Guide
Private Uploads and Package Download Links
Use verified private upload jobs and short-lived generated-package downloads.
Delivery files up to 10 GB each
Each private delivery file can be up to 10 GB (10,000,000,000 bytes). Local multipart uploads retry interrupted parts. After a page reload, reselect the same file to reuse completed parts within 24 hours of starting the upload; the browser cannot silently reopen a local file.
Upload history shows the product, progress, and resume deadline. A remote-link import copies the file into private storage; retrying it may restart from the source rather than resume at the same byte. Protected or expired download links need a new direct link.
A file is attached only after its stored object, size, and upload session are checked. Incomplete uploads are not customer downloads. Public artwork and demos remain separate from private delivery files; attaching a file does not publish the product or grant ownership.
SoundSync
Direct upload parts
/api/products/:id/files/direct-uploads
Start or resume a direct upload
- Auth
- Authenticated developer session
- Scope
- Workspace permissions and product assignments are checked.
- Request fields
- filename, sizeBytes, mimeType; multipart: true for multipart mode.
- Optional fileFingerprint identifies the complete file; use the v1: SHA-256 format, not filename or modification time alone.
- Returns
- Job and signed upload instructions; follow the returned mode and part limits.
/api/products/:id/files/direct-uploads/:jobId/parts/:partNumber
Prepare the specified part
- Auth
- Authenticated developer session
- Scope
- Workspace permissions and product assignments are checked.
- Request fields
- partNumber path parameter.
- Returns
- Temporary PUT instructions for the permitted part.
/api/products/:id/files/direct-uploads/:jobId/part
Prepare a part using JSON
- Auth
- Authenticated developer session
- Scope
- Workspace permissions and product assignments are checked.
- Request fields
- partNumber in the request body.
- Returns
- Temporary PUT instructions for the permitted part.
/api/products/:id/files/direct-uploads/:jobId/complete
Verify and attach a stored upload
- Auth
- Authenticated developer session
- Scope
- Workspace permissions and product assignments are checked.
- Returns
- Job and attachment result after stored-object/session checks.
Generated HISE and JUCE packages return JSON links
Successful package generation/download preparation returns JSON containing url, filename, and expiresIn, not an archive blob. Fetch the signed URL to retrieve the ZIP; current links expire after 300 seconds. Never log or publish a live signed URL.
A private cached package is matched to its package source, product credentials, and branding. Changing those inputs requires the appropriate regeneration. A busy generator can return 429; missing storage/configuration can return 503. Handle these states rather than saving the JSON response as a ZIP.
SoundSync
Package link response shape (illustrative)
{
"url": "https://storage.example.invalid/signed-package-url",
"filename": "product-package.zip",
"expiresIn": 300
}SoundSync