[REVIEW BUNDLE] S3 image storage + storage management (will be split into 4 PRs)#157

Closed

OhYee wants to merge 14 commits into

ZimengXiong:mainfrom

OhYee:review/s3-image-storage-bundle

Commits on Apr 28, 2026

feat(s3): add S3 image upload support for Excalidraw drawings

OhYee
and
claude
committed
fix(s3): validate fileId before using as S3 key segment

OhYee
and
claude
committed
fix(files): authorise GET /files/:fileId via drawing access, not by guessability

OhYee
and
claude
committed
fix(s3): forward S3_FORCE_PATH_STYLE config to initS3()

OhYee
and
claude
committed
refactor(s3): move image upload from frontend to backend

OhYee
and
claude
committed
fix(s3): validate fileId before using as S3 key segment

OhYee
and
claude
committed
fix(drawings): version pre-check, non-owner gate, DELETE-time S3 cleanup

OhYee
and
claude
committed
fix(import): pre-resolve drawing id, bound parallel S3 uploads

OhYee
and
claude
committed
feat(storage): add per-drawing storage management

OhYee
and
claude
committed
fix(storage): invalidate cache, share-aware orphan deletion, version bump

OhYee
and
claude
committed
fix(storage): notify open editors of server-side mutations

OhYee
and
claude
committed
test(storage): replace tautological tests with real route integration

OhYee
and
claude
committed
fix(storage): bump version on trim instead of resetting to 1

OhYee
and
claude
committed
fix(sqlite): enable WAL + busy_timeout, apply before serving

OhYee
and
claude
committed