fix: profile editor media sync (#947)

* fix: profile editor media sync

* fix: address coderabbit comments

* fix: app source initialization

Author: sosweetham

.env.example

@@ -92,7 +92,7 @@ PUBLIC_PROVISIONER_SHARED_SECRET="your-provisioner-shared-secret"
 
 PUBLIC_ESIGNER_BASE_URL="http://localhost:3004"
 PUBLIC_FILE_MANAGER_BASE_URL="http://localhost:3005"
-PUBLIC_PROFILE_EDITOR_BASE_URL="http://localhost:3006"
+PUBLIC_PROFILE_EDITOR_BASE_URL=http://localhost:3007
 
 DREAMSYNC_DATABASE_URL=postgresql://postgres:postgres@localhost:5432/dreamsync
 VITE_DREAMSYNC_BASE_URL="http://localhost:8888"

infrastructure/dev-sandbox/src/routes/+page.svelte

@@ -49,6 +49,7 @@ interface Identity {
     w3id: string;
     uri: string;
     keyId: string;
+    displayName?: string;
     bearerToken?: string;
     tokenExpiresAt?: number;
 }
@@ -468,6 +469,14 @@ async function doProvision() {
                 identity.w3id,
                 profile,
             );
+            const provisionedKeyId = identity.keyId;
+            const next = identities.map((id) =>
+                id.keyId === provisionedKeyId
+                    ? { ...id, displayName: profile.displayName }
+                    : id,
+            );
+            identities = next;
+            saveIdentities(next);
             addLog("success", "UserProfile created", profile.displayName);
         } catch (e) {
             const msg = e instanceof Error ? e.message : String(e);
@@ -826,7 +835,7 @@ async function doSign() {
                         <h2>Selected identity</h2>
                         <select bind:value={selectedIndex}>
                             {#each identities as id, i}
-                                <option value={i}>{id.w3id}</option>
+                                <option value={i}>{id.displayName ? `${id.displayName} (${id.w3id})` : id.w3id}</option>
                             {/each}
                         </select>
                     </section>

platforms/file-manager/api/src/controllers/FileController.ts

@@ -453,7 +453,7 @@ export class FileController {
             }
 
             const { id } = req.params;
-            const { displayName, description, folderId } = req.body;
+            const { displayName, description, folderId, isPublic } = req.body;
 
             const file = await this.fileService.updateFile(
                 id,
@@ -473,6 +473,11 @@ export class FileController {
                     .json({ error: "File not found or not authorized" });
             }
 
+            if (typeof isPublic === "boolean") {
+                await this.fileService.setFilePublic(id, isPublic);
+                file.isPublic = isPublic;
+            }
+
             res.json({
                 id: file.id,
                 name: file.name,
@@ -483,6 +488,7 @@ export class FileController {
                 md5Hash: file.md5Hash,
                 ownerId: file.ownerId,
                 folderId: file.folderId,
+                isPublic: file.isPublic,
                 createdAt: file.createdAt,
                 updatedAt: file.updatedAt,
             });
@@ -567,6 +573,41 @@ export class FileController {
         }
     };
 
+    /**
+     * Serves a file publicly. Only files explicitly marked isPublic=true
+     * are served; all others return 404.
+     */
+    publicPreview = async (req: Request, res: Response) => {
+        try {
+            const { id } = req.params;
+            const file = await this.fileService.getFileByIdPublic(id);
+
+            if (!file) {
+                return res.status(404).json({ error: "File not found" });
+            }
+
+            if (file.url) {
+                return res.redirect(file.url);
+            }
+
+            if (!file.data) {
+                return res.status(410).json({ error: "File data unavailable" });
+            }
+
+            res.setHeader("Content-Type", file.mimeType);
+            res.setHeader(
+                "Content-Disposition",
+                `inline; filename="${file.name}"`,
+            );
+            res.setHeader("Content-Length", file.size.toString());
+            res.setHeader("Cache-Control", "public, max-age=3600");
+            res.send(file.data);
+        } catch (error) {
+            console.error("Error serving public file:", error);
+            res.status(500).json({ error: "Failed to serve file" });
+        }
+    };
+
     deleteFile = async (req: Request, res: Response) => {
         try {
             if (!req.user) {

platforms/file-manager/api/src/database/entities/File.ts

@@ -44,6 +44,9 @@ export class File {
     @Column({ type: "text", nullable: true })
     url!: string | null;
 
+    @Column({ default: false })
+    isPublic!: boolean;
+
     @Column()
     ownerId!: string;
 

platforms/file-manager/api/src/database/migrations/1775700000000-AddIsPublicToFiles.ts

@@ -0,0 +1,13 @@
+import { MigrationInterface, QueryRunner } from "typeorm";
+
+export class AddIsPublicToFiles1775700000000 implements MigrationInterface {
+    name = 'AddIsPublicToFiles1775700000000'
+
+    public async up(queryRunner: QueryRunner): Promise<void> {
+        await queryRunner.query(`ALTER TABLE "files" ADD "isPublic" boolean NOT NULL DEFAULT false`);
+    }
+
+    public async down(queryRunner: QueryRunner): Promise<void> {
+        await queryRunner.query(`ALTER TABLE "files" DROP COLUMN "isPublic"`);
+    }
+}

platforms/file-manager/api/src/index.ts

@@ -80,6 +80,7 @@ app.get("/api/auth/offer", authController.getOffer);
 app.post("/api/auth", authController.login);
 app.get("/api/auth/sessions/:id", authController.sseStream);
 app.post("/api/webhook", webhookController.handleWebhook);
+app.get("/api/public/files/:id", fileController.publicPreview);
 
 // Protected routes (auth required)
 app.use(authMiddleware);

platforms/file-manager/api/src/services/FileService.ts

@@ -114,6 +114,20 @@ export class FileService {
         return savedFile;
     }
 
+    async getFileByIdPublic(id: string): Promise<File | null> {
+        const file = await this.fileRepository.findOne({
+            where: { id, isPublic: true },
+        });
+        if (!file || file.name === SOFT_DELETED_FILE_NAME) {
+            return null;
+        }
+        return file;
+    }
+
+    async setFilePublic(id: string, isPublic: boolean): Promise<void> {
+        await this.fileRepository.update(id, { isPublic });
+    }
+
     async getFileById(id: string, userId: string): Promise<File | null> {
         const file = await this.fileRepository.findOne({
             where: { id },

platforms/marketplace/client/client/src/data/apps.json

@@ -87,5 +87,13 @@
     "category": "Storage",
     "logoUrl": "/emover.png",
     "url": "https://emover.w3ds.metastate.foundation"
+  },
+  {
+    "id": "profile-editor",
+    "name": "Profile Editor",
+    "description": "Create and manage your professional profile across the W3DS ecosystem. Showcase your skills, experience, and credentials.",
+    "category": "Identity",
+    "logoUrl": "/profile-editor.png",
+    "url": "https://profile-editor.w3ds.metastate.foundation"
   }
 ]

platforms/marketplace/client/client/src/pages/app-detail.tsx

@@ -46,6 +46,10 @@ const appDetails: Record<string, { fullDescription: string; screenshots: string[
   "file-manager": {
     fullDescription: "File Manager is a decentralized file management system built on the Web 3.0 Data Space (W3DS) architecture. Organize, store, and share files with complete control over your data across the MetaState ecosystem.\n\nBuilt around the principle of data-platform separation, all your files are stored in your own sovereign eVault. Manage folders, organize documents, control access, and share files securely. Experience file management reimagined with privacy-first principles and complete data sovereignty.",
     screenshots: []
+  },
+  "profile-editor": {
+    fullDescription: "Profile Editor is a professional profile management platform built on the Web 3.0 Data Space (W3DS) architecture. Create, edit, and share your professional profile across the entire MetaState ecosystem with a single source of truth.\n\nShowcase your work experience, education, skills, and social links. Upload your CV and video introduction. All your profile data is stored in your own sovereign eVault and automatically synced across every W3DS platform — update once, reflected everywhere.",
+    screenshots: []
   }
 };
 

platforms/pictique/api/src/controllers/WebhookController.ts

@@ -41,9 +41,13 @@ export class WebhookController {
             const mapping = Object.values(this.adapter.mapping).find(
                 (m) => m.schemaId === schemaId
             );
-            this.adapter.addToLockedIds(globalId);
 
-            if (!mapping) throw new Error();
+            if (!mapping) {
+                console.log(`[webhook] skipping unknown schema ${schemaId} for ${globalId}`);
+                return res.status(200).send();
+            }
+
+            this.adapter.addToLockedIds(globalId);
             const local = await this.adapter.fromGlobal({
                 data: req.body.data,
                 mapping,