[{"_1":2,"_173":-5,"_174":-5},"loaderData",{"_3":4,"_91":92},"root",{"_5":6,"_34":35,"_64":65},"ctx",{"_7":8,"_23":-5,"_24":25,"_26":27,"_28":20,"_29":20,"_30":20,"_31":32,"_33":20},"auth",{"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20,"_21":22},"sessionClaims","sessionId","sessionStatus","userId","actor","orgId","orgRole","orgSlug","orgPermissions","factorVerificationAge","isAuthenticated",false,"tokenType","session_token","user","preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","notificationCount",0,"flagDenols","ENV",{"_36":37,"_38":39,"_40":41,"_42":43,"_44":45,"_46":47,"_48":49,"_50":51,"_52":53,"_54":55,"_56":57,"_58":59,"_60":61,"_62":63},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","VAL_RUNTIME_NAME","prod","RENDER_GIT_COMMIT","f81bf4353089432cd96664c549e58fb071329db3","RENDER_GIT_BRANCH","main","CLERK_PUBLISHABLE_KEY","pk_live_Y2xlcmsudmFsLnRvd24k","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","API_URL","https://api.val.town","clerkState",{"_66":67},"__internal_clerk_state",{"_68":69,"_70":45,"_71":72,"_73":72,"_74":20,"_75":72,"_76":72,"_77":72,"_78":72,"_79":80,"_89":20,"_90":20},"__clerk_ssr_state",{"_21":22,"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20},"__publishableKey","__proxyUrl","","__domain","__isSatellite","__signInUrl","__signUpUrl","__afterSignInUrl","__afterSignUpUrl","__clerk_debug",{"_81":20,"_19":20,"_82":72,"_83":84,"_85":72,"_86":45,"_87":20,"_88":72},"isSignedIn","proxyUrl","reason","session-token-and-uat-missing","message","publishableKey","isSatellite","domain","__telemetryDisabled","__telemetryDebug","routes/embed.x.$handle.$name.$",{"_93":94,"_95":96,"_97":98,"_99":100,"_146":147,"_170":171,"_172":-5},"handle","c15r","name","ContextualLite","path","src/storage/files-store.ts","project",{"_101":102,"_95":96,"_103":104,"_105":-5,"_106":20,"_107":108,"_109":-5,"_110":-5,"_12":111,"_112":-5,"_113":20,"_114":-5,"_115":32,"_14":116,"_117":118,"_119":118,"_120":121,"_122":121,"_123":121,"_124":118,"_125":118,"_23":126,"_129":130,"_132":133,"_145":20},"id","c5961c8a-4557-11f0-999b-76b3cceeab13","createdAt",["D",1749490372788],"deletedAt","legacyEnvVars","privacy","public","description","imageUrl","21f2e37e-8066-4730-9dc7-d27cf8d3c9f3","pinnedFileId","pinPreview","screenshotVersion","likeCount","0630d977-f678-453e-926c-52043293f59f","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_93":94,"_127":128},"profileImageUrl","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18yb2RJNlc1czZ1NlpZRmoxdGJ2eFVNNVhmeTYifQ","org",{"_93":94,"_131":128},"avatar","branch",{"_134":135,"_95":43,"_101":136,"_137":102,"_138":-5,"_139":-5,"_140":-5,"_141":-5,"_142":-5,"_143":96,"_144":94},"version",560,"c5966aa0-4557-11f0-999b-76b3cceeab13","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","isOwned","file",{"_101":148,"_95":149,"_150":151,"_152":153,"_154":136,"_155":156,"_157":158,"_103":159,"_134":160,"_161":162,"_163":164,"_165":20,"_166":-5,"_97":167},"fa3f8f5a-59ea-11f0-91ef-f69ea79377d9","files-store.ts","fileId","0176517e-482e-11f0-a96d-76b3cceeab13","parentId","338c38a4-b6f8-498d-8466-5e15fa8a1559","branchId","branchVersion",471,"latest",true,["D",1751752620408],28,"fileType","script","content","/**\n * Namespaced Files Store abstraction over S3\n * Provides transparent multi-tenancy with namespace isolation and versioning support\n */\n\nimport {\n CopyObjectCommand,\n DeleteObjectCommand,\n GetObjectCommand,\n HeadObjectCommand,\n ListObjectsV2Command,\n ListObjectVersionsCommand,\n PutObjectCommand,\n S3Client,\n} from \"https://esm.sh/@aws-sdk/client-s3@3.490.0\";\nimport { ExtendedAuthContext } from \"../auth/auth-manager.ts\";\n\nexport interface AuthContext {\n namespace: string;\n isDemo: boolean;\n}\n\nexport interface FileItem {\n key: string;\n content: string;\n contentType?: string;\n size?: number;\n lastModified?: Date;\n versionId?: string;\n isLatest?: boolean;\n isReadOnly?: boolean; // For system files accessed by non-admin users\n}\n\nexport interface FileMetadata {\n key: string;\n size: number;\n lastModified: Date;\n contentType: string;\n versionId?: string;\n isLatest?: boolean;\n etag?: string;\n isReadOnly?: boolean; // For system files accessed by non-admin users\n}\n\nexport interface NamespacedFileItem {\n key: string; // Namespaced key: `${namespace}/${userKey}`\n content: string;\n contentType: string;\n metadata?: Record;\n versionId?: string;\n}\n\nexport class NamespacedFilesStore {\n private namespace: string;\n private s3Client: S3Client;\n private bucketName: string;\n private isDemo: boolean;\n\n constructor(authContext: AuthContext, s3Client: S3Client, bucketName: string) {\n this.namespace = authContext.namespace;\n this.s3Client = s3Client;\n this.bucketName = bucketName;\n this.isDemo = authContext.isDemo;\n }\n\n // Convert user key to namespaced key\n private namespacedKey(userKey: string): string {\n // Remove leading slash if present to avoid double slashes\n const cleanKey = userKey.startsWith(\"/\") ? userKey.substring(1) : userKey;\n return `${this.namespace}/${cleanKey}`;\n }\n\n // Strip namespace from key to return to user\n private stripNamespace(namespacedKey: string): string {\n const prefix = `${this.namespace}/`;\n return namespacedKey.startsWith(prefix)\n ? namespacedKey.substring(prefix.length)\n : namespacedKey;\n }\n\n // Utility function to determine MIME type\n private getMimeType(filename: string): string {\n const ext = filename.split(\".\").pop()?.toLowerCase();\n const mimeTypes: Record = {\n \"txt\": \"text/plain\",\n \"json\": \"application/json\",\n \"csv\": \"text/csv\",\n \"xml\": \"application/xml\",\n \"html\": \"text/html\",\n \"js\": \"application/javascript\",\n \"ts\": \"application/typescript\",\n \"md\": \"text/markdown\",\n \"pdf\": \"application/pdf\",\n \"png\": \"image/png\",\n \"jpg\": \"image/jpeg\",\n \"jpeg\": \"image/jpeg\",\n \"gif\": \"image/gif\",\n \"svg\": \"image/svg+xml\",\n \"css\": \"text/css\",\n \"yaml\": \"application/x-yaml\",\n \"yml\": \"application/x-yaml\",\n };\n\n return mimeTypes[ext || \"\"] || \"application/octet-stream\";\n }\n\n async get(key: string, versionId?: string): Promise {\n if (!key) {\n throw new Error(\"Key is required\");\n }\n\n const command = new GetObjectCommand({\n Bucket: this.bucketName,\n Key: this.namespacedKey(key),\n VersionId: versionId,\n });\n\n try {\n const response = await this.s3Client.send(command);\n const content = await response.Body?.transformToString() || \"\";\n\n return {\n key,\n content,\n contentType: response.ContentType || this.getMimeType(key),\n size: response.ContentLength,\n lastModified: response.LastModified,\n versionId: response.VersionId,\n };\n } catch (error: any) {\n if (error.name === \"NoSuchKey\") {\n return null;\n }\n throw error;\n }\n }\n\n // Check if a key is in the system folder and validate write permissions\n private validateSystemFolderAccess(key: string, operation: string, extendedAuthContext?: ExtendedAuthContext): void {\n if (key.startsWith(\"system/\")) {\n if (!extendedAuthContext?.isSystemMode) {\n throw new Error(`Access denied: ${operation} operations on system folder require admin privileges`);\n }\n }\n }\n\n async put(\n key: string,\n content: string,\n contentType?: string,\n metadata?: Record,\n ): Promise<{ versionId?: string }> {\n if (!key || content === undefined) {\n throw new Error(\"Key and content are required\");\n }\n\n // Demo namespace restrictions\n if (this.isDemo) {\n const maxSize = 10 * 1024; // 10KB limit for demo\n if (content.length > maxSize) {\n throw new Error(`Demo accounts are limited to ${maxSize} bytes per file`);\n }\n }\n\n // For system files, use the key as-is (don't add user namespace)\n // For regular files, use the namespaced key\n const finalKey = key.startsWith(\"system/\") ? key : this.namespacedKey(key);\n\n const command = new PutObjectCommand({\n Bucket: this.bucketName,\n Key: finalKey,\n Body: content,\n ContentType: contentType || this.getMimeType(key),\n Metadata: {\n ...metadata,\n namespace: key.startsWith(\"system/\") ? \"system\" : this.namespace,\n originalKey: key,\n uploadedAt: new Date().toISOString(),\n },\n });\n\n const response = await this.s3Client.send(command);\n return {\n versionId: response.VersionId,\n };\n }\n\n // Enhanced put method that supports system folder access with permission checking\n async putWithSystemFolder(\n key: string,\n content: string,\n contentType?: string,\n metadata?: Record,\n extendedAuthContext?: ExtendedAuthContext\n ): Promise<{ versionId?: string }> {\n // Check system folder write permissions\n this.validateSystemFolderAccess(key, \"write\", extendedAuthContext);\n \n // Use the standard put method which now handles system files correctly\n return this.put(key, content, contentType, metadata);\n }\n\n // Enhanced delete method that supports system folder access with permission checking\n async deleteWithSystemFolder(key: string, versionId?: string, extendedAuthContext?: ExtendedAuthContext): Promise {\n if (!key) {\n throw new Error(\"Key is required\");\n }\n\n // Check system folder write permissions\n this.validateSystemFolderAccess(key, \"delete\", extendedAuthContext);\n\n // For system files, use the key as-is (don't add user namespace)\n // For regular files, use the namespaced key\n const finalKey = key.startsWith(\"system/\") ? key : this.namespacedKey(key);\n\n const command = new DeleteObjectCommand({\n Bucket: this.bucketName,\n Key: finalKey,\n VersionId: versionId,\n });\n\n await this.s3Client.send(command);\n }\n\n // Enhanced move method that supports system folder access with permission checking\n async moveWithSystemFolder(sourceKey: string, destinationKey: string, extendedAuthContext?: ExtendedAuthContext): Promise {\n if (!sourceKey || !destinationKey) {\n throw new Error(\"Source and destination keys are required\");\n }\n\n // Check system folder write permissions for both source and destination\n this.validateSystemFolderAccess(sourceKey, \"move\", extendedAuthContext);\n this.validateSystemFolderAccess(destinationKey, \"move\", extendedAuthContext);\n\n // Handle system files correctly\n const finalSourceKey = sourceKey.startsWith(\"system/\") ? sourceKey : this.namespacedKey(sourceKey);\n const finalDestinationKey = destinationKey.startsWith(\"system/\") ? destinationKey : this.namespacedKey(destinationKey);\n\n // Copy object to new location\n const copyCommand = new CopyObjectCommand({\n Bucket: this.bucketName,\n CopySource: `${this.bucketName}/${finalSourceKey}`,\n Key: finalDestinationKey,\n });\n\n await this.s3Client.send(copyCommand);\n\n // Delete original object\n await this.deleteWithSystemFolder(sourceKey, undefined, extendedAuthContext);\n }\n\n // Enhanced copy method that supports system folder access with permission checking\n async copyWithSystemFolder(sourceKey: string, destinationKey: string, extendedAuthContext?: ExtendedAuthContext): Promise<{ versionId?: string }> {\n if (!sourceKey || !destinationKey) {\n throw new Error(\"Source and destination keys are required\");\n }\n\n // Check system folder write permissions for destination (reading source is always allowed)\n this.validateSystemFolderAccess(destinationKey, \"copy\", extendedAuthContext);\n\n // Handle system files correctly\n const finalSourceKey = sourceKey.startsWith(\"system/\") ? sourceKey : this.namespacedKey(sourceKey);\n const finalDestinationKey = destinationKey.startsWith(\"system/\") ? destinationKey : this.namespacedKey(destinationKey);\n\n const copyCommand = new CopyObjectCommand({\n Bucket: this.bucketName,\n CopySource: `${this.bucketName}/${finalSourceKey}`,\n Key: finalDestinationKey,\n });\n\n const response = await this.s3Client.send(copyCommand);\n return {\n versionId: response.VersionId,\n };\n }\n\n async delete(key: string, versionId?: string): Promise {\n if (!key) {\n throw new Error(\"Key is required\");\n }\n\n const command = new DeleteObjectCommand({\n Bucket: this.bucketName,\n Key: this.namespacedKey(key),\n VersionId: versionId,\n });\n\n await this.s3Client.send(command);\n }\n\n async list(prefix?: string, limit: number = 100): Promise {\n if (limit <= 0 || limit > 1000) {\n throw new Error(\"Limit must be between 1 and 1000\");\n }\n\n const keyPrefix = prefix\n ? this.namespacedKey(prefix)\n : `${this.namespace}/`;\n\n const command = new ListObjectsV2Command({\n Bucket: this.bucketName,\n Prefix: keyPrefix,\n MaxKeys: limit,\n });\n\n const response = await this.s3Client.send(command);\n\n return (response.Contents || []).map(object => ({\n key: this.stripNamespace(object.Key || \"\"),\n size: object.Size || 0,\n lastModified: object.LastModified || new Date(),\n contentType: this.getMimeType(object.Key || \"\"),\n etag: object.ETag,\n }));\n }\n\n async listVersions(key?: string, limit: number = 100): Promise {\n if (limit <= 0 || limit > 1000) {\n throw new Error(\"Limit must be between 1 and 1000\");\n }\n\n const keyPrefix = key\n ? this.namespacedKey(key)\n : `${this.namespace}/`;\n\n const command = new ListObjectVersionsCommand({\n Bucket: this.bucketName,\n Prefix: keyPrefix,\n MaxKeys: limit,\n });\n\n const response = await this.s3Client.send(command);\n\n const versions: FileMetadata[] = [];\n\n // Add object versions\n if (response.Versions) {\n versions.push(...response.Versions.map(version => ({\n key: this.stripNamespace(version.Key || \"\"),\n size: version.Size || 0,\n lastModified: version.LastModified || new Date(),\n contentType: this.getMimeType(version.Key || \"\"),\n versionId: version.VersionId,\n isLatest: version.IsLatest,\n etag: version.ETag,\n })));\n }\n\n // Add delete markers (if any)\n if (response.DeleteMarkers) {\n versions.push(...response.DeleteMarkers.map(marker => ({\n key: this.stripNamespace(marker.Key || \"\"),\n size: 0,\n lastModified: marker.LastModified || new Date(),\n contentType: \"application/x-delete-marker\",\n versionId: marker.VersionId,\n isLatest: marker.IsLatest,\n })));\n }\n\n // Sort by last modified date (newest first)\n return versions.sort((a, b) => b.lastModified.getTime() - a.lastModified.getTime());\n }\n\n async move(sourceKey: string, destinationKey: string): Promise {\n if (!sourceKey || !destinationKey) {\n throw new Error(\"Source and destination keys are required\");\n }\n\n // Copy object to new location\n const copyCommand = new CopyObjectCommand({\n Bucket: this.bucketName,\n CopySource: `${this.bucketName}/${this.namespacedKey(sourceKey)}`,\n Key: this.namespacedKey(destinationKey),\n });\n\n await this.s3Client.send(copyCommand);\n\n // Delete original object\n await this.delete(sourceKey);\n }\n\n async copy(sourceKey: string, destinationKey: string): Promise<{ versionId?: string }> {\n if (!sourceKey || !destinationKey) {\n throw new Error(\"Source and destination keys are required\");\n }\n\n const copyCommand = new CopyObjectCommand({\n Bucket: this.bucketName,\n CopySource: `${this.bucketName}/${this.namespacedKey(sourceKey)}`,\n Key: this.namespacedKey(destinationKey),\n });\n\n const response = await this.s3Client.send(copyCommand);\n return {\n versionId: response.VersionId,\n };\n }\n\n async exists(key: string): Promise {\n if (!key) {\n throw new Error(\"Key is required\");\n }\n\n try {\n const command = new HeadObjectCommand({\n Bucket: this.bucketName,\n Key: this.namespacedKey(key),\n });\n\n await this.s3Client.send(command);\n return true;\n } catch (error: any) {\n if (error.name === \"NotFound\" || error.name === \"NoSuchKey\") {\n return false;\n }\n throw error;\n }\n }\n\n async getMetadata(key: string, versionId?: string): Promise {\n if (!key) {\n throw new Error(\"Key is required\");\n }\n\n try {\n const command = new HeadObjectCommand({\n Bucket: this.bucketName,\n Key: this.namespacedKey(key),\n VersionId: versionId,\n });\n\n const response = await this.s3Client.send(command);\n\n return {\n key,\n size: response.ContentLength || 0,\n lastModified: response.LastModified || new Date(),\n contentType: response.ContentType || this.getMimeType(key),\n versionId: response.VersionId,\n etag: response.ETag,\n };\n } catch (error: any) {\n if (error.name === \"NotFound\" || error.name === \"NoSuchKey\") {\n return null;\n }\n throw error;\n }\n }\n\n // Enhanced get method that supports system folder access\n async getWithSystemFolder(key: string, versionId?: string, extendedAuthContext?: ExtendedAuthContext): Promise {\n if (!key) {\n throw new Error(\"Key is required\");\n }\n\n // Check if this is a system folder access\n if (key.startsWith(\"system/\")) {\n // For system folder access, all users can read but only admins can write\n // Use the existing S3 client (which already has admin credentials from environment)\n const command = new GetObjectCommand({\n Bucket: this.bucketName,\n Key: key, // Use key as-is for system files (already includes \"system/\" prefix)\n VersionId: versionId,\n });\n\n try {\n const response = await this.s3Client.send(command);\n const content = await response.Body?.transformToString() || \"\";\n\n return {\n key,\n content,\n contentType: response.ContentType || this.getMimeType(key),\n size: response.ContentLength,\n lastModified: response.LastModified,\n versionId: response.VersionId,\n isReadOnly: !extendedAuthContext?.isSystemMode, // Read-only for non-admin users\n };\n } catch (error: any) {\n if (error.name === \"NoSuchKey\") {\n return null;\n }\n throw error;\n }\n }\n\n // For regular files, use the standard get method\n const result = await this.get(key, versionId);\n return result;\n }\n\n // Enhanced list method that supports system folder access\n async listWithSystemFolder(prefix?: string, limit: number = 100, extendedAuthContext?: ExtendedAuthContext): Promise {\n if (limit <= 0 || limit > 1000) {\n throw new Error(\"Limit must be between 1 and 1000\");\n }\n\n const results: FileMetadata[] = [];\n\n // Always include system files for all users (shared read-only access)\n if (!prefix || prefix.startsWith(\"system/\")) {\n const systemPrefix = prefix?.startsWith(\"system/\") ? prefix.substring(7) : \"\";\n \n // For system files, use the existing S3 client (which already has admin credentials)\n // This allows all users to see system files, but only admins can modify them\n const systemCommand = new ListObjectsV2Command({\n Bucket: this.bucketName,\n Prefix: systemPrefix ? `system/${systemPrefix}` : \"system/\",\n MaxKeys: Math.min(limit, 500), // Reserve half the limit for system files\n });\n\n try {\n const systemResponse = await this.s3Client.send(systemCommand);\n const systemFiles = (systemResponse.Contents || []).map(object => ({\n key: object.Key || \"\", // Use the full key as-is from S3\n size: object.Size || 0,\n lastModified: object.LastModified || new Date(),\n contentType: this.getMimeType(object.Key || \"\"),\n etag: object.ETag,\n isReadOnly: !extendedAuthContext?.isSystemMode, // Read-only for non-admin users\n }));\n results.push(...systemFiles);\n } catch (error: any) {\n console.warn(\"System folder access failed:\", error.message);\n }\n }\n\n // If no prefix or prefix doesn't start with \"system/\", include user files\n if (!prefix || !prefix.startsWith(\"system/\")) {\n const userFiles = await this.list(prefix, limit - results.length);\n results.push(...userFiles);\n }\n\n // Sort by key and limit results\n return results\n .sort((a, b) => a.key.localeCompare(b.key))\n .slice(0, limit);\n }\n\n // Utility method to get namespace info (for debugging/admin)\n getNamespaceInfo(): { namespace: string; isDemo: boolean } {\n return {\n namespace: this.namespace,\n isDemo: this.isDemo,\n };\n }\n}","deleted","label",[168,169,149],"src","storage","permalink","https://www.val.town/x/c15r/ContextualLite/code/src/storage/files-store.ts","extension","actionData","errors"]