Downloads and decrypts a free file by upload ID. Rate limited per IP.

A Private Link file is served as stored — the PAY1 ciphertext, with Content-Type: application/octet-stream, Content-Length equal to the stored size and X-Payaion-Enc: e2ee — because the gateway holds no key for it. Decrypt it with the key from the share link's fragment.

Priced and password-protected files are not served here: this endpoint has no way to take a payment or a password, so it returns 402 payment_required for them. Fetch those through their share page at /d/{shareHash}, which runs the paywall or the password prompt and then streams the bytes.