Repository navigation

feat(storage): put file visibility in the key and open only public/* to anonymous reads - #1422

Merged

iammukeshm merged 15 commits into

mainfrom

feat/storage-visibility-prefix

Sep 30, 2026

Merged

feat(storage): put file visibility in the key and open only public/* to anonymous reads#1422
iammukeshm merged 15 commits into
mainfrom
feat/storage-visibility-prefix

Commits on Sep 30, 2026
- feat(storage): add CopyAsync and put UploadAsync objects under public/
  
  iammukeshm
  and
  claude
  committed
  99ea2ff
- feat(files): encode visibility in the storage key and move objects on visibility change
  
  iammukeshm
  and
  claude
  committed
  ed310bd
- feat(catalog,identity): follow FileAsset key moves in persisted public URLs
  
  iammukeshm
  and
  claude
  committed
  d8c51a0
- feat(files): migrate legacy public files under public/ on startup
  
  iammukeshm
  and
  claude
  committed
  317ff2f
- fix(apphost): grant anonymous read on public/* only in the Aspire bucket policy
  
  iammukeshm
  and
  claude
  committed
  890924b
- fix(terraform): open only the public/ prefix to anonymous and CloudFront reads
  
  iammukeshm
  and
  claude
  committed
  b24d3dd
- docs(agents): document visibility-in-key storage layout
  
  iammukeshm
  and
  claude
  committed
  03bb7cd
- fix(files): never repoint a file row without a confirmed copy
  
  iammukeshm
  and
  claude
  committed
  a0e8651
- fix(compose): serve public files from the public/* prefix and document the S3 port
  
  iammukeshm
  and
  claude
  committed
  bfc7c30
- fix(storage): refund quota only when a delete actually removed the object
  
  iammukeshm
  and
  claude
  committed
  f0c2ace
- fix(catalog,identity): store the current public URL when a file's object moves
  
  iammukeshm
  and
  claude
  committed
  fe9aa11
- fix(files): serialize storage moves per file and make the old-object delete durable
  
  iammukeshm
  and
  claude
  committed
  17a12dd
- fix(files): make the legacy public-key migration progress past failures and retry
  
  iammukeshm
  and
  claude
  committed
  325d8f3
- docs: describe locked moves, durable deletes and provider caveats for storage keys
  
  iammukeshm
  and
  claude
  committed
  fee764a
- fix(files): only index legacy public keys in the migration index
  
  iammukeshm
  and
  claude
  committed
  84f5cf0

Commits

Commits on Sep 30, 2026