studiograph 1.3.48-next.28 → 1.3.48-next.281

package/dist/services/assets/base.js

@@ -1,8 +1,18 @@
 /**
  * Base types and interfaces for asset management
  */
+import { assetUploadExtensions } from '../../core/format-registry.js';
 /**
- * Content type mappings
+ * Content type mappings.
+ *
+ * TODO(import-refactor): this map + `detectAssetKind` are a second source of
+ * truth for per-extension MIME / kind alongside the format registry
+ * (`src/core/format-registry.ts`, which owns `mimeTypes`). Folding them into
+ * the registry is deferred because it would change observable behavior the
+ * P0 parity refactor must preserve (e.g. svg's asset_kind `other`→`image`,
+ * tsv's Content-Type `octet-stream`→`text/tab-separated-values`). Until that
+ * unification lands, `format-registry.test.ts` guards the two against drift
+ * on every shared extension.
  */
 export const CONTENT_TYPES = {
     // Images
@@ -35,6 +45,11 @@ export const CONTENT_TYPES = {
     zip: 'application/zip',
     tar: 'application/x-tar',
     gz: 'application/gzip',
+    // Fonts
+    woff: 'font/woff',
+    woff2: 'font/woff2',
+    ttf: 'font/ttf',
+    otf: 'font/otf',
     // Design files
     fig: 'application/octet-stream',
     sketch: 'application/octet-stream',
@@ -52,15 +67,98 @@ export function detectContentType(filename) {
     return CONTENT_TYPES[ext] || 'application/octet-stream';
 }
 /**
- * Determine media type from content type
+ * Map a filename to the high-level `asset_kind` written into the asset
+ * entity's frontmatter. Drives icon and viewer selection; coarser than
+ * MIME so the UI doesn't need to enumerate every format. The kind set
+ * is canonical in `ASSET_KINDS` in src/core/validation.ts.
  */
-export function getMediaType(contentType) {
+export function detectAssetKind(filename) {
+    const ext = filename.split('.').pop()?.toLowerCase() || '';
+    if (IMAGE_EXTS.has(ext))
+        return 'image';
+    if (VIDEO_EXTS.has(ext))
+        return 'video';
+    if (AUDIO_EXTS.has(ext))
+        return 'audio';
+    if (ext === 'pdf')
+        return 'pdf';
+    if (SPREADSHEET_EXTS.has(ext))
+        return 'spreadsheet';
+    return 'other';
+}
+// SVG is intentionally excluded — see docs/asset-architecture.md §security.
+// Stored XSS risk: SVG can contain <script> and the GET /api/assets/* route
+// serves files inline with `Content-Type: image/svg+xml`, which executes in
+// the app origin. Users who need vector assets can paste source into a note
+// or embed via the editor's per-entity attach (which also blocks SVG).
+const IMAGE_EXTS = new Set(['jpg', 'jpeg', 'png', 'gif', 'webp', 'avif', 'heic']);
+const VIDEO_EXTS = new Set(['mp4', 'mov', 'webm', 'avi', 'mkv', 'm4v']);
+const AUDIO_EXTS = new Set(['mp3', 'wav', 'm4a', 'ogg', 'flac', 'aac']);
+const SPREADSHEET_EXTS = new Set(['csv', 'xlsx', 'xls', 'numbers', 'tsv']);
+// Other formerly-categorized extensions (indd, sketch, psd, ai, fig, doc/docx,
+// pptx, key, pages, zip, tar, etc.) all fall to `other` for asset_kind. The
+// product has no preview / extract support for them today, so the previous
+// fine-grained kinds were noise. The set of opaque extensions the upload
+// route ACCEPTS now lives in the format registry (see ASSET_UPLOAD_EXTENSIONS
+// below); detectAssetKind only needs the families it classifies distinctly.
+/**
+ * Extension set the asset upload route accepts (bare, no leading dot).
+ *
+ * The format registry (`src/core/format-registry.ts`) is the single source
+ * of truth for this set — it owns the canonical disposition of every format.
+ * This re-export keeps `isAssetUploadExtension` and the (untouched) agent
+ * `import_file` tool working against the same data, with no parallel list to
+ * drift. The registry's `assetUploadExtensions()` reproduces the historical
+ * membership exactly (including `.csv`, which the agent tool stores as an
+ * opaque asset even though the web path writes it as a dataset).
+ */
+export const ASSET_UPLOAD_EXTENSIONS = assetUploadExtensions();
+export function isAssetUploadExtension(filename) {
+    const ext = filename.split('.').pop()?.toLowerCase() || '';
+    return ASSET_UPLOAD_EXTENSIONS.has(ext);
+}
+/**
+ * Whether an asset row should be vision-captioned for search: a raster IMAGE
+ * that is not SVG (SVG stays transitional until sanitize-html is wired). The
+ * single predicate the live caption trigger
+ * (`VectorService.ensureInitialAssetIndexState`) and the boot/recovery sweep
+ * (`asset-index-sweep.ts`) share, so they can't drift on which assets get
+ * captioned.
+ */
+export function isCaptionableImage(mediaType, filename) {
+    if (mediaType !== 'image')
+        return false;
+    const ext = filename.split('.').pop()?.toLowerCase() || '';
+    return ext !== 'svg';
+}
+// Extension fallbacks for getMediaType — families whose files commonly arrive
+// as application/octet-stream (design tools, iWork, legacy font uploads), so
+// MIME alone can't classify them. Membership follows the upload registry's
+// accepted set (assetUploadExtensions); json/xml/txt/md cover legacy and
+// agent-imported rows even though the web upload route doesn't accept them.
+const DESIGN_MEDIA_EXTS = new Set(['ai', 'fig', 'idml', 'indd', 'psd', 'sketch', 'xd']);
+const ARCHIVE_MEDIA_EXTS = new Set(['zip', 'tar', 'gz', 'tgz', '7z', 'rar']);
+const IWORK_MEDIA_EXTS = new Set(['key', 'pages', 'numbers']);
+const FONT_MEDIA_EXTS = new Set(['woff', 'woff2', 'ttf', 'otf']);
+const DATA_MEDIA_EXTS = new Set(['json', 'xml', 'csv', 'tsv', 'yaml', 'yml']);
+const TEXT_MEDIA_EXTS = new Set(['txt', 'md', 'rtf']);
+/**
+ * Determine media type (the user-facing Library category) from content type,
+ * with an extension fallback for octet-stream families. The category is
+ * DERIVED at read time wherever it reaches the UI (asset-listing re-computes
+ * it from contentType + filename), so refining these rules re-categorizes
+ * existing assets with no migration; the stored assets.db `media_type`
+ * column remains for internal queries (e.g. the caption sweep's image check).
+ */
+export function getMediaType(contentType, filename) {
     if (contentType.startsWith('image/'))
         return 'image';
     if (contentType.startsWith('video/'))
         return 'video';
     if (contentType.startsWith('audio/'))
         return 'audio';
+    if (contentType.startsWith('font/') || contentType.includes('font'))
+        return 'font';
     if (contentType.includes('pdf') ||
         contentType.includes('document') ||
         contentType.includes('word') ||
@@ -69,8 +167,55 @@ export function getMediaType(contentType) {
         contentType.includes('presentation')) {
         return 'document';
     }
+    if (contentType.includes('zip') ||
+        contentType.includes('tar') ||
+        contentType.includes('gzip') ||
+        contentType.includes('7z') ||
+        contentType.includes('rar') ||
+        contentType.includes('compressed')) {
+        return 'archive';
+    }
+    // Structured/data text before the text/* catch-all so text/csv lands in
+    // data, not text.
+    if (contentType.includes('json') ||
+        contentType.includes('xml') ||
+        contentType.includes('csv') ||
+        contentType.includes('tab-separated') ||
+        contentType.includes('yaml')) {
+        return 'data';
+    }
+    if (contentType.startsWith('text/'))
+        return 'text';
+    const ext = filename?.split('.').pop()?.toLowerCase() ?? '';
+    if (DESIGN_MEDIA_EXTS.has(ext))
+        return 'design';
+    if (ARCHIVE_MEDIA_EXTS.has(ext))
+        return 'archive';
+    if (IWORK_MEDIA_EXTS.has(ext))
+        return 'document';
+    if (FONT_MEDIA_EXTS.has(ext))
+        return 'font';
+    if (DATA_MEDIA_EXTS.has(ext))
+        return 'data';
+    if (TEXT_MEDIA_EXTS.has(ext))
+        return 'text';
     return 'other';
 }
+/**
+ * Sanitize a filename for use as a storage key segment.
+ *
+ * Replaces every character that's not `[a-zA-Z0-9._-]` with `_`. Preserves
+ * the extension via the `.` allowlist; preserves common separators (`_` and
+ * `-`) so display titles derived from the slug stay readable.
+ *
+ * NOT a security boundary — `validateFilename()` above is the gate that
+ * throws on traversal / hidden / forbidden chars / length. `safeFilename`
+ * is the post-validation key builder. Promoted from
+ * `asset-sidecar-service.ts` so the MCP presign flow can share it.
+ */
+export function safeFilename(name) {
+    return name.replace(/[^a-zA-Z0-9._-]/g, '_');
+}
 /**
  * Validate filename for security
  */

package/dist/services/assets/base.js.map

@@ -1 +1 @@
-{"version":3,"file":"base.js","sourceRoot":"","sources":["../../../src/services/assets/base.ts"],"names":[],"mappings":"AAAA;;GAEG;AAsEH;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAA2B;IACnD,SAAS;IACT,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,YAAY;IACjB,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,WAAW;IAChB,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,eAAe;IACpB,GAAG,EAAE,cAAc;IAEnB,SAAS;IACT,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,iBAAiB;IACtB,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,iBAAiB;IAEtB,QAAQ;IACR,GAAG,EAAE,YAAY;IACjB,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,WAAW;IAEhB,YAAY;IACZ,GAAG,EAAE,iBAAiB;IACtB,GAAG,EAAE,oBAAoB;IACzB,IAAI,EAAE,yEAAyE;IAC/E,GAAG,EAAE,0BAA0B;IAC/B,IAAI,EAAE,mEAAmE;IACzE,GAAG,EAAE,+BAA+B;IACpC,IAAI,EAAE,2EAA2E;IAEjF,WAAW;IACX,GAAG,EAAE,iBAAiB;IACtB,GAAG,EAAE,mBAAmB;IACxB,EAAE,EAAE,kBAAkB;IAEtB,eAAe;IACf,GAAG,EAAE,0BAA0B;IAC/B,MAAM,EAAE,0BAA0B;IAElC,OAAO;IACP,GAAG,EAAE,YAAY;IACjB,IAAI,EAAE,kBAAkB;IACxB,GAAG,EAAE,iBAAiB;IACtB,GAAG,EAAE,UAAU;CAChB,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC3D,OAAO,aAAa,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAC;AAC1D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,WAAmB;IAC9C,IAAI,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAC;IACrD,IAAI,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAC;IACrD,IAAI,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAC;IACrD,IAAI,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC3B,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC;QAChC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC5B,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC;QAC7B,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC;QAClC,WAAW,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACzC,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IAED,2BAA2B;IAC3B,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;QACvB,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QACtB,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IAED,yBAAyB;IACzB,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IAED,iCAAiC;IACjC,MAAM,cAAc,GAAG,oBAAoB,CAAC;IAC5C,IAAI,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IAED,eAAe;IACf,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAC3B,UAAkB,EAClB,QAAgB,EAChB,QAAgB,EAChB,SAAkB;IAElB,OAAO,GAAG,SAAS,IAAI,UAAU,IAAI,QAAQ,IAAI,QAAQ,EAAE,CAAC;AAC9D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAC9B,UAAkB,EAClB,QAAgB,EAChB,SAAkB;IAElB,OAAO,GAAG,SAAS,IAAI,UAAU,IAAI,QAAQ,GAAG,CAAC;AACnD,CAAC"}
+{"version":3,"file":"base.js","sourceRoot":"","sources":["../../../src/services/assets/base.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAgItE;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,aAAa,GAA2B;IACnD,SAAS;IACT,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,YAAY;IACjB,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,WAAW;IAChB,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,eAAe;IACpB,GAAG,EAAE,cAAc;IAEnB,SAAS;IACT,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,iBAAiB;IACtB,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,iBAAiB;IAEtB,QAAQ;IACR,GAAG,EAAE,YAAY;IACjB,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,WAAW;IAEhB,YAAY;IACZ,GAAG,EAAE,iBAAiB;IACtB,GAAG,EAAE,oBAAoB;IACzB,IAAI,EAAE,yEAAyE;IAC/E,GAAG,EAAE,0BAA0B;IAC/B,IAAI,EAAE,mEAAmE;IACzE,GAAG,EAAE,+BAA+B;IACpC,IAAI,EAAE,2EAA2E;IAEjF,WAAW;IACX,GAAG,EAAE,iBAAiB;IACtB,GAAG,EAAE,mBAAmB;IACxB,EAAE,EAAE,kBAAkB;IAEtB,QAAQ;IACR,IAAI,EAAE,WAAW;IACjB,KAAK,EAAE,YAAY;IACnB,GAAG,EAAE,UAAU;IACf,GAAG,EAAE,UAAU;IAEf,eAAe;IACf,GAAG,EAAE,0BAA0B;IAC/B,MAAM,EAAE,0BAA0B;IAElC,OAAO;IACP,GAAG,EAAE,YAAY;IACjB,IAAI,EAAE,kBAAkB;IACxB,GAAG,EAAE,iBAAiB;IACtB,GAAG,EAAE,UAAU;CAChB,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC3D,OAAO,aAAa,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAC;AAC1D,CAAC;AAID;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC3D,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IACxC,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IACxC,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IACxC,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,aAAa,CAAC;IACpD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,4EAA4E;AAC5E,4EAA4E;AAC5E,4EAA4E;AAC5E,4EAA4E;AAC5E,uEAAuE;AACvE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAClF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AACxE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AACxE,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;AAC3E,+EAA+E;AAC/E,4EAA4E;AAC5E,2EAA2E;AAC3E,yEAAyE;AACzE,8EAA8E;AAC9E,4EAA4E;AAE5E;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAgB,qBAAqB,EAAE,CAAC;AAE5E,MAAM,UAAU,sBAAsB,CAAC,QAAgB;IACrD,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC3D,OAAO,uBAAuB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAAiB,EAAE,QAAgB;IACpE,IAAI,SAAS,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC3D,OAAO,GAAG,KAAK,KAAK,CAAC;AACvB,CAAC;AAED,8EAA8E;AAC9E,6EAA6E;AAC7E,2EAA2E;AAC3E,yEAAyE;AACzE,4EAA4E;AAC5E,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;AACxF,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;AAC7E,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;AAC9D,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AACjE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAC9E,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;AAEtD;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,WAAmB,EAAE,QAAiB;IACjE,IAAI,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAC;IACrD,IAAI,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAC;IACrD,IAAI,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAC;IACrD,IAAI,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACnF,IAAI,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC3B,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC;QAChC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC5B,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC;QAC7B,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC;QAClC,WAAW,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACzC,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,IAAI,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC3B,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC3B,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC5B,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC1B,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC3B,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACvC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,wEAAwE;IACxE,kBAAkB;IAClB,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC5B,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC3B,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC3B,WAAW,CAAC,QAAQ,CAAC,eAAe,CAAC;QACrC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC;IACnD,MAAM,GAAG,GAAG,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC5D,IAAI,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IAChD,IAAI,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAClD,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,UAAU,CAAC;IACjD,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IAC5C,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IAC5C,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IAC5C,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IAED,2BAA2B;IAC3B,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;QACvB,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QACtB,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IAED,yBAAyB;IACzB,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IAED,iCAAiC;IACjC,MAAM,cAAc,GAAG,oBAAoB,CAAC;IAC5C,IAAI,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IAED,eAAe;IACf,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAC3B,UAAkB,EAClB,QAAgB,EAChB,QAAgB,EAChB,SAAkB;IAElB,OAAO,GAAG,SAAS,IAAI,UAAU,IAAI,QAAQ,IAAI,QAAQ,EAAE,CAAC;AAC9D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAC9B,UAAkB,EAClB,QAAgB,EAChB,SAAkB;IAElB,OAAO,GAAG,SAAS,IAAI,UAAU,IAAI,QAAQ,GAAG,CAAC;AACnD,CAAC"}

package/dist/services/assets/index.d.ts

@@ -5,10 +5,94 @@
  * with pluggable storage backends (local filesystem or R2)
  */
 import type { AssetInfo, AssetRecord, AssetConfig } from './base.js';
+import { encodeAssetFilename } from '../../core/artifact-asset-urls.js';
 export * from './base.js';
+/**
+ * Result of `graph.uploadAsset`. Extends AssetInfo with the canonical public
+ * URL the caller should embed/store (`publicUrl`) and, on the immutable-key
+ * path, the generated `assetId`. Centralizing the URL here keeps callers from
+ * re-deriving `/api/assets/...` (and getting the scheme wrong).
+ */
+export interface AssetUploadResult extends AssetInfo {
+    assetId?: string;
+    publicUrl: string;
+}
 export declare class AssetService {
     private backend;
+    private storage;
     constructor(config: AssetConfig);
+    /** Which backend this service is bound to. Routes that need different
+     *  serving strategies per backend (e.g. stream local files vs. 302 to
+     *  pre-signed URL for R2) branch on this. */
+    getStorage(): 'local' | 'r2';
+    /** Whether the backend can mint short-lived pre-signed download URLs.
+     *  True for R2; false for local (where the HTTP server streams files
+     *  directly). */
+    supportsSignedUrls(): boolean;
+    /** Whether the backend supports the full pre-signed PUT + HEAD + copy
+     *  lifecycle needed for the MCP presign flow. Tied to all three because a
+     *  backend that signs PUT but can't HEAD-verify the upload would break
+     *  the finalize contract. R2 supports all three; local supports none. */
+    supportsPresignedUploads(): boolean;
+    /** Generate a short-lived pre-signed download URL for an asset.
+     *  Throws if the backend doesn't support pre-signed URLs (local).
+     *  Default expiry is 4 hours (14400s) — see R2AssetBackend.getSignedUrl
+     *  for the rationale. `method` selects the HTTP verb the URL is signed
+     *  against — HEAD requests (link unfurls, OpenGraph) need a HEAD-signed
+     *  URL because pre-signed URLs are method-bound. */
+    getSignedUrl(entityType: string, entityId: string, filename: string, keyPrefix?: string, expiresIn?: number, method?: 'GET' | 'HEAD'): Promise<string>;
+    /** Reject key segments that could escape the prefix. */
+    private assertSafeSegment;
+    /** Upload bytes under an immutable assetId key. Caller records the index row. */
+    uploadByAssetId(assetId: string, filename: string, buffer: Buffer): Promise<AssetInfo>;
+    getSignedUrlByAssetId(assetId: string, filename: string, expiresIn?: number, method?: 'GET' | 'HEAD'): Promise<string>;
+    deleteByAssetId(assetId: string, filename: string): Promise<void>;
+    existsByAssetId(assetId: string, filename: string): Promise<boolean>;
+    private pendingKey;
+    private canonicalKey;
+    signPendingPutUrl(assetId: string, filename: string, contentType: string, expiresIn?: number): Promise<{
+        uploadUrl: string;
+        headers: Record<string, string>;
+    }>;
+    /** HEAD the pending blob. Returns null when the agent never PUT (or the
+     *  TTL already expired). */
+    headPending(assetId: string, filename: string): Promise<{
+        contentType: string;
+        size: number;
+    } | null>;
+    /** Server-side copy pending → canonical (R2's CopyObject — no download). */
+    copyPendingToCanonical(assetId: string, filename: string): Promise<void>;
+    deletePending(assetId: string, filename: string): Promise<void>;
+    /** Bucket lifecycle rules summary for the MCP presign flow's boot-time
+     *  backstop. Returns `null` when the backend has no lifecycle support
+     *  (local) or when the bucket has no rules configured at all. Throws on
+     *  permission / network errors so the caller can decide whether to
+     *  degrade or propagate. */
+    getBucketLifecycle(): Promise<Array<{
+        prefix: string | undefined;
+        expirationDays: number | undefined;
+        enabled: boolean;
+    }> | null>;
+    /** Download an object's bytes by raw key. Validates every path segment —
+     *  the key is derived from a stored `asset_url`, so a `..` segment must
+     *  never reach the backend's path join (arbitrary-file read). */
+    download(key: string): Promise<Buffer>;
+    /** Upload an object's bytes by raw key (non-catalog keyspaces — e.g. the chat
+     *  conversation-scratch images, alongside the existing `pending` keyspace).
+     *  Validates every path segment. Does NOT create an asset-index row. */
+    uploadByKey(key: string, buffer: Buffer, contentType: string): Promise<AssetInfo>;
+    /** Delete an object's bytes by raw key (non-catalog keyspaces). Validates
+     *  every path segment. No-op-safe at the backend level. */
+    deleteByKey(key: string): Promise<void>;
+    /** Pre-signed download URL for a raw key (R2 only; local throws). Validates
+     *  every path segment. Used to 302-redirect non-catalog objects (scratch
+     *  images) the same way catalog assets are served. */
+    getSignedUrlForKey(key: string, method?: 'GET' | 'HEAD', expiresIn?: number): Promise<string>;
+    /** Server-side copy between raw keys (migration + transfer-copy). Validates
+     *  every path segment of both keys — the migration derives srcKey from
+     *  user-editable body URLs, so a `..` in a key segment must never reach the
+     *  backend's path join (arbitrary-file read/write). */
+    copy(srcKey: string, destKey: string): Promise<void>;
     /**
      * Upload asset for an entity
      */
@@ -39,3 +123,9 @@ export declare class AssetService {
      */
     getInfo(entityType: string, entityId: string, filename: string, keyPrefix?: string): Promise<AssetInfo | null>;
 }
+/**
+ * Immutable-key public URL: `/api/assets/{assetId}/{filename}`. The only asset
+ * URL form the app emits now that the legacy 3-segment scheme is retired.
+ */
+export declare function publicUrlForAssetId(assetId: string, filename: string): string;
+export { encodeAssetFilename };

package/dist/services/assets/index.js

@@ -7,25 +7,215 @@
 import { validateFilename, detectContentType, buildAssetKey, buildAssetPrefix, } from './base.js';
 import { LocalAssetBackend } from './local.js';
 import { R2AssetBackend } from './r2.js';
+import { encodeAssetFilename } from '../../core/artifact-asset-urls.js';
 export * from './base.js';
 export class AssetService {
     backend;
+    storage;
     constructor(config) {
         // Initialize appropriate backend
         if (config.storage === 'local') {
             const localPath = config.localPath || '.studiograph/assets';
             this.backend = new LocalAssetBackend(localPath);
+            this.storage = 'local';
         }
         else if (config.storage === 'r2') {
             if (!config.r2Config) {
                 throw new Error('R2 config is required when storage is set to r2');
             }
             this.backend = new R2AssetBackend(config.r2Config);
+            this.storage = 'r2';
         }
         else {
             throw new Error(`Unknown storage backend: ${config.storage}`);
         }
     }
+    /** Which backend this service is bound to. Routes that need different
+     *  serving strategies per backend (e.g. stream local files vs. 302 to
+     *  pre-signed URL for R2) branch on this. */
+    getStorage() {
+        return this.storage;
+    }
+    /** Whether the backend can mint short-lived pre-signed download URLs.
+     *  True for R2; false for local (where the HTTP server streams files
+     *  directly). */
+    supportsSignedUrls() {
+        return typeof this.backend.getSignedUrl === 'function';
+    }
+    /** Whether the backend supports the full pre-signed PUT + HEAD + copy
+     *  lifecycle needed for the MCP presign flow. Tied to all three because a
+     *  backend that signs PUT but can't HEAD-verify the upload would break
+     *  the finalize contract. R2 supports all three; local supports none. */
+    supportsPresignedUploads() {
+        return (typeof this.backend.getSignedPutUrl === 'function' &&
+            typeof this.backend.head === 'function' &&
+            typeof this.backend.copy === 'function');
+    }
+    /** Generate a short-lived pre-signed download URL for an asset.
+     *  Throws if the backend doesn't support pre-signed URLs (local).
+     *  Default expiry is 4 hours (14400s) — see R2AssetBackend.getSignedUrl
+     *  for the rationale. `method` selects the HTTP verb the URL is signed
+     *  against — HEAD requests (link unfurls, OpenGraph) need a HEAD-signed
+     *  URL because pre-signed URLs are method-bound. */
+    async getSignedUrl(entityType, entityId, filename, keyPrefix, expiresIn = 14400, method = 'GET') {
+        if (!this.backend.getSignedUrl) {
+            throw new Error('Pre-signed URLs are not supported by the local asset backend');
+        }
+        // Validate every key component, not just filename. Without this, a
+        // caller passing entityType='..' or entityId='../' could mint a
+        // signed URL for any object in the bucket — including non-asset
+        // prefixes (fonts, tokens, theme blobs). Today the only caller
+        // is the asset route which feeds Fastify path segments (so `/` is
+        // already blocked), but the AssetService is a public surface and
+        // future callers shouldn't have to know about the route's quirks.
+        for (const part of [entityType, entityId, filename]) {
+            if (!part || part.includes('/') || part.includes('\\') || part.includes('..')) {
+                throw new Error('Asset key components cannot contain path separators or traversal sequences');
+            }
+        }
+        validateFilename(filename);
+        const key = buildAssetKey(entityType, entityId, filename, keyPrefix);
+        return await this.backend.getSignedUrl(key, expiresIn, method);
+    }
+    // ── Immutable-key (assetId) surface ──────────────────────────────────────
+    //
+    // New scheme: assets are keyed `{assetId}/{filename}` where assetId is an
+    // immutable UUID. The owning entity's (type,id) is no longer in the key —
+    // ownership/authz lives in AssetIndexService. The legacy `(type,id,filename)`
+    // methods above stay for the dual-read cutover window.
+    /** Reject key segments that could escape the prefix. */
+    assertSafeSegment(seg) {
+        if (!seg || seg.includes('/') || seg.includes('\\') || seg.includes('..')) {
+            throw new Error('Asset key components cannot contain path separators or traversal sequences');
+        }
+    }
+    /** Upload bytes under an immutable assetId key. Caller records the index row. */
+    async uploadByAssetId(assetId, filename, buffer) {
+        this.assertSafeSegment(assetId);
+        validateFilename(filename);
+        if (!buffer || buffer.length === 0)
+            throw new Error('Buffer cannot be empty');
+        const maxSize = 100 * 1024 * 1024;
+        if (buffer.length > maxSize)
+            throw new Error(`File too large (max ${maxSize / 1024 / 1024}MB)`);
+        const contentType = detectContentType(filename);
+        return await this.backend.upload(`${assetId}/${filename}`, buffer, contentType);
+    }
+    async getSignedUrlByAssetId(assetId, filename, expiresIn = 14400, method = 'GET') {
+        if (!this.backend.getSignedUrl) {
+            throw new Error('Pre-signed URLs are not supported by the local asset backend');
+        }
+        this.assertSafeSegment(assetId);
+        validateFilename(filename);
+        return await this.backend.getSignedUrl(`${assetId}/${filename}`, expiresIn, method);
+    }
+    async deleteByAssetId(assetId, filename) {
+        this.assertSafeSegment(assetId);
+        validateFilename(filename);
+        return await this.backend.delete(`${assetId}/${filename}`);
+    }
+    async existsByAssetId(assetId, filename) {
+        this.assertSafeSegment(assetId);
+        validateFilename(filename);
+        return await this.backend.exists(`${assetId}/${filename}`);
+    }
+    // ── Pending-upload (MCP presign) surface ────────────────────────────────
+    //
+    // Quarantine prefix: `pending/{assetId}/{filename}`. The agent PUTs bytes
+    // here directly via a pre-signed URL; finalize HEADs + copies into the
+    // canonical `{assetId}/{filename}` keyspace + deletes pending. An R2
+    // lifecycle rule on `pending/` is the backstop that cleans up orphans the
+    // agent never finalized (see docs/r2-lifecycle.md). All methods throw if
+    // the backend doesn't support pre-signed uploads (local FS).
+    pendingKey(assetId, filename) {
+        this.assertSafeSegment(assetId);
+        validateFilename(filename);
+        return `pending/${assetId}/${filename}`;
+    }
+    canonicalKey(assetId, filename) {
+        this.assertSafeSegment(assetId);
+        validateFilename(filename);
+        return `${assetId}/${filename}`;
+    }
+    async signPendingPutUrl(assetId, filename, contentType, expiresIn = 900) {
+        if (!this.backend.getSignedPutUrl) {
+            throw new Error('Pre-signed uploads are not supported by the local asset backend');
+        }
+        return await this.backend.getSignedPutUrl(this.pendingKey(assetId, filename), contentType, expiresIn);
+    }
+    /** HEAD the pending blob. Returns null when the agent never PUT (or the
+     *  TTL already expired). */
+    async headPending(assetId, filename) {
+        if (!this.backend.head) {
+            throw new Error('HEAD is not supported by the local asset backend');
+        }
+        return await this.backend.head(this.pendingKey(assetId, filename));
+    }
+    /** Server-side copy pending → canonical (R2's CopyObject — no download). */
+    async copyPendingToCanonical(assetId, filename) {
+        return await this.backend.copy(this.pendingKey(assetId, filename), this.canonicalKey(assetId, filename));
+    }
+    async deletePending(assetId, filename) {
+        return await this.backend.delete(this.pendingKey(assetId, filename));
+    }
+    /** Bucket lifecycle rules summary for the MCP presign flow's boot-time
+     *  backstop. Returns `null` when the backend has no lifecycle support
+     *  (local) or when the bucket has no rules configured at all. Throws on
+     *  permission / network errors so the caller can decide whether to
+     *  degrade or propagate. */
+    async getBucketLifecycle() {
+        if (!this.backend.getBucketLifecycle)
+            return null;
+        return await this.backend.getBucketLifecycle();
+    }
+    /** Download an object's bytes by raw key. Validates every path segment —
+     *  the key is derived from a stored `asset_url`, so a `..` segment must
+     *  never reach the backend's path join (arbitrary-file read). */
+    async download(key) {
+        for (const seg of key.split('/')) {
+            this.assertSafeSegment(seg);
+        }
+        return await this.backend.download(key);
+    }
+    /** Upload an object's bytes by raw key (non-catalog keyspaces — e.g. the chat
+     *  conversation-scratch images, alongside the existing `pending` keyspace).
+     *  Validates every path segment. Does NOT create an asset-index row. */
+    async uploadByKey(key, buffer, contentType) {
+        for (const seg of key.split('/')) {
+            this.assertSafeSegment(seg);
+        }
+        return await this.backend.upload(key, buffer, contentType);
+    }
+    /** Delete an object's bytes by raw key (non-catalog keyspaces). Validates
+     *  every path segment. No-op-safe at the backend level. */
+    async deleteByKey(key) {
+        for (const seg of key.split('/')) {
+            this.assertSafeSegment(seg);
+        }
+        return await this.backend.delete(key);
+    }
+    /** Pre-signed download URL for a raw key (R2 only; local throws). Validates
+     *  every path segment. Used to 302-redirect non-catalog objects (scratch
+     *  images) the same way catalog assets are served. */
+    async getSignedUrlForKey(key, method = 'GET', expiresIn = 14400) {
+        if (!this.backend.getSignedUrl) {
+            throw new Error('Pre-signed URLs are not supported by the local asset backend');
+        }
+        for (const seg of key.split('/')) {
+            this.assertSafeSegment(seg);
+        }
+        return await this.backend.getSignedUrl(key, expiresIn, method);
+    }
+    /** Server-side copy between raw keys (migration + transfer-copy). Validates
+     *  every path segment of both keys — the migration derives srcKey from
+     *  user-editable body URLs, so a `..` in a key segment must never reach the
+     *  backend's path join (arbitrary-file read/write). */
+    async copy(srcKey, destKey) {
+        for (const seg of [...srcKey.split('/'), ...destKey.split('/')]) {
+            this.assertSafeSegment(seg);
+        }
+        return await this.backend.copy(srcKey, destKey);
+    }
     /**
      * Upload asset for an entity
      */
@@ -93,4 +283,16 @@ export class AssetService {
         return assets.find(a => a.filename === filename) || null;
     }
 }
+/**
+ * Immutable-key public URL: `/api/assets/{assetId}/{filename}`. The only asset
+ * URL form the app emits now that the legacy 3-segment scheme is retired.
+ */
+export function publicUrlForAssetId(assetId, filename) {
+    return `/api/assets/${assetId}/${encodeAssetFilename(filename)}`;
+}
+// The percent-encoder for asset-URL filename segments lives with its parse
+// counterpart in core/artifact-asset-urls (encode on emit, decode on parse —
+// one owner for the identity contract); re-exported here for the existing
+// server-side import sites.
+export { encodeAssetFilename };
 //# sourceMappingURL=index.js.map

package/dist/services/assets/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/services/assets/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,gBAAgB,GACjB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAEzC,cAAc,WAAW,CAAC;AAE1B,MAAM,OAAO,YAAY;IACf,OAAO,CAAe;IAE9B,YAAY,MAAmB;QAC7B,iCAAiC;QACjC,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,qBAAqB,CAAC;YAC5D,IAAI,CAAC,OAAO,GAAG,IAAI,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAClD,CAAC;aAAM,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YACnC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,CAAC;YACD,IAAI,CAAC,OAAO,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACrD,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,UAAkB,EAClB,QAAgB,EAChB,QAAgB,EAChB,MAAc,EACd,SAAkB;QAElB,oBAAoB;QACpB,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAE3B,kBAAkB;QAClB,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QAED,8BAA8B;QAC9B,MAAM,OAAO,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,QAAQ;QAC3C,IAAI,MAAM,CAAC,MAAM,GAAG,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,uBAAuB,OAAO,GAAG,IAAI,GAAG,IAAI,KAAK,CAAC,CAAC;QACrE,CAAC;QAED,sBAAsB;QACtB,MAAM,WAAW,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAEhD,oBAAoB;QACpB,MAAM,GAAG,GAAG,aAAa,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QAErE,qBAAqB;QACrB,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IAC7D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CACR,UAAkB,EAClB,QAAgB,EAChB,SAAkB;QAElB,MAAM,MAAM,GAAG,gBAAgB,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QACjE,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO;QACX,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,UAAkB,EAClB,QAAgB,EAChB,QAAgB,EAChB,SAAkB;QAElB,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC3B,MAAM,GAAG,GAAG,aAAa,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QACrE,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CACb,UAAkB,EAClB,QAAgB,EAChB,SAAkB;QAElB,MAAM,MAAM,GAAG,gBAAgB,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QACjE,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,UAAkB,EAClB,QAAgB,EAChB,QAAgB,EAChB,SAAkB;QAElB,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC3B,MAAM,GAAG,GAAG,aAAa,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QACrE,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CACX,UAAkB,EAClB,QAAgB,EAChB,QAAgB,EAChB,SAAkB;QAElB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QAChE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,IAAI,IAAI,CAAC;IAC3D,CAAC;CACF"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/services/assets/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,gBAAgB,GACjB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAExE,cAAc,WAAW,CAAC;AAa1B,MAAM,OAAO,YAAY;IACf,OAAO,CAAe;IACtB,OAAO,CAAiB;IAEhC,YAAY,MAAmB;QAC7B,iCAAiC;QACjC,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,qBAAqB,CAAC;YAC5D,IAAI,CAAC,OAAO,GAAG,IAAI,iBAAiB,CAAC,SAAS,CAAC,CAAC;YAChD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACzB,CAAC;aAAM,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YACnC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,CAAC;YACD,IAAI,CAAC,OAAO,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACnD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED;;iDAE6C;IAC7C,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;qBAEiB;IACjB,kBAAkB;QAChB,OAAO,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,KAAK,UAAU,CAAC;IACzD,CAAC;IAED;;;6EAGyE;IACzE,wBAAwB;QACtB,OAAO,CACL,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,KAAK,UAAU;YAClD,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU;YACvC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU,CACxC,CAAC;IACJ,CAAC;IAED;;;;;wDAKoD;IACpD,KAAK,CAAC,YAAY,CAChB,UAAkB,EAClB,QAAgB,EAChB,QAAgB,EAChB,SAAkB,EAClB,SAAS,GAAG,KAAK,EACjB,SAAyB,KAAK;QAE9B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAClF,CAAC;QACD,mEAAmE;QACnE,gEAAgE;QAChE,gEAAgE;QAChE,+DAA+D;QAC/D,kEAAkE;QAClE,iEAAiE;QACjE,kEAAkE;QAClE,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9E,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;YAChG,CAAC;QACH,CAAC;QACD,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC3B,MAAM,GAAG,GAAG,aAAa,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QACrE,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACjE,CAAC;IAED,4EAA4E;IAC5E,EAAE;IACF,0EAA0E;IAC1E,0EAA0E;IAC1E,8EAA8E;IAC9E,uDAAuD;IAEvD,wDAAwD;IAChD,iBAAiB,CAAC,GAAW;QACnC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1E,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;QAChG,CAAC;IACH,CAAC;IAED,iFAAiF;IACjF,KAAK,CAAC,eAAe,CAAC,OAAe,EAAE,QAAgB,EAAE,MAAc;QACrE,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAChC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC3B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC9E,MAAM,OAAO,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;QAClC,IAAI,MAAM,CAAC,MAAM,GAAG,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,OAAO,GAAG,IAAI,GAAG,IAAI,KAAK,CAAC,CAAC;QAChG,MAAM,WAAW,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAChD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,IAAI,QAAQ,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IAClF,CAAC;IAED,KAAK,CAAC,qBAAqB,CACzB,OAAe,EAAE,QAAgB,EAAE,SAAS,GAAG,KAAK,EAAE,SAAyB,KAAK;QAEpF,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAChC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC3B,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,OAAO,IAAI,QAAQ,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACtF,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,OAAe,EAAE,QAAgB;QACrD,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAChC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC3B,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,IAAI,QAAQ,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,OAAe,EAAE,QAAgB;QACrD,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAChC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC3B,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,IAAI,QAAQ,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,2EAA2E;IAC3E,EAAE;IACF,0EAA0E;IAC1E,uEAAuE;IACvE,qEAAqE;IACrE,0EAA0E;IAC1E,yEAAyE;IACzE,6DAA6D;IAErD,UAAU,CAAC,OAAe,EAAE,QAAgB;QAClD,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAChC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC3B,OAAO,WAAW,OAAO,IAAI,QAAQ,EAAE,CAAC;IAC1C,CAAC;IAEO,YAAY,CAAC,OAAe,EAAE,QAAgB;QACpD,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAChC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC3B,OAAO,GAAG,OAAO,IAAI,QAAQ,EAAE,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,iBAAiB,CACrB,OAAe,EACf,QAAgB,EAChB,WAAmB,EACnB,SAAS,GAAG,GAAG;QAEf,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACrF,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe,CACvC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,EAClC,WAAW,EACX,SAAS,CACV,CAAC;IACJ,CAAC;IAED;gCAC4B;IAC5B,KAAK,CAAC,WAAW,CACf,OAAe,EACf,QAAgB;QAEhB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,4EAA4E;IAC5E,KAAK,CAAC,sBAAsB,CAAC,OAAe,EAAE,QAAgB;QAC5D,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAC5B,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,EAClC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CACrC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAAe,EAAE,QAAgB;QACnD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IACvE,CAAC;IAED;;;;gCAI4B;IAC5B,KAAK,CAAC,kBAAkB;QACtB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB;YAAE,OAAO,IAAI,CAAC;QAClD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;IACjD,CAAC;IAED;;qEAEiE;IACjE,KAAK,CAAC,QAAQ,CAAC,GAAW;QACxB,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC1C,CAAC;IAED;;4EAEwE;IACxE,KAAK,CAAC,WAAW,CAAC,GAAW,EAAE,MAAc,EAAE,WAAmB;QAChE,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IAC7D,CAAC;IAED;+DAC2D;IAC3D,KAAK,CAAC,WAAW,CAAC,GAAW;QAC3B,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IAED;;0DAEsD;IACtD,KAAK,CAAC,kBAAkB,CAAC,GAAW,EAAE,SAAyB,KAAK,EAAE,SAAS,GAAG,KAAK;QACrF,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAClF,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACjE,CAAC;IAED;;;2DAGuD;IACvD,KAAK,CAAC,IAAI,CAAC,MAAc,EAAE,OAAe;QACxC,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAChE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,UAAkB,EAClB,QAAgB,EAChB,QAAgB,EAChB,MAAc,EACd,SAAkB;QAElB,oBAAoB;QACpB,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAE3B,kBAAkB;QAClB,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QAED,8BAA8B;QAC9B,MAAM,OAAO,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,QAAQ;QAC3C,IAAI,MAAM,CAAC,MAAM,GAAG,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,uBAAuB,OAAO,GAAG,IAAI,GAAG,IAAI,KAAK,CAAC,CAAC;QACrE,CAAC;QAED,sBAAsB;QACtB,MAAM,WAAW,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAEhD,oBAAoB;QACpB,MAAM,GAAG,GAAG,aAAa,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QAErE,qBAAqB;QACrB,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IAC7D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CACR,UAAkB,EAClB,QAAgB,EAChB,SAAkB;QAElB,MAAM,MAAM,GAAG,gBAAgB,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QACjE,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO;QACX,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,UAAkB,EAClB,QAAgB,EAChB,QAAgB,EAChB,SAAkB;QAElB,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC3B,MAAM,GAAG,GAAG,aAAa,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QACrE,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CACb,UAAkB,EAClB,QAAgB,EAChB,SAAkB;QAElB,MAAM,MAAM,GAAG,gBAAgB,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QACjE,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,UAAkB,EAClB,QAAgB,EAChB,QAAgB,EAChB,SAAkB;QAElB,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC3B,MAAM,GAAG,GAAG,aAAa,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QACrE,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CACX,UAAkB,EAClB,QAAgB,EAChB,QAAgB,EAChB,SAAkB;QAElB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QAChE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,IAAI,IAAI,CAAC;IAC3D,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe,EAAE,QAAgB;IACnE,OAAO,eAAe,OAAO,IAAI,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;AACnE,CAAC;AAED,2EAA2E;AAC3E,6EAA6E;AAC7E,0EAA0E;AAC1E,4BAA4B;AAC5B,OAAO,EAAE,mBAAmB,EAAE,CAAC"}

package/dist/services/assets/local.d.ts

@@ -29,6 +29,15 @@ export declare class LocalAssetBackend implements AssetBackend {
      * reads. Used by the asset manager endpoint.
      */
     listAll(): Promise<AssetRecord[]>;
+    /**
+     * Server-side copy (filesystem copy). Creates the destination directory
+     * and overwrites an existing destination so migration re-runs are idempotent.
+     */
+    /**
+     * Read an object's bytes from the local filesystem.
+     */
+    download(key: string): Promise<Buffer>;
+    copy(srcKey: string, destKey: string): Promise<void>;
     /**
      * Delete a single asset
      */

package/dist/services/assets/local.js

@@ -3,7 +3,7 @@
  *
  * Stores assets in .studiograph/assets/ directory
  */
-import { existsSync, mkdirSync, writeFileSync, readdirSync, unlinkSync, statSync } from 'fs';
+import { existsSync, mkdirSync, writeFileSync, readFileSync, readdirSync, unlinkSync, statSync, copyFileSync } from 'fs';
 import { join, dirname, relative } from 'path';
 import { getMediaType } from './base.js';
 export class LocalAssetBackend {
@@ -50,7 +50,7 @@ export class LocalAssetBackend {
             contentType,
             url: `file:///${filePath}`, // Local file URL
             path: relativePath, // Relative path for markdown
-            mediaType: getMediaType(contentType),
+            mediaType: getMediaType(contentType, filename),
         };
     }
     /**
@@ -83,7 +83,7 @@ export class LocalAssetBackend {
                     contentType,
                     url: `file:///${filePath}`,
                     path: relativePath,
-                    mediaType: getMediaType(contentType),
+                    mediaType: getMediaType(contentType, filename),
                 });
             }
         }
@@ -167,7 +167,7 @@ export class LocalAssetBackend {
                         contentType,
                         url: `file:///${filePath}`,
                         path: relativePath,
-                        mediaType: getMediaType(contentType),
+                        mediaType: getMediaType(contentType, filename),
                         entityType: type,
                         entityId: id,
                     });
@@ -176,6 +176,32 @@ export class LocalAssetBackend {
         }
         return results;
     }
+    /**
+     * Server-side copy (filesystem copy). Creates the destination directory
+     * and overwrites an existing destination so migration re-runs are idempotent.
+     */
+    /**
+     * Read an object's bytes from the local filesystem.
+     */
+    async download(key) {
+        const filePath = this.getFilePath(key);
+        if (!existsSync(filePath)) {
+            throw new Error(`Asset not found: ${key}`);
+        }
+        return readFileSync(filePath);
+    }
+    async copy(srcKey, destKey) {
+        const srcPath = this.getFilePath(srcKey);
+        if (!existsSync(srcPath)) {
+            throw new Error(`Asset not found: ${srcKey}`);
+        }
+        const destPath = this.getFilePath(destKey);
+        const destDir = dirname(destPath);
+        if (!existsSync(destDir)) {
+            mkdirSync(destDir, { recursive: true });
+        }
+        copyFileSync(srcPath, destPath);
+    }
     /**
      * Delete a single asset
      */