modules/admin: enhance migration with URL processing and cleanup tools

- Add content image URL replacement during migration
  - Upload ./image.webp references to S3 and replace in content
  - Process members pageContent, articles content, projects content
- Add cleanup invalid URLs feature (nullify non-S3 URLs)
- Add delete all migrated data feature for clean re-migration
- Copy no-image.svg fallback from utcode.net

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

Author: aster-void

secrets.dev.yaml

@@ -1,26 +1,30 @@
 DATABASE_URL: ENC[AES256_GCM,data:DT1kdctK4pK5GF/Ysn3ULxVOK3Vu+7cb7sA=,iv:rqxTwZ31IwSJ4IcrKxdiTQLP7KNAmkf8NBTU5sOZpA0=,tag:KqrGB6S1dgKniSbA+z5pmA==,type:str]
 BETTER_AUTH_URL: ENC[AES256_GCM,data:HTm98h7WLoXX92kkFAB3SF8DQE3s,iv:/yFx+YaJHkGi5+mMIDc2dW7bWXEPrLfl4udJAbfx75c=,tag:GxJutrvSDayFdIam7DBWsA==,type:str]
 BETTER_AUTH_SECRET: ENC[AES256_GCM,data:iWFfgHGgQhqxHQPS0MrhOQuCaHFi5Y474Ret+WMkjoeVjo5wGQzGmQaaRcE=,iv:CWOE30RroxpvX9Mm9D/1M9jFhEaILwAqAVxcNhpxGKc=,tag:UXWoHgK39mrc+x9LMSCYiA==,type:str]
-GITHUB_CLIENT_ID: ""
-GITHUB_CLIENT_SECRET: ""
 S3_ENDPOINT: ENC[AES256_GCM,data:8DKqTQi0rLcxlbtQZOYaQOtstRlv,iv:ipAyykxrhdicmfT3l1oI4MSjIN6lVs5EiPVKrke8cJQ=,tag:SCRhvHIkQKJdz0UzhJ6rjQ==,type:str]
 S3_ACCESS_KEY: ENC[AES256_GCM,data:iZkREoP5BhiHvw==,iv:Urs+Ux5JDVsfJleuFAKrFxHF9Xg3/m7uEph0kln5Hv0=,tag:l5tXx04AVGfdAiRJJHb3nw==,type:str]
 S3_SECRET_KEY: ENC[AES256_GCM,data:53MOStu3RyL3CA==,iv:5nzXZ3BV5gYgTj0Kt4YJEDhidLXRqQiq4YyCe4fiXCo=,tag:RkJ+WKqylheG5azXkhRlnw==,type:str]
 S3_BUCKET: ENC[AES256_GCM,data:NOun,iv:UhkU0jiq8pee9jboSLDZT3XK+fG9NrLozhWaEAKxqRM=,tag:omC3c8OYgS2KbbpwIwMWvA==,type:str]
 S3_PUBLIC_URL: ENC[AES256_GCM,data:o/JRmwxFNqjrMHZJ/eoynCIMcjNIC7G3nw==,iv:8Ut2k/uuhobj7i37J3P3Vb/AUhFLofSoWB6X+Y3g39o=,tag:j1XOf1meTwI0ZoqoYeEvjg==,type:str]
+#ENC[AES256_GCM,data:cMR8p8WSoYZev2lnoiZQN08G,iv:3YUTmZWlyQp8ZCdGKOdscsWMizXB/lvcI6igKhUYrtE=,tag:dXYOd1JAk5TOYwqu9t/8fA==,type:comment]
 UNSAFE_DISABLE_AUTH: ENC[AES256_GCM,data:qQfxNQ==,iv:j250CMhk9ZPKEXrVjh+Ls99gEpqhAzQSdCtBhbyDRkA=,tag:9R7/YtAI+VgJUKAPcTHpQg==,type:str]
+#ENC[AES256_GCM,data:Wa3MOB+PLFQu914=,iv:ehB7lgR6bMcLsORKQJ3na5G88UDccNx7FMur6mRSlpM=,tag:3wzRIF6tJAPaS9aZMfyJJA==,type:comment]
+CLOUDFLARE_ZONE_ID: ""
+CLOUDFLARE_API_TOKEN: ""
+GITHUB_CLIENT_ID: ""
+GITHUB_CLIENT_SECRET: ""
 sops:
-  age:
-    - recipient: age1gsn5pg5pkk89zsukc94gqwlu7zyrep0prm7pwc787tcegapgmvgqzeq64c
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaZ0NjbVpFbVJ5TS8xSlNW
-        a0hmOXRrQ2xpYkVJWHhVRm9lODRTUldxeTE0CnRGemp4dEZKV29JbjhPL2RVa3lG
-        WGNTdE9RYmZ0L1BQRjQyQ1dwU0x3dlkKLS0tIFc4NXE4ZFRhYmFtWlR2M3lpWVV1
-        Y2M0Q3NYeFBVTjZKOFNIS0x6dnRPUEEKCt8q9U5HaLS0Mm2JNmODlECAYjN8nn+1
-        zlbwhcAUqbhFd8HteSbp8jTgp14PUuig/c2c3JDOmgQfiITZaxLayQ==
-        -----END AGE ENCRYPTED FILE-----
-  lastmodified: "2025-12-23T06:23:33Z"
-  mac: ENC[AES256_GCM,data:lyuVzf2Zm8UTIMQNFCeg1BIKR9pfHOorS08alTMKJRHwdqKsziDu9lm86/6iOmUFpyasoG1J2sZN95ltq0IPOooV9sm28QvlNon8HBaNGkgvVRfCeU9vuKQrcp7OOSGI2Vqe38ZIveyBbhTPtqjoLuJfnXkoFiV2s1kPgySxFLM=,iv:OsDm31BPcCveHRqPpn8IpO3GvwKJ/DfCx/eYbWHGceY=,tag:xvVJ2K6xE12HykR8CIpcGA==,type:str]
-  unencrypted_suffix: _unencrypted
-  version: 3.11.0
+    age:
+        - recipient: age1gsn5pg5pkk89zsukc94gqwlu7zyrep0prm7pwc787tcegapgmvgqzeq64c
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaZ0NjbVpFbVJ5TS8xSlNW
+            a0hmOXRrQ2xpYkVJWHhVRm9lODRTUldxeTE0CnRGemp4dEZKV29JbjhPL2RVa3lG
+            WGNTdE9RYmZ0L1BQRjQyQ1dwU0x3dlkKLS0tIFc4NXE4ZFRhYmFtWlR2M3lpWVV1
+            Y2M0Q3NYeFBVTjZKOFNIS0x6dnRPUEEKCt8q9U5HaLS0Mm2JNmODlECAYjN8nn+1
+            zlbwhcAUqbhFd8HteSbp8jTgp14PUuig/c2c3JDOmgQfiITZaxLayQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-12-23T09:13:19Z"
+    mac: ENC[AES256_GCM,data:bvImv8g/K8wHa07RKBEPtTInOAdvNaJjTMt2A5EWBjPnoroHazfz9rrL2KMuBYJxZyXd3eHYb+L+MRZC154qcahU83KXeYZazReP99jRC0iPNIGeqCYaCeJ1vRfiM8kzPluScGavEbE272jfigjfXps2+duWPgk49gUjNvMAJQU=,iv:Fq+fokmZibCDLuSFuNT5XwNT4KYRbkw0yKcGzYashOE=,tag:ceu8QgNoxivwFX2IDFnnNw==,type:str]
+    unencrypted_suffix: _unencrypted
+    version: 3.11.0

secrets.prod.yaml

@@ -8,18 +8,20 @@ S3_ACCESS_KEY: ENC[AES256_GCM,data:JH70m0+9+KlfjXlDzVqJGYLFy8xRN3fxIV0YwmB9aRE=,
 S3_SECRET_KEY: ENC[AES256_GCM,data:QEc9T5yC+iZoV403CqqBTJCsDCdzH2FV0vQoRlEU6vM0oK5PrHiTOXUwe4WMSFCiz3ioBvgQOKHoan963U0gZA==,iv:0qZE002nF25N91pvITA65qBSyi2mDzRXNP/2pcBnI0o=,tag:gFQU5CJDr0FDWiWcFl05Ng==,type:str]
 S3_BUCKET: ENC[AES256_GCM,data:kKVmATCe2JYggI5bXjch9kiCbqVb,iv:WBVmx8TWKbJ3xWHiGy3/Os4xlPfcuDMz3xoWnzsTato=,tag:BqnD6HXBC4A9qqeREcB6Sw==,type:str]
 S3_PUBLIC_URL: ENC[AES256_GCM,data:yF9V11xmPsO9fAyozCVUWwC+z16+guLMNA==,iv:n8mEi0E8bvxK68hHZ6yd8dBlfi10sETNNXQBMt1ygrw=,tag:7ZK8/MM2xVTi8N65q0+v5g==,type:str]
+CLOUDFLARE_ZONE_ID: ENC[AES256_GCM,data:1f/0GcTM0bAiR/OevKD2W7GX9uENyyPpGiIQD8vvVRQ=,iv:352ETtiKjNyXTmxBlzD3w5WImmsO/pcW0ihsph1vHow=,tag:92DCIGeA8HK9hVJrmBm0Qw==,type:str]
+CLOUDFLARE_API_TOKEN: ENC[AES256_GCM,data:G1mLIuB0vbB6r2arvlxwy5bMmRRYi4p+EQC1JqUYz9YLGIctkI2I5Q==,iv:9veja4XIz0XzX2QD5CDIGHUmuxXMDnDxW0m6l6zr74c=,tag:ibsmoZDansTHzsNidu5T0A==,type:str]
 sops:
-  age:
-    - recipient: age1gsn5pg5pkk89zsukc94gqwlu7zyrep0prm7pwc787tcegapgmvgqzeq64c
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwRWovR2lYZjk5UzQ0Y2Ri
-        QXAxam5LaEY2S3hFREVEUHJzdDNQbCs2T3hnCkprMDNlamZPQmhvTXh1SUdOUHNX
-        OEhTYWlLMVdsaVRuUDdPRVZvRmc3VkEKLS0tIGlOK1JScmJtQVJPWXErZkc2VVNR
-        NHZSdEp1WGc4S2ppK1ZKcDZnU0JRQmMKJj4n6DBAozt2DTlYFIhd1jWWLGMYalAM
-        +Txthl+D2hQNSITfK7jzVXIhk4z3g2ahNXscRmgrU9u4V0Jj6Gzz/g==
-        -----END AGE ENCRYPTED FILE-----
-  lastmodified: "2025-12-23T06:48:31Z"
-  mac: ENC[AES256_GCM,data:51C/AiU7T7aqHxqvhl/+sc82nigPHlKzLDXqXDyfR5PGfNKsnP7/u/X3xsp6VhNv+itnRCp/29rG3qjKnbjm04uS28bIRmSzaUrDK6/b3ASnJIexhsuAeZFsjqPaJ0IpECdrmn7D2ZXrJQw7qx1LpKlFsHBK8awlE1JDcmdAFXY=,iv:hF63GDjwaKZ5t+/oN5heoFSLHuIJ9tgvqyHNoaDxmjA=,tag:L9gvHacn2UAi693OkVydGA==,type:str]
-  unencrypted_suffix: _unencrypted
-  version: 3.11.0
+    age:
+        - recipient: age1gsn5pg5pkk89zsukc94gqwlu7zyrep0prm7pwc787tcegapgmvgqzeq64c
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwRWovR2lYZjk5UzQ0Y2Ri
+            QXAxam5LaEY2S3hFREVEUHJzdDNQbCs2T3hnCkprMDNlamZPQmhvTXh1SUdOUHNX
+            OEhTYWlLMVdsaVRuUDdPRVZvRmc3VkEKLS0tIGlOK1JScmJtQVJPWXErZkc2VVNR
+            NHZSdEp1WGc4S2ppK1ZKcDZnU0JRQmMKJj4n6DBAozt2DTlYFIhd1jWWLGMYalAM
+            +Txthl+D2hQNSITfK7jzVXIhk4z3g2ahNXscRmgrU9u4V0Jj6Gzz/g==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-12-23T09:16:16Z"
+    mac: ENC[AES256_GCM,data:jFCDcGCZA8hzIwZy5TibMg/PMB6UAobWpxdJ7XlzfMcvCWWV5Azf0wGYWLA0jWdZ2nOB2sdCODGfWKzBHuyceUSbBNFC+yHlyEnsZZyudzfQZ1v4sSRoalYuzhK+r/IWi/BYMNu2HkZ2nkUF1ma/FWirb93w30MFvUePZlX06N4=,iv:yaVZRVOMEMe55tgl/QzQPRjjzz2lrZyB1obclrZVIgE=,tag:L13UTthVJshWD1EcJP18LQ==,type:str]
+    unencrypted_suffix: _unencrypted
+    version: 3.11.0

src/lib/data/private/migration.remote.ts

@@ -1,6 +1,10 @@
 import { command, query } from "$app/server";
 import { requireUtCodeMember } from "$lib/server/database/auth.server";
-import { startDataMigration } from "$lib/server/services/migration/index.server";
+import {
+  startDataMigration,
+  startDeleteAll,
+  startImageCleanup,
+} from "$lib/server/services/migration/index.server";
 import { getMigrationState, resetMigration } from "$lib/server/services/migration/state.server";
 import type { MigrationState } from "$lib/shared/types/migration";
 
@@ -18,3 +22,13 @@ export const reset = command(async (): Promise<void> => {
   await requireUtCodeMember();
   resetMigration();
 });
+
+export const cleanup = command(async (): Promise<{ started: boolean; message: string }> => {
+  await requireUtCodeMember();
+  return startImageCleanup();
+});
+
+export const deleteAll = command(async (): Promise<{ started: boolean; message: string }> => {
+  await requireUtCodeMember();
+  return startDeleteAll();
+});

src/lib/server/services/migration/index.server.ts

@@ -10,7 +10,14 @@ import { rm } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { completeMigration, failMigration, isRunning, log, startMigration } from "./state.server";
-import { migrateArticles, migrateImages, migrateMembers, migrateProjects } from "./workers.server";
+import {
+  cleanupInvalidImageUrls,
+  deleteAllMigratedData,
+  migrateArticles,
+  migrateImages,
+  migrateMembers,
+  migrateProjects,
+} from "./workers.server";
 
 const REPO_URL = "https://github.com/ut-code/utcode.net.git";
 
@@ -51,6 +58,68 @@ export function startDataMigration(): { started: boolean; message: string } {
   return { started: true, message: "Migration started" };
 }
 
+export function startImageCleanup(): { started: boolean; message: string } {
+  if (isRunning()) {
+    return { started: false, message: "Migration already in progress" };
+  }
+
+  startMigration();
+  log("=== Image URL Cleanup Started ===");
+
+  runCleanupAsync().catch(console.error);
+
+  return { started: true, message: "Cleanup started" };
+}
+
+async function runCleanupAsync(): Promise<void> {
+  try {
+    const result = await cleanupInvalidImageUrls(log);
+
+    log("=== Cleanup Complete ===");
+    completeMigration({
+      members: { created: result.members.cleaned, skipped: result.members.skipped, errors: 0 },
+      articles: { created: result.articles.cleaned, skipped: result.articles.skipped, errors: 0 },
+      projects: { created: result.projects.cleaned, skipped: result.projects.skipped, errors: 0 },
+      images: { created: 0, skipped: 0, errors: 0 },
+    });
+  } catch (e) {
+    const msg = e instanceof Error ? e.message : String(e);
+    log(`=== Cleanup Failed: ${msg} ===`);
+    failMigration(msg);
+  }
+}
+
+export function startDeleteAll(): { started: boolean; message: string } {
+  if (isRunning()) {
+    return { started: false, message: "Migration already in progress" };
+  }
+
+  startMigration();
+  log("=== Delete All Data Started ===");
+
+  runDeleteAllAsync().catch(console.error);
+
+  return { started: true, message: "Delete started" };
+}
+
+async function runDeleteAllAsync(): Promise<void> {
+  try {
+    const result = await deleteAllMigratedData(log);
+
+    log("=== Delete Complete ===");
+    completeMigration({
+      members: { created: result.members.deleted, skipped: 0, errors: 0 },
+      articles: { created: result.articles.deleted, skipped: 0, errors: 0 },
+      projects: { created: result.projects.deleted, skipped: 0, errors: 0 },
+      images: { created: 0, skipped: 0, errors: 0 },
+    });
+  } catch (e) {
+    const msg = e instanceof Error ? e.message : String(e);
+    log(`=== Delete Failed: ${msg} ===`);
+    failMigration(msg);
+  }
+}
+
 async function runMigrationAsync(): Promise<void> {
   let repoPath: string | null = null;