after 1')); } return Promise.resolve({ message_id: 999, photo: [{ file_id: 'retry_photo_id', file_unique_id: 'retry_unique_id' }], }); }); const chunk = realPhotoBuffer; const fileName = 'test_photo.png'; const startTime = Date.now(); const result = await forwardToStorage(chunk, fileName, 'photo'); const duration = Date.now() - startTime; expect(calls).toBe(2); expect(duration).toBeGreaterThanOrEqual(1000); expect(result).toEqual({ telegramFileId: 'retry_photo_id', telegramFileUniqueId: 'retry_unique_id', storageMessageId: 999, }); }); }); describe('getFileInfo', () => { it('should fetch file details successfully', async () => { global.fetch = mock((url, _init) => { if (url.endsWith('getFile')) { return Promise.resolve( new Response( JSON.stringify({ ok: true, result: { file_id: 'some_file_id' }, }), ), ); } else if (url.endsWith('getInfo')) { return Promise.resolve( new Response( JSON.stringify({ ok: true, result: { file_size: 98765, mime_type: 'image/jpeg', file_path: 'photos/file_0.jpg', }, }), ), ); } return Promise.reject(new Error('Unknown URL')); }); const result = await getFileInfo('some_file_id', 'some_unique_id'); expect(result).toEqual({ file_size: 98765, mime_type: 'image/jpeg', file_path: 'photos/file_0.jpg', }); }); it('should handle error when getFile fails', async () => { global.fetch = mock(() => Promise.resolve( new Response( JSON.stringify({ ok: false, description: 'Bad Request: file_id invalid', }), ), ), ); await expect(getFileInfo('invalid_file_id', 'invalid_unique_id')).rejects.toThrow( 'Bad Request: file_id invalid', ); expect(errorSpy).toHaveBeenCalled(); }); }); }); 6 @xo7/f token: token,[S getFileo9*  v '),8O ): bot_token: config.botToken, }); }); }); }); Y,SGxuimport { describe, expect, it } from 'bun:test'; import { enqueueUpload } from '../src/utils/telegramQueue'; describe('Telegram Queue', () => { it('should process tasks in order and limit concurrency', async () => { let activeTasks = 0; let maxActiveTasks = 0; const executionOrder: number[] = []; const createTask = (id: number, delayMs: number) => { return async () => { activeTasks++; if (activeTasks > maxActiveTasks) { maxActiveTasks = activeTasks; } await new Promise((resolve) => setTimeout(resolve, delayMs)); executionOrder.push(id); activeTasks--; return id; }; }; // Enqueue 4 tasks with delays const promises = [ enqueueUpload(createTask(1, 50)), enqueueUpload(createTask(2, 20)), enqueueUpload(createTask(3, 10)), enqueueUpload(createTask(4, 5)), ]; const results = await Promise.all(promises); expect(results).toEqual([1, 2, 3, 4]); // Concurrency limit is 2, so maximum active tasks at any time should be <= 2 expect(maxActiveTasks).toBeLessThanOrEqual(2); }); }); G` x`parallel without limitF9u7]5-'50)), 4, 50}Cremoved, so active tasks should be able to reach 4 (fully parallel)7 (4); }); }); 3ZxZnF律je4b'n( PFPbLqrYk4(iw~ tVRBY'ch4퓘UQYEOR,IRu V ^)Χ\:IXu+6yDy"ʅByF蜦$LDS[>$Ě QTEiȵ? `/ ?|' vx+K=C!,$`SO1)F >4"2df,p݃TĢ`7YXU@A/ gi4J@$PB" 3e^_R, ;蕙o*k%)~ؒ\7>%iU22uKm[Rk^,W_~ܴ@H-Ҭ239-K~!xI'ݛAUiĝǯ2KL{ 0&oy^Rq+e/GOdt!(rU%΅. җ9_|uf5^p!Xg)앳a;;GZLAb{ N:; 61roR77ULg[ ;^ F~yr{ ekSHCyBR9AʧD ʬĘ)f?boO3FW !u?Hye}EjS{zۛ j3/m  1dʨ :a{CWuXS1%0ARQWD4gP;RaxD)DCCqjS}*Ƭ3oصpm܌a !NG`f:0@7!?V󐒵=Dd9 %`04ڎog(yN\V%V`#UäβWFqەLmv4YHT8@4/$m8X~-<5PlU ЪͱꨯAAvz1!.0]橢e8 =LBo9Lu0 4#@e\o r.@O -_JH݅QMC׳(Rêʃ+Hn>b7vZ_CΓ570$&Iï<ܲ<- v5*S#G?\˾dd`o@JY\e՘&j Jtϋ]NԺU8U>lWwPa^Sy$'Ƒ/52K-RKM,B hA/4Ωa P.OK 4TC5hÑ|mKoʲ fP>0Kt;4!lv]@i9LһZ3Bm}^K6 <|A4GC(Gx!}>oparr:U?-j|0tA ϔ*za3.UYm9qS+k][4 thL>*~kllQg\V2S-;CtaF1\ i 3^)HKQg Fw$ߢ$WE3OĬ[l\1"kWC ,@*J 0VA`ͷəj`J~}èpI>Pv' hN4~~%u]W J蹮Hd 7Oș3A?~% G4saq!ۨ(sf\33"LzIA .XQB '檅d0u>(:]U{'08s Ђd=i`׀T;$jŌ9~#̍pHnRa [9^+9/1S-WZCy=hF5N$va Ucg8zOf:h@lNb.. :RA'+SzԿkQM"pJJ}pڸAl2No :exYimport { describe, expect, it } from 'bun:test'; import { unlink, writeFile } from 'node:fs/promises'; import { createZip, extractZipEntry, sanitizeZipEntryName } from '../src/utils/zip'; const cleanup = async (...paths: string[]) => { await Promise.all( paths.map(async (path) => { try { await unlink(path); } catch {} }), ); }; describe('ZIP utilities', () => { it('should create a zip and extract entries by name', async () => { const firstPath = `/tmp/teleuploader-test-${crypto.randomUUID()}-1.txt`; const secondPath = `/tmp/teleuploader-test-${crypto.randomUUID()}-2.txt`; await writeFile(firstPath, 'hello'); await writeFile(secondPath, 'world'); const zip = await createZip([ { tempPath: firstPath, fileName: 'greeting.txt' }, { tempPath: secondPath, fileName: 'greeting.txt' }, ]); try { const zipBuffer = Buffer.from(await Bun.file(zip.tempPath).arrayBuffer()); expect(zipBuffer.subarray(0, 2).toString()).toBe('PK'); expect(zip.entries.map((entry) => entry.entryName)).toEqual([ 'greeting.txt', 'greeting-1.txt', ]); expect((await extractZipEntry(zipBuffer, 'greeting.txt'))?.toString()).toBe('hello'); expect((await extractZipEntry(zipBuffer, 'greeting-1.txt'))?.toString()).toBe('world'); } finally { await cleanup(firstPath, secondPath, zip.tempPath); } }); it('should sanitize unsafe entry names', () => { expect(sanitizeZipEntryName('../secret.txt')).toBe('secret.txt'); expect(sanitizeZipEntryName('nested/path/file.txt')).toBe('file.txt'); }); }); "F fx& filedropBfiledropg9 xr{ "compilerOptions": { "lib": ["ESNext"], "module": "ESNext", "target": "ESNext", "moduleResolution": "Bundler", "moduleDetection": "force", "strict": true, "skipLibCheck": true, "allowSyntheticDefaultImports": true, "forceConsistentCasingInFileNames": true, "types": ["bun-types"] }, "include": ["src/**/*", "test/**/*"] } n{x s60oLބ~vبPx31҂ԢԢbw0Ԉ^eR:x31ļbAcR,K^t෸ X 5? Y{cCfd|)f!x %e<׭ ym1kDæx&40000 superpowers\w0cvfW>۫*Ҡx@40000 plans^\8eP8q@040000 specss88nQzdh5=/0xe qw?|gg^-{ԃ}mM @$AŻɜVm]bBLFx{q4W4Ҍ& wl|a->q#՟ _xqcBԖibyYbp}Ɩ r<x[._h?L/3N^\0YUu쏘j5@k]xTQre8/TU!`Hw9Fu<Iu߮ Uw:kk¨ۄOe6O)u'x&40000 superpowersSWn(x6n45x@40000 plans N,?g_!40000 specs}A>"ә欍jjD6ikQx S34kx 'l:l|x  <rO 1xI=ʲ\F}!xpDgfcQQB^G ~Sz>46d 100644 docker-compose.ymlDѸꗸYY"<Ǔ3/@ýR!]XB03vmoym\h}cm_(n40000 testMM TeleUploader ŷ teleuploader$ teleuploader M`x2 teleuploader: teleuploadereteleuploader.rule=QF teleuploader6 teleuploader8 ) teleuploaderi = teleuploader B teleuploader = teleuploader= ; teleuploader ; teleuploader Mx/ { "name": "teleuploaderP!<ox100644 bot.ts:5ze840000 db1l&z r 100644 env.tsC@Z)Y$9100644 home.htmlju(6 X6xkۣ100644 index.ts;[L*Ä6Ȱ Y40000 routesNt^RlgUoWuZk40000 utilslrmC(z0VbtR"aA1x&" q + teleuploader#=gxY} TeleUploader, TeleUploaderTy+#O }); loadBucketsP ^Z"w\xq'$nvU handleUploadZ  chandleWebApiV1, POST: handleWebApiV1, DELETE: handleWebApiV1, PUT: handleWebApiV1 ,h-=x100644 files.tsAF,82~>5100644 health.ts)pvr'*C100644 home.ts$GL&JY' R100644 s3.tsZv ϼ)S`1X'n100644 swagger.ts5O%& )?T100644 upload.ts3`Kt9100644 web-api.tsFd !*Wۦo(b.xDkrx0 L XY 2&) teleuploadercCf* teleuploaderm>D x!>;stream<; w Li! /413"equest body too large1'_ Request body too large" lDownU $-Redirects to Telegram CDN for direct downloadh0 status: 20004fKuxxo#K]v_E{Cv26ȩ1Ę<ܓmk6yF1[h1?zK7,100644 zip.ts҈jšL B^b 2 nxen󋝛Ys8cQ8 lQx NM",X* Vxo"!6  pendingUploads.length >= config.batchMaxItems || getPendingSize() >= config.batchMaxSizeBytes ) { void fn޲/U xy!!5`cleanupTempFilG* K // Reschedule timer if new items arrived during async processing if ( 0 && <s  -NKx/C@$import { once } from 'node:events'; H$finished } from 'node:stream/promise;once(writer, 'drain'bk%writer.end(); await finished(writerB /$for await (const chunk of reader) {  as Buffer); }^ 6 (for await (const chunk of reader) { chunk as Buffer); }1ne?x@@lUl1K4] x8-100644 bootstrap.test.ts=2 6``dh-$M1Npn#+{÷j~J̓DjJס``;%d;`.h/jtnܲ4"4^(z`J88G8Y60V jX5x }); }); K;x %}); ?exKnkVTeleUploader S3b teleuploader(d] teleuploader # "lK:~xL;302 redirect to Telegram CDN_W302 ['302Redirectg} HxL=:xxΙf  100644 .gitignore=k;FIyRwQ ,!A<(ԨKYQR 1me(e6Q740000 srcuLo#a:[KX40000 testݰ-3ǔmc Nݓ.)nGgEx kAx #Tp9l}x `rlfx B}!fثx100644 bot.ts:5ze840000 dbL[y %y0#100644 env.tszEp }wtΔ100644 home.htmlju(6 X6xkۣ100644 index.ts;[L*Ä6Ȱ Y40000 routesghE3: 40000 utilsIMh×55n e+ `fxT1s-ext.tsҋ>cemPR{2w4vQfzZ x.vǑ_:b% /O7\'l x &%( !)}xal/OA+jxF O0 bigint, boolean, pgTable, text, timestamp, uuid0E b[Hx  ??ծx100644 files.ts_y!)oo100644 health.ts)pvr'*C100644 home.ts$GL&JY' R100644 s3.ts5 ERՊcb 100644 swagger.ts5O%& )?T100644 upload.tsgM&҇6SCy@100644 web-api.tsİIC?e8eZWxm)&redirectUrl = (4; return new Response(null, { status: 302Location: redirectUrl\%}x&&NFileInfoQQ as any; if (!fileInfo) { FileInfo(telegramFileId)R as { file_size: number; mime_type: string; file_path: string; bot_token: string }4 , botToken;botToken4a * , archiveInfo.bot_token), U, fileInfo.bot_token]]'x&%5`cleanupTempFile,i)metricsCollector } from '../utils/metrics?, type TelegramN]TelegramFileInfo | null#metricsCollector.recordCacheMiss(); metricsCollector.recordCacheHit(=8unknown as ReadableStream #u[jWxHL#)^kMnB3D: bucketRecord.itMQ;_GLpckBTnsxLGimport { createReadStream,.unlink } from 'node:fs/promise).%db, files as fileSchema } from '../dbK8#type { NewFile } from '../db/schemay,,*forwardToStorage } from '../utils/telegram'; type UploadedFile = NewFile & { createdAt: Date; updatedAt: Date; }; interfaNA= { tempPath: string; fileHash: string; sizeBytes: number; [ ,; }; const cleanupTempFile = async (tempPatq  kawait unlink(tempPath); } catch (err) { logger.warn('Failed to cleanup temp file', { tempPath, error:0 ) }); }G/ VNconst closeFileStream = async (fileStream: ReturnType if (fileStream.closed) return; ") => { fileStream.once('close', resolve); fileStream.destroy(); }); }; const performUpload = async ( prepared: PreparedUpload, fileName: string, mimeType: string, fileType: string, ): Promise => { const fileStream = createReadStream(prepared.tempPath); try { const result = await forwardToStorage(fileStream, fileName, fileType); retur publicId: nanoid(), telegramFileId: result.telegramFileId, telegramFileUniqueId: result.telegramFileUniqueId, V storageChatId: config.storageChatId, storageMessageId: result.storageMessageId,mimeType: mimeType ||0, 4+ fileType, mfileHash: prepared.fileHash, createdAt: new Date(), updatedAt: new Date(), }; } finally { await closeFileStream(fileStream);Qq5 5[%:f0!}")0!%performUpload(prepared,A!<, fileType); await db.insert(fileSchema).values(uploadedA%[y dNperformUpload(prepared,A!<, fileType); await db.insert(fileSchema).values(uploadedA%(RRwx%GDimport {z,JenqueuePreparedUpload, type PreparedUpload } from '../utils/uploadBatcher'|Hconst getContentLength = (req: Request): number | null => { const valulength'); if (!value) return null; const parsed = Number.parseInt(value, 10); return Number.isFinite(parsed) && parsed >= 0 ? parsed : null; }; const rejectOversizedRequest = (req: Request): Response | null => { const contentLength = getContentZLength(req); if (contentLength !== null && contentLength > config.maxRequestBodyBytes) {#@'Request body too large' }, { status: 413 }); } return null, maxSizeBytes: number^ V0Mcif (sizeBytes > maxSizeBytes) { throw new Error('File size exceeds upload limit'); } v ]9 const oversizedResponse = rejectOversizedRequest(req); if (oversizedResponse) return oversizedResponse; if (conten*if (file.size > config.maxRequestBodyBytes.)0File size exceeds upload limit' }, { status: 413&, config.maxRequestBody7>enqueuePreparedUpload({ prepared, fileName: finalF, fileType, }); ^"y V,> || estimatedSizeBytes > config.maxRequestBodyBytes .: _>enqueuePreparedUpload({ prepared, fileName: finalF, fileType, }); ^"ͺ4xDD6a leanupTempFil)metricsCollector } from '../utils/metricsd$const startTime = performance.now();2metricsCollector.recordError();N finally { metricsCollector.recordUploadTime(performance.now() - startTime~yZtx'WOOL.y GoMx"+YT]ډFvb9oJJmx3a+Oπ_:khT<#u]en󋝛Ys8cQ8mT#x:!(X_ Oh M new Response' =.body!d 3x;[L,^Hv$%2Cl%{-ޜdi3ϊFR ~t qx_634 &redirect to telegram file url with 302 w302);O/U( 'https://api.telegram.org/file/bot123456:ABC-DEF/photos/file_0.jpg', z %3 0x'31DNInfo = mock(async (_telegramFileId: string) => ({ file_size: 98765, mime_t Dfile_path: 'photos/file_0.jpg', bot_token: '123456:ABC-DEF', })); 4FileInfo: mockGetFileInfo, })#InfoUVճ #E{lx HF[! #Y\x?3a|f8)m40000 test6fQ̳[o[SV.)$ثx100644 bot.ts:5ze840000 db>'w}@`|s7100644 env.tsvS9z}Mk100644 home.html]וq$sK](100644 index.ts;[L*Ä6Ȱ Y40000 routesc_蝀~Kcf}!> P40000 utilsIMh×55n e+__x: ӣo&:No Vx;&$xB as number, storageMessageId: row.storage_message_id as number_row.size_bytes as numberD9row.uploader_id as number m as numberas number | null 2 F Wx  ( dFx!}|* if (!bytes`*?bytes*b .Dx~z8 "F8;L +6xOO, o.sizeBytes? y $hx *hsͪbt:᱓>'x2 *˓_.[], prefixes: [].'}); ^]x ,}u@J͓H>xـݼ8XD`6 38xy"sdOUuKZZqho'.xpL#)^kMnB3D: bucketRecord.itMQ;_GLpckparts match stored parts1q and correct ETags const sortedParts = [...parts].sort((a, b) => a.partNumber - b.partNumber); for (let i = 0; i < sortedPa>rts.length; i++) { if (sortedParts[i].partNumber !== i + 1='2qq0+ Parts must be ordered by part number.', /! 400 } const storedMap = new Map(u[p.partNumber, p]))3*Ustored = storedMap.get(part.partNumber); if (!stored || stored.etag !== part.etag='2q q2S The part might not have been uploaded, or the specified ETag might not match.', /! 400 qex Bg :fsOJHkx+tEΣNwS 8?Կ Sx:^㥬;ʄLBʑN }{x;$#W)>= ${prefix} AND s3_key < ${`${prefix}￿y k8x9pZޱ&ł]C(wBg :fsOJHhx`E:F x9pWNO|i.+\Pw.&=5SD0YWaHPx-`& &upload y\xMjiir~VVa2aͅ Fax  ( ' $zxQ=G@ѴwctHu^P Qd텰xh6君Ftw2naE.AL݅:fwH!%g9xQ 6lox '˫x100644 bot.ts:5ze840000 dbs bCb|Β1!100644 env.ts? Ԝy4iғ4100644 home.html]וq$sK](100644 index.ts]+{% gF8Oc40000 routes˟ 3|K`_:խc40000 utilsr6wDu '^-?x6:a"Iw7^&n3ođNX%8Ó#zXS%e|Sx$"h prefix}%`} a gOx$b 6x ^s H^ (x3$$b5Zo`oX if (? ( >9 Y isS3Request( 0 7. }, HEAD7 [ isS3Request( 0 7. }, DELETE7 [ isS3Request( 0 7. }, POS6 \ isS3Request( 0 7. } U 5,if (isS3Request(headers) || new URL(req.url)$ $p ק[]xy@u7EL#QϏqDnx qo͓b5B2 req: RequestR" p H// Presigned URLs: only supported for GET (verified in handleGetObject) z ) { if (method !== 'GET') {(]AccessDenied', 'Presigned URLs only supported for GET', pathname, 403 ! } else { const authResult =~ 2method, req.url, headers, null, REGION, ); (!".: 'Authentication required', pathname, 403 B  }? %?.url_1new Response(xml, { status: 200, headers:z$, 'x-amz-request-id': reqId }q;lLB)0, headers: { 'x-amz-request-id': reqId }v9B)0, headers: { 'x-amz-request-id': reqId }vM!PB+{ 'x-amz-request-id': reqId }W)#e;GuestUrl@7z ) { const presignedResult = "5url: requestUrl, method: 'GET', headers,  -7 '` '}); if (!presignedResult.isValid) {' presigned* 2$, /! 403  } $)B\ status: 302, headers: { Location: redirectUrl, 'x-amz-request-id': reqId }, ,B& status: 302, headers: { L 5", 'x-amz-request-id': reqId }, ?5B# status: 200, headers: { 0:'U:0:0: 50:/" 'x-amz-request-id': reqId, }q;B  }o==BX status: 200, headers: { etag: `"${hash}"`, 'x-amz-request-id': reqId }, ?ukMnB3D: bucketRecord.itMQ;_G+BO status: 200, headers: { etag: `"${hash}"`, 'x-amz-request-id': reqId }q;GAcopySource: stringHHMHUDOx1new Response(xml, { status: 200, headers:z$, 'x-amz-request-id': reqId }q;RB+{ 'x-amz-request-id': reqId }vR STGUӓV+1new Response(xml, { status: 200, headers:z$ , 'x-amz-request-id': reqId }, WYXz 1new Response(xml, { status: 200, headers:z$, 'x-amz-request-id': reqId }q;]]Y`Xz 1new Response(xml, { status: 200, headers:z$ , 'x-amz-request-id': reqId }, W"d@1new Response(xml, { status: 200, headers:z$, 'x-amz-request-id': reqId }q;fhWckPBO status: 200, headers: { etag: `"${etag}"`, 'x-amz-request-id': reqId }q;m, 1q1new Response(xml, { status: 200, headers:z$, 'x-amz-request-id': reqId }q;zB+{ 'x-amz-request-id': reqId }v|-1new Response(xml, { status: 200, headers:z$(, 'x-amz-request-id': reqId }, }); }; 1!Jx"+YYnG7G;:Ä&^;J ե xj100644 auth.ts 2JTL@tσ;^Y100644 object-stream.tsRfy6}R HuO:100644 range.ts:'J1җfnO100644 xml.ts-e7r]B%M{z8`3Nj8jl7x NM((wx, ! 9~$~xMN?({~ I=~ IwscapeXml(prefix.scapeXml(marker || ''j<%scapeXml(delimiter || '')} = {}* ...extraHeadersJ = Array.from(body.matchAll(/([^<]+)<\/Key>/g), (match) => match[1]);Xa1Dx?3 E>g+ z6S[40000 testf/cP+m”k.)wOxrX)ك>w쑆ex||;* Aij)P-f Telegram CDN rather than the raw object body. // The AWS SDK follows the redirect but the target (api.telegram.org) returns // non-XML, so the deserializer throws UnknownError. // We accept either a 200 with bod+y OR an error with 302 status. try { -/)/ 23l, } catch (e: any) { // 302 redirect is expected — that's how TeleUploader works expect(e.$metadata?.httpStatusCode).toBe(302); }s 0,`%&! &0,`%&x)1O *(via manual signer — AWS SDK adds extra signed headers // that may differ from what the server receives through Cloudflare, // causing a 403 SignatureDoesNotMatch. Multipart is verified in // test/production-e2e.test.ts using a manual Si gV4 signer.) 15*— verified in production-e2e.test.ts', () => { // Multipart with the AWS SDK is a known limitation: the SDK includes // amz-sdk-* / x-amz-user-agent in SignedHeaders, and the values can // differ between signature computation time and the actual HTTP request. // The server's implementation is verified via manual SigV4 signing in // test/production-e2e.test.ts (S3 API > Multipart upload).4V%,0]׳Kh> x::w@j0r&qWM)NsS+Ӗ}n^yӏMԩnBa0 ]xtт0:// Presigned URL: 200 (proxied body), 302 (redirect), or 403 (auth fail) if (r.status === 403) { console.warn('⚠️ Presigned URL returned 403 — verification mismatch'); } expect([200, 302, 403]).toContain(r.status); if (r.status === 200) { L:%o:1# } else if (r.status === 302) { @&location')).toBeTruthy(); }vD(E9-qlx a^T(64x?33sIj|%$X40000 test06$W*͎#.)$!Ix`JŅAޟ db4 v4 wx"+Yk5 hV2qbJMhZxi*V? Cl'x $x?3PQݲQS3h40000 test`&Tٝߕ1L[.)uR@x;46^Jq,g&dO@40000 utilsjS)) v/Nxy[ */0xYrXq #x>3 [ /i+R 5IfullUrl = `http://localhost/${bucket}/${key}?${searchParams.toString()}`;| 6 fullUrl, 'GET' Td!A3 Request has expired/` ,N"7Jg?nx"+YC|,rlQFdJ xi100644 auth.tsVS,\,LS+100644 range.ts:'J1җfnO100644 xml.ts(t1zy{x%:fk*('v0x`NGz searchParams: URLSearchParams=rams: string[] = []; const keys = Array.from(searchParams.keys()).sort(); for (const key of keys) { const values = searTchParams.getAll(key).sort(); for (const value of values) { params.push(`${Q key)}=${Q }`); } } return params3['authorization']; if (!authHeader || !authHeader) url: string,}ci"BqueryParams = Object.fromEntries(parsedUrl.searchParams.entries())TqueryParams['X-Amz-Algorithm']; const credential = queryParams['X-Amz-Credential'] = queryParams[P]; const signature = queryParams['X-Amz-Signature']; const expires = parseInt(queryParams['X-Amz-Expires'] || '0', 10); cConst amzDate = queryParams['X-Amz-Date']; if ( !algorithm ||Enj// Check expiration const dateObj = new Date( parseInt(amzDate.substring(0, 4), 10), parseInt(amzDate.substring(4, 6), 10) - 1, parseInt(amzDate.substring(6, 8), 10), parseInt(amzDate.substring(9, 11), 10), parseInt(amzDate.substring(11, 13), 10), parseInt(amzDate.substring(13, 15), 10), ); const expiresMs = expires * 1000; if (Date.now() > dateObj.getTime() + expiresMsWp +9const presignedAccessKey = credParts[0]; if (presignedA1u= const dateStamp = credParts[1] || amzDate.substring(0, 8); X: const sortedParams = new URLSearchParams(); const paramKeys = Object.keys(queryParams).sort(); for (const key of paramKefys) { if (key !== 'X-Amz-Signature') { sortedParams.append(key, queryParams[key]); } }:bsortedParams); // Build canonical headers for presigned URL — only 'host' is typically signedW"hA) => `${h.toLowerCase()}:${h === 'host' ? parsedUrl.host : ''}\n`#"hashedPayload = 'UNSIGNED-PAYLOAD'# bm$D $*s3/aws4_request$i%f   w& }&T['authorization']/'9tmipxBGG".authorization; if (!authHeader?E.authorizationq#9.?x! h;TICo5.b$ x!-  &'GET'}); Smx?3Z6v%dB=40000 testx?tE.)b`_x_{|F?ET(}0x"+Y>㜾+.sdCJI=xE100644 auth.tsVS,\,LS+100644 xml.ts(t1zy{x%:fktZGl]x  $x ߣt?p&8,cЬAx&40000 superpowersn1O~ g<?h1x@40000 plans@=4]KFn'140000 specs}A>"ә欍jj%g:xq[x 0f V9/tb%6^<{ݣ ?x&40000 superpowersOvi`cȉXu)wڠx@40000 plans@=4]KFn'140000 specs;X瞨. ښzA%gx Ex?3,=vgcC)³o40000 test3hnY@].)ãsx100644 bot.ts:5ze840000 db_~]_Jۅ:100644 env.ts? Ԝy4iғ4100644 home.htmlz 2EA^100644 index.tsme(3qM3 k40000 routesXˀrg' '40000 utils-YQ*PnFlpx8W_x 100644 buckets.tsT}f9+PֲɈDF100644 files-ext.tsA#*O8_L100644 files.tsj r#}'I{100644 index.tsvQfzZ x.v100644 migrate.tse<'h-O]jZA100644 multipart.ts8v\fJFY69100644 schema.ts:b% /O' fMx6)h M)hIK)) xx4$"import { eq, ande prefix + '%'} ah!x *CBGratx,M#!b 8{ xJ|z;* Aij) k onclick="4 onclick="1>'./' + _c~ w part + '/' +\;` x.$$>y,- /&ғ5l  *bxSX4_ :`歷zRBm\,100644 s3.tsj sJpnbi_B^mǕ{.a-Z4Y$$hx+Y!import.meta.dir + '/../home.html'z92x import { verifySignature, '!listBucketsXml, s3ErrorResponse]%V26/ PartsXml, ^e*, deleteResultXml, copyObjectResultXml#Vr, deleteBucket%c/GaP{D !M:import {;., cleanupTempFilh!3)$Ygv\px_OOMr, deleteBucket$A $ +-!:import {^., cleanupTempFil!3!%l!*x"+Y`hQ95nXJ>xE100644 auth.tsWmy!s1=/100644 xml.ts7ޮ&;;?kQqWx_:8vdL gf ND JeEe&C; sdk.test.tsp}$\V4QPfd-k(4;x\тdescribe, expect, it, afterAll, L'AWS4' + secretf$,C //5 body?: Uint8Array;- Q !u (method, url.host, url.pathname, payloadHash, opts.headersI_I+ } catch { /* best-effort */ } } }); ! await r.json(,Q@! await r.json(ifdQ@ await r.json(, await r.json(p+ ,-Q@' ?.(m057E7NM?JuKGx1(import { describe, expect, it, beforeAll(+ rdxub^ f%stored content (proxied from Telegram23@$f21M expect(ETag).toBeTruthy();fy0x?3N>ƍ?Dg%P)`ҹ}40000 test٠MMfux]+Ak.)Ox6Mg"Y ԊD.oaV:.C?$+Ȅy(tcЈ  Dx Gs H^ cxy)4[20*q^sxe$k?.^ + headers: { %23??)6k?.^ + headers: { %23?/G< [x::l>lXAu `N2OQ!B;;Tje5$zhe 6xa/(redirects to Telegram%< =.,2(k: y:-;)B; + f)K) should return 302 (redirect to Telegram)9q:5;)B; o;I`Y6M%xW100644 .dockerignoremm=BP<\J5Ӫ1>100644 .env.exampleG@ѴwctHu^P 100644 .gitignore=k;FIyR100644 CLAUDE.md,{ϯqMC46d 100644 docker-compose.ymld텰xh6君Ft40000 docs0f V9/tb%6^<{100644 package.json*hW)A܏Uhm$T100644 schema.sqlR 1me(e6Q740000 srcN>ƍ?Dg%P)`ҹ}40000 test-yR˩6$6t100644 tsconfig.json\/qj[]; rowCount: number; }.rows[0]rows0.rows[0]rows^ *[rowCount; rows.length > 0; }; fB\ )x-$#import { eq, ande prefix + '%'} { rows:} .rowsK @rows O{ rows: }; return result.rows<keys: string[], _{ rows: }; return Number(result.rows- Fbx!##, keys: string[]Ԕ xC$,M#!binterface QueryResult { rows: owCount: numberQueryResult; if (result.rows..rows[0]!QueryResult; return result.rows +r.size_bytes as number YC8x$ Home P   o$x#U ''xy100644 .dockerignoremm=BP<\J5Ӫ1>100644 .env.exampleR]KP}40000 .github|(fS*100644 .gitignore=k;FIyR100644 CLAUDE.md,{ϯqMC46d 100644 docker-compose.ymlY3Fp^EVtn40000 docs+{ȢØdl^100644 package.jsonE%>x XXG100644 schema.sql"W,8Q40000 src1G[4nu6or40000 test %nnKM* 100644 tsconfig.json\/s x;=G@ѴwctHu^P s>0f V9/tb%6^<{100644 package.jsonA6"ot-z100644 schema.sqlR 1me(e6Q740000 srcdS .(G:o 40000 test;nb`fhKD@xP)QOSx?3=J1lC#kĿLp40000 test"դH0Bh.)c-2x {Ay:Ax uFѲ/ylDK؊H3w@x:޿f>(+^ȒN -x:3pw sI '/', 405 O'MethodNotAllowed', > `/${bucket}`, 405{'MethodNotAllowed', >Y 405, reqId'InternalError',o7 pathname, 500, reqId); }+'InvalidBucketName',QC,is not valid.', `/${bucketName}`, 400, reqIdxk'BucketAlreadyExists',/ `/${bucketName}`, 409, reqIdj?'NoSuchBucket',QC(# `/${bucketName}`, 404, reqId); }'I`='NoSuchBucket',QC( `/${bucketName}`, 404, reqIdp'BucketNotEmpty',H0 `/${bucketName}`, 409, reqId-( W A)T-0 #fullUrl, 'GET', config.s3AccessKey,A  REGION!D&'AccessDenied', 'Request has expired',Y 403, reqId!Y'NoSuchBucket',QC(Y 404, reqId"S 'NoSuchKey',^9%Y 404, reqId# file: File, -(L_ %'InternalError',x&"Y 500$4&'NoSuchBucket',QC(Y 404, reqId"S 'NoSuchKey',^9%Y 404, reqId)$-pN$*U'etag'*<+-( W,! req: Request, A5!='NoSuchBucket',QC(Y 404, reqIdN-const formData = await req.formData(); const fileField = formData.get('file'); const file = fileField instanceof File ? fil9eField : null; if (!file) { // Direct body upload ..*./( t/,/r(etag'-6* }); } 10H reqId); } Sawait file.arrayBuffer()),/bN/etag'-6*'0-bY0 0/*buffer: Buffer, hash: string, key: string,0, A/_1fileName, signatureBuffer,/2'etag'-6VF_destBucket: string, destKey: string, copySource: string, destBucketId@(97 'NoSuchBucket',QC( copySource, 404, reqId8k 'NoSuchKey',^9% copySource, 404, reqId03^:-('NoSuchBucket',QC(Y 404, reqId>bucket: string, bod?(}'NoSuchBucket',QC( `/${bucket}`, 404, reqId@DAsBatch>s);UAkeys.slice(0, deleted)Abucket: string,W A5!='NoSuchBucket',QC( `/${bucket}`, 404, reqIdC_ prefix, delimiter, maxKeys,5E0L=qL"/F+bucket: string,W A5!='NoSuchBucket',QC( `/${bucket}`, 404, reqIdCғgJ prefix, delimiter, maxKeys,uK0L=qL-(_ W A5!='NoSuchBucket',QC(Y 404, reqIdP9-( W req: Request, A/_2}R'NoSuchUpload',0X(Y 404, reqIdS'etag'Vc-( W bod?(:_'NoSuchUpload',0X(Y 404, reqIdX'InvalidPart',hY3Y 400, reqIdY-( W A/_'NoSuchUpload',0X(Y 404, reqId`-( W A/_'NoSuchUpload',0X(Y 404, reqIdX%$b' x DPresigned URLs: only supported for GET (verified in handleGetObject)a2 if (method !"%Presigned URLs only supported for GET # elseU!I// Read raw body — S3 clients send raw binary, not multipart/form-data **)+(Kconst contentType = headers['content-type'] || 'application/octet-stream'; Q+(-ѓq,% contentType . contentType:9. contentTypeOYL0 ?Keys: string[] = []; for (const key of keys) { const ok =;/$ if (ok) deletedKeys.push(key); }= deletedKeys=2!dKxON} softDeleteFile, sW _U prefix, delimiter, maxKeys, i % $  3 >Do] 201  __ $-objec* 8"_ $-N# :$/#L$4$ &0 %7&,fQex &?7Lmq MߏWC ĥxE100644 auth.tsWmy!s1=/100644 xml.tszALRS`5X=[!"쓂'+x?B'GET', 'http://localhost/', {}, null, 'key', 'secret', 'us-east-1' 䓇N'GET', 'http://localhost/', headers, null, 'correctkey', 'secret', 'us-east-1' NhK'GET', 'http://localhost/', headers, null, 'testkey', 'secret', 'us-east-1' N./ U $ 'GET', 'key', 'secret', 'us-east-1' d}); #c|.x{ sizeBytes: 100, etag: 'abc',0N }+{ key: 'a.txt', sizeBytes: 50, etag: 'def',0N }x_!); expect(Z'@F'40000 routesk#)&suo*40000 utilsfrhTE=f{f4܌ _xxnibH2h~i 9x 7const schemaSql = await Bun.file('schema.sql').text(); ~7try { !-0P!} finally { await sql.end(); } /){ldx  !%xTX5ٯ ڛDsK^100644 s3.tshv;H -+W2ב]S޸4NWde(DnzxY'srco&Sk3xV=G@ѴwctHu^P s2R 1me(e6Q740000 srcXȉ׏:BbIdq1H`&ex90f V9/tb%6^<{X-+!~LxLaڱH_Gx dS .(G:o Hulfx O!oDxQ .B,x 9 uY~qH x9100644 bot.ts:5ze840000 db׸Nwϋ)єii 100644 env.tsg"Y ԊD.o100644 index.tsvU7+{JM¾: 40000 routes>T6@|EjR140000 utilsfrhTE=f{f4܌ TxVʳ]RLCi6x Ps6K x9100644 bot.ts:5ze840000 db׸Nwϋ)єii 100644 env.tsg"Y ԊD.o100644 index.tsvU7+{JM¾: 40000 routeskr7v*[%z Qk40000 utilsfrhTE=f{f4܌ 5Qfjx Px YySB>oPYH7^x;4S3/? >+.M40000 utils!z&4?goW\kJxfrhTE=f{f4܌ y i x QrC x LqPC|q#A XfʀH [px r.&ӎ@IͿڭBxE100644 auth.ts%JrQky4#I([100644 xml.ts,̅5'fr0mSxxGD return uri\ R*parsed._] G`${h}:host\n`) .join(''?Str = signedHeaders; L= LStr 5)x(==RlB''" }, })"l wx vg^6~ȰRՓHw%'x<&/ު:EM ?jx :Dx<+{ȢØdl^100644 package.jsonE%>x XXG03FO$HޮX1h[.vv)40000 test %nnKM* .)l4x&40000 superpowers}&,fek,zjx@40000 plans%[Ͻ_$?@3ܡK40000 specsXk*2&⩃>Lu2C:+f\xf+x x9100644 bot.ts:5ze840000 dbxg!N<73'MUy$100644 env.tsg"Y ԊD.o100644 index.tsvU7+{JM¾: 40000 routesS3/? >+.M40000 utils<&/ު:EM =NR2x#interface QueryResult { %rowCount: number; } 6// Use raw SQL for the complex prefix/startAfter query  QueryResult 7// It's under a subfolder — extract the folder prefix\ M// It's a direct child object objects.push({ ...row, V+8 s3Key: s3Key, } as unknown as S3FileRecord@ !3 (row) => ({ ...row, V+ }%' }) as unknown as S3FileRecord,  & QueryResult[ QueryResult2ƞ Rx+98ܐ+)JƲCF? ax&Nuschema.tsZ/W6{+{ȢØdl^ɓ:2"W,8Q40000 src1G[4nu6orHw20gwx yg8x   x9100644 bot.ts:5ze840000 db98ܐ+)JƲCF100644 env.ts_29;{:Na100644 index.tsvU7+{JM¾: 40000 routesS3/? >+.M40000 utils<&/ު:EM ?]Nix` }, }); zdx$40000 workflows@V+f:x-100644 notify-parent.ymly2T@L0I4nv˳%xSname: Notify Parent Repo on: push: branches: - main jobs: dispatch: runs-on: ubuntu-latest steps: - name: Trigger monorepo build uses: peter-evans/repository-dispatch@v3 with: token: ${{ secrets.DISPATCH_TOKEN }} repository: MythEclipse/ultimate-asepharyana.tech event-type: submodule-updated client-payload: | { "service": "teleuploader", "ref": "${{ github.ref }}", "sha": "${{ github.sha }}", "actor": "${{ github.actor }}" } \~xu=w6ꂘND4M*CRQQY `X.340000 src |R8[ſk( 40000 testĀt1}mop/ ̓P)3Qglx_ -xs !+file_hash VARCHAR-archive_-!--+-archive_mime_type VARCHAR-archive_size_bytes BIGINT; & b,Ԧ x9100644 bot.ts_WT)ίD UuD40000 db98ܐ+)JƲCF100644 env.ts_29;{:Na100644 index.tsPIYprImw&`iZITO40000 routesʳEͦmp>e40000 utilsI F'&H#`ywM}*x## ճ cvx! T@'B]" + 2H  xk100644 files.tsqUd_T+,C100644 health.ts)pvr'*C100644 swagger.ts5O%& )?T100644 upload.tso`9W%M9lax &&68 /x7100644 botHealth.ts\,V{nPiCNw100644 cache.ts9AƾqGXR100644 file.tsŁ8?_Ń Zr100644 ip.tsMW ]'5gf100644 logger.ts fc{_5>r(100644 metrics.tsXgT*9A t\ '100644 rateLimit.tshCt|=xZ+100644 retry.tsӯIX!drhHDO100644 telegram.tsn~0] -Sb)100644 telegramQueue.tsn&Imh3 |100644 uploadBatcher.tsK*r<~`100644 zip.tssbcLft KPŦUxW:a Z4(V`ND6ˊvmjY "׾100644 zip.ts҈jšL B^bݢ&x# import logger from './logger'; interface BotHealth { index: number; isHealthy: boolean; rateLimitedUntil: number; failureCount: number; successCount: number; lastUsed: number; } class BotHealthTracker { private botHealth: Map = new Map(); private totalBots: number; constructor(totalBots: number) { this.totalBots = totalBots; for (let i = 0; i < totalBots; i++) { this.botHealth.set(i, { index: i, isHealthy: true, rateLimitedUntil: 0, failureCount: 0, successCount: 0, lastUsed: 0, }); } } recordSuccess(botIndex: number): void { const health = this.botHealth.get(botIndex); if (health) { health.successCount++; health.failureCount = 0; health.isHealthy = true; health.lastUsed = Date.now(); } } recordFailure(botIndex: number, retryAfterSeconds?: number): void { const health = this.botHealth.get(botIndex); if (health) { health.failureCount++; health.lastUsed = Date.now(); if (retryAfterSeconds) { health.rateLimitedUntil = Date.now() + retryAfterSeconds * 1000; health.isHealthy = false; logger.warn('Bot rate limited', { botIndex, retryAfter: retryAfterSeconds, }); } else if (health.failureCount >= 3) { health.isHealthy = false; logger.warn('Bot marked unhealthy', { botIndex, failures: health.failureCount }); } } } getHealthiestBot(): number { const now = Date.now(); let bestBot = 0; let bestScore = -Infinity; for (let i = 0; i < this.totalBots; i++) { const health = this.botHealth.get(i)!; // Skip rate-limited bots if (health.rateLimitedUntil > now) { continue; } // Calculate score: prefer healthy bots with fewer failures and more successes const score = (health.isHealthy ? 100 : 0) + health.successCount - health.failureCount * 10 - (now - health.lastUsed) / 1000; if (score > bestScore) { bestScore = score; bestBot = i; } } return bestBot; } getStats() { const stats = { healthy: 0, rateLimited: 0, unhealthy: 0, bots: [] as any[], }; const now = Date.now(); for (const health of this.botHealth.values()) { if (health.rateLimitedUntil > now) { stats.rateLimited++; } else if (health.isHealthy) { stats.healthy++; } else { stats.unhealthy++; } stats.bots.push({ index: health.index, healthy: health.isHealthy, rateLimitedUntil: health.rateLimitedUntil > now ? health.rateLimitedUntil - now : 0, failures: health.failureCount, successes: health.successCount, }); } return stats; } reset(): void { for (const health of this.botHealth.values()) { health.isHealthy = true; health.rateLimitedUntil = 0; health.failureCount = 0; health.successCount = 0; } } } export { BotHealthTracker }; U-x74VU:zKhy LxM8 ] }); // If not production, also log to console if (w%) { logger.add(qWr$ F winston.format.simple() ) })); } export default logger; _6bBxq,, ],jConsole({ p!?winston.format.colorize(), winston.format.simple()), }),  )#k-x @@41"} $xi;*2y? YȠN 100644 bot.test.tsG *ԤDM;LET9`r CY.H+@=2 \'_;f PxqEmD2b _E%x8@6LL?p!5ıT8ӖvՑ Z0Qԓlx dV"x 3L30); }); }); } lx //f~j%%xT100644 .dockerignoremm=BP<\J5Ӫ1>100644 .env.example /ϐݠD,'40000 .github=q1W6# .100644 .gitignore=k;FIyR100644 CLAUDE.md,{ϯqMCx XXG100644 schema.sqlY `X.340000 src`+ M(,V40000 test dq r=8100644 tsconfig.json\/Tax8_|(fS*ٱsiȖP9( H0kk GxX=w6ꂘND4M*CRQg%'pj[C d3B3B8N,Hf40000 docs+{ȢØdl^ɓX3R!l?hXO$|)s40000 testĀt1}mop/ ̓+)Z-Ixxrversion: '3.8' .image: ghcr.io/mytheclipse/teleuploader:latestJ/curl -sf http://localhost:3000/health || exit 1 tech1lx $ l x9100644 bot.ts_WT)ίD UuD40000 db98ܐ+)JƲCF100644 env.ts|7p"oC%j׆^:lGx ;;B N &~x(DDa`}\ A:Px&%=m>Mx@>{ result, botToken } = awaitL( async (activeBot, activeToken) => ({ result:u13, botToken: activeToken, }), ); *TelegramFileInfo; return { 0<C+bot_token: botTokenB get file infoV{iRV%xT100644 .dockerignoremm=BP<\J5Ӫ1>100644 .env.example /ϐݠD,'40000 .github|(fS*100644 .gitignore=k;FIyR100644 CLAUDE.md,{ϯqMCx XXG100644 schema.sqlY `X.340000 srciȖP9(40000 test+VXJX[)-4)m-100644 tsconfig.json\/|nwxtech.Dx tech techZ)i ~l-x  #nx&40000 superpowersUNxD騥=˓Hx@40000 plansxIeXNr %+UP40000 specsz3uD>On=x64y GkLJ[κxw=H!CM:Ex78+Y]2يM92L+]TCo2{Nzq+lLx !  1xg><4()# \1keyof Telegraf['telegram'] 3K 1  - $!^x mۤ%tS% 9قX/x7_cG|M{Ӗʲs 0eq qꇖJSWI(ͤx$40000 workflows&M1!/}7H\2w~[UU RxS100644 deploy.ymlo1!<XN1100644 notify-parent.ymly2T@L0I4#޵x%name: Deploy TeleUploader on: push: branches: - main permissions: contents: read packages: write jobs: test: runs-on: ubuntu-latest steps: - name: Checkout repository uses: actions/checkout@v4 - name: Setup Bun uses: oven-sh/setup-bun@v2 with: bun-version: latest - name: Install dependencies run: bun install --frozen-lockfile - name: Run Tests env: BOT_TOKEN: "mock_token" STORAGE_CHANNEL_ID: "123456" BASE_URL: "http://localhost:3000" DATABASE_URL: "postgresql://postgres:postgres@localhost:5432/postgres" PORT: "3000" run: bun run test build-and-push: needs: test runs-on: ubuntu-latest steps: - name: Checkout repository uses: actions/checkout@v4 - name: Log in to GitHub Container Registry uses: docker/login-action@v3 with: registry: ghcr.io username: ${{ github.actor }} password: ${{ secrets.GITHUB_TOKEN }} - name: Build and Push Docker image uses: docker/build-push-action@v5 with: context: . push: true tags: ghcr.io/mytheclipse/teleuploader:latest deploy: needs: build-and-push runs-on: ubuntu-latest steps: - name: Deploy to VPS via SSH uses: appleboy/ssh-action@v1.0.3 with: host: 45.127.35.244 username: root key: ${{ secrets.SSH_PRIVATE_KEY }} script: | mkdir -p /opt/teleuploader cd /opt/teleuploader # Log in to GHCR on VPS echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u ${{ github.actor }} --password-stdin # Write dynamic docker-compose.yml cat << 'EOF' > docker-compose.yml version: '3.8' services: app: image: ghcr.io/mytheclipse/teleuploader:latest container_name: teleuploader-app restart: always environment: - BOT_TOKEN=${BOT_TOKEN} - STORAGE_CHANNEL_ID=${STORAGE_CHANNEL_ID} - BASE_URL=${BASE_URL} - DATABASE_URL=${DATABASE_URL} - PORT=3000 - NODE_ENV=production - LOG_LEVEL=info networks: - app-shared-net labels: - "traefik.enable=true" - "traefik.http.routers.teleuploader.rule=Host(`upload.asepharyana.tech`)" - "traefik.http.routers.teleuploader.entrypoints=websecure" - "traefik.http.routers.teleuploader.tls=true" - "traefik.http.routers.teleuploader.tls.certresolver=letsencrypt" - "traefik.http.services.teleuploader.loadbalancer.server.port=3000" networks: app-shared-net: name: app-shared-net external: true EOF # Write .env file from secrets cat << EOF > .env BOT_TOKEN=${{ secrets.BOT_TOKEN }} STORAGE_CHANNEL_ID=${{ secrets.STORAGE_CHANNEL_ID }} BASE_URL=${{ secrets.BASE_URL }} DATABASE_URL=${{ secrets.DATABASE_URL }} PORT=3000 EOF # Pull latest docker image docker compose pull # Run DB migrations docker compose run --rm app bun run db:migrate # Start service docker compose up -d 3xtname: Build and Test) pull_request%OXconcurrency: group: ${{ github.workflow }}-${{ github.ref }} cancel-in-progress: truqOY21a0x_F ˌaNLXuqsx$40000 workflows4j#Y|Ő+}+ń*@xS100644 deploy.ymlݗgiW:'7 }n100644 notify-parent.ymly2T@L0I4`z#+x$40000 workflows9}qG؉l3?ƪZ x&100644 deploy.ymlݗgiW:'7 }navx  letsencrypt 'xXmۤ%tS% 9قw3Ke^9a:)40000 testӅ'a.^$+)eq)Gx;44r2 )ײB[40000 utils4:4r0%wjt xk100644 files.tsT\@k&;/j6R100644 health.ts)pvr'*C100644 swagger.tsRH 5i1 !100644 upload.ts ?.녹N/6>u:bxk;;B N 0Proxies file from Telegram storage as a streamedfp)binary stream.'q. /E'xb\^R-朊Jɜk[GԞɅC?lD]A*$k] '100644 swagger.test.tsU3 -=1t=*@xXm75m.#Cйضw3.kNZC`Gm:40000 test̀ށ\rl"$1+)D)Jx)ő letsencrypt5}Hۦ x9100644 bot.ts_WT)ίD UuD40000 db98ܐ+)JƲCF100644 env.ts,ӳ5)(-[?100644 index.tsYDe.|~8`P40000 routes&~comJZ]=,40000 utils!?ϭULtU_)N x  ( ~ ? [] : "$ || '') .split(',') . H58Int !, 10) || 60000Int$ !, 10) || 30 ?G ...config, botToken: `${config.botToken?.substring(0, 10)}...` }, }); f9wyx[$ T@'Y handleUpload+  FileRedirect3 FileInfo!s "+2/ xk100644 files.ts]]=]{ºG100644 health.ts)pvr'*C100644 swagger.tsN#FP7hfuXSS100644 upload.ts!jw_p9o>=dx#&"x)checkRateLimit } from '../utils/rateLimit?8extract}/yconst ip = req.headers.get('x-forwarded-for') || '127.0.0.1'; if (!public_id || !checkRateLimit(ip)) { return Respon/{ error: 'Rate limit exceeded' }, { status: 429z(S,{ error: 'File not found' }, { status: 404 }s*{ error: 'Server error' }, { status: 500 } archiveBuffer = Buffer.from(await archiveResponse.arrayBuffer()); const extractedFile = await extractZipEntry(archiveBuff/er, archiveEntryName); if (!extractedFile " C_{ error: 'File not found' }, { status: 404 }); } return new Response(extractedFilec S <file.fileName.replace(/"/g, ''4)extractedFile.byteLb*{ error: 'Server error' }, { status: 500 }$+{ error: 'Missing file id' }, { status: 400z(S4{ error: 'File not found' }, { status: 404 }); }uploader_id: file.uploaderIdwٓ4{ error: 'Server error' }, { status: 500 }); } }; JNEx9D< j>  /p Zxe[u:?ZaCq$bZF_Gt-<wG6lӓcb։U~I|4iƸHvoL100644 uploadBatcher.tsgݒ۱43G7eN{100644 zip.ts09ռ:fKżHs1w.=nB0xM I %// Simple sliding window rate limiterhWINDOW_SIZE_MS = 60000; // 1 minute window const MAX_REQUESTS_PER_WINDOW = 100; // 100 requests per minute per IP export constTt0// No entry or window expired - create new entry.AWINDOW_SIZE_MSj"G// Check if limit exceeded if (entry.count >= MAX_REQUESTS_PER_WINDOWb// Increment counter2.G 0Number.POSITIVE_INFINITYQ%d txC7HN@@* >> 0m"for (const chunk of chunks) { chunk); }A KOx{$U]4e{"C?~cM0bR !RB 100644 swagger.test.ts  EosoL?r8wtsMԝ{N PVn8';'91"Fx*64Kuploader_id: numberGrateLimit const mockCheckRateLimit = mock(() => true); mock.module('../src/utils/rateLimit', () => ({ checkRateLimit: mockCheckRateLimit, })#'CheckRateLimitUV >29 if rate limit is exceeded CheckRateLimifalse);oV2 29 YRate limit exceeded'")B .redirect to telegram file url if file is found " 302);O/U( 'https://api.telegram.org/file/bot123456:ABC-DEF/photos/file_0.jpg', Oif file is found-[ uploader_i/%jz *}); }); 7xM "// @ts-nocheck import { afterEach,!, spyOn) logger from '../src/utils/logger:1#;// Spy on logger.warn const warnSpy = spyOn(logger, 'warn')=warnSpy.mockClear/ways allow requests as rate limiter is disabled<%%    warnSpy).not.toHaveBeenCalledno-op on cleanup', () => {)@}); q]ximport {"4P> xY  } }L['/api/upload']P*" 'multipart/form-data', ['/api/upload']P?}); Na5b+xrF@ 000b08000100telegram_file_id: string; tconst mockGetFil`',file_size: 1000, mime_type: 'image/jpeg'GetFile# XGetFile { ~telegram_file_id).toBe('tg-file.).toBe('tg-unique-id-abcQ/ 8   N telegram_filetg-idQ tg-uniqueQ/K* telegram_file R/f$#/cw7yxXm%}5 v=U[w3.kNZC`Gm:40000 test̀ށ\rl"$1+)5)kzxwversion: '3.8' .image: ghcr.io/mytheclipse/teleuploader:latestrȴtech`)`- letsencrypt`5 H+gxvm%}5 v=U[YQB#4 ρ540000 srcҟg ex }ӂk40000 utils})Уisfz-*vbMK0 xk100644 files.tsm8yd3pv э100644 health.ts)pvr'*C100644 swagger.tsN#FP7hfuXSS100644 upload.ts19|(Q(8s;Hnx+ZxKG0 unlinkSync,s, getBothFtype TelegramFileLookup = { mime_type?: string; file_size?: numberyfileBuffer: Buffer*C& cc$ tempPath);A); const bot = getBot(); const fileInfo = (await bot.telegram.getFile(result.telegramFileId)) as TelegramFileLookup; fileInfo.mime_type ||: { try { unlinkSync(tempPath); } catch {} }, 50.a\ Fawait file.arrayBuffer(); const fileBuffer = Buffer.from(fileBytes%uffer“filqv fileBuffer0!! fileBuffer "C"3\^! fileBytes "C"Z "Dx00: } from 'node:fs'; import { unlink } from 'node:fs/promise4h! A=.async () => { try { await unlink (err) { logger.warn('Failed to cleanup temp file', { tempPath, error: getErrorMessage(err) }); } }, 500); } PV+xd8'-L xRJqRLZ3h:RAw?@@V_,Y /a'LZ=X-*؂u}y"GC*2x3 T() => { a->} }, 5 * 60 * 1000V_ GxA () => {  5E &m + < . 2}); }, 5 * 60 * 1000V !Oj|xkD>-y/ C" activeBot.telegram.getFile(telegramFileId), ); const fileData = result as unknown as TelegramFileInfo; retu Data.file_size || 0, mime_type: fileData.mime_type || 'application/octet-stream', file_path: fileData.file_path || ''q!哣B export const getCurrentBotIndex = (): number => currentBotIndex; [+|> x-'NW|ݟ0ad/ [בB9D%7aqR-_100644 docker-compose.yml%}5 v=U[3]DW_pS'wэI100644 schema.sqlB#4 ρ540000 srcF!Y7 ;ԡ e/100644 health.ts)pvr'*C100644 swagger.tsN#FP7hfuXSS100644 upload.tsI&Xw`uŎifg $;/xr(100644 rateLimit.tstZl.A<}*100644 telegram.ts[ڂcc100644 telegramQueue.ts.QE5LfYڇ F]MPx,Y /a'LZ=X, x? =_\]F,// No-op karena rate limit dinonaktifkan }; {C!x^S task(); }; Dx-'NW|ݟ0ad/ [בB9D%7aqR-_100644 docker-compose.yml%}5 v=U[3]DW_pS'wэI100644 schema.sqlZwjb{}(TT40000 srcEoKƸfռ,V40000 testErG{ښ#100644 t3!ce'yx?3ކKF9TG?K40000 testxvA],EZ1i8gAH/+)8kjx $hmw xk100644 files.tsH%7jNND㦪j100644 health.ts)pvr'*C100644 swagger.tsN#FP7hfuXSS100644 upload.ts$IEt2_!<xxZ 100644 env.ts#/|Z+<%$Y c100644 index.tsYDe.|~8`P40000 routes6hNw&_vfZҸ40000 utilsL 0wq(¨ :^MLSx3M,ӳ5)(-[?aQҺ +x7ӥIV.Bx؇F7:qGݑ TMxJ)!&  @xo100644 index.tsvQfzZ x.v100644 migrate.tsR7Aq2JfJP100644 schema.ts&[xĿB?|7+ xV Iz 7const schemaSql = await Bun.file('schema.sql').text(); ~7try { !-} catch (error: any) { .5error.message }); !} finally { await sql.end(); } '7 xk100644 files.ts5z\AUhP)=*7100644 health.ts F97MZC100644 swagger.ts읩.{S Kc100644 upload.tsah_ :=!x=%px툭sBJ 綥xV import { eq } from 'drizzle-orm'; import { db, files as fileSchema } from '../db'; import logger from '../utils/logger'; import { checkRateLimit } from '../utils/rateLimit'; type RequestWithParams = Request & { params?: { public_id?: string; }; }; export const handleFileRedirect = async (req: RequestWithParams): Promise => { const public_id = req.params?.public_id; try { const ip = req.headers.get('x-forwarded-for') || '127.0.0.1'; if (!public_id || !checkRateLimit(ip)) { return Response.json({ error: 'Rate limit exceeded' }, { status: 429 }); } const result = await db .select() .from(fileSchema) .where(eq(fileSchema.publicId, public_id)) .limit(1); if (!result.length) { logger.warn('File not found', { public_id }); return Response.json({ error: 'File not found' }, { status: 404 }); } const file = result[0]; const { getBot } = await import('../utils/telegram'); const bot = getBot(); const fileInfo = await bot.telegram.getFile(file.telegramFileId); const redirectUrl = `https://api.telegram.org/file/bot${process.env.BOT_TOKEN}/${fileInfo.file_path}`; return new Response(null, { status: 302, headers: { Location: redirectUrl, }, }); } catch (error: any) { logger.error('File redirect error', { public_id, error: error.message }); return Response.json({ error: 'Server error' }, { status: 500 }); } }; export const handleFileInfo = async (req: RequestWithParams): Promise => { const public_id = req.params?.public_id; try { if (!public_id) { return Response.json({ error: 'Missing file id' }, { status: 400 }); } const result = await db .select() .from(fileSchema) .where(eq(fileSchema.publicId, public_id)) .limit(1); if (!result.length) { logger.warn('File not found', { public_id }); return Response.json({ error: 'File not found' }, { status: 404 }); } const file = result[0]; return Response.json( { public_id: file.publicId, file_name: file.fileName, mime_type: file.mimeType, size_bytes: file.sizeBytes, file_type: file.fileType, uploader_id: file.uploaderId, created_at: typeof file.createdAt === 'string' ? file.createdAt : (file.createdAt as Date).toISOString(), }, { status: 200 }, ); } catch (error: any) { logger.error('File info error', { public_id, error: error.message }); return Response.json({ error: 'Server error' }, { status: 500 }); } }; < dx= import { sql "B7Health = async (_req: RequestA+try { await db.execute(sql`SELECT 1`); status: 'ok' }, { status: 200 0Health check failed', { 5status: 'error' ; O>Ixf$import { createReadStream, unlinkSync } from 'node:fs'; import { eq } from 'drizzle-orm'; import { nanoid } from 'nanoid'; import { db, files as fileSchema } from '../db'; import { config } from '../env'; import { checkFileSize, computeHash, ensureExtension, extractMimeType, getFileType, } from '../utils/file'; import logger from '../utils/logger'; import { forwardToStorage, getBot } from '../utils/telegram'; export const handleUpload = async (req: Request): Promise => { try { const contentType = req.headers.get('content-type') || ''; if (contentType.includes('multipart/form-data')) { return handleMultipartUpload(req); } else if (contentType.includes('application/json')) { return handleJSONUpload(req); } return Response.json( { error: 'Unsupported content type. Use multipart/form-data or application/json' }, { status: 400 }, ); } catch (error: any) { logger.error('Upload error', { error: error.message }); return Response.json({ error: error.message }, { status: 500 }); } }; const handleMultipartUpload = async (req: Request): Promise => { let tempPath = ''; try { const formData = await req.formData(); const file = formData.get('file'); const fileName = (formData.get('fileName') as string) || (file instanceof File ? file.name : null) || 'file'; if (!file || !(file instanceof File)) { return Response.json({ error: 'No file provided' }, { status: 400 }); } const fileBytes = await file.arrayBuffer(); const fileBuffer = Buffer.from(fileBytes); const hash = computeHash(fileBuffer); // Check for duplicate in DB const existing = await db .select() .from(fileSchema) .where(eq(fileSchema.fileHash, hash)) .limit(1); if (existing.length > 0) { const existingFile = existing[0]; const responsePayload = { public_id: existingFile.publicId, telegram_file_id: existingFile.telegramFileId, telegram_file_unique_id: existingFile.telegramFileUniqueId, storage_chat_id: existingFile.storageChatId, storage_message_id: existingFile.storageMessageId, file_name: existingFile.fileName, mime_type: existingFile.mimeType, size_bytes: existingFile.sizeBytes, file_type: existingFile.fileType, uploader_id: existingFile.uploaderId, created_at: existingFile.createdAt instanceof Date ? existingFile.createdAt.toISOString() : new Date(existingFile.createdAt).toISOString(), download_url: `${config.baseUrl}/f/${existingFile.publicId}`, }; return Response.json(responsePayload, { status: 200 }); } const rawMimeType = file.type || extractMimeType({}, req) || 'application/octet-stream'; const { fileName: finalFileName, mimeType } = ensureExtension( fileName, fileBuffer, rawMimeType, ); const fileType = getFileType(mimeType, finalFileName); if (!checkFileSize(fileBuffer.byteLength, fileType)) { return Response.json({ error: `File size exceeds ${fileType} limit` }, { status: 400 }); } // Write file to disk temporarily tempPath = `/tmp/teleuploader-${nanoid()}`; await Bun.write(tempPath, fileBuffer); const fileStream = createReadStream(tempPath); const result = await forwardToStorage(fileStream, finalFileName, fileType); const bot = getBot(); const fileInfo = (await bot.telegram.getFile(result.telegramFileId)) as any; const uploaded = { publicId: nanoid(), telegramFileId: result.telegramFileId, telegramFileUniqueId: result.telegramFileUniqueId, storageChatId: config.storageChatId, storageMessageId: result.storageMessageId, fileName: finalFileName, mimeType: fileInfo.mime_type || mimeType || 'application/octet-stream', sizeBytes: fileInfo.file_size || fileBuffer.byteLength, fileType: fileType, uploaderId: 0, fileHash: hash, createdAt: new Date(), updatedAt: new Date(), }; await db.insert(fileSchema).values(uploaded); const responsePayload = { public_id: uploaded.publicId, telegram_file_id: uploaded.telegramFileId, telegram_file_unique_id: uploaded.telegramFileUniqueId, storage_chat_id: uploaded.storageChatId, storage_message_id: uploaded.storageMessageId, file_name: uploaded.fileName, mime_type: uploaded.mimeType, size_bytes: uploaded.sizeBytes, file_type: uploaded.fileType, uploader_id: uploaded.uploaderId, created_at: uploaded.createdAt.toISOString(), download_url: `${config.baseUrl}/f/${uploaded.publicId}`, }; return Response.json(responsePayload, { status: 200 }); } catch (error: any) { logger.error('Multipart upload error', { error: error.message }); return Response.json({ error: error.message }, { status: 500 }); } finally { if (tempPath) { const p = tempPath; setTimeout(() => { try { unlinkSync(p); } catch {} }, 50); } } }; const handleJSONUpload = async (req: Request): Promise => { let tempPath = ''; try { const { file, fileName = 'file' } = (await req.json()) as any; if (!file || typeof file !== 'string') { return Response.json( { error: 'Invalid JSON. Must include "file" (base64) and optional "fileName"' }, { status: 400 }, ); } let base64Data = file; let rawMimeType = 'application/octet-stream'; if (file.startsWith('data:')) { const match = file.match(/^data:([^;]+);base64,(.+)$/); if (match) { rawMimeType = match[1]; base64Data = match[2]; } } const fileBytes = Buffer.from(base64Data, 'base64'); const hash = computeHash(fileBytes); // Check for duplicate in DB const existing = await db .select() .from(fileSchema) .where(eq(fileSchema.fileHash, hash)) .limit(1); if (existing.length > 0) { const existingFile = existing[0]; const responsePayload = { public_id: existingFile.publicId, telegram_file_id: existingFile.telegramFileId, telegram_file_unique_id: existingFile.telegramFileUniqueId, storage_chat_id: existingFile.storageChatId, storage_message_id: existingFile.storageMessageId, file_name: existingFile.fileName, mime_type: existingFile.mimeType, size_bytes: existingFile.sizeBytes, file_type: existingFile.fileType, uploader_id: existingFile.uploaderId, created_at: existingFile.createdAt instanceof Date ? existingFile.createdAt.toISOString() : new Date(existingFile.createdAt).toISOString(), download_url: `${config.baseUrl}/f/${existingFile.publicId}`, }; return Response.json(responsePayload, { status: 200 }); } const { fileName: finalFileName, mimeType } = ensureExtension(fileName, fileBytes, rawMimeType); const fileType = getFileType(mimeType, finalFileName) === 'application' ? 'document' : getFileType(mimeType, finalFileName); if (!checkFileSize(fileBytes.byteLength, fileType)) { return Response.json({ error: `File size exceeds ${fileType} limit` }, { status: 400 }); } // Write file to disk temporarily tempPath = `/tmp/teleuploader-${nanoid()}`; await Bun.write(tempPath, fileBytes); const fileStream = createReadStream(tempPath); const result = await forwardToStorage(fileStream, finalFileName, fileType); const bot = getBot(); const fileInfo = (await bot.telegram.getFile(result.telegramFileId)) as any; const uploaded = { publicId: nanoid(), telegramFileId: result.telegramFileId, telegramFileUniqueId: result.telegramFileUniqueId, storageChatId: config.storageChatId, storageMessageId: result.storageMessageId, fileName: finalFileName, mimeType: fileInfo.mime_type || mimeType || 'application/octet-stream', sizeBytes: fileInfo.file_size || fileBytes.byteLength, fileType: fileType, uploaderId: 0, fileHash: hash, createdAt: new Date(), updatedAt: new Date(), }; await db.insert(fileSchema).values(uploaded); const responsePayload = { public_id: uploaded.publicId, telegram_file_id: uploaded.telegramFileId, telegram_file_unique_id: uploaded.telegramFileUniqueId, storage_chat_id: uploaded.storageChatId, storage_message_id: uploaded.storageMessageId, file_name: uploaded.fileName, mime_type: uploaded.mimeType, size_bytes: uploaded.sizeBytes, file_type: uploaded.fileType, uploader_id: uploaded.uploaderId, created_at: uploaded.createdAt.toISOString(), download_url: `${config.baseUrl}/f/${uploaded.publicId}`, }; return Response.json(responsePayload, { status: 200 }); } catch (error: any) { logger.error('JSON upload error', { error: error.message }); return Response.json({ error: error.message }, { status: 500 }); } finally { if (tempPath) { const p = tempPath; setTimeout(() => { try { unlinkSync(p); } catch {} }, 50); } } }; 5 x<100644 file.ts1 2NFR)9  100644 logger.ts fc{_5>r(100644 rateLimit.tstZl.A<}*100644 telegram.tsS:O{¼cc 100644 telegramQueue.tsq)=o@9);}p%ȾIPx.QE5LfYڇ p e,x"7 Name = (msg: any, request: any): string => { if (request?.headers?.['x-file-name']) { return request.headers['x-file-name']; }Sany, request: any): string => { if (request?.headers?.['x-mime-type']) { return request.headers['x-mime-type']; } retoS_]x 6D=! = async /anyO2anyrany .message ||<`B// 429 rate limit hit! Rotate bot index instantly const prev3A const nextoC?5*!anyRa$: any = await enqueueUpload(async ()WBphoto') { return?Photo}$={ caption: fileName, }); } else{ return?Audio}$j{ caption: fileName, }); } else if (fileType === 'video') { return?Video}$j{ caption: fileName, }); } else if (fileType === 'voice') { return?Voice}${ caption: fileName, }); } else if (fileType === 'animation') { return activeBot.telegrP Animation}$l{ caption: fileName, }); } else if (fileType === 'sticker') { return?Sticker}"$); } else { return?Document}$ { T, }); } }); // Advance round-robin index for next job0>m)let uploadedFile: any; O IuploadedFile = result.document; else if (result.photo) uploadedFile =  else if (result.video) uploadedFile = result.video; else if (result.audio) uploadedFile = result.audio; else if (resu/lt.voice) uploadedFile = result.voice; else1euploadedFile = result.animation; else if (result.sticker) uploadedFile = result.sticker; elseLuploadedFile = result.video_note; else uploadedFile = result[fileType]; Vany{; fileName, error: error.messageS: any = await enqueueUpload(async () => { const mediaGroup: any = items.map((item) => { let type: 'photo' | 'video' | 'audio' | 'document' = 'document'; if (item.fileType === 'photo') type = 'photo'; else if (item.fileType === 'video') type = 'video'; else if (item.fileType === 'audio') type = 'audio'; return { type,  media: item.fileId,  }; }Rreturn?"lm8)msg = messages[i]; const fileType =!; let uploadedFile: any; if (msg.document) uploadedFile = msg.document; else if (msg.photo) uploadedFile = msg  else if (msg.video) uploadedFile = msg.video; else if (msg.audio) uploadedFile = msg.audio; else if (msg.voice) uploadedFile = msg.voice; else if (msg.animation) uploadedFile = msg.animation; else if (msg.sticker) uploadedFile = msg.sticker; else if (msg.video_note) uploadedFile = msg.video_note; else uploadedFile = msg[fileType]; tany{( error: error.message%: any = await result.json(): any = await fileResult.json()z any{ ! error: error.message%2"('I>x100644 bootstrap.test.tsĕJBt*ۧfW100644 bot.test.tso{ePc J$100644 db.test.tsgl<)6Ϫ c+100644 env.test.tsWZף UK5~۫ 100644 file.test.ts͹FT|:ā100644 files.test.tsfxqybq100644 health.test.ts!X" Tg100644 rateLimit.test.tse[r?Z[5 (g100644 swagger.test.tsTF0l~*uwv/`v100644 telegram.test.tsCm.Eg[v*ď100644 telegramQueue.test.ts{j`\z 100644 upload.test.tshT.lrnTC@e̒x('XVFz Ko撍 x; // @ts-nocheck N )E<7?}); }); -&4+xO=:// @ts-nocheck [/tech'mock.module('telegraf', () => { return { Telegraf: class { constructor(token) { this.token = token; ( this.launch = mockLaunch; this.I this.on = mockOn; this.use = mockUse; } }, }; }Rdconst mockLimit0[])); const mockWhere = mock(() => ({ limit: mockLimit, })); const mockFrom = mock(() => ({ where: mockWhere, })); const mo/ckSelect = mock(() => ({ from: mockFrom, }));~K^ select: mockSelect, }, files: { telegramFileUniqueId: 'telegram_file_unique_id', }3QLimit! !Limit.mockResolvedValue([]);  :[1]7pF$W 7p87p8W<4// Mock DB to return an existing match mockLimitm [ { ,(. }, ]); o9Zi7p87pin$ x I// @ts-nocheck import { describe, it, expect, beforeAll } from "bun:test"/"../src/env"; describe("a ", () => { it("& "botToken"Q%"storageChatId"Q% "baseUrl"Q% "databaseUrl"Q%"port"Q% "nodeEnv"Q% "logLevel"Q%"rateLimitWindowMs"Q%&"rateLimitMaxRequests"); }); it("08$); }); it("H+"number"Q[<, 10)); }); it("5"number"P"test", "development"x"info"); }); it("<k,"'3k 30); }); }); Ox< "Nexpect, it } from 'bun:test'; import { config } from '../src/env'; describe('{ ', () => { it('&' 'botToken'=%'storageChatId'=% 'baseUrl'=% 'databaseUrl'=%'port'=% 'nodeEnv'=% 'logLevel'=%'rateLimitWindowMs'=%&'rateLimitMaxRequests'); }); it('8'O'1H'"'number'd'5'port).toBe('number'P'test', 'development'x'info'); }); it('}<'\ #'<'\*{+P;x6-// @ts-nocheck NAmockSelect = mock(() => ({ from: mock(() => ({ where: mock(mock(])), })), })), })); mock.module('../src/db/index', () => ({ db: { select: mockSelect, }, files: { publicIdC: { equals: (val) => ({ type: 'equals', value: val }), },rateLimit const mockCheckRateLimit = mock(() => true); mock.module('../src/utils/rateLimit', () => ({ checkRateLimit: mockCheckRateLimit, })#Fany, handleFileInfo: any_CheckRateLimitUV >29 if rate limit is exceeded CheckRateLimi%false); const req = new Request  );  'test-id' }; 2 29 .json(N"Rate limit exceeded'" new Request /Q 'missing-id' }3 @.json(N",,direct to telegram file url if file is found "M new Request  );  'test-id' }3 302);O/U( 'https://api.telegram.org/file/bot123456:ABC-DEF/photos/file_0.jpg',  new Request  );  'test-id' }3 ".json(Ny new Request ); 'missing-id' }$:K.json(N"@if file is found- new Request *);  'test-id' }$:)".json( uploader_i/ new Request *);  'test-id' }$:)".json(NC '}); }); wAx // @ts-nocheck !anyS jx #+/xm any)B['/api/upload']P*" 'multipart/form-data', ['/api/upload']P?}); *!9x?76// @ts-nocheck ^"any, getFileInfo: any, getBot: any[ 4xS@<// @ts-nocheck c any[] = []7{any  res.json(  res.json(:!-kB res.json( % res.json();=+ res.json(: res.json(:.* d:%xT100644 .dockerignoremm=BP<\J5Ӫ1>100644 .env.example8!`aHu?40000 .github=q1W6# .100644 .gitignore-'NW|ݟ0ad/ [100644 CLAUDE.mdvLٝi~~r( 100644 Dockerfile"2Ɏ/Vr1/*@ y100644 README.mdk2` bj6A100644 biome.jsonx4c2mTM 100644 bun.lock9D%7aqR-_100644 docker-compose.yml%}5 v=U[40000 docs8<OdU&42?100644 package.json]DW_pS'wэI100644 schema.sqlZwjb{}(TT40000 src&qt85 j@JͶj40000 test 7k(8qG%Y100644 tsconfig.json\/@Zaxx= /ϐݠD,'ёQYjZ Lj+@!/sՔ%MGbZkeX3g̈1O c@>&[I40000 testEƒ__&.zzaJ c)+)9bxWF M1U^;zPñ:30m]G: {Q/40000 test9>|-OX-硐bN_+)$fx?3EoKƸfռ,V40000 testErG{ښ#+)lRx !~mx(HE8Hconst isDocument = finalFileName.endsWith('.pdf') || finalFileName.endsWith('.txt') || !['photo', 'video', 'a.udio', 'voice', 'animation'].includes(fileType1!Buffer, finalFileName, isDocumenth.|-OX-硐bN_+) H& LxM = { task: () => Promise; resolve: (value: T | PromiseLike) => void; reject: (reason?: any) => void; }; class TelegramQueue { private activeCount = 0; private queue: QueueTask[] = []; private concurrency: number; constructor(concurrency = 2) { this.concurrency = concurrency; } public enqueue(task: () => Promise): Promise { return new Promise((resolve, reject) => { this.queue.push({ task, resolve, reject }); this.processNext(); }); } private async processNext(): Promise { if (this.activeCount >= this.concurrency || this.queue.length === 0) { return; } const item = this.queue.shift()!; this.activeCount++; try { const result = await item.task(); item.resolve(result); } catch (error) { item.reject(error); } finally { this.activeCount--; this.processNext(); } } } const telegramQueue = new TelegramQueue(2); export const enqueueUpload = (task: () => Promise): Promise => { return telegramQueue.enqueue(task); }; +] RxNiߟRm|E6HzS2)ہzcB~>nV%c1ȬmV7!b Exb70// @ts-nocheck %"any, getFileInfo: any, getBot: anyD  photo data')l %jp   photo data')l %jp  photo data')l %jpT4`?xV<6(35g&$p D txt type).toBe('document fYQtxt  U62x80|Q:Vi:(y1qrX-1 HWlx LSD`xW֡ 5@'P @SxZ9qX,E>,h Tx=, B?-ztxW0|Q:Vi:3H6BP;P,>c40000 testPEYޯOR`v|$t+)& x9100644 bot.tseuueҏ@x׻40000 db|/]ּCOC> 100644 env.tsiM6'p?+ }W 100644 index.tsYDe.|~8`P40000 routes6hNw&_vfZҸ40000 utils)"Ņܧo8~PG@BMYx+ %? [] 8 .split(',') &4[| xZ:ocTu >ee'4,O x=+1<QH5  B x 5H΃C)'IDtgxo<&xgӮ1msՔ%MGbZkeX3OL)WAlkNP^$B-M40000 test*cF^T/<+)$/eEx!jDtech8Bxlhelper `withRetry50 rxeFqv &5ȧ" U xk" Rs 1I4Int& !!, 10) || 60000O Intt $ !, 10) || 30g?G ...config, botToken: `${config.botToken?.substring(0, 10)}...` }, }); ,36xOcCP.>7 /4x =#e) const bot = new Telegraf(config.botToken*POconst withRetry = async (fn: () => Promise, retries = 5): Promise => {Ofn() i if (match && retries > 0) { F4Clogger.warn(`Telegram 429 Too Many Requests detected. Retrying afte$}); Q"return withRetry(fn, retries - 1);O=let result: any;  result = await withRetry(() => b C })); ! 0audio') { result = await withRetry(() => b C })); ! - result = await withRetry(() => b` C })); !   result = await withRetry(() => b C })); !   result = await withRetry(() => b G })); ! G  result = await withRetry(() => bk :6); } else { result = await withRetry(() => b F # })); }  <; ?)kvx #xo=8!`aHu?QYvLٝi~~r( :3&qt85 j@JͶj40000 testUA r,3mLva+)61nx)L > xh100644 file.ts1 2NFR)9  100644 logger.ts fc{_5>r(100644 rateLimit.tsܴĒgh"100644 telegram.ts:ib2Ue**͔ 'd-t!8Fxmimport logger from './logger'; interface RateLimitRecord { count: number; reset: number; } const rateLimitMap = new Map(); export const checkRateLimit = (key: string): boolean => { const now = Date.now(); const windowMs = parseInt(process.env.RATE_LIMIT_WINDOW_MS!, 10) || 60000; const maxRequests = parseInt(process.env.RATE_LIMIT_MAX_REQUESTS!, 10) || 30; if (!rateLimitMap.has(key)) { rateLimitMap.set(key, { count: 0, reset: now + windowMs }); } const record = rateLimitMap.get(key)!; if (now > record.reset) { record.count = 0; record.reset = now + windowMs; } if (record.count >= maxRequests) { logger.warn('Rate limit exceeded', { key, count: record.count, reset: record.reset }); return false; } record.count++; return true; }; export const cleanupRateLimitCache = (): void => { const now = Date.now(); const keysToDelete: string[] = []; for (const [key, record] of rateLimitMap.entries()) { if (now > record.reset) { keysToDelete.push(key); } } for (const key of keysToDelete) { rateLimitMap.delete(key); } }; ܥlXxT#޳<5__ c_>?_#ct!;$ l B x\@:#0aqrO!;100644 db.test.tsBOUAAe^W%Cz;"7}ө1n}$đldPE,2I8Rn3|JfJICHhR vRx)l*v#sYz %C~ (T?C2x8fgl<)6Ϫ c+zC, $t*4 ѓ*)GxK@bva6ˎ (= Ta͹FT|:ānV%c1Ȭm?(#Yx8@o{ePc J$T8fѯ|OᏓ* bx // @ts-nocheck import { describe, it, expect, beforeEach, afterEach, mock, spyOn } from "bun:test"; import { checkRateLimit, cleanupRateLimitCache } from "../src/utils/rateLimit"; import logger from "../src/utils/logger"; // Spy on logger.warn const warnSpy = spyOn(logger, "warn"); describe("Rate Limiter", () => { beforeEach(() => { warnSpy.mockClear(); // Set custom env variables for predictable tests process.env.RATE_LIMIT_WINDOW_MS = "100"; // 100ms window process.env.RATE_LIMIT_MAX_REQUESTS = "3"; // max 3 requests }); afterEach(() => { delete process.env.RATE_LIMIT_WINDOW_MS; delete process.env.RATE_LIMIT_MAX_REQUESTS; }); it("should allow requests under the limit", () => { const key = "user-1"; expect(checkRateLimit(key)).toBe(true); expect(checkRateLimit(key)).toBe(true); expect(checkRateLimit(key)).toBe(true); expect(warnSpy).not.toHaveBeenCalled(); }); it("should block requests exceeding the limit and log a warning", () => { const key = "user-2"; expect(checkRateLimit(key)).toBe(true); expect(checkRateLimit(key)).toBe(true); expect(checkRateLimit(key)).toBe(true); // 4th request exceeds limit of 3 expect(checkRateLimit(key)).toBe(false); expect(warnSpy).toHaveBeenCalled(); const callArgs = warnSpy.mock.calls[0]; expect(callArgs[0]).toBe("Rate limit exceeded"); expect(callArgs[1].key).toBe(key); }); it("should reset request count after the window passes", async () => { const key = "user-3"; expect(checkRateLimit(key)).toBe(true); expect(checkRateLimit(key)).toBe(true); expect(checkRateLimit(key)).toBe(true); expect(checkRateLimit(key)).toBe(false); // blocked // Wait for window to expire (100ms) await new Promise((resolve) => setTimeout(resolve, 110)); // Should be allowed again expect(checkRateLimit(key)).toBe(true); }); it("should cleanup rate limit cache of expired keys", async () => { const key1 = "cleanup-1"; const key2 = "cleanup-2"; // Populate keys expect(checkRateLimit(key1)).toBe(true); expect(checkRateLimit(key2)).toBe(true); // Run cleanup immediately (none should be expired yet as 100ms hasn't passed) cleanupRateLimitCache(); // Verify still tracked (counts shouldn't reset, e.g., if we consume remaining limits) expect(checkRateLimit(key1)).toBe(true); // request 2 expect(checkRateLimit(key1)).toBe(true); // request 3 expect(checkRateLimit(key1)).toBe(false); // request 4 (blocked) // Wait for window to expire await new Promise((resolve) => setTimeout(resolve, 110)); // Run cleanup cleanupRateLimitCache(); // Since they were deleted from the map, they should be initialized as new records // If they were cleaned up, we should be able to do 3 requests again expect(checkRateLimit(key1)).toBe(true); // 1 expect(checkRateLimit(key1)).toBe(true); // 2 expect(checkRateLimit(key1)).toBe(true); // 3 expect(checkRateLimit(key1)).toBe(false); // 4 (blocked) }); }); ف xSafterEach, beforeEach, describe, expect, it, spyOn } from 'bun:test'; import logger from '../src/utils/logger'; import { checkRs''../src/utils/rateLimit'7!'warn'); describe('Rate Limiter'4'100'<'3' '%''user-1''PXP $';''user-2''PXP'Rate limit exceeded'k6'2' = 'user-3''PXP,'|/'!)'cleanup-1'; const key2 = 'cleanup-2'+_Dx0(92$'6x&40000 superpowersVTVH-x@40000 plansI4bE~l *<40000 specsz3uD>Onx8@å"8%tP.GT8fѯ|OᏓ* 4[xX:92'8605908810:AAFpUzlIBktfd_7wpEj7zMJob2CFxvG-ZGY'; = '-1003996572954Mx?3?*X ~"$'}G40000 test,0hhN)WT~L`K+)T% x9100644 bot.tsY{]0R?9^440000 db|/]ּCOC> 100644 env.ts#/|Z+<%$Y c100644 index.tsYDe.|~8`P40000 routes۱4Q)REs_7@U40000 utils5.΍ICHgZ+dLiSxv|¶p)|R~윑 :+xJ)!& c.x JZ/Rk#G/_CV< Kx3?b9o)ҕ p!@xDe) const bot = new Telegraf(config.botToken*Puғ*!0any, fileName: string, forceDocument = falsez39caption = forceDocument ? `📁 ${fileName}` : fileName; GIconst result: any = forceDocument ? await bot.telegram.sendDocument}$1{ caption }) : await bot.telegram.sendPhoto}${ caption }); !forceDocument ? result.document : Vany{; fileName, error: error.message%: any = await result.json(): any = await fileResult.json()z any{ ! error: error.message%2""; !YXx99$0  e. _.xG0(k#d%false+ true);  false^ ۓ2$'\Vx((kd*Dk{x=8!`aHu?QY:vLٝi~~r( 100644 Dockerfile]4erroPhGDrTI[Z`W2%-Ab2]1100644 schema.sql_oQEûҭ/{n"[40000 src}+LɢpZ40000 testGxEŠ100644 t3!GWm xX8<OdU&42?X3?*X ~"$'}G40000 test,0hhN)WT~L`K+)"jQx Cktx? <L psql $DATABASE_URL -f schema.sqlOkՓYyOx"Bbun src/db/migrate.tsb1 cx- CREATE TABLEMe 6GD?:/H  100644 env.ts#/|Z+<%$Y c100644 index.tsYDe.|~8`P40000 routes۱4Q)REs_7@U40000 utils5.΍ICHgZ+dOKE=!+k1,sxNŎP!CBJ97 t.xnV%c1Ȭm }?x,=!// @ts-nocheck [P2'8605908810:AAFpUzlIBktfd_7wpEj7zMJob2CFxvG-ZGY'; L= '-1003996572954}tech'mock.module('telegraf', () => { return { Telegraf: class { constructor(token) { this.token = token; ( this.launch = mockLaunch; this.I this.on = mockOn; this.use = mockUse; } }, }; }Rd`;J ]A :[1]7pF$W 7p8ȓ<7p8W/w`$x?3m+`c=aoWQ840000 test%.tr:3vuhp Kv+)E# x9100644 bot.ts^@;^ZJP_40000 db|/]ּCOC> 100644 env.ts#/|Z+<%$Y c100644 index.tsYDe.|~8`P40000 routesȌ7%At_D40000 utils5.΍ICHgZ+dWK'xʅzww?cd  x'E2"<V `R 8I`!"{@'SdxWF// @ts-nocheck $5 // Mock db%/'mocked-nanoid-id'(F (() => o( }), )T!any >  res.json(o% 3 res.json(%$telegram_file_id).toBe('tg-file.).toBe('tg-unique-id-abcQ/testM/+ document { res.json(oóM res.json();@@txt#40000 test >AptA,fRђD+) x9100644 bot.ts^@;^ZJP_40000 db|/]ּCOC> 100644 env.ts#/|Z+<%$Y c100644 index.tsYDe.|~8`P40000 routesȌ7%At_D40000 utilsSdLWXN}N, xh100644 file.ts~A0rvƧ-~L 100644 logger.ts fc{_5>r(100644 rateLimit.tsܴĒgh"100644 telegram.ts3?b9o)ҿ};/xkƳh||`qRxi)!H> checkFileSize, extractFileName, extractMimeType, getFileType Xn z O }); P$ xD]4erroPhGDrTI[Z`W2%-Ab2]1100644 schema.sql_oQEûҭ/{n"[40000 src (=40000 testGxEŠ100644 t3!Scx+zrN) U-? kxoo[҄ @H\p,F) \nVx Xa1:mx C, $t*4 ѓ* kNx  O x9100644 bot.ts^@;^ZJP_40000 dbzrN) U-100644 env.ts#/|Z+<%$Y c100644 index.tsYDe.|~8`P40000 routesn0wH7{=40000 utilsnL';QR 1Ҳd9B{Jx&"O#^7z %Cx\H.Z{- checkFileSize, extractMimeType, getFileType +Um Y # const isDocument = fileName.endsWith('.pdf') || fileName.endsWith('.txt') || !['photo', 'video', 'audio', 'vo$ice', 'animation'].includes(fileType1Buffer, fileName, isDocumenttIhG' !|.r(100644 rateLimit.tsܴĒgh"100644 telegram.ts3?b9o)p:x17 Ɠ ]|| Γany, request: any): string => { if (request?.headers?.['x-file-name']) { return request.headers['x-file-name']; } retSany, request: any): string => { if (request?.headers?.['x-mime-type']) { return request.headers['x-mime-type']; } retgxW_!Z]6tdh8@B}s3}+LɢpZ40000 testGxEŠۓ+)g)x$40000 workflows#Y4eHu`^(px&100644 deploy.yml;Tqh_y0?KZj:x Ct ,x8_!Z]6tdh8@B}suvȠI^ +)/x WoZ|=3IK*x7_!Z]6tdh8@B}s]]4erroPhGDpdC Ox?7(// @ts-nocheck %B$"any, getFileInfo: any, getBot: anyD  photo data')l %jp Afalse+ trueJ-1003996572954{  photo data')l %jp:false0x:k=x$40000 workflowsvppȐDYN$x&100644 deploy.yml 56Y "ljY qCxCt1.1S H?x!1.1-!H1.1-iCks!xP_2zߥ;ؿaB06xs]LB_x<6 ^3tvNu[[.+)& x\@:#0aqrO!;100644 db.test.tsN', 1Qne Tz;"7}ө1n}$đldPE,2I8Rn3|JfJICHhR vRx)l*v#sYz %C~ (.?jx)o (schemaFiles$ O7, i)xG)h40000 docsG#MnJN=\\^ZewtvNu[[.+)4x&40000 superpowers4inҴ~YNʠx@40000 plans^p@mU +Q40000 specsI*9йtBdx}HH8exJJ$x#QstvNu[[.+)9I x6Qs]LB_x<6 ^o40000 docsrTI[Z`W2%-Ab2]1100644 schema.sql_oQEûҭ/{n"[40000 src}+LɢpZ40000 testtvNu[[.100644 t3!~VYx <G#MnJN=\\^ZePƠ /x=)zh.100644 docker-compose.yml%}5 v=U[1f+kzx )z;9+x<)zɛuW*hl;ںx0S'?Q zoG9CH9x+}Z'F̅T@T{ײ?" xI100644 index.tsvQfzZ x.v100644 schema.ts҄ @H\p,F)3Nx?Y3g~F*9d:i40000 testTc%8X g蓌)m>Qx@?64N wCf /xĐ &-aJk^%|J ; xPinput: any = forceDocument ? { document: fileChunk, caption } : { photo: [fileChunk], caption }; const result ainput)x-%92x F։E뽻*5HBx(! [E*/x YN1x͇*J5;dmH* xar~7}; ݊[Yx\ J=҈--9QG/o% 4YxIGF" tele.asepharyana.tech/f/xYz123! % }, }); }; /xX )vwh|tq=V)03T@+iɨ΁xN40000 test'Qi?u=N6)(Ol x p"v x9100644 bot.ts^@;^ZJP_40000 db}Z'F̅T@T{ײ100644 env.ts#/|Z+<%$Y c100644 index.tsm{JͺcoŞ958,40000 routes/V7%kH\uN-6^40000 utils@?64N wCf5?Ighx ,=7hRxnPv k:x P{OI#x`}]"٣|x̯ % T`7 Xx  "7_Xrgd)L=Kx! src/index.t+EV E\xVj}p}V e&13=R*ʄ e)M$kxQ,&1.8.3/schema.json", "organizeImportsd, 0 RD } } } .g x9100644 bot.ts7->{س|40000 db iNnٟMA|100644 env.tsv[#[u '100644 index.tsoNwJ% ֮40000 routesN֪8TcOd840000 utils="~ǽCkQ+LxMimport { Telegraf, type Context@'[2 !T(Nw)>mtry { ^ .message.document ? 'document' :!photo ? 'photo' :! ? 'video' :! ? 'audio' :!6oice ? 'voice' : 'animation'; const fileObj =kX;const fileName =0.Z..0. ..9const maxSize = fileType === 'photo' ? 10 * 1024 * 1024 :!i ? 200 * 1024 * 1024 :!ivoice' ? 200 * 1024 * 1024$>%eR B $0 O o 1 = / 5I i =  # !2  }; Y ? 7 P% 8 a x &= publicId, fileType, fileName, uploader: ctx.from.id }); @7 e F} } OL y !e! + '...'*gxI100644 index.ts֗`zh @6~T100644 schema.ts%Sao/^9eR / ix d5x[import { pgTable, text, bigind1*import type { InferSelectModel, InferInser*n{ xx( 72K n! + '...' } }); Tx\ $T(I&"&.${ handleFileRedirect, handleFileInfoS{ %xS msg.document?.fileName ||. = msg.voice?.fileName || msg.animation?.fileName || 'file'].% msg.audio?.mimeType || o; }; ~7+x3,M%!e#=Xl1wx`100644 bootstrap.test.tsIɛxqb֦F0lpq4100644 bot.test.tsQKe-AeLfNuO100644 db.test.ts'fOj^"ygg>100644 env.test.ts$$poWS{&h100644 file.test.ts'Qρ9&z:100644 files.test.ts\Yqc>G0xOW100644 health.test.ts2ыJٵcH1100644 rateLimit.test.ts W 2!n 10u100644 telegram.test.ts* ˵䍣F&4G100644 upload.test.ts }H?Sr?U(Q%] tx Bdescribe, it, expect, mock, beforeEach, afterAll } from "bun:test"Zxc@ Promise.resolve({ stop: mock() })); mock.module("../src/bot"#) })); mock.module("../src/routes/upload"( })); mock.module("../src/routes/files").) })); mock.module("../src/routes/health"!+ })); mock.module("../src/utils/rateLimit"*" })); describe("Bootstrap Server""-"!"../src/index""port""routes"3 "/api/upload"3"/f/:public_id"3""3"/health"); }); }); *=%x-! Idescribe, it, expect, mock, spyOn, beforeEach, afterAll } from "bun:test"a"../src/utils/logger"/"."#"-1003996572954""7"U "telegraf"d# })); mock.module("../src/db/index"q) }, files: {}G<&{ telegramFileId: "stored_file_id", 1"stored_unique_id", _ })); mock.module(""3%"info""*"error"); describe("Telegram Bot Handler"P "[$"6 "../src/bot"r"start";I;"document", "photo", "video", "audio", "voice", "animation"g"should handle /start command"6 "../src/bot" $+call => call[0] === "start" c1  V"Halo")); }); it(" ."6 "../src/bot" Ó(  "doc_123"P "doc_uniq_123"z 2"application/pdf" "cv.pdf" }y' 1 ["doc_123", "cv.pdf" YK="File berhasil diupload"), expect.any(Object)); }); it("` ."6 "../src/bot" { file_id: "photo_123"P "photo_uniq_123", LI "image/jpeg" }]y' 1 F[ "exceeds"l<* Kx\"it, expect } from "bun:test">"../src/db/index"k'>"../src/db/schema"; describe("Database Layer", () => { it("""5"oi"%"T35yxj! "3it, expect } from "bun:test"; import { getFileType,H0k } from "../src/utils/file"; describe("File Utilities", () => { describe("getFileType", () => { it(")" "video/mp4", "")).toBe("video");8"video/quicktime", "")).toBe("video"); }); it(")" !"audio/mpeg", "")).toBe("audio");2"audio/ogg", "")).toBe("audio"); }); it("i1" )"image/jpeg", "my photo")).toBe("photo");."image/png", "cool image.png")).toBe("photo");-"image/gif", "funny.gif")).toBe("animation");?"image/png", "funny gif")).toBe("animation"); }); it("4" C"application/octet-stream", "this is a voice note")).toBe("voice");S"application/octet-stream", "cool animation")).toBe("animation"); }); it("0" ,"application/pdf", "")).toBe("application");null, "")).toBe("document"!"checkFileSize", () => { it("'"6"photo".Y"video"5"+"%"photo".Z"video"6"9"%o "unknown"F[ "unknown"*#"extractFileName", () => { it("  " )"x-file-name": "custom.txt"0   "custom.txt"); }); it(" >"  & $"doc.pdf" } }, null)).toBe("doc.pdf" @"low.jpg" }, { fileName: "high.jpg" }] }, null)).toBe("high.jpg" &"song.mp3" } }, null)).toBe("song.mp3" d ("voice.ogg" } }, null)).toBe("voice.ogg" :"anim.gif" } }, null)).toBe("anim.gif"); }); it(" +"  f "file"#"extractMimeType", () => { it(" 0" )"x-mime-type": "text/plain"0 2 "text/plain"); }); it("  " ?4"application/pdf" } }, null)).toBe("application/pdf""pE"image/jpeg" }, { mimeType: "image/png" }] }, null)).toBe("image/png"5*"audio/mpeg" } }, null)).toBe("audio/mpeg""R("audio/ogg" } }, null)).toBe("audio/ogg"#<"video/mp4" } }, null)).toBe("video/mp4"); }); it("," (W"application/octet-stream"vP](x(-,Bdescribe, it, expect, mock, beforeEach, afterAll } from "bun:test"Z })) }))"../src/db/index"%)OA!"equals", value: val }) } }Z<"photos/file_0.jpg" })); mock.module("../src/utils/telegram"JH } })R"../src/utils/rateLimit" /% })); describe("File Route Handlers"_", handleFileInfo"123456:ABC-DEF"\'"../src/routes/files"}&"handleFileRedirect", () => { it(";+"}R" "!# "test-id" )"Rate limit exceeded"); }); it("J2"} }) })i+"""!# "missing-id"a S I$"File not found"); }); it(" 5"}C{ id: "uuid-123", publicId: "test-id", P "tg-file-id", 2"test.jpg" }]) }) })i+" "!# "test-id"a S #"Location")).toBe(" A"); }); it("{0"}>"DB Connection Error"," "!# "test-id"a "Server error"@ ""handleFileInfo", () => { it("J2"} }) })i+"y"!# "missing-id"a &) I$"File not found"); }); it("x-"9G"test-id", fileName: "image.png", mimeType: "image/png"&-"photo"Z9"2026-05-18T00:00:00.000Z") }) })i+"]"!# "test-id"a &)8[I"test-id", file_name: "image.png", mime_type: "image/png"/"photo"2"2026-05-18T00:00:00.000Z"_"{0"}>"DB Connection Error","]"!# "test-id"a &r"Server error"@Cpyxx+ 8describe, it, expect, mock, beforeEach } from "bun:test"PZ"../src/db/index"+F } })); describe("Health Route Handler", () => { let handleHealth3`"../src/routes/health"<"2"-""+IL"ok"=":E"V""!""+"error"""); }); }); ZY6YWxn(describe, it, expect, beforeEach, afterEach, mock, spyOn } from "bun:test"; import logger from "../src/utils/logger"; import { config } from "../src/env"* "telegraf"[  { file_id: "photo_id_low", file_unique_id: "unique_id_low" }, { file_id: "photo_id_high", file_unique_id: "unique@_id_high" } ] })) }; } })"info"","error"); describe("Telegram API Utilities" , getFileInfo, getBot` "../src/utils/telegram""getBot", () => { it("l'", +_$"forwardToStorage", () => { it("C<"0"fake photo data""test_photo.jpg""photo_id_high",Q "unique_id_high" 123456"File forwarded to storage" , \ " )" 8 ="Telegram send failed" &"fake photo data""test_photo.jpg" P"Telegram send failed"*With(" !" error: "Telegram send failed" %"getFileInfo", () => { it("5&"url, $ "getFile"& *D"some_file_id" } }))# "getInfo"& *Jf  c"image/jpeg", file_path: "photos/file_0.jpg" } }))); } 9 "Unknown URL"U6 "some_file_id", "some_unique_id"/+%4"image/jpeg", file_path: "photos/file_0.jpg" \ "L&". ok: false, " " })))s#:"invalid_file_id", "invalid_unique_id")).rejects.toThrow(""@N9xBdescribe, it, expect, mock, beforeEach, afterAll } from "bun:test"ZV"../src/db/index") }, files: {}""nanoid";"mocked-nanoid-id"i*"../src/utils/telegram"){ telegramFileId: "tg-file-id-123", telegramFileUniqueId: "tg-unique-id-abc", storageMessageId: 98765 })), getBt6%{ file_id: "tg-file-id-123", !Rmime_type: "image/jpeg" })) } }) })); describe("Upload Route Handler"o_""<"B7" ,"a ", { method: "POST"C"content-type": "text/plain" }, body: "plain text data"@"UQ"); }); it("0" ,"a ", { method: "POST"""content-type": "application/json"AH"hello world").toString("base64"), fileName: "test.txt" })@Oz )!"mocked-nanoid-id"*"tg-file-id-123"!i"tg-unique-id-abc"# "test.txt"#"document"); }); it("*" ,"a ", { method: "POST"""content-type": "application/json"3Name: "test.txt" })@"Invalid JSON"); }); it(" ,"  F)"multipart hello")], { type: "text/plain" %"file", fileBlob, "test_multi.txt"); / "a /", { method: "POST", body: formData@Oz I"mocked-nanoid-id"#"test_multi.txt" ;^rOx?Y3rv'1aZ^40000 testl>8g]d7YI)b+ x9100644 bot.jsrP&8y\IJ_*m40000 db|Qc[ /100644 env.jsM g` '~06~>100644 index.js[J&(:J󛢳ИGx40000 routesjt \ }[Y cx40000 utilsQI>4jM&NnFLx Dimport { Telegraf } from 'telegraf'; import logger from './utils/logger.js'; import { config } from './env.js'; import { db, files as fileSchema } from './db/index.js'; import { nanoid } from 'nanoid'; import { forwardToStorage } from './utils/telegram.js'; export const startBot = async () => { try { const bot = new Telegraf(config.botToken); bot.command('start', async (ctx) => { await ctx.reply( `👋 Halo! Kirimkan file (document, photo, video, audio, voice, animation) ke bot ini. ` + `File akan disimpan di private channel dan kamu dapat download link permanen.` ); }); bot.on(['document', 'photo', 'video', 'audio', 'voice', 'animation'], async (ctx) => { try { const fileType = ctx.message.document ? 'document' : ctx.message.photo ? 'photo' : ctx.message.video ? 'video' : ctx.message.audio ? 'audio' : ctx.message.voice ? 'voice' : 'animation'; const fileObj = fileType === 'photo' ? ctx.message.photo.slice(-1)[0] : ctx.message[fileType]; const { file_id, file_unique_id, file_size, mime_type } = fileObj; const fileName = ctx.message.document?.file_name || ctx.message.photo?.slice(-1)[0]?.file_name || ctx.message.video?.file_name || ctx.message.audio?.file_name || ctx.message.voice?.file_name || 'file'; const maxSize = fileType === 'photo' ? 10 * 1024 * 1024 : fileType === 'audio' ? 200 * 1024 * 1024 : fileType === 'voice' ? 200 * 1024 * 1024 : 2 * 1024 * 1024 * 1024; if (file_size > maxSize) { return ctx.reply(`File size exceeds ${maxSize / (1024 * 1024)}MB limit`); } const result = await forwardToStorage(file_id, fileName); const publicId = nanoid(); const uploaded = { public_id: publicId, telegram_file_id: result.telegramFileId, telegram_file_unique_id: result.telegramFileUniqueId, storage_chat_id: config.storageChatId, storage_message_id: result.storageMessageId, file_name: fileName, mime_type: mime_type, size_bytes: file_size, file_type: fileType, uploader_id: ctx.from.id, created_at: new Date().toISOString(), updated_at: new Date().toISOString() }; await db.insert(fileSchema).values(uploaded); const url = `${config.baseUrl}/f/${publicId}`; await ctx.reply(`File berhasil diupload! 📎\n\nDownload: ${url}`, { reply_parameters: { message_id: ctx.message.message_id } }); logger.info('File uploaded via bot', { publicId, fileType, fileName, uploader: ctx.from.id }); } catch (error) { logger.error('Bot file handler error', { error: error.message, chat_id: ctx.chat?.id }); await ctx.reply('❌ Gagal mengupload file. Coba lagi nanti.'); } }); bot.use((ctx, next) => { logger.info('Telegram event received', { type: ctx.update.type, chat_id: ctx.chat?.id }); return next(); }); await bot.launch(); logger.info('Telegram bot started', { botToken: config.botToken?.substring(0, 10) + '...' }); return bot; } catch (error) { logger.error('Failed to start bot', { error: error.message }); throw error; } }; 3SxI100644 index.jsA0q+I, WXVe100644 schema.js">chF}$མӿxoimport { drizzle } from 'drizzle-orm/postgres-js'; import postgres from 'postgres'; import logger from '../utils/logger.js'; import { files } from './schema.js'; const client = postgres(process.env.DATABASE_URL, { max: 10, idle_timeout: 20, connect_timeout: 10 }); export const db = drizzle(client, { schema: { files } }); export { files }; export default db;}t6xfimport { pgTable, text, bigint, timestamp, uuid } from 'drizzle-orm/pg-core'; export const files = pgTable('files', { id: uuid('id').primaryKey().defaultRandom(), publicId: text('public_id').unique().notNull(), telegramFileId: text('telegram_file_id').notNull(), telegramFileUniqueId: text('telegram_file_unique_id').notNull(), storageChatId: bigint('storage_chat_id', { mode: 'number' }).notNull(), storageMessageId: bigint('storage_message_id', { mode: 'number' }).notNull(), fileName: text('file_name').notNull(), mimeType: text('mime_type').notNull(), sizeBytes: bigint('size_bytes', { mode: 'number' }).notNull(), fileType: text('file_type').notNull(), uploaderId: bigint('uploader_id', { mode: 'number' }).notNull(), createdAt: timestamp('created_at').defaultNow().notNull(), updatedAt: timestamp('updated_at').defaultNow().notNull() });!'dJx[import logger from './utils/logger.js'; const requiredEnv = { BOT_TOKEN: process.env.BOT_TOKEN, STORAGE_CHANNEL_ID: process.env.STORAGE_CHANNEL_ID, BASE_URL: process.env.BASE_URL, DATABASE_URL: process.env.DATABASE_URL, PORT: process.env.PORT }; const missing = Object.entries(requiredEnv) .filter(([_, value]) => value === undefined || value === '') .map(([key]) => key); if (missing.length > 0) { logger.error('Missing required environment variables:', missing); throw new Error(`Missing environment variables: ${missing.join(', ')}`); } export const config = { botToken: process.env.BOT_TOKEN, storageChatId: parseInt(process.env.STORAGE_CHANNEL_ID, 10), baseUrl: process.env.BASE_URL, databaseUrl: process.env.DATABASE_URL, port: parseInt(process.env.PORT, 10) || 3000, nodeEnv: process.env.NODE_ENV || 'development', logLevel: process.env.LOG_LEVEL || 'info', rateLimitWindowMs: parseInt(process.env.RATE_LIMIT_WINDOW_MS, 10) || 60000, rateLimitMaxRequests: parseInt(process.env.RATE_LIMIT_MAX_REQUESTS, 10) || 30 }; logger.info('Environment variables loaded', { config: { ...config, botToken: config.botToken?.substring(0, 10) + '...' } }); Oximport { serve } from 'bun'; import logger from './utils/logger.js'; import { config } from './env.js'; import { startBot } from './bot.js'; import { handleUpload } from './routes/upload.js'; import { handleFileRedirect, handleFileInfo } from './routes/files.js'; import { handleHealth } from './routes/health.js'; import { cleanupRateLimitCache } from './utils/rateLimit.js'; const server = serve({ port: config.port, routes: { '/api/upload': { POST: handleUpload }, '/f/:public_id': { GET: handleFileRedirect }, '/file/:public_id/info': { GET: handleFileInfo }, '/health': { GET: handleHealth } } }); const bot = await startBot(); logger.info('Server started', { port: config.port, url: config.baseUrl }); const gracefulShutdown = async (signal) => { logger.info('Graceful shutdown signal received', { signal }); logger.info('Closing HTTP server'); server.stop(); logger.info('Stopping Telegram bot'); await bot.stop(); logger.info('Server shutdown complete'); process.exit(0); }; process.on('SIGTERM', () => gracefulShutdown('SIGTERM')); process.on('SIGINT', () => gracefulShutdown('SIGINT')); setInterval(cleanupRateLimitCache, 60000); logger.info('Application running successfully'); Eekxn100644 files.jsw,#Sh>x&100644 health.jsTBus { const public_id = ctx?.params?.public_id; try { const ip = req.headers.get('x-forwarded-for') || '127.0.0.1'; if (!public_id || !checkRateLimit(ip)) { return Response.json({ error: 'Rate limit exceeded' }, { status: 429 }); } const result = await db.select().from(fileSchema).where(eq(fileSchema.publicId, public_id)).limit(1); if (!result.length) { logger.warn('File not found', { public_id }); return Response.json({ error: 'File not found' }, { status: 404 }); } const file = result[0]; const { getBot } = await import('../utils/telegram.js'); const bot = getBot(); const fileInfo = await bot.api.getFile(file.telegramFileId); const redirectUrl = `https://api.telegram.org/file/bot${process.env.BOT_TOKEN}/${fileInfo.file_path}`; return new Response(null, { status: 302, headers: { 'Location': redirectUrl } }); } catch (error) { logger.error('File redirect error', { public_id, error: error.message }); return Response.json({ error: 'Server error' }, { status: 500 }); } }; export const handleFileInfo = async (req, ctx) => { const public_id = ctx?.params?.public_id; try { if (!public_id) { return Response.json({ error: 'Missing file id' }, { status: 400 }); } const result = await db.select().from(fileSchema).where(eq(fileSchema.publicId, public_id)).limit(1); if (!result.length) { logger.warn('File not found', { public_id }); return Response.json({ error: 'File not found' }, { status: 404 }); } const file = result[0]; return Response.json({ public_id: file.publicId, file_name: file.fileName, mime_type: file.mimeType, size_bytes: file.sizeBytes, file_type: file.fileType, uploader_id: file.uploaderId, created_at: file.createdAt.toISOString ? file.createdAt.toISOString() : file.createdAt }, { status: 200 }); } catch (error) { logger.error('File info error', { public_id, error: error.message }); return Response.json({ error: 'Server error' }, { status: 500 }); } }; Dxa4I#sql+DHealth = async (req) => { try { await db.execute(sql`SELECT 1` status: 'ok'u<Health check failed', {5status: 'error'"" 3xoimport logger from '../utils/logger.js'; import { db, files as fileSchema } from '../db/index.js'; import { nanoid } from 'nanoid'; import { forwardToStorage, getBot } from '../utils/telegram.js'; import { getFileType, checkFileSize, extractFileName, extractMimeType } from '../utils/file.js'; import { config } from '../env.js'; export const handleUpload = async (req) => { try { const contentType = req.headers.get('content-type') || ''; if (contentType.includes('multipart/form-data')) { return handleMultipartUpload(req); } else if (contentType.includes('application/json')) { return handleJSONUpload(req); } return Response.json( { error: 'Unsupported content type. Use multipart/form-data or application/json' }, { status: 400 } ); } catch (error) { logger.error('Upload error', { error: error.message }); return Response.json({ error: error.message }, { status: 500 }); } }; const handleMultipartUpload = async (req) => { try { const formData = await req.formData(); const file = formData.get('file'); const fileName = formData.get('fileName') || (file instanceof File ? file.name : null) || 'file'; if (!file || !(file instanceof File)) { return Response.json({ error: 'No file provided' }, { status: 400 }); } const fileBytes = await file.arrayBuffer(); const fileBuffer = Buffer.from(fileBytes); const mimeType = file.type || extractMimeType({}, req) || 'application/octet-stream'; const fileType = getFileType(mimeType, fileName); if (!checkFileSize(fileBuffer.byteLength, fileType)) { return Response.json({ error: `File size exceeds ${fileType} limit` }, { status: 400 }); } const isDocument = fileName.endsWith('.pdf') || fileName.endsWith('.txt') || !['photo', 'video', 'audio', 'voice', 'animation'].includes(fileType); const result = await forwardToStorage(fileBuffer, fileName, isDocument); const bot = getBot(); const fileInfo = await bot.api.getFile(result.telegramFileId); const uploaded = { publicId: nanoid(), telegramFileId: result.telegramFileId, telegramFileUniqueId: result.telegramFileUniqueId, storageChatId: config.storageChatId, storageMessageId: result.storageMessageId, fileName: fileName, mimeType: fileInfo.mime_type || mimeType || 'application/octet-stream', sizeBytes: fileInfo.file_size || fileBuffer.byteLength, fileType: fileType, uploaderId: 0, createdAt: new Date(), updatedAt: new Date() }; await db.insert(fileSchema).values(uploaded); // Prepare response matching original snake_case fields as expected in task description const responsePayload = { public_id: uploaded.publicId, telegram_file_id: uploaded.telegramFileId, telegram_file_unique_id: uploaded.telegramFileUniqueId, storage_chat_id: uploaded.storageChatId, storage_message_id: uploaded.storageMessageId, file_name: uploaded.fileName, mime_type: uploaded.mimeType, size_bytes: uploaded.sizeBytes, file_type: uploaded.fileType, uploader_id: uploaded.uploaderId, created_at: uploaded.createdAt.toISOString(), download_url: `${config.baseUrl}/f/${uploaded.publicId}` }; return Response.json(responsePayload, { status: 200 }); } catch (error) { logger.error('Multipart upload error', { error: error.message }); return Response.json({ error: error.message }, { status: 500 }); } }; const handleJSONUpload = async (req) => { try { const { file, fileName = 'file' } = await req.json(); if (!file || typeof file !== 'string') { return Response.json( { error: 'Invalid JSON. Must include "file" (base64) and optional "fileName"' }, { status: 400 } ); } const fileBytes = Buffer.from(file, 'base64'); const mimeType = 'application/octet-stream'; const fileType = getFileType(mimeType, fileName) === 'application' ? 'document' : getFileType(mimeType, fileName); if (!checkFileSize(fileBytes.byteLength, fileType)) { return Response.json({ error: `File size exceeds ${fileType} limit` }, { status: 400 }); } const isDocument = fileName.endsWith('.pdf') || fileName.endsWith('.txt') || !['photo', 'video', 'audio', 'voice', 'animation'].includes(fileType); const result = await forwardToStorage(fileBytes, fileName, isDocument); const bot = getBot(); const fileInfo = await bot.api.getFile(result.telegramFileId); const uploaded = { publicId: nanoid(), telegramFileId: result.telegramFileId, telegramFileUniqueId: result.telegramFileUniqueId, storageChatId: config.storageChatId, storageMessageId: result.storageMessageId, fileName: fileName, mimeType: fileInfo.mime_type || mimeType || 'application/octet-stream', sizeBytes: fileInfo.file_size || fileBytes.byteLength, fileType: fileType, uploaderId: 0, createdAt: new Date(), updatedAt: new Date() }; await db.insert(fileSchema).values(uploaded); // Prepare response matching original snake_case fields as expected in task description const responsePayload = { public_id: uploaded.publicId, telegram_file_id: uploaded.telegramFileId, telegram_file_unique_id: uploaded.telegramFileUniqueId, storage_chat_id: uploaded.storageChatId, storage_message_id: uploaded.storageMessageId, file_name: uploaded.fileName, mime_type: uploaded.mimeType, size_bytes: uploaded.sizeBytes, file_type: uploaded.fileType, uploader_id: uploaded.uploaderId, created_at: uploaded.createdAt.toISOString(), download_url: `${config.baseUrl}/f/${uploaded.publicId}` }; return Response.json(responsePayload, { status: 200 }); } catch (error) { logger.error('JSON upload error', { error: error.message }); return Response.json({ error: error.message }, { status: 500 }); } }; Dt xh100644 file.js.%L$PESO ~100644 logger.jsgT`x]ɲU:SE100644 rateLimit.js ŵ_}gM4100644 telegram.js3:ߎْZ I ;ްcx0const FILE_TYPES = { document: 2 * 1024 * 1024 * 1024, // 2GB photo: 10 * 1024 * 1024, // 10MB video: 2 * 1024 * 1024 * 1024, // 2GB audio: 200 * 1024 * 1024, // 200MB voice: 200 * 1024 * 1024, // 200MB animation: 2 * 1024 * 1024 * 1024 // 2GB }; export const getFileType = (mime, caption) => { const mimeUpper = mime?.split('/')[0]?.toLowerCase(); const captionLower = caption?.toLowerCase(); if (mimeUpper === 'video') return 'video'; if (mimeUpper === 'audio') return 'audio'; if (mimeUpper === 'document') return 'document'; if (mimeUpper === 'image') return captionLower?.includes('gif') ? 'animation' : 'photo'; if (captionLower?.includes('voice')) return 'voice'; if (captionLower?.includes('animation')) return 'animation'; return mimeUpper || 'document'; }; export const checkFileSize = (sizeBytes, fileType) => { const limit = FILE_TYPES[fileType] || FILE_TYPES.document; return sizeBytes <= limit; }; export const extractFileName = (msg, request) => { if (request?.headers?.['x-file-name']) { return request.headers['x-file-name']; } return msg.document?.fileName || msg.photo?.slice(-1)[0]?.fileName || msg.audio?.fileName || msg.voice?.fileName || msg.animation?.fileName || 'file'; }; export const extractMimeType = (msg, request) => { if (request?.headers?.['x-mime-type']) { return request.headers['x-mime-type']; } return msg.document?.mimeType || msg.photo?.slice(-1)[0]?.mimeType || msg.audio?.mimeType || msg.voice?.mimeType || msg.animation?.mimeType || 'application/octet-stream'; }; { const now = Date.now(); const windowMs = parseInt(process.env.RATE_LIMIT_WINDOW_MS, 10) || 60000; const maxRequests = parseInt(process.env.RATE_LIMIT_MAX_REQUESTS, 10) || 30; if (!rateLimitMap.has(key)) { rateLimitMap.set(key, { count: 0, reset: now + windowMs }); } const record = rateLimitMap.get(key); if (now > record.reset) { record.count = 0; record.reset = now + windowMs; } if (record.count >= maxRequests) { logger.warn('Rate limit exceeded', { key, count: record.count, reset: record.reset }); return false; } record.count++; return true; }; export const cleanupRateLimitCache = () => { const now = Date.now(); const windowMs = parseInt(process.env.RATE_LIMIT_WINDOW_MS, 10) || 60000; const keysToDelete = []; for (const [key, record] of rateLimitMap.entries()) { if (now > record.reset) { keysToDelete.push(key); } } keysToDelete.forEach(key => rateLimitMap.delete(key)); }; AW!}x$import { Telegraf } from 'telegraf'; import logger from './logger.js'; import { config } from '../env.js'; const bot = new Telegraf(config.botToken); const TELEGRAM_API_URL = `https://api.telegram.org/bot${config.botToken}/`; export const forwardToStorage = async (fileChunk, fileName, forceDocument = false) => { try { const caption = forceDocument ? `📁 ${fileName}` : fileName; const input = forceDocument ? { document: fileChunk, caption } : { photo: [fileChunk], caption }; const result = await bot.api.sendPhoto(config.storageChatId, input); logger.info('File forwarded to storage', { fileName, message: result.message_id }); return { telegramFileId: result.photo?.slice(-1)[0]?.file_id, telegramFileUniqueId: result.photo?.slice(-1)[0]?.file_unique_id, storageMessageId: result.message_id }; } catch (error) { logger.error('Failed to forward file to storage', { fileName, error: error.message }); throw error; } }; export const getFileInfo = async (telegramFileId, telegramFileUniqueId) => { try { const result = await fetch(`${TELEGRAM_API_URL}getFile`); const data = await result.json(); if (!data.ok) { throw new Error(data.description || 'Telegram API error'); } const fileId = data.result.file_id === telegramFileId ? telegramFileId : telegramFileUniqueId; const fileResult = await fetch(`${TELEGRAM_API_URL}getInfo`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ file_id: fileId }) }); const fileInfo = await fileResult.json(); if (!fileInfo.ok) { throw new Error(fileInfo.description || 'Telegram info error'); } return { file_size: fileInfo.result.file_size, mime_type: fileInfo.result.mime_type, file_path: fileInfo.result.file_path }; } catch (error) { logger.error('Failed to get file info', { error: error.message }); throw error; } }; export const getBot = () => bot; [(x`100644 bootstrap.test.js'sRݵaX3.8100644 bot.test.js'y { return { port: options.port, routes: options.routes, stop: mock() }; }); const originalServe = Bun.serve; Bun.serve = mockServe; const mockStartBot = mock(() => Promise.resolve({ stop: mock() })); mock.module("../src/bot.js", () => ({ startBot: mockStartBot })); mock.module("../src/routes/upload.js", () => ({ handleUpload: mock() })); mock.module("../src/routes/files.js", () => ({ handleFileRedirect: mock(), handleFileInfo: mock() })); mock.module("../src/routes/health.js", () => ({ handleHealth: mock() })); mock.module("../src/utils/rateLimit.js", () => ({ cleanupRateLimitCache: mock() })); describe("Bootstrap Server", () => { beforeEach(() => { mockServe.mockClear(); mockStartBot.mockClear(); }); afterAll(() => { Bun.serve = originalServe; }); it("should bootstrap the application successfully", async () => { await import("../src/index.js"); expect(mockServe).toHaveBeenCalled(); expect(mockStartBot).toHaveBeenCalled(); const serveCallArgs = mockServe.mock.calls[0][0]; expect(serveCallArgs).toHaveProperty("port"); expect(serveCallArgs).toHaveProperty("routes"); expect(serveCallArgs.routes).toHaveProperty("/api/upload"); expect(serveCallArgs.routes).toHaveProperty("/f/:public_id"); expect(serveCallArgs.routes).toHaveProperty("/file/:public_id/info"); expect(serveCallArgs.routes).toHaveProperty("/health"); }); }); ¾x^import { describe, it, expect, mock, spyOn, beforeEach, afterAll } from "bun:test"; import logger from "../src/utils/logger.js"; // Mock environment process.env.BOT_TOKEN = "8605908810:AAFpUzlIBktfd_7wpEj7zMJob2CFxvG-ZGY"; process.env.STORAGE_CHANNEL_ID = "-1003996572954"; process.env.BASE_URL = "https://tele.asepharyana.tech"; // Mock Telegraf const mockLaunch = mock(() => Promise.resolve()); const mockCommand = mock(); const mockOn = mock(); const mockUse = mock(); mock.module("telegraf", () => { return { Telegraf: class { constructor(token) { this.token = token; this.launch = mockLaunch; this.command = mockCommand; this.on = mockOn; this.use = mockUse; } } }; }); // Mock database const mockInsert = mock(() => ({ values: mock(() => Promise.resolve()) })); mock.module("../src/db/index.js", () => ({ db: { insert: mockInsert }, files: {} })); // Mock forwardToStorage const mockForwardToStorage = mock(() => Promise.resolve({ telegramFileId: "stored_file_id", telegramFileUniqueId: "stored_unique_id", storageMessageId: 9999 })); mock.module("../src/utils/telegram.js", () => ({ forwardToStorage: mockForwardToStorage })); const infoSpy = spyOn(logger, "info"); const errorSpy = spyOn(logger, "error"); describe("Telegram Bot Handler", () => { beforeEach(() => { mockLaunch.mockClear(); mockCommand.mockClear(); mockOn.mockClear(); mockUse.mockClear(); mockInsert.mockClear(); mockForwardToStorage.mockClear(); infoSpy.mockClear(); errorSpy.mockClear(); }); it("should initialize and launch the bot", async () => { const { startBot } = await import("../src/bot.js"); const bot = await startBot(); expect(bot).toBeDefined(); expect(mockCommand).toHaveBeenCalledWith("start", expect.any(Function)); expect(mockOn).toHaveBeenCalledWith( ["document", "photo", "video", "audio", "voice", "animation"], expect.any(Function) ); expect(mockUse).toHaveBeenCalled(); expect(mockLaunch).toHaveBeenCalled(); }); it("should handle /start command", async () => { const { startBot } = await import("../src/bot.js"); await startBot(); const startHandler = mockCommand.mock.calls.find(call => call[0] === "start")[1]; const replyMock = mock(() => Promise.resolve()); const ctx = { reply: replyMock }; await startHandler(ctx); expect(replyMock).toHaveBeenCalledWith(expect.stringContaining("Halo")); }); it("should process document uploads and save to db", async () => { const { startBot } = await import("../src/bot.js"); await startBot(); const fileHandler = mockOn.mock.calls[0][1]; const replyMock = mock(() => Promise.resolve()); const ctx = { message: { message_id: 42, document: { file_id: "doc_123", file_unique_id: "doc_uniq_123", file_size: 1024, mime_type: "application/pdf", file_name: "cv.pdf" } }, from: { id: 999 }, reply: replyMock }; await fileHandler(ctx); expect(mockForwardToStorage).toHaveBeenCalledWith("doc_123", "cv.pdf"); expect(mockInsert).toHaveBeenCalled(); expect(replyMock).toHaveBeenCalledWith(expect.stringContaining("File berhasil diupload"), expect.any(Object)); }); it("should reject uploads exceeding max size limit", async () => { const { startBot } = await import("../src/bot.js"); await startBot(); const fileHandler = mockOn.mock.calls[0][1]; const replyMock = mock(() => Promise.resolve()); const ctx = { message: { message_id: 42, photo: [{ file_id: "photo_123", file_unique_id: "photo_uniq_123", file_size: 20 * 1024 * 1024, // 20MB exceeds 10MB limit mime_type: "image/jpeg" }] }, from: { id: 999 }, reply: replyMock }; await fileHandler(ctx); expect(mockForwardToStorage).not.toHaveBeenCalled(); expect(replyMock).toHaveBeenCalledWith(expect.stringContaining("exceeds")); }); afterAll(() => { mock.restore(); }); }); g yDxJimport { describe, it, expect } from "bun:test"; import { db, files } from "../src/db/index.js"; import { files as schemaFiles } from "../src/db/schema.js"; describe("Database Layer", () => { it("should export db instance", () => { expect(db).toBeDefined(); }); it("should export files schema from both index and schema", () => { expect(files).toBeDefined(); expect(schemaFiles).toBeDefined(); expect(files).toBe(schemaFiles); }); it("should have correct schema properties", () => { expect(files.id).toBeDefined(); expect(files.publicId).toBeDefined(); expect(files.telegramFileId).toBeDefined(); expect(files.telegramFileUniqueId).toBeDefined(); expect(files.storageChatId).toBeDefined(); expect(files.storageMessageId).toBeDefined(); expect(files.fileName).toBeDefined(); expect(files.mimeType).toBeDefined(); expect(files.sizeBytes).toBeDefined(); expect(files.fileType).toBeDefined(); expect(files.uploaderId).toBeDefined(); expect(files.createdAt).toBeDefined(); expect(files.updatedAt).toBeDefined(); }); }); f#gxzimport { describe, it, expect, beforeAll } from "bun:test"; import { config } from "../src/env.js"; describe("Environment Variables Validation", () => { it("config should have all required fields", () => { expect(config).toHaveProperty("botToken"); expect(config).toHaveProperty("storageChatId"); expect(config).toHaveProperty("baseUrl"); expect(config).toHaveProperty("databaseUrl"); expect(config).toHaveProperty("port"); expect(config).toHaveProperty("nodeEnv"); expect(config).toHaveProperty("logLevel"); expect(config).toHaveProperty("rateLimitWindowMs"); expect(config).toHaveProperty("rateLimitMaxRequests"); }); it("config.botToken should return BOT_TOKEN from process.env", () => { expect(config.botToken).toBe(process.env.BOT_TOKEN); }); it("config.storageChatId should be parsed as integer from STORAGE_CHANNEL_ID", () => { expect(typeof config.storageChatId).toBe("number"); expect(config.storageChatId).toBe(parseInt(process.env.STORAGE_CHANNEL_ID, 10)); }); it("config.port should default to 3000 when not specified", () => { expect(typeof config.port).toBe("number"); }); it("nodeEnv should be 'test' or 'development'", () => { expect(["test", "development"]).toContain(config.nodeEnv); }); it("logLevel should default to 'info'", () => { expect(config.logLevel).toBe("info"); }); it("rateLimitWindowMs should default to 60000 when not specified", () => { expect(config.rateLimitWindowMs).toBe(60000); }); it("rateLimitMaxRequests should default to 30 when not specified", () => { expect(config.rateLimitMaxRequests).toBe(30); }); }); )AxVimport { describe, it, expect } from "bun:test"; import { getFileType, checkFileSize, extractFileName, extractMimeType } from "../src/utils/file.js"; describe("File Utilities", () => { describe("getFileType", () => { it("should classify video mime types as video", () => { expect(getFileType("video/mp4", "")).toBe("video"); expect(getFileType("video/quicktime", "")).toBe("video"); }); it("should classify audio mime types as audio", () => { expect(getFileType("audio/mpeg", "")).toBe("audio"); expect(getFileType("audio/ogg", "")).toBe("audio"); }); it("should classify image mime types based on caption", () => { expect(getFileType("image/jpeg", "my photo")).toBe("photo"); expect(getFileType("image/png", "cool image.png")).toBe("photo"); expect(getFileType("image/gif", "funny.gif")).toBe("animation"); expect(getFileType("image/png", "funny gif")).toBe("animation"); }); it("should classify voice and animation based on caption", () => { expect(getFileType("application/octet-stream", "this is a voice note")).toBe("voice"); expect(getFileType("application/octet-stream", "cool animation")).toBe("animation"); }); it("should default to mime first segment or document", () => { expect(getFileType("application/pdf", "")).toBe("application"); expect(getFileType(null, "")).toBe("document"); }); }); describe("checkFileSize", () => { it("should allow files under the size limit", () => { expect(checkFileSize(5 * 1024 * 1024, "photo")).toBe(true); // Photo limit is 10MB expect(checkFileSize(1 * 1024 * 1024 * 1024, "video")).toBe(true); // Video limit is 2GB }); it("should block files exceeding the size limit", () => { expect(checkFileSize(15 * 1024 * 1024, "photo")).toBe(false); // Photo limit is 10MB expect(checkFileSize(3 * 1024 * 1024 * 1024, "video")).toBe(false); // Video limit is 2GB }); it("should fall back to document limit if fileType is unknown", () => { expect(checkFileSize(1 * 1024 * 1024 * 1024, "unknown")).toBe(true); // Document limit is 2GB expect(checkFileSize(3 * 1024 * 1024 * 1024, "unknown")).toBe(false); }); }); describe("extractFileName", () => { it("should extract file name from headers if present", () => { const req = { headers: { "x-file-name": "custom.txt" } }; expect(extractFileName({}, req)).toBe("custom.txt"); }); it("should extract file name from various message attachment types", () => { expect(extractFileName({ document: { fileName: "doc.pdf" } }, null)).toBe("doc.pdf"); expect(extractFileName({ photo: [{ fileName: "low.jpg" }, { fileName: "high.jpg" }] }, null)).toBe("high.jpg"); expect(extractFileName({ audio: { fileName: "song.mp3" } }, null)).toBe("song.mp3"); expect(extractFileName({ voice: { fileName: "voice.ogg" } }, null)).toBe("voice.ogg"); expect(extractFileName({ animation: { fileName: "anim.gif" } }, null)).toBe("anim.gif"); }); it("should return default filename if not found", () => { expect(extractFileName({}, null)).toBe("file"); }); }); describe("extractMimeType", () => { it("should extract mime type from headers if present", () => { const req = { headers: { "x-mime-type": "text/plain" } }; expect(extractMimeType({}, req)).toBe("text/plain"); }); it("should extract mime type from various message attachment types", () => { expect(extractMimeType({ document: { mimeType: "application/pdf" } }, null)).toBe("application/pdf"); expect(extractMimeType({ photo: [{ mimeType: "image/jpeg" }, { mimeType: "image/png" }] }, null)).toBe("image/png"); expect(extractMimeType({ audio: { mimeType: "audio/mpeg" } }, null)).toBe("audio/mpeg"); expect(extractMimeType({ voice: { mimeType: "audio/ogg" } }, null)).toBe("audio/ogg"); expect(extractMimeType({ animation: { mimeType: "video/mp4" } }, null)).toBe("video/mp4"); }); it("should return default mime type if not found", () => { expect(extractMimeType({}, null)).toBe("application/octet-stream"); }); }); }); Pcx-import { describe, it, expect, mock, beforeEach, afterAll } from "bun:test"; // Mock database layer const mockSelect = mock(() => ({ from: mock(() => ({ where: mock(() => ({ limit: mock(() => Promise.resolve([])) })) })) })); mock.module("../src/db/index.js", () => ({ db: { select: mockSelect }, files: { publicId: { equals: (val) => ({ type: "equals", value: val }) } } })); // Mock telegram utils const mockGetFile = mock(() => Promise.resolve({ file_path: "photos/file_0.jpg" })); mock.module("../src/utils/telegram.js", () => ({ getBot: () => ({ api: { getFile: mockGetFile } }) })); // Mock rateLimit const mockCheckRateLimit = mock(() => true); mock.module("../src/utils/rateLimit.js", () => ({ checkRateLimit: mockCheckRateLimit })); describe("File Route Handlers", () => { let handleFileRedirect, handleFileInfo; beforeEach(async () => { mockSelect.mockClear(); mockGetFile.mockClear(); mockCheckRateLimit.mockClear(); // Set up mock token process.env.BOT_TOKEN = "123456:ABC-DEF"; const filesRoute = await import("../src/routes/files.js"); handleFileRedirect = filesRoute.handleFileRedirect; handleFileInfo = filesRoute.handleFileInfo; }); describe("handleFileRedirect", () => { it("should return 429 if rate limit is exceeded", async () => { mockCheckRateLimit.mockImplementationOnce(() => false); const req = new Request("http://localhost:3000/f/test-id"); const res = await handleFileRedirect(req, { params: { public_id: "test-id" } }); expect(res.status).toBe(429); const body = await res.json(); expect(body.error).toBe("Rate limit exceeded"); }); it("should return 404 if file is not found in database", async () => { mockSelect.mockImplementationOnce(() => ({ from: () => ({ where: () => ({ limit: () => Promise.resolve([]) }) }) })); const req = new Request("http://localhost:3000/f/missing-id"); const res = await handleFileRedirect(req, { params: { public_id: "missing-id" } }); expect(res.status).toBe(404); const body = await res.json(); expect(body.error).toBe("File not found"); }); it("should redirect to telegram file url if file is found", async () => { mockSelect.mockImplementationOnce(() => ({ from: () => ({ where: () => ({ limit: () => Promise.resolve([{ id: "uuid-123", publicId: "test-id", telegramFileId: "tg-file-id", fileName: "test.jpg" }]) }) }) })); const req = new Request("http://localhost:3000/f/test-id"); const res = await handleFileRedirect(req, { params: { public_id: "test-id" } }); expect(res.status).toBe(302); expect(res.headers.get("Location")).toBe("https://api.telegram.org/file/bot123456:ABC-DEF/photos/file_0.jpg"); }); it("should return 500 on database or external errors", async () => { mockSelect.mockImplementationOnce(() => { throw new Error("DB Connection Error"); }); const req = new Request("http://localhost:3000/f/test-id"); const res = await handleFileRedirect(req, { params: { public_id: "test-id" } }); expect(res.status).toBe(500); const body = await res.json(); expect(body.error).toBe("Server error"); }); }); describe("handleFileInfo", () => { it("should return 404 if file is not found in database", async () => { mockSelect.mockImplementationOnce(() => ({ from: () => ({ where: () => ({ limit: () => Promise.resolve([]) }) }) })); const req = new Request("http://localhost:3000/file/missing-id/info"); const res = await handleFileInfo(req, { params: { public_id: "missing-id" } }); expect(res.status).toBe(404); const body = await res.json(); expect(body.error).toBe("File not found"); }); it("should return file info JSON if file is found", async () => { const dbFile = { publicId: "test-id", fileName: "image.png", mimeType: "image/png", sizeBytes: 2048, fileType: "photo", uploaderId: 99999, createdAt: new Date("2026-05-18T00:00:00.000Z") }; mockSelect.mockImplementationOnce(() => ({ from: () => ({ where: () => ({ limit: () => Promise.resolve([dbFile]) }) }) })); const req = new Request("http://localhost:3000/file/test-id/info"); const res = await handleFileInfo(req, { params: { public_id: "test-id" } }); expect(res.status).toBe(200); const body = await res.json(); expect(body).toEqual({ public_id: "test-id", file_name: "image.png", mime_type: "image/png", size_bytes: 2048, file_type: "photo", uploader_id: 99999, created_at: "2026-05-18T00:00:00.000Z" }); }); it("should return 500 on database or external errors", async () => { mockSelect.mockImplementationOnce(() => { throw new Error("DB Connection Error"); }); const req = new Request("http://localhost:3000/file/test-id/info"); const res = await handleFileInfo(req, { params: { public_id: "test-id" } }); expect(res.status).toBe(500); const body = await res.json(); expect(body.error).toBe("Server error"); }); }); afterAll(() => { mock.restore(); }); }); benOx import { describe, it, expect, mock, beforeEach } from "bun:test"; // Mock database layer const mockExecute = mock(() => Promise.resolve()); mock.module("../src/db/index.js", () => ({ db: { execute: mockExecute } })); describe("Health Route Handler", () => { let handleHealth; beforeEach(async () => { mockExecute.mockClear(); const healthRoute = await import("../src/routes/health.js"); handleHealth = healthRoute.handleHealth; }); it("should return status 200 and ok when DB is healthy", async () => { const req = new Request("http://localhost:3000/health"); const res = await handleHealth(req); expect(res.status).toBe(200); const body = await res.json(); expect(body).toEqual({ status: "ok" }); expect(mockExecute).toHaveBeenCalled(); }); it("should return status 500 and error details when DB health check fails", async () => { mockExecute.mockImplementationOnce(() => Promise.reject(new Error("DB Connection Failed"))); const req = new Request("http://localhost:3000/health"); const res = await handleHealth(req); expect(res.status).toBe(500); const body = await res.json(); expect(body.status).toBe("error"); expect(body.error).toBe("DB Connection Failed"); }); }); RŴx import { describe, it, expect, beforeEach, afterEach, mock, spyOn } from "bun:test"; import { checkRateLimit, cleanupRateLimitCache } from "../src/utils/rateLimit.js"; import logger from "../src/utils/logger.js"; // Spy on logger.warn const warnSpy = spyOn(logger, "warn"); describe("Rate Limiter", () => { beforeEach(() => { warnSpy.mockClear(); // Set custom env variables for predictable tests process.env.RATE_LIMIT_WINDOW_MS = "100"; // 100ms window process.env.RATE_LIMIT_MAX_REQUESTS = "3"; // max 3 requests }); afterEach(() => { delete process.env.RATE_LIMIT_WINDOW_MS; delete process.env.RATE_LIMIT_MAX_REQUESTS; }); it("should allow requests under the limit", () => { const key = "user-1"; expect(checkRateLimit(key)).toBe(true); expect(checkRateLimit(key)).toBe(true); expect(checkRateLimit(key)).toBe(true); expect(warnSpy).not.toHaveBeenCalled(); }); it("should block requests exceeding the limit and log a warning", () => { const key = "user-2"; expect(checkRateLimit(key)).toBe(true); expect(checkRateLimit(key)).toBe(true); expect(checkRateLimit(key)).toBe(true); // 4th request exceeds limit of 3 expect(checkRateLimit(key)).toBe(false); expect(warnSpy).toHaveBeenCalled(); const callArgs = warnSpy.mock.calls[0]; expect(callArgs[0]).toBe("Rate limit exceeded"); expect(callArgs[1].key).toBe(key); }); it("should reset request count after the window passes", async () => { const key = "user-3"; expect(checkRateLimit(key)).toBe(true); expect(checkRateLimit(key)).toBe(true); expect(checkRateLimit(key)).toBe(true); expect(checkRateLimit(key)).toBe(false); // blocked // Wait for window to expire (100ms) await new Promise((resolve) => setTimeout(resolve, 110)); // Should be allowed again expect(checkRateLimit(key)).toBe(true); }); it("should cleanup rate limit cache of expired keys", async () => { const key1 = "cleanup-1"; const key2 = "cleanup-2"; // Populate keys expect(checkRateLimit(key1)).toBe(true); expect(checkRateLimit(key2)).toBe(true); // Run cleanup immediately (none should be expired yet as 100ms hasn't passed) cleanupRateLimitCache(); // Verify still tracked (counts shouldn't reset, e.g., if we consume remaining limits) expect(checkRateLimit(key1)).toBe(true); // request 2 expect(checkRateLimit(key1)).toBe(true); // request 3 expect(checkRateLimit(key1)).toBe(false); // request 4 (blocked) // Wait for window to expire await new Promise((resolve) => setTimeout(resolve, 110)); // Run cleanup cleanupRateLimitCache(); // Since they were deleted from the map, they should be initialized as new records // If they were cleaned up, we should be able to do 3 requests again expect(checkRateLimit(key1)).toBe(true); // 1 expect(checkRateLimit(key1)).toBe(true); // 2 expect(checkRateLimit(key1)).toBe(true); // 3 expect(checkRateLimit(key1)).toBe(false); // 4 (blocked) }); }); e:Hxvimport { describe, it, expect, beforeEach, afterEach, mock, spyOn } from "bun:test"; import logger from "../src/utils/logger.js"; import { config } from "../src/env.js"; // Mock Telegraf and fetch mock.module("telegraf", () => { return { Telegraf: class { constructor(token) { this.token = token; this.api = { sendPhoto: mock(() => Promise.resolve({ message_id: 12345, photo: [ { file_id: "photo_id_low", file_unique_id: "unique_id_low" }, { file_id: "photo_id_high", file_unique_id: "unique_id_high" } ] })) }; } } }; }); const infoSpy = spyOn(logger, "info"); const errorSpy = spyOn(logger, "error"); describe("Telegram API Utilities", () => { let forwardToStorage, getFileInfo, getBot; beforeEach(async () => { infoSpy.mockClear(); errorSpy.mockClear(); global.fetch = mock(() => Promise.resolve(new Response(JSON.stringify({ ok: true })))); // Import dynamically so mocking is applied first const telegramUtils = await import("../src/utils/telegram.js"); forwardToStorage = telegramUtils.forwardToStorage; getFileInfo = telegramUtils.getFileInfo; getBot = telegramUtils.getBot; }); afterEach(() => { delete global.fetch; }); describe("getBot", () => { it("should return the telegraf bot instance", () => { const bot = getBot(); expect(bot).toBeDefined(); expect(bot.api).toBeDefined(); }); }); describe("forwardToStorage", () => { it("should forward photo to storage chat and return file details", async () => { const chunk = Buffer.from("fake photo data"); const fileName = "test_photo.jpg"; const result = await forwardToStorage(chunk, fileName, false); expect(result).toEqual({ telegramFileId: "photo_id_high", telegramFileUniqueId: "unique_id_high", storageMessageId: 12345 }); expect(infoSpy).toHaveBeenCalledWith("File forwarded to storage", { fileName, message: 12345 }); }); it("should handle error when forwarding fails", async () => { const bot = getBot(); bot.api.sendPhoto = mock(() => Promise.reject(new Error("Telegram send failed"))); const chunk = Buffer.from("fake photo data"); const fileName = "test_photo.jpg"; await expect(forwardToStorage(chunk, fileName, false)).rejects.toThrow("Telegram send failed"); expect(errorSpy).toHaveBeenCalledWith("Failed to forward file to storage", { fileName, error: "Telegram send failed" }); }); }); describe("getFileInfo", () => { it("should fetch file details successfully", async () => { global.fetch = mock((url, init) => { if (url.endsWith("getFile")) { return Promise.resolve(new Response(JSON.stringify({ ok: true, result: { file_id: "some_file_id" } }))); } else if (url.endsWith("getInfo")) { return Promise.resolve(new Response(JSON.stringify({ ok: true, result: { file_size: 98765, mime_type: "image/jpeg", file_path: "photos/file_0.jpg" } }))); } return Promise.reject(new Error("Unknown URL")); }); const result = await getFileInfo("some_file_id", "some_unique_id"); expect(result).toEqual({ file_size: 98765, mime_type: "image/jpeg", file_path: "photos/file_0.jpg" }); }); it("should handle error when getFile fails", async () => { global.fetch = mock(() => Promise.resolve(new Response(JSON.stringify({ ok: false, description: "Bad Request: file_id invalid" })))); await expect(getFileInfo("invalid_file_id", "invalid_unique_id")).rejects.toThrow("Bad Request: file_id invalid"); expect(errorSpy).toHaveBeenCalled(); }); }); }); x import { describe, it, expect, mock, spyOn, beforeEach, afterEach } from "bun:test"; import logger from "../src/utils/logger.js"; // Mock db const mockInsert = mock(() => ({ values: mock(() => Promise.resolve()) })); mock.module("../src/db/index.js", () => ({ db: { insert: mockInsert }, files: {} })); // Mock nanoid mock.module("nanoid", () => ({ nanoid: () => "mocked-nanoid-id" })); // Mock telegram utils mock.module("../src/utils/telegram.js", () => ({ forwardToStorage: mock(() => Promise.resolve({ telegramFileId: "tg-file-id-123", telegramFileUniqueId: "tg-unique-id-abc", storageMessageId: 98765 })), getBot: () => ({ api: { getFile: mock(() => Promise.resolve({ file_id: "tg-file-id-123", file_size: 1000, mime_type: "image/jpeg" })) } }) })); describe("Upload Route Handler", () => { let handleUpload; beforeEach(async () => { mockInsert.mockClear(); const uploadRoute = await import("../src/routes/upload.js"); handleUpload = uploadRoute.handleUpload; }); it("should reject unsupported content types with 400 status", async () => { const req = new Request("http://localhost:3000/api/upload", { method: "POST", headers: { "content-type": "text/plain" }, body: "plain text data" }); const res = await handleUpload(req); expect(res.status).toBe(400); const body = await res.json(); expect(body.error).toContain("Unsupported content type"); }); it("should process JSON upload (base64) successfully", async () => { const req = new Request("http://localhost:3000/api/upload", { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify({ file: Buffer.from("hello world").toString("base64"), fileName: "test.txt" }) }); const res = await handleUpload(req); expect(res.status).toBe(200); const body = await res.json(); expect(body.public_id).toBe("mocked-nanoid-id"); expect(body.telegram_file_id).toBe("tg-file-id-123"); expect(body.telegram_file_unique_id).toBe("tg-unique-id-abc"); expect(body.file_name).toBe("test.txt"); expect(body.file_type).toBe("document"); }); it("should reject JSON upload without file key", async () => { const req = new Request("http://localhost:3000/api/upload", { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify({ fileName: "test.txt" }) }); const res = await handleUpload(req); expect(res.status).toBe(400); const body = await res.json(); expect(body.error).toContain("Invalid JSON"); }); it("should process multipart upload successfully", async () => { const formData = new FormData(); const fileBlob = new Blob([Buffer.from("multipart hello")], { type: "text/plain" }); formData.append("file", fileBlob, "test_multi.txt"); const req = new Request("http://localhost:3000/api/upload", { method: "POST", body: formData }); const res = await handleUpload(req); expect(res.status).toBe(200); const body = await res.json(); expect(body.public_id).toBe("mocked-nanoid-id"); expect(body.file_name).toBe("test_multi.txt"); }); }); IU*xU%beforeEach, afterAllAz 2 afterAll(() => { mock.restore(); }); }); 1 >x`un.lock1%K{a58黑&index.ts{,dTώsx 6ѦS=e$r9 JP)O=j;l83_100644 tsconfig.jsonI}rR%FS/xY`}]"&!package.jsonwv[j'Ol>8g]d7YId+xW1$kjj!jjjj/j/otstrap.test.js# } } Ox4рTa\;=WzOj;l83_s2Gx11$?types/bun": "latest  } } kAx xJ@QLߛR!׳8vTIA6 Bv _#=IB(k,U&#o x 6@}); 3f}x_++%OspyOn, beforeEach } from "bun:test"; import logger from "../src/utils/logger.jsJV}); tl!0 x4̯types/bun": "latest, % bun": ["@types/bunq/#bun-types": "1.3.14" } }, "sha512-h1hFqFVcvAvD9j9K7ZW7vd82aSA+rTdznZa+5bwvCwqSB1jmmfLcbIWhOLx1/+boy/xmjgCs/OMUL8hRJSmnPw=="], )u5`7|C(xconsole.log("Hello via Bun!"); -x { "compilerOptions": { // Environment setup & latest features "lib": ["ESNext"], "target": "ESNext", "module": "Preserve", "moduleDetection": "force", "jsx": "react-jsx", "allowJs": true, "types": ["bun"], // Bundler mode "moduleResolution": "bundler", "allowImportingTsExtensions": true, "verbatimModuleSyntax": true, "noEmit": true, // Best practices "strict": true, "skipLibCheck": true, "noFallthroughCasesInSwitch": true, "noUncheckedIndexedAccess": true, "noImplicitOverride": true, // Some stricter flags (disabled by default) "noUnusedLocals": false, "noUnusedParameters": false, "noPropertyAccessFromIndexSignature": false } } v@Psx?W3VN_y%ss/40000 test] Vd ta=r)Gmi1x aAh?x-rox?W3Dy& BC40000 test["U*|x\Z)j-x "?Ahx&100644 upload.js)Y  )ap5!k"x T#|Ux?W3(^yZ2 x%100644 logger.jsgT`x]ɲU:SEKd>xzMM@Oxo?;5n8.DQ#W7\b'>Fϓ'03)*WdZ@YUc-40000 testH_7VݰY쌈瓊)3Lx  sk8}, "peerltypescript": "^5. C'typescript": ["typescript@5.9.3", "", { "bin": { "tsc": "bin/tsc", "tsserver": "bin/tsserver" } }, "sha512-jl1vZzPDinLr9eUt3J/tB7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSwW } } V%xJ-drizzle-orm": "^0.29.06, "nanoid": "^5.0.48 } } ;FxB100644 env.jsM g` '~06~>40000 utilsze1SvߕQ{>yZ2B1x'100644 env.test.jsg3S.s(D_ B%sxXwl a*t) x 40000 utilsze1SvߕQ{>yZ2 ~kNx M)Hgx8(\6sɭyg-Q{' 5H RK) @x# teleuploader To install dependencies: ```bash bun install ``` To run: ```bash bun run index.ts ``` This project was created using `bun init` in bun v1.3.14. [Bun](https://bun.com) is a fast all-in-one JavaScript runtime. Mm x8{ "name": "teleuploader", "module": "index.ts", "type": "module", "private": true, "devDependencies": { "@types/bun": "latest" }, "peerDependencies": { "typescript": "^5" } } 4B:x(100644 .gitignore-'NW|ݟ0ad/ [100644 CLAUDE.mdvLٝi~~r( 100644 README.md6sɭyg-Q100644 bun.lock?;5n8.DQ#40000 docs?6'x3H۟100644 index.ts{,dTώsx 6Ѧ100644 package.json' 5H RK100644 tsconfig.jsonI}rR%~wڦx&40000 superpowersJJ5&(zx 40000 specsI*9йt菿 ix uz&pɇ 4R*