[ { "path": ".claude/settings.local.json", "content": "{\n \"permissions\": {\n \"allow\": [\n \"Bash(pnpm build:*)\",\n \"Bash(pnpm test:*)\",\n \"Bash(npm test:*)\"\n ],\n \"deny\": []\n }\n}" }, { "path": ".cursorrules", "content": "- Use TypeScript.\n- Use function syntax for defining React components. Define the prop types inline.\n- If a value is exported, it should be exported on the same line as its definition.\n- Always define the return type of a function or component.\n- Use Tailwind CSS for styling.\n- Don't use trailing semicolons." }, { "path": ".dockerignore", "content": ".DS_Store\n.next\nnode_modules\ndist\n.env" }, { "path": ".github/workflows/main.yml", "content": "name: main\non:\n push:\n branches:\n - main\njobs:\n build:\n name: Docker build, tag, and push\n runs-on: ubuntu-latest\n steps:\n - uses: actions/checkout@v4\n - name: Docker build, tag, and push\n uses: pangzineng/Github-Action-One-Click-Docker@master\n env:\n DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD }}\n DOCKER_USERNAME: ${{ secrets.DOCKER_USERNAME }}\n" }, { "path": ".github/workflows/tests.yml", "content": "name: tests\non: [push]\njobs:\n tests:\n runs-on: ubuntu-latest\n steps:\n - uses: actions/checkout@v4\n - uses: pnpm/action-setup@v4\n with:\n version: 9\n - uses: actions/setup-node@v4\n with:\n node-version: 20\n cache: 'pnpm'\n - run: pnpm install\n - run: pnpm exec playwright install --with-deps\n - run: pnpm lint:check\n - run: pnpm format:check\n - run: pnpm type:check\n - run: pnpm test\n - run: pnpm build\n - run: pnpm test:e2e\n" }, { "path": ".gitignore", "content": ".DS_Store\n.next\nnode_modules\ndist\ntsconfig.tsbuildinfo\n.env" }, { "path": ".prettierrc.js", "content": "'use strict';\n\nmodule.exports = {\n semi: false,\n trailingComma: 'all',\n singleQuote: true,\n printWidth: 80,\n tabWidth: 2,\n};\n" }, { "path": "CLAUDE.md", "content": "# FilePizza Development Guide\n\nA peer-to-peer file transfer application built with modern web technologies.\n\n## Prerequisites\n\n- [Node.js](https://nodejs.org/) (v18+)\n- [pnpm](https://pnpm.io/) (preferred package manager)\n\n## Quick Start\n\n```bash\ngit clone https://github.com/kern/filepizza.git\ncd filepizza\npnpm install\npnpm dev\n```\n\n## Available Commands\n\n### Development\n- `pnpm dev` - Start development server\n- `pnpm dev:full` - Start with Redis and COTURN for full WebRTC testing\n\n### Building & Testing\n- `pnpm build` - Build for production\n- `pnpm test` - Run unit tests with Vitest\n- `pnpm test:watch` - Run tests in watch mode\n- `pnpm test:e2e` - Run E2E tests with Playwright\n\n### Code Quality\n- `pnpm lint:check` - Check ESLint rules\n- `pnpm lint:fix` - Fix ESLint issues\n- `pnpm format` - Format code with Prettier\n- `pnpm format:check` - Check code formatting\n- `pnpm type:check` - TypeScript type checking\n\n### Docker\n- `pnpm docker:build` - Build Docker image\n- `pnpm docker:up` - Start containers\n- `pnpm docker:down` - Stop containers\n\n### CI Pipeline\n- `pnpm ci` - Run full CI pipeline (lint, format, type-check, test, build, e2e, docker)\n\n## Tech Stack\n\n- **Framework**: Next.js 15 with App Router\n- **UI**: React 19 + Tailwind CSS v4\n- **Language**: TypeScript\n- **Testing**: Vitest (unit) + Playwright (E2E)\n- **WebRTC**: PeerJS\n- **State Management**: TanStack Query\n- **Themes**: next-themes with View Transitions\n- **Storage**: Redis (optional)\n\n## Project Structure\n\n```\nsrc/\n├── app/ # Next.js App Router pages\n├── components/ # React components\n├── hooks/ # Custom React hooks\n├── utils/ # Utility functions\n└── types.ts # TypeScript definitions\n```\n\n## Development Tips\n\n### Using pnpm\n\nThis project uses pnpm as the package manager. Benefits include:\n- Faster installs and smaller disk usage\n- Strict dependency resolution\n- Built-in workspace support\n\nAlways use `pnpm` instead of `npm` or `yarn`:\n```bash\npnpm install package-name\npnpm remove package-name\npnpm update\n```\n\n### Code Style\n\n- ESLint + TypeScript ESLint for linting\n- Prettier for formatting\n- Husky + lint-staged for pre-commit hooks\n- Prefer TypeScript over JavaScript\n- Use kebab-case for files, PascalCase for components\n\n### Testing Strategy\n\n- Unit tests for components and utilities (`tests/unit/`)\n- E2E tests for critical user flows (`tests/e2e/`)\n- Test files follow `*.test.ts[x]` naming convention\n\n### WebRTC Development\n\nFor full WebRTC testing with TURN/STUN:\n```bash\npnpm dev:full\n```\n\nThis starts Redis and COTURN containers for testing peer connections behind NAT.\n\n## Key Dependencies\n\n- `next` - React framework\n- `tailwindcss` - CSS framework\n- `@tanstack/react-query` - Server state management\n- `peerjs` - WebRTC abstraction\n- `next-themes` - Theme switching\n- `zod` - Schema validation\n- `vitest` - Testing framework\n- `playwright` - E2E testing\n\nRun `pnpm ci` before submitting PRs to ensure all checks pass." }, { "path": "Dockerfile", "content": "# Stage 1: Dependencies\nFROM node:lts-alpine AS deps\nRUN apk add --no-cache pnpm\nWORKDIR /app\nCOPY package.json pnpm-lock.yaml ./\n# Need all dependencies for build\nRUN pnpm install --frozen-lockfile\n\n# Stage 2: Builder\nFROM node:lts-alpine AS builder\nRUN apk add --no-cache pnpm\nWORKDIR /app\nCOPY --from=deps /app/node_modules ./node_modules\nCOPY . .\n# Builds standalone output\nRUN pnpm build\n\n# Stage 3: Runner\nFROM node:lts-alpine AS runner\nWORKDIR /app\n\nENV NODE_ENV production\nENV PORT 3000\n\n# Only copy standalone output - no need for node_modules\nCOPY --from=builder /app/public ./public\nCOPY --from=builder /app/.next/standalone ./\nCOPY --from=builder /app/.next/static ./.next/static\n\nUSER node\nEXPOSE 3000\n# Uses standalone server\nCMD [\"node\", \"server.js\"]\n" }, { "path": "LICENSE", "content": "Copyright (c) 2015, Alex Kern\nAll rights reserved.\n\nRedistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:\n\n1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.\n\n2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.\n\n3. Neither the name of the copyright holder nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n\n## SIL OPEN FONT LICENSE for fonts in static/fonts\n\nVersion 1.1 - 26 February 2007\nPREAMBLE\n\nThe goals of the Open Font License (OFL) are to stimulate worldwide\ndevelopment of collaborative font projects, to support the font creation\nefforts of academic and linguistic communities, and to provide a free and\nopen framework in which fonts may be shared and improved in partnership\nwith others.\n\nThe OFL allows the licensed fonts to be used, studied, modified and\nredistributed freely as long as they are not sold by themselves. The\nfonts, including any derivative works, can be bundled, embedded,\nredistributed and/or sold with any software provided that any reserved\nnames are not used by derivative works. The fonts and derivatives,\nhowever, cannot be released under any other type of license. The\nrequirement for fonts to remain under this license does not apply\nto any document created using the fonts or their derivatives.\nDEFINITIONS\n\n\"Font Software\" refers to the set of files released by the Copyright\nHolder(s) under this license and clearly marked as such. This may\ninclude source files, build scripts and documentation.\n\n\"Reserved Font Name\" refers to any names specified as such after the\ncopyright statement(s).\n\n\"Original Version\" refers to the collection of Font Software components as\ndistributed by the Copyright Holder(s).\n\n\"Modified Version\" refers to any derivative made by adding to, deleting,\nor substituting — in part or in whole — any of the components of the\nOriginal Version, by changing formats or by porting the Font Software to a\nnew environment.\n\n\"Author\" refers to any designer, engineer, programmer, technical\nwriter or other person who contributed to the Font Software.\nPERMISSION & CONDITIONS\n\nPermission is hereby granted, free of charge, to any person obtaining\na copy of the Font Software, to use, study, copy, merge, embed, modify,\nredistribute, and sell modified and unmodified copies of the Font\nSoftware, subject to the following conditions:\n\n1) Neither the Font Software nor any of its individual components,\nin Original or Modified Versions, may be sold by itself.\n\n2) Original or Modified Versions of the Font Software may be bundled,\nredistributed and/or sold with any software, provided that each copy\ncontains the above copyright notice and this license. These can be\nincluded either as stand-alone text files, human-readable headers or\nin the appropriate machine-readable metadata fields within text or\nbinary files as long as those fields can be easily viewed by the user.\n\n3) No Modified Version of the Font Software may use the Reserved Font\nName(s) unless explicit written permission is granted by the corresponding\nCopyright Holder. This restriction only applies to the primary font name as\npresented to the users.\n\n4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font\nSoftware shall not be used to promote, endorse or advertise any\nModified Version, except to acknowledge the contribution(s) of the\nCopyright Holder(s) and the Author(s) or with their explicit written\npermission.\n\n5) The Font Software, modified or unmodified, in part or in whole,\nmust be distributed entirely under this license, and must not be\ndistributed under any other license. The requirement for fonts to\nremain under this license does not apply to any document created\nusing the Font Software.\nTERMINATION\n\nThis license becomes null and void if any of the above conditions are\nnot met.\nDISCLAIMER\n\nTHE FONT SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND,\nEXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF\nMERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT\nOF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE\nCOPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,\nINCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL\nDAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\nFROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM\nOTHER DEALINGS IN THE FONT SOFTWARE.\n" }, { "path": "README.md", "content": "\"XKCD \"FilePizza

Peer-to-peer file transfers in your browser

\n\n*Cooked up by [Alex Kern](https://kern.io) & [Neeraj Baid](https://github.com/neerajbaid) while eating Sliver @ UC Berkeley.*\n\nUsing [WebRTC](http://www.webrtc.org), FilePizza eliminates the initial upload step required by other web-based file sharing services. Because data is never stored in an intermediary server, the transfer is fast, private, and secure.\n\nA hosted instance of FilePizza is available at [file.pizza](https://file.pizza).\n\n## What's new with FilePizza v2\n\n* A new UI with dark mode support, now built on modern browser technologies.\n* Works on most mobile browsers, including Mobile Safari.\n* Transfers are now directly from the uploader to the downloader's browser (WebRTC without WebTorrent) with faster handshakes.\n* Uploaders can monitor the progress of the transfer and stop it if they want.\n* Better security and safety measures with password protection and reporting.\n* Support for uploading multiple files at once, which downloaders receive as a zip file.\n* Streaming downloads with a Service Worker.\n* Out-of-process storage of server state using Redis.\n\n## Development\n\n```\n$ git clone https://github.com/kern/filepizza.git\n$ pnpm install\n$ pnpm dev\n$ pnpm build\n$ pnpm start\n```\n\n## Running with Docker\n\n```\n$ pnpm docker:build\n$ pnpm docker:up\n$ pnpm docker:down\n```\n\n## Stack\n\n* Next.js\n* Tailwind\n* TypeScript\n* React\n* PeerJS for WebRTC\n* View Transitions\n* Redis (optional)\n\n## Configuration\n\nThe server can be customized with the following environment variables:\n\n- `REDIS_URL` – Connection string for a Redis instance used to store channel metadata. If not set, FilePizza falls back to in-memory storage.\n- `COTURN_ENABLED` – When set to `true`, enables TURN support for connecting peers behind NAT.\n- `TURN_HOST` – Hostname or IP address of the TURN server. Defaults to `127.0.0.1`.\n- `TURN_REALM` – Realm used when generating TURN credentials. Defaults to `file.pizza`.\n- `STUN_SERVER` – STUN server URL to use when `COTURN_ENABLED` is disabled. Defaults to `stun:stun.l.google.com:19302`.\n- `PEERJS_HOST` – Hostname or IP address to the self-hosted PeerJS server. Defaults to `0.peerjs.com`.\n- `PEERJS_PATH` – Path to self-hosted PeerJS server. Defaults to `/`.\n\n## FAQ\n\n**How are my files sent?** Your files are sent directly from your browser to the downloader's browser. They never pass through our servers. FilePizza uses WebRTC to send files. This requires that the uploader leave their browser window open until the transfer is complete.\n\n**Can multiple people download my file at once?** Yes! Just send them your short or long URL.\n\n**How big can my files be?** As big as your browser can handle.\n\n**What happens when I close my browser?** The URLs for your files will no longer work. If a downloader has completed the transfer, that downloader will continue to seed to incomplete downloaders, but no new downloads may be initiated.\n\n**Are my files encrypted?** Yes, all WebRTC communications are automatically encrypted using public-key cryptography because of DTLS. You can add an optional password to your upload for an extra layer of security.\n\n## License & Acknowledgements\n\nFilePizza is released under the [BSD 3-Clause license](https://github.com/kern/filepizza/blob/main/LICENSE). A huge thanks to [iblowyourdesign](https://dribbble.com/iblowyourdesign) for the pizza illustration.\n" }, { "path": "bin/peerjs.js", "content": "#!/usr/bin/env node\nconst express = require('express')\nconst { ExpressPeerServer } = require('peer')\n\nconst app = express();\nconst server = app.listen(9000);\nconst peerServer = ExpressPeerServer(server, {\n path: '/filepizza'\n})\n\napp.use('/peerjs', peerServer)\n" }, { "path": "docker-compose.production.yml", "content": "services:\n redis:\n image: redis:latest\n ports:\n - 127.0.0.1:6379:6379\n networks:\n - filepizza\n volumes:\n - redis_data:/data\n coturn:\n image: coturn/coturn\n ports:\n - 3478:3478\n - 3478:3478/udp\n - 5349:5349\n - 5349:5349/udp\n - 60000-60128:60000-60128/udp\n environment:\n - DETECT_EXTERNAL_IP=yes\n - DETECT_RELAY_IP=yes\n command: -n --log-file=stdout --redis-userdb=\"ip=redis connect_timeout=30\" --min-port=60000 --max-port=60128\n networks:\n - filepizza\n filepizza:\n build: .\n image: kern/filepizza:latest\n ports:\n - 0.0.0.0:80:80\n environment:\n - PORT=80\n - REDIS_URL=redis://redis:6379\n - COTURN_ENABLED=true\n networks:\n - filepizza\n depends_on:\n - redis\n env_file:\n - .env\n\nnetworks:\n filepizza:\n driver: bridge\n\nvolumes:\n redis_data:\n" }, { "path": "docker-compose.yml", "content": "services:\n redis:\n image: redis:latest\n ports:\n - 6379:6379\n networks:\n - filepizza\n volumes:\n - redis_data:/data\n coturn:\n image: coturn/coturn\n ports:\n - 3478:3478\n - 3478:3478/udp\n - 5349:5349\n - 5349:5349/udp\n # Relay Ports\n # - 49152-65535:49152-65535/udp\n environment:\n - DETECT_EXTERNAL_IP=yes\n - DETECT_RELAY_IP=yes\n command: -n --log-file=stdout --redis-userdb=\"ip=redis connect_timeout=30\"\n networks:\n - filepizza\n filepizza:\n build: .\n image: kern/filepizza:latest\n ports:\n - 8080:8080\n environment:\n - PORT=8080\n - REDIS_URL=redis://redis:6379\n networks:\n - filepizza\n depends_on:\n - redis\n\nnetworks:\n filepizza:\n driver: bridge\n\nvolumes:\n redis_data:\n" }, { "path": "docs/file-transfer-protocol.md", "content": "# FilePizza File Transfer Protocol\n\nThis document explains the message-based protocol that FilePizza uses to\ntransfer files directly between browsers over a WebRTC data channel. It\ncovers the complete conversation required to build either an uploader or a\ndownloader and includes examples for common scenarios.\n\n## Architecture Overview\n\n```mermaid\nflowchart LR\n Uploader -- WebRTC / PeerJS --> Downloader\n Uploader -- REST --> Server[(FilePizza Server)]\n Downloader -- REST --> Server\n Server -- signalling / slug --> Uploader\n Server -- signalling / slug --> Downloader\n```\n\n1. The uploader creates a channel with the server and receives a slug that\n encodes its PeerJS identifier.\n2. The downloader resolves the slug via the server to obtain the uploader's\n PeerJS identifier.\n3. All subsequent messages travel directly between peers over a reliable\n WebRTC data channel.\n\n## Message Types\n\nEvery message is a JSON object with a `type` field that matches one of the\nvalues in the table below. Fields marked with `?` are optional.\n\n```mermaid\nclassDiagram\n class RequestInfo {\n +\"RequestInfo\" type\n +string browserName\n +string browserVersion\n +string osName\n +string osVersion\n +string mobileVendor\n +string mobileModel\n }\n class Info {\n +\"Info\" type\n +FileInfo[] files\n }\n class FileInfo {\n +string fileName\n +number size\n +string type\n }\n class Start {\n +\"Start\" type\n +string fileName\n +number offset\n }\n class Chunk {\n +\"Chunk\" type\n +string fileName\n +number offset\n +ArrayBuffer bytes\n +boolean final\n }\n class ChunkAck {\n +\"ChunkAck\" type\n +string fileName\n +number offset\n +number bytesReceived\n }\n class Pause {\n +\"Pause\" type\n }\n class Done {\n +\"Done\" type\n }\n class Error {\n +\"Error\" type\n +string error\n }\n class PasswordRequired {\n +\"PasswordRequired\" type\n +string errorMessage?\n }\n class UsePassword {\n +\"UsePassword\" type\n +string password\n }\n class Report {\n +\"Report\" type\n }\n```\n\nChunks are sent in pieces of at most 256 KiB (`MAX_CHUNK_SIZE`). The `final` flag in a `Chunk` message marks the last piece of a file.\n\n## Normal Transfer Sequence\n\nThe following diagram shows the exchange for downloading multiple files\nwithout a password.\n\n```mermaid\nsequenceDiagram\n participant D as Downloader\n participant U as Uploader\n D->>U: RequestInfo\n U-->>D: Info(files)\n loop For each file\n D->>U: Start(fileName, offset=0)\n loop For each chunk\n U-->>D: Chunk(offset, bytes, final=false)\n D->>U: ChunkAck(offset, bytesReceived)\n end\n U-->>D: Chunk(offset, bytes, final=true)\n D->>U: ChunkAck(offset, bytesReceived)\n end\n D->>U: Done\n U-->>D: close connection\n```\n\n## Password‑Protected Transfers\n\nIf the uploader specified a password when creating the channel, the\nconversation includes an authentication step.\n\n```mermaid\nsequenceDiagram\n participant D as Downloader\n participant U as Uploader\n D->>U: RequestInfo\n U-->>D: PasswordRequired(errorMessage?)\n D->>U: UsePassword(password)\n U-->>D: Info(files) or PasswordRequired(\"Invalid password\")\n Note over D,U: Continue with normal transfer sequence on success\n```\n\n## Pause and Resume\n\nA downloader may pause an in‑progress transfer. To resume, it reconnects and\nrequests the remainder of the file starting at the last acknowledged offset.\n\n```mermaid\nsequenceDiagram\n participant D as Downloader\n participant U as Uploader\n D->>U: Start(fileName, offset=0)\n U-->>D: Chunk(...)\n D->>U: ChunkAck(...)\n D->>U: Pause\n Note over D,U: Connection closed or kept idle\n D->>U: Start(fileName, offset=previouslyAcked)\n Note over D,U: Transfer resumes from offset\n```\n\n## Reporting\n\nA special PeerJS connection with metadata `{ type: \"report\" }` causes the\nuploader to broadcast a `Report` message to all connected downloaders and to\nredirect its own UI to a reported page. Downloaders receiving this message\nshould abort the transfer.\n\n```mermaid\nsequenceDiagram\n participant Reporter\n participant U as Uploader\n participant D as Downloader\n Reporter->>U: Peer connection(type=\"report\")\n U-->>D: Report\n U-->>Reporter: redirect to /reported\n```\n\n## Example Conversations\n\n### Single file without password\n\n```\nRequestInfo\nInfo [{ fileName: \"photo.jpg\", size: 1048576, type: \"image/jpeg\" }]\nStart { fileName: \"photo.jpg\", offset: 0 }\nChunk { offset: 0, bytes: <256 KB>, final: false }\nChunkAck { offset: 0, bytesReceived: 262144 }\n...\nChunk { offset: 1048576, bytes: <0>, final: true }\nChunkAck { offset: 1048576, bytesReceived: 0 }\nDone\n```\n\n### Password‑protected download\n\n```\nRequestInfo\nPasswordRequired\nUsePassword { password: \"secret\" }\nInfo [...]\n...\n```\n\n### Resuming after interruption\n\n```\nRequestInfo\nInfo [...]\nStart { fileName: \"video.mp4\", offset: 0 }\nChunk/ChunkAck exchanges...\n\nStart { fileName: \"video.mp4\", offset: 1048576 }\nChunk/ChunkAck exchanges...\nDone\n```\n\n---\n\nWith these message definitions and sequences you can implement a compatible\nuploader or downloader for FilePizza or adapt the protocol for other\napplications.\n" }, { "path": "eslint.config.mjs", "content": "// @ts-check\n\nimport eslint from '@eslint/js';\nimport tseslint from 'typescript-eslint';\n\nexport default tseslint.config({\n extends: [\n eslint.configs.recommended,\n tseslint.configs.recommended,\n ],\n rules: {\n '@typescript-eslint/no-unused-vars': [\n 'error',\n { argsIgnorePattern: '^_' },\n ],\n '@typescript-eslint/no-use-before-define': [\n 'error',\n { variables: false },\n ],\n '@typescript-eslint/promise-function-async': 'off',\n '@typescript-eslint/require-await': 'off',\n '@typescript-eslint/no-explicit-any': 'warn',\n 'import/no-unused-modules': 'off',\n 'import/group-exports': 'off',\n 'import/no-extraneous-dependencies': 'off',\n 'new-cap': 'off',\n 'no-inline-comments': 'off',\n 'no-shadow': 'warn',\n 'no-use-before-define': 'off',\n },\n files: ['src/**/*.ts[x]'],\n ignores: ['legacy', 'node_modules', '.next'],\n});\n" }, { "path": "next-env.d.ts", "content": "/// \n/// \n\n// NOTE: This file should not be edited\n// see https://nextjs.org/docs/app/api-reference/config/typescript for more information.\n" }, { "path": "next.config.js", "content": "/** @type {import('next').NextConfig} */\nconst nextConfig = {\n // Disable strict mode to avoid calling useEffect twice in development.\n // The uploader and downloader are both using useEffect to listen for peerjs events\n // which causes the connection to be created twice.\n reactStrictMode: false,\n output: 'standalone'\n}\n\nmodule.exports = nextConfig" }, { "path": "package.json", "content": "{\n \"name\": \"filepizza\",\n \"version\": \"2.0.0\",\n \"description\": \"Free peer-to-peer file transfers in your browser.\",\n \"author\": \"Alex Kern (http://kern.io)\",\n \"license\": \"BSD-3-Clause\",\n \"homepage\": \"https://github.com/kern/filepizza\",\n \"scripts\": {\n \"dev\": \"next\",\n \"dev:full\": \"docker compose up redis coturn -d && COTURN_ENABLED=true REDIS_URL=redis://localhost:6379 next\",\n \"build\": \"next build && cp -r public .next/standalone/ && cp -r .next/static .next/standalone/.next/\",\n \"start\": \"next start\",\n \"start:peerjs\": \"./bin/peerjs.js\",\n \"lint:check\": \"eslint 'src/**/*.ts[x]'\",\n \"lint:fix\": \"eslint 'src/**/*.ts[x]' --fix\",\n \"docker:build\": \"docker compose build\",\n \"docker:up\": \"docker compose up -d\",\n \"docker:down\": \"docker compose down\",\n \"docker:logs\": \"docker compose logs -f\",\n \"docker:ps\": \"docker compose ps\",\n \"docker:restart\": \"docker compose restart\",\n \"docker:clean\": \"docker compose down -v --rmi all\",\n \"format\": \"prettier --write \\\"src/**/*.{ts,tsx}\\\"\",\n \"format:check\": \"prettier --check \\\"src/**/*.{ts,tsx}\\\"\",\n \"type:check\": \"tsc --noEmit\",\n \"test\": \"vitest run\",\n \"test:watch\": \"vitest\",\n \"test:e2e\": \"playwright test\",\n \"ci\": \"pnpm lint:check && pnpm format:check && pnpm type:check && pnpm test && pnpm build && pnpm test:e2e && pnpm docker:build\"\n },\n \"repository\": {\n \"type\": \"git\",\n \"url\": \"git@github.com:kern/filepizza.git\"\n },\n \"bugs\": {\n \"url\": \"https://github.com/kern/filepizza/issues\"\n },\n \"dependencies\": {\n \"@tailwindcss/postcss\": \"^4.1.11\",\n \"@tanstack/react-query\": \"^5.55.2\",\n \"autoprefixer\": \"^10.4.20\",\n \"debug\": \"^4.3.6\",\n \"express\": \"^5.0.0\",\n \"ioredis\": \"^5.4.2\",\n \"next\": \"~15.5.11\",\n \"next-themes\": \"^0.4.4\",\n \"next-view-transitions\": \"^0.3.4\",\n \"nodemon\": \"^3.0.0\",\n \"peer\": \"^1.0.0\",\n \"peerjs\": \"^1.5.4\",\n \"postcss\": \"^8.4.44\",\n \"react\": \"~19.2.3\",\n \"react-device-detect\": \"^2.0.0\",\n \"react-dom\": \"~19.2.3\",\n \"react-qr-code\": \"^2.0.15\",\n \"streamsaver\": \"^2.0.6\",\n \"tailwindcss\": \"^4.1.11\",\n \"web-streams-polyfill\": \"^4.0.0\",\n \"webrtcsupport\": \"^2.2.0\",\n \"zod\": \"^4.0.0\"\n },\n \"devDependencies\": {\n \"@eslint/js\": \"^9.30.0\",\n \"@playwright/test\": \"^1.53.2\",\n \"@testing-library/jest-dom\": \"^6.6.3\",\n \"@testing-library/react\": \"^16.3.0\",\n \"@testing-library/user-event\": \"^14.6.1\",\n \"@types/debug\": \"^4.1.12\",\n \"@types/node\": \"^22.10.2\",\n \"@types/react\": \"^19.0.2\",\n \"@typescript-eslint/eslint-plugin\": \"^8.18.2\",\n \"@typescript-eslint/parser\": \"^8.18.2\",\n \"@vitejs/plugin-react\": \"^4.6.0\",\n \"@vitest/coverage-v8\": \"^3.2.4\",\n \"eslint\": \"^9.17.0\",\n \"eslint-config-next\": \"~15.5.11\",\n \"eslint-plugin-import\": \"^2.31.0\",\n \"eslint-plugin-react\": \"^7.37.3\",\n \"husky\": \"^9.0.0\",\n \"jsdom\": \"^26.1.0\",\n \"lint-staged\": \"^16.0.0\",\n \"playwright\": \"^1.53.2\",\n \"prettier\": \"^3.0.0\",\n \"typescript\": \"^5.0.0\",\n \"typescript-eslint\": \"^8.18.2\",\n \"vitest\": \"^3.2.4\"\n },\n \"husky\": {\n \"hooks\": {\n \"pre-commit\": \"lint-staged\"\n }\n },\n \"lint-staged\": {\n \"*.{ts,tsx}\": [\n \"eslint --fix\",\n \"prettier --write\",\n \"git add\"\n ]\n }\n}\n" }, { "path": "playwright.config.ts", "content": "import { defineConfig } from '@playwright/test'\n\nexport default defineConfig({\n testDir: './tests/e2e',\n workers: 1, // Run tests serially to avoid WebRTC port conflicts\n webServer: {\n command: 'node .next/standalone/server.js',\n url: 'http://localhost:3000',\n timeout: 120 * 1000,\n reuseExistingServer: true,\n },\n use: {\n baseURL: 'http://localhost:3000',\n },\n})\n" }, { "path": "postcss.config.js", "content": "module.exports = {\n plugins: {\n '@tailwindcss/postcss': {},\n autoprefixer: {},\n },\n}\n" }, { "path": "public/robots.txt", "content": "User-agent: *\nDisallow:\n" }, { "path": "public/stream.html", "content": "\n\n" }, { "path": "public/sw.js", "content": "// https://github.com/jimmywarting/StreamSaver.js/blob/master/sw.js\n\n/* global self ReadableStream Response */\n\nself.addEventListener('install', () => {\n self.skipWaiting()\n})\n\nself.addEventListener('activate', (event) => {\n event.waitUntil(self.clients.claim())\n})\n\nconst map = new Map()\n\n// This should be called once per download\n// Each event has a dataChannel that the data will be piped through\nself.onmessage = (event) => {\n // We send a heartbeat every x secound to keep the\n // service worker alive if a transferable stream is not sent\n if (event.data === 'ping') {\n return\n }\n\n const data = event.data\n const downloadUrl =\n data.url ||\n self.registration.scope +\n Math.random() +\n '/' +\n (typeof data === 'string' ? data : data.filename)\n const port = event.ports[0]\n const metadata = new Array(3) // [stream, data, port]\n\n metadata[1] = data\n metadata[2] = port\n\n // Note to self:\n // old streamsaver v1.2.0 might still use `readableStream`...\n // but v2.0.0 will always transfer the stream throught MessageChannel #94\n if (event.data.readableStream) {\n metadata[0] = event.data.readableStream\n } else if (event.data.transferringReadable) {\n port.onmessage = (evt) => {\n port.onmessage = null\n metadata[0] = evt.data.readableStream\n }\n } else {\n metadata[0] = createStream(port)\n }\n\n map.set(downloadUrl, metadata)\n port.postMessage({ download: downloadUrl })\n}\n\nfunction createStream(port) {\n // ReadableStream is only supported by chrome 52\n return new ReadableStream({\n start(controller) {\n // When we receive data on the messageChannel, we write\n port.onmessage = ({ data }) => {\n if (data === 'end') {\n return controller.close()\n }\n\n if (data === 'abort') {\n controller.error('Aborted the download')\n return\n }\n\n controller.enqueue(data)\n }\n },\n cancel() {\n console.log('user aborted')\n },\n })\n}\n\nself.onfetch = (event) => {\n const url = event.request.url\n\n // this only works for Firefox\n if (url.endsWith('/ping')) {\n return event.respondWith(new Response('pong'))\n }\n\n const hijacke = map.get(url)\n\n if (!hijacke) return null\n\n const [stream, data, port] = hijacke\n\n map.delete(url)\n\n // Not comfortable letting any user control all headers\n // so we only copy over the length & disposition\n const responseHeaders = new Headers({\n 'Content-Type': 'application/octet-stream; charset=utf-8',\n\n // To be on the safe side, The link can be opened in a iframe.\n // but octet-stream should stop it.\n 'Content-Security-Policy': \"default-src 'none'\",\n 'X-Content-Security-Policy': \"default-src 'none'\",\n 'X-WebKit-CSP': \"default-src 'none'\",\n 'X-XSS-Protection': '1; mode=block',\n })\n\n let headers = new Headers(data.headers || {})\n\n if (headers.has('Content-Length')) {\n responseHeaders.set('Content-Length', headers.get('Content-Length'))\n }\n\n if (headers.has('Content-Disposition')) {\n responseHeaders.set(\n 'Content-Disposition',\n headers.get('Content-Disposition'),\n )\n }\n\n // data, data.filename and size should not be used anymore\n if (data.size) {\n console.warn('Depricated')\n responseHeaders.set('Content-Length', data.size)\n }\n\n let fileName = typeof data === 'string' ? data : data.filename\n if (fileName) {\n console.warn('Depricated')\n // Make filename RFC5987 compatible\n fileName = encodeURIComponent(fileName)\n .replace(/['()]/g, escape)\n .replace(/\\*/g, '%2A')\n responseHeaders.set(\n 'Content-Disposition',\n \"attachment; filename*=UTF-8''\" + fileName,\n )\n }\n\n event.respondWith(new Response(stream, { headers: responseHeaders }))\n\n port.postMessage({ debug: 'Download started' })\n}\n" }, { "path": "renovate.json", "content": "{\n \"$schema\": \"https://docs.renovatebot.com/renovate-schema.json\",\n \"extends\": [\n \"config:recommended\"\n ]\n}\n" }, { "path": "scripts/pull-and-run.sh", "content": "#!/bin/bash\n\nset -euo pipefail\n\ngit pull origin main\nsudo docker pull kern/filepizza:latest\nsudo docker compose -f docker-compose.production.yml up -d\nsudo docker compose logs -f" }, { "path": "src/app/api/create/route.ts", "content": "import { NextResponse } from 'next/server'\nimport { getOrCreateChannelRepo } from '../../../channel'\n\nexport async function POST(request: Request): Promise {\n const { uploaderPeerID } = await request.json()\n\n if (!uploaderPeerID) {\n return NextResponse.json(\n { error: 'Uploader peer ID is required' },\n { status: 400 },\n )\n }\n\n const channel = await getOrCreateChannelRepo().createChannel(uploaderPeerID)\n return NextResponse.json(channel)\n}\n" }, { "path": "src/app/api/destroy/route.ts", "content": "import { NextRequest, NextResponse } from 'next/server'\nimport { getOrCreateChannelRepo } from '../../../channel'\n\nexport async function POST(request: NextRequest): Promise {\n const { slug } = await request.json()\n\n if (!slug) {\n return NextResponse.json({ error: 'Slug is required' }, { status: 400 })\n }\n\n // Anyone can destroy a channel if they know the slug. This enables a terms violation reporter to destroy the channel after they report it.\n\n try {\n await getOrCreateChannelRepo().destroyChannel(slug)\n return NextResponse.json({ success: true }, { status: 200 })\n } catch (error) {\n console.error(error)\n return NextResponse.json(\n { error: 'Failed to destroy channel' },\n { status: 500 },\n )\n }\n}\n" }, { "path": "src/app/api/ice/route.ts", "content": "import { NextResponse } from 'next/server'\nimport crypto from 'crypto'\nimport { setTurnCredentials } from '../../../coturn'\n\nconst turnHost = process.env.TURN_HOST || '127.0.0.1'\nconst stunServer = process.env.STUN_SERVER || 'stun:stun.l.google.com:19302'\nconst peerjsHost = process.env.PEERJS_HOST || '0.peerjs.com'\nconst peerjsPath = process.env.PEERJS_PATH || '/'\n\nexport async function POST(): Promise {\n if (!process.env.COTURN_ENABLED) {\n return NextResponse.json({\n host: peerjsHost,\n path: peerjsPath,\n iceServers: [{ urls: stunServer }],\n })\n }\n\n // Generate ephemeral credentials\n const username = crypto.randomBytes(8).toString('hex')\n const password = crypto.randomBytes(8).toString('hex')\n const ttl = 86400 // 24 hours\n\n // Store credentials in Redis\n await setTurnCredentials(username, password, ttl)\n\n return NextResponse.json({\n host: peerjsHost,\n path: peerjsPath,\n iceServers: [\n { urls: stunServer },\n {\n urls: [`turn:${turnHost}:3478`, `turns:${turnHost}:5349`],\n username,\n credential: password,\n },\n ],\n })\n}\n" }, { "path": "src/app/api/renew/route.ts", "content": "import { NextRequest, NextResponse } from 'next/server'\nimport { getOrCreateChannelRepo } from '../../../channel'\n\nexport async function POST(request: NextRequest): Promise {\n const { slug, secret } = await request.json()\n\n if (!slug) {\n return NextResponse.json({ error: 'Slug is required' }, { status: 400 })\n }\n\n if (!secret) {\n return NextResponse.json({ error: 'Secret is required' }, { status: 400 })\n }\n\n const success = await getOrCreateChannelRepo().renewChannel(slug, secret)\n return NextResponse.json({ success })\n}\n" }, { "path": "src/app/download/[...slug]/page.tsx", "content": "import { JSX } from 'react'\nimport { notFound } from 'next/navigation'\nimport { getOrCreateChannelRepo } from '../../../channel'\nimport Spinner from '../../../components/Spinner'\nimport Wordmark from '../../../components/Wordmark'\nimport Downloader from '../../../components/Downloader'\nimport WebRTCPeerProvider from '../../../components/WebRTCProvider'\nimport ReportTermsViolationButton from '../../../components/ReportTermsViolationButton'\n\nconst normalizeSlug = (rawSlug: string | string[]): string => {\n if (typeof rawSlug === 'string') {\n return rawSlug\n } else {\n return rawSlug.join('/')\n }\n}\n\nexport default async function DownloadPage({\n params,\n}: {\n params: Promise<{ slug: string[] }>\n}): Promise {\n const { slug: slugRaw } = await params\n const slug = normalizeSlug(slugRaw)\n const channel = await getOrCreateChannelRepo().fetchChannel(slug)\n\n if (!channel) {\n notFound()\n }\n\n return (\n
\n \n \n \n \n \n \n
\n )\n}\n" }, { "path": "src/app/layout.tsx", "content": "import React from 'react'\nimport Footer from '../components/Footer'\nimport '../styles.css'\nimport { ThemeProvider } from '../components/ThemeProvider'\nimport { ModeToggle } from '../components/ModeToggle'\nimport FilePizzaQueryClientProvider from '../components/QueryClientProvider'\nimport { Viewport } from 'next'\nimport { ViewTransitions } from 'next-view-transitions'\n\nexport const metadata = {\n title: 'FilePizza • Your files, delivered.',\n description: 'Peer-to-peer file transfers in your web browser.',\n charSet: 'utf-8',\n openGraph: {\n url: 'https://file.pizza',\n title: 'FilePizza • Your files, delivered.',\n description: 'Peer-to-peer file transfers in your web browser.',\n images: [{ url: 'https://file.pizza/images/fb.png' }],\n },\n}\n\nexport const viewport: Viewport = {\n width: 'device-width',\n initialScale: 1,\n maximumScale: 1,\n userScalable: false,\n}\n\nexport default function RootLayout({\n children,\n}: {\n children: React.ReactNode\n}): React.ReactElement {\n return (\n \n \n \n \n \n
{children}
\n