@vived/sandbox 1.4.0 → 1.4.1

package/dist/index.mjs

@@ -4043,12 +4043,18 @@ class yv extends is {
     super(t, is.type), this.doUpload = (n) => {
       const r = this.vivedAPI, i = this.requestJSON, s = this.basicFetch;
       return !r || !i || !s ? Promise.reject() : new Promise((a, o) => {
-        const c = r.getEndpointURL(`upload/large/DataVariants/${n.name}`);
+        const c = r.getEndpointURL(`upload/large/DataVariants/${n.name}?function_version=2`);
         i(c).then((u) => {
-          const p = new URL(u);
-          return s(p, {
+          const { url: p, contentType: h } = u, y = new URL(p);
+          return s(y, {
             method: "PUT",
-            body: n
+            body: n,
+            // The SigV2 presigned PUT is signed with this exact Content-Type;
+            // echoing v2's own value guarantees the signature matches and S3
+            // stores the correct type instead of binary/octet-stream.
+            headers: {
+              "Content-Type": h
+            }
           });
         }).then((u) => {
           a();
@@ -4362,32 +4368,34 @@ class Dv extends aa {
     super(t, aa.type), this.doPost = (n) => {
       const r = this.fileUploader, i = this.getPlayerAuthToken, s = this.vivedAPI, a = this.jsonRequester;
       return !r || !i || !s || !a ? Promise.reject() : new Promise((o, c) => {
-        const { description: u, file: p, name: h, ownerID: y } = n;
-        let l;
-        const E = p.name.split("."), b = E[E.length - 1], S = `${ur()}.${b}`, A = new File([p], S, {
+        const { description: u, file: p, name: h, ownerID: y, ownerType: l } = n;
+        let E;
+        const b = p.name.split("."), S = b[b.length - 1], A = `${ur()}.${S}`, N = new File([p], A, {
+          type: p.type,
           lastModified: Date.now()
         });
-        r(A).then((N) => i()).then((N) => {
-          const _ = s.getEndpointURL("assets"), I = {
+        r(N).then((_) => i()).then((_) => {
+          const R = s.getEndpointURL("assets"), I = {
+            ownerId: y,
+            name: h,
+            description: u,
+            filename: A,
+            ...l !== void 0 && { ownerType: l }
+          }, v = {
             method: "POST",
-            body: JSON.stringify({
-              ownerId: y,
-              name: h,
-              description: u,
-              filename: S
-            }),
+            body: JSON.stringify(I),
             headers: {
-              Authorization: "Bearer " + N
+              Authorization: "Bearer " + _
             }
           };
-          return a(_, I);
-        }).then((N) => {
-          l = N.assetId, o({
-            id: l,
-            filename: S
+          return a(R, v);
+        }).then((_) => {
+          E = _.assetId, o({
+            id: E,
+            filename: A
           });
-        }).catch((N) => {
-          c(N);
+        }).catch((_) => {
+          c(_);
         });
       });
     }, this.appObjects.registerSingleton(this);
@@ -5390,7 +5398,11 @@ class TO extends _o {
           description: c,
           name: p,
           file: u,
-          ownerID: s.appID
+          ownerID: s.appID,
+          // App-owned create: the backend authorizes this via the `app` branch
+          // only when the row carries ownerType "app" (it does not infer it).
+          // See vivedlearning/vived-api-legacy#133.
+          ownerType: "app"
         }, y = (l = this.spinnerFactory) == null ? void 0 : l.make({
           title: "New App Asset",
           message: "Posting new app asset..."