Personal workspace
Library
Admin security
Protect /, /upload, /settings, and /api/* with Cloudflare Access. Share links under /d/* can stay public.
Storage layout
Deck files are stored in R2 under presentations/{id}/. Metadata is stored in D1.
Share links
Published decks use private token URLs like /d/abc123/. Tokens are hard to guess and can be rotated later.