@antzsoft/chat-core 1.2.3 → 1.2.5

package/README.md

@@ -45,7 +45,7 @@ npm install @antzsoft/chat-core
 | Authentication | Login, register, logout, token refresh (automatic on 401) |
 | Conversations | List, create (group/DM), update, delete, mute, pin, leave, manage members |
 | Messages | Send, edit, delete, react, star, pin, search, paginate |
-| File uploads | Presigned URL pipeline — request URL → upload binary → confirm |
+| File uploads | Presigned URL pipeline — request URL → upload binary (multipart POST for S3/local, PUT for Azure) → confirm. Files ≥ 10 MB on S3 or local use chunked multipart (parallel parts → complete). |
 | Real-time | Socket.IO wrapper — send/receive messages, typing, read receipts, presence |
 | State management | Zustand auth store (persisted) + chat store (typing users, online status, reply/edit state) |
 | Push notifications | Device token registration/removal API |
@@ -115,11 +115,18 @@ const platformUploadFn = async (presigned, file, onProgress) => {
 // React Native — fetch (works on Expo and bare RN)
 const platformUploadFn = async (presigned, file, onProgress) => {
   onProgress?.(0);
-  const res = await fetch(presigned.uploadUrl, {
-    method: presigned.method,
-    headers: presigned.headers,
-    body: { uri: file.uri, name: file.name, type: file.type } as any,
-  });
+  let body: any;
+  if (presigned.method === 'POST' && presigned.fields) {
+    // S3 / local — multipart FormData with signed policy fields
+    const fd = new FormData();
+    Object.entries(presigned.fields).forEach(([k, v]) => fd.append(k, v as string));
+    fd.append('file', { uri: file.uri, name: file.name, type: file.type } as any);
+    body = fd;
+  } else {
+    // Azure — raw blob PUT
+    body = { uri: file.uri, name: file.name, type: file.type } as any;
+  }
+  const res = await fetch(presigned.uploadUrl, { method: presigned.method, headers: presigned.headers, body });
   if (!res.ok) throw new Error(`Upload failed: ${res.status}`);
   onProgress?.(1);
 };
@@ -127,12 +134,21 @@ const platformUploadFn = async (presigned, file, onProgress) => {
 // Node.js — fs + fetch (Node 18+)
 import { readFileSync } from 'fs';
 const platformUploadFn = async (presigned, file) => {
-  const body = readFileSync(file.uri.replace('file://', ''));
-  const res = await fetch(presigned.uploadUrl, {
-    method: presigned.method,
-    headers: presigned.headers,
-    body,
-  });
+  let body: any;
+  let headers: Record<string, string> = { ...presigned.headers };
+  if (presigned.method === 'POST' && presigned.fields) {
+    // S3 / local — multipart FormData with signed policy fields
+    const { FormData, Blob } = await import('node:buffer') as any;
+    const fd = new FormData();
+    Object.entries(presigned.fields).forEach(([k, v]) => fd.append(k, v as string));
+    fd.append('file', new Blob([readFileSync(file.uri.replace('file://', ''))], { type: file.type }), file.name);
+    body = fd;
+  } else {
+    // Azure — raw buffer PUT
+    body = readFileSync(file.uri.replace('file://', ''));
+    headers['Content-Type'] = file.type;
+  }
+  const res = await fetch(presigned.uploadUrl, { method: presigned.method, headers, body });
   if (!res.ok) throw new Error(`Upload failed: ${res.status}`);
 };
 ```
@@ -217,7 +233,15 @@ const platformUploadFn = async (presigned, file, onProgress) => {
     xhr.upload.onprogress = (e) => onProgress?.(e.loaded / e.total);
     xhr.onload = () => (xhr.status < 400 ? resolve() : reject(new Error(`Upload failed: ${xhr.status}`)));
     xhr.onerror = () => reject(new Error('Network error during upload'));
-    xhr.send(file.uri ? null : (file as any)); // blob or body per presigned.method
+    // S3 and local storage return method:'POST' with signed fields → multipart FormData.
+    // Azure returns method:'PUT' → raw blob body.
+    if (presigned.method === 'POST' && presigned.fields) {
+      const fd = new FormData();
+      Object.entries(presigned.fields).forEach(([k, v]) => fd.append(k, v));
+      fetch(file.uri).then(r => r.blob()).then(blob => { fd.append('file', blob, file.name); xhr.send(fd); }).catch(reject);
+    } else {
+      fetch(file.uri).then(r => r.blob()).then(blob => xhr.send(blob)).catch(reject);
+    }
   });
 };
 
@@ -434,28 +458,22 @@ const platformUploadFn: PlatformUploadFn = (presigned, file, onProgress) =>
 **React Native implementation (fetch):**
 
 ```typescript
-import * as FileSystem from 'expo-file-system';
-
 const platformUploadFn: PlatformUploadFn = async (presigned, file, onProgress) => {
-  const callback = (progress: FileSystem.UploadProgressData) => {
-    onProgress?.(progress.totalBytesSent / progress.totalBytesExpectedToSend);
-  };
-
-  const uploadTask = FileSystem.createUploadTask(
-    presigned.uploadUrl,
-    file.uri,
-    {
-      httpMethod: presigned.method,
-      headers: presigned.headers,
-      uploadType: FileSystem.FileSystemUploadType.BINARY_CONTENT,
-    },
-    callback,
-  );
-
-  const result = await uploadTask.uploadAsync();
-  if (!result || result.status >= 400) {
-    throw new Error(`Upload failed: ${result?.status}`);
+  onProgress?.(0);
+  let body: any;
+  if (presigned.method === 'POST' && presigned.fields) {
+    // S3 and local storage — multipart FormData with signed policy fields
+    const fd = new FormData();
+    Object.entries(presigned.fields).forEach(([k, v]) => fd.append(k, v as string));
+    fd.append('file', { uri: file.uri, name: file.name, type: file.type } as any);
+    body = fd;
+  } else {
+    // Azure Blob Storage — raw body PUT (no FormData API available on Azure)
+    body = { uri: file.uri, name: file.name, type: file.type } as any;
   }
+  const res = await fetch(presigned.uploadUrl, { method: presigned.method, headers: presigned.headers, body });
+  if (!res.ok) throw new Error(`Upload failed: ${res.status}`);
+  onProgress?.(1);
 };
 ```
 
@@ -970,7 +988,9 @@ console.log(updated.iconUrl); // fresh signed URL, regenerated on every response
 // What client.uploadIcon() does internally (same as attachment upload):
 // 1. uploadFiles([file], conversationId)
 //      → POST /storage/presigned-url   (creates temp chat_files record)
-//      → platformUploadFn uploads binary directly to S3/Azure/local
+//      → platformUploadFn uploads binary directly to S3/Azure/local:
+//          S3 / local: multipart POST with signed policy fields (FormData)
+//          Azure:      raw buffer PUT with SAS token in URL
 //      → POST /storage/confirm/:fileId  (marks chat_files active)
 // 2. conversationsApi.uploadIcon(conversationId, fileId)
 //      → PUT /conversations/:id/icon { fileId }
@@ -1098,7 +1118,8 @@ import { storageApi, uploadBatch } from '@antzsoft/chat-core';
 |---|---|---|
 | `requestPresignedUrl` | `(payload: PresignedUrlRequest) => Promise<PresignedUrlResponse>` | Request a single presigned upload URL. |
 | `requestPresignedUrlBatch` | `(files: PresignedUrlRequest[]) => Promise<{ urls: PresignedUrlResponse[]; errors: Array<{ filename: string; error: string }> }>` | Batch presigned URL request. |
-| `confirmUpload` | `(fileId: string) => Promise<FileResponse>` | Confirm that a binary upload is complete. Required after every upload. |
+| `confirmUpload` | `(fileId: string) => Promise<FileResponse>` | Confirm a single-part upload is complete. Required after single-part uploads. Not called for chunked multipart — `completeMultipartUpload` handles that. |
+| `completeMultipartUpload` | `(fileId: string, uploadId: string, parts: CompletedPart[]) => Promise<FileResponse>` | Complete a chunked multipart upload. Assembles parts on S3 and transitions the file record to active in one call. Called automatically by `uploadBatch` — only needed for manual flows. |
 | `getFile` | `(fileId: string) => Promise<FileResponse>` | Fetch file metadata. |
 | `getFileUrl` | `(fileId: string, expiresIn?: number) => Promise<{ url: string; expiresAt: string }>` | Get a fresh signed URL for an already-uploaded file. |
 | `deleteFile` | `(fileId: string) => Promise<void>` | Delete a file. |
@@ -1113,10 +1134,15 @@ function uploadBatch(
   platformUploadFn: PlatformUploadFn,
   conversationId?: string,
   onProgress?: (pct: number) => void,
+  platformCompressFn?: PlatformCompressFn,
+  compressionConfig?: ResolvedCompressionConfig,
+  platformUploadPartFn?: PlatformUploadPartFn,
 ): Promise<BatchUploadResult>
 ```
 
-Handles the full upload pipeline: batch presign → parallel binary upload → confirm each file. Returns `{ successful: FileResponse[]; failed: Array<{ filename: string; error: string }> }`.
+Handles the full upload pipeline: batch presign → parallel binary upload → confirm (or complete for multipart) each file. Returns `{ successful: FileResponse[]; failed: Array<{ filename: string; error: string }> }`.
+
+For files ≥ 10 MB on S3, `uploadBatch` automatically switches to chunked multipart upload when `platformUploadPartFn` is provided (the Web and RN SDKs wire this in automatically — no changes needed for integrators using those SDKs). Files below the threshold always use the existing single-part presigned POST flow.
 
 ```typescript
 // Manual: get a presigned URL, upload, confirm
@@ -2527,6 +2553,14 @@ document.querySelectorAll('[data-conv-id]').forEach((el) => {
 
 ## Changelog
 
+### v1.2.4
+- **New: Chunked multipart upload for files ≥ 10 MB (S3 and local)** — Files at or above 10 MB on S3 now use the S3 multipart upload protocol (`CreateMultipartUpload` → parallel `UploadPart` per 10 MB chunk → `CompleteMultipartUpload`) instead of a single presigned POST. Benefits: resumable on network failure, parallel part uploads (max 3 concurrent), no single-request timeout risk, supports files up to 5 TB. Files below 10 MB continue to use the existing single-part presigned POST flow unchanged. Local provider also uses chunked multipart for files ≥ 10 MB (parts land in a staging directory, assembled on complete). Azure is unaffected (stays presigned PUT). **No integration changes required for Web and RN SDK users** — `webUploadPartFn` and `rnUploadPartFn` are wired in automatically. Node.js / custom integrators must supply `platformUploadPartFn` to `uploadBatch` to enable chunked uploads; without it the multipart path is skipped and files fail if they exceed the S3 single-PUT limit.
+- **New: `storageApi.completeMultipartUpload(fileId, uploadId, parts)`** — Completes an in-progress S3 multipart upload, assembling all parts and transitioning the file record to active. Called automatically by `uploadBatch` — only needed for custom manual upload flows.
+- **New: `PlatformUploadPartFn` type** — `(uploadUrl: string, blob: Blob | ArrayBuffer, onProgress?) => Promise<string>`. Platform-specific function for uploading a single part and returning its ETag. Provided by Web and RN SDKs automatically; custom environments must supply their own.
+- **New types exported:** `MultipartUploadInfo`, `MultipartPartUrl`, `CompletedPart`.
+- **Improvement: S3 and local storage uploads now use presigned POST (multipart) instead of presigned PUT** — File bytes are uploaded directly from the client to S3 (or the local server in same-server/mount mode) as `multipart/form-data` using AWS presigned POST policy. The server generates a short-lived URL and signed fields; the client appends the file as the final `'file'` field and POSTs the form directly to the storage endpoint — no file bytes ever touch the chat server. Azure Blob Storage is unchanged (stays presigned PUT — Azure has no form-based upload API). **No integration changes required** — `platformUploadFn` already branches on `presigned.method === 'POST' && presigned.fields` in both the Web and RN SDKs. Existing integrators using the recommended `platformUploadFn` implementations are unaffected.
+- **Fix: `POST /storage/files/upload` now works with transit encryption enabled** — The local-storage direct upload endpoint was missing the `@PreTransit()` decorator, causing `403 Transit encryption required` rejections when `transitEncryption: true`. XHR/fetch calls that upload directly to the server (not via the Axios client) never carry an `x-transit-session` header — `@PreTransit()` marks the endpoint as reachable before or without a transit session. Auth is the HMAC signature in the form fields. **No integration changes required.**
+
 ### v1.2.3
 - **New: `messagesApi.getReceipts(messageId)` — message info screen API** — New `GET /messages/:id/receipts` endpoint returns per-user read and delivery receipts for a single message with resolved user profiles (name, avatar) included. Use as the initial data load for a "Read by / Delivered to" detail screen — no secondary user lookup needed. Returns `{ messageId, readBy: [{ userId, displayName, avatarUrl, readAt }], deliveredTo: [{ userId, displayName, avatarUrl, deliveredAt }] }`. New exported types: `MessageReceiptsResponse`, `MessageReceiptEntry`.
 - **Fix: `message_delivered` now fires per recipient, not all-or-nothing** — Previously the server only emitted `message_delivered` to the sender when every recipient was online simultaneously at send time. It now fires once per online recipient at send time. The `deliveredTo` field is now a single `{ userId, deliveredAt }` object (previously an array of all recipients). This matches how `read_receipt` works and enables the delivery section of a message info screen to update live one entry at a time. **Backward compatible** — existing handlers only read `event.messageId` to update the tick mark and are unaffected.

package/dist/chat.store-DLNRJ5ZT.js

@@ -0,0 +1,7 @@
+import {
+  useChatStore
+} from "./chunk-EOL5B7GS.js";
+export {
+  useChatStore
+};
+//# sourceMappingURL=chat.store-DLNRJ5ZT.js.map

package/dist/{chunk-GUO5QQGK.js → chunk-EOL5B7GS.js}

@@ -12,6 +12,7 @@ var useChatStore = create((set) => ({
   isSidebarOpen: true,
   isGroupInfoOpen: false,
   isStarredPanelOpen: false,
+  messageInfoId: null,
   setActiveConversation: (id) => set({ activeConversationId: id, replyingTo: null, editingMessage: null }),
   setPendingTarget: (target) => set({ pendingTarget: target }),
   addTypingUser: (conversationId, user) => set((state) => {
@@ -49,10 +50,11 @@ var useChatStore = create((set) => ({
   toggleGroupInfo: () => set((state) => ({ isGroupInfoOpen: !state.isGroupInfoOpen })),
   setGroupInfoOpen: (open) => set({ isGroupInfoOpen: open }),
   toggleStarredPanel: () => set((state) => ({ isStarredPanelOpen: !state.isStarredPanelOpen })),
-  setStarredPanelOpen: (open) => set({ isStarredPanelOpen: open })
+  setStarredPanelOpen: (open) => set({ isStarredPanelOpen: open }),
+  setMessageInfoId: (id) => set({ messageInfoId: id })
 }));
 
 export {
   useChatStore
 };
-//# sourceMappingURL=chunk-GUO5QQGK.js.map
+//# sourceMappingURL=chunk-EOL5B7GS.js.map

package/dist/chunk-EOL5B7GS.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/stores/chat.store.ts"],"sourcesContent":["import { create } from 'zustand';\nimport type { Message } from '../types/index.js';\n\ninterface TypingUser {\n  userId: string;\n  displayName: string;\n  avatarUrl?: string;\n}\n\nexport interface LastReadEntry {\n  messageId: string;\n  readAt: string;\n}\n\ninterface ChatState {\n  activeConversationId: string | null;\n  pendingTarget: { conversationId: string; messageId: string } | null;\n  typingUsers: Record<string, TypingUser[]>;\n  onlineUsers: string[];\n  /** keyed by conversationId — current user's last read pointer per conversation */\n  lastRead: Record<string, LastReadEntry>;\n  /** keyed by userId — last seen timestamp for each user */\n  lastSeen: Record<string, string>;\n  replyingTo: Message | null;\n  editingMessage: Message | null;\n  isSidebarOpen: boolean;\n  isGroupInfoOpen: boolean;\n  isStarredPanelOpen: boolean;\n  /** messageId currently shown in the Message Info panel, null = closed */\n  messageInfoId: string | null;\n\n  setActiveConversation: (id: string | null) => void;\n  setPendingTarget: (target: { conversationId: string; messageId: string } | null) => void;\n  addTypingUser: (conversationId: string, user: TypingUser) => void;\n  removeTypingUser: (conversationId: string, userId: string) => void;\n  setUserOnline: (userId: string) => void;\n  setUserOffline: (userId: string) => void;\n  setOnlineUsers: (userIds: string[]) => void;\n  setLastRead: (conversationId: string, messageId: string, readAt: string) => void;\n  setLastSeen: (userId: string, lastSeenAt: string | null) => void;\n  setReplyingTo: (message: Message | null) => void;\n  setEditingMessage: (message: Message | null) => void;\n  toggleSidebar: () => void;\n  setSidebarOpen: (open: boolean) => void;\n  toggleGroupInfo: () => void;\n  setGroupInfoOpen: (open: boolean) => void;\n  toggleStarredPanel: () => void;\n  setStarredPanelOpen: (open: boolean) => void;\n  setMessageInfoId: (id: string | null) => void;\n}\n\nexport const useChatStore = create<ChatState>((set) => ({\n  activeConversationId: null,\n  pendingTarget: null,\n  typingUsers: {},\n  onlineUsers: [],\n  lastRead: {},\n  lastSeen: {},\n  replyingTo: null,\n  editingMessage: null,\n  isSidebarOpen: true,\n  isGroupInfoOpen: false,\n  isStarredPanelOpen: false,\n  messageInfoId: null,\n\n  setActiveConversation: (id) =>\n    set({ activeConversationId: id, replyingTo: null, editingMessage: null }),\n\n  setPendingTarget: (target) => set({ pendingTarget: target }),\n\n  addTypingUser: (conversationId, user) =>\n    set((state) => {\n      const existing = state.typingUsers[conversationId] ?? [];\n      const deduped = existing.filter((u) => u.userId !== user.userId);\n      return { typingUsers: { ...state.typingUsers, [conversationId]: [...deduped, user] } };\n    }),\n\n  removeTypingUser: (conversationId, userId) =>\n    set((state) => ({\n      typingUsers: {\n        ...state.typingUsers,\n        [conversationId]: (state.typingUsers[conversationId] ?? []).filter(\n          (u) => u.userId !== userId,\n        ),\n      },\n    })),\n\n  setUserOnline: (userId) =>\n    set((state) => ({\n      onlineUsers: state.onlineUsers.includes(userId)\n        ? state.onlineUsers\n        : [...state.onlineUsers, userId],\n    })),\n\n  setUserOffline: (userId) =>\n    set((state) => ({ onlineUsers: state.onlineUsers.filter((id) => id !== userId) })),\n\n  setOnlineUsers: (userIds) => set({ onlineUsers: userIds }),\n\n  setLastRead: (conversationId, messageId, readAt) =>\n    set((state) => ({\n      lastRead: { ...state.lastRead, [conversationId]: { messageId, readAt } },\n    })),\n\n  setLastSeen: (userId, lastSeenAt) =>\n    set((state) => {\n      if (lastSeenAt === null) {\n        const { [userId]: _, ...rest } = state.lastSeen;\n        return { lastSeen: rest };\n      }\n      return { lastSeen: { ...state.lastSeen, [userId]: lastSeenAt } };\n    }),\n\n  setReplyingTo: (message) => set({ replyingTo: message, editingMessage: null }),\n\n  setEditingMessage: (message) => set({ editingMessage: message, replyingTo: null }),\n\n  toggleSidebar: () => set((state) => ({ isSidebarOpen: !state.isSidebarOpen })),\n  setSidebarOpen: (open) => set({ isSidebarOpen: open }),\n\n  toggleGroupInfo: () => set((state) => ({ isGroupInfoOpen: !state.isGroupInfoOpen })),\n  setGroupInfoOpen: (open) => set({ isGroupInfoOpen: open }),\n\n  toggleStarredPanel: () => set((state) => ({ isStarredPanelOpen: !state.isStarredPanelOpen })),\n  setStarredPanelOpen: (open) => set({ isStarredPanelOpen: open }),\n\n  setMessageInfoId: (id: string | null) => set({ messageInfoId: id }),\n}));\n"],"mappings":";AAAA,SAAS,cAAc;AAmDhB,IAAM,eAAe,OAAkB,CAAC,SAAS;AAAA,EACtD,sBAAsB;AAAA,EACtB,eAAe;AAAA,EACf,aAAa,CAAC;AAAA,EACd,aAAa,CAAC;AAAA,EACd,UAAU,CAAC;AAAA,EACX,UAAU,CAAC;AAAA,EACX,YAAY;AAAA,EACZ,gBAAgB;AAAA,EAChB,eAAe;AAAA,EACf,iBAAiB;AAAA,EACjB,oBAAoB;AAAA,EACpB,eAAe;AAAA,EAEf,uBAAuB,CAAC,OACtB,IAAI,EAAE,sBAAsB,IAAI,YAAY,MAAM,gBAAgB,KAAK,CAAC;AAAA,EAE1E,kBAAkB,CAAC,WAAW,IAAI,EAAE,eAAe,OAAO,CAAC;AAAA,EAE3D,eAAe,CAAC,gBAAgB,SAC9B,IAAI,CAAC,UAAU;AACb,UAAM,WAAW,MAAM,YAAY,cAAc,KAAK,CAAC;AACvD,UAAM,UAAU,SAAS,OAAO,CAAC,MAAM,EAAE,WAAW,KAAK,MAAM;AAC/D,WAAO,EAAE,aAAa,EAAE,GAAG,MAAM,aAAa,CAAC,cAAc,GAAG,CAAC,GAAG,SAAS,IAAI,EAAE,EAAE;AAAA,EACvF,CAAC;AAAA,EAEH,kBAAkB,CAAC,gBAAgB,WACjC,IAAI,CAAC,WAAW;AAAA,IACd,aAAa;AAAA,MACX,GAAG,MAAM;AAAA,MACT,CAAC,cAAc,IAAI,MAAM,YAAY,cAAc,KAAK,CAAC,GAAG;AAAA,QAC1D,CAAC,MAAM,EAAE,WAAW;AAAA,MACtB;AAAA,IACF;AAAA,EACF,EAAE;AAAA,EAEJ,eAAe,CAAC,WACd,IAAI,CAAC,WAAW;AAAA,IACd,aAAa,MAAM,YAAY,SAAS,MAAM,IAC1C,MAAM,cACN,CAAC,GAAG,MAAM,aAAa,MAAM;AAAA,EACnC,EAAE;AAAA,EAEJ,gBAAgB,CAAC,WACf,IAAI,CAAC,WAAW,EAAE,aAAa,MAAM,YAAY,OAAO,CAAC,OAAO,OAAO,MAAM,EAAE,EAAE;AAAA,EAEnF,gBAAgB,CAAC,YAAY,IAAI,EAAE,aAAa,QAAQ,CAAC;AAAA,EAEzD,aAAa,CAAC,gBAAgB,WAAW,WACvC,IAAI,CAAC,WAAW;AAAA,IACd,UAAU,EAAE,GAAG,MAAM,UAAU,CAAC,cAAc,GAAG,EAAE,WAAW,OAAO,EAAE;AAAA,EACzE,EAAE;AAAA,EAEJ,aAAa,CAAC,QAAQ,eACpB,IAAI,CAAC,UAAU;AACb,QAAI,eAAe,MAAM;AACvB,YAAM,EAAE,CAAC,MAAM,GAAG,GAAG,GAAG,KAAK,IAAI,MAAM;AACvC,aAAO,EAAE,UAAU,KAAK;AAAA,IAC1B;AACA,WAAO,EAAE,UAAU,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,GAAG,WAAW,EAAE;AAAA,EACjE,CAAC;AAAA,EAEH,eAAe,CAAC,YAAY,IAAI,EAAE,YAAY,SAAS,gBAAgB,KAAK,CAAC;AAAA,EAE7E,mBAAmB,CAAC,YAAY,IAAI,EAAE,gBAAgB,SAAS,YAAY,KAAK,CAAC;AAAA,EAEjF,eAAe,MAAM,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,MAAM,cAAc,EAAE;AAAA,EAC7E,gBAAgB,CAAC,SAAS,IAAI,EAAE,eAAe,KAAK,CAAC;AAAA,EAErD,iBAAiB,MAAM,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAC,MAAM,gBAAgB,EAAE;AAAA,EACnF,kBAAkB,CAAC,SAAS,IAAI,EAAE,iBAAiB,KAAK,CAAC;AAAA,EAEzD,oBAAoB,MAAM,IAAI,CAAC,WAAW,EAAE,oBAAoB,CAAC,MAAM,mBAAmB,EAAE;AAAA,EAC5F,qBAAqB,CAAC,SAAS,IAAI,EAAE,oBAAoB,KAAK,CAAC;AAAA,EAE/D,kBAAkB,CAAC,OAAsB,IAAI,EAAE,eAAe,GAAG,CAAC;AACpE,EAAE;","names":[]}

package/dist/{chunk-P7VAN6NA.js → chunk-ZNA6B2R5.js}

@@ -60,67 +60,6 @@ async function compressFile(file, platformCompressFn, config) {
   }
 }
 
-// src/crypto/session.ts
-var _KEY = /* @__PURE__ */ Symbol.for("__antz_chat_transit__");
-function getState() {
-  const g = globalThis;
-  if (!g[_KEY]) {
-    g[_KEY] = {
-      session: null,
-      sessionEverEstablished: false,
-      readyResolve: null,
-      readyPromise: null,
-      transitConfigured: null
-    };
-  }
-  return g[_KEY];
-}
-function configureTransit(enabled) {
-  const s = getState();
-  s.transitConfigured = enabled;
-  if (!enabled) {
-    s.readyResolve?.();
-    s.readyResolve = null;
-  }
-}
-function waitForTransitReady() {
-  const s = getState();
-  if (!s.transitConfigured) return Promise.resolve();
-  if (s.session) return Promise.resolve();
-  if (s.sessionEverEstablished) return Promise.resolve();
-  if (!s.readyPromise) {
-    s.readyPromise = new Promise((resolve) => {
-      s.readyResolve = resolve;
-    });
-  }
-  return s.readyPromise;
-}
-function setTransitSession(session) {
-  const s = getState();
-  s.session = session;
-  s.sessionEverEstablished = true;
-  s.readyResolve?.();
-  s.readyResolve = null;
-}
-function clearTransitSession() {
-  const s = getState();
-  s.session = null;
-  s.readyPromise = null;
-  s.readyResolve = null;
-}
-function isTransitEnabled() {
-  return getState().session?.enabled === true;
-}
-function getSessionKey() {
-  return getState().session?.sessionKey ?? null;
-}
-function getSessionId() {
-  return getState().session?.sessionId ?? null;
-}
-
-// src/api/client.ts
-import axios from "axios";
-
 // src/crypto/transit.ts
 function hasWebCrypto() {
   return typeof globalThis.crypto?.subtle !== "undefined";
@@ -212,10 +151,218 @@ function base64ToUint8(b64) {
   return buf;
 }
 
+// src/crypto/session.ts
+var _KEY = /* @__PURE__ */ Symbol.for("__antz_chat_transit__");
+function getState() {
+  const g = globalThis;
+  if (!g[_KEY]) {
+    g[_KEY] = {
+      session: null,
+      sessionEverEstablished: false,
+      readyResolve: null,
+      readyPromise: null,
+      transitConfigured: null
+    };
+  }
+  return g[_KEY];
+}
+function configureTransit(enabled) {
+  const s = getState();
+  s.transitConfigured = enabled;
+  if (!enabled) {
+    s.readyResolve?.();
+    s.readyResolve = null;
+  }
+}
+function waitForTransitReady() {
+  const s = getState();
+  if (!s.transitConfigured) return Promise.resolve();
+  if (s.session) return Promise.resolve();
+  if (s.sessionEverEstablished) return Promise.resolve();
+  if (!s.readyPromise) {
+    s.readyPromise = new Promise((resolve) => {
+      s.readyResolve = resolve;
+    });
+  }
+  return s.readyPromise;
+}
+function setTransitSession(session) {
+  const s = getState();
+  s.session = session;
+  s.sessionEverEstablished = true;
+  s.readyResolve?.();
+  s.readyResolve = null;
+}
+function getTransitSession() {
+  return getState().session;
+}
+function clearTransitSession() {
+  const s = getState();
+  s.session = null;
+  s.readyPromise = null;
+  s.readyResolve = null;
+}
+function isTransitEnabled() {
+  return getState().session?.enabled === true;
+}
+function getSessionKey() {
+  return getState().session?.sessionKey ?? null;
+}
+function getSessionId() {
+  return getState().session?.sessionId ?? null;
+}
+
+// src/crypto/detect.ts
+var _cached = null;
+async function detectTransitAlgo() {
+  if (_cached) return _cached;
+  try {
+    await globalThis.crypto.subtle.generateKey(
+      { name: "X25519" },
+      false,
+      ["deriveKey"]
+    );
+    _cached = "x25519";
+  } catch {
+    _cached = "p256";
+  }
+  return _cached;
+}
+function resetAlgoCache() {
+  _cached = null;
+}
+
+// src/crypto/handshake.ts
+function hasWebCrypto2() {
+  return typeof globalThis.crypto?.subtle !== "undefined";
+}
+async function fetchServerKeys(apiUrl) {
+  const res = await fetch(`${apiUrl}/crypto/pubkey`);
+  if (!res.ok) throw new Error(`[AntzChat] Failed to fetch server public key: ${res.status}`);
+  const body = await res.json();
+  return body?.data ?? body;
+}
+async function generateEphemeralKey(algo, serverKeys) {
+  if (hasWebCrypto2()) {
+    return generateWebCryptoEphemeralKey(algo, serverKeys);
+  }
+  return generateNobleEphemeralKey(serverKeys);
+}
+async function createRestTransitSession(apiUrl) {
+  try {
+    const serverKeys = await fetchServerKeys(apiUrl);
+    if (!serverKeys.enabled) return null;
+    const algo = hasWebCrypto2() ? await detectTransitAlgo() : "x25519";
+    const { ephemeralPubB64, deriveSessionKey } = await generateEphemeralKey(algo, serverKeys);
+    const res = await fetch(`${apiUrl}/crypto/session`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ ephemeralPub: ephemeralPubB64, algo })
+    });
+    if (!res.ok) return null;
+    const body = await res.json();
+    const sessionId = (body?.data ?? body)?.sessionId ?? body?.sessionId;
+    if (!sessionId) return null;
+    const sessionKey = await deriveSessionKey(sessionId);
+    return { sessionId, sessionKey };
+  } catch {
+    return null;
+  }
+}
+async function performHandshake(algo, serverKeys, socketHandshakeAuth) {
+  const { ephemeralPubB64, deriveSessionKey } = await generateEphemeralKey(algo, serverKeys);
+  socketHandshakeAuth["transitEphemeralPub"] = ephemeralPubB64;
+  socketHandshakeAuth["transitAlgo"] = algo;
+  return deriveSessionKey;
+}
+async function generateWebCryptoEphemeralKey(algo, serverKeys) {
+  const ephemeral = await globalThis.crypto.subtle.generateKey(
+    algo === "x25519" ? { name: "X25519" } : { name: "ECDH", namedCurve: "P-256" },
+    false,
+    ["deriveBits"]
+  );
+  const pubRaw = await globalThis.crypto.subtle.exportKey("raw", ephemeral.publicKey);
+  const ephemeralPriv = ephemeral.privateKey;
+  return {
+    ephemeralPubB64: bufToB642(pubRaw),
+    deriveSessionKey: (sessionId) => deriveWebCryptoSessionKey(ephemeralPriv, algo, serverKeys, sessionId)
+  };
+}
+async function deriveWebCryptoSessionKey(ephemeralPriv, algo, serverKeys, sessionId) {
+  const serverPubRaw = b64ToBuf2(algo === "x25519" ? serverKeys.x25519 : serverKeys.p256);
+  const keyAlgoParams = algo === "x25519" ? { name: "X25519" } : { name: "ECDH", namedCurve: "P-256" };
+  const serverPubKey = await globalThis.crypto.subtle.importKey("raw", serverPubRaw, keyAlgoParams, false, []);
+  const sharedBits = await globalThis.crypto.subtle.deriveBits(
+    { name: algo === "x25519" ? "X25519" : "ECDH", public: serverPubKey },
+    ephemeralPriv,
+    256
+  );
+  const hkdfKey = await globalThis.crypto.subtle.importKey("raw", sharedBits, "HKDF", false, ["deriveKey"]);
+  const salt = new TextEncoder().encode(sessionId);
+  const info = new TextEncoder().encode("antz-transit-v1");
+  return globalThis.crypto.subtle.deriveKey(
+    { name: "HKDF", hash: "SHA-256", salt, info },
+    hkdfKey,
+    { name: "AES-GCM", length: 256 },
+    false,
+    ["encrypt", "decrypt"]
+  );
+}
+async function generateNobleEphemeralKey(serverKeys) {
+  const { x25519 } = await import("@noble/curves/ed25519");
+  const { hkdf } = await import("@noble/hashes/hkdf");
+  const { sha256 } = await import("@noble/hashes/sha256");
+  const { randomBytes } = await import("@noble/hashes/utils");
+  const ephemeralPriv = randomBytes(32);
+  const ephemeralPub = x25519.getPublicKey(ephemeralPriv);
+  const serverPubBytes = base64ToUint82(serverKeys.x25519);
+  return {
+    ephemeralPubB64: uint8ToBase64(ephemeralPub),
+    deriveSessionKey: (sessionId) => {
+      const sharedSecret = x25519.getSharedSecret(ephemeralPriv, serverPubBytes);
+      const salt = new TextEncoder().encode(sessionId);
+      const info = new TextEncoder().encode("antz-transit-v1");
+      return Promise.resolve(hkdf(sha256, sharedSecret, salt, info, 32));
+    }
+  };
+}
+function bufToB642(buf) {
+  const bytes = new Uint8Array(buf);
+  let str = "";
+  bytes.forEach((b) => {
+    str += String.fromCharCode(b);
+  });
+  return btoa(str);
+}
+function b64ToBuf2(b64) {
+  const bin = atob(b64);
+  const buf = new Uint8Array(bin.length);
+  for (let i = 0; i < bin.length; i++) buf[i] = bin.charCodeAt(i);
+  return buf.buffer;
+}
+function uint8ToBase64(bytes) {
+  let str = "";
+  bytes.forEach((b) => {
+    str += String.fromCharCode(b);
+  });
+  return btoa(str);
+}
+function base64ToUint82(b64) {
+  const bin = atob(b64);
+  const buf = new Uint8Array(bin.length);
+  for (let i = 0; i < bin.length; i++) buf[i] = bin.charCodeAt(i);
+  return buf;
+}
+
 // src/api/client.ts
+import axios from "axios";
 var _tokenStore = null;
 var _config = null;
 var _avatarSent = false;
+var _transitHandshakePromise = null;
+function getTransitHandshakePromise() {
+  return _transitHandshakePromise;
+}
 function initApiClient(config, tokenStore) {
   _config = config;
   _tokenStore = tokenStore;
@@ -225,6 +372,23 @@ function initApiClient(config, tokenStore) {
     headers: { "Content-Type": "application/json" }
   });
   configureTransit(config.transitEncryption);
+  if (config.transitEncryption && !getTransitSession() && !_transitHandshakePromise) {
+    _transitHandshakePromise = (async () => {
+      try {
+        const session = await createRestTransitSession(config.apiUrl);
+        if (session && !getTransitSession()) {
+          const algo = typeof globalThis.crypto?.subtle !== "undefined" ? await detectTransitAlgo() : "x25519";
+          setTransitSession({ sessionKey: session.sessionKey, algo, sessionId: session.sessionId, enabled: true });
+        } else if (!session) {
+          configureTransit(false);
+        }
+      } catch {
+        configureTransit(false);
+      } finally {
+        _transitHandshakePromise = null;
+      }
+    })();
+  }
   client.interceptors.request.use(async (req) => {
     const token = _tokenStore?.getAccessToken();
     if (token) req.headers["Authorization"] = `Bearer ${token}`;
@@ -370,6 +534,13 @@ var storageApi = {
   async deleteFile(fileId) {
     await getApiClient().post(`/storage/files/${fileId}/delete`);
   },
+  async completeMultipartUpload(fileId, uploadId, parts) {
+    const { data } = await getApiClient().post(
+      `/storage/multipart/complete/${fileId}`,
+      { uploadId, parts }
+    );
+    return data;
+  },
   async getConversationFiles(conversationId, params = {}) {
     const { data } = await getApiClient().get(
       `/storage/conversations/${conversationId}/files`,
@@ -382,7 +553,52 @@ var storageApi = {
     return data;
   }
 };
-async function runUploadBatch(files, platformUploadFn, slotIds, conversationId, onProgress, platformCompressFn, compressionConfig) {
+async function runMultipartUpload(presigned, file, platformUploadPartFn, onProgress) {
+  const { multipart } = presigned;
+  if (!multipart) throw new Error("No multipart info on presigned response");
+  const CONCURRENCY = 3;
+  const completedParts = [];
+  const partProgress = {};
+  multipart.partUrls.forEach(({ partNumber }) => {
+    partProgress[partNumber] = 0;
+  });
+  const reportProgress = () => {
+    if (!onProgress) return;
+    const vals = Object.values(partProgress);
+    const avg = vals.reduce((s, v) => s + v, 0) / Math.max(vals.length, 1);
+    onProgress(Math.round(avg * 0.95));
+  };
+  const uploadPart = async (partNumber, uploadUrl, method) => {
+    const offset = (partNumber - 1) * multipart.chunkSize;
+    const end = Math.min(offset + multipart.chunkSize, file.size);
+    const blob = await fetch(file.uri).then((r) => r.blob());
+    const slice = blob.slice(offset, end);
+    const etag = await platformUploadPartFn(uploadUrl, slice, (pct) => {
+      partProgress[partNumber] = pct;
+      reportProgress();
+    }, method);
+    completedParts.push({ partNumber, etag });
+    partProgress[partNumber] = 100;
+    reportProgress();
+  };
+  for (let i = 0; i < multipart.partUrls.length; i += CONCURRENCY) {
+    const batch = multipart.partUrls.slice(i, i + CONCURRENCY);
+    const results = await Promise.allSettled(
+      batch.map(({ partNumber, uploadUrl, method }) => uploadPart(partNumber, uploadUrl, method ?? "PUT"))
+    );
+    const failed = results.find((r) => r.status === "rejected");
+    if (failed) throw failed.reason;
+  }
+  completedParts.sort((a, b) => a.partNumber - b.partNumber);
+  const fileResponse = await storageApi.completeMultipartUpload(
+    presigned.fileId,
+    multipart.uploadId,
+    completedParts
+  );
+  onProgress?.(100);
+  return fileResponse;
+}
+async function runUploadBatch(files, platformUploadFn, slotIds, conversationId, onProgress, platformCompressFn, compressionConfig, platformUploadPartFn) {
   const compressedFiles = await Promise.all(
     files.map((f) => compressFile(f, platformCompressFn, compressionConfig ?? { enabled: false, imageQuality: 0.85, imageMaxDimension: 1920, compressDocuments: true }))
   );
@@ -424,11 +640,19 @@ async function runUploadBatch(files, platformUploadFn, slotIds, conversationId,
       const { file, slotId } = slotted[originalIdx];
       progressMap[originalIdx] = 0;
       try {
-        await platformUploadFn(presigned, file, (pct) => {
-          progressMap[originalIdx] = Math.round(pct * 0.9);
-          reportProgress();
-        });
-        const fileResponse = await storageApi.confirmUpload(presigned.fileId);
+        let fileResponse;
+        if (presigned.multipart && platformUploadPartFn) {
+          fileResponse = await runMultipartUpload(presigned, file, platformUploadPartFn, (pct) => {
+            progressMap[originalIdx] = pct;
+            reportProgress();
+          });
+        } else {
+          await platformUploadFn(presigned, file, (pct) => {
+            progressMap[originalIdx] = Math.round(pct * 0.9);
+            reportProgress();
+          });
+          fileResponse = await storageApi.confirmUpload(presigned.fileId);
+        }
         progressMap[originalIdx] = 100;
         reportProgress();
         successful.push(fileResponse);
@@ -440,13 +664,13 @@ async function runUploadBatch(files, platformUploadFn, slotIds, conversationId,
   );
   return { result: { successful, failed }, slotToFile };
 }
-async function uploadBatch(files, platformUploadFn, conversationId, onProgress, platformCompressFn, compressionConfig) {
+async function uploadBatch(files, platformUploadFn, conversationId, onProgress, platformCompressFn, compressionConfig, platformUploadPartFn) {
   const slotIds = files.map(() => generateUUID());
-  const { result } = await runUploadBatch(files, platformUploadFn, slotIds, conversationId, onProgress, platformCompressFn, compressionConfig);
+  const { result } = await runUploadBatch(files, platformUploadFn, slotIds, conversationId, onProgress, platformCompressFn, compressionConfig, platformUploadPartFn);
   return result;
 }
-async function uploadBatchWithSlots(files, platformUploadFn, slotIds, conversationId, onProgress, platformCompressFn, compressionConfig) {
-  return runUploadBatch(files, platformUploadFn, slotIds, conversationId, onProgress, platformCompressFn, compressionConfig);
+async function uploadBatchWithSlots(files, platformUploadFn, slotIds, conversationId, onProgress, platformCompressFn, compressionConfig, platformUploadPartFn) {
+  return runUploadBatch(files, platformUploadFn, slotIds, conversationId, onProgress, platformCompressFn, compressionConfig, platformUploadPartFn);
 }
 
 export {
@@ -456,9 +680,18 @@ export {
   isTransitEnvelope,
   configureTransit,
   setTransitSession,
+  getTransitSession,
   clearTransitSession,
   isTransitEnabled,
   getSessionKey,
+  getSessionId,
+  detectTransitAlgo,
+  resetAlgoCache,
+  fetchServerKeys,
+  generateEphemeralKey,
+  createRestTransitSession,
+  performHandshake,
+  getTransitHandshakePromise,
   initApiClient,
   setApiClientInstance,
   getApiClient,
@@ -467,4 +700,4 @@ export {
   uploadBatch,
   uploadBatchWithSlots
 };
-//# sourceMappingURL=chunk-P7VAN6NA.js.map
+//# sourceMappingURL=chunk-ZNA6B2R5.js.map