@fluxfiles/node 0.1.24 → 0.1.26

package/dist/index.d.mts

@@ -146,7 +146,22 @@ interface BaseTokenOptions {
     /** Paid-module claims (3-layer gate: code installed + licensed + this claim).
      *  All default off; inert unless the module is installed & licensed on the server. */
     allowShare?: boolean;
+    /** Share landing: TTL (seconds) of the presigned S3/R2 URL a download redirects to.
+     *  Clamped to [10, 300] by the core; `0`/omitted = 60. On S3/R2 the download cap
+     *  counts **grants**, not GETs — this bounds that window. */
+    shareUrlTtl?: number;
+    /** Public base the share create response builds the recipient link from
+     *  (e.g. `https://files.acme.com/public/share.html`). http(s) only; empty = the
+     *  request origin. */
+    shareBaseUrl?: string;
+    /** Allow the share landing to render an inline preview (images via /api/fm/img;
+     *  PDFs only on uncapped shares). Default true; false = download-only. */
+    sharePreview?: boolean;
     allowIntake?: boolean;
+    /** Public base the intake create response builds the portal link from
+     *  (e.g. `https://files.acme.com/public/intake.html`). http(s) only; empty = the
+     *  request origin + `/public/intake.html`. Mirrors `shareBaseUrl`. */
+    intakeBaseUrl?: string;
     allowVersioning?: boolean;
     allowAiVision?: boolean;
     allowOcr?: boolean;

package/dist/index.d.ts

@@ -146,7 +146,22 @@ interface BaseTokenOptions {
     /** Paid-module claims (3-layer gate: code installed + licensed + this claim).
      *  All default off; inert unless the module is installed & licensed on the server. */
     allowShare?: boolean;
+    /** Share landing: TTL (seconds) of the presigned S3/R2 URL a download redirects to.
+     *  Clamped to [10, 300] by the core; `0`/omitted = 60. On S3/R2 the download cap
+     *  counts **grants**, not GETs — this bounds that window. */
+    shareUrlTtl?: number;
+    /** Public base the share create response builds the recipient link from
+     *  (e.g. `https://files.acme.com/public/share.html`). http(s) only; empty = the
+     *  request origin. */
+    shareBaseUrl?: string;
+    /** Allow the share landing to render an inline preview (images via /api/fm/img;
+     *  PDFs only on uncapped shares). Default true; false = download-only. */
+    sharePreview?: boolean;
     allowIntake?: boolean;
+    /** Public base the intake create response builds the portal link from
+     *  (e.g. `https://files.acme.com/public/intake.html`). http(s) only; empty = the
+     *  request origin + `/public/intake.html`. Mirrors `shareBaseUrl`. */
+    intakeBaseUrl?: string;
     allowVersioning?: boolean;
     allowAiVision?: boolean;
     allowOcr?: boolean;

package/dist/index.js

@@ -178,7 +178,11 @@ function applyTenantOverrides(payload, opts) {
   if (opts.esignUrl) payload.esign_url = String(opts.esignUrl);
   if (opts.allowOptimize !== void 0) payload.allow_optimize = !!opts.allowOptimize;
   if (opts.allowShare !== void 0) payload.allow_share = !!opts.allowShare;
+  if (opts.shareUrlTtl && opts.shareUrlTtl > 0) payload.share_url_ttl = Math.trunc(opts.shareUrlTtl);
+  if (opts.shareBaseUrl) payload.share_base_url = String(opts.shareBaseUrl);
+  if (opts.sharePreview !== void 0) payload.share_preview = !!opts.sharePreview;
   if (opts.allowIntake !== void 0) payload.allow_intake = !!opts.allowIntake;
+  if (opts.intakeBaseUrl) payload.intake_base_url = String(opts.intakeBaseUrl);
   if (opts.allowVersioning !== void 0) payload.allow_versioning = !!opts.allowVersioning;
   if (opts.versioningMax && opts.versioningMax > 0) payload.versioning_max = Math.trunc(opts.versioningMax);
   if (opts.versioningMaxMb && opts.versioningMaxMb > 0) payload.versioning_max_mb = Math.trunc(opts.versioningMaxMb);

package/dist/index.mjs

@@ -156,7 +156,11 @@ function applyTenantOverrides(payload, opts) {
   if (opts.esignUrl) payload.esign_url = String(opts.esignUrl);
   if (opts.allowOptimize !== void 0) payload.allow_optimize = !!opts.allowOptimize;
   if (opts.allowShare !== void 0) payload.allow_share = !!opts.allowShare;
+  if (opts.shareUrlTtl && opts.shareUrlTtl > 0) payload.share_url_ttl = Math.trunc(opts.shareUrlTtl);
+  if (opts.shareBaseUrl) payload.share_base_url = String(opts.shareBaseUrl);
+  if (opts.sharePreview !== void 0) payload.share_preview = !!opts.sharePreview;
   if (opts.allowIntake !== void 0) payload.allow_intake = !!opts.allowIntake;
+  if (opts.intakeBaseUrl) payload.intake_base_url = String(opts.intakeBaseUrl);
   if (opts.allowVersioning !== void 0) payload.allow_versioning = !!opts.allowVersioning;
   if (opts.versioningMax && opts.versioningMax > 0) payload.versioning_max = Math.trunc(opts.versioningMax);
   if (opts.versioningMaxMb && opts.versioningMaxMb > 0) payload.versioning_max_mb = Math.trunc(opts.versioningMaxMb);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fluxfiles/node",
-  "version": "0.1.24",
+  "version": "0.1.26",
   "description": "Server-side Node/TypeScript SDK for minting FluxFiles JWTs (plain + BYOB), byte-compatible with the PHP core",
   "license": "MIT",
   "sideEffects": false,

package/src/token.ts

@@ -151,7 +151,15 @@ function applyTenantOverrides(payload: Record<string, unknown>, opts: BaseTokenO
   if (opts.allowOptimize !== undefined) payload.allow_optimize = !!opts.allowOptimize;
   // Other paid-module claims (inert unless the module is installed + licensed).
   if (opts.allowShare !== undefined) payload.allow_share = !!opts.allowShare;
+  // Share landing config — read at create time and baked into the share record
+  // (the core clamps the TTL and drops a non-http(s) base URL on decode).
+  if (opts.shareUrlTtl && opts.shareUrlTtl > 0) payload.share_url_ttl = Math.trunc(opts.shareUrlTtl);
+  if (opts.shareBaseUrl) payload.share_base_url = String(opts.shareBaseUrl);
+  if (opts.sharePreview !== undefined) payload.share_preview = !!opts.sharePreview;
   if (opts.allowIntake !== undefined) payload.allow_intake = !!opts.allowIntake;
+  // Intake portal link base — same shape as shareBaseUrl (the core drops a
+  // non-http(s) value on decode).
+  if (opts.intakeBaseUrl) payload.intake_base_url = String(opts.intakeBaseUrl);
   if (opts.allowVersioning !== undefined) payload.allow_versioning = !!opts.allowVersioning;
   if (opts.versioningMax && opts.versioningMax > 0) payload.versioning_max = Math.trunc(opts.versioningMax);
   if (opts.versioningMaxMb && opts.versioningMaxMb > 0) payload.versioning_max_mb = Math.trunc(opts.versioningMaxMb);

package/src/types.ts

@@ -150,7 +150,22 @@ export interface BaseTokenOptions {
   /** Paid-module claims (3-layer gate: code installed + licensed + this claim).
    *  All default off; inert unless the module is installed & licensed on the server. */
   allowShare?: boolean;
+  /** Share landing: TTL (seconds) of the presigned S3/R2 URL a download redirects to.
+   *  Clamped to [10, 300] by the core; `0`/omitted = 60. On S3/R2 the download cap
+   *  counts **grants**, not GETs — this bounds that window. */
+  shareUrlTtl?: number;
+  /** Public base the share create response builds the recipient link from
+   *  (e.g. `https://files.acme.com/public/share.html`). http(s) only; empty = the
+   *  request origin. */
+  shareBaseUrl?: string;
+  /** Allow the share landing to render an inline preview (images via /api/fm/img;
+   *  PDFs only on uncapped shares). Default true; false = download-only. */
+  sharePreview?: boolean;
   allowIntake?: boolean;
+  /** Public base the intake create response builds the portal link from
+   *  (e.g. `https://files.acme.com/public/intake.html`). http(s) only; empty = the
+   *  request origin + `/public/intake.html`. Mirrors `shareBaseUrl`. */
+  intakeBaseUrl?: string;
   allowVersioning?: boolean;
   allowAiVision?: boolean;
   allowOcr?: boolean;