Function POST

apps/web/src/app/api/upload-cli-session-blob-v2/route.ts:23–84

(request: NextRequest)

});

export async function POST(request: NextRequest) {
  const { user, authFailedResponse } = await getUserFromAuth({ adminOnly: false });
  if (authFailedResponse) return authFailedResponse;

  let body: unknown;
  try {
    body = await request.json();
  } catch {
    return NextResponse.json({ error: 'Invalid JSON body' }, { status: 400 });
  }

  const bodyResult = BodySchema.safeParse(body);

  if (!bodyResult.success) {
    return NextResponse.json(
      {
        error: 'Invalid request body',
        details: z.treeifyError(bodyResult.error),
      },
      { status: 400 }
    );
  }

  const { session_id, blob_type, content_length } = bodyResult.data;

  const [existingSession] = await db
    .select()
    .from(cliSessions)
    .where(and(eq(cliSessions.session_id, session_id), eq(cliSessions.kilo_user_id, user.id)))
    .limit(1);

  if (!existingSession) {
    return NextResponse.json({ error: 'Session not found' }, { status: 404 });
  }

  const { signedUrl, key: blobKey } = await generateSignedUploadUrl(
    session_id,
    user.id,
    'sessions',
    blob_type,
    content_length
  );

  const [updatedSession] = await db
    .update(cliSessions)
    .set({ [`${blob_type}_blob_url`]: blobKey })
    .where(and(eq(cliSessions.session_id, session_id), eq(cliSessions.kilo_user_id, user.id)))
    .returning({
      session_id: cliSessions.session_id,
      updated_at: cliSessions.updated_at,
    });

  if (!updatedSession) {
    return NextResponse.json({ error: 'Failed to update session' }, { status: 500 });
  }

  return NextResponse.json({
    signed_url: signedUrl,