studiograph 1.3.47 → 1.3.48-beta.0

package/dist/cli/commands/admin/folder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"folder.js","sourceRoot":"","sources":["../../../../src/cli/commands/admin/folder.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,SAAS,gBAAgB;IACvB,MAAM,SAAS,GAAG,IAAI,SAAS,EAAE,CAAC;IAClC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7B,OAAO,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAC5E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC;KAClC,WAAW,CAAC,qBAAqB,CAAC;KAClC,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;KAC9C,MAAM,CAAC,0BAA0B,EAAE,oBAAoB,CAAC;KACxD,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,IAA8B,EAAE,EAAE;IAC7D,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;IACrC,IAAI,CAAC,SAAS,EAAE,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IAE5C,8BAA8B;IAC9B,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;QACtE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC;YACxC,IAAI;YACJ,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC,CAAC;QACH,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,IAAI,gBAAgB,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,iFAAiF;AAEjF,MAAM,WAAW,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC;KACpC,WAAW,CAAC,qCAAqC,CAAC;KAClD,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;IACrC,IAAI,CAAC,SAAS,EAAE,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IAE5C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,CAAC;IAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAE3B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,GAAG,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC;QAC3E,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC3B,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAExC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,gBAAgB,CAAC;oBACjC,QAAQ;oBACR,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,OAAO,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE;iBACpE,CAAC,CAAC;gBACH,WAAW,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;QAC7B,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,KAAK,KAAK,KAAK,IAAI,GAAG,MAAM,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEL,iFAAiF;AAEjF,MAAM,aAAa,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC;KACxC,WAAW,CAAC,iBAAiB,CAAC;KAC9B,QAAQ,CAAC,YAAY,EAAE,qBAAqB,CAAC;KAC7C,QAAQ,CAAC,YAAY,EAAE,8BAA8B,CAAC;KACtD,MAAM,CAAC,KAAK,EAAE,OAAe,EAAE,OAAe,EAAE,EAAE;IACjD,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;IACrC,IAAI,CAAC,SAAS,EAAE,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IAE5C,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,GAAG,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;QACnE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,CAAC;IAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;IACxD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,GAAG,CAAC,KAAK,CAAC,WAAW,OAAO,cAAc,CAAC,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,KAAK,CAAC,WAAW,OAAO,mBAAmB,CAAC,CAAC;QACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,EAAE,OAAO,CAAC,CAAC;IAE5D,mBAAmB;IACnB,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1C,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC;IAED,gBAAgB;IAChB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC;IACpB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC;IACpB,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAE9B,yCAAyC;IACzC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACjD,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7C,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACtF,CAAC;IAED,GAAG,CAAC,OAAO,CAAC,oBAAoB,OAAO,QAAQ,OAAO,GAAG,CAAC,CAAC;AAC7D,CAAC,CAAC,CAAC;AAEL,iFAAiF;AAEjF,MAAM,aAAa,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC;KACxC,WAAW,CAAC,oCAAoC,CAAC;KACjD,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;KAC3C,MAAM,CAAC,gBAAgB,EAAE,4CAA4C,CAAC;KACtE,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,IAA+B,EAAE,EAAE;IAC9D,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;IACrC,IAAI,CAAC,SAAS,EAAE,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IAE5C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,CAAC;IAC5C,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC/D,IAAI,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC;QACrB,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,cAAc,CAAC,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAE/D,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC;QACxB,OAAO,EAAE,IAAI,CAAC,WAAW;YACvB,CAAC,CAAC,kBAAkB,IAAI,6BAA6B,IAAI,CAAC,IAAI,IAAI;YAClE,CAAC,CAAC,kBAAkB,IAAI,sCAAsC,IAAI,CAAC,IAAI,iBAAiB;KAC3F,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO;IAE5C,qBAAqB;IACrB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAClC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAE9B,IAAI,IAAI,CAAC,WAAW,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7C,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,8BAA8B,CAAC,CAAC;IAC7D,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,mCAAmC,IAAI,CAAC,IAAI,cAAc,CAAC,CAAC;IACzF,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,iFAAiF;AAEjF,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC;KAC/C,WAAW,CAAC,0BAA0B,CAAC;KACvC,UAAU,CAAC,UAAU,CAAC;KACtB,UAAU,CAAC,WAAW,CAAC;KACvB,UAAU,CAAC,aAAa,CAAC;KACzB,UAAU,CAAC,aAAa,CAAC,CAAC"}

package/dist/cli/commands/admin/index.d.ts

@@ -0,0 +1,16 @@
+/**
+ * studiograph admin — owner-only ops surface.
+ *
+ * Subcommands accumulate here as Phase A lands:
+ *   - admin token        (A4)
+ *   - admin migrate      (A5)
+ *   - admin backup       (A6)
+ *   - admin restore      (A6)
+ *   - admin transfer-ownership   (A8)
+ *   - admin audit-workspace      (A8)
+ *
+ * In Phase D, the existing top-level user/folder/secrets/settings/audit
+ * commands also move under this parent.
+ */
+import { Command } from 'commander';
+export declare const adminCommand: Command;

package/dist/cli/commands/admin/index.js

@@ -0,0 +1,46 @@
+/**
+ * studiograph admin — owner-only ops surface.
+ *
+ * Subcommands accumulate here as Phase A lands:
+ *   - admin token        (A4)
+ *   - admin migrate      (A5)
+ *   - admin backup       (A6)
+ *   - admin restore      (A6)
+ *   - admin transfer-ownership   (A8)
+ *   - admin audit-workspace      (A8)
+ *
+ * In Phase D, the existing top-level user/folder/secrets/settings/audit
+ * commands also move under this parent.
+ */
+import { Command } from 'commander';
+import { adminTokenCommand } from './token.js';
+import { adminMigrateCommand } from './migrate.js';
+import { adminMigrateAssetsCommand } from './migrate-assets.js';
+import { adminBackupCommand } from './backup.js';
+import { adminRestoreCommand } from './restore.js';
+import { adminTransferOwnershipCommand } from './transfer-ownership.js';
+import { adminAuditWorkspaceCommand } from './audit-workspace.js';
+import { userCommand } from './user.js';
+import { folderCommand } from './folder.js';
+import { secretsCommand } from './secrets.js';
+import { settingsCommand } from './settings.js';
+import { auditCommand } from './audit.js';
+export const adminCommand = new Command('admin').description('Owner-only administrative commands');
+// Phase D1: the five workspace-management subcommands (user, folder,
+// secrets, settings, audit) moved from top-level into admin/. Top-level
+// aliases stay for one release — see src/cli/index.ts argv shim. The
+// next release drops the shim and these become admin-only.
+adminCommand.addCommand(userCommand);
+adminCommand.addCommand(folderCommand);
+adminCommand.addCommand(secretsCommand);
+adminCommand.addCommand(settingsCommand);
+adminCommand.addCommand(auditCommand);
+// New admin verbs added through Phase A.
+adminCommand.addCommand(adminTokenCommand);
+adminCommand.addCommand(adminMigrateCommand);
+adminCommand.addCommand(adminMigrateAssetsCommand);
+adminCommand.addCommand(adminBackupCommand);
+adminCommand.addCommand(adminRestoreCommand);
+adminCommand.addCommand(adminTransferOwnershipCommand);
+adminCommand.addCommand(adminAuditWorkspaceCommand);
+//# sourceMappingURL=index.js.map

package/dist/cli/commands/admin/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/cli/commands/admin/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,6BAA6B,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,oCAAoC,CAAC,CAAC;AAEnG,qEAAqE;AACrE,wEAAwE;AACxE,qEAAqE;AACrE,2DAA2D;AAC3D,YAAY,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;AACrC,YAAY,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AACvC,YAAY,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;AACxC,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AACzC,YAAY,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;AAEtC,yCAAyC;AACzC,YAAY,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;AAC3C,YAAY,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC;AAC7C,YAAY,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC;AACnD,YAAY,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;AAC5C,YAAY,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC;AAC7C,YAAY,CAAC,UAAU,CAAC,6BAA6B,CAAC,CAAC;AACvD,YAAY,CAAC,UAAU,CAAC,0BAA0B,CAAC,CAAC"}

package/dist/cli/commands/admin/migrate-assets.d.ts

@@ -0,0 +1,53 @@
+/**
+ * studiograph admin migrate-assets — one-time re-key of legacy asset URLs.
+ *
+ * Rewrites every legacy `/api/assets/{type}/{id}/{filename}` reference (in
+ * entity bodies AND `asset_url` frontmatter) to the immutable-key scheme
+ * `/api/assets/{assetId}/{filename}`, copying the blob old→new and recording
+ * authoritative ownership in assets.db. After this runs (and the legacy route
+ * is dropped), renaming/retyping an entity can never orphan its images.
+ *
+ * Safety:
+ *   - `--dry-run` (default OFF): reports counts + missing blobs, writes nothing.
+ *   - Idempotent: a `migration_ledger` keyed by (repo, oldKey) means a re-run
+ *     reuses the same assetId (no duplicate blobs). New-scheme (2-segment) URLs
+ *     never match the extractor, so already-migrated content is skipped.
+ *   - Refuses if a target repo has uncommitted changes (catches half-edits).
+ *   - Copies (never moves) blobs, so the legacy route keeps serving until the
+ *     separate old-blob cleanup step runs. Missing source blobs are reported
+ *     and their URL left legacy (rewriting would just relocate the 404).
+ *   - One commit per repo.
+ *
+ * This is code only — running it against production is a deliberate, backed-up
+ * step (see ~/.claude/plans/rename-carries-assets.md §6).
+ */
+import { Command } from 'commander';
+import { type AssetService } from '../../../services/assets/index.js';
+import type { AssetIndexService } from '../../../services/assets/asset-index-service.js';
+export interface AssetMigrationReport {
+    totalUrls: number;
+    migrated: number;
+    missing: number;
+    filesChanged: number;
+    missingKeys: string[];
+}
+export interface AssetMigrationDeps {
+    cwd: string;
+    repos: Array<{
+        name: string;
+        path: string;
+    }>;
+    assetService: AssetService;
+    assetIndex: AssetIndexService;
+    dryRun: boolean;
+    /** Per-repo commit hook (omit in dry-run / tests). */
+    commit?: (repoName: string, message: string) => void;
+    /** Progress callback (spinner in the CLI). */
+    onRepo?: (repoName: string, changedFiles: number) => void;
+}
+/**
+ * Core migration loop — decoupled from clack/Workspace so it's unit-testable
+ * with a real local AssetService + AssetIndexService over a temp workspace.
+ */
+export declare function runAssetMigration(deps: AssetMigrationDeps): Promise<AssetMigrationReport>;
+export declare const adminMigrateAssetsCommand: Command;

package/dist/cli/commands/admin/migrate-assets.js

@@ -0,0 +1,184 @@
+/**
+ * studiograph admin migrate-assets — one-time re-key of legacy asset URLs.
+ *
+ * Rewrites every legacy `/api/assets/{type}/{id}/{filename}` reference (in
+ * entity bodies AND `asset_url` frontmatter) to the immutable-key scheme
+ * `/api/assets/{assetId}/{filename}`, copying the blob old→new and recording
+ * authoritative ownership in assets.db. After this runs (and the legacy route
+ * is dropped), renaming/retyping an entity can never orphan its images.
+ *
+ * Safety:
+ *   - `--dry-run` (default OFF): reports counts + missing blobs, writes nothing.
+ *   - Idempotent: a `migration_ledger` keyed by (repo, oldKey) means a re-run
+ *     reuses the same assetId (no duplicate blobs). New-scheme (2-segment) URLs
+ *     never match the extractor, so already-migrated content is skipped.
+ *   - Refuses if a target repo has uncommitted changes (catches half-edits).
+ *   - Copies (never moves) blobs, so the legacy route keeps serving until the
+ *     separate old-blob cleanup step runs. Missing source blobs are reported
+ *     and their URL left legacy (rewriting would just relocate the 404).
+ *   - One commit per repo.
+ *
+ * This is code only — running it against production is a deliberate, backed-up
+ * step (see ~/.claude/plans/rename-carries-assets.md §6).
+ */
+import { Command } from 'commander';
+import { intro, outro, log, spinner } from '@clack/prompts';
+import { existsSync, readFileSync, writeFileSync } from 'fs';
+import { join } from 'path';
+import { randomUUID } from 'node:crypto';
+import { glob } from 'glob';
+import { Workspace } from '../../../core/workspace.js';
+import { WorkspaceManager } from '../../../core/workspace-manager.js';
+import { gitHasUncommittedChanges } from '../../../utils/git.js';
+import { extractLegacyAssetUrls } from '../../../core/embeds.js';
+import { detectContentType, getMediaType, publicUrlForAssetId } from '../../../services/assets/index.js';
+const EXCLUDED_DIRS = ['.git', '.studiograph', 'node_modules', '.svelte-kit', 'dist', 'build'];
+/**
+ * Core migration loop — decoupled from clack/Workspace so it's unit-testable
+ * with a real local AssetService + AssetIndexService over a temp workspace.
+ */
+export async function runAssetMigration(deps) {
+    const { cwd, repos, assetService, assetIndex, dryRun } = deps;
+    const report = { totalUrls: 0, migrated: 0, missing: 0, filesChanged: 0, missingKeys: [] };
+    for (const repo of repos) {
+        const repoPath = join(cwd, repo.path);
+        if (!existsSync(repoPath))
+            continue;
+        const files = await glob('**/*.md', {
+            cwd: repoPath, absolute: true, dot: false,
+            ignore: EXCLUDED_DIRS.map(d => `**/${d}/**`),
+        });
+        let repoChangedFiles = 0;
+        for (const file of files) {
+            const raw = readFileSync(file, 'utf-8');
+            const refs = extractLegacyAssetUrls(raw);
+            if (refs.length === 0)
+                continue;
+            // Rewrite longest URL first: a shorter URL can be a prefix of a longer
+            // one (extensionless filenames), and split/join on the prefix would
+            // corrupt the longer match. Length-descending order avoids it.
+            refs.sort((a, b) => b.url.length - a.url.length);
+            let content = raw;
+            for (const ref of refs) {
+                report.totalUrls++;
+                const [type, id, filename] = ref.oldKey.split('/');
+                const present = await assetService.exists(type, id, filename).catch(() => false);
+                if (!present) {
+                    report.missing++;
+                    report.missingKeys.push(ref.oldKey);
+                    continue; // leave the URL legacy — rewriting would just relocate the 404
+                }
+                // Idempotent assetId via the ledger keyed by (repo, oldKey).
+                let assetId = assetIndex.ledgerGet(repo.name, ref.oldKey);
+                if (!assetId) {
+                    assetId = randomUUID();
+                    if (!dryRun)
+                        assetIndex.ledgerPut(repo.name, ref.oldKey, assetId);
+                }
+                if (!dryRun) {
+                    await assetService.copy(ref.oldKey, `${assetId}/${filename}`);
+                    const ctype = detectContentType(filename);
+                    assetIndex.put({
+                        assetId, repo: repo.name, ownerType: ref.type, ownerId: ref.id,
+                        filename, contentType: ctype, mediaType: getMediaType(ctype), name: filename,
+                    });
+                }
+                content = content.split(ref.url).join(publicUrlForAssetId(assetId, filename));
+                report.migrated++;
+            }
+            if (content !== raw) {
+                repoChangedFiles++;
+                if (!dryRun)
+                    writeFileSync(file, content, 'utf-8');
+            }
+        }
+        report.filesChanged += repoChangedFiles;
+        if (repoChangedFiles > 0 && !dryRun) {
+            deps.commit?.(repo.name, `Migrate ${repoChangedFiles} file(s) to immutable asset keys`);
+        }
+        deps.onRepo?.(repo.name, repoChangedFiles);
+    }
+    return report;
+}
+export const adminMigrateAssetsCommand = new Command('migrate-assets')
+    .description('Re-key legacy /api/assets/{type}/{id}/{file} references to immutable {assetId} keys')
+    .option('--dry-run', 'Report what would change (files, URLs, missing blobs); write nothing')
+    .option('--repos <list>', 'Comma-separated repo names to limit the migration to')
+    .action(async (opts) => {
+    intro(opts.dryRun ? 'Asset key migration (DRY RUN)' : 'Asset key migration');
+    const workspace = new Workspace();
+    if (!workspace.isWorkspace()) {
+        outro('Not a Studiograph workspace. Run from your workspace root.');
+        process.exit(1);
+        return;
+    }
+    const config = await workspace.loadConfig();
+    const repoFilter = opts.repos
+        ? new Set(opts.repos.split(',').map(s => s.trim()).filter(Boolean))
+        : null;
+    const targetRepos = config.repos.filter(r => !repoFilter || repoFilter.has(r.name));
+    if (targetRepos.length === 0) {
+        outro('No repos matched.');
+        process.exit(1);
+        return;
+    }
+    // Uncommitted-changes guard (skip in dry-run — we write nothing).
+    if (!opts.dryRun) {
+        const dirty = targetRepos
+            .map(r => ({ r, p: join(process.cwd(), r.path) }))
+            .filter(({ p }) => existsSync(p) && gitHasUncommittedChanges(p))
+            .map(({ r }) => r.name);
+        if (dirty.length > 0) {
+            outro(`Refusing — uncommitted changes in: ${dirty.join(', ')}. Commit/stash first.`);
+            process.exit(1);
+            return;
+        }
+    }
+    const gitUser = { id: 'migration', name: 'Asset Migration', email: 'migration@studiograph.local' };
+    const wm = new WorkspaceManager(process.cwd(), config, gitUser);
+    const assetIndex = wm.getAssetIndex();
+    // Backend is workspace-global, so any configured graph's service works.
+    let assetService;
+    for (const r of targetRepos) {
+        try {
+            assetService = wm.getGraph(r.name).getAssetService();
+            if (assetService)
+                break;
+        }
+        catch { /* skip */ }
+    }
+    if (!assetService) {
+        outro('Asset storage is not configured for this workspace — nothing to migrate.');
+        process.exit(1);
+        return;
+    }
+    const s = spinner();
+    s.start('Migrating asset references…');
+    const report = await runAssetMigration({
+        cwd: process.cwd(),
+        repos: targetRepos.map(r => ({ name: r.name, path: r.path })),
+        assetService,
+        assetIndex,
+        dryRun: !!opts.dryRun,
+        commit: (repoName, message) => {
+            wm.getGraph(repoName).getGitService()?.commitAll(message, gitUser);
+        },
+    });
+    s.stop('Scan complete');
+    assetIndex.close();
+    log.info(`URLs found: ${report.totalUrls}\n` +
+        `${opts.dryRun ? 'Would migrate' : 'Migrated'}: ${report.migrated}\n` +
+        `Files ${opts.dryRun ? 'to change' : 'changed'}: ${report.filesChanged}\n` +
+        `Missing source blobs (left legacy): ${report.missing}`);
+    if (report.missing > 0) {
+        log.warn(`Missing blobs (first 10):\n  ${report.missingKeys.slice(0, 10).join('\n  ')}`);
+    }
+    // Count-verify: every found URL is either migrated or accounted-for as missing.
+    if (report.migrated + report.missing !== report.totalUrls) {
+        outro(`COUNT MISMATCH: migrated(${report.migrated}) + missing(${report.missing}) != found(${report.totalUrls}). Investigate before dropping the legacy route.`);
+        process.exit(1);
+        return;
+    }
+    outro(opts.dryRun ? 'Dry run complete — no changes written.' : 'Migration complete.');
+});
+//# sourceMappingURL=migrate-assets.js.map

package/dist/cli/commands/admin/migrate-assets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate-assets.js","sourceRoot":"","sources":["../../../../src/cli/commands/admin/migrate-assets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AAC7D,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AACtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,mBAAmB,EAAqB,MAAM,mCAAmC,CAAC;AAI5H,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AA2B/F;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAwB;IAC9D,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC9D,MAAM,MAAM,GAAyB,EAAE,SAAS,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IAEjH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,SAAS;QAEpC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE;YAClC,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK;YACzC,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;SAC7C,CAAC,CAAC;QAEH,IAAI,gBAAgB,GAAG,CAAC,CAAC;QACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACxC,MAAM,IAAI,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAChC,uEAAuE;YACvE,oEAAoE;YACpE,+DAA+D;YAC/D,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAEjD,IAAI,OAAO,GAAG,GAAG,CAAC;YAClB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,CAAC,SAAS,EAAE,CAAC;gBACnB,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,QAAQ,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACnD,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;gBACjF,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,CAAC,OAAO,EAAE,CAAC;oBACjB,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;oBACpC,SAAS,CAAC,+DAA+D;gBAC3E,CAAC;gBACD,6DAA6D;gBAC7D,IAAI,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC1D,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO,GAAG,UAAU,EAAE,CAAC;oBACvB,IAAI,CAAC,MAAM;wBAAE,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBACpE,CAAC;gBACD,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,MAAM,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,OAAO,IAAI,QAAQ,EAAE,CAAC,CAAC;oBAC9D,MAAM,KAAK,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;oBAC1C,UAAU,CAAC,GAAG,CAAC;wBACb,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE;wBAC9D,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,QAAQ;qBAC7E,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;gBAC9E,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,CAAC;YAED,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;gBACpB,gBAAgB,EAAE,CAAC;gBACnB,IAAI,CAAC,MAAM;oBAAE,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QAED,MAAM,CAAC,YAAY,IAAI,gBAAgB,CAAC;QACxC,IAAI,gBAAgB,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,gBAAgB,kCAAkC,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG,IAAI,OAAO,CAAC,gBAAgB,CAAC;KACnE,WAAW,CAAC,qFAAqF,CAAC;KAClG,MAAM,CAAC,WAAW,EAAE,sEAAsE,CAAC;KAC3F,MAAM,CAAC,gBAAgB,EAAE,sDAAsD,CAAC;KAChF,MAAM,CAAC,KAAK,EAAE,IAAuB,EAAE,EAAE;IACxC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC;IAE7E,MAAM,SAAS,GAAG,IAAI,SAAS,EAAE,CAAC;IAClC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7B,KAAK,CAAC,4DAA4D,CAAC,CAAC;QACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,CAAC;IAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK;QAC3B,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACnE,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACpF,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,kEAAkE;IAClE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,WAAW;aACtB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;aACjD,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,wBAAwB,CAAC,CAAC,CAAC,CAAC;aAC/D,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,KAAK,CAAC,sCAAsC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YACrF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChB,OAAO;QACT,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAY,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;IAC5G,MAAM,EAAE,GAAG,IAAI,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,EAAE,CAAC,aAAa,EAAE,CAAC;IACtC,wEAAwE;IACxE,IAAI,YAAY,CAAC;IACjB,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,IAAI,CAAC;YAAC,YAAY,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,CAAC;YAAC,IAAI,YAAY;gBAAE,MAAM;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;IAC7G,CAAC;IACD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,KAAK,CAAC,0EAA0E,CAAC,CAAC;QAClF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;IACpB,CAAC,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;QACrC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;QAClB,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7D,YAAY;QACZ,UAAU;QACV,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM;QACrB,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE;YAC5B,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,aAAa,EAAE,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACrE,CAAC;KACF,CAAC,CAAC;IACH,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAExB,UAAU,CAAC,KAAK,EAAE,CAAC;IAEnB,GAAG,CAAC,IAAI,CACN,eAAe,MAAM,CAAC,SAAS,IAAI;QACnC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,KAAK,MAAM,CAAC,QAAQ,IAAI;QACrE,SAAS,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,YAAY,IAAI;QAC1E,uCAAuC,MAAM,CAAC,OAAO,EAAE,CACxD,CAAC;IACF,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;QACvB,GAAG,CAAC,IAAI,CAAC,gCAAgC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,gFAAgF;IAChF,IAAI,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;QAC1D,KAAK,CAAC,4BAA4B,MAAM,CAAC,QAAQ,eAAe,MAAM,CAAC,OAAO,cAAc,MAAM,CAAC,SAAS,kDAAkD,CAAC,CAAC;QAChK,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC;AACxF,CAAC,CAAC,CAAC"}

package/dist/cli/commands/admin/migrate.d.ts

@@ -0,0 +1,56 @@
+/**
+ * studiograph admin migrate — bulk regex find-replace across workspace repos.
+ *
+ * Codifies the hand-rolled sed pattern the owner has reached for twice
+ * during schema renames. Walks every repo in workspace.json (or a
+ * `--repos`-filtered subset), applies the regex, and produces one commit
+ * per repo with the same message. `--dry-run` reports without writing.
+ * `--also-rename-files` does a second pass that `git mv`s any files
+ * whose name matches the regex.
+ *
+ * Safety:
+ *   - Refuses if ANY targeted repo has uncommitted changes. Catches
+ *     half-finished local edits before they're caught up in the rewrite.
+ *   - Runs the regex against the file contents read with utf-8; commit
+ *     uses `git -c core.quotepath=false` so non-ASCII file paths in
+ *     summaries don't render as `\xxx` escapes.
+ *   - Skips the .git/, .studiograph/, and node_modules/ subtrees of every
+ *     repo (defensive — none of those should ever match a workspace glob,
+ *     but a stray `--in '**'` shouldn't pull them in either).
+ */
+import { Command } from 'commander';
+import type { RepoConfig } from '../../../core/types.js';
+interface RepoChange {
+    repoName: string;
+    repoPath: string;
+    fileChanges: Array<{
+        relPath: string;
+        replacements: number;
+    }>;
+    fileRenames: Array<{
+        from: string;
+        to: string;
+    }>;
+}
+export declare const adminMigrateCommand: Command;
+/**
+ * Walk one repo, regex-replace contents in every file matching `pattern`
+ * (the glob pattern, not the regex). Returns a summary; writes files
+ * unless `dryRun` is true.
+ */
+export declare function migrateRepoContent(repo: RepoConfig, globPattern: string, regex: RegExp, replacement: string, dryRun: boolean): Promise<RepoChange>;
+/**
+ * Apply a replacement-string template the way String.prototype.replace
+ * does when given a string (not a function): expand $1..$9 to capture
+ * groups, $$ to a literal $, $& to the whole match.
+ *
+ * We re-implement this because we call replace with a *function* (to
+ * count matches) but want the literal-string substitution semantics for
+ * the actual replacement text. Without this, $1/$2 would render
+ * literally instead of being expanded.
+ */
+declare function applyReplacementString(template: string, match: string, args: unknown[]): string;
+export declare const __internals: {
+    applyReplacementString: typeof applyReplacementString;
+};
+export {};

package/dist/cli/commands/admin/migrate.js

@@ -0,0 +1,263 @@
+/**
+ * studiograph admin migrate — bulk regex find-replace across workspace repos.
+ *
+ * Codifies the hand-rolled sed pattern the owner has reached for twice
+ * during schema renames. Walks every repo in workspace.json (or a
+ * `--repos`-filtered subset), applies the regex, and produces one commit
+ * per repo with the same message. `--dry-run` reports without writing.
+ * `--also-rename-files` does a second pass that `git mv`s any files
+ * whose name matches the regex.
+ *
+ * Safety:
+ *   - Refuses if ANY targeted repo has uncommitted changes. Catches
+ *     half-finished local edits before they're caught up in the rewrite.
+ *   - Runs the regex against the file contents read with utf-8; commit
+ *     uses `git -c core.quotepath=false` so non-ASCII file paths in
+ *     summaries don't render as `\xxx` escapes.
+ *   - Skips the .git/, .studiograph/, and node_modules/ subtrees of every
+ *     repo (defensive — none of those should ever match a workspace glob,
+ *     but a stray `--in '**'` shouldn't pull them in either).
+ */
+import { Command } from 'commander';
+import { intro, outro, log, spinner } from '@clack/prompts';
+import { existsSync, readFileSync, writeFileSync, statSync } from 'fs';
+import { execFileSync } from 'child_process';
+import { join, dirname } from 'path';
+import { glob } from 'glob';
+import { Workspace } from '../../../core/workspace.js';
+import { gitHasUncommittedChanges } from '../../../utils/git.js';
+const EXCLUDED_DIRS = ['.git', '.studiograph', 'node_modules', '.svelte-kit', 'dist', 'build'];
+export const adminMigrateCommand = new Command('migrate')
+    .description('Bulk regex find-replace across workspace repos with one commit per repo')
+    .requiredOption('--in <glob>', 'Glob pattern for files to consider (e.g. "**/*.md")')
+    .requiredOption('--regex <pattern>', 'Regex to search for (JavaScript syntax, global flag implied)')
+    .requiredOption('--replace <text>', 'Replacement text (supports $1, $2 backrefs)')
+    .option('--commit-message <msg>', 'Commit message (default: "refactor: bulk migrate <regex> → <replace>")')
+    .option('--dry-run', 'Print affected files + replacement counts; do not write')
+    .option('--also-rename-files', 'After content rewrite, git mv any matching filenames too')
+    .option('--repos <list>', 'Comma-separated repo names to limit the migration to')
+    .action(async (opts) => {
+    intro('Bulk migrate across workspace repos');
+    const workspace = new Workspace();
+    if (!workspace.isWorkspace()) {
+        outro('Not a Studiograph workspace. Run from your workspace root.');
+        process.exit(1);
+        return;
+    }
+    const config = await workspace.loadConfig();
+    const repoFilter = opts.repos
+        ? new Set(opts.repos.split(',').map((s) => s.trim()).filter(Boolean))
+        : null;
+    const targetRepos = config.repos.filter((r) => !repoFilter || repoFilter.has(r.name));
+    if (targetRepos.length === 0) {
+        outro(repoFilter
+            ? `No repos matched --repos filter "${opts.repos}". Known repos: ${config.repos.map((r) => r.name).join(', ')}.`
+            : 'Workspace has no repos.');
+        process.exit(1);
+        return;
+    }
+    // Compile the regex once. Force the global flag so String.replace hits
+    // every match per file. Validate up-front so a typo doesn't manifest
+    // only after we've started rewriting.
+    let pattern;
+    try {
+        pattern = new RegExp(opts.regex, 'g');
+    }
+    catch (err) {
+        outro(`Invalid regex "${opts.regex}": ${err instanceof Error ? err.message : String(err)}`);
+        process.exit(1);
+        return;
+    }
+    // Uncommitted-changes guard. Catches a half-finished edit before it
+    // gets caught up in the rewrite.
+    const dirty = [];
+    for (const repo of targetRepos) {
+        const repoPath = join(process.cwd(), repo.path);
+        if (existsSync(repoPath) && gitHasUncommittedChanges(repoPath)) {
+            dirty.push(repo.name);
+        }
+    }
+    if (dirty.length > 0) {
+        outro(`Refusing to migrate — these repos have uncommitted changes:\n  ${dirty.join('\n  ')}\n` +
+            'Commit or stash them first, then retry.');
+        process.exit(1);
+        return;
+    }
+    const commitMessage = opts.commitMessage?.trim()
+        || `refactor: bulk migrate ${opts.regex} → ${opts.replace}`;
+    // Pass 1: content rewrites.
+    const changes = [];
+    const spin = spinner();
+    for (const repo of targetRepos) {
+        spin.start(`Scanning ${repo.name}...`);
+        const repoChange = await migrateRepoContent(repo, opts.in, pattern, opts.replace, !!opts.dryRun);
+        if (repoChange.fileChanges.length > 0) {
+            spin.stop(`${repo.name}: ${repoChange.fileChanges.length} file(s) touched, ${totalReplacements(repoChange)} replacement(s)`);
+        }
+        else {
+            spin.stop(`${repo.name}: no matches`);
+        }
+        changes.push(repoChange);
+    }
+    // Pass 2: file renames (optional). Only runs after the content pass
+    // so the rewritten contents land first; renames are a separate commit
+    // step within the same per-repo message.
+    if (opts.alsoRenameFiles) {
+        for (const repoChange of changes) {
+            if (repoChange.fileChanges.length === 0)
+                continue; // nothing to rename in repos with no matches
+            await migrateRepoFilenames(repoChange, opts.in, pattern, opts.replace, !!opts.dryRun);
+        }
+    }
+    // Dry-run summary, no commits.
+    if (opts.dryRun) {
+        log.info('Dry-run summary:');
+        for (const ch of changes) {
+            if (ch.fileChanges.length === 0 && ch.fileRenames.length === 0)
+                continue;
+            log.message(`  ${ch.repoName}:`);
+            for (const fc of ch.fileChanges) {
+                log.message(`    ${fc.relPath} — ${fc.replacements} replacement${fc.replacements === 1 ? '' : 's'}`);
+            }
+            for (const fr of ch.fileRenames) {
+                log.message(`    ${fr.from} → ${fr.to} (rename)`);
+            }
+        }
+        outro('Dry-run only — no changes written.');
+        return;
+    }
+    // Commit per repo. Skip repos with no changes.
+    let committedRepos = 0;
+    for (const ch of changes) {
+        if (ch.fileChanges.length === 0 && ch.fileRenames.length === 0)
+            continue;
+        try {
+            commitRepo(ch.repoPath, commitMessage);
+            committedRepos++;
+            log.success(`${ch.repoName}: committed (${ch.fileChanges.length} edit(s), ${ch.fileRenames.length} rename(s))`);
+        }
+        catch (err) {
+            log.error(`${ch.repoName}: commit failed — ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    if (committedRepos === 0) {
+        outro('No repos had any matches — nothing committed.');
+        return;
+    }
+    outro(`Done — ${committedRepos} repo(s) committed.`);
+});
+// ── Internals (exported for tests) ──────────────────────────────────────────
+function totalReplacements(ch) {
+    return ch.fileChanges.reduce((acc, f) => acc + f.replacements, 0);
+}
+/**
+ * Walk one repo, regex-replace contents in every file matching `pattern`
+ * (the glob pattern, not the regex). Returns a summary; writes files
+ * unless `dryRun` is true.
+ */
+export async function migrateRepoContent(repo, globPattern, regex, replacement, dryRun) {
+    const repoPath = join(process.cwd(), repo.path);
+    const change = { repoName: repo.name, repoPath, fileChanges: [], fileRenames: [] };
+    if (!existsSync(repoPath))
+        return change;
+    const files = await glob(globPattern, {
+        cwd: repoPath,
+        nodir: true,
+        ignore: EXCLUDED_DIRS.map((d) => `${d}/**`),
+        dot: false,
+    });
+    for (const relPath of files) {
+        const abs = join(repoPath, relPath);
+        try {
+            // Skip binary files cheaply (avoids reading 10MB PDFs into memory
+            // when an owner runs `--in "**"` against a workspace with assets).
+            const stat = statSync(abs);
+            if (stat.size > 5 * 1024 * 1024)
+                continue;
+            const content = readFileSync(abs, 'utf-8');
+            // Reset lastIndex — regex with the `g` flag is stateful.
+            regex.lastIndex = 0;
+            let count = 0;
+            const rewritten = content.replace(regex, (match, ...args) => {
+                count++;
+                // Use String.replace's substitution semantics with the literal
+                // replacement so $1/$2 backrefs work. Args = [...captureGroups, offset, string].
+                return applyReplacementString(replacement, match, args);
+            });
+            if (count === 0 || rewritten === content)
+                continue;
+            if (!dryRun)
+                writeFileSync(abs, rewritten, 'utf-8');
+            change.fileChanges.push({ relPath, replacements: count });
+        }
+        catch {
+            // Likely a binary file masquerading as one of the glob matches
+            // (utf-8 decode threw). Skip silently — `--in` should pre-filter.
+        }
+    }
+    return change;
+}
+/**
+ * Second pass: rename files whose paths match the regex. Uses `git mv`
+ * so the rename shows up in the staging area for the same commit. Only
+ * runs in repos that already had content matches — otherwise a rename-
+ * only commit would be confusing.
+ */
+async function migrateRepoFilenames(change, globPattern, regex, replacement, dryRun) {
+    const files = await glob(globPattern, {
+        cwd: change.repoPath,
+        nodir: true,
+        ignore: EXCLUDED_DIRS.map((d) => `${d}/**`),
+        dot: false,
+    });
+    for (const relPath of files) {
+        regex.lastIndex = 0;
+        const newRel = relPath.replace(regex, replacement);
+        if (newRel === relPath)
+            continue;
+        if (!dryRun) {
+            const newAbs = join(change.repoPath, newRel);
+            const newDir = dirname(newAbs);
+            if (!existsSync(newDir)) {
+                // Create the target dir so `git mv` doesn't fail on a rename
+                // that crosses subdirectories.
+                execFileSync('mkdir', ['-p', newDir], { stdio: 'pipe' });
+            }
+            execFileSync('git', ['-c', 'core.quotepath=false', '-C', change.repoPath, 'mv', relPath, newRel], { stdio: 'pipe' });
+        }
+        change.fileRenames.push({ from: relPath, to: newRel });
+    }
+}
+function commitRepo(repoPath, message) {
+    // `git add -A` catches both content rewrites (modified files) and
+    // file renames (which were already staged by `git mv`). The migrate
+    // command owns the entire commit boundary — nothing else should be
+    // half-staged in the repo, because we refused on dirty trees.
+    execFileSync('git', ['-c', 'core.quotepath=false', '-C', repoPath, 'add', '-A'], { stdio: 'pipe' });
+    execFileSync('git', ['-c', 'core.quotepath=false', '-C', repoPath, 'commit', '-m', message], { stdio: 'pipe' });
+}
+/**
+ * Apply a replacement-string template the way String.prototype.replace
+ * does when given a string (not a function): expand $1..$9 to capture
+ * groups, $$ to a literal $, $& to the whole match.
+ *
+ * We re-implement this because we call replace with a *function* (to
+ * count matches) but want the literal-string substitution semantics for
+ * the actual replacement text. Without this, $1/$2 would render
+ * literally instead of being expanded.
+ */
+function applyReplacementString(template, match, args) {
+    // Captures are everything in args except the last two (offset + whole string).
+    const captures = args.slice(0, -2);
+    return template.replace(/\$([1-9]|&|\$)/g, (_, key) => {
+        if (key === '$')
+            return '$';
+        if (key === '&')
+            return match;
+        const idx = parseInt(key, 10) - 1;
+        return captures[idx] ?? '';
+    });
+}
+// Re-export the helper signature for test imports.
+export const __internals = { applyReplacementString };
+//# sourceMappingURL=migrate.js.map