@anteros/core 0.0.1-alpha.8 → 0.0.2

package/lib/files.ts

@@ -352,12 +352,43 @@ export async function handleDelete(
   tenant_id: string,
   collection: string,
   fileId: string,
-  filename: string,
 ): Promise<void> {
   const storage = getStorageForCollection(collection, tenant_id);
   const col = getFileCollection(collection, tenant_id);
+
+  // Look up the document to get the stored filename
+  let filename: string | undefined;
+  if (col?.trackMetaData !== false) {
+    try {
+      const rest = new useRest({ tenant_id, internal: true, useHook: false, useCustomApi: false });
+      const doc = await rest.findOne<any>(collection, fileId);
+      filename = doc?._file?.filename;
+    } catch {}
+  }
+
+  // Delete the physical file from storage
   const subpath = col?.storage?.path || undefined;
-  await storage.delete(tenant_id, collection, fileId, filename, subpath);
+  if (filename) {
+    await storage.delete(tenant_id, collection, fileId, filename, subpath);
+  } else {
+    // Fallback: try common extensions
+    for (const ext of ['.jpg', '.jpeg', '.png', '.webp', '.avif', '.gif', '.svg', '.pdf', '.mp4', '.webm', '.mp3', '.wav', '.json', '.csv', '.zip', '']) {
+      try {
+        await storage.delete(tenant_id, collection, fileId, fileId + ext, subpath);
+        break;
+      } catch {}
+    }
+  }
+
+  // Delete the metadata document from MongoDB
+  if (col?.trackMetaData !== false) {
+    try {
+      const rest = new useRest({ tenant_id, internal: true, useHook: false, useCustomApi: false });
+      await rest.deleteOne(collection, fileId);
+    } catch (err: any) {
+      console.error('Failed to delete file metadata:', err?.message || err);
+    }
+  }
 }
 
 // ─── Replication ──────────────────────────────────────────────────────────

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@anteros/core",
   "module": "index.ts",
-  "version": "0.0.1-alpha.8",
+  "version": "0.0.2",
   "type": "module",
   "description": "Anteros Core",
   "private": false,

package/server/api.ts

@@ -732,13 +732,12 @@ function initializeApi(app: Hono<{ Variables: HonoVariables }>) {
       }
       await checkFileAccess(colDelete?.api?.access as any, 'delete', tenant_id, c);
 
-      const filename = basename(c.req.param('file') as string);
-      if (!filename || filename.startsWith('.') || filename.includes('..') || filename.includes('/')) {
-        throw new AppError('Invalid filename', { status: 400, code: 'INVALID_FILENAME' });
+      const fileId = c.req.param('file') as string;
+      if (!fileId || fileId.startsWith('.') || fileId.includes('..') || fileId.includes('/')) {
+        throw new AppError('Invalid file id', { status: 400, code: 'INVALID_FILE_ID' });
       }
-      const fileId = filename.replace(/\.[^.]+$/, '');
 
-      await handleDelete(tenant_id, collection, fileId, filename);
+      await handleDelete(tenant_id, collection, fileId);
 
       return c.json({ message: 'File deleted', ok: true });
     } catch (err: any) {