simstudioai--sim/apps/sim/app/api/tools/daytona/upload/route.ts

import { createLogger } from '@sim/logger'
import { getErrorMessage } from '@sim/utils/errors'
import { type NextRequest, NextResponse } from 'next/server'
import { daytonaUploadFileContract } from '@/lib/api/contracts/tools/daytona'
import { parseRequest } from '@/lib/api/server'
import { checkInternalAuth } from '@/lib/auth/hybrid'
import { generateRequestId } from '@/lib/core/utils/request'
import { withRouteHandler } from '@/lib/core/utils/with-route-handler'
import { processFilesToUserFiles, type RawFileInput } from '@/lib/uploads/utils/file-utils'
import { downloadServableFileFromStorage } from '@/lib/uploads/utils/file-utils.server'
import { docNotReadyResponse } from '@/lib/uploads/utils/servable-file-response'
import { assertToolFileAccess } from '@/app/api/files/authorization'
import { DAYTONA_TOOLBOX_BASE_URL, extractDaytonaError } from '@/tools/daytona/utils'

export const dynamic = 'force-dynamic'

const logger = createLogger('DaytonaUploadAPI')

const MAX_UPLOAD_SIZE_BYTES = 100 * 1024 * 1024

export const POST = withRouteHandler(async (request: NextRequest) => {
  const requestId = generateRequestId()

  try {
    const authResult = await checkInternalAuth(request, { requireWorkflowId: false })

    if (!authResult.success || !authResult.userId) {
      logger.warn(`[${requestId}] Unauthorized Daytona upload attempt: ${authResult.error}`)
      return NextResponse.json(
        { success: false, error: authResult.error || 'Authentication required' },
        { status: 401 }
      )
    }

    logger.info(`[${requestId}] Authenticated Daytona upload request via ${authResult.authType}`)

    const parsed = await parseRequest(daytonaUploadFileContract, request, {})
    if (!parsed.success) return parsed.response
    const params = parsed.data.body

    let fileBuffer: Buffer
    let fileName: string

    if (params.file) {
      const userFiles = processFilesToUserFiles([params.file as RawFileInput], requestId, logger)

      if (userFiles.length === 0) {
        return NextResponse.json({ success: false, error: 'Invalid file input' }, { status: 400 })
      }

      const userFile = userFiles[0]
      const denied = await assertToolFileAccess(userFile.key, authResult.userId, requestId, logger)
      if (denied) return denied

      if (userFile.size > MAX_UPLOAD_SIZE_BYTES) {
        const sizeMB = (userFile.size / (1024 * 1024)).toFixed(2)
        return NextResponse.json(
          { success: false, error: `File size (${sizeMB}MB) exceeds upload limit of 100MB` },
          { status: 400 }
        )
      }

      logger.info(`[${requestId}] Downloading file: ${userFile.name} (${userFile.size} bytes)`)
      try {
        const servable = await downloadServableFileFromStorage(userFile, requestId, logger)
        fileBuffer = servable.buffer
      } catch (error) {
        const notReady = docNotReadyResponse(error)
        if (notReady) return notReady
        logger.error(`[${requestId}] Failed to download file from storage:`, error)
        return NextResponse.json(
          { success: false, error: getErrorMessage(error, 'Failed to download file') },
          { status: 500 }
        )
      }
      fileName = params.fileName || userFile.name
    } else if (params.fileContent) {
      logger.info(`[${requestId}] Using legacy base64 content input`)
      const estimatedSize = Math.floor((params.fileContent.length * 3) / 4)
      if (estimatedSize > MAX_UPLOAD_SIZE_BYTES) {
        const sizeMB = (estimatedSize / (1024 * 1024)).toFixed(2)
        return NextResponse.json(
          { success: false, error: `File size (${sizeMB}MB) exceeds upload limit of 100MB` },
          { status: 400 }
        )
      }
      fileBuffer = Buffer.from(params.fileContent, 'base64')
      fileName = params.fileName || 'file'
    } else {
      return NextResponse.json({ success: false, error: 'File is required' }, { status: 400 })
    }

    if (fileBuffer.length > MAX_UPLOAD_SIZE_BYTES) {
      const sizeMB = (fileBuffer.length / (1024 * 1024)).toFixed(2)
      return NextResponse.json(
        { success: false, error: `File size (${sizeMB}MB) exceeds upload limit of 100MB` },
        { status: 400 }
      )
    }

    const requestedPath = params.destinationPath.trim()
    if (!requestedPath) {
      return NextResponse.json(
        { success: false, error: 'Destination path is required' },
        { status: 400 }
      )
    }
    const destinationPath = requestedPath.endsWith('/')
      ? `${requestedPath}${fileName}`
      : requestedPath

    logger.info(
      `[${requestId}] Uploading to Daytona sandbox ${params.sandboxId}: ${destinationPath} (${fileBuffer.length} bytes)`
    )

    const formData = new FormData()
    formData.append(
      'file',
      new Blob([new Uint8Array(fileBuffer)], { type: 'application/octet-stream' }),
      fileName
    )

    const uploadUrl = `${DAYTONA_TOOLBOX_BASE_URL}/${encodeURIComponent(params.sandboxId.trim())}/files/upload?path=${encodeURIComponent(destinationPath)}`
    const response = await fetch(uploadUrl, {
      method: 'POST',
      headers: {
        Authorization: `Bearer ${params.apiKey}`,
      },
      body: formData,
    })

    if (!response.ok) {
      const errorMessage = await extractDaytonaError(response, 'Failed to upload file')
      logger.error(`[${requestId}] Daytona API error:`, { status: response.status, errorMessage })
      return NextResponse.json({ success: false, error: errorMessage }, { status: response.status })
    }

    logger.info(`[${requestId}] File uploaded successfully: ${destinationPath}`)

    return NextResponse.json({
      success: true,
      uploadedPath: destinationPath,
      name: fileName,
      size: fileBuffer.length,
    })
  } catch (error) {
    logger.error(`[${requestId}] Unexpected error:`, error)
    return NextResponse.json(
      { success: false, error: getErrorMessage(error, 'Unknown error') },
      { status: 500 }
    )
  }
})