Function apiFileUrl

public/js/fileListView.js:3357–3394

(folder, name, inline = false, sourceId = "")

   SECURITY: build file URLs only via the API (no /uploads)
   =========================================================== */
   function apiFileUrl(folder, name, inline = false, sourceId = "") {
    const fParam = folder && folder !== "root" ? folder : "root";
    const q = new URLSearchParams({
      folder: fParam,
      file: name,
      inline: inline ? "1" : "0"
    });
    let meta = null;
    let sid = String(sourceId || "").trim();
  
    try {
      if (Array.isArray(fileData)) {
        meta = fileData.find(
          f => f.name === name && (f.folder || "root") === fParam
        );
        if (!sid && meta && meta.sourceId) {
          sid = String(meta.sourceId || "").trim();
        }
      }
    } catch (e) { /* best-effort only */ }

    if (!sid) {
      try {
        sid = String(getActivePaneSourceId() || "").trim();
      } catch (e) { /* ignore */ }
    }
    if (sid) q.set("sourceId", sid);

    // Try to find this file in fileData to get a stable cache key
    if (meta) {
      const v = meta.cacheKey || meta.modified || meta.uploaded || meta.sizeBytes;
      if (v != null && v !== "") {
        q.set("t", String(v));  // stable per-file token
      }
    }
  
    return withBase(`/api/file/download.php?${q.toString()}`);
	  }

  function apiMediaThumbUrl(folder, name, sourceId = "") {
    const fParam = folder && folder !== "root" ? folder : "root";