feat(s3): add S3 image upload support for Excalidraw drawings#163

Open

OhYee wants to merge 16 commits into

ZimengXiong:mainfrom

OhYee:feat/s3-image-upload

Commits on May 6, 2026

feat(s3): add S3 image upload support for Excalidraw drawings

OhYee
and
claude
committed
fix(s3): validate fileId before using as S3 key segment

OhYee
and
claude
committed
fix(files): authorise GET /files/:fileId via drawing access, not by guessability

OhYee
and
claude
committed
fix(s3): forward S3_FORCE_PATH_STYLE config to initS3()

OhYee
and
claude
committed
fix(files): allow link-share viewers to fetch private-bucket images

OhYee
and
claude
committed
fix(s3): per-(drawing, fileId) S3File rows; share-aware key + URL

OhYee
and
claude
committed
build(tsc): exclude test files from production tsc

OhYee
and
claude
committed
fix(s3): add upgrade migration for composite (drawingId, fileId) PK

OhYee
and
claude
committed
fix(drawings): version pre-check, non-owner gate, DELETE-time S3 cleanup

OhYee
and
claude
committed
fix(import): pre-resolve drawing id, bound parallel S3 uploads

OhYee
and
claude
committed
fix(drawings): copy S3 storage on duplicate so the original can be deleted

OhYee
and
claude
committed
fix(drawings): rewrite preview SVG so it doesn't inline base64 after S3 upload

OhYee
and
claude
committed
fix(drawings): roll back duplicate when an S3 copy fails

OhYee
and
claude
committed
fix(import): regenerate drawing id inside the transaction on race conflict

OhYee
and
claude
committed
fix(s3): preserve S3File rows during composite-PK migration

OhYee
and
claude
committed
fix(s3): http:// publicUrl, bounded uploads, snapshot-then-mutate; tidy docs

OhYee
and
claude
committed