Function uploadToS3

utils/s3.ts:99–224

(
    fileBlob: Blob,
    filename: string,
    native: PluginNative<typeof import("../native")> | null,
    uploadRequest: UploadRequest
)

}

export async function uploadToS3(
    fileBlob: Blob,
    filename: string,
    native: PluginNative<typeof import("../native")> | null,
    uploadRequest: UploadRequest
): Promise<string> {
    const {
        s3Endpoint,
        s3Bucket,
        s3Region = "auto",
        s3AccessKeyId,
        s3SecretAccessKey,
        s3SessionToken,
        s3PublicUrl,
        s3Prefix,
        s3ForcePathStyle = true
    } = settings.store as S3Store;

    if (!s3Endpoint || !s3Bucket || !s3Region || !s3AccessKeyId || !s3SecretAccessKey) {
        throw new Error("S3 endpoint, bucket, region, access key ID, and secret key are required");
    }

    const endpoint = new URL(s3Endpoint);
    if (!/^https?:$/.test(endpoint.protocol)) {
        throw new Error("S3 endpoint must be a valid HTTP(S) URL");
    }

    const extension = filename.includes(".") ? filename.slice(filename.lastIndexOf(".")) : "";
    const prefixSegments = (s3Prefix || "").split("/").filter(Boolean);
    const objectName = `${Date.now()}-${makeRandomHex(8)}${extension}`;
    const objectKeyRaw = [...prefixSegments, objectName].join("/");
    const objectKeyPath = objectKeyRaw.split("/").filter(Boolean).map(encodeRfc3986).join("/");

    const host = s3ForcePathStyle ? endpoint.host : `${s3Bucket}.${endpoint.host}`;
    const canonicalUri = s3ForcePathStyle
        ? buildS3Path(endpoint.pathname, s3Bucket, objectKeyRaw)
        : buildS3Path(endpoint.pathname, objectKeyRaw);

    const uploadUrl = new URL(endpoint.toString());
    uploadUrl.host = host;
    uploadUrl.pathname = canonicalUri;
    uploadUrl.search = "";

    const now = new Date();
    const { amzDate, dateStamp } = getTimestampParts(now);
    const payloadHash = await sha256Hex(await fileBlob.arrayBuffer());

    const canonicalHeadersMap: Record<string, string> = {
        "content-type": fileBlob.type || "application/octet-stream",
        "host": host,
        "x-amz-content-sha256": payloadHash,
        "x-amz-date": amzDate
    };

    if (s3SessionToken) {
        canonicalHeadersMap["x-amz-security-token"] = s3SessionToken;
    }