@bunbase-ae/js 3.3.1-next.415.8034a93 → 3.3.1-next.420.2c6b78c

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bunbase-ae/js",
-  "version": "3.3.1-next.415.8034a93",
+  "version": "3.3.1-next.420.2c6b78c",
   "type": "module",
   "description": "TypeScript/JavaScript SDK for BunBase",
   "license": "UNLICENSED",

package/src/storage.ts

@@ -201,6 +201,20 @@ export class StorageClient {
     return filename ? `${base}/${encodeURIComponent(filename)}` : base;
   }
 
+  // Get a time-limited signed download URL for a file id (issue #699).
+  // Works for private files: the returned URL carries a `?token=` (local
+  // provider) or is an S3 presigned-GET URL, so it can be used directly in an
+  // `<img src>` without an Authorization header. Gated server-side by the
+  // bucket's access_read policy plus the file's owner/tenant rules.
+  async signedUrl(id: string, options: { expiresIn?: number } = {}): Promise<string> {
+    const res = await this.http.request<{ id: string; key: string; url: string }>(
+      "POST",
+      "/api/v1/storage/sign",
+      { body: { id, method: "GET", expires_in: options.expiresIn } },
+    );
+    return res.url;
+  }
+
   async list(): Promise<FileRecord[]> {
     const res = await this.http.request<{ items: FileRecord[]; total: number }>(
       "GET",