studiograph 1.3.48-next.2 → 1.3.48-next.201

package/dist/cli/commands/admin/migrate-assets.js

@@ -0,0 +1,184 @@
+/**
+ * studiograph admin migrate-assets — one-time re-key of legacy asset URLs.
+ *
+ * Rewrites every legacy `/api/assets/{type}/{id}/{filename}` reference (in
+ * entity bodies AND `asset_url` frontmatter) to the immutable-key scheme
+ * `/api/assets/{assetId}/{filename}`, copying the blob old→new and recording
+ * authoritative ownership in assets.db. After this runs (and the legacy route
+ * is dropped), renaming/retyping an entity can never orphan its images.
+ *
+ * Safety:
+ *   - `--dry-run` (default OFF): reports counts + missing blobs, writes nothing.
+ *   - Idempotent: a `migration_ledger` keyed by (repo, oldKey) means a re-run
+ *     reuses the same assetId (no duplicate blobs). New-scheme (2-segment) URLs
+ *     never match the extractor, so already-migrated content is skipped.
+ *   - Refuses if a target repo has uncommitted changes (catches half-edits).
+ *   - Copies (never moves) blobs, so the legacy route keeps serving until the
+ *     separate old-blob cleanup step runs. Missing source blobs are reported
+ *     and their URL left legacy (rewriting would just relocate the 404).
+ *   - One commit per repo.
+ *
+ * This is code only — running it against production is a deliberate, backed-up
+ * step (see ~/.claude/plans/rename-carries-assets.md §6).
+ */
+import { Command } from 'commander';
+import { intro, outro, log, spinner } from '@clack/prompts';
+import { existsSync, readFileSync, writeFileSync } from 'fs';
+import { join } from 'path';
+import { randomUUID } from 'node:crypto';
+import { glob } from 'glob';
+import { Workspace } from '../../../core/workspace.js';
+import { WorkspaceManager } from '../../../core/workspace-manager.js';
+import { gitHasUncommittedChanges } from '../../../utils/git.js';
+import { extractLegacyAssetUrls } from '../../../core/embeds.js';
+import { detectContentType, getMediaType, publicUrlForAssetId } from '../../../services/assets/index.js';
+const EXCLUDED_DIRS = ['.git', '.studiograph', 'node_modules', '.svelte-kit', 'dist', 'build'];
+/**
+ * Core migration loop — decoupled from clack/Workspace so it's unit-testable
+ * with a real local AssetService + AssetIndexService over a temp workspace.
+ */
+export async function runAssetMigration(deps) {
+    const { cwd, repos, assetService, assetIndex, dryRun } = deps;
+    const report = { totalUrls: 0, migrated: 0, missing: 0, filesChanged: 0, missingKeys: [] };
+    for (const repo of repos) {
+        const repoPath = join(cwd, repo.path);
+        if (!existsSync(repoPath))
+            continue;
+        const files = await glob('**/*.md', {
+            cwd: repoPath, absolute: true, dot: false,
+            ignore: EXCLUDED_DIRS.map(d => `**/${d}/**`),
+        });
+        let repoChangedFiles = 0;
+        for (const file of files) {
+            const raw = readFileSync(file, 'utf-8');
+            const refs = extractLegacyAssetUrls(raw);
+            if (refs.length === 0)
+                continue;
+            // Rewrite longest URL first: a shorter URL can be a prefix of a longer
+            // one (extensionless filenames), and split/join on the prefix would
+            // corrupt the longer match. Length-descending order avoids it.
+            refs.sort((a, b) => b.url.length - a.url.length);
+            let content = raw;
+            for (const ref of refs) {
+                report.totalUrls++;
+                const [type, id, filename] = ref.oldKey.split('/');
+                const present = await assetService.exists(type, id, filename).catch(() => false);
+                if (!present) {
+                    report.missing++;
+                    report.missingKeys.push(ref.oldKey);
+                    continue; // leave the URL legacy — rewriting would just relocate the 404
+                }
+                // Idempotent assetId via the ledger keyed by (repo, oldKey).
+                let assetId = assetIndex.ledgerGet(repo.name, ref.oldKey);
+                if (!assetId) {
+                    assetId = randomUUID();
+                    if (!dryRun)
+                        assetIndex.ledgerPut(repo.name, ref.oldKey, assetId);
+                }
+                if (!dryRun) {
+                    await assetService.copy(ref.oldKey, `${assetId}/${filename}`);
+                    const ctype = detectContentType(filename);
+                    assetIndex.put({
+                        assetId, repo: repo.name, ownerType: ref.type, ownerId: ref.id,
+                        filename, contentType: ctype, mediaType: getMediaType(ctype), name: filename,
+                    });
+                }
+                content = content.split(ref.url).join(publicUrlForAssetId(assetId, filename));
+                report.migrated++;
+            }
+            if (content !== raw) {
+                repoChangedFiles++;
+                if (!dryRun)
+                    writeFileSync(file, content, 'utf-8');
+            }
+        }
+        report.filesChanged += repoChangedFiles;
+        if (repoChangedFiles > 0 && !dryRun) {
+            deps.commit?.(repo.name, `Migrate ${repoChangedFiles} file(s) to immutable asset keys`);
+        }
+        deps.onRepo?.(repo.name, repoChangedFiles);
+    }
+    return report;
+}
+export const adminMigrateAssetsCommand = new Command('migrate-assets')
+    .description('Re-key legacy /api/assets/{type}/{id}/{file} references to immutable {assetId} keys')
+    .option('--dry-run', 'Report what would change (files, URLs, missing blobs); write nothing')
+    .option('--repos <list>', 'Comma-separated repo names to limit the migration to')
+    .action(async (opts) => {
+    intro(opts.dryRun ? 'Asset key migration (DRY RUN)' : 'Asset key migration');
+    const workspace = new Workspace();
+    if (!workspace.isWorkspace()) {
+        outro('Not a Studiograph workspace. Run from your workspace root.');
+        process.exit(1);
+        return;
+    }
+    const config = await workspace.loadConfig();
+    const repoFilter = opts.repos
+        ? new Set(opts.repos.split(',').map(s => s.trim()).filter(Boolean))
+        : null;
+    const targetRepos = config.repos.filter(r => !repoFilter || repoFilter.has(r.name));
+    if (targetRepos.length === 0) {
+        outro('No repos matched.');
+        process.exit(1);
+        return;
+    }
+    // Uncommitted-changes guard (skip in dry-run — we write nothing).
+    if (!opts.dryRun) {
+        const dirty = targetRepos
+            .map(r => ({ r, p: join(process.cwd(), r.path) }))
+            .filter(({ p }) => existsSync(p) && gitHasUncommittedChanges(p))
+            .map(({ r }) => r.name);
+        if (dirty.length > 0) {
+            outro(`Refusing — uncommitted changes in: ${dirty.join(', ')}. Commit/stash first.`);
+            process.exit(1);
+            return;
+        }
+    }
+    const gitUser = { id: 'migration', name: 'Asset Migration', email: 'migration@studiograph.local' };
+    const wm = new WorkspaceManager(process.cwd(), config, gitUser);
+    const assetIndex = wm.getAssetIndex();
+    // Backend is workspace-global, so any configured graph's service works.
+    let assetService;
+    for (const r of targetRepos) {
+        try {
+            assetService = wm.getGraph(r.name).getAssetService();
+            if (assetService)
+                break;
+        }
+        catch { /* skip */ }
+    }
+    if (!assetService) {
+        outro('Asset storage is not configured for this workspace — nothing to migrate.');
+        process.exit(1);
+        return;
+    }
+    const s = spinner();
+    s.start('Migrating asset references…');
+    const report = await runAssetMigration({
+        cwd: process.cwd(),
+        repos: targetRepos.map(r => ({ name: r.name, path: r.path })),
+        assetService,
+        assetIndex,
+        dryRun: !!opts.dryRun,
+        commit: (repoName, message) => {
+            wm.getGraph(repoName).getGitService()?.commitAll(message, gitUser);
+        },
+    });
+    s.stop('Scan complete');
+    assetIndex.close();
+    log.info(`URLs found: ${report.totalUrls}\n` +
+        `${opts.dryRun ? 'Would migrate' : 'Migrated'}: ${report.migrated}\n` +
+        `Files ${opts.dryRun ? 'to change' : 'changed'}: ${report.filesChanged}\n` +
+        `Missing source blobs (left legacy): ${report.missing}`);
+    if (report.missing > 0) {
+        log.warn(`Missing blobs (first 10):\n  ${report.missingKeys.slice(0, 10).join('\n  ')}`);
+    }
+    // Count-verify: every found URL is either migrated or accounted-for as missing.
+    if (report.migrated + report.missing !== report.totalUrls) {
+        outro(`COUNT MISMATCH: migrated(${report.migrated}) + missing(${report.missing}) != found(${report.totalUrls}). Investigate before dropping the legacy route.`);
+        process.exit(1);
+        return;
+    }
+    outro(opts.dryRun ? 'Dry run complete — no changes written.' : 'Migration complete.');
+});
+//# sourceMappingURL=migrate-assets.js.map

package/dist/cli/commands/admin/migrate-assets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate-assets.js","sourceRoot":"","sources":["../../../../src/cli/commands/admin/migrate-assets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AAC7D,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AACtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,mBAAmB,EAAqB,MAAM,mCAAmC,CAAC;AAI5H,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AA2B/F;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAwB;IAC9D,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC9D,MAAM,MAAM,GAAyB,EAAE,SAAS,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IAEjH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,SAAS;QAEpC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE;YAClC,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK;YACzC,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;SAC7C,CAAC,CAAC;QAEH,IAAI,gBAAgB,GAAG,CAAC,CAAC;QACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACxC,MAAM,IAAI,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAChC,uEAAuE;YACvE,oEAAoE;YACpE,+DAA+D;YAC/D,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAEjD,IAAI,OAAO,GAAG,GAAG,CAAC;YAClB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,CAAC,SAAS,EAAE,CAAC;gBACnB,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,QAAQ,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACnD,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;gBACjF,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,CAAC,OAAO,EAAE,CAAC;oBACjB,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;oBACpC,SAAS,CAAC,+DAA+D;gBAC3E,CAAC;gBACD,6DAA6D;gBAC7D,IAAI,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC1D,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO,GAAG,UAAU,EAAE,CAAC;oBACvB,IAAI,CAAC,MAAM;wBAAE,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBACpE,CAAC;gBACD,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,MAAM,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,OAAO,IAAI,QAAQ,EAAE,CAAC,CAAC;oBAC9D,MAAM,KAAK,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;oBAC1C,UAAU,CAAC,GAAG,CAAC;wBACb,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE;wBAC9D,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,QAAQ;qBAC7E,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;gBAC9E,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,CAAC;YAED,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;gBACpB,gBAAgB,EAAE,CAAC;gBACnB,IAAI,CAAC,MAAM;oBAAE,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QAED,MAAM,CAAC,YAAY,IAAI,gBAAgB,CAAC;QACxC,IAAI,gBAAgB,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,gBAAgB,kCAAkC,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG,IAAI,OAAO,CAAC,gBAAgB,CAAC;KACnE,WAAW,CAAC,qFAAqF,CAAC;KAClG,MAAM,CAAC,WAAW,EAAE,sEAAsE,CAAC;KAC3F,MAAM,CAAC,gBAAgB,EAAE,sDAAsD,CAAC;KAChF,MAAM,CAAC,KAAK,EAAE,IAAuB,EAAE,EAAE;IACxC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC;IAE7E,MAAM,SAAS,GAAG,IAAI,SAAS,EAAE,CAAC;IAClC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7B,KAAK,CAAC,4DAA4D,CAAC,CAAC;QACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,CAAC;IAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK;QAC3B,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACnE,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACpF,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,kEAAkE;IAClE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,WAAW;aACtB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;aACjD,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,wBAAwB,CAAC,CAAC,CAAC,CAAC;aAC/D,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,KAAK,CAAC,sCAAsC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YACrF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChB,OAAO;QACT,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAY,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;IAC5G,MAAM,EAAE,GAAG,IAAI,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,EAAE,CAAC,aAAa,EAAE,CAAC;IACtC,wEAAwE;IACxE,IAAI,YAAY,CAAC;IACjB,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,IAAI,CAAC;YAAC,YAAY,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,CAAC;YAAC,IAAI,YAAY;gBAAE,MAAM;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;IAC7G,CAAC;IACD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,KAAK,CAAC,0EAA0E,CAAC,CAAC;QAClF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;IACpB,CAAC,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;QACrC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;QAClB,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7D,YAAY;QACZ,UAAU;QACV,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM;QACrB,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE;YAC5B,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,aAAa,EAAE,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACrE,CAAC;KACF,CAAC,CAAC;IACH,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAExB,UAAU,CAAC,KAAK,EAAE,CAAC;IAEnB,GAAG,CAAC,IAAI,CACN,eAAe,MAAM,CAAC,SAAS,IAAI;QACnC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,KAAK,MAAM,CAAC,QAAQ,IAAI;QACrE,SAAS,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,YAAY,IAAI;QAC1E,uCAAuC,MAAM,CAAC,OAAO,EAAE,CACxD,CAAC;IACF,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;QACvB,GAAG,CAAC,IAAI,CAAC,gCAAgC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,gFAAgF;IAChF,IAAI,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;QAC1D,KAAK,CAAC,4BAA4B,MAAM,CAAC,QAAQ,eAAe,MAAM,CAAC,OAAO,cAAc,MAAM,CAAC,SAAS,kDAAkD,CAAC,CAAC;QAChK,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC;AACxF,CAAC,CAAC,CAAC"}

package/dist/cli/commands/admin/migrate.d.ts

@@ -0,0 +1,56 @@
+/**
+ * studiograph admin migrate — bulk regex find-replace across workspace repos.
+ *
+ * Codifies the hand-rolled sed pattern the owner has reached for twice
+ * during schema renames. Walks every repo in workspace.json (or a
+ * `--repos`-filtered subset), applies the regex, and produces one commit
+ * per repo with the same message. `--dry-run` reports without writing.
+ * `--also-rename-files` does a second pass that `git mv`s any files
+ * whose name matches the regex.
+ *
+ * Safety:
+ *   - Refuses if ANY targeted repo has uncommitted changes. Catches
+ *     half-finished local edits before they're caught up in the rewrite.
+ *   - Runs the regex against the file contents read with utf-8; commit
+ *     uses `git -c core.quotepath=false` so non-ASCII file paths in
+ *     summaries don't render as `\xxx` escapes.
+ *   - Skips the .git/, .studiograph/, and node_modules/ subtrees of every
+ *     repo (defensive — none of those should ever match a workspace glob,
+ *     but a stray `--in '**'` shouldn't pull them in either).
+ */
+import { Command } from 'commander';
+import type { RepoConfig } from '../../../core/types.js';
+interface RepoChange {
+    repoName: string;
+    repoPath: string;
+    fileChanges: Array<{
+        relPath: string;
+        replacements: number;
+    }>;
+    fileRenames: Array<{
+        from: string;
+        to: string;
+    }>;
+}
+export declare const adminMigrateCommand: Command;
+/**
+ * Walk one repo, regex-replace contents in every file matching `pattern`
+ * (the glob pattern, not the regex). Returns a summary; writes files
+ * unless `dryRun` is true.
+ */
+export declare function migrateRepoContent(repo: RepoConfig, globPattern: string, regex: RegExp, replacement: string, dryRun: boolean): Promise<RepoChange>;
+/**
+ * Apply a replacement-string template the way String.prototype.replace
+ * does when given a string (not a function): expand $1..$9 to capture
+ * groups, $$ to a literal $, $& to the whole match.
+ *
+ * We re-implement this because we call replace with a *function* (to
+ * count matches) but want the literal-string substitution semantics for
+ * the actual replacement text. Without this, $1/$2 would render
+ * literally instead of being expanded.
+ */
+declare function applyReplacementString(template: string, match: string, args: unknown[]): string;
+export declare const __internals: {
+    applyReplacementString: typeof applyReplacementString;
+};
+export {};

package/dist/cli/commands/admin/migrate.js

@@ -0,0 +1,263 @@
+/**
+ * studiograph admin migrate — bulk regex find-replace across workspace repos.
+ *
+ * Codifies the hand-rolled sed pattern the owner has reached for twice
+ * during schema renames. Walks every repo in workspace.json (or a
+ * `--repos`-filtered subset), applies the regex, and produces one commit
+ * per repo with the same message. `--dry-run` reports without writing.
+ * `--also-rename-files` does a second pass that `git mv`s any files
+ * whose name matches the regex.
+ *
+ * Safety:
+ *   - Refuses if ANY targeted repo has uncommitted changes. Catches
+ *     half-finished local edits before they're caught up in the rewrite.
+ *   - Runs the regex against the file contents read with utf-8; commit
+ *     uses `git -c core.quotepath=false` so non-ASCII file paths in
+ *     summaries don't render as `\xxx` escapes.
+ *   - Skips the .git/, .studiograph/, and node_modules/ subtrees of every
+ *     repo (defensive — none of those should ever match a workspace glob,
+ *     but a stray `--in '**'` shouldn't pull them in either).
+ */
+import { Command } from 'commander';
+import { intro, outro, log, spinner } from '@clack/prompts';
+import { existsSync, readFileSync, writeFileSync, statSync } from 'fs';
+import { execFileSync } from 'child_process';
+import { join, dirname } from 'path';
+import { glob } from 'glob';
+import { Workspace } from '../../../core/workspace.js';
+import { gitHasUncommittedChanges } from '../../../utils/git.js';
+const EXCLUDED_DIRS = ['.git', '.studiograph', 'node_modules', '.svelte-kit', 'dist', 'build'];
+export const adminMigrateCommand = new Command('migrate')
+    .description('Bulk regex find-replace across workspace repos with one commit per repo')
+    .requiredOption('--in <glob>', 'Glob pattern for files to consider (e.g. "**/*.md")')
+    .requiredOption('--regex <pattern>', 'Regex to search for (JavaScript syntax, global flag implied)')
+    .requiredOption('--replace <text>', 'Replacement text (supports $1, $2 backrefs)')
+    .option('--commit-message <msg>', 'Commit message (default: "refactor: bulk migrate <regex> → <replace>")')
+    .option('--dry-run', 'Print affected files + replacement counts; do not write')
+    .option('--also-rename-files', 'After content rewrite, git mv any matching filenames too')
+    .option('--repos <list>', 'Comma-separated repo names to limit the migration to')
+    .action(async (opts) => {
+    intro('Bulk migrate across workspace repos');
+    const workspace = new Workspace();
+    if (!workspace.isWorkspace()) {
+        outro('Not a Studiograph workspace. Run from your workspace root.');
+        process.exit(1);
+        return;
+    }
+    const config = await workspace.loadConfig();
+    const repoFilter = opts.repos
+        ? new Set(opts.repos.split(',').map((s) => s.trim()).filter(Boolean))
+        : null;
+    const targetRepos = config.repos.filter((r) => !repoFilter || repoFilter.has(r.name));
+    if (targetRepos.length === 0) {
+        outro(repoFilter
+            ? `No repos matched --repos filter "${opts.repos}". Known repos: ${config.repos.map((r) => r.name).join(', ')}.`
+            : 'Workspace has no repos.');
+        process.exit(1);
+        return;
+    }
+    // Compile the regex once. Force the global flag so String.replace hits
+    // every match per file. Validate up-front so a typo doesn't manifest
+    // only after we've started rewriting.
+    let pattern;
+    try {
+        pattern = new RegExp(opts.regex, 'g');
+    }
+    catch (err) {
+        outro(`Invalid regex "${opts.regex}": ${err instanceof Error ? err.message : String(err)}`);
+        process.exit(1);
+        return;
+    }
+    // Uncommitted-changes guard. Catches a half-finished edit before it
+    // gets caught up in the rewrite.
+    const dirty = [];
+    for (const repo of targetRepos) {
+        const repoPath = join(process.cwd(), repo.path);
+        if (existsSync(repoPath) && gitHasUncommittedChanges(repoPath)) {
+            dirty.push(repo.name);
+        }
+    }
+    if (dirty.length > 0) {
+        outro(`Refusing to migrate — these repos have uncommitted changes:\n  ${dirty.join('\n  ')}\n` +
+            'Commit or stash them first, then retry.');
+        process.exit(1);
+        return;
+    }
+    const commitMessage = opts.commitMessage?.trim()
+        || `refactor: bulk migrate ${opts.regex} → ${opts.replace}`;
+    // Pass 1: content rewrites.
+    const changes = [];
+    const spin = spinner();
+    for (const repo of targetRepos) {
+        spin.start(`Scanning ${repo.name}...`);
+        const repoChange = await migrateRepoContent(repo, opts.in, pattern, opts.replace, !!opts.dryRun);
+        if (repoChange.fileChanges.length > 0) {
+            spin.stop(`${repo.name}: ${repoChange.fileChanges.length} file(s) touched, ${totalReplacements(repoChange)} replacement(s)`);
+        }
+        else {
+            spin.stop(`${repo.name}: no matches`);
+        }
+        changes.push(repoChange);
+    }
+    // Pass 2: file renames (optional). Only runs after the content pass
+    // so the rewritten contents land first; renames are a separate commit
+    // step within the same per-repo message.
+    if (opts.alsoRenameFiles) {
+        for (const repoChange of changes) {
+            if (repoChange.fileChanges.length === 0)
+                continue; // nothing to rename in repos with no matches
+            await migrateRepoFilenames(repoChange, opts.in, pattern, opts.replace, !!opts.dryRun);
+        }
+    }
+    // Dry-run summary, no commits.
+    if (opts.dryRun) {
+        log.info('Dry-run summary:');
+        for (const ch of changes) {
+            if (ch.fileChanges.length === 0 && ch.fileRenames.length === 0)
+                continue;
+            log.message(`  ${ch.repoName}:`);
+            for (const fc of ch.fileChanges) {
+                log.message(`    ${fc.relPath} — ${fc.replacements} replacement${fc.replacements === 1 ? '' : 's'}`);
+            }
+            for (const fr of ch.fileRenames) {
+                log.message(`    ${fr.from} → ${fr.to} (rename)`);
+            }
+        }
+        outro('Dry-run only — no changes written.');
+        return;
+    }
+    // Commit per repo. Skip repos with no changes.
+    let committedRepos = 0;
+    for (const ch of changes) {
+        if (ch.fileChanges.length === 0 && ch.fileRenames.length === 0)
+            continue;
+        try {
+            commitRepo(ch.repoPath, commitMessage);
+            committedRepos++;
+            log.success(`${ch.repoName}: committed (${ch.fileChanges.length} edit(s), ${ch.fileRenames.length} rename(s))`);
+        }
+        catch (err) {
+            log.error(`${ch.repoName}: commit failed — ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    if (committedRepos === 0) {
+        outro('No repos had any matches — nothing committed.');
+        return;
+    }
+    outro(`Done — ${committedRepos} repo(s) committed.`);
+});
+// ── Internals (exported for tests) ──────────────────────────────────────────
+function totalReplacements(ch) {
+    return ch.fileChanges.reduce((acc, f) => acc + f.replacements, 0);
+}
+/**
+ * Walk one repo, regex-replace contents in every file matching `pattern`
+ * (the glob pattern, not the regex). Returns a summary; writes files
+ * unless `dryRun` is true.
+ */
+export async function migrateRepoContent(repo, globPattern, regex, replacement, dryRun) {
+    const repoPath = join(process.cwd(), repo.path);
+    const change = { repoName: repo.name, repoPath, fileChanges: [], fileRenames: [] };
+    if (!existsSync(repoPath))
+        return change;
+    const files = await glob(globPattern, {
+        cwd: repoPath,
+        nodir: true,
+        ignore: EXCLUDED_DIRS.map((d) => `${d}/**`),
+        dot: false,
+    });
+    for (const relPath of files) {
+        const abs = join(repoPath, relPath);
+        try {
+            // Skip binary files cheaply (avoids reading 10MB PDFs into memory
+            // when an owner runs `--in "**"` against a workspace with assets).
+            const stat = statSync(abs);
+            if (stat.size > 5 * 1024 * 1024)
+                continue;
+            const content = readFileSync(abs, 'utf-8');
+            // Reset lastIndex — regex with the `g` flag is stateful.
+            regex.lastIndex = 0;
+            let count = 0;
+            const rewritten = content.replace(regex, (match, ...args) => {
+                count++;
+                // Use String.replace's substitution semantics with the literal
+                // replacement so $1/$2 backrefs work. Args = [...captureGroups, offset, string].
+                return applyReplacementString(replacement, match, args);
+            });
+            if (count === 0 || rewritten === content)
+                continue;
+            if (!dryRun)
+                writeFileSync(abs, rewritten, 'utf-8');
+            change.fileChanges.push({ relPath, replacements: count });
+        }
+        catch {
+            // Likely a binary file masquerading as one of the glob matches
+            // (utf-8 decode threw). Skip silently — `--in` should pre-filter.
+        }
+    }
+    return change;
+}
+/**
+ * Second pass: rename files whose paths match the regex. Uses `git mv`
+ * so the rename shows up in the staging area for the same commit. Only
+ * runs in repos that already had content matches — otherwise a rename-
+ * only commit would be confusing.
+ */
+async function migrateRepoFilenames(change, globPattern, regex, replacement, dryRun) {
+    const files = await glob(globPattern, {
+        cwd: change.repoPath,
+        nodir: true,
+        ignore: EXCLUDED_DIRS.map((d) => `${d}/**`),
+        dot: false,
+    });
+    for (const relPath of files) {
+        regex.lastIndex = 0;
+        const newRel = relPath.replace(regex, replacement);
+        if (newRel === relPath)
+            continue;
+        if (!dryRun) {
+            const newAbs = join(change.repoPath, newRel);
+            const newDir = dirname(newAbs);
+            if (!existsSync(newDir)) {
+                // Create the target dir so `git mv` doesn't fail on a rename
+                // that crosses subdirectories.
+                execFileSync('mkdir', ['-p', newDir], { stdio: 'pipe' });
+            }
+            execFileSync('git', ['-c', 'core.quotepath=false', '-C', change.repoPath, 'mv', relPath, newRel], { stdio: 'pipe' });
+        }
+        change.fileRenames.push({ from: relPath, to: newRel });
+    }
+}
+function commitRepo(repoPath, message) {
+    // `git add -A` catches both content rewrites (modified files) and
+    // file renames (which were already staged by `git mv`). The migrate
+    // command owns the entire commit boundary — nothing else should be
+    // half-staged in the repo, because we refused on dirty trees.
+    execFileSync('git', ['-c', 'core.quotepath=false', '-C', repoPath, 'add', '-A'], { stdio: 'pipe' });
+    execFileSync('git', ['-c', 'core.quotepath=false', '-C', repoPath, 'commit', '-m', message], { stdio: 'pipe' });
+}
+/**
+ * Apply a replacement-string template the way String.prototype.replace
+ * does when given a string (not a function): expand $1..$9 to capture
+ * groups, $$ to a literal $, $& to the whole match.
+ *
+ * We re-implement this because we call replace with a *function* (to
+ * count matches) but want the literal-string substitution semantics for
+ * the actual replacement text. Without this, $1/$2 would render
+ * literally instead of being expanded.
+ */
+function applyReplacementString(template, match, args) {
+    // Captures are everything in args except the last two (offset + whole string).
+    const captures = args.slice(0, -2);
+    return template.replace(/\$([1-9]|&|\$)/g, (_, key) => {
+        if (key === '$')
+            return '$';
+        if (key === '&')
+            return match;
+        const idx = parseInt(key, 10) - 1;
+        return captures[idx] ?? '';
+    });
+}
+// Re-export the helper signature for test imports.
+export const __internals = { applyReplacementString };
+//# sourceMappingURL=migrate.js.map

package/dist/cli/commands/admin/migrate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.js","sourceRoot":"","sources":["../../../../src/cli/commands/admin/migrate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAoBjE,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AAE/F,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,OAAO,CAAC,SAAS,CAAC;KACtD,WAAW,CAAC,yEAAyE,CAAC;KACtF,cAAc,CAAC,aAAa,EAAE,qDAAqD,CAAC;KACpF,cAAc,CAAC,mBAAmB,EAAE,8DAA8D,CAAC;KACnG,cAAc,CAAC,kBAAkB,EAAE,6CAA6C,CAAC;KACjF,MAAM,CAAC,wBAAwB,EAAE,wEAAwE,CAAC;KAC1G,MAAM,CAAC,WAAW,EAAE,yDAAyD,CAAC;KAC9E,MAAM,CAAC,qBAAqB,EAAE,0DAA0D,CAAC;KACzF,MAAM,CAAC,gBAAgB,EAAE,sDAAsD,CAAC;KAChF,MAAM,CAAC,KAAK,EAAE,IAAiB,EAAE,EAAE;IAClC,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAE7C,MAAM,SAAS,GAAG,IAAI,SAAS,EAAE,CAAC;IAClC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7B,KAAK,CAAC,4DAA4D,CAAC,CAAC;QACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,CAAC;IAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK;QAC3B,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrE,CAAC,CAAC,IAAI,CAAC;IAET,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACtF,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,KAAK,CACH,UAAU;YACR,CAAC,CAAC,oCAAoC,IAAI,CAAC,KAAK,mBAAmB,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YAChH,CAAC,CAAC,yBAAyB,CAC9B,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,uEAAuE;IACvE,qEAAqE;IACrE,sCAAsC;IACtC,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,KAAK,CAAC,kBAAkB,IAAI,CAAC,KAAK,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,oEAAoE;IACpE,iCAAiC;IACjC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,wBAAwB,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/D,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,KAAK,CACH,kEAAkE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI;YACtF,yCAAyC,CAC5C,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE;WAC3C,0BAA0B,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IAE9D,4BAA4B;IAC5B,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC;QACvC,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjG,IAAI,UAAU,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,WAAW,CAAC,MAAM,qBAAqB,iBAAiB,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QAC/H,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,cAAc,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC3B,CAAC;IAED,oEAAoE;IACpE,sEAAsE;IACtE,yCAAyC;IACzC,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QACzB,KAAK,MAAM,UAAU,IAAI,OAAO,EAAE,CAAC;YACjC,IAAI,UAAU,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS,CAAC,6CAA6C;YAChG,MAAM,oBAAoB,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IAED,+BAA+B;IAC/B,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC7B,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;YACzB,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACzE,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,QAAQ,GAAG,CAAC,CAAC;YACjC,KAAK,MAAM,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBAChC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,OAAO,MAAM,EAAE,CAAC,YAAY,eAAe,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YACvG,CAAC;YACD,KAAK,MAAM,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBAChC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC,EAAE,WAAW,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;QACD,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAC5C,OAAO;IACT,CAAC;IAED,+CAA+C;IAC/C,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;QACzB,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACzE,IAAI,CAAC;YACH,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YACvC,cAAc,EAAE,CAAC;YACjB,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,QAAQ,gBAAgB,EAAE,CAAC,WAAW,CAAC,MAAM,aAAa,EAAE,CAAC,WAAW,CAAC,MAAM,aAAa,CAAC,CAAC;QAClH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,QAAQ,qBAAqB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnG,CAAC;IACH,CAAC;IAED,IAAI,cAAc,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACvD,OAAO;IACT,CAAC;IACD,KAAK,CAAC,UAAU,cAAc,qBAAqB,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC;AAEL,+EAA+E;AAE/E,SAAS,iBAAiB,CAAC,EAAc;IACvC,OAAO,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;AACpE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAgB,EAChB,WAAmB,EACnB,KAAa,EACb,WAAmB,EACnB,MAAe;IAEf,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,MAAM,GAAe,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IAC/F,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,MAAM,CAAC;IAEzC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE;QACpC,GAAG,EAAE,QAAQ;QACb,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC;QAC3C,GAAG,EAAE,KAAK;KACX,CAAC,CAAC;IAEH,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,kEAAkE;YAClE,mEAAmE;YACnE,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI;gBAAE,SAAS;YAC1C,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC3C,yDAAyD;YACzD,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;YACpB,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,GAAG,IAAI,EAAE,EAAE;gBAC1D,KAAK,EAAE,CAAC;gBACR,+DAA+D;gBAC/D,iFAAiF;gBACjF,OAAO,sBAAsB,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YAC1D,CAAC,CAAC,CAAC;YACH,IAAI,KAAK,KAAK,CAAC,IAAI,SAAS,KAAK,OAAO;gBAAE,SAAS;YACnD,IAAI,CAAC,MAAM;gBAAE,aAAa,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;YACpD,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,+DAA+D;YAC/D,kEAAkE;QACpE,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,oBAAoB,CACjC,MAAkB,EAClB,WAAmB,EACnB,KAAa,EACb,WAAmB,EACnB,MAAe;IAEf,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE;QACpC,GAAG,EAAE,MAAM,CAAC,QAAQ;QACpB,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC;QAC3C,GAAG,EAAE,KAAK;KACX,CAAC,CAAC;IAEH,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;QAC5B,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;QACpB,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACnD,IAAI,MAAM,KAAK,OAAO;YAAE,SAAS;QACjC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;YAC/B,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxB,6DAA6D;gBAC7D,+BAA+B;gBAC/B,YAAY,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAC3D,CAAC;YACD,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACvH,CAAC;QACD,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,QAAgB,EAAE,OAAe;IACnD,kEAAkE;IAClE,oEAAoE;IACpE,mEAAmE;IACnE,8DAA8D;IAC9D,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACpG,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;AAClH,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,sBAAsB,CAAC,QAAgB,EAAE,KAAa,EAAE,IAAe;IAC9E,+EAA+E;IAC/E,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAA8B,CAAC;IAChE,OAAO,QAAQ,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;QACpD,IAAI,GAAG,KAAK,GAAG;YAAE,OAAO,GAAG,CAAC;QAC5B,IAAI,GAAG,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;QAC9B,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,mDAAmD;AACnD,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,sBAAsB,EAAE,CAAC"}

package/dist/cli/commands/admin/restore.d.ts

@@ -0,0 +1,24 @@
+/**
+ * studiograph admin restore — counterpart to `admin backup`.
+ *
+ * Decrypts the .sgbackup bundle, expands the workspace contents into
+ * a target directory, and writes two sidecar files into the PARENT of
+ * the target:
+ *
+ *   1. `.env.restore` — the Railway env vars (master key, JWT secret)
+ *      the operator captured at backup time. NOT auto-applied to
+ *      Railway — restore prints instructions for pasting them into the
+ *      Railway dashboard. Sidecar lives outside the workspace so it
+ *      doesn't get accidentally git-committed when the operator later
+ *      re-deploys.
+ *   2. `RESTORE-README.md` — step-by-step instructions for finishing
+ *      the recovery: create a new Railway service, paste env vars,
+ *      update workspace.json's `railway` block with the new IDs, run
+ *      `studiograph redeploy`.
+ *
+ * Refuses to overwrite an existing `.studiograph/` in the target dir.
+ * That's the disaster-recovery contract: restore is destructive enough
+ * that we want an explicit empty target.
+ */
+import { Command } from 'commander';
+export declare const adminRestoreCommand: Command;