@xuda.io/drive_module 1.1.1503 → 1.1.1504

package/index.mjs

@@ -5185,3 +5185,58 @@ export const drive_set_plan = async function (req) {
     return { code: -1, data: err.message || String(err) };
   }
 };
+
+// ---------------------------------------------------------------------------
+// PLATFORM ARTIFACTS
+// ---------------------------------------------------------------------------
+// Uploads a platform-owned file (not a customer drive file) and returns a URL
+// that a third party can fetch for a short window. Built for the app bundler:
+// create_app_bundle writes a tree to a local directory, and a macOS build runs
+// on Codemagic's machine, so the archive has to be reachable from outside.
+//
+// Lives here because drive_module owns the R2 client, the bucket map and the
+// credentials. Nothing else should be constructing S3 clients.
+//
+// SIGNED, not public. There is no r2.public_base configured, so an uploaded
+// object has no public URL at all, and giving the bucket one would make every
+// object in it world-readable to solve a problem that is really "let one machine
+// read one file for ten minutes". A presigned URL keeps the bucket private and
+// expires on its own.
+export const upload_platform_artifact = async function ({ file_path, key, expires_in = 900, content_type = 'application/gzip' }) {
+  if (!file_path || !fs.existsSync(file_path)) {
+    return { code: -2, data: `artifact not found: ${file_path}` };
+  }
+  if (!key) return { code: -2, data: 'key is mandatory' };
+
+  const region_host = process.env.XUDA_HOSTNAME;
+  const conf = _conf.storage_bucket?.[region_host];
+  const s3 = _drive_s3_for(region_host);
+  if (!s3 || !conf) return { code: -2, data: `no storage config for ${region_host}` };
+
+  // Imported lazily and on purpose: @aws-sdk/s3-request-presigner is a separate
+  // package from client-s3, so a box that has not installed it would otherwise
+  // fail to LOAD drive_module rather than fail this one call.
+  let getSignedUrl;
+  try {
+    ({ getSignedUrl } = await import('@aws-sdk/s3-request-presigner'));
+  } catch (err) {
+    return { code: -2, data: 'missing dependency @aws-sdk/s3-request-presigner, run npm install in cpi/' };
+  }
+
+  const Bucket = conf.name;
+  const Key = `platform_artifacts/${String(key).replace(/^\/+/, '')}`;
+
+  try {
+    const upload = new Upload({
+      client: s3,
+      params: { Bucket, Key, Body: fs.createReadStream(file_path), ContentType: content_type },
+    });
+    await upload.done();
+
+    const url = await getSignedUrl(s3, new GetObjectCommand({ Bucket, Key }), { expiresIn: expires_in });
+
+    return { code: 1, data: { url, key: Key, bucket: Bucket, expires_in, bytes: fs.statSync(file_path).size } };
+  } catch (err) {
+    return { code: -1, data: `artifact upload failed: ${err.message}` };
+  }
+};

package/index_ms.mjs

@@ -441,6 +441,10 @@ export const drive_set_plan = async function (...args) {
   return await broker.send_to_queue("drive_set_plan", ...args);
 };
 
+export const upload_platform_artifact = async function (...args) {
+  return await broker.send_to_queue("upload_platform_artifact", ...args);
+};
+
 export const get_drive_files_studio = async function (...args) {
   return await broker.send_to_queue("get_drive_files_studio", ...args);
 };

package/index_msa.mjs

@@ -441,6 +441,10 @@ export const drive_set_plan =  function (...args) {
    broker.send_to_queue_async("drive_set_plan", ...args);
 };
 
+export const upload_platform_artifact =  function (...args) {
+   broker.send_to_queue_async("upload_platform_artifact", ...args);
+};
+
 export const get_drive_files_studio =  function (...args) {
    broker.send_to_queue_async("get_drive_files_studio", ...args);
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xuda.io/drive_module",
-  "version": "1.1.1503",
+  "version": "1.1.1504",
   "description": "Xuda Drive Server Module",
   "main": "index.mjs",
   "dependencies": {