# v2 git bundle e88e5dbc392154c49abcff683c62d96c13f0fbdc refs/heads/bundle e88e5dbc392154c49abcff683c62d96c13f0fbdc HEAD PACKxctree b439dcdff2e7b191f925d41eaa77b8f55b599cf5 parent 0e2f09012f2bb79021edb301924de8769cd51469 author Asep Haryana Saputra <90584806+MythEclipse@users.noreply.github.com> 1780038530 +0700 committer Asep Haryana Saputra <90584806+MythEclipse@users.noreply.github.com> 1780038530 +0700 ci: slim deploy.yml to test-only; build/push/deploy handled by monorepo/r.xStree 41f17987446a2336b626cd9040fa9df827c99abc parent 134a7d4bf6623ed4bb2c5cce42224c064eddb269 author Asep Haryana Saputra <90584806+MythEclipse@users.noreply.github.com> 1780038501 +0700 committer Asep Haryana Saputra <90584806+MythEclipse@users.noreply.github.com> 1780038501 +0700 ci: add notify-parent workflow for monorepo integration`0lžxNtree 0cd4b387f5537b1635ef431311ec88947c890c1b parent 8508b360268f649e19763d1fb8b02f95b2fbe593 author MythEclipse 1780001157 +0700 committer MythEclipse 1780001157 +0700 feat: update Traefik router rules to support additional domains and change TLS certresolver to Cloudflare 'k>x<tree ac3ed7af1266d9e266206b434af38d3adef03aa7 parent 5425f6d33ddc7d85095e40ca3922189a26893ba6 author MythEclipse 1780001029 +0700 committer MythEclipse 1780001029 +0700 feat: update file handling to redirect to Telegram CDN and adjust Swagger documentation 6XdAxtree 238174bcfd5b14b21326dc41f8a1bc43b4ff05e4 parent be813b1c0ed57ffa0cd2b817f52111a736ed474c author MythEclipse 1780000419 +0700 committer MythEclipse 1780000419 +0700 feat: enhance configuration and rate limiting - Added new configuration options: trustProxy, uploadConcurrency, batchMaxItems, batchMaxSizeBytes, and maxRequestBodyBytes to AppConfig. - Implemented utility functions for parsing environment variables and masking sensitive data. - Updated rate limiting logic to use configurable window size and maximum requests per window. - Introduced a middleware for rate limiting on specific routes. - Refactored file handling routes to support streaming downloads instead of redirects. - Improved error handling and response formatting in file routes. - Added support for oversized request rejection based on Content-Length header. - Updated Swagger documentation to reflect changes in API behavior and responses. - Enhanced tests to cover new features and ensure proper functionality. Wux/tree eb2e4f5ae7b4a602a9144f420c5b994bd90d26a3 parent db5de1367d10b0cfe302307583f978f4e7f26004 author MythEclipse 1779998270 +0700 committer MythEclipse 1779998270 +0700 feat: update Traefik router rule to use new domain for file upload service '<`Gx_tree 870f0ecb920364bbe6c1511897218c87fffd8d7f parent 56b929ffb1a7cccce64fa6cde1f8fa808a4a084e author MythEclipse 1779385909 +0700 committer MythEclipse 1779385909 +0700 feat: extend file schema with archive metadata, implement batch upload processing, and add zip utilities for file handling usxStree df8f3dc68c75626ac4ca4f8733add8369318fafe parent fd5eb98586471e609a95402cf692bfd9f60c9235 author MythEclipse 1779384594 +0700 committer MythEclipse 1779384594 +0700 feat: enhance file upload process with temporary file handling, improved error management, and metrics logging jnśxKtree e80f5aca7db2726df26b0d123f0ef07b757aafcc parent 10c968cf0105ed08e1a4412c3f142ac455ce3036 author MythEclipse 1779381109 +0700 committer MythEclipse 1779381109 +0700 feat: implement caching for file info, add rate limiting, and enhance upload handling with retry logic rjĜx\tree 7e46ef0b3eed0d72890844e9974c87f7b077b4c0 parent 52340ee77db8ba46d74ebfb07b2e780845f21562 author MythEclipse 1779378942 +0700 committer MythEclipse 1779378942 +0700 feat: add file_hash column and related index to files table; refactor Telegram API utilities for improved file handling ` p{xJtree 196111f2329d8bc2a06fd00a354bec88d3b8281e parent 06844f1fa1a7fe8ba4f54fabc11568eab5812585 author MythEclipse 1779377515 +0700 committer MythEclipse 1779377515 +0700 feat: enhance file upload handling with improved file detection, size limits, and response formatting jיx9tree 12cc495bebb3300cb0faa4045d81152d5c5e4f7b parent 884710fd4244224b457994c4a99d1ac8d2bace4f author MythEclipse 1779116635 +0700 committer MythEclipse 1779116635 +0700 docs: update CLAUDE.md to include details on temporary file handling for API uploads c8xEtree fd0ef86635ba8f7a6beb75d82254954d3d48a530 parent cc3f85284bdbf2e52f3e9dae6e3ffac3f17737c1 author MythEclipse 1779116486 +0700 committer MythEclipse 1779116486 +0700 feat: implement temporary file handling for uploads and update tests for dynamic ID verification 'j x)tree e8326c34eab734e18713aca125193a30a1ad623a parent d58b2390efbce1b1b9e2778c0a6a926d6482f84d author MythEclipse 1779116097 +0700 committer MythEclipse 1779116097 +0700 docs: add dynamic image fetching details for unit tests in CLAUDE.md \].xCtree 3644f9a34a5457778c3db5200636be15a1fe80c6 parent b91b276214729c7cd46cdf79ecaadd89032d4869 author MythEclipse 1779116079 +0700 committer MythEclipse 1779116079 +0700 refactor: remove concurrency limit from Telegram upload queue and enhance media group handling hx;tree 8d3360c90815ffd41372b1bf9565554b62586b0c parent 0bc12651db86c9a33f01caeb3263540ee4295c38 author MythEclipse 1779114680 +0700 committer MythEclipse 1779114680 +0700 feat: add support for batch uploads of media groups to Telegram with debounce handling ɥcx>tree c6c031f2c1522f0d4c4e1a748aae55cbeea212bf parent 825e9695698d6c406fda99caea74099cc36851ed author MythEclipse 1779113978 +0700 committer MythEclipse 1779113978 +0700 fix: clean up logger info message formatting and remove unused import in rate limit tests gfxOtree fe4b94f9ecfc7b2003fd32faf0a2664807481b9b parent 721fa3db7d80cf49e75bee8ede46240346eeee95 author MythEclipse 1779113896 +0700 committer MythEclipse 1779113896 +0700 feat: implement multi-bot support for Telegram API with rate limit handling and add task queue for uploads Km!x?tree b4bc79f9bc5b7c4f2df20459f3f9f500802470c8 parent 91cfee0b375b2ed93cb76db7ab0e17207a288325 author MythEclipse 1779112958 +0700 committer MythEclipse 1779112958 +0700 feat: implement auto-retry for Telegram API requests on error 429 and update documentation fB#x1tree 545ab9856e7e0f488d8df2309536310cc9dca63a parent 525348b1f3c24148a79bd85154a65be52df91ce5 author MythEclipse 1779108903 +0700 committer MythEclipse 1779108903 +0700 fix: load BOT_TOKEN from process.env in tests to prevent leaks - Update test/bot.test.ts to use process.env.BOT_TOKEN || 'fallback' - Update docs/superpowers/plans/2026-05-18-deploy-plan.md to use placeholders - Completely eliminates hardcoded active API token from codebase Co-Authored-By: Claude Opus 4.7 Q;v2x,tree 885f872069069d51824b17ebd5c145a300e29121 parent bf6d5f04c4e6243ed679852e2a23d246dbca9fe9 author MythEclipse 1779108766 +0700 committer MythEclipse 1779108766 +0700 fix: make forwardToStorage fully dynamic based on fileType - Replace forceDocument boolean with fileType string in forwardToStorage - Dynamically call matching sendPhoto, sendAudio, sendVideo, sendVoice, sendAnimation, sendSticker, or sendDocument Telegraf API method - Correctly extract uploaded file details based on what Telegram returned - Fixes IMAGE_PROCESS_FAILED 500 error when uploading ogg audio, video, sticker, or voice notes via HTTP - Update upload.ts, bot.ts, and test suites to match the new dynamic signature Co-Authored-By: Claude Opus 4.7 (x{tree d363c40e1da7a98b7f105f2a2fff32fa5f570c9f parent b2de5f583dc33c5b523188dac54f75e5acd95507 author MythEclipse 1779108381 +0700 committer MythEclipse 1779108381 +0700 fix: bundle migration script and ensure file_hash column exists - Compile src/db/migrate.ts to dist/migrate.js during build - Copy dist/migrate.js to Stage 2 (runner) inside Dockerfile - Run bun dist/migrate.js on db:migrate command - Modify schema.sql to use CREATE TABLE IF NOT EXISTS and ALTER TABLE to add file_hash to existing database instances on VPS Co-Authored-By: Claude Opus 4.7 $nx3tree 4314d81b6954b986b9988d59744b6f133720ee8d parent a0262e2d46e86ea750467229de02c8f8e759b4dc author MythEclipse 1779108137 +0700 committer MythEclipse 1779108137 +0700 feat: add design document for multi-format upload and anti-duplication feature "ahx tree 705ddb7935ee847e253bf74a3dbe699246be270a parent ea4341fdfe443845d9c2ba17b69b272db75ead25 author MythEclipse 1779108111 +0700 committer MythEclipse 1779108111 +0700 style: run formatter on modified files Sߑ%xQtree f739b5a8cd348325205f4f284df1f9d7ad1d989a parent 04a2e52250658ffc17499766546c4ff0880f2d6b author MythEclipse 1779108076 +0700 committer MythEclipse 1779108076 +0700 feat: implement deduplication and all media types in bot listener - Expand registered bot listener to support sticker and video_note media types - Check database for existing telegramFileUniqueId to bypass forwarding duplicates - Update tests to assert deduplication and new formats handling in bot.test.ts Co-Authored-By: Claude Opus 4.7 Y'xtree f4a6c617232e946dba90f4339a5b369b4b309f48 parent 4e805689c14fd3702b0c9f1f38c03d242f5ccc61 author MythEclipse 1779107995 +0700 committer MythEclipse 1779107995 +0700 feat: implement deduplication in HTTP upload router - Compute SHA-256 hash using computeHash for multipart and JSON uploads - Query database for existing file records with the same hash - Return existing metadata and download URL immediately on duplicate match without reforwarding to Telegram - Include fileHash in newly inserted file database records Co-Authored-By: Claude Opus 4.7 Jׄ&xctree 49b33aab22778d2fd3dc4223b5709affd32ec8f4 parent 22c2133b24d47fc9d4e3fad1925cf8bf67067e37 author MythEclipse 1779107892 +0700 committer MythEclipse 1779107892 +0700 feat: extend file type classification and implement computeHash - Add sticker (webp) and video_note to classification mapping and file limits - Handle unknown mime or caption fallback to document - Implement computeHash utility using Bun.CryptoHasher for sha256 checksums - Update and add comprehensive tests in file.test.ts Co-Authored-By: Claude Opus 4.7 Gxmtree 732058b5a4cbbb1715e08a053d8aa03d4ab089d0 parent 3d2500ed7f8a83a11325f6ae84eb57338896125c author MythEclipse 1779107779 +0700 committer MythEclipse 1779107779 +0700 feat: add fileHash column to files schema Update files database schema and test suite to support fileHash property. Co-Authored-By: Claude Opus 4.7 B+x1tree ab661af0d1b5d30035be5d3dbb6664a594637c9b parent 5de424bf8e90a23fc8544b9a5f12f6c4a49b9495 author MythEclipse 1779070803 +0700 committer MythEclipse 1779070803 +0700 fix: auto-append file extension based on magic bytes or mime type if missing 8)a>xtree 2116562f406a0c84b702c26ae35a7445e009d07a parent ed7f607ee4c5409c19292bc2e627732ed99f7386 author MythEclipse 1779069382 +0700 committer MythEclipse 1779069382 +0700 ci: add write permission for packages to GHCR pushing ;W@x tree 786a33112e62f191c3e74cdca56e19e08bb5f4c3 parent ed88069e60f7f2f352b1c66264f084a1e77bcd21 author MythEclipse 1779069322 +0700 committer MythEclipse 1779069322 +0700 style: sort imports in telegram test to satisfy Biome check s[ x7tree 333d6b534362bc8cc56b8d2ab8b3a8956d6a9385 parent 910d29d5b9cae2f1050f1aba99e9740f60dbb80b author MythEclipse 1779069264 +0700 committer MythEclipse 1779069264 +0700 fix: assert sendDocument with config.storageChatId to match dynamic mock env in CI cbx/tree f58a341962cd71da99af41a8e0e2a7ff419b0cfb parent c0827b09c5734f1a38bb3750bf896403379dd7bb author MythEclipse 1779069224 +0700 committer MythEclipse 1779069224 +0700 fix: upgrade Bun setup version to latest to support modern lockfile format NaDx=tree f07cdff798467b586c50c5891e1a6bb3fa0afc03 parent 7f1178d72b510522f79f99d630498b5b17426096 author MythEclipse 1779068569 +0700 committer MythEclipse 1779068569 +0700 fix: make DB tests more robust by checking definition rather than strict module identity e(xDtree 7dee9e60ce11d243d9ceebee9db7d455973836b8 parent 06a1b38c025ae868a2f1ada6858d1d8623d2770a parent 1fc408046627586e1906b9f2454c7f07e3f97805 author MythEclipse 1779068497 +0700 committer MythEclipse 1779068497 +0700 Merge branch 'worktree-agent-a7a26e7873ab5b94e' Taוxetree 633f9563e2e028939a3debfdbfca1573425d1e73 parent 2c1c5ad6383264c0ec97910b56e7a80ea3f19b62 author MythEclipse 1779068489 +0700 committer MythEclipse 1779068489 +0700 ci: add GitHub Actions pipeline for tests, Docker build, and deployment Co-Authored-By: Claude Opus 4.7 ;qxDtree 4ef940d99619d1e7e4e3eb84c0bf4df18dd2e1e0 parent e4c074c81f47bea51fc257596c5949db6b9e6905 parent b41fdb4a887e94217e674d40751f2f409a4d6d1f author MythEclipse 1779068460 +0700 committer MythEclipse 1779068460 +0700 Merge branch 'worktree-agent-aae37f6f3cccac163'  c=xtree ce8e68d24ba8fa90f5ffae02dcd480bf5a71d3b7 parent d7f5180eab08eefaa82377da156ff7e02da24541 author MythEclipse 1779068456 +0700 committer MythEclipse 1779068456 +0700 docs: add deployment design and implementation plan kYhxx-tree d3731c514bb8193f08d58f93f8fb65823b5fc23a-h397AF397 +0700 chore: add Dockerfile and dockerignore for production build+:s*xz-tree ec818722ada3fc406688496f7b7d24e7ef841ded-h442AD442 +0700 chore: add docker-compose.yml with Traefik configurations:*x tree 325913e92098ead18af34767e5b5836e27dd9f0a parent 91986d1d51c2411f144696fa016a0ec50507c872 author MythEclipse 1779067524 +0700 committer MythEclipse 1779067524 +0700 fix: add Bun database migration runner tQxtree 42d98de0973264cb6d213958261038d2cb55eeed parent 9aedc59b69772102cafb5b496747df09be8547dc author MythEclipse 1779067135 +0700 committer MythEclipse 1779067135 +0700 fix: upload binary files to Telegram with source payload Yxtree 1c38e45dc33cce54ef800aca2d3916b77f26d121 parent 6feca3564af2e2a58cdc567e601140c039ab81e8 author MythEclipse 1779064995 +0700 committer MythEclipse 1779064995 +0700 fix: refine Swagger docs headers and dynamic examples Y'xtree 68eb596a98a9ff83e3dc5f4c90e338f698690152 parent aae8ebfbcf74594ee2282b238f4de43386bc61ae author MythEclipse 1779064767 +0700 committer MythEclipse 1779064767 +0700 feat: add Swagger OpenAPI documentation endpoints iWx;tree abe8cb98ec8b13338f7630edc8d452ce7621caa0 parent 825a8f42cb36e64995cc441eb73f533fbf41d52f author MythEclipse 1779064247 +0700 committer MythEclipse 1779064247 +0700 chore: update bun.lock to include @biomejs/biome, typescript, and related CLI packages dxtree 6714e5c8786aaca5e43ffd78c28523aca8f0b70e parent cf79a1f1955f6a6eb4441fd4a9cc841a3528a1b1 author MythEclipse 1779064233 +0700 committer MythEclipse 1779064233 +0700 chore: add build script and target bun bundle output gXxtree 1d1c4f213a385bfc81f9f19184966923a26c5be4 parent 3f4e697733039b9b4383d098d97da9a79c8141e8 author MythEclipse 1779064141 +0700 committer MythEclipse 1779064141 +0700 style: format and lint codebase using Biome v2 `T͐xtree a4dcfd12d72020fb50f9c15fc26853cb845dc75e parent 9c5a855f7d21d97ef83d8acd063a02aafbb5fea8 author MythEclipse 1779064026 +0700 committer MythEclipse 1779064026 +0700 feat: migrate entire codebase to TypeScript BVxtree 452583dcb0bb3ec8615c0c32d4950456b31849ab parent 252b2e4a1f7783c7a6789aa5d4c086ab1d500a44 author MythEclipse 1779063802 +0700 committer MythEclipse 1779063802 +0700 chore: configure typescript, biome, and package scripts mYx tree a4cdd6c1e107eebe38d3711d658c0767bc3dc301 parent 434905313c1986ec37652a09f31aabca0b2aaa8e author MythEclipse 1779063390 +0700 committer MythEclipse 1779063390 +0700 test: isolate module mocking and add sequential test script `[x^tree 6d3325bbc2799882aeca9668583b01e0efd79e48 parent 99b820709d01052527a3ce4734ff212c200bb67d author MythEclipse 1779063305 +0700 committer MythEclipse 1779063305 +0700 refactor: replace TypeScript with ESM JavaScript Remove index.ts and tsconfig.json, update package.json, and install dependencies. Co-Authored-By: Claude Opus 4.7 Ӧ4x_tree d83fa65f7a2c7ebc08af96039beb97a10d75a504 parent 4996d7548a1b932d1fb8d01d46db3bf1f8973800 author MythEclipse 1779063275 +0700 committer MythEclipse 1779063275 +0700 feat: setup HTTP server and bootstrap application Setup HTTP server with Bun.serve and bootstrap Telegram bot and other services. Co-Authored-By: Claude Opus 4.7 ˛xdtree 69ed9ba9274b53a95e804df5690a8d8245e6f6d1 parent be93a06918531e07905dc3d61a685c7ca99ebc99 author MythEclipse 1779063197 +0700 committer MythEclipse 1779063197 +0700 feat: add Telegram bot handler Implement Telegraf bot instance with file upload/forward handlers and mock test verification. Co-Authored-By: Claude Opus 4.7 o+x}tree b804e9db8018d05f26a686c154070ea10e0234d1 parent d915814277e4c30f21a14c8f52a9e8fbdd84e0d7 author MythEclipse 1779063055 +0700 committer MythEclipse 1779063055 +0700 feat: add health check route Implement handleHealth endpoint for Bun.serve to verify DB connection. Co-Authored-By: Claude Opus 4.7 {xNtree 6cb43165ebf341a863b3ebea00aaee39d8de54e3 parent d7b8e9dd086517865ef64ae09610549bf1e9ca68 author MythEclipse 1779062969 +0700 committer MythEclipse 1779062969 +0700 feat: add file routes (download redirect & info) Co-Authored-By: Claude Opus 4.7 jxOtree 8afb941670dbeb0ec568031a6d04cdfc453d72b5 parent 1e29433d5d6ccf3f3982dce5862b10fa9833bb88 author MythEclipse 1779062893 +0700 committer MythEclipse 1779062893 +0700 feat: add upload API handler (multipart & base64) Co-Authored-By: Claude Opus 4.7 icx>tree 5b604121a90eed6694ec3b040754e9a197aca9d4 parent b621a73ca9a0548043082f989f4486b0f84d20f7 author MythEclipse 1779062781 +0700 committer MythEclipse 1779062781 +0700 feat: add Telegram API utilities Co-Authored-By: Claude Opus 4.7 bxAtree e972b38fb43515d4af00a7adb7bc18ed6d2df791 parent db71f2928831867a7ebfed3063cb04791a92318c author MythEclipse 1779062534 +0700 committer MythEclipse 1779062534 +0700 feat: add file validation utilities Co-Authored-By: Claude Opus 4.7 ReӞx>tree 96ea07962b9f8e5ae7c158b61e48ca87eae76c7b parent 281329a1afad5d87ef17215963272e4c0a814787 author MythEclipse 1779062492 +0700 committer MythEclipse 1779062492 +0700 feat: add in-memory rate limiter Co-Authored-By: Claude Opus 4.7 [cxBtree 97422055f2943fe49f550c3429e829885216f7ed parent f9c0bc076893eb040fdc59e95a9cbd7c08df5da8 author MythEclipse 1779062446 +0700 committer MythEclipse 1779062446 +0700 feat: add Drizzle ORM database layer Co-Authored-By: Claude Opus 4.7 eexHtree b96e8a268e19ef296429991b1ab4c70f424ed5c2 parent 77032538e8bffb263f793c974ead979ca771ccdf author MythEclipse 1779062335 +0700 committer MythEclipse 1779062335 +0700 feat: add environment variables validation Co-Authored-By: Claude Opus 4.7 "hx<tree 17dbff3e388f7c293abd61d88d72696d099169f5 parent 25c82bcf0b70907221eb56fb34a6631603c02388 author MythEclipse 1779062013 +0700 committer MythEclipse 1779062013 +0700 feat: add Winston logger setup Co-Authored-By: Claude Opus 4.7 0bxGtree ab5243c311cad0d5e631c4d9e27357f09d491d01 parent f423e1f25df3d165e3635c6992010fc84e6585b6 author MythEclipse 1779061866 +0700 committer MythEclipse 1779061866 +0700 chore: add dependencies and configuration Co-Authored-By: Claude Opus 4.7 g@xtree 67be35fa7bfe978a8a536d17f5da9e981a86ce70 parent 3fb3dc3d40c8351efd488bf094049b42df93f831 author MythEclipse 1779061733 +0700 committer MythEclipse 1779061733 +0700 docs: add telegram uploader backend implementation plan Ztxtree a2975f17297ac440fabe924e3efc6c05cb73c6bb parent cf55f6dee8872e65c63e2772754dc2ae03c0e3f9 author MythEclipse 1779061362 +0700 committer MythEclipse 1779061362 +0700 docs: add telegram uploader backend design spec D!WPx tree 8d70b092d2c44596b3bb7f248945874a29f1c862 author MythEclipse 1779060842 +0700 committer MythEclipse 1779060842 +0700 Initialize TeleUploader project with Bun, including configuration files and basic setup )W%xT100644 .dockerignoremm=BP<\J5Ӫ1>100644 .env.example /ϐݠD,'40000 .github=q1W6# .100644 .gitignore=k;FIyR100644 CLAUDE.md,{ϯqMCx XXG100644 schema.sqlY `X.340000 src`+ M(,V40000 test dq r=8100644 tsconfig.json\/Tax mۤ%tS% 9قX/x7_cG|M{Ӗʲs 0eq qꇖJSWI(;x.node_modules .git .github docs logs dist .env 4x]QO0YKعK[[esm;b0׻]R@'&H[jәfYr)(̖tavu!DBJ% bH`\0E|(%mI4bu'T ʨ`}88??zA{e]}Jw'yMϏ8tVơ,1HȌ;28[qv׹}.2uIg yJU?=3sx$40000 workflows&M1!/}7H\2w~[UU RxS100644 deploy.ymlo1!<XN1100644 notify-parent.ymly2T@L0I4#޵x%name: Deploy TeleUploader on: push: branches: - main permissions: contents: read packages: write jobs: test: runs-on: ubuntu-latest steps: - name: Checkout repository uses: actions/checkout@v4 - name: Setup Bun uses: oven-sh/setup-bun@v2 with: bun-version: latest - name: Install dependencies run: bun install --frozen-lockfile - name: Run Tests env: BOT_TOKEN: "mock_token" STORAGE_CHANNEL_ID: "123456" BASE_URL: "http://localhost:3000" DATABASE_URL: "postgresql://postgres:postgres@localhost:5432/postgres" PORT: "3000" run: bun run test build-and-push: needs: test runs-on: ubuntu-latest steps: - name: Checkout repository uses: actions/checkout@v4 - name: Log in to GitHub Container Registry uses: docker/login-action@v3 with: registry: ghcr.io username: ${{ github.actor }} password: ${{ secrets.GITHUB_TOKEN }} - name: Build and Push Docker image uses: docker/build-push-action@v5 with: context: . push: true tags: ghcr.io/mytheclipse/teleuploader:latest deploy: needs: build-and-push runs-on: ubuntu-latest steps: - name: Deploy to VPS via SSH uses: appleboy/ssh-action@v1.0.3 with: host: 45.127.35.244 username: root key: ${{ secrets.SSH_PRIVATE_KEY }} script: | mkdir -p /opt/teleuploader cd /opt/teleuploader # Log in to GHCR on VPS echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u ${{ github.actor }} --password-stdin # Write dynamic docker-compose.yml cat << 'EOF' > docker-compose.yml version: '3.8' services: app: image: ghcr.io/mytheclipse/teleuploader:latest container_name: teleuploader-app restart: always environment: - BOT_TOKEN=${BOT_TOKEN} - STORAGE_CHANNEL_ID=${STORAGE_CHANNEL_ID} - BASE_URL=${BASE_URL} - DATABASE_URL=${DATABASE_URL} - PORT=3000 - NODE_ENV=production - LOG_LEVEL=info networks: - app-shared-net labels: - "traefik.enable=true" - "traefik.http.routers.teleuploader.rule=Host(`upload.asepharyana.tech`)" - "traefik.http.routers.teleuploader.entrypoints=websecure" - "traefik.http.routers.teleuploader.tls=true" - "traefik.http.routers.teleuploader.tls.certresolver=letsencrypt" - "traefik.http.services.teleuploader.loadbalancer.server.port=3000" networks: app-shared-net: name: app-shared-net external: true EOF # Write .env file from secrets cat << EOF > .env BOT_TOKEN=${{ secrets.BOT_TOKEN }} STORAGE_CHANNEL_ID=${{ secrets.STORAGE_CHANNEL_ID }} BASE_URL=${{ secrets.BASE_URL }} DATABASE_URL=${{ secrets.DATABASE_URL }} PORT=3000 EOF # Pull latest docker image docker compose pull # Run DB migrations docker compose run --rm app bun run db:migrate # Start service docker compose up -d 3xtname: Build and Test) pull_request%OXconcurrency: group: ${{ github.workflow }}-${{ github.ref }} cancel-in-progress: truqOY21a%xSname: Notify Parent Repo on: push: branches: - main jobs: dispatch: runs-on: ubuntu-latest steps: - name: Trigger monorepo build uses: peter-evans/repository-dispatch@v3 with: token: ${{ secrets.DISPATCH_TOKEN }} repository: MythEclipse/ultimate-asepharyana.tech event-type: submodule-updated client-payload: | { "service": "teleuploader", "ref": "${{ github.ref }}", "sha": "${{ github.sha }}", "actor": "${{ github.actor }}" } \xmPMk0 Wzi 3 :(;8Fpl%P`+9ONalϝ0gP~X#WDǒI^s;/΋:;\H&J&i %N~1qVdn3}0pf)> ,jE=,7`k,?btkLȰD&E.bRӶRL׭l%d=["f/1u? 57 8pNJxmW[sۺ~ׯʝZHI{P3Iso츱:y !`.N0ۃF2əCO߅OLE-M'}d?B'9™T©:< 8o>>Q{%Vf*aʟR8 A0OڊDyK5x 8D/.ϩ?=0'ԵuWF?݈m >v|tNK8~Ox>_'%6RϘMj'[=^a.[փ[ cexɥtI?]ғCv*:O)?ڟOd!X$iU!OT jyņ>1Y{ʽ+&(3]J.nf%ЊE52rDU@"ZN'pOH̭kaE쇑vpPNג*t5^Öq'tkj8$S`}7/?}{ym_onrl`3:a`i/J!`!SXw_*O+ 6'v$JLI,H#rBp7,1ِRZPB2p{#zeD^ٛ-lϯ26pҢJa_ʖ}4/ۚXfYԲ,I.+iXK,lе#+qWoJzsrh>z"͸UVhs JgůRlU~ٕ6/!PPD렴E@lײ1ء搊)@ Xb9Ҍ;t(x S;'pyi`{fY{*'LLDƛ.3?ub#eY|I~ʰeNzٙv6e^%0{Itìqg-nt%0dhn4?~9])x{&/8w[J]ٜK'EleM5ɾ;=} [m.JY~s,J+m@3qRentbK)ѶL~C_-C;+L&Џ n:ߞY C+K2ȜЋipI[D-KcD7.K "N `H"̱0B'|#kM?Nh|9{leɒhFL 4ލS2 Fa;I&r]x[9v^|ijBq$.JC/𪪹+']/4wE Tm)pL6hG$ ؇dvA$̀¢X8b*]Ox(8hX{$$Zf^ʉ"o{IOiLҮ^D _5޽],\?)id:ktH`incOΒ:$j@$&3Q&Ke$Ҡ DkDT %h\طD@ X֓h ~ߵ1,Z9†8SB2ҟQPN{G{Et0-Zݲw=Zj>f}6"/F-N}&-Qxϖ  2JAf^MzfI{BIA ¡*dC>зBgmΫT[mEXm/up5] <^I#4{0P\|pnC";/b"`thp~vr:Lo Vbz DǞ CIUOg 7÷o? wIOGo!Qust4]'ZQ90@ Άhw)(<`hN2쇽`bgC=eg؂k0¼V,4WCQ_*YuN\[ږkq|Ԑ5s#轣wj.NNǰd oнF!m[b|zg1KZ Vir ) (4h Z(upK\?_52A 8Ktckf `1DW WHdldm A;cF7wm@eh1 +q-г~!JӼcxjg#΀"ҥ7ْB{0mǍz >sF`>gto r,&\/㢧p5.[18~ƤEdO[)5ltWcqF<ã'A1!iя.[)赏YG%9 5dEԀHC`)hcwwy01_x!0ƹL.ʈ?c b.Ð>**W0K>V1 @osU BҌ&2t%F+̀KqrX•P4@D Lfqݜ_~k EhSjulk:Xnؐ[U8AB  q "wDL")~56lW\q-t2\X}ԽS:S?5Qdv@ɦo8g"PX;z/I$>*^k[UZJS5G ,K 5{ߕ"@I]c'C- 󤀔RʤZ<]`ԫFû AP[)e\qGɭGP:1ʧbIv jC FUڤJh$4qDפX6S}5[qnIrq)DSL6n ]su4tϒ^"g_*  's "oTV4FYRÍͮʤҀx(*hH# cH"VsP%4 QHl۶!Ė/t9Ia3;m dʀt.M]n{#^@ ;tn+S:Re((;6WFlȌ(+d,spzgk-"֌s.) QMh L04vYg :ቷ]aI(jSGVw-P{jُ:,ҷ6"0gP5'hؠ5pA/x,Ns [2{& *sjr}1@2\.&'WtSU&!aq0<J N+Lt$=tc'M\0rj%RI{btH5Rqt]', te-2ĒD*e#vBl>%#i"}]#JܹTjkX^t(P˟ V9s@VʷUZL{GCj]R9 vM f,ZP۽,N t(8aq P8y}pDE12r'u۵v0Jhꭧi4Uv󙴛'(.|?̉\טPF7Uqb/4i;i#x EUzmks0NЮv0<a>>3`ϝ;JcyK̈kƃp_ah쫆"W%.Лkq[l)joMM+Jxu ?Xg/G"[krQv!I 9QGw3<6'r$q> 2 م"D y}E0p+!w@(Q.bHO0,M"Ա8{b%72V~Y?;^s!9X,-`!rݻeXPg٘*\*M2gЇݲːt[}ES||=<`$n4]Mfimy<"۽#]/ڠ)g׫j Jyce9!ߺ^eE)NSKqA)K;cJ0Vl}xig!8jZYOfKE501k<496уJh z ii2pIrTu4͖1b* Mwe (\4x k*@)I K؟.eφPMUPPLIl1h#Mgm,=TqIe/Q~߼ E>hLx ^O32AenX#{Vg/"Ih b=M~|EU)Xv$ C,3ײLkYV,3+YVB,3N JlJ5hyY',fVUvtx]QJUegnj7КX薑ތAq0D^{ c#tӤ w؈\vͩkrIx s=:-P)> )6dBHW dl,]~Rl:g8oځ~M0v%jE @?X\+eJ9fi`%?k!DeG:*qĜTN* 3HQc 4cKPЯd؋B'NϸF?O5( ˽~;f[=d8&{g=ޖq+|㖅`NJyX㐢GV1kz)CR9}@#@&VI&~VUvc'״U]0| WO_߯Ȯ Opr ɭ^ίs}?[oPYވZHc`NO-NJbcdML!?s[-wU̘*#oýv1jR' &P̼<\PfޑMD5.J6E5F( l*6bi\OyuP7[ZC >rMD7pM_%E\*>rAo;2z-vh2F{qk kTNVij PWƑʙL~϶,JTɅUAie⬏6 AP% ~5 P+qOY̭M5%'gfLn;IܾZ^\xI16K5TkPI^Y96䔕qI{reLA }wORac+W3etи6>w i} !lln5ؽrVUd͖GܤX'#C1p򾰜’sf|mvO-aªBhR´Je+$a>y_g,ގ8c] >,/GW݋rWcz!\%xg=LI9gh=÷ͬmȵr QK;~-תO\P:iG$h3ec6W;)0=1?1F!&gVިy6zIb>c|=)y* u uA,wI~ JNM25%_eH9Դ6=<؇%[uhm#+5#  a z%Qb+moÌZ6uom,P'=܁;W"ZF<^8onH 88崍 Vy^C/*x/U9[}ל|"8]S<"^¹g,ӵ;\^w|B^?`ٴ!^-|b c%`9ЖU ube[,l $ V-/$ei+Ud+mޛz nޱɚJZ wl//l?G6R͛@"򀤶!Y3?>%>8ߊsJ_x8j ͣ'[(FjzSrzssk$(#;HLOI=l__gpf\ZjC2qX|+o75ejzDm,x = =J[| q\L?, ]~˧s sBM=芟Gt{R}%68<XI% mWQ˜x]8o (7߱A~CIi F(wU7(6M-5$SVvDnQW~_ dL"s(L,AyQqm~1@2/5 ɿ_|JCsUc|'Ő>0wFi#dL=Tf#eFW)xER:йpa:EPt3f>YlULjhUx-`W p|wtgVߊАQ7#OY!Wsx|W瀇.U*9LЃX*ċi?x 9>Odg_n[B[zK.fSup?>MLM goE[U!G~鈌>*-ĩe߃ Gwy7%ߪɶr@b5UH'{zc_BwZ=:DB+/X/o_ְ4 Oz; y`@|< WY B/%2IWϺd#_tb/iꉃX?~qOW +1~897-APa2~9ɄuSBc[T~HQss aR~%{/O)5l-wk>(d}ܶ'۫NNM9c_t5бɍ㵟]Ozܼ{nx +ɔ=bH_!k#$B:ԈJІwj;, )O VyRӘ}ژ:o)?"I1%Ger0 FA^n6oҰ1ت$^gZI;.LS^ꋧŵq[=l#ioCK[u%q-xƉ7ԇ&'獵X S;*cq vwz:_uVQGJLGH =Wz O1ywt4r9Ǐa=ALY]4g=e|)՘xٵxݡzbHL z s)a9Ǐ(lZx  #n'xu{ "$schema": "https://biomejs.dev/schemas/2.4.15/schema.json", "assist": { "actions": { "source": { "organizeImports": "on" } } }, "linter": { "enabled": true, "rules": { "recommended": true, "style": { "noNonNullAssertion": "off" }, "suspicious": { "noExplicitAny": "off" } } }, "formatter": { "enabled": true, "formatWithErrors": false, "indentStyle": "space", "indentWidth": 2, "lineWidth": 100 }, "javascript": { "formatter": { "quoteStyle": "single", "semicolons": "always" } } } ƭhx̽ג:.x?OǺ4.$#ͱD.)'W4ncht.3Shl[dn?#ŧ)41f $fhU\'C6&{jO*bFUj6M3'C wE#4D(Y N#?Fh8cEQs:ȵs^\Kڅ9b]ˎ|l9^Em^pvJRw5Xnu:&7Yɱ"\@ȼ1q3NToLQc?@8LKz?g`MW2sV*pG `pGE&L8ɏZYI)n!ٳFARj[9[~ah)>oG)9a6:- h 盱3JHWRS[K)nSt֢Wם ^< t%M,ٸ2/ @ӐV F4WvƐ)NW]QfK;ڐK6wKۍ_E}_OLzb o| jUs7[T/PK5w\N֔4u*" K\4)U4ANJo vb_3{~~?F`?Zo']^O$]z1ʟLIRצɆmNYf\G)h0Z^aMÆM&C Z5`𭮟ɤ͂ ̋5چnzuqѧg3~A;'rGJ32]يXK2+ROӂn< ?2L3֎W"4H,@㔛H鲝\-i`6_jtm>~/Y I 6'M~#sMWEb_<FDѳu7)TuE+)tr cH̵:n }6]PE UTܻNTMٓ{OEWOu|- m|>{Uw:2HXuiXAO ',C{ӭ6'(*룩O Tj_!,,ঁ> ,.]E?/7S o!plp/ʎ57Q`gY1X>n;K^)@ g Uj*1yP_⇡ğa<\JW@vЈBzI蓻JȧyC` X4_ZnITr2Q9\YJ+ 6o N.灁x:Ӣ֓`3UhaPٴIPƶu$u~ 1_2u@+#R>3~f;PntbqQ:BMks+aXR&)pmpw=ߊId;*} ݻ{9Aos #GLjO}$ܞ3ZqT|{#r|ޝ7f¾ -+n% >|Ltq+nJ\LMMk牂J ǥ} fvY;ҮHcxDtSF*/7c^s\e}SD$D X }"l@}v )EPt U TvN sc-DNn^#S0k2ByTd|ʭ\LS0 cc6ڦ6Im^jI[m)ԥ>'iHqe [ڧ #9RwS;~Tc؉):"ai8@^8V!3V딀 I: j9\Ѥ؀bNBUB໹;ƍ,o..-J0T 5{Zpc.= LϸpHUs,/?[hJwL{qSxH.2\i%.d{M'K:V!*E5Q:[*P~,ehO(DP.d:mZyt_ YŒyxT/U{`le,ah`F+m0/S<ckmDa12 +- w ~3b8&ZyZ;c`"?"p*ݣ{&4lzU\>z6޹$MwqWY(nr Z:kbj 6łs;lW"bP@o >#4T?g*VǍ߇KQNh{r#Z,Ȅ0yv5fmVeu}@!ۤ<B iR?nxv^gL( {H3㩔@F}ՏLژ7|\#@~ htۄ<*ߩC _Ru3Nisj:Z"qgm݀g nîrdSY;l>RrvVBg-B!+2{vxϙ_,$}Ya6# ZP2ڃoV{奰" _xs'+Qeds rv,(68  9Ewse>Q0}'?Dq+ )Xf:kzԎ;.^`"|d&]g1!DujEgP4*ꊚZvr8,.3ѧ"9nV UeW hC-Y4RmzPdK,KgIJj̄K1BJlKM^/wZ/<ɛCL8y;Z,.k`гzW'!Lzp$Pq/M5m y[3FrEG1LVeϊ|H6Wt7e9 %N$/0[`ȟqd}Tpb0TtZ|GQCH~{ihދ5# XfBn>3-IyJh0 C a|*#NM56`ȬmAmDby7'#_r&]c`47.zd8^dyze6WVZ=WzbGujfxgsIgU=(*ar& Ŏ=H~C\^(]$NJV\X{@GctYx]  uSڐ f~t&O&KeHKT7QQdنFdrwNNu;u^=q6s̻:z85U4%Z#!`Mǚ M֘|-'G@ @aPh.gbr~ߦ]sww__ 5zD} m~mQhÎ)Z-dJuXqQӯSC_wH铧QOc5pv#+fk` G"~)NɸCE`x]1}-Dp)15M)^Ƈ1UGa8#lYpbP~8'n|~\),𭷔xA;IS BQ<&WS+WL~ O=eM59ZWPwM 4T16@ˍQQY%Y,,OqWێ`^*ᑯOJy8]EgF AbL|v5S*­6y*&EԯK)i3aYL+ 'o} Y.0a'ۋA64fR2pdHˬb&*ִѡj3ʮ%ϊWW|_[>>^=D}ydf qyG9ͣeO~X٠rI韛 \m:`yQ-(;DFxlf}M^ v U!mu}2U痟]pL:S]ַf5Ti_RҸ W{O? Cr n#"slߥaӼ+gw=|hR+C3g.L_z2~6wy6o>}JxLn{sGD/lzmʅM)]ٴns/Dܼ>x5Ël{yg\2dWHñ,^lq!ɽ}*0^_R k+O%\~9{^hi?;iNW3TIk:^?TJi{dw4R]iӍ"=+ϋQ?$oZчNer#@tc6qRQfFŊ}b2F.` #DRPM͹p^\b!HVVD ,6i -b L deC@V rH*'I~+P2^EA@u0|g1㝌zSa_|]1Oh>)6SOy9We!n(>O(v.7[a?&LW;e_ 7fٗk4p[KZ\mMlJ+mQAt91m#nq;%MTmBE .X+? 7|ArcQ-P{Ɣ1d K3"0[Nye#c{Q,zl̰%`}a_qOQg- fڂ9[R,`铼]`K ڇaZ":Jt͕~ GCho8Q5, 14c$J8y[H|Ѫjhgf`n4Av xσ-`)\BKᚓ I(ɓ 4UjFB+8mU-lnV/|pK-< #O`~M('2o=ثcm(-.in۴ ԗ}&UűѾWGbE 0:f醙ՋR}L}S͇cόfsXTV(͚PU$^tBTVpxbv>WˣrI$`Ϻ6RϓLV!*yElr\nlQ>9s*6 G opjq0$ѽ)b!6Ss iZpbɃ ;$oU..4 ;IV|xԽ4jsK1;ME`3-g,82-b>0%#.:*L%nrdD,!5, AuZvl3v%^WS/,X@LѻP{zx$ѓËL8=O$sss s-lOrIH?hhnqFj☂6sAi}ѥE&8[}PB=ZV[4R_\#Z9Ýk\} ~ i3vf\ 40g2x-x(Gܪ ǚ_n"/mpڶ 2 yV\|"v0j]LO+җAIʳmJ,ʎ<'QX_dSNu&j,9j[NJn.ҕ%trh oϏ=߽/fOIPVYm) %9M :@@.Ch66LjN3J{yJ݆psO#듵 zvtF*]tlVs!)WJLNېOPϙFWncmI3at/r[5|x}_qȊ9Īohȥ }=4:&UULj V c%uYObBv]K -Bs\C3N^m[))w{ݼ]Ve-H|n=/h>RӍX87̾Zv2wg5>wN;`Sq$"pv:.o/*&.\e獣/88aV#НFnpU-!&<j R]m"S9[,ђelHP=m5T$T)dl^: V⤭zٛ}uc{Ixn*mʕsEt)pw{cǜ="`~>r )<4>_zD5lߧT:e;;/qԡ/ 7i~Vϛiu ‹x'Tsu<,Aֹ[c,r`b ޫqۗ-&wχ0YQ%3[i,+ÿL~ah^yFpک4>R!2! #o㳆snt[q|L6H'Q RӺ̣mZW]S<#ko/4ra%jR,=\eB؝Kj],=XB!t1L@( C:}Fw\EVؖor? YH}=NdK[8v xt9wieifGSk1c6Xzϸܟ>ZCŎ3"8v88yi zJo{g鰃U:3h@p~^M1'ݾXռ1Ȥ-۠i.!nJn*9餻wvXgf \{$s)_MDOR4@(g{Jßx<<{ xj]ۊ>b@{{p2 Ni5:+^Juv#WDul6e\NjvSGVY@$wR0C9;H) pilRml xma*YPG1>!nϳYH~@#)754N)N/ef"n%l"3q:cE#$g_y bwE__/zELJE)OMC̾ Gc$]s8q H;C:hK3J*sVC+#f}ـPWzvU¯ w\ue4Bt^PrS;(@-fr]P#.гƓ|H@j6Y|U7I}5Ξ6Pҵ>_.8T|#krG %03Jc "JzK3Z҆ЋyV৪{ G2Gg,FFNC'Sek`~ɉ(qvc>Btt5h4/v ,to@HB[s"yGW~뉻OzW w2fZ!63 <8k*>.Eexr5=I44nޜsU.+N~U/V~aexۊH;_Y9y,kcEmm rdJ {n |S\ ޏF~=EoG#YD$?;}RM'_'#`㏈?zlUGDo?"nS~Or]G$I&a5a`վ;cJyj<ƴ:%;m!#yeuJ5CH lK6% ~}A CƵn7k3 Q'qxьيy/fdD6^h 9788i`橏w?|Be)w>|@q6>|Dq)>7 <ܧp3p~ٝ|\ƽ|^ʽtnsOow9zk}%smX;Ц9k6lK @ b4Kl4w7٨pt%S 3̧;i n͞oXp`|E1-V10`GXzgġ NK/9q-B{ 8u⪕0@`oϟZ˴keh)..<#3 'ي0*^ʔl˅謟LTϹ9%&{*VIX} >e4`9u ^3#YѬ,7[ĭu/~FPq#7~pJjNdfY$>Ap~bcb "e'xC:Q]ߘ=-E423F+h5hV<G>Ӵo-RrH:%!*/Fdywm?߸Q.ܨ0U̖-LMaeMjϗ,$k:'dzC?4瀱 2Q_'g7o\&[^״nQs};הZJ7eq erD8H0/NK}-g1,&opW72 K}^HpfO{H-0D Af8"ٔ.[rxt!=\6(%!`\IhaZr{aPp<`ƽvzI\ U /o=Eʙ.cSw/o7F9m _WTriT8yl}S/\A1J6N0e@‰I=3p`8j˷|l󨡛 F&Խ1iPLâ\L:S*e/j Ei##P*on˂|-+'0+7hF.p,B;E/R8(Mr%iúK83 8FynOo[c:TqfIfnKju6itv$&y4Srf W2Nu]_; -Җs @Ks "ZŢI6%g* 4I~󒂻0ZntoQVX vYwJ}=׹jWT TwfZ3ʩE}kG&o]b-,}R13`&D$eplovAW1r^]s#ɯ(آ6y)^r-4 oqt<v}-紡P]zUEHi:8rkiGgzm` Y^ܙ@Dao}je/nVMOE: [K?crccI"qh85 ٺʕ|[T<ܺG2i\hy=D_NY z$r>HU!,"ٔ;\Qi=@r q0 `h%JZ=^ׂX"Κl|CB⺑y{.۠h+viiA6N=kw*@O6: ncY MPg"=;!)AvR7`beƉL_DF $Schfje&"6%,Au 5װA9G!ܡC!3,K"mb*WR;TrYRrd.{7~ҭ,e #1)H`*},#hoczs;%86}F%lV6 q@߹$+6/,2Wʫ@{x1 aĪq_f MiaZꑇ ˌ_u8H##K~W~ խ(غ1HBVtKRc6 jʄ `u3 WKǁxxg53Tlb'ʏ &RD.ҿ[FBn7,XmofSǣarg[j1Mw @KddvlJQ=u\'Rap2q Ua R!&Huz=^X]nTN-;jTҳ8[;]\psDL?hR=l ^VxRK$vXz2Ҧ5 =L5@i{p6"9!gYvN,4W}d'*IWrCŠ9بBq?4Na[32BD,Aۨޛm֫aОʰ5C%Ysۢ煨$Q4`kè4^pδRY>}WX߻j:i M4ƍتw&ۏ$UN|S=L `լ_gZR+!z/|+YN{{7 3q AO`?@J(  4eF!i<6b&bKG uQ;W~ϻ`(0UhLW( BV8##q|bt]l-WNc nF[a`KZCF--!HM鳙qh{@i#%TD!@Iz!wA׀ne[t]+Z hUܔ] 6V9A%IɲZu]} {wmoѓجS,> ~!:>Oաj'14E ;G\8kK2p Ŀ{mP P_YӒك$"+Îʜt L"xpq8:90R /ęF9t>'7b2$5v.KAQSm!a\HP~28:_ZUkU}s w5J~-Ix^PZ|GMՓ_n6? Mu!QyF& λM&U'IKퟍh'/M$7u9G^44OphHA?؎9t8w]k:|F^گ?ɬ\ 9l=4MqZ`+,ZϮY==x:r>e`]}:iF|^jwB *s's5 VhjO1LF2=f7YOw0zwhޖ1n{sc4KZ54 sWV'i;'n ܴ;^arx:d?*p2Rgm0|}LQӥ2ћM K4wϟ NBeAQ%BS-!-;US~JgiW("4*;F;Xf-gehA5cmU4^4oȃ'^6ǯOMs{3vex&40000 superpowersUNxD騥=˓Hx@40000 plansxIeXNr %+UP40000 specsz3uD>On x340031Q02025054-IIM/J--OLI-MJLNK-IMaq>>4)vUJc _ tù˦rs'^ bn"ж /39$3l#g9OlK瓳qJVCxi-:}%ty.'A}B cxYms6_t1)6ŖƉ}^H KI@JH )M]  !f1PyZL eHEJ2 Iy1pFp8 /`8ppCׂ(rsvD1՜~ܑzgD,ǘװ I$ ќrNq _`$I.@9nM|~<d7at{℅N<\\)˜ppXd N*+BNI"Xδ0)4g C0$OPpS$InH&{`g/ݝhex4(K Jie"M  S9W+"5jdy(Tk#pGCZə "M&LLI",LjdD n>M2Tg:nvii@i,֕ՍWhNt7QYAp+ڨCG X!EyO<+ |hYjc|S!$,cg<}xTh*Is<Ejxudbd@/Q̋,KLx18L;rre\'" Dy Š  =&9G8a"].J@$WXE 7`ϐcĠGPt wgCkx^-'}OdQZ^G|9˗+KaF˥)KK-pqMg$Ln#R&Qt Imit1U4M1&CS2- Mٹ 5VB(܅Seh0Ƈ%^lnnFl<HΌ'jV»Kщhcyv'J4 rY1xPȅh!g\z_^PmeI|g:ZNSiCCsgqໜ1]b2+d֓=x'`TD*- Љ8ikSКRie4F)}a۔tiHSDs5Ym.jwJ9kdޒ43-´ax)9zt'xTPtZ`}Aڃ<et%4D@,QU0E^W\qƈE$B1묛|8_]zztu1<8gGHxppx0J\<::%`6(/N}0=\:N,78zؔK4n0p_tΥU3sԽʄ||EM|3bLMYEd"|DK ` 'XabE]*AUhԿi? t [s;gq UGcw2Gg5xI"nYъvtt4'X5UWݪ6X3@HtzQuK3*[<@t[^cH̉uR3ȦzL!bF B L-m\J0UR8/J P@ wݮSH 5Bok^Ysֺb"L85RO =(d,-:cPGҭݽl qR^+9_Ϝ%H.3^zÛݝR rש;d _]FH,zP% ݪVy+ ֒A3h<^J kr7`(벿P<ﱡ+Єo̴DW.pwd|SokoTՃ߃S$ 6RWTh̉7|*ZJ(,ehtڌɔ-²Vv> 2:3&[pʌ/g㷃]Hocϡr!8/Oq#4CΚPeP>&/"p_Șf30^YiV8{)9f`݂;](_[w8qa>u_؁4Yݍ3q];cqZd\˺YA|X.若5;hЯlbrVuSYSi^+4i}g.JnEoY _PuO7XZl7a`O4ł{A*U#OS!zU'>OU0ԅs<nҔ]'&?^ۍ[fk置|ԃSӀ7Z7Cm8s^\7حnݑ[}oj(\d6@mUPHZjB 3Xb PSL,GSyg71iH,\ Rb2ߌ&J=||ݏl?~;9ӐY`kss^nm2S#^U26=#,cva/gO/}"_!l*َ3` ĄTB[Ax/%TӍ)"IYL1ћ2d<}N~/('bǒoml {t3T￶Ru%x{tqJyHРWW Gx'oW ML-, & (U&f%NP0,-N-*H,../Jq/.OIKM/.OI-J-,,Jh(Lx(\# Upload and Deduplication Feature Implementation Plan > **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking. **Goal:** Expand supported upload file types/formats (stickers, video notes, etc.) and add SHA-256 / File Unique ID based anti-duplication mechanisms to save Telegram channel storage and bandwidth. **Architecture:** 1. Database Schema: Add `fileHash` to the `files` schema in Drizzle. 2. File Type Parsing: Update `FILE_TYPES` map and `getFileType` to support sticker, video_note, and dynamic fallback. 3. Deduplication Logic: Add SHA-256 helper in `src/utils/file.ts`. Check DB before running Telegram storage forwarding in `src/routes/upload.ts`. 4. Bot Listener: Check database using `telegramFileUniqueId` before forwarding bot uploads to the storage channel. **Tech Stack:** Bun, Drizzle ORM, PostgreSQL, Telegraf, TypeScript. --- ### Task 1: Update Database Schema **Files:** - Modify: `src/db/schema.ts` - Test: `test/db.test.ts` - [ ] **Step 1: Write the failing test** We want to verify the new column `fileHash` exists in the schema. Modify `test/db.test.ts` to assert column `fileHash` is defined in `files` schema. ```typescript import { test, expect } from "bun:test"; import { files } from "../src/db/schema"; test("schema has fileHash column", () => { expect(files.fileHash).toBeDefined(); }); ``` - [ ] **Step 2: Run test to verify it fails** Run: `bun test test/db.test.ts` Expected: FAIL because `fileHash` is undefined in `files`. - [ ] **Step 3: Write minimal implementation** Update `src/db/schema.ts` to include `fileHash`: ```typescript import type { InferInsertModel, InferSelectModel } from 'drizzle-orm'; import { bigint, pgTable, text, timestamp, uuid } from 'drizzle-orm/pg-core'; export const files = pgTable('files', { id: uuid('id').primaryKey().defaultRandom(), publicId: text('public_id').unique().notNull(), telegramFileId: text('telegram_file_id').notNull(), telegramFileUniqueId: text('telegram_file_unique_id').notNull(), storageChatId: bigint('storage_chat_id', { mode: 'number' }).notNull(), storageMessageId: bigint('storage_message_id', { mode: 'number' }).notNull(), fileName: text('file_name').notNull(), mimeType: text('mime_type').notNull(), sizeBytes: bigint('size_bytes', { mode: 'number' }).notNull(), fileType: text('file_type').notNull(), uploaderId: bigint('uploader_id', { mode: 'number' }).notNull(), fileHash: text('file_hash'), createdAt: timestamp('created_at').defaultNow().notNull(), updatedAt: timestamp('updated_at').defaultNow().notNull(), }); export type File = InferSelectModel; export type NewFile = InferInsertModel; ``` - [ ] **Step 4: Run test to verify it passes** Run: `bun test test/db.test.ts` Expected: PASS - [ ] **Step 5: Commit** ```bash git add src/db/schema.ts test/db.test.ts git commit -m "db: add fileHash column to schema" ``` --- ### Task 2: Extend Media & File Types **Files:** - Modify: `src/utils/file.ts` - Test: `test/file.test.ts` - [ ] **Step 1: Write failing tests** We need `getFileType` to recognize stickers, video_notes, and safely fall back any unknown MIME/caption to `document`. Add tests to `test/file.test.ts`: ```typescript import { test, expect } from "bun:test"; import { getFileType, checkFileSize } from "../src/utils/file"; test("getFileType handles sticker, video_note, and fallback", () => { expect(getFileType("image/webp")).toBe("sticker"); expect(getFileType("video/mp4", "video_note")).toBe("video_note"); expect(getFileType("application/octet-stream")).toBe("document"); expect(getFileType("random/mime")).toBe("document"); }); test("checkFileSize allows up to 2GB for fallback documents", () => { expect(checkFileSize(2 * 1024 * 1024 * 1024, "document")).toBe(true); expect(checkFileSize(2 * 1024 * 1024 * 1024 + 1, "document")).toBe(false); }); ``` - [ ] **Step 2: Run test to verify it fails** Run: `bun test test/file.test.ts` Expected: FAIL because sticker and video_note return 'document' or other values, and fail the assertion. - [ ] **Step 3: Write minimal implementation** Update `src/utils/file.ts`: ```typescript const FILE_TYPES: Record = { document: 2 * 1024 * 1024 * 1024, // 2GB photo: 10 * 1024 * 1024, // 10MB video: 2 * 1024 * 1024 * 1024, // 2GB audio: 200 * 1024 * 1024, // 200MB voice: 200 * 1024 * 1024, // 200MB animation: 2 * 1024 * 1024 * 1024, // 2GB sticker: 50 * 1024 * 1024, // 50MB video_note: 200 * 1024 * 1024, // 200MB }; export const getFileType = (mime: string | null, caption?: string): string => { const mimeUpper = mime?.split('/')[0]?.toLowerCase(); const mimeFull = mime?.toLowerCase(); const captionLower = caption?.toLowerCase(); if (mimeFull === 'image/webp' || captionLower?.includes('sticker')) return 'sticker'; if (captionLower?.includes('video_note')) return 'video_note'; if (mimeUpper === 'video') return 'video'; if (mimeUpper === 'audio') return 'audio'; if (mimeUpper === 'image') return captionLower?.includes('gif') ? 'animation' : 'photo'; if (captionLower?.includes('voice')) return 'voice'; if (captionLower?.includes('animation')) return 'animation'; return 'document'; }; export const checkFileSize = (sizeBytes: number, fileType: string): boolean => { const limit = FILE_TYPES[fileType] || FILE_TYPES.document; return sizeBytes <= limit; }; ``` Let's also export `computeHash` helper at the end of `src/utils/file.ts`: ```typescript export const computeHash = (buffer: Buffer): string => { const hasher = new Bun.CryptoHasher("sha256"); hasher.update(buffer); return hasher.digest("hex"); }; ``` - [ ] **Step 4: Run test to verify it passes** Run: `bun test test/file.test.ts` Expected: PASS - [ ] **Step 5: Commit** ```bash git add src/utils/file.ts test/file.test.ts git commit -m "feat: add sticker, video_note, and computeHash helper" ``` --- ### Task 3: Implement Deduplication in HTTP Upload Router **Files:** - Modify: `src/routes/upload.ts` - Test: `test/upload.test.ts` - [ ] **Step 1: Write failing tests** We mock db select queries. First query finds a matching hash. Second query finds nothing. Let's update `test/upload.test.ts`. Add to `test/upload.test.ts`: ```typescript // Add imports for db and files schema import { db, files } from '../src/db/index'; // We must also mock `db.select` ``` Let's update the mocks in `test/upload.test.ts` to support querying. We will add a test block: ```typescript it('should return existing file on duplicate hash upload', async () => { const mockExistingFile = { publicId: 'existing-nanoid-id', telegramFileId: 'existing-tg-id', telegramFileUniqueId: 'existing-tg-unique-id', storageChatId: 123456, storageMessageId: 7890, fileName: 'duplicate.txt', mimeType: 'text/plain', sizeBytes: 11, fileType: 'document', uploaderId: 0, createdAt: new Date(), updatedAt: new Date(), }; // We'll mock db.select().where().limit() in implementation }); ``` - [ ] **Step 2: Run test to verify it fails** Run: `bun test test/upload.test.ts` Expected: FAIL (no hash check exists, it uploads as new file every time). - [ ] **Step 3: Write minimal implementation** Update `src/routes/upload.ts` to compute SHA-256 and query database by hash before doing any storage upload: ```typescript import { eq } from 'drizzle-orm'; import { computeHash } from '../utils/file'; // Inside handleMultipartUpload and handleJSONUpload: const hash = computeHash(fileBuffer); const existing = await db .select() .from(fileSchema) .where(eq(fileSchema.fileHash, hash)) .limit(1); if (existing.length > 0) { const match = existing[0]; const responsePayload = { public_id: match.publicId, telegram_file_id: match.telegramFileId, telegram_file_unique_id: match.telegramFileUniqueId, storage_chat_id: match.storageChatId, storage_message_id: match.storageMessageId, file_name: match.fileName, mime_type: match.mimeType, size_bytes: match.sizeBytes, file_type: match.fileType, uploader_id: match.uploaderId, created_at: match.createdAt instanceof Date ? match.createdAt.toISOString() : new Date(match.createdAt).toISOString(), download_url: `${config.baseUrl}/f/${match.publicId}`, }; return Response.json(responsePayload, { status: 200 }); } ``` Make sure the new inserted records also include the `fileHash: hash` property. - [ ] **Step 4: Run test to verify it passes** Run: `bun test test/upload.test.ts` Expected: PASS - [ ] **Step 5: Commit** ```bash git add src/routes/upload.ts test/upload.test.ts git commit -m "feat: implement SHA-256 deduplication in HTTP upload" ``` --- ### Task 4: Implement Deduplication and All Types in Bot Listener **Files:** - Modify: `src/bot.ts` - Test: `test/bot.test.ts` - [ ] **Step 1: Write failing tests** Update bot listener to support `sticker` and `video_note` in type list and handle `file_unique_id` duplication check before storing. - [ ] **Step 2: Run test to verify it fails** Run: `bun test test/bot.test.ts` Expected: FAIL - [ ] **Step 3: Write minimal implementation** Update `src/bot.ts` listener array to include all types: `['document', 'photo', 'video', 'audio', 'voice', 'animation', 'sticker', 'video_note']` And check the database: ```typescript const existing = await db .select() .from(fileSchema) .where(eq(fileSchema.telegramFileUniqueId, file_unique_id)) .limit(1); if (existing.length > 0) { const match = existing[0]; const url = `${config.baseUrl}/f/${match.publicId}`; await ctx.reply(`File berhasil diupload! 📎\n\nDownload: ${url}`, { reply_parameters: { message_id: ctx.message.message_id }, }); return; } ``` Handle extracting file objects correctly: ```typescript const fileObj = fileType === 'photo' ? ctx.message.photo.slice(-1)[0] : ctx.message[fileType]; ``` Ensure stickers/video notes size limits are respected. - [ ] **Step 4: Run test to verify it passes** Run: `bun test test/bot.test.ts` Expected: PASS - [ ] **Step 5: Commit** ```bash git add src/bot.ts test/bot.test.ts git commit -m "feat: implement bot deduplication using telegram file unique id" ``` `Ȫ x340031Q02025054-IIM/J--OLI-MJLNKMI-LMa⾤S;I{Y_%5D3hB%6j[ {;w{E0AMۘe&'d!=2P򤐅KxrHb*/; o6.p{`Xh6ڪ{{{HwJik[/TDb$"YO=S98`ãׇ~` ^ORfI՝ߞeqX6ص2JɇA5l4jO26ؘJ% }'Ž]kfA*U|l˗iv[a)^.xcf<_H*4~O׬{ݯ7X"&q@W%ZKDZ,ZR =\p}L\T ^8afM[Wknx&Q17H @hPd 44Tc=ێɔ*%(r$72d|tKֿ)ŗLPjFU@sirÖZmJ s=!BNŹ:-j .́!OL|ko^4HĂP<@Zh-KE$ ,o>CLz|jf]%CAEe9NBKހ>+  ۀ[Zu'CZ< %V2-N_G`|H%DNȯ)ْ Q%Lpb5aZ7b ̏rz0{miD,4=/<?A4PҪF$BK""v|Z(h%Ys1oB[oϟ490dp=Lu-ȖueN*m( )Ss9!g3M~W̓"~PjgzWԝii*Y?MF\=g8Oyh(¥?e`NERMZ"up҂<+RYCĽ3MK^6#fvŔ*kF+K)?"hluBGKxp&zxٹ9T\e:_q\Klm흍O x,U"ћLG?Fq8~]>Bw֝3^NY¼^{Ydxtn̽?"(;OۭB2xzz z~ͮ&orte6aDL'@Чyˮhyuvzp`H܉teq\D"[j}B5Q֩VnXS=dU678LXK]Lfe`nTSPk۬Q@$Ks6u "g[[6U]xO+*a}hC54nE<հn8ZJ O2 0 Z,@E} WZ36t:v ;g8l!S1sW u칣Z \lB 2DܯQ,R8{Lі.^xdحwV ocq_ȋKO\";0PvRZ1G jp@Tv 3b!LTDQn O$KS뒔}w t@!脿ꄿg\w[xz^ u&YpHn_kd`Ǐȧ8"7x8iu-8w"Lt)=T |y6}!̇ߢ3Bw]JtPv ?.`( k_mC|K+L> |v`OW+_e|4`m˓}V*-!EI %*R1$% \<(WSfR+)mp22eiTF,dž[x!r iLQd慀H\F>Ed؅.dKHr ǯ<'E6|KVI T$`ڢo&=z2ɚnMJUUJ#EdR&v lper"~gKsrg-?g> XJcK輪б籁-Wʓ,;0Ht9dEXd9ĐÕ^*WII%B@ȅyA[tZ Surb;MB6 mkU_:56lf(f v`|Al4QZzcrP=A-3_jt kҲߒ!KԲc3nKJptFZڈ$:+/e]o(T2 c|JYMR=%w=xj엮*w>$bNώ&D].Pvt N:T^* J!%P|`6M٧2rGߊN@8*%ʈ}Pgp4tHRՇŕZ5x`AJ(#P,o ZY>7ZpAQ)(6M-2!F6uo?eYJcZrUB^dj<5b_K·''rR,IK ܸpEYRq.f?k߻a2ίn>LɈե׃`O`a2(NWzݍnB'S;W'[7rȻ4g rQㅷ{{-P؏|a;zuK|$YA}ܒэԒD˕8!&i{XaIC|~zTh=U/jh[ڇԤ.Ї{($]0C1- w['i~7ǿNQ,EA^F>!Z/wc/D<ɋmJc*5%a:%Y(!1VNU5͋Sf}jzaqSDӍ.{E>*z8E*PiG@/bn1$"C>eG8Fa;LZHj)4u5[2r>!>woPU@5 ๚–W1qDҦje?9+8S |<2 ?IkX V=Uͭhe6N`+1M8tcx;ŸE4Ë=1P~X5))I9:-@ڬA=t-H%e_-G࿨x p# Design: Multi-Format Upload and Anti-Duplication Feature This document describes the design for supporting all file types, media, documents, music, images, and other assets, alongside a robust anti-duplication feature based on SHA-256 (HTTP upload) and `telegram_file_unique_id` (Telegram bot upload). ## Requirements 1. **Anti-Duplication**: - HTTP Uploads: Compute SHA-256 hash of the uploaded file buffer. If a record with the same hash exists, return the existing file's download URL without uploading again. - Telegram Bot Uploads: Identify duplicates via `telegram_file_unique_id`. If the same file is forwarded/uploaded to the bot, return the existing download URL without forwarding again. 2. **Support All Formats & Media**: - Handle all media categories: `document`, `photo`, `video`, `audio`, `voice`, `animation`, `sticker`, `video_note`. - Fall back safely to `document` for any other unknown MIME types or formats. - Size limit for fallback/unknown formats must use the document limit (2GB). ## Architecture & Data Flow ### Database Schema Updates We need to add a `file_hash` column to the `files` schema. ```typescript // src/db/schema.ts export const files = pgTable('files', { // ... existing fields ... telegramFileUniqueId: text('telegram_file_unique_id').unique().notNull(), // Add unique constraint if not present fileHash: text('file_hash'), // SHA-256 for HTTP uploads // ... }); ``` ### HTTP Upload (Deduplication Flow) 1. Receive multipart form or JSON payload. 2. Generate SHA-256 hash from file buffer: ```typescript import { Bun } from 'bun'; const hash = Bun.hash.sha256(fileBuffer).toString('hex'); // Or standard crypto ``` 3. Check database: `select * from files where file_hash = hash`. 4. If record exists: - Return existing file details and download URL directly. 5. If record does not exist: - Run standard upload flow to Telegram storage. - Insert into DB including `fileHash`. ### Telegram Bot Upload (Deduplication Flow) 1. Receive update with message type (`document`, `photo`, `video`, `audio`, `voice`, `animation`, `sticker`, `video_note`). 2. Extract `file_unique_id`. 3. Check database: `select * from files where telegram_file_unique_id = uniqueId`. 4. If record exists: - Return existing download URL. 5. If record does not exist: - Forward to storage channel. - Insert into DB. ## Testing Strategy - Unit tests for: - Hash generation. - Media type parsing (`getFileType`). - Size validation. - Integration tests: - Uploading duplicate file via HTTP twice -> second upload returns first upload's `public_id`. - Bot receives duplicate `file_unique_id` -> returns existing link. n KxTKs0+4>dM2L-\:=ґlɕ֐&^imЉ ڗx0hQCr ڦ2BM.rϺWX`ҊmT,\{вl+b7$Cf sH=#孪d(l lL!T{α v.yZ+_<"md ==?zxj/k*V{~GHV1$4PB(Sgtߍ[n|{n :(KU)rej`}3 #qcl-vA?UKoR.l]cE Td_&Ȭz}` Œ_ET m-z"ƛZZ vMIke'A㰴s7 Ѭ7,xDGvkRv.o^]{w6G5co<LZo ȜOkjxTn0>K{ $S'7X~}!i8%vgfhMAs>Hxt  Xy؁xFoB lyFsEVt&M"BZ^g>AO7@Gm7'|6Z+*[m9 cV69~.(08+c)͡S)+>ٱ~+fEGn,cY*lcozo7yVe1M39+yDY vO2C.s(3M6AoO̥8@/,oĔK$~ &2͠nꕛӆ] ;4}](R-0]܌ZJu;cR4VCD)B>URU:RUo x340031QH/+)fƹ].Jv11$9K+WL<5ئBnLye 5Jߝ?Rͺf4i+TEf^JjHMgdAgnZBǨ '(); export const startBot = async (): Promise> => { try { const bot = new Telegraf(config.botToken); bot.command('start', async (ctx) => { await ctx.reply( `👋 Halo! Kirimkan file (document, photo, video, audio, voice, animation) ke bot ini. ` + `File akan disimpan di private channel dan kamu dapat download link permanen.`, ); }); // Cast bot.on elements individually or explicitly as any to bypass Telegraf v4 typescript deprecation warnings on array syntax (bot as any).on( ['document', 'photo', 'video', 'audio', 'voice', 'animation', 'sticker', 'video_note'], async (ctx: any) => { try { const fileType: | 'document' | 'photo' | 'video' | 'audio' | 'voice' | 'animation' | 'sticker' | 'video_note' = ctx.message.document ? 'document' : ctx.message.photo ? 'photo' : ctx.message.video ? 'video' : ctx.message.audio ? 'audio' : ctx.message.voice ? 'voice' : ctx.message.animation ? 'animation' : ctx.message.sticker ? 'sticker' : ctx.message.video_note ? 'video_note' : 'document'; const fileObj = fileType === 'photo' ? ctx.message.photo.slice(-1)[0] : fileType === 'sticker' ? ctx.message.sticker : ctx.message[fileType]; const { file_id, file_size, mime_type } = fileObj; const fileName = ctx.message.document?.file_name || ctx.message.photo?.slice(-1)[0]?.file_name || ctx.message.video?.file_name || ctx.message.audio?.file_name || ctx.message.voice?.file_name || 'file'; const maxSize = fileType === 'photo' ? 10 * 1024 * 1024 : fileType === 'audio' ? 200 * 1024 * 1024 : fileType === 'voice' ? 200 * 1024 * 1024 : 2 * 1024 * 1024 * 1024; if (file_size > maxSize) { return ctx.reply(`File size exceeds ${maxSize / (1024 * 1024)}MB limit`); } const mediaGroupId = ctx.message.media_group_id; if (mediaGroupId) { if (!mediaGroupCache.has(mediaGroupId)) { mediaGroupCache.set(mediaGroupId, { timer: null, items: [] }); } const group = mediaGroupCache.get(mediaGroupId)!; if (group.timer) { clearTimeout(group.timer); } group.items.push({ ctx, fileId: file_id, fileSize: file_size, mimeType: mime_type, fileName: fileName, fileType: fileType, fileUniqueId: fileObj.file_unique_id, }); group.timer = setTimeout(async () => { mediaGroupCache.delete(mediaGroupId); try { const itemsToUpload: MediaGroupBufferItem[] = []; const responses: string[] = []; for (const item of group.items) { const existing = await db .select() .from(fileSchema) .where(eq(fileSchema.telegramFileUniqueId, item.fileUniqueId)) .limit(1); if (existing && existing.length > 0) { const url = `${config.baseUrl}/f/${existing[0].publicId}`; responses.push(`File *${item.fileName}* sudah diupload! 📎\nDownload: ${url}`); } else { itemsToUpload.push(item); } } if (itemsToUpload.length > 0) { const uploadItems = itemsToUpload.map((item) => ({ fileId: item.fileId, fileName: item.fileName, fileType: item.fileType, })); const { forwardMediaGroupToStorage } = await import('./utils/telegram'); const batchResult = await forwardMediaGroupToStorage(uploadItems); const dbInserts = []; for (let i = 0; i < itemsToUpload.length; i++) { const item = itemsToUpload[i]; const publicId = nanoid(); const uploaded = { publicId, telegramFileId: batchResult.telegramFileIds[i], telegramFileUniqueId: batchResult.telegramFileUniqueIds[i], storageChatId: config.storageChatId, storageMessageId: batchResult.storageMessageId, fileName: item.fileName, mimeType: item.mimeType || 'application/octet-stream', sizeBytes: item.fileSize, fileType: item.fileType, uploaderId: ctx.from.id, createdAt: new Date(), updatedAt: new Date(), }; dbInserts.push(uploaded); responses.push( `File *${item.fileName}* berhasil diupload! 📎\nDownload: ${config.baseUrl}/f/${publicId}`, ); } if (dbInserts.length > 0) { await db.insert(fileSchema).values(dbInserts); } } await ctx.reply(responses.join('\n\n')); logger.info('Media group uploaded as batch', { mediaGroupId, totalFiles: group.items.length, uploadedFiles: itemsToUpload.length, uploader: ctx.from.id, }); } catch (error: any) { logger.error('Failed to process media group batch', { error: error.message, mediaGroupId, }); await ctx.reply('❌ Gagal mengupload beberapa file di media group.'); } }, 600); return; } const existing = await db .select() .from(fileSchema) .where(eq(fileSchema.telegramFileUniqueId, fileObj.file_unique_id)) .limit(1); if (existing && existing.length > 0) { const url = `${config.baseUrl}/f/${existing[0].publicId}`; await ctx.reply(`File berhasil diupload! 📎\n\nDownload: ${url}`, { reply_parameters: { message_id: ctx.message.message_id }, }); logger.info('Duplicate file detected in bot, returned existing link', { publicId: existing[0].publicId, fileType, fileName, uploader: ctx.from.id, }); return; } const result = await forwardToStorage(file_id, fileName, fileType); const publicId = nanoid(); const uploaded = { publicId: publicId, telegramFileId: result.telegramFileId, telegramFileUniqueId: result.telegramFileUniqueId, storageChatId: config.storageChatId, storageMessageId: result.storageMessageId, fileName: fileName, mimeType: mime_type || 'application/octet-stream', sizeBytes: file_size, fileType: fileType, uploaderId: ctx.from.id, createdAt: new Date(), updatedAt: new Date(), }; await db.insert(fileSchema).values(uploaded); const url = `${config.baseUrl}/f/${publicId}`; await ctx.reply(`File berhasil diupload! 📎\n\nDownload: ${url}`, { reply_parameters: { message_id: ctx.message.message_id }, }); logger.info('File uploaded via bot', { publicId, fileType, fileName, uploader: ctx.from.id, }); } catch (error: any) { logger.error('Bot file handler error', { error: error.message, chat_id: ctx.chat?.id }); await ctx.reply('❌ Gagal mengupload file. Coba lagi nanti.'); } }, ); bot.use((ctx, next) => { logger.info('Telegram event received', { type: (ctx.update as any).type, chat_id: ctx.chat?.id, }); return next(); }); await bot.launch(); logger.info('Telegram bot started', { botToken: `${config.botToken?.substring(0, 10)}...` }); return bot; } catch (error: any) { logger.error('Failed to start bot', { error: error.message }); throw error; } }; #~VLkxSOQXØ?0R֔&CH @85۾t쾥Thz ţ/ă&^yobmK&a;37蛑l^X|&ŦT!EXv,9wN/VJ<3#!w]g \9 QxŗDQ()$Unc" 8)ej>fVlL+8-[ ̀܁*snpxɪ \YH咽 E"Ie.KiTz}Ǿ-.c^Hg:uDNi 6L,`.[jR~t,UABmbelͱPt+2w7%/kkH͎y$q@9^$ndQL&Qpsc6((RȏY|.gyԡs!W ^G#'3GJQǖrahgh tiJ!$I)b0~sMNcs<=:Ʒ+"ͻl /[bNOc=~@ӣfp Ɖpk}47s _Rj0P+tI?aӥ6 ?L?6C.^[q8 t^tOڿ n8$驪|1 x340031QHI-+)f.R{R{>A/xVBd楤VԜ. L:u`0땝?U^X RzǢl|J>ڙ0;TUqrFjn"HT~xÝf69ޘ2|:IJ5xRimport { eq } from 'drizzle-orm'; import { db, files as fileSchema } from './index'; import type { File } from './schema'; export const findFileByHash = async (hash: string): Promise => { const result = await db.select().from(fileSchema).where(eq(fileSchema.fileHash, hash)).limit(1); return result[0] || null; }; export const findFileByPublicId = async (publicId: string): Promise => { const result = await db .select() .from(fileSchema) .where(eq(fileSchema.publicId, publicId)) .limit(1); return result[0] || null; }; export const findFileByUniqueId = async (telegramFileUniqueId: string): Promise => { const result = await db .select() .from(fileSchema) .where(eq(fileSchema.telegramFileUniqueId, telegramFileUniqueId)) .limit(1); return result[0] || null; }; xMO;0&qc&Xi)i!v: !54JZ L BrJ$*ТdG.2}r|Eðȕ(SHAP)w1@c `ݘ cM9R1# Q۵ê4ĦO9 = 킿ޝtT%%B)n xmN0D9^[qz%YTqofgִ EP ֧8fnP{1#R}#j'{66'^k [f&H"C# STOƋdl5%l#8`cRV@ޑw94NRd;hƻtԈP#g(i:zU4k0l47^l9?@|ϾT?EPơrXcDYxTn0+x (i A}hܳ@+_&/)Z1#ˍ{83ˡ EӀh)k0Kق+EyUDF ae(G%k9͆rd-Z"tctJN772fUJՌC> !Fb[m ]6PO"<ڕUKO }e8$kydX?{cxEO-B/~׽čU'$Z iaKlƋ.*$3 %J+h[1t^{M sHGYCb8ᩝv&y(vmKiJNsE- DZ[>LLe`3n$~ k}KDG RyIwiM7!p9='6@id_^t|DM>O_NbO!길ܿ%e%v NrxVmsF_qp)ݤUj$$\ q#q/Fz{H~s=,W)(I МKY5'I̍aA(l0rVnJdMSW(!آ8&4J:7+g" ){q/]/ 4%*X,84K ׸"dI qz3Tsݎ?k񊟳uƏYz{gCi#*UF1df ]">ofM7_7 aǤv=?rP xk100644 files.ts@;Elƌ100644 health.ts)pvr'*C100644 swagger.ts\\\dk[100644 upload.ts ?.녹N/6>M:ximport { createReadStream } from 'node:fs'; import { unlink } from 'node:fs/promises'; import { nanoid } from 'nanoid'; import { findFileByPublicId } from '../db/files'; import { fileInfoCache } from '../utils/cache'; import { formatCreatedAt, getErrorMessage } from '../utils/file'; import logger from '../utils/logger'; import { getBot } from '../utils/telegram'; import { locateZipEntry } from '../utils/zip'; type RequestWithParams = Request & { params?: { public_id?: string; }; }; const getTelegramFileInfo = async (telegramFileId: string, public_id: string) => { const cacheKey = `file_info_${telegramFileId}`; let fileInfo = fileInfoCache.get(cacheKey); if (!fileInfo) { const bot = getBot(); const apiFileInfo = await bot.telegram.getFile(telegramFileId); fileInfo = { file_size: (apiFileInfo as any).file_size || 0, mime_type: (apiFileInfo as any).mime_type || 'application/octet-stream', file_path: (apiFileInfo as any).file_path || '', }; fileInfoCache.set(cacheKey, fileInfo); logger.debug('File info cached', { public_id, cacheKey }); } else { logger.debug('File info from cache', { public_id, cacheKey }); } return fileInfo; }; const buildTelegramFileUrl = (filePath: string): string => `https://api.telegram.org/file/bot${process.env.BOT_TOKEN}/${filePath}`; const cleanupTempFile = async (tempPath: string): Promise => { try { await unlink(tempPath); } catch (err) { logger.warn('Failed to cleanup temp file', { tempPath, error: getErrorMessage(err) }); } }; const sanitizeFilenameHeader = (fileName: string): string => fileName.replace(/[\\"]/g, '').replace(/[\n\r]/g, ''); const fail = (status: number, error: string): Response => Response.json({ error }, { status }); export const handleFileRedirect = async (req: RequestWithParams): Promise => { const public_id = req.params?.public_id; try { if (!public_id) { return fail(400, 'Missing file id'); } const file = await findFileByPublicId(public_id); if (!file) { logger.warn('File not found', { public_id }); return fail(404, 'File not found'); } const archiveEntryName = file.archiveEntryName; if (archiveEntryName) { const archiveFileId = file.archiveTelegramFileId || file.telegramFileId; const archiveInfo = await getTelegramFileInfo(archiveFileId, public_id); const archiveResponse = await fetch(buildTelegramFileUrl(archiveInfo.file_path)); if (!archiveResponse.ok) { logger.error('Archive download failed', { public_id, status: archiveResponse.status }); return fail(500, 'Server error'); } const tempZipPath = `/tmp/teleuploader-dl-${nanoid()}.zip`; await Bun.write(tempZipPath, archiveResponse); const loc = await locateZipEntry(tempZipPath, archiveEntryName); if (!loc) { await cleanupTempFile(tempZipPath); logger.error('Archive entry not found', { public_id, archiveEntryName }); return fail(404, 'File not found'); } const fileStream = createReadStream(tempZipPath, { start: loc.start, end: loc.start + loc.length - 1, }); fileStream.on('close', () => { void cleanupTempFile(tempZipPath); }); fileStream.on('error', () => { void cleanupTempFile(tempZipPath); }); return new Response(fileStream as any, { status: 200, headers: { 'Content-Type': file.mimeType || 'application/octet-stream', 'Content-Disposition': `attachment; filename="${sanitizeFilenameHeader(file.fileName)}"`, 'Content-Length': String(loc.length), }, }); } const fileInfo = await getTelegramFileInfo(file.telegramFileId, public_id); const tgResponse = await fetch(buildTelegramFileUrl(fileInfo.file_path)); if (!tgResponse.ok) { logger.error('File download failed', { public_id, status: tgResponse.status }); return fail(502, 'Server error'); } return new Response(tgResponse.body, { status: 200, headers: { 'Content-Type': file.mimeType || 'application/octet-stream', 'Content-Disposition': `attachment; filename="${sanitizeFilenameHeader(file.fileName)}"`, 'Content-Length': String(file.sizeBytes), }, }); } catch (error: unknown) { logger.error('File redirect error', { public_id, error: getErrorMessage(error) }); return fail(500, 'Server error'); } }; export const handleFileInfo = async (req: RequestWithParams): Promise => { const public_id = req.params?.public_id; try { if (!public_id) { return fail(400, 'Missing file id'); } const file = await findFileByPublicId(public_id); if (!file) { logger.warn('File not found', { public_id }); return fail(404, 'File not found'); } return Response.json( { public_id: file.publicId, file_name: file.fileName, mime_type: file.mimeType, size_bytes: file.sizeBytes, file_type: file.fileType, created_at: formatCreatedAt(file.createdAt), }, { status: 200 }, ); } catch (error: unknown) { logger.error('File info error', { public_id, error: getErrorMessage(error) }); return fail(500, 'Server error'); } }; => { try { await db.execute(sql`SELECT 1`); return Response.json({ status: 'ok' }, { status: 200 }); } catch (error: unknown) { const message = getErrorMessage(error); logger.error('Health check failed', { error: message }); return Response.json({ status: 'error', error: message }, { status: 500 }); } }; P(x#-import { config } from '../env'; const errorSchema = (example: string) => ({ type: 'object', properties: { error: { type: 'string', example }, }, }); const jsonContent = (schema: object) => ({ 'application/json': { schema }, }); export const handleSwaggerJson = async (): Promise => { const spec = { openapi: '3.0.0', info: { title: 'TeleUploader API', version: '1.0.0', description: 'Telegram-backed file uploader API with redirect-based downloads.', }, servers: [ { url: '/', description: 'Current environment', }, ], paths: { '/health': { get: { summary: 'Health Check', description: 'Checks database connectivity status.', responses: { '200': { description: 'Database is healthy', content: jsonContent({ type: 'object', properties: { status: { type: 'string', example: 'ok' }, }, }), }, '500': { description: 'Database or server is unhealthy', content: jsonContent({ type: 'object', properties: { status: { type: 'string', example: 'error' }, error: { type: 'string', example: 'DB Connection Failed' }, }, }), }, }, }, }, '/api/upload': { post: { summary: 'Upload File', description: 'Uploads a file to Telegram storage via multipart/form-data or JSON base64.', requestBody: { required: true, content: { 'multipart/form-data': { schema: { type: 'object', required: ['file'], properties: { file: { type: 'string', format: 'binary', description: 'File binary payload.', }, fileName: { type: 'string', description: 'Optional file name override.', }, }, }, }, 'application/json': { schema: { type: 'object', required: ['file'], properties: { file: { type: 'string', description: 'Base64 encoded file content.', }, fileName: { type: 'string', default: 'file', description: 'Optional file name.', }, }, }, }, }, }, responses: { '200': { description: 'Successful upload metadata.', content: jsonContent({ type: 'object', properties: { public_id: { type: 'string', example: 'xYz123' }, telegram_file_id: { type: 'string', example: 'BQACAgQAAxkBA...' }, telegram_file_unique_id: { type: 'string', example: 'AgAD8w...' }, storage_chat_id: { type: 'integer', example: -1001234567890 }, storage_message_id: { type: 'integer', example: 42 }, file_name: { type: 'string', example: 'document.pdf' }, mime_type: { type: 'string', example: 'application/pdf' }, size_bytes: { type: 'integer', example: 1048576 }, file_type: { type: 'string', example: 'document' }, uploader_id: { type: 'integer', example: 0 }, created_at: { type: 'string', format: 'date-time', example: '2026-05-18T10:00:00.000Z', }, download_url: { type: 'string', example: `${config.baseUrl}/f/xYz123`, }, }, }), }, '400': { description: 'Bad request.', content: jsonContent(errorSchema('No file provided')), }, '500': { description: 'Internal server error.', content: jsonContent(errorSchema('Upload failed')), }, }, }, }, '/f/{public_id}': { get: { summary: 'Redirect to Telegram File URL', description: 'Gets a fresh Telegram download URL and redirects with 302. Rate-limited by IP.', parameters: [ { name: 'public_id', in: 'path', required: true, description: 'Permanent public file ID.', schema: { type: 'string' }, }, ], responses: { '302': { description: 'Redirect to Telegram CDN URL.', headers: { Location: { schema: { type: 'string', example: 'https://api.telegram.org/file/botTOKEN/documents/file_0.pdf', }, }, }, }, '404': { description: 'File not found.', content: jsonContent(errorSchema('File not found')), }, '429': { description: 'Rate limit exceeded.', content: jsonContent(errorSchema('Rate limit exceeded')), }, '500': { description: 'Internal server error.', content: jsonContent(errorSchema('Server error')), }, }, }, }, '/file/{public_id}/info': { get: { summary: 'Get File Info', description: 'Gets saved file metadata by public ID.', parameters: [ { name: 'public_id', in: 'path', required: true, description: 'Permanent public file ID.', schema: { type: 'string' }, }, ], responses: { '200': { description: 'File metadata.', content: jsonContent({ type: 'object', properties: { public_id: { type: 'string', example: 'xYz123' }, file_name: { type: 'string', example: 'document.pdf' }, mime_type: { type: 'string', example: 'application/pdf' }, size_bytes: { type: 'integer', example: 1048576 }, file_type: { type: 'string', example: 'document' }, uploader_id: { type: 'integer', example: 0 }, created_at: { type: 'string', format: 'date-time', example: '2026-05-18T10:00:00.000Z', }, }, }), }, '400': { description: 'Missing public ID.', content: jsonContent(errorSchema('Missing file id')), }, '404': { description: 'File not found.', content: jsonContent(errorSchema('File not found')), }, '500': { description: 'Internal server error.', content: jsonContent(errorSchema('Server error')), }, }, }, }, }, }; return Response.json(spec, { status: 200, headers: { 'access-control-allow-origin': '*', }, }); }; export const handleSwaggerHtml = async (): Promise => { const html = ` TeleUploader API Documentation
`; return new Response(html, { status: 200, headers: { 'content-type': 'text/html; charset=utf-8', 'access-control-allow-origin': '*', 'x-content-type-options': 'nosniff', }, }); }; S{ZR(`xuAKQ &):AkFoO$lo҆"'/z+7 =xW z7rHOVYqYINP# xYsԶB0̵]'p6$ ЦCLtv׍_HrMe%!mt%kGRV$QɎM%,Ff$CdA*HPV)OEMgybLiI*K[Rf9 8qNӬLT̻tSK-kK% :i6Xy2i<=GLU)Ur{gꁪPDdh8{{%GVjJr`' &͘|ytfkd n+_^fihǂ<=ea2+YfjMPk̔ɶ3Mt줯?`8ed|JF~UYk6]euYnZਐ<+ghm $$)l bH"ƠDM1 1wٔG,$R|< R\D"!3<9=z(r&3%P7Ɋy::c̸{-)&YIAOL𢡄䌖M}ۘTLH~ ;_4 P 6tma)G Fmۈ0,r~ӌz3O;v**TUO;xu=Ӎ/+.ZUF7эƧ0Z|rk.9`d@z>U%W~]g5bN=x QʣG1Ḧ́7s3X rQXvO7Oê1ES(VBW/mH9:,3QԜLʄA4+TKI CK0-F]D\/8G#YH@2͍ ;<86*8йo)gʢ900c{bw Cꑧsa,X41^yG/-[ x5:} 6 +p la*&>I/R\獹,mOj5sblڪWBdz?~Rֈ>>5-/r6=G>k漆_ 5bop%@;eD́pM[Nk$b/je`}}Cǀ}7<KCoW8y) $sllf=OeRGs0$Gn1}ʫ2YQbN>Jgobn砛*Em}h 0لnI9Xkx340031QH/HM)+)f~lNSy;B%'&g,;u䜖kF7|-6ZUVr~AuG>uiʻXi/C䧧MMK:H%Lťi@妖e&T Gh=pmKGޒnuMPUE%>% uSKjl3UzԻ`ꀦU\^?c'<#S2>3y< US^ RS[lm좎oN n4Z[-,4yjr;'?aܯbҹ=P9)N%{x> j={Aܦ]*HKʐ = new Map(); private totalBots: number; constructor(totalBots: number) { this.totalBots = totalBots; for (let i = 0; i < totalBots; i++) { this.botHealth.set(i, { index: i, isHealthy: true, rateLimitedUntil: 0, failureCount: 0, successCount: 0, lastUsed: 0, }); } } recordSuccess(botIndex: number): void { const health = this.botHealth.get(botIndex); if (health) { health.successCount++; health.failureCount = 0; health.isHealthy = true; health.lastUsed = Date.now(); } } recordFailure(botIndex: number, retryAfterSeconds?: number): void { const health = this.botHealth.get(botIndex); if (health) { health.failureCount++; health.lastUsed = Date.now(); if (retryAfterSeconds) { health.rateLimitedUntil = Date.now() + retryAfterSeconds * 1000; health.isHealthy = false; logger.warn('Bot rate limited', { botIndex, retryAfter: retryAfterSeconds, }); } else if (health.failureCount >= 3) { health.isHealthy = false; logger.warn('Bot marked unhealthy', { botIndex, failures: health.failureCount }); } } } getHealthiestBot(): number { const now = Date.now(); let bestBot = 0; let bestScore = -Infinity; for (let i = 0; i < this.totalBots; i++) { const health = this.botHealth.get(i)!; // Skip rate-limited bots if (health.rateLimitedUntil > now) { continue; } // Calculate score: prefer healthy bots with fewer failures and more successes const score = (health.isHealthy ? 100 : 0) + health.successCount - health.failureCount * 10 - (now - health.lastUsed) / 1000; if (score > bestScore) { bestScore = score; bestBot = i; } } return bestBot; } getStats() { const stats = { healthy: 0, rateLimited: 0, unhealthy: 0, bots: [] as any[], }; const now = Date.now(); for (const health of this.botHealth.values()) { if (health.rateLimitedUntil > now) { stats.rateLimited++; } else if (health.isHealthy) { stats.healthy++; } else { stats.unhealthy++; } stats.bots.push({ index: health.index, healthy: health.isHealthy, rateLimitedUntil: health.rateLimitedUntil > now ? health.rateLimitedUntil - now : 0, failures: health.failureCount, successes: health.successCount, }); } return stats; } reset(): void { for (const health of this.botHealth.values()) { health.isHealthy = true; health.rateLimitedUntil = 0; health.failureCount = 0; health.successCount = 0; } } } export { BotHealthTracker }; U𪺷axTMo@+&RKb*9J[)RsoU"isp%% QB"='M$01󣉏R}%9)1> =lFCP9oApi% <%LL[3eTb|M%l%P5†0y2\ix |ZYS:Q|` '1dՔdL0O(0lHj)j51,N˄|NdJWkvsFz+FnuZmm`c򆓔o)v^AM:N'4LH`=DS 2z4?zàu63S`A}eDʄ=>rJ}|ig#9hWEG]vwJ^:8F4 Dtڬ^-i߮jNGmFChA]2λ51"(Ė=m y^,;~\ё{:[[E+ xYmo6_]e dM5MZ4͇!Ym5I4_$RXQ@sG^]YH%# ʎ"+iY Jɀ>4K]9|Kv)(pAG4L[I}>B;ٌwvb =,py5K4RhBEBp?2Zeh0djF !Om`EuExEwm6ʓ,ha.4`4= Ώ5h#trzv< |aVDox(oqh( MA4C2ˌe>P-sG4UAň۳P! x8K`Ւ--~4ctFLʍN _wR I݉btEB<(̓ ^]O?RY޿PLV%'oQ 7c Hq{Ӷr2-W 3 WQj7lɏi,1wLmʱ̒OccI8xS┙]BbSlXj;(f1X [t/S[>i]@Kԯ}M>)6A[< -Xd c+ѓ;t=ݧ]PCW*O(jk* =f]u2]\ RY;yZ{j`/nU{g.<3"i\4@Saнs&E{88A;~]U,?M.Y=R#_\lo^ wbSrf]K>BB}QLȁ4\U^~]=lTM[kIM.E*[{0$jSo|_6 rFx74VU:zKhy xm?k0w$ 5RI3 JgW`Kܺq=-:{zK W8[S&v z@-,1*1Tj4r2cǤMgf.+2 vOj.$R[)ŒO ɩ9fQŜ6ʘ 5wQo <#m%Rw`KX}hmt/ɴop4SM1xSMO0 WSZiv)H*I7d 6$Tg#`dqԂ$ V`Ǖʡ 8O=0FSAH%u9Zg>>@hې1!PRQ-挀[A]^N9r> gO6/8567ѭ D@}gH >NWcw: Hc; } interface MetricsSnapshot { uploadLatency: { p50: number; p95: number; p99: number }; uploadThroughput: number; queueSize: number; errorRate: number; cacheHitRate: number; botUtilization: number; timestamp: number; } class MetricsCollector { private metrics: Metric[] = []; private uploadTimes: number[] = []; private errorCount = 0; private totalRequests = 0; private cacheHits = 0; private cacheMisses = 0; private maxMetricsSize = 10000; recordUploadTime(durationMs: number): void { this.uploadTimes.push(durationMs); this.totalRequests++; // Keep only last 1000 measurements if (this.uploadTimes.length > 1000) { this.uploadTimes.shift(); } } recordError(): void { this.errorCount++; } recordCacheHit(): void { this.cacheHits++; } recordCacheMiss(): void { this.cacheMisses++; } recordMetric(name: string, value: number, tags?: Record): void { this.metrics.push({ name, value, timestamp: Date.now(), tags, }); // Keep metrics bounded if (this.metrics.length > this.maxMetricsSize) { this.metrics = this.metrics.slice(-this.maxMetricsSize); } } private calculatePercentile(arr: number[], percentile: number): number { if (arr.length === 0) return 0; const sorted = [...arr].sort((a, b) => a - b); const index = Math.ceil((percentile / 100) * sorted.length) - 1; return sorted[Math.max(0, index)]; } getSnapshot(): MetricsSnapshot { const errorRate = this.totalRequests > 0 ? (this.errorCount / this.totalRequests) * 100 : 0; const cacheHitRate = this.cacheHits + this.cacheMisses > 0 ? (this.cacheHits / (this.cacheHits + this.cacheMisses)) * 100 : 0; return { uploadLatency: { p50: this.calculatePercentile(this.uploadTimes, 50), p95: this.calculatePercentile(this.uploadTimes, 95), p99: this.calculatePercentile(this.uploadTimes, 99), }, uploadThroughput: this.totalRequests > 0 ? this.totalRequests / 60 : 0, queueSize: 0, // Will be updated by queue errorRate, cacheHitRate, botUtilization: 0, // Will be updated by bot tracker timestamp: Date.now(), }; } reset(): void { this.uploadTimes = []; this.errorCount = 0; this.totalRequests = 0; this.cacheHits = 0; this.cacheMisses = 0; this.metrics = []; } getMetrics(name?: string): Metric[] { if (!name) return this.metrics; return this.metrics.filter((m) => m.name === name); } } export const metricsCollector = new MetricsCollector(); // Log metrics every 5 minutes setInterval( () => { const snapshot = metricsCollector.getSnapshot(); logger.info('Metrics snapshot', { uploadLatency: snapshot.uploadLatency, uploadThroughput: snapshot.uploadThroughput.toFixed(2), errorRate: snapshot.errorRate.toFixed(2), cacheHitRate: snapshot.cacheHitRate.toFixed(2), }); }, 5 * 60 * 1000, ); export { MetricsCollector }; 6#yxU]O@|ϯXbЪ}h*Ң &ݙ$lc û3 L, Qtq8p;-Y/RB_u 4[PVGzFgngJK.VViN̫?norvCOoz˹dsTlK/7AzZp> !N L(,3 y e]%µ`|jN]NT Qꄓ2s|8 ̿VR$lݽPD xrs/RO|ۆgκRe]+M̦]a}NA&g4[$ ) 1O.ˌ^Eؤzb=mhw9# zgʕ+2|WꛑacSqyH ;IR.8jp=8ζwPʷNLeRC#:Vuň &CzDΒtKtg[͡-D((9OY3(dq|"46{Qр|zڋBw|ωe묛/6 Zqg%;tRxϏt`ȘYcryzq͎mЧ񫻸Wس2vѨ9£i;ᴚIf$_xU]o0}WIH(eHZx xMf;U>%$@& ||7$[L@/A 9vNPYb Xh%HN9 new Telegraf(token)); const TELEGRAM_API_URL = `https://api.telegram.org/bot${config.botToken}/`; let currentBotIndex = 0; const rotateBot = (): { previousIndex: number; nextIndex: number } => { const previousIndex = currentBotIndex; currentBotIndex = (currentBotIndex + 1) % bots.length; return { previousIndex, nextIndex: currentBotIndex }; }; const sleep = (seconds: number): Promise => { return new Promise((resolve) => setTimeout(resolve, seconds * 1000)); }; const executeWithBotRetry = async ( action: (botInstance: Telegraf) => Promise, retries = 5, attemptedBots = 0, ): Promise => { const currentBot = bots[currentBotIndex]; try { return await action(currentBot); } catch (error: unknown) { const errorStr = error instanceof Error ? error.message : String(error); const match = errorStr.match(/retry after (\d+)/i); if (match) { const { previousIndex, nextIndex } = rotateBot(); attemptedBots++; if (attemptedBots < bots.length) { logger.info( `Bot Index ${previousIndex} hit 429. Instantly rotating to Bot Index ${nextIndex}...`, ); return executeWithBotRetry(action, retries, attemptedBots); } // If all bots in the pool have been tried and hit 429, sleep if (retries > 0) { const seconds = parseInt(match[1], 10); logger.warn(`All bots in the pool are rate-limited. Sleeping for ${seconds} seconds...`, { error: errorStr, }); await sleep(seconds); return executeWithBotRetry(action, retries - 1, 0); } } throw error; } }; interface ForwardResult { telegramFileId: string; telegramFileUniqueId: string; storageMessageId: number; } interface TelegramFileInfo { file_size: number; mime_type: string; file_path: string; } interface TelegramGetFileResponse { ok: boolean; description?: string; result: { file_id: string; }; } interface TelegramGetInfoResponse { ok: boolean; description?: string; result: TelegramFileInfo; } interface UploadedTelegramFile { file_id?: string; file_unique_id?: string; } interface TelegramMessageResult { message_id: number; document?: UploadedTelegramFile; photo?: UploadedTelegramFile[]; video?: UploadedTelegramFile; audio?: UploadedTelegramFile; voice?: UploadedTelegramFile; animation?: UploadedTelegramFile; sticker?: UploadedTelegramFile; video_note?: UploadedTelegramFile; [key: string]: unknown; } type FilePayload = { source: unknown; filename: string }; type SendPayload = { caption?: string }; type SendMethod = ( chatId: number, filePayload: FilePayload, payload?: SendPayload, ) => Promise; const sendMethodMap: Record = { photo: 'sendPhoto', audio: 'sendAudio', video: 'sendVideo', voice: 'sendVoice', animation: 'sendAnimation', sticker: 'sendSticker', document: 'sendDocument', video_note: 'sendDocument', }; const extractUploadedFile = ( result: TelegramMessageResult, fileType: string, ): UploadedTelegramFile | undefined => { if (result.document) return result.document; if (result.photo) return result.photo?.slice(-1)[0]; if (result.video) return result.video; if (result.audio) return result.audio; if (result.voice) return result.voice; if (result.animation) return result.animation; if (result.sticker) return result.sticker; if (result.video_note) return result.video_note; return result[fileType] as UploadedTelegramFile | undefined; }; const buildSendPayload = (fileType: string, fileName: string): SendPayload => { const basePayload = { caption: fileName }; if (fileType === 'sticker') return {}; if (fileType === 'document') return { caption: `📁 ${fileName}` }; return basePayload; }; const getMediaGroupType = (fileType: string): string => { if (fileType === 'photo') return 'photo'; if (fileType === 'video') return 'video'; if (fileType === 'audio') return 'audio'; return 'document'; }; interface MediaGroupPayloadItem { type: string; media: string; caption: string; } const buildMediaGroup = (items: MediaGroupItem[]): MediaGroupPayloadItem[] => { return items.map((item) => ({ type: getMediaGroupType(item.fileType), media: item.fileId, caption: item.fileName, })); }; export const forwardToStorage = async ( fileChunk: unknown, fileName: string, fileType: string, ): Promise => { try { const result = await enqueueUpload(async (): Promise => { const filePayload = { source: fileChunk, filename: fileName }; const sendMethod = sendMethodMap[fileType] || 'sendDocument'; const payload = buildSendPayload(fileType, fileName); const uploadResult = await executeWithBotRetry((activeBot) => { const telegram = activeBot.telegram as unknown as Record; return telegram[sendMethod](config.storageChatId, filePayload, payload); }); currentBotIndex = (currentBotIndex + 1) % bots.length; return uploadResult; }); const uploadedFile = extractUploadedFile(result, fileType); logger.info('File forwarded to storage', { fileName, message: result.message_id }); return { telegramFileId: uploadedFile?.file_id || '', telegramFileUniqueId: uploadedFile?.file_unique_id || '', storageMessageId: result.message_id, }; } catch (error: unknown) { logger.error('Failed to forward file to storage', { fileName, error: error instanceof Error ? error.message : String(error), }); throw error; } }; export interface MediaGroupItem { fileId: string; fileName: string; fileType: string; } export const forwardMediaGroupToStorage = async ( items: MediaGroupItem[], ): Promise<{ storageMessageId: number; telegramFileIds: string[]; telegramFileUniqueIds: string[]; }> => { try { const result = await enqueueUpload(async (): Promise => { const mediaGroup = buildMediaGroup(items); const uploadResult = await executeWithBotRetry((activeBot) => { const sendMediaGroup = activeBot.telegram.sendMediaGroup as unknown as ( chatId: number, media: MediaGroupPayloadItem[], ) => Promise; return sendMediaGroup(config.storageChatId, mediaGroup); }); currentBotIndex = (currentBotIndex + 1) % bots.length; return uploadResult; }); const messages = Array.isArray(result) ? result : [result]; const storageMessageId = messages[0]?.message_id || 0; const telegramFileIds: string[] = []; const telegramFileUniqueIds: string[] = []; for (let i = 0; i < messages.length; i++) { const uploadedFile = extractUploadedFile(messages[i], items[i]?.fileType || 'document'); telegramFileIds.push(uploadedFile?.file_id || ''); telegramFileUniqueIds.push(uploadedFile?.file_unique_id || ''); } return { storageMessageId, telegramFileIds, telegramFileUniqueIds, }; } catch (error: unknown) { logger.error('Failed to forward media group to storage', { error: error instanceof Error ? error.message : String(error), }); throw error; } }; export const getFileInfo = async ( telegramFileId: string, telegramFileUniqueId: string, ): Promise => { try { const result = await fetch(`${TELEGRAM_API_URL}getFile`); const data = (await result.json()) as TelegramGetFileResponse; if (!data.ok) { throw new Error(data.description || 'Telegram API error'); } const fileId = data.result.file_id === telegramFileId ? telegramFileId : telegramFileUniqueId; const fileResult = await fetch(`${TELEGRAM_API_URL}getInfo`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ file_id: fileId }), }); const fileInfo = (await fileResult.json()) as TelegramGetInfoResponse; if (!fileInfo.ok) { throw new Error(fileInfo.description || 'Telegram info error'); } return { file_size: fileInfo.result.file_size, mime_type: fileInfo.result.mime_type, file_path: fileInfo.result.file_path, }; } catch (error: unknown) { logger.error('Failed to get file info', { error: error instanceof Error ? error.message : String(error), }); throw error; } }; export const getBot = (): Telegraf => bots[0]; b@.hxu1OPǕDJXT 00!8`a? *رz'إ? bcabacb81-|w{[?]5 8K CifT5B ֵ%iV] +cqUTsOG2oR3CG8R% ~K(c/v:a[JfcqV!nd39m>U`r5 WAdFY?1[?q^Y`o ݯg+p \/k p =L܃LTDh%5Ai^A@dz|  VK4Г8 AvQd0BB4X+Jgq3JrKjҚl+,r47$Xf iц|\\6q!R90MsNb߿ BK>"L<ʘ yK4ZetMa]%Zds15z3- Ļ u=F.BIzD-/aYaƸeq/>+zh~QK?y$yxB %{ config } from '../env#0config.uploadConcurrencyQxW[o6~aUɊ=qM<$ b)#WR%*iD6Eυ#nVhr.lȲd,Mx:▷cxVAEˁU }Fb3/ؚ:7s@#-/IL3 Z- y>ն"ԉ&˰'w)p.15/p6CdiQZ0$`>R'*: >}{tku/d\q& Eyx۬JqC+<.yizI%% 55 %y)yU v hjAN%œq- 5xY{oFߟb RhYJ ׯvS$@r)ŝ&xH\V]}{-Narwv^;eX'wdZ,I/8<.j*L5U2ewRTKxjOɂ˄]"),4vح%#ɖoerFN!-CPʊ#@[.xRL a8NxtHf1a(ˊ5K/;ro0ՌPs3)(|5?[qVBШ7I=ʐL;JE맟޽i!G?WUWQH~HmDNNR9{7+bF(PV$0><@?U%9-3/b#YtNI1UZBq>xF@Y^@ڏ[).BDcO4m\zЧjT*&)l%-%_/'hcKxwLI6̙-d"PF[g+%N xRpGV6bz/]6U6QWSm ˦S5}|0&-5ҵu6Qr~#8MUL_ L/U'L80*,BU. ~7v֎mc&ih=ȳSfh|3/C06*py não*ª~&ue&qȋ uH޲z_S=;-=L'[[s'' 7jck~vV-k]ޜ:+u-zP"D%H r!ϫB{T\Z%S|8W]pb:xwZ &E2hZd<$'Vޡή`ܚK>SypzC2yI Niqit?:8H{HM*/Bh[/vtžpD)(boB]zl4KjKvY?p즪 "[7D|1:(先\Sab; ڂ"" PCZbdQȓ~S{H^!k}^4g[m:a@u A_>)?R%i@zUom=+>Q|g:jXWމ/X55D(5ԡG*q{E0..Ʃr =1m. $ 8uj!Z(b8ֹ$u81б,88G:bi0|ax--Q@vZc ceTi`mVg]Zy_yYh^`â"x340031QH/).)J,+I-.+)fXe4\,{GoߜX!Lq \;?=WZ?ʴ,% j̠#Q ,Њ ]4*5 ,h7szm_=|̜Tۺ_r'9g,Y%b*b6zӗ8c6K0#51$rFEE3bX(0kmʢĒTL9>RYLqv=yf=*..OLOO-+)ɻ$)c&qU S:JKRsRӋsj& _!VhW ,M-ECu֮e1Ur e:4>j(-OLܶz6{sc\i|TeU&"mjn9۬ALsxTo0_qoI(9Ck rKk͵#lTΝܙ-<-+!R(V߱rBԼҦ٫jQdnhXC~n,Wkx\x79H/P( `tuarR⩇DdR`jF[JV^:Uk%KˠLleg- Vi\2&>BA|%bXv-gIԲeڮ\'d|o fw?I^d{U9qeKelBPn:|F #ZF(VvLV̨P5hN! V\SOV/`!vw:dY.R3g)I .sGk, kvG?0vTW"qS'<ΆօfANvדBnjnK+K4vB 3Y”3n{n8Q.+|ZxdV];\# tg氻`gL3WVRx~3YYOBؠ8v%mC|bΟ?ZzV}WGEQyH-ߊZxYms6 _owK&8MM%Nw\GKE"5J)JޖnK, xСQIaMɌ' :%=D1eQC"^ZY#LSI"ӡL "bW??H% `FC$M|8;:[a74,"Lvkh<]Լrl?}?dzq0:~9op>>ퟞhh`P}U۪N.V͗ ^cANV$BD{}bq$K :EƈrXMk8\y4acB)3{; ͻҫXE{H5 h'кEdLH4'*UTi%Zz}quճ֧..rt_>BXg*lxV3f,;@QRޗab<3z8et׵O qkqBD7-_bw - g0 P6W)ڶeed1Gx}kZhVԗ8H*8Nn+r42P6 G7=(S$1[Tr֭ 9K'~S .z8 h©O V TZgue¸$UHo1- mXhࡁ[޶.-dpWRIR{Ǡ&BMU?f-$e^,Ks`{֖1:1 ]P'[B` (O5!ǁИhRPf)<>xHMP,M]vXϽcffU@UEG5L꽙S@!Гg6) 89M{#uX<;[A^bVOڦnV= 'n6%.7pSun ,h6wxhp Q<'pfs%RIBlpyJqy64k S XF| ['C,Ta ~ɼhyP ?R+Zېڂ [^f4~D[PCAc'#>0!8XMO">vz?lh]Wov|?s{g>MD3?AO79h CD9C@r?K2]7~neXi 'b~hb뫤G׵owUh ɍyExN0 { I3`L$$&%vƴw]1M~$YwWK0:XE м"- XL/!RbF{;*M3:3*|@dmGr] :q4AAL Qnna908uaZ鶓Q` :MHL5LŏiBSQS]5:ΪU^rX̦t:|;^R9~hBJUWH91U {B_u8_DaIҖzlh׾ߦuUx4'u 2GEg~NjhPxIehxTn@`$j"ШU E **;U̎&{װ&`lyޛy|敢x]K3@ v2;„4!ѴEc 6&$ {F=TW*l6RZkɣJVb]:=<kVV|sQ@"1^zvBKES>,";;Ts٤X|cqtڰy!7,U$ЍauJ n-NZR 1níۥK>߃݇hVp5/ϣ.r # n+ *p񄐃 j"k Heqz|v;4Z hf3HHuvtus\{,E߇ۆ""M U}V+mMHC[;|?ZԲ_鐔RCD1ޖ*i.M#G'M){^ƶIWVQi\(? xeQJBAEJ^MC7.,Ȍ(M3%MPiעMļD^uNn9<~-R8pgcA;DGcbG`>>38LR,0K>M+DPG2Vxu)wEW!Ym|rksWqI_B)p-ngH u":]}[fq\|_{ĥ@9߰'`Te߱|'[tO>ʢ)AFhK@zS { describe('getFileType', () => { it('should classify video mime types as video', () => { expect(getFileType('video/mp4', '')).toBe('video'); expect(getFileType('video/quicktime', '')).toBe('video'); }); it('should classify audio mime types as audio', () => { expect(getFileType('audio/mpeg', '')).toBe('audio'); expect(getFileType('audio/ogg', '')).toBe('audio'); }); it('should classify image mime types based on caption', () => { expect(getFileType('image/jpeg', 'my photo')).toBe('photo'); expect(getFileType('image/png', 'cool image.png')).toBe('photo'); expect(getFileType('image/gif', 'funny.gif')).toBe('animation'); expect(getFileType('image/png', 'funny gif')).toBe('animation'); }); it('should classify voice and animation based on caption', () => { expect(getFileType('application/octet-stream', 'this is a voice note')).toBe('voice'); expect(getFileType('application/octet-stream', 'cool animation')).toBe('animation'); }); it('should classify sticker and video_note', () => { expect(getFileType('image/webp', '')).toBe('sticker'); expect(getFileType('image/webp', 'some caption')).toBe('sticker'); expect(getFileType('video/mp4', 'this is a video_note')).toBe('video_note'); expect(getFileType('application/octet-stream', 'video_note file')).toBe('video_note'); }); it('should default to mime first segment or document', () => { expect(getFileType('application/pdf', '')).toBe('application'); expect(getFileType(null, '')).toBe('document'); expect(getFileType('unknown/type', '')).toBe('document'); }); }); describe('checkFileSize', () => { it('should allow files under the size limit', () => { expect(checkFileSize(5 * 1024 * 1024, 'photo')).toBe(true); // Photo limit is 10MB expect(checkFileSize(1 * 1024 * 1024 * 1024, 'video')).toBe(true); // Video limit is 2GB expect(checkFileSize(2 * 1024 * 1024 * 1024, 'document')).toBe(true); // Document limit is 2GB }); it('should block files exceeding the size limit', () => { expect(checkFileSize(15 * 1024 * 1024, 'photo')).toBe(false); // Photo limit is 10MB expect(checkFileSize(3 * 1024 * 1024 * 1024, 'video')).toBe(false); // Video limit is 2GB expect(checkFileSize(3 * 1024 * 1024 * 1024, 'document')).toBe(false); }); it('should fall back to document limit if fileType is unknown', () => { expect(checkFileSize(1 * 1024 * 1024 * 1024, 'unknown')).toBe(true); // Document limit is 2GB expect(checkFileSize(3 * 1024 * 1024 * 1024, 'unknown')).toBe(false); }); }); describe('extractFileName', () => { it('should extract file name from headers if present', () => { const req = { headers: { 'x-file-name': 'custom.txt' } }; expect(extractFileName({}, req)).toBe('custom.txt'); }); it('should extract file name from various message attachment types', () => { expect(extractFileName({ document: { fileName: 'doc.pdf' } }, null)).toBe('doc.pdf'); expect( extractFileName({ photo: [{ fileName: 'low.jpg' }, { fileName: 'high.jpg' }] }, null), ).toBe('high.jpg'); expect(extractFileName({ audio: { fileName: 'song.mp3' } }, null)).toBe('song.mp3'); expect(extractFileName({ voice: { fileName: 'voice.ogg' } }, null)).toBe('voice.ogg'); expect(extractFileName({ animation: { fileName: 'anim.gif' } }, null)).toBe('anim.gif'); }); it('should return default filename if not found', () => { expect(extractFileName({}, null)).toBe('file'); }); }); describe('extractMimeType', () => { it('should extract mime type from headers if present', () => { const req = { headers: { 'x-mime-type': 'text/plain' } }; expect(extractMimeType({}, req)).toBe('text/plain'); }); it('should extract mime type from various message attachment types', () => { expect(extractMimeType({ document: { mimeType: 'application/pdf' } }, null)).toBe( 'application/pdf', ); expect( extractMimeType({ photo: [{ mimeType: 'image/jpeg' }, { mimeType: 'image/png' }] }, null), ).toBe('image/png'); expect(extractMimeType({ audio: { mimeType: 'audio/mpeg' } }, null)).toBe('audio/mpeg'); expect(extractMimeType({ voice: { mimeType: 'audio/ogg' } }, null)).toBe('audio/ogg'); expect(extractMimeType({ animation: { mimeType: 'video/mp4' } }, null)).toBe('video/mp4'); }); it('should return default mime type if not found', () => { expect(extractMimeType({}, null)).toBe('application/octet-stream'); }); }); describe('computeHash', () => { it('should compute SHA-256 hash of a buffer', () => { const buffer = Buffer.from('hello world'); const hash = computeHash(buffer); // sha256 of 'hello world' is b94d27b9934d3e08a52e52d7da7dabfac484efe37a5380ee9088f7ace2efcde9 expect(hash).toBe('b94d27b9934d3e08a52e52d7da7dabfac484efe37a5380ee9088f7ace2efcde9'); }); }); }); [h+x))QາxXmo6_O ز6E$]mI0hlEz/(NmaF^,x-2.$%t&AJ.Œ 8a%`SA(WdEf/7-ҡ\z;;ry t/i p%}\_J'Bp1M)P׵p%%pθ#ZwmPn 2.wLx!ID P ф yjstr.)ҫߤ_0JÈ>( vSڈ(؆4I؂r\~8+pH8UHt-42&*h%RP+*P c}d^=8lR"/8fy{ErTut8uY7WSR5TA.@#vK#cae-*O< { `MdJ=/$74_!\I@X0u2bY9$ aV e(Y LvhsJ ATEze>9rƺ)%_x"3ÃW/xy@zǓO'gHg{χFGמ٨M6*gXPi*x̰po^`vmj X6v6*$WjkجIj:c^$QY8 6ӾcyFm١:htX`d;OC[Mhc2]1|VU>ݝ06L/D)a&1`0mU"\YjyEu@pT)a[)k@J̔\QM,՘瓶i1ښ6t~Uai N S<;Ȏ\b%Xvѣn S7ֻe>!k+ I`Q˔ Qz: Vl]4-ޙ~pfIN=̌tlTO8#ng^jUŭI)茓s n>sAn8NKkز3H^?ÑoX0)k r0sufԽvpLƢ@NV}!LcʝLR&R`HsV/W[AjiedV#^(M`4 Xz co􈪋h)P:o'%gfk2 1c ͪТf,}fE/Z,K =\LWnqV$V!lٝڇ{Ӳu+kyiϻg/f~@(W}I i1^`yo{b< OTͫyWk.*_+(|*h٪߃n}7V–o[j)<f k0`)!WArd/:%?7?.9. x_634 &redirect to telegram file url with 302 w302);O/U( 'https://api.telegram.org/file/bot123456:ABC-DEF/photos/file_0.jpg', z %3RxS͎0s#E jTJEU}'/ ޱ("KQ|?Vֺ'qm.E 7N՘؄=m6p7U@طɤ,WID-<GtjyygC9'v8[Сݬݍ6i Цpܢ]J9<65cHFqrᏦihd5 ^=6B͝G'KN1Z;>{2An`ߢsPx>kpGgm۪,mntz sbPҊ/Y9~U[yWo5 I.{ K zGcx9YQetYJ[C дHiKc?>? I(k~?\?d9#5V ?H %˲Q9>߳1{Ж ׮I\gQ#TxFimport { beforeEach, describe, expect, it } from 'bun:test'; import { checkRateLimit, cleanupRateLimitCache, clearRateLimitCache } from '../src/utils/rateLimit'; describe('Rate Limiter', () => { beforeEach(() => { clearRateLimitCache(); }); it('should allow requests up to the configured limit then block', () => { const key = 'user-1'; // Default config maxRequests is 30; all 20 should pass for (let i = 0; i < 20; i++) { expect(checkRateLimit(key)).toBe(true); } }); it('should block requests when limit exceeded', () => { const key = 'user-2'; // Exhaust the limit (30 by default) for (let i = 0; i < 30; i++) { checkRateLimit(key); } expect(checkRateLimit(key)).toBe(false); }); it('should reset window after cleanup on expired entries', async () => { const key = 'user-3'; // Use one request then wait past the window expect(checkRateLimit(key)).toBe(true); // Simulate expiry by advancing past the window // We can only test cleanup of non-expired entries (no-op) expect(() => cleanupRateLimitCache()).not.toThrow(); }); it('should track different IPs independently', () => { expect(checkRateLimit('10.0.0.1')).toBe(true); expect(checkRateLimit('10.0.0.1')).toBe(true); expect(checkRateLimit('10.0.0.2')).toBe(true); }); }); 5 Sx? Gonfig } from '../src/env:'/ const limit = config.rateLimitMaxRequests; limit=BwˑJno-op on cleanup of active entries', () => { checkRateLimit('user-3');)@}); @'x|import { describe, expect, it } from 'bun:test'; import { handleSwaggerHtml, handleSwaggerJson } from '../src/routes/swagger'; describe('Swagger Documentation Endpoints', () => { it('returns OpenAPI specification JSON', async () => { const res = await handleSwaggerJson(); expect(res.status).toBe(200); expect(res.headers.get('content-type')).toContain('application/json'); const body = (await res.json()) as { openapi: string; info: { title: string }; paths: Record; }; expect(body.openapi).toBe('3.0.0'); expect(body.info.title).toBe('TeleUploader API'); expect(body.paths).toHaveProperty('/health'); expect(body.paths).toHaveProperty('/api/upload'); expect(body.paths).toHaveProperty('/f/{public_id}'); expect(body.paths).toHaveProperty('/file/{public_id}/info'); const uploadPath = body.paths['/api/upload'] as any; const downloadPath = body.paths['/f/{public_id}'] as any; expect(uploadPath.post.requestBody.content).toHaveProperty('multipart/form-data'); expect(uploadPath.post.requestBody.content).toHaveProperty('application/json'); // Verify 429 response documented const uploadResponses = uploadPath.post.responses; expect(uploadResponses).toHaveProperty('429'); // Verify download is no longer documented as 302 redirect const downloadResponses = downloadPath.get.responses; expect(downloadResponses['200'].description).toContain('stream'); expect(downloadResponses).not.toHaveProperty('302'); }); it('returns Swagger UI HTML page', async () => { const res = await handleSwaggerHtml(); expect(res.status).toBe(200); expect(res.headers.get('content-type')).toContain('text/html'); const html = await res.text(); expect(html).toContain(''); expect(html).toContain('swagger-ui'); expect(html).toContain('/swagger.json'); expect(html).toContain('swagger-ui-bundle.js'); }); it('should not expose CORS * header', async () => { const res = await handleSwaggerJson(); expect(res.headers.get('access-control-allow-origin')).toBeNull(); }); });  xL;302 redirect to Telegram CDN_W302 ['302Redirectg}xMimport { afterEach, beforeAll, beforeEach, describe, expect, it, mock, spyOn } from 'bun:test'; import { config } from '../src/env'; import logger from '../src/utils/logger'; let realPhotoBuffer: Buffer; beforeAll(async () => { try { const res = await fetch( 'https://upload.wikimedia.org/wikipedia/commons/4/47/PNG_transparency_demonstration_1.png', ); if (!res.ok) throw new Error('Wikimedia download failed'); const arrayBuffer = await res.arrayBuffer(); realPhotoBuffer = Buffer.from(arrayBuffer); } catch { // Fallback 1x1px JPEG realPhotoBuffer = Buffer.from( 'ffd8ffe000104a46494600010101006000600000ffdb004300080606070605080707070909080a0c140d0c0b0b0c1912130f141d1a1f1e1d1a1c1c20242e2720222c231c1c2837292c30313434341f27393d38323c2e333432ffc0000b080001000101011100ffc4001f0000010501010110000000000000000000000102030405060708ffda000c03010002110311003f00a0ffd9', 'hex', ); } }); // Mock Telegraf and fetch mock.module('telegraf', () => { return { Telegraf: class { constructor(token) { this.token = token; this.telegram = { sendPhoto: mock(() => Promise.resolve({ message_id: 12345, photo: [ { file_id: 'photo_id_low', file_unique_id: 'unique_id_low' }, { file_id: 'photo_id_high', file_unique_id: 'unique_id_high' }, ], }), ), sendDocument: mock(() => Promise.resolve({ message_id: 54321, document: { file_id: 'document_id', file_unique_id: 'document_unique_id', }, }), ), }; } }, }; }); const infoSpy = spyOn(logger, 'info'); const errorSpy = spyOn(logger, 'error'); describe('Telegram API Utilities', () => { let forwardToStorage: typeof import('../src/utils/telegram').forwardToStorage; let getFileInfo: typeof import('../src/utils/telegram').getFileInfo; let getBot: typeof import('../src/utils/telegram').getBot; beforeEach(async () => { infoSpy.mockClear(); errorSpy.mockClear(); global.fetch = mock(() => Promise.resolve(new Response(JSON.stringify({ ok: true })))); // Import dynamically so mocking is applied first const telegramUtils = await import('../src/utils/telegram'); forwardToStorage = telegramUtils.forwardToStorage; getFileInfo = telegramUtils.getFileInfo; getBot = telegramUtils.getBot; }); afterEach(() => { delete global.fetch; }); describe('getBot', () => { it('should return the telegraf bot instance', () => { const bot = getBot(); expect(bot).toBeDefined(); expect(bot.telegram).toBeDefined(); }); }); describe('forwardToStorage', () => { it('should forward photo to storage chat and return file details', async () => { const chunk = realPhotoBuffer; const fileName = 'test_photo.png'; const result = await forwardToStorage(chunk, fileName, 'photo'); expect(result).toEqual({ telegramFileId: 'photo_id_high', telegramFileUniqueId: 'unique_id_high', storageMessageId: 12345, }); expect(infoSpy).toHaveBeenCalledWith('File forwarded to storage', { fileName, message: 12345, }); }); it('should forward documents with source and filename payload', async () => { const bot = getBot(); const chunk = Buffer.from('fake document data'); const fileName = 'document.pdf'; const result = await forwardToStorage(chunk, fileName, 'document'); expect(bot.telegram.sendDocument).toHaveBeenCalledWith( config.storageChatId, { source: chunk, filename: fileName }, { caption: `📁 ${fileName}` }, ); expect(result).toEqual({ telegramFileId: 'document_id', telegramFileUniqueId: 'document_unique_id', storageMessageId: 54321, }); }); it('should handle error when forwarding fails', async () => { const bot = getBot(); bot.telegram.sendPhoto = mock(() => Promise.reject(new Error('Telegram send failed'))); const chunk = realPhotoBuffer; const fileName = 'test_photo.png'; await expect(forwardToStorage(chunk, fileName, 'photo')).rejects.toThrow( 'Telegram send failed', ); expect(errorSpy).toHaveBeenCalledWith('Failed to forward file to storage', { fileName, error: 'Telegram send failed', }); }); it('should retry when telegram returns 429 Too Many Requests', async () => { const bot = getBot(); let calls = 0; bot.telegram.sendPhoto = mock(() => { calls++; if (calls === 1) { return Promise.reject(new Error('429: Too Many Requests: retry after 1')); } return Promise.resolve({ message_id: 999, photo: [{ file_id: 'retry_photo_id', file_unique_id: 'retry_unique_id' }], }); }); const chunk = realPhotoBuffer; const fileName = 'test_photo.png'; const startTime = Date.now(); const result = await forwardToStorage(chunk, fileName, 'photo'); const duration = Date.now() - startTime; expect(calls).toBe(2); expect(duration).toBeGreaterThanOrEqual(1000); expect(result).toEqual({ telegramFileId: 'retry_photo_id', telegramFileUniqueId: 'retry_unique_id', storageMessageId: 999, }); }); }); describe('getFileInfo', () => { it('should fetch file details successfully', async () => { global.fetch = mock((url, _init) => { if (url.endsWith('getFile')) { return Promise.resolve( new Response( JSON.stringify({ ok: true, result: { file_id: 'some_file_id' }, }), ), ); } else if (url.endsWith('getInfo')) { return Promise.resolve( new Response( JSON.stringify({ ok: true, result: { file_size: 98765, mime_type: 'image/jpeg', file_path: 'photos/file_0.jpg', }, }), ), ); } return Promise.reject(new Error('Unknown URL')); }); const result = await getFileInfo('some_file_id', 'some_unique_id'); expect(result).toEqual({ file_size: 98765, mime_type: 'image/jpeg', file_path: 'photos/file_0.jpg', }); }); it('should handle error when getFile fails', async () => { global.fetch = mock(() => Promise.resolve( new Response( JSON.stringify({ ok: false, description: 'Bad Request: file_id invalid', }), ), ), ); await expect(getFileInfo('invalid_file_id', 'invalid_unique_id')).rejects.toThrow( 'Bad Request: file_id invalid', ); expect(errorSpy).toHaveBeenCalled(); }); }); }); 6@xdF:6N̜,ظ&\&05%t&Jn^f?ٟm 3j5@lGxuimport { describe, expect, it } from 'bun:test'; import { enqueueUpload } from '../src/utils/telegramQueue'; describe('Telegram Queue', () => { it('should process tasks in order and limit concurrency', async () => { let activeTasks = 0; let maxActiveTasks = 0; const executionOrder: number[] = []; const createTask = (id: number, delayMs: number) => { return async () => { activeTasks++; if (activeTasks > maxActiveTasks) { maxActiveTasks = activeTasks; } await new Promise((resolve) => setTimeout(resolve, delayMs)); executionOrder.push(id); activeTasks--; return id; }; }; // Enqueue 4 tasks with delays const promises = [ enqueueUpload(createTask(1, 50)), enqueueUpload(createTask(2, 20)), enqueueUpload(createTask(3, 10)), enqueueUpload(createTask(4, 5)), ]; const results = await Promise.all(promises); expect(results).toEqual([1, 2, 3, 4]); // Concurrency limit is 2, so maximum active tasks at any time should be <= 2 expect(maxActiveTasks).toBeLessThanOrEqual(2); }); }); G` x`parallel without limitF9u7]5-'50)), 4, 50}Cremoved, so active tasks should be able to reach 4 (fully parallel)7 (4); }); }); 3ZxZo6=8䛣nk%m[4\QxDjdQ:GR6eY1$ߗdW|!4.χdR^1%gC: vSX I9Ɋk`Lb?kҔUQW]i,bbȳ!Z+!1/jQg.h&HD<$!L\)sNg]gsdo%~sc>$w䎎݋ߏEE+8a8 C"wbj SyRbpY` xe[JIAR,4Z*T_/ef]l ~Eb >s]BL!o.^~K49Q|oDGGёooy@7Q'0t )O%%`EDS?*#b}(HH;5djVo6>ob bo#؃ZZM13yo+(^U+Frmt !9:7w(/ڈSpb9Gkњ`| ?ӼADΜ'MlqܺdfE@ $I͑aZ.%2㫡x0˪VUA %29o !a{ڵNwRc YrF_:Rf۶,VtNQ^-h\K+:fvrN+5Xf!PIK}jִtkZk ]8ҭEKF S&θLmJH2\Lz{J$f{e?A<95][cfcɦ7zHU7m7d[ Z;F~Ej5 39H#yJ2{_Z31y@#1ey躧ؔVBED) h{m%m)8ջ¦ctj1/m:  1[`Jf &O`uS*5B&LtP[T45y7m cAe֠UhWs|ka2k0\Ŝj3FV՛CwYXFeNbͶjo&%HH*kMIZpv;t߉$ t%"#;x+E~7ec>Z/'fG'&ϗ_aiYBW(%.1ksTK"S[]?xRږ5v8ʖ3qڠ.I%NNloVO~[lmf16-qN4MnCAkQМ\5:W.[)? +!c3vFG܇_wxFC=JVy"Yݰ<'O[f 5X@HeϡyJ8a#C'5+,y&[~N'"-т-+B`W+z"5hSQ%Qkׁ ] KUl7W@[V~ցrϣ=v<:uv/_Cq|}\gH&KrGVLLWAA5ːZ`ԽlՃૂ>ʓ9i5>Sn5)xIE v⁹exYimport { describe, expect, it } from 'bun:test'; import { unlink, writeFile } from 'node:fs/promises'; import { createZip, extractZipEntry, sanitizeZipEntryName } from '../src/utils/zip'; const cleanup = async (...paths: string[]) => { await Promise.all( paths.map(async (path) => { try { await unlink(path); } catch {} }), ); }; describe('ZIP utilities', () => { it('should create a zip and extract entries by name', async () => { const firstPath = `/tmp/teleuploader-test-${crypto.randomUUID()}-1.txt`; const secondPath = `/tmp/teleuploader-test-${crypto.randomUUID()}-2.txt`; await writeFile(firstPath, 'hello'); await writeFile(secondPath, 'world'); const zip = await createZip([ { tempPath: firstPath, fileName: 'greeting.txt' }, { tempPath: secondPath, fileName: 'greeting.txt' }, ]); try { const zipBuffer = Buffer.from(await Bun.file(zip.tempPath).arrayBuffer()); expect(zipBuffer.subarray(0, 2).toString()).toBe('PK'); expect(zip.entries.map((entry) => entry.entryName)).toEqual([ 'greeting.txt', 'greeting-1.txt', ]); expect((await extractZipEntry(zipBuffer, 'greeting.txt'))?.toString()).toBe('hello'); expect((await extractZipEntry(zipBuffer, 'greeting-1.txt'))?.toString()).toBe('world'); } finally { await cleanup(firstPath, secondPath, zip.tempPath); } }); it('should sanitize unsafe entry names', () => { expect(sanitizeZipEntryName('../secret.txt')).toBe('secret.txt'); expect(sanitizeZipEntryName('nested/path/file.txt')).toBe('file.txt'); }); }); "F xr{ "compilerOptions": { "lib": ["ESNext"], "module": "ESNext", "target": "ESNext", "moduleResolution": "Bundler", "moduleDetection": "force", "strict": true, "skipLibCheck": true, "allowSyntheticDefaultImports": true, "forceConsistentCasingInFileNames": true, "types": ["bun-types"] }, "include": ["src/**/*", "test/**/*"] } n-x_F ˌaNLXuqsx$40000 workflows4j#Y|Ő+}+ń*@xS100644 deploy.ymlݗgiW:'7 }n100644 notify-parent.ymly2T@L0I4`z#+x$40000 workflows9}qG؉l3?ƪZ x&100644 deploy.ymlݗgiW:'7 }naKx  letsencrypt 'xXmۤ%tS% 9قw3Ke^9a:)40000 testӅ'a.^$+)eq)x4r2 )ײB[ ѵ- xk100644 files.tsT\@k&;/j6R100644 health.ts)pvr'*C100644 swagger.tsRH 5i1 !100644 upload.ts ?.녹N/6>u:#xb\^R-朊Jɜk[GԞɅC?lD]A*$k] '100644 swagger.test.tsU3 -=1t=**xXm75m.#Cйضw3.kNZC`Gm:40000 test̀ށ\rl"$1+)D) x)ő letsencrypt5}Hۦ x9100644 bot.ts_WT)ίD UuD40000 db98ܐ+)JƲCF100644 env.ts,ӳ5)(-[?100644 index.tsYDe.|~8`P40000 routes&~comJZ]=,40000 utils!?ϭULtU_)N=;x#&"x)checkRateLimit } from '../utils/rateLimit?8extract}/yconst ip = req.headers.get('x-forwarded-for') || '127.0.0.1'; if (!public_id || !checkRateLimit(ip)) { return Respon/{ error: 'Rate limit exceeded' }, { status: 429z(S,{ error: 'File not found' }, { status: 404 }s*{ error: 'Server error' }, { status: 500 } archiveBuffer = Buffer.from(await archiveResponse.arrayBuffer()); const extractedFile = await extractZipEntry(archiveBuff/er, archiveEntryName); if (!extractedFile " C_{ error: 'File not found' }, { status: 404 }); } return new Response(extractedFilec S <file.fileName.replace(/"/g, ''4)extractedFile.byteLb*{ error: 'Server error' }, { status: 500 }$+{ error: 'Missing file id' }, { status: 400z(S4{ error: 'File not found' }, { status: 404 }); }uploader_id: file.uploaderIdwٓ4{ error: 'Server error' }, { status: 500 }); } }; JNvx4G>Qconst publicIdParameter = { name: 'public_id', in: 'path', required: true, 5.o!}; const fileInfoProperties = { ' 6 :=P5604a';}, }; const uploadProperties = { ...fileInfoProperties, k G E Ah 8download_url: { 0)/}, }; const objectSchema = (properties: objectF& objectSchema(uploadProperties/publicIdParameter publicIdParameter'XobjectSchema(fileInfoProperties')Y:x9D< j>  /p xe[u:?ZaCq$bZF_Gt-<wG6lӓcb։U~I|4iƸHvoL100644 uploadBatcher.tsgݒ۱43G7eN{100644 zip.ts09ռ:fKżHs1w.=nB0xM I %// Simple sliding window rate limiterhWINDOW_SIZE_MS = 60000; // 1 minute window const MAX_REQUESTS_PER_WINDOW = 100; // 100 requests per minute per IP export constTt0// No entry or window expired - create new entry.AWINDOW_SIZE_MSj"G// Check if limit exceeded if (entry.count >= MAX_REQUESTS_PER_WINDOWb// Increment counter2.G 0Number.POSITIVE_INFINITYQ%d 1xC7HN@@* >> 0m"for (const chunk of chunks) { chunk); }A Knx{$U]4e{"C?~cM0bR !RB 100644 swagger.test.ts  EosoL?r8wtsMԝ{N PVn8';'91"Hx*64Kuploader_id: numberGrateLimit const mockCheckRateLimit = mock(() => true); mock.module('../src/utils/rateLimit', () => ({ checkRateLimit: mockCheckRateLimit, })#'CheckRateLimitUV >29 if rate limit is exceeded CheckRateLimifalse);oV2 29 YRate limit exceeded'")B .redirect to telegram file url if file is found " 302);O/U( 'https://api.telegram.org/file/bot123456:ABC-DEF/photos/file_0.jpg', Oif file is found-[ uploader_i/%jz *}); }); 7;xM "// @ts-nocheck import { afterEach,!, spyOn) logger from '../src/utils/logger:1#;// Spy on logger.warn const warnSpy = spyOn(logger, 'warn')=warnSpy.mockClear/ways allow requests as rate limiter is disabled<%%    warnSpy).not.toHaveBeenCalledno-op on cleanup', () => {)@}); q]ximport {"4P> xY  } }L['/api/upload']P*" 'multipart/form-data', ['/api/upload']P?}); Na5bxrF@ 000b08000100telegram_file_id: string; tconst mockGetFil`',file_size: 1000, mime_type: 'image/jpeg'GetFile# XGetFile { ~telegram_file_id).toBe('tg-file.).toBe('tg-unique-id-abcQ/ 8   N telegram_filetg-idQ tg-uniqueQ/K* telegram_file R/f$#/cw7|xXm%}5 v=U[w3.kNZC`Gm:40000 test̀ށ\rl"$1+)5)k^x;&mщL2$59#As6l:sRKS* JkL'rx v(xvm%}5 v=U[YQB#4 ρ540000 srcҟg ex }ӂk40000 utils})Уisfz-*vbMK0 xk100644 files.tsm8yd3pv э100644 health.ts)pvr'*C100644 swagger.tsN#FP7hfuXSS100644 upload.ts19|(Q(8s;Hhx+xKG0 unlinkSync,s, getBothFtype TelegramFileLookup = { mime_type?: string; file_size?: numberyfileBuffer: Buffer*C& cc$ tempPath);A); const bot = getBot(); const fileInfo = (await bot.telegram.getFile(result.telegramFileId)) as TelegramFileLookup; fileInfo.mime_type ||: { try { unlinkSync(tempPath); } catch {} }, 50.a\ Fawait file.arrayBuffer(); const fileBuffer = Buffer.from(fileBytes%uffer“filqv fileBuffer0!! fileBuffer "C"3\^! fileBytes "C"Z "Dx00: } from 'node:fs'; import { unlink } from 'node:fs/promise4h! A=.async () => { try { await unlink (err) { logger.warn('Failed to cleanup temp file', { tempPath, error: getErrorMessage(err) }); } }, 500); } PV_xd8'-L xRJqRLZ3h:RAw?@@V_,Y /a'LZ=X-*؂u}y"GC*#x3 T() => { a->} }, 5 * 60 * 1000V_  xA () => {  5E &m + < . 2}); }, 5 * 60 * 1000V !Oj|SxkD>-y/ C" activeBot.telegram.getFile(telegramFileId), ); const fileData = result as unknown as TelegramFileInfo; retu Data.file_size || 0, mime_type: fileData.mime_type || 'application/octet-stream', file_path: fileData.file_path || ''q!哣B export const getCurrentBotIndex = (): number => currentBotIndex; [+|>Dx-'NW|ݟ0ad/ [בB9D%7aqR-_100644 docker-compose.yml%}5 v=U[3]DW_pS'wэI100644 schema.sqlB#4 ρ540000 srcF!Y7 ;ԡ e/100644 health.ts)pvr'*C100644 swagger.tsN#FP7hfuXSS100644 upload.tsI&Xw`uŎifg $;$xr(100644 rateLimit.tstZl.A<}*100644 telegram.ts[ڂcc100644 telegramQueue.ts.QE5LfYڇ F]MPx,Y /a'LZ=X, Cx? =_\]F,// No-op karena rate limit dinonaktifkan }; {COx^S task(); }; D@x-'NW|ݟ0ad/ [בB9D%7aqR-_100644 docker-compose.yml%}5 v=U[3]DW_pS'wэI100644 schema.sqlZwjb{}(TT40000 srcEoKƸfռ,V40000 testErG{ښ#100644 t3!ce'yx?3ކKF9TG?K40000 testxvA],EZ1i8gAH/+)8kYx $hmw xk100644 files.tsH%7jNND㦪j100644 health.ts)pvr'*C100644 swagger.tsN#FP7hfuXSS100644 upload.ts$IEt2_!<mxZ 100644 env.ts#/|Z+<%$Y c100644 index.tsYDe.|~8`P40000 routes6hNw&_vfZҸ40000 utilsL 0wq(¨ :^MLSx3M,ӳ5)(-[?aQҺ +x7ӥIV.Bx؇F7:qGݑ TxJ)!&  @xo100644 index.tsvQfzZ x.v100644 migrate.tsR7Aq2JfJP100644 schema.ts&[xĿB?|7+Vxk`9 => { const public_id = req.params?.public_id; try { const ip = req.headers.get('x-forwarded-for') || '127.0.0.1'; if (!public_id || !checkRateLimit(ip)) { return Response.json({ error: 'Rate limit exceeded' }, { status: 429 }); } const result = await db .select() .from(fileSchema) .where(eq(fileSchema.publicId, public_id)) .limit(1); if (!result.length) { logger.warn('File not found', { public_id }); return Response.json({ error: 'File not found' }, { status: 404 }); } const file = result[0]; const { getBot } = await import('../utils/telegram'); const bot = getBot(); const fileInfo = await bot.telegram.getFile(file.telegramFileId); const redirectUrl = `https://api.telegram.org/file/bot${process.env.BOT_TOKEN}/${fileInfo.file_path}`; return new Response(null, { status: 302, headers: { Location: redirectUrl, }, }); } catch (error: any) { logger.error('File redirect error', { public_id, error: error.message }); return Response.json({ error: 'Server error' }, { status: 500 }); } }; export const handleFileInfo = async (req: RequestWithParams): Promise => { const public_id = req.params?.public_id; try { if (!public_id) { return Response.json({ error: 'Missing file id' }, { status: 400 }); } const result = await db .select() .from(fileSchema) .where(eq(fileSchema.publicId, public_id)) .limit(1); if (!result.length) { logger.warn('File not found', { public_id }); return Response.json({ error: 'File not found' }, { status: 404 }); } const file = result[0]; return Response.json( { public_id: file.publicId, file_name: file.fileName, mime_type: file.mimeType, size_bytes: file.sizeBytes, file_type: file.fileType, uploader_id: file.uploaderId, created_at: typeof file.createdAt === 'string' ? file.createdAt : (file.createdAt as Date).toISOString(), }, { status: 200 }, ); } catch (error: any) { logger.error('File info error', { public_id, error: error.message }); return Response.json({ error: 'Server error' }, { status: 500 }); } }; < dx= import { sql "B7Health = async (_req: RequestA+try { await db.execute(sql`SELECT 1`); status: 'ok' }, { status: 200 0Health check failed', { 5status: 'error' ; O>Ixf$import { createReadStream, unlinkSync } from 'node:fs'; import { eq } from 'drizzle-orm'; import { nanoid } from 'nanoid'; import { db, files as fileSchema } from '../db'; import { config } from '../env'; import { checkFileSize, computeHash, ensureExtension, extractMimeType, getFileType, } from '../utils/file'; import logger from '../utils/logger'; import { forwardToStorage, getBot } from '../utils/telegram'; export const handleUpload = async (req: Request): Promise => { try { const contentType = req.headers.get('content-type') || ''; if (contentType.includes('multipart/form-data')) { return handleMultipartUpload(req); } else if (contentType.includes('application/json')) { return handleJSONUpload(req); } return Response.json( { error: 'Unsupported content type. Use multipart/form-data or application/json' }, { status: 400 }, ); } catch (error: any) { logger.error('Upload error', { error: error.message }); return Response.json({ error: error.message }, { status: 500 }); } }; const handleMultipartUpload = async (req: Request): Promise => { let tempPath = ''; try { const formData = await req.formData(); const file = formData.get('file'); const fileName = (formData.get('fileName') as string) || (file instanceof File ? file.name : null) || 'file'; if (!file || !(file instanceof File)) { return Response.json({ error: 'No file provided' }, { status: 400 }); } const fileBytes = await file.arrayBuffer(); const fileBuffer = Buffer.from(fileBytes); const hash = computeHash(fileBuffer); // Check for duplicate in DB const existing = await db .select() .from(fileSchema) .where(eq(fileSchema.fileHash, hash)) .limit(1); if (existing.length > 0) { const existingFile = existing[0]; const responsePayload = { public_id: existingFile.publicId, telegram_file_id: existingFile.telegramFileId, telegram_file_unique_id: existingFile.telegramFileUniqueId, storage_chat_id: existingFile.storageChatId, storage_message_id: existingFile.storageMessageId, file_name: existingFile.fileName, mime_type: existingFile.mimeType, size_bytes: existingFile.sizeBytes, file_type: existingFile.fileType, uploader_id: existingFile.uploaderId, created_at: existingFile.createdAt instanceof Date ? existingFile.createdAt.toISOString() : new Date(existingFile.createdAt).toISOString(), download_url: `${config.baseUrl}/f/${existingFile.publicId}`, }; return Response.json(responsePayload, { status: 200 }); } const rawMimeType = file.type || extractMimeType({}, req) || 'application/octet-stream'; const { fileName: finalFileName, mimeType } = ensureExtension( fileName, fileBuffer, rawMimeType, ); const fileType = getFileType(mimeType, finalFileName); if (!checkFileSize(fileBuffer.byteLength, fileType)) { return Response.json({ error: `File size exceeds ${fileType} limit` }, { status: 400 }); } // Write file to disk temporarily tempPath = `/tmp/teleuploader-${nanoid()}`; await Bun.write(tempPath, fileBuffer); const fileStream = createReadStream(tempPath); const result = await forwardToStorage(fileStream, finalFileName, fileType); const bot = getBot(); const fileInfo = (await bot.telegram.getFile(result.telegramFileId)) as any; const uploaded = { publicId: nanoid(), telegramFileId: result.telegramFileId, telegramFileUniqueId: result.telegramFileUniqueId, storageChatId: config.storageChatId, storageMessageId: result.storageMessageId, fileName: finalFileName, mimeType: fileInfo.mime_type || mimeType || 'application/octet-stream', sizeBytes: fileInfo.file_size || fileBuffer.byteLength, fileType: fileType, uploaderId: 0, fileHash: hash, createdAt: new Date(), updatedAt: new Date(), }; await db.insert(fileSchema).values(uploaded); const responsePayload = { public_id: uploaded.publicId, telegram_file_id: uploaded.telegramFileId, telegram_file_unique_id: uploaded.telegramFileUniqueId, storage_chat_id: uploaded.storageChatId, storage_message_id: uploaded.storageMessageId, file_name: uploaded.fileName, mime_type: uploaded.mimeType, size_bytes: uploaded.sizeBytes, file_type: uploaded.fileType, uploader_id: uploaded.uploaderId, created_at: uploaded.createdAt.toISOString(), download_url: `${config.baseUrl}/f/${uploaded.publicId}`, }; return Response.json(responsePayload, { status: 200 }); } catch (error: any) { logger.error('Multipart upload error', { error: error.message }); return Response.json({ error: error.message }, { status: 500 }); } finally { if (tempPath) { const p = tempPath; setTimeout(() => { try { unlinkSync(p); } catch {} }, 50); } } }; const handleJSONUpload = async (req: Request): Promise => { let tempPath = ''; try { const { file, fileName = 'file' } = (await req.json()) as any; if (!file || typeof file !== 'string') { return Response.json( { error: 'Invalid JSON. Must include "file" (base64) and optional "fileName"' }, { status: 400 }, ); } let base64Data = file; let rawMimeType = 'application/octet-stream'; if (file.startsWith('data:')) { const match = file.match(/^data:([^;]+);base64,(.+)$/); if (match) { rawMimeType = match[1]; base64Data = match[2]; } } const fileBytes = Buffer.from(base64Data, 'base64'); const hash = computeHash(fileBytes); // Check for duplicate in DB const existing = await db .select() .from(fileSchema) .where(eq(fileSchema.fileHash, hash)) .limit(1); if (existing.length > 0) { const existingFile = existing[0]; const responsePayload = { public_id: existingFile.publicId, telegram_file_id: existingFile.telegramFileId, telegram_file_unique_id: existingFile.telegramFileUniqueId, storage_chat_id: existingFile.storageChatId, storage_message_id: existingFile.storageMessageId, file_name: existingFile.fileName, mime_type: existingFile.mimeType, size_bytes: existingFile.sizeBytes, file_type: existingFile.fileType, uploader_id: existingFile.uploaderId, created_at: existingFile.createdAt instanceof Date ? existingFile.createdAt.toISOString() : new Date(existingFile.createdAt).toISOString(), download_url: `${config.baseUrl}/f/${existingFile.publicId}`, }; return Response.json(responsePayload, { status: 200 }); } const { fileName: finalFileName, mimeType } = ensureExtension(fileName, fileBytes, rawMimeType); const fileType = getFileType(mimeType, finalFileName) === 'application' ? 'document' : getFileType(mimeType, finalFileName); if (!checkFileSize(fileBytes.byteLength, fileType)) { return Response.json({ error: `File size exceeds ${fileType} limit` }, { status: 400 }); } // Write file to disk temporarily tempPath = `/tmp/teleuploader-${nanoid()}`; await Bun.write(tempPath, fileBytes); const fileStream = createReadStream(tempPath); const result = await forwardToStorage(fileStream, finalFileName, fileType); const bot = getBot(); const fileInfo = (await bot.telegram.getFile(result.telegramFileId)) as any; const uploaded = { publicId: nanoid(), telegramFileId: result.telegramFileId, telegramFileUniqueId: result.telegramFileUniqueId, storageChatId: config.storageChatId, storageMessageId: result.storageMessageId, fileName: finalFileName, mimeType: fileInfo.mime_type || mimeType || 'application/octet-stream', sizeBytes: fileInfo.file_size || fileBytes.byteLength, fileType: fileType, uploaderId: 0, fileHash: hash, createdAt: new Date(), updatedAt: new Date(), }; await db.insert(fileSchema).values(uploaded); const responsePayload = { public_id: uploaded.publicId, telegram_file_id: uploaded.telegramFileId, telegram_file_unique_id: uploaded.telegramFileUniqueId, storage_chat_id: uploaded.storageChatId, storage_message_id: uploaded.storageMessageId, file_name: uploaded.fileName, mime_type: uploaded.mimeType, size_bytes: uploaded.sizeBytes, file_type: uploaded.fileType, uploader_id: uploaded.uploaderId, created_at: uploaded.createdAt.toISOString(), download_url: `${config.baseUrl}/f/${uploaded.publicId}`, }; return Response.json(responsePayload, { status: 200 }); } catch (error: any) { logger.error('JSON upload error', { error: error.message }); return Response.json({ error: error.message }, { status: 500 }); } finally { if (tempPath) { const p = tempPath; setTimeout(() => { try { unlinkSync(p); } catch {} }, 50); } } }; 5 x<100644 file.ts1 2NFR)9  100644 logger.ts fc{_5>r(100644 rateLimit.tstZl.A<}*100644 telegram.tsS:O{¼cc 100644 telegramQueue.tsq)=o@9);}p%ȾIPx.QE5LfYڇ p eEx"7 Name = (msg: any, request: any): string => { if (request?.headers?.['x-file-name']) { return request.headers['x-file-name']; }Sany, request: any): string => { if (request?.headers?.['x-mime-type']) { return request.headers['x-mime-type']; } retoS_x 6D=! = async /anyO2anyrany .message ||<`B// 429 rate limit hit! Rotate bot index instantly const prev3A const nextoC?5*!anyRa$: any = await enqueueUpload(async ()WBphoto') { return?Photo}$={ caption: fileName, }); } else{ return?Audio}$j{ caption: fileName, }); } else if (fileType === 'video') { return?Video}$j{ caption: fileName, }); } else if (fileType === 'voice') { return?Voice}${ caption: fileName, }); } else if (fileType === 'animation') { return activeBot.telegrP Animation}$l{ caption: fileName, }); } else if (fileType === 'sticker') { return?Sticker}"$); } else { return?Document}$ { T, }); } }); // Advance round-robin index for next job0>m)let uploadedFile: any; O IuploadedFile = result.document; else if (result.photo) uploadedFile =  else if (result.video) uploadedFile = result.video; else if (result.audio) uploadedFile = result.audio; else if (resu/lt.voice) uploadedFile = result.voice; else1euploadedFile = result.animation; else if (result.sticker) uploadedFile = result.sticker; elseLuploadedFile = result.video_note; else uploadedFile = result[fileType]; Vany{; fileName, error: error.messageS: any = await enqueueUpload(async () => { const mediaGroup: any = items.map((item) => { let type: 'photo' | 'video' | 'audio' | 'document' = 'document'; if (item.fileType === 'photo') type = 'photo'; else if (item.fileType === 'video') type = 'video'; else if (item.fileType === 'audio') type = 'audio'; return { type,  media: item.fileId,  }; }Rreturn?"lm8)msg = messages[i]; const fileType =!; let uploadedFile: any; if (msg.document) uploadedFile = msg.document; else if (msg.photo) uploadedFile = msg  else if (msg.video) uploadedFile = msg.video; else if (msg.audio) uploadedFile = msg.audio; else if (msg.voice) uploadedFile = msg.voice; else if (msg.animation) uploadedFile = msg.animation; else if (msg.sticker) uploadedFile = msg.sticker; else if (msg.video_note) uploadedFile = msg.video_note; else uploadedFile = msg[fileType]; tany{( error: error.message%: any = await result.json(): any = await fileResult.json()z any{ ! error: error.message%2"('I>x100644 bootstrap.test.tsĕJBt*ۧfW100644 bot.test.tso{ePc J$100644 db.test.tsgl<)6Ϫ c+100644 env.test.tsWZף UK5~۫ 100644 file.test.ts͹FT|:ā100644 files.test.tsfxqybq100644 health.test.ts!X" Tg100644 rateLimit.test.tse[r?Z[5 (g100644 swagger.test.tsTF0l~*uwv/`v100644 telegram.test.tsCm.Eg[v*ď100644 telegramQueue.test.ts{j`\z 100644 upload.test.tshT.lrnTC@e̒x('XVFz Ko撍 exη___X7/?9#59kdnFyFɮ7fe|r8?5"xmRAkA&ҕ"&%;@Lڍ R(*%j[0İNKvgpgVY *sOуnbj/f}yt[vz]#M6K(h جsכ`6{ ^!QHqamrQx!NC &)] ]PSpfFvD+ٴљvyS{S9pMiSV5gDr46c8,™YOc~f C{ƳfOhHv3cњ΄">)S1|̬||m Yw y)b9u$J3=Čϱo6M\-}1MAkdy$>9x#U+Pѫ^H_y Lwȵ)&_z{#W}m:K%H/BMZ0s%U{y $vrJRx< "Nexpect, it } from 'bun:test'; import { config } from '../src/env'; describe('{ ', () => { it('&' 'botToken'=%'storageChatId'=% 'baseUrl'=% 'databaseUrl'=%'port'=% 'nodeEnv'=% 'logLevel'=%'rateLimitWindowMs'=%&'rateLimitMaxRequests'); }); it('8'O'1H'"'number'd'5'port).toBe('number'P'test', 'development'x'info'); }); it('}<'\ #'<'\*{+P_x6-// @ts-nocheck NAmockSelect = mock(() => ({ from: mock(() => ({ where: mock(mock(])), })), })), })); mock.module('../src/db/index', () => ({ db: { select: mockSelect, }, files: { publicIdC: { equals: (val) => ({ type: 'equals', value: val }), },rateLimit const mockCheckRateLimit = mock(() => true); mock.module('../src/utils/rateLimit', () => ({ checkRateLimit: mockCheckRateLimit, })#Fany, handleFileInfo: any_CheckRateLimitUV >29 if rate limit is exceeded CheckRateLimi%false); const req = new Request  );  'test-id' }; 2 29 .json(N"Rate limit exceeded'" new Request /Q 'missing-id' }3 @.json(N",,direct to telegram file url if file is found "M new Request  );  'test-id' }3 302);O/U( 'https://api.telegram.org/file/bot123456:ABC-DEF/photos/file_0.jpg',  new Request  );  'test-id' }3 ".json(Ny new Request ); 'missing-id' }$:K.json(N"@if file is found- new Request *);  'test-id' }$:)".json( uploader_i/ new Request *);  'test-id' }$:)".json(NC '}); }); w>x // @ts-nocheck !anyS j$x #+Vxm any)B['/api/upload']P*" 'multipart/form-data', ['/api/upload']P?}); *!nx?76// @ts-nocheck ^"any, getFileInfo: any, getBot: any[ VxS@<// @ts-nocheck c any[] = []7{any  res.json(  res.json(:!-kB res.json( % res.json();=+ res.json(: res.json(:.* d:%xT100644 .dockerignoremm=BP<\J5Ӫ1>100644 .env.example8!`aHu?40000 .github=q1W6# .100644 .gitignore-'NW|ݟ0ad/ [100644 CLAUDE.mdvLٝi~~r( 100644 Dockerfile"2Ɏ/Vr1/*@ y100644 README.mdk2` bj6A100644 biome.jsonx4c2mTM 100644 bun.lock9D%7aqR-_100644 docker-compose.yml%}5 v=U[40000 docs8<OdU&42?100644 package.json]DW_pS'wэI100644 schema.sqlZwjb{}(TT40000 src&qt85 j@JͶj40000 test 7k(8qG%Y100644 tsconfig.json\/@Zaxx= /ϐݠD,'ёQYjZ Lj+@!/sՔ%MGbZkeX3g̈1O c@>&[I40000 testEƒ__&.zzaJ c)+)9bxWF M1U^;zPñ:30m]G: {Q/40000 test9>|-OX-硐bN_+)$fx?3EoKƸfռ,V40000 testErG{ښ#+)lfx !~jx(HE8Hconst isDocument = finalFileName.endsWith('.pdf') || finalFileName.endsWith('.txt') || !['photo', 'video', 'a.udio', 'voice', 'animation'].includes(fileType1!Buffer, finalFileName, isDocumenth.|-OX-硐bN_+) H& `xM = { task: () => Promise; resolve: (value: T | PromiseLike) => void; reject: (reason?: any) => void; }; class TelegramQueue { private activeCount = 0; private queue: QueueTask[] = []; private concurrency: number; constructor(concurrency = 2) { this.concurrency = concurrency; } public enqueue(task: () => Promise): Promise { return new Promise((resolve, reject) => { this.queue.push({ task, resolve, reject }); this.processNext(); }); } private async processNext(): Promise { if (this.activeCount >= this.concurrency || this.queue.length === 0) { return; } const item = this.queue.shift()!; this.activeCount++; try { const result = await item.task(); item.resolve(result); } catch (error) { item.reject(error); } finally { this.activeCount--; this.processNext(); } } } const telegramQueue = new TelegramQueue(2); export const enqueueUpload = (task: () => Promise): Promise => { return telegramQueue.enqueue(task); }; +] OxNiߟRm|E6HzS2)ہzcB~>nV%c1ȬmV7!b zxb70// @ts-nocheck %"any, getFileInfo: any, getBot: anyD  photo data')l %jp   photo data')l %jp  photo data')l %jpT4`?xV<6(35g&$p D txt type).toBe('document fYQtxt  U62x80|Q:Vi:(y1qrX-1 HWlx LSDUxW֡ 5@'P @PxZ9qX,E>,h Qx=, B?-ztxW0|Q:Vi:3H6BP;P,>c40000 testPEYޯOR`v|$t+)& x9100644 bot.tseuueҏ@x׻40000 db|/]ּCOC> 100644 env.tsiM6'p?+ }W 100644 index.tsYDe.|~8`P40000 routes6hNw&_vfZҸ40000 utils)"Ņܧo8~PG@BMx+ %? [] 8 .split(',') &4[| xZ:ocTu >ee'4,O x=+1<QH5  B x 5H΃C)'IDtgxo<&xgӮ1msՔ%MGbZkeX3OL)WAlkNP^$B-M40000 test*cF^T/<+)$/eibx4iĬ/6xlhelper `withRetry50 [xeFqv &5ȧ" UoAx=!hc17{&*uxOcCP.>7 /x =#e) const bot = new Telegraf(config.botToken*POconst withRetry = async (fn: () => Promise, retries = 5): Promise => {Ofn() i if (match && retries > 0) { F4Clogger.warn(`Telegram 429 Too Many Requests detected. Retrying afte$}); Q"return withRetry(fn, retries - 1);O=let result: any;  result = await withRetry(() => b C })); ! 0audio') { result = await withRetry(() => b C })); ! - result = await withRetry(() => b` C })); !   result = await withRetry(() => b C })); !   result = await withRetry(() => b G })); ! G  result = await withRetry(() => bk :6); } else { result = await withRetry(() => b F # })); }  <; ?)kax #xo=8!`aHu?QYvLٝi~~r( :3&qt85 j@JͶj40000 testUA r,3mLva+)61mx)L > xh100644 file.ts1 2NFR)9  100644 logger.ts fc{_5>r(100644 rateLimit.tsܴĒgh"100644 telegram.ts:ib2Ue**͔ 'd-t!8Fxmimport logger from './logger'; interface RateLimitRecord { count: number; reset: number; } const rateLimitMap = new Map(); export const checkRateLimit = (key: string): boolean => { const now = Date.now(); const windowMs = parseInt(process.env.RATE_LIMIT_WINDOW_MS!, 10) || 60000; const maxRequests = parseInt(process.env.RATE_LIMIT_MAX_REQUESTS!, 10) || 30; if (!rateLimitMap.has(key)) { rateLimitMap.set(key, { count: 0, reset: now + windowMs }); } const record = rateLimitMap.get(key)!; if (now > record.reset) { record.count = 0; record.reset = now + windowMs; } if (record.count >= maxRequests) { logger.warn('Rate limit exceeded', { key, count: record.count, reset: record.reset }); return false; } record.count++; return true; }; export const cleanupRateLimitCache = (): void => { const now = Date.now(); const keysToDelete: string[] = []; for (const [key, record] of rateLimitMap.entries()) { if (now > record.reset) { keysToDelete.push(key); } } for (const key of keysToDelete) { rateLimitMap.delete(key); } }; ܥlXxT#޳<5__ c_>?_#ct!;$ l B }x\@:#0aqrO!;100644 db.test.tsBOUAAe^W%Cz;"7}ө1n}$đldPE,2I8Rn3|JfJICHhR vRx)l*v#sYz %C~ (T?C2x8fgl<)6Ϫ c+zC, $t*4 ѓ*)GxK@bva6ˎ (= Ta͹FT|:ānV%c1Ȭm?(#Yx8@o{ePc J$T8fѯ|OᏓ* bx // @ts-nocheck import { describe, it, expect, beforeEach, afterEach, mock, spyOn } from "bun:test"; import { checkRateLimit, cleanupRateLimitCache } from "../src/utils/rateLimit"; import logger from "../src/utils/logger"; // Spy on logger.warn const warnSpy = spyOn(logger, "warn"); describe("Rate Limiter", () => { beforeEach(() => { warnSpy.mockClear(); // Set custom env variables for predictable tests process.env.RATE_LIMIT_WINDOW_MS = "100"; // 100ms window process.env.RATE_LIMIT_MAX_REQUESTS = "3"; // max 3 requests }); afterEach(() => { delete process.env.RATE_LIMIT_WINDOW_MS; delete process.env.RATE_LIMIT_MAX_REQUESTS; }); it("should allow requests under the limit", () => { const key = "user-1"; expect(checkRateLimit(key)).toBe(true); expect(checkRateLimit(key)).toBe(true); expect(checkRateLimit(key)).toBe(true); expect(warnSpy).not.toHaveBeenCalled(); }); it("should block requests exceeding the limit and log a warning", () => { const key = "user-2"; expect(checkRateLimit(key)).toBe(true); expect(checkRateLimit(key)).toBe(true); expect(checkRateLimit(key)).toBe(true); // 4th request exceeds limit of 3 expect(checkRateLimit(key)).toBe(false); expect(warnSpy).toHaveBeenCalled(); const callArgs = warnSpy.mock.calls[0]; expect(callArgs[0]).toBe("Rate limit exceeded"); expect(callArgs[1].key).toBe(key); }); it("should reset request count after the window passes", async () => { const key = "user-3"; expect(checkRateLimit(key)).toBe(true); expect(checkRateLimit(key)).toBe(true); expect(checkRateLimit(key)).toBe(true); expect(checkRateLimit(key)).toBe(false); // blocked // Wait for window to expire (100ms) await new Promise((resolve) => setTimeout(resolve, 110)); // Should be allowed again expect(checkRateLimit(key)).toBe(true); }); it("should cleanup rate limit cache of expired keys", async () => { const key1 = "cleanup-1"; const key2 = "cleanup-2"; // Populate keys expect(checkRateLimit(key1)).toBe(true); expect(checkRateLimit(key2)).toBe(true); // Run cleanup immediately (none should be expired yet as 100ms hasn't passed) cleanupRateLimitCache(); // Verify still tracked (counts shouldn't reset, e.g., if we consume remaining limits) expect(checkRateLimit(key1)).toBe(true); // request 2 expect(checkRateLimit(key1)).toBe(true); // request 3 expect(checkRateLimit(key1)).toBe(false); // request 4 (blocked) // Wait for window to expire await new Promise((resolve) => setTimeout(resolve, 110)); // Run cleanup cleanupRateLimitCache(); // Since they were deleted from the map, they should be initialized as new records // If they were cleaned up, we should be able to do 3 requests again expect(checkRateLimit(key1)).toBe(true); // 1 expect(checkRateLimit(key1)).toBe(true); // 2 expect(checkRateLimit(key1)).toBe(true); // 3 expect(checkRateLimit(key1)).toBe(false); // 4 (blocked) }); }); ف xSafterEach, beforeEach, describe, expect, it, spyOn } from 'bun:test'; import logger from '../src/utils/logger'; import { checkRs''../src/utils/rateLimit'7!'warn'); describe('Rate Limiter'4'100'<'3' '%''user-1''PXP $';''user-2''PXP'Rate limit exceeded'k6'2' = 'user-3''PXP,'|/'!)'cleanup-1'; const key2 = 'cleanup-2'+_/x0(92$'6x&40000 superpowersVTVH-x@40000 plansI4bE~l *<40000 specsz3uD>Onx8@å"8%tP.GT8fѯ|OᏓ* 4SxX:92'8605908810:AAFpUzlIBktfd_7wpEj7zMJob2CFxvG-ZGY'; = '-1003996572954M}x?3?*X ~"$'}G40000 test,0hhN)WT~L`K+)T% x9100644 bot.tsY{]0R?9^440000 db|/]ּCOC> 100644 env.ts#/|Z+<%$Y c100644 index.tsYDe.|~8`P40000 routes۱4Q)REs_7@U40000 utils5.΍ICHgZ+dLiSxv|¶p)|R~윑 :AxJ)!& cx JZ/Rk#G/_CV< Kx3?b9o)ҕ p!]xDe) const bot = new Telegraf(config.botToken*Puғ*!0any, fileName: string, forceDocument = falsez39caption = forceDocument ? `📁 ${fileName}` : fileName; GIconst result: any = forceDocument ? await bot.telegram.sendDocument}$1{ caption }) : await bot.telegram.sendPhoto}${ caption }); !forceDocument ? result.document : Vany{; fileName, error: error.message%: any = await result.json(): any = await fileResult.json()z any{ ! error: error.message%2""; !YXx99$0  e. _xG0(k#d%false+ true);  false^ ۓ2$'\Vx((kd*Dk[x=8!`aHu?QY:vLٝi~~r( 100644 Dockerfile]4erroPhGDrTI[Z`W2%-Ab2]1100644 schema.sql_oQEûҭ/{n"[40000 src}+LɢpZ40000 testGxEŠ100644 t3!GWm xX8<OdU&42?X3?*X ~"$'}G40000 test,0hhN)WT~L`K+)"jQx CkPxyc·6> Ņ9 *.!NA> i z@ͳY&`JAx"Bbun src/db/migrate.tsb1 Zx[91U!u4L0AO?׈_Y'[L6b\ŦTR/x rTI[Z`x&40000 superpowers͌ s T x@40000 plansjbZRn!DZ40000 specsz|Uח7.6x}100644 2026-05-17-telegram-uploader-backend-plan.mdy GkLJ[κxw=100644 2026-05-18-deploy-plan.mdC 100644 env.ts#/|Z+<%$Y c100644 index.tsYDe.|~8`P40000 routes۱4Q)REs_7@U40000 utils5.΍ICHgZ+dOKEExtJ"&fFT 'document' | 'photo' | 'video' | 'audio' | 'voice' | 'animation' = ctx 9 'animation>=!+k1,fxNŎP!CBJ97 t.xnV%c1Ȭm }xy:!2'8605908810:AAFpUzlIBktfd_7wpEj7zMJob2CFxvG-ZGY'; = '-1003996572954MyJ }, files: { R !ȳA/y'Jx?3m+`c=aoWQ840000 test%.tr:3vuhp Kv+)E# x9100644 bot.ts^@;^ZJP_40000 db|/]ּCOC> 100644 env.ts#/|Z+<%$Y c100644 index.tsYDe.|~8`P40000 routesȌ7%At_D40000 utils5.΍ICHgZ+dWK'xʅzww?cd ?x'E2"<V `R 8I`!"{@'S xWF// @ts-nocheck $5 // Mock db%/'mocked-nanoid-id'(F (() => o( }), )T!any >  res.json(o% 3 res.json(%$telegram_file_id).toBe('tg-file.).toBe('tg-unique-id-abcQ/testM/+ document { res.json(oóM res.json();@@txt#40000 test >AptA,fRђD+) x9100644 bot.ts^@;^ZJP_40000 db|/]ּCOC> 100644 env.ts#/|Z+<%$Y c100644 index.tsYDe.|~8`P40000 routesȌ7%At_D40000 utilsSdLWXN}N, xh100644 file.ts~A0rvƧ-~L 100644 logger.ts fc{_5>r(100644 rateLimit.tsܴĒgh"100644 telegram.ts3?b9o)ҿ};=xkƳh||`qR6xi)!H> checkFileSize, extractFileName, extractMimeType, getFileType Xn z O }); P$ 'xD]4erroPhGDrTI[Z`W2%-Ab2]1100644 schema.sql_oQEûҭ/{n"[40000 src (=40000 testGxEŠ100644 t3!Sbx+zrN) U-? pxoo[҄ @H\p,F) \kYx=c1-,^ x C, $t*4 ѓ* kx  O x9100644 bot.ts^@;^ZJP_40000 dbzrN) U-100644 env.ts#/|Z+<%$Y c100644 index.tsYDe.|~8`P40000 routesn0wH7{=40000 utilsnL';QR 1Ҳd9B{Jx&"O#^7z %Jx\H.Z{- checkFileSize, extractMimeType, getFileType +Um Y # const isDocument = fileName.endsWith('.pdf') || fileName.endsWith('.txt') || !['photo', 'video', 'audio', 'vo$ice', 'animation'].includes(fileType1Buffer, fileName, isDocumenttIhG' !|.r(100644 rateLimit.tsܴĒgh"100644 telegram.ts3?b9o)p:1x17 Ɠ ]|| Γany, request: any): string => { if (request?.headers?.['x-file-name']) { return request.headers['x-file-name']; } retSany, request: any): string => { if (request?.headers?.['x-mime-type']) { return request.headers['x-mime-type']; } retg0xW_!Z]6tdh8@B}s3}+LɢpZ40000 testGxEŠۓ+)g)x$40000 workflows#Y4eHu`^(px&100644 deploy.yml;Tqh_y0?KZj(x Ct Kx8_!Z]6tdh8@B}suvȠI^ +)Nx WoZ|=3IK*Bx7_!Z]6tdh8@B}s]]4erroPhGDpdC x?7(// @ts-nocheck %B$"any, getFileInfo: any, getBot: anyD  photo data')l %jp Afalse+ trueJ-1003996572954{  photo data')l %jp:false0x:k=x$40000 workflowsvppȐDYN$x&100644 deploy.yml 56Y "ljY q1xCt1.1S H?>x!1.1-!H1.1-iCks!xP_2zߥ;ؿaB06xs]LB_x<6 ^3tvNu[[.+)& !x\@:#0aqrO!;100644 db.test.tsN', 1Qne Tz;"7}ө1n}$đldPE,2I8Rn3|JfJICHhR vRx)l*v#sYz %C~ (.?x)o (schemaFiles$ O7, iUxG)h40000 docsG#MnJN=\\^ZewtvNu[[.+)4x&40000 superpowers4inҴ~YNʠx@40000 plans^p@mU +Q40000 specsI*9йtBdCx}HH8eKxJJPx#QstvNu[[.+)9I x6Qs]LB_x<6 ^o40000 docsrTI[Z`W2%-Ab2]1100644 schema.sql_oQEûҭ/{n"[40000 src}+LɢpZ40000 testtvNu[[.100644 t3!~VYx <G#MnJN=\\^ZePƠ /x=)zh.100644 docker-compose.yml%}5 v=U[1f+kzx )z;9+x<)zɛuW*hl;ںx0S'?Q zoG9CH9x+}Z'F̅T@T{ײ?" xI100644 index.tsvQfzZ x.v100644 schema.ts҄ @H\p,F)3Nx?Y3g~F*9d:i40000 testTc%8X g蓌)m>Qx@?64N wCf /xĐ &-aJk^%|J ; $xPinput: any = forceDocument ? { document: fileChunk, caption } : { photo: [fileChunk], caption }; const result ainput)x-%92x F։E뽻*5HBx(! [E*/x YN1x͇*J5;dmH* xar~7}; ݊[Yx\ J=҈--9QG/o% 4CxIGF" tele.asepharyana.tech/f/xYz123! % }, }); }; /xX )vwh|tq=V)03T@+iɨ΁xN40000 test'Qi?u=N6)(Ol(x p"v x9100644 bot.ts^@;^ZJP_40000 db}Z'F̅T@T{ײ100644 env.ts#/|Z+<%$Y c100644 index.tsm{JͺcoŞ958,40000 routes/V7%kH\uN-6^40000 utils@?64N wCf5?IgPx ,=7hRxnPv k:x P{OI#x`}]"٣|xx̯ % T`7 Xx  "7_Xrgd)L=jx! src/index.t+EV E\xVj}p}V e&13=R*ʄ e)M$xQ,&1.8.3/schema.json", "organizeImportsd, 0 RD } } } .g x9100644 bot.ts7->{س|40000 db iNnٟMA|100644 env.tsv[#[u '100644 index.tsoNwJ% ֮40000 routesN֪8TcOd840000 utils="~ǽCkQ+xxMimport { Telegraf, type Context@'[2 !T(Nw)>mtry { ^ .message.document ? 'document' :!photo ? 'photo' :! ? 'video' :! ? 'audio' :!6oice ? 'voice' : 'animation'; const fileObj =kX;const fileName =0.Z..0. ..9const maxSize = fileType === 'photo' ? 10 * 1024 * 1024 :!i ? 200 * 1024 * 1024 :!ivoice' ? 200 * 1024 * 1024$>%eR B $0 O o 1 = / 5I i =  # !2  }; Y ? 7 P% 8 a x &= publicId, fileType, fileName, uploader: ctx.from.id }); @7 e F} } OL y !e! + '...'*gxI100644 index.ts֗`zh @6~T100644 schema.ts%Sao/^9eR / iRx d/x[import { pgTable, text, bigind1*import type { InferSelectModel, InferInser*n{ x( 72K n! + '...' } });  %xS msg.document?.fileName ||. = msg.voice?.fileName || msg.animation?.fileName || 'file'].% msg.audio?.mimeType || o; }; ~7+x3,M%!e#=Xl1wx`100644 bootstrap.test.tsIɛxqb֦F0lpq4100644 bot.test.tsQKe-AeLfNuO100644 db.test.ts'fOj^"ygg>100644 env.test.ts$$poWS{&h100644 file.test.ts'Qρ9&z:100644 files.test.ts\Yqc>G0xOW100644 health.test.ts2ыJٵcH1100644 rateLimit.test.ts W 2!n 10u100644 telegram.test.ts* ˵䍣F&4G100644 upload.test.ts }H?Sr?U(Q%] {x Bdescribe, it, expect, mock, beforeEach, afterAll } from "bun:test"Zxc@ Promise.resolve({ stop: mock() })); mock.module("../src/bot"#) })); mock.module("../src/routes/upload"( })); mock.module("../src/routes/files").) })); mock.module("../src/routes/health"!+ })); mock.module("../src/utils/rateLimit"*" })); describe("Bootstrap Server""-"!"../src/index""port""routes"3 "/api/upload"3"/f/:public_id"3""3"/health"); }); }); *=Qx-! Idescribe, it, expect, mock, spyOn, beforeEach, afterAll } from "bun:test"a"../src/utils/logger"/"."#"-1003996572954""7"U "telegraf"d# })); mock.module("../src/db/index"q) }, files: {}G<&{ telegramFileId: "stored_file_id", 1"stored_unique_id", _ })); mock.module(""3%"info""*"error"); describe("Telegram Bot Handler"P "[$"6 "../src/bot"r"start";I;"document", "photo", "video", "audio", "voice", "animation"g"should handle /start command"6 "../src/bot" $+call => call[0] === "start" c1  V"Halo")); }); it(" ."6 "../src/bot" Ó(  "doc_123"P "doc_uniq_123"z 2"application/pdf" "cv.pdf" }y' 1 ["doc_123", "cv.pdf" YK="File berhasil diupload"), expect.any(Object)); }); it("` ."6 "../src/bot" { file_id: "photo_123"P "photo_uniq_123", LI "image/jpeg" }]y' 1 F[ "exceeds"l<* Kx\"it, expect } from "bun:test">"../src/db/index"k'>"../src/db/schema"; describe("Database Layer", () => { it("""5"oi"%"T35yxxj! "3it, expect } from "bun:test"; import { getFileType,H0k } from "../src/utils/file"; describe("File Utilities", () => { describe("getFileType", () => { it(")" "video/mp4", "")).toBe("video");8"video/quicktime", "")).toBe("video"); }); it(")" !"audio/mpeg", "")).toBe("audio");2"audio/ogg", "")).toBe("audio"); }); it("i1" )"image/jpeg", "my photo")).toBe("photo");."image/png", "cool image.png")).toBe("photo");-"image/gif", "funny.gif")).toBe("animation");?"image/png", "funny gif")).toBe("animation"); }); it("4" C"application/octet-stream", "this is a voice note")).toBe("voice");S"application/octet-stream", "cool animation")).toBe("animation"); }); it("0" ,"application/pdf", "")).toBe("application");null, "")).toBe("document"!"checkFileSize", () => { it("'"6"photo".Y"video"5"+"%"photo".Z"video"6"9"%o "unknown"F[ "unknown"*#"extractFileName", () => { it("  " )"x-file-name": "custom.txt"0   "custom.txt"); }); it(" >"  & $"doc.pdf" } }, null)).toBe("doc.pdf" @"low.jpg" }, { fileName: "high.jpg" }] }, null)).toBe("high.jpg" &"song.mp3" } }, null)).toBe("song.mp3" d ("voice.ogg" } }, null)).toBe("voice.ogg" :"anim.gif" } }, null)).toBe("anim.gif"); }); it(" +"  f "file"#"extractMimeType", () => { it(" 0" )"x-mime-type": "text/plain"0 2 "text/plain"); }); it("  " ?4"application/pdf" } }, null)).toBe("application/pdf""pE"image/jpeg" }, { mimeType: "image/png" }] }, null)).toBe("image/png"5*"audio/mpeg" } }, null)).toBe("audio/mpeg""R("audio/ogg" } }, null)).toBe("audio/ogg"#<"video/mp4" } }, null)).toBe("video/mp4"); }); it("," (W"application/octet-stream"vP]2x(-,Bdescribe, it, expect, mock, beforeEach, afterAll } from "bun:test"Z })) }))"../src/db/index"%)OA!"equals", value: val }) } }Z<"photos/file_0.jpg" })); mock.module("../src/utils/telegram"JH } })R"../src/utils/rateLimit" /% })); describe("File Route Handlers"_", handleFileInfo"123456:ABC-DEF"\'"../src/routes/files"}&"handleFileRedirect", () => { it(";+"}R" "!# "test-id" )"Rate limit exceeded"); }); it("J2"} }) })i+"""!# "missing-id"a S I$"File not found"); }); it(" 5"}C{ id: "uuid-123", publicId: "test-id", P "tg-file-id", 2"test.jpg" }]) }) })i+" "!# "test-id"a S #"Location")).toBe(" A"); }); it("{0"}>"DB Connection Error"," "!# "test-id"a "Server error"@ ""handleFileInfo", () => { it("J2"} }) })i+"y"!# "missing-id"a &) I$"File not found"); }); it("x-"9G"test-id", fileName: "image.png", mimeType: "image/png"&-"photo"Z9"2026-05-18T00:00:00.000Z") }) })i+"]"!# "test-id"a &)8[I"test-id", file_name: "image.png", mime_type: "image/png"/"photo"2"2026-05-18T00:00:00.000Z"_"{0"}>"DB Connection Error","]"!# "test-id"a &r"Server error"@Cpyx+ 8describe, it, expect, mock, beforeEach } from "bun:test"PZ"../src/db/index"+F } })); describe("Health Route Handler", () => { let handleHealth3`"../src/routes/health"<"2"-""+IL"ok"=":E"V""!""+"error"""); }); }); ZY6YWxn(describe, it, expect, beforeEach, afterEach, mock, spyOn } from "bun:test"; import logger from "../src/utils/logger"; import { config } from "../src/env"* "telegraf"[  { file_id: "photo_id_low", file_unique_id: "unique_id_low" }, { file_id: "photo_id_high", file_unique_id: "unique@_id_high" } ] })) }; } })"info"","error"); describe("Telegram API Utilities" , getFileInfo, getBot` "../src/utils/telegram""getBot", () => { it("l'", +_$"forwardToStorage", () => { it("C<"0"fake photo data""test_photo.jpg""photo_id_high",Q "unique_id_high" 123456"File forwarded to storage" , \ " )" 8 ="Telegram send failed" &"fake photo data""test_photo.jpg" P"Telegram send failed"*With(" !" error: "Telegram send failed" %"getFileInfo", () => { it("5&"url, $ "getFile"& *D"some_file_id" } }))# "getInfo"& *Jf  c"image/jpeg", file_path: "photos/file_0.jpg" } }))); } 9 "Unknown URL"U6 "some_file_id", "some_unique_id"/+%4"image/jpeg", file_path: "photos/file_0.jpg" \ "L&". ok: false, " " })))s#:"invalid_file_id", "invalid_unique_id")).rejects.toThrow(""@N2xBdescribe, it, expect, mock, beforeEach, afterAll } from "bun:test"ZV"../src/db/index") }, files: {}""nanoid";"mocked-nanoid-id"i*"../src/utils/telegram"){ telegramFileId: "tg-file-id-123", telegramFileUniqueId: "tg-unique-id-abc", storageMessageId: 98765 })), getBt6%{ file_id: "tg-file-id-123", !Rmime_type: "image/jpeg" })) } }) })); describe("Upload Route Handler"o_""<"B7" ,"a ", { method: "POST"C"content-type": "text/plain" }, body: "plain text data"@"UQ"); }); it("0" ,"a ", { method: "POST"""content-type": "application/json"AH"hello world").toString("base64"), fileName: "test.txt" })@Oz )!"mocked-nanoid-id"*"tg-file-id-123"!i"tg-unique-id-abc"# "test.txt"#"document"); }); it("*" ,"a ", { method: "POST"""content-type": "application/json"3Name: "test.txt" })@"Invalid JSON"); }); it(" ,"  F)"multipart hello")], { type: "text/plain" %"file", fileBlob, "test_multi.txt"); / "a /", { method: "POST", body: formData@Oz I"mocked-nanoid-id"#"test_multi.txt" ;^rOx?Y3rv'1aZ^40000 testl>8g]d7YI)b+ x9100644 bot.jsrP&8y\IJ_*m40000 db|Qc[ /100644 env.jsM g` '~06~>100644 index.js[J&(:J󛢳ИGx40000 routesjt \ }[Y cx40000 utilsQI>4jM&NnFLx Dimport { Telegraf } from 'telegraf'; import logger from './utils/logger.js'; import { config } from './env.js'; import { db, files as fileSchema } from './db/index.js'; import { nanoid } from 'nanoid'; import { forwardToStorage } from './utils/telegram.js'; export const startBot = async () => { try { const bot = new Telegraf(config.botToken); bot.command('start', async (ctx) => { await ctx.reply( `👋 Halo! Kirimkan file (document, photo, video, audio, voice, animation) ke bot ini. ` + `File akan disimpan di private channel dan kamu dapat download link permanen.` ); }); bot.on(['document', 'photo', 'video', 'audio', 'voice', 'animation'], async (ctx) => { try { const fileType = ctx.message.document ? 'document' : ctx.message.photo ? 'photo' : ctx.message.video ? 'video' : ctx.message.audio ? 'audio' : ctx.message.voice ? 'voice' : 'animation'; const fileObj = fileType === 'photo' ? ctx.message.photo.slice(-1)[0] : ctx.message[fileType]; const { file_id, file_unique_id, file_size, mime_type } = fileObj; const fileName = ctx.message.document?.file_name || ctx.message.photo?.slice(-1)[0]?.file_name || ctx.message.video?.file_name || ctx.message.audio?.file_name || ctx.message.voice?.file_name || 'file'; const maxSize = fileType === 'photo' ? 10 * 1024 * 1024 : fileType === 'audio' ? 200 * 1024 * 1024 : fileType === 'voice' ? 200 * 1024 * 1024 : 2 * 1024 * 1024 * 1024; if (file_size > maxSize) { return ctx.reply(`File size exceeds ${maxSize / (1024 * 1024)}MB limit`); } const result = await forwardToStorage(file_id, fileName); const publicId = nanoid(); const uploaded = { public_id: publicId, telegram_file_id: result.telegramFileId, telegram_file_unique_id: result.telegramFileUniqueId, storage_chat_id: config.storageChatId, storage_message_id: result.storageMessageId, file_name: fileName, mime_type: mime_type, size_bytes: file_size, file_type: fileType, uploader_id: ctx.from.id, created_at: new Date().toISOString(), updated_at: new Date().toISOString() }; await db.insert(fileSchema).values(uploaded); const url = `${config.baseUrl}/f/${publicId}`; await ctx.reply(`File berhasil diupload! 📎\n\nDownload: ${url}`, { reply_parameters: { message_id: ctx.message.message_id } }); logger.info('File uploaded via bot', { publicId, fileType, fileName, uploader: ctx.from.id }); } catch (error) { logger.error('Bot file handler error', { error: error.message, chat_id: ctx.chat?.id }); await ctx.reply('❌ Gagal mengupload file. Coba lagi nanti.'); } }); bot.use((ctx, next) => { logger.info('Telegram event received', { type: ctx.update.type, chat_id: ctx.chat?.id }); return next(); }); await bot.launch(); logger.info('Telegram bot started', { botToken: config.botToken?.substring(0, 10) + '...' }); return bot; } catch (error) { logger.error('Failed to start bot', { error: error.message }); throw error; } }; 3SxI100644 index.jsA0q+I, WXVe100644 schema.js">chF}$མӿxoimport { drizzle } from 'drizzle-orm/postgres-js'; import postgres from 'postgres'; import logger from '../utils/logger.js'; import { files } from './schema.js'; const client = postgres(process.env.DATABASE_URL, { max: 10, idle_timeout: 20, connect_timeout: 10 }); export const db = drizzle(client, { schema: { files } }); export { files }; export default db;}t6xfimport { pgTable, text, bigint, timestamp, uuid } from 'drizzle-orm/pg-core'; export const files = pgTable('files', { id: uuid('id').primaryKey().defaultRandom(), publicId: text('public_id').unique().notNull(), telegramFileId: text('telegram_file_id').notNull(), telegramFileUniqueId: text('telegram_file_unique_id').notNull(), storageChatId: bigint('storage_chat_id', { mode: 'number' }).notNull(), storageMessageId: bigint('storage_message_id', { mode: 'number' }).notNull(), fileName: text('file_name').notNull(), mimeType: text('mime_type').notNull(), sizeBytes: bigint('size_bytes', { mode: 'number' }).notNull(), fileType: text('file_type').notNull(), uploaderId: bigint('uploader_id', { mode: 'number' }).notNull(), createdAt: timestamp('created_at').defaultNow().notNull(), updatedAt: timestamp('updated_at').defaultNow().notNull() });!'dJx[import logger from './utils/logger.js'; const requiredEnv = { BOT_TOKEN: process.env.BOT_TOKEN, STORAGE_CHANNEL_ID: process.env.STORAGE_CHANNEL_ID, BASE_URL: process.env.BASE_URL, DATABASE_URL: process.env.DATABASE_URL, PORT: process.env.PORT }; const missing = Object.entries(requiredEnv) .filter(([_, value]) => value === undefined || value === '') .map(([key]) => key); if (missing.length > 0) { logger.error('Missing required environment variables:', missing); throw new Error(`Missing environment variables: ${missing.join(', ')}`); } export const config = { botToken: process.env.BOT_TOKEN, storageChatId: parseInt(process.env.STORAGE_CHANNEL_ID, 10), baseUrl: process.env.BASE_URL, databaseUrl: process.env.DATABASE_URL, port: parseInt(process.env.PORT, 10) || 3000, nodeEnv: process.env.NODE_ENV || 'development', logLevel: process.env.LOG_LEVEL || 'info', rateLimitWindowMs: parseInt(process.env.RATE_LIMIT_WINDOW_MS, 10) || 60000, rateLimitMaxRequests: parseInt(process.env.RATE_LIMIT_MAX_REQUESTS, 10) || 30 }; logger.info('Environment variables loaded', { config: { ...config, botToken: config.botToken?.substring(0, 10) + '...' } }); Oximport { serve } from 'bun'; import logger from './utils/logger.js'; import { config } from './env.js'; import { startBot } from './bot.js'; import { handleUpload } from './routes/upload.js'; import { handleFileRedirect, handleFileInfo } from './routes/files.js'; import { handleHealth } from './routes/health.js'; import { cleanupRateLimitCache } from './utils/rateLimit.js'; const server = serve({ port: config.port, routes: { '/api/upload': { POST: handleUpload }, '/f/:public_id': { GET: handleFileRedirect }, '/file/:public_id/info': { GET: handleFileInfo }, '/health': { GET: handleHealth } } }); const bot = await startBot(); logger.info('Server started', { port: config.port, url: config.baseUrl }); const gracefulShutdown = async (signal) => { logger.info('Graceful shutdown signal received', { signal }); logger.info('Closing HTTP server'); server.stop(); logger.info('Stopping Telegram bot'); await bot.stop(); logger.info('Server shutdown complete'); process.exit(0); }; process.on('SIGTERM', () => gracefulShutdown('SIGTERM')); process.on('SIGINT', () => gracefulShutdown('SIGINT')); setInterval(cleanupRateLimitCache, 60000); logger.info('Application running successfully'); Eekxn100644 files.jsw,#Sh>x&100644 health.jsTBus { const public_id = ctx?.params?.public_id; try { const ip = req.headers.get('x-forwarded-for') || '127.0.0.1'; if (!public_id || !checkRateLimit(ip)) { return Response.json({ error: 'Rate limit exceeded' }, { status: 429 }); } const result = await db.select().from(fileSchema).where(eq(fileSchema.publicId, public_id)).limit(1); if (!result.length) { logger.warn('File not found', { public_id }); return Response.json({ error: 'File not found' }, { status: 404 }); } const file = result[0]; const { getBot } = await import('../utils/telegram.js'); const bot = getBot(); const fileInfo = await bot.api.getFile(file.telegramFileId); const redirectUrl = `https://api.telegram.org/file/bot${process.env.BOT_TOKEN}/${fileInfo.file_path}`; return new Response(null, { status: 302, headers: { 'Location': redirectUrl } }); } catch (error) { logger.error('File redirect error', { public_id, error: error.message }); return Response.json({ error: 'Server error' }, { status: 500 }); } }; export const handleFileInfo = async (req, ctx) => { const public_id = ctx?.params?.public_id; try { if (!public_id) { return Response.json({ error: 'Missing file id' }, { status: 400 }); } const result = await db.select().from(fileSchema).where(eq(fileSchema.publicId, public_id)).limit(1); if (!result.length) { logger.warn('File not found', { public_id }); return Response.json({ error: 'File not found' }, { status: 404 }); } const file = result[0]; return Response.json({ public_id: file.publicId, file_name: file.fileName, mime_type: file.mimeType, size_bytes: file.sizeBytes, file_type: file.fileType, uploader_id: file.uploaderId, created_at: file.createdAt.toISOString ? file.createdAt.toISOString() : file.createdAt }, { status: 200 }); } catch (error) { logger.error('File info error', { public_id, error: error.message }); return Response.json({ error: 'Server error' }, { status: 500 }); } }; Dxa4I#sql+DHealth = async (req) => { try { await db.execute(sql`SELECT 1` status: 'ok'u<Health check failed', {5status: 'error'"" 3xoimport logger from '../utils/logger.js'; import { db, files as fileSchema } from '../db/index.js'; import { nanoid } from 'nanoid'; import { forwardToStorage, getBot } from '../utils/telegram.js'; import { getFileType, checkFileSize, extractFileName, extractMimeType } from '../utils/file.js'; import { config } from '../env.js'; export const handleUpload = async (req) => { try { const contentType = req.headers.get('content-type') || ''; if (contentType.includes('multipart/form-data')) { return handleMultipartUpload(req); } else if (contentType.includes('application/json')) { return handleJSONUpload(req); } return Response.json( { error: 'Unsupported content type. Use multipart/form-data or application/json' }, { status: 400 } ); } catch (error) { logger.error('Upload error', { error: error.message }); return Response.json({ error: error.message }, { status: 500 }); } }; const handleMultipartUpload = async (req) => { try { const formData = await req.formData(); const file = formData.get('file'); const fileName = formData.get('fileName') || (file instanceof File ? file.name : null) || 'file'; if (!file || !(file instanceof File)) { return Response.json({ error: 'No file provided' }, { status: 400 }); } const fileBytes = await file.arrayBuffer(); const fileBuffer = Buffer.from(fileBytes); const mimeType = file.type || extractMimeType({}, req) || 'application/octet-stream'; const fileType = getFileType(mimeType, fileName); if (!checkFileSize(fileBuffer.byteLength, fileType)) { return Response.json({ error: `File size exceeds ${fileType} limit` }, { status: 400 }); } const isDocument = fileName.endsWith('.pdf') || fileName.endsWith('.txt') || !['photo', 'video', 'audio', 'voice', 'animation'].includes(fileType); const result = await forwardToStorage(fileBuffer, fileName, isDocument); const bot = getBot(); const fileInfo = await bot.api.getFile(result.telegramFileId); const uploaded = { publicId: nanoid(), telegramFileId: result.telegramFileId, telegramFileUniqueId: result.telegramFileUniqueId, storageChatId: config.storageChatId, storageMessageId: result.storageMessageId, fileName: fileName, mimeType: fileInfo.mime_type || mimeType || 'application/octet-stream', sizeBytes: fileInfo.file_size || fileBuffer.byteLength, fileType: fileType, uploaderId: 0, createdAt: new Date(), updatedAt: new Date() }; await db.insert(fileSchema).values(uploaded); // Prepare response matching original snake_case fields as expected in task description const responsePayload = { public_id: uploaded.publicId, telegram_file_id: uploaded.telegramFileId, telegram_file_unique_id: uploaded.telegramFileUniqueId, storage_chat_id: uploaded.storageChatId, storage_message_id: uploaded.storageMessageId, file_name: uploaded.fileName, mime_type: uploaded.mimeType, size_bytes: uploaded.sizeBytes, file_type: uploaded.fileType, uploader_id: uploaded.uploaderId, created_at: uploaded.createdAt.toISOString(), download_url: `${config.baseUrl}/f/${uploaded.publicId}` }; return Response.json(responsePayload, { status: 200 }); } catch (error) { logger.error('Multipart upload error', { error: error.message }); return Response.json({ error: error.message }, { status: 500 }); } }; const handleJSONUpload = async (req) => { try { const { file, fileName = 'file' } = await req.json(); if (!file || typeof file !== 'string') { return Response.json( { error: 'Invalid JSON. Must include "file" (base64) and optional "fileName"' }, { status: 400 } ); } const fileBytes = Buffer.from(file, 'base64'); const mimeType = 'application/octet-stream'; const fileType = getFileType(mimeType, fileName) === 'application' ? 'document' : getFileType(mimeType, fileName); if (!checkFileSize(fileBytes.byteLength, fileType)) { return Response.json({ error: `File size exceeds ${fileType} limit` }, { status: 400 }); } const isDocument = fileName.endsWith('.pdf') || fileName.endsWith('.txt') || !['photo', 'video', 'audio', 'voice', 'animation'].includes(fileType); const result = await forwardToStorage(fileBytes, fileName, isDocument); const bot = getBot(); const fileInfo = await bot.api.getFile(result.telegramFileId); const uploaded = { publicId: nanoid(), telegramFileId: result.telegramFileId, telegramFileUniqueId: result.telegramFileUniqueId, storageChatId: config.storageChatId, storageMessageId: result.storageMessageId, fileName: fileName, mimeType: fileInfo.mime_type || mimeType || 'application/octet-stream', sizeBytes: fileInfo.file_size || fileBytes.byteLength, fileType: fileType, uploaderId: 0, createdAt: new Date(), updatedAt: new Date() }; await db.insert(fileSchema).values(uploaded); // Prepare response matching original snake_case fields as expected in task description const responsePayload = { public_id: uploaded.publicId, telegram_file_id: uploaded.telegramFileId, telegram_file_unique_id: uploaded.telegramFileUniqueId, storage_chat_id: uploaded.storageChatId, storage_message_id: uploaded.storageMessageId, file_name: uploaded.fileName, mime_type: uploaded.mimeType, size_bytes: uploaded.sizeBytes, file_type: uploaded.fileType, uploader_id: uploaded.uploaderId, created_at: uploaded.createdAt.toISOString(), download_url: `${config.baseUrl}/f/${uploaded.publicId}` }; return Response.json(responsePayload, { status: 200 }); } catch (error) { logger.error('JSON upload error', { error: error.message }); return Response.json({ error: error.message }, { status: 500 }); } }; Dt xh100644 file.js.%L$PESO ~100644 logger.jsgT`x]ɲU:SE100644 rateLimit.js ŵ_}gM4100644 telegram.js3:ߎْZ I ;ްcx0const FILE_TYPES = { document: 2 * 1024 * 1024 * 1024, // 2GB photo: 10 * 1024 * 1024, // 10MB video: 2 * 1024 * 1024 * 1024, // 2GB audio: 200 * 1024 * 1024, // 200MB voice: 200 * 1024 * 1024, // 200MB animation: 2 * 1024 * 1024 * 1024 // 2GB }; export const getFileType = (mime, caption) => { const mimeUpper = mime?.split('/')[0]?.toLowerCase(); const captionLower = caption?.toLowerCase(); if (mimeUpper === 'video') return 'video'; if (mimeUpper === 'audio') return 'audio'; if (mimeUpper === 'document') return 'document'; if (mimeUpper === 'image') return captionLower?.includes('gif') ? 'animation' : 'photo'; if (captionLower?.includes('voice')) return 'voice'; if (captionLower?.includes('animation')) return 'animation'; return mimeUpper || 'document'; }; export const checkFileSize = (sizeBytes, fileType) => { const limit = FILE_TYPES[fileType] || FILE_TYPES.document; return sizeBytes <= limit; }; export const extractFileName = (msg, request) => { if (request?.headers?.['x-file-name']) { return request.headers['x-file-name']; } return msg.document?.fileName || msg.photo?.slice(-1)[0]?.fileName || msg.audio?.fileName || msg.voice?.fileName || msg.animation?.fileName || 'file'; }; export const extractMimeType = (msg, request) => { if (request?.headers?.['x-mime-type']) { return request.headers['x-mime-type']; } return msg.document?.mimeType || msg.photo?.slice(-1)[0]?.mimeType || msg.audio?.mimeType || msg.voice?.mimeType || msg.animation?.mimeType || 'application/octet-stream'; }; { const now = Date.now(); const windowMs = parseInt(process.env.RATE_LIMIT_WINDOW_MS, 10) || 60000; const maxRequests = parseInt(process.env.RATE_LIMIT_MAX_REQUESTS, 10) || 30; if (!rateLimitMap.has(key)) { rateLimitMap.set(key, { count: 0, reset: now + windowMs }); } const record = rateLimitMap.get(key); if (now > record.reset) { record.count = 0; record.reset = now + windowMs; } if (record.count >= maxRequests) { logger.warn('Rate limit exceeded', { key, count: record.count, reset: record.reset }); return false; } record.count++; return true; }; export const cleanupRateLimitCache = () => { const now = Date.now(); const windowMs = parseInt(process.env.RATE_LIMIT_WINDOW_MS, 10) || 60000; const keysToDelete = []; for (const [key, record] of rateLimitMap.entries()) { if (now > record.reset) { keysToDelete.push(key); } } keysToDelete.forEach(key => rateLimitMap.delete(key)); }; AW!}x$import { Telegraf } from 'telegraf'; import logger from './logger.js'; import { config } from '../env.js'; const bot = new Telegraf(config.botToken); const TELEGRAM_API_URL = `https://api.telegram.org/bot${config.botToken}/`; export const forwardToStorage = async (fileChunk, fileName, forceDocument = false) => { try { const caption = forceDocument ? `📁 ${fileName}` : fileName; const input = forceDocument ? { document: fileChunk, caption } : { photo: [fileChunk], caption }; const result = await bot.api.sendPhoto(config.storageChatId, input); logger.info('File forwarded to storage', { fileName, message: result.message_id }); return { telegramFileId: result.photo?.slice(-1)[0]?.file_id, telegramFileUniqueId: result.photo?.slice(-1)[0]?.file_unique_id, storageMessageId: result.message_id }; } catch (error) { logger.error('Failed to forward file to storage', { fileName, error: error.message }); throw error; } }; export const getFileInfo = async (telegramFileId, telegramFileUniqueId) => { try { const result = await fetch(`${TELEGRAM_API_URL}getFile`); const data = await result.json(); if (!data.ok) { throw new Error(data.description || 'Telegram API error'); } const fileId = data.result.file_id === telegramFileId ? telegramFileId : telegramFileUniqueId; const fileResult = await fetch(`${TELEGRAM_API_URL}getInfo`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ file_id: fileId }) }); const fileInfo = await fileResult.json(); if (!fileInfo.ok) { throw new Error(fileInfo.description || 'Telegram info error'); } return { file_size: fileInfo.result.file_size, mime_type: fileInfo.result.mime_type, file_path: fileInfo.result.file_path }; } catch (error) { logger.error('Failed to get file info', { error: error.message }); throw error; } }; export const getBot = () => bot; [(x`100644 bootstrap.test.js'sRݵaX3.8100644 bot.test.js'y { return { port: options.port, routes: options.routes, stop: mock() }; }); const originalServe = Bun.serve; Bun.serve = mockServe; const mockStartBot = mock(() => Promise.resolve({ stop: mock() })); mock.module("../src/bot.js", () => ({ startBot: mockStartBot })); mock.module("../src/routes/upload.js", () => ({ handleUpload: mock() })); mock.module("../src/routes/files.js", () => ({ handleFileRedirect: mock(), handleFileInfo: mock() })); mock.module("../src/routes/health.js", () => ({ handleHealth: mock() })); mock.module("../src/utils/rateLimit.js", () => ({ cleanupRateLimitCache: mock() })); describe("Bootstrap Server", () => { beforeEach(() => { mockServe.mockClear(); mockStartBot.mockClear(); }); afterAll(() => { Bun.serve = originalServe; }); it("should bootstrap the application successfully", async () => { await import("../src/index.js"); expect(mockServe).toHaveBeenCalled(); expect(mockStartBot).toHaveBeenCalled(); const serveCallArgs = mockServe.mock.calls[0][0]; expect(serveCallArgs).toHaveProperty("port"); expect(serveCallArgs).toHaveProperty("routes"); expect(serveCallArgs.routes).toHaveProperty("/api/upload"); expect(serveCallArgs.routes).toHaveProperty("/f/:public_id"); expect(serveCallArgs.routes).toHaveProperty("/file/:public_id/info"); expect(serveCallArgs.routes).toHaveProperty("/health"); }); }); ¾x^import { describe, it, expect, mock, spyOn, beforeEach, afterAll } from "bun:test"; import logger from "../src/utils/logger.js"; // Mock environment process.env.BOT_TOKEN = "8605908810:AAFpUzlIBktfd_7wpEj7zMJob2CFxvG-ZGY"; process.env.STORAGE_CHANNEL_ID = "-1003996572954"; process.env.BASE_URL = "https://tele.asepharyana.tech"; // Mock Telegraf const mockLaunch = mock(() => Promise.resolve()); const mockCommand = mock(); const mockOn = mock(); const mockUse = mock(); mock.module("telegraf", () => { return { Telegraf: class { constructor(token) { this.token = token; this.launch = mockLaunch; this.command = mockCommand; this.on = mockOn; this.use = mockUse; } } }; }); // Mock database const mockInsert = mock(() => ({ values: mock(() => Promise.resolve()) })); mock.module("../src/db/index.js", () => ({ db: { insert: mockInsert }, files: {} })); // Mock forwardToStorage const mockForwardToStorage = mock(() => Promise.resolve({ telegramFileId: "stored_file_id", telegramFileUniqueId: "stored_unique_id", storageMessageId: 9999 })); mock.module("../src/utils/telegram.js", () => ({ forwardToStorage: mockForwardToStorage })); const infoSpy = spyOn(logger, "info"); const errorSpy = spyOn(logger, "error"); describe("Telegram Bot Handler", () => { beforeEach(() => { mockLaunch.mockClear(); mockCommand.mockClear(); mockOn.mockClear(); mockUse.mockClear(); mockInsert.mockClear(); mockForwardToStorage.mockClear(); infoSpy.mockClear(); errorSpy.mockClear(); }); it("should initialize and launch the bot", async () => { const { startBot } = await import("../src/bot.js"); const bot = await startBot(); expect(bot).toBeDefined(); expect(mockCommand).toHaveBeenCalledWith("start", expect.any(Function)); expect(mockOn).toHaveBeenCalledWith( ["document", "photo", "video", "audio", "voice", "animation"], expect.any(Function) ); expect(mockUse).toHaveBeenCalled(); expect(mockLaunch).toHaveBeenCalled(); }); it("should handle /start command", async () => { const { startBot } = await import("../src/bot.js"); await startBot(); const startHandler = mockCommand.mock.calls.find(call => call[0] === "start")[1]; const replyMock = mock(() => Promise.resolve()); const ctx = { reply: replyMock }; await startHandler(ctx); expect(replyMock).toHaveBeenCalledWith(expect.stringContaining("Halo")); }); it("should process document uploads and save to db", async () => { const { startBot } = await import("../src/bot.js"); await startBot(); const fileHandler = mockOn.mock.calls[0][1]; const replyMock = mock(() => Promise.resolve()); const ctx = { message: { message_id: 42, document: { file_id: "doc_123", file_unique_id: "doc_uniq_123", file_size: 1024, mime_type: "application/pdf", file_name: "cv.pdf" } }, from: { id: 999 }, reply: replyMock }; await fileHandler(ctx); expect(mockForwardToStorage).toHaveBeenCalledWith("doc_123", "cv.pdf"); expect(mockInsert).toHaveBeenCalled(); expect(replyMock).toHaveBeenCalledWith(expect.stringContaining("File berhasil diupload"), expect.any(Object)); }); it("should reject uploads exceeding max size limit", async () => { const { startBot } = await import("../src/bot.js"); await startBot(); const fileHandler = mockOn.mock.calls[0][1]; const replyMock = mock(() => Promise.resolve()); const ctx = { message: { message_id: 42, photo: [{ file_id: "photo_123", file_unique_id: "photo_uniq_123", file_size: 20 * 1024 * 1024, // 20MB exceeds 10MB limit mime_type: "image/jpeg" }] }, from: { id: 999 }, reply: replyMock }; await fileHandler(ctx); expect(mockForwardToStorage).not.toHaveBeenCalled(); expect(replyMock).toHaveBeenCalledWith(expect.stringContaining("exceeds")); }); afterAll(() => { mock.restore(); }); }); g yDxJimport { describe, it, expect } from "bun:test"; import { db, files } from "../src/db/index.js"; import { files as schemaFiles } from "../src/db/schema.js"; describe("Database Layer", () => { it("should export db instance", () => { expect(db).toBeDefined(); }); it("should export files schema from both index and schema", () => { expect(files).toBeDefined(); expect(schemaFiles).toBeDefined(); expect(files).toBe(schemaFiles); }); it("should have correct schema properties", () => { expect(files.id).toBeDefined(); expect(files.publicId).toBeDefined(); expect(files.telegramFileId).toBeDefined(); expect(files.telegramFileUniqueId).toBeDefined(); expect(files.storageChatId).toBeDefined(); expect(files.storageMessageId).toBeDefined(); expect(files.fileName).toBeDefined(); expect(files.mimeType).toBeDefined(); expect(files.sizeBytes).toBeDefined(); expect(files.fileType).toBeDefined(); expect(files.uploaderId).toBeDefined(); expect(files.createdAt).toBeDefined(); expect(files.updatedAt).toBeDefined(); }); }); f#gxzimport { describe, it, expect, beforeAll } from "bun:test"; import { config } from "../src/env.js"; describe("Environment Variables Validation", () => { it("config should have all required fields", () => { expect(config).toHaveProperty("botToken"); expect(config).toHaveProperty("storageChatId"); expect(config).toHaveProperty("baseUrl"); expect(config).toHaveProperty("databaseUrl"); expect(config).toHaveProperty("port"); expect(config).toHaveProperty("nodeEnv"); expect(config).toHaveProperty("logLevel"); expect(config).toHaveProperty("rateLimitWindowMs"); expect(config).toHaveProperty("rateLimitMaxRequests"); }); it("config.botToken should return BOT_TOKEN from process.env", () => { expect(config.botToken).toBe(process.env.BOT_TOKEN); }); it("config.storageChatId should be parsed as integer from STORAGE_CHANNEL_ID", () => { expect(typeof config.storageChatId).toBe("number"); expect(config.storageChatId).toBe(parseInt(process.env.STORAGE_CHANNEL_ID, 10)); }); it("config.port should default to 3000 when not specified", () => { expect(typeof config.port).toBe("number"); }); it("nodeEnv should be 'test' or 'development'", () => { expect(["test", "development"]).toContain(config.nodeEnv); }); it("logLevel should default to 'info'", () => { expect(config.logLevel).toBe("info"); }); it("rateLimitWindowMs should default to 60000 when not specified", () => { expect(config.rateLimitWindowMs).toBe(60000); }); it("rateLimitMaxRequests should default to 30 when not specified", () => { expect(config.rateLimitMaxRequests).toBe(30); }); }); )AxVimport { describe, it, expect } from "bun:test"; import { getFileType, checkFileSize, extractFileName, extractMimeType } from "../src/utils/file.js"; describe("File Utilities", () => { describe("getFileType", () => { it("should classify video mime types as video", () => { expect(getFileType("video/mp4", "")).toBe("video"); expect(getFileType("video/quicktime", "")).toBe("video"); }); it("should classify audio mime types as audio", () => { expect(getFileType("audio/mpeg", "")).toBe("audio"); expect(getFileType("audio/ogg", "")).toBe("audio"); }); it("should classify image mime types based on caption", () => { expect(getFileType("image/jpeg", "my photo")).toBe("photo"); expect(getFileType("image/png", "cool image.png")).toBe("photo"); expect(getFileType("image/gif", "funny.gif")).toBe("animation"); expect(getFileType("image/png", "funny gif")).toBe("animation"); }); it("should classify voice and animation based on caption", () => { expect(getFileType("application/octet-stream", "this is a voice note")).toBe("voice"); expect(getFileType("application/octet-stream", "cool animation")).toBe("animation"); }); it("should default to mime first segment or document", () => { expect(getFileType("application/pdf", "")).toBe("application"); expect(getFileType(null, "")).toBe("document"); }); }); describe("checkFileSize", () => { it("should allow files under the size limit", () => { expect(checkFileSize(5 * 1024 * 1024, "photo")).toBe(true); // Photo limit is 10MB expect(checkFileSize(1 * 1024 * 1024 * 1024, "video")).toBe(true); // Video limit is 2GB }); it("should block files exceeding the size limit", () => { expect(checkFileSize(15 * 1024 * 1024, "photo")).toBe(false); // Photo limit is 10MB expect(checkFileSize(3 * 1024 * 1024 * 1024, "video")).toBe(false); // Video limit is 2GB }); it("should fall back to document limit if fileType is unknown", () => { expect(checkFileSize(1 * 1024 * 1024 * 1024, "unknown")).toBe(true); // Document limit is 2GB expect(checkFileSize(3 * 1024 * 1024 * 1024, "unknown")).toBe(false); }); }); describe("extractFileName", () => { it("should extract file name from headers if present", () => { const req = { headers: { "x-file-name": "custom.txt" } }; expect(extractFileName({}, req)).toBe("custom.txt"); }); it("should extract file name from various message attachment types", () => { expect(extractFileName({ document: { fileName: "doc.pdf" } }, null)).toBe("doc.pdf"); expect(extractFileName({ photo: [{ fileName: "low.jpg" }, { fileName: "high.jpg" }] }, null)).toBe("high.jpg"); expect(extractFileName({ audio: { fileName: "song.mp3" } }, null)).toBe("song.mp3"); expect(extractFileName({ voice: { fileName: "voice.ogg" } }, null)).toBe("voice.ogg"); expect(extractFileName({ animation: { fileName: "anim.gif" } }, null)).toBe("anim.gif"); }); it("should return default filename if not found", () => { expect(extractFileName({}, null)).toBe("file"); }); }); describe("extractMimeType", () => { it("should extract mime type from headers if present", () => { const req = { headers: { "x-mime-type": "text/plain" } }; expect(extractMimeType({}, req)).toBe("text/plain"); }); it("should extract mime type from various message attachment types", () => { expect(extractMimeType({ document: { mimeType: "application/pdf" } }, null)).toBe("application/pdf"); expect(extractMimeType({ photo: [{ mimeType: "image/jpeg" }, { mimeType: "image/png" }] }, null)).toBe("image/png"); expect(extractMimeType({ audio: { mimeType: "audio/mpeg" } }, null)).toBe("audio/mpeg"); expect(extractMimeType({ voice: { mimeType: "audio/ogg" } }, null)).toBe("audio/ogg"); expect(extractMimeType({ animation: { mimeType: "video/mp4" } }, null)).toBe("video/mp4"); }); it("should return default mime type if not found", () => { expect(extractMimeType({}, null)).toBe("application/octet-stream"); }); }); }); Pcx-import { describe, it, expect, mock, beforeEach, afterAll } from "bun:test"; // Mock database layer const mockSelect = mock(() => ({ from: mock(() => ({ where: mock(() => ({ limit: mock(() => Promise.resolve([])) })) })) })); mock.module("../src/db/index.js", () => ({ db: { select: mockSelect }, files: { publicId: { equals: (val) => ({ type: "equals", value: val }) } } })); // Mock telegram utils const mockGetFile = mock(() => Promise.resolve({ file_path: "photos/file_0.jpg" })); mock.module("../src/utils/telegram.js", () => ({ getBot: () => ({ api: { getFile: mockGetFile } }) })); // Mock rateLimit const mockCheckRateLimit = mock(() => true); mock.module("../src/utils/rateLimit.js", () => ({ checkRateLimit: mockCheckRateLimit })); describe("File Route Handlers", () => { let handleFileRedirect, handleFileInfo; beforeEach(async () => { mockSelect.mockClear(); mockGetFile.mockClear(); mockCheckRateLimit.mockClear(); // Set up mock token process.env.BOT_TOKEN = "123456:ABC-DEF"; const filesRoute = await import("../src/routes/files.js"); handleFileRedirect = filesRoute.handleFileRedirect; handleFileInfo = filesRoute.handleFileInfo; }); describe("handleFileRedirect", () => { it("should return 429 if rate limit is exceeded", async () => { mockCheckRateLimit.mockImplementationOnce(() => false); const req = new Request("http://localhost:3000/f/test-id"); const res = await handleFileRedirect(req, { params: { public_id: "test-id" } }); expect(res.status).toBe(429); const body = await res.json(); expect(body.error).toBe("Rate limit exceeded"); }); it("should return 404 if file is not found in database", async () => { mockSelect.mockImplementationOnce(() => ({ from: () => ({ where: () => ({ limit: () => Promise.resolve([]) }) }) })); const req = new Request("http://localhost:3000/f/missing-id"); const res = await handleFileRedirect(req, { params: { public_id: "missing-id" } }); expect(res.status).toBe(404); const body = await res.json(); expect(body.error).toBe("File not found"); }); it("should redirect to telegram file url if file is found", async () => { mockSelect.mockImplementationOnce(() => ({ from: () => ({ where: () => ({ limit: () => Promise.resolve([{ id: "uuid-123", publicId: "test-id", telegramFileId: "tg-file-id", fileName: "test.jpg" }]) }) }) })); const req = new Request("http://localhost:3000/f/test-id"); const res = await handleFileRedirect(req, { params: { public_id: "test-id" } }); expect(res.status).toBe(302); expect(res.headers.get("Location")).toBe("https://api.telegram.org/file/bot123456:ABC-DEF/photos/file_0.jpg"); }); it("should return 500 on database or external errors", async () => { mockSelect.mockImplementationOnce(() => { throw new Error("DB Connection Error"); }); const req = new Request("http://localhost:3000/f/test-id"); const res = await handleFileRedirect(req, { params: { public_id: "test-id" } }); expect(res.status).toBe(500); const body = await res.json(); expect(body.error).toBe("Server error"); }); }); describe("handleFileInfo", () => { it("should return 404 if file is not found in database", async () => { mockSelect.mockImplementationOnce(() => ({ from: () => ({ where: () => ({ limit: () => Promise.resolve([]) }) }) })); const req = new Request("http://localhost:3000/file/missing-id/info"); const res = await handleFileInfo(req, { params: { public_id: "missing-id" } }); expect(res.status).toBe(404); const body = await res.json(); expect(body.error).toBe("File not found"); }); it("should return file info JSON if file is found", async () => { const dbFile = { publicId: "test-id", fileName: "image.png", mimeType: "image/png", sizeBytes: 2048, fileType: "photo", uploaderId: 99999, createdAt: new Date("2026-05-18T00:00:00.000Z") }; mockSelect.mockImplementationOnce(() => ({ from: () => ({ where: () => ({ limit: () => Promise.resolve([dbFile]) }) }) })); const req = new Request("http://localhost:3000/file/test-id/info"); const res = await handleFileInfo(req, { params: { public_id: "test-id" } }); expect(res.status).toBe(200); const body = await res.json(); expect(body).toEqual({ public_id: "test-id", file_name: "image.png", mime_type: "image/png", size_bytes: 2048, file_type: "photo", uploader_id: 99999, created_at: "2026-05-18T00:00:00.000Z" }); }); it("should return 500 on database or external errors", async () => { mockSelect.mockImplementationOnce(() => { throw new Error("DB Connection Error"); }); const req = new Request("http://localhost:3000/file/test-id/info"); const res = await handleFileInfo(req, { params: { public_id: "test-id" } }); expect(res.status).toBe(500); const body = await res.json(); expect(body.error).toBe("Server error"); }); }); afterAll(() => { mock.restore(); }); }); benOx import { describe, it, expect, mock, beforeEach } from "bun:test"; // Mock database layer const mockExecute = mock(() => Promise.resolve()); mock.module("../src/db/index.js", () => ({ db: { execute: mockExecute } })); describe("Health Route Handler", () => { let handleHealth; beforeEach(async () => { mockExecute.mockClear(); const healthRoute = await import("../src/routes/health.js"); handleHealth = healthRoute.handleHealth; }); it("should return status 200 and ok when DB is healthy", async () => { const req = new Request("http://localhost:3000/health"); const res = await handleHealth(req); expect(res.status).toBe(200); const body = await res.json(); expect(body).toEqual({ status: "ok" }); expect(mockExecute).toHaveBeenCalled(); }); it("should return status 500 and error details when DB health check fails", async () => { mockExecute.mockImplementationOnce(() => Promise.reject(new Error("DB Connection Failed"))); const req = new Request("http://localhost:3000/health"); const res = await handleHealth(req); expect(res.status).toBe(500); const body = await res.json(); expect(body.status).toBe("error"); expect(body.error).toBe("DB Connection Failed"); }); }); RŴx import { describe, it, expect, beforeEach, afterEach, mock, spyOn } from "bun:test"; import { checkRateLimit, cleanupRateLimitCache } from "../src/utils/rateLimit.js"; import logger from "../src/utils/logger.js"; // Spy on logger.warn const warnSpy = spyOn(logger, "warn"); describe("Rate Limiter", () => { beforeEach(() => { warnSpy.mockClear(); // Set custom env variables for predictable tests process.env.RATE_LIMIT_WINDOW_MS = "100"; // 100ms window process.env.RATE_LIMIT_MAX_REQUESTS = "3"; // max 3 requests }); afterEach(() => { delete process.env.RATE_LIMIT_WINDOW_MS; delete process.env.RATE_LIMIT_MAX_REQUESTS; }); it("should allow requests under the limit", () => { const key = "user-1"; expect(checkRateLimit(key)).toBe(true); expect(checkRateLimit(key)).toBe(true); expect(checkRateLimit(key)).toBe(true); expect(warnSpy).not.toHaveBeenCalled(); }); it("should block requests exceeding the limit and log a warning", () => { const key = "user-2"; expect(checkRateLimit(key)).toBe(true); expect(checkRateLimit(key)).toBe(true); expect(checkRateLimit(key)).toBe(true); // 4th request exceeds limit of 3 expect(checkRateLimit(key)).toBe(false); expect(warnSpy).toHaveBeenCalled(); const callArgs = warnSpy.mock.calls[0]; expect(callArgs[0]).toBe("Rate limit exceeded"); expect(callArgs[1].key).toBe(key); }); it("should reset request count after the window passes", async () => { const key = "user-3"; expect(checkRateLimit(key)).toBe(true); expect(checkRateLimit(key)).toBe(true); expect(checkRateLimit(key)).toBe(true); expect(checkRateLimit(key)).toBe(false); // blocked // Wait for window to expire (100ms) await new Promise((resolve) => setTimeout(resolve, 110)); // Should be allowed again expect(checkRateLimit(key)).toBe(true); }); it("should cleanup rate limit cache of expired keys", async () => { const key1 = "cleanup-1"; const key2 = "cleanup-2"; // Populate keys expect(checkRateLimit(key1)).toBe(true); expect(checkRateLimit(key2)).toBe(true); // Run cleanup immediately (none should be expired yet as 100ms hasn't passed) cleanupRateLimitCache(); // Verify still tracked (counts shouldn't reset, e.g., if we consume remaining limits) expect(checkRateLimit(key1)).toBe(true); // request 2 expect(checkRateLimit(key1)).toBe(true); // request 3 expect(checkRateLimit(key1)).toBe(false); // request 4 (blocked) // Wait for window to expire await new Promise((resolve) => setTimeout(resolve, 110)); // Run cleanup cleanupRateLimitCache(); // Since they were deleted from the map, they should be initialized as new records // If they were cleaned up, we should be able to do 3 requests again expect(checkRateLimit(key1)).toBe(true); // 1 expect(checkRateLimit(key1)).toBe(true); // 2 expect(checkRateLimit(key1)).toBe(true); // 3 expect(checkRateLimit(key1)).toBe(false); // 4 (blocked) }); }); e:Hxvimport { describe, it, expect, beforeEach, afterEach, mock, spyOn } from "bun:test"; import logger from "../src/utils/logger.js"; import { config } from "../src/env.js"; // Mock Telegraf and fetch mock.module("telegraf", () => { return { Telegraf: class { constructor(token) { this.token = token; this.api = { sendPhoto: mock(() => Promise.resolve({ message_id: 12345, photo: [ { file_id: "photo_id_low", file_unique_id: "unique_id_low" }, { file_id: "photo_id_high", file_unique_id: "unique_id_high" } ] })) }; } } }; }); const infoSpy = spyOn(logger, "info"); const errorSpy = spyOn(logger, "error"); describe("Telegram API Utilities", () => { let forwardToStorage, getFileInfo, getBot; beforeEach(async () => { infoSpy.mockClear(); errorSpy.mockClear(); global.fetch = mock(() => Promise.resolve(new Response(JSON.stringify({ ok: true })))); // Import dynamically so mocking is applied first const telegramUtils = await import("../src/utils/telegram.js"); forwardToStorage = telegramUtils.forwardToStorage; getFileInfo = telegramUtils.getFileInfo; getBot = telegramUtils.getBot; }); afterEach(() => { delete global.fetch; }); describe("getBot", () => { it("should return the telegraf bot instance", () => { const bot = getBot(); expect(bot).toBeDefined(); expect(bot.api).toBeDefined(); }); }); describe("forwardToStorage", () => { it("should forward photo to storage chat and return file details", async () => { const chunk = Buffer.from("fake photo data"); const fileName = "test_photo.jpg"; const result = await forwardToStorage(chunk, fileName, false); expect(result).toEqual({ telegramFileId: "photo_id_high", telegramFileUniqueId: "unique_id_high", storageMessageId: 12345 }); expect(infoSpy).toHaveBeenCalledWith("File forwarded to storage", { fileName, message: 12345 }); }); it("should handle error when forwarding fails", async () => { const bot = getBot(); bot.api.sendPhoto = mock(() => Promise.reject(new Error("Telegram send failed"))); const chunk = Buffer.from("fake photo data"); const fileName = "test_photo.jpg"; await expect(forwardToStorage(chunk, fileName, false)).rejects.toThrow("Telegram send failed"); expect(errorSpy).toHaveBeenCalledWith("Failed to forward file to storage", { fileName, error: "Telegram send failed" }); }); }); describe("getFileInfo", () => { it("should fetch file details successfully", async () => { global.fetch = mock((url, init) => { if (url.endsWith("getFile")) { return Promise.resolve(new Response(JSON.stringify({ ok: true, result: { file_id: "some_file_id" } }))); } else if (url.endsWith("getInfo")) { return Promise.resolve(new Response(JSON.stringify({ ok: true, result: { file_size: 98765, mime_type: "image/jpeg", file_path: "photos/file_0.jpg" } }))); } return Promise.reject(new Error("Unknown URL")); }); const result = await getFileInfo("some_file_id", "some_unique_id"); expect(result).toEqual({ file_size: 98765, mime_type: "image/jpeg", file_path: "photos/file_0.jpg" }); }); it("should handle error when getFile fails", async () => { global.fetch = mock(() => Promise.resolve(new Response(JSON.stringify({ ok: false, description: "Bad Request: file_id invalid" })))); await expect(getFileInfo("invalid_file_id", "invalid_unique_id")).rejects.toThrow("Bad Request: file_id invalid"); expect(errorSpy).toHaveBeenCalled(); }); }); }); x import { describe, it, expect, mock, spyOn, beforeEach, afterEach } from "bun:test"; import logger from "../src/utils/logger.js"; // Mock db const mockInsert = mock(() => ({ values: mock(() => Promise.resolve()) })); mock.module("../src/db/index.js", () => ({ db: { insert: mockInsert }, files: {} })); // Mock nanoid mock.module("nanoid", () => ({ nanoid: () => "mocked-nanoid-id" })); // Mock telegram utils mock.module("../src/utils/telegram.js", () => ({ forwardToStorage: mock(() => Promise.resolve({ telegramFileId: "tg-file-id-123", telegramFileUniqueId: "tg-unique-id-abc", storageMessageId: 98765 })), getBot: () => ({ api: { getFile: mock(() => Promise.resolve({ file_id: "tg-file-id-123", file_size: 1000, mime_type: "image/jpeg" })) } }) })); describe("Upload Route Handler", () => { let handleUpload; beforeEach(async () => { mockInsert.mockClear(); const uploadRoute = await import("../src/routes/upload.js"); handleUpload = uploadRoute.handleUpload; }); it("should reject unsupported content types with 400 status", async () => { const req = new Request("http://localhost:3000/api/upload", { method: "POST", headers: { "content-type": "text/plain" }, body: "plain text data" }); const res = await handleUpload(req); expect(res.status).toBe(400); const body = await res.json(); expect(body.error).toContain("Unsupported content type"); }); it("should process JSON upload (base64) successfully", async () => { const req = new Request("http://localhost:3000/api/upload", { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify({ file: Buffer.from("hello world").toString("base64"), fileName: "test.txt" }) }); const res = await handleUpload(req); expect(res.status).toBe(200); const body = await res.json(); expect(body.public_id).toBe("mocked-nanoid-id"); expect(body.telegram_file_id).toBe("tg-file-id-123"); expect(body.telegram_file_unique_id).toBe("tg-unique-id-abc"); expect(body.file_name).toBe("test.txt"); expect(body.file_type).toBe("document"); }); it("should reject JSON upload without file key", async () => { const req = new Request("http://localhost:3000/api/upload", { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify({ fileName: "test.txt" }) }); const res = await handleUpload(req); expect(res.status).toBe(400); const body = await res.json(); expect(body.error).toContain("Invalid JSON"); }); it("should process multipart upload successfully", async () => { const formData = new FormData(); const fileBlob = new Blob([Buffer.from("multipart hello")], { type: "text/plain" }); formData.append("file", fileBlob, "test_multi.txt"); const req = new Request("http://localhost:3000/api/upload", { method: "POST", body: formData }); const res = await handleUpload(req); expect(res.status).toBe(200); const body = await res.json(); expect(body.public_id).toBe("mocked-nanoid-id"); expect(body.file_name).toBe("test_multi.txt"); }); }); IU*xU%beforeEach, afterAllAz 2 afterAll(() => { mock.restore(); }); }); 1 >x`un.lock1%K{a58黑&index.ts{,dTώsx 6ѦS=e$r9 JP)O=j;l83_100644 tsconfig.jsonI}rR%FS/xY`}]"&!package.jsonwv[j'Ol>8g]d7YId+x&100644 upload.js)Y  )ap5!k"x T#|Ux?W3(^yZ2 x%100644 logger.jsgT`x]ɲU:SEKd>xzMM@Oxo?;5n8.DQ#W7\b'>Fϓ'03)*WdZ@YUc-40000 testH_7VݰY쌈瓊)3Lx  sk8}, "peerltypescript": "^5. C'typescript": ["typescript@5.9.3", "", { "bin": { "tsc": "bin/tsc", "tsserver": "bin/tsserver" } }, "sha512-jl1vZzPDinLr9eUt3J/tB7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSwW } } V%xJ-drizzle-orm": "^0.29.06, "nanoid": "^5.0.48 } } ;FxB100644 env.jsM g` '~06~>40000 utilsze1SvߕQ{>yZ2B1x'100644 env.test.jsg3S.s(D_ B%sxXwl a*t) x 40000 utilsze1SvߕQ{>yZ2 ~kNx M)Hgx8(\6sɭyg-Q{' 5H RK) @x# teleuploader To install dependencies: ```bash bun install ``` To run: ```bash bun run index.ts ``` This project was created using `bun init` in bun v1.3.14. [Bun](https://bun.com) is a fast all-in-one JavaScript runtime. Mm x8{ "name": "teleuploader", "module": "index.ts", "type": "module", "private": true, "devDependencies": { "@types/bun": "latest" }, "peerDependencies": { "typescript": "^5" } } 4B:x(100644 .gitignore-'NW|ݟ0ad/ [100644 CLAUDE.mdvLٝi~~r( 100644 README.md6sɭyg-Q100644 bun.lock?;5n8.DQ#40000 docs?6'x3H۟100644 index.ts{,dTώsx 6Ѧ100644 package.json' 5H RK100644 tsconfig.jsonI}rR%~wڦx&40000 superpowersJJ5&(zx 40000 specsI*9йt菿 ix uz2xĉc;mAY