@

feat: AE template scanner + scene editor + AEP bundle pipeline

Scene editor (admin): per-project Scenes / Shared Colors / Color Presets
manager (ProjectScenes) reachable from each project.

AEP bundle pipeline: upload .aep or .zip → stored once per template at
templates/{project_id}/(bundle.zip|template.aep); render claim probes and
returns is_bundle+md5; node-agent extracts the bundle, locates the .aep
(zip-slip guarded), and caches by md5 so repeated renders extract once.

AE template scanner ("read scenes/colours/configs from the AEP"):
- content-svc importer: POST /v1/projects/{id}/scan/{preview,apply} —
  review-diff-then-merge into scenes/elements/colours (manual edits kept).
- render-svc Go quick-scan: stdlib RIFX parser extracts comp names+durations
  (no AE) → POST /v1/template-scans/{id}/quick.
- render-svc AE scan jobs + node-agent runner: queue → node runs scan.jsx
  (reverse of legacy JSXGenerator conventions: frfinal/frshare/frl_/frd_) →
  posts ScanResult back. Migration 26_render_scan_jobs.
- admin UI: "اسکن از افترافکت" with quick/full engines + diff-review modal.

Verified: importer preview/apply, Go quick-scan end-to-end (synthetic .aep →
scene imported), bundle extract unit tests, RIFX parser unit tests.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@

services/node-agent/internal/client/client.go

@@ -148,9 +148,15 @@ type ClaimedJob struct {
 	FrameRate      int    `json:"frame_rate"`
 	HasMusic       bool   `json:"has_music"`
 	HasVoiceover   bool   `json:"has_voiceover"`
-	// AEPDownloadURL is a presigned MinIO GET URL for the .aep template file.
-	// Empty when the template has not been uploaded yet — triggers mock render.
+	// AEPDownloadURL is a presigned MinIO GET URL for the .aep template file
+	// (or .zip bundle). Empty when the template has not been uploaded yet — triggers mock render.
 	AEPDownloadURL string `json:"aep_download_url,omitempty"`
+	// IsBundle is true when AEPDownloadURL points to a .zip bundle (.aep + footage/fonts)
+	// that must be extracted before rendering.
+	IsBundle bool `json:"is_bundle,omitempty"`
+	// BundleMD5 identifies the bundle content; used as a local cache key so repeated
+	// renders of the same template download + extract it only once.
+	BundleMD5 string `json:"bundle_md5,omitempty"`
 }
 
 // OutputUploadURLResponse is returned by GetOutputUploadURL.
@@ -240,6 +246,66 @@ func (c *Client) ClaimJob(ctx context.Context, nodeID, region string) (*ClaimedJ
 	return &job, nil
 }
 
+// ScanClaim is returned when an AE scan job is claimed.
+type ScanClaim struct {
+	ScanJobID      string `json:"scan_job_id"`
+	ProjectID      string `json:"project_id"`
+	AEPDownloadURL string `json:"aep_download_url"`
+	IsBundle       bool   `json:"is_bundle"`
+	BundleMD5      string `json:"bundle_md5"`
+}
+
+// ClaimScan atomically claims the next queued AE scan job.
+// Returns (nil, nil) when nothing is queued (204 No Content).
+func (c *Client) ClaimScan(ctx context.Context, nodeID, region string) (*ScanClaim, error) {
+	resp, err := c.do(ctx, http.MethodPost, "/v1/internal/scan/claim",
+		ClaimJobRequest{NodeID: nodeID, Region: region})
+	if err != nil {
+		return nil, err
+	}
+	defer resp.Body.Close()
+	if resp.StatusCode == http.StatusNoContent {
+		return nil, nil
+	}
+	if resp.StatusCode >= 300 {
+		return nil, fmt.Errorf("scan claim: HTTP %d", resp.StatusCode)
+	}
+	var sc ScanClaim
+	if err := json.NewDecoder(resp.Body).Decode(&sc); err != nil {
+		return nil, fmt.Errorf("scan claim decode: %w", err)
+	}
+	return &sc, nil
+}
+
+// ReportScanResult posts the raw ScanResult JSON produced by scan.jsx.
+func (c *Client) ReportScanResult(ctx context.Context, scanJobID string, resultJSON []byte) error {
+	// json.RawMessage marshals to its raw bytes, so the body is the JSON verbatim.
+	resp, err := c.do(ctx, http.MethodPost,
+		fmt.Sprintf("/v1/internal/scan/%s/result", scanJobID), json.RawMessage(resultJSON))
+	if err != nil {
+		return err
+	}
+	defer resp.Body.Close()
+	if resp.StatusCode >= 300 {
+		return fmt.Errorf("scan result: HTTP %d", resp.StatusCode)
+	}
+	return nil
+}
+
+// ReportScanFail marks a scan job as failed.
+func (c *Client) ReportScanFail(ctx context.Context, scanJobID, reason string) error {
+	resp, err := c.do(ctx, http.MethodPost,
+		fmt.Sprintf("/v1/internal/scan/%s/fail", scanJobID), FailRequest{Reason: reason})
+	if err != nil {
+		return err
+	}
+	defer resp.Body.Close()
+	if resp.StatusCode >= 300 {
+		return fmt.Errorf("scan fail: HTTP %d", resp.StatusCode)
+	}
+	return nil
+}
+
 // UpdatePreview sends a base64-encoded preview frame to the orchestrator.
 // Errors are non-fatal — the UI simply won't update the preview image.
 func (c *Client) UpdatePreview(ctx context.Context, jobID, imageB64 string) error {