9drive 1.0.0

package/backend/dist/modules/files/file.routes.js

@@ -0,0 +1,1013 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fileRouter = void 0;
+const express_1 = require("express");
+const googleapis_1 = require("googleapis");
+const zod_1 = require("zod");
+const prisma_js_1 = require("../../config/prisma.js");
+const env_js_1 = require("../../config/env.js");
+const auth_middleware_js_1 = require("../../middleware/auth.middleware.js");
+const crypto_js_1 = require("../../utils/crypto.js");
+const google_service_js_1 = require("../google/google.service.js");
+const s3_service_js_1 = require("../s3/s3.service.js");
+const stream_file_js_1 = require("./stream-file.js");
+const stream_google_file_js_1 = require("./stream-google-file.js");
+const client_s3_1 = require("@aws-sdk/client-s3");
+const node_stream_1 = require("node:stream");
+const archiver_1 = require("archiver");
+const audit_js_1 = require("../../utils/audit.js");
+exports.fileRouter = (0, express_1.Router)();
+exports.fileRouter.get('/preview/:token', async (req, res, next) => {
+    try {
+        const token = String(req.params.token);
+        const preview = await prisma_js_1.prisma.filePreviewToken.findFirst({
+            where: { tokenHash: (0, crypto_js_1.hashToken)(token), expiresAt: { gt: new Date() } },
+            include: { file: { include: { connectedAccount: true } } },
+        });
+        if (!preview || preview.file.status !== 'active')
+            return res.status(404).json({ code: 'PREVIEW_NOT_FOUND', message: 'Preview token not found.' });
+        return (0, stream_file_js_1.streamProviderFile)(preview.file, req.headers.range, res, { disposition: 'inline' });
+    }
+    catch (error) {
+        return next(error);
+    }
+});
+exports.fileRouter.use(auth_middleware_js_1.requireAuth);
+exports.fileRouter.get('/suggestions', async (req, res, next) => {
+    try {
+        const query = zod_1.z.object({
+            q: zod_1.z.string().trim().max(255).optional(),
+            kind: zod_1.z.enum(['image', 'video', 'pdf', 'doc', 'archive']).optional(),
+            accountId: zod_1.z.string().optional(),
+            limit: zod_1.z.coerce.number().min(1).max(20).default(8),
+            modified: zod_1.z.enum(['today', '7d', '30d', 'year']).optional(),
+        }).parse(req.query);
+        const q = query.q || '';
+        if (!q && !query.kind && !query.modified) {
+            return res.json({ files: [], folders: [] });
+        }
+        const typeFilters = {
+            image: ['image/jpeg', 'image/png', 'image/gif', 'image/webp', 'image/svg+xml'],
+            video: ['video/mp4', 'video/mpeg', 'video/ogg', 'video/quicktime', 'video/webm'],
+            pdf: ['application/pdf'],
+            doc: ['application/msword', 'application/vnd.openxmlformats-officedocument.wordprocessingml.document', 'text/plain'],
+            archive: ['application/zip', 'application/x-rar-compressed', 'application/x-tar', 'application/x-7z-compressed']
+        };
+        let modifiedDateFilter;
+        if (query.modified) {
+            const now = new Date();
+            if (query.modified === 'today') {
+                modifiedDateFilter = new Date(now.getFullYear(), now.getMonth(), now.getDate());
+            }
+            else if (query.modified === '7d') {
+                modifiedDateFilter = new Date(now.getTime() - 7 * 24 * 60 * 60 * 1000);
+            }
+            else if (query.modified === '30d') {
+                modifiedDateFilter = new Date(now.getTime() - 30 * 24 * 60 * 60 * 1000);
+            }
+            else if (query.modified === 'year') {
+                modifiedDateFilter = new Date(now.getFullYear(), 0, 1);
+            }
+        }
+        const fileWhere = {
+            userId: req.user.id,
+            status: 'active',
+            ...(q ? { name: { contains: q } } : {}),
+            ...(query.accountId && query.accountId !== 'all' ? { connectedAccountId: query.accountId } : {}),
+            ...(query.kind ? { mimeType: { in: typeFilters[query.kind] || [] } } : {}),
+            ...(modifiedDateFilter ? { updatedAt: { gte: modifiedDateFilter } } : {})
+        };
+        const folderWhere = {
+            userId: req.user.id,
+            deletedAt: null,
+            ...(q ? { name: { contains: q } } : {}),
+            ...(query.accountId && query.accountId !== 'all' ? { connectedAccountId: query.accountId } : {}),
+            ...(modifiedDateFilter ? { updatedAt: { gte: modifiedDateFilter } } : {})
+        };
+        const [files, folders] = await Promise.all([
+            prisma_js_1.prisma.file.findMany({
+                where: fileWhere,
+                take: query.limit,
+                select: {
+                    id: true,
+                    name: true,
+                    mimeType: true,
+                    sizeBytes: true,
+                    folderId: true,
+                    provider: true,
+                    providerFileId: true,
+                    updatedAt: true,
+                    createdAt: true,
+                    connectedAccount: {
+                        select: { id: true, email: true, provider: true, displayName: true }
+                    },
+                    folder: {
+                        select: { id: true, name: true }
+                    }
+                },
+                orderBy: { updatedAt: 'desc' }
+            }),
+            !query.kind ? prisma_js_1.prisma.folder.findMany({
+                where: folderWhere,
+                take: 3,
+                select: {
+                    id: true,
+                    name: true,
+                    color: true,
+                    iconUrl: true,
+                    updatedAt: true,
+                    createdAt: true,
+                    connectedAccount: {
+                        select: { id: true, email: true, provider: true, displayName: true }
+                    }
+                },
+                orderBy: { updatedAt: 'desc' }
+            }) : Promise.resolve([])
+        ]);
+        return res.json({
+            files: files.map((file) => ({
+                ...file,
+                sizeBytes: file.sizeBytes.toString(),
+                driveUrl: file.provider === 'google_drive' && file.providerFileId
+                    ? `https://drive.google.com/file/d/${file.providerFileId}/view?usp=sharing`
+                    : null,
+            })),
+            folders
+        });
+    }
+    catch (error) {
+        return next(error);
+    }
+});
+exports.fileRouter.get('/', async (req, res, next) => {
+    try {
+        const query = zod_1.z.object({
+            folderId: zod_1.z.string().optional(),
+            q: zod_1.z.string().trim().max(255).optional(),
+            kind: zod_1.z.enum(['image', 'video', 'pdf', 'doc', 'archive']).optional(),
+            accountId: zod_1.z.string().optional(),
+            minSize: zod_1.z.coerce.number().optional(),
+            maxSize: zod_1.z.coerce.number().optional(),
+            startDate: zod_1.z.string().datetime().optional(),
+            endDate: zod_1.z.string().datetime().optional(),
+            modified: zod_1.z.enum(['today', '7d', '30d', 'year']).optional(),
+            limit: zod_1.z.coerce.number().min(1).max(500).optional(),
+        }).parse(req.query);
+        const typeFilters = {
+            image: ['image/jpeg', 'image/png', 'image/gif', 'image/webp', 'image/svg+xml'],
+            video: ['video/mp4', 'video/mpeg', 'video/ogg', 'video/quicktime', 'video/webm'],
+            pdf: ['application/pdf'],
+            doc: ['application/msword', 'application/vnd.openxmlformats-officedocument.wordprocessingml.document', 'text/plain'],
+            archive: ['application/zip', 'application/x-rar-compressed', 'application/x-tar', 'application/x-7z-compressed']
+        };
+        let modifiedDateFilter;
+        if (query.modified) {
+            const now = new Date();
+            if (query.modified === 'today') {
+                modifiedDateFilter = new Date(now.getFullYear(), now.getMonth(), now.getDate());
+            }
+            else if (query.modified === '7d') {
+                modifiedDateFilter = new Date(now.getTime() - 7 * 24 * 60 * 60 * 1000);
+            }
+            else if (query.modified === '30d') {
+                modifiedDateFilter = new Date(now.getTime() - 30 * 24 * 60 * 60 * 1000);
+            }
+            else if (query.modified === 'year') {
+                modifiedDateFilter = new Date(now.getFullYear(), 0, 1);
+            }
+        }
+        const where = {
+            userId: req.user.id,
+            status: 'active',
+            ...(query.folderId ? { folderId: query.folderId } : {}),
+            ...(query.q ? { name: { contains: query.q } } : {}),
+            ...(query.accountId && query.accountId !== 'all' ? { connectedAccountId: query.accountId } : {}),
+            ...(query.kind ? { mimeType: { in: typeFilters[query.kind] || [] } } : {}),
+            ...(modifiedDateFilter ? { updatedAt: { gte: modifiedDateFilter } } : {}),
+            ...(query.minSize !== undefined || query.maxSize !== undefined ? {
+                sizeBytes: {
+                    ...(query.minSize !== undefined ? { gte: BigInt(query.minSize) } : {}),
+                    ...(query.maxSize !== undefined ? { lte: BigInt(query.maxSize) } : {})
+                }
+            } : {}),
+            ...(query.startDate || query.endDate ? {
+                createdAt: {
+                    ...(query.startDate ? { gte: new Date(query.startDate) } : {}),
+                    ...(query.endDate ? { lte: new Date(query.endDate) } : {})
+                }
+            } : {})
+        };
+        const files = await prisma_js_1.prisma.file.findMany({
+            where,
+            take: query.limit ?? 250,
+            include: {
+                connectedAccount: { select: { id: true, email: true, provider: true } },
+                folder: { select: { id: true, name: true } }
+            },
+            orderBy: { createdAt: 'desc' }
+        });
+        return res.json({
+            files: files.map((file) => ({
+                ...file,
+                sizeBytes: file.sizeBytes.toString(),
+                driveUrl: file.provider === 'google_drive' && file.providerFileId
+                    ? `https://drive.google.com/file/d/${file.providerFileId}/view?usp=sharing`
+                    : null,
+            })),
+        });
+    }
+    catch (error) {
+        return next(error);
+    }
+});
+const batchFileSchema = zod_1.z.object({ fileIds: zod_1.z.array(zod_1.z.string().min(1)).min(1).max(100) });
+exports.fileRouter.patch('/batch', async (req, res, next) => {
+    try {
+        const body = batchFileSchema.extend({ folderId: zod_1.z.string().nullable().optional() }).parse(req.body);
+        if (body.folderId)
+            await prisma_js_1.prisma.folder.findFirstOrThrow({ where: { id: body.folderId, userId: req.user.id, deletedAt: null } });
+        const result = await prisma_js_1.prisma.file.updateMany({ where: { id: { in: body.fileIds }, userId: req.user.id, status: 'active' }, data: { folderId: body.folderId ?? null } });
+        await (0, audit_js_1.createAuditLog)(req.user.id, 'MOVE_FILES', 'file', undefined, { count: result.count, folderId: body.folderId });
+        return res.json({ status: 'ok', moved: result.count });
+    }
+    catch (error) {
+        return next(error);
+    }
+});
+exports.fileRouter.delete('/batch', async (req, res, next) => {
+    try {
+        const body = batchFileSchema.parse(req.body);
+        const files = await prisma_js_1.prisma.file.findMany({ where: { id: { in: body.fileIds }, userId: req.user.id, status: 'active' } });
+        const result = await prisma_js_1.prisma.file.updateMany({
+            where: { id: { in: body.fileIds }, userId: req.user.id, status: 'active' },
+            data: { status: 'deleted', deletedAt: new Date() }
+        });
+        for (const f of files) {
+            await (0, audit_js_1.createAuditLog)(req.user.id, 'TRASH_FILE', 'file', f.id, { name: f.name });
+        }
+        return res.json({ status: 'ok', deleted: result.count });
+    }
+    catch (error) {
+        return next(error);
+    }
+});
+exports.fileRouter.get('/trash', async (req, res, next) => {
+    try {
+        const query = zod_1.z.object({
+            q: zod_1.z.string().trim().max(255).optional(),
+            accountId: zod_1.z.string().optional()
+        }).parse(req.query);
+        const files = await prisma_js_1.prisma.file.findMany({
+            where: {
+                userId: req.user.id,
+                status: 'deleted',
+                ...(query.q ? { name: { contains: query.q } } : {}),
+                ...(query.accountId ? { connectedAccountId: query.accountId } : {})
+            },
+            include: {
+                connectedAccount: { select: { id: true, email: true, provider: true } },
+                folder: { select: { id: true, name: true } }
+            },
+            orderBy: { deletedAt: 'desc' }
+        });
+        return res.json({ files: files.map((file) => ({ ...file, sizeBytes: file.sizeBytes.toString() })) });
+    }
+    catch (error) {
+        return next(error);
+    }
+});
+exports.fileRouter.get('/starred', async (req, res, next) => {
+    try {
+        const accountId = req.query.accountId;
+        const googleAccounts = await prisma_js_1.prisma.connectedAccount.findMany({
+            where: {
+                userId: req.user.id,
+                provider: 'google_drive',
+                status: 'connected',
+                ...(accountId ? { id: accountId } : {})
+            },
+        });
+        const files = [];
+        for (const account of googleAccounts) {
+            try {
+                const accountStarred = await (0, google_service_js_1.getGoogleStarredFiles)(account.id, req.user.id);
+                files.push(...accountStarred);
+            }
+            catch (err) {
+                console.error('Failed to get starred files for account', account.id, err.message);
+            }
+        }
+        return res.json({ files });
+    }
+    catch (error) {
+        return next(error);
+    }
+});
+exports.fileRouter.get('/recent', async (req, res, next) => {
+    try {
+        const accountId = req.query.accountId;
+        const googleAccounts = await prisma_js_1.prisma.connectedAccount.findMany({
+            where: {
+                userId: req.user.id,
+                provider: 'google_drive',
+                status: 'connected',
+                ...(accountId ? { id: accountId } : {})
+            },
+        });
+        const files = [];
+        for (const account of googleAccounts) {
+            try {
+                const accountRecent = await (0, google_service_js_1.getGoogleRecentFiles)(account.id, req.user.id);
+                files.push(...accountRecent);
+            }
+            catch (err) {
+                console.error('Failed to get recent files for account', account.id, err.message);
+            }
+        }
+        if (files.length === 0) {
+            const dbFiles = await prisma_js_1.prisma.file.findMany({
+                where: {
+                    userId: req.user.id,
+                    status: 'active',
+                    ...(accountId ? { connectedAccountId: accountId } : {})
+                },
+                include: {
+                    connectedAccount: { select: { id: true, email: true, provider: true } },
+                    folder: { select: { id: true, name: true } },
+                },
+                orderBy: { updatedAt: 'desc' },
+                take: 50,
+            });
+            files.push(...dbFiles.map((file) => ({
+                ...file,
+                sizeBytes: file.sizeBytes.toString(),
+                viewedAt: file.updatedAt.toISOString(),
+            })));
+        }
+        return res.json({ files });
+    }
+    catch (error) {
+        return next(error);
+    }
+});
+exports.fileRouter.get('/shared', async (req, res, next) => {
+    try {
+        const accountId = req.query.accountId;
+        const googleAccounts = await prisma_js_1.prisma.connectedAccount.findMany({
+            where: {
+                userId: req.user.id,
+                provider: 'google_drive',
+                status: 'connected',
+                ...(accountId ? { id: accountId } : {})
+            },
+        });
+        const files = [];
+        const folders = [];
+        for (const account of googleAccounts) {
+            try {
+                const result = await (0, google_service_js_1.getGoogleSharedFiles)(account.id, req.user.id);
+                files.push(...result.files);
+                folders.push(...result.folders);
+            }
+            catch (err) {
+                console.error('Failed to get shared files for account', account.id, err.message);
+            }
+        }
+        return res.json({ files, folders });
+    }
+    catch (error) {
+        return next(error);
+    }
+});
+exports.fileRouter.post('/:id/star', async (req, res, next) => {
+    try {
+        const body = zod_1.z.object({ starred: zod_1.z.boolean() }).parse(req.body);
+        const fileId = String(req.params.id);
+        const file = await prisma_js_1.prisma.file.findFirst({
+            where: { id: fileId, userId: req.user.id },
+            include: { connectedAccount: true },
+        });
+        if (!file)
+            return res.status(404).json({ message: 'File not found' });
+        if (file.provider === 'google_drive' && file.connectedAccount) {
+            await (0, google_service_js_1.setGoogleFileStarred)(file.connectedAccountId, req.user.id, file.providerFileId, body.starred);
+        }
+        await (0, audit_js_1.createAuditLog)(req.user.id, body.starred ? 'STAR_FILE' : 'UNSTAR_FILE', 'file', file.id, { name: file.name });
+        return res.json({ status: 'ok', starred: body.starred });
+    }
+    catch (error) {
+        return next(error);
+    }
+});
+exports.fileRouter.post('/batch/restore', async (req, res, next) => {
+    try {
+        const body = batchFileSchema.parse(req.body);
+        const files = await prisma_js_1.prisma.file.findMany({ where: { id: { in: body.fileIds }, userId: req.user.id, status: 'deleted' } });
+        const result = await prisma_js_1.prisma.file.updateMany({
+            where: { id: { in: body.fileIds }, userId: req.user.id, status: 'deleted' },
+            data: { status: 'active', deletedAt: null }
+        });
+        for (const f of files) {
+            await (0, audit_js_1.createAuditLog)(req.user.id, 'RESTORE_FILE', 'file', f.id, { name: f.name });
+        }
+        return res.json({ status: 'ok', restored: result.count });
+    }
+    catch (error) {
+        return next(error);
+    }
+});
+exports.fileRouter.delete('/batch/permanent', async (req, res, next) => {
+    try {
+        const body = batchFileSchema.parse(req.body);
+        const files = await prisma_js_1.prisma.file.findMany({
+            where: { id: { in: body.fileIds }, userId: req.user.id, status: 'deleted' },
+            include: { connectedAccount: true }
+        });
+        const deletedIds = [];
+        const syncedAccountIds = new Set();
+        const failed = [];
+        for (const file of files) {
+            try {
+                if (file.provider === 's3') {
+                    await (0, s3_service_js_1.deleteS3Object)(file);
+                }
+                else {
+                    const auth = await (0, google_service_js_1.getAuthedGoogleClient)(file.connectedAccount);
+                    const drive = googleapis_1.google.drive({ version: 'v3', auth });
+                    await drive.files.delete({ fileId: file.providerFileId });
+                }
+                deletedIds.push(file.id);
+                syncedAccountIds.add(file.connectedAccountId);
+                await (0, audit_js_1.createAuditLog)(req.user.id, 'PERMANENT_DELETE_FILE', 'file', file.id, { name: file.name });
+            }
+            catch (error) {
+                failed.push({ fileId: file.id, message: error instanceof Error ? error.message : 'Delete failed' });
+            }
+        }
+        if (deletedIds.length > 0) {
+            await prisma_js_1.prisma.file.deleteMany({
+                where: { id: { in: deletedIds }, userId: req.user.id }
+            });
+        }
+        for (const accountId of syncedAccountIds) {
+            const account = files.find((file) => file.connectedAccountId === accountId)?.connectedAccount;
+            if (account?.provider === 's3') {
+                await (0, s3_service_js_1.syncS3Quota)(accountId).catch(() => undefined);
+            }
+            else {
+                await (0, google_service_js_1.syncGoogleQuota)(accountId).catch(() => undefined);
+            }
+        }
+        if (deletedIds.length === 0 && failed.length > 0) {
+            return res.status(400).json({ code: 'FILES_DELETE_FAILED', message: 'No files were permanently deleted.', deleted: 0, failed });
+        }
+        return res.json({ status: 'ok', deleted: deletedIds.length, failed });
+    }
+    catch (error) {
+        return next(error);
+    }
+});
+exports.fileRouter.get('/shared-links', async (req, res, next) => {
+    try {
+        const shares = await prisma_js_1.prisma.fileShare.findMany({
+            where: { userId: req.user.id, enabled: true, OR: [{ expiresAt: null }, { expiresAt: { gt: new Date() } }] },
+            include: { file: { include: { connectedAccount: { select: { email: true, provider: true } }, folder: { select: { id: true, name: true } } } } },
+            orderBy: { createdAt: 'desc' },
+        });
+        return res.json({
+            shares: shares.filter((share) => share.file.status === 'active').map((share) => {
+                const url = share.token ? `${env_js_1.env.FRONTEND_URL}/public/files/${share.token}` : null;
+                return {
+                    id: share.id,
+                    url,
+                    createdAt: share.createdAt.toISOString(),
+                    expiresAt: share.expiresAt?.toISOString() ?? null,
+                    file: { ...share.file, sizeBytes: share.file.sizeBytes.toString() },
+                };
+            })
+        });
+    }
+    catch (error) {
+        return next(error);
+    }
+});
+exports.fileRouter.post('/sync-google', async (req, res, next) => {
+    try {
+        const body = zod_1.z.object({ connectedAccountId: zod_1.z.string().min(1).optional() }).parse(req.body ?? {});
+        const accounts = await prisma_js_1.prisma.connectedAccount.findMany({
+            where: { userId: req.user.id, provider: 'google_drive', status: 'connected', ...(body.connectedAccountId ? { id: body.connectedAccountId } : {}) },
+            select: { id: true },
+        });
+        const results = [];
+        for (const account of accounts)
+            results.push(await (0, google_service_js_1.syncGoogleAppFolderFiles)(account.id, req.user.id));
+        return res.json({
+            status: 'ok',
+            results,
+        });
+    }
+    catch (error) {
+        return next(error);
+    }
+});
+exports.fileRouter.get('/:id', async (req, res, next) => {
+    try {
+        const fileId = String(req.params.id);
+        const file = await prisma_js_1.prisma.file.findFirstOrThrow({ where: { id: fileId, userId: req.user.id }, include: { connectedAccount: { select: { id: true, email: true, provider: true } }, folder: { select: { id: true, name: true } } } });
+        return res.json({ file: { ...file, sizeBytes: file.sizeBytes.toString() } });
+    }
+    catch (error) {
+        return next(error);
+    }
+});
+exports.fileRouter.patch('/:id', async (req, res, next) => {
+    try {
+        const body = zod_1.z.object({ name: zod_1.z.string().min(1).max(255).optional(), folderId: zod_1.z.string().nullable().optional() }).parse(req.body);
+        const fileId = String(req.params.id);
+        const file = await prisma_js_1.prisma.file.findFirstOrThrow({ where: { id: fileId, userId: req.user.id }, include: { connectedAccount: true } });
+        const drive = file.provider === 's3' ? null : googleapis_1.google.drive({ version: 'v3', auth: await (0, google_service_js_1.getAuthedGoogleClient)(file.connectedAccount) });
+        if (body.folderId)
+            await prisma_js_1.prisma.folder.findFirstOrThrow({ where: { id: body.folderId, userId: req.user.id, deletedAt: null } });
+        if (body.name && drive)
+            await drive.files.update({ fileId: file.providerFileId, requestBody: { name: body.name } });
+        const updated = await prisma_js_1.prisma.file.update({ where: { id: file.id }, data: { ...(body.name ? { name: body.name } : {}), ...(body.folderId !== undefined ? { folderId: body.folderId } : {}) }, include: { connectedAccount: { select: { id: true, email: true, provider: true } }, folder: { select: { id: true, name: true } } } });
+        await (0, audit_js_1.createAuditLog)(req.user.id, 'UPDATE_FILE', 'file', updated.id, { name: updated.name, updates: body });
+        return res.json({ file: { ...updated, sizeBytes: updated.sizeBytes.toString() } });
+    }
+    catch (error) {
+        return next(error);
+    }
+});
+exports.fileRouter.post('/:id/share', async (req, res, next) => {
+    try {
+        const fileId = String(req.params.id);
+        const file = await prisma_js_1.prisma.file.findFirst({
+            where: {
+                OR: [
+                    { id: fileId, userId: req.user.id },
+                    { providerFileId: fileId, userId: req.user.id },
+                    { id: fileId },
+                    { providerFileId: fileId },
+                ],
+                status: 'active',
+            },
+            include: { connectedAccount: true },
+        });
+        if (!file) {
+            const folder = await prisma_js_1.prisma.folder.findFirst({
+                where: {
+                    OR: [
+                        { id: fileId, userId: req.user.id },
+                        { providerFolderId: fileId, userId: req.user.id },
+                        { id: fileId },
+                        { providerFolderId: fileId },
+                    ],
+                    deletedAt: null,
+                },
+            });
+            if (folder) {
+                const folderUrl = folder.providerFolderId ? `https://drive.google.com/drive/folders/${folder.providerFolderId}` : `${env_js_1.env.FRONTEND_URL}/all-files?folderId=${folder.id}`;
+                return res.status(200).json({ url: folderUrl, isGoogleDrive: Boolean(folder.providerFolderId) });
+            }
+            return res.status(404).json({ code: 'NOT_FOUND', message: 'File or folder not found.' });
+        }
+        if (file.provider === 'google_drive' && file.providerFileId) {
+            try {
+                if (file.connectedAccount) {
+                    const auth = await (0, google_service_js_1.getAuthedGoogleClient)(file.connectedAccount);
+                    const drive = googleapis_1.google.drive({ version: 'v3', auth });
+                    await drive.permissions.create({
+                        fileId: file.providerFileId,
+                        requestBody: { role: 'reader', type: 'anyone' },
+                        supportsAllDrives: true,
+                    });
+                }
+            }
+            catch (err) {
+                console.error('Google permission grant error:', err.message || err);
+            }
+            const gdriveUrl = `https://drive.google.com/file/d/${file.providerFileId}/view?usp=sharing`;
+            return res.status(200).json({ url: gdriveUrl, isGoogleDrive: true });
+        }
+        const existingShare = await prisma_js_1.prisma.fileShare.findFirst({
+            where: { fileId: file.id, userId: req.user.id, enabled: true, OR: [{ expiresAt: null }, { expiresAt: { gt: new Date() } }] },
+            orderBy: { createdAt: 'desc' },
+        });
+        let shareId = existingShare?.id;
+        let token = existingShare?.token;
+        if (!existingShare) {
+            token = (0, crypto_js_1.randomToken)(32);
+            const share = await prisma_js_1.prisma.fileShare.create({ data: { fileId: file.id, userId: req.user.id, token, tokenHash: (0, crypto_js_1.hashToken)(token) } });
+            shareId = share.id;
+        }
+        return res.status(existingShare ? 200 : 201).json({ url: `${env_js_1.env.FRONTEND_URL}/public/files/${token}`, shareId });
+    }
+    catch (error) {
+        return next(error);
+    }
+});
+exports.fileRouter.get('/:id/permissions', async (req, res, next) => {
+    try {
+        const fileId = String(req.params.id);
+        const file = await prisma_js_1.prisma.file.findFirst({
+            where: {
+                OR: [
+                    { id: fileId, userId: req.user.id },
+                    { providerFileId: fileId, userId: req.user.id },
+                    { id: fileId },
+                    { providerFileId: fileId },
+                ],
+                status: 'active',
+            },
+            include: { connectedAccount: true },
+        });
+        if (!file) {
+            return res.status(404).json({ code: 'NOT_FOUND', message: 'File not found.' });
+        }
+        if (file.provider === 'google_drive' && file.providerFileId) {
+            let generalAccess = 'restricted';
+            let role = 'reader';
+            let isInherited = false;
+            let inheritedFrom = null;
+            let parentName = null;
+            if (file.connectedAccount) {
+                try {
+                    const auth = await (0, google_service_js_1.getAuthedGoogleClient)(file.connectedAccount);
+                    const drive = googleapis_1.google.drive({ version: 'v3', auth });
+                    const permList = await drive.permissions.list({
+                        fileId: file.providerFileId,
+                        fields: 'permissions(id, role, type, permissionDetails)',
+                        supportsAllDrives: true,
+                    });
+                    const anyonePerm = permList.data.permissions?.find((p) => p.type === 'anyone');
+                    if (anyonePerm) {
+                        generalAccess = 'anyone';
+                        role = anyonePerm.role ?? 'reader';
+                        const inheritedDetail = anyonePerm?.permissionDetails?.find((d) => d.inherited);
+                        isInherited = Boolean(anyonePerm?.inherited || inheritedDetail);
+                        if (isInherited) {
+                            const origin = await (0, google_service_js_1.findInheritedPermissionOrigin)(drive, file.providerFileId);
+                            if (origin) {
+                                inheritedFrom = origin.id;
+                                parentName = origin.name;
+                            }
+                        }
+                    }
+                }
+                catch (err) {
+                    console.error('Failed to query Google Drive permissions:', err.message || err);
+                }
+            }
+            const driveUrl = `https://drive.google.com/file/d/${file.providerFileId}/view?usp=sharing`;
+            return res.json({
+                fileId: file.id,
+                fileName: file.name,
+                provider: file.provider,
+                generalAccess,
+                role,
+                isInherited,
+                inheritedFrom,
+                parentName,
+                shareUrl: driveUrl,
+                driveUrl,
+            });
+        }
+        const share = await prisma_js_1.prisma.fileShare.findFirst({
+            where: { fileId: file.id, userId: req.user.id, enabled: true, OR: [{ expiresAt: null }, { expiresAt: { gt: new Date() } }] },
+            orderBy: { createdAt: 'desc' },
+        });
+        const generalAccess = share ? 'anyone' : 'restricted';
+        const shareUrl = share?.token ? `${env_js_1.env.FRONTEND_URL}/public/files/${share.token}` : null;
+        return res.json({
+            fileId: file.id,
+            fileName: file.name,
+            provider: file.provider,
+            generalAccess,
+            role: 'reader',
+            isInherited: false,
+            inheritedFrom: null,
+            parentName: null,
+            shareUrl,
+            driveUrl: null,
+        });
+    }
+    catch (error) {
+        return next(error);
+    }
+});
+exports.fileRouter.put('/:id/permissions', async (req, res, next) => {
+    try {
+        const fileId = String(req.params.id);
+        const body = zod_1.z.object({
+            generalAccess: zod_1.z.enum(['restricted', 'anyone']),
+            role: zod_1.z.enum(['reader', 'commenter', 'writer']).default('reader'),
+            cascadeParent: zod_1.z.boolean().optional(),
+        }).parse(req.body);
+        const file = await prisma_js_1.prisma.file.findFirst({
+            where: {
+                OR: [
+                    { id: fileId, userId: req.user.id },
+                    { providerFileId: fileId, userId: req.user.id },
+                    { id: fileId },
+                    { providerFileId: fileId },
+                ],
+                status: 'active',
+            },
+            include: { connectedAccount: true },
+        });
+        if (!file) {
+            return res.status(404).json({ code: 'NOT_FOUND', message: 'File not found.' });
+        }
+        if (file.provider === 'google_drive' && file.providerFileId) {
+            if (!file.connectedAccount) {
+                return res.status(400).json({ code: 'ACCOUNT_NOT_FOUND', message: 'Connected Google account not found.' });
+            }
+            const auth = await (0, google_service_js_1.getAuthedGoogleClient)(file.connectedAccount);
+            const drive = googleapis_1.google.drive({ version: 'v3', auth });
+            const permList = await drive.permissions.list({
+                fileId: file.providerFileId,
+                fields: 'permissions(id, role, type, permissionDetails)',
+                supportsAllDrives: true,
+            });
+            const anyonePerm = permList.data.permissions?.find((p) => p.type === 'anyone');
+            const inheritedDetail = anyonePerm?.permissionDetails?.find((d) => d.inherited);
+            const isInherited = Boolean(anyonePerm?.inherited || inheritedDetail);
+            if (body.generalAccess === 'restricted') {
+                if (anyonePerm?.id) {
+                    if (isInherited) {
+                        const origin = await (0, google_service_js_1.findInheritedPermissionOrigin)(drive, file.providerFileId);
+                        const targetOriginId = origin?.id;
+                        if (body.cascadeParent && targetOriginId) {
+                            try {
+                                await drive.permissions.delete({
+                                    fileId: targetOriginId,
+                                    permissionId: origin?.permissionId ?? anyonePerm.id,
+                                    supportsAllDrives: true,
+                                });
+                            }
+                            catch (delParentErr) {
+                                console.error('Failed to cascade delete permission on parent:', delParentErr);
+                                return res.status(400).json({
+                                    code: 'FAILED_CASCADE_PARENT',
+                                    message: 'Gagal mengubah izin folder induk: ' + (delParentErr.message || delParentErr),
+                                });
+                            }
+                        }
+                        else {
+                            return res.status(400).json({
+                                code: 'PERMISSION_INHERITED',
+                                inheritedFrom: targetOriginId ?? null,
+                                parentName: origin?.name ?? null,
+                                message: 'Hak akses publik diwarisi dari folder induk di Google Drive. Untuk mengubahnya menjadi Restricted, ubah pengaturan sharing pada folder induknya.',
+                            });
+                        }
+                    }
+                    else {
+                        try {
+                            await drive.permissions.delete({
+                                fileId: file.providerFileId,
+                                permissionId: anyonePerm.id,
+                                supportsAllDrives: true,
+                            });
+                        }
+                        catch (deleteErr) {
+                            const msg = deleteErr?.message || String(deleteErr);
+                            if (msg.includes('inherited') || msg.includes('cannotDeletePermission')) {
+                                const origin = await (0, google_service_js_1.findInheritedPermissionOrigin)(drive, file.providerFileId);
+                                if (body.cascadeParent && origin?.id) {
+                                    try {
+                                        await drive.permissions.delete({
+                                            fileId: origin.id,
+                                            permissionId: origin.permissionId,
+                                            supportsAllDrives: true,
+                                        });
+                                    }
+                                    catch (cascadeErr) {
+                                        return res.status(400).json({
+                                            code: 'FAILED_CASCADE_PARENT',
+                                            message: 'Gagal mengubah izin folder induk: ' + (cascadeErr.message || cascadeErr),
+                                        });
+                                    }
+                                }
+                                else {
+                                    return res.status(400).json({
+                                        code: 'PERMISSION_INHERITED',
+                                        inheritedFrom: origin?.id ?? null,
+                                        parentName: origin?.name ?? null,
+                                        message: 'Hak akses publik diwarisi dari folder induk di Google Drive. Untuk mengubahnya menjadi Restricted, ubah pengaturan sharing pada folder induknya.',
+                                    });
+                                }
+                            }
+                            else {
+                                throw deleteErr;
+                            }
+                        }
+                    }
+                }
+            }
+            else {
+                if (anyonePerm?.id) {
+                    if (anyonePerm.role !== body.role) {
+                        await drive.permissions.update({
+                            fileId: file.providerFileId,
+                            permissionId: anyonePerm.id,
+                            requestBody: { role: body.role },
+                            supportsAllDrives: true,
+                        });
+                    }
+                }
+                else {
+                    await drive.permissions.create({
+                        fileId: file.providerFileId,
+                        requestBody: { role: body.role, type: 'anyone' },
+                        supportsAllDrives: true,
+                    });
+                }
+            }
+            const driveUrl = `https://drive.google.com/file/d/${file.providerFileId}/view?usp=sharing`;
+            return res.json({
+                status: 'ok',
+                generalAccess: body.generalAccess,
+                role: body.role,
+                isInherited: body.generalAccess === 'restricted' ? false : isInherited,
+                shareUrl: driveUrl,
+                driveUrl,
+            });
+        }
+        if (body.generalAccess === 'restricted') {
+            await prisma_js_1.prisma.fileShare.updateMany({
+                where: { fileId: file.id, userId: req.user.id, enabled: true },
+                data: { enabled: false },
+            });
+            return res.json({
+                status: 'ok',
+                generalAccess: 'restricted',
+                role: body.role,
+                shareUrl: null,
+                driveUrl: null,
+            });
+        }
+        else {
+            let share = await prisma_js_1.prisma.fileShare.findFirst({
+                where: { fileId: file.id, userId: req.user.id },
+                orderBy: { createdAt: 'desc' },
+            });
+            if (!share) {
+                const token = (0, crypto_js_1.randomToken)(32);
+                share = await prisma_js_1.prisma.fileShare.create({
+                    data: { fileId: file.id, userId: req.user.id, token, tokenHash: (0, crypto_js_1.hashToken)(token), enabled: true },
+                });
+            }
+            else if (!share.enabled) {
+                share = await prisma_js_1.prisma.fileShare.update({
+                    where: { id: share.id },
+                    data: { enabled: true },
+                });
+            }
+            return res.json({
+                status: 'ok',
+                generalAccess: 'anyone',
+                role: body.role,
+                shareUrl: share.token ? `${env_js_1.env.FRONTEND_URL}/public/files/${share.token}` : null,
+                driveUrl: null,
+            });
+        }
+    }
+    catch (error) {
+        return next(error);
+    }
+});
+exports.fileRouter.post('/:id/public-permission', auth_middleware_js_1.requireAuth, async (req, res, next) => {
+    try {
+        const fileId = String(req.params.id);
+        const file = await prisma_js_1.prisma.file.findFirstOrThrow({ where: { id: fileId, userId: req.user.id }, include: { connectedAccount: true } });
+        if (file.provider !== 'google_drive') {
+            return res.status(400).json({ code: 'UNSUPPORTED_PROVIDER', message: 'Only Google Drive files can be made public.' });
+        }
+        const auth = await (0, google_service_js_1.getAuthedGoogleClient)(file.connectedAccount);
+        const drive = googleapis_1.google.drive({ version: 'v3', auth });
+        await drive.permissions.create({
+            fileId: file.providerFileId,
+            requestBody: {
+                role: 'reader',
+                type: 'anyone',
+            },
+        });
+        const metadata = await drive.files.get({ fileId: file.providerFileId, fields: 'webViewLink,webContentLink' });
+        return res.json({ status: 'ok', url: metadata.data.webViewLink ?? `https://drive.google.com/file/d/${file.providerFileId}/view?usp=sharing` });
+    }
+    catch (error) {
+        return res.status(500).json({ code: 'GOOGLE_API_ERROR', message: error.message || 'Failed to update Google Drive permissions.' });
+    }
+});
+exports.fileRouter.delete('/:id/share', async (req, res, next) => {
+    try {
+        const fileId = String(req.params.id);
+        await prisma_js_1.prisma.fileShare.updateMany({ where: { fileId, userId: req.user.id, enabled: true }, data: { enabled: false } });
+        return res.json({ status: 'ok' });
+    }
+    catch (error) {
+        return next(error);
+    }
+});
+exports.fileRouter.post('/:id/preview-token', async (req, res, next) => {
+    try {
+        const fileId = String(req.params.id);
+        const file = await prisma_js_1.prisma.file.findFirstOrThrow({ where: { id: fileId, userId: req.user.id, status: 'active' } });
+        const token = (0, crypto_js_1.randomToken)(32);
+        await prisma_js_1.prisma.filePreviewToken.create({ data: { fileId: file.id, userId: req.user.id, tokenHash: (0, crypto_js_1.hashToken)(token), expiresAt: new Date(Date.now() + 10 * 60_000) } });
+        const path = `/files/preview/${token}`;
+        return res.status(201).json({ path, url: `${req.protocol}://${req.get('host')}${path}` });
+    }
+    catch (error) {
+        return next(error);
+    }
+});
+exports.fileRouter.get('/:id/view-url', async (req, res, next) => {
+    try {
+        const fileId = String(req.params.id);
+        const file = await prisma_js_1.prisma.file.findFirstOrThrow({ where: { id: fileId, userId: req.user.id }, include: { connectedAccount: true } });
+        if (file.provider === 'google_drive' && file.providerFileId) {
+            return res.json({ url: `https://drive.google.com/file/d/${file.providerFileId}/view?usp=sharing` });
+        }
+        return res.json({ url: null });
+    }
+    catch (error) {
+        return next(error);
+    }
+});
+exports.fileRouter.get('/:id/download', async (req, res, next) => {
+    try {
+        const fileId = String(req.params.id);
+        const file = await prisma_js_1.prisma.file.findFirstOrThrow({ where: { id: fileId, userId: req.user.id }, include: { connectedAccount: true } });
+        return (0, stream_file_js_1.streamProviderFile)(file, req.headers.range, res, { disposition: 'attachment' });
+    }
+    catch (error) {
+        return next(error);
+    }
+});
+exports.fileRouter.delete('/:id', async (req, res, next) => {
+    try {
+        const fileId = String(req.params.id);
+        const file = await prisma_js_1.prisma.file.findFirstOrThrow({ where: { id: fileId, userId: req.user.id, status: 'active' } });
+        await prisma_js_1.prisma.file.update({ where: { id: file.id }, data: { status: 'deleted', deletedAt: new Date() } });
+        await (0, audit_js_1.createAuditLog)(req.user.id, 'TRASH_FILE', 'file', file.id, { name: file.name });
+        return res.json({ status: 'ok' });
+    }
+    catch (error) {
+        return next(error);
+    }
+});
+exports.fileRouter.post('/batch-download', async (req, res, next) => {
+    try {
+        const body = batchFileSchema.parse(req.body);
+        const files = await prisma_js_1.prisma.file.findMany({
+            where: { id: { in: body.fileIds }, userId: req.user.id, status: 'active' },
+            include: { connectedAccount: true }
+        });
+        if (files.length === 0)
+            return res.status(404).json({ code: 'FILES_NOT_FOUND', message: 'No files found.' });
+        res.setHeader('Content-Type', 'application/zip');
+        res.setHeader('Content-Disposition', 'attachment; filename="9drive-download.zip"');
+        const archive = new archiver_1.ZipArchive({ zlib: { level: 9 } });
+        archive.on('error', (err) => {
+            throw err;
+        });
+        archive.pipe(res);
+        for (const file of files) {
+            try {
+                let stream;
+                let fileName = file.name;
+                if (file.provider === 's3') {
+                    const config = await (0, s3_service_js_1.getS3ConfigForAccount)(file.connectedAccountId);
+                    const client = (0, s3_service_js_1.createS3Client)(config);
+                    const response = await client.send(new client_s3_1.GetObjectCommand({ Bucket: config.bucket, Key: file.providerFileId }));
+                    stream = response.Body;
+                }
+                else {
+                    const auth = await (0, google_service_js_1.getAuthedGoogleClient)(file.connectedAccount);
+                    const headers = (0, stream_google_file_js_1.normalizeHeaders)(await auth.getRequestHeaders());
+                    const exportTarget = stream_google_file_js_1.googleDownloadExportMimeTypes[file.mimeType];
+                    if (exportTarget) {
+                        fileName = (0, stream_google_file_js_1.withExtension)(file.name, exportTarget.extension);
+                    }
+                    const url = exportTarget
+                        ? `https://www.googleapis.com/drive/v3/files/${file.providerFileId}/export?mimeType=${encodeURIComponent(exportTarget.mimeType)}`
+                        : `https://www.googleapis.com/drive/v3/files/${file.providerFileId}?alt=media`;
+                    const response = await fetch(url, { headers });
+                    if (!response.ok || !response.body)
+                        continue;
+                    stream = node_stream_1.Readable.fromWeb(response.body);
+                }
+                archive.append(stream, { name: fileName });
+            }
+            catch (err) {
+                console.error(`Failed to add file ${file.name} to zip:`, err);
+            }
+        }
+        await archive.finalize();
+    }
+    catch (error) {
+        return next(error);
+    }
+});