studiograph 1.3.48-next.26 → 1.3.48-next.261

package/dist/server/routes/artifact-export-api.js

@@ -0,0 +1,180 @@
+import { readFileSync } from 'fs';
+import { join, basename } from 'path';
+import { WorkspaceAccessService } from '../../services/workspace-access.js';
+import { validateArtifactBundle } from '../../core/artifact-frame-model.js';
+import { buildFrameDocument, bundleNeedsPagination } from '../../core/artifact-frame-document.js';
+import { artifactLibrarySourcesForBundle, artifactPagedSource } from '../../services/artifact-library-sources.js';
+import { graphForRead as resolveGraphForRead } from './graph-api-access.js';
+import { ArtifactRenderExportUnavailableError, ArtifactRenderInstallingError, artifactExportFilename, artifactPngArchiveFilename, nameArtifactPngFiles, renderArtifactPdf, renderArtifactPng, renderArtifactPngFiles, zipArtifactPngFiles, zipArtifactFiles, } from '../../services/artifact-render-export.js';
+import { resolveCanonicalBaseUrl, CanonicalUrlError } from './oauth-api.js';
+import { exporterAccessibleArtifactAssets, mintArtifactAssetTokenForBundle } from '../artifact-asset-mint.js';
+// Bounds on the self-contained HTML-export zip so one artifact can't force a
+// huge set of R2 downloads / an enormous in-memory archive.
+const HTML_EXPORT_MAX_ASSETS = 200;
+const HTML_EXPORT_MAX_TOTAL_BYTES = 100 * 1024 * 1024;
+function workspaceConfigForExport(workspaceManager) {
+    try {
+        // Keep this route aligned with OAuth's canonical-origin pinning without
+        // exposing WorkspaceManager's whole mutable config object.
+        const raw = JSON.parse(readFileSync(join(workspaceManager.getWorkspacePath(), '.studiograph', 'workspace.json'), 'utf-8'));
+        return raw;
+    }
+    catch {
+        return {};
+    }
+}
+export async function registerArtifactExportApiRoutes(fastify, workspaceManager, authService, renderers = {}) {
+    const accessService = new WorkspaceAccessService(workspaceManager, authService);
+    const graphForRead = (req, reply, repoName) => resolveGraphForRead(accessService, req, reply, repoName);
+    const renderPng = renderers.renderPng ?? renderArtifactPng;
+    const renderPngFiles = renderers.renderPngFiles ?? (renderers.renderPng
+        ? async (bundle, options) => [{ index: 0, bytes: await renderPng(bundle, options) }]
+        : renderArtifactPngFiles);
+    const renderPdf = renderers.renderPdf ?? renderArtifactPdf;
+    const exportBaseUrl = (req, reply) => {
+        try {
+            return resolveCanonicalBaseUrl(workspaceConfigForExport(workspaceManager), req);
+        }
+        catch (err) {
+            if (err instanceof CanonicalUrlError) {
+                reply.status(503).send({ error: 'Artifact export base URL is not configured' });
+                return null;
+            }
+            throw err;
+        }
+    };
+    async function handleDownload(req, reply, format) {
+        const { repo, id } = req.params;
+        const graph = graphForRead(req, reply, repo);
+        if (!graph)
+            return;
+        let entity;
+        try {
+            entity = graph.get('artifact', id);
+        }
+        catch (err) {
+            return reply.status(404).send({ error: err.message ?? `Artifact not found: ${id}` });
+        }
+        if (!entity) {
+            return reply.status(404).send({ error: `Artifact not found: ${id}` });
+        }
+        let rawBundle;
+        try {
+            rawBundle = JSON.parse(entity.document?.content ?? '');
+        }
+        catch {
+            return reply.status(422).send({ error: 'Artifact body is not a valid JSON bundle' });
+        }
+        const validation = validateArtifactBundle(rawBundle);
+        if (!validation.ok || !validation.bundle) {
+            return reply.status(422).send({ error: `Invalid artifact bundle: ${validation.errors.join('; ')}` });
+        }
+        try {
+            reply.header('Cache-Control', 'no-store');
+            reply.header('Content-Disposition', `attachment; filename="${artifactExportFilename(validation.bundle, format)}"`);
+            const userId = String(req.user?.id ?? '0');
+            if (format === 'html') {
+                // D11b export model: bundle every asset the EXPORTING USER can read —
+                // the artifact's repo, workspace-wide stores, and any cross-repo asset
+                // they have access to (per-asset authz; custody transfers to the
+                // authenticated exporter, same trust model as a screenshot). Refs that
+                // don't resolve render as labeled placeholders — never absolutized
+                // back to the workspace (the export CSP carries no network sources,
+                // so an absolute URL couldn't load anyway). No baseHref: a downloaded
+                // file must not phone home.
+                const user = req.user;
+                const assets = exporterAccessibleArtifactAssets(workspaceManager, authService, user, validation.bundle);
+                if (assets.length > HTML_EXPORT_MAX_ASSETS) {
+                    return reply.status(413).send({ error: `Too many assets to bundle (${assets.length} > ${HTML_EXPORT_MAX_ASSETS})` });
+                }
+                // Download the accessible assets through their OWNING repo's graph,
+                // enforcing the byte ceiling against the ACTUAL downloaded length
+                // (index `size` is often null → can't be trusted for the cap).
+                const assetEntries = [];
+                const bundledKeys = new Set();
+                let totalBytes = 0;
+                for (const a of assets) {
+                    let bytes;
+                    try {
+                        bytes = await workspaceManager.getGraph(a.repo).downloadAssetById(a.assetId, a.filename);
+                    }
+                    catch {
+                        continue; // blob missing → ref renders as a placeholder
+                    }
+                    totalBytes += bytes.length;
+                    if (totalBytes > HTML_EXPORT_MAX_TOTAL_BYTES) {
+                        return reply.status(413).send({ error: 'Bundled assets exceed the export size limit' });
+                    }
+                    // assetId (UUID) dir + basename(filename) → safe, collision-free path.
+                    assetEntries.push({ filename: `assets/${a.assetId}/${basename(a.filename)}`, bytes });
+                    bundledKeys.add(`${a.assetId}/${a.filename}`);
+                }
+                const indexHtml = buildFrameDocument(validation.bundle, {
+                    host: 'none',
+                    // A downloaded file self-hosts its chrome: deck stepper, whiteboard
+                    // pan/zoom, or document scroll-reader (interactive standalone).
+                    interactive: true,
+                    librarySources: artifactLibrarySourcesForBundle(validation.bundle),
+                    ...(bundleNeedsPagination(validation.bundle) ? { pagedSource: artifactPagedSource() } : {}),
+                    // Relative-mode resolution: bundled refs → ./assets/..., unbundled →
+                    // placeholders, CSP = no network. URL rewrite + CSP from one value.
+                    assets: { mode: 'relative', bundledKeys },
+                });
+                if (assetEntries.length === 0) {
+                    // Nothing bundled (no refs, or none accessible) → single .html.
+                    reply.header('Content-Type', 'text/html; charset=utf-8');
+                    return reply.send(indexHtml);
+                }
+                const entries = [
+                    { filename: 'index.html', bytes: Buffer.from(indexHtml, 'utf-8') },
+                    ...assetEntries,
+                ];
+                reply.header('Content-Type', 'application/zip');
+                reply.header('Content-Disposition', `attachment; filename="${artifactExportFilename(validation.bundle, 'html').replace(/\.html$/i, '.zip')}"`);
+                return reply.send(await zipArtifactFiles(entries));
+            }
+            // PNG/PDF render in headless Chromium with no session cookie — mint an
+            // artifact-asset token so the page's /api/assets image loads are
+            // authorized (token-mode resolution). Only this path needs the canonical
+            // base URL (the headless page resolves root-relative URLs against it);
+            // the HTML export above is self-contained by construction.
+            const baseUrl = exportBaseUrl(req, reply);
+            if (!baseUrl)
+                return;
+            const { token: renderToken } = mintArtifactAssetTokenForBundle(workspaceManager, authService, repo, id, validation.bundle, userId);
+            if (format === 'png') {
+                const files = await renderPngFiles(validation.bundle, { baseUrl, assetToken: renderToken });
+                if (files.length <= 1) {
+                    reply.header('Content-Type', 'image/png');
+                    return reply.send(files[0]?.bytes ?? Buffer.alloc(0));
+                }
+                const namedFiles = nameArtifactPngFiles(validation.bundle, files);
+                reply.header('Content-Type', 'application/zip');
+                reply.header('Content-Disposition', `attachment; filename="${artifactPngArchiveFilename(validation.bundle)}"`);
+                return reply.send(await zipArtifactPngFiles(namedFiles));
+            }
+            reply.header('Content-Type', 'application/pdf');
+            return reply.send(await renderPdf(validation.bundle, { baseUrl, assetToken: renderToken }));
+        }
+        catch (err) {
+            if (err instanceof ArtifactRenderInstallingError) {
+                // Transient: the background browser install is still running. Tell
+                // clients it's worth retrying (vs the permanent not-installed 503).
+                reply.header('Retry-After', '30');
+                return reply.status(503).send({ error: err.message, installing: true });
+            }
+            if (err instanceof ArtifactRenderExportUnavailableError) {
+                return reply.status(503).send({ error: err.message });
+            }
+            // The client gets a generic message, but the REAL render error (e.g. a
+            // transient bundled-chromium launch failure that no longer detours to the
+            // masking `chrome` channel) must be visible to an operator — log it.
+            req.log.error({ err }, `artifact ${format} export render failed`);
+            return reply.status(500).send({ error: `Failed to render ${format.toUpperCase()} export` });
+        }
+    }
+    fastify.get('/api/repos/:repo/entities/artifact/:id/export/html', (req, reply) => handleDownload(req, reply, 'html'));
+    fastify.get('/api/repos/:repo/entities/artifact/:id/export/png', (req, reply) => handleDownload(req, reply, 'png'));
+    fastify.get('/api/repos/:repo/entities/artifact/:id/export/pdf', (req, reply) => handleDownload(req, reply, 'pdf'));
+}
+//# sourceMappingURL=artifact-export-api.js.map

package/dist/server/routes/artifact-export-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-export-api.js","sourceRoot":"","sources":["../../../src/server/routes/artifact-export-api.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC;AAGtC,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAuB,MAAM,oCAAoC,CAAC;AACjG,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAElG,OAAO,EAAE,+BAA+B,EAAE,mBAAmB,EAAE,MAAM,4CAA4C,CAAC;AAClH,OAAO,EAAE,YAAY,IAAI,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5E,OAAO,EACL,oCAAoC,EACpC,6BAA6B,EAC7B,sBAAsB,EACtB,0BAA0B,EAC1B,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,sBAAsB,EAGtB,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAE5E,OAAO,EAAE,gCAAgC,EAAE,+BAA+B,EAAE,MAAM,2BAA2B,CAAC;AAE9G,6EAA6E;AAC7E,4DAA4D;AAC5D,MAAM,sBAAsB,GAAG,GAAG,CAAC;AACnC,MAAM,2BAA2B,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAetD,SAAS,wBAAwB,CAAC,gBAAkC;IAClE,IAAI,CAAC;QACH,wEAAwE;QACxE,2DAA2D;QAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,EAAE,cAAc,EAAE,gBAAgB,CAAC,EAAE,OAAO,CAAC,CAAwB,CAAC;QAClJ,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,OAAwB,EACxB,gBAAkC,EAClC,WAAwB,EACxB,YAAqC,EAAE;IAEvC,MAAM,aAAa,GAAG,IAAI,sBAAsB,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;IAChF,MAAM,YAAY,GAAG,CAAC,GAAmB,EAAE,KAAmB,EAAE,QAAgB,EAAE,EAAE,CAClF,mBAAmB,CAAC,aAAa,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,IAAI,iBAAiB,CAAC;IAC3D,MAAM,cAAc,GAAG,SAAS,CAAC,cAAc,IAAI,CACjD,SAAS,CAAC,SAAS;QACjB,CAAC,CAAC,KAAK,EAAE,MAAsB,EAAE,OAAqC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;QAClI,CAAC,CAAC,sBAAsB,CAC3B,CAAC;IACF,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,IAAI,iBAAiB,CAAC;IAC3D,MAAM,aAAa,GAAG,CAAC,GAAmB,EAAE,KAAmB,EAAiB,EAAE;QAChF,IAAI,CAAC;YACH,OAAO,uBAAuB,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,EAAE,GAAG,CAAC,CAAC;QAClF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;gBACrC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4CAA4C,EAAE,CAAC,CAAC;gBAChF,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;IAEF,KAAK,UAAU,cAAc,CAC3B,GAA6D,EAC7D,KAAmB,EACnB,MAA8B;QAE9B,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAChC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK;YAAE,OAAO;QAEnB,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACH,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,UAAwB,EAAE,EAAE,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,IAAI,uBAAuB,EAAE,EAAE,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,EAAE,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,SAAkB,CAAC;QACvB,IAAI,CAAC;YACH,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0CAA0C,EAAE,CAAC,CAAC;QACvF,CAAC;QAED,MAAM,UAAU,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;QACrD,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;YACzC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QACvG,CAAC;QAED,IAAI,CAAC;YACH,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;YAC1C,KAAK,CAAC,MAAM,CAAC,qBAAqB,EAAE,yBAAyB,sBAAsB,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;YAEnH,MAAM,MAAM,GAAG,MAAM,CAAE,GAAW,CAAC,IAAI,EAAE,EAAE,IAAI,GAAG,CAAC,CAAC;YAEpD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACtB,sEAAsE;gBACtE,uEAAuE;gBACvE,iEAAiE;gBACjE,uEAAuE;gBACvE,mEAAmE;gBACnE,oEAAoE;gBACpE,sEAAsE;gBACtE,4BAA4B;gBAC5B,MAAM,IAAI,GAAI,GAAW,CAAC,IAA4B,CAAC;gBACvD,MAAM,MAAM,GAAG,gCAAgC,CAAC,gBAAgB,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;gBACxG,IAAI,MAAM,CAAC,MAAM,GAAG,sBAAsB,EAAE,CAAC;oBAC3C,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8BAA8B,MAAM,CAAC,MAAM,MAAM,sBAAsB,GAAG,EAAE,CAAC,CAAC;gBACvH,CAAC;gBACD,oEAAoE;gBACpE,kEAAkE;gBAClE,+DAA+D;gBAC/D,MAAM,YAAY,GAA+C,EAAE,CAAC;gBACpE,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;gBACtC,IAAI,UAAU,GAAG,CAAC,CAAC;gBACnB,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;oBACvB,IAAI,KAAa,CAAC;oBAClB,IAAI,CAAC;wBACH,KAAK,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;oBAC3F,CAAC;oBAAC,MAAM,CAAC;wBACP,SAAS,CAAC,8CAA8C;oBAC1D,CAAC;oBACD,UAAU,IAAI,KAAK,CAAC,MAAM,CAAC;oBAC3B,IAAI,UAAU,GAAG,2BAA2B,EAAE,CAAC;wBAC7C,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6CAA6C,EAAE,CAAC,CAAC;oBAC1F,CAAC;oBACD,uEAAuE;oBACvE,YAAY,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;oBACtF,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAChD,CAAC;gBACD,MAAM,SAAS,GAAG,kBAAkB,CAAC,UAAU,CAAC,MAAM,EAAE;oBACtD,IAAI,EAAE,MAAM;oBACZ,oEAAoE;oBACpE,gEAAgE;oBAChE,WAAW,EAAE,IAAI;oBACjB,cAAc,EAAE,+BAA+B,CAAC,UAAU,CAAC,MAAM,CAAC;oBAClE,GAAG,CAAC,qBAAqB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3F,qEAAqE;oBACrE,oEAAoE;oBACpE,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE;iBAC1C,CAAC,CAAC;gBACH,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC9B,gEAAgE;oBAChE,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;oBACzD,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC/B,CAAC;gBACD,MAAM,OAAO,GAA+C;oBAC1D,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE;oBAClE,GAAG,YAAY;iBAChB,CAAC;gBACF,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;gBAChD,KAAK,CAAC,MAAM,CAAC,qBAAqB,EAAE,yBAAyB,sBAAsB,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC/I,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;YACrD,CAAC;YAED,uEAAuE;YACvE,iEAAiE;YACjE,yEAAyE;YACzE,uEAAuE;YACvE,2DAA2D;YAC3D,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC1C,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,+BAA+B,CAC5D,gBAAgB,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,CAAC,MAAM,EAAE,MAAM,CACnE,CAAC;YAEF,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBACrB,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;gBAC5F,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;oBACtB,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;oBAC1C,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBACxD,CAAC;gBAED,MAAM,UAAU,GAAG,oBAAoB,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gBAClE,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;gBAChD,KAAK,CAAC,MAAM,CAAC,qBAAqB,EAAE,yBAAyB,0BAA0B,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC/G,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,mBAAmB,CAAC,UAAU,CAAC,CAAC,CAAC;YAC3D,CAAC;YAED,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;YAChD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,SAAS,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;QAC9F,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,GAAG,YAAY,6BAA6B,EAAE,CAAC;gBACjD,mEAAmE;gBACnE,oEAAoE;gBACpE,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;gBAClC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1E,CAAC;YACD,IAAI,GAAG,YAAY,oCAAoC,EAAE,CAAC;gBACxD,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACxD,CAAC;YACD,uEAAuE;YACvE,0EAA0E;YAC1E,qEAAqE;YACrE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,YAAY,MAAM,uBAAuB,CAAC,CAAC;YAClE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,MAAM,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CACT,oDAAoD,EACpD,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CACnD,CAAC;IAEF,OAAO,CAAC,GAAG,CACT,mDAAmD,EACnD,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAClD,CAAC;IAEF,OAAO,CAAC,GAAG,CACT,mDAAmD,EACnD,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAClD,CAAC;AACJ,CAAC"}

package/dist/server/routes/artifact-patch-api.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Artifact patch API (P5) — the web canvas applies a USER's direct-manipulation
+ * edit (today: an inline frame-title rename → set_frame_meta) by sending the SAME
+ * frame-addressable op vocabulary the agent uses. The route is op-agnostic, so the
+ * rest of the vocabulary (reorder_frames, set_frame_content, …) works here too as
+ * the canvas grows. One write model, two drivers: this route runs
+ * `patchPersistedArtifact` (the shared load → base_hash check → applyArtifactPatch
+ * → ArtifactStore.write sequence), identical to the MCP `patch_artifact` tool —
+ * OCC-guarded and git-committed, NOT a raw-body autosave.
+ *
+ * Gated on WRITE access (a structural edit, not a view). The request body is
+ * untrusted; `applyArtifactPatch` validates the ops and `ArtifactStore.write`
+ * validates the resulting bundle.
+ */
+import type { FastifyInstance } from 'fastify';
+import { AuthService } from '../../services/auth-service.js';
+import { WorkspaceManager } from '../../core/workspace-manager.js';
+import type { WsHub } from '../ws-hub.js';
+export declare function registerArtifactPatchRoutes(fastify: FastifyInstance, authService: AuthService, workspaceManager: WorkspaceManager, wsHub?: WsHub): Promise<void>;

package/dist/server/routes/artifact-patch-api.js

@@ -0,0 +1,114 @@
+/**
+ * Artifact patch API (P5) — the web canvas applies a USER's direct-manipulation
+ * edit (today: an inline frame-title rename → set_frame_meta) by sending the SAME
+ * frame-addressable op vocabulary the agent uses. The route is op-agnostic, so the
+ * rest of the vocabulary (reorder_frames, set_frame_content, …) works here too as
+ * the canvas grows. One write model, two drivers: this route runs
+ * `patchPersistedArtifact` (the shared load → base_hash check → applyArtifactPatch
+ * → ArtifactStore.write sequence), identical to the MCP `patch_artifact` tool —
+ * OCC-guarded and git-committed, NOT a raw-body autosave.
+ *
+ * Gated on WRITE access (a structural edit, not a view). The request body is
+ * untrusted; `applyArtifactPatch` validates the ops and `ArtifactStore.write`
+ * validates the resulting bundle.
+ */
+import { hasRepoAccess, canWriteRepo } from '../../services/access-control.js';
+import { buildActor } from '../../services/entity-mutations.js';
+import { patchPersistedArtifact, ArtifactPatchBaseHashError, } from '../../services/artifact-patch-runner.js';
+import { ArtifactPatchError } from '../../core/artifact-patch.js';
+import { ArtifactWriteError, serializeArtifactBundle } from '../../services/artifact-store.js';
+import { summarizeArtifactWrite } from '../../core/artifact-warnings.js';
+import { hashArtifactBody } from '../../agent/tools/artifact-tools.js';
+const ARTIFACT = 'artifact';
+export async function registerArtifactPatchRoutes(fastify, authService, workspaceManager, wsHub) {
+    // POST /api/repos/:repo/entities/artifact/:id/patch  { base_hash, ops[] }
+    fastify.post('/api/repos/:repo/entities/artifact/:id/patch', async (req, reply) => {
+        const user = req.user;
+        if (!user)
+            return reply.status(401).send({ error: 'Authentication required' });
+        const { repo, id } = req.params;
+        if (!hasRepoAccess(user, repo, workspaceManager, authService)) {
+            return reply.status(404).send({ error: 'Not found' });
+        }
+        if (!canWriteRepo(user, repo, workspaceManager, authService)) {
+            return reply.status(403).send({ error: `You do not have write access to folder "${repo}"` });
+        }
+        const baseHash = req.body?.base_hash;
+        if (typeof baseHash !== 'string' || !baseHash) {
+            return reply.status(400).send({ error: 'base_hash is required' });
+        }
+        const ops = req.body?.ops;
+        if (!Array.isArray(ops) || ops.length === 0) {
+            return reply.status(400).send({ error: 'ops must be a non-empty array' });
+        }
+        const graph = workspaceManager.getGraph(repo);
+        // Friendly 404 before the shared runner (which throws a generic error from
+        // graph.get).
+        try {
+            graph.get(ARTIFACT, id);
+        }
+        catch {
+            return reply.status(404).send({ error: `Artifact "${id}" not found in "${repo}"` });
+        }
+        try {
+            const { outcome, applied } = await patchPersistedArtifact({
+                graph,
+                actor: buildActor(user),
+                entityId: id,
+                baseHash,
+                ops,
+                label: `Artifact ${repo}/${id}`,
+            });
+            if (!outcome.noop) {
+                wsHub?.broadcast({
+                    type: 'entity_change',
+                    action: outcome.action,
+                    repo,
+                    entityType: outcome.entity.entityType,
+                    entityId: outcome.entityId,
+                    actor: req.user?.displayName ?? 'API',
+                    source: 'api',
+                    timestamp: new Date().toISOString(),
+                });
+            }
+            // The new body hash IS the next base_hash the canvas must send — derived
+            // from the persisted bundle so it matches read_artifact / get_entity.
+            const hash = hashArtifactBody(serializeArtifactBundle(outcome.bundle));
+            return reply.send({
+                ok: true,
+                id: outcome.entityId,
+                action: outcome.action,
+                noop: outcome.noop,
+                hash,
+                changedFrameIds: applied.changedFrameIds,
+                removedFrameIds: applied.removedFrameIds,
+                reordered: applied.reordered,
+                ...summarizeArtifactWrite(outcome.bundle),
+            });
+        }
+        catch (err) {
+            if (err instanceof ArtifactPatchBaseHashError) {
+                return reply.status(409).send({ error: err.message, code: 'STALE_BASE_HASH' });
+            }
+            if (err instanceof ArtifactPatchError) {
+                return reply.status(400).send({ error: err.message, code: 'INVALID_OPS' });
+            }
+            if (err instanceof ArtifactWriteError) {
+                switch (err.code) {
+                    case 'stale':
+                        return reply.status(409).send({ error: 'Artifact changed since you read it.', code: 'STALE_BASE_HASH' });
+                    case 'deleted':
+                        return reply.status(404).send({ error: `Artifact "${id}" no longer exists in "${repo}".` });
+                    case 'blank-overwrite':
+                        return reply.status(400).send({ error: 'These ops would blank the artifact.', code: 'BLANK_OVERWRITE' });
+                    case 'invalid':
+                        return reply.status(400).send({ error: err.message, code: 'INVALID_BUNDLE' });
+                    default:
+                        return reply.status(400).send({ error: err.message });
+                }
+            }
+            return reply.status(400).send({ error: err instanceof Error ? err.message : String(err) });
+        }
+    });
+}
+//# sourceMappingURL=artifact-patch-api.js.map

package/dist/server/routes/artifact-patch-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-patch-api.js","sourceRoot":"","sources":["../../../src/server/routes/artifact-patch-api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,UAAU,EAAE,MAAM,oCAAoC,CAAC;AAChE,OAAO,EACL,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC/F,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AAIvE,MAAM,QAAQ,GAAe,UAAwB,CAAC;AAEtD,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,OAAwB,EACxB,WAAwB,EACxB,gBAAkC,EAClC,KAAa;IAEb,0EAA0E;IAC1E,OAAO,CAAC,IAAI,CAGT,8CAA8C,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACtE,MAAM,IAAI,GAAI,GAAW,CAAC,IAA4B,CAAC;QACvD,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;QAC/E,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,CAAC,EAAE,CAAC;YAC9D,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,CAAC,EAAE,CAAC;YAC7D,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2CAA2C,IAAI,GAAG,EAAE,CAAC,CAAC;QAC/F,CAAC;QAED,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC;QACrC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9C,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC;QAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5C,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAC;QAC5E,CAAC;QAED,MAAM,KAAK,GAAG,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9C,2EAA2E;QAC3E,cAAc;QACd,IAAI,CAAC;YACH,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,mBAAmB,IAAI,GAAG,EAAE,CAAC,CAAC;QACtF,CAAC;QAED,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,sBAAsB,CAAC;gBACxD,KAAK;gBACL,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC;gBACvB,QAAQ,EAAE,EAAE;gBACZ,QAAQ;gBACR,GAAG;gBACH,KAAK,EAAE,YAAY,IAAI,IAAI,EAAE,EAAE;aAChC,CAAC,CAAC;YAEH,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBAClB,KAAK,EAAE,SAAS,CAAC;oBACf,IAAI,EAAE,eAAe;oBACrB,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,IAAI;oBACJ,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU;oBACrC,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,KAAK,EAAG,GAAW,CAAC,IAAI,EAAE,WAAW,IAAI,KAAK;oBAC9C,MAAM,EAAE,KAAK;oBACb,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC,CAAC,CAAC;YACL,CAAC;YAED,yEAAyE;YACzE,sEAAsE;YACtE,MAAM,IAAI,GAAG,gBAAgB,CAAC,uBAAuB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YACvE,OAAO,KAAK,CAAC,IAAI,CAAC;gBAChB,EAAE,EAAE,IAAI;gBACR,EAAE,EAAE,OAAO,CAAC,QAAQ;gBACpB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,IAAI;gBACJ,eAAe,EAAE,OAAO,CAAC,eAAe;gBACxC,eAAe,EAAE,OAAO,CAAC,eAAe;gBACxC,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,GAAG,sBAAsB,CAAC,OAAO,CAAC,MAAM,CAAC;aAC1C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,0BAA0B,EAAE,CAAC;gBAC9C,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;YACjF,CAAC;YACD,IAAI,GAAG,YAAY,kBAAkB,EAAE,CAAC;gBACtC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;YAC7E,CAAC;YACD,IAAI,GAAG,YAAY,kBAAkB,EAAE,CAAC;gBACtC,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;oBACjB,KAAK,OAAO;wBACV,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qCAAqC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;oBAC3G,KAAK,SAAS;wBACZ,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,0BAA0B,IAAI,IAAI,EAAE,CAAC,CAAC;oBAC9F,KAAK,iBAAiB;wBACpB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qCAAqC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;oBAC3G,KAAK,SAAS;wBACZ,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;oBAChF;wBACE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC1D,CAAC;YACH,CAAC;YACD,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/server/routes/artifact-selection-api.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Artifact selection API (P4.4) — the web canvas pushes the user's CURRENT
+ * frame/element selection here so an external MCP agent can read it via the
+ * `get_current_selection` tool. Writes go to the in-memory ArtifactSelectionStore
+ * (per-process, TTL'd); nothing is persisted.
+ *
+ * Read access is the gate: selecting is a view action (the agent's eventual EDIT
+ * is separately gated on write access at patch time). The incoming payload is
+ * untrusted browser input, so it is bounded/normalized before storing.
+ */
+import type { FastifyInstance } from 'fastify';
+import { AuthService } from '../../services/auth-service.js';
+import { WorkspaceManager } from '../../core/workspace-manager.js';
+import type { ArtifactSelectionStore } from '../../services/artifact-selection-store.js';
+export declare function registerArtifactSelectionRoutes(fastify: FastifyInstance, authService: AuthService, workspaceManager: WorkspaceManager, selectionStore: ArtifactSelectionStore): Promise<void>;

package/dist/server/routes/artifact-selection-api.js

@@ -0,0 +1,90 @@
+/**
+ * Artifact selection API (P4.4) — the web canvas pushes the user's CURRENT
+ * frame/element selection here so an external MCP agent can read it via the
+ * `get_current_selection` tool. Writes go to the in-memory ArtifactSelectionStore
+ * (per-process, TTL'd); nothing is persisted.
+ *
+ * Read access is the gate: selecting is a view action (the agent's eventual EDIT
+ * is separately gated on write access at patch time). The incoming payload is
+ * untrusted browser input, so it is bounded/normalized before storing.
+ */
+import { hasRepoAccess } from '../../services/access-control.js';
+const MAX_TARGETS = 24;
+const MAX_PATH = 16;
+function boundedString(value, max) {
+    return typeof value === 'string' ? value.slice(0, max) : '';
+}
+/** Coerce untrusted browser input to the stored shape, dropping junk and bounding
+ *  sizes so the in-memory store can't be bloated by a hostile payload. Returns
+ *  null when there's no usable selection (→ treated as a clear). */
+function normalizeSelection(input) {
+    if (!input || typeof input !== 'object')
+        return null;
+    const raw = input;
+    if (!Array.isArray(raw.targets))
+        return null;
+    const targets = [];
+    for (const t of raw.targets.slice(0, MAX_TARGETS)) {
+        if (!t || typeof t !== 'object')
+            continue;
+        const tr = t;
+        if (typeof tr.frameId !== 'string' || !tr.frameId)
+            continue;
+        targets.push({
+            frameId: tr.frameId.slice(0, 256),
+            frameIndex: Number.isFinite(tr.frameIndex) ? Math.trunc(tr.frameIndex) : 0,
+            selector: boundedString(tr.selector, 240),
+            tagName: boundedString(tr.tagName, 40),
+            text: boundedString(tr.text, 240),
+        });
+    }
+    if (targets.length === 0)
+        return null;
+    const selection = { targets };
+    if (typeof raw.primaryTargetId === 'string')
+        selection.primaryTargetId = raw.primaryTargetId.slice(0, 280);
+    if (Array.isArray(raw.path)) {
+        const path = raw.path.filter((p) => typeof p === 'string').slice(0, MAX_PATH).map((p) => p.slice(0, 120));
+        if (path.length > 0)
+            selection.path = path;
+    }
+    return selection;
+}
+export async function registerArtifactSelectionRoutes(fastify, authService, workspaceManager, selectionStore) {
+    const base = '/api/repos/:repo/entities/artifact/:id/selection';
+    function resolve(req, reply) {
+        const user = req.user;
+        if (!user) {
+            reply.status(401).send({ error: 'Authentication required' });
+            return null;
+        }
+        const { repo, id } = req.params;
+        if (!hasRepoAccess(user, repo, workspaceManager, authService)) {
+            reply.status(404).send({ error: 'Not found' });
+            return null;
+        }
+        return { user, repo, id };
+    }
+    // PUT — set the current selection (body `{ selection }`); an empty/absent
+    // selection clears it (so a deselect that races the PUT still lands as a clear).
+    fastify.put(base, async (req, reply) => {
+        const ctx = resolve(req, reply);
+        if (!ctx)
+            return;
+        const selection = normalizeSelection(req.body?.selection);
+        if (selection)
+            selectionStore.set(String(ctx.user.id), ctx.repo, ctx.id, selection);
+        else
+            selectionStore.clear(String(ctx.user.id), ctx.repo, ctx.id);
+        return reply.send({ ok: true });
+    });
+    // DELETE — explicit clear (deselect / navigate away).
+    fastify.delete(base, async (req, reply) => {
+        const ctx = resolve(req, reply);
+        if (!ctx)
+            return;
+        selectionStore.clear(String(ctx.user.id), ctx.repo, ctx.id);
+        return reply.send({ ok: true });
+    });
+}
+//# sourceMappingURL=artifact-selection-api.js.map

package/dist/server/routes/artifact-selection-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-selection-api.js","sourceRoot":"","sources":["../../../src/server/routes/artifact-selection-api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,OAAO,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAOjE,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,MAAM,QAAQ,GAAG,EAAE,CAAC;AAEpB,SAAS,aAAa,CAAC,KAAc,EAAE,GAAW;IAChD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9D,CAAC;AAED;;oEAEoE;AACpE,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAE7C,MAAM,OAAO,GAA8B,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,SAAS;QAC1C,MAAM,EAAE,GAAG,CAA4B,CAAC;QACxC,IAAI,OAAO,EAAE,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC,OAAO;YAAE,SAAS;QAC5D,OAAO,CAAC,IAAI,CAAC;YACX,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YACjC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,UAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;YACpF,QAAQ,EAAE,aAAa,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,CAAC;YACzC,OAAO,EAAE,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;YACtC,IAAI,EAAE,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC;SAClC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtC,MAAM,SAAS,GAAsB,EAAE,OAAO,EAAE,CAAC;IACjD,IAAI,OAAO,GAAG,CAAC,eAAe,KAAK,QAAQ;QAAE,SAAS,CAAC,eAAe,GAAG,GAAG,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3G,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACvH,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS,CAAC,IAAI,GAAG,IAAI,CAAC;IAC7C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,OAAwB,EACxB,WAAwB,EACxB,gBAAkC,EAClC,cAAsC;IAEtC,MAAM,IAAI,GAAG,kDAAkD,CAAC;IAEhE,SAAS,OAAO,CAAC,GAAQ,EAAE,KAAU;QACnC,MAAM,IAAI,GAAG,GAAG,CAAC,IAA4B,CAAC;QAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACzF,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAsC,CAAC;QAChE,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,CAAC,EAAE,CAAC;YAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC/H,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAC5B,CAAC;IAED,0EAA0E;IAC1E,iFAAiF;IACjF,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACrC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,MAAM,SAAS,GAAG,kBAAkB,CAAE,GAAG,CAAC,IAA4C,EAAE,SAAS,CAAC,CAAC;QACnG,IAAI,SAAS;YAAE,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;;YAC/E,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACjE,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,sDAAsD;IACtD,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACxC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5D,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/server/routes/asset-api.d.ts

@@ -4,7 +4,93 @@
  * POST /api/repos/:repo/entities/:type/:id/assets — multipart image upload
  * GET  /api/assets/*                               — serve local assets
  */
-import type { FastifyInstance } from 'fastify';
+import type { FastifyInstance, FastifyReply } from 'fastify';
 import type { WorkspaceManager } from '../../core/workspace-manager.js';
 import { AuthService } from '../../services/auth-service.js';
-export declare function registerAssetApiRoutes(fastify: FastifyInstance, workspaceManager: WorkspaceManager, authService: AuthService): Promise<void>;
+import type { WsHub } from '../ws-hub.js';
+/** Whether the same-origin proxy transport serves this file type (images +
+ *  fonts — the subresources a CSP-pinned sandboxed iframe loads). The share
+ *  asset route uses this to pick proxy vs the default serve for other types
+ *  (e.g. a PDF download link on a shared doc keeps the cached R2 302). */
+export declare function isProxyableAssetFilename(filename: string): boolean;
+/**
+ * Serve an immutable-key asset's bytes once authorization has already been
+ * decided by the caller. This is the shared serving entry behind BOTH the
+ * authed `/api/assets/:assetId/:filename` route (authz = hasRepoAccess) and the
+ * public `/api/share/:token/asset/...` route (authz = valid token + repo scope).
+ *
+ * It does serving ONLY — R2 302-redirect vs local stream, path-segment
+ * hardening, and cache headers. The index lookup, filename match, and the
+ * access decision stay in each route so neither surface can drift into serving
+ * a file the other wouldn't authorize.
+ *
+ * Mechanically this is a THIN WRAPPER over the generic `serveBackendObject`
+ * primitive (the same primitive that backs conversation-scratch images), so
+ * both surfaces share one serving codepath. Two asset-specific concerns stay
+ * here as pre-steps rather than leaking into the generic primitive:
+ *   1. The R2 FONT branch — fonts are proxied through the app origin (not 302'd)
+ *      with cross-origin CORS headers, and HEAD is answered from the indexed
+ *      size WITHOUT downloading the bytes. This is unique to the catalog.
+ *   2. The catalog's stricter local segment hardening (rejects a `.`-prefixed
+ *      filename, `/` or `\` in either segment), preserved verbatim.
+ *
+ * The owning `repo` must be resolved by the caller (from the asset index) so the
+ * correct graph/backend is selected. Always fail-closed with 404 — never leak
+ * existence.
+ */
+export declare function serveIndexedAsset(workspaceManager: WorkspaceManager, reply: FastifyReply, opts: {
+    assetId: string;
+    filename: string;
+    repo: string;
+    isHead: boolean;
+    size?: number | null;
+    /** Artifact-asset token path: serve same-origin (no R2 302) with
+     *  revalidate+ETag so the route's per-serve access re-check stays
+     *  authoritative and the CSP-locked sandbox can load the bytes. */
+    proxyR2?: boolean;
+    /** Caller's If-None-Match, so the proxy path can answer 304. */
+    ifNoneMatch?: string;
+}): Promise<unknown>;
+/**
+ * Generic backend-object serving primitive (composer-vision-attach / E2a). Serves
+ * bytes for a RAW backend key once the caller has decided authorization: R2 → 302
+ * to a method-bound signed URL; local → stream from `.studiograph/assets/{key}`
+ * with a sandbox CSP + nosniff. The R2 signer is INJECTED so the caller controls
+ * which keyspace is signed (catalog asset vs conversation-scratch image), and the
+ * cache header may be a single value or a per-backend pair. Always fail-closed 404.
+ *
+ * This is the single serving codepath behind BOTH `serveIndexedAsset` (the
+ * catalog, which layers an R2 font pre-step + stricter segment hardening on top)
+ * and the conversation-scratch image route.
+ */
+export declare function serveBackendObject(workspaceManager: WorkspaceManager, reply: FastifyReply, opts: {
+    /** Any repo whose graph reaches the workspace-global backend. */
+    repo: string;
+    /** Full backend key, e.g. `chat-scratch/{sessionId}/{imageId}/{filename}`. */
+    key: string;
+    /** Display filename — drives content-type fallback + headers. */
+    filename: string;
+    /** Explicit content type (from the metadata row). Falls back to ext. */
+    contentType?: string;
+    isHead: boolean;
+    /**
+     * Cache-Control. A single string is used for both backends; a `{r2, local}`
+     * pair lets callers diverge (catalog: R2 private/4h vs local immutable/1y).
+     */
+    cacheControl: string | {
+        r2: string;
+        local: string;
+    };
+    /** On the local path, emit cross-origin font CORS headers (catalog fonts). */
+    fontHeaders?: boolean;
+    /** 404 body message (catalog uses 'Asset not found'). Defaults to 'Not found'. */
+    notFoundError?: string;
+    /** Caller's If-None-Match. The local path always emits a strong ETag
+     *  (the immutable key), so a revalidating client gets a bytes-free 304 —
+     *  and a DELETED key gets an honest 404 instead of a year of cached
+     *  ghost renders. */
+    ifNoneMatch?: string;
+    /** Method-bound R2 signer for `key` (only invoked on the R2 backend). */
+    signR2Url: (method: 'GET' | 'HEAD') => Promise<string>;
+}): Promise<unknown>;
+export declare function registerAssetApiRoutes(fastify: FastifyInstance, workspaceManager: WorkspaceManager, authService: AuthService, wsHub?: WsHub): Promise<void>;