@lacrous/omnicloud 0.2.16 → 0.2.17

package/dist/index.cjs

@@ -1477,6 +1477,20 @@ function sanitizeFileName(name) {
   return cleaned.slice(0, 255);
 }
 
+// ../core/src/utils/request-fingerprint.ts
+var import_node_crypto4 = require("crypto");
+function uploadRequestFingerprint(input) {
+  const contentHash = input.spooled?.sha256 ?? sha256Hex(input.data ?? Buffer.alloc(0));
+  const canonical = JSON.stringify({
+    name: sanitizeFileName(input.name),
+    folderId: input.folderId ?? null,
+    replaceFileId: input.replaceFileId ?? null,
+    contentHash,
+    size: input.spooled?.size ?? input.data?.byteLength ?? 0
+  });
+  return (0, import_node_crypto4.createHash)("sha256").update(canonical).digest("hex");
+}
+
 // ../core/src/services/file-service.ts
 var FileService = class {
   constructor(files, folders, engineFor, activity = noopActivityRecorder, operations = null, log = null) {
@@ -1515,7 +1529,13 @@ var FileService = class {
     if (!isValidOperationId(operationId)) {
       throw new ValidationError("Invalid upload operation id");
     }
+    const fingerprint = uploadRequestFingerprint(input);
     let op = await operations.findByOperationId(userId, operationId);
+    if (op?.requestFingerprint && op.requestFingerprint !== fingerprint) {
+      throw new ConflictError(
+        "This upload key was already used for a different file. Use a new key for a new upload."
+      );
+    }
     if (op?.status === "COMPLETED" && op.fileId) {
       return this.get(userId, op.fileId);
     }
@@ -1524,7 +1544,7 @@ var FileService = class {
     }
     if (!op) {
       try {
-        op = await operations.create({ userId, operationId });
+        op = await operations.create({ userId, operationId, requestFingerprint: fingerprint });
       } catch (error) {
         if (!(error instanceof OperationAlreadyExistsError)) throw error;
         const outcome = await this.followWinner(userId, input, operationId, operations);
@@ -2634,7 +2654,7 @@ var RecentService = class {
 };
 
 // ../core/src/utils/spool.ts
-var import_node_crypto4 = require("crypto");
+var import_node_crypto5 = require("crypto");
 var import_node_fs = require("fs");
 var import_promises = require("fs/promises");
 var import_node_os = require("os");
@@ -2643,7 +2663,7 @@ var import_node_stream2 = require("stream");
 var import_promises2 = require("stream/promises");
 
 // ../core/src/utils/secret-box.ts
-var import_node_crypto5 = require("crypto");
+var import_node_crypto6 = require("crypto");
 
 // ../telegram/src/client.ts
 var import_telegram = require("telegram");
@@ -3228,7 +3248,7 @@ var TelegramStorageProvider = class {
 };
 
 // ../telegram/src/connection.ts
-var import_node_crypto6 = require("crypto");
+var import_node_crypto7 = require("crypto");
 var import_telegram3 = require("telegram");
 var import_Password = require("telegram/Password.js");
 var TELEGRAM_PROVIDER = "telegram";
@@ -3310,7 +3330,7 @@ var TelegramConnectionService = class {
         needsPassword: false,
         failure: null
       };
-      const flowId = (0, import_node_crypto6.randomUUID)();
+      const flowId = (0, import_node_crypto7.randomUUID)();
       const token = await this.exportQrToken(client);
       this.qrFlows.set(flowId, flow);
       this.watchQrApproval(flowId, flow);