dsh-taskboard 0.6.7 → 0.7.1

package/lib/host/assets.js

@@ -0,0 +1,139 @@
+import { join } from "node:path";
+import { mkdir, readFile, readdir, rm, stat, writeFile } from "node:fs/promises";
+import { createHash } from "node:crypto";
+//#region src/host/assets.ts
+/** Durable, content-addressed image attachments for task descriptions/comments. */
+const MAX_ASSET_BYTES = 5 * 1024 * 1024;
+const MAX_ASSET_STORE_BYTES = 200 * 1024 * 1024;
+const ORPHAN_GRACE_MS = 1440 * 60 * 1e3;
+const ASSET_NAME_RE = /^([a-f0-9]{64})\.(png|jpg|gif|webp)$/;
+/** Detect supported images from magic bytes; request MIME and filenames are not trusted. */
+function detectImage(bytes) {
+	if (bytes.length >= 8 && bytes[0] === 137 && bytes[1] === 80 && bytes[2] === 78 && bytes[3] === 71 && bytes[4] === 13 && bytes[5] === 10 && bytes[6] === 26 && bytes[7] === 10) return {
+		extension: "png",
+		mime: "image/png"
+	};
+	if (bytes.length >= 3 && bytes[0] === 255 && bytes[1] === 216 && bytes[2] === 255) return {
+		extension: "jpg",
+		mime: "image/jpeg"
+	};
+	if (bytes.length >= 6) {
+		const head = Buffer.from(bytes.subarray(0, 6)).toString("ascii");
+		if (head === "GIF87a" || head === "GIF89a") return {
+			extension: "gif",
+			mime: "image/gif"
+		};
+	}
+	if (bytes.length >= 12 && Buffer.from(bytes.subarray(0, 4)).toString("ascii") === "RIFF" && Buffer.from(bytes.subarray(8, 12)).toString("ascii") === "WEBP") return {
+		extension: "webp",
+		mime: "image/webp"
+	};
+}
+/** Files live outside the ledger so state/SSE/tool payloads only carry short Markdown URLs. */
+var AssetStore = class {
+	now;
+	storageQueue;
+	queue = Promise.resolve();
+	root;
+	constructor(root, now = () => Date.now(), storageQueue) {
+		this.now = now;
+		this.storageQueue = storageQueue;
+		this.root = root;
+	}
+	/** Current absolute attachment-directory path. */
+	location() {
+		return this.root;
+	}
+	/** Switch reads and future writes after the coordinator copied the directory. */
+	setLocation(root) {
+		this.root = root;
+	}
+	async put(bytes, declaredMime) {
+		const run = () => this.putSerial(bytes, declaredMime);
+		if (this.storageQueue !== void 0) return this.storageQueue.run(run);
+		return this.queue = this.queue.then(run, run);
+	}
+	async putSerial(bytes, declaredMime) {
+		if (bytes.length === 0 || bytes.length > 5242880) throw new Error(`image must be 1..${MAX_ASSET_BYTES} bytes`);
+		const kind = detectImage(bytes);
+		if (kind === void 0) throw new Error("unsupported image; use PNG, JPEG, GIF, or WebP");
+		if (declaredMime !== void 0 && declaredMime.toLowerCase() !== kind.mime) throw new Error(`image content does not match ${declaredMime}`);
+		const id = createHash("sha256").update(bytes).digest("hex");
+		const name = `${id}.${kind.extension}`;
+		await mkdir(this.root, { recursive: true });
+		try {
+			const current = await stat(join(this.root, name));
+			if (current.isFile()) return {
+				id,
+				name,
+				size: current.size,
+				url: `/dsh-taskboard/assets/${name}`,
+				...kind
+			};
+		} catch {}
+		let total = 0;
+		for (const entry of await readdir(this.root, { withFileTypes: true })) {
+			if (!entry.isFile() || !ASSET_NAME_RE.test(entry.name)) continue;
+			try {
+				total += (await stat(join(this.root, entry.name))).size;
+			} catch {}
+		}
+		if (total + bytes.length > 209715200) throw new Error("image store quota exceeded");
+		try {
+			await writeFile(join(this.root, name), bytes, { flag: "wx" });
+		} catch (error) {
+			if (error.code !== "EEXIST") throw error;
+		}
+		return {
+			id,
+			name,
+			size: bytes.length,
+			url: `/dsh-taskboard/assets/${name}`,
+			...kind
+		};
+	}
+	async read(name) {
+		const run = async () => {
+			const match = ASSET_NAME_RE.exec(name);
+			if (match === null) return void 0;
+			const mime = match[2] === "png" ? "image/png" : match[2] === "jpg" ? "image/jpeg" : match[2] === "gif" ? "image/gif" : "image/webp";
+			try {
+				return {
+					bytes: await readFile(join(this.root, name)),
+					mime
+				};
+			} catch {
+				return;
+			}
+		};
+		return this.storageQueue === void 0 ? run() : this.storageQueue.run(run);
+	}
+	/** Remove abandoned draft uploads after a grace period; referenced files always survive. */
+	async cleanup(referencedContent) {
+		const run = async () => {
+			let entries;
+			try {
+				entries = await readdir(this.root, { withFileTypes: true });
+			} catch {
+				return 0;
+			}
+			let removed = 0;
+			for (const entry of entries) {
+				if (!entry.isFile() || !ASSET_NAME_RE.test(entry.name) || referencedContent.includes(entry.name)) continue;
+				const path = join(this.root, entry.name);
+				try {
+					const info = await stat(path);
+					if (this.now() - info.mtimeMs < 864e5) continue;
+					await rm(path, { force: true });
+					removed += 1;
+				} catch {}
+			}
+			return removed;
+		};
+		return this.storageQueue === void 0 ? run() : this.storageQueue.run(run);
+	}
+};
+//#endregion
+export { AssetStore, MAX_ASSET_BYTES, MAX_ASSET_STORE_BYTES, ORPHAN_GRACE_MS, detectImage };
+
+//# sourceMappingURL=assets.js.map

package/lib/host/assets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assets.js","names":[],"sources":["../../src/host/assets.ts"],"sourcesContent":["/** Durable, content-addressed image attachments for task descriptions/comments. */\nimport { createHash } from 'node:crypto'\nimport { mkdir, readFile, readdir, rm, stat, writeFile } from 'node:fs/promises'\nimport { join } from 'node:path'\nimport type { StorageQueue } from './storage-queue.ts'\n\nexport const MAX_ASSET_BYTES = 5 * 1024 * 1024\nexport const MAX_ASSET_STORE_BYTES = 200 * 1024 * 1024\nexport const ORPHAN_GRACE_MS = 24 * 60 * 60 * 1000\n\nexport type ImageKind = { extension: 'png' | 'jpg' | 'gif' | 'webp'; mime: 'image/png' | 'image/jpeg' | 'image/gif' | 'image/webp' }\nexport type StoredAsset = ImageKind & { id: string; name: string; size: number; url: string }\n\nconst ASSET_NAME_RE = /^([a-f0-9]{64})\\.(png|jpg|gif|webp)$/\n\n/** Detect supported images from magic bytes; request MIME and filenames are not trusted. */\nexport function detectImage(bytes: Uint8Array): ImageKind | undefined {\n  if (bytes.length >= 8 && bytes[0] === 0x89 && bytes[1] === 0x50 && bytes[2] === 0x4e && bytes[3] === 0x47\n    && bytes[4] === 0x0d && bytes[5] === 0x0a && bytes[6] === 0x1a && bytes[7] === 0x0a) {\n    return { extension: 'png', mime: 'image/png' }\n  }\n  if (bytes.length >= 3 && bytes[0] === 0xff && bytes[1] === 0xd8 && bytes[2] === 0xff) {\n    return { extension: 'jpg', mime: 'image/jpeg' }\n  }\n  if (bytes.length >= 6) {\n    const head = Buffer.from(bytes.subarray(0, 6)).toString('ascii')\n    if (head === 'GIF87a' || head === 'GIF89a') return { extension: 'gif', mime: 'image/gif' }\n  }\n  if (bytes.length >= 12 && Buffer.from(bytes.subarray(0, 4)).toString('ascii') === 'RIFF'\n    && Buffer.from(bytes.subarray(8, 12)).toString('ascii') === 'WEBP') {\n    return { extension: 'webp', mime: 'image/webp' }\n  }\n  return undefined\n}\n\n/** Files live outside the ledger so state/SSE/tool payloads only carry short Markdown URLs. */\nexport class AssetStore {\n  private queue: Promise<unknown> = Promise.resolve()\n  private root: string\n\n  constructor(root: string, private readonly now: () => number = () => Date.now(), private readonly storageQueue?: StorageQueue) { this.root = root }\n\n  /** Current absolute attachment-directory path. */\n  location(): string { return this.root }\n\n  /** Switch reads and future writes after the coordinator copied the directory. */\n  setLocation(root: string): void { this.root = root }\n\n  async put(bytes: Uint8Array, declaredMime?: string): Promise<StoredAsset> {\n    const run = () => this.putSerial(bytes, declaredMime)\n    if (this.storageQueue !== undefined) return this.storageQueue.run(run)\n    return (this.queue = this.queue.then(run, run)) as Promise<StoredAsset>\n  }\n\n  private async putSerial(bytes: Uint8Array, declaredMime?: string): Promise<StoredAsset> {\n    if (bytes.length === 0 || bytes.length > MAX_ASSET_BYTES) {\n      throw new Error(`image must be 1..${MAX_ASSET_BYTES} bytes`)\n    }\n    const kind = detectImage(bytes)\n    if (kind === undefined) throw new Error('unsupported image; use PNG, JPEG, GIF, or WebP')\n    if (declaredMime !== undefined && declaredMime.toLowerCase() !== kind.mime) {\n      throw new Error(`image content does not match ${declaredMime}`)\n    }\n    const id = createHash('sha256').update(bytes).digest('hex')\n    const name = `${id}.${kind.extension}`\n    await mkdir(this.root, { recursive: true })\n    try {\n      const current = await stat(join(this.root, name))\n      if (current.isFile()) return { id, name, size: current.size, url: `/dsh-taskboard/assets/${name}`, ...kind }\n    } catch { /* new content */ }\n\n    let total = 0\n    for (const entry of await readdir(this.root, { withFileTypes: true })) {\n      if (!entry.isFile() || !ASSET_NAME_RE.test(entry.name)) continue\n      try { total += (await stat(join(this.root, entry.name))).size } catch { /* concurrent cleanup */ }\n    }\n    if (total + bytes.length > MAX_ASSET_STORE_BYTES) throw new Error('image store quota exceeded')\n    try {\n      await writeFile(join(this.root, name), bytes, { flag: 'wx' })\n    } catch (error) {\n      if ((error as NodeJS.ErrnoException).code !== 'EEXIST') throw error\n    }\n    return { id, name, size: bytes.length, url: `/dsh-taskboard/assets/${name}`, ...kind }\n  }\n\n  async read(name: string): Promise<{ bytes: Buffer; mime: ImageKind['mime'] } | undefined> {\n    const run = async (): Promise<{ bytes: Buffer; mime: ImageKind['mime'] } | undefined> => {\n    const match = ASSET_NAME_RE.exec(name)\n    if (match === null) return undefined\n    const mime = match[2] === 'png' ? 'image/png'\n      : match[2] === 'jpg' ? 'image/jpeg'\n        : match[2] === 'gif' ? 'image/gif' : 'image/webp'\n    try {\n      return { bytes: await readFile(join(this.root, name)), mime }\n    } catch { return undefined }\n    }\n    return this.storageQueue === undefined ? run() : this.storageQueue.run(run)\n  }\n\n  /** Remove abandoned draft uploads after a grace period; referenced files always survive. */\n  async cleanup(referencedContent: string): Promise<number> {\n    const run = async (): Promise<number> => {\n    let entries\n    try { entries = await readdir(this.root, { withFileTypes: true }) } catch { return 0 }\n    let removed = 0\n    for (const entry of entries) {\n      if (!entry.isFile() || !ASSET_NAME_RE.test(entry.name) || referencedContent.includes(entry.name)) continue\n      const path = join(this.root, entry.name)\n      try {\n        const info = await stat(path)\n        if (this.now() - info.mtimeMs < ORPHAN_GRACE_MS) continue\n        await rm(path, { force: true })\n        removed += 1\n      } catch { /* best effort */ }\n    }\n    return removed\n    }\n    return this.storageQueue === undefined ? run() : this.storageQueue.run(run)\n  }\n}\n"],"mappings":";;;;;AAMA,MAAa,kBAAkB,IAAI,OAAO;AAC1C,MAAa,wBAAwB,MAAM,OAAO;AAClD,MAAa,kBAAkB,OAAU,KAAK;AAK9C,MAAM,gBAAgB;;AAGtB,SAAgB,YAAY,OAA0C;CACpE,IAAI,MAAM,UAAU,KAAK,MAAM,OAAO,OAAQ,MAAM,OAAO,MAAQ,MAAM,OAAO,MAAQ,MAAM,OAAO,MAChG,MAAM,OAAO,MAAQ,MAAM,OAAO,MAAQ,MAAM,OAAO,MAAQ,MAAM,OAAO,IAC/E,OAAO;EAAE,WAAW;EAAO,MAAM;CAAY;CAE/C,IAAI,MAAM,UAAU,KAAK,MAAM,OAAO,OAAQ,MAAM,OAAO,OAAQ,MAAM,OAAO,KAC9E,OAAO;EAAE,WAAW;EAAO,MAAM;CAAa;CAEhD,IAAI,MAAM,UAAU,GAAG;EACrB,MAAM,OAAO,OAAO,KAAK,MAAM,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,OAAO;EAC/D,IAAI,SAAS,YAAY,SAAS,UAAU,OAAO;GAAE,WAAW;GAAO,MAAM;EAAY;CAC3F;CACA,IAAI,MAAM,UAAU,MAAM,OAAO,KAAK,MAAM,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,OAAO,MAAM,UAC7E,OAAO,KAAK,MAAM,SAAS,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,OAAO,MAAM,QAC5D,OAAO;EAAE,WAAW;EAAQ,MAAM;CAAa;AAGnD;;AAGA,IAAa,aAAb,MAAwB;CAIqB;CAAuD;CAHlG,QAAkC,QAAQ,QAAQ;CAClD;CAEA,YAAY,MAAc,YAA2C,KAAK,IAAI,GAAG,cAA8C;EAApF,KAAA,MAAA;EAAuD,KAAA,eAAA;EAA+B,KAAK,OAAO;CAAK;;CAGlJ,WAAmB;EAAE,OAAO,KAAK;CAAK;;CAGtC,YAAY,MAAoB;EAAE,KAAK,OAAO;CAAK;CAEnD,MAAM,IAAI,OAAmB,cAA6C;EACxE,MAAM,YAAY,KAAK,UAAU,OAAO,YAAY;EACpD,IAAI,KAAK,iBAAiB,KAAA,GAAW,OAAO,KAAK,aAAa,IAAI,GAAG;EACrE,OAAQ,KAAK,QAAQ,KAAK,MAAM,KAAK,KAAK,GAAG;CAC/C;CAEA,MAAc,UAAU,OAAmB,cAA6C;EACtF,IAAI,MAAM,WAAW,KAAK,MAAM,SAAA,SAC9B,MAAM,IAAI,MAAM,oBAAoB,gBAAgB,OAAO;EAE7D,MAAM,OAAO,YAAY,KAAK;EAC9B,IAAI,SAAS,KAAA,GAAW,MAAM,IAAI,MAAM,gDAAgD;EACxF,IAAI,iBAAiB,KAAA,KAAa,aAAa,YAAY,MAAM,KAAK,MACpE,MAAM,IAAI,MAAM,gCAAgC,cAAc;EAEhE,MAAM,KAAK,WAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,KAAK;EAC1D,MAAM,OAAO,GAAG,GAAG,GAAG,KAAK;EAC3B,MAAM,MAAM,KAAK,MAAM,EAAE,WAAW,KAAK,CAAC;EAC1C,IAAI;GACF,MAAM,UAAU,MAAM,KAAK,KAAK,KAAK,MAAM,IAAI,CAAC;GAChD,IAAI,QAAQ,OAAO,GAAG,OAAO;IAAE;IAAI;IAAM,MAAM,QAAQ;IAAM,KAAK,yBAAyB;IAAQ,GAAG;GAAK;EAC7G,QAAQ,CAAoB;EAE5B,IAAI,QAAQ;EACZ,KAAK,MAAM,SAAS,MAAM,QAAQ,KAAK,MAAM,EAAE,eAAe,KAAK,CAAC,GAAG;GACrE,IAAI,CAAC,MAAM,OAAO,KAAK,CAAC,cAAc,KAAK,MAAM,IAAI,GAAG;GACxD,IAAI;IAAE,UAAU,MAAM,KAAK,KAAK,KAAK,MAAM,MAAM,IAAI,CAAC,EAAA,CAAG;GAAK,QAAQ,CAA2B;EACnG;EACA,IAAI,QAAQ,MAAM,SAAA,WAAgC,MAAM,IAAI,MAAM,4BAA4B;EAC9F,IAAI;GACF,MAAM,UAAU,KAAK,KAAK,MAAM,IAAI,GAAG,OAAO,EAAE,MAAM,KAAK,CAAC;EAC9D,SAAS,OAAO;GACd,IAAK,MAAgC,SAAS,UAAU,MAAM;EAChE;EACA,OAAO;GAAE;GAAI;GAAM,MAAM,MAAM;GAAQ,KAAK,yBAAyB;GAAQ,GAAG;EAAK;CACvF;CAEA,MAAM,KAAK,MAA+E;EACxF,MAAM,MAAM,YAA6E;GACzF,MAAM,QAAQ,cAAc,KAAK,IAAI;GACrC,IAAI,UAAU,MAAM,OAAO,KAAA;GAC3B,MAAM,OAAO,MAAM,OAAO,QAAQ,cAC9B,MAAM,OAAO,QAAQ,eACnB,MAAM,OAAO,QAAQ,cAAc;GACzC,IAAI;IACF,OAAO;KAAE,OAAO,MAAM,SAAS,KAAK,KAAK,MAAM,IAAI,CAAC;KAAG;IAAK;GAC9D,QAAQ;IAAE;GAAiB;EAC3B;EACA,OAAO,KAAK,iBAAiB,KAAA,IAAY,IAAI,IAAI,KAAK,aAAa,IAAI,GAAG;CAC5E;;CAGA,MAAM,QAAQ,mBAA4C;EACxD,MAAM,MAAM,YAA6B;GACzC,IAAI;GACJ,IAAI;IAAE,UAAU,MAAM,QAAQ,KAAK,MAAM,EAAE,eAAe,KAAK,CAAC;GAAE,QAAQ;IAAE,OAAO;GAAE;GACrF,IAAI,UAAU;GACd,KAAK,MAAM,SAAS,SAAS;IAC3B,IAAI,CAAC,MAAM,OAAO,KAAK,CAAC,cAAc,KAAK,MAAM,IAAI,KAAK,kBAAkB,SAAS,MAAM,IAAI,GAAG;IAClG,MAAM,OAAO,KAAK,KAAK,MAAM,MAAM,IAAI;IACvC,IAAI;KACF,MAAM,OAAO,MAAM,KAAK,IAAI;KAC5B,IAAI,KAAK,IAAI,IAAI,KAAK,UAAA,OAA2B;KACjD,MAAM,GAAG,MAAM,EAAE,OAAO,KAAK,CAAC;KAC9B,WAAW;IACb,QAAQ,CAAoB;GAC9B;GACA,OAAO;EACP;EACA,OAAO,KAAK,iBAAiB,KAAA,IAAY,IAAI,IAAI,KAAK,aAAa,IAAI,GAAG;CAC5E;AACF"}

package/lib/host/routes.js

@@ -4,6 +4,7 @@ import { removeMirror, repoMainPath } from "./isolation.js";
 import { createRepoScanner } from "./repos.js";
 import { archiveTaskSessions } from "./archive-sessions.js";
 import { activeHostLocale } from "./locale.js";
+import { MAX_ASSET_BYTES } from "./assets.js";
 import { ROUTE_PREFIX, SSE_PATH } from "../shared/api.js";
 import { ERR, ToolError } from "./tools.js";
 import { join, resolve, sep } from "node:path";
@@ -17,6 +18,7 @@ const MAX_BODY_BYTES = 5 * 1024 * 1024;
 const TASK_DIFF_RE = new RegExp(`^${ROUTE_PREFIX}/tasks/([^/]+)/diff$`);
 const TASK_RE = new RegExp(`^${ROUTE_PREFIX}/tasks/([^/]+)$`);
 const TASK_ACTION_RE = new RegExp(`^${ROUTE_PREFIX}/tasks/([^/]+)/([\\w-]+)$`);
+const ASSET_RE = new RegExp(`^${ROUTE_PREFIX}/assets/([a-f0-9]{64}\\.(?:png|jpg|gif|webp))$`);
 /** How long a workspace git-detection result stays cached (fail-soft). */
 const GIT_DETECT_TTL_MS = 6e4;
 /** Validate a template's task spec (routes-side, unknown → invalid_input). */
@@ -103,6 +105,18 @@ async function readBody(req) {
 		return null;
 	}
 }
+/** Read one bounded binary upload without ever buffering beyond the file cap. */
+async function readBytes(req, limit) {
+	const chunks = [];
+	let total = 0;
+	for await (const chunk of req) {
+		const bytes = chunk;
+		total += bytes.length;
+		if (total > limit) throw new Error("body too large");
+		chunks.push(bytes);
+	}
+	return Buffer.concat(chunks);
+}
 /** String field accessor (null when absent/not a string). */
 function str(body, key) {
 	const v = body[key];
@@ -287,6 +301,36 @@ function registerTaskboardRoutes(ctx, options) {
 			const url = new URL(req.url ?? "/", "http://x");
 			const pathname = url.pathname;
 			if (req.method === "GET") {
+				if (pathname === `/dsh-taskboard/storage`) {
+					if (options.storage === void 0) {
+						res.writeHead(501);
+						res.end();
+						return;
+					}
+					json(res, {
+						ok: true,
+						value: await options.storage.status()
+					});
+					return;
+				}
+				await options.ready?.();
+				const assetMatch = pathname.match(ASSET_RE);
+				if (assetMatch !== null) {
+					const asset = await options.assets?.read(assetMatch[1]);
+					if (asset === void 0) {
+						res.writeHead(404);
+						res.end();
+						return;
+					}
+					res.writeHead(200, {
+						"content-type": asset.mime,
+						"content-length": asset.bytes.length,
+						"cache-control": "public, max-age=31536000, immutable",
+						"x-content-type-options": "nosniff"
+					});
+					res.end(asset.bytes);
+					return;
+				}
 				if (pathname === `/dsh-taskboard/state`) {
 					await store.load();
 					json(res, {
@@ -435,6 +479,31 @@ function registerTaskboardRoutes(ctx, options) {
 				res.end();
 				return;
 			}
+			if (pathname === `/dsh-taskboard/assets`) {
+				await options.ready?.();
+				if (options.assets === void 0) {
+					json(res, fail("invalid_input", "image attachments unavailable").res, 501);
+					return;
+				}
+				if (req.headers["x-dsh-taskboard-upload"] !== "1") {
+					json(res, fail("forbidden", "missing upload header").res, 403);
+					return;
+				}
+				const declaredMime = String(req.headers["content-type"] ?? "").split(";", 1)[0].trim().toLowerCase();
+				try {
+					const bytes = await readBytes(req, MAX_ASSET_BYTES);
+					await options.assets.cleanup(JSON.stringify(store.snapshot()));
+					json(res, {
+						ok: true,
+						value: await options.assets.put(bytes, declaredMime)
+					}, 201);
+				} catch (error) {
+					const message = error instanceof Error ? error.message : String(error);
+					const status = message.includes("1..") ? 413 : message.includes("quota") ? 507 : 400;
+					json(res, fail("invalid_input", message).res, status);
+				}
+				return;
+			}
 			if (!(req.headers["content-type"] ?? "").toLowerCase().startsWith("application/json")) {
 				json(res, fail("invalid_input", "content-type must be application/json").res, 415);
 				return;
@@ -450,6 +519,24 @@ function registerTaskboardRoutes(ctx, options) {
 				json(res, fail("invalid_input", "body is not a JSON object").res, 400);
 				return;
 			}
+			if (pathname === `/dsh-taskboard/storage/check` || pathname === `/dsh-taskboard/storage/migrate`) {
+				if (options.storage === void 0) {
+					json(res, fail("invalid_input", "storage configuration unavailable").res, 501);
+					return;
+				}
+				try {
+					const directory = str(body, "directory") ?? "";
+					json(res, {
+						ok: true,
+						value: pathname.endsWith("/check") ? await options.storage.check(directory) : await options.storage.migrate(directory)
+					});
+				} catch (error) {
+					const f = fail("invalid_input", error instanceof Error ? error.message : String(error));
+					json(res, f.res, f.status);
+				}
+				return;
+			}
+			await options.ready?.();
 			if (pathname === `/dsh-taskboard/tasks`) {
 				try {
 					const title = normalizeTitle(str(body, "title") ?? "");