studiograph 1.3.46 → 1.3.48-beta.0

package/dist/services/assets/r2-sync.js

@@ -0,0 +1,412 @@
+/**
+ * Shared R2 management service — bucket creation + local-asset sync.
+ *
+ * Lifted out of `src/cli/commands/r2.ts` so the CLI and the HTTP API
+ * (`/api/r2/*`) share one implementation. The CLI handlers in r2.ts
+ * still own user-facing prompts (clack), spinners, and process.exit;
+ * this module just runs the underlying S3 work and emits progress
+ * through a callback so each surface can render it natively.
+ */
+import { readdirSync, statSync, readFileSync, writeFileSync, existsSync, unlinkSync } from 'fs';
+import { join, relative, resolve, extname, dirname } from 'path';
+import { S3Client, CreateBucketCommand, PutObjectCommand, } from '@aws-sdk/client-s3';
+// ── Content type map ──────────────────────────────────────────────────────
+const CONTENT_TYPES = {
+    '.woff': 'font/woff',
+    '.woff2': 'font/woff2',
+    '.ttf': 'font/ttf',
+    '.otf': 'font/otf',
+    '.eot': 'application/vnd.ms-fontobject',
+    '.svg': 'image/svg+xml',
+    '.png': 'image/png',
+    '.jpg': 'image/jpeg',
+    '.jpeg': 'image/jpeg',
+    '.webp': 'image/webp',
+    '.gif': 'image/gif',
+    '.pdf': 'application/pdf',
+    '.js': 'application/javascript',
+    '.css': 'text/css',
+    '.json': 'application/json',
+};
+export function contentType(filePath) {
+    return CONTENT_TYPES[extname(filePath).toLowerCase()] ?? 'application/octet-stream';
+}
+// ── Local asset detection ─────────────────────────────────────────────────
+const ASSET_EXTS = new Set([
+    '.png', '.jpg', '.jpeg', '.webp', '.gif', '.svg',
+    '.mp4', '.webm', '.mov',
+    '.pdf',
+]);
+function isLocalAssetRef(ref) {
+    if (ref.startsWith('http://') ||
+        ref.startsWith('https://') ||
+        ref.startsWith('data:') ||
+        ref.startsWith('#'))
+        return false;
+    const ext = extname(ref.split('?')[0]).toLowerCase();
+    return ASSET_EXTS.has(ext);
+}
+export function walkDir(dir) {
+    const files = [];
+    for (const entry of readdirSync(dir)) {
+        const full = join(dir, entry);
+        if (statSync(full).isDirectory()) {
+            files.push(...walkDir(full));
+        }
+        else {
+            files.push(full);
+        }
+    }
+    return files;
+}
+export function buildR2Client(c) {
+    return new S3Client({
+        region: 'auto',
+        endpoint: `https://${c.accountId}.r2.cloudflarestorage.com`,
+        credentials: {
+            accessKeyId: c.accessKeyId,
+            secretAccessKey: c.secretAccessKey,
+        },
+    });
+}
+/**
+ * Create an R2 bucket. Idempotent: BucketAlreadyExists /
+ * BucketAlreadyOwnedByYou / 409 are treated as success with
+ * alreadyExists=true.
+ */
+export async function createR2Bucket(creds, bucket) {
+    const client = buildR2Client(creds);
+    try {
+        await client.send(new CreateBucketCommand({ Bucket: bucket }));
+        return { bucket, alreadyExists: false };
+    }
+    catch (e) {
+        if (e?.name === 'BucketAlreadyExists' ||
+            e?.name === 'BucketAlreadyOwnedByYou' ||
+            e?.$metadata?.httpStatusCode === 409) {
+            return { bucket, alreadyExists: true };
+        }
+        throw e;
+    }
+}
+/**
+ * Run a full local-asset sync: tokens.json files under
+ * .studiograph/apps/*​/theme/ plus markdown references across every
+ * repo. Mirrors the legacy CLI command's two-pass shape; the progress
+ * callback gets fired after every per-file step so the UI can render
+ * smoothly.
+ *
+ * Cancellation is cooperative — the loop checks `shouldCancel()` between
+ * files. In-flight uploads complete (they're per-file Promise.all batches
+ * inside each markdown file).
+ */
+export async function syncLocalAssetsToR2(opts) {
+    const { workspacePath, repoPaths, credentials, bucket, publicUrl, onProgress, shouldCancel } = opts;
+    const client = buildR2Client(credentials);
+    const r2 = { bucket, public_url: publicUrl };
+    const progress = {
+        totalFiles: 0,
+        uploadedFiles: 0,
+        rewrittenFiles: 0,
+        failedFiles: 0,
+        currentFile: '',
+        phase: 'scanning',
+        errors: [],
+    };
+    const emit = () => onProgress?.({ ...progress, errors: [...progress.errors] });
+    // ── Pass 1: tokens.json files ───────────────────────────────────────────
+    const appsDir = join(workspacePath, '.studiograph', 'apps');
+    const tokensFiles = [];
+    if (existsSync(appsDir)) {
+        for (const app of readdirSync(appsDir)) {
+            const tokensPath = join(appsDir, app, 'theme', 'tokens.json');
+            if (existsSync(tokensPath))
+                tokensFiles.push(tokensPath);
+        }
+    }
+    const tokensJobs = [];
+    for (const tokensPath of tokensFiles) {
+        let count = 0;
+        try {
+            const raw = readFileSync(tokensPath, 'utf8');
+            const tokens = JSON.parse(raw);
+            const visit = (obj) => {
+                if (typeof obj === 'string' && obj.startsWith('file:'))
+                    count++;
+                else if (obj && typeof obj === 'object')
+                    for (const k of Object.keys(obj))
+                        visit(obj[k]);
+            };
+            visit(tokens);
+        }
+        catch { /* malformed tokens.json — pass-2 will surface */ }
+        tokensJobs.push({ path: tokensPath, refs: count });
+        progress.totalFiles += count;
+    }
+    const mdJobs = [];
+    for (const repoPath of repoPaths) {
+        if (!existsSync(repoPath))
+            continue;
+        const mdFiles = walkDir(repoPath).filter(f => f.endsWith('.md'));
+        for (const mdFile of mdFiles) {
+            const original = readFileSync(mdFile, 'utf8');
+            const refs = new Set();
+            for (const m of original.matchAll(/!?\[[^\]]*\]\(([^)\s]+)[^)]*\)/g)) {
+                if (isLocalAssetRef(m[1]))
+                    refs.add(m[1]);
+            }
+            for (const m of original.matchAll(/\bsrc=["']([^"']+)["']/g)) {
+                if (isLocalAssetRef(m[1]))
+                    refs.add(m[1]);
+            }
+            if (refs.size === 0)
+                continue;
+            mdJobs.push({ mdFile, repoPath, refs: [...refs] });
+            progress.totalFiles += refs.size;
+        }
+    }
+    const assetJobs = [];
+    const assetsRoot = join(workspacePath, '.studiograph', 'assets');
+    if (existsSync(assetsRoot)) {
+        for (const typeDir of readdirSync(assetsRoot)) {
+            const typePath = join(assetsRoot, typeDir);
+            if (!statSync(typePath).isDirectory())
+                continue;
+            for (const idDir of readdirSync(typePath)) {
+                const idPath = join(typePath, idDir);
+                if (!statSync(idPath).isDirectory())
+                    continue;
+                for (const filename of readdirSync(idPath)) {
+                    const filePath = join(idPath, filename);
+                    if (!statSync(filePath).isFile())
+                        continue;
+                    assetJobs.push({
+                        localPath: filePath,
+                        key: `${typeDir}/${idDir}/${filename}`,
+                    });
+                }
+            }
+        }
+        progress.totalFiles += assetJobs.length;
+    }
+    // Per-repo list of markdown files we rewrote, returned to the caller for
+    // git-pipeline commits. Built incrementally during pass 2.
+    const rewrittenByRepo = new Map();
+    progress.phase = 'uploading';
+    emit();
+    let cancelled = false;
+    const checkCancel = () => {
+        if (shouldCancel?.()) {
+            cancelled = true;
+            return true;
+        }
+        return false;
+    };
+    // ── Pass 1: upload tokens.json file: references ─────────────────────────
+    for (const job of tokensJobs) {
+        if (checkCancel())
+            break;
+        if (job.refs === 0)
+            continue;
+        let tokens;
+        try {
+            tokens = JSON.parse(readFileSync(job.path, 'utf8'));
+        }
+        catch (err) {
+            progress.errors.push({ file: job.path, message: `Parse failed: ${err?.message ?? err}` });
+            progress.failedFiles += job.refs;
+            emit();
+            continue;
+        }
+        let modified = false;
+        const rewrite = async (obj, basePath) => {
+            if (typeof obj === 'string' && obj.startsWith('file:')) {
+                const localPath = join(basePath, obj.slice(5));
+                const key = relative(workspacePath, localPath);
+                if (!existsSync(localPath)) {
+                    progress.errors.push({ file: key, message: 'Referenced file not found' });
+                    progress.failedFiles++;
+                    emit();
+                    return obj;
+                }
+                progress.currentFile = key;
+                emit();
+                try {
+                    await client.send(new PutObjectCommand({
+                        Bucket: r2.bucket,
+                        Key: key,
+                        Body: readFileSync(localPath),
+                        ContentType: contentType(localPath),
+                        CacheControl: 'public, max-age=31536000, immutable',
+                    }));
+                    progress.uploadedFiles++;
+                    modified = true;
+                    emit();
+                    return `${r2.public_url}/${key}`;
+                }
+                catch (err) {
+                    progress.errors.push({ file: key, message: err?.message ?? 'Upload failed' });
+                    progress.failedFiles++;
+                    emit();
+                    return obj;
+                }
+            }
+            if (obj && typeof obj === 'object') {
+                const out = Array.isArray(obj) ? [] : {};
+                for (const k of Object.keys(obj))
+                    out[k] = await rewrite(obj[k], basePath);
+                return out;
+            }
+            return obj;
+        };
+        const updated = await rewrite(tokens, workspacePath);
+        if (modified) {
+            writeFileSync(job.path, JSON.stringify(updated, null, 2) + '\n');
+            progress.rewrittenFiles++;
+            emit();
+        }
+    }
+    // ── Pass 2: upload markdown asset refs ──────────────────────────────────
+    for (const job of mdJobs) {
+        if (checkCancel())
+            break;
+        const original = readFileSync(job.mdFile, 'utf8');
+        const replacements = new Map();
+        for (const ref of job.refs) {
+            if (checkCancel())
+                break;
+            const absPath = resolve(dirname(job.mdFile), ref);
+            const key = relative(workspacePath, absPath);
+            if (!existsSync(absPath)) {
+                progress.errors.push({ file: key, message: 'Referenced file not found' });
+                progress.failedFiles++;
+                emit();
+                continue;
+            }
+            progress.currentFile = key;
+            emit();
+            try {
+                await client.send(new PutObjectCommand({
+                    Bucket: r2.bucket,
+                    Key: key,
+                    Body: readFileSync(absPath),
+                    ContentType: contentType(absPath),
+                    CacheControl: 'public, max-age=31536000, immutable',
+                }));
+                replacements.set(ref, `${r2.public_url}/${key}`);
+                progress.uploadedFiles++;
+                emit();
+            }
+            catch (err) {
+                progress.errors.push({ file: key, message: err?.message ?? 'Upload failed' });
+                progress.failedFiles++;
+                emit();
+            }
+        }
+        if (replacements.size > 0) {
+            let updated = original;
+            for (const [ref, r2Url] of replacements) {
+                const escaped = ref.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+                updated = updated.replace(new RegExp(escaped, 'g'), r2Url);
+            }
+            if (updated !== original) {
+                writeFileSync(job.mdFile, updated);
+                progress.rewrittenFiles++;
+                const repoFiles = rewrittenByRepo.get(job.repoPath) ?? [];
+                repoFiles.push(job.mdFile);
+                rewrittenByRepo.set(job.repoPath, repoFiles);
+                emit();
+            }
+        }
+    }
+    // ── Pass 3: migrate .studiograph/assets/{type}/{id}/{filename} → R2 ─────
+    // Upload each local-backend file to R2 with the same key, then delete the
+    // local copy. After flip to r2 mode, `/api/assets/*` resolves these via
+    // R2.getSignedUrl — without this pass the proxied URLs 404 because R2
+    // doesn't have the key the local backend wrote.
+    for (const job of assetJobs) {
+        if (checkCancel())
+            break;
+        progress.currentFile = job.key;
+        emit();
+        try {
+            await client.send(new PutObjectCommand({
+                Bucket: r2.bucket,
+                Key: job.key,
+                Body: readFileSync(job.localPath),
+                ContentType: contentType(job.localPath),
+                CacheControl: 'public, max-age=31536000, immutable',
+            }));
+            progress.uploadedFiles++;
+            emit();
+            // Only delete after the upload resolved successfully. If the unlink
+            // itself trips (read-only filesystem, race), record it but don't
+            // re-fail the upload — the file is in R2; the worst case is the
+            // banner counter doesn't decrement and the user sees one more
+            // "sync" prompt.
+            try {
+                unlinkSync(job.localPath);
+            }
+            catch (err) {
+                progress.errors.push({
+                    file: job.key,
+                    message: `Uploaded to R2 but local copy not deletable: ${err?.message ?? err}`,
+                });
+                emit();
+            }
+        }
+        catch (err) {
+            progress.errors.push({ file: job.key, message: err?.message ?? 'Upload failed' });
+            progress.failedFiles++;
+            emit();
+        }
+    }
+    progress.currentFile = '';
+    progress.phase = cancelled ? 'cancelled' : 'done';
+    emit();
+    return {
+        uploaded: progress.uploadedFiles,
+        rewritten: progress.rewrittenFiles,
+        failed: progress.failedFiles,
+        cancelled,
+        rewrittenByRepo,
+    };
+}
+// ── Local asset count (for "you have N local assets" banner) ──────────────
+/**
+ * Count files under `.studiograph/assets/`. Used by the UI banner to tell
+ * the operator there's work to migrate after switching from local to R2.
+ * Returns 0 if the directory doesn't exist.
+ */
+export function countLocalAssets(workspacePath) {
+    const assetsDir = join(workspacePath, '.studiograph', 'assets');
+    if (!existsSync(assetsDir))
+        return 0;
+    let count = 0;
+    const visit = (dir) => {
+        let entries;
+        try {
+            entries = readdirSync(dir);
+        }
+        catch {
+            return;
+        }
+        for (const entry of entries) {
+            const full = join(dir, entry);
+            let st;
+            try {
+                st = statSync(full);
+            }
+            catch {
+                continue;
+            }
+            if (st.isDirectory())
+                visit(full);
+            else if (st.isFile())
+                count++;
+        }
+    };
+    visit(assetsDir);
+    return count;
+}
+//# sourceMappingURL=r2-sync.js.map

package/dist/services/assets/r2-sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"r2-sync.js","sourceRoot":"","sources":["../../../src/services/assets/r2-sync.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChG,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACjE,OAAO,EACL,QAAQ,EACR,mBAAmB,EACnB,gBAAgB,GAEjB,MAAM,oBAAoB,CAAC;AAE5B,6EAA6E;AAE7E,MAAM,aAAa,GAA2B;IAC5C,OAAO,EAAG,WAAW;IACrB,QAAQ,EAAE,YAAY;IACtB,MAAM,EAAI,UAAU;IACpB,MAAM,EAAI,UAAU;IACpB,MAAM,EAAI,+BAA+B;IACzC,MAAM,EAAI,eAAe;IACzB,MAAM,EAAI,WAAW;IACrB,MAAM,EAAI,YAAY;IACtB,OAAO,EAAG,YAAY;IACtB,OAAO,EAAG,YAAY;IACtB,MAAM,EAAI,WAAW;IACrB,MAAM,EAAI,iBAAiB;IAC3B,KAAK,EAAK,wBAAwB;IAClC,MAAM,EAAI,UAAU;IACpB,OAAO,EAAG,kBAAkB;CAC7B,CAAC;AAEF,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,OAAO,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,0BAA0B,CAAC;AACtF,CAAC;AAED,6EAA6E;AAE7E,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IACzB,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM;IAChD,MAAM,EAAE,OAAO,EAAE,MAAM;IACvB,MAAM;CACP,CAAC,CAAC;AAEH,SAAS,eAAe,CAAC,GAAW;IAClC,IACE,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC;QACzB,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC;QAC1B,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;QACvB,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;QACnB,OAAO,KAAK,CAAC;IACf,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACrD,OAAO,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,GAAW;IACjC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9B,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAUD,MAAM,UAAU,aAAa,CAAC,CAAgB;IAC5C,OAAO,IAAI,QAAQ,CAAC;QAClB,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE,WAAW,CAAC,CAAC,SAAS,2BAA2B;QAC3D,WAAW,EAAE;YACX,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,eAAe,EAAE,CAAC,CAAC,eAAe;SACnC;KACF,CAAC,CAAC;AACL,CAAC;AASD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAoB,EACpB,MAAc;IAEd,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAC/D,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;IAC1C,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,IACE,CAAC,EAAE,IAAI,KAAK,qBAAqB;YACjC,CAAC,EAAE,IAAI,KAAK,yBAAyB;YACrC,CAAC,EAAE,SAAS,EAAE,cAAc,KAAK,GAAG,EACpC,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;QACzC,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC;AA8CD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAiB;IACzD,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;IACpG,MAAM,MAAM,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IAC1C,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;IAE7C,MAAM,QAAQ,GAAiB;QAC7B,UAAU,EAAE,CAAC;QACb,aAAa,EAAE,CAAC;QAChB,cAAc,EAAE,CAAC;QACjB,WAAW,EAAE,CAAC;QACd,WAAW,EAAE,EAAE;QACf,KAAK,EAAE,UAAU;QACjB,MAAM,EAAE,EAAE;KACX,CAAC;IACF,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,UAAU,EAAE,CAAC,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAE/E,2EAA2E;IAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;YACvC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;YAC9D,IAAI,UAAU,CAAC,UAAU,CAAC;gBAAE,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAMD,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/B,MAAM,KAAK,GAAG,CAAC,GAAQ,EAAE,EAAE;gBACzB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;oBAAE,KAAK,EAAE,CAAC;qBAC3D,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;oBAAE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;wBAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3F,CAAC,CAAC;YACF,KAAK,CAAC,MAAM,CAAC,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC,CAAC,iDAAiD,CAAC,CAAC;QAC7D,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACnD,QAAQ,CAAC,UAAU,IAAI,KAAK,CAAC;IAC/B,CAAC;IAMD,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,SAAS;QACpC,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QACjE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC9C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;YAC/B,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,iCAAiC,CAAC,EAAE,CAAC;gBACrE,IAAI,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5C,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,yBAAyB,CAAC,EAAE,CAAC;gBAC7D,IAAI,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5C,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;gBAAE,SAAS;YAC9B,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;YACnD,QAAQ,CAAC,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC;QACnC,CAAC;IACH,CAAC;IAYD,MAAM,SAAS,GAAwB,EAAE,CAAC;IAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;IACjE,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,KAAK,MAAM,OAAO,IAAI,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAC3C,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE;gBAAE,SAAS;YAChD,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBACrC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE;oBAAE,SAAS;gBAC9C,KAAK,MAAM,QAAQ,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;oBACxC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE;wBAAE,SAAS;oBAC3C,SAAS,CAAC,IAAI,CAAC;wBACb,SAAS,EAAE,QAAQ;wBACnB,GAAG,EAAE,GAAG,OAAO,IAAI,KAAK,IAAI,QAAQ,EAAE;qBACvC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QACD,QAAQ,CAAC,UAAU,IAAI,SAAS,CAAC,MAAM,CAAC;IAC1C,CAAC;IAED,yEAAyE;IACzE,2DAA2D;IAC3D,MAAM,eAAe,GAAG,IAAI,GAAG,EAAoB,CAAC;IAEpD,QAAQ,CAAC,KAAK,GAAG,WAAW,CAAC;IAC7B,IAAI,EAAE,CAAC;IAEP,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,MAAM,WAAW,GAAG,GAAG,EAAE;QACvB,IAAI,YAAY,EAAE,EAAE,EAAE,CAAC;YAAC,SAAS,GAAG,IAAI,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACxD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,2EAA2E;IAC3E,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,WAAW,EAAE;YAAE,MAAM;QACzB,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;YAAE,SAAS;QAC7B,IAAI,MAAW,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,iBAAiB,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;YAC1F,QAAQ,CAAC,WAAW,IAAI,GAAG,CAAC,IAAI,CAAC;YACjC,IAAI,EAAE,CAAC;YACP,SAAS;QACX,CAAC;QAED,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,OAAO,GAAG,KAAK,EAAE,GAAQ,EAAE,QAAgB,EAAgB,EAAE;YACjE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvD,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/C,MAAM,GAAG,GAAG,QAAQ,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;gBAC/C,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC3B,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAC;oBAC1E,QAAQ,CAAC,WAAW,EAAE,CAAC;oBACvB,IAAI,EAAE,CAAC;oBACP,OAAO,GAAG,CAAC;gBACb,CAAC;gBACD,QAAQ,CAAC,WAAW,GAAG,GAAG,CAAC;gBAC3B,IAAI,EAAE,CAAC;gBACP,IAAI,CAAC;oBACH,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC;wBACrC,MAAM,EAAE,EAAE,CAAC,MAAM;wBACjB,GAAG,EAAE,GAAG;wBACR,IAAI,EAAE,YAAY,CAAC,SAAS,CAAC;wBAC7B,WAAW,EAAE,WAAW,CAAC,SAAS,CAAC;wBACnC,YAAY,EAAE,qCAAqC;qBACpD,CAAC,CAAC,CAAC;oBACJ,QAAQ,CAAC,aAAa,EAAE,CAAC;oBACzB,QAAQ,GAAG,IAAI,CAAC;oBAChB,IAAI,EAAE,CAAC;oBACP,OAAO,GAAG,EAAE,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;gBACnC,CAAC;gBAAC,OAAO,GAAQ,EAAE,CAAC;oBAClB,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,IAAI,eAAe,EAAE,CAAC,CAAC;oBAC9E,QAAQ,CAAC,WAAW,EAAE,CAAC;oBACvB,IAAI,EAAE,CAAC;oBACP,OAAO,GAAG,CAAC;gBACb,CAAC;YACH,CAAC;YACD,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACnC,MAAM,GAAG,GAAQ,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;oBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;gBAC3E,OAAO,GAAG,CAAC;YACb,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC,CAAC;QAEF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QACrD,IAAI,QAAQ,EAAE,CAAC;YACb,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACjE,QAAQ,CAAC,cAAc,EAAE,CAAC;YAC1B,IAAI,EAAE,CAAC;QACT,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,IAAI,WAAW,EAAE;YAAE,MAAM;QACzB,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;QAE/C,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YAC3B,IAAI,WAAW,EAAE;gBAAE,MAAM;YACzB,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;YAClD,MAAM,GAAG,GAAG,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;YAC7C,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzB,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAC;gBAC1E,QAAQ,CAAC,WAAW,EAAE,CAAC;gBACvB,IAAI,EAAE,CAAC;gBACP,SAAS;YACX,CAAC;YACD,QAAQ,CAAC,WAAW,GAAG,GAAG,CAAC;YAC3B,IAAI,EAAE,CAAC;YACP,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC;oBACrC,MAAM,EAAE,EAAE,CAAC,MAAM;oBACjB,GAAG,EAAE,GAAG;oBACR,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC;oBAC3B,WAAW,EAAE,WAAW,CAAC,OAAO,CAAC;oBACjC,YAAY,EAAE,qCAAqC;iBACpD,CAAC,CAAC,CAAC;gBACJ,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC,CAAC;gBACjD,QAAQ,CAAC,aAAa,EAAE,CAAC;gBACzB,IAAI,EAAE,CAAC;YACT,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,IAAI,eAAe,EAAE,CAAC,CAAC;gBAC9E,QAAQ,CAAC,WAAW,EAAE,CAAC;gBACvB,IAAI,EAAE,CAAC;YACT,CAAC;QACH,CAAC;QAED,IAAI,YAAY,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAC1B,IAAI,OAAO,GAAG,QAAQ,CAAC;YACvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,YAAY,EAAE,CAAC;gBACxC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;gBAC3D,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;YAC7D,CAAC;YACD,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACzB,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBACnC,QAAQ,CAAC,cAAc,EAAE,CAAC;gBAC1B,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAC1D,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC3B,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;gBAC7C,IAAI,EAAE,CAAC;YACT,CAAC;QACH,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,0EAA0E;IAC1E,wEAAwE;IACxE,sEAAsE;IACtE,gDAAgD;IAChD,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,IAAI,WAAW,EAAE;YAAE,MAAM;QACzB,QAAQ,CAAC,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC;QAC/B,IAAI,EAAE,CAAC;QACP,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC;gBACrC,MAAM,EAAE,EAAE,CAAC,MAAM;gBACjB,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,IAAI,EAAE,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC;gBACjC,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC;gBACvC,YAAY,EAAE,qCAAqC;aACpD,CAAC,CAAC,CAAC;YACJ,QAAQ,CAAC,aAAa,EAAE,CAAC;YACzB,IAAI,EAAE,CAAC;YACP,oEAAoE;YACpE,iEAAiE;YACjE,gEAAgE;YAChE,8DAA8D;YAC9D,iBAAiB;YACjB,IAAI,CAAC;gBACH,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC5B,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;oBACnB,IAAI,EAAE,GAAG,CAAC,GAAG;oBACb,OAAO,EAAE,gDAAgD,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE;iBAC/E,CAAC,CAAC;gBACH,IAAI,EAAE,CAAC;YACT,CAAC;QACH,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,IAAI,eAAe,EAAE,CAAC,CAAC;YAClF,QAAQ,CAAC,WAAW,EAAE,CAAC;YACvB,IAAI,EAAE,CAAC;QACT,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,WAAW,GAAG,EAAE,CAAC;IAC1B,QAAQ,CAAC,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;IAClD,IAAI,EAAE,CAAC;IAEP,OAAO;QACL,QAAQ,EAAE,QAAQ,CAAC,aAAa;QAChC,SAAS,EAAE,QAAQ,CAAC,cAAc;QAClC,MAAM,EAAE,QAAQ,CAAC,WAAW;QAC5B,SAAS;QACT,eAAe;KAChB,CAAC;AACJ,CAAC;AAED,6EAA6E;AAE7E;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,aAAqB;IACpD,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;IAChE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,CAAC,CAAC;IACrC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,EAAE;QAC5B,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YAAC,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO;QAAC,CAAC;QACrD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9B,IAAI,EAAE,CAAC;YACP,IAAI,CAAC;gBAAC,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,SAAS;YAAC,CAAC;YAChD,IAAI,EAAE,CAAC,WAAW,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,CAAC;iBAC7B,IAAI,EAAE,CAAC,MAAM,EAAE;gBAAE,KAAK,EAAE,CAAC;QAChC,CAAC;IACH,CAAC,CAAC;IACF,KAAK,CAAC,SAAS,CAAC,CAAC;IACjB,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/services/assets/r2.d.ts

@@ -3,7 +3,7 @@
  *
  * S3-compatible object storage with zero egress fees
  */
-import type { AssetBackend, AssetInfo, R2Config } from './base.js';
+import type { AssetBackend, AssetInfo, AssetRecord, R2Config } from './base.js';
 export declare class R2AssetBackend implements AssetBackend {
     private client;
     private bucket;
@@ -13,10 +13,22 @@ export declare class R2AssetBackend implements AssetBackend {
      * Upload asset to R2
      */
     upload(key: string, buffer: Buffer, contentType: string): Promise<AssetInfo>;
+    /**
+     * Server-side copy via S3 CopyObjectCommand (R2 supports it) — no download.
+     * CopySource must be URL-encoded and bucket-qualified. Overwrites the
+     * destination, so migration re-runs are idempotent.
+     */
+    copy(srcKey: string, destKey: string): Promise<void>;
     /**
      * List assets with a given prefix
      */
     list(prefix: string): Promise<AssetInfo[]>;
+    /**
+     * List every asset in the bucket via paginated ListObjectsV2. Parses
+     * `{type}/{id}/{filename}` out of each key and guesses content type
+     * from the extension — no per-object HEAD calls.
+     */
+    listAll(): Promise<AssetRecord[]>;
     /**
      * Delete a single asset
      */
@@ -25,6 +37,27 @@ export declare class R2AssetBackend implements AssetBackend {
      * Delete all assets with a given prefix
      */
     deleteAll(prefix: string): Promise<number>;
+    /**
+     * Generate a short-lived pre-signed URL for a stored object.
+     *
+     * Stage 2 of the asset architecture: rather than handing browsers a
+     * permanent public URL, the GET /api/assets/* route authorizes per-repo
+     * and 302-redirects to one of these. The bucket can then be flipped to
+     * private without breaking the workflow.
+     *
+     * Default expiry is 4 hours (14400s). Long enough that Range-request
+     * continuation on multi-hour media doesn't get a SignatureExpired mid-
+     * stream; short enough that out-of-band URL leakage has a bounded
+     * exposure window. The leak math doesn't meaningfully shift between
+     * 15 min and 4 hr — anything that exfiltrates a URL fast enough to
+     * matter does so within either window.
+     *
+     * `method` selects the HTTP verb the URL is signed against — pre-signed
+     * URLs are method-bound, so HEAD requests need a HEAD-signed URL.
+     * Without this, link-unfurlers and OpenGraph crawlers that issue HEAD
+     * after following a redirect get 403 SignatureDoesNotMatch from R2.
+     */
+    getSignedUrl(key: string, expiresIn?: number, method?: 'GET' | 'HEAD'): Promise<string>;
     /**
      * Check if an asset exists
      */

package/dist/services/assets/r2.js

@@ -3,7 +3,8 @@
  *
  * S3-compatible object storage with zero egress fees
  */
-import { S3Client, PutObjectCommand, ListObjectsV2Command, DeleteObjectCommand, DeleteObjectsCommand, HeadObjectCommand, } from '@aws-sdk/client-s3';
+import { S3Client, PutObjectCommand, GetObjectCommand, ListObjectsV2Command, DeleteObjectCommand, DeleteObjectsCommand, HeadObjectCommand, CopyObjectCommand, } from '@aws-sdk/client-s3';
+import { getSignedUrl } from '@aws-sdk/s3-request-presigner';
 import { getMediaType } from './base.js';
 export class R2AssetBackend {
     client;
@@ -49,6 +50,24 @@ export class R2AssetBackend {
             throw new Error(`Failed to upload to R2: ${error instanceof Error ? error.message : 'Unknown error'}`);
         }
     }
+    /**
+     * Server-side copy via S3 CopyObjectCommand (R2 supports it) — no download.
+     * CopySource must be URL-encoded and bucket-qualified. Overwrites the
+     * destination, so migration re-runs are idempotent.
+     */
+    async copy(srcKey, destKey) {
+        try {
+            await this.client.send(new CopyObjectCommand({
+                Bucket: this.bucket,
+                CopySource: encodeURIComponent(`${this.bucket}/${srcKey}`),
+                Key: destKey,
+                CacheControl: 'public, max-age=31536000, immutable',
+            }));
+        }
+        catch (error) {
+            throw new Error(`Failed to copy in R2: ${error instanceof Error ? error.message : 'Unknown error'}`);
+        }
+    }
     /**
      * List assets with a given prefix
      */
@@ -100,6 +119,53 @@ export class R2AssetBackend {
             throw new Error(`Failed to list assets from R2: ${error instanceof Error ? error.message : 'Unknown error'}`);
         }
     }
+    /**
+     * List every asset in the bucket via paginated ListObjectsV2. Parses
+     * `{type}/{id}/{filename}` out of each key and guesses content type
+     * from the extension — no per-object HEAD calls.
+     */
+    async listAll() {
+        const results = [];
+        let continuationToken;
+        try {
+            do {
+                const response = await this.client.send(new ListObjectsV2Command({
+                    Bucket: this.bucket,
+                    ContinuationToken: continuationToken,
+                }));
+                for (const obj of response.Contents || []) {
+                    if (!obj.Key || obj.Key.endsWith('/'))
+                        continue;
+                    const parts = obj.Key.split('/');
+                    // Expected layout: {type}/{id}/{filename}. Ignore anything else
+                    // (e.g. theme tokens, unrelated R2 uploads sharing the bucket).
+                    if (parts.length !== 3)
+                        continue;
+                    const [entityType, entityId, filename] = parts;
+                    if (!entityType || !entityId || !filename)
+                        continue;
+                    const ext = filename.split('.').pop()?.toLowerCase() || '';
+                    const contentType = this.guessContentType(ext);
+                    const url = `${this.publicUrl}/${obj.Key}`;
+                    results.push({
+                        filename,
+                        size: obj.Size || 0,
+                        contentType,
+                        url,
+                        path: url,
+                        mediaType: getMediaType(contentType),
+                        entityType,
+                        entityId,
+                    });
+                }
+                continuationToken = response.IsTruncated ? response.NextContinuationToken : undefined;
+            } while (continuationToken);
+        }
+        catch (error) {
+            throw new Error(`Failed to list assets from R2: ${error instanceof Error ? error.message : 'Unknown error'}`);
+        }
+        return results;
+    }
     /**
      * Delete a single asset
      */
@@ -142,6 +208,32 @@ export class R2AssetBackend {
             throw new Error(`Failed to delete assets from R2: ${error instanceof Error ? error.message : 'Unknown error'}`);
         }
     }
+    /**
+     * Generate a short-lived pre-signed URL for a stored object.
+     *
+     * Stage 2 of the asset architecture: rather than handing browsers a
+     * permanent public URL, the GET /api/assets/* route authorizes per-repo
+     * and 302-redirects to one of these. The bucket can then be flipped to
+     * private without breaking the workflow.
+     *
+     * Default expiry is 4 hours (14400s). Long enough that Range-request
+     * continuation on multi-hour media doesn't get a SignatureExpired mid-
+     * stream; short enough that out-of-band URL leakage has a bounded
+     * exposure window. The leak math doesn't meaningfully shift between
+     * 15 min and 4 hr — anything that exfiltrates a URL fast enough to
+     * matter does so within either window.
+     *
+     * `method` selects the HTTP verb the URL is signed against — pre-signed
+     * URLs are method-bound, so HEAD requests need a HEAD-signed URL.
+     * Without this, link-unfurlers and OpenGraph crawlers that issue HEAD
+     * after following a redirect get 403 SignatureDoesNotMatch from R2.
+     */
+    async getSignedUrl(key, expiresIn = 14400, method = 'GET') {
+        const command = method === 'HEAD'
+            ? new HeadObjectCommand({ Bucket: this.bucket, Key: key })
+            : new GetObjectCommand({ Bucket: this.bucket, Key: key });
+        return getSignedUrl(this.client, command, { expiresIn });
+    }
     /**
      * Check if an asset exists
      */

package/dist/services/assets/r2.js.map

@@ -1 +1 @@
-{"version":3,"file":"r2.js","sourceRoot":"","sources":["../../../src/services/assets/r2.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,QAAQ,EACR,gBAAgB,EAChB,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC,MAAM,OAAO,cAAc;IACjB,MAAM,CAAW;IACjB,MAAM,CAAS;IACf,SAAS,CAAS;IAE1B,YAAY,MAAgB;QAC1B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,0BAA0B;QAEjF,qCAAqC;QACrC,IAAI,CAAC,MAAM,GAAG,IAAI,QAAQ,CAAC;YACzB,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,WAAW,MAAM,CAAC,SAAS,2BAA2B;YAChE,WAAW,EAAE;gBACX,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,eAAe,EAAE,MAAM,CAAC,eAAe;aACxC;SACF,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,GAAW,EAAE,MAAc,EAAE,WAAmB;QAC3D,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACpB,IAAI,gBAAgB,CAAC;gBACnB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG,EAAE,GAAG;gBACR,IAAI,EAAE,MAAM;gBACZ,WAAW,EAAE,WAAW;gBACxB,YAAY,EAAE,qCAAqC,EAAE,mBAAmB;aACzE,CAAC,CACH,CAAC;YAEF,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,GAAG,CAAC;YAC7C,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;YAEvC,OAAO;gBACL,QAAQ;gBACR,IAAI,EAAE,MAAM,CAAC,MAAM;gBACnB,WAAW;gBACX,GAAG;gBACH,IAAI,EAAE,GAAG,EAAE,mCAAmC;gBAC9C,SAAS,EAAE,YAAY,CAAC,WAAW,CAAC;aACrC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;QACzG,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CAAC,MAAc;QACvB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACrC,IAAI,oBAAoB,CAAC;gBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,MAAM,EAAE,MAAM;aACf,CAAC,CACH,CAAC;YAEF,MAAM,MAAM,GAAgB,EAAE,CAAC;YAE/B,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;gBAC1C,IAAI,CAAC,GAAG,CAAC,GAAG;oBAAE,SAAS;gBAEvB,2CAA2C;gBAC3C,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAEpC,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC;gBAErD,oEAAoE;gBACpE,MAAM,YAAY,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBACjD,IAAI,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAEzC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;gBAE3C,wCAAwC;gBACxC,IAAI,WAAW,GAAG,0BAA0B,CAAC;gBAC7C,IAAI,CAAC;oBACH,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACzC,IAAI,iBAAiB,CAAC;wBACpB,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,GAAG,EAAE,GAAG,CAAC,GAAG;qBACb,CAAC,CACH,CAAC;oBACF,WAAW,GAAG,YAAY,CAAC,WAAW,IAAI,WAAW,CAAC;gBACxD,CAAC;gBAAC,MAAM,CAAC;oBACP,sCAAsC;oBACtC,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;oBAC3D,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBAC3C,CAAC;gBAED,MAAM,CAAC,IAAI,CAAC;oBACV,QAAQ;oBACR,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC;oBACnB,WAAW;oBACX,GAAG;oBACH,IAAI,EAAE,GAAG;oBACT,SAAS,EAAE,YAAY,CAAC,WAAW,CAAC;iBACrC,CAAC,CAAC;YACL,CAAC;YAED,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,kCAAkC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;QAChH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACpB,IAAI,mBAAmB,CAAC;gBACtB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG,EAAE,GAAG;aACT,CAAC,CACH,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,6BAA6B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,MAAc;QAC5B,IAAI,CAAC;YACH,0CAA0C;YAC1C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACrC,IAAI,oBAAoB,CAAC;gBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,MAAM,EAAE,MAAM;aACf,CAAC,CACH,CAAC;YAEF,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC;YACxC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO,CAAC,CAAC;YACX,CAAC;YAED,qBAAqB;YACrB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACpB,IAAI,oBAAoB,CAAC;gBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,MAAM,EAAE;oBACN,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;oBAC/C,KAAK,EAAE,IAAI;iBACZ;aACF,CAAC,CACH,CAAC;YAEF,OAAO,OAAO,CAAC,MAAM,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,oCAAoC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;QAClH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACpB,IAAI,iBAAiB,CAAC;gBACpB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG,EAAE,GAAG;aACT,CAAC,CACH,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,GAAW;QAClC,MAAM,YAAY,GAA2B;YAC3C,GAAG,EAAE,WAAW;YAChB,GAAG,EAAE,YAAY;YACjB,IAAI,EAAE,YAAY;YAClB,GAAG,EAAE,WAAW;YAChB,IAAI,EAAE,YAAY;YAClB,GAAG,EAAE,eAAe;YACpB,GAAG,EAAE,WAAW;YAChB,GAAG,EAAE,iBAAiB;YACtB,IAAI,EAAE,YAAY;YAClB,GAAG,EAAE,YAAY;YACjB,GAAG,EAAE,WAAW;YAChB,GAAG,EAAE,iBAAiB;YACtB,GAAG,EAAE,iBAAiB;SACvB,CAAC;QAEF,OAAO,YAAY,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAC;IACzD,CAAC;CACF"}
+{"version":3,"file":"r2.js","sourceRoot":"","sources":["../../../src/services/assets/r2.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,QAAQ,EACR,gBAAgB,EAChB,gBAAgB,EAChB,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAE7D,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC,MAAM,OAAO,cAAc;IACjB,MAAM,CAAW;IACjB,MAAM,CAAS;IACf,SAAS,CAAS;IAE1B,YAAY,MAAgB;QAC1B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,0BAA0B;QAEjF,qCAAqC;QACrC,IAAI,CAAC,MAAM,GAAG,IAAI,QAAQ,CAAC;YACzB,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,WAAW,MAAM,CAAC,SAAS,2BAA2B;YAChE,WAAW,EAAE;gBACX,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,eAAe,EAAE,MAAM,CAAC,eAAe;aACxC;SACF,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,GAAW,EAAE,MAAc,EAAE,WAAmB;QAC3D,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACpB,IAAI,gBAAgB,CAAC;gBACnB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG,EAAE,GAAG;gBACR,IAAI,EAAE,MAAM;gBACZ,WAAW,EAAE,WAAW;gBACxB,YAAY,EAAE,qCAAqC,EAAE,mBAAmB;aACzE,CAAC,CACH,CAAC;YAEF,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,GAAG,CAAC;YAC7C,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;YAEvC,OAAO;gBACL,QAAQ;gBACR,IAAI,EAAE,MAAM,CAAC,MAAM;gBACnB,WAAW;gBACX,GAAG;gBACH,IAAI,EAAE,GAAG,EAAE,mCAAmC;gBAC9C,SAAS,EAAE,YAAY,CAAC,WAAW,CAAC;aACrC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;QACzG,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,IAAI,CAAC,MAAc,EAAE,OAAe;QACxC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACpB,IAAI,iBAAiB,CAAC;gBACpB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,UAAU,EAAE,kBAAkB,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,EAAE,CAAC;gBAC1D,GAAG,EAAE,OAAO;gBACZ,YAAY,EAAE,qCAAqC;aACpD,CAAC,CACH,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,yBAAyB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;QACvG,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CAAC,MAAc;QACvB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACrC,IAAI,oBAAoB,CAAC;gBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,MAAM,EAAE,MAAM;aACf,CAAC,CACH,CAAC;YAEF,MAAM,MAAM,GAAgB,EAAE,CAAC;YAE/B,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;gBAC1C,IAAI,CAAC,GAAG,CAAC,GAAG;oBAAE,SAAS;gBAEvB,2CAA2C;gBAC3C,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAEpC,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC;gBAErD,oEAAoE;gBACpE,MAAM,YAAY,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBACjD,IAAI,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAEzC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;gBAE3C,wCAAwC;gBACxC,IAAI,WAAW,GAAG,0BAA0B,CAAC;gBAC7C,IAAI,CAAC;oBACH,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACzC,IAAI,iBAAiB,CAAC;wBACpB,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,GAAG,EAAE,GAAG,CAAC,GAAG;qBACb,CAAC,CACH,CAAC;oBACF,WAAW,GAAG,YAAY,CAAC,WAAW,IAAI,WAAW,CAAC;gBACxD,CAAC;gBAAC,MAAM,CAAC;oBACP,sCAAsC;oBACtC,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;oBAC3D,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBAC3C,CAAC;gBAED,MAAM,CAAC,IAAI,CAAC;oBACV,QAAQ;oBACR,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC;oBACnB,WAAW;oBACX,GAAG;oBACH,IAAI,EAAE,GAAG;oBACT,SAAS,EAAE,YAAY,CAAC,WAAW,CAAC;iBACrC,CAAC,CAAC;YACL,CAAC;YAED,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,kCAAkC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;QAChH,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,OAAO,GAAkB,EAAE,CAAC;QAClC,IAAI,iBAAqC,CAAC;QAC1C,IAAI,CAAC;YACH,GAAG,CAAC;gBACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACrC,IAAI,oBAAoB,CAAC;oBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,iBAAiB,EAAE,iBAAiB;iBACrC,CAAC,CACH,CAAC;gBACF,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;oBAC1C,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC;wBAAE,SAAS;oBAChD,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBACjC,gEAAgE;oBAChE,gEAAgE;oBAChE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;wBAAE,SAAS;oBACjC,MAAM,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,KAAK,CAAC;oBAC/C,IAAI,CAAC,UAAU,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ;wBAAE,SAAS;oBACpD,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;oBAC3D,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;oBAC/C,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;oBAC3C,OAAO,CAAC,IAAI,CAAC;wBACX,QAAQ;wBACR,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC;wBACnB,WAAW;wBACX,GAAG;wBACH,IAAI,EAAE,GAAG;wBACT,SAAS,EAAE,YAAY,CAAC,WAAW,CAAC;wBACpC,UAAU;wBACV,QAAQ;qBACT,CAAC,CAAC;gBACL,CAAC;gBACD,iBAAiB,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,CAAC,QAAQ,iBAAiB,EAAE;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,kCAAkC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;QAChH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACpB,IAAI,mBAAmB,CAAC;gBACtB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG,EAAE,GAAG;aACT,CAAC,CACH,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,6BAA6B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,MAAc;QAC5B,IAAI,CAAC;YACH,0CAA0C;YAC1C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACrC,IAAI,oBAAoB,CAAC;gBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,MAAM,EAAE,MAAM;aACf,CAAC,CACH,CAAC;YAEF,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC;YACxC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO,CAAC,CAAC;YACX,CAAC;YAED,qBAAqB;YACrB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACpB,IAAI,oBAAoB,CAAC;gBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,MAAM,EAAE;oBACN,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;oBAC/C,KAAK,EAAE,IAAI;iBACZ;aACF,CAAC,CACH,CAAC;YAEF,OAAO,OAAO,CAAC,MAAM,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,oCAAoC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;QAClH,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACH,KAAK,CAAC,YAAY,CAAC,GAAW,EAAE,SAAS,GAAG,KAAK,EAAE,SAAyB,KAAK;QAC/E,MAAM,OAAO,GAAG,MAAM,KAAK,MAAM;YAC/B,CAAC,CAAC,IAAI,iBAAiB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;YAC1D,CAAC,CAAC,IAAI,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5D,OAAO,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACpB,IAAI,iBAAiB,CAAC;gBACpB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG,EAAE,GAAG;aACT,CAAC,CACH,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,GAAW;QAClC,MAAM,YAAY,GAA2B;YAC3C,GAAG,EAAE,WAAW;YAChB,GAAG,EAAE,YAAY;YACjB,IAAI,EAAE,YAAY;YAClB,GAAG,EAAE,WAAW;YAChB,IAAI,EAAE,YAAY;YAClB,GAAG,EAAE,eAAe;YACpB,GAAG,EAAE,WAAW;YAChB,GAAG,EAAE,iBAAiB;YACtB,IAAI,EAAE,YAAY;YAClB,GAAG,EAAE,YAAY;YACjB,GAAG,EAAE,WAAW;YAChB,GAAG,EAAE,iBAAiB;YACtB,GAAG,EAAE,iBAAiB;SACvB,CAAC;QAEF,OAAO,YAAY,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAC;IACzD,CAAC;CACF"}