@aiquants/daily-report 0.32.0 → 0.33.0

package/dist/server.mjs

@@ -1,5 +1,5 @@
-var wr=e=>{throw TypeError(e)};var Er=(e,t,r)=>t.has(e)||wr("Cannot "+r);var ot=(e,t,r)=>(Er(e,t,"read from private field"),r?r.call(e):t.get(e)),zt=(e,t,r)=>t.has(e)?wr("Cannot add the same private member more than once"):t instanceof WeakSet?t.add(e):t.set(e,r),Wt=(e,t,r,n)=>(Er(e,t,"write to private field"),n?n.call(e,r):t.set(e,r),r);var ee=()=>Math.floor(performance.now());var Jt=e=>({async getEpoch(t){try{let r=await e?.getClient();if(!r)return null;let n=await r.get(t);return n?Number(n):0}catch{return null}},async incrementEpoch(t){try{let r=await e?.getClient();if(!r)return;await r.incr(t)}catch{}}}),at=class{constructor(t,r){this.config=t;this.epochStore=r;this.buckets=new Map;this.inFlight=new Map;this.maybeRefreshAhead=t=>{let r=t.refreshAheadRatio;if(r===void 0)return;let{cacheKey:n}=t,o=this.buckets.get(n);if(!o)return;let a=t.ttlMsOverride??this.config.defaultTtlMs;if(a-(o.expireAt-ee())<a*r||this.inFlight.has(n))return;let s;s=(async()=>{let y=t.epochKey?await this.epochStore.getEpoch(t.epochKey):null,i=await t.fetcher();return this.inFlight.get(n)===s&&this.buckets.set(n,{records:i,expireAt:ee()+a,epoch:y}),i})(),this.inFlight.set(n,s),s.catch(()=>{}).finally(()=>{this.inFlight.get(n)===s&&this.inFlight.delete(n)})};this.getOrFetch=async t=>{let{cacheKey:r,forceRefresh:n,snapshot:o}=t,a=this.buckets.get(r);if(n&&(this.buckets.delete(r),this.inFlight.delete(r)),!n&&a&&a.expireAt>ee())if(t.epochKey){let s=await this.epochStore.getEpoch(t.epochKey);if(s===null||a.epoch===s)return this.maybeRefreshAhead(t),o?a.records.map(y=>structuredClone(y)):a.records;this.buckets.delete(r)}else return this.maybeRefreshAhead(t),o?a.records.map(s=>structuredClone(s)):a.records;if(!n&&this.inFlight.has(r)){let s=await this.inFlight.get(r);return o?s.map(y=>structuredClone(y)):s}let l;l=(async()=>{let s=t.epochKey?await this.epochStore.getEpoch(t.epochKey):null;t.onFetchStart?.();let y=await t.fetcher();if(n||this.inFlight.get(r)===l){let i=ee()+(t.ttlMsOverride??this.config.defaultTtlMs);this.buckets.set(r,{records:y,expireAt:i,epoch:s}),this.buckets.size>500&&this.cleanExpired()}return y})(),n||this.inFlight.set(r,l);try{let s=await l;return o?s.map(y=>structuredClone(y)):s}finally{this.inFlight.get(r)===l&&this.inFlight.delete(r)}};this.clearAll=()=>{this.buckets.clear(),this.inFlight.clear()};this.invalidatePrefix=t=>{for(let r of this.buckets.keys())r.startsWith(t)&&this.buckets.delete(r);for(let r of this.inFlight.keys())r.startsWith(t)&&this.inFlight.delete(r)}}cleanExpired(){let t=ee();for(let[r,n]of this.buckets.entries())n.expireAt<=t&&this.buckets.delete(r)}};var jo=/^(\d{4})([-/])(\d{2})\2(\d{2})$/;var Ir=e=>e<10?`0${e}`:`${e}`,zo=e=>{if(Number.isNaN(e.getTime()))return null;let t=e.getFullYear(),r=Ir(e.getMonth()+1),n=Ir(e.getDate());return`${t}-${r}-${n}`},Ve=e=>{let t=jo.exec(e);if(t===null)return null;let[,r,,n,o]=t,a=Number(r),l=Number(n),s=Number(o);if(a<1)return null;let y=new Date(0);return y.setUTCFullYear(a,l-1,s),y.getUTCFullYear()!==a||y.getUTCMonth()!==l-1||y.getUTCDate()!==s?null:`${r}-${n}-${o}`},bt=e=>Ve(e)===e;var ye=e=>e==null?null:e instanceof Date?zo(e):Ve(e);var St="ids-stream";var At=e=>{let t=2166136261,r=-624069552;for(let n of e){let o=n.reportHubId;t^=o&255,t=Math.imul(t,16777619),t^=o>>>8&255,t=Math.imul(t,16777619),t^=o>>>16&255,t=Math.imul(t,16777619),t^=o>>>24&255,t=Math.imul(t,16777619),r^=o>>>24&255,r=Math.imul(r,16777619),r^=o>>>16&255,r=Math.imul(r,16777619),r^=o>>>8&255,r=Math.imul(r,16777619),r^=o&255,r=Math.imul(r,16777619);let a=n.businessDate;if(a===null)t^=1,t=Math.imul(t,16777619),r^=1,r=Math.imul(r,16777619);else for(let l=0;l<a.length;l++){let s=a.charCodeAt(l);t^=s&255,t=Math.imul(t,16777619),r^=s&255,r=Math.imul(r,16777619)}}return t^=e.length,t=Math.imul(t,16777619),r^=e.length,r=Math.imul(r,16777619),((t>>>0).toString(16).padStart(8,"0")+(r>>>0).toString(16).padStart(8,"0")).replace(/^0+(?=.)/,"")},Tt=(e,t)=>e.businessDate!==t.businessDate?e.businessDate===null?1:t.businessDate===null||e.businessDate>t.businessDate?-1:1:t.reportHubId-e.reportHubId,xr=e=>{for(let t=1;t<e.length;t++)if(Tt(e[t-1],e[t])>0)return!1;return!0},Cr=(e,t)=>{let r=e.findIndex(n=>Tt({businessDate:n.businessDate,reportHubId:n.reportHubId},t)>0);return r===-1?e.length:r};var se=(e,t,r=console)=>{let n=o=>typeof o=="string"?[`${t} ${o}`]:[t,o];return{debug:(o,...a)=>{e<=0&&r.debug(...n(o),...a)},info:(o,...a)=>{e<=1&&r.info(...n(o),...a)},warn:(o,...a)=>{e<=2&&r.warn(...n(o),...a)},error:(o,...a)=>{e<=3&&r.error(...n(o),...a)}}};var Re=(e,t)=>{let r=setTimeout(e,t);return r.unref?.(),r};var je=e=>{let{windowMs:t,tallies:r,writeSuppressed:n}=e,o=new Map,a=l=>{let s={since:new Date().toISOString(),count:0,tallies:Object.fromEntries(r.map(i=>[i,0]))};o.set(l,s),Re(()=>{o.delete(l),s.count>0&&n(l,s)},t)};return{record:(l,s,y)=>{let i=o.get(l);if(i!==void 0){i.count+=1,i.tallies[s]+=1;return}y(),a(l)}}};var Wo=/^[1-9][0-9]*$/,Jo=/^(?:0|[1-9][0-9]*)$/,Kt=e=>Number.isSafeInteger(e)&&e>0,Le=e=>{if(e===null||!Wo.test(e))return null;let t=Number(e);return Kt(t)?t:null},Gt=e=>{if(e===null||!Jo.test(e))return null;let t=Number(e);return Number.isSafeInteger(t)?t:null},Xt=e=>e==="true"?!0:e==="false"?!1:null,it=e=>e===null?!1:Xt(e),vr=e=>{let t=new URLSearchParams;for(let[r,n]of e){if(typeof n!="string")return null;t.append(r,n)}return t};var Pr=Object.freeze({status:400,error:"Invalid form"}),Lr=e=>({status:413,error:"Form too large",measuredBy:e}),Ko=(e,t,r)=>{let n=0;return e.pipeThrough(new TransformStream({transform(o,a){if(n+=o.byteLength,n>t){r(),a.error(new Error(`action form body exceeds ${t} bytes`));return}a.enqueue(o)}}))},Go=async e=>{let t=Gt(e.headers.get("Content-Length"));if(t!==null&&t>1048576)return{refusal:Lr("declared")};let r=!1,n=e.body===null?null:Ko(e.body,1048576,()=>{r=!0}),o=new Headers,a=e.headers.get("Content-Type");a!==null&&o.set("Content-Type",a);let l;try{l=await new Response(n,{headers:o}).formData()}catch{return{refusal:r?Lr("counted"):Pr}}let s=vr(l);return s===null?{refusal:Pr}:{fields:s}},Xo=(e,t)=>{let r=e.get("intent"),n=e.get("businessDate"),o=n===null?null:Ve(n);if(n!==null&&o===null)return{error:"Invalid businessDate"};let a=e.get("operationTimestamp"),l=Gt(a);if(a!==null&&l===null)return{error:"Invalid operationTimestamp"};if(r==="clearCache")return{command:{intent:r}};let s=e.get("clientTempId");if(!s)return{error:"clientTempId required"};if(r==="create")return o===null?{error:"businessDate required"}:{command:{intent:r,clientTempId:s,businessDate:o,operationTimestamp:l}};let y=Le(e.get("reportHubId"));if(y===null)return{error:"Invalid reportHubId"};let i={clientTempId:s,businessDate:o,operationTimestamp:l,reportHubId:y};switch(r){case"update":{let S=e.get("title"),d=e.get("content");if(S!==null&&S.length>t.titleMaxLength)return{error:"Invalid title"};let b={};return S!==null&&(b.title=S),d!==null&&(b.content=d),{command:{...i,intent:r,changes:b}}}case"publish":case"delete":return{command:{...i,intent:r}};case"toggleStar":case"toggleRead":{let S=r==="toggleStar"?"isStarred":"isRead",d=e.get(S);if(d===null)return{error:`${S} required`};let b=Xt(d);return b===null?{error:`Invalid ${S}`}:{command:{...i,intent:r,value:b}}}case"addComment":{let S=e.get("content");return S?{command:{...i,intent:r,content:S}}:{error:"Content required"}}case"deleteComment":{let S=Le(e.get("commentId"));return S===null?{error:"Invalid commentId"}:{command:{...i,intent:r,commentId:S}}}default:return{error:"Invalid intent"}}},Nr=async(e,t)=>{let r=await Go(e);if("refusal"in r)return r;let n=Xo(r.fields,t);return"error"in n?{refusal:{status:400,error:n.error}}:n},Qo=6e4,Zo="form_too_large",kr=["declared","counted"],Or=e=>{let t=je({windowMs:Qo,tallies:kr,writeSuppressed:(r,{count:n,since:o,tallies:a})=>{e.warn(`form_too_large_suppressed count=${n} since=${o} measured=${kr.map(l=>`${l}:${a[l]}`).join(",")}`)}});return r=>{let n=()=>{e.warn(`413 action reason=form_too_large measured=${r} limit=${1048576}`)};t.record(Zo,r,n)}};var Dt=Object.freeze({"business-date":"json",[St]:"stream",report:"json"}),Br=Object.freeze({json:Object.freeze(["GET"]),stream:Object.freeze(["GET","HEAD"])}),Qt=e=>e!==void 0&&Object.hasOwn(Dt,e);var Zt=Object.freeze({tile:Object.freeze({maxWidth:480,maxHeight:320})}),Ur=e=>Object.hasOwn(Zt,e);var ea="download",ta="thumbnail",ra="1";var er=e=>{let t=e.getAll(ta),r=e.getAll(ea);if(t.length>0&&r.length>0)return{kind:"invalid",reason:"conflict"};if(t.length>0){let[n]=t;return t.length===1&&Ur(n)?{kind:"thumbnail",variant:n}:{kind:"invalid",reason:"thumbnail_variant"}}return r.length>0?r.length===1&&r[0]===ra?{kind:"download"}:{kind:"invalid",reason:"download_value"}:{kind:"inline"}};var rr="Cross-site request rejected",na="Not Found",oa=new Set(["same-origin","none"]),aa=new Set(["GET","HEAD","OPTIONS"]),Hr=["api","action","sse","attachment"],Fr=(e,t)=>new Response(JSON.stringify({error:{message:t}}),{status:e,headers:{"Content-Type":"application/json","Cache-Control":"no-store","X-Content-Type-Options":"nosniff"}}),ia=()=>Fr(403,rr),_t=()=>Fr(404,na),st=Object.freeze({navigable:()=>!1,frameworkDataRefusal:()=>null,crossSiteRejection:ia}),$r=e=>new URL(e.url).pathname.endsWith(".data"),sa=e=>{let t=e.headers.get("Origin");return t===null?!0:URL.canParse(t)&&new URL(t).host===new URL(e.url).host},qr=(e,t)=>{let r=e.headers.get("Sec-Fetch-Site");return r===null?!(aa.has(e.method)||sa(e)):oa.has(r)?!1:!(e.method==="GET"&&e.headers.get("Sec-Fetch-Mode")==="navigate"&&e.headers.get("Sec-Fetch-Dest")==="document"&&t.navigable(e))},la=6e4,ua="refusals",ca=32,da=/^[a-z-]+$/,tr=e=>{if(e===null)return"-";let t=e.slice(0,ca);return da.test(t)&&t===e?e:JSON.stringify(t)},Yr=e=>{let t=je({windowMs:la,tallies:Hr,writeSuppressed:(r,{count:n,since:o,tallies:a})=>{e.warn(`cross_site_rejected_suppressed count=${n} since=${o} routes=${Hr.map(l=>`${l}:${a[l]}`).join(",")}`)}});return(r,n)=>{let o=()=>{let{headers:a}=n;e.warn(`cross_site_rejected route=${r} site=${tr(a.get("Sec-Fetch-Site"))} mode=${tr(a.get("Sec-Fetch-Mode"))} dest=${tr(a.get("Sec-Fetch-Dest"))} method=${n.method}`)};t.record(ua,r,o)}};var Vr=(e,t)=>(r,n)=>{let o=n?"markAttachmentPresent":"markAttachmentMissing";e[o](r).catch(a=>{t.error(`${o} failed attachment=${r} message=${a instanceof Error?a.message:"unknown"}`)})};var ma=6e4/1e3,pa=5e3/1e3,ya=new Map([[429,ma],[503,pa]]),ke=e=>{let t=ya.get(e);return t===void 0?{}:{"Retry-After":String(t)}},zr="Too many requests",ha="same-origin",fa="SAMEORIGIN",ze=Object.freeze({"X-Content-Type-Options":"nosniff","Cross-Origin-Resource-Policy":ha,"X-Frame-Options":fa}),wt=(e,t,r)=>{let n=new Headers({"Content-Type":"application/json","Cache-Control":"no-store",...r.extraHeaders,...ze});return r.cookie&&n.append("Set-Cookie",r.cookie),new Response(JSON.stringify({error:{message:t}}),{status:e,headers:n})},Wr=(e,t)=>{if(e===null)return!1;for(let r of e.split(",")){let n=r.trim();if((n.startsWith("W/")?n.slice(2):n)===t)return!0}return!1},Jr=new Set(["image/png","image/jpeg","image/gif","image/webp","application/pdf","text/plain"]),ga=/^[\x20-\x7E]+$/,Ra=/^[\w.+-]+\/[\w.+-]+/,nr=e=>e&&ga.test(e)&&Ra.test(e)?e:null,Kr=e=>encodeURIComponent(e).replace(/['()*]/g,t=>`%${t.charCodeAt(0).toString(16).toUpperCase()}`),Gr=e=>e.replace(/[^\x20-\x7E]/g,"_").replace(/["\\]/g,"_"),Et={404:"Attachment not found",413:"Attachment too large",502:"Attachment storage unavailable",503:"Attachment storage busy",504:"Attachment storage timed out"},Xr={not_found:404,denied:404,invalid_path:404,too_large:413,unavailable:502,busy:503,deadline:504},It=e=>typeof e=="string"&&Object.hasOwn(Xr,e),xt=e=>Xr[e],Ie="Attachment request failed";var ba=e=>typeof e=="string"?JSON.stringify(e):typeof e=="number"||typeof e=="boolean"||e===null||e===void 0?String(e):Array.isArray(e)?"array":typeof e,he=(e,t,r)=>new RangeError(`[daily-report] ${e} must be ${t}; got ${ba(r)}`),We=(e,t)=>new TypeError(`[daily-report] ${e} must be ${t}`);var Sa=32*1024*1024,Aa=60,Ta=4,Da=120,_a=2,wa=8*1024*1024,ue=(e,t,r)=>{if(typeof t=="number"&&Number.isSafeInteger(t)&&t>=r)return t;throw he(e,`an integer >= ${r}`,t)},Je=(e,t,r,n)=>t===void 0?n:ue(e,t,r),Ct=e=>typeof e=="object"&&e!==null&&!Array.isArray(e),Ea=e=>{if(e===void 0)throw We("attachments.thumbnails.renderer","injected when attachments.thumbnails is given");if(!Ct(e))throw he("attachments.thumbnails.renderer","an object with id and render",e);if(e.render===void 0)throw We("attachments.thumbnails.renderer.render","a function");if(typeof e.render!="function")throw he("attachments.thumbnails.renderer.render","a function",e.render);if(typeof e.id!="string"||e.id.trim()==="")throw he("attachments.thumbnails.renderer.id","a non-blank string naming the rendering pipeline version",e.id);return e},Ia=e=>{if(e===void 0)return null;if(!Ct(e))throw he("attachments.thumbnails","an object with renderer",e);return Object.freeze({renderer:Ea(e.renderer),rateLimitPerMinute:Je("attachments.thumbnails.rateLimitPerMinute",e.rateLimitPerMinute,1,Da),concurrency:Je("attachments.thumbnails.concurrency",e.concurrency,1,_a),cacheBytes:Je("attachments.thumbnails.cacheBytes",e.cacheBytes,0,wa)})},Qr=e=>{let t=e;if(t===void 0)return null;if(!Ct(t))throw he("attachments","an object with idCodec and read",t);let{idCodec:r,read:n}=t;if(r===void 0)throw We("attachments.idCodec","injected when attachments is given");if(!Ct(r)||typeof r.encode!="function"||typeof r.decode!="function")throw he("attachments.idCodec","an object with encode and decode functions",r);if(n===void 0)throw We("attachments.read","injected when attachments is given");if(typeof n!="function")throw he("attachments.read","a function",n);return Object.freeze({idCodec:r,read:n,maxBytes:Je("attachments.maxBytes",t.maxBytes,1,Sa),rateLimitPerMinute:Je("attachments.rateLimitPerMinute",t.rateLimitPerMinute,1,Aa),concurrency:Je("attachments.concurrency",t.concurrency,1,Ta),thumbnails:Ia(t.thumbnails)})},xa=Object.freeze([["attachmentIdCodec","attachments.idCodec"],["readAttachment","attachments.read"],["attachmentMaxBytes","attachments.maxBytes"],["attachmentRateLimitPerMinute","attachments.rateLimitPerMinute"],["attachmentConcurrency","attachments.concurrency"],["attachmentThumbnailRenderer","attachments.thumbnails.renderer"],["attachmentThumbnailRateLimitPerMinute","attachments.thumbnails.rateLimitPerMinute"],["attachmentThumbnailConcurrency","attachments.thumbnails.concurrency"],["attachmentThumbnailCacheBytes","attachments.thumbnails.cacheBytes"]]),vt=e=>{for(let[t,r]of xa)if(Object.hasOwn(e,t))throw We(r,`given in place of the flat key ${t}`)};var Mt=e=>{let t=ue("limit",e.limit,1),r=ue("maxHeldPerOwner",e.maxHeldPerOwner,1),n=e.queue===null?null:{max:ue("queue.max",e.queue.max,0),maxPerOwner:ue("queue.maxPerOwner",e.queue.maxPerOwner,0),maxWaitMs:ue("queue.maxWaitMs",e.queue.maxWaitMs,1)},o=0,a=[],l=new Map,s=new Map,y=(m,R)=>m.get(R)??0,i=(m,R,M)=>{let k=y(m,R)+M;k<=0?m.delete(R):m.set(R,k)},S=m=>y(s,m)<r,d=m=>(o+=1,i(s,m,1),h(m)),b=()=>{for(;o<t;){let m=a.findIndex(M=>S(M.owner));if(m<0)return;let[R]=a.splice(m,1);i(l,R.owner,-1),R.grant(d(R.owner))}},h=m=>{let R=!1;return()=>{R||(R=!0,o-=1,i(s,m,-1),b())}};return{acquire:(m,R)=>{if(R.aborted)return Promise.resolve(null);if(o<t&&S(m))return Promise.resolve(d(m));if(n===null||a.length>=n.max||y(l,m)>=n.maxPerOwner)return Promise.resolve(null);let{maxWaitMs:M}=n,k=A=>{let P=()=>{let z=a.indexOf(H);z<0||(a.splice(z,1),i(l,m,-1),U(),A(null))},L=Re(P,M),U=()=>{clearTimeout(L),R.removeEventListener("abort",P)},H={owner:m,grant:z=>{U(),A(z)}};a.push(H),i(l,m,1),R.addEventListener("abort",P,{once:!0})};return new Promise(k)}}};var Ca=1024,va=6e4,Ma=e=>{ue("limitPerMinute",e,1);let t=new Map,r=(o,a)=>{a<=o.lastRefillMs||(o.tokens=Math.min(e,o.tokens+(a-o.lastRefillMs)*e/6e4),o.lastRefillMs=a)},n=(o,a)=>{let l=t.get(o);l&&t.delete(o);let s=l??{tokens:e,lastRefillMs:a};r(s,a),t.set(o,s);for(let y of t.keys()){if(t.size<=Ca)break;t.delete(y)}return s};return{consume:(o,a)=>{let l=n(o,a);return l.tokens<1?!1:(l.tokens-=1,!0)},refund:(o,a,l)=>{let s=t.get(o);s&&(r(s,a),s.tokens=Math.min(e,s.tokens+l))}}},lt=e=>{let{reason:t,logger:r}=e,n=Ma(e.limitPerMinute),o=e.variant===null?"":` variant=${e.variant}`,a=je({windowMs:va,tallies:[t],writeSuppressed:(l,{count:s,since:y})=>{r.warn(`${t}_suppressed count=${s} since=${y} viewer=${l}${o}`)}});return{spend:({attachmentId:l,internalUserId:s,fail:y})=>n.consume(s,ee())?null:(a.record(s,t,()=>r.warn(`429 attachment=${l} viewer=${s}${o} reason=${t}`)),y(429,zr,ke(429))),refund:(l,s)=>{n.refund(l,ee(),s)}}};var Pa=256*1024,Zr=6e4,La=e=>Math.ceil(e/2),ka=new Uint8Array(new ArrayBuffer(0)),Na=(e,t)=>{let r=e,n=0,o,a=()=>{clearTimeout(o),r=ka,t()},l=s=>{clearTimeout(o),o=Re(()=>{s.error(new Error(`attachment body idle for ${Zr} ms`)),a()},Zr)};return new ReadableStream({start(s){l(s)},pull(s){let y=Math.min(n+Pa,r.byteLength);if(y>n&&s.enqueue(r.slice(n,y)),n=y,n>=r.byteLength){s.close(),a();return}l(s)},cancel(){a()}},{highWaterMark:0})},en=e=>{let{service:t,encodeUserId:r,resolveViewerScope:n,logger:o,recordObjectState:a}=e,l=lt({reason:"rate_limit",limitPerMinute:e.rateLimitPerMinute,logger:o,variant:null}),s=Mt({limit:e.concurrency,maxHeldPerOwner:La(e.concurrency),queue:null});return async y=>{let{request:i,delivery:S,attachmentId:d,internalUserId:b,readAttachment:h,cookie:m,fail:R}=y,M=e.maxBytes,k=l.spend(y);if(k)return k;let A=await n(i),P=await t.getAttachmentForUser(A,d,b);if(!P)return o.warn(`404 attachment=${d} viewer=${b} reason=not_visible`),R(404,"Attachment not found");if(P.fileSize!=null&&P.fileSize>M)return o.warn(`413 attachment=${d} viewer=${b} reason=db_size`),R(413,"Attachment too large");let L=await s.acquire(b,i.signal);if(!L)return i.signal.aborted?(o.info(`503 attachment=${d} viewer=${b} reason=aborted`),R(503,"Attachment request aborted")):(o.warn(`503 attachment=${d} viewer=${b} reason=concurrency`),R(503,"Too many concurrent downloads",ke(503)));let U=!1;try{let H=await h(P.filePath,{maxBytes:M,head:i.method==="HEAD",principal:r(b),signal:i.signal});if(i.signal.aborted)return o.info(`503 attachment=${d} viewer=${b} reason=aborted`),R(503,"Attachment request aborted");if(!H.ok){if(!It(H.reason))return o.error(`500 attachment=${d} viewer=${b} reason=port_contract code=failure_reason`),R(500,Ie);let T=xt(H.reason);return H.reason==="not_found"&&a(d,!1),o.warn(`${T} attachment=${d} viewer=${b} reason=${H.reason} code=${H.code??"-"}`),R(T,Et[T],ke(T))}if(H.bytes.byteLength>M)return o.error(`500 attachment=${d} viewer=${b} reason=port_contract code=over_max_bytes`),R(500,Ie);let z=i.method==="HEAD";if(!z&&H.size!==void 0&&H.size!==H.bytes.byteLength)return o.error(`500 attachment=${d} viewer=${b} reason=port_contract code=size_mismatch`),R(500,Ie);let te=nr(P.fileType)??nr(H.contentType),j=te!==null&&Jr.has(te),E=j?te:"application/octet-stream",w=j&&S.kind!=="download"?"inline":"attachment",v=z?H.size:H.bytes.byteLength,I=new Headers({"Content-Type":E,"Content-Disposition":`${w}; filename="${Gr(P.fileName)}"; filename*=UTF-8''${Kr(P.fileName)}`,"Cache-Control":"private, no-store","Content-Security-Policy":"default-src 'none'; sandbox",...ze});return v!==void 0&&I.set("Content-Length",String(v)),m&&I.append("Set-Cookie",m),a(d,!0),o.info(`200 attachment=${d} viewer=${b} type=${E} disposition=${w} bytes=${v??"-"}`),z?new Response(null,{status:200,headers:I}):(U=!0,new Response(Na(H.bytes,L),{status:200,headers:I}))}finally{U||L()}}};var de=Object.freeze({queueWaitMs:3e4,readMs:3e4,renderMs:1e4,transferMarginMs:5e3}),ml=de.queueWaitMs+de.readMs+de.renderMs+de.transferMarginMs;import{createHash as Oa}from"crypto";var ut=e=>{let t=JSON.stringify(e);return`"${Oa("sha256").update(t).digest("hex")}"`};import{Buffer as Ba}from"buffer";var nn=new Set([194,198,202,206]),Ua=new Set([192,193,194,195]),on=216,Ha=217,an=218,Fa=4,$a=64,qa=2,tn=8,rn=28,xe=12,or=8,Ya=20,sn=xe+or+10,Va=2,we=(e,t)=>e[t]<<8|e[t+1],Ke=(e,t,r)=>{let n=0;for(let o=r-1;o>=0;o-=1)n=n*256+e[t+o];return n},Ae=(e,t,r)=>{if(e.byteLength<t+r.length)return!1;for(let n=0;n<r.length;n+=1)if(e[t+n]!==r.charCodeAt(n))return!1;return!0},ln=e=>e>=192&&e<=207&&e!==196&&e!==200&&e!==204,un=e=>({marker:0,body:0,length:0,end:0,stepsLeft:e}),cn=e=>(e.stepsLeft-=1,e.stepsLeft>=0),dn=e=>e[0]===255&&e[1]===on,mn=(e,t,r)=>{let n=t;for(;;){if(n>=e.byteLength||e[n]!==255)return null;do{if(!cn(r))return null;n+=1}while(n<e.byteLength&&e[n]===255);if(n>=e.byteLength)return null;let o=e[n];if(n+=1,o===Ha)return"eoi";if(o===0||o===on)return null;if(o===1||o>=208&&o<=215)continue;if(n+2>e.byteLength)return null;let a=we(e,n),l=n+a;return a<2||l>e.byteLength?null:(r.marker=o,r.body=n+2,r.length=a,r.end=l,"segment")}},ja=(e,t,r)=>{let n=e.byteLength,o=t;for(;;){let a=e.indexOf(255,o);if(a<0)return n;for(;;){if(!cn(r))return null;if(a+1>=n)return n;let l=e[a+1];if(l===255)a+=1;else if(l===0||l>=208&&l<=215){if(a+=2,a>=n||e[a]!==255)break}else return a}o=a}},pn=(e,{marker:t,body:r,length:n})=>{if(n<8)return null;let o=we(e,r+1),a=we(e,r+3),l=e[r+5];if(a===0||o===0||l===0||n!==8+3*l)return null;let s=[];for(let y=0;y<l;y+=1){let i=e[r+7+3*y],S=i>>4,d=i&15;if(S<1||S>4||d<1||d>4)return null;s.push({id:e[r+6+3*y],horizontal:S,vertical:d})}return{marker:t,width:a,height:o,components:s}},yn=(e,{body:t,length:r})=>{if(r<3)return null;let n=e[t];return n<1||n>Fa||r!==6+2*n?null:Array.from({length:n},(o,a)=>e[t+1+2*a])},hn=(e,t)=>({width:e.width,height:e.height,components:e.components.map(({horizontal:r,vertical:n})=>({horizontal:r,vertical:n})),multiScan:nn.has(e.marker)||t<e.components.length}),ar=e=>{if(!dn(e))return null;let t=un(e.byteLength),r=null;for(let n=2;;){if(mn(e,n,t)!=="segment")return null;if(ln(t.marker)){if(r!==null||(r=pn(e,t),r===null))return null}else if(t.marker===an){if(r===null)return null;let o=yn(e,t);return o===null?null:hn(r,o.length)}n=t.end}},fn=e=>{let t=Math.max(...e.components.map(n=>n.horizontal)),r=Math.max(...e.components.map(n=>n.vertical));return e.components.map(({horizontal:n,vertical:o})=>{let a=Math.ceil(e.width*n/(t*tn)),l=Math.ceil(e.height*o/(r*tn));return Math.ceil(a/n)*n*Math.ceil(l/o)*o})},gn=e=>e.multiScan?fn(e).reduce((r,n)=>r+n,0)*$a*qa:0,za=896,Rn=(e,{maxBlockVisits:t,maxWalkSteps:r})=>{if(!dn(e))return null;let n=Ba.from(e.buffer,e.byteOffset,e.byteLength),o=un(r),a=null,l=null,s=new Map,y=0,i=0,S=0;for(let d=2;;){let b=mn(e,d,o);if(b===null)return null;if(b==="eoi")return l===null?null:{header:l,blockVisits:i};if(d=o.end,ln(o.marker)){if(a!==null||!Ua.has(o.marker)||(a=pn(e,o),a===null))return null;let h=fn(a);s=new Map;for(let[m,R]of a.components.entries()){let M=s.get(R.id);s.set(R.id,M===void 0?h[m]:Math.max(M,h[m]))}y=a.components.length*(nn.has(a.marker)?za:1)}else if(o.marker===an){if(a===null||S===y)return null;let h=yn(e,o);if(h===null)return null;for(let R of h){let M=s.get(R);if(M===void 0)return null;i+=M}if(S+=1,l===null&&(l=hn(a,h.length)),i>t||!l.multiScan)return{header:l,blockVisits:i};let m=ja(n,o.end,o);if(m===null)return null;d=m}}},bn=e=>{if(e.byteLength<24||we(e,8)!==0||we(e,10)!==13||!Ae(e,12,"IHDR"))return null;let t=we(e,16)*65536+we(e,18),r=we(e,20)*65536+we(e,22);return t===0||r===0||t>2147483647||r>2147483647?null:{width:t,height:r}},Wa=e=>{if(Ae(e,xe,"VP8 ")){if(e.byteLength<30||(e[20]&1)!==0||e[23]!==157||e[24]!==1||e[25]!==42)return null;let t=Ke(e,26,2)&16383,r=Ke(e,28,2)&16383;return t===0||r===0?null:{width:t,height:r}}if(Ae(e,xe,"VP8L")){if(e.byteLength<25||e[20]!==47)return null;let t=Ke(e,21,4);return{width:(t&16383)+1,height:Math.floor(t/16384)%16384+1}}return Ae(e,xe,"VP8X")?e.byteLength<sn?null:{width:Ke(e,24,3)+1,height:Ke(e,27,3)+1}:null},Sn=e=>{if(bn(e)===null||e.byteLength<=rn)return null;switch(e[rn]){case 0:return!1;case 1:return!0;default:return null}},An=(e,t)=>{if(Ae(e,xe,"VP8 "))return"lossy";if(Ae(e,xe,"VP8L"))return"lossless";if(!Ae(e,xe,"VP8X")||e.byteLength<sn)return null;if((e[Ya]&Va)!==0)return"animated";let r=!1,n=t;for(let o=xe;o+or<=e.byteLength;){if(n-=1,n<0)return null;if(Ae(e,o,"VP8L"))return"lossless";if(Ae(e,o,"VP8 "))return r?"lossy-alpha":"lossy";Ae(e,o,"ALPH")&&(r=!0);let a=Ke(e,o+4,4);o+=or+a+a%2}return null},Tn={png:bn,jpeg:ar,webp:Wa};var ir=Object.freeze(["image/webp","image/jpeg","image/png"]),sr=1024*1024;var Ja=new Set(["image/png","image/jpeg","image/gif","image/webp"]),Ka={"image/webp":"webp","image/jpeg":"jpeg","image/png":"png"},Ga=new Set(ir),Xa=e=>typeof e=="string"&&Ga.has(e),Qa=256,Pt=(e,t)=>e.fileType===null||!Ja.has(e.fileType)?!1:e.fileSize===null||e.fileSize<=t,Za=[137,80,78,71,13,10,26,10],ei=[255,216,255],ti=[[71,73,70,56,55,97],[71,73,70,56,57,97]],ri=[82,73,70,70],ni=[87,69,66,80],ct=(e,t,r)=>{if(e.byteLength<r+t.length)return!1;for(let[n,o]of t.entries())if(e[r+n]!==o)return!1;return!0},lr=e=>{if(ct(e,Za,0))return"png";if(ct(e,ei,0))return"jpeg";for(let t of ti)if(ct(e,t,0))return"gif";return ct(e,ri,0)&&ct(e,ni,8)?"webp":null},Dn=e=>{let t=JSON.stringify([e.rendererId,e.box.maxWidth,e.box.maxHeight,e.attachmentId,e.filePath,e.fileType,e.fileSize]);return{key:t,etag:ut([t])}},_n=(e,t)=>{if(!Xa(e.contentType))return"content_type";if(!(e.bytes instanceof Uint8Array))return"bytes";if(e.bytes.byteLength===0)return"empty";if(e.bytes.byteLength>sr)return"too_large";let r=Ka[e.contentType];if(lr(e.bytes)!==r)return"signature";let n=Tn[r](e.bytes);return n===null||n.width>t.maxWidth||n.height>t.maxHeight?"dimensions":null},wn=e=>{ue("maxBytes",e.maxBytes,0),ue("maxEntries",e.maxEntries,0);let t=new Map,r=0,n=o=>{let a=t.get(o);a&&(t.delete(o),r-=a.weight)};return{get:o=>{let a=t.get(o);if(a)return t.delete(o),t.set(o,a),a.entry},set:(o,a)=>{n(o);let l=(a.kind==="thumbnail"?a.bytes.byteLength:0)+Qa;if(l>e.maxBytes||e.maxEntries===0)return;let s=a.kind==="thumbnail"?{kind:"thumbnail",bytes:a.bytes.slice(),contentType:a.contentType}:a;t.set(o,{entry:s,weight:l}),r+=l;for(let y of t.keys()){if(r<=e.maxBytes&&t.size<=e.maxEntries)break;n(y)}}}};var ur=e=>{let{budgetMs:t,flightSignal:r,call:n,onOverrun:o,onStuck:a}=e,l=ee(),s=new AbortController,y=!1,i,S,d=()=>{a(ee()-l)},b=L=>{i=Re(()=>{y=!0,L({timedOut:!0}),S=Re(d,t),s.abort(new DOMException(`stage exceeded its ${t} ms budget`,"TimeoutError"))},t)},h=new Promise(b),m=AbortSignal.any([r,s.signal]),R=L=>{L(n(m))},M=new Promise(R),k=L=>(clearTimeout(i),clearTimeout(S),y&&o(ee()-l,L.kind==="error"?{error:L.error}:null),L),A=M.then(L=>k({kind:"value",value:L}),L=>k({kind:"error",error:L}));return{outcome:Promise.race([M.then(L=>({timedOut:!1,value:L})),h]),settled:A}};var Ce={404:"Attachment not found",500:Ie,502:"Thumbnail unavailable",503:"Thumbnail temporarily unavailable",504:"Thumbnail storage timed out"},En=(e,t)=>{if(typeof e!="object"||e===null)return{failure:{kind:"failure",status:500,reason:"port_contract",code:"result"}};let r=e;if(!r.ok)return r.reason==="unsupported"?{entry:{kind:"unrenderable",reason:"unsupported"}}:r.reason==="failed"?{failure:{kind:"failure",status:502,reason:"render_failed"}}:{failure:{kind:"failure",status:500,reason:"port_contract",code:"failure_reason"}};let n=_n(r,t);return n!==null?{failure:{kind:"failure",status:500,reason:"port_contract",code:n}}:{entry:{kind:"thumbnail",bytes:r.bytes,contentType:r.contentType}}},oi=e=>{let t=new AbortController,r=()=>{t.abort()},n=Re(r,de.queueWaitMs);return e.addEventListener("abort",r,{once:!0}),e.aborted&&r(),{signal:t.signal,end:()=>{clearTimeout(n),e.removeEventListener("abort",r)}}},In=()=>{},ai=(e,t)=>t.aborted?Promise.resolve():new Promise(r=>{let n=()=>{t.removeEventListener("abort",n),r()};t.addEventListener("abort",n,{once:!0}),e.then(n)}),xn=e=>{let{gate:t,cache:r,maxBytes:n,encodeUserId:o,recordObjectState:a,logger:l}=e,s=new Map,y=(h,m)=>{let R=m.then(In,In);s.set(h,R);let M=()=>{s.get(h)===R&&s.delete(h)};R.then(M)},i=async(h,m)=>{let R=s.get(h.key);if(R===void 0)return t.acquire(h.owner,m);let M=oi(m);try{if(await ai(R,M.signal),M.signal.aborted)return null;let k=r.get(h.key);return k!==void 0?{...k,identity:"verified"}:await t.acquire(h.owner,M.signal)}finally{M.end()}},S=(h,m)=>{if(h.fileSize===null)return m.kind==="exact"?"verified":"unrecorded";if(m.kind==="exact"?m.bytes===h.fileSize:h.fileSize>m.maxBytes)return"verified";let M=m.kind==="exact"?String(m.bytes):`>${m.maxBytes}`;return l.warn(`size_mismatch expected=${h.fileSize} got=${M} attachment=${h.attachmentId} viewer=${h.owner} variant=thumbnail`),"unverified"},d=(h,m)=>(R,M)=>{let k=M===null?"":` message=${M.error instanceof Error?M.error.message:"unknown"}`;l.warn(`${h}_overrun ms=${R} attachment=${m.attachmentId} viewer=${m.owner} variant=thumbnail${k}`)},b=(h,m)=>R=>{l.warn(`${h}_stuck ms=${R} attachment=${m.attachmentId} viewer=${m.owner} variant=thumbnail`)};return async(h,m)=>{let R=await i(h,m);if(R===null)return{kind:"failure",status:503,reason:m.aborted?"aborted":"queue"};if(typeof R!="function")return R;let M=R,k=null;try{if(m.aborted)return{kind:"failure",status:503,reason:"aborted"};let A=r.get(h.key);if(A!==void 0)return{...A,identity:"verified"};let P=ur({budgetMs:de.readMs,flightSignal:m,call:x=>h.readAttachment(h.filePath,{maxBytes:n,head:!1,principal:o(h.owner),signal:x}),onOverrun:d("read",h),onStuck:b("read",h)}),L=await P.outcome;if(L.timedOut)return k=P.settled,m.aborted?{kind:"failure",status:503,reason:"aborted"}:{kind:"failure",status:504,reason:"read_timeout"};if(m.aborted)return{kind:"failure",status:503,reason:"aborted"};let U=L.value;if(!U.ok&&U.reason!=="too_large")return It(U.reason)?(U.reason==="not_found"&&a(h.attachmentId,!1),{kind:"failure",status:xt(U.reason),reason:U.reason,code:U.code}):{kind:"failure",status:500,reason:"port_contract",code:"failure_reason"};if(U.ok&&U.bytes.byteLength>n)return{kind:"failure",status:500,reason:"port_contract",code:"over_max_bytes"};let H=S(h,U.ok?{kind:"exact",bytes:U.bytes.byteLength}:{kind:"over",maxBytes:n}),z=x=>{H==="verified"&&r.set(h.key,x)},te=x=>(z(x),{...x,identity:H});if(!U.ok)return te({kind:"unrenderable",reason:"too_large"});let j=lr(U.bytes);if(j===null)return te({kind:"unrenderable",reason:"signature"});let E=ur({budgetMs:de.renderMs,flightSignal:m,call:x=>h.renderer.render(U.bytes,{format:j,maxWidth:h.box.maxWidth,maxHeight:h.box.maxHeight,signal:x}),onOverrun:d("render",h),onStuck:b("render",h)}),w=x=>{if(x.kind==="error")return;let q=En(x.value,h.box);"entry"in q&&z(q.entry)},v=null,I=()=>(v===null&&(v=E.settled.then(w),y(h.key,v)),v);m.addEventListener("abort",I,{once:!0});let T=await E.outcome.finally(()=>m.removeEventListener("abort",I));if(T.timedOut||m.aborted)return k=I(),m.aborted?{kind:"failure",status:503,reason:"aborted"}:{kind:"failure",status:502,reason:"render_timeout"};let F=En(T.value,h.box);return"entry"in F?te(F.entry):F.failure}finally{k===null?M():k.then(M,M)}}};var Cn=()=>{let e=new Map;return{join:(t,r,n)=>{let o=()=>{let y=new AbortController,i=()=>{e.get(t)?.controller===y&&e.delete(t)},d={promise:n(y.signal).finally(i),controller:y,waiters:0};return e.set(t,d),d},a=e.get(t)??o();a.waiters+=1;let l=()=>{a.waiters-=1,!(a.waiters>0)&&(a.controller.abort(),e.get(t)===a&&e.delete(t))};r.aborted?l():r.addEventListener("abort",l,{once:!0});let s=()=>{r.removeEventListener("abort",l)};return a.promise.finally(s)}}};var Pn=10,ii=1/Pn,vn=1-ii,si=1024,li=64,ui=8,Mn="private, no-cache",ci="no-store",di=Object.freeze({verified:"",unverified:" identity=unverified",unrecorded:" size=unrecorded"}),mi=e=>{switch(e.status){case 404:case 502:case 504:return"warn";case 500:return"error";case 503:return e.reason==="aborted"?"info":"warn"}},Ln=e=>{let{service:t,encodeUserId:r,resolveViewerScope:n,logger:o,recordObjectState:a,maxBytes:l,thumbnails:s}=e,{renderer:y}=s,i=lt({reason:"rate_limit",limitPerMinute:s.rateLimitPerMinute,logger:o,variant:"thumbnail"}),S=lt({reason:"revalidation_rate_limit",limitPerMinute:s.rateLimitPerMinute*Pn,logger:o,variant:"thumbnail"}),d=Mt({limit:s.concurrency,maxHeldPerOwner:s.concurrency,queue:{max:li,maxPerOwner:ui,maxWaitMs:de.queueWaitMs}}),b=wn({maxBytes:s.cacheBytes,maxEntries:si}),h=Cn(),m=xn({gate:d,cache:b,maxBytes:l,encodeUserId:r,recordObjectState:a,logger:o}),R=(A,P,L,U)=>{let H=`attachment=${A.attachmentId} viewer=${A.internalUserId} variant=thumbnail cache=${U}`;if(P.kind==="failure")return o[mi(P)](`${P.status} ${H} reason=${P.reason} code=${P.code??"-"}`),A.fail(P.status,Ce[P.status],ke(P.status));let z=di[P.identity];if(P.kind==="unrenderable")return o.info(`404 ${H} reason=${P.reason}${z}`),A.fail(404,Ce[404]);let te=P.identity==="verified"?{"Cache-Control":Mn,ETag:L}:{"Cache-Control":ci},j=new Headers({"Content-Type":P.contentType,"Content-Length":String(P.bytes.byteLength),...te,"Content-Security-Policy":"default-src 'none'; sandbox",...ze});return A.cookie&&j.append("Set-Cookie",A.cookie),o.info(`200 ${H} type=${P.contentType} bytes=${P.bytes.byteLength}${z}`),new Response(P.bytes,{status:200,headers:j})},M=A=>i.spend(A),k=(A,P)=>P?S.spend(A):M(A);return async(A,P)=>{let{request:L,attachmentId:U,internalUserId:H,readAttachment:z,cookie:te,fail:j}=A,E=Zt[P],w=L.headers.get("If-None-Match"),v=w!==null,I=k(A,v);if(I)return I;let T=await n(L),F=await t.getAttachmentForUser(T,U,H),q=F!==null&&Pt(F,l)?Dn({rendererId:y.id,box:E,attachmentId:U,filePath:F.filePath,fileType:F.fileType,fileSize:F.fileSize}):null;if(q&&Wr(w,q.etag)){let me=new Headers({"Cache-Control":Mn,ETag:q.etag,...ze});return te&&me.append("Set-Cookie",te),o.info(`304 attachment=${U} viewer=${H} variant=thumbnail cache=revalidated`),new Response(null,{status:304,headers:me})}if(v){let me=M(A);if(me)return me}if(!F)return o.warn(`404 attachment=${U} viewer=${H} variant=thumbnail reason=not_visible`),j(404,Ce[404]);if(!q)return i.refund(H,vn),o.info(`404 attachment=${U} viewer=${H} variant=thumbnail reason=not_eligible`),j(404,Ce[404]);let{key:W,etag:N}=q,Q=b.get(W);if(Q)return i.refund(H,vn),R(A,{...Q,identity:"verified"},N,"hit");let Me=me=>m({key:W,attachmentId:U,filePath:F.filePath,fileSize:F.fileSize,box:E,owner:H,readAttachment:z,renderer:y},me),ge;try{ge=await h.join(W,L.signal,Me)}catch(me){return o.error(`500 attachment=${U} viewer=${H} variant=thumbnail cache=miss reason=port_exception message=${me instanceof Error?me.message:"unknown"}`),j(500,Ce[500])}return R(A,ge,N,"miss")}};var pi='[daily-report] params.token must be passed by the route that mounts attachment.loader; declare a "token" route parameter ({apiBasePath}/attachment/{token})',yi=()=>wt(403,rr,{cookie:null}),kn=Object.freeze({route:"attachment",navigable:e=>{let{kind:t}=er(new URL(e.url).searchParams);return t==="inline"||t==="download"},frameworkDataRefusal:()=>wt(404,Et[404],{cookie:null}),crossSiteRejection:yi}),Nn=e=>{let{authenticate:t,service:r,encodeUserId:n,resolveViewerScope:o,logger:a}=e,l=r.attachmentDelivery,s={service:r,encodeUserId:n,resolveViewerScope:o,logger:a,recordObjectState:Vr(r,a)},y=l===null?null:{idCodec:l.idCodec,read:l.read,serveOriginal:en({...s,maxBytes:l.maxBytes,rateLimitPerMinute:l.rateLimitPerMinute,concurrency:l.concurrency}),serveThumbnail:l.thumbnails===null?null:Ln({...s,maxBytes:l.maxBytes,thumbnails:l.thumbnails})};return async({request:i,params:S})=>{let d=null,b=(h,m,R={})=>wt(h,m,{cookie:d,extraHeaders:R});try{let{user:h,cookie:m}=await t(i,{failureRedirect:null});if(d=m??null,!h)return b(401,"Unauthorized");let R=er(new URL(i.url).searchParams);if(R.kind==="invalid")return b(400,"Invalid attachment request");if(R.kind==="thumbnail"&&i.method!=="GET")return b(405,"Method not allowed",{Allow:"GET"});if(i.method!=="GET"&&i.method!=="HEAD")return b(405,"Method not allowed",{Allow:"GET, HEAD"});if(y===null)return b(404,"Attachment not found");if(S.token===void 0)throw new Error(pi);let M=y.idCodec.decode(S.token);if(M===null||!Kt(M))return b(400,"Invalid attachment token");let k=await r.getUserIdByExternalId(h.id);if(!k)return b(403,"Forbidden");let A={request:i,delivery:R,attachmentId:M,internalUserId:k,readAttachment:y.read,cookie:d,fail:b};return R.kind!=="thumbnail"?await y.serveOriginal(A):y.serveThumbnail===null?b(404,Ce[404]):await y.serveThumbnail(A,R.variant)}catch(h){if(h instanceof Response)throw h;return a.error(`500 attachment=? viewer=? reason=unexpected message=${h instanceof Error?h.message:"unknown"}`),b(500,Ie)}}};var hi=se(1,"[Response]"),ne=(e,t,r,n=200,o=hi)=>{let a=ut(r),l=e.headers.get("If-None-Match");o.info(`[jsonResponseWithETag] ETag: ${a}, If-None-Match: ${l}`);let s=new Headers({"Content-Type":"application/json","Cache-Control":"private, max-age=0, must-revalidate","X-Content-Type-Options":"nosniff","X-Frame-Options":"DENY","Content-Security-Policy":"default-src 'none'",ETag:a});return t&&s.append("Set-Cookie",t),e.method==="GET"&&n===200&&l===a?new Response(null,{status:304,headers:s}):new Response(JSON.stringify(r),{status:n,headers:s})};var kt=e=>e.method==="HEAD"?AbortSignal.abort():e.signal;var Nt=30,Hn=4e3,fi="stream interrupted by server error",gi=15e3,Fn=Symbol("ids-stream-heartbeat"),On=()=>{},Ot=e=>e.return(void 0).then(On,On),Ri=()=>{let e;return{fired:new Promise(r=>{e=setTimeout(()=>r(Fn),gi)}),stop:()=>clearTimeout(e)}},bi=/^[0-9a-f]{1,16}$/,Si=e=>{let t=e.searchParams.get("cursor_report_hub_id"),r=e.searchParams.get("cursor_business_date"),n=e.searchParams.get("cursor_snapshot"),o=n!==null&&bi.test(n)?n:null;if(t===null)return r===null?{cursor:null,snapshot:o}:{invalid:!0};let a=Le(t);return a===null?{invalid:!0}:r===null?{cursor:{businessDate:null,reportHubId:a},snapshot:o}:bt(r)?{cursor:{businessDate:r,reportHubId:a},snapshot:o}:{invalid:!0}};async function*Bn(e,t,r,n){let o=t?Cr(e,t):0,a=!0;for(;;){let l=e.slice(o,o+(a?r:Hn));o+=l.length;let s=o>=e.length,y=l[l.length-1];if(yield{kind:"chunk",items:l,nextCursor:s||!y?null:{businessDate:y.businessDate,reportHubId:y.reportHubId},isLast:s,...a?{total:e.length}:{},...a?{streamAnchor:n.streamAnchor}:{},snapshot:n.snapshot,...a&&n.restarted?{restarted:!0}:{}},a=!1,s)return}}var $n=e=>{let t=new Headers({"Content-Type":"application/x-ndjson; charset=utf-8","Cache-Control":"private, no-cache, no-transform","X-Content-Type-Options":"nosniff"});return e&&t.append("Set-Cookie",e),t},Un=(e,t,r,n)=>{let o=new TextEncoder,a=!1,l=null,s=new ReadableStream({async pull(y){if(a||r.aborted){await Ot(t);try{y.close()}catch{}return}let i=Ri();try{l===null&&(l=t.next());let S=await Promise.race([l,i.fired]);if(i.stop(),S===Fn){if(a||r.aborted){await Ot(t);try{y.close()}catch{}return}y.enqueue(o.encode(`
-`));return}l=null;let{value:d,done:b}=S;if(b){y.close();return}if(a||r.aborted){await Ot(t);try{y.close()}catch{}return}y.enqueue(o.encode(`${JSON.stringify(d)}
-`))}catch(S){if(i.stop(),l=null,a||r.aborted)return;n.error(`ids-stream emission failed: ${S instanceof Error?S.message:String(S)}`);try{let d={kind:"error",error:fi};y.enqueue(o.encode(`${JSON.stringify(d)}
-`)),y.close()}catch{}}},cancel(){a=!0,Ot(t)}});return new Response(s,{status:200,headers:$n(e)})},qn=e=>{let{service:t,logger:r}=e;return async(n,o,a,l,s)=>{let y=Si(n);if("invalid"in y)return ne(a,o,{error:{message:"Invalid cursor"}},400);let i=it(n.searchParams.get("forceRefresh"));if(i===null)return ne(a,o,{error:{message:"Invalid forceRefresh"}},400);let S=kt(a);if(S.aborted)return new Response(null,{status:200,headers:$n(o)});let d=!1,b=null,h=null,m=new Promise((k,A)=>{b=k,h=A});m.catch(()=>{});let R=t.getDailyReportIdsByExternalId(s,l.id,{forceRefresh:i,onFetchStart:y.cursor?void 0:()=>{d=!0,t.readSseStreamAnchor().then(k=>t.getDailyReportIdsFirstPageByExternalId(s,l.id,Nt).then(A=>({items:A,streamAnchor:k}))).then(k=>b?.(k),k=>h?.(k))}});if(R.catch(()=>{}),y.cursor){let{items:k,streamAnchor:A,snapshot:P}=await R,L=y.snapshot!==null&&y.snapshot===P;return Un(o,Bn(k,L?y.cursor:null,Nt,{snapshot:P,restarted:!L,streamAnchor:A}),S,r)}let M=(async function*(){let k=await Promise.race([R.then(L=>({kind:"full",source:L}),L=>({kind:"full-error",error:L})),m.then(L=>({kind:"page",page:L}),()=>({kind:"page-error"}))]),A=null,P=!1;if(k.kind==="full")A=k.source;else if(k.kind==="page"){let{items:L,streamAnchor:U}=k.page;if(L.length<Nt){yield{kind:"chunk",items:L,nextCursor:null,isLast:!0,total:L.length,streamAnchor:U};return}yield{kind:"chunk",items:L,nextCursor:null,isLast:!1,provisional:!0},P=!0}else if(k.kind==="full-error"&&d){let L=await m.catch(()=>null);L&&L.items.length>0&&(yield{kind:"chunk",items:L.items,nextCursor:null,isLast:!1,provisional:!0})}A===null&&(A=await R),yield*Bn(A.items,null,P?Hn:Nt,{snapshot:A.snapshot,streamAnchor:A.streamAnchor})})();return Un(o,M,S,r)}};import{systemSseRuntime as Bi}from"@aiquants/sse";import{createSseResponse as Ui,readLastEventId as Hi,startSseHeartbeat as Fi,terminalStreamResponse as $i}from"@aiquants/sse/server";import{z as g}from"zod";var Yn=15e3,Vn="lastEventId",Ai=/^\d{1,15}-\d{1,15}$/,jn=e=>Ai.test(e),Ti=g.object({name:g.string().nullish(),affiliation:g.string().nullish()}),Di=g.object({name:g.string().nullish(),text:g.string().nullish(),color:g.string().nullish()}),_i=g.object({id:g.number(),name:g.string().nullish(),color:g.string().nullish()}),zn=g.object({id:g.number(),userId:g.string().nullish(),userName:g.string().nullish(),content:g.string().nullish(),createdAt:g.string().nullish(),isMine:g.boolean()}),wi=g.object({id:g.string(),fileName:g.string(),fileType:g.string().nullable(),fileSize:g.number().nullable(),createdAt:g.string().nullable(),state:g.enum(["present","absent","unknown"]),hasThumbnail:g.boolean().default(!1)}),cr=g.object({reportHubId:g.number(),date:g.string().nullish(),createdAt:g.string().nullish(),author:g.string().nullish(),userId:g.string().nullish(),sourceType:g.string().nullish(),employeeName:g.string().nullish(),updatedBy:g.string().nullish(),updatedAt:g.string().nullish(),category:g.string().nullish(),creationCategory:g.string().nullish(),visitTimeFrom:g.string().nullish(),visitTimeTo:g.string().nullish(),customerName:g.string().nullish(),interviewers:g.array(Ti),subject:g.string().nullish(),content:g.string().nullish(),externalComments:g.array(Di),isRead:g.boolean(),isStarred:g.boolean(),labels:g.array(_i),postedComments:g.array(zn),attachments:g.array(wi).default([])}),Ei=g.object({type:g.literal("connected")}),Bt=g.object({type:g.literal("status-update"),reportHubId:g.number(),statusType:g.enum(["star","read"]),value:g.boolean(),clientTempId:g.string(),recipientRawUserId:g.number().optional()}),dr=g.string().optional(),mr=g.object({type:g.literal("comment-add"),reportHubId:g.number(),comment:zn,clientTempId:g.string(),recipientRawUserId:g.number().optional(),sourceType:dr}),pr=g.object({type:g.literal("comment-delete"),reportHubId:g.number(),commentId:g.number(),clientTempId:g.string(),recipientRawUserId:g.number().optional(),sourceType:dr}),yr=g.object({type:g.literal("report-create"),reportHubId:g.number(),report:cr,clientTempId:g.string(),recipientRawUserId:g.number().optional()}),hr=g.object({type:g.literal("report-update"),reportHubId:g.number(),report:cr,clientTempId:g.string(),recipientRawUserId:g.number().optional()}),fr=g.object({type:g.literal("report-publish"),reportHubId:g.number(),report:cr,clientTempId:g.string(),recipientRawUserId:g.number().optional()}),gr=g.object({type:g.literal("report-delete"),reportHubId:g.number(),clientTempId:g.string(),sourceType:dr}),Wn=g.discriminatedUnion("type",[Ei,Bt,mr,pr,yr,hr,fr,gr]);import{systemSseRuntime as xi}from"@aiquants/sse";import{createSharedSource as Ci}from"@aiquants/sse/shared-source";var Ne="daily-report:ids:",Oe="daily-report:business-date:",Ut=(e,t)=>`${e}st:${t}`,Rr=e=>`${Ne}user:${e}:`,Jn=(e,t)=>Ut(Rr(e),t),Ii=e=>`${Oe}${e}:`,Kn=(e,t)=>Ut(Ii(e),t),dt=e=>`daily-report:date:${e}:user:`,Ge=(e,t)=>`${dt(e)}${t}:`,Gn=(e,t,r)=>Ut(Ge(e,t),r),Te=e=>`daily-report:detail:${e}:user:`,Ht=(e,t)=>`${Te(e)}${t}:`,Xn=(e,t,r)=>Ut(Ht(e,t),r);var Be=(e,t)=>{let[r,n]=e.split("-").map(Number),[o,a]=t.split("-").map(Number);return r!==o?r<o:n<=a},vi=5e3,Mi=100,mt=class{constructor(t){this.config=t;this._lastId=null;this._positioning=null;this._generation=0;this._logger=t.logger??se(1,"[SSE Reader]"),this._source=this._createSource()}ready(){return this._position().then(()=>{})}subscribe(t,r){return this._source.subscribe({next:n=>{this._lastId=n.id,t(n)},error:n=>r(n instanceof Error?n:new Error(String(n)))})}async destroy(){await this._source.dispose(),this._generation+=1,this._positioning=null,this._lastId=null,this._source=this._createSource()}_position(){if(this._lastId!==null)return Promise.resolve(this._lastId);if(this._positioning===null){let t=this._generation;this._positioning=this._readTail().then(r=>{if(t!==this._generation)throw new Error("SSE reader was destroyed while the stream tail was being read");return this._positioning=null,this._lastId=r,r},r=>{throw t===this._generation&&(this._positioning=null),r})}return this._positioning}async _readTail(){let t=await this.config.redis?.getClient();if(!t)throw new Error("Failed to get Redis client to read the SSE stream tail");let r=await t.xRevRange(this.config.streamKey,"+","-",{COUNT:1});return r.length>0?r[0].id:"0-0"}_createSource(){return Ci({start:t=>this._start(t),lingerMs:0,replay:"none",runtime:xi,onListenerError:t=>this._logger.error("SSE reader subscriber threw:",t),onStopError:t=>this._logger.error("SSE reader failed to stop:",t)})}async _start(t){let r=await this._position(),n=await this.config.redis?.createClient();if(!n)throw new Error("Failed to create Redis client for SSE reader");n.on("error",l=>{this._logger.error("Redis client error:",l)});let o=!1,a=this._readLoop(n,t,r,()=>o);return async()=>{if(o=!0,n.isOpen)try{await n.quit()}catch{}await a}}async _readLoop(t,r,n,o){let a=n;try{for(;!o()&&t.isOpen;){let l=await t.xRead([{key:this.config.streamKey,id:a}],{BLOCK:vi,COUNT:Mi});if(l)for(let s of l)for(let y of s.messages)a=y.id,this._invalidateCaches(y.message),r.next({id:y.id,message:y.message})}}catch(l){o()||(this._logger.error("xRead loop error:",l),r.fail(l instanceof Error?l:new Error(String(l))));return}o()||r.fail(new Error("Redis client for SSE reader closed unexpectedly"))}_invalidateCaches(t){try{let r=t?.data?JSON.parse(t.data):null,n=r?.type;if((n==="report-create"||n==="report-delete"||n==="report-publish")&&this.config.cache.invalidatePrefix(Ne),n==="comment-add"||n==="comment-delete"||n==="status-update"){let o=r?.reportHubId;typeof o=="number"&&this.config.cache.invalidatePrefix(Te(o))}}catch{}}};import{inArray as Pi,sql as Qn}from"drizzle-orm";var Li="
",ki=64,Ni=e=>e.toLowerCase(),Oi=e=>e.trim().toLowerCase();function Zn(e){if(e==null)return null;if(!Array.isArray(e))return new Set;let t=new Set;for(let r of e){if(typeof r!="string")continue;let n=Oi(r);n.length>0&&t.add(n)}return t}function De(e,t){return e===null?!0:t==null?!1:e.has(Ni(t))}function Ue(e){return e!==null&&e.size===0}function to(e,t){if(t!==null)return t.size===0?Qn`1 = 0`:Pi(Qn`LOWER(${e})`,[...t])}var Xe,Qe,pt=class pt{constructor(t,r){zt(this,Xe);zt(this,Qe);Wt(this,Xe,t),Wt(this,Qe,r)}get visible(){return ot(this,Xe)===null?null:new Set(ot(this,Xe))}get commentable(){return ot(this,Qe)===null?null:new Set(ot(this,Qe))}static restrictTo(t){let r=typeof t=="object"&&t!==null&&"read"in t,n=Zn(r?t.read:t),o=r?t.comment:void 0;if(o===void 0)return new pt(n,n);let a=Zn(o),l=new Set;for(let s of a??[])n.has(s)&&l.add(s);return new pt(n,l)}static unrestricted(t){return new pt(null,null)}};Xe=new WeakMap,Qe=new WeakMap;var fe=pt;function yt(e){let t=eo(e.visible),r=eo(e.commentable);return t===r?t:`d:${t.length}:${t}${r}`}function eo(e){if(e===null)return"all";if(e.size===0)return"none";let t=[...e].sort().map(n=>`${n.length}:${n}`).join(Li);if(t.length<=ki)return`s:${t}`;let r=2166136261;for(let n=0;n<t.length;n++)r^=t.charCodeAt(n),r=Math.imul(r,16777619);return`sh:${(r>>>0).toString(16)}`}var oo=Object.freeze({...st,route:"sse",frameworkDataRefusal:_t}),ro=864e5,qi={baseMs:2e3,jitterMs:8e3},ao=6e4,br=1e3,io=JSON.stringify({type:"connected"}),no="0-0",Yi=(e,t,r,n)=>{if(r===null&&n===null)return!0;let o=typeof t.sourceType=="string"?t.sourceType:void 0;switch(e.type){case"connected":case"status-update":return!0;case"report-create":case"report-update":case"report-publish":return De(r,e.report.sourceType);case"comment-add":case"comment-delete":return De(n,o??"Internal");case"report-delete":return De(r,o)}},Vi=["externalComments","postedComments"],ji=(e,t,r)=>{if(r===null||e.type!=="report-create"&&e.type!=="report-update"&&e.type!=="report-publish"||De(r,e.report.sourceType))return!1;let n=t.report;for(let o of Vi)n[o]=[];return!0},zi=(e,t)=>{e.writeEvent({event:null,id:t,data:io})},Wi=(e,t,r,n,o)=>{if(r.data)try{let a=JSON.parse(r.data),l=Wn.safeParse(a);if(!l.success){o.error("SSE message validation failed:",l.error.format());return}let s=l.data,y=typeof a.recipientRawUserId=="number"?a.recipientRawUserId:void 0;if((s.type==="status-update"||y!==void 0)&&y!==n.internalUserId||!Yi(s,a,n.visibleSet,n.commentableSet)){zi(e,t);return}let S=ji(s,a,n.commentableSet),d;if("recipientRawUserId"in a){let{recipientRawUserId:b,...h}=a;d=JSON.stringify(h)}else S?d=JSON.stringify(a):d=r.data;e.writeEvent({event:null,id:t,data:d})}catch(a){o.error(`[SSE:${n.internalUserId}] processEntry error:`,a)}},so=e=>{let{authenticate:t,service:r,resolveViewerScope:n,redis:o,sseReader:a,streamKey:l,logger:s}=e,y=async(i,S)=>{let{request:d,internalUserId:b,cursor:h}=S,m=S.initialScope.visible,R=S.initialScope.commentable,M=0,k=setInterval(()=>{let w=++M;n(d,"refresh").then(v=>{w===M&&(m=v.visible,R=v.commentable)})},ao);i.onClose(()=>clearInterval(k));let A=h===null?no:h,P=h!==null&&o!==void 0,L=[],U=null,H=w=>{Be(w.id,A)||(A=w.id,Wi(i,w.id,w.message,{internalUserId:b,visibleSet:m,commentableSet:R},s))},z=async(w,v)=>{let[I]=await w.xRange(l,"-","+",{COUNT:1});return I!==void 0&&!Be(I.id,v)},te=async(w,v)=>{if(await z(w,v))return!1;let I=v;for(;;){let T=await w.xRange(l,I,"+",{COUNT:br}),F=T[0];if(F!==void 0&&F.id!==I&&await z(w,I))return!1;for(let q of T){if(U!==null&&Be(U,q.id))return!0;H(q)}let x=T.at(-1);if(T.length<br||x===void 0||i.isClosed())return!0;I=x.id}},j=a.subscribe(w=>{if(!P){H(w);return}Be(w.id,A)||(U===null&&(U=w.id),L.push(w))},w=>{s.error(`[SSE:${b}] Fan-Out reader error:`,w),i.close()});if(i.onClose(j),h===null){await a.ready();try{let w=await o?.getClient();if(w){let v=await w.xRevRange(l,"+","-",{COUNT:1});v.length>0&&!Be(v[0].id,A)&&(A=v[0].id)}}catch{}}if(i.writeEvent({event:null,id:A===no?null:A,data:io}),Fi(i,{intervalMs:Yn,retry:qi,runtime:Bi}),h===null||o===void 0)return;await a.ready();let E=await o.getClient();if(E===void 0)throw new Error("redis client unavailable for the SSE catch-up");if(!await te(E,h)){i.writeRetry(ro),i.writeEvent({event:"resync-required",id:null,data:""}),i.close();return}P=!1;for(let w of L.splice(0))H(w)};return async({request:i,params:S})=>{let d,b=()=>{let m=new Headers;return d!==void 0&&m.append("Set-Cookie",d),m},h=m=>$i(m,{data:"",retryMs:ro,headers:b()});try{let m=await t(i,{failureRedirect:null});d=m.cookie;let{user:R}=m;if(!R)return h("auth-required");let M=await r.getUserIdByExternalId(R.id);if(!M)return h("forbidden");if(S.endpoint!=="updates")return new Response("Not Found",{status:404,headers:b()});let k=Hi(i,Vn);if(k!==null&&!jn(k))return s.warn(`[SSE:${M}] malformed resume cursor; asking the client to resync`),h("resync-required");let A=await n(i,"initial");return Ui({requestSignal:kt(i),headers:b(),onError:(P,L)=>s.error(`[SSE:${M}] ${L} failed:`,P),produce:P=>y(P,{request:i,internalUserId:M,cursor:k,initialScope:A})})}catch(m){if(m instanceof Response)throw m;let R=m instanceof Error?m:new Error(String(m));return s.error(`500 sse name=${R.name} message=${R.message}`),new Response("Internal Server Error",{status:500,headers:b()})}}};var Ji=(e,t)=>{let r=new Headers({"Content-Type":"application/json"});return t?.setCookie&&r.append("Set-Cookie",t.setCookie),new Response(JSON.stringify(e),{status:t?.status??200,headers:r})},Ki=Object.freeze({...st,route:"api",frameworkDataRefusal:({params:e})=>Qt(e.endpoint)&&Dt[e.endpoint]==="stream"?_t():null}),Gi=Object.freeze({...st,route:"action"});function Sr(e){vt(e);let{authenticate:t,service:r,encodeUserId:n,redis:o,sseReader:a,streamKey:l}=e,s={titleMaxLength:ue("service.titleMaxLength",r.titleMaxLength,1)},y=e.loginRedirectPath??"/auth/login",i=e.logger??se(3,"[DailyReportAPI]"),S=e.logger??se(3,"[DailyReportVisibility]"),d=e.logger??se(1,"[DailyReportSSE]"),b=e.logger??se(1,"[DailyReportAttachment]"),h=e.logger??se(2,"[DailyReportIsolation]"),m=e.logger??se(2,"[DailyReportAction]"),R=async(E,w="initial")=>{let v=e.resolveVisibleSourceTypes;if(!v)return fe.unrestricted("no visibility port injected: this deployment does not restrict by source type");try{let I=await v(E,{reason:w});return I==null?fe.unrestricted("visibility port returned null/undefined: this deployment opts out of source-type filtering"):fe.restrictTo(I)}catch(I){return S.error("resolveVisibleSourceTypes threw; failing closed (deny all)",I),fe.restrictTo([])}},M=async({request:E})=>{let{user:w,cookie:v}=await t(E,{failureRedirect:y}),I=new Headers;v&&I.append("Set-Cookie",v);let T=await r.getUserIdByExternalId(w.id),F=T?n(T):null;return{data:{user:w,userId:F},headers:I}},k={"business-date":async(E,w,v,I,T)=>{let F=E.searchParams.get("businessDate"),x=F===null?null:Ve(F);if(x===null)return ne(v,w,{error:{message:"Invalid business date"}},400);let q=it(E.searchParams.get("forceRefresh"));if(q===null)return ne(v,w,{error:{message:"Invalid forceRefresh"}},400);let W=await r.getDailyReportsByBusinessDateByExternalId(T,x,I.id,{forceRefresh:q});return ne(v,w,{businessDate:x,reports:W},200)},[St]:qn({service:r,logger:i}),report:async(E,w,v,I,T)=>{let F=Le(E.searchParams.get("reportHubId"));if(F===null)return ne(v,w,{error:{message:"Invalid reportHubId"}},400);let x=it(E.searchParams.get("forceRefresh"));if(x===null)return ne(v,w,{error:{message:"Invalid forceRefresh"}},400);let q=await r.getDailyReportDetailByIdByExternalId(T,F,I.id,{snapshot:!0,forceRefresh:x});return q?ne(v,w,{report:q},200):ne(v,w,{error:{message:"Report not found"}},404)}},A=async({request:E,params:w})=>{let{user:v,cookie:I}=await t(E,{failureRedirect:null}),T=I??null;if(!v)return ne(E,T,{error:{message:"Unauthorized"}},401);let F=w.endpoint;if(!Qt(F))return ne(E,T,{error:{message:"Unknown endpoint"}},404);let x=Br[Dt[F]];if(!x.includes(E.method)){let W=ne(E,T,{error:{message:"Method not allowed"}},405);return W.headers.set("Allow",x.join(", ")),W}let q=ee();try{let W=new URL(E.url),N=await R(E);return await k[F](W,T,E,v,N)}catch(W){let N=ee()-q,Q=W instanceof Error?W:new Error(String(W));return i.error(`500 endpoint=${F} elapsed=${N}ms name=${Q.name} code=${"code"in Q?Q.code:"N/A"} message=${Q.message}`),i.error("Stack:",Q.stack),ne(E,T,{error:{message:"Internal Server Error"}},500)}},P=Or(m),L=async(E,w,v,I)=>{let{clientTempId:T,operationTimestamp:F}=E;if(E.intent==="create"){let N=await r.createDailyReport(w,E.businessDate,T);return I({status:"OK",intent:"create",report:N,reportHubId:String(N.reportHubId),clientTempId:T})}let{reportHubId:x,businessDate:q}=E,W=async(N,Q,Me)=>{try{let ge=await Me(Q);return I({status:"OK",intent:N,updatedStatus:{isStarred:ge.isStarred,isRead:ge.isRead},operationTimestamp:F,reportHubId:String(x),clientTempId:T})}catch(ge){if(ge instanceof Error&&ge.message==="Not Found")return I({error:"Report not found"},{status:404});throw ge}};switch(E.intent){case"update":try{return await r.updateDailyReport(x,w,E.changes,T),I({status:"OK",intent:"update",reportHubId:String(x),clientTempId:T})}catch(N){if(N instanceof Error){if(N.message==="Unauthorized")return I({error:"Unauthorized"},{status:403});if(N.message==="Not Found")return I({error:"Report not found"},{status:404})}throw N}case"publish":try{let N=await r.publishDailyReport(x,w,T);return I({status:"OK",intent:"publish",reportHubId:String(x),clientTempId:T,report:N})}catch(N){if(N instanceof Error){if(N.message==="Unauthorized")return I({error:"Unauthorized"},{status:403});if(N.message==="Not Found")return I({error:"Report not found"},{status:404})}throw N}case"delete":try{return await r.deleteDailyReport(x,w,T),I({status:"OK",intent:"delete",reportHubId:String(x),clientTempId:T})}catch(N){if(N instanceof Error){if(N.message==="Unauthorized")return I({error:"Unauthorized"},{status:403});if(N.message==="Not Found")return I({error:"Report not found"},{status:404})}throw N}case"toggleStar":return await W("toggleStar",E.value,N=>r.setStarStatus(v,w,x,q,N,T));case"toggleRead":return await W("toggleRead",E.value,N=>r.setReadStatus(v,w,x,q,N,T));case"addComment":try{let N=await r.addComment(v,w,x,E.content,q,T),Q={...N,userId:N.userId};return I({status:"OK",intent:"addComment",newComment:Q,reportHubId:String(x),clientTempId:T})}catch(N){if(N instanceof Error){if(N.message==="Not Found")return I({error:"Report not found"},{status:404});if(N.message.startsWith("Comments are restricted"))return I({error:"Comments are restricted for this report"},{status:403})}throw N}case"deleteComment":try{return await r.deleteComment(v,w,x,E.commentId,q,T),I({status:"OK",reportHubId:String(x),deletedCommentId:String(E.commentId),clientTempId:T})}catch(N){if(N instanceof Error){if(N.message==="Unauthorized")return I({error:"Unauthorized"},{status:403});if(N.message==="Not Found")return I({error:"Comment not found"},{status:404})}throw N}}},U=async({request:E,params:w})=>{let{user:v,cookie:I}=await t(E,{failureRedirect:null}),T=(x,q)=>Ji(x,{...q,setCookie:I});if(!v)return T({error:"Unauthorized"},{status:401});let F=ee();try{if(w.endpoint!=="action")return T({error:"Unknown endpoint"},{status:404});let x=await Nr(E,s);if("refusal"in x){let{refusal:Q}=x;return Q.status===413&&P(Q.measuredBy),T({error:Q.error},{status:Q.status})}let{command:q}=x;if(q.intent==="clearCache"&&!e.enableDevCacheClear)return T({error:"Invalid intent"},{status:400});let W=await r.getUserIdByExternalId(v.id);if(!W)return T({error:"User not found"},{status:404});let N=await R(E);return q.intent==="clearCache"?(await r.clearCache(),T({status:"OK",intent:"clearCache"})):await L(q,W,N,T)}catch(x){if(x instanceof Response)throw x;let q=ee()-F,W=x instanceof Error?x:new Error(String(x));return i.error(`500 action elapsed=${q}ms name=${W.name} message=${W.message}`),i.error("Stack:",W.stack),T({error:"Internal Server Error"},{status:500})}},H=so({authenticate:t,service:r,resolveViewerScope:R,redis:o,sseReader:a,streamKey:l,logger:d}),z=Nn({authenticate:t,service:r,encodeUserId:n,resolveViewerScope:R,logger:b}),te=Yr(h),j=(E,w)=>async v=>{let I=$r(v.request)?E.frameworkDataRefusal(v):null;if(I!==null)throw I;return qr(v.request,E)?(te(E.route,v.request),E.crossSiteRejection()):w(v)};return{index:{loader:M},api:{loader:j(Ki,A),action:j(Gi,U)},sse:{loader:j(oo,H)},attachment:{loader:j(kn,z)}}}import{runWithTransactionRetry as Qi}from"@aiquants/mssql";import{aliasedTable as Ze,and as X,asc as Ft,desc as et,eq as C,getColumns as Zi,inArray as be,isNull as ce,or as tt,sql as lo}from"drizzle-orm";var He=e=>Zi(e),uo=At([]),le=(e,t)=>{if(!e)return null;let r=e instanceof Date?e:new Date(e);if(Number.isNaN(r.getTime()))return typeof e=="string"?e:null;let n=r.getFullYear(),o=n<0?`-${String(-n).padStart(4,"0")}`:String(n).padStart(4,"0"),a=String(r.getMonth()+1).padStart(2,"0"),l=String(r.getDate()).padStart(2,"0");if(t==="YYYY-MM-DD")return`${o}-${a}-${l}`;let s=String(r.getHours()).padStart(2,"0"),y=String(r.getMinutes()).padStart(2,"0"),i=String(r.getSeconds()).padStart(2,"0");return`${o}-${a}-${l} ${s}:${y}:${i}`},es=e=>{let{length:t}=e;if(typeof t=="number"&&Number.isSafeInteger(t)&&t>=1)return t;throw he("tables.hub.title","a character column with a declared length",t)},co=e=>e===""?null:e;function Ar(e){let{db:t,tables:r,userTable:n,resolveUserId:o,encodeUserId:a,redis:l,cache:s,epochs:y}=e,{hub:i,internal:S,comment:d,label:b,hubLabel:h,userStatus:m}=r,R=e.externalSources??[],M=e.draftLabelNames&&e.draftLabelNames.length>0?e.draftLabelNames:[e.draftLabelName??"\u4E0B\u66F8\u304D"],k=M[0]??"\u4E0B\u66F8\u304D",A=e.logger??se(1,"[DailyReportService]");vt(e);let P=Qr(e.attachments),L=es(i.title),U=c=>Qi(u=>t.transaction(p=>u(()=>c(p))),e.transactionRetry),H=e.idsTtlMs??18e4,z="daily-report:ids:epoch",te=e.businessDateTtlMs??3e5,j="daily-report:date-epoch:",E="daily-report:detail-epoch:",v=`${e.streamKey??"daily-report:sse-stream"}:v2`,I=e.streamMaxLen??1e4,T=c=>y.incrementEpoch(c),F=c=>to(i.sourceType,c),x=async(c,u)=>{let p=await l?.getClient();if(!p){A.warn(`[SSE] Redis client unavailable (${u})`);return}let f=JSON.stringify(c),_=Buffer.byteLength(f);if(_>6356992){A.warn(`[SSE] Event too large (${u}): ${_} bytes > ${6356992}; not published`);return}let O=ee();try{await p.xAdd(v,"*",{data:f},{TRIM:{strategy:"MAXLEN",strategyModifier:"~",threshold:I}});let D=ee()-O;D>1e3&&A.warn(`[SSE] Slow publish (${u}): ${D}ms`)}catch(D){A.error(`[SSE] Redis publish failed (${u}):`,D)}},q=async()=>{try{let c=await l?.getClient();if(c===void 0)return null;let[u]=await c.xRevRange(v,"+","-",{COUNT:1});return u===void 0?null:u.id}catch(c){return A.error("[DailyReportService] SSE stream anchor read failed",c),null}},W=c=>c==null||c===""?null:/^\d+$/.test(c)?a(Number(c)):c,N=()=>{let c={};for(let u of R)c[`ext_${u.sourceType}`]=He(u.table);return c},Q=c=>{let u=c;for(let p of R)u=u.leftJoin(p.table,X(C(i.sourceType,p.sourceType),C(i.sourceIdNum,p.idColumn)));return u},Me=(c,u,p)=>{let{hub:f,internal:_}=u,O=f.summary,D=[],B=null,$=null,Y=null,K=null,G=null,pe=null,qe=[],Ee=R.find(V=>V.sourceType===f.sourceType),Ye=Ee?u[`ext_${Ee.sourceType}`]:void 0;if(Ee&&Ye){let V=Ee.mapRow(Ye);V.content!==void 0&&(O=V.content),V.employeeName!==void 0&&(pe=V.employeeName),V.category!==void 0&&(B=V.category),V.creationCategory!==void 0&&($=V.creationCategory),V.visitTimeFrom!==void 0&&(Y=V.visitTimeFrom),V.visitTimeTo!==void 0&&(K=V.visitTimeTo),V.customerName!==void 0&&(G=V.customerName),V.interviewers!==void 0&&(D=V.interviewers),V.externalComments!==void 0&&(qe=V.externalComments)}else f.sourceType==="Internal"&&_&&(O=_.body);let _e=(u.labels??[]).map(V=>({id:V.id,name:V.name,color:V.color})),ae=u.postedCommentRows??[],Z=De(c.commentable,f.sourceType),ie=$?M.includes($):!1,jt=$e?.[0]??null;return ie&&jt&&!_e.some(V=>V.id===jt)&&_e.push({id:jt,name:k,color:null}),{reportHubId:f.id,date:le(f.businessDate,"YYYY-MM-DD"),author:u.creatorName??W(f.createdBy)??"",userId:f.userId?a(f.userId):"",sourceType:f.sourceType??"Internal",createdAt:le(f.createdAt,"YYYY-MM-DD HH:mm:ss"),updatedAt:le(f.updatedAt,"YYYY-MM-DD HH:mm:ss"),updatedBy:W(f.updatedBy),employeeName:pe??u.creatorName??W(f.createdBy),category:B,creationCategory:$,visitTimeFrom:Y,visitTimeTo:K,customerName:G,interviewers:D,subject:f.title,content:O,externalComments:Z?qe:[],isRead:u.isRead??!1,isStarred:u.isStarred??!1,labels:_e,postedComments:ae.filter(V=>Z||p!==void 0&&V.userId===p).map(V=>({...V,userId:a(V.userId),isMine:p?V.userId===p:!1})),attachments:u.attachments}},ge=async(c,u)=>{let p=Ze(h,"draft_label"),f=await Pe();return(await t.select({reportHubId:i.id,businessDate:i.businessDate,sourceType:i.sourceType}).from(i).leftJoin(p,X(C(p.hubId,i.id),be(p.labelId,f))).where(X(ce(i.deletedAt),tt(C(i.userId,u),ce(i.userId),ce(p.hubId)),F(c.visible))).orderBy(et(i.businessDate),et(i.id))).map(O=>({...O,businessDate:le(O.businessDate,"YYYY-MM-DD")}))},me=async(c,u,p)=>{let f=await rt(u);if(!f)return[];if(Ue(c.visible))return[];let _=Ze(h,"draft_label"),O=await Pe();return(await t.select({reportHubId:i.id,businessDate:i.businessDate,sourceType:i.sourceType}).top(p).from(i).leftJoin(_,X(C(_.hubId,i.id),be(_.labelId,O))).where(X(ce(i.deletedAt),tt(C(i.userId,f),ce(i.userId),ce(_.hubId)),F(c.visible))).orderBy(et(i.businessDate),et(i.id))).map(B=>({...B,businessDate:le(B.businessDate,"YYYY-MM-DD")}))},Co=async(c,u)=>{let p=await Q(t.select({hub:He(i),internal:He(S),creatorName:n.displayName,...N()}).from(i)).leftJoin(S,C(i.id,S.hubId)).leftJoin(n,C(i.userId,n.id)).where(X(C(i.businessDate,lo`${u}`),ce(i.deletedAt),F(c.visible))).orderBy(et(i.id)),f=await gt(p.map(_=>_.hub.id));return p.map(_=>Me(c,{..._,attachments:f.get(_.hub.id)??[]}))},ht=new Map,rt=async c=>{if(!e.disableUserIdCache&&ht.has(c))return ht.get(c)??null;let u=await o(c);return u!==null&&!e.disableUserIdCache&&ht.set(c,u),u},vo=async(c,u,{forceRefresh:p=!1,snapshot:f=!1,ttlMsOverride:_,onFetchStart:O}={})=>{let D=await rt(u);if(!D)return{items:[],streamAnchor:null,snapshot:uo};if(Ue(c.visible))return{items:[],streamAnchor:await q(),snapshot:uo};let B=Jn(D,yt(c)),[$]=await s.getOrFetch({cacheKey:B,fetcher:async()=>{let Y=await q(),K=await ge(c,D);if(!xr(K)){A.warn("[DailyReportService] ids array is not in stream order; re-sorting (check SQL ORDER BY vs compareIdsStreamOrder, or concurrent row movement during the scan)");let G=[...K].sort(Tt);return[{items:G,streamAnchor:Y,snapshot:At(G)}]}return[{items:K,streamAnchor:Y,snapshot:At(K)}]},onFetchStart:O,forceRefresh:p,snapshot:f,ttlMsOverride:_??H,epochKey:z,refreshAheadRatio:.5});if($===void 0)throw new Error("[DailyReportService] ids cache returned no record");return $},Mo=(c,u,{forceRefresh:p=!1,snapshot:f=!1,ttlMsOverride:_}={})=>{let O=ye(u);return O?Ue(c.visible)?Promise.resolve([]):s.getOrFetch({cacheKey:Kn(O,yt(c)),fetcher:()=>Co(c,O),forceRefresh:p,snapshot:f,ttlMsOverride:_??te}):Promise.resolve([])},$e=null,ft=async()=>($e!==null||($e=(await t.select({id:b.id}).from(b).where(be(b.name,M)).orderBy(b.id)).map(u=>u.id)),$e),Pe=async()=>{let c=await ft();return c.length>0?c:[-1]},qt=async()=>{let c=await ft();if(c.length===0)return null;let[u]=await t.select({id:b.id}).top(1).from(b).where(C(b.name,k));return u?.id??c[0]},Po=(c,u)=>u!=null?"absent":c!=null?"present":"unknown",gt=async c=>{let u=new Map,p=r.attachment;if(c.length===0||!p||P===null)return u;let f=P.idCodec,_=P.thumbnails!==null,O=await t.select({id:p.id,hubId:p.hubId,fileName:p.fileName,fileType:p.fileType,fileSize:p.fileSize,createdAt:p.createdAt,objectCheckedAt:p.objectCheckedAt,objectMissingAt:p.objectMissingAt}).from(p).where(be(p.hubId,c)).orderBy(Ft(p.createdAt),Ft(p.id));for(let D of O){let B=D.fileType?String(D.fileType):null,$=D.fileSize!=null?Number(D.fileSize):null,Y=Po(D.objectCheckedAt,D.objectMissingAt),K={id:f.encode(Number(D.id)),fileName:String(D.fileName),fileType:B,fileSize:$,createdAt:le(D.createdAt,"YYYY-MM-DD HH:mm:ss"),state:Y,hasThumbnail:_&&Y!=="absent"&&Pt({fileType:B,fileSize:$},P.maxBytes)},G=u.get(Number(D.hubId));G?G.push(K):u.set(Number(D.hubId),[K])}return u},Lo=async(c,u,p)=>{let f=r.attachment;if(!f||Ue(c.visible))return null;let _=await Pe(),O=Ze(h,"draft_label");return(await t.select({fileName:f.fileName,filePath:f.filePath,fileType:f.fileType,fileSize:f.fileSize}).top(1).from(f).innerJoin(i,C(i.id,f.hubId)).leftJoin(O,X(C(O.hubId,i.id),be(O.labelId,_))).where(X(C(f.id,u),ce(i.deletedAt),tt(C(i.userId,p),ce(O.hubId)),F(c.visible))))[0]??null},ko=async c=>{let u=r.attachment;if(!u)return;let p=new Date;try{await t.update(u).set({objectCheckedAt:p,objectMissingAt:p,updatedAt:p}).where(C(u.id,c))}catch(f){A.error("markAttachmentMissing failed",f)}},No=async c=>{let u=r.attachment;if(!u)return;let p=new Date;try{await t.update(u).set({objectCheckedAt:p,objectMissingAt:null,updatedAt:p}).where(C(u.id,c))}catch(f){A.error("markAttachmentPresent failed",f)}},Oo=async(c,u,p,{forceRefresh:f=!1,snapshot:_=!1,ttlMsOverride:O}={})=>{let D=await rt(p);if(!D)return[];let B=ye(u);if(!B)return[];if(Ue(c.visible))return[];let $=Gn(B,D,yt(c));return s.getOrFetch({cacheKey:$,fetcher:async()=>{let Y=await Pe(),K=Ze(h,"draft_label"),G=await Q(t.select({hub:He(i),internal:He(S),isRead:m.isRead,isStarred:m.isStarred,creatorName:n.displayName,...N()}).from(i)).leftJoin(S,C(i.id,S.hubId)).leftJoin(m,X(C(i.id,m.hubId),C(m.userId,D))).leftJoin(K,X(C(K.hubId,i.id),be(K.labelId,Y))).leftJoin(n,C(i.userId,n.id)).where(X(C(i.businessDate,lo`${B}`),ce(i.deletedAt),tt(C(i.userId,D),ce(K.hubId)),F(c.visible))).orderBy(et(i.id));if(G.length===0)return[];let pe=G.map(Z=>Z.hub.id),qe=await t.select({hubId:h.hubId,id:b.id,name:b.name,color:b.color}).from(h).innerJoin(b,C(h.labelId,b.id)).where(be(h.hubId,pe)),Ee=await t.select({hubId:d.hubId,id:d.id,body:d.body,createdAt:d.createdAt,userId:d.userId,userName:n.displayName}).from(d).leftJoin(n,C(d.userId,n.id)).where(be(d.hubId,pe)).orderBy(Ft(d.createdAt)),Ye=await gt(pe),_e=new Map,ae=new Map;for(let Z of qe){let ie=_e.get(Z.hubId);ie||(ie=[],_e.set(Z.hubId,ie)),ie.push({id:Z.id,name:Z.name,color:Z.color})}for(let Z of Ee){let ie=ae.get(Z.hubId);ie||(ie=[],ae.set(Z.hubId,ie)),ie.push({id:Z.id,content:Z.body,createdAt:le(Z.createdAt,"YYYY-MM-DD HH:mm:ss")||"",userId:Z.userId,userName:Z.userName||""})}return G.map(Z=>{let ie=Z.hub.id;return Me(c,{...Z,attachments:Ye.get(ie)??[],labels:_e.get(ie)||[],postedCommentRows:ae.get(ie)||[]},D)})},forceRefresh:f,snapshot:_,ttlMsOverride:O??te,epochKey:`${j}${B}`})},nt=async(c,u,p,{forceRefresh:f=!1,snapshot:_=!1,ttlMsOverride:O}={})=>{if(Ue(c.visible))return null;let D=Xn(u,p,yt(c));return(await s.getOrFetch({cacheKey:D,fetcher:async()=>{let $=await Pe(),Y=Ze(h,"draft_label"),K=await Q(t.select({hub:He(i),internal:He(S),isRead:m.isRead,isStarred:m.isStarred,creatorName:n.displayName,...N()}).from(i)).leftJoin(S,C(i.id,S.hubId)).leftJoin(m,X(C(i.id,m.hubId),C(m.userId,p))).leftJoin(Y,X(C(Y.hubId,i.id),be(Y.labelId,$))).leftJoin(n,C(i.userId,n.id)).where(X(C(i.id,u),ce(i.deletedAt),tt(C(i.userId,p),ce(Y.hubId)),F(c.visible)));if(K.length===0)return[];let G=K[0].hub.id,pe=await t.select({id:b.id,name:b.name,color:b.color}).from(h).innerJoin(b,C(h.labelId,b.id)).where(C(h.hubId,G)),qe=await t.select({id:d.id,body:d.body,createdAt:d.createdAt,userId:d.userId,userName:n.displayName}).from(d).leftJoin(n,C(d.userId,n.id)).where(C(d.hubId,G)).orderBy(Ft(d.createdAt)),Ee=await gt([G]),Ye=pe.map(ae=>({id:ae.id,name:ae.name,color:ae.color})),_e=qe.map(ae=>({id:ae.id,content:ae.body,createdAt:le(ae.createdAt,"YYYY-MM-DD HH:mm:ss")||"",userId:ae.userId,userName:ae.userName||""}));return[Me(c,{...K[0],attachments:Ee.get(G)??[],labels:Ye,postedCommentRows:_e},p)]},forceRefresh:f,snapshot:_,ttlMsOverride:O??te,epochKey:`${E}${u}`}))[0]??null},Bo=async(c,u,p,f={})=>{let _=await rt(p);return _?nt(c,u,_,f):null},Uo=async(c,u)=>{let p=await Pe(),f=Ze(h,"draft_label"),[_]=await t.select({sourceType:i.sourceType,deletedAt:i.deletedAt}).top(1).from(i).leftJoin(f,X(C(f.hubId,i.id),be(f.labelId,p))).where(X(C(i.id,c),tt(C(i.userId,u),ce(f.hubId))));return _??null},Yt=async(c,u,p)=>{let f=await Uo(u,p);if(!f||f.deletedAt||!De(c.visible,f.sourceType))throw new Error("Not Found")},Ho=async(c,u,p,f,_,O)=>{await Yt(c,p,u);let D=await t.select().top(1).from(m).where(X(C(m.hubId,p),C(m.userId,u))),B;if(D.length>0?D[0].isStarred!==_?B=(await t.update(m).set({isStarred:_,updatedAt:new Date,updatedBy:String(u)}).output().where(X(C(m.hubId,p),C(m.userId,u))))[0]:B=D[0]:B=(await t.insert(m).output().values({hubId:p,userId:u,isStarred:_,isRead:!1,createdAt:new Date,createdBy:String(u),updatedAt:new Date,updatedBy:String(u)}))[0],f){let $=ye(f);$&&(s.invalidatePrefix(Ge($,u)),await T(`${j}${$}`))}return s.invalidatePrefix(Ht(p,u)),await T(`${E}${p}`),await x(Bt.parse({type:"status-update",reportHubId:p,recipientRawUserId:u,statusType:"star",value:_,clientTempId:O}),"setStarStatus"),B},Fo=async(c,u,p,f,_,O)=>{await Yt(c,p,u);let D=await t.select().top(1).from(m).where(X(C(m.hubId,p),C(m.userId,u))),B;if(D.length>0?D[0].isRead!==_?B=(await t.update(m).set({isRead:_,updatedAt:new Date,updatedBy:String(u)}).output().where(X(C(m.hubId,p),C(m.userId,u))))[0]:B=D[0]:B=(await t.insert(m).output().values({hubId:p,userId:u,isRead:_,isStarred:!1,createdAt:new Date,createdBy:String(u),updatedAt:new Date,updatedBy:String(u)}))[0],f){let $=ye(f);$&&(s.invalidatePrefix(Ge($,u)),await T(`${j}${$}`))}return s.invalidatePrefix(Ht(p,u)),await T(`${E}${p}`),await x(Bt.parse({type:"status-update",reportHubId:p,recipientRawUserId:u,statusType:"read",value:_,clientTempId:O}),"setReadStatus"),B},Tr=async(c,u)=>{if(u===null)return;let p=await Pe(),[f]=await t.select({hubId:h.hubId}).top(1).from(h).where(X(C(h.hubId,c),be(h.labelId,p)));return f?u:void 0},$o=async(c,u,p,f,_,O)=>{let[D]=await t.select({sourceType:i.sourceType,deletedAt:i.deletedAt,userId:i.userId}).top(1).from(i).where(C(i.id,p));if(!D||D.deletedAt)throw new Error("Not Found");if(await Yt(c,p,u),!De(c.commentable,D.sourceType))throw new Error("Comments are restricted by the viewer's comment permission");if(D.sourceType.toLowerCase()!=="internal")throw new Error("Comments are restricted for external daily report sources");let B=await Tr(p,D.userId),[$]=await t.insert(d).output().values({hubId:p,userId:u,body:f,createdAt:new Date,createdBy:String(u),updatedAt:new Date,updatedBy:String(u)}),[Y]=await t.select({displayName:n.displayName}).top(1).from(n).where(C(n.id,u)),K=Y?.displayName??"";if(_){let pe=ye(_);pe&&(s.invalidatePrefix(dt(pe)),await T(`${j}${pe}`))}s.invalidatePrefix(Te(p)),await T(`${E}${p}`);let G={id:$.id,userId:a($.userId),userName:K,content:$.body,createdAt:le($.createdAt,"YYYY-MM-DD HH:mm:ss")??"",isMine:!0};return await x(mr.parse({type:"comment-add",reportHubId:p,comment:G,clientTempId:O,recipientRawUserId:B,sourceType:D.sourceType}),"addComment"),G},qo=async(c,u)=>await c.select().top(1).from(d).where(C(d.id,u)),Yo=async(c,u,p,f,_,O)=>{let D=await qo(t,f);if(D.length===0)throw new Error("Not Found");if(D[0].hubId!==p)throw new Error("Not Found");let[B]=await t.select({userId:i.userId,sourceType:i.sourceType}).top(1).from(i).where(C(i.id,D[0].hubId));if(!(B&&De(c.visible,B.sourceType)))throw new Error("Not Found");if(D[0].userId!==u)throw new Error("Unauthorized");let $=await Tr(p,B.userId);if(await t.delete(d).where(C(d.id,f)),_){let Y=ye(_);Y&&(s.invalidatePrefix(dt(Y)),await T(`${j}${Y}`))}s.invalidatePrefix(Te(p)),await T(`${E}${p}`),await x(pr.parse({type:"comment-delete",reportHubId:p,commentId:f,clientTempId:O,recipientRawUserId:$,sourceType:B?.sourceType}),"deleteComment")},Vo=async(c,u,p)=>{if(!bt(u))throw he("createDailyReport: businessDate","a business-date key in the canonical form YYYY-MM-DD naming a day from 0001-01-01 to 9999-12-31",u);A.info("createDailyReport called",{userId:c,businessDate:u});let[f]=await t.select({displayName:n.displayName}).from(n).where(C(n.id,c)),_=f?.displayName??a(c);try{let O=await U(async B=>{A.info("Starting transaction");let $=`internal-temp-${Date.now()}-${Math.random()}`,[Y]=await B.insert(i).output().values({sourceType:"Internal",sourceId:$,businessDate:new Date(`${u}T00:00:00Z`),userId:c,title:"(\u7121\u984C)",createdAt:new Date,createdBy:String(c),updatedAt:new Date,updatedBy:String(c)});await B.update(i).set({sourceId:String(Y.id)}).where(C(i.id,Y.id)),A.info("Hub created",Y),await B.insert(S).values({hubId:Y.id,body:"",createdAt:new Date,createdBy:String(c),updatedAt:new Date,updatedBy:String(c)}),A.info("Internal created"),A.info("Calling getDraftLabelId");let K=await qt();A.info("draftLabelId",K);let G=[];return K&&(await B.insert(h).values({hubId:Y.id,labelId:K,createdAt:new Date,createdBy:String(c)}),G.push({id:K,name:k,color:null})),A.info("Label assigned"),{reportHubId:Y.id,date:u,createdAt:le(Y.createdAt,"YYYY-MM-DD HH:mm:ss"),author:_,userId:a(c),sourceType:"Internal",employeeName:_,updatedBy:a(c),updatedAt:le(Y.updatedAt,"YYYY-MM-DD HH:mm:ss"),category:null,creationCategory:null,visitTimeFrom:null,visitTimeTo:null,customerName:null,interviewers:[],subject:Y.title,content:"",externalComments:[],isRead:!0,isStarred:!1,labels:G,postedComments:[],attachments:[]}});s.invalidatePrefix(Ge(u,c)),s.invalidatePrefix(Oe),s.invalidatePrefix(Rr(c)),await T(z),await T(`${j}${u}`);let D=await nt(fe.unrestricted("post-write self read: the writer always sees the row they just wrote"),O.reportHubId,c,{forceRefresh:!0});if(D){let B=await ft(),$=D.labels.some(Y=>B.includes(Y.id));await x(yr.parse({type:"report-create",reportHubId:D.reportHubId,report:D,clientTempId:p,recipientRawUserId:$?c:void 0}),"createDailyReport")}return D??O}catch(O){throw A.error("Error in createDailyReport",O),O}},Rt=async(c,u)=>await c.select().top(1).from(i).where(C(i.id,u)),Vt=async(c,u,p)=>{await c.update(i).set(p).where(C(i.id,u))},Dr=async(c,u,p)=>{await c.update(S).set(p).where(C(S.hubId,u))},_r=async(c,u,p)=>{await c.delete(h).where(X(C(h.hubId,u),C(h.labelId,p)))};return{streamKey:v,streamMaxLen:I,attachmentDelivery:P,titleMaxLength:L,clearCache:async()=>{s.clearAll(),ht.clear(),$e=null,y&&await T(z),A.info("[DailyReportService] Server-side DB/SQL caches cleared successfully.")},invalidateHubReadCaches:async(c,u)=>{s.invalidatePrefix(Oe),s.invalidatePrefix(Ne),await T(z);for(let p of new Set(c))s.invalidatePrefix(Te(p)),await T(`${E}${p}`);for(let p of new Set(u)){let f=ye(p);f&&await T(`${j}${f}`)}},getUserIdByExternalId:rt,getDailyReportIdsByExternalId:vo,getDailyReportIdsFirstPageByExternalId:me,readSseStreamAnchor:q,getDailyReportsByBusinessDate:Mo,getDailyReportsByBusinessDateByExternalId:Oo,getDailyReportDetailById:nt,getDailyReportDetailByIdByExternalId:Bo,getDraftLabelId:qt,getAttachmentsByHubIds:gt,getAttachmentForUser:Lo,markAttachmentMissing:ko,markAttachmentPresent:No,setStarStatus:Ho,setReadStatus:Fo,addComment:$o,deleteComment:Yo,createDailyReport:Vo,updateDailyReport:async(c,u,p,f)=>{let _=await Rt(t,c);if(!_.length||_[0].deletedAt)throw new Error("Not Found");if(_[0].userId!==u)throw new Error("Unauthorized");await U(async B=>{p.title!==void 0&&await Vt(B,c,{title:co(p.title),updatedAt:new Date,updatedBy:String(u)}),p.content!==void 0&&await Dr(B,c,{body:co(p.content),updatedAt:new Date,updatedBy:String(u)})}),s.invalidatePrefix(Te(c)),s.invalidatePrefix(Oe),await T(`${E}${c}`);let O=ye(le(_[0].businessDate,"YYYY-MM-DD"));O&&(s.invalidatePrefix(dt(O)),await T(`${j}${O}`));let D=await nt(fe.unrestricted("post-write self read: the writer always sees the row they just wrote"),c,u,{forceRefresh:!0});if(D){let B=await ft(),$=D.labels.some(Y=>B.includes(Y.id));await x(hr.parse({type:"report-update",reportHubId:D.reportHubId,report:D,clientTempId:f,recipientRawUserId:$?u:void 0}),"updateDailyReport")}},publishDailyReport:async(c,u,p)=>{let f=await Rt(t,c);if(!f.length)throw new Error("Not Found");if(f[0].userId!==u)throw new Error("Unauthorized");let _=await qt();if(!_)return null;if(await _r(t,c,_),s.invalidatePrefix(Te(c)),s.invalidatePrefix(Oe),s.invalidatePrefix(Ne),await T(z),f[0].businessDate){let B=ye(le(f[0].businessDate,"YYYY-MM-DD"));B&&await T(`${j}${B}`)}let O=ye(le(f[0].businessDate,"YYYY-MM-DD"));O&&s.invalidatePrefix(Ge(O,u));let D=await nt(fe.unrestricted("post-write self read: the writer always sees the row they just wrote"),c,u,{forceRefresh:!0});return D&&await x(fr.parse({type:"report-publish",reportHubId:D.reportHubId,report:D,clientTempId:p}),"publishDailyReport"),D??null},deleteDailyReport:async(c,u,p)=>{let f=await Rt(t,c);if(!f.length||f[0].deletedAt)throw new Error("Not Found");if(f[0].userId!==u)throw new Error("Unauthorized");if(await Vt(t,c,{deletedAt:new Date,deletedBy:String(u),updatedAt:new Date,updatedBy:String(u)}),s.invalidatePrefix(Te(c)),s.invalidatePrefix(Oe),s.invalidatePrefix(Ne),await T(z),f[0].businessDate){let _=ye(le(f[0].businessDate,"YYYY-MM-DD"));_&&await T(`${j}${_}`)}await x(gr.parse({type:"report-delete",reportHubId:c,clientTempId:p,sourceType:f[0].sourceType}),"deleteDailyReport")},findDailyReportHubById:Rt,updateDailyReportHub:Vt,updateDailyReportInternal:Dr,deleteDailyReportLabel:_r}}var ts=se(1,"[DailyReportExternalSource]"),rs=(e,t,r,n=ts)=>{if(!e)return[];try{let o=JSON.parse(e);return Array.isArray(o)?o.map(r).filter(a=>a!==null):(n.warn(`Unexpected ${t} format: not an array`),[])}catch(o){return n.warn(`Failed to parse ${t}:`,o),[]}};import{desc as mo,sql as ns}from"drizzle-orm";import{bigint as re,bit as po,date as os,datetime2 as oe,foreignKey as Se,index as ve,int as as,mssqlSchema as is,nvarchar as J,primaryKey as Fe,uniqueIndex as ss}from"drizzle-orm/mssql-core";function ls(e,t){let r=is(e),n=t.userTable,o=r.table("DailyReportHub",{id:re("id",{mode:"number"}).identity().notNull(),sourceType:J("source_type",{length:20}).notNull(),sourceId:J("source_id",{length:100}).notNull(),sourceIdNum:re("source_id_num",{mode:"number"}).generatedAlwaysAs(ns`TRY_CAST(source_id AS BIGINT)`),businessDate:os("business_date"),userId:re("user_id",{mode:"number"}),title:J("title",{length:200}),summary:J("summary",{length:"max"}),createdAt:oe("created_at").notNull(),createdBy:J("created_by",{length:50}).notNull(),updatedAt:oe("updated_at").notNull(),updatedBy:J("updated_by",{length:50}).notNull(),deletedAt:oe("deleted_at"),deletedBy:J("deleted_by",{length:50})},d=>[Fe({name:`${e}_DailyReportHub_pk`,columns:[d.id]}),Se({name:`${e}_DailyReportHub_user_id_fk`,columns:[d.userId],foreignColumns:[n.id]}),ve(`${e}_DailyReportHub_business_date_index`).on(d.businessDate),ve(`${e}_DailyReportHub_updated_at_index`).on(d.updatedAt),ve(`${e}_DailyReportHub_source_index`).on(d.sourceType,d.sourceId),ve(`${e}_DailyReportHub_user_id_index`).on(d.userId),ve(`${e}_DailyReportHub_business_date_id_index`).on(mo(d.businessDate),mo(d.id)),ve(`${e}_DailyReportHub_deleted_at_index`).on(d.deletedAt)]),a=r.table("DailyReportInternal",{hubId:re("hub_id",{mode:"number"}).notNull(),body:J("body",{length:"max"}),metadata:J("metadata",{length:"max"}),createdAt:oe("created_at").notNull(),createdBy:J("created_by",{length:50}).notNull(),updatedAt:oe("updated_at").notNull(),updatedBy:J("updated_by",{length:50}).notNull()},d=>[Fe({name:`${e}_DailyReportInternal_pk`,columns:[d.hubId]}),Se({name:`${e}_DailyReportInternal_hub_id_fk`,columns:[d.hubId],foreignColumns:[o.id]})]),l=r.table("DailyReportComment",{id:re("id",{mode:"number"}).identity().notNull(),hubId:re("hub_id",{mode:"number"}).notNull(),userId:re("user_id",{mode:"number"}).notNull(),body:J("body",{length:"max"}).notNull(),createdAt:oe("created_at").notNull(),createdBy:J("created_by",{length:50}).notNull(),updatedAt:oe("updated_at").notNull(),updatedBy:J("updated_by",{length:50}).notNull()},d=>[Fe({name:`${e}_DailyReportComment_pk`,columns:[d.id]}),Se({name:`${e}_DailyReportComment_hub_id_fk`,columns:[d.hubId],foreignColumns:[o.id]}),Se({name:`${e}_DailyReportComment_user_id_fk`,columns:[d.userId],foreignColumns:[n.id]}),ve(`${e}_DailyReportComment_hub_id_index`).on(d.hubId)]),s=r.table("DailyReportLabel",{id:re("id",{mode:"number"}).identity().notNull(),userId:re("user_id",{mode:"number"}),name:J("name",{length:50}).notNull(),color:J("color",{length:20}),sortOrder:as("sort_order"),createdAt:oe("created_at").notNull(),createdBy:J("created_by",{length:50}).notNull(),updatedAt:oe("updated_at").notNull(),updatedBy:J("updated_by",{length:50}).notNull()},d=>[Fe({name:`${e}_DailyReportLabel_pk`,columns:[d.id]}),Se({name:`${e}_DailyReportLabel_user_id_fk`,columns:[d.userId],foreignColumns:[n.id]})]),y=r.table("DailyReportHub_Label",{hubId:re("hub_id",{mode:"number"}).notNull(),labelId:re("label_id",{mode:"number"}).notNull(),createdAt:oe("created_at").notNull(),createdBy:J("created_by",{length:50}).notNull()},d=>[Fe({name:`${e}_DailyReportHub_Label_pk`,columns:[d.hubId,d.labelId]}),Se({name:`${e}_DailyReportHub_Label_hub_id_fk`,columns:[d.hubId],foreignColumns:[o.id]}),Se({name:`${e}_DailyReportHub_Label_label_id_fk`,columns:[d.labelId],foreignColumns:[s.id]})]),i=r.table("DailyReportUserStatus",{hubId:re("hub_id",{mode:"number"}).notNull(),userId:re("user_id",{mode:"number"}).notNull(),isRead:po("is_read").default(!1).notNull(),isStarred:po("is_starred").default(!1).notNull(),createdAt:oe("created_at").notNull(),createdBy:J("created_by",{length:50}).notNull(),updatedAt:oe("updated_at").notNull(),updatedBy:J("updated_by",{length:50}).notNull()},d=>[Fe({name:`${e}_DailyReportUserStatus_pk`,columns:[d.hubId,d.userId]}),Se({name:`${e}_DailyReportUserStatus_hub_id_fk`,columns:[d.hubId],foreignColumns:[o.id]}),Se({name:`${e}_DailyReportUserStatus_user_id_fk`,columns:[d.userId],foreignColumns:[n.id]})]),S=r.table("DailyReportAttachment",{id:re("id",{mode:"number"}).identity().notNull(),hubId:re("hub_id",{mode:"number"}).notNull(),uploadedBy:re("uploaded_by",{mode:"number"}),sourceKey:J("source_key",{length:200}).notNull(),fileName:J("file_name",{length:255}).notNull(),filePath:J("file_path",{length:"max"}).notNull(),fileType:J("file_type",{length:100}),fileSize:re("file_size",{mode:"number"}),objectCheckedAt:oe("object_checked_at"),objectMissingAt:oe("object_missing_at"),createdAt:oe("created_at").notNull(),createdBy:J("created_by",{length:50}).notNull(),updatedAt:oe("updated_at").notNull(),updatedBy:J("updated_by",{length:50}).notNull()},d=>[Fe({name:`${e}_DailyReportAttachment_pk`,columns:[d.id]}),Se({name:`${e}_DailyReportAttachment_hub_id_fk`,columns:[d.hubId],foreignColumns:[o.id]}),Se({name:`${e}_DailyReportAttachment_uploaded_by_fk`,columns:[d.uploadedBy],foreignColumns:[n.id]}),ss(`${e}_DailyReportAttachment_source_unique`).on(d.hubId,d.sourceKey),ve(`${e}_DailyReportAttachment_hub_id_index`).on(d.hubId,d.createdAt)]);return{hub:o,internal:a,comment:l,attachment:S,label:s,hubLabel:y,userStatus:i}}var us=5e7,_o=2e8,cs=1,wo=Object.freeze({fixedBytes:4*1024*1024,pipelineRows:2048,wholeImageBuffer:Object.freeze({"jpeg-single-scan":Object.freeze({kind:"none"}),"jpeg-multi-scan":Object.freeze({kind:"jpeg-coefficients"}),png:Object.freeze({kind:"none"}),"png-interlaced":Object.freeze({kind:"decoded-raster"}),gif:Object.freeze({kind:"canvas",bytesPerPixel:4}),"webp-lossy":Object.freeze({kind:"none"}),"webp-lossy-alpha":Object.freeze({kind:"canvas",bytesPerPixel:5}),"webp-lossless":Object.freeze({kind:"canvas",bytesPerPixel:4}),"webp-animated":Object.freeze({kind:"canvas",bytesPerPixel:9})})}),yo=125,ho=4,fo=16,go=50,Ro=2,$t=Object.freeze({renderMs:de.renderMs,nanosecondsPerBlockVisit:yo,margin:ho,maxBlockVisits:Math.floor(de.renderMs*1e6/(yo*ho)),walkBudgetMs:fo,nanosecondsPerWalkStep:go,walkMargin:Ro,maxWalkSteps:Math.floor(fo*1e6/(go*Ro))}),ds=new Map([["uchar",1],["char",1],["ushort",2],["short",2],["uint",4],["int",4],["float",4],["complex",8],["double",8]]),bo=75,So=4,Ao="#ffffff",ms=1,ps={png:"VipsForeignLoadPngBuffer",jpeg:"VipsForeignLoadJpegBuffer",gif:"VipsForeignLoadNsgifBuffer",webp:"VipsForeignLoadWebpBuffer"},ys=[/out of memory/i,/insufficient memory/i,/memory allocation|allocation failed/i,/(?:cannot|could not|unable to|failed to) allocate/i,/picture memory error/i,/unable to create thread|error creating thread|resource temporarily unavailable/i,/too many open files|no space left on device/i,/\b(?:ENOMEM|EAGAIN|EMFILE|ENFILE|ENOSPC)\b/],To=Object.freeze({ok:!1,reason:"failed"}),Do=Object.freeze({ok:!1,reason:"unsupported"}),Eo=e=>({layout:e.multiScan?"jpeg-multi-scan":"jpeg-single-scan",coefficientBytes:gn(e)}),Io=(e,t)=>{switch(t){case"jpeg":{let r=ar(e);return r===null?null:Eo(r)}case"png":{let r=Sn(e);return r===null?null:{layout:r?"png-interlaced":"png",coefficientBytes:0}}case"gif":return{layout:"gif",coefficientBytes:0};case"webp":{let r=An(e,$t.maxWalkSteps);return r===null?null:{layout:`webp-${r}`,coefficientBytes:0}}}},xo=(e,t)=>{let r=ds.get(t.depth);if(r===void 0)return null;let n=t.channels*r,o=wo,a=o.wholeImageBuffer[e.layout];return(a.kind==="none"?0:a.kind==="decoded-raster"?t.width*t.height*n:a.kind==="jpeg-coefficients"?e.coefficientBytes:t.width*t.height*a.bytesPerPixel)+o.pipelineRows*t.width*n+o.fixedBytes},hs=(e,t,r)=>{let n=Io(e,t);return n===null?null:xo(n,r)},fs=e=>e!==null&&e<=_o,gs=(e,t)=>{if(t!=="jpeg")return Io(e,t);let r=Rn(e,$t);return r===null||r.blockVisits>$t.maxBlockVisits?null:Eo(r.header)},Rs=e=>{let t=e instanceof Error?e.message:"";return ys.some(r=>r.test(t))?"failed":"unsupported"},bs=e=>{e.cache(!1),e.concurrency(cs),e.block({operation:["VipsForeignLoad"]}),e.unblock({operation:Object.values(ps)});let t=async(n,o,a,l,s)=>{let y=gs(n,o);if(y===null)return Do;try{let i=e(n,{limitInputPixels:us,animated:!1});if(!fs(xo(y,await i.metadata())))return Do;if(s.aborted)return To;let S=await i.rotate().resize({width:a,height:l,fit:"inside",withoutEnlargement:!0}).flatten({background:Ao}).webp({quality:bo,effort:So}).toBuffer();return{ok:!0,bytes:new Uint8Array(S),contentType:"image/webp"}}catch(i){return{ok:!1,reason:Rs(i)}}},r=async(n,{format:o,maxWidth:a,maxHeight:l,signal:s})=>s.aborted?To:t(n,o,a,l,s);return{id:`sharp-${e.versions.sharp}/vips-${e.versions.vips}/webp-q${bo}-e${So}/flatten-${Ao}/v${ms}`,render:r}};function pc(e){e.redis||(e.logger??console).warn("[DailyReport] redis provider is not injected: cross-worker cache invalidation is disabled (staleness is bounded only by TTL) and SSE publishing is skipped.");let t=Jt(e.redis),r=new at({defaultTtlMs:e.cacheDefaultTtlMs??6e4},t),n=Ar({...e,cache:r,epochs:t}),o=new mt({redis:e.redis,streamKey:n.streamKey,cache:r,logger:e.logger}),a=Sr({authenticate:e.authenticate,resolveVisibleSourceTypes:e.resolveVisibleSourceTypes,service:n,encodeUserId:e.encodeUserId,redis:e.redis,sseReader:o,streamKey:n.streamKey,loginRedirectPath:e.loginRedirectPath,enableDevCacheClear:e.enableDevCacheClear,logger:e.logger});return{service:n,cache:r,epochs:t,sseReader:o,streamKey:n.streamKey,knownSourceTypes:[...new Set(["Internal",...(e.externalSources??[]).map(l=>l.sourceType)])],...a}}export{sr as DAILY_REPORT_ATTACHMENT_THUMBNAIL_MAX_OUTPUT_BYTES,ir as DAILY_REPORT_ATTACHMENT_THUMBNAIL_OUTPUT_MEDIA_TYPES,_o as DAILY_REPORT_SHARP_THUMBNAIL_DECODE_BUDGET_BYTES,$t as DAILY_REPORT_SHARP_THUMBNAIL_DECODE_WORK_MODEL,wo as DAILY_REPORT_SHARP_THUMBNAIL_WORKING_SET_MODEL,br as DAILY_REPORT_SSE_CATCH_UP_BATCH,ao as DAILY_REPORT_SSE_VISIBILITY_REFRESH_MS,mt as DailyReportSseReader,fe as DailyReportViewerScope,at as SqlResultCache,Sr as createDailyReportHandlers,pc as createDailyReportServer,Ar as createDailyReportService,Jt as createEpochStore,bs as createSharpThumbnailRenderer,ls as defineDailyReportSchema,ut as generateETag,Be as isStreamIdLte,ne as jsonResponseWithETag,hs as predictSharpThumbnailWorkingSetBytes,rs as transformJsonArray};
+var Lr=e=>{throw TypeError(e)};var Nr=(e,t,r)=>t.has(e)||Lr("Cannot "+r);var ut=(e,t,r)=>(Nr(e,t,"read from private field"),r?r.call(e):t.get(e)),Zt=(e,t,r)=>t.has(e)?Lr("Cannot add the same private member more than once"):t instanceof WeakSet?t.add(e):t.set(e,r),er=(e,t,r,n)=>(Nr(e,t,"write to private field"),n?n.call(e,r):t.set(e,r),r);var te=()=>Math.floor(performance.now());var tr=e=>({async getEpoch(t){try{let r=await e?.getClient();if(!r)return null;let n=await r.get(t);return n?Number(n):0}catch{return null}},async incrementEpoch(t){try{let r=await e?.getClient();if(!r)return;await r.incr(t)}catch{}}}),ct=class{constructor(t,r){this.config=t;this.epochStore=r;this.buckets=new Map;this.inFlight=new Map;this.maybeRefreshAhead=t=>{let r=t.refreshAheadRatio;if(r===void 0)return;let{cacheKey:n}=t,o=this.buckets.get(n);if(!o)return;let a=t.ttlMsOverride??this.config.defaultTtlMs;if(a-(o.expireAt-te())<a*r||this.inFlight.has(n))return;let l;l=(async()=>{let y=t.epochKey?await this.epochStore.getEpoch(t.epochKey):null,i=await t.fetcher();return this.inFlight.get(n)===l&&this.buckets.set(n,{records:i,expireAt:te()+a,epoch:y}),i})(),this.inFlight.set(n,l),l.catch(()=>{}).finally(()=>{this.inFlight.get(n)===l&&this.inFlight.delete(n)})};this.getOrFetch=async t=>{let{cacheKey:r,forceRefresh:n,snapshot:o}=t,a=this.buckets.get(r);if(n&&(this.buckets.delete(r),this.inFlight.delete(r)),!n&&a&&a.expireAt>te())if(t.epochKey){let l=await this.epochStore.getEpoch(t.epochKey);if(l===null||a.epoch===l)return this.maybeRefreshAhead(t),o?a.records.map(y=>structuredClone(y)):a.records;this.buckets.delete(r)}else return this.maybeRefreshAhead(t),o?a.records.map(l=>structuredClone(l)):a.records;if(!n&&this.inFlight.has(r)){let l=await this.inFlight.get(r);return o?l.map(y=>structuredClone(y)):l}let s;s=(async()=>{let l=t.epochKey?await this.epochStore.getEpoch(t.epochKey):null;t.onFetchStart?.();let y=await t.fetcher();if(n||this.inFlight.get(r)===s){let i=te()+(t.ttlMsOverride??this.config.defaultTtlMs);this.buckets.set(r,{records:y,expireAt:i,epoch:l}),this.buckets.size>500&&this.cleanExpired()}return y})(),n||this.inFlight.set(r,s);try{let l=await s;return o?l.map(y=>structuredClone(y)):l}finally{this.inFlight.get(r)===s&&this.inFlight.delete(r)}};this.clearAll=()=>{this.buckets.clear(),this.inFlight.clear()};this.invalidatePrefix=t=>{for(let r of this.buckets.keys())r.startsWith(t)&&this.buckets.delete(r);for(let r of this.inFlight.keys())r.startsWith(t)&&this.inFlight.delete(r)}}cleanExpired(){let t=te();for(let[r,n]of this.buckets.entries())n.expireAt<=t&&this.buckets.delete(r)}};var Or="ids-stream";var _t=e=>{let t=2166136261,r=-624069552;for(let n of e){let o=n.reportHubId;t^=o&255,t=Math.imul(t,16777619),t^=o>>>8&255,t=Math.imul(t,16777619),t^=o>>>16&255,t=Math.imul(t,16777619),t^=o>>>24&255,t=Math.imul(t,16777619),r^=o>>>24&255,r=Math.imul(r,16777619),r^=o>>>16&255,r=Math.imul(r,16777619),r^=o>>>8&255,r=Math.imul(r,16777619),r^=o&255,r=Math.imul(r,16777619);let a=n.businessDate;if(a===null)t^=1,t=Math.imul(t,16777619),r^=1,r=Math.imul(r,16777619);else for(let s=0;s<a.length;s++){let l=a.charCodeAt(s);t^=l&255,t=Math.imul(t,16777619),r^=l&255,r=Math.imul(r,16777619)}}return t^=e.length,t=Math.imul(t,16777619),r^=e.length,r=Math.imul(r,16777619),((t>>>0).toString(16).padStart(8,"0")+(r>>>0).toString(16).padStart(8,"0")).replace(/^0+(?=.)/,"")},Et=(e,t)=>e.businessDate!==t.businessDate?e.businessDate===null?1:t.businessDate===null||e.businessDate>t.businessDate?-1:1:t.reportHubId-e.reportHubId,kr=e=>{for(let t=1;t<e.length;t++)if(Et(e[t-1],e[t])>0)return!1;return!0},Br=(e,t)=>{let r=e.findIndex(n=>Et({businessDate:n.businessDate,reportHubId:n.reportHubId},t)>0);return r===-1?e.length:r};var Ce=Object.freeze({businessDate:"business-date",idsStream:Or,report:"report",action:"action"}),_e=Object.freeze({businessDate:"businessDate",reportHubId:"reportHubId",forceRefresh:"forceRefresh",cursorReportHubId:"cursor_report_hub_id",cursorBusinessDate:"cursor_business_date",cursorSnapshot:"cursor_snapshot"});var ra=/^(\d{4})([-/])(\d{2})\2(\d{2})$/;var Ur=e=>e<10?`0${e}`:`${e}`,na=e=>{if(Number.isNaN(e.getTime()))return null;let t=e.getFullYear(),r=Ur(e.getMonth()+1),n=Ur(e.getDate());return`${t}-${r}-${n}`},Ke=e=>{let t=ra.exec(e);if(t===null)return null;let[,r,,n,o]=t,a=Number(r),s=Number(n),l=Number(o);if(a<1)return null;let y=new Date(0);return y.setUTCFullYear(a,s-1,l),y.getUTCFullYear()!==a||y.getUTCMonth()!==s-1||y.getUTCDate()!==l?null:`${r}-${n}-${o}`},It=e=>Ke(e)===e;var fe=e=>e==null?null:e instanceof Date?na(e):Ke(e);var ce=(e,t,r=console)=>{let n=o=>typeof o=="string"?[`${t} ${o}`]:[t,o];return{debug:(o,...a)=>{e<=0&&r.debug(...n(o),...a)},info:(o,...a)=>{e<=1&&r.info(...n(o),...a)},warn:(o,...a)=>{e<=2&&r.warn(...n(o),...a)},error:(o,...a)=>{e<=3&&r.error(...n(o),...a)}}};import{z as el}from"zod";var wt=/^(?:[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}|-[1-9][0-9]{0,15})$/;import{z as g}from"zod";var Hr=15e3,Fr="lastEventId",oa=/^\d{1,15}-\d{1,15}$/,$r=e=>oa.test(e),aa=g.object({name:g.string().nullish(),affiliation:g.string().nullish()}),ia=g.object({name:g.string().nullish(),text:g.string().nullish(),color:g.string().nullish()}),sa=g.object({id:g.number(),name:g.string().nullish(),color:g.string().nullish()}),Yr=g.object({id:g.number(),userId:g.string().nullish(),userName:g.string().nullish(),content:g.string().nullish(),createdAt:g.string().nullish(),isMine:g.boolean()}),la=g.object({id:g.string(),fileName:g.string(),fileType:g.string().nullable(),fileSize:g.number().nullable(),createdAt:g.string().nullable(),state:g.enum(["present","absent","unknown"]),hasThumbnail:g.boolean().default(!1)}),rr=g.object({reportHubId:g.number(),date:g.string().nullish(),createdAt:g.string().nullish(),author:g.string().nullish(),userId:g.string().nullish(),sourceType:g.string().nullish(),employeeName:g.string().nullish(),updatedBy:g.string().nullish(),updatedAt:g.string().nullish(),category:g.string().nullish(),creationCategory:g.string().nullish(),visitTimeFrom:g.string().nullish(),visitTimeTo:g.string().nullish(),customerName:g.string().nullish(),interviewers:g.array(aa),subject:g.string().nullish(),content:g.string().nullish(),externalComments:g.array(ia),isRead:g.boolean(),isStarred:g.boolean(),labels:g.array(sa),postedComments:g.array(Yr),attachments:g.array(la).default([])}),Ue=g.string().regex(wt),ua=g.object({type:g.literal("connected")}),xt=g.object({type:g.literal("status-update"),reportHubId:g.number(),statusType:g.enum(["star","read"]),value:g.boolean(),clientTempId:Ue,recipientRawUserId:g.number().optional()}),nr=g.string().optional(),or=g.object({type:g.literal("comment-add"),reportHubId:g.number(),comment:Yr,clientTempId:Ue,recipientRawUserId:g.number().optional(),sourceType:nr}),ar=g.object({type:g.literal("comment-delete"),reportHubId:g.number(),commentId:g.number(),clientTempId:Ue,recipientRawUserId:g.number().optional(),sourceType:nr}),ir=g.object({type:g.literal("report-create"),reportHubId:g.number(),report:rr,clientTempId:Ue,recipientRawUserId:g.number().optional()}),sr=g.object({type:g.literal("report-update"),reportHubId:g.number(),report:rr,clientTempId:Ue,recipientRawUserId:g.number().optional()}),lr=g.object({type:g.literal("report-publish"),reportHubId:g.number(),report:rr,clientTempId:Ue,recipientRawUserId:g.number().optional()}),ur=g.object({type:g.literal("report-delete"),reportHubId:g.number(),clientTempId:Ue,sourceType:nr}),Vr=g.discriminatedUnion("type",[ua,xt,or,ar,ir,sr,lr,ur]);var Re=Object.freeze({intent:"intent",clientTempId:"clientTempId",businessDate:"businessDate",operationTimestamp:"operationTimestamp",reportHubId:"reportHubId",title:"title",content:"content",isStarred:"isStarred",isRead:"isRead",commentId:"commentId"});var Ct=Math.max(1,Math.floor(10.556701030927835));var Se=(e,t)=>{let r=setTimeout(e,t);return r.unref?.(),r};var Je=e=>{let{windowMs:t,tallies:r,writeSuppressed:n}=e,o=new Map,a=s=>{let l={since:new Date().toISOString(),count:0,tallies:Object.fromEntries(r.map(i=>[i,0]))};o.set(s,l),Se(()=>{o.delete(s),l.count>0&&n(s,l)},t)};return{record:(s,l,y)=>{let i=o.get(s);if(i!==void 0){i.count+=1,i.tallies[l]+=1;return}y(),a(s)}}};var cr=e=>e!==null&&wt.test(e)?e:null,ca=/^[1-9][0-9]*$/,da=/^(?:0|[1-9][0-9]*)$/,dr=e=>Number.isSafeInteger(e)&&e>0,He=e=>{if(e===null||!ca.test(e))return null;let t=Number(e);return dr(t)?t:null},mr=e=>{if(e===null||!da.test(e))return null;let t=Number(e);return Number.isSafeInteger(t)?t:null},pr=e=>e==="true"?!0:e==="false"?!1:null,dt=e=>e===null?!1:pr(e),qr=e=>{let t=new URLSearchParams;for(let[r,n]of e){if(typeof n!="string")return null;t.append(r,n)}return t};var zr=Object.freeze({status:400,error:"Invalid form"}),Wr=e=>({status:413,error:"Form too large",measuredBy:e}),ma=(e,t,r)=>{let n=0;return e.pipeThrough(new TransformStream({transform(o,a){if(n+=o.byteLength,n>t){r(),a.error(new Error(`action form body exceeds ${t} bytes`));return}a.enqueue(o)}}))},pa=async e=>{let t=mr(e.headers.get("Content-Length"));if(t!==null&&t>1048576)return{refusal:Wr("declared")};let r=!1,n=e.body===null?null:ma(e.body,1048576,()=>{r=!0}),o=new Headers,a=e.headers.get("Content-Type");a!==null&&o.set("Content-Type",a);let s;try{s=await new Response(n,{headers:o}).formData()}catch{return{refusal:r?Wr("counted"):zr}}let l=qr(s);return l===null?{refusal:zr}:{fields:l}},Kr=(e,t)=>(r,n)=>{let o=r.get(t);if(o===null)return{error:`${t} required`};let a=pr(o);return a===null?{error:`Invalid ${t}`}:{command:{...n,intent:e,value:a}}},Gr=Object.freeze({update:(e,t,r)=>{let n=e.get(Re.title),o=e.get(Re.content);if(n!==null&&n.length>r.titleMaxLength)return{error:"Invalid title"};let a={};return n!==null&&(a.title=n),o!==null&&(a.content=o),{command:{...t,intent:"update",changes:a}}},publish:(e,t)=>({command:{...t,intent:"publish"}}),delete:(e,t)=>({command:{...t,intent:"delete"}}),toggleStar:Kr("toggleStar",Re.isStarred),toggleRead:Kr("toggleRead",Re.isRead),addComment:(e,t)=>{let r=e.get(Re.content);return r?{command:{...t,intent:"addComment",content:r}}:{error:"Content required"}},deleteComment:(e,t)=>{let r=He(e.get(Re.commentId));return r===null?{error:"Invalid commentId"}:{command:{...t,intent:"deleteComment",commentId:r}}}}),ya=e=>Object.hasOwn(Gr,e),ha=(e,t)=>{let r=e.get(Re.intent),n=e.get(Re.businessDate),o=n===null?null:Ke(n);if(n!==null&&o===null)return{error:"Invalid businessDate"};let a=e.get(Re.operationTimestamp),s=mr(a);if(a!==null&&s===null)return{error:"Invalid operationTimestamp"};if(r==="clearCache")return{command:{intent:r}};let l=e.get(Re.clientTempId);if(!l)return{error:"clientTempId required"};let y=cr(l);if(y===null)return{error:"Invalid clientTempId"};if(r==="create")return o===null?{error:"businessDate required"}:{command:{intent:r,clientTempId:y,businessDate:o,operationTimestamp:s}};let i=He(e.get(Re.reportHubId));return i===null?{error:"Invalid reportHubId"}:r===null||!ya(r)?{error:"Invalid intent"}:Gr[r](e,{clientTempId:y,businessDate:o,operationTimestamp:s,reportHubId:i},t)},Xr=async(e,t)=>{let r=await pa(e);if("refusal"in r)return r;let n=ha(r.fields,t);return"error"in n?{refusal:{status:400,error:n.error}}:n},fa=6e4,Ra="form_too_large",Jr=["declared","counted"],Qr=e=>{let t=Je({windowMs:fa,tallies:Jr,writeSuppressed:(r,{count:n,since:o,tallies:a})=>{e.warn(`form_too_large_suppressed count=${n} since=${o} measured=${Jr.map(s=>`${s}:${a[s]}`).join(",")}`)}});return r=>{let n=()=>{e.warn(`413 action reason=form_too_large measured=${r} limit=${1048576}`)};t.record(Ra,r,n)}};var Pt=Object.freeze({[Ce.businessDate]:"json",[Ce.idsStream]:"stream",[Ce.report]:"json"}),Zr=Object.freeze({json:Object.freeze(["GET"]),stream:Object.freeze(["GET","HEAD"])}),yr=e=>e!==void 0&&Object.hasOwn(Pt,e);var hr=Object.freeze({tile:Object.freeze({maxWidth:480,maxHeight:320})}),en=e=>Object.hasOwn(hr,e);var ga="download",ba="thumbnail",Sa="1";var fr=e=>{let t=e.getAll(ba),r=e.getAll(ga);if(t.length>0&&r.length>0)return{kind:"invalid",reason:"conflict"};if(t.length>0){let[n]=t;return t.length===1&&en(n)?{kind:"thumbnail",variant:n}:{kind:"invalid",reason:"thumbnail_variant"}}return r.length>0?r.length===1&&r[0]===Sa?{kind:"download"}:{kind:"invalid",reason:"download_value"}:{kind:"inline"}};var gr="Cross-site request rejected",Aa="Not Found",Ta=new Set(["same-origin","none"]),Da=new Set(["GET","HEAD","OPTIONS"]),tn=["api","action","sse","attachment"],rn=(e,t)=>new Response(JSON.stringify({error:{message:t}}),{status:e,headers:{"Content-Type":"application/json","Cache-Control":"no-store","X-Content-Type-Options":"nosniff"}}),_a=()=>rn(403,gr),Mt=()=>rn(404,Aa),mt=Object.freeze({navigable:()=>!1,frameworkDataRefusal:()=>null,crossSiteRejection:_a}),nn=e=>new URL(e.url).pathname.endsWith(".data"),Ea=e=>{let t=e.headers.get("Origin");return t===null?!0:URL.canParse(t)&&new URL(t).host===new URL(e.url).host},on=(e,t)=>{let r=e.headers.get("Sec-Fetch-Site");return r===null?!(Da.has(e.method)||Ea(e)):Ta.has(r)?!1:!(e.method==="GET"&&e.headers.get("Sec-Fetch-Mode")==="navigate"&&e.headers.get("Sec-Fetch-Dest")==="document"&&t.navigable(e))},Ia=6e4,wa="refusals",xa=32,Ca=/^[a-z-]+$/,Rr=e=>{if(e===null)return"-";let t=e.slice(0,xa);return Ca.test(t)&&t===e?e:JSON.stringify(t)},an=e=>{let t=Je({windowMs:Ia,tallies:tn,writeSuppressed:(r,{count:n,since:o,tallies:a})=>{e.warn(`cross_site_rejected_suppressed count=${n} since=${o} routes=${tn.map(s=>`${s}:${a[s]}`).join(",")}`)}});return(r,n)=>{let o=()=>{let{headers:a}=n;e.warn(`cross_site_rejected route=${r} site=${Rr(a.get("Sec-Fetch-Site"))} mode=${Rr(a.get("Sec-Fetch-Mode"))} dest=${Rr(a.get("Sec-Fetch-Dest"))} method=${n.method}`)};t.record(wa,r,o)}};var sn=(e,t)=>(r,n)=>{let o=n?"markAttachmentPresent":"markAttachmentMissing";e[o](r).catch(a=>{t.error(`${o} failed attachment=${r} message=${a instanceof Error?a.message:"unknown"}`)})};var Pa=5e3/1e3,Ma=new Map([[503,Pa]]),pt=e=>{let t=Ma.get(e);return t===void 0?{}:{"Retry-After":String(t)}},va="same-origin",La="SAMEORIGIN",Ge=Object.freeze({"X-Content-Type-Options":"nosniff","Cross-Origin-Resource-Policy":va,"X-Frame-Options":La}),vt=(e,t,r)=>{let n=new Headers({"Content-Type":"application/json","Cache-Control":"no-store",...r.extraHeaders,...Ge});return r.cookie&&n.append("Set-Cookie",r.cookie),new Response(JSON.stringify({error:{message:t}}),{status:e,headers:n})},ln=(e,t)=>{if(e===null)return!1;for(let r of e.split(",")){let n=r.trim();if((n.startsWith("W/")?n.slice(2):n)===t)return!0}return!1},un=new Set(["image/png","image/jpeg","image/gif","image/webp","application/pdf","text/plain"]),Na=/^[\x20-\x7E]+$/,Oa=/^[\w.+-]+\/[\w.+-]+/,br=e=>e&&Na.test(e)&&Oa.test(e)?e:null,cn=e=>encodeURIComponent(e).replace(/['()*]/g,t=>`%${t.charCodeAt(0).toString(16).toUpperCase()}`),dn=e=>e.replace(/[^\x20-\x7E]/g,"_").replace(/["\\]/g,"_"),Lt={404:"Attachment not found",413:"Attachment too large",502:"Attachment storage unavailable",503:"Attachment storage busy",504:"Attachment storage timed out"},mn={not_found:404,denied:404,invalid_path:404,too_large:413,unavailable:502,busy:503,deadline:504},Nt=e=>typeof e=="string"&&Object.hasOwn(mn,e),Ot=e=>mn[e],Pe="Attachment request failed";var ka=e=>typeof e=="string"?JSON.stringify(e):typeof e=="number"||typeof e=="boolean"||e===null||e===void 0?String(e):Array.isArray(e)?"array":typeof e,me=(e,t,r)=>new RangeError(`[daily-report] ${e} must be ${t}; got ${ka(r)}`),Xe=(e,t)=>new TypeError(`[daily-report] ${e} must be ${t}`);var Ba=32*1024*1024,Ua=60,Ha=4,Fa=120,$a=2,Ya=8*1024*1024,oe=(e,t,r)=>{if(typeof t=="number"&&Number.isSafeInteger(t)&&t>=r)return t;throw me(e,`an integer >= ${r}`,t)},Qe=(e,t,r,n)=>t===void 0?n:oe(e,t,r),kt=e=>typeof e=="object"&&e!==null&&!Array.isArray(e),Va=e=>{if(e===void 0)throw Xe("attachments.thumbnails.renderer","injected when attachments.thumbnails is given");if(!kt(e))throw me("attachments.thumbnails.renderer","an object with id and render",e);if(e.render===void 0)throw Xe("attachments.thumbnails.renderer.render","a function");if(typeof e.render!="function")throw me("attachments.thumbnails.renderer.render","a function",e.render);if(typeof e.id!="string"||e.id.trim()==="")throw me("attachments.thumbnails.renderer.id","a non-blank string naming the rendering pipeline version",e.id);return e},qa=e=>{if(e===void 0)return null;if(!kt(e))throw me("attachments.thumbnails","an object with renderer",e);return Object.freeze({renderer:Va(e.renderer),rateLimitPerMinute:Qe("attachments.thumbnails.rateLimitPerMinute",e.rateLimitPerMinute,1,Fa),concurrency:Qe("attachments.thumbnails.concurrency",e.concurrency,1,$a),cacheBytes:Qe("attachments.thumbnails.cacheBytes",e.cacheBytes,0,Ya)})},pn=e=>{let t=e;if(t===void 0)return null;if(!kt(t))throw me("attachments","an object with idCodec and read",t);let{idCodec:r,read:n}=t;if(r===void 0)throw Xe("attachments.idCodec","injected when attachments is given");if(!kt(r)||typeof r.encode!="function"||typeof r.decode!="function")throw me("attachments.idCodec","an object with encode and decode functions",r);if(n===void 0)throw Xe("attachments.read","injected when attachments is given");if(typeof n!="function")throw me("attachments.read","a function",n);return Object.freeze({idCodec:r,read:n,maxBytes:Qe("attachments.maxBytes",t.maxBytes,1,Ba),rateLimitPerMinute:Qe("attachments.rateLimitPerMinute",t.rateLimitPerMinute,1,Ua),concurrency:Qe("attachments.concurrency",t.concurrency,1,Ha),thumbnails:qa(t.thumbnails)})},ja=Object.freeze([["attachmentIdCodec","attachments.idCodec"],["readAttachment","attachments.read"],["attachmentMaxBytes","attachments.maxBytes"],["attachmentRateLimitPerMinute","attachments.rateLimitPerMinute"],["attachmentConcurrency","attachments.concurrency"],["attachmentThumbnailRenderer","attachments.thumbnails.renderer"],["attachmentThumbnailRateLimitPerMinute","attachments.thumbnails.rateLimitPerMinute"],["attachmentThumbnailConcurrency","attachments.thumbnails.concurrency"],["attachmentThumbnailCacheBytes","attachments.thumbnails.cacheBytes"]]),Bt=e=>{for(let[t,r]of ja)if(Object.hasOwn(e,t))throw Xe(r,`given in place of the flat key ${t}`)};var za=1024,Wa="Too many requests",Ka=(e,t)=>{oe("limitPerWindow",e,1),oe("windowMs",t,1);let r=new Map,n=(a,s)=>{s<=a.lastRefillMs||(a.tokens=Math.min(e,a.tokens+(s-a.lastRefillMs)*e/t),a.lastRefillMs=s)},o=(a,s)=>{let l=r.get(a);l&&r.delete(a);let y=l??{tokens:e,lastRefillMs:s};n(y,s),r.set(a,y);for(let i of r.keys()){if(r.size<=za)break;r.delete(i)}return y};return{consume:(a,s)=>{let l=o(a,s);return l.tokens<1?!1:(l.tokens-=1,!0)},refund:(a,s,l)=>{let y=r.get(a);y&&(n(y,s),y.tokens=Math.min(e,y.tokens+l))}}},Ze=e=>{let{reason:t,windowMs:r,logger:n,windowFields:o}=e;if(oe("windowMs",r,1e3)%1e3!==0)throw me("windowMs","a whole number of seconds (a multiple of 1000)",r);let a=Ka(e.limitPerWindow,r),s=Object.freeze({status:429,message:Wa,headers:Object.freeze({"Retry-After":String(r/1e3)})}),l=Je({windowMs:r,tallies:[t],writeSuppressed:(y,{count:i,since:_})=>{n.warn(`${t}_suppressed count=${i} since=${_} ${o(y)}`)}});return{spend:(y,i)=>a.consume(y,te())?null:(l.record(y,t,()=>n.warn(`429 ${i} reason=${t}`)),s),refund:(y,i)=>{a.refund(y,te(),i)}}};var Ut=e=>{let t=oe("limit",e.limit,1),r=oe("maxHeldPerOwner",e.maxHeldPerOwner,1),n=e.queue===null?null:{max:oe("queue.max",e.queue.max,0),maxPerOwner:oe("queue.maxPerOwner",e.queue.maxPerOwner,0),maxWaitMs:oe("queue.maxWaitMs",e.queue.maxWaitMs,1)},o=0,a=[],s=new Map,l=new Map,y=(d,R)=>d.get(R)??0,i=(d,R,x)=>{let P=y(d,R)+x;P<=0?d.delete(R):d.set(R,P)},_=d=>y(l,d)<r,m=d=>(o+=1,i(l,d,1),h(d)),A=()=>{for(;o<t;){let d=a.findIndex(x=>_(x.owner));if(d<0)return;let[R]=a.splice(d,1);i(s,R.owner,-1),R.grant(m(R.owner))}},h=d=>{let R=!1;return()=>{R||(R=!0,o-=1,i(l,d,-1),A())}};return{acquire:(d,R)=>{if(R.aborted)return Promise.resolve(null);if(o<t&&_(d))return Promise.resolve(m(d));if(n===null||a.length>=n.max||y(s,d)>=n.maxPerOwner)return Promise.resolve(null);let{maxWaitMs:x}=n,P=C=>{let $=()=>{let V=a.indexOf(U);V<0||(a.splice(V,1),i(s,d,-1),I(),C(null))},T=Se($,x),I=()=>{clearTimeout(T),R.removeEventListener("abort",$)},U={owner:d,grant:V=>{I(),C(V)}};a.push(U),i(s,d,1),R.addEventListener("abort",$,{once:!0})};return new Promise(P)}}};var Ga=256*1024,yn=6e4,Xa=e=>Math.ceil(e/2),Qa=new Uint8Array(new ArrayBuffer(0)),Za=(e,t)=>{let r=e,n=0,o,a=()=>{clearTimeout(o),r=Qa,t()},s=l=>{clearTimeout(o),o=Se(()=>{l.error(new Error(`attachment body idle for ${yn} ms`)),a()},yn)};return new ReadableStream({start(l){s(l)},pull(l){let y=Math.min(n+Ga,r.byteLength);if(y>n&&l.enqueue(r.slice(n,y)),n=y,n>=r.byteLength){l.close(),a();return}s(l)},cancel(){a()}},{highWaterMark:0})},hn=e=>{let{service:t,encodeUserId:r,resolveViewerScope:n,logger:o,recordObjectState:a}=e,s=Ze({reason:"rate_limit",limitPerWindow:e.rateLimitPerMinute,windowMs:6e4,logger:o,windowFields:y=>`viewer=${y}`}),l=Ut({limit:e.concurrency,maxHeldPerOwner:Xa(e.concurrency),queue:null});return async y=>{let{request:i,delivery:_,attachmentId:m,internalUserId:A,readAttachment:h,cookie:d,fail:R}=y,x=e.maxBytes,P=s.spend(A,`attachment=${m} viewer=${A}`);if(P)return R(P.status,P.message,P.headers);let C=await n(i),$=await t.getAttachmentForUser(C,m,A);if(!$)return o.warn(`404 attachment=${m} viewer=${A} reason=not_visible`),R(404,"Attachment not found");if($.fileSize!=null&&$.fileSize>x)return o.warn(`413 attachment=${m} viewer=${A} reason=db_size`),R(413,"Attachment too large");let T=await l.acquire(A,i.signal);if(!T)return i.signal.aborted?(o.info(`503 attachment=${m} viewer=${A} reason=aborted`),R(503,"Attachment request aborted")):(o.warn(`503 attachment=${m} viewer=${A} reason=concurrency`),R(503,"Too many concurrent downloads",pt(503)));let I=!1;try{let U=await h($.filePath,{maxBytes:x,head:i.method==="HEAD",principal:r(A),signal:i.signal});if(i.signal.aborted)return o.info(`503 attachment=${m} viewer=${A} reason=aborted`),R(503,"Attachment request aborted");if(!U.ok){if(!Nt(U.reason))return o.error(`500 attachment=${m} viewer=${A} reason=port_contract code=failure_reason`),R(500,Pe);let S=Ot(U.reason);return U.reason==="not_found"&&a(m,!1),o.warn(`${S} attachment=${m} viewer=${A} reason=${U.reason} code=${U.code??"-"}`),R(S,Lt[S],pt(S))}if(U.bytes.byteLength>x)return o.error(`500 attachment=${m} viewer=${A} reason=port_contract code=over_max_bytes`),R(500,Pe);let V=i.method==="HEAD";if(V&&U.size!==void 0&&U.size>x)return o.error(`500 attachment=${m} viewer=${A} reason=port_contract code=over_max_bytes`),R(500,Pe);if(!V&&U.size!==void 0&&U.size!==U.bytes.byteLength)return o.error(`500 attachment=${m} viewer=${A} reason=port_contract code=size_mismatch`),R(500,Pe);let z=br($.fileType)??br(U.contentType),G=z!==null&&un.has(z),K=G?z:"application/octet-stream",b=G&&_.kind!=="download"?"inline":"attachment",M=V?U.size:U.bytes.byteLength,L=new Headers({"Content-Type":K,"Content-Disposition":`${b}; filename="${dn($.fileName)}"; filename*=UTF-8''${cn($.fileName)}`,"Cache-Control":"private, no-store","Content-Security-Policy":"default-src 'none'; sandbox",...Ge});return M!==void 0&&L.set("Content-Length",String(M)),d&&L.append("Set-Cookie",d),a(m,!0),o.info(`200 attachment=${m} viewer=${A} type=${K} disposition=${b} bytes=${M??"-"}`),V?new Response(null,{status:200,headers:L}):(I=!0,new Response(Za(U.bytes,T),{status:200,headers:L}))}finally{I||T()}}};var ye=Object.freeze({queueWaitMs:3e4,readMs:3e4,renderMs:1e4,transferMarginMs:5e3}),Hl=ye.queueWaitMs+ye.readMs+ye.renderMs+ye.transferMarginMs;import{createHash as ei}from"crypto";var yt=e=>{let t=JSON.stringify(e);return`"${ei("sha256").update(t).digest("hex")}"`};import{Buffer as ti}from"buffer";var gn=new Set([194,198,202,206]),ri=new Set([192,193,194,195]),bn=216,ni=217,Sn=218,oi=4,ai=64,ii=2,fn=8,Rn=28,Le=12,Sr=8,si=20,An=Le+Sr+10,li=2,Me=(e,t)=>e[t]<<8|e[t+1],et=(e,t,r)=>{let n=0;for(let o=r-1;o>=0;o-=1)n=n*256+e[t+o];return n},Ee=(e,t,r)=>{if(e.byteLength<t+r.length)return!1;for(let n=0;n<r.length;n+=1)if(e[t+n]!==r.charCodeAt(n))return!1;return!0},Tn=e=>e>=192&&e<=207&&e!==196&&e!==200&&e!==204,Dn=e=>({marker:0,body:0,length:0,end:0,stepsLeft:e}),_n=e=>(e.stepsLeft-=1,e.stepsLeft>=0),En=e=>e[0]===255&&e[1]===bn,In=(e,t,r)=>{let n=t;for(;;){if(n>=e.byteLength||e[n]!==255)return null;do{if(!_n(r))return null;n+=1}while(n<e.byteLength&&e[n]===255);if(n>=e.byteLength)return null;let o=e[n];if(n+=1,o===ni)return"eoi";if(o===0||o===bn)return null;if(o===1||o>=208&&o<=215)continue;if(n+2>e.byteLength)return null;let a=Me(e,n),s=n+a;return a<2||s>e.byteLength?null:(r.marker=o,r.body=n+2,r.length=a,r.end=s,"segment")}},ui=(e,t,r)=>{let n=e.byteLength,o=t;for(;;){let a=e.indexOf(255,o);if(a<0)return n;for(;;){if(!_n(r))return null;if(a+1>=n)return n;let s=e[a+1];if(s===255)a+=1;else if(s===0||s>=208&&s<=215){if(a+=2,a>=n||e[a]!==255)break}else return a}o=a}},wn=(e,{marker:t,body:r,length:n})=>{if(n<8)return null;let o=Me(e,r+1),a=Me(e,r+3),s=e[r+5];if(a===0||o===0||s===0||n!==8+3*s)return null;let l=[];for(let y=0;y<s;y+=1){let i=e[r+7+3*y],_=i>>4,m=i&15;if(_<1||_>4||m<1||m>4)return null;l.push({id:e[r+6+3*y],horizontal:_,vertical:m})}return{marker:t,width:a,height:o,components:l}},xn=(e,{body:t,length:r})=>{if(r<3)return null;let n=e[t];return n<1||n>oi||r!==6+2*n?null:Array.from({length:n},(o,a)=>e[t+1+2*a])},Cn=(e,t)=>({width:e.width,height:e.height,components:e.components.map(({horizontal:r,vertical:n})=>({horizontal:r,vertical:n})),multiScan:gn.has(e.marker)||t<e.components.length}),Ar=e=>{if(!En(e))return null;let t=Dn(e.byteLength),r=null;for(let n=2;;){if(In(e,n,t)!=="segment")return null;if(Tn(t.marker)){if(r!==null||(r=wn(e,t),r===null))return null}else if(t.marker===Sn){if(r===null)return null;let o=xn(e,t);return o===null?null:Cn(r,o.length)}n=t.end}},Pn=e=>{let t=Math.max(...e.components.map(n=>n.horizontal)),r=Math.max(...e.components.map(n=>n.vertical));return e.components.map(({horizontal:n,vertical:o})=>{let a=Math.ceil(e.width*n/(t*fn)),s=Math.ceil(e.height*o/(r*fn));return Math.ceil(a/n)*n*Math.ceil(s/o)*o})},Mn=e=>e.multiScan?Pn(e).reduce((r,n)=>r+n,0)*ai*ii:0,ci=896,vn=(e,{maxBlockVisits:t,maxWalkSteps:r})=>{if(!En(e))return null;let n=ti.from(e.buffer,e.byteOffset,e.byteLength),o=Dn(r),a=null,s=null,l=new Map,y=0,i=0,_=0;for(let m=2;;){let A=In(e,m,o);if(A===null)return null;if(A==="eoi")return s===null?null:{header:s,blockVisits:i};if(m=o.end,Tn(o.marker)){if(a!==null||!ri.has(o.marker)||(a=wn(e,o),a===null))return null;let h=Pn(a);l=new Map;for(let[d,R]of a.components.entries()){let x=l.get(R.id);l.set(R.id,x===void 0?h[d]:Math.max(x,h[d]))}y=a.components.length*(gn.has(a.marker)?ci:1)}else if(o.marker===Sn){if(a===null||_===y)return null;let h=xn(e,o);if(h===null)return null;for(let R of h){let x=l.get(R);if(x===void 0)return null;i+=x}if(_+=1,s===null&&(s=Cn(a,h.length)),i>t||!s.multiScan)return{header:s,blockVisits:i};let d=ui(n,o.end,o);if(d===null)return null;m=d}}},Ln=e=>{if(e.byteLength<24||Me(e,8)!==0||Me(e,10)!==13||!Ee(e,12,"IHDR"))return null;let t=Me(e,16)*65536+Me(e,18),r=Me(e,20)*65536+Me(e,22);return t===0||r===0||t>2147483647||r>2147483647?null:{width:t,height:r}},di=e=>{if(Ee(e,Le,"VP8 ")){if(e.byteLength<30||(e[20]&1)!==0||e[23]!==157||e[24]!==1||e[25]!==42)return null;let t=et(e,26,2)&16383,r=et(e,28,2)&16383;return t===0||r===0?null:{width:t,height:r}}if(Ee(e,Le,"VP8L")){if(e.byteLength<25||e[20]!==47)return null;let t=et(e,21,4);return{width:(t&16383)+1,height:Math.floor(t/16384)%16384+1}}return Ee(e,Le,"VP8X")?e.byteLength<An?null:{width:et(e,24,3)+1,height:et(e,27,3)+1}:null},Nn=e=>{if(Ln(e)===null||e.byteLength<=Rn)return null;switch(e[Rn]){case 0:return!1;case 1:return!0;default:return null}},On=(e,t)=>{if(Ee(e,Le,"VP8 "))return"lossy";if(Ee(e,Le,"VP8L"))return"lossless";if(!Ee(e,Le,"VP8X")||e.byteLength<An)return null;if((e[si]&li)!==0)return"animated";let r=!1,n=t;for(let o=Le;o+Sr<=e.byteLength;){if(n-=1,n<0)return null;if(Ee(e,o,"VP8L"))return"lossless";if(Ee(e,o,"VP8 "))return r?"lossy-alpha":"lossy";Ee(e,o,"ALPH")&&(r=!0);let a=et(e,o+4,4);o+=Sr+a+a%2}return null},kn={png:Ln,jpeg:Ar,webp:di};var Tr=Object.freeze(["image/webp","image/jpeg","image/png"]),Dr=1024*1024;var mi=new Set(["image/png","image/jpeg","image/gif","image/webp"]),pi={"image/webp":"webp","image/jpeg":"jpeg","image/png":"png"},yi=new Set(Tr),hi=e=>typeof e=="string"&&yi.has(e),fi=256,Ht=(e,t)=>e.fileType===null||!mi.has(e.fileType)?!1:e.fileSize===null||e.fileSize<=t,Ri=[137,80,78,71,13,10,26,10],gi=[255,216,255],bi=[[71,73,70,56,55,97],[71,73,70,56,57,97]],Si=[82,73,70,70],Ai=[87,69,66,80],ht=(e,t,r)=>{if(e.byteLength<r+t.length)return!1;for(let[n,o]of t.entries())if(e[r+n]!==o)return!1;return!0},_r=e=>{if(ht(e,Ri,0))return"png";if(ht(e,gi,0))return"jpeg";for(let t of bi)if(ht(e,t,0))return"gif";return ht(e,Si,0)&&ht(e,Ai,8)?"webp":null},Bn=e=>{let t=JSON.stringify([e.rendererId,e.box.maxWidth,e.box.maxHeight,e.attachmentId,e.filePath,e.fileType,e.fileSize]);return{key:t,etag:yt([t])}},Un=(e,t)=>{if(!hi(e.contentType))return"content_type";if(!(e.bytes instanceof Uint8Array))return"bytes";if(e.bytes.byteLength===0)return"empty";if(e.bytes.byteLength>Dr)return"too_large";let r=pi[e.contentType];if(_r(e.bytes)!==r)return"signature";let n=kn[r](e.bytes);return n===null||n.width>t.maxWidth||n.height>t.maxHeight?"dimensions":null},Hn=e=>{oe("maxBytes",e.maxBytes,0),oe("maxEntries",e.maxEntries,0);let t=new Map,r=0,n=o=>{let a=t.get(o);a&&(t.delete(o),r-=a.weight)};return{get:o=>{let a=t.get(o);if(a)return t.delete(o),t.set(o,a),a.entry},set:(o,a)=>{n(o);let s=(a.kind==="thumbnail"?a.bytes.byteLength:0)+fi;if(s>e.maxBytes||e.maxEntries===0)return;let l=a.kind==="thumbnail"?{kind:"thumbnail",bytes:a.bytes.slice(),contentType:a.contentType}:a;t.set(o,{entry:l,weight:s}),r+=s;for(let y of t.keys()){if(r<=e.maxBytes&&t.size<=e.maxEntries)break;n(y)}}}};var Er=e=>{let{budgetMs:t,flightSignal:r,call:n,onOverrun:o,onStuck:a}=e,s=te(),l=new AbortController,y=!1,i,_,m=()=>{a(te()-s)},A=T=>{i=Se(()=>{y=!0,T({timedOut:!0}),_=Se(m,t),l.abort(new DOMException(`stage exceeded its ${t} ms budget`,"TimeoutError"))},t)},h=new Promise(A),d=AbortSignal.any([r,l.signal]),R=T=>{T(n(d))},x=new Promise(R),P=T=>(clearTimeout(i),clearTimeout(_),y&&o(te()-s,T.kind==="error"?{error:T.error}:null),T),C=x.then(T=>P({kind:"value",value:T}),T=>P({kind:"error",error:T}));return{outcome:Promise.race([x.then(T=>({timedOut:!1,value:T})),h]),settled:C}};var Ne={404:"Attachment not found",500:Pe,502:"Thumbnail unavailable",503:"Thumbnail temporarily unavailable",504:"Thumbnail storage timed out"},Fn=(e,t)=>{if(typeof e!="object"||e===null)return{failure:{kind:"failure",status:500,reason:"port_contract",code:"result"}};let r=e;if(!r.ok)return r.reason==="unsupported"?{entry:{kind:"unrenderable",reason:"unsupported"}}:r.reason==="failed"?{failure:{kind:"failure",status:502,reason:"render_failed"}}:{failure:{kind:"failure",status:500,reason:"port_contract",code:"failure_reason"}};let n=Un(r,t);return n!==null?{failure:{kind:"failure",status:500,reason:"port_contract",code:n}}:{entry:{kind:"thumbnail",bytes:r.bytes,contentType:r.contentType}}},Ti=e=>{let t=new AbortController,r=()=>{t.abort()},n=Se(r,ye.queueWaitMs);return e.addEventListener("abort",r,{once:!0}),e.aborted&&r(),{signal:t.signal,end:()=>{clearTimeout(n),e.removeEventListener("abort",r)}}},$n=()=>{},Di=(e,t)=>t.aborted?Promise.resolve():new Promise(r=>{let n=()=>{t.removeEventListener("abort",n),r()};t.addEventListener("abort",n,{once:!0}),e.then(n)}),Yn=e=>{let{gate:t,cache:r,maxBytes:n,encodeUserId:o,recordObjectState:a,logger:s}=e,l=new Map,y=(h,d)=>{let R=d.then($n,$n);l.set(h,R);let x=()=>{l.get(h)===R&&l.delete(h)};R.then(x)},i=async(h,d)=>{let R=l.get(h.key);if(R===void 0)return t.acquire(h.owner,d);let x=Ti(d);try{if(await Di(R,x.signal),x.signal.aborted)return null;let P=r.get(h.key);return P!==void 0?{...P,identity:"verified"}:await t.acquire(h.owner,x.signal)}finally{x.end()}},_=(h,d)=>{if(h.fileSize===null)return d.kind==="exact"?"verified":"unrecorded";if(d.kind==="exact"?d.bytes===h.fileSize:h.fileSize>d.maxBytes)return"verified";let x=d.kind==="exact"?String(d.bytes):`>${d.maxBytes}`;return s.warn(`size_mismatch expected=${h.fileSize} got=${x} attachment=${h.attachmentId} viewer=${h.owner} variant=thumbnail`),"unverified"},m=(h,d)=>(R,x)=>{let P=x===null?"":` message=${x.error instanceof Error?x.error.message:"unknown"}`;s.warn(`${h}_overrun ms=${R} attachment=${d.attachmentId} viewer=${d.owner} variant=thumbnail${P}`)},A=(h,d)=>R=>{s.warn(`${h}_stuck ms=${R} attachment=${d.attachmentId} viewer=${d.owner} variant=thumbnail`)};return async(h,d)=>{let R=await i(h,d);if(R===null)return{kind:"failure",status:503,reason:d.aborted?"aborted":"queue"};if(typeof R!="function")return R;let x=R,P=null;try{if(d.aborted)return{kind:"failure",status:503,reason:"aborted"};let C=r.get(h.key);if(C!==void 0)return{...C,identity:"verified"};let $=Er({budgetMs:ye.readMs,flightSignal:d,call:H=>h.readAttachment(h.filePath,{maxBytes:n,head:!1,principal:o(h.owner),signal:H}),onOverrun:m("read",h),onStuck:A("read",h)}),T=await $.outcome;if(T.timedOut)return P=$.settled,d.aborted?{kind:"failure",status:503,reason:"aborted"}:{kind:"failure",status:504,reason:"read_timeout"};if(d.aborted)return{kind:"failure",status:503,reason:"aborted"};let I=T.value;if(!I.ok&&I.reason!=="too_large")return Nt(I.reason)?(I.reason==="not_found"&&a(h.attachmentId,!1),{kind:"failure",status:Ot(I.reason),reason:I.reason,code:I.code}):{kind:"failure",status:500,reason:"port_contract",code:"failure_reason"};if(I.ok&&I.bytes.byteLength>n)return{kind:"failure",status:500,reason:"port_contract",code:"over_max_bytes"};let U=_(h,I.ok?{kind:"exact",bytes:I.bytes.byteLength}:{kind:"over",maxBytes:n}),V=H=>{U==="verified"&&r.set(h.key,H)},z=H=>(V(H),{...H,identity:U});if(!I.ok)return z({kind:"unrenderable",reason:"too_large"});let G=_r(I.bytes);if(G===null)return z({kind:"unrenderable",reason:"signature"});let K=Er({budgetMs:ye.renderMs,flightSignal:d,call:H=>h.renderer.render(I.bytes,{format:G,maxWidth:h.box.maxWidth,maxHeight:h.box.maxHeight,signal:H}),onOverrun:m("render",h),onStuck:A("render",h)}),b=H=>{if(H.kind==="error")return;let v=Fn(H.value,h.box);"entry"in v&&V(v.entry)},M=null,L=()=>(M===null&&(M=K.settled.then(b),y(h.key,M)),M);d.addEventListener("abort",L,{once:!0});let S=await K.outcome.finally(()=>d.removeEventListener("abort",L));if(S.timedOut||d.aborted)return P=L(),d.aborted?{kind:"failure",status:503,reason:"aborted"}:{kind:"failure",status:502,reason:"render_timeout"};let N=Fn(S.value,h.box);return"entry"in N?z(N.entry):N.failure}finally{P===null?x():P.then(x,x)}}};var Vn=()=>{let e=new Map;return{join:(t,r,n)=>{let o=()=>{let y=new AbortController,i=()=>{e.get(t)?.controller===y&&e.delete(t)},m={promise:n(y.signal).finally(i),controller:y,waiters:0};return e.set(t,m),m},a=e.get(t)??o();a.waiters+=1;let s=()=>{a.waiters-=1,!(a.waiters>0)&&(a.controller.abort(),e.get(t)===a&&e.delete(t))};r.aborted?s():r.addEventListener("abort",s,{once:!0});let l=()=>{r.removeEventListener("abort",s)};return a.promise.finally(l)}}};var zn=10,_i=1/zn,qn=1-_i,Ei=1024,Ii=64,wi=8,jn="private, no-cache",xi="no-store",Ci=Object.freeze({verified:"",unverified:" identity=unverified",unrecorded:" size=unrecorded"}),Pi=e=>{switch(e.status){case 404:case 502:case 504:return"warn";case 500:return"error";case 503:return e.reason==="aborted"?"info":"warn"}},Wn=e=>{let{service:t,encodeUserId:r,resolveViewerScope:n,logger:o,recordObjectState:a,maxBytes:s,thumbnails:l}=e,{renderer:y}=l,i=(T,I)=>Ze({reason:T,limitPerWindow:I,windowMs:6e4,logger:o,windowFields:U=>`viewer=${U} variant=thumbnail`}),_=i("rate_limit",l.rateLimitPerMinute),m=i("revalidation_rate_limit",l.rateLimitPerMinute*zn),A=Ut({limit:l.concurrency,maxHeldPerOwner:l.concurrency,queue:{max:Ii,maxPerOwner:wi,maxWaitMs:ye.queueWaitMs}}),h=Hn({maxBytes:l.cacheBytes,maxEntries:Ei}),d=Vn(),R=Yn({gate:A,cache:h,maxBytes:s,encodeUserId:r,recordObjectState:a,logger:o}),x=(T,I,U,V)=>{let z=`attachment=${T.attachmentId} viewer=${T.internalUserId} variant=thumbnail cache=${V}`;if(I.kind==="failure")return o[Pi(I)](`${I.status} ${z} reason=${I.reason} code=${I.code??"-"}`),T.fail(I.status,Ne[I.status],pt(I.status));let G=Ci[I.identity];if(I.kind==="unrenderable")return o.info(`404 ${z} reason=${I.reason}${G}`),T.fail(404,Ne[404]);let K=I.identity==="verified"?{"Cache-Control":jn,ETag:U}:{"Cache-Control":xi},b=new Headers({"Content-Type":I.contentType,"Content-Length":String(I.bytes.byteLength),...K,"Content-Security-Policy":"default-src 'none'; sandbox",...Ge});return T.cookie&&b.append("Set-Cookie",T.cookie),o.info(`200 ${z} type=${I.contentType} bytes=${I.bytes.byteLength}${G}`),new Response(I.bytes,{status:200,headers:b})},P=(T,I)=>{let U=T.spend(I.internalUserId,`attachment=${I.attachmentId} viewer=${I.internalUserId} variant=thumbnail`);return U===null?null:I.fail(U.status,U.message,U.headers)},C=T=>P(_,T),$=(T,I)=>I?P(m,T):C(T);return async(T,I)=>{let{request:U,attachmentId:V,internalUserId:z,readAttachment:G,cookie:K,fail:b}=T,M=hr[I],L=U.headers.get("If-None-Match"),S=L!==null,N=$(T,S);if(N)return N;let H=await n(U),v=await t.getAttachmentForUser(H,V,z),j=v!==null&&Ht(v,s)?Bn({rendererId:y.id,box:M,attachmentId:V,filePath:v.filePath,fileType:v.fileType,fileSize:v.fileSize}):null;if(j&&ln(L,j.etag)){let se=new Headers({"Cache-Control":jn,ETag:j.etag,...Ge});return K&&se.append("Set-Cookie",K),o.info(`304 attachment=${V} viewer=${z} variant=thumbnail cache=revalidated`),new Response(null,{status:304,headers:se})}if(S){let se=C(T);if(se)return se}if(!v)return o.warn(`404 attachment=${V} viewer=${z} variant=thumbnail reason=not_visible`),b(404,Ne[404]);if(!j)return _.refund(z,qn),o.info(`404 attachment=${V} viewer=${z} variant=thumbnail reason=not_eligible`),b(404,Ne[404]);let{key:O,etag:re}=j,be=h.get(O);if(be)return _.refund(z,qn),x(T,{...be,identity:"verified"},re,"hit");let De=se=>R({key:O,attachmentId:V,filePath:v.filePath,fileSize:v.fileSize,box:M,owner:z,readAttachment:G,renderer:y},se),St;try{St=await d.join(O,U.signal,De)}catch(se){return o.error(`500 attachment=${V} viewer=${z} variant=thumbnail cache=miss reason=port_exception message=${se instanceof Error?se.message:"unknown"}`),b(500,Ne[500])}return x(T,St,re,"miss")}};var Mi='[daily-report] params.token must be passed by the route that mounts attachment.loader; declare a "token" route parameter ({apiBasePath}/attachment/{token})',vi=()=>vt(403,gr,{cookie:null}),Kn=Object.freeze({route:"attachment",navigable:e=>{let{kind:t}=fr(new URL(e.url).searchParams);return t==="inline"||t==="download"},frameworkDataRefusal:()=>vt(404,Lt[404],{cookie:null}),crossSiteRejection:vi}),Jn=e=>{let{authenticate:t,service:r,encodeUserId:n,resolveViewerScope:o,logger:a}=e,s=r.attachmentDelivery,l={service:r,encodeUserId:n,resolveViewerScope:o,logger:a,recordObjectState:sn(r,a)},y=s===null?null:{idCodec:s.idCodec,read:s.read,serveOriginal:hn({...l,maxBytes:s.maxBytes,rateLimitPerMinute:s.rateLimitPerMinute,concurrency:s.concurrency}),serveThumbnail:s.thumbnails===null?null:Wn({...l,maxBytes:s.maxBytes,thumbnails:s.thumbnails})};return async({request:i,params:_})=>{let m=null,A=(h,d,R={})=>vt(h,d,{cookie:m,extraHeaders:R});try{let{user:h,cookie:d}=await t(i,{failureRedirect:null});if(m=d??null,!h)return A(401,"Unauthorized");let R=fr(new URL(i.url).searchParams);if(R.kind==="invalid")return A(400,"Invalid attachment request");if(R.kind==="thumbnail"&&i.method!=="GET")return A(405,"Method not allowed",{Allow:"GET"});if(i.method!=="GET"&&i.method!=="HEAD")return A(405,"Method not allowed",{Allow:"GET, HEAD"});if(y===null)return A(404,"Attachment not found");if(_.token===void 0)throw new Error(Mi);let x=y.idCodec.decode(_.token);if(x===null||!dr(x))return A(400,"Invalid attachment token");let P=await r.getUserIdByExternalId(h.id);if(!P)return A(403,"Forbidden");let C={request:i,delivery:R,attachmentId:x,internalUserId:P,readAttachment:y.read,cookie:m,fail:A};return R.kind!=="thumbnail"?await y.serveOriginal(C):y.serveThumbnail===null?A(404,Ne[404]):await y.serveThumbnail(C,R.variant)}catch(h){if(h instanceof Response)throw h;return a.error(`500 attachment=? viewer=? reason=unexpected message=${h instanceof Error?h.message:"unknown"}`),A(500,Pe)}}};var Li=ce(1,"[Response]"),ae=(e,t,r,n=200,o=Li)=>{let a=yt(r),s=e.headers.get("If-None-Match");o.info(`[jsonResponseWithETag] ETag: ${a}, If-None-Match: ${s}`);let l=new Headers({"Content-Type":"application/json","Cache-Control":"private, max-age=0, must-revalidate","X-Content-Type-Options":"nosniff","X-Frame-Options":"DENY","Content-Security-Policy":"default-src 'none'",ETag:a});return t&&l.append("Set-Cookie",t),e.method==="GET"&&n===200&&s===a?new Response(null,{status:304,headers:l}):new Response(JSON.stringify(r),{status:n,headers:l})};var $t=e=>e.method==="HEAD"?AbortSignal.abort():e.signal;var Yt=30,Zn=4e3,Ni="stream interrupted by server error",Oi=15e3,eo=Symbol("ids-stream-heartbeat"),Gn=()=>{},Vt=e=>e.return(void 0).then(Gn,Gn),ki=()=>{let e;return{fired:new Promise(r=>{e=setTimeout(()=>r(eo),Oi)}),stop:()=>clearTimeout(e)}},Bi=/^[0-9a-f]{1,16}$/,Ui=e=>{let t=e.searchParams.get(_e.cursorReportHubId),r=e.searchParams.get(_e.cursorBusinessDate),n=e.searchParams.get(_e.cursorSnapshot),o=n!==null&&Bi.test(n)?n:null;if(t===null)return r===null?{cursor:null,snapshot:o}:{invalid:!0};let a=He(t);return a===null?{invalid:!0}:r===null?{cursor:{businessDate:null,reportHubId:a},snapshot:o}:It(r)?{cursor:{businessDate:r,reportHubId:a},snapshot:o}:{invalid:!0}};async function*Xn(e,t,r,n){let o=t?Br(e,t):0,a=!0;for(;;){let s=e.slice(o,o+(a?r:Zn));o+=s.length;let l=o>=e.length,y=s[s.length-1];if(yield{kind:"chunk",items:s,nextCursor:l||!y?null:{businessDate:y.businessDate,reportHubId:y.reportHubId},isLast:l,...a?{total:e.length}:{},...a?{streamAnchor:n.streamAnchor}:{},snapshot:n.snapshot,...a&&n.restarted?{restarted:!0}:{}},a=!1,l)return}}var to=e=>{let t=new Headers({"Content-Type":"application/x-ndjson; charset=utf-8","Cache-Control":"private, no-cache, no-transform","X-Content-Type-Options":"nosniff"});return e&&t.append("Set-Cookie",e),t},Qn=(e,t,r,n)=>{let o=new TextEncoder,a=!1,s=null,l=new ReadableStream({async pull(y){if(a||r.aborted){await Vt(t);try{y.close()}catch{}return}let i=ki();try{s===null&&(s=t.next());let _=await Promise.race([s,i.fired]);if(i.stop(),_===eo){if(a||r.aborted){await Vt(t);try{y.close()}catch{}return}y.enqueue(o.encode(`
+`));return}s=null;let{value:m,done:A}=_;if(A){y.close();return}if(a||r.aborted){await Vt(t);try{y.close()}catch{}return}y.enqueue(o.encode(`${JSON.stringify(m)}
+`))}catch(_){if(i.stop(),s=null,a||r.aborted)return;n.error(`ids-stream emission failed: ${_ instanceof Error?_.message:String(_)}`);try{let m={kind:"error",error:Ni};y.enqueue(o.encode(`${JSON.stringify(m)}
+`)),y.close()}catch{}}},cancel(){a=!0,Vt(t)}});return new Response(l,{status:200,headers:to(e)})},ro=e=>{let{service:t,logger:r}=e;return async(n,o,a,s,l)=>{let y=Ui(n);if("invalid"in y)return ae(a,o,{error:{message:"Invalid cursor"}},400);let i=dt(n.searchParams.get(_e.forceRefresh));if(i===null)return ae(a,o,{error:{message:"Invalid forceRefresh"}},400);let _=$t(a);if(_.aborted)return new Response(null,{status:200,headers:to(o)});let m=!1,A=null,h=null,d=new Promise((P,C)=>{A=P,h=C});d.catch(()=>{});let R=t.getDailyReportIdsByExternalId(l,s.id,{forceRefresh:i,onFetchStart:y.cursor?void 0:()=>{m=!0,t.readSseStreamAnchor().then(P=>t.getDailyReportIdsFirstPageByExternalId(l,s.id,Yt).then(C=>({items:C,streamAnchor:P}))).then(P=>A?.(P),P=>h?.(P))}});if(R.catch(()=>{}),y.cursor){let{items:P,streamAnchor:C,snapshot:$}=await R,T=y.snapshot!==null&&y.snapshot===$;return Qn(o,Xn(P,T?y.cursor:null,Yt,{snapshot:$,restarted:!T,streamAnchor:C}),_,r)}let x=(async function*(){let P=await Promise.race([R.then(T=>({kind:"full",source:T}),T=>({kind:"full-error",error:T})),d.then(T=>({kind:"page",page:T}),()=>({kind:"page-error"}))]),C=null,$=!1;if(P.kind==="full")C=P.source;else if(P.kind==="page"){let{items:T,streamAnchor:I}=P.page;if(T.length<Yt){yield{kind:"chunk",items:T,nextCursor:null,isLast:!0,total:T.length,streamAnchor:I};return}yield{kind:"chunk",items:T,nextCursor:null,isLast:!1,provisional:!0},$=!0}else if(P.kind==="full-error"&&m){let T=await d.catch(()=>null);T&&T.items.length>0&&(yield{kind:"chunk",items:T.items,nextCursor:null,isLast:!1,provisional:!0})}C===null&&(C=await R),yield*Xn(C.items,null,$?Zn:Yt,{snapshot:C.snapshot,streamAnchor:C.streamAnchor})})();return Qn(o,x,_,r)}};import{systemSseRuntime as Xi}from"@aiquants/sse";import{createSseResponse as Qi,readLastEventId as Zi,startSseHeartbeat as es,terminalStreamResponse as ts}from"@aiquants/sse/server";var qt=(e,t)=>{let r=e.message.data;if(!r)return{entry:{id:e.id,message:null},json:void 0};let n;try{n=JSON.parse(r)}catch(s){return t.error(`SSE message ${e.id} is not JSON:`,s),{entry:{id:e.id,message:null},json:void 0}}let o=Vr.safeParse(n);if(!o.success)return t.error("SSE message validation failed:",o.error.format()),{entry:{id:e.id,message:null},json:n};let a=Object.freeze({parsed:o.data,published:n,text:r});return{entry:Object.freeze({id:e.id,message:a}),json:n}},Hi=["externalComments","postedComments"],no=new WeakMap,Fi=e=>{let t=no.get(e);if(t!==void 0)return t;let r={recipientRemoved:null,commentsRedacted:null};return no.set(e,r),r},oo=e=>{let{recipientRawUserId:t,...r}=e;return r},ao=(e,t)=>{let{published:r}=e;if(!(t||Object.hasOwn(r,"recipientRawUserId")))return e.text;let n=Fi(e);if(t){if(n.commentsRedacted===null){let o=oo(r),a=o.report;n.commentsRedacted=JSON.stringify({...o,report:{...a,...Object.fromEntries(Hi.map(s=>[s,[]]))}})}return n.commentsRedacted}return n.recipientRemoved===null&&(n.recipientRemoved=JSON.stringify(oo(r))),n.recipientRemoved};import{systemSseRuntime as Yi}from"@aiquants/sse";import{createSharedSource as Vi}from"@aiquants/sse/shared-source";var Fe="daily-report:ids:",$e="daily-report:business-date:",jt=(e,t)=>`${e}st:${t}`,Ir=e=>`${Fe}user:${e}:`,io=(e,t)=>jt(Ir(e),t),$i=e=>`${$e}${e}:`,so=(e,t)=>jt($i(e),t),ft=e=>`daily-report:date:${e}:user:`,tt=(e,t)=>`${ft(e)}${t}:`,lo=(e,t,r)=>jt(tt(e,t),r),Ie=e=>`daily-report:detail:${e}:user:`,zt=(e,t)=>`${Ie(e)}${t}:`,uo=(e,t,r)=>jt(zt(e,t),r);var Oe=(e,t)=>{let[r,n]=e.split("-").map(Number),[o,a]=t.split("-").map(Number);return r!==o?r<o:n<=a},qi=5e3,ji=Ct,Rt=class{constructor(t){this.config=t;this._lastId=null;this._positioning=null;this._generation=0;this._logger=t.logger??ce(1,"[SSE Reader]"),this._source=this._createSource()}ready(){return this._position().then(()=>{})}subscribe(t,r){return this._source.subscribe({next:n=>{this._lastId=n.id,t(n)},error:n=>r(n instanceof Error?n:new Error(String(n)))})}async destroy(){await this._source.dispose(),this._generation+=1,this._positioning=null,this._lastId=null,this._source=this._createSource()}_position(){if(this._lastId!==null)return Promise.resolve(this._lastId);if(this._positioning===null){let t=this._generation;this._positioning=this._readTail().then(r=>{if(t!==this._generation)throw new Error("SSE reader was destroyed while the stream tail was being read");return this._positioning=null,this._lastId=r,r},r=>{throw t===this._generation&&(this._positioning=null),r})}return this._positioning}async _readTail(){let t=await this.config.redis?.getClient();if(!t)throw new Error("Failed to get Redis client to read the SSE stream tail");let r=await t.xRevRange(this.config.streamKey,"+","-",{COUNT:1});return r.length>0?r[0].id:"0-0"}_createSource(){return Vi({start:t=>this._start(t),lingerMs:0,replay:"none",runtime:Yi,onListenerError:t=>this._logger.error("SSE reader subscriber threw:",t),onStopError:t=>this._logger.error("SSE reader failed to stop:",t)})}async _start(t){let r=await this._position(),n=await this.config.redis?.createClient();if(!n)throw new Error("Failed to create Redis client for SSE reader");n.on("error",s=>{this._logger.error("Redis client error:",s)});let o=!1,a=this._readLoop(n,t,r,()=>o);return async()=>{if(o=!0,n.isOpen)try{await n.quit()}catch{}await a}}async _readLoop(t,r,n,o){let a=n;try{for(;!o()&&t.isOpen;){let s=await t.xRead([{key:this.config.streamKey,id:a}],{BLOCK:qi,COUNT:ji});if(s)for(let l of s)for(let y of l.messages){a=y.id;let{entry:i,json:_}=qt(y,this._logger);this._invalidateCaches(_),r.next(i)}}}catch(s){o()||(this._logger.error("xRead loop error:",s),r.fail(s instanceof Error?s:new Error(String(s))));return}o()||r.fail(new Error("Redis client for SSE reader closed unexpectedly"))}_invalidateCaches(t){if(t===null||typeof t!="object")return;let{type:r,reportHubId:n}=t;(r==="report-create"||r==="report-delete"||r==="report-publish")&&this.config.cache.invalidatePrefix(Fe),(r==="comment-add"||r==="comment-delete"||r==="status-update")&&typeof n=="number"&&this.config.cache.invalidatePrefix(Ie(n))}};import{inArray as zi,sql as co}from"drizzle-orm";var Wi="
",Ki=64,Ji=e=>e.toLowerCase(),Gi=e=>e.trim().toLowerCase();function mo(e){if(e==null)return null;if(!Array.isArray(e))return new Set;let t=new Set;for(let r of e){if(typeof r!="string")continue;let n=Gi(r);n.length>0&&t.add(n)}return t}function we(e,t){return e===null?!0:t==null?!1:e.has(Ji(t))}function Ye(e){return e!==null&&e.size===0}function yo(e,t){if(t!==null)return t.size===0?co`1 = 0`:zi(co`LOWER(${e})`,[...t])}var rt,nt,gt=class gt{constructor(t,r){Zt(this,rt);Zt(this,nt);er(this,rt,t),er(this,nt,r)}get visible(){return ut(this,rt)===null?null:new Set(ut(this,rt))}get commentable(){return ut(this,nt)===null?null:new Set(ut(this,nt))}static restrictTo(t){let r=typeof t=="object"&&t!==null&&"read"in t,n=mo(r?t.read:t),o=r?t.comment:void 0;if(o===void 0)return new gt(n,n);let a=mo(o),s=new Set;for(let l of a??[])n.has(l)&&s.add(l);return new gt(n,s)}static unrestricted(t){return new gt(null,null)}};rt=new WeakMap,nt=new WeakMap;var ge=gt;function bt(e){let t=po(e.visible),r=po(e.commentable);return t===r?t:`d:${t.length}:${t}${r}`}function po(e){if(e===null)return"all";if(e.size===0)return"none";let t=[...e].sort().map(n=>`${n.length}:${n}`).join(Wi);if(t.length<=Ki)return`s:${t}`;let r=2166136261;for(let n=0;n<t.length;n++)r^=t.charCodeAt(n),r=Math.imul(r,16777619);return`sh:${(r>>>0).toString(16)}`}var Ro=Object.freeze({...mt,route:"sse",frameworkDataRefusal:Mt}),ho=864e5,rs={baseMs:2e3,jitterMs:8e3},go=6e4,wr=Ct,bo=JSON.stringify({type:"connected"}),fo="0-0",ns=(e,t,r,n)=>{if(r===null&&n===null)return!0;let o=typeof t.sourceType=="string"?t.sourceType:void 0;switch(e.type){case"connected":case"status-update":return!0;case"report-create":case"report-update":case"report-publish":return we(r,e.report.sourceType);case"comment-add":case"comment-delete":return we(n,o??"Internal");case"report-delete":return we(r,o)}},os=(e,t)=>t===null||e.type!=="report-create"&&e.type!=="report-update"&&e.type!=="report-publish"?!1:!we(t,e.report.sourceType),as=(e,t)=>{e.writeEvent({event:null,id:t,data:bo})},is=(e,t,r)=>{let{message:n}=t;if(n===null)return;let{parsed:o,published:a}=n,s=typeof a.recipientRawUserId=="number"?a.recipientRawUserId:void 0;if((o.type==="status-update"||s!==void 0)&&s!==r.internalUserId||!ns(o,a,r.visibleSet,r.commentableSet)){as(e,t.id);return}e.writeEvent({event:null,id:t.id,data:ao(n,os(o,r.commentableSet))})},So=e=>{let{authenticate:t,service:r,resolveViewerScope:n,redis:o,sseReader:a,streamKey:s,logger:l}=e,y=async(i,_)=>{let{request:m,internalUserId:A,cursor:h}=_,d=_.initialScope.visible,R=_.initialScope.commentable,x=0,P=setInterval(()=>{let b=++x;n(m,"refresh").then(M=>{b===x&&(d=M.visible,R=M.commentable)})},go);i.onClose(()=>clearInterval(P));let C=h===null?fo:h,$=h!==null&&o!==void 0,T=[],I=null,U=b=>{Oe(b.id,C)||(C=b.id,is(i,b,{internalUserId:A,visibleSet:d,commentableSet:R}))},V=async(b,M)=>{let[L]=await b.xRange(s,"-","+",{COUNT:1});return L!==void 0&&!Oe(L.id,M)},z=async(b,M)=>{if(await V(b,M))return!1;let L=M;for(;;){let S=await b.xRange(s,L,"+",{COUNT:wr}),N=S[0];if(N!==void 0&&N.id!==L&&await V(b,L))return!1;for(let v of S){if(I!==null&&Oe(I,v.id))return!0;Oe(v.id,C)||U(qt(v,l).entry)}let H=S.at(-1);if(S.length<wr||H===void 0||i.isClosed())return!0;L=H.id}},G=a.subscribe(b=>{if(!$){U(b);return}Oe(b.id,C)||(I===null&&(I=b.id),T.push(b))},b=>{l.error(`[SSE:${A}] Fan-Out reader error:`,b),i.close()});if(i.onClose(G),h===null){await a.ready();try{let b=await o?.getClient();if(b){let M=await b.xRevRange(s,"+","-",{COUNT:1});M.length>0&&!Oe(M[0].id,C)&&(C=M[0].id)}}catch{}}if(i.writeEvent({event:null,id:C===fo?null:C,data:bo}),es(i,{intervalMs:Hr,retry:rs,runtime:Xi}),h===null||o===void 0)return;await a.ready();let K=await o.getClient();if(K===void 0)throw new Error("redis client unavailable for the SSE catch-up");if(!await z(K,h)){i.writeRetry(ho),i.writeEvent({event:"resync-required",id:null,data:""}),i.close();return}$=!1;for(let b of T.splice(0))U(b)};return async({request:i,params:_})=>{let m,A=()=>{let d=new Headers;return m!==void 0&&d.append("Set-Cookie",m),d},h=d=>ts(d,{data:"",retryMs:ho,headers:A()});try{let d=await t(i,{failureRedirect:null});m=d.cookie;let{user:R}=d;if(!R)return h("auth-required");let x=await r.getUserIdByExternalId(R.id);if(!x)return h("forbidden");if(_.endpoint!=="updates")return new Response("Not Found",{status:404,headers:A()});let P=Zi(i,Fr);if(P!==null&&!$r(P))return l.warn(`[SSE:${x}] malformed resume cursor; asking the client to resync`),h("resync-required");let C=await n(i,"initial");return Qi({requestSignal:$t(i),headers:A(),onError:($,T)=>l.error(`[SSE:${x}] ${T} failed:`,$),produce:$=>y($,{request:i,internalUserId:x,cursor:P,initialScope:C})})}catch(d){if(d instanceof Response)throw d;let R=d instanceof Error?d:new Error(String(d));return l.error(`500 sse name=${R.name} message=${R.message}`),new Response("Internal Server Error",{status:500,headers:A()})}}};var ss=(e,t)=>{let r=new Headers({...t?.headers,"Content-Type":"application/json"});return t?.setCookie&&r.append("Set-Cookie",t.setCookie),new Response(JSON.stringify(e),{status:t?.status??200,headers:r})},ls=Object.freeze({...mt,route:"api",frameworkDataRefusal:({params:e})=>yr(e.endpoint)&&Pt[e.endpoint]==="stream"?Mt():null}),us=Object.freeze({...mt,route:"action"}),cs=600,ds=6e4;function xr(e){Bt(e);let{authenticate:t,service:r,encodeUserId:n,redis:o,sseReader:a,streamKey:s}=e,l={titleMaxLength:oe("service.titleMaxLength",r.titleMaxLength,1)},y=e.loginRedirectPath??"/auth/login",i=e.logger??ce(3,"[DailyReportAPI]"),_=e.logger??ce(3,"[DailyReportVisibility]"),m=e.logger??ce(1,"[DailyReportSSE]"),A=e.logger??ce(1,"[DailyReportAttachment]"),h=e.logger??ce(2,"[DailyReportIsolation]"),d=e.logger??ce(2,"[DailyReportAction]"),R=async(b,M="initial")=>{let L=e.resolveVisibleSourceTypes;if(!L)return ge.unrestricted("no visibility port injected: this deployment does not restrict by source type");try{let S=await L(b,{reason:M});return S==null?ge.unrestricted("visibility port returned null/undefined: this deployment opts out of source-type filtering"):ge.restrictTo(S)}catch(S){return _.error("resolveVisibleSourceTypes threw; failing closed (deny all)",S),ge.restrictTo([])}},x=async({request:b})=>{let{user:M,cookie:L}=await t(b,{failureRedirect:y}),S=new Headers;L&&S.append("Set-Cookie",L);let N=await r.getUserIdByExternalId(M.id),H=N?n(N):null;return{data:{user:M,userId:H},headers:S}},P={[Ce.businessDate]:async(b,M,L,S,N)=>{let H=b.searchParams.get(_e.businessDate),v=H===null?null:Ke(H);if(v===null)return ae(L,M,{error:{message:"Invalid business date"}},400);let X=dt(b.searchParams.get(_e.forceRefresh));if(X===null)return ae(L,M,{error:{message:"Invalid forceRefresh"}},400);let j=await r.getDailyReportsByBusinessDateByExternalId(N,v,S.id,{forceRefresh:X});return ae(L,M,{businessDate:v,reports:j},200)},[Ce.idsStream]:ro({service:r,logger:i}),[Ce.report]:async(b,M,L,S,N)=>{let H=He(b.searchParams.get(_e.reportHubId));if(H===null)return ae(L,M,{error:{message:"Invalid reportHubId"}},400);let v=dt(b.searchParams.get(_e.forceRefresh));if(v===null)return ae(L,M,{error:{message:"Invalid forceRefresh"}},400);let X=await r.getDailyReportDetailByIdByExternalId(N,H,S.id,{snapshot:!0,forceRefresh:v});return X?ae(L,M,{report:X},200):ae(L,M,{error:{message:"Report not found"}},404)}},C=async({request:b,params:M})=>{let{user:L,cookie:S}=await t(b,{failureRedirect:null}),N=S??null;if(!L)return ae(b,N,{error:{message:"Unauthorized"}},401);let H=M.endpoint;if(!yr(H))return ae(b,N,{error:{message:"Unknown endpoint"}},404);let v=Zr[Pt[H]];if(!v.includes(b.method)){let j=ae(b,N,{error:{message:"Method not allowed"}},405);return j.headers.set("Allow",v.join(", ")),j}let X=te();try{let j=new URL(b.url),O=await R(b);return await P[H](j,N,b,L,O)}catch(j){let O=te()-X,re=j instanceof Error?j:new Error(String(j));return i.error(`500 endpoint=${H} elapsed=${O}ms name=${re.name} code=${"code"in re?re.code:"N/A"} message=${re.message}`),i.error("Stack:",re.stack),ae(b,N,{error:{message:"Internal Server Error"}},500)}},$=Qr(d),T=Ze({reason:"rate_limit",limitPerWindow:cs,windowMs:ds,logger:d,windowFields:()=>"route=action"}),I=async(b,M,L,S)=>{let{clientTempId:N,operationTimestamp:H}=b;if(b.intent==="create"){let O=await r.createDailyReport(M,b.businessDate,N);return S({status:"OK",intent:"create",report:O,reportHubId:String(O.reportHubId),clientTempId:N})}let{reportHubId:v,businessDate:X}=b,j=async(O,re,be)=>{try{let De=await be(re);return S({status:"OK",intent:O,updatedStatus:{isStarred:De.isStarred,isRead:De.isRead},operationTimestamp:H,reportHubId:String(v),clientTempId:N})}catch(De){if(De instanceof Error&&De.message==="Not Found")return S({error:"Report not found"},{status:404});throw De}};switch(b.intent){case"update":try{return await r.updateDailyReport(v,M,b.changes,N),S({status:"OK",intent:"update",reportHubId:String(v),clientTempId:N})}catch(O){if(O instanceof Error){if(O.message==="Unauthorized")return S({error:"Unauthorized"},{status:403});if(O.message==="Not Found")return S({error:"Report not found"},{status:404})}throw O}case"publish":try{let O=await r.publishDailyReport(v,M,N);return S({status:"OK",intent:"publish",reportHubId:String(v),clientTempId:N,report:O})}catch(O){if(O instanceof Error){if(O.message==="Unauthorized")return S({error:"Unauthorized"},{status:403});if(O.message==="Not Found")return S({error:"Report not found"},{status:404})}throw O}case"delete":try{return await r.deleteDailyReport(v,M,N),S({status:"OK",intent:"delete",reportHubId:String(v),clientTempId:N})}catch(O){if(O instanceof Error){if(O.message==="Unauthorized")return S({error:"Unauthorized"},{status:403});if(O.message==="Not Found")return S({error:"Report not found"},{status:404})}throw O}case"toggleStar":return await j("toggleStar",b.value,O=>r.setStarStatus(L,M,v,X,O,N));case"toggleRead":return await j("toggleRead",b.value,O=>r.setReadStatus(L,M,v,X,O,N));case"addComment":try{let O=await r.addComment(L,M,v,b.content,X,N),re={...O,userId:O.userId};return S({status:"OK",intent:"addComment",newComment:re,reportHubId:String(v),clientTempId:N})}catch(O){if(O instanceof Error){if(O.message==="Not Found")return S({error:"Report not found"},{status:404});if(O.message.startsWith("Comments are restricted"))return S({error:"Comments are restricted for this report"},{status:403})}throw O}case"deleteComment":try{return await r.deleteComment(L,M,v,b.commentId,X,N),S({status:"OK",intent:"deleteComment",reportHubId:String(v),deletedCommentId:String(b.commentId),clientTempId:N})}catch(O){if(O instanceof Error){if(O.message==="Unauthorized")return S({error:"Unauthorized"},{status:403});if(O.message==="Not Found")return S({error:"Comment not found"},{status:404})}throw O}}},U=async({request:b,params:M})=>{let{user:L,cookie:S}=await t(b,{failureRedirect:null}),N=(v,X)=>ss(v,{...X,setCookie:S});if(!L)return N({error:"Unauthorized"},{status:401});let H=te();try{if(M.endpoint!==Ce.action)return N({error:"Unknown endpoint"},{status:404});let v=T.spend(L.id,"action");if(v!==null)return N({error:v.message},{status:v.status,headers:v.headers});let X=await Xr(b,l);if("refusal"in X){let{refusal:be}=X;return be.status===413&&$(be.measuredBy),N({error:be.error},{status:be.status})}let{command:j}=X;if(j.intent==="clearCache"&&!e.enableDevCacheClear)return N({error:"Invalid intent"},{status:400});let O=await r.getUserIdByExternalId(L.id);if(!O)return N({error:"User not found"},{status:404});let re=await R(b);return j.intent==="clearCache"?(await r.clearCache(),N({status:"OK",intent:"clearCache"})):await I(j,O,re,N)}catch(v){if(v instanceof Response)throw v;let X=te()-H,j=v instanceof Error?v:new Error(String(v));return i.error(`500 action elapsed=${X}ms name=${j.name} message=${j.message}`),i.error("Stack:",j.stack),N({error:"Internal Server Error"},{status:500})}},V=So({authenticate:t,service:r,resolveViewerScope:R,redis:o,sseReader:a,streamKey:s,logger:m}),z=Jn({authenticate:t,service:r,encodeUserId:n,resolveViewerScope:R,logger:A}),G=an(h),K=(b,M)=>async L=>{let S=nn(L.request)?b.frameworkDataRefusal(L):null;if(S!==null)throw S;return on(L.request,b)?(G(b.route,L.request),b.crossSiteRejection()):M(L)};return{index:{loader:x},api:{loader:K(ls,C),action:K(us,U)},sse:{loader:K(Ro,V)},attachment:{loader:K(Kn,z)}}}import{runWithTransactionRetry as ps}from"@aiquants/mssql";import{aliasedTable as ot,and as Z,asc as Wt,desc as at,eq as w,getColumns as ys,inArray as Ae,isNull as pe,or as it,sql as Ao}from"drizzle-orm";var Ve=e=>ys(e),To=_t([]),de=(e,t)=>{if(!e)return null;let r=e instanceof Date?e:new Date(e);if(Number.isNaN(r.getTime()))return typeof e=="string"?e:null;let n=r.getFullYear(),o=n<0?`-${String(-n).padStart(4,"0")}`:String(n).padStart(4,"0"),a=String(r.getMonth()+1).padStart(2,"0"),s=String(r.getDate()).padStart(2,"0");if(t==="YYYY-MM-DD")return`${o}-${a}-${s}`;let l=String(r.getHours()).padStart(2,"0"),y=String(r.getMinutes()).padStart(2,"0"),i=String(r.getSeconds()).padStart(2,"0");return`${o}-${a}-${s} ${l}:${y}:${i}`},hs=e=>{let{length:t}=e;if(typeof t=="number"&&Number.isSafeInteger(t)&&t>=1)return t;throw me("tables.hub.title","a character column with a declared length",t)},Do=e=>e===""?null:e;function Cr(e){let{db:t,tables:r,userTable:n,resolveUserId:o,encodeUserId:a,redis:s,cache:l,epochs:y}=e,{hub:i,internal:_,comment:m,label:A,hubLabel:h,userStatus:d}=r,R=e.externalSources??[],x=e.draftLabelNames&&e.draftLabelNames.length>0?e.draftLabelNames:[e.draftLabelName??"\u4E0B\u66F8\u304D"],P=x[0]??"\u4E0B\u66F8\u304D",C=e.logger??ce(1,"[DailyReportService]");Bt(e);let $=pn(e.attachments),T=hs(i.title),I=c=>ps(u=>t.transaction(p=>u(()=>c(p))),e.transactionRetry),U=e.idsTtlMs??18e4,V="daily-report:ids:epoch",z=e.businessDateTtlMs??3e5,G="daily-report:date-epoch:",K="daily-report:detail-epoch:",M=`${e.streamKey??"daily-report:sse-stream"}:v2`,L=e.streamMaxLen??1e4,S=c=>y.incrementEpoch(c),N=c=>yo(i.sourceType,c),H=async(c,u)=>{let p=await s?.getClient();if(!p){C.warn(`[SSE] Redis client unavailable (${u})`);return}let f=JSON.stringify(c),E=Buffer.byteLength(f);if(E>6356992){C.warn(`[SSE] Event too large (${u}): ${E} bytes > ${6356992}; not published`);return}let k=te();try{await p.xAdd(M,"*",{data:f},{TRIM:{strategy:"MAXLEN",strategyModifier:"~",threshold:L}});let D=te()-k;D>1e3&&C.warn(`[SSE] Slow publish (${u}): ${D}ms`)}catch(D){C.error(`[SSE] Redis publish failed (${u}):`,D)}},v=async()=>{try{let c=await s?.getClient();if(c===void 0)return null;let[u]=await c.xRevRange(M,"+","-",{COUNT:1});return u===void 0?null:u.id}catch(c){return C.error("[DailyReportService] SSE stream anchor read failed",c),null}},X=c=>c==null||c===""?null:/^\d+$/.test(c)?a(Number(c)):c,j=()=>{let c={};for(let u of R)c[`ext_${u.sourceType}`]=Ve(u.table);return c},O=c=>{let u=c;for(let p of R)u=u.leftJoin(p.table,Z(w(i.sourceType,p.sourceType),w(i.sourceIdNum,p.idColumn)));return u},re=(c,u,p)=>{let{hub:f,internal:E}=u,k=f.summary,D=[],B=null,F=null,Y=null,J=null,Q=null,he=null,ze=[],ve=R.find(q=>q.sourceType===f.sourceType),We=ve?u[`ext_${ve.sourceType}`]:void 0;if(ve&&We){let q=ve.mapRow(We);q.content!==void 0&&(k=q.content),q.employeeName!==void 0&&(he=q.employeeName),q.category!==void 0&&(B=q.category),q.creationCategory!==void 0&&(F=q.creationCategory),q.visitTimeFrom!==void 0&&(Y=q.visitTimeFrom),q.visitTimeTo!==void 0&&(J=q.visitTimeTo),q.customerName!==void 0&&(Q=q.customerName),q.interviewers!==void 0&&(D=q.interviewers),q.externalComments!==void 0&&(ze=q.externalComments)}else f.sourceType==="Internal"&&E&&(k=E.body);let xe=(u.labels??[]).map(q=>({id:q.id,name:q.name,color:q.color})),le=u.postedCommentRows??[],ee=we(c.commentable,f.sourceType),ue=F?x.includes(F):!1,Qt=je?.[0]??null;return ue&&Qt&&!xe.some(q=>q.id===Qt)&&xe.push({id:Qt,name:P,color:null}),{reportHubId:f.id,date:de(f.businessDate,"YYYY-MM-DD"),author:u.creatorName??X(f.createdBy)??"",userId:f.userId?a(f.userId):"",sourceType:f.sourceType??"Internal",createdAt:de(f.createdAt,"YYYY-MM-DD HH:mm:ss"),updatedAt:de(f.updatedAt,"YYYY-MM-DD HH:mm:ss"),updatedBy:X(f.updatedBy),employeeName:he??u.creatorName??X(f.createdBy),category:B,creationCategory:F,visitTimeFrom:Y,visitTimeTo:J,customerName:Q,interviewers:D,subject:f.title,content:k,externalComments:ee?ze:[],isRead:u.isRead??!1,isStarred:u.isStarred??!1,labels:xe,postedComments:le.filter(q=>ee||p!==void 0&&q.userId===p).map(q=>({...q,userId:a(q.userId),isMine:p?q.userId===p:!1})),attachments:u.attachments}},be=async(c,u)=>{let p=ot(h,"draft_label"),f=await Be();return(await t.select({reportHubId:i.id,businessDate:i.businessDate,sourceType:i.sourceType}).from(i).leftJoin(p,Z(w(p.hubId,i.id),Ae(p.labelId,f))).where(Z(pe(i.deletedAt),it(w(i.userId,u),pe(i.userId),pe(p.hubId)),N(c.visible))).orderBy(at(i.businessDate),at(i.id))).map(k=>({...k,businessDate:de(k.businessDate,"YYYY-MM-DD")}))},De=async(c,u,p)=>{let f=await st(u);if(!f)return[];if(Ye(c.visible))return[];let E=ot(h,"draft_label"),k=await Be();return(await t.select({reportHubId:i.id,businessDate:i.businessDate,sourceType:i.sourceType}).top(p).from(i).leftJoin(E,Z(w(E.hubId,i.id),Ae(E.labelId,k))).where(Z(pe(i.deletedAt),it(w(i.userId,f),pe(i.userId),pe(E.hubId)),N(c.visible))).orderBy(at(i.businessDate),at(i.id))).map(B=>({...B,businessDate:de(B.businessDate,"YYYY-MM-DD")}))},St=async(c,u)=>{let p=await O(t.select({hub:Ve(i),internal:Ve(_),creatorName:n.displayName,...j()}).from(i)).leftJoin(_,w(i.id,_.hubId)).leftJoin(n,w(i.userId,n.id)).where(Z(w(i.businessDate,Ao`${u}`),pe(i.deletedAt),N(c.visible))).orderBy(at(i.id)),f=await Tt(p.map(E=>E.hub.id));return p.map(E=>re(c,{...E,attachments:f.get(E.hub.id)??[]}))},se=new Map,st=async c=>{if(!e.disableUserIdCache&&se.has(c))return se.get(c)??null;let u=await o(c);return u!==null&&!e.disableUserIdCache&&se.set(c,u),u},$o=async(c,u,{forceRefresh:p=!1,snapshot:f=!1,ttlMsOverride:E,onFetchStart:k}={})=>{let D=await st(u);if(!D)return{items:[],streamAnchor:null,snapshot:To};if(Ye(c.visible))return{items:[],streamAnchor:await v(),snapshot:To};let B=io(D,bt(c)),[F]=await l.getOrFetch({cacheKey:B,fetcher:async()=>{let Y=await v(),J=await be(c,D);if(!kr(J)){C.warn("[DailyReportService] ids array is not in stream order; re-sorting (check SQL ORDER BY vs compareIdsStreamOrder, or concurrent row movement during the scan)");let Q=[...J].sort(Et);return[{items:Q,streamAnchor:Y,snapshot:_t(Q)}]}return[{items:J,streamAnchor:Y,snapshot:_t(J)}]},onFetchStart:k,forceRefresh:p,snapshot:f,ttlMsOverride:E??U,epochKey:V,refreshAheadRatio:.5});if(F===void 0)throw new Error("[DailyReportService] ids cache returned no record");return F},Yo=(c,u,{forceRefresh:p=!1,snapshot:f=!1,ttlMsOverride:E}={})=>{let k=fe(u);return k?Ye(c.visible)?Promise.resolve([]):l.getOrFetch({cacheKey:so(k,bt(c)),fetcher:()=>St(c,k),forceRefresh:p,snapshot:f,ttlMsOverride:E??z}):Promise.resolve([])},je=null,At=async()=>(je!==null||(je=(await t.select({id:A.id}).from(A).where(Ae(A.name,x)).orderBy(A.id)).map(u=>u.id)),je),Be=async()=>{let c=await At();return c.length>0?c:[-1]},Jt=async()=>{let c=await At();if(c.length===0)return null;let[u]=await t.select({id:A.id}).top(1).from(A).where(w(A.name,P));return u?.id??c[0]},Vo=(c,u)=>u!=null?"absent":c!=null?"present":"unknown",Tt=async c=>{let u=new Map,p=r.attachment;if(c.length===0||!p||$===null)return u;let f=$.idCodec,E=$.thumbnails!==null,k=await t.select({id:p.id,hubId:p.hubId,fileName:p.fileName,fileType:p.fileType,fileSize:p.fileSize,createdAt:p.createdAt,objectCheckedAt:p.objectCheckedAt,objectMissingAt:p.objectMissingAt}).from(p).where(Ae(p.hubId,c)).orderBy(Wt(p.createdAt),Wt(p.id));for(let D of k){let B=D.fileType?String(D.fileType):null,F=D.fileSize!=null?Number(D.fileSize):null,Y=Vo(D.objectCheckedAt,D.objectMissingAt),J={id:f.encode(Number(D.id)),fileName:String(D.fileName),fileType:B,fileSize:F,createdAt:de(D.createdAt,"YYYY-MM-DD HH:mm:ss"),state:Y,hasThumbnail:E&&Y!=="absent"&&Ht({fileType:B,fileSize:F},$.maxBytes)},Q=u.get(Number(D.hubId));Q?Q.push(J):u.set(Number(D.hubId),[J])}return u},qo=async(c,u,p)=>{let f=r.attachment;if(!f||Ye(c.visible))return null;let E=await Be(),k=ot(h,"draft_label");return(await t.select({fileName:f.fileName,filePath:f.filePath,fileType:f.fileType,fileSize:f.fileSize}).top(1).from(f).innerJoin(i,w(i.id,f.hubId)).leftJoin(k,Z(w(k.hubId,i.id),Ae(k.labelId,E))).where(Z(w(f.id,u),pe(i.deletedAt),it(w(i.userId,p),pe(k.hubId)),N(c.visible))))[0]??null},jo=async c=>{let u=r.attachment;if(!u)return;let p=new Date;try{await t.update(u).set({objectCheckedAt:p,objectMissingAt:p,updatedAt:p}).where(w(u.id,c))}catch(f){C.error("markAttachmentMissing failed",f)}},zo=async c=>{let u=r.attachment;if(!u)return;let p=new Date;try{await t.update(u).set({objectCheckedAt:p,objectMissingAt:null,updatedAt:p}).where(w(u.id,c))}catch(f){C.error("markAttachmentPresent failed",f)}},Wo=async(c,u,p,{forceRefresh:f=!1,snapshot:E=!1,ttlMsOverride:k}={})=>{let D=await st(p);if(!D)return[];let B=fe(u);if(!B)return[];if(Ye(c.visible))return[];let F=lo(B,D,bt(c));return l.getOrFetch({cacheKey:F,fetcher:async()=>{let Y=await Be(),J=ot(h,"draft_label"),Q=await O(t.select({hub:Ve(i),internal:Ve(_),isRead:d.isRead,isStarred:d.isStarred,creatorName:n.displayName,...j()}).from(i)).leftJoin(_,w(i.id,_.hubId)).leftJoin(d,Z(w(i.id,d.hubId),w(d.userId,D))).leftJoin(J,Z(w(J.hubId,i.id),Ae(J.labelId,Y))).leftJoin(n,w(i.userId,n.id)).where(Z(w(i.businessDate,Ao`${B}`),pe(i.deletedAt),it(w(i.userId,D),pe(J.hubId)),N(c.visible))).orderBy(at(i.id));if(Q.length===0)return[];let he=Q.map(ee=>ee.hub.id),ze=await t.select({hubId:h.hubId,id:A.id,name:A.name,color:A.color}).from(h).innerJoin(A,w(h.labelId,A.id)).where(Ae(h.hubId,he)),ve=await t.select({hubId:m.hubId,id:m.id,body:m.body,createdAt:m.createdAt,userId:m.userId,userName:n.displayName}).from(m).leftJoin(n,w(m.userId,n.id)).where(Ae(m.hubId,he)).orderBy(Wt(m.createdAt)),We=await Tt(he),xe=new Map,le=new Map;for(let ee of ze){let ue=xe.get(ee.hubId);ue||(ue=[],xe.set(ee.hubId,ue)),ue.push({id:ee.id,name:ee.name,color:ee.color})}for(let ee of ve){let ue=le.get(ee.hubId);ue||(ue=[],le.set(ee.hubId,ue)),ue.push({id:ee.id,content:ee.body,createdAt:de(ee.createdAt,"YYYY-MM-DD HH:mm:ss")||"",userId:ee.userId,userName:ee.userName||""})}return Q.map(ee=>{let ue=ee.hub.id;return re(c,{...ee,attachments:We.get(ue)??[],labels:xe.get(ue)||[],postedCommentRows:le.get(ue)||[]},D)})},forceRefresh:f,snapshot:E,ttlMsOverride:k??z,epochKey:`${G}${B}`})},lt=async(c,u,p,{forceRefresh:f=!1,snapshot:E=!1,ttlMsOverride:k}={})=>{if(Ye(c.visible))return null;let D=uo(u,p,bt(c));return(await l.getOrFetch({cacheKey:D,fetcher:async()=>{let F=await Be(),Y=ot(h,"draft_label"),J=await O(t.select({hub:Ve(i),internal:Ve(_),isRead:d.isRead,isStarred:d.isStarred,creatorName:n.displayName,...j()}).from(i)).leftJoin(_,w(i.id,_.hubId)).leftJoin(d,Z(w(i.id,d.hubId),w(d.userId,p))).leftJoin(Y,Z(w(Y.hubId,i.id),Ae(Y.labelId,F))).leftJoin(n,w(i.userId,n.id)).where(Z(w(i.id,u),pe(i.deletedAt),it(w(i.userId,p),pe(Y.hubId)),N(c.visible)));if(J.length===0)return[];let Q=J[0].hub.id,he=await t.select({id:A.id,name:A.name,color:A.color}).from(h).innerJoin(A,w(h.labelId,A.id)).where(w(h.hubId,Q)),ze=await t.select({id:m.id,body:m.body,createdAt:m.createdAt,userId:m.userId,userName:n.displayName}).from(m).leftJoin(n,w(m.userId,n.id)).where(w(m.hubId,Q)).orderBy(Wt(m.createdAt)),ve=await Tt([Q]),We=he.map(le=>({id:le.id,name:le.name,color:le.color})),xe=ze.map(le=>({id:le.id,content:le.body,createdAt:de(le.createdAt,"YYYY-MM-DD HH:mm:ss")||"",userId:le.userId,userName:le.userName||""}));return[re(c,{...J[0],attachments:ve.get(Q)??[],labels:We,postedCommentRows:xe},p)]},forceRefresh:f,snapshot:E,ttlMsOverride:k??z,epochKey:`${K}${u}`}))[0]??null},Ko=async(c,u,p,f={})=>{let E=await st(p);return E?lt(c,u,E,f):null},Jo=async(c,u)=>{let p=await Be(),f=ot(h,"draft_label"),[E]=await t.select({sourceType:i.sourceType,deletedAt:i.deletedAt}).top(1).from(i).leftJoin(f,Z(w(f.hubId,i.id),Ae(f.labelId,p))).where(Z(w(i.id,c),it(w(i.userId,u),pe(f.hubId))));return E??null},Gt=async(c,u,p)=>{let f=await Jo(u,p);if(!f||f.deletedAt||!we(c.visible,f.sourceType))throw new Error("Not Found")},Go=async(c,u,p,f,E,k)=>{await Gt(c,p,u);let D=await t.select().top(1).from(d).where(Z(w(d.hubId,p),w(d.userId,u))),B;if(D.length>0?D[0].isStarred!==E?B=(await t.update(d).set({isStarred:E,updatedAt:new Date,updatedBy:String(u)}).output().where(Z(w(d.hubId,p),w(d.userId,u))))[0]:B=D[0]:B=(await t.insert(d).output().values({hubId:p,userId:u,isStarred:E,isRead:!1,createdAt:new Date,createdBy:String(u),updatedAt:new Date,updatedBy:String(u)}))[0],f){let F=fe(f);F&&(l.invalidatePrefix(tt(F,u)),await S(`${G}${F}`))}return l.invalidatePrefix(zt(p,u)),await S(`${K}${p}`),await H(xt.parse({type:"status-update",reportHubId:p,recipientRawUserId:u,statusType:"star",value:E,clientTempId:k}),"setStarStatus"),B},Xo=async(c,u,p,f,E,k)=>{await Gt(c,p,u);let D=await t.select().top(1).from(d).where(Z(w(d.hubId,p),w(d.userId,u))),B;if(D.length>0?D[0].isRead!==E?B=(await t.update(d).set({isRead:E,updatedAt:new Date,updatedBy:String(u)}).output().where(Z(w(d.hubId,p),w(d.userId,u))))[0]:B=D[0]:B=(await t.insert(d).output().values({hubId:p,userId:u,isRead:E,isStarred:!1,createdAt:new Date,createdBy:String(u),updatedAt:new Date,updatedBy:String(u)}))[0],f){let F=fe(f);F&&(l.invalidatePrefix(tt(F,u)),await S(`${G}${F}`))}return l.invalidatePrefix(zt(p,u)),await S(`${K}${p}`),await H(xt.parse({type:"status-update",reportHubId:p,recipientRawUserId:u,statusType:"read",value:E,clientTempId:k}),"setReadStatus"),B},Pr=async(c,u)=>{if(u===null)return;let p=await Be(),[f]=await t.select({hubId:h.hubId}).top(1).from(h).where(Z(w(h.hubId,c),Ae(h.labelId,p)));return f?u:void 0},Qo=async(c,u,p,f,E,k)=>{let[D]=await t.select({sourceType:i.sourceType,deletedAt:i.deletedAt,userId:i.userId}).top(1).from(i).where(w(i.id,p));if(!D||D.deletedAt)throw new Error("Not Found");if(await Gt(c,p,u),!we(c.commentable,D.sourceType))throw new Error("Comments are restricted by the viewer's comment permission");if(D.sourceType.toLowerCase()!=="internal")throw new Error("Comments are restricted for external daily report sources");let B=await Pr(p,D.userId),[F]=await t.insert(m).output().values({hubId:p,userId:u,body:f,createdAt:new Date,createdBy:String(u),updatedAt:new Date,updatedBy:String(u)}),[Y]=await t.select({displayName:n.displayName}).top(1).from(n).where(w(n.id,u)),J=Y?.displayName??"";if(E){let he=fe(E);he&&(l.invalidatePrefix(ft(he)),await S(`${G}${he}`))}l.invalidatePrefix(Ie(p)),await S(`${K}${p}`);let Q={id:F.id,userId:a(F.userId),userName:J,content:F.body,createdAt:de(F.createdAt,"YYYY-MM-DD HH:mm:ss")??"",isMine:!0};return await H(or.parse({type:"comment-add",reportHubId:p,comment:Q,clientTempId:k,recipientRawUserId:B,sourceType:D.sourceType}),"addComment"),Q},Zo=async(c,u)=>await c.select().top(1).from(m).where(w(m.id,u)),ea=async(c,u,p,f,E,k)=>{let D=await Zo(t,f);if(D.length===0)throw new Error("Not Found");if(D[0].hubId!==p)throw new Error("Not Found");let[B]=await t.select({userId:i.userId,sourceType:i.sourceType}).top(1).from(i).where(w(i.id,D[0].hubId));if(!(B&&we(c.visible,B.sourceType)))throw new Error("Not Found");if(D[0].userId!==u)throw new Error("Unauthorized");let F=await Pr(p,B.userId);if(await t.delete(m).where(w(m.id,f)),E){let Y=fe(E);Y&&(l.invalidatePrefix(ft(Y)),await S(`${G}${Y}`))}l.invalidatePrefix(Ie(p)),await S(`${K}${p}`),await H(ar.parse({type:"comment-delete",reportHubId:p,commentId:f,clientTempId:k,recipientRawUserId:F,sourceType:B?.sourceType}),"deleteComment")},ta=async(c,u,p)=>{if(!It(u))throw me("createDailyReport: businessDate","a business-date key in the canonical form YYYY-MM-DD naming a day from 0001-01-01 to 9999-12-31",u);C.info("createDailyReport called",{userId:c,businessDate:u});let[f]=await t.select({displayName:n.displayName}).from(n).where(w(n.id,c)),E=f?.displayName??a(c);try{let k=await I(async B=>{C.info("Starting transaction");let F=`internal-temp-${Date.now()}-${Math.random()}`,[Y]=await B.insert(i).output().values({sourceType:"Internal",sourceId:F,businessDate:new Date(`${u}T00:00:00Z`),userId:c,title:"(\u7121\u984C)",createdAt:new Date,createdBy:String(c),updatedAt:new Date,updatedBy:String(c)});await B.update(i).set({sourceId:String(Y.id)}).where(w(i.id,Y.id)),C.info("Hub created",Y),await B.insert(_).values({hubId:Y.id,body:"",createdAt:new Date,createdBy:String(c),updatedAt:new Date,updatedBy:String(c)}),C.info("Internal created"),C.info("Calling getDraftLabelId");let J=await Jt();C.info("draftLabelId",J);let Q=[];return J&&(await B.insert(h).values({hubId:Y.id,labelId:J,createdAt:new Date,createdBy:String(c)}),Q.push({id:J,name:P,color:null})),C.info("Label assigned"),{reportHubId:Y.id,date:u,createdAt:de(Y.createdAt,"YYYY-MM-DD HH:mm:ss"),author:E,userId:a(c),sourceType:"Internal",employeeName:E,updatedBy:a(c),updatedAt:de(Y.updatedAt,"YYYY-MM-DD HH:mm:ss"),category:null,creationCategory:null,visitTimeFrom:null,visitTimeTo:null,customerName:null,interviewers:[],subject:Y.title,content:"",externalComments:[],isRead:!0,isStarred:!1,labels:Q,postedComments:[],attachments:[]}});l.invalidatePrefix(tt(u,c)),l.invalidatePrefix($e),l.invalidatePrefix(Ir(c)),await S(V),await S(`${G}${u}`);let D=await lt(ge.unrestricted("post-write self read: the writer always sees the row they just wrote"),k.reportHubId,c,{forceRefresh:!0});if(D){let B=await At(),F=D.labels.some(Y=>B.includes(Y.id));await H(ir.parse({type:"report-create",reportHubId:D.reportHubId,report:D,clientTempId:p,recipientRawUserId:F?c:void 0}),"createDailyReport")}return D??k}catch(k){throw C.error("Error in createDailyReport",k),k}},Dt=async(c,u)=>await c.select().top(1).from(i).where(w(i.id,u)),Xt=async(c,u,p)=>{await c.update(i).set(p).where(w(i.id,u))},Mr=async(c,u,p)=>{await c.update(_).set(p).where(w(_.hubId,u))},vr=async(c,u,p)=>{await c.delete(h).where(Z(w(h.hubId,u),w(h.labelId,p)))};return{streamKey:M,streamMaxLen:L,attachmentDelivery:$,titleMaxLength:T,clearCache:async()=>{l.clearAll(),se.clear(),je=null,y&&await S(V),C.info("[DailyReportService] Server-side DB/SQL caches cleared successfully.")},invalidateHubReadCaches:async(c,u)=>{l.invalidatePrefix($e),l.invalidatePrefix(Fe),await S(V);for(let p of new Set(c))l.invalidatePrefix(Ie(p)),await S(`${K}${p}`);for(let p of new Set(u)){let f=fe(p);f&&await S(`${G}${f}`)}},getUserIdByExternalId:st,getDailyReportIdsByExternalId:$o,getDailyReportIdsFirstPageByExternalId:De,readSseStreamAnchor:v,getDailyReportsByBusinessDate:Yo,getDailyReportsByBusinessDateByExternalId:Wo,getDailyReportDetailById:lt,getDailyReportDetailByIdByExternalId:Ko,getDraftLabelId:Jt,getAttachmentsByHubIds:Tt,getAttachmentForUser:qo,markAttachmentMissing:jo,markAttachmentPresent:zo,setStarStatus:Go,setReadStatus:Xo,addComment:Qo,deleteComment:ea,createDailyReport:ta,updateDailyReport:async(c,u,p,f)=>{let E=await Dt(t,c);if(!E.length||E[0].deletedAt)throw new Error("Not Found");if(E[0].userId!==u)throw new Error("Unauthorized");await I(async B=>{p.title!==void 0&&await Xt(B,c,{title:Do(p.title),updatedAt:new Date,updatedBy:String(u)}),p.content!==void 0&&await Mr(B,c,{body:Do(p.content),updatedAt:new Date,updatedBy:String(u)})}),l.invalidatePrefix(Ie(c)),l.invalidatePrefix($e),await S(`${K}${c}`);let k=fe(de(E[0].businessDate,"YYYY-MM-DD"));k&&(l.invalidatePrefix(ft(k)),await S(`${G}${k}`));let D=await lt(ge.unrestricted("post-write self read: the writer always sees the row they just wrote"),c,u,{forceRefresh:!0});if(D){let B=await At(),F=D.labels.some(Y=>B.includes(Y.id));await H(sr.parse({type:"report-update",reportHubId:D.reportHubId,report:D,clientTempId:f,recipientRawUserId:F?u:void 0}),"updateDailyReport")}},publishDailyReport:async(c,u,p)=>{let f=await Dt(t,c);if(!f.length)throw new Error("Not Found");if(f[0].userId!==u)throw new Error("Unauthorized");let E=await Jt();if(!E)return null;if(await vr(t,c,E),l.invalidatePrefix(Ie(c)),l.invalidatePrefix($e),l.invalidatePrefix(Fe),await S(V),f[0].businessDate){let B=fe(de(f[0].businessDate,"YYYY-MM-DD"));B&&await S(`${G}${B}`)}let k=fe(de(f[0].businessDate,"YYYY-MM-DD"));k&&l.invalidatePrefix(tt(k,u));let D=await lt(ge.unrestricted("post-write self read: the writer always sees the row they just wrote"),c,u,{forceRefresh:!0});return D&&await H(lr.parse({type:"report-publish",reportHubId:D.reportHubId,report:D,clientTempId:p}),"publishDailyReport"),D??null},deleteDailyReport:async(c,u,p)=>{let f=await Dt(t,c);if(!f.length||f[0].deletedAt)throw new Error("Not Found");if(f[0].userId!==u)throw new Error("Unauthorized");if(await Xt(t,c,{deletedAt:new Date,deletedBy:String(u),updatedAt:new Date,updatedBy:String(u)}),l.invalidatePrefix(Ie(c)),l.invalidatePrefix($e),l.invalidatePrefix(Fe),await S(V),f[0].businessDate){let E=fe(de(f[0].businessDate,"YYYY-MM-DD"));E&&await S(`${G}${E}`)}await H(ur.parse({type:"report-delete",reportHubId:c,clientTempId:p,sourceType:f[0].sourceType}),"deleteDailyReport")},findDailyReportHubById:Dt,updateDailyReportHub:Xt,updateDailyReportInternal:Mr,deleteDailyReportLabel:vr}}var fs=ce(1,"[DailyReportExternalSource]"),Rs=(e,t,r,n=fs)=>{if(!e)return[];try{let o=JSON.parse(e);return Array.isArray(o)?o.map(r).filter(a=>a!==null):(n.warn(`Unexpected ${t} format: not an array`),[])}catch(o){return n.warn(`Failed to parse ${t}:`,o),[]}};import{desc as _o,sql as gs}from"drizzle-orm";import{bigint as ne,bit as Eo,date as bs,datetime2 as ie,foreignKey as Te,index as ke,int as Ss,mssqlSchema as As,nvarchar as W,primaryKey as qe,uniqueIndex as Ts}from"drizzle-orm/mssql-core";function Ds(e,t){let r=As(e),n=t.userTable,o=r.table("DailyReportHub",{id:ne("id",{mode:"number"}).identity().notNull(),sourceType:W("source_type",{length:20}).notNull(),sourceId:W("source_id",{length:100}).notNull(),sourceIdNum:ne("source_id_num",{mode:"number"}).generatedAlwaysAs(gs`TRY_CAST(source_id AS BIGINT)`),businessDate:bs("business_date"),userId:ne("user_id",{mode:"number"}),title:W("title",{length:200}),summary:W("summary",{length:"max"}),createdAt:ie("created_at").notNull(),createdBy:W("created_by",{length:50}).notNull(),updatedAt:ie("updated_at").notNull(),updatedBy:W("updated_by",{length:50}).notNull(),deletedAt:ie("deleted_at"),deletedBy:W("deleted_by",{length:50})},m=>[qe({name:`${e}_DailyReportHub_pk`,columns:[m.id]}),Te({name:`${e}_DailyReportHub_user_id_fk`,columns:[m.userId],foreignColumns:[n.id]}),ke(`${e}_DailyReportHub_business_date_index`).on(m.businessDate),ke(`${e}_DailyReportHub_updated_at_index`).on(m.updatedAt),ke(`${e}_DailyReportHub_source_index`).on(m.sourceType,m.sourceId),ke(`${e}_DailyReportHub_user_id_index`).on(m.userId),ke(`${e}_DailyReportHub_business_date_id_index`).on(_o(m.businessDate),_o(m.id)),ke(`${e}_DailyReportHub_deleted_at_index`).on(m.deletedAt)]),a=r.table("DailyReportInternal",{hubId:ne("hub_id",{mode:"number"}).notNull(),body:W("body",{length:"max"}),metadata:W("metadata",{length:"max"}),createdAt:ie("created_at").notNull(),createdBy:W("created_by",{length:50}).notNull(),updatedAt:ie("updated_at").notNull(),updatedBy:W("updated_by",{length:50}).notNull()},m=>[qe({name:`${e}_DailyReportInternal_pk`,columns:[m.hubId]}),Te({name:`${e}_DailyReportInternal_hub_id_fk`,columns:[m.hubId],foreignColumns:[o.id]})]),s=r.table("DailyReportComment",{id:ne("id",{mode:"number"}).identity().notNull(),hubId:ne("hub_id",{mode:"number"}).notNull(),userId:ne("user_id",{mode:"number"}).notNull(),body:W("body",{length:"max"}).notNull(),createdAt:ie("created_at").notNull(),createdBy:W("created_by",{length:50}).notNull(),updatedAt:ie("updated_at").notNull(),updatedBy:W("updated_by",{length:50}).notNull()},m=>[qe({name:`${e}_DailyReportComment_pk`,columns:[m.id]}),Te({name:`${e}_DailyReportComment_hub_id_fk`,columns:[m.hubId],foreignColumns:[o.id]}),Te({name:`${e}_DailyReportComment_user_id_fk`,columns:[m.userId],foreignColumns:[n.id]}),ke(`${e}_DailyReportComment_hub_id_index`).on(m.hubId)]),l=r.table("DailyReportLabel",{id:ne("id",{mode:"number"}).identity().notNull(),userId:ne("user_id",{mode:"number"}),name:W("name",{length:50}).notNull(),color:W("color",{length:20}),sortOrder:Ss("sort_order"),createdAt:ie("created_at").notNull(),createdBy:W("created_by",{length:50}).notNull(),updatedAt:ie("updated_at").notNull(),updatedBy:W("updated_by",{length:50}).notNull()},m=>[qe({name:`${e}_DailyReportLabel_pk`,columns:[m.id]}),Te({name:`${e}_DailyReportLabel_user_id_fk`,columns:[m.userId],foreignColumns:[n.id]})]),y=r.table("DailyReportHub_Label",{hubId:ne("hub_id",{mode:"number"}).notNull(),labelId:ne("label_id",{mode:"number"}).notNull(),createdAt:ie("created_at").notNull(),createdBy:W("created_by",{length:50}).notNull()},m=>[qe({name:`${e}_DailyReportHub_Label_pk`,columns:[m.hubId,m.labelId]}),Te({name:`${e}_DailyReportHub_Label_hub_id_fk`,columns:[m.hubId],foreignColumns:[o.id]}),Te({name:`${e}_DailyReportHub_Label_label_id_fk`,columns:[m.labelId],foreignColumns:[l.id]})]),i=r.table("DailyReportUserStatus",{hubId:ne("hub_id",{mode:"number"}).notNull(),userId:ne("user_id",{mode:"number"}).notNull(),isRead:Eo("is_read").default(!1).notNull(),isStarred:Eo("is_starred").default(!1).notNull(),createdAt:ie("created_at").notNull(),createdBy:W("created_by",{length:50}).notNull(),updatedAt:ie("updated_at").notNull(),updatedBy:W("updated_by",{length:50}).notNull()},m=>[qe({name:`${e}_DailyReportUserStatus_pk`,columns:[m.hubId,m.userId]}),Te({name:`${e}_DailyReportUserStatus_hub_id_fk`,columns:[m.hubId],foreignColumns:[o.id]}),Te({name:`${e}_DailyReportUserStatus_user_id_fk`,columns:[m.userId],foreignColumns:[n.id]})]),_=r.table("DailyReportAttachment",{id:ne("id",{mode:"number"}).identity().notNull(),hubId:ne("hub_id",{mode:"number"}).notNull(),uploadedBy:ne("uploaded_by",{mode:"number"}),sourceKey:W("source_key",{length:200}).notNull(),fileName:W("file_name",{length:255}).notNull(),filePath:W("file_path",{length:"max"}).notNull(),fileType:W("file_type",{length:100}),fileSize:ne("file_size",{mode:"number"}),objectCheckedAt:ie("object_checked_at"),objectMissingAt:ie("object_missing_at"),createdAt:ie("created_at").notNull(),createdBy:W("created_by",{length:50}).notNull(),updatedAt:ie("updated_at").notNull(),updatedBy:W("updated_by",{length:50}).notNull()},m=>[qe({name:`${e}_DailyReportAttachment_pk`,columns:[m.id]}),Te({name:`${e}_DailyReportAttachment_hub_id_fk`,columns:[m.hubId],foreignColumns:[o.id]}),Te({name:`${e}_DailyReportAttachment_uploaded_by_fk`,columns:[m.uploadedBy],foreignColumns:[n.id]}),Ts(`${e}_DailyReportAttachment_source_unique`).on(m.hubId,m.sourceKey),ke(`${e}_DailyReportAttachment_hub_id_index`).on(m.hubId,m.createdAt)]);return{hub:o,internal:a,comment:s,attachment:_,label:l,hubLabel:y,userStatus:i}}var _s=5e7,ko=2e8,Es=1,Bo=Object.freeze({fixedBytes:4*1024*1024,pipelineRows:2048,wholeImageBuffer:Object.freeze({"jpeg-single-scan":Object.freeze({kind:"none"}),"jpeg-multi-scan":Object.freeze({kind:"jpeg-coefficients"}),png:Object.freeze({kind:"none"}),"png-interlaced":Object.freeze({kind:"decoded-raster"}),gif:Object.freeze({kind:"canvas",bytesPerPixel:4}),"webp-lossy":Object.freeze({kind:"none"}),"webp-lossy-alpha":Object.freeze({kind:"canvas",bytesPerPixel:5}),"webp-lossless":Object.freeze({kind:"canvas",bytesPerPixel:4}),"webp-animated":Object.freeze({kind:"canvas",bytesPerPixel:9})})}),Io=125,wo=4,xo=16,Co=50,Po=2,Kt=Object.freeze({renderMs:ye.renderMs,nanosecondsPerBlockVisit:Io,margin:wo,maxBlockVisits:Math.floor(ye.renderMs*1e6/(Io*wo)),walkBudgetMs:xo,nanosecondsPerWalkStep:Co,walkMargin:Po,maxWalkSteps:Math.floor(xo*1e6/(Co*Po))}),Is=new Map([["uchar",1],["char",1],["ushort",2],["short",2],["uint",4],["int",4],["float",4],["complex",8],["double",8]]),Mo=75,vo=4,Lo="#ffffff",ws=1,xs={png:"VipsForeignLoadPngBuffer",jpeg:"VipsForeignLoadJpegBuffer",gif:"VipsForeignLoadNsgifBuffer",webp:"VipsForeignLoadWebpBuffer"},Cs=[/out of memory/i,/insufficient memory/i,/memory allocation|allocation failed/i,/(?:cannot|could not|unable to|failed to) allocate/i,/picture memory error/i,/unable to create thread|error creating thread|resource temporarily unavailable/i,/too many open files|no space left on device/i,/\b(?:ENOMEM|EAGAIN|EMFILE|ENFILE|ENOSPC)\b/],No=Object.freeze({ok:!1,reason:"failed"}),Oo=Object.freeze({ok:!1,reason:"unsupported"}),Uo=e=>({layout:e.multiScan?"jpeg-multi-scan":"jpeg-single-scan",coefficientBytes:Mn(e)}),Ho=(e,t)=>{switch(t){case"jpeg":{let r=Ar(e);return r===null?null:Uo(r)}case"png":{let r=Nn(e);return r===null?null:{layout:r?"png-interlaced":"png",coefficientBytes:0}}case"gif":return{layout:"gif",coefficientBytes:0};case"webp":{let r=On(e,Kt.maxWalkSteps);return r===null?null:{layout:`webp-${r}`,coefficientBytes:0}}}},Fo=(e,t)=>{let r=Is.get(t.depth);if(r===void 0)return null;let n=t.channels*r,o=Bo,a=o.wholeImageBuffer[e.layout];return(a.kind==="none"?0:a.kind==="decoded-raster"?t.width*t.height*n:a.kind==="jpeg-coefficients"?e.coefficientBytes:t.width*t.height*a.bytesPerPixel)+o.pipelineRows*t.width*n+o.fixedBytes},Ps=(e,t,r)=>{let n=Ho(e,t);return n===null?null:Fo(n,r)},Ms=e=>e!==null&&e<=ko,vs=(e,t)=>{if(t!=="jpeg")return Ho(e,t);let r=vn(e,Kt);return r===null||r.blockVisits>Kt.maxBlockVisits?null:Uo(r.header)},Ls=e=>{let t=e instanceof Error?e.message:"";return Cs.some(r=>r.test(t))?"failed":"unsupported"},Ns=e=>{e.cache(!1),e.concurrency(Es),e.block({operation:["VipsForeignLoad"]}),e.unblock({operation:Object.values(xs)});let t=async(n,o,a,s,l)=>{let y=vs(n,o);if(y===null)return Oo;try{let i=e(n,{limitInputPixels:_s,animated:!1});if(!Ms(Fo(y,await i.metadata())))return Oo;if(l.aborted)return No;let _=await i.rotate().resize({width:a,height:s,fit:"inside",withoutEnlargement:!0}).flatten({background:Lo}).webp({quality:Mo,effort:vo}).toBuffer();return{ok:!0,bytes:new Uint8Array(_),contentType:"image/webp"}}catch(i){return{ok:!1,reason:Ls(i)}}},r=async(n,{format:o,maxWidth:a,maxHeight:s,signal:l})=>l.aborted?No:t(n,o,a,s,l);return{id:`sharp-${e.versions.sharp}/vips-${e.versions.vips}/webp-q${Mo}-e${vo}/flatten-${Lo}/v${ws}`,render:r}};function zc(e){e.redis||(e.logger??console).warn("[DailyReport] redis provider is not injected: cross-worker cache invalidation is disabled (staleness is bounded only by TTL) and SSE publishing is skipped.");let t=tr(e.redis),r=new ct({defaultTtlMs:e.cacheDefaultTtlMs??6e4},t),n=Cr({...e,cache:r,epochs:t}),o=new Rt({redis:e.redis,streamKey:n.streamKey,cache:r,logger:e.logger}),a=xr({authenticate:e.authenticate,resolveVisibleSourceTypes:e.resolveVisibleSourceTypes,service:n,encodeUserId:e.encodeUserId,redis:e.redis,sseReader:o,streamKey:n.streamKey,loginRedirectPath:e.loginRedirectPath,enableDevCacheClear:e.enableDevCacheClear,logger:e.logger});return{service:n,cache:r,epochs:t,sseReader:o,streamKey:n.streamKey,knownSourceTypes:[...new Set(["Internal",...(e.externalSources??[]).map(s=>s.sourceType)])],...a}}export{Dr as DAILY_REPORT_ATTACHMENT_THUMBNAIL_MAX_OUTPUT_BYTES,Tr as DAILY_REPORT_ATTACHMENT_THUMBNAIL_OUTPUT_MEDIA_TYPES,ko as DAILY_REPORT_SHARP_THUMBNAIL_DECODE_BUDGET_BYTES,Kt as DAILY_REPORT_SHARP_THUMBNAIL_DECODE_WORK_MODEL,Bo as DAILY_REPORT_SHARP_THUMBNAIL_WORKING_SET_MODEL,wr as DAILY_REPORT_SSE_CATCH_UP_BATCH,go as DAILY_REPORT_SSE_VISIBILITY_REFRESH_MS,Rt as DailyReportSseReader,ge as DailyReportViewerScope,ct as SqlResultCache,xr as createDailyReportHandlers,zc as createDailyReportServer,Cr as createDailyReportService,tr as createEpochStore,Ns as createSharpThumbnailRenderer,Ds as defineDailyReportSchema,yt as generateETag,Oe as isStreamIdLte,ae as jsonResponseWithETag,cr as parseClientTempId,Ps as predictSharpThumbnailWorkingSetBytes,Rs as transformJsonArray};
 /* v8 ignore next -- @preserve 到達不能: 時間切れと中断の購読はどちらも cleanup で同時に外れ、枠を渡すときも先に cleanup するので、列にいない待機者でここへは来ない。それでも splice(-1) が別の待機者を消さないよう残す */