How to upload a public file

TODO: translate to Indonesian. English source is authoritative; render it into Indonesian below.

When you need to accept an image, store it as a public asset in Berkasna, and serve it by URL — use the pattern below. The upload itself is three calls; reading the public URL is one more.

Steps

1. Request an upload slot from your server, using a secret key. Mark it public so it gets a berkasna.sawala.cloud URL.

   curl -X POST \
     -H "X-API-Key: sk_live_xxx" \
     -H "Content-Type: application/json" \
     -d '{"filename":"logo.png","mimeType":"image/png","size":12345}' \
     "https://api.sawala.cloud/public/berkasna/upload/presigned"

   The response includes assetId, r2Key, and a temporary uploadUrl. A publishable key here is rejected with 403 SECRET_KEY_REQUIRED.

2. PUT the file bytes to the returned uploadUrl. Send no API key on this request.

   await fetch(uploadUrl, { method: 'PUT', headers: { 'Content-Type': file.type }, body: file });

3. Mark complete from your server, with the secret key:

   curl -X POST \
     -H "X-API-Key: sk_live_xxx" \
     -H "Content-Type: application/json" \
     -d '{"assetId":"ast_abc123"}' \
     "https://api.sawala.cloud/public/berkasna/upload/complete"

   The response is { "id": "ast_abc123", "status": "completed" } — note there is no URL in it.

Get the public URL

The complete response does not return a URL. Fetch the asset to read its computed url (a public key works here):

curl -H "X-API-Key: pk_live_xxx" \
  "https://api.sawala.cloud/public/berkasna/assets/ast_abc123"

{
  "id":     "ast_abc123",
  "status": "completed",
  "url":    "https://berkasna.sawala.cloud/acme/originals/ast_abc123/logo.png"
}

The public URL pattern is https://berkasna.sawala.cloud/<org-slug>/originals/<assetId>/<filename>. You can also build it directly from the r2Key returned in step 1.

Deduplication

Compute a SHA-256 of the file and check /check-duplicate?hash=... before requesting a slot.

curl -H "X-API-Key: pk_live_xxx" \
  "https://api.sawala.cloud/public/berkasna/check-duplicate?hash=<sha256>"

The response is { "isDuplicate": true, "assetId": "ast_abc123" }. It does not include a URL — if you need one for the existing asset, call GET /assets/{assetId}.