@tomorrowos/sdk 0.4.5 → 0.4.7

package/dist/media-probe.d.ts

@@ -1,6 +1,7 @@
 /**
- * Best-effort video duration from file bytes (no ffprobe).
- * Supports common MP4/MOV (mvhd) and WebM (Duration element).
+ * Video duration from file bytes (no ffprobe).
+ * MP4/MOV: ISO BMFF box walk (moov/mvhd only — never scans inside mdat).
+ * WebM: Duration element in the file header region only.
  */
 export declare function probeVideoDurationMs(body: Buffer, filename: string): number | null;
 //# sourceMappingURL=media-probe.d.ts.map

package/dist/media-probe.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"media-probe.d.ts","sourceRoot":"","sources":["../src/media-probe.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA+DH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACf,MAAM,GAAG,IAAI,CAOf"}
+{"version":3,"file":"media-probe.d.ts","sourceRoot":"","sources":["../src/media-probe.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AA2IH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACf,MAAM,GAAG,IAAI,CAOf"}

package/dist/media-probe.js

@@ -1,54 +1,133 @@
 /**
- * Best-effort video duration from file bytes (no ffprobe).
- * Supports common MP4/MOV (mvhd) and WebM (Duration element).
+ * Video duration from file bytes (no ffprobe).
+ * MP4/MOV: ISO BMFF box walk (moov/mvhd only — never scans inside mdat).
+ * WebM: Duration element in the file header region only.
  */
 function isVideoFilename(name) {
     const lower = String(name || "").toLowerCase();
     return /\.(mp4|m4v|mov|webm|mkv|avi)$/.test(lower);
 }
-function probeMp4MvhdDurationMs(buf) {
-    let searchFrom = 0;
-    while (searchFrom < buf.length - 32) {
-        const idx = buf.indexOf("mvhd", searchFrom, "utf8");
-        if (idx < 8)
+function clampDurationMs(ms) {
+    if (!Number.isFinite(ms) || ms <= 0)
+        return 0;
+    return Math.min(3600 * 1000, Math.max(1000, Math.round(ms)));
+}
+function readBoxBounds(buf, offset) {
+    if (offset + 8 > buf.length)
+        return null;
+    let size = buf.readUInt32BE(offset);
+    const type = buf.toString("ascii", offset + 4, offset + 8);
+    let headerSize = 8;
+    if (size === 1) {
+        if (offset + 16 > buf.length)
+            return null;
+        const sizeBig = buf.readBigUInt64BE(offset + 8);
+        if (sizeBig < BigInt(headerSize))
+            return null;
+        if (sizeBig > BigInt(Number.MAX_SAFE_INTEGER)) {
+            // Box larger than JS can index; still validate against buffer length.
+            const endBig = BigInt(offset) + sizeBig;
+            if (endBig > BigInt(buf.length))
+                return null;
+            size = buf.length - offset;
+        }
+        else {
+            size = Number(sizeBig);
+        }
+        headerSize = 16;
+    }
+    else if (size === 0) {
+        size = buf.length - offset;
+    }
+    if (size < headerSize)
+        return null;
+    const end = offset + size;
+    if (end > buf.length)
+        return null;
+    return { type, contentStart: offset + headerSize, end };
+}
+function parseMvhdDurationMs(buf, contentStart, boxEnd) {
+    if (contentStart + 4 > boxEnd)
+        return null;
+    const version = buf[contentStart];
+    if (version === 0) {
+        if (contentStart + 28 > boxEnd)
+            return null;
+        const timescale = buf.readUInt32BE(contentStart + 20);
+        const duration = buf.readUInt32BE(contentStart + 24);
+        if (timescale <= 0 || duration <= 0)
+            return null;
+        return (duration / timescale) * 1000;
+    }
+    if (version === 1) {
+        if (contentStart + 40 > boxEnd)
+            return null;
+        const timescale = buf.readUInt32BE(contentStart + 28);
+        const durationHi = buf.readUInt32BE(contentStart + 32);
+        const durationLo = buf.readUInt32BE(contentStart + 36);
+        const duration = durationHi * 2 ** 32 + durationLo;
+        if (timescale <= 0 || duration <= 0)
+            return null;
+        return (duration / timescale) * 1000;
+    }
+    return null;
+}
+function findMvhdDurationInContainer(buf, start, end) {
+    let offset = start;
+    while (offset + 8 <= end) {
+        const box = readBoxBounds(buf, offset);
+        if (!box || box.end > end)
             break;
-        const boxStart = idx - 4;
-        if (boxStart < 0) {
-            searchFrom = idx + 4;
-            continue;
+        if (box.type === "mvhd") {
+            const ms = parseMvhdDurationMs(buf, box.contentStart, box.end);
+            if (ms != null)
+                return ms;
         }
-        const version = buf[boxStart + 8];
-        if (version === 0 && boxStart + 28 <= buf.length) {
-            const timescale = buf.readUInt32BE(boxStart + 20);
-            const duration = buf.readUInt32BE(boxStart + 24);
-            if (timescale > 0 && duration > 0) {
-                return clampDurationMs((duration / timescale) * 1000);
-            }
+        // moov/trak/mdia/minf/stbl can nest further boxes; only recurse into containers.
+        if (box.type === "moov" ||
+            box.type === "trak" ||
+            box.type === "mdia" ||
+            box.type === "minf" ||
+            box.type === "stbl") {
+            const nested = findMvhdDurationInContainer(buf, box.contentStart, box.end);
+            if (nested != null)
+                return nested;
         }
-        if (version === 1 && boxStart + 40 <= buf.length) {
-            const timescale = buf.readUInt32BE(boxStart + 28);
-            const duration = buf.readUInt32BE(boxStart + 32) * 2 ** 32 + buf.readUInt32BE(boxStart + 36);
-            if (timescale > 0 && duration > 0) {
-                return clampDurationMs((duration / timescale) * 1000);
-            }
+        offset = box.end;
+    }
+    return null;
+}
+/** Walk top-level ISO boxes; skip mdat without scanning its payload. */
+function probeMp4DurationMs(buf) {
+    let offset = 0;
+    while (offset + 8 <= buf.length) {
+        const box = readBoxBounds(buf, offset);
+        if (!box)
+            break;
+        if (box.type === "moov") {
+            const ms = findMvhdDurationInContainer(buf, box.contentStart, box.end);
+            if (ms != null)
+                return clampDurationMs(ms);
         }
-        searchFrom = idx + 4;
+        offset = box.end;
     }
     return null;
 }
+const WEBM_HEADER_PROBE_BYTES = 512 * 1024;
 function probeWebmDurationMs(buf) {
+    const header = buf.subarray(0, Math.min(buf.length, WEBM_HEADER_PROBE_BYTES));
     const marker = Buffer.from([0x44, 0x89]);
     let searchFrom = 0;
-    while (searchFrom < buf.length - 12) {
-        const idx = buf.indexOf(marker, searchFrom);
+    while (searchFrom < header.length - 12) {
+        const idx = header.indexOf(marker, searchFrom);
         if (idx < 0)
             break;
         const sizePos = idx + 2;
-        if (sizePos + 9 > buf.length)
+        if (sizePos + 9 > header.length)
             break;
-        const size = buf[sizePos];
-        if (size === 0x84 && sizePos + 9 <= buf.length) {
-            const duration = buf.readFloatBE(sizePos + 1);
+        const size = header[sizePos];
+        if (size === 0x84 && sizePos + 9 <= header.length) {
+            const duration = header.readFloatBE(sizePos + 1);
             if (Number.isFinite(duration) && duration > 0) {
                 return clampDurationMs(duration);
             }
@@ -57,17 +136,12 @@ function probeWebmDurationMs(buf) {
     }
     return null;
 }
-function clampDurationMs(ms) {
-    if (!Number.isFinite(ms) || ms <= 0)
-        return 0;
-    return Math.min(3600 * 1000, Math.max(1000, Math.round(ms)));
-}
 export function probeVideoDurationMs(body, filename) {
     if (!body?.length || !isVideoFilename(filename))
         return null;
     const lower = filename.toLowerCase();
     if (lower.endsWith(".webm")) {
-        return probeWebmDurationMs(body) ?? probeMp4MvhdDurationMs(body);
+        return probeWebmDurationMs(body) ?? probeMp4DurationMs(body);
     }
-    return probeMp4MvhdDurationMs(body) ?? probeWebmDurationMs(body);
+    return probeMp4DurationMs(body) ?? probeWebmDurationMs(body);
 }

package/dist/tomorrowos.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tomorrowos.d.ts","sourceRoot":"","sources":["../src/tomorrowos.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,IAAI,MAAM,MAAM,CAAC;AAUxB,OAAO,EAAE,eAAe,EAAE,KAAK,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAChF,OAAO,KAAK,EAIV,eAAe,EAChB,MAAM,kBAAkB,CAAC;AAQ1B,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,eAAe,CAAC;IACvB,6EAA6E;IAC7E,KAAK,CAAC,EAAE,eAAe,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAwBD,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,kBAAkB,EAAE,OAAO,CAAC;IAC5B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mEAAmE;IACnE,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,kBAAkB,EAAE,KAAK,CAAC;QACxB,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;IACH,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAyID,qBAAa,UAAW,SAAQ,YAAY;IAC1C,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkB;IACxC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAmC;IAC3D,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAsC;IACxE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuC;IAClE,OAAO,CAAC,UAAU,CAA4B;IAC9C,OAAO,CAAC,GAAG,CAAgC;IAC3C,OAAO,CAAC,UAAU,CAAuB;IACzC,OAAO,CAAC,eAAe,CAAgB;gBAE3B,OAAO,EAAE,iBAAiB;IAOtC,yFAAyF;IACnF,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;QACxD,MAAM,EAAE,OAAO,CAAC;QAChB,MAAM,CAAC,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC;KACtC,CAAC;YAkBY,iBAAiB;IAY/B,6EAA6E;IACvE,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAgEhE,6EAA6E;IACvE,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;IA4BvF,OAAO;uBACU,MAAM;sBA9FgC,MAAM;;2BA+FxC,MAAM;sBA9BgC,MAAM;sBAAY,OAAO;;MA+BlF;IAEF,kFAAkF;IAC5E,WAAW,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IAsD9C,OAAO,CAAC,aAAa;IASrB,OAAO,CAAC,aAAa;IAMrB,OAAO,CAAC,iBAAiB;IAKzB,OAAO,CAAC,gBAAgB;YAeV,+BAA+B;YAiC/B,iBAAiB;YASjB,iBAAiB;YA4BjB,kBAAkB;IAUhC,uFAAuF;IACvF,OAAO,CAAC,kBAAkB;YAmBZ,gBAAgB;YAMhB,uBAAuB;IAoCrC,MAAM,CAAC,QAAQ,EAAE,MAAM;oBAGD,CAAC,oBACT,MAAM,WACN,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;;IAU5E,OAAO,CAAC,mBAAmB;IA6D3B,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,CAAC,MAAM;YAmD7B,iBAAiB;YAyCjB,wBAAwB;YAiBxB,cAAc;YAiDd,UAAU;YAiRV,gBAAgB;IAqG9B,OAAO,CAAC,iBAAiB;IAWzB,OAAO,CAAC,gBAAgB;CA4HzB"}
+{"version":3,"file":"tomorrowos.d.ts","sourceRoot":"","sources":["../src/tomorrowos.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,IAAI,MAAM,MAAM,CAAC;AAUxB,OAAO,EAAE,eAAe,EAAE,KAAK,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAChF,OAAO,KAAK,EAIV,eAAe,EAChB,MAAM,kBAAkB,CAAC;AAS1B,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,eAAe,CAAC;IACvB,6EAA6E;IAC7E,KAAK,CAAC,EAAE,eAAe,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAwBD,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,kBAAkB,EAAE,OAAO,CAAC;IAC5B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mEAAmE;IACnE,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,kBAAkB,EAAE,KAAK,CAAC;QACxB,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;IACH,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAyID,qBAAa,UAAW,SAAQ,YAAY;IAC1C,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkB;IACxC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAmC;IAC3D,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAsC;IACxE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuC;IAClE,OAAO,CAAC,UAAU,CAA4B;IAC9C,OAAO,CAAC,GAAG,CAAgC;IAC3C,OAAO,CAAC,UAAU,CAAuB;IACzC,OAAO,CAAC,eAAe,CAAgB;gBAE3B,OAAO,EAAE,iBAAiB;IAOtC,yFAAyF;IACnF,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;QACxD,MAAM,EAAE,OAAO,CAAC;QAChB,MAAM,CAAC,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC;KACtC,CAAC;YAkBY,iBAAiB;IAY/B,6EAA6E;IACvE,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAgEhE,6EAA6E;IACvE,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;IA4BvF,OAAO;uBACU,MAAM;sBA9FgC,MAAM;;2BA+FxC,MAAM;sBA9BgC,MAAM;sBAAY,OAAO;;MA+BlF;IAEF,kFAAkF;IAC5E,WAAW,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IAsD9C,OAAO,CAAC,aAAa;IASrB,OAAO,CAAC,aAAa;IAMrB,OAAO,CAAC,iBAAiB;IAKzB,OAAO,CAAC,gBAAgB;YAeV,+BAA+B;YAiC/B,iBAAiB;YASjB,iBAAiB;YA4BjB,kBAAkB;IAUhC,uFAAuF;IACvF,OAAO,CAAC,kBAAkB;YAmBZ,gBAAgB;YAMhB,uBAAuB;IAoCrC,MAAM,CAAC,QAAQ,EAAE,MAAM;oBAGD,CAAC,oBACT,MAAM,WACN,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;;IAU5E,OAAO,CAAC,mBAAmB;IA6D3B,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,CAAC,MAAM;YAmD7B,iBAAiB;YA6CjB,wBAAwB;YAiBxB,cAAc;YAiDd,UAAU;YAiRV,gBAAgB;IAqG9B,OAAO,CAAC,iBAAiB;IAWzB,OAAO,CAAC,gBAAgB;CA4HzB"}

package/dist/tomorrowos.js

@@ -9,6 +9,7 @@ import { PlaylistCatalog } from "./playlist-catalog.js";
 import { MemoryStore } from "./store/memory-store.js";
 import { resolveBrandLogoPath, syncProjectAssetsToStaticRoot } from "./brand-assets.js";
 import { probeVideoDurationMs } from "./media-probe.js";
+import { storeUploadIfNeeded } from "./upload-storage.js";
 function formatDurationMs(ms) {
     if (!Number.isFinite(ms) || ms < 0)
         return "0s";
@@ -565,17 +566,17 @@ export class TomorrowOS extends EventEmitter {
             }
             const rawName = url.searchParams.get("filename") || "upload";
             const safeName = sanitizeUploadFilename(rawName);
-            const storedName = `${randomUUID()}-${safeName}`;
             const uploadsDir = path.join(path.resolve(this.staticRoot), "uploads");
             await fs.mkdir(uploadsDir, { recursive: true });
-            const filePath = path.join(uploadsDir, storedName);
-            await fs.writeFile(filePath, body);
+            const { storedName, deduplicated, contentHash } = await storeUploadIfNeeded(uploadsDir, body, safeName);
             const durationMs = probeVideoDurationMs(body, safeName);
             const payload = {
                 status: "success",
                 url: `/uploads/${storedName}`,
                 filename: storedName,
-                size: body.length
+                size: body.length,
+                contentHash,
+                deduplicated
             };
             if (durationMs != null)
                 payload.durationMs = durationMs;

package/dist/upload-storage.d.ts

@@ -0,0 +1,12 @@
+/** Stable on-disk name: first 16 chars of SHA-256 + original safe filename. */
+export declare function buildContentAddressedName(body: Buffer, safeName: string): string;
+export declare function contentHashHex(body: Buffer): string;
+/**
+ * Write upload once per unique file bytes; reuse existing file when present.
+ */
+export declare function storeUploadIfNeeded(uploadsDir: string, body: Buffer, safeName: string): Promise<{
+    storedName: string;
+    deduplicated: boolean;
+    contentHash: string;
+}>;
+//# sourceMappingURL=upload-storage.d.ts.map

package/dist/upload-storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload-storage.d.ts","sourceRoot":"","sources":["../src/upload-storage.ts"],"names":[],"mappings":"AAIA,+EAA+E;AAC/E,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAGhF;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CACvC,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,CAgB7E"}

package/dist/upload-storage.js

@@ -0,0 +1,30 @@
+import { createHash } from "crypto";
+import fs from "fs/promises";
+import path from "path";
+/** Stable on-disk name: first 16 chars of SHA-256 + original safe filename. */
+export function buildContentAddressedName(body, safeName) {
+    const hash = createHash("sha256").update(body).digest("hex");
+    return `${hash.slice(0, 16)}-${safeName}`;
+}
+export function contentHashHex(body) {
+    return createHash("sha256").update(body).digest("hex");
+}
+/**
+ * Write upload once per unique file bytes; reuse existing file when present.
+ */
+export async function storeUploadIfNeeded(uploadsDir, body, safeName) {
+    const contentHash = contentHashHex(body);
+    const storedName = buildContentAddressedName(body, safeName);
+    const filePath = path.join(uploadsDir, storedName);
+    try {
+        const stat = await fs.stat(filePath);
+        if (stat.size === body.length) {
+            return { storedName, deduplicated: true, contentHash };
+        }
+    }
+    catch {
+        // missing — write below
+    }
+    await fs.writeFile(filePath, body);
+    return { storedName, deduplicated: false, contentHash };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tomorrowos/sdk",
-  "version": "0.4.5",
+  "version": "0.4.7",
   "description": "TomorrowOS CMS server SDK - WebSocket transport, pairing, device commands, optional static CMS UI. Includes CLI (tomorrowos init / build) and starter templates.",
   "type": "module",
   "main": "./dist/index.js",

package/templates/cms-starter/package.json

@@ -1,6 +1,6 @@
 {
   "name": "my-cms",
-  "version": "0.4.5",
+  "version": "0.4.7",
   "description": "CMS server on @tomorrowos/sdk. Add your UI (React, static files, etc.) alongside this server.",
   "private": true,
   "type": "module",
@@ -10,7 +10,7 @@
     "build-player": "tomorrowos build --platform tizen"
   },
   "dependencies": {
-    "@tomorrowos/sdk": "^0.4.5"
+    "@tomorrowos/sdk": "^0.4.7"
   },
   "devDependencies": {
     "@types/node": "^20.0.0",
@@ -18,4 +18,4 @@
     "typescript": "^5.5.0"
   }
 }
-
+

package/templates/cms-starter/public/methods.js

@@ -273,14 +273,17 @@ function probeVideoDurationInBrowser(fileOrUrl) {
 async function resolveVideoDurationMs(file, type, uploadData) {
   if (type !== "video") return defaultDurationMs(type);
 
-  const fromServer = Number(uploadData?.durationMs);
-  if (Number.isFinite(fromServer) && fromServer > 0) {
-    return clampVideoDurationMs(fromServer) ?? defaultDurationMs(type);
-  }
-
+  // Local File metadata is the most reliable source during upload.
   const fromFile = await probeVideoDurationInBrowser(file);
   if (fromFile) return fromFile;
 
+  const fromServerRaw = Number(uploadData?.durationMs);
+  const fromServer =
+    Number.isFinite(fromServerRaw) && fromServerRaw > 0
+      ? clampVideoDurationMs(fromServerRaw)
+      : null;
+  if (fromServer) return fromServer;
+
   if (uploadData?.url) {
     try {
       const fromUrl = await probeVideoDurationInBrowser(absoluteMediaUrl(uploadData.url));