studiograph 1.3.48-next.13 → 1.3.48-next.131

package/dist/server/routes/asset-api.js

@@ -4,9 +4,35 @@
  * POST /api/repos/:repo/entities/:type/:id/assets — multipart image upload
  * GET  /api/assets/*                               — serve local assets
  */
-import { isAdminOrOwner } from '../../services/auth-service.js';
-import { existsSync, createReadStream, statSync } from 'fs';
+import * as access from '../../services/access-control.js';
+import { publicUrlFor } from '../../services/assets/index.js';
+import { existsSync, createReadStream, readFileSync, statSync } from 'fs';
 import { join, extname } from 'path';
+/**
+ * Read the `name:` field from a markdown file's YAML frontmatter without a
+ * full YAML parse. Returns null if the file can't be read or has no name.
+ * Used by the asset manager to label assets by entity name without paying
+ * the cost of a full markdownService.parseFile() per entity.
+ */
+function extractEntityName(mdPath) {
+    try {
+        const raw = readFileSync(mdPath, 'utf-8');
+        // Frontmatter is always at the top; don't read past ~2KB.
+        const head = raw.slice(0, 2048);
+        if (!head.startsWith('---'))
+            return null;
+        const end = head.indexOf('\n---', 3);
+        const block = end === -1 ? head : head.slice(0, end);
+        // Match `name: value` or `name: "value"` or `name: 'value'`.
+        const match = block.match(/^name:\s*(?:'([^']*)'|"([^"]*)"|(.+?))\s*$/m);
+        if (!match)
+            return null;
+        return (match[1] ?? match[2] ?? match[3]).trim() || null;
+    }
+    catch {
+        return null;
+    }
+}
 const MIME_TYPES = {
     '.png': 'image/png', '.jpg': 'image/jpeg', '.jpeg': 'image/jpeg',
     '.gif': 'image/gif', '.webp': 'image/webp', '.svg': 'image/svg+xml',
@@ -14,27 +40,14 @@ const MIME_TYPES = {
 };
 function hasRepoAccess(req, repoName, workspaceManager, authService) {
     const user = req.user;
-    const repoConfig = workspaceManager.getRepoConfig(repoName);
-    if (repoConfig?.private) {
-        if (!user)
-            return !repoConfig.owner_id;
-        if (repoConfig.owner_id === user.id)
-            return true;
-        if (!repoConfig.owner_id)
-            return false;
-    }
-    if (!user)
-        return true;
-    if (isAdminOrOwner(user.role))
-        return true;
-    return authService.getUserCollections(user.id).includes(repoName);
+    return access.hasRepoAccess(user, repoName, workspaceManager, authService);
 }
 export async function registerAssetApiRoutes(fastify, workspaceManager, authService) {
     // POST /api/repos/:repo/entities/:type/:id/assets — upload an image
     fastify.post('/api/repos/:repo/entities/:type/:id/assets', async (req, reply) => {
         const { repo, type, id } = req.params;
         if (!hasRepoAccess(req, repo, workspaceManager, authService)) {
-            return reply.status(404).send({ error: `Collection "${repo}" not found` });
+            return reply.status(404).send({ error: `Folder "${repo}" not found` });
         }
         let graph;
         try {
@@ -49,14 +62,16 @@ export async function registerAssetApiRoutes(fastify, workspaceManager, authServ
         if (!file.mimetype.startsWith('image/')) {
             return reply.status(400).send({ error: 'Only image files are supported' });
         }
+        // Block SVG: stored XSS — SVG can contain <script> and the GET route
+        // serves it inline as image/svg+xml, executing in the app origin.
+        if (file.mimetype === 'image/svg+xml' || file.filename?.toLowerCase().endsWith('.svg')) {
+            return reply.status(415).send({ error: 'SVG uploads are not supported (stored XSS risk).' });
+        }
         const buffer = await file.toBuffer();
         const filename = `${Date.now()}-${file.filename.replace(/[^a-zA-Z0-9._-]/g, '_')}`;
         try {
             const asset = await graph.uploadAsset(type, id, filename, buffer);
-            // For local storage, return an HTTP-servable URL instead of the filesystem path
-            const url = asset.url.startsWith('file://') || !asset.url.startsWith('http')
-                ? `/api/assets/${type}/${id}/${asset.filename}`
-                : asset.path; // R2 returns a full public URL
+            const url = publicUrlFor(asset, type, id);
             return reply.send({ url, filename: asset.filename, size: asset.size });
         }
         catch (err) {
@@ -66,65 +81,202 @@ export async function registerAssetApiRoutes(fastify, workspaceManager, authServ
             return reply.status(400).send({ error: err.message });
         }
     });
-    // GET /api/assets/:type/:id/:filename — serve local assets
-    fastify.get('/api/assets/:type/:id/:filename', async (req, reply) => {
-        const { type, id, filename } = req.params;
-        const workspacePath = workspaceManager.workspacePath ?? process.cwd();
-        const filePath = join(workspacePath, '.studiograph', 'assets', type, id, filename);
-        if (!existsSync(filePath)) {
-            return reply.status(404).send({ error: 'Asset not found' });
-        }
-        const ext = extname(filename).toLowerCase();
-        const contentType = MIME_TYPES[ext] || 'application/octet-stream';
-        const stats = statSync(filePath);
-        reply.header('Content-Type', contentType);
-        reply.header('Content-Length', stats.size);
-        reply.header('Cache-Control', 'public, max-age=31536000, immutable');
-        return reply.send(createReadStream(filePath));
+    // GET / HEAD /api/assets/:type/:id/:filename — serve assets through
+    // the workspace's authz gate.
+    //
+    // Per-repo authz: the asset storage layout is workspace-global
+    // (`.studiograph/assets/{type}/{id}/{filename}` for local;
+    // `{type}/{id}/{filename}` keys for R2) — the path doesn't carry repo
+    // information. To enforce that a user with access to folder A can't
+    // read assets owned by folder B, we resolve the owning repo from the
+    // entity ID via workspaceManager.findEntityById (the same primitive
+    // the agent's create_entity uses for cross-repo dedup checks), then
+    // run hasRepoAccess against that repo. Both miss and forbid return 404
+    // — never leak entity IDs as an existence oracle.
+    //
+    // Stage 2 (this commit): the route is now the single chokepoint for
+    // both backends. Local files stream directly. R2-backed assets get a
+    // 302 redirect to a short-lived pre-signed URL, so the underlying
+    // bucket can be flipped to private without breaking the workflow.
+    // Both GET and HEAD are registered — link unfurlers, OpenGraph
+    // crawlers, and CDN healthchecks issue HEAD against this URL and
+    // expect the same 302 (signed for HEAD) or local headers.
+    fastify.route({
+        method: ['GET', 'HEAD'],
+        url: '/api/assets/:type/:id/:filename',
+        handler: async (req, reply) => {
+            const { type, id, filename } = req.params;
+            const isHead = req.method === 'HEAD';
+            // Look up by (type, id) — entity IDs are unique within (repo, type)
+            // but NOT across the whole workspace. A case-study in `portfolio`
+            // and a reference in `analogous-experiences` can share the same id.
+            // Type-blind findEntityById returns whichever repo iterates first
+            // and 404s any URL whose type doesn't match that arbitrary winner.
+            const found = workspaceManager.findEntityByTypeAndId(type, id);
+            if (!found) {
+                return reply.status(404).send({ error: 'Asset not found' });
+            }
+            if (!hasRepoAccess(req, found.repoName, workspaceManager, authService)) {
+                return reply.status(404).send({ error: 'Asset not found' });
+            }
+            let graph;
+            try {
+                graph = workspaceManager.getGraph(found.repoName);
+            }
+            catch {
+                return reply.status(404).send({ error: 'Asset not found' });
+            }
+            // R2 backend: 302 to a short-lived pre-signed URL. Cache the 302
+            // for the lifetime of the signed URL (4 hours) — this is the
+            // load-bearing perf optimization. Signed URLs are unique per
+            // request (each carries its own X-Amz-Signature), so without
+            // caching the redirect, every <img> tag fires a fresh proxy
+            // roundtrip AND a fresh R2 download (the signed URL is different
+            // each time, so the browser's image cache miss-matches and
+            // re-downloads bytes it already has). Caching the 302 means
+            // subsequent requests in the same 4-hour window resolve to the
+            // SAME signed URL → cached image bytes → zero network. Single
+            // line, multi-second page-load improvement.
+            //
+            // Trade-off: a signed URL cached in the browser keeps working
+            // for up to 4 hours after the user loses folder access. Same
+            // threat model the 4-hour signed-URL TTL already accepted —
+            // fresh URLs lived 4 hours, now cached URLs do too. `private`
+            // keeps shared caches (CDNs, corporate proxies) from holding
+            // the 302; only the originating browser does.
+            //
+            // Pre-signed URLs are method-bound, so HEAD requests need a
+            // HEAD-signed URL.
+            if (graph.getAssetStorage() === 'r2') {
+                try {
+                    const signed = await graph.getAssetSignedUrl(type, id, filename, undefined, undefined, isHead ? 'HEAD' : 'GET');
+                    reply.header('Cache-Control', 'private, max-age=14400');
+                    return reply.redirect(signed, 302);
+                }
+                catch (err) {
+                    // Surface SDK / network failures so credential rotation issues,
+                    // R2 outages, etc. aren't silently presented to users as
+                    // 'Asset not found'. The user-facing response stays 404 so
+                    // entity IDs aren't leaked as an existence oracle.
+                    req.log?.warn?.({ err, type, id, filename }, 'asset r2 signed-url generation failed');
+                    return reply.status(404).send({ error: 'Asset not found' });
+                }
+            }
+            // Local backend: stream the file directly. Defense-in-depth — the
+            // R2 branch already validates filename inside AssetService, so
+            // hold the local branch to the same standard. Fastify's segment
+            // matcher blocks `/` in path params, but a literal `..` or hidden
+            // dotfile would otherwise be passed through to `join` here.
+            if (filename.includes('..') || filename.includes('/') || filename.includes('\\') || filename.startsWith('.') ||
+                id.includes('..') || id.includes('/') || id.includes('\\') ||
+                type.includes('..') || type.includes('/') || type.includes('\\')) {
+                return reply.status(404).send({ error: 'Asset not found' });
+            }
+            const workspacePath = workspaceManager.workspacePath ?? process.cwd();
+            const filePath = join(workspacePath, '.studiograph', 'assets', type, id, filename);
+            if (!existsSync(filePath)) {
+                return reply.status(404).send({ error: 'Asset not found' });
+            }
+            const ext = extname(filename).toLowerCase();
+            const contentType = MIME_TYPES[ext] || 'application/octet-stream';
+            const stats = statSync(filePath);
+            reply.header('Content-Type', contentType);
+            reply.header('Content-Length', stats.size);
+            reply.header('Cache-Control', 'public, max-age=31536000, immutable');
+            // HEAD: send headers without a body. Fastify auto-strips body on
+            // HEAD, but being explicit keeps the file handle from opening.
+            if (isHead)
+                return reply.send();
+            return reply.send(createReadStream(filePath));
+        },
     });
-    // GET /api/repos/:repo/assets — list all assets in a collection
+    /** Build the asset list for a single repo. Extracted so the per-repo and
+     *  bulk endpoints share identical output shape. Returns [] if the repo's
+     *  graph can't be loaded. */
+    async function listAssetsForRepo(repo) {
+        let graph;
+        try {
+            graph = workspaceManager.getGraph(repo);
+        }
+        catch {
+            return [];
+        }
+        let allAssets;
+        try {
+            allAssets = await graph.listAllAssets();
+        }
+        catch {
+            return [];
+        }
+        // Resolve the markdown path for each asset's entity via the graph's file
+        // index instead of guessing `{plural}/{id}.md`. The legacy guess silently
+        // missed any entry living at the repo root or in a nested user folder,
+        // so the asset would show up labelled by its raw ID rather than the
+        // entity's display name.
+        const nameCache = new Map();
+        const result = [];
+        for (const asset of allAssets) {
+            const mdPath = graph.getEntityFilePath(asset.entityType, asset.entityId);
+            if (!mdPath)
+                continue;
+            const key = `${asset.entityType}/${asset.entityId}`;
+            let entityName = nameCache.get(key);
+            if (entityName === undefined) {
+                entityName = extractEntityName(mdPath) ?? asset.entityId;
+                nameCache.set(key, entityName);
+            }
+            const url = publicUrlFor(asset, asset.entityType, asset.entityId);
+            result.push({
+                filename: asset.filename,
+                size: asset.size,
+                contentType: asset.contentType,
+                url,
+                entityType: asset.entityType,
+                entityId: asset.entityId,
+                entityName,
+                mediaType: asset.mediaType,
+            });
+        }
+        return result;
+    }
     fastify.get('/api/repos/:repo/assets', async (req, reply) => {
         const { repo } = req.params;
         if (!hasRepoAccess(req, repo, workspaceManager, authService)) {
-            return reply.status(404).send({ error: `Collection "${repo}" not found` });
+            return reply.status(404).send({ error: `Folder "${repo}" not found` });
         }
-        let graph;
+        // Verify the repo exists before delegating; listAssetsForRepo swallows
+        // missing-graph errors as [], which is right for the bulk endpoint but
+        // wrong for the single-repo one (we want a 404).
         try {
-            graph = workspaceManager.getGraph(repo);
+            workspaceManager.getGraph(repo);
         }
         catch (err) {
             return reply.status(404).send({ error: err.message });
         }
-        const entities = graph.list();
-        const allAssets = [];
-        for (const entity of entities) {
-            try {
-                const assets = await graph.listAssets(entity.entityType, entity.id);
-                for (const asset of assets) {
-                    const url = asset.url.startsWith('file://') || !asset.url.startsWith('http')
-                        ? `/api/assets/${entity.entityType}/${entity.id}/${asset.filename}`
-                        : asset.path;
-                    allAssets.push({
-                        filename: asset.filename,
-                        size: asset.size,
-                        contentType: asset.contentType,
-                        url,
-                        entityType: entity.entityType,
-                        entityId: entity.id,
-                        entityName: entity.data.name ?? entity.id,
-                        mediaType: asset.mediaType,
-                    });
-                }
-            }
-            catch { /* no assets or service not configured */ }
-        }
-        return { assets: allAssets };
+        return { assets: await listAssetsForRepo(repo) };
+    });
+    // GET /api/workspace/assets — bulk asset lists for ALL accessible repos in
+    // one round-trip. Replaces 15+ parallel /api/repos/:repo/assets calls so
+    // GalleryView's thumbnail effect doesn't saturate the browser HTTP/1.1
+    // 6-slot queue and block other navigation fetches.
+    // Response shape: `{ [repoName]: FolderAssetResult[] }`.
+    fastify.get('/api/workspace/assets', async (req, reply) => {
+        const user = req.user;
+        // Use the shared access-control helper so personal-folder restrictions
+        // and workspace-owner-on-shared-folder semantics apply consistently.
+        const accessible = access.getAccessibleRepos(user, workspaceManager, authService).map(r => r.name);
+        const result = {};
+        // Run in parallel — each repo is an independent listAll() call.
+        await Promise.all(accessible.map(async (repo) => {
+            result[repo] = await listAssetsForRepo(repo);
+        }));
+        return reply.send(result);
     });
     // DELETE /api/repos/:repo/entities/:type/:id/assets/:filename — delete an asset
     fastify.delete('/api/repos/:repo/entities/:type/:id/assets/:filename', async (req, reply) => {
         const { repo, type, id, filename } = req.params;
         if (!hasRepoAccess(req, repo, workspaceManager, authService)) {
-            return reply.status(404).send({ error: `Collection "${repo}" not found` });
+            return reply.status(404).send({ error: `Folder "${repo}" not found` });
         }
         let graph;
         try {

package/dist/server/routes/asset-api.js.map

@@ -1 +1 @@
-{"version":3,"file":"asset-api.js","sourceRoot":"","sources":["../../../src/server/routes/asset-api.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAe,cAAc,EAAiB,MAAM,gCAAgC,CAAC;AAE5F,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AAC5D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAErC,MAAM,UAAU,GAA2B;IACzC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY;IAChE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,eAAe;IACnE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,YAAY;CAC9C,CAAC;AAEF,SAAS,aAAa,CAAC,GAAmB,EAAE,QAAgB,EAAE,gBAAkC,EAAE,WAAwB;IACxH,MAAM,IAAI,GAAI,GAAW,CAAC,IAA4B,CAAC;IACvD,MAAM,UAAU,GAAG,gBAAgB,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC5D,IAAI,UAAU,EAAE,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC;QACvC,IAAI,UAAU,CAAC,QAAQ,KAAK,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACjD,IAAI,CAAC,UAAU,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;IACzC,CAAC;IACD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,OAAO,WAAW,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAwB,EACxB,gBAAkC,EAClC,WAAwB;IAGxB,oEAAoE;IACpE,OAAO,CAAC,IAAI,CAGV,4CAA4C,EAC5C,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAEtC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,CAAC,EAAE,CAAC;YAC7D,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,IAAI,aAAa,EAAE,CAAC,CAAC;QAC7E,CAAC;QAED,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YAAC,KAAK,GAAG,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAChD,OAAO,GAAQ,EAAE,CAAC;YAAC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAAC,CAAC;QAE3E,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAExE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,EAAE,CAAC;QAEnF,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,IAAkB,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;YAChF,gFAAgF;YAChF,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;gBAC1E,CAAC,CAAC,eAAe,IAAI,IAAI,EAAE,IAAI,KAAK,CAAC,QAAQ,EAAE;gBAC/C,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,+BAA+B;YAC/C,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAC5C,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iEAAiE,EAAE,CAAC,CAAC;YAC9G,CAAC;YACD,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC,CACF,CAAC;IAEF,2DAA2D;IAC3D,OAAO,CAAC,GAAG,CAGT,iCAAiC,EACjC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1C,MAAM,aAAa,GAAI,gBAAwB,CAAC,aAAa,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAC/E,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;QAEnF,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,WAAW,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAC;QAClE,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAEjC,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QAC1C,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3C,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,qCAAqC,CAAC,CAAC;QACrE,OAAO,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAChD,CAAC,CACF,CAAC;IAEF,gEAAgE;IAChE,OAAO,CAAC,GAAG,CACT,yBAAyB,EACzB,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,CAAC,EAAE,CAAC;YAC7D,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,IAAI,aAAa,EAAE,CAAC,CAAC;QAC7E,CAAC;QAED,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YAAC,KAAK,GAAG,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAChD,OAAO,GAAQ,EAAE,CAAC;YAAC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAAC,CAAC;QAE3E,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,SAAS,GAGV,EAAE,CAAC;QAER,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,UAAwB,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;gBAClF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;oBAC3B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;wBAC1E,CAAC,CAAC,eAAe,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,EAAE,IAAI,KAAK,CAAC,QAAQ,EAAE;wBACnE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;oBACf,SAAS,CAAC,IAAI,CAAC;wBACb,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,WAAW,EAAE,KAAK,CAAC,WAAW;wBAC9B,GAAG;wBACH,UAAU,EAAE,MAAM,CAAC,UAAU;wBAC7B,QAAQ,EAAE,MAAM,CAAC,EAAE;wBACnB,UAAU,EAAG,MAAM,CAAC,IAAI,CAAC,IAAe,IAAI,MAAM,CAAC,EAAE;wBACrD,SAAS,EAAE,KAAK,CAAC,SAAS;qBAC3B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAC,yCAAyC,CAAC,CAAC;QACvD,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/B,CAAC,CACF,CAAC;IAEF,gFAAgF;IAChF,OAAO,CAAC,MAAM,CAGZ,sDAAsD,EACtD,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAChD,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,CAAC,EAAE,CAAC;YAC7D,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,IAAI,aAAa,EAAE,CAAC,CAAC;QAC7E,CAAC;QAED,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YAAC,KAAK,GAAG,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAChD,OAAO,GAAQ,EAAE,CAAC;YAAC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAAC,CAAC;QAE3E,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,WAAW,CAAC,IAAkB,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;YAC1D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"asset-api.js","sourceRoot":"","sources":["../../../src/server/routes/asset-api.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,KAAK,MAAM,MAAM,kCAAkC,CAAC;AAE3D,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAErC;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,MAAc;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC1C,0DAA0D;QAC1D,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACrD,6DAA6D;QAC7D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACzE,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,GAA2B;IACzC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY;IAChE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,eAAe;IACnE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,YAAY;CAC9C,CAAC;AAEF,SAAS,aAAa,CAAC,GAAmB,EAAE,QAAgB,EAAE,gBAAkC,EAAE,WAAwB;IACxH,MAAM,IAAI,GAAI,GAAW,CAAC,IAA4B,CAAC;IACvD,OAAO,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAwB,EACxB,gBAAkC,EAClC,WAAwB;IAGxB,oEAAoE;IACpE,OAAO,CAAC,IAAI,CAGV,4CAA4C,EAC5C,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAEtC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,CAAC,EAAE,CAAC;YAC7D,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,IAAI,aAAa,EAAE,CAAC,CAAC;QACzE,CAAC;QAED,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YAAC,KAAK,GAAG,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAChD,OAAO,GAAQ,EAAE,CAAC;YAAC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAAC,CAAC;QAE3E,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAExE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,qEAAqE;QACrE,kEAAkE;QAClE,IAAI,IAAI,CAAC,QAAQ,KAAK,eAAe,IAAI,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACvF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kDAAkD,EAAE,CAAC,CAAC;QAC/F,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,EAAE,CAAC;QAEnF,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,IAAkB,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;YAChF,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;YAC1C,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAC5C,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iEAAiE,EAAE,CAAC,CAAC;YAC9G,CAAC;YACD,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC,CACF,CAAC;IAEF,oEAAoE;IACpE,8BAA8B;IAC9B,EAAE;IACF,+DAA+D;IAC/D,2DAA2D;IAC3D,sEAAsE;IACtE,oEAAoE;IACpE,qEAAqE;IACrE,oEAAoE;IACpE,oEAAoE;IACpE,uEAAuE;IACvE,kDAAkD;IAClD,EAAE;IACF,oEAAoE;IACpE,qEAAqE;IACrE,kEAAkE;IAClE,kEAAkE;IAClE,+DAA+D;IAC/D,iEAAiE;IACjE,0DAA0D;IAC1D,OAAO,CAAC,KAAK,CAEV;QACD,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,GAAG,EAAE,iCAAiC;QACtC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;YAC5B,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;YAC1C,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC;YAErC,oEAAoE;YACpE,kEAAkE;YAClE,oEAAoE;YACpE,kEAAkE;YAClE,mEAAmE;YACnE,MAAM,KAAK,GAAG,gBAAgB,CAAC,qBAAqB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC/D,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAC9D,CAAC;YACD,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,EAAE,gBAAgB,EAAE,WAAW,CAAC,EAAE,CAAC;gBACvE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAC9D,CAAC;YAED,IAAI,KAAK,CAAC;YACV,IAAI,CAAC;gBAAC,KAAK,GAAG,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAAC,CAAC;YAC1D,MAAM,CAAC;gBAAC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAAC,CAAC;YAEtE,iEAAiE;YACjE,6DAA6D;YAC7D,6DAA6D;YAC7D,6DAA6D;YAC7D,4DAA4D;YAC5D,iEAAiE;YACjE,2DAA2D;YAC3D,4DAA4D;YAC5D,+DAA+D;YAC/D,8DAA8D;YAC9D,4CAA4C;YAC5C,EAAE;YACF,8DAA8D;YAC9D,6DAA6D;YAC7D,4DAA4D;YAC5D,8DAA8D;YAC9D,6DAA6D;YAC7D,8CAA8C;YAC9C,EAAE;YACF,4DAA4D;YAC5D,mBAAmB;YACnB,IAAI,KAAK,CAAC,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC;gBACrC,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAC1C,IAAkB,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EACtD,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CACxB,CAAC;oBACF,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,wBAAwB,CAAC,CAAC;oBACxD,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBACrC,CAAC;gBAAC,OAAO,GAAQ,EAAE,CAAC;oBAClB,gEAAgE;oBAChE,yDAAyD;oBACzD,2DAA2D;oBAC3D,mDAAmD;oBAClD,GAAW,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,uCAAuC,CAAC,CAAC;oBAC/F,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;gBAC9D,CAAC;YACH,CAAC;YAED,kEAAkE;YAClE,+DAA+D;YAC/D,gEAAgE;YAChE,kEAAkE;YAClE,4DAA4D;YAC5D,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;gBACxG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAC1D,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAC9D,CAAC;YACD,MAAM,aAAa,GAAI,gBAAwB,CAAC,aAAa,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAC/E,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;YAEnF,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1B,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAC9D,CAAC;YAED,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;YAC5C,MAAM,WAAW,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAC;YAClE,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAEjC,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;YAC1C,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3C,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,qCAAqC,CAAC,CAAC;YACrE,iEAAiE;YACjE,+DAA+D;YAC/D,IAAI,MAAM;gBAAE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC;QAChD,CAAC;KACF,CAAC,CAAC;IAoBH;;iCAE6B;IAC7B,KAAK,UAAU,iBAAiB,CAAC,IAAY;QAC3C,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YAAC,KAAK,GAAG,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAChD,MAAM,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;QAEpB,IAAI,SAAS,CAAC;QACd,IAAI,CAAC;YAAC,SAAS,GAAG,MAAM,KAAK,CAAC,aAAa,EAAE,CAAC;QAAC,CAAC;QAChD,MAAM,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;QAEpB,yEAAyE;QACzE,0EAA0E;QAC1E,uEAAuE;QACvE,oEAAoE;QACpE,yBAAyB;QACzB,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC5C,MAAM,MAAM,GAAwB,EAAE,CAAC;QACvC,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,UAAwB,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YACvF,IAAI,CAAC,MAAM;gBAAE,SAAS;YAEtB,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACpD,IAAI,UAAU,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC;gBACzD,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;YACjC,CAAC;YAED,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YAElE,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,GAAG;gBACH,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,UAAU;gBACV,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,CAAC,GAAG,CACT,yBAAyB,EACzB,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,CAAC,EAAE,CAAC;YAC7D,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,IAAI,aAAa,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,uEAAuE;QACvE,uEAAuE;QACvE,iDAAiD;QACjD,IAAI,CAAC;YAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QACxC,OAAO,GAAQ,EAAE,CAAC;YAAC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAAC,CAAC;QAC3E,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;IACnD,CAAC,CACF,CAAC;IAEF,2EAA2E;IAC3E,yEAAyE;IACzE,uEAAuE;IACvE,mDAAmD;IACnD,yDAAyD;IACzD,OAAO,CAAC,GAAG,CACT,uBAAuB,EACvB,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,IAAI,GAAI,GAAW,CAAC,IAA4B,CAAC;QACvD,uEAAuE;QACvE,qEAAqE;QACrE,MAAM,UAAU,GAAG,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACnG,MAAM,MAAM,GAAwC,EAAE,CAAC;QACvD,gEAAgE;QAChE,MAAM,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YAC9C,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC,CAAC;QACJ,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC,CACF,CAAC;IAEF,gFAAgF;IAChF,OAAO,CAAC,MAAM,CAGZ,sDAAsD,EACtD,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAChD,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,CAAC,EAAE,CAAC;YAC7D,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,IAAI,aAAa,EAAE,CAAC,CAAC;QACzE,CAAC;QAED,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YAAC,KAAK,GAAG,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAChD,OAAO,GAAQ,EAAE,CAAC;YAAC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAAC,CAAC;QAE3E,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,WAAW,CAAC,IAAkB,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;YAC1D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/server/routes/audit-api.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Audit API routes — Phase 7 of the secrets refactor.
+ *
+ *   GET /api/audit  — paginated, filterable by key/actor
+ *
+ * Owner-only. Append-only — no DELETE / PUT exposed (master-key
+ * rotation in Phase 12 will add a tooling-only path; web users only
+ * read).
+ *
+ * Schema matches `audit_log` in SqliteEncryptedStore.initSchema() —
+ * each row carries actor_type + actor_user_id|actor_system_id plus
+ * ts/action/key/success/ip/user_agent/detail_json. The route returns
+ * rows newest-first with simple offset pagination; the volume is
+ * bounded by audit retention (default 90d). Pagination uses
+ * LIMIT/OFFSET; the audit table is small enough for this to be fine
+ * in v1.
+ *
+ * After the scope-collapse refactor, audit rows no longer carry a
+ * scope dimension. Legacy `scope` / `scope_id` query params are
+ * silently ignored for forward-compat with older clients.
+ */
+import type { FastifyInstance } from 'fastify';
+import { type AuthService } from '../../services/auth-service.js';
+export declare function registerAuditApiRoutes(fastify: FastifyInstance, authService: AuthService): Promise<void>;

package/dist/server/routes/audit-api.js

@@ -0,0 +1,117 @@
+/**
+ * Audit API routes — Phase 7 of the secrets refactor.
+ *
+ *   GET /api/audit  — paginated, filterable by key/actor
+ *
+ * Owner-only. Append-only — no DELETE / PUT exposed (master-key
+ * rotation in Phase 12 will add a tooling-only path; web users only
+ * read).
+ *
+ * Schema matches `audit_log` in SqliteEncryptedStore.initSchema() —
+ * each row carries actor_type + actor_user_id|actor_system_id plus
+ * ts/action/key/success/ip/user_agent/detail_json. The route returns
+ * rows newest-first with simple offset pagination; the volume is
+ * bounded by audit retention (default 90d). Pagination uses
+ * LIMIT/OFFSET; the audit table is small enough for this to be fine
+ * in v1.
+ *
+ * After the scope-collapse refactor, audit rows no longer carry a
+ * scope dimension. Legacy `scope` / `scope_id` query params are
+ * silently ignored for forward-compat with older clients.
+ */
+import { isWorkspaceOwner } from '../../services/auth-service.js';
+import { getSecretStore, hasSecretStore } from '../../core/secrets/index.js';
+function requireOwner(req, authService) {
+    if (!authService.hasUsers())
+        return true;
+    const user = req.user;
+    if (!user)
+        return true;
+    return isWorkspaceOwner(user.role);
+}
+function parseTs(v) {
+    if (!v)
+        return undefined;
+    const n = Number(v);
+    if (Number.isFinite(n) && n > 0)
+        return n;
+    const d = Date.parse(v);
+    return Number.isFinite(d) ? d : undefined;
+}
+export async function registerAuditApiRoutes(fastify, authService) {
+    fastify.get('/api/audit', async (req, reply) => {
+        if (!requireOwner(req, authService)) {
+            return reply.status(403).send({ error: 'Workspace owner access required' });
+        }
+        if (!hasSecretStore()) {
+            return reply.status(503).send({ error: 'Audit store not initialized' });
+        }
+        const q = req.query ?? {};
+        const where = [];
+        const params = [];
+        if (q.key) {
+            where.push('key = ?');
+            params.push(q.key);
+        }
+        if (q.actor_user_id) {
+            where.push('actor_user_id = ?');
+            params.push(q.actor_user_id);
+        }
+        if (q.actor_type) {
+            where.push('actor_type = ?');
+            params.push(q.actor_type);
+        }
+        if (q.action) {
+            where.push('action = ?');
+            params.push(q.action);
+        }
+        const since = parseTs(q.since);
+        const until = parseTs(q.until);
+        if (since !== undefined) {
+            where.push('ts >= ?');
+            params.push(since);
+        }
+        if (until !== undefined) {
+            where.push('ts <= ?');
+            params.push(until);
+        }
+        const limit = Math.min(Math.max(parseInt(q.limit ?? '50', 10) || 50, 1), 500);
+        const offset = Math.max(parseInt(q.offset ?? '0', 10) || 0, 0);
+        const store = getSecretStore();
+        const sql = `SELECT id, ts, actor_type, actor_user_id, actor_system_id, action,
+              key, success, ip, user_agent, detail_json
+         FROM audit_log
+        ${where.length ? `WHERE ${where.join(' AND ')}` : ''}
+        ORDER BY ts DESC
+        LIMIT ? OFFSET ?`;
+        const rows = store.db.prepare(sql).all(...params, limit, offset);
+        const totalRow = store.db.prepare(`SELECT COUNT(*) AS n FROM audit_log ${where.length ? `WHERE ${where.join(' AND ')}` : ''}`).get(...params);
+        return reply.send({
+            total: totalRow.n,
+            limit,
+            offset,
+            items: rows.map((r) => ({
+                id: r.id,
+                ts: r.ts,
+                actor_type: r.actor_type,
+                actor_user_id: r.actor_user_id,
+                actor_system_id: r.actor_system_id,
+                action: r.action,
+                key: r.key,
+                success: !!r.success,
+                ip: r.ip,
+                user_agent: r.user_agent,
+                detail: r.detail_json ? safeJsonParse(r.detail_json) : null,
+            })),
+        });
+    });
+}
+function safeJsonParse(s) {
+    try {
+        return JSON.parse(s);
+    }
+    catch {
+        return s;
+    }
+}
+//# sourceMappingURL=audit-api.js.map

package/dist/server/routes/audit-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-api.js","sourceRoot":"","sources":["../../../src/server/routes/audit-api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,EAAE,gBAAgB,EAAmC,MAAM,gCAAgC,CAAC;AACnG,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAE7E,SAAS,YAAY,CAAC,GAAmB,EAAE,WAAwB;IACjE,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,IAAI,GAAI,GAAW,CAAC,IAA4B,CAAC;IACvD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrC,CAAC;AAkBD,SAAS,OAAO,CAAC,CAAqB;IACpC,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAwB,EACxB,WAAwB;IAExB,OAAO,CAAC,GAAG,CAA8B,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC1E,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,CAAC;YACpC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YACtB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;QAE1B,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAU,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QACzD,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;QAAC,CAAC;QACvF,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAAC,CAAC;QAC9E,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QAClE,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QACvE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAEvE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,IAAI,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAE/D,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;QAC/B,MAAM,GAAG,GACP;;;UAGI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;;yBAEnC,CAAC;QACtB,MAAM,IAAI,GAAI,KAAa,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,KAAK,EAAE,MAAM,CAYtE,CAAC;QAEH,MAAM,QAAQ,GAAI,KAAa,CAAC,EAAE,CAAC,OAAO,CACxC,uCAAuC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5F,CAAC,GAAG,CAAC,GAAG,MAAM,CAAkB,CAAC;QAElC,OAAO,KAAK,CAAC,IAAI,CAAC;YAChB,KAAK,EAAE,QAAQ,CAAC,CAAC;YACjB,KAAK;YACL,MAAM;YACN,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtB,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,aAAa,EAAE,CAAC,CAAC,aAAa;gBAC9B,eAAe,EAAE,CAAC,CAAC,eAAe;gBAClC,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,GAAG,EAAE,CAAC,CAAC,GAAG;gBACV,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO;gBACpB,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,MAAM,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;aAC5D,CAAC,CAAC;SACJ,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,CAAS;IAC9B,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,CAAC,CAAC;IAAC,CAAC;AACnD,CAAC"}