[TSM.ID].[11031972] PXE : Platform X Ecosystem I [118 Module -LIVE-]

2026-05-25 03:50:05 +07:00
commit e820143b3c
673 changed files with 101320 additions and 0 deletions
@@ -0,0 +1,109 @@
+/* eslint-disable */
+// [TSM.ID].[11031972] -- All Rights Reserved. Proprietary & Confidential.
+import { NextRequest, NextResponse } from "next/server";
+import crypto from "crypto";
+import { promises as fs } from "fs";
+import path from "path";
+import { v4 as uuidv4 } from "uuid";
+
+// 1. Quantum Encryption (AES-256-GCM) - Kriptografi Kelas Militer
+function encryptBuffer(buffer: Buffer): { encrypted: Buffer; iv: Buffer; tag: Buffer } {
+  // Jika QUANTUM_MASTER_KEY tidak disetel di .env, kita pakai Kunci Fallback Absolut
+  // WAJIB: Panjang kunci harus tepat 32 byte untuk AES-256
+  const rawKey = process.env.QUANTUM_MASTER_KEY || "JUMPA-XCU-ABSOLUTE-SOVEREIGN-KEY";
+  const key = crypto.createHash("sha256").update(rawKey).digest();
+  
+  const iv = crypto.randomBytes(12); // GCM Standard IV (12 bytes)
+  const cipher = crypto.createCipheriv("aes-256-gcm", key, iv);
+  
+  const encrypted = Buffer.concat([cipher.update(buffer), cipher.final()]);
+  const tag = cipher.getAuthTag(); // 16 bytes auth tag
+  
+  return { encrypted, iv, tag };
+}
+
+// 2. Omni-Storage Uploader (Zero-Dependency Cloud Sync)
+async function syncToOmniCloud(fileName: string, encryptedPayload: Buffer) {
+  const cloudUrl = process.env.OMNI_CLOUD_URL;
+  if (!cloudUrl) return; // Jika tidak ada cloud external, data mutlak 100% lokal Forge
+
+  console.log(`[OMNI-CLOUD] Menyinkronkan ${fileName} ke ujung alam semesta (Cloud External)...`);
+  
+  // Signature Universal (Mendukung S3 WebDAV / Bearer Token API)
+  const headers: Record<string, string> = {
+    "Content-Type": "application/octet-stream",
+    "Content-Length": encryptedPayload.length.toString(),
+  };
+
+  if (process.env.OMNI_CLOUD_TOKEN) {
+    headers["Authorization"] = `Bearer ${process.env.OMNI_CLOUD_TOKEN}`;
+  }
+
+  // Native Fetch PUT request (Kompatibel dengan segala jenis object storage yang mendukung REST PUT)
+  // Tidak perlu lagi SDK puluhan MB dari AWS!
+  try {
+    const response = await fetch(`${cloudUrl}/${fileName}`, {
+      method: "PUT",
+      headers,
+      body: new Uint8Array(encryptedPayload),
+    });
+
+    if (!response.ok) {
+      console.error("[OMNI-CLOUD] Gagal sinkronisasi. Kode:", response.status);
+    } else {
+      console.log(`[OMNI-CLOUD] Sukses menyinkronkan ${fileName} ke cloud eksternal dalam wujud enkripsi.`);
+    }
+  } catch (err) {
+    console.error("[OMNI-CLOUD] Jaringan terputus ke cloud eksternal:", err);
+  }
+}
+
+export async function POST(req: NextRequest) {
+  try {
+    const formData = await req.formData();
+    const file = formData.get("file") as File;
+
+    if (!file) {
+      return NextResponse.json({ error: "No file uploaded" }, { status: 400 });
+    }
+
+    const originalBuffer = Buffer.from(await file.arrayBuffer());
+    const fileExtension = file.name.split(".").pop() || "bin";
+    const fileName = `${uuidv4()}.${fileExtension}.vault`; // Extensi diubah ke .vault
+
+    console.log(`[QUANTUM VAULT] Memulai enkripsi militer untuk file: ${file.name}`);
+
+    // EKSEKUSI KRIPTOGRAFI MILITER (AES-256-GCM)
+    const { encrypted, iv, tag } = encryptBuffer(originalBuffer);
+
+    // Format Paket Vault: [IV (12 bytes)] + [Auth Tag (16 bytes)] + [Encrypted Data]
+    const vaultPayload = Buffer.concat([iv, tag, encrypted]);
+
+    // PENYIMPANAN 1: DISTRIBUTED OBJECT STORAGE MANDIRI (Lokal Forge)
+    // Otomatis menaruh di direktori absolut VPS
+    const localDir = process.env.OMNI_LOCAL_DIR || "/var/www/omni-storage";
+    await fs.mkdir(localDir, { recursive: true });
+    
+    const localFilePath = path.join(localDir, fileName);
+    await fs.writeFile(localFilePath, vaultPayload);
+    console.log(`[QUANTUM VAULT] File diamankan di brankas baja mandiri: ${localFilePath}`);
+
+    // PENYIMPANAN 2: OMNI-CLOUD SYNC (Asinkron agar tidak membuat pengguna menunggu)
+    syncToOmniCloud(fileName, vaultPayload);
+
+    // URL Publik diarahkan ke Decoder Internal JUMPA.ID
+    // Browser memanggil /api/vault/[fileName] untuk mengunduh dan mendekripsi secara on-the-fly
+    const baseUrl = process.env.NEXT_PUBLIC_APP_URL || "http://127.0.0.1:3000";
+    const publicUrl = `${baseUrl}/api/vault/${fileName}`;
+
+    return NextResponse.json({
+      success: true,
+      url: publicUrl,
+      fileName: file.name,
+      fileType: "application/quantum-vault",
+    });
+  } catch (error: any) {
+    console.error("Quantum Vault error:", error);
+    return NextResponse.json({ error: error.message }, { status: 500 });
+  }
+}