@aiquants/daily-report 0.32.0 → 0.34.0

package/dist/server.mjs

@@ -1,5 +1,5 @@
-var wr=e=>{throw TypeError(e)};var Er=(e,t,r)=>t.has(e)||wr("Cannot "+r);var ot=(e,t,r)=>(Er(e,t,"read from private field"),r?r.call(e):t.get(e)),zt=(e,t,r)=>t.has(e)?wr("Cannot add the same private member more than once"):t instanceof WeakSet?t.add(e):t.set(e,r),Wt=(e,t,r,n)=>(Er(e,t,"write to private field"),n?n.call(e,r):t.set(e,r),r);var ee=()=>Math.floor(performance.now());var Jt=e=>({async getEpoch(t){try{let r=await e?.getClient();if(!r)return null;let n=await r.get(t);return n?Number(n):0}catch{return null}},async incrementEpoch(t){try{let r=await e?.getClient();if(!r)return;await r.incr(t)}catch{}}}),at=class{constructor(t,r){this.config=t;this.epochStore=r;this.buckets=new Map;this.inFlight=new Map;this.maybeRefreshAhead=t=>{let r=t.refreshAheadRatio;if(r===void 0)return;let{cacheKey:n}=t,o=this.buckets.get(n);if(!o)return;let a=t.ttlMsOverride??this.config.defaultTtlMs;if(a-(o.expireAt-ee())<a*r||this.inFlight.has(n))return;let s;s=(async()=>{let y=t.epochKey?await this.epochStore.getEpoch(t.epochKey):null,i=await t.fetcher();return this.inFlight.get(n)===s&&this.buckets.set(n,{records:i,expireAt:ee()+a,epoch:y}),i})(),this.inFlight.set(n,s),s.catch(()=>{}).finally(()=>{this.inFlight.get(n)===s&&this.inFlight.delete(n)})};this.getOrFetch=async t=>{let{cacheKey:r,forceRefresh:n,snapshot:o}=t,a=this.buckets.get(r);if(n&&(this.buckets.delete(r),this.inFlight.delete(r)),!n&&a&&a.expireAt>ee())if(t.epochKey){let s=await this.epochStore.getEpoch(t.epochKey);if(s===null||a.epoch===s)return this.maybeRefreshAhead(t),o?a.records.map(y=>structuredClone(y)):a.records;this.buckets.delete(r)}else return this.maybeRefreshAhead(t),o?a.records.map(s=>structuredClone(s)):a.records;if(!n&&this.inFlight.has(r)){let s=await this.inFlight.get(r);return o?s.map(y=>structuredClone(y)):s}let l;l=(async()=>{let s=t.epochKey?await this.epochStore.getEpoch(t.epochKey):null;t.onFetchStart?.();let y=await t.fetcher();if(n||this.inFlight.get(r)===l){let i=ee()+(t.ttlMsOverride??this.config.defaultTtlMs);this.buckets.set(r,{records:y,expireAt:i,epoch:s}),this.buckets.size>500&&this.cleanExpired()}return y})(),n||this.inFlight.set(r,l);try{let s=await l;return o?s.map(y=>structuredClone(y)):s}finally{this.inFlight.get(r)===l&&this.inFlight.delete(r)}};this.clearAll=()=>{this.buckets.clear(),this.inFlight.clear()};this.invalidatePrefix=t=>{for(let r of this.buckets.keys())r.startsWith(t)&&this.buckets.delete(r);for(let r of this.inFlight.keys())r.startsWith(t)&&this.inFlight.delete(r)}}cleanExpired(){let t=ee();for(let[r,n]of this.buckets.entries())n.expireAt<=t&&this.buckets.delete(r)}};var jo=/^(\d{4})([-/])(\d{2})\2(\d{2})$/;var Ir=e=>e<10?`0${e}`:`${e}`,zo=e=>{if(Number.isNaN(e.getTime()))return null;let t=e.getFullYear(),r=Ir(e.getMonth()+1),n=Ir(e.getDate());return`${t}-${r}-${n}`},Ve=e=>{let t=jo.exec(e);if(t===null)return null;let[,r,,n,o]=t,a=Number(r),l=Number(n),s=Number(o);if(a<1)return null;let y=new Date(0);return y.setUTCFullYear(a,l-1,s),y.getUTCFullYear()!==a||y.getUTCMonth()!==l-1||y.getUTCDate()!==s?null:`${r}-${n}-${o}`},bt=e=>Ve(e)===e;var ye=e=>e==null?null:e instanceof Date?zo(e):Ve(e);var St="ids-stream";var At=e=>{let t=2166136261,r=-624069552;for(let n of e){let o=n.reportHubId;t^=o&255,t=Math.imul(t,16777619),t^=o>>>8&255,t=Math.imul(t,16777619),t^=o>>>16&255,t=Math.imul(t,16777619),t^=o>>>24&255,t=Math.imul(t,16777619),r^=o>>>24&255,r=Math.imul(r,16777619),r^=o>>>16&255,r=Math.imul(r,16777619),r^=o>>>8&255,r=Math.imul(r,16777619),r^=o&255,r=Math.imul(r,16777619);let a=n.businessDate;if(a===null)t^=1,t=Math.imul(t,16777619),r^=1,r=Math.imul(r,16777619);else for(let l=0;l<a.length;l++){let s=a.charCodeAt(l);t^=s&255,t=Math.imul(t,16777619),r^=s&255,r=Math.imul(r,16777619)}}return t^=e.length,t=Math.imul(t,16777619),r^=e.length,r=Math.imul(r,16777619),((t>>>0).toString(16).padStart(8,"0")+(r>>>0).toString(16).padStart(8,"0")).replace(/^0+(?=.)/,"")},Tt=(e,t)=>e.businessDate!==t.businessDate?e.businessDate===null?1:t.businessDate===null||e.businessDate>t.businessDate?-1:1:t.reportHubId-e.reportHubId,xr=e=>{for(let t=1;t<e.length;t++)if(Tt(e[t-1],e[t])>0)return!1;return!0},Cr=(e,t)=>{let r=e.findIndex(n=>Tt({businessDate:n.businessDate,reportHubId:n.reportHubId},t)>0);return r===-1?e.length:r};var se=(e,t,r=console)=>{let n=o=>typeof o=="string"?[`${t} ${o}`]:[t,o];return{debug:(o,...a)=>{e<=0&&r.debug(...n(o),...a)},info:(o,...a)=>{e<=1&&r.info(...n(o),...a)},warn:(o,...a)=>{e<=2&&r.warn(...n(o),...a)},error:(o,...a)=>{e<=3&&r.error(...n(o),...a)}}};var Re=(e,t)=>{let r=setTimeout(e,t);return r.unref?.(),r};var je=e=>{let{windowMs:t,tallies:r,writeSuppressed:n}=e,o=new Map,a=l=>{let s={since:new Date().toISOString(),count:0,tallies:Object.fromEntries(r.map(i=>[i,0]))};o.set(l,s),Re(()=>{o.delete(l),s.count>0&&n(l,s)},t)};return{record:(l,s,y)=>{let i=o.get(l);if(i!==void 0){i.count+=1,i.tallies[s]+=1;return}y(),a(l)}}};var Wo=/^[1-9][0-9]*$/,Jo=/^(?:0|[1-9][0-9]*)$/,Kt=e=>Number.isSafeInteger(e)&&e>0,Le=e=>{if(e===null||!Wo.test(e))return null;let t=Number(e);return Kt(t)?t:null},Gt=e=>{if(e===null||!Jo.test(e))return null;let t=Number(e);return Number.isSafeInteger(t)?t:null},Xt=e=>e==="true"?!0:e==="false"?!1:null,it=e=>e===null?!1:Xt(e),vr=e=>{let t=new URLSearchParams;for(let[r,n]of e){if(typeof n!="string")return null;t.append(r,n)}return t};var Pr=Object.freeze({status:400,error:"Invalid form"}),Lr=e=>({status:413,error:"Form too large",measuredBy:e}),Ko=(e,t,r)=>{let n=0;return e.pipeThrough(new TransformStream({transform(o,a){if(n+=o.byteLength,n>t){r(),a.error(new Error(`action form body exceeds ${t} bytes`));return}a.enqueue(o)}}))},Go=async e=>{let t=Gt(e.headers.get("Content-Length"));if(t!==null&&t>1048576)return{refusal:Lr("declared")};let r=!1,n=e.body===null?null:Ko(e.body,1048576,()=>{r=!0}),o=new Headers,a=e.headers.get("Content-Type");a!==null&&o.set("Content-Type",a);let l;try{l=await new Response(n,{headers:o}).formData()}catch{return{refusal:r?Lr("counted"):Pr}}let s=vr(l);return s===null?{refusal:Pr}:{fields:s}},Xo=(e,t)=>{let r=e.get("intent"),n=e.get("businessDate"),o=n===null?null:Ve(n);if(n!==null&&o===null)return{error:"Invalid businessDate"};let a=e.get("operationTimestamp"),l=Gt(a);if(a!==null&&l===null)return{error:"Invalid operationTimestamp"};if(r==="clearCache")return{command:{intent:r}};let s=e.get("clientTempId");if(!s)return{error:"clientTempId required"};if(r==="create")return o===null?{error:"businessDate required"}:{command:{intent:r,clientTempId:s,businessDate:o,operationTimestamp:l}};let y=Le(e.get("reportHubId"));if(y===null)return{error:"Invalid reportHubId"};let i={clientTempId:s,businessDate:o,operationTimestamp:l,reportHubId:y};switch(r){case"update":{let S=e.get("title"),d=e.get("content");if(S!==null&&S.length>t.titleMaxLength)return{error:"Invalid title"};let b={};return S!==null&&(b.title=S),d!==null&&(b.content=d),{command:{...i,intent:r,changes:b}}}case"publish":case"delete":return{command:{...i,intent:r}};case"toggleStar":case"toggleRead":{let S=r==="toggleStar"?"isStarred":"isRead",d=e.get(S);if(d===null)return{error:`${S} required`};let b=Xt(d);return b===null?{error:`Invalid ${S}`}:{command:{...i,intent:r,value:b}}}case"addComment":{let S=e.get("content");return S?{command:{...i,intent:r,content:S}}:{error:"Content required"}}case"deleteComment":{let S=Le(e.get("commentId"));return S===null?{error:"Invalid commentId"}:{command:{...i,intent:r,commentId:S}}}default:return{error:"Invalid intent"}}},Nr=async(e,t)=>{let r=await Go(e);if("refusal"in r)return r;let n=Xo(r.fields,t);return"error"in n?{refusal:{status:400,error:n.error}}:n},Qo=6e4,Zo="form_too_large",kr=["declared","counted"],Or=e=>{let t=je({windowMs:Qo,tallies:kr,writeSuppressed:(r,{count:n,since:o,tallies:a})=>{e.warn(`form_too_large_suppressed count=${n} since=${o} measured=${kr.map(l=>`${l}:${a[l]}`).join(",")}`)}});return r=>{let n=()=>{e.warn(`413 action reason=form_too_large measured=${r} limit=${1048576}`)};t.record(Zo,r,n)}};var Dt=Object.freeze({"business-date":"json",[St]:"stream",report:"json"}),Br=Object.freeze({json:Object.freeze(["GET"]),stream:Object.freeze(["GET","HEAD"])}),Qt=e=>e!==void 0&&Object.hasOwn(Dt,e);var Zt=Object.freeze({tile:Object.freeze({maxWidth:480,maxHeight:320})}),Ur=e=>Object.hasOwn(Zt,e);var ea="download",ta="thumbnail",ra="1";var er=e=>{let t=e.getAll(ta),r=e.getAll(ea);if(t.length>0&&r.length>0)return{kind:"invalid",reason:"conflict"};if(t.length>0){let[n]=t;return t.length===1&&Ur(n)?{kind:"thumbnail",variant:n}:{kind:"invalid",reason:"thumbnail_variant"}}return r.length>0?r.length===1&&r[0]===ra?{kind:"download"}:{kind:"invalid",reason:"download_value"}:{kind:"inline"}};var rr="Cross-site request rejected",na="Not Found",oa=new Set(["same-origin","none"]),aa=new Set(["GET","HEAD","OPTIONS"]),Hr=["api","action","sse","attachment"],Fr=(e,t)=>new Response(JSON.stringify({error:{message:t}}),{status:e,headers:{"Content-Type":"application/json","Cache-Control":"no-store","X-Content-Type-Options":"nosniff"}}),ia=()=>Fr(403,rr),_t=()=>Fr(404,na),st=Object.freeze({navigable:()=>!1,frameworkDataRefusal:()=>null,crossSiteRejection:ia}),$r=e=>new URL(e.url).pathname.endsWith(".data"),sa=e=>{let t=e.headers.get("Origin");return t===null?!0:URL.canParse(t)&&new URL(t).host===new URL(e.url).host},qr=(e,t)=>{let r=e.headers.get("Sec-Fetch-Site");return r===null?!(aa.has(e.method)||sa(e)):oa.has(r)?!1:!(e.method==="GET"&&e.headers.get("Sec-Fetch-Mode")==="navigate"&&e.headers.get("Sec-Fetch-Dest")==="document"&&t.navigable(e))},la=6e4,ua="refusals",ca=32,da=/^[a-z-]+$/,tr=e=>{if(e===null)return"-";let t=e.slice(0,ca);return da.test(t)&&t===e?e:JSON.stringify(t)},Yr=e=>{let t=je({windowMs:la,tallies:Hr,writeSuppressed:(r,{count:n,since:o,tallies:a})=>{e.warn(`cross_site_rejected_suppressed count=${n} since=${o} routes=${Hr.map(l=>`${l}:${a[l]}`).join(",")}`)}});return(r,n)=>{let o=()=>{let{headers:a}=n;e.warn(`cross_site_rejected route=${r} site=${tr(a.get("Sec-Fetch-Site"))} mode=${tr(a.get("Sec-Fetch-Mode"))} dest=${tr(a.get("Sec-Fetch-Dest"))} method=${n.method}`)};t.record(ua,r,o)}};var Vr=(e,t)=>(r,n)=>{let o=n?"markAttachmentPresent":"markAttachmentMissing";e[o](r).catch(a=>{t.error(`${o} failed attachment=${r} message=${a instanceof Error?a.message:"unknown"}`)})};var ma=6e4/1e3,pa=5e3/1e3,ya=new Map([[429,ma],[503,pa]]),ke=e=>{let t=ya.get(e);return t===void 0?{}:{"Retry-After":String(t)}},zr="Too many requests",ha="same-origin",fa="SAMEORIGIN",ze=Object.freeze({"X-Content-Type-Options":"nosniff","Cross-Origin-Resource-Policy":ha,"X-Frame-Options":fa}),wt=(e,t,r)=>{let n=new Headers({"Content-Type":"application/json","Cache-Control":"no-store",...r.extraHeaders,...ze});return r.cookie&&n.append("Set-Cookie",r.cookie),new Response(JSON.stringify({error:{message:t}}),{status:e,headers:n})},Wr=(e,t)=>{if(e===null)return!1;for(let r of e.split(",")){let n=r.trim();if((n.startsWith("W/")?n.slice(2):n)===t)return!0}return!1},Jr=new Set(["image/png","image/jpeg","image/gif","image/webp","application/pdf","text/plain"]),ga=/^[\x20-\x7E]+$/,Ra=/^[\w.+-]+\/[\w.+-]+/,nr=e=>e&&ga.test(e)&&Ra.test(e)?e:null,Kr=e=>encodeURIComponent(e).replace(/['()*]/g,t=>`%${t.charCodeAt(0).toString(16).toUpperCase()}`),Gr=e=>e.replace(/[^\x20-\x7E]/g,"_").replace(/["\\]/g,"_"),Et={404:"Attachment not found",413:"Attachment too large",502:"Attachment storage unavailable",503:"Attachment storage busy",504:"Attachment storage timed out"},Xr={not_found:404,denied:404,invalid_path:404,too_large:413,unavailable:502,busy:503,deadline:504},It=e=>typeof e=="string"&&Object.hasOwn(Xr,e),xt=e=>Xr[e],Ie="Attachment request failed";var ba=e=>typeof e=="string"?JSON.stringify(e):typeof e=="number"||typeof e=="boolean"||e===null||e===void 0?String(e):Array.isArray(e)?"array":typeof e,he=(e,t,r)=>new RangeError(`[daily-report] ${e} must be ${t}; got ${ba(r)}`),We=(e,t)=>new TypeError(`[daily-report] ${e} must be ${t}`);var Sa=32*1024*1024,Aa=60,Ta=4,Da=120,_a=2,wa=8*1024*1024,ue=(e,t,r)=>{if(typeof t=="number"&&Number.isSafeInteger(t)&&t>=r)return t;throw he(e,`an integer >= ${r}`,t)},Je=(e,t,r,n)=>t===void 0?n:ue(e,t,r),Ct=e=>typeof e=="object"&&e!==null&&!Array.isArray(e),Ea=e=>{if(e===void 0)throw We("attachments.thumbnails.renderer","injected when attachments.thumbnails is given");if(!Ct(e))throw he("attachments.thumbnails.renderer","an object with id and render",e);if(e.render===void 0)throw We("attachments.thumbnails.renderer.render","a function");if(typeof e.render!="function")throw he("attachments.thumbnails.renderer.render","a function",e.render);if(typeof e.id!="string"||e.id.trim()==="")throw he("attachments.thumbnails.renderer.id","a non-blank string naming the rendering pipeline version",e.id);return e},Ia=e=>{if(e===void 0)return null;if(!Ct(e))throw he("attachments.thumbnails","an object with renderer",e);return Object.freeze({renderer:Ea(e.renderer),rateLimitPerMinute:Je("attachments.thumbnails.rateLimitPerMinute",e.rateLimitPerMinute,1,Da),concurrency:Je("attachments.thumbnails.concurrency",e.concurrency,1,_a),cacheBytes:Je("attachments.thumbnails.cacheBytes",e.cacheBytes,0,wa)})},Qr=e=>{let t=e;if(t===void 0)return null;if(!Ct(t))throw he("attachments","an object with idCodec and read",t);let{idCodec:r,read:n}=t;if(r===void 0)throw We("attachments.idCodec","injected when attachments is given");if(!Ct(r)||typeof r.encode!="function"||typeof r.decode!="function")throw he("attachments.idCodec","an object with encode and decode functions",r);if(n===void 0)throw We("attachments.read","injected when attachments is given");if(typeof n!="function")throw he("attachments.read","a function",n);return Object.freeze({idCodec:r,read:n,maxBytes:Je("attachments.maxBytes",t.maxBytes,1,Sa),rateLimitPerMinute:Je("attachments.rateLimitPerMinute",t.rateLimitPerMinute,1,Aa),concurrency:Je("attachments.concurrency",t.concurrency,1,Ta),thumbnails:Ia(t.thumbnails)})},xa=Object.freeze([["attachmentIdCodec","attachments.idCodec"],["readAttachment","attachments.read"],["attachmentMaxBytes","attachments.maxBytes"],["attachmentRateLimitPerMinute","attachments.rateLimitPerMinute"],["attachmentConcurrency","attachments.concurrency"],["attachmentThumbnailRenderer","attachments.thumbnails.renderer"],["attachmentThumbnailRateLimitPerMinute","attachments.thumbnails.rateLimitPerMinute"],["attachmentThumbnailConcurrency","attachments.thumbnails.concurrency"],["attachmentThumbnailCacheBytes","attachments.thumbnails.cacheBytes"]]),vt=e=>{for(let[t,r]of xa)if(Object.hasOwn(e,t))throw We(r,`given in place of the flat key ${t}`)};var Mt=e=>{let t=ue("limit",e.limit,1),r=ue("maxHeldPerOwner",e.maxHeldPerOwner,1),n=e.queue===null?null:{max:ue("queue.max",e.queue.max,0),maxPerOwner:ue("queue.maxPerOwner",e.queue.maxPerOwner,0),maxWaitMs:ue("queue.maxWaitMs",e.queue.maxWaitMs,1)},o=0,a=[],l=new Map,s=new Map,y=(m,R)=>m.get(R)??0,i=(m,R,M)=>{let k=y(m,R)+M;k<=0?m.delete(R):m.set(R,k)},S=m=>y(s,m)<r,d=m=>(o+=1,i(s,m,1),h(m)),b=()=>{for(;o<t;){let m=a.findIndex(M=>S(M.owner));if(m<0)return;let[R]=a.splice(m,1);i(l,R.owner,-1),R.grant(d(R.owner))}},h=m=>{let R=!1;return()=>{R||(R=!0,o-=1,i(s,m,-1),b())}};return{acquire:(m,R)=>{if(R.aborted)return Promise.resolve(null);if(o<t&&S(m))return Promise.resolve(d(m));if(n===null||a.length>=n.max||y(l,m)>=n.maxPerOwner)return Promise.resolve(null);let{maxWaitMs:M}=n,k=A=>{let P=()=>{let z=a.indexOf(H);z<0||(a.splice(z,1),i(l,m,-1),U(),A(null))},L=Re(P,M),U=()=>{clearTimeout(L),R.removeEventListener("abort",P)},H={owner:m,grant:z=>{U(),A(z)}};a.push(H),i(l,m,1),R.addEventListener("abort",P,{once:!0})};return new Promise(k)}}};var Ca=1024,va=6e4,Ma=e=>{ue("limitPerMinute",e,1);let t=new Map,r=(o,a)=>{a<=o.lastRefillMs||(o.tokens=Math.min(e,o.tokens+(a-o.lastRefillMs)*e/6e4),o.lastRefillMs=a)},n=(o,a)=>{let l=t.get(o);l&&t.delete(o);let s=l??{tokens:e,lastRefillMs:a};r(s,a),t.set(o,s);for(let y of t.keys()){if(t.size<=Ca)break;t.delete(y)}return s};return{consume:(o,a)=>{let l=n(o,a);return l.tokens<1?!1:(l.tokens-=1,!0)},refund:(o,a,l)=>{let s=t.get(o);s&&(r(s,a),s.tokens=Math.min(e,s.tokens+l))}}},lt=e=>{let{reason:t,logger:r}=e,n=Ma(e.limitPerMinute),o=e.variant===null?"":` variant=${e.variant}`,a=je({windowMs:va,tallies:[t],writeSuppressed:(l,{count:s,since:y})=>{r.warn(`${t}_suppressed count=${s} since=${y} viewer=${l}${o}`)}});return{spend:({attachmentId:l,internalUserId:s,fail:y})=>n.consume(s,ee())?null:(a.record(s,t,()=>r.warn(`429 attachment=${l} viewer=${s}${o} reason=${t}`)),y(429,zr,ke(429))),refund:(l,s)=>{n.refund(l,ee(),s)}}};var Pa=256*1024,Zr=6e4,La=e=>Math.ceil(e/2),ka=new Uint8Array(new ArrayBuffer(0)),Na=(e,t)=>{let r=e,n=0,o,a=()=>{clearTimeout(o),r=ka,t()},l=s=>{clearTimeout(o),o=Re(()=>{s.error(new Error(`attachment body idle for ${Zr} ms`)),a()},Zr)};return new ReadableStream({start(s){l(s)},pull(s){let y=Math.min(n+Pa,r.byteLength);if(y>n&&s.enqueue(r.slice(n,y)),n=y,n>=r.byteLength){s.close(),a();return}l(s)},cancel(){a()}},{highWaterMark:0})},en=e=>{let{service:t,encodeUserId:r,resolveViewerScope:n,logger:o,recordObjectState:a}=e,l=lt({reason:"rate_limit",limitPerMinute:e.rateLimitPerMinute,logger:o,variant:null}),s=Mt({limit:e.concurrency,maxHeldPerOwner:La(e.concurrency),queue:null});return async y=>{let{request:i,delivery:S,attachmentId:d,internalUserId:b,readAttachment:h,cookie:m,fail:R}=y,M=e.maxBytes,k=l.spend(y);if(k)return k;let A=await n(i),P=await t.getAttachmentForUser(A,d,b);if(!P)return o.warn(`404 attachment=${d} viewer=${b} reason=not_visible`),R(404,"Attachment not found");if(P.fileSize!=null&&P.fileSize>M)return o.warn(`413 attachment=${d} viewer=${b} reason=db_size`),R(413,"Attachment too large");let L=await s.acquire(b,i.signal);if(!L)return i.signal.aborted?(o.info(`503 attachment=${d} viewer=${b} reason=aborted`),R(503,"Attachment request aborted")):(o.warn(`503 attachment=${d} viewer=${b} reason=concurrency`),R(503,"Too many concurrent downloads",ke(503)));let U=!1;try{let H=await h(P.filePath,{maxBytes:M,head:i.method==="HEAD",principal:r(b),signal:i.signal});if(i.signal.aborted)return o.info(`503 attachment=${d} viewer=${b} reason=aborted`),R(503,"Attachment request aborted");if(!H.ok){if(!It(H.reason))return o.error(`500 attachment=${d} viewer=${b} reason=port_contract code=failure_reason`),R(500,Ie);let T=xt(H.reason);return H.reason==="not_found"&&a(d,!1),o.warn(`${T} attachment=${d} viewer=${b} reason=${H.reason} code=${H.code??"-"}`),R(T,Et[T],ke(T))}if(H.bytes.byteLength>M)return o.error(`500 attachment=${d} viewer=${b} reason=port_contract code=over_max_bytes`),R(500,Ie);let z=i.method==="HEAD";if(!z&&H.size!==void 0&&H.size!==H.bytes.byteLength)return o.error(`500 attachment=${d} viewer=${b} reason=port_contract code=size_mismatch`),R(500,Ie);let te=nr(P.fileType)??nr(H.contentType),j=te!==null&&Jr.has(te),E=j?te:"application/octet-stream",w=j&&S.kind!=="download"?"inline":"attachment",v=z?H.size:H.bytes.byteLength,I=new Headers({"Content-Type":E,"Content-Disposition":`${w}; filename="${Gr(P.fileName)}"; filename*=UTF-8''${Kr(P.fileName)}`,"Cache-Control":"private, no-store","Content-Security-Policy":"default-src 'none'; sandbox",...ze});return v!==void 0&&I.set("Content-Length",String(v)),m&&I.append("Set-Cookie",m),a(d,!0),o.info(`200 attachment=${d} viewer=${b} type=${E} disposition=${w} bytes=${v??"-"}`),z?new Response(null,{status:200,headers:I}):(U=!0,new Response(Na(H.bytes,L),{status:200,headers:I}))}finally{U||L()}}};var de=Object.freeze({queueWaitMs:3e4,readMs:3e4,renderMs:1e4,transferMarginMs:5e3}),ml=de.queueWaitMs+de.readMs+de.renderMs+de.transferMarginMs;import{createHash as Oa}from"crypto";var ut=e=>{let t=JSON.stringify(e);return`"${Oa("sha256").update(t).digest("hex")}"`};import{Buffer as Ba}from"buffer";var nn=new Set([194,198,202,206]),Ua=new Set([192,193,194,195]),on=216,Ha=217,an=218,Fa=4,$a=64,qa=2,tn=8,rn=28,xe=12,or=8,Ya=20,sn=xe+or+10,Va=2,we=(e,t)=>e[t]<<8|e[t+1],Ke=(e,t,r)=>{let n=0;for(let o=r-1;o>=0;o-=1)n=n*256+e[t+o];return n},Ae=(e,t,r)=>{if(e.byteLength<t+r.length)return!1;for(let n=0;n<r.length;n+=1)if(e[t+n]!==r.charCodeAt(n))return!1;return!0},ln=e=>e>=192&&e<=207&&e!==196&&e!==200&&e!==204,un=e=>({marker:0,body:0,length:0,end:0,stepsLeft:e}),cn=e=>(e.stepsLeft-=1,e.stepsLeft>=0),dn=e=>e[0]===255&&e[1]===on,mn=(e,t,r)=>{let n=t;for(;;){if(n>=e.byteLength||e[n]!==255)return null;do{if(!cn(r))return null;n+=1}while(n<e.byteLength&&e[n]===255);if(n>=e.byteLength)return null;let o=e[n];if(n+=1,o===Ha)return"eoi";if(o===0||o===on)return null;if(o===1||o>=208&&o<=215)continue;if(n+2>e.byteLength)return null;let a=we(e,n),l=n+a;return a<2||l>e.byteLength?null:(r.marker=o,r.body=n+2,r.length=a,r.end=l,"segment")}},ja=(e,t,r)=>{let n=e.byteLength,o=t;for(;;){let a=e.indexOf(255,o);if(a<0)return n;for(;;){if(!cn(r))return null;if(a+1>=n)return n;let l=e[a+1];if(l===255)a+=1;else if(l===0||l>=208&&l<=215){if(a+=2,a>=n||e[a]!==255)break}else return a}o=a}},pn=(e,{marker:t,body:r,length:n})=>{if(n<8)return null;let o=we(e,r+1),a=we(e,r+3),l=e[r+5];if(a===0||o===0||l===0||n!==8+3*l)return null;let s=[];for(let y=0;y<l;y+=1){let i=e[r+7+3*y],S=i>>4,d=i&15;if(S<1||S>4||d<1||d>4)return null;s.push({id:e[r+6+3*y],horizontal:S,vertical:d})}return{marker:t,width:a,height:o,components:s}},yn=(e,{body:t,length:r})=>{if(r<3)return null;let n=e[t];return n<1||n>Fa||r!==6+2*n?null:Array.from({length:n},(o,a)=>e[t+1+2*a])},hn=(e,t)=>({width:e.width,height:e.height,components:e.components.map(({horizontal:r,vertical:n})=>({horizontal:r,vertical:n})),multiScan:nn.has(e.marker)||t<e.components.length}),ar=e=>{if(!dn(e))return null;let t=un(e.byteLength),r=null;for(let n=2;;){if(mn(e,n,t)!=="segment")return null;if(ln(t.marker)){if(r!==null||(r=pn(e,t),r===null))return null}else if(t.marker===an){if(r===null)return null;let o=yn(e,t);return o===null?null:hn(r,o.length)}n=t.end}},fn=e=>{let t=Math.max(...e.components.map(n=>n.horizontal)),r=Math.max(...e.components.map(n=>n.vertical));return e.components.map(({horizontal:n,vertical:o})=>{let a=Math.ceil(e.width*n/(t*tn)),l=Math.ceil(e.height*o/(r*tn));return Math.ceil(a/n)*n*Math.ceil(l/o)*o})},gn=e=>e.multiScan?fn(e).reduce((r,n)=>r+n,0)*$a*qa:0,za=896,Rn=(e,{maxBlockVisits:t,maxWalkSteps:r})=>{if(!dn(e))return null;let n=Ba.from(e.buffer,e.byteOffset,e.byteLength),o=un(r),a=null,l=null,s=new Map,y=0,i=0,S=0;for(let d=2;;){let b=mn(e,d,o);if(b===null)return null;if(b==="eoi")return l===null?null:{header:l,blockVisits:i};if(d=o.end,ln(o.marker)){if(a!==null||!Ua.has(o.marker)||(a=pn(e,o),a===null))return null;let h=fn(a);s=new Map;for(let[m,R]of a.components.entries()){let M=s.get(R.id);s.set(R.id,M===void 0?h[m]:Math.max(M,h[m]))}y=a.components.length*(nn.has(a.marker)?za:1)}else if(o.marker===an){if(a===null||S===y)return null;let h=yn(e,o);if(h===null)return null;for(let R of h){let M=s.get(R);if(M===void 0)return null;i+=M}if(S+=1,l===null&&(l=hn(a,h.length)),i>t||!l.multiScan)return{header:l,blockVisits:i};let m=ja(n,o.end,o);if(m===null)return null;d=m}}},bn=e=>{if(e.byteLength<24||we(e,8)!==0||we(e,10)!==13||!Ae(e,12,"IHDR"))return null;let t=we(e,16)*65536+we(e,18),r=we(e,20)*65536+we(e,22);return t===0||r===0||t>2147483647||r>2147483647?null:{width:t,height:r}},Wa=e=>{if(Ae(e,xe,"VP8 ")){if(e.byteLength<30||(e[20]&1)!==0||e[23]!==157||e[24]!==1||e[25]!==42)return null;let t=Ke(e,26,2)&16383,r=Ke(e,28,2)&16383;return t===0||r===0?null:{width:t,height:r}}if(Ae(e,xe,"VP8L")){if(e.byteLength<25||e[20]!==47)return null;let t=Ke(e,21,4);return{width:(t&16383)+1,height:Math.floor(t/16384)%16384+1}}return Ae(e,xe,"VP8X")?e.byteLength<sn?null:{width:Ke(e,24,3)+1,height:Ke(e,27,3)+1}:null},Sn=e=>{if(bn(e)===null||e.byteLength<=rn)return null;switch(e[rn]){case 0:return!1;case 1:return!0;default:return null}},An=(e,t)=>{if(Ae(e,xe,"VP8 "))return"lossy";if(Ae(e,xe,"VP8L"))return"lossless";if(!Ae(e,xe,"VP8X")||e.byteLength<sn)return null;if((e[Ya]&Va)!==0)return"animated";let r=!1,n=t;for(let o=xe;o+or<=e.byteLength;){if(n-=1,n<0)return null;if(Ae(e,o,"VP8L"))return"lossless";if(Ae(e,o,"VP8 "))return r?"lossy-alpha":"lossy";Ae(e,o,"ALPH")&&(r=!0);let a=Ke(e,o+4,4);o+=or+a+a%2}return null},Tn={png:bn,jpeg:ar,webp:Wa};var ir=Object.freeze(["image/webp","image/jpeg","image/png"]),sr=1024*1024;var Ja=new Set(["image/png","image/jpeg","image/gif","image/webp"]),Ka={"image/webp":"webp","image/jpeg":"jpeg","image/png":"png"},Ga=new Set(ir),Xa=e=>typeof e=="string"&&Ga.has(e),Qa=256,Pt=(e,t)=>e.fileType===null||!Ja.has(e.fileType)?!1:e.fileSize===null||e.fileSize<=t,Za=[137,80,78,71,13,10,26,10],ei=[255,216,255],ti=[[71,73,70,56,55,97],[71,73,70,56,57,97]],ri=[82,73,70,70],ni=[87,69,66,80],ct=(e,t,r)=>{if(e.byteLength<r+t.length)return!1;for(let[n,o]of t.entries())if(e[r+n]!==o)return!1;return!0},lr=e=>{if(ct(e,Za,0))return"png";if(ct(e,ei,0))return"jpeg";for(let t of ti)if(ct(e,t,0))return"gif";return ct(e,ri,0)&&ct(e,ni,8)?"webp":null},Dn=e=>{let t=JSON.stringify([e.rendererId,e.box.maxWidth,e.box.maxHeight,e.attachmentId,e.filePath,e.fileType,e.fileSize]);return{key:t,etag:ut([t])}},_n=(e,t)=>{if(!Xa(e.contentType))return"content_type";if(!(e.bytes instanceof Uint8Array))return"bytes";if(e.bytes.byteLength===0)return"empty";if(e.bytes.byteLength>sr)return"too_large";let r=Ka[e.contentType];if(lr(e.bytes)!==r)return"signature";let n=Tn[r](e.bytes);return n===null||n.width>t.maxWidth||n.height>t.maxHeight?"dimensions":null},wn=e=>{ue("maxBytes",e.maxBytes,0),ue("maxEntries",e.maxEntries,0);let t=new Map,r=0,n=o=>{let a=t.get(o);a&&(t.delete(o),r-=a.weight)};return{get:o=>{let a=t.get(o);if(a)return t.delete(o),t.set(o,a),a.entry},set:(o,a)=>{n(o);let l=(a.kind==="thumbnail"?a.bytes.byteLength:0)+Qa;if(l>e.maxBytes||e.maxEntries===0)return;let s=a.kind==="thumbnail"?{kind:"thumbnail",bytes:a.bytes.slice(),contentType:a.contentType}:a;t.set(o,{entry:s,weight:l}),r+=l;for(let y of t.keys()){if(r<=e.maxBytes&&t.size<=e.maxEntries)break;n(y)}}}};var ur=e=>{let{budgetMs:t,flightSignal:r,call:n,onOverrun:o,onStuck:a}=e,l=ee(),s=new AbortController,y=!1,i,S,d=()=>{a(ee()-l)},b=L=>{i=Re(()=>{y=!0,L({timedOut:!0}),S=Re(d,t),s.abort(new DOMException(`stage exceeded its ${t} ms budget`,"TimeoutError"))},t)},h=new Promise(b),m=AbortSignal.any([r,s.signal]),R=L=>{L(n(m))},M=new Promise(R),k=L=>(clearTimeout(i),clearTimeout(S),y&&o(ee()-l,L.kind==="error"?{error:L.error}:null),L),A=M.then(L=>k({kind:"value",value:L}),L=>k({kind:"error",error:L}));return{outcome:Promise.race([M.then(L=>({timedOut:!1,value:L})),h]),settled:A}};var Ce={404:"Attachment not found",500:Ie,502:"Thumbnail unavailable",503:"Thumbnail temporarily unavailable",504:"Thumbnail storage timed out"},En=(e,t)=>{if(typeof e!="object"||e===null)return{failure:{kind:"failure",status:500,reason:"port_contract",code:"result"}};let r=e;if(!r.ok)return r.reason==="unsupported"?{entry:{kind:"unrenderable",reason:"unsupported"}}:r.reason==="failed"?{failure:{kind:"failure",status:502,reason:"render_failed"}}:{failure:{kind:"failure",status:500,reason:"port_contract",code:"failure_reason"}};let n=_n(r,t);return n!==null?{failure:{kind:"failure",status:500,reason:"port_contract",code:n}}:{entry:{kind:"thumbnail",bytes:r.bytes,contentType:r.contentType}}},oi=e=>{let t=new AbortController,r=()=>{t.abort()},n=Re(r,de.queueWaitMs);return e.addEventListener("abort",r,{once:!0}),e.aborted&&r(),{signal:t.signal,end:()=>{clearTimeout(n),e.removeEventListener("abort",r)}}},In=()=>{},ai=(e,t)=>t.aborted?Promise.resolve():new Promise(r=>{let n=()=>{t.removeEventListener("abort",n),r()};t.addEventListener("abort",n,{once:!0}),e.then(n)}),xn=e=>{let{gate:t,cache:r,maxBytes:n,encodeUserId:o,recordObjectState:a,logger:l}=e,s=new Map,y=(h,m)=>{let R=m.then(In,In);s.set(h,R);let M=()=>{s.get(h)===R&&s.delete(h)};R.then(M)},i=async(h,m)=>{let R=s.get(h.key);if(R===void 0)return t.acquire(h.owner,m);let M=oi(m);try{if(await ai(R,M.signal),M.signal.aborted)return null;let k=r.get(h.key);return k!==void 0?{...k,identity:"verified"}:await t.acquire(h.owner,M.signal)}finally{M.end()}},S=(h,m)=>{if(h.fileSize===null)return m.kind==="exact"?"verified":"unrecorded";if(m.kind==="exact"?m.bytes===h.fileSize:h.fileSize>m.maxBytes)return"verified";let M=m.kind==="exact"?String(m.bytes):`>${m.maxBytes}`;return l.warn(`size_mismatch expected=${h.fileSize} got=${M} attachment=${h.attachmentId} viewer=${h.owner} variant=thumbnail`),"unverified"},d=(h,m)=>(R,M)=>{let k=M===null?"":` message=${M.error instanceof Error?M.error.message:"unknown"}`;l.warn(`${h}_overrun ms=${R} attachment=${m.attachmentId} viewer=${m.owner} variant=thumbnail${k}`)},b=(h,m)=>R=>{l.warn(`${h}_stuck ms=${R} attachment=${m.attachmentId} viewer=${m.owner} variant=thumbnail`)};return async(h,m)=>{let R=await i(h,m);if(R===null)return{kind:"failure",status:503,reason:m.aborted?"aborted":"queue"};if(typeof R!="function")return R;let M=R,k=null;try{if(m.aborted)return{kind:"failure",status:503,reason:"aborted"};let A=r.get(h.key);if(A!==void 0)return{...A,identity:"verified"};let P=ur({budgetMs:de.readMs,flightSignal:m,call:x=>h.readAttachment(h.filePath,{maxBytes:n,head:!1,principal:o(h.owner),signal:x}),onOverrun:d("read",h),onStuck:b("read",h)}),L=await P.outcome;if(L.timedOut)return k=P.settled,m.aborted?{kind:"failure",status:503,reason:"aborted"}:{kind:"failure",status:504,reason:"read_timeout"};if(m.aborted)return{kind:"failure",status:503,reason:"aborted"};let U=L.value;if(!U.ok&&U.reason!=="too_large")return It(U.reason)?(U.reason==="not_found"&&a(h.attachmentId,!1),{kind:"failure",status:xt(U.reason),reason:U.reason,code:U.code}):{kind:"failure",status:500,reason:"port_contract",code:"failure_reason"};if(U.ok&&U.bytes.byteLength>n)return{kind:"failure",status:500,reason:"port_contract",code:"over_max_bytes"};let H=S(h,U.ok?{kind:"exact",bytes:U.bytes.byteLength}:{kind:"over",maxBytes:n}),z=x=>{H==="verified"&&r.set(h.key,x)},te=x=>(z(x),{...x,identity:H});if(!U.ok)return te({kind:"unrenderable",reason:"too_large"});let j=lr(U.bytes);if(j===null)return te({kind:"unrenderable",reason:"signature"});let E=ur({budgetMs:de.renderMs,flightSignal:m,call:x=>h.renderer.render(U.bytes,{format:j,maxWidth:h.box.maxWidth,maxHeight:h.box.maxHeight,signal:x}),onOverrun:d("render",h),onStuck:b("render",h)}),w=x=>{if(x.kind==="error")return;let q=En(x.value,h.box);"entry"in q&&z(q.entry)},v=null,I=()=>(v===null&&(v=E.settled.then(w),y(h.key,v)),v);m.addEventListener("abort",I,{once:!0});let T=await E.outcome.finally(()=>m.removeEventListener("abort",I));if(T.timedOut||m.aborted)return k=I(),m.aborted?{kind:"failure",status:503,reason:"aborted"}:{kind:"failure",status:502,reason:"render_timeout"};let F=En(T.value,h.box);return"entry"in F?te(F.entry):F.failure}finally{k===null?M():k.then(M,M)}}};var Cn=()=>{let e=new Map;return{join:(t,r,n)=>{let o=()=>{let y=new AbortController,i=()=>{e.get(t)?.controller===y&&e.delete(t)},d={promise:n(y.signal).finally(i),controller:y,waiters:0};return e.set(t,d),d},a=e.get(t)??o();a.waiters+=1;let l=()=>{a.waiters-=1,!(a.waiters>0)&&(a.controller.abort(),e.get(t)===a&&e.delete(t))};r.aborted?l():r.addEventListener("abort",l,{once:!0});let s=()=>{r.removeEventListener("abort",l)};return a.promise.finally(s)}}};var Pn=10,ii=1/Pn,vn=1-ii,si=1024,li=64,ui=8,Mn="private, no-cache",ci="no-store",di=Object.freeze({verified:"",unverified:" identity=unverified",unrecorded:" size=unrecorded"}),mi=e=>{switch(e.status){case 404:case 502:case 504:return"warn";case 500:return"error";case 503:return e.reason==="aborted"?"info":"warn"}},Ln=e=>{let{service:t,encodeUserId:r,resolveViewerScope:n,logger:o,recordObjectState:a,maxBytes:l,thumbnails:s}=e,{renderer:y}=s,i=lt({reason:"rate_limit",limitPerMinute:s.rateLimitPerMinute,logger:o,variant:"thumbnail"}),S=lt({reason:"revalidation_rate_limit",limitPerMinute:s.rateLimitPerMinute*Pn,logger:o,variant:"thumbnail"}),d=Mt({limit:s.concurrency,maxHeldPerOwner:s.concurrency,queue:{max:li,maxPerOwner:ui,maxWaitMs:de.queueWaitMs}}),b=wn({maxBytes:s.cacheBytes,maxEntries:si}),h=Cn(),m=xn({gate:d,cache:b,maxBytes:l,encodeUserId:r,recordObjectState:a,logger:o}),R=(A,P,L,U)=>{let H=`attachment=${A.attachmentId} viewer=${A.internalUserId} variant=thumbnail cache=${U}`;if(P.kind==="failure")return o[mi(P)](`${P.status} ${H} reason=${P.reason} code=${P.code??"-"}`),A.fail(P.status,Ce[P.status],ke(P.status));let z=di[P.identity];if(P.kind==="unrenderable")return o.info(`404 ${H} reason=${P.reason}${z}`),A.fail(404,Ce[404]);let te=P.identity==="verified"?{"Cache-Control":Mn,ETag:L}:{"Cache-Control":ci},j=new Headers({"Content-Type":P.contentType,"Content-Length":String(P.bytes.byteLength),...te,"Content-Security-Policy":"default-src 'none'; sandbox",...ze});return A.cookie&&j.append("Set-Cookie",A.cookie),o.info(`200 ${H} type=${P.contentType} bytes=${P.bytes.byteLength}${z}`),new Response(P.bytes,{status:200,headers:j})},M=A=>i.spend(A),k=(A,P)=>P?S.spend(A):M(A);return async(A,P)=>{let{request:L,attachmentId:U,internalUserId:H,readAttachment:z,cookie:te,fail:j}=A,E=Zt[P],w=L.headers.get("If-None-Match"),v=w!==null,I=k(A,v);if(I)return I;let T=await n(L),F=await t.getAttachmentForUser(T,U,H),q=F!==null&&Pt(F,l)?Dn({rendererId:y.id,box:E,attachmentId:U,filePath:F.filePath,fileType:F.fileType,fileSize:F.fileSize}):null;if(q&&Wr(w,q.etag)){let me=new Headers({"Cache-Control":Mn,ETag:q.etag,...ze});return te&&me.append("Set-Cookie",te),o.info(`304 attachment=${U} viewer=${H} variant=thumbnail cache=revalidated`),new Response(null,{status:304,headers:me})}if(v){let me=M(A);if(me)return me}if(!F)return o.warn(`404 attachment=${U} viewer=${H} variant=thumbnail reason=not_visible`),j(404,Ce[404]);if(!q)return i.refund(H,vn),o.info(`404 attachment=${U} viewer=${H} variant=thumbnail reason=not_eligible`),j(404,Ce[404]);let{key:W,etag:N}=q,Q=b.get(W);if(Q)return i.refund(H,vn),R(A,{...Q,identity:"verified"},N,"hit");let Me=me=>m({key:W,attachmentId:U,filePath:F.filePath,fileSize:F.fileSize,box:E,owner:H,readAttachment:z,renderer:y},me),ge;try{ge=await h.join(W,L.signal,Me)}catch(me){return o.error(`500 attachment=${U} viewer=${H} variant=thumbnail cache=miss reason=port_exception message=${me instanceof Error?me.message:"unknown"}`),j(500,Ce[500])}return R(A,ge,N,"miss")}};var pi='[daily-report] params.token must be passed by the route that mounts attachment.loader; declare a "token" route parameter ({apiBasePath}/attachment/{token})',yi=()=>wt(403,rr,{cookie:null}),kn=Object.freeze({route:"attachment",navigable:e=>{let{kind:t}=er(new URL(e.url).searchParams);return t==="inline"||t==="download"},frameworkDataRefusal:()=>wt(404,Et[404],{cookie:null}),crossSiteRejection:yi}),Nn=e=>{let{authenticate:t,service:r,encodeUserId:n,resolveViewerScope:o,logger:a}=e,l=r.attachmentDelivery,s={service:r,encodeUserId:n,resolveViewerScope:o,logger:a,recordObjectState:Vr(r,a)},y=l===null?null:{idCodec:l.idCodec,read:l.read,serveOriginal:en({...s,maxBytes:l.maxBytes,rateLimitPerMinute:l.rateLimitPerMinute,concurrency:l.concurrency}),serveThumbnail:l.thumbnails===null?null:Ln({...s,maxBytes:l.maxBytes,thumbnails:l.thumbnails})};return async({request:i,params:S})=>{let d=null,b=(h,m,R={})=>wt(h,m,{cookie:d,extraHeaders:R});try{let{user:h,cookie:m}=await t(i,{failureRedirect:null});if(d=m??null,!h)return b(401,"Unauthorized");let R=er(new URL(i.url).searchParams);if(R.kind==="invalid")return b(400,"Invalid attachment request");if(R.kind==="thumbnail"&&i.method!=="GET")return b(405,"Method not allowed",{Allow:"GET"});if(i.method!=="GET"&&i.method!=="HEAD")return b(405,"Method not allowed",{Allow:"GET, HEAD"});if(y===null)return b(404,"Attachment not found");if(S.token===void 0)throw new Error(pi);let M=y.idCodec.decode(S.token);if(M===null||!Kt(M))return b(400,"Invalid attachment token");let k=await r.getUserIdByExternalId(h.id);if(!k)return b(403,"Forbidden");let A={request:i,delivery:R,attachmentId:M,internalUserId:k,readAttachment:y.read,cookie:d,fail:b};return R.kind!=="thumbnail"?await y.serveOriginal(A):y.serveThumbnail===null?b(404,Ce[404]):await y.serveThumbnail(A,R.variant)}catch(h){if(h instanceof Response)throw h;return a.error(`500 attachment=? viewer=? reason=unexpected message=${h instanceof Error?h.message:"unknown"}`),b(500,Ie)}}};var hi=se(1,"[Response]"),ne=(e,t,r,n=200,o=hi)=>{let a=ut(r),l=e.headers.get("If-None-Match");o.info(`[jsonResponseWithETag] ETag: ${a}, If-None-Match: ${l}`);let s=new Headers({"Content-Type":"application/json","Cache-Control":"private, max-age=0, must-revalidate","X-Content-Type-Options":"nosniff","X-Frame-Options":"DENY","Content-Security-Policy":"default-src 'none'",ETag:a});return t&&s.append("Set-Cookie",t),e.method==="GET"&&n===200&&l===a?new Response(null,{status:304,headers:s}):new Response(JSON.stringify(r),{status:n,headers:s})};var kt=e=>e.method==="HEAD"?AbortSignal.abort():e.signal;var Nt=30,Hn=4e3,fi="stream interrupted by server error",gi=15e3,Fn=Symbol("ids-stream-heartbeat"),On=()=>{},Ot=e=>e.return(void 0).then(On,On),Ri=()=>{let e;return{fired:new Promise(r=>{e=setTimeout(()=>r(Fn),gi)}),stop:()=>clearTimeout(e)}},bi=/^[0-9a-f]{1,16}$/,Si=e=>{let t=e.searchParams.get("cursor_report_hub_id"),r=e.searchParams.get("cursor_business_date"),n=e.searchParams.get("cursor_snapshot"),o=n!==null&&bi.test(n)?n:null;if(t===null)return r===null?{cursor:null,snapshot:o}:{invalid:!0};let a=Le(t);return a===null?{invalid:!0}:r===null?{cursor:{businessDate:null,reportHubId:a},snapshot:o}:bt(r)?{cursor:{businessDate:r,reportHubId:a},snapshot:o}:{invalid:!0}};async function*Bn(e,t,r,n){let o=t?Cr(e,t):0,a=!0;for(;;){let l=e.slice(o,o+(a?r:Hn));o+=l.length;let s=o>=e.length,y=l[l.length-1];if(yield{kind:"chunk",items:l,nextCursor:s||!y?null:{businessDate:y.businessDate,reportHubId:y.reportHubId},isLast:s,...a?{total:e.length}:{},...a?{streamAnchor:n.streamAnchor}:{},snapshot:n.snapshot,...a&&n.restarted?{restarted:!0}:{}},a=!1,s)return}}var $n=e=>{let t=new Headers({"Content-Type":"application/x-ndjson; charset=utf-8","Cache-Control":"private, no-cache, no-transform","X-Content-Type-Options":"nosniff"});return e&&t.append("Set-Cookie",e),t},Un=(e,t,r,n)=>{let o=new TextEncoder,a=!1,l=null,s=new ReadableStream({async pull(y){if(a||r.aborted){await Ot(t);try{y.close()}catch{}return}let i=Ri();try{l===null&&(l=t.next());let S=await Promise.race([l,i.fired]);if(i.stop(),S===Fn){if(a||r.aborted){await Ot(t);try{y.close()}catch{}return}y.enqueue(o.encode(`
-`));return}l=null;let{value:d,done:b}=S;if(b){y.close();return}if(a||r.aborted){await Ot(t);try{y.close()}catch{}return}y.enqueue(o.encode(`${JSON.stringify(d)}
-`))}catch(S){if(i.stop(),l=null,a||r.aborted)return;n.error(`ids-stream emission failed: ${S instanceof Error?S.message:String(S)}`);try{let d={kind:"error",error:fi};y.enqueue(o.encode(`${JSON.stringify(d)}
-`)),y.close()}catch{}}},cancel(){a=!0,Ot(t)}});return new Response(s,{status:200,headers:$n(e)})},qn=e=>{let{service:t,logger:r}=e;return async(n,o,a,l,s)=>{let y=Si(n);if("invalid"in y)return ne(a,o,{error:{message:"Invalid cursor"}},400);let i=it(n.searchParams.get("forceRefresh"));if(i===null)return ne(a,o,{error:{message:"Invalid forceRefresh"}},400);let S=kt(a);if(S.aborted)return new Response(null,{status:200,headers:$n(o)});let d=!1,b=null,h=null,m=new Promise((k,A)=>{b=k,h=A});m.catch(()=>{});let R=t.getDailyReportIdsByExternalId(s,l.id,{forceRefresh:i,onFetchStart:y.cursor?void 0:()=>{d=!0,t.readSseStreamAnchor().then(k=>t.getDailyReportIdsFirstPageByExternalId(s,l.id,Nt).then(A=>({items:A,streamAnchor:k}))).then(k=>b?.(k),k=>h?.(k))}});if(R.catch(()=>{}),y.cursor){let{items:k,streamAnchor:A,snapshot:P}=await R,L=y.snapshot!==null&&y.snapshot===P;return Un(o,Bn(k,L?y.cursor:null,Nt,{snapshot:P,restarted:!L,streamAnchor:A}),S,r)}let M=(async function*(){let k=await Promise.race([R.then(L=>({kind:"full",source:L}),L=>({kind:"full-error",error:L})),m.then(L=>({kind:"page",page:L}),()=>({kind:"page-error"}))]),A=null,P=!1;if(k.kind==="full")A=k.source;else if(k.kind==="page"){let{items:L,streamAnchor:U}=k.page;if(L.length<Nt){yield{kind:"chunk",items:L,nextCursor:null,isLast:!0,total:L.length,streamAnchor:U};return}yield{kind:"chunk",items:L,nextCursor:null,isLast:!1,provisional:!0},P=!0}else if(k.kind==="full-error"&&d){let L=await m.catch(()=>null);L&&L.items.length>0&&(yield{kind:"chunk",items:L.items,nextCursor:null,isLast:!1,provisional:!0})}A===null&&(A=await R),yield*Bn(A.items,null,P?Hn:Nt,{snapshot:A.snapshot,streamAnchor:A.streamAnchor})})();return Un(o,M,S,r)}};import{systemSseRuntime as Bi}from"@aiquants/sse";import{createSseResponse as Ui,readLastEventId as Hi,startSseHeartbeat as Fi,terminalStreamResponse as $i}from"@aiquants/sse/server";import{z as g}from"zod";var Yn=15e3,Vn="lastEventId",Ai=/^\d{1,15}-\d{1,15}$/,jn=e=>Ai.test(e),Ti=g.object({name:g.string().nullish(),affiliation:g.string().nullish()}),Di=g.object({name:g.string().nullish(),text:g.string().nullish(),color:g.string().nullish()}),_i=g.object({id:g.number(),name:g.string().nullish(),color:g.string().nullish()}),zn=g.object({id:g.number(),userId:g.string().nullish(),userName:g.string().nullish(),content:g.string().nullish(),createdAt:g.string().nullish(),isMine:g.boolean()}),wi=g.object({id:g.string(),fileName:g.string(),fileType:g.string().nullable(),fileSize:g.number().nullable(),createdAt:g.string().nullable(),state:g.enum(["present","absent","unknown"]),hasThumbnail:g.boolean().default(!1)}),cr=g.object({reportHubId:g.number(),date:g.string().nullish(),createdAt:g.string().nullish(),author:g.string().nullish(),userId:g.string().nullish(),sourceType:g.string().nullish(),employeeName:g.string().nullish(),updatedBy:g.string().nullish(),updatedAt:g.string().nullish(),category:g.string().nullish(),creationCategory:g.string().nullish(),visitTimeFrom:g.string().nullish(),visitTimeTo:g.string().nullish(),customerName:g.string().nullish(),interviewers:g.array(Ti),subject:g.string().nullish(),content:g.string().nullish(),externalComments:g.array(Di),isRead:g.boolean(),isStarred:g.boolean(),labels:g.array(_i),postedComments:g.array(zn),attachments:g.array(wi).default([])}),Ei=g.object({type:g.literal("connected")}),Bt=g.object({type:g.literal("status-update"),reportHubId:g.number(),statusType:g.enum(["star","read"]),value:g.boolean(),clientTempId:g.string(),recipientRawUserId:g.number().optional()}),dr=g.string().optional(),mr=g.object({type:g.literal("comment-add"),reportHubId:g.number(),comment:zn,clientTempId:g.string(),recipientRawUserId:g.number().optional(),sourceType:dr}),pr=g.object({type:g.literal("comment-delete"),reportHubId:g.number(),commentId:g.number(),clientTempId:g.string(),recipientRawUserId:g.number().optional(),sourceType:dr}),yr=g.object({type:g.literal("report-create"),reportHubId:g.number(),report:cr,clientTempId:g.string(),recipientRawUserId:g.number().optional()}),hr=g.object({type:g.literal("report-update"),reportHubId:g.number(),report:cr,clientTempId:g.string(),recipientRawUserId:g.number().optional()}),fr=g.object({type:g.literal("report-publish"),reportHubId:g.number(),report:cr,clientTempId:g.string(),recipientRawUserId:g.number().optional()}),gr=g.object({type:g.literal("report-delete"),reportHubId:g.number(),clientTempId:g.string(),sourceType:dr}),Wn=g.discriminatedUnion("type",[Ei,Bt,mr,pr,yr,hr,fr,gr]);import{systemSseRuntime as xi}from"@aiquants/sse";import{createSharedSource as Ci}from"@aiquants/sse/shared-source";var Ne="daily-report:ids:",Oe="daily-report:business-date:",Ut=(e,t)=>`${e}st:${t}`,Rr=e=>`${Ne}user:${e}:`,Jn=(e,t)=>Ut(Rr(e),t),Ii=e=>`${Oe}${e}:`,Kn=(e,t)=>Ut(Ii(e),t),dt=e=>`daily-report:date:${e}:user:`,Ge=(e,t)=>`${dt(e)}${t}:`,Gn=(e,t,r)=>Ut(Ge(e,t),r),Te=e=>`daily-report:detail:${e}:user:`,Ht=(e,t)=>`${Te(e)}${t}:`,Xn=(e,t,r)=>Ut(Ht(e,t),r);var Be=(e,t)=>{let[r,n]=e.split("-").map(Number),[o,a]=t.split("-").map(Number);return r!==o?r<o:n<=a},vi=5e3,Mi=100,mt=class{constructor(t){this.config=t;this._lastId=null;this._positioning=null;this._generation=0;this._logger=t.logger??se(1,"[SSE Reader]"),this._source=this._createSource()}ready(){return this._position().then(()=>{})}subscribe(t,r){return this._source.subscribe({next:n=>{this._lastId=n.id,t(n)},error:n=>r(n instanceof Error?n:new Error(String(n)))})}async destroy(){await this._source.dispose(),this._generation+=1,this._positioning=null,this._lastId=null,this._source=this._createSource()}_position(){if(this._lastId!==null)return Promise.resolve(this._lastId);if(this._positioning===null){let t=this._generation;this._positioning=this._readTail().then(r=>{if(t!==this._generation)throw new Error("SSE reader was destroyed while the stream tail was being read");return this._positioning=null,this._lastId=r,r},r=>{throw t===this._generation&&(this._positioning=null),r})}return this._positioning}async _readTail(){let t=await this.config.redis?.getClient();if(!t)throw new Error("Failed to get Redis client to read the SSE stream tail");let r=await t.xRevRange(this.config.streamKey,"+","-",{COUNT:1});return r.length>0?r[0].id:"0-0"}_createSource(){return Ci({start:t=>this._start(t),lingerMs:0,replay:"none",runtime:xi,onListenerError:t=>this._logger.error("SSE reader subscriber threw:",t),onStopError:t=>this._logger.error("SSE reader failed to stop:",t)})}async _start(t){let r=await this._position(),n=await this.config.redis?.createClient();if(!n)throw new Error("Failed to create Redis client for SSE reader");n.on("error",l=>{this._logger.error("Redis client error:",l)});let o=!1,a=this._readLoop(n,t,r,()=>o);return async()=>{if(o=!0,n.isOpen)try{await n.quit()}catch{}await a}}async _readLoop(t,r,n,o){let a=n;try{for(;!o()&&t.isOpen;){let l=await t.xRead([{key:this.config.streamKey,id:a}],{BLOCK:vi,COUNT:Mi});if(l)for(let s of l)for(let y of s.messages)a=y.id,this._invalidateCaches(y.message),r.next({id:y.id,message:y.message})}}catch(l){o()||(this._logger.error("xRead loop error:",l),r.fail(l instanceof Error?l:new Error(String(l))));return}o()||r.fail(new Error("Redis client for SSE reader closed unexpectedly"))}_invalidateCaches(t){try{let r=t?.data?JSON.parse(t.data):null,n=r?.type;if((n==="report-create"||n==="report-delete"||n==="report-publish")&&this.config.cache.invalidatePrefix(Ne),n==="comment-add"||n==="comment-delete"||n==="status-update"){let o=r?.reportHubId;typeof o=="number"&&this.config.cache.invalidatePrefix(Te(o))}}catch{}}};import{inArray as Pi,sql as Qn}from"drizzle-orm";var Li="
",ki=64,Ni=e=>e.toLowerCase(),Oi=e=>e.trim().toLowerCase();function Zn(e){if(e==null)return null;if(!Array.isArray(e))return new Set;let t=new Set;for(let r of e){if(typeof r!="string")continue;let n=Oi(r);n.length>0&&t.add(n)}return t}function De(e,t){return e===null?!0:t==null?!1:e.has(Ni(t))}function Ue(e){return e!==null&&e.size===0}function to(e,t){if(t!==null)return t.size===0?Qn`1 = 0`:Pi(Qn`LOWER(${e})`,[...t])}var Xe,Qe,pt=class pt{constructor(t,r){zt(this,Xe);zt(this,Qe);Wt(this,Xe,t),Wt(this,Qe,r)}get visible(){return ot(this,Xe)===null?null:new Set(ot(this,Xe))}get commentable(){return ot(this,Qe)===null?null:new Set(ot(this,Qe))}static restrictTo(t){let r=typeof t=="object"&&t!==null&&"read"in t,n=Zn(r?t.read:t),o=r?t.comment:void 0;if(o===void 0)return new pt(n,n);let a=Zn(o),l=new Set;for(let s of a??[])n.has(s)&&l.add(s);return new pt(n,l)}static unrestricted(t){return new pt(null,null)}};Xe=new WeakMap,Qe=new WeakMap;var fe=pt;function yt(e){let t=eo(e.visible),r=eo(e.commentable);return t===r?t:`d:${t.length}:${t}${r}`}function eo(e){if(e===null)return"all";if(e.size===0)return"none";let t=[...e].sort().map(n=>`${n.length}:${n}`).join(Li);if(t.length<=ki)return`s:${t}`;let r=2166136261;for(let n=0;n<t.length;n++)r^=t.charCodeAt(n),r=Math.imul(r,16777619);return`sh:${(r>>>0).toString(16)}`}var oo=Object.freeze({...st,route:"sse",frameworkDataRefusal:_t}),ro=864e5,qi={baseMs:2e3,jitterMs:8e3},ao=6e4,br=1e3,io=JSON.stringify({type:"connected"}),no="0-0",Yi=(e,t,r,n)=>{if(r===null&&n===null)return!0;let o=typeof t.sourceType=="string"?t.sourceType:void 0;switch(e.type){case"connected":case"status-update":return!0;case"report-create":case"report-update":case"report-publish":return De(r,e.report.sourceType);case"comment-add":case"comment-delete":return De(n,o??"Internal");case"report-delete":return De(r,o)}},Vi=["externalComments","postedComments"],ji=(e,t,r)=>{if(r===null||e.type!=="report-create"&&e.type!=="report-update"&&e.type!=="report-publish"||De(r,e.report.sourceType))return!1;let n=t.report;for(let o of Vi)n[o]=[];return!0},zi=(e,t)=>{e.writeEvent({event:null,id:t,data:io})},Wi=(e,t,r,n,o)=>{if(r.data)try{let a=JSON.parse(r.data),l=Wn.safeParse(a);if(!l.success){o.error("SSE message validation failed:",l.error.format());return}let s=l.data,y=typeof a.recipientRawUserId=="number"?a.recipientRawUserId:void 0;if((s.type==="status-update"||y!==void 0)&&y!==n.internalUserId||!Yi(s,a,n.visibleSet,n.commentableSet)){zi(e,t);return}let S=ji(s,a,n.commentableSet),d;if("recipientRawUserId"in a){let{recipientRawUserId:b,...h}=a;d=JSON.stringify(h)}else S?d=JSON.stringify(a):d=r.data;e.writeEvent({event:null,id:t,data:d})}catch(a){o.error(`[SSE:${n.internalUserId}] processEntry error:`,a)}},so=e=>{let{authenticate:t,service:r,resolveViewerScope:n,redis:o,sseReader:a,streamKey:l,logger:s}=e,y=async(i,S)=>{let{request:d,internalUserId:b,cursor:h}=S,m=S.initialScope.visible,R=S.initialScope.commentable,M=0,k=setInterval(()=>{let w=++M;n(d,"refresh").then(v=>{w===M&&(m=v.visible,R=v.commentable)})},ao);i.onClose(()=>clearInterval(k));let A=h===null?no:h,P=h!==null&&o!==void 0,L=[],U=null,H=w=>{Be(w.id,A)||(A=w.id,Wi(i,w.id,w.message,{internalUserId:b,visibleSet:m,commentableSet:R},s))},z=async(w,v)=>{let[I]=await w.xRange(l,"-","+",{COUNT:1});return I!==void 0&&!Be(I.id,v)},te=async(w,v)=>{if(await z(w,v))return!1;let I=v;for(;;){let T=await w.xRange(l,I,"+",{COUNT:br}),F=T[0];if(F!==void 0&&F.id!==I&&await z(w,I))return!1;for(let q of T){if(U!==null&&Be(U,q.id))return!0;H(q)}let x=T.at(-1);if(T.length<br||x===void 0||i.isClosed())return!0;I=x.id}},j=a.subscribe(w=>{if(!P){H(w);return}Be(w.id,A)||(U===null&&(U=w.id),L.push(w))},w=>{s.error(`[SSE:${b}] Fan-Out reader error:`,w),i.close()});if(i.onClose(j),h===null){await a.ready();try{let w=await o?.getClient();if(w){let v=await w.xRevRange(l,"+","-",{COUNT:1});v.length>0&&!Be(v[0].id,A)&&(A=v[0].id)}}catch{}}if(i.writeEvent({event:null,id:A===no?null:A,data:io}),Fi(i,{intervalMs:Yn,retry:qi,runtime:Bi}),h===null||o===void 0)return;await a.ready();let E=await o.getClient();if(E===void 0)throw new Error("redis client unavailable for the SSE catch-up");if(!await te(E,h)){i.writeRetry(ro),i.writeEvent({event:"resync-required",id:null,data:""}),i.close();return}P=!1;for(let w of L.splice(0))H(w)};return async({request:i,params:S})=>{let d,b=()=>{let m=new Headers;return d!==void 0&&m.append("Set-Cookie",d),m},h=m=>$i(m,{data:"",retryMs:ro,headers:b()});try{let m=await t(i,{failureRedirect:null});d=m.cookie;let{user:R}=m;if(!R)return h("auth-required");let M=await r.getUserIdByExternalId(R.id);if(!M)return h("forbidden");if(S.endpoint!=="updates")return new Response("Not Found",{status:404,headers:b()});let k=Hi(i,Vn);if(k!==null&&!jn(k))return s.warn(`[SSE:${M}] malformed resume cursor; asking the client to resync`),h("resync-required");let A=await n(i,"initial");return Ui({requestSignal:kt(i),headers:b(),onError:(P,L)=>s.error(`[SSE:${M}] ${L} failed:`,P),produce:P=>y(P,{request:i,internalUserId:M,cursor:k,initialScope:A})})}catch(m){if(m instanceof Response)throw m;let R=m instanceof Error?m:new Error(String(m));return s.error(`500 sse name=${R.name} message=${R.message}`),new Response("Internal Server Error",{status:500,headers:b()})}}};var Ji=(e,t)=>{let r=new Headers({"Content-Type":"application/json"});return t?.setCookie&&r.append("Set-Cookie",t.setCookie),new Response(JSON.stringify(e),{status:t?.status??200,headers:r})},Ki=Object.freeze({...st,route:"api",frameworkDataRefusal:({params:e})=>Qt(e.endpoint)&&Dt[e.endpoint]==="stream"?_t():null}),Gi=Object.freeze({...st,route:"action"});function Sr(e){vt(e);let{authenticate:t,service:r,encodeUserId:n,redis:o,sseReader:a,streamKey:l}=e,s={titleMaxLength:ue("service.titleMaxLength",r.titleMaxLength,1)},y=e.loginRedirectPath??"/auth/login",i=e.logger??se(3,"[DailyReportAPI]"),S=e.logger??se(3,"[DailyReportVisibility]"),d=e.logger??se(1,"[DailyReportSSE]"),b=e.logger??se(1,"[DailyReportAttachment]"),h=e.logger??se(2,"[DailyReportIsolation]"),m=e.logger??se(2,"[DailyReportAction]"),R=async(E,w="initial")=>{let v=e.resolveVisibleSourceTypes;if(!v)return fe.unrestricted("no visibility port injected: this deployment does not restrict by source type");try{let I=await v(E,{reason:w});return I==null?fe.unrestricted("visibility port returned null/undefined: this deployment opts out of source-type filtering"):fe.restrictTo(I)}catch(I){return S.error("resolveVisibleSourceTypes threw; failing closed (deny all)",I),fe.restrictTo([])}},M=async({request:E})=>{let{user:w,cookie:v}=await t(E,{failureRedirect:y}),I=new Headers;v&&I.append("Set-Cookie",v);let T=await r.getUserIdByExternalId(w.id),F=T?n(T):null;return{data:{user:w,userId:F},headers:I}},k={"business-date":async(E,w,v,I,T)=>{let F=E.searchParams.get("businessDate"),x=F===null?null:Ve(F);if(x===null)return ne(v,w,{error:{message:"Invalid business date"}},400);let q=it(E.searchParams.get("forceRefresh"));if(q===null)return ne(v,w,{error:{message:"Invalid forceRefresh"}},400);let W=await r.getDailyReportsByBusinessDateByExternalId(T,x,I.id,{forceRefresh:q});return ne(v,w,{businessDate:x,reports:W},200)},[St]:qn({service:r,logger:i}),report:async(E,w,v,I,T)=>{let F=Le(E.searchParams.get("reportHubId"));if(F===null)return ne(v,w,{error:{message:"Invalid reportHubId"}},400);let x=it(E.searchParams.get("forceRefresh"));if(x===null)return ne(v,w,{error:{message:"Invalid forceRefresh"}},400);let q=await r.getDailyReportDetailByIdByExternalId(T,F,I.id,{snapshot:!0,forceRefresh:x});return q?ne(v,w,{report:q},200):ne(v,w,{error:{message:"Report not found"}},404)}},A=async({request:E,params:w})=>{let{user:v,cookie:I}=await t(E,{failureRedirect:null}),T=I??null;if(!v)return ne(E,T,{error:{message:"Unauthorized"}},401);let F=w.endpoint;if(!Qt(F))return ne(E,T,{error:{message:"Unknown endpoint"}},404);let x=Br[Dt[F]];if(!x.includes(E.method)){let W=ne(E,T,{error:{message:"Method not allowed"}},405);return W.headers.set("Allow",x.join(", ")),W}let q=ee();try{let W=new URL(E.url),N=await R(E);return await k[F](W,T,E,v,N)}catch(W){let N=ee()-q,Q=W instanceof Error?W:new Error(String(W));return i.error(`500 endpoint=${F} elapsed=${N}ms name=${Q.name} code=${"code"in Q?Q.code:"N/A"} message=${Q.message}`),i.error("Stack:",Q.stack),ne(E,T,{error:{message:"Internal Server Error"}},500)}},P=Or(m),L=async(E,w,v,I)=>{let{clientTempId:T,operationTimestamp:F}=E;if(E.intent==="create"){let N=await r.createDailyReport(w,E.businessDate,T);return I({status:"OK",intent:"create",report:N,reportHubId:String(N.reportHubId),clientTempId:T})}let{reportHubId:x,businessDate:q}=E,W=async(N,Q,Me)=>{try{let ge=await Me(Q);return I({status:"OK",intent:N,updatedStatus:{isStarred:ge.isStarred,isRead:ge.isRead},operationTimestamp:F,reportHubId:String(x),clientTempId:T})}catch(ge){if(ge instanceof Error&&ge.message==="Not Found")return I({error:"Report not found"},{status:404});throw ge}};switch(E.intent){case"update":try{return await r.updateDailyReport(x,w,E.changes,T),I({status:"OK",intent:"update",reportHubId:String(x),clientTempId:T})}catch(N){if(N instanceof Error){if(N.message==="Unauthorized")return I({error:"Unauthorized"},{status:403});if(N.message==="Not Found")return I({error:"Report not found"},{status:404})}throw N}case"publish":try{let N=await r.publishDailyReport(x,w,T);return I({status:"OK",intent:"publish",reportHubId:String(x),clientTempId:T,report:N})}catch(N){if(N instanceof Error){if(N.message==="Unauthorized")return I({error:"Unauthorized"},{status:403});if(N.message==="Not Found")return I({error:"Report not found"},{status:404})}throw N}case"delete":try{return await r.deleteDailyReport(x,w,T),I({status:"OK",intent:"delete",reportHubId:String(x),clientTempId:T})}catch(N){if(N instanceof Error){if(N.message==="Unauthorized")return I({error:"Unauthorized"},{status:403});if(N.message==="Not Found")return I({error:"Report not found"},{status:404})}throw N}case"toggleStar":return await W("toggleStar",E.value,N=>r.setStarStatus(v,w,x,q,N,T));case"toggleRead":return await W("toggleRead",E.value,N=>r.setReadStatus(v,w,x,q,N,T));case"addComment":try{let N=await r.addComment(v,w,x,E.content,q,T),Q={...N,userId:N.userId};return I({status:"OK",intent:"addComment",newComment:Q,reportHubId:String(x),clientTempId:T})}catch(N){if(N instanceof Error){if(N.message==="Not Found")return I({error:"Report not found"},{status:404});if(N.message.startsWith("Comments are restricted"))return I({error:"Comments are restricted for this report"},{status:403})}throw N}case"deleteComment":try{return await r.deleteComment(v,w,x,E.commentId,q,T),I({status:"OK",reportHubId:String(x),deletedCommentId:String(E.commentId),clientTempId:T})}catch(N){if(N instanceof Error){if(N.message==="Unauthorized")return I({error:"Unauthorized"},{status:403});if(N.message==="Not Found")return I({error:"Comment not found"},{status:404})}throw N}}},U=async({request:E,params:w})=>{let{user:v,cookie:I}=await t(E,{failureRedirect:null}),T=(x,q)=>Ji(x,{...q,setCookie:I});if(!v)return T({error:"Unauthorized"},{status:401});let F=ee();try{if(w.endpoint!=="action")return T({error:"Unknown endpoint"},{status:404});let x=await Nr(E,s);if("refusal"in x){let{refusal:Q}=x;return Q.status===413&&P(Q.measuredBy),T({error:Q.error},{status:Q.status})}let{command:q}=x;if(q.intent==="clearCache"&&!e.enableDevCacheClear)return T({error:"Invalid intent"},{status:400});let W=await r.getUserIdByExternalId(v.id);if(!W)return T({error:"User not found"},{status:404});let N=await R(E);return q.intent==="clearCache"?(await r.clearCache(),T({status:"OK",intent:"clearCache"})):await L(q,W,N,T)}catch(x){if(x instanceof Response)throw x;let q=ee()-F,W=x instanceof Error?x:new Error(String(x));return i.error(`500 action elapsed=${q}ms name=${W.name} message=${W.message}`),i.error("Stack:",W.stack),T({error:"Internal Server Error"},{status:500})}},H=so({authenticate:t,service:r,resolveViewerScope:R,redis:o,sseReader:a,streamKey:l,logger:d}),z=Nn({authenticate:t,service:r,encodeUserId:n,resolveViewerScope:R,logger:b}),te=Yr(h),j=(E,w)=>async v=>{let I=$r(v.request)?E.frameworkDataRefusal(v):null;if(I!==null)throw I;return qr(v.request,E)?(te(E.route,v.request),E.crossSiteRejection()):w(v)};return{index:{loader:M},api:{loader:j(Ki,A),action:j(Gi,U)},sse:{loader:j(oo,H)},attachment:{loader:j(kn,z)}}}import{runWithTransactionRetry as Qi}from"@aiquants/mssql";import{aliasedTable as Ze,and as X,asc as Ft,desc as et,eq as C,getColumns as Zi,inArray as be,isNull as ce,or as tt,sql as lo}from"drizzle-orm";var He=e=>Zi(e),uo=At([]),le=(e,t)=>{if(!e)return null;let r=e instanceof Date?e:new Date(e);if(Number.isNaN(r.getTime()))return typeof e=="string"?e:null;let n=r.getFullYear(),o=n<0?`-${String(-n).padStart(4,"0")}`:String(n).padStart(4,"0"),a=String(r.getMonth()+1).padStart(2,"0"),l=String(r.getDate()).padStart(2,"0");if(t==="YYYY-MM-DD")return`${o}-${a}-${l}`;let s=String(r.getHours()).padStart(2,"0"),y=String(r.getMinutes()).padStart(2,"0"),i=String(r.getSeconds()).padStart(2,"0");return`${o}-${a}-${l} ${s}:${y}:${i}`},es=e=>{let{length:t}=e;if(typeof t=="number"&&Number.isSafeInteger(t)&&t>=1)return t;throw he("tables.hub.title","a character column with a declared length",t)},co=e=>e===""?null:e;function Ar(e){let{db:t,tables:r,userTable:n,resolveUserId:o,encodeUserId:a,redis:l,cache:s,epochs:y}=e,{hub:i,internal:S,comment:d,label:b,hubLabel:h,userStatus:m}=r,R=e.externalSources??[],M=e.draftLabelNames&&e.draftLabelNames.length>0?e.draftLabelNames:[e.draftLabelName??"\u4E0B\u66F8\u304D"],k=M[0]??"\u4E0B\u66F8\u304D",A=e.logger??se(1,"[DailyReportService]");vt(e);let P=Qr(e.attachments),L=es(i.title),U=c=>Qi(u=>t.transaction(p=>u(()=>c(p))),e.transactionRetry),H=e.idsTtlMs??18e4,z="daily-report:ids:epoch",te=e.businessDateTtlMs??3e5,j="daily-report:date-epoch:",E="daily-report:detail-epoch:",v=`${e.streamKey??"daily-report:sse-stream"}:v2`,I=e.streamMaxLen??1e4,T=c=>y.incrementEpoch(c),F=c=>to(i.sourceType,c),x=async(c,u)=>{let p=await l?.getClient();if(!p){A.warn(`[SSE] Redis client unavailable (${u})`);return}let f=JSON.stringify(c),_=Buffer.byteLength(f);if(_>6356992){A.warn(`[SSE] Event too large (${u}): ${_} bytes > ${6356992}; not published`);return}let O=ee();try{await p.xAdd(v,"*",{data:f},{TRIM:{strategy:"MAXLEN",strategyModifier:"~",threshold:I}});let D=ee()-O;D>1e3&&A.warn(`[SSE] Slow publish (${u}): ${D}ms`)}catch(D){A.error(`[SSE] Redis publish failed (${u}):`,D)}},q=async()=>{try{let c=await l?.getClient();if(c===void 0)return null;let[u]=await c.xRevRange(v,"+","-",{COUNT:1});return u===void 0?null:u.id}catch(c){return A.error("[DailyReportService] SSE stream anchor read failed",c),null}},W=c=>c==null||c===""?null:/^\d+$/.test(c)?a(Number(c)):c,N=()=>{let c={};for(let u of R)c[`ext_${u.sourceType}`]=He(u.table);return c},Q=c=>{let u=c;for(let p of R)u=u.leftJoin(p.table,X(C(i.sourceType,p.sourceType),C(i.sourceIdNum,p.idColumn)));return u},Me=(c,u,p)=>{let{hub:f,internal:_}=u,O=f.summary,D=[],B=null,$=null,Y=null,K=null,G=null,pe=null,qe=[],Ee=R.find(V=>V.sourceType===f.sourceType),Ye=Ee?u[`ext_${Ee.sourceType}`]:void 0;if(Ee&&Ye){let V=Ee.mapRow(Ye);V.content!==void 0&&(O=V.content),V.employeeName!==void 0&&(pe=V.employeeName),V.category!==void 0&&(B=V.category),V.creationCategory!==void 0&&($=V.creationCategory),V.visitTimeFrom!==void 0&&(Y=V.visitTimeFrom),V.visitTimeTo!==void 0&&(K=V.visitTimeTo),V.customerName!==void 0&&(G=V.customerName),V.interviewers!==void 0&&(D=V.interviewers),V.externalComments!==void 0&&(qe=V.externalComments)}else f.sourceType==="Internal"&&_&&(O=_.body);let _e=(u.labels??[]).map(V=>({id:V.id,name:V.name,color:V.color})),ae=u.postedCommentRows??[],Z=De(c.commentable,f.sourceType),ie=$?M.includes($):!1,jt=$e?.[0]??null;return ie&&jt&&!_e.some(V=>V.id===jt)&&_e.push({id:jt,name:k,color:null}),{reportHubId:f.id,date:le(f.businessDate,"YYYY-MM-DD"),author:u.creatorName??W(f.createdBy)??"",userId:f.userId?a(f.userId):"",sourceType:f.sourceType??"Internal",createdAt:le(f.createdAt,"YYYY-MM-DD HH:mm:ss"),updatedAt:le(f.updatedAt,"YYYY-MM-DD HH:mm:ss"),updatedBy:W(f.updatedBy),employeeName:pe??u.creatorName??W(f.createdBy),category:B,creationCategory:$,visitTimeFrom:Y,visitTimeTo:K,customerName:G,interviewers:D,subject:f.title,content:O,externalComments:Z?qe:[],isRead:u.isRead??!1,isStarred:u.isStarred??!1,labels:_e,postedComments:ae.filter(V=>Z||p!==void 0&&V.userId===p).map(V=>({...V,userId:a(V.userId),isMine:p?V.userId===p:!1})),attachments:u.attachments}},ge=async(c,u)=>{let p=Ze(h,"draft_label"),f=await Pe();return(await t.select({reportHubId:i.id,businessDate:i.businessDate,sourceType:i.sourceType}).from(i).leftJoin(p,X(C(p.hubId,i.id),be(p.labelId,f))).where(X(ce(i.deletedAt),tt(C(i.userId,u),ce(i.userId),ce(p.hubId)),F(c.visible))).orderBy(et(i.businessDate),et(i.id))).map(O=>({...O,businessDate:le(O.businessDate,"YYYY-MM-DD")}))},me=async(c,u,p)=>{let f=await rt(u);if(!f)return[];if(Ue(c.visible))return[];let _=Ze(h,"draft_label"),O=await Pe();return(await t.select({reportHubId:i.id,businessDate:i.businessDate,sourceType:i.sourceType}).top(p).from(i).leftJoin(_,X(C(_.hubId,i.id),be(_.labelId,O))).where(X(ce(i.deletedAt),tt(C(i.userId,f),ce(i.userId),ce(_.hubId)),F(c.visible))).orderBy(et(i.businessDate),et(i.id))).map(B=>({...B,businessDate:le(B.businessDate,"YYYY-MM-DD")}))},Co=async(c,u)=>{let p=await Q(t.select({hub:He(i),internal:He(S),creatorName:n.displayName,...N()}).from(i)).leftJoin(S,C(i.id,S.hubId)).leftJoin(n,C(i.userId,n.id)).where(X(C(i.businessDate,lo`${u}`),ce(i.deletedAt),F(c.visible))).orderBy(et(i.id)),f=await gt(p.map(_=>_.hub.id));return p.map(_=>Me(c,{..._,attachments:f.get(_.hub.id)??[]}))},ht=new Map,rt=async c=>{if(!e.disableUserIdCache&&ht.has(c))return ht.get(c)??null;let u=await o(c);return u!==null&&!e.disableUserIdCache&&ht.set(c,u),u},vo=async(c,u,{forceRefresh:p=!1,snapshot:f=!1,ttlMsOverride:_,onFetchStart:O}={})=>{let D=await rt(u);if(!D)return{items:[],streamAnchor:null,snapshot:uo};if(Ue(c.visible))return{items:[],streamAnchor:await q(),snapshot:uo};let B=Jn(D,yt(c)),[$]=await s.getOrFetch({cacheKey:B,fetcher:async()=>{let Y=await q(),K=await ge(c,D);if(!xr(K)){A.warn("[DailyReportService] ids array is not in stream order; re-sorting (check SQL ORDER BY vs compareIdsStreamOrder, or concurrent row movement during the scan)");let G=[...K].sort(Tt);return[{items:G,streamAnchor:Y,snapshot:At(G)}]}return[{items:K,streamAnchor:Y,snapshot:At(K)}]},onFetchStart:O,forceRefresh:p,snapshot:f,ttlMsOverride:_??H,epochKey:z,refreshAheadRatio:.5});if($===void 0)throw new Error("[DailyReportService] ids cache returned no record");return $},Mo=(c,u,{forceRefresh:p=!1,snapshot:f=!1,ttlMsOverride:_}={})=>{let O=ye(u);return O?Ue(c.visible)?Promise.resolve([]):s.getOrFetch({cacheKey:Kn(O,yt(c)),fetcher:()=>Co(c,O),forceRefresh:p,snapshot:f,ttlMsOverride:_??te}):Promise.resolve([])},$e=null,ft=async()=>($e!==null||($e=(await t.select({id:b.id}).from(b).where(be(b.name,M)).orderBy(b.id)).map(u=>u.id)),$e),Pe=async()=>{let c=await ft();return c.length>0?c:[-1]},qt=async()=>{let c=await ft();if(c.length===0)return null;let[u]=await t.select({id:b.id}).top(1).from(b).where(C(b.name,k));return u?.id??c[0]},Po=(c,u)=>u!=null?"absent":c!=null?"present":"unknown",gt=async c=>{let u=new Map,p=r.attachment;if(c.length===0||!p||P===null)return u;let f=P.idCodec,_=P.thumbnails!==null,O=await t.select({id:p.id,hubId:p.hubId,fileName:p.fileName,fileType:p.fileType,fileSize:p.fileSize,createdAt:p.createdAt,objectCheckedAt:p.objectCheckedAt,objectMissingAt:p.objectMissingAt}).from(p).where(be(p.hubId,c)).orderBy(Ft(p.createdAt),Ft(p.id));for(let D of O){let B=D.fileType?String(D.fileType):null,$=D.fileSize!=null?Number(D.fileSize):null,Y=Po(D.objectCheckedAt,D.objectMissingAt),K={id:f.encode(Number(D.id)),fileName:String(D.fileName),fileType:B,fileSize:$,createdAt:le(D.createdAt,"YYYY-MM-DD HH:mm:ss"),state:Y,hasThumbnail:_&&Y!=="absent"&&Pt({fileType:B,fileSize:$},P.maxBytes)},G=u.get(Number(D.hubId));G?G.push(K):u.set(Number(D.hubId),[K])}return u},Lo=async(c,u,p)=>{let f=r.attachment;if(!f||Ue(c.visible))return null;let _=await Pe(),O=Ze(h,"draft_label");return(await t.select({fileName:f.fileName,filePath:f.filePath,fileType:f.fileType,fileSize:f.fileSize}).top(1).from(f).innerJoin(i,C(i.id,f.hubId)).leftJoin(O,X(C(O.hubId,i.id),be(O.labelId,_))).where(X(C(f.id,u),ce(i.deletedAt),tt(C(i.userId,p),ce(O.hubId)),F(c.visible))))[0]??null},ko=async c=>{let u=r.attachment;if(!u)return;let p=new Date;try{await t.update(u).set({objectCheckedAt:p,objectMissingAt:p,updatedAt:p}).where(C(u.id,c))}catch(f){A.error("markAttachmentMissing failed",f)}},No=async c=>{let u=r.attachment;if(!u)return;let p=new Date;try{await t.update(u).set({objectCheckedAt:p,objectMissingAt:null,updatedAt:p}).where(C(u.id,c))}catch(f){A.error("markAttachmentPresent failed",f)}},Oo=async(c,u,p,{forceRefresh:f=!1,snapshot:_=!1,ttlMsOverride:O}={})=>{let D=await rt(p);if(!D)return[];let B=ye(u);if(!B)return[];if(Ue(c.visible))return[];let $=Gn(B,D,yt(c));return s.getOrFetch({cacheKey:$,fetcher:async()=>{let Y=await Pe(),K=Ze(h,"draft_label"),G=await Q(t.select({hub:He(i),internal:He(S),isRead:m.isRead,isStarred:m.isStarred,creatorName:n.displayName,...N()}).from(i)).leftJoin(S,C(i.id,S.hubId)).leftJoin(m,X(C(i.id,m.hubId),C(m.userId,D))).leftJoin(K,X(C(K.hubId,i.id),be(K.labelId,Y))).leftJoin(n,C(i.userId,n.id)).where(X(C(i.businessDate,lo`${B}`),ce(i.deletedAt),tt(C(i.userId,D),ce(K.hubId)),F(c.visible))).orderBy(et(i.id));if(G.length===0)return[];let pe=G.map(Z=>Z.hub.id),qe=await t.select({hubId:h.hubId,id:b.id,name:b.name,color:b.color}).from(h).innerJoin(b,C(h.labelId,b.id)).where(be(h.hubId,pe)),Ee=await t.select({hubId:d.hubId,id:d.id,body:d.body,createdAt:d.createdAt,userId:d.userId,userName:n.displayName}).from(d).leftJoin(n,C(d.userId,n.id)).where(be(d.hubId,pe)).orderBy(Ft(d.createdAt)),Ye=await gt(pe),_e=new Map,ae=new Map;for(let Z of qe){let ie=_e.get(Z.hubId);ie||(ie=[],_e.set(Z.hubId,ie)),ie.push({id:Z.id,name:Z.name,color:Z.color})}for(let Z of Ee){let ie=ae.get(Z.hubId);ie||(ie=[],ae.set(Z.hubId,ie)),ie.push({id:Z.id,content:Z.body,createdAt:le(Z.createdAt,"YYYY-MM-DD HH:mm:ss")||"",userId:Z.userId,userName:Z.userName||""})}return G.map(Z=>{let ie=Z.hub.id;return Me(c,{...Z,attachments:Ye.get(ie)??[],labels:_e.get(ie)||[],postedCommentRows:ae.get(ie)||[]},D)})},forceRefresh:f,snapshot:_,ttlMsOverride:O??te,epochKey:`${j}${B}`})},nt=async(c,u,p,{forceRefresh:f=!1,snapshot:_=!1,ttlMsOverride:O}={})=>{if(Ue(c.visible))return null;let D=Xn(u,p,yt(c));return(await s.getOrFetch({cacheKey:D,fetcher:async()=>{let $=await Pe(),Y=Ze(h,"draft_label"),K=await Q(t.select({hub:He(i),internal:He(S),isRead:m.isRead,isStarred:m.isStarred,creatorName:n.displayName,...N()}).from(i)).leftJoin(S,C(i.id,S.hubId)).leftJoin(m,X(C(i.id,m.hubId),C(m.userId,p))).leftJoin(Y,X(C(Y.hubId,i.id),be(Y.labelId,$))).leftJoin(n,C(i.userId,n.id)).where(X(C(i.id,u),ce(i.deletedAt),tt(C(i.userId,p),ce(Y.hubId)),F(c.visible)));if(K.length===0)return[];let G=K[0].hub.id,pe=await t.select({id:b.id,name:b.name,color:b.color}).from(h).innerJoin(b,C(h.labelId,b.id)).where(C(h.hubId,G)),qe=await t.select({id:d.id,body:d.body,createdAt:d.createdAt,userId:d.userId,userName:n.displayName}).from(d).leftJoin(n,C(d.userId,n.id)).where(C(d.hubId,G)).orderBy(Ft(d.createdAt)),Ee=await gt([G]),Ye=pe.map(ae=>({id:ae.id,name:ae.name,color:ae.color})),_e=qe.map(ae=>({id:ae.id,content:ae.body,createdAt:le(ae.createdAt,"YYYY-MM-DD HH:mm:ss")||"",userId:ae.userId,userName:ae.userName||""}));return[Me(c,{...K[0],attachments:Ee.get(G)??[],labels:Ye,postedCommentRows:_e},p)]},forceRefresh:f,snapshot:_,ttlMsOverride:O??te,epochKey:`${E}${u}`}))[0]??null},Bo=async(c,u,p,f={})=>{let _=await rt(p);return _?nt(c,u,_,f):null},Uo=async(c,u)=>{let p=await Pe(),f=Ze(h,"draft_label"),[_]=await t.select({sourceType:i.sourceType,deletedAt:i.deletedAt}).top(1).from(i).leftJoin(f,X(C(f.hubId,i.id),be(f.labelId,p))).where(X(C(i.id,c),tt(C(i.userId,u),ce(f.hubId))));return _??null},Yt=async(c,u,p)=>{let f=await Uo(u,p);if(!f||f.deletedAt||!De(c.visible,f.sourceType))throw new Error("Not Found")},Ho=async(c,u,p,f,_,O)=>{await Yt(c,p,u);let D=await t.select().top(1).from(m).where(X(C(m.hubId,p),C(m.userId,u))),B;if(D.length>0?D[0].isStarred!==_?B=(await t.update(m).set({isStarred:_,updatedAt:new Date,updatedBy:String(u)}).output().where(X(C(m.hubId,p),C(m.userId,u))))[0]:B=D[0]:B=(await t.insert(m).output().values({hubId:p,userId:u,isStarred:_,isRead:!1,createdAt:new Date,createdBy:String(u),updatedAt:new Date,updatedBy:String(u)}))[0],f){let $=ye(f);$&&(s.invalidatePrefix(Ge($,u)),await T(`${j}${$}`))}return s.invalidatePrefix(Ht(p,u)),await T(`${E}${p}`),await x(Bt.parse({type:"status-update",reportHubId:p,recipientRawUserId:u,statusType:"star",value:_,clientTempId:O}),"setStarStatus"),B},Fo=async(c,u,p,f,_,O)=>{await Yt(c,p,u);let D=await t.select().top(1).from(m).where(X(C(m.hubId,p),C(m.userId,u))),B;if(D.length>0?D[0].isRead!==_?B=(await t.update(m).set({isRead:_,updatedAt:new Date,updatedBy:String(u)}).output().where(X(C(m.hubId,p),C(m.userId,u))))[0]:B=D[0]:B=(await t.insert(m).output().values({hubId:p,userId:u,isRead:_,isStarred:!1,createdAt:new Date,createdBy:String(u),updatedAt:new Date,updatedBy:String(u)}))[0],f){let $=ye(f);$&&(s.invalidatePrefix(Ge($,u)),await T(`${j}${$}`))}return s.invalidatePrefix(Ht(p,u)),await T(`${E}${p}`),await x(Bt.parse({type:"status-update",reportHubId:p,recipientRawUserId:u,statusType:"read",value:_,clientTempId:O}),"setReadStatus"),B},Tr=async(c,u)=>{if(u===null)return;let p=await Pe(),[f]=await t.select({hubId:h.hubId}).top(1).from(h).where(X(C(h.hubId,c),be(h.labelId,p)));return f?u:void 0},$o=async(c,u,p,f,_,O)=>{let[D]=await t.select({sourceType:i.sourceType,deletedAt:i.deletedAt,userId:i.userId}).top(1).from(i).where(C(i.id,p));if(!D||D.deletedAt)throw new Error("Not Found");if(await Yt(c,p,u),!De(c.commentable,D.sourceType))throw new Error("Comments are restricted by the viewer's comment permission");if(D.sourceType.toLowerCase()!=="internal")throw new Error("Comments are restricted for external daily report sources");let B=await Tr(p,D.userId),[$]=await t.insert(d).output().values({hubId:p,userId:u,body:f,createdAt:new Date,createdBy:String(u),updatedAt:new Date,updatedBy:String(u)}),[Y]=await t.select({displayName:n.displayName}).top(1).from(n).where(C(n.id,u)),K=Y?.displayName??"";if(_){let pe=ye(_);pe&&(s.invalidatePrefix(dt(pe)),await T(`${j}${pe}`))}s.invalidatePrefix(Te(p)),await T(`${E}${p}`);let G={id:$.id,userId:a($.userId),userName:K,content:$.body,createdAt:le($.createdAt,"YYYY-MM-DD HH:mm:ss")??"",isMine:!0};return await x(mr.parse({type:"comment-add",reportHubId:p,comment:G,clientTempId:O,recipientRawUserId:B,sourceType:D.sourceType}),"addComment"),G},qo=async(c,u)=>await c.select().top(1).from(d).where(C(d.id,u)),Yo=async(c,u,p,f,_,O)=>{let D=await qo(t,f);if(D.length===0)throw new Error("Not Found");if(D[0].hubId!==p)throw new Error("Not Found");let[B]=await t.select({userId:i.userId,sourceType:i.sourceType}).top(1).from(i).where(C(i.id,D[0].hubId));if(!(B&&De(c.visible,B.sourceType)))throw new Error("Not Found");if(D[0].userId!==u)throw new Error("Unauthorized");let $=await Tr(p,B.userId);if(await t.delete(d).where(C(d.id,f)),_){let Y=ye(_);Y&&(s.invalidatePrefix(dt(Y)),await T(`${j}${Y}`))}s.invalidatePrefix(Te(p)),await T(`${E}${p}`),await x(pr.parse({type:"comment-delete",reportHubId:p,commentId:f,clientTempId:O,recipientRawUserId:$,sourceType:B?.sourceType}),"deleteComment")},Vo=async(c,u,p)=>{if(!bt(u))throw he("createDailyReport: businessDate","a business-date key in the canonical form YYYY-MM-DD naming a day from 0001-01-01 to 9999-12-31",u);A.info("createDailyReport called",{userId:c,businessDate:u});let[f]=await t.select({displayName:n.displayName}).from(n).where(C(n.id,c)),_=f?.displayName??a(c);try{let O=await U(async B=>{A.info("Starting transaction");let $=`internal-temp-${Date.now()}-${Math.random()}`,[Y]=await B.insert(i).output().values({sourceType:"Internal",sourceId:$,businessDate:new Date(`${u}T00:00:00Z`),userId:c,title:"(\u7121\u984C)",createdAt:new Date,createdBy:String(c),updatedAt:new Date,updatedBy:String(c)});await B.update(i).set({sourceId:String(Y.id)}).where(C(i.id,Y.id)),A.info("Hub created",Y),await B.insert(S).values({hubId:Y.id,body:"",createdAt:new Date,createdBy:String(c),updatedAt:new Date,updatedBy:String(c)}),A.info("Internal created"),A.info("Calling getDraftLabelId");let K=await qt();A.info("draftLabelId",K);let G=[];return K&&(await B.insert(h).values({hubId:Y.id,labelId:K,createdAt:new Date,createdBy:String(c)}),G.push({id:K,name:k,color:null})),A.info("Label assigned"),{reportHubId:Y.id,date:u,createdAt:le(Y.createdAt,"YYYY-MM-DD HH:mm:ss"),author:_,userId:a(c),sourceType:"Internal",employeeName:_,updatedBy:a(c),updatedAt:le(Y.updatedAt,"YYYY-MM-DD HH:mm:ss"),category:null,creationCategory:null,visitTimeFrom:null,visitTimeTo:null,customerName:null,interviewers:[],subject:Y.title,content:"",externalComments:[],isRead:!0,isStarred:!1,labels:G,postedComments:[],attachments:[]}});s.invalidatePrefix(Ge(u,c)),s.invalidatePrefix(Oe),s.invalidatePrefix(Rr(c)),await T(z),await T(`${j}${u}`);let D=await nt(fe.unrestricted("post-write self read: the writer always sees the row they just wrote"),O.reportHubId,c,{forceRefresh:!0});if(D){let B=await ft(),$=D.labels.some(Y=>B.includes(Y.id));await x(yr.parse({type:"report-create",reportHubId:D.reportHubId,report:D,clientTempId:p,recipientRawUserId:$?c:void 0}),"createDailyReport")}return D??O}catch(O){throw A.error("Error in createDailyReport",O),O}},Rt=async(c,u)=>await c.select().top(1).from(i).where(C(i.id,u)),Vt=async(c,u,p)=>{await c.update(i).set(p).where(C(i.id,u))},Dr=async(c,u,p)=>{await c.update(S).set(p).where(C(S.hubId,u))},_r=async(c,u,p)=>{await c.delete(h).where(X(C(h.hubId,u),C(h.labelId,p)))};return{streamKey:v,streamMaxLen:I,attachmentDelivery:P,titleMaxLength:L,clearCache:async()=>{s.clearAll(),ht.clear(),$e=null,y&&await T(z),A.info("[DailyReportService] Server-side DB/SQL caches cleared successfully.")},invalidateHubReadCaches:async(c,u)=>{s.invalidatePrefix(Oe),s.invalidatePrefix(Ne),await T(z);for(let p of new Set(c))s.invalidatePrefix(Te(p)),await T(`${E}${p}`);for(let p of new Set(u)){let f=ye(p);f&&await T(`${j}${f}`)}},getUserIdByExternalId:rt,getDailyReportIdsByExternalId:vo,getDailyReportIdsFirstPageByExternalId:me,readSseStreamAnchor:q,getDailyReportsByBusinessDate:Mo,getDailyReportsByBusinessDateByExternalId:Oo,getDailyReportDetailById:nt,getDailyReportDetailByIdByExternalId:Bo,getDraftLabelId:qt,getAttachmentsByHubIds:gt,getAttachmentForUser:Lo,markAttachmentMissing:ko,markAttachmentPresent:No,setStarStatus:Ho,setReadStatus:Fo,addComment:$o,deleteComment:Yo,createDailyReport:Vo,updateDailyReport:async(c,u,p,f)=>{let _=await Rt(t,c);if(!_.length||_[0].deletedAt)throw new Error("Not Found");if(_[0].userId!==u)throw new Error("Unauthorized");await U(async B=>{p.title!==void 0&&await Vt(B,c,{title:co(p.title),updatedAt:new Date,updatedBy:String(u)}),p.content!==void 0&&await Dr(B,c,{body:co(p.content),updatedAt:new Date,updatedBy:String(u)})}),s.invalidatePrefix(Te(c)),s.invalidatePrefix(Oe),await T(`${E}${c}`);let O=ye(le(_[0].businessDate,"YYYY-MM-DD"));O&&(s.invalidatePrefix(dt(O)),await T(`${j}${O}`));let D=await nt(fe.unrestricted("post-write self read: the writer always sees the row they just wrote"),c,u,{forceRefresh:!0});if(D){let B=await ft(),$=D.labels.some(Y=>B.includes(Y.id));await x(hr.parse({type:"report-update",reportHubId:D.reportHubId,report:D,clientTempId:f,recipientRawUserId:$?u:void 0}),"updateDailyReport")}},publishDailyReport:async(c,u,p)=>{let f=await Rt(t,c);if(!f.length)throw new Error("Not Found");if(f[0].userId!==u)throw new Error("Unauthorized");let _=await qt();if(!_)return null;if(await _r(t,c,_),s.invalidatePrefix(Te(c)),s.invalidatePrefix(Oe),s.invalidatePrefix(Ne),await T(z),f[0].businessDate){let B=ye(le(f[0].businessDate,"YYYY-MM-DD"));B&&await T(`${j}${B}`)}let O=ye(le(f[0].businessDate,"YYYY-MM-DD"));O&&s.invalidatePrefix(Ge(O,u));let D=await nt(fe.unrestricted("post-write self read: the writer always sees the row they just wrote"),c,u,{forceRefresh:!0});return D&&await x(fr.parse({type:"report-publish",reportHubId:D.reportHubId,report:D,clientTempId:p}),"publishDailyReport"),D??null},deleteDailyReport:async(c,u,p)=>{let f=await Rt(t,c);if(!f.length||f[0].deletedAt)throw new Error("Not Found");if(f[0].userId!==u)throw new Error("Unauthorized");if(await Vt(t,c,{deletedAt:new Date,deletedBy:String(u),updatedAt:new Date,updatedBy:String(u)}),s.invalidatePrefix(Te(c)),s.invalidatePrefix(Oe),s.invalidatePrefix(Ne),await T(z),f[0].businessDate){let _=ye(le(f[0].businessDate,"YYYY-MM-DD"));_&&await T(`${j}${_}`)}await x(gr.parse({type:"report-delete",reportHubId:c,clientTempId:p,sourceType:f[0].sourceType}),"deleteDailyReport")},findDailyReportHubById:Rt,updateDailyReportHub:Vt,updateDailyReportInternal:Dr,deleteDailyReportLabel:_r}}var ts=se(1,"[DailyReportExternalSource]"),rs=(e,t,r,n=ts)=>{if(!e)return[];try{let o=JSON.parse(e);return Array.isArray(o)?o.map(r).filter(a=>a!==null):(n.warn(`Unexpected ${t} format: not an array`),[])}catch(o){return n.warn(`Failed to parse ${t}:`,o),[]}};import{desc as mo,sql as ns}from"drizzle-orm";import{bigint as re,bit as po,date as os,datetime2 as oe,foreignKey as Se,index as ve,int as as,mssqlSchema as is,nvarchar as J,primaryKey as Fe,uniqueIndex as ss}from"drizzle-orm/mssql-core";function ls(e,t){let r=is(e),n=t.userTable,o=r.table("DailyReportHub",{id:re("id",{mode:"number"}).identity().notNull(),sourceType:J("source_type",{length:20}).notNull(),sourceId:J("source_id",{length:100}).notNull(),sourceIdNum:re("source_id_num",{mode:"number"}).generatedAlwaysAs(ns`TRY_CAST(source_id AS BIGINT)`),businessDate:os("business_date"),userId:re("user_id",{mode:"number"}),title:J("title",{length:200}),summary:J("summary",{length:"max"}),createdAt:oe("created_at").notNull(),createdBy:J("created_by",{length:50}).notNull(),updatedAt:oe("updated_at").notNull(),updatedBy:J("updated_by",{length:50}).notNull(),deletedAt:oe("deleted_at"),deletedBy:J("deleted_by",{length:50})},d=>[Fe({name:`${e}_DailyReportHub_pk`,columns:[d.id]}),Se({name:`${e}_DailyReportHub_user_id_fk`,columns:[d.userId],foreignColumns:[n.id]}),ve(`${e}_DailyReportHub_business_date_index`).on(d.businessDate),ve(`${e}_DailyReportHub_updated_at_index`).on(d.updatedAt),ve(`${e}_DailyReportHub_source_index`).on(d.sourceType,d.sourceId),ve(`${e}_DailyReportHub_user_id_index`).on(d.userId),ve(`${e}_DailyReportHub_business_date_id_index`).on(mo(d.businessDate),mo(d.id)),ve(`${e}_DailyReportHub_deleted_at_index`).on(d.deletedAt)]),a=r.table("DailyReportInternal",{hubId:re("hub_id",{mode:"number"}).notNull(),body:J("body",{length:"max"}),metadata:J("metadata",{length:"max"}),createdAt:oe("created_at").notNull(),createdBy:J("created_by",{length:50}).notNull(),updatedAt:oe("updated_at").notNull(),updatedBy:J("updated_by",{length:50}).notNull()},d=>[Fe({name:`${e}_DailyReportInternal_pk`,columns:[d.hubId]}),Se({name:`${e}_DailyReportInternal_hub_id_fk`,columns:[d.hubId],foreignColumns:[o.id]})]),l=r.table("DailyReportComment",{id:re("id",{mode:"number"}).identity().notNull(),hubId:re("hub_id",{mode:"number"}).notNull(),userId:re("user_id",{mode:"number"}).notNull(),body:J("body",{length:"max"}).notNull(),createdAt:oe("created_at").notNull(),createdBy:J("created_by",{length:50}).notNull(),updatedAt:oe("updated_at").notNull(),updatedBy:J("updated_by",{length:50}).notNull()},d=>[Fe({name:`${e}_DailyReportComment_pk`,columns:[d.id]}),Se({name:`${e}_DailyReportComment_hub_id_fk`,columns:[d.hubId],foreignColumns:[o.id]}),Se({name:`${e}_DailyReportComment_user_id_fk`,columns:[d.userId],foreignColumns:[n.id]}),ve(`${e}_DailyReportComment_hub_id_index`).on(d.hubId)]),s=r.table("DailyReportLabel",{id:re("id",{mode:"number"}).identity().notNull(),userId:re("user_id",{mode:"number"}),name:J("name",{length:50}).notNull(),color:J("color",{length:20}),sortOrder:as("sort_order"),createdAt:oe("created_at").notNull(),createdBy:J("created_by",{length:50}).notNull(),updatedAt:oe("updated_at").notNull(),updatedBy:J("updated_by",{length:50}).notNull()},d=>[Fe({name:`${e}_DailyReportLabel_pk`,columns:[d.id]}),Se({name:`${e}_DailyReportLabel_user_id_fk`,columns:[d.userId],foreignColumns:[n.id]})]),y=r.table("DailyReportHub_Label",{hubId:re("hub_id",{mode:"number"}).notNull(),labelId:re("label_id",{mode:"number"}).notNull(),createdAt:oe("created_at").notNull(),createdBy:J("created_by",{length:50}).notNull()},d=>[Fe({name:`${e}_DailyReportHub_Label_pk`,columns:[d.hubId,d.labelId]}),Se({name:`${e}_DailyReportHub_Label_hub_id_fk`,columns:[d.hubId],foreignColumns:[o.id]}),Se({name:`${e}_DailyReportHub_Label_label_id_fk`,columns:[d.labelId],foreignColumns:[s.id]})]),i=r.table("DailyReportUserStatus",{hubId:re("hub_id",{mode:"number"}).notNull(),userId:re("user_id",{mode:"number"}).notNull(),isRead:po("is_read").default(!1).notNull(),isStarred:po("is_starred").default(!1).notNull(),createdAt:oe("created_at").notNull(),createdBy:J("created_by",{length:50}).notNull(),updatedAt:oe("updated_at").notNull(),updatedBy:J("updated_by",{length:50}).notNull()},d=>[Fe({name:`${e}_DailyReportUserStatus_pk`,columns:[d.hubId,d.userId]}),Se({name:`${e}_DailyReportUserStatus_hub_id_fk`,columns:[d.hubId],foreignColumns:[o.id]}),Se({name:`${e}_DailyReportUserStatus_user_id_fk`,columns:[d.userId],foreignColumns:[n.id]})]),S=r.table("DailyReportAttachment",{id:re("id",{mode:"number"}).identity().notNull(),hubId:re("hub_id",{mode:"number"}).notNull(),uploadedBy:re("uploaded_by",{mode:"number"}),sourceKey:J("source_key",{length:200}).notNull(),fileName:J("file_name",{length:255}).notNull(),filePath:J("file_path",{length:"max"}).notNull(),fileType:J("file_type",{length:100}),fileSize:re("file_size",{mode:"number"}),objectCheckedAt:oe("object_checked_at"),objectMissingAt:oe("object_missing_at"),createdAt:oe("created_at").notNull(),createdBy:J("created_by",{length:50}).notNull(),updatedAt:oe("updated_at").notNull(),updatedBy:J("updated_by",{length:50}).notNull()},d=>[Fe({name:`${e}_DailyReportAttachment_pk`,columns:[d.id]}),Se({name:`${e}_DailyReportAttachment_hub_id_fk`,columns:[d.hubId],foreignColumns:[o.id]}),Se({name:`${e}_DailyReportAttachment_uploaded_by_fk`,columns:[d.uploadedBy],foreignColumns:[n.id]}),ss(`${e}_DailyReportAttachment_source_unique`).on(d.hubId,d.sourceKey),ve(`${e}_DailyReportAttachment_hub_id_index`).on(d.hubId,d.createdAt)]);return{hub:o,internal:a,comment:l,attachment:S,label:s,hubLabel:y,userStatus:i}}var us=5e7,_o=2e8,cs=1,wo=Object.freeze({fixedBytes:4*1024*1024,pipelineRows:2048,wholeImageBuffer:Object.freeze({"jpeg-single-scan":Object.freeze({kind:"none"}),"jpeg-multi-scan":Object.freeze({kind:"jpeg-coefficients"}),png:Object.freeze({kind:"none"}),"png-interlaced":Object.freeze({kind:"decoded-raster"}),gif:Object.freeze({kind:"canvas",bytesPerPixel:4}),"webp-lossy":Object.freeze({kind:"none"}),"webp-lossy-alpha":Object.freeze({kind:"canvas",bytesPerPixel:5}),"webp-lossless":Object.freeze({kind:"canvas",bytesPerPixel:4}),"webp-animated":Object.freeze({kind:"canvas",bytesPerPixel:9})})}),yo=125,ho=4,fo=16,go=50,Ro=2,$t=Object.freeze({renderMs:de.renderMs,nanosecondsPerBlockVisit:yo,margin:ho,maxBlockVisits:Math.floor(de.renderMs*1e6/(yo*ho)),walkBudgetMs:fo,nanosecondsPerWalkStep:go,walkMargin:Ro,maxWalkSteps:Math.floor(fo*1e6/(go*Ro))}),ds=new Map([["uchar",1],["char",1],["ushort",2],["short",2],["uint",4],["int",4],["float",4],["complex",8],["double",8]]),bo=75,So=4,Ao="#ffffff",ms=1,ps={png:"VipsForeignLoadPngBuffer",jpeg:"VipsForeignLoadJpegBuffer",gif:"VipsForeignLoadNsgifBuffer",webp:"VipsForeignLoadWebpBuffer"},ys=[/out of memory/i,/insufficient memory/i,/memory allocation|allocation failed/i,/(?:cannot|could not|unable to|failed to) allocate/i,/picture memory error/i,/unable to create thread|error creating thread|resource temporarily unavailable/i,/too many open files|no space left on device/i,/\b(?:ENOMEM|EAGAIN|EMFILE|ENFILE|ENOSPC)\b/],To=Object.freeze({ok:!1,reason:"failed"}),Do=Object.freeze({ok:!1,reason:"unsupported"}),Eo=e=>({layout:e.multiScan?"jpeg-multi-scan":"jpeg-single-scan",coefficientBytes:gn(e)}),Io=(e,t)=>{switch(t){case"jpeg":{let r=ar(e);return r===null?null:Eo(r)}case"png":{let r=Sn(e);return r===null?null:{layout:r?"png-interlaced":"png",coefficientBytes:0}}case"gif":return{layout:"gif",coefficientBytes:0};case"webp":{let r=An(e,$t.maxWalkSteps);return r===null?null:{layout:`webp-${r}`,coefficientBytes:0}}}},xo=(e,t)=>{let r=ds.get(t.depth);if(r===void 0)return null;let n=t.channels*r,o=wo,a=o.wholeImageBuffer[e.layout];return(a.kind==="none"?0:a.kind==="decoded-raster"?t.width*t.height*n:a.kind==="jpeg-coefficients"?e.coefficientBytes:t.width*t.height*a.bytesPerPixel)+o.pipelineRows*t.width*n+o.fixedBytes},hs=(e,t,r)=>{let n=Io(e,t);return n===null?null:xo(n,r)},fs=e=>e!==null&&e<=_o,gs=(e,t)=>{if(t!=="jpeg")return Io(e,t);let r=Rn(e,$t);return r===null||r.blockVisits>$t.maxBlockVisits?null:Eo(r.header)},Rs=e=>{let t=e instanceof Error?e.message:"";return ys.some(r=>r.test(t))?"failed":"unsupported"},bs=e=>{e.cache(!1),e.concurrency(cs),e.block({operation:["VipsForeignLoad"]}),e.unblock({operation:Object.values(ps)});let t=async(n,o,a,l,s)=>{let y=gs(n,o);if(y===null)return Do;try{let i=e(n,{limitInputPixels:us,animated:!1});if(!fs(xo(y,await i.metadata())))return Do;if(s.aborted)return To;let S=await i.rotate().resize({width:a,height:l,fit:"inside",withoutEnlargement:!0}).flatten({background:Ao}).webp({quality:bo,effort:So}).toBuffer();return{ok:!0,bytes:new Uint8Array(S),contentType:"image/webp"}}catch(i){return{ok:!1,reason:Rs(i)}}},r=async(n,{format:o,maxWidth:a,maxHeight:l,signal:s})=>s.aborted?To:t(n,o,a,l,s);return{id:`sharp-${e.versions.sharp}/vips-${e.versions.vips}/webp-q${bo}-e${So}/flatten-${Ao}/v${ms}`,render:r}};function pc(e){e.redis||(e.logger??console).warn("[DailyReport] redis provider is not injected: cross-worker cache invalidation is disabled (staleness is bounded only by TTL) and SSE publishing is skipped.");let t=Jt(e.redis),r=new at({defaultTtlMs:e.cacheDefaultTtlMs??6e4},t),n=Ar({...e,cache:r,epochs:t}),o=new mt({redis:e.redis,streamKey:n.streamKey,cache:r,logger:e.logger}),a=Sr({authenticate:e.authenticate,resolveVisibleSourceTypes:e.resolveVisibleSourceTypes,service:n,encodeUserId:e.encodeUserId,redis:e.redis,sseReader:o,streamKey:n.streamKey,loginRedirectPath:e.loginRedirectPath,enableDevCacheClear:e.enableDevCacheClear,logger:e.logger});return{service:n,cache:r,epochs:t,sseReader:o,streamKey:n.streamKey,knownSourceTypes:[...new Set(["Internal",...(e.externalSources??[]).map(l=>l.sourceType)])],...a}}export{sr as DAILY_REPORT_ATTACHMENT_THUMBNAIL_MAX_OUTPUT_BYTES,ir as DAILY_REPORT_ATTACHMENT_THUMBNAIL_OUTPUT_MEDIA_TYPES,_o as DAILY_REPORT_SHARP_THUMBNAIL_DECODE_BUDGET_BYTES,$t as DAILY_REPORT_SHARP_THUMBNAIL_DECODE_WORK_MODEL,wo as DAILY_REPORT_SHARP_THUMBNAIL_WORKING_SET_MODEL,br as DAILY_REPORT_SSE_CATCH_UP_BATCH,ao as DAILY_REPORT_SSE_VISIBILITY_REFRESH_MS,mt as DailyReportSseReader,fe as DailyReportViewerScope,at as SqlResultCache,Sr as createDailyReportHandlers,pc as createDailyReportServer,Ar as createDailyReportService,Jt as createEpochStore,bs as createSharpThumbnailRenderer,ls as defineDailyReportSchema,ut as generateETag,Be as isStreamIdLte,ne as jsonResponseWithETag,hs as predictSharpThumbnailWorkingSetBytes,rs as transformJsonArray};
+var kr=e=>{throw TypeError(e)};var Br=(e,t,r)=>t.has(e)||kr("Cannot "+r);var ft=(e,t,r)=>(Br(e,t,"read from private field"),r?r.call(e):t.get(e)),rr=(e,t,r)=>t.has(e)?kr("Cannot add the same private member more than once"):t instanceof WeakSet?t.add(e):t.set(e,r),nr=(e,t,r,n)=>(Br(e,t,"write to private field"),n?n.call(e,r):t.set(e,r),r);var ae=()=>Math.floor(performance.now());var or=e=>({async getEpoch(t){try{let r=await e?.getClient();if(!r)return null;let n=await r.get(t);return n?Number(n):0}catch{return null}},async incrementEpoch(t){try{let r=await e?.getClient();if(!r)return;await r.incr(t)}catch{}}}),ht=(e,t)=>t?e.map(r=>structuredClone(r)):e,Rt=class{constructor(t,r){this.config=t;this.epochStore=r;this.buckets=new Map;this.inFlight=new Map;this.forcedFetches=new Map;this.maybeRefreshAhead=t=>{let r=t.refreshAheadRatio;if(r===void 0)return;let{cacheKey:n}=t,o=this.buckets.get(n);if(!o)return;let a=t.ttlMsOverride??this.config.defaultTtlMs;if(a-(o.expireAt-ae())<a*r||this.inFlight.has(n))return;let l;l=(async()=>{let p=t.epochKey?await this.epochStore.getEpoch(t.epochKey):null,s=await t.fetcher();return this.inFlight.get(n)===l&&this.buckets.set(n,{records:s,expireAt:ae()+a,epoch:p}),s})(),this.inFlight.set(n,l),l.catch(()=>{}).finally(()=>{this.inFlight.get(n)===l&&this.inFlight.delete(n)})};this.startFetch=(t,r)=>{let{cacheKey:n}=t,o;o=(async()=>{let i=t.epochKey?await this.epochStore.getEpoch(t.epochKey):null;for(let p of r)p();let l=await t.fetcher();if(this.inFlight.get(n)===o){let p=ae()+(t.ttlMsOverride??this.config.defaultTtlMs);this.buckets.set(n,{records:l,expireAt:p,epoch:i}),this.buckets.size>500&&this.cleanExpired()}return l})(),this.inFlight.set(n,o);let a=()=>{this.inFlight.get(n)===o&&this.inFlight.delete(n)};return o.then(a,a),o};this.forcedFetch=t=>{let{cacheKey:r}=t,n=t.onFetchStart===void 0?[]:[t.onFetchStart],o=this.forcedFetches.get(r);if(o===void 0)return this.runForcedFetch(t,n);if(o.pending===null){let a=[],i=()=>this.runForcedFetch(t,a);o.pending={promise:o.running.then(i,i),onFetchStarts:a}}return o.pending.onFetchStarts.push(...n),o.pending.promise};this.runForcedFetch=(t,r)=>{let{cacheKey:n}=t,o=this.startFetch(t,r);this.forcedFetches.set(n,{running:o,pending:null});let a=()=>{let i=this.forcedFetches.get(n);i?.running===o&&i.pending===null&&this.forcedFetches.delete(n)};return o.then(a,a),o};this.getOrFetch=async t=>{let{cacheKey:r,forceRefresh:n,snapshot:o}=t;if(n)return this.buckets.delete(r),ht(await this.forcedFetch(t),o);let a=this.buckets.get(r);if(a&&a.expireAt>ae())if(t.epochKey){let l=await this.epochStore.getEpoch(t.epochKey);if(l===null||a.epoch===l)return this.maybeRefreshAhead(t),ht(a.records,o);this.buckets.delete(r)}else return this.maybeRefreshAhead(t),ht(a.records,o);let i=this.inFlight.get(r);return ht(i!==void 0?await i:await this.startFetch(t,t.onFetchStart===void 0?[]:[t.onFetchStart]),o)};this.clearAll=()=>{this.buckets.clear(),this.inFlight.clear()};this.invalidatePrefix=t=>{for(let r of this.buckets.keys())r.startsWith(t)&&this.buckets.delete(r);for(let r of this.inFlight.keys())r.startsWith(t)&&this.inFlight.delete(r)}}cleanExpired(){let t=ae();for(let[r,n]of this.buckets.entries())n.expireAt<=t&&this.buckets.delete(r)}};var Ur="ids-stream";var Mt=e=>{let t=2166136261,r=-624069552;for(let n of e){let o=n.reportHubId;t^=o&255,t=Math.imul(t,16777619),t^=o>>>8&255,t=Math.imul(t,16777619),t^=o>>>16&255,t=Math.imul(t,16777619),t^=o>>>24&255,t=Math.imul(t,16777619),r^=o>>>24&255,r=Math.imul(r,16777619),r^=o>>>16&255,r=Math.imul(r,16777619),r^=o>>>8&255,r=Math.imul(r,16777619),r^=o&255,r=Math.imul(r,16777619);let a=n.businessDate;if(a===null)t^=1,t=Math.imul(t,16777619),r^=1,r=Math.imul(r,16777619);else for(let i=0;i<a.length;i++){let l=a.charCodeAt(i);t^=l&255,t=Math.imul(t,16777619),r^=l&255,r=Math.imul(r,16777619)}}return t^=e.length,t=Math.imul(t,16777619),r^=e.length,r=Math.imul(r,16777619),((t>>>0).toString(16).padStart(8,"0")+(r>>>0).toString(16).padStart(8,"0")).replace(/^0+(?=.)/,"")},vt=(e,t)=>e.businessDate!==t.businessDate?e.businessDate===null?1:t.businessDate===null||e.businessDate>t.businessDate?-1:1:t.reportHubId-e.reportHubId,Fr=e=>{for(let t=1;t<e.length;t++)if(vt(e[t-1],e[t])>0)return!1;return!0},Hr=(e,t)=>{let r=e.findIndex(n=>vt({businessDate:n.businessDate,reportHubId:n.reportHubId},t)>0);return r===-1?e.length:r};var Ae=Object.freeze({businessDate:"business-date",idsStream:Ur,report:"report",action:"action"}),Ce=Object.freeze({businessDate:"businessDate",reportHubId:"reportHubId",forceRefresh:"forceRefresh",cursorReportHubId:"cursor_report_hub_id",cursorBusinessDate:"cursor_business_date",cursorSnapshot:"cursor_snapshot"});var ca=/^(\d{4})([-/])(\d{2})\2(\d{2})$/;var $r=e=>e<10?`0${e}`:`${e}`,da=e=>{if(Number.isNaN(e.getTime()))return null;let t=e.getFullYear(),r=$r(e.getMonth()+1),n=$r(e.getDate());return`${t}-${r}-${n}`},nt=e=>{let t=ca.exec(e);if(t===null)return null;let[,r,,n,o]=t,a=Number(r),i=Number(n),l=Number(o);if(a<1)return null;let p=new Date(0);return p.setUTCFullYear(a,i-1,l),p.getUTCFullYear()!==a||p.getUTCMonth()!==i-1||p.getUTCDate()!==l?null:`${r}-${n}-${o}`},Lt=e=>nt(e)===e;var Te=e=>e==null?null:e instanceof Date?da(e):nt(e);var ma=e=>typeof e=="string"?JSON.stringify(e):typeof e=="number"||typeof e=="boolean"||e===null||e===void 0?String(e):Array.isArray(e)?"array":typeof e,Re=(e,t,r)=>new RangeError(`[daily-report] ${e} must be ${t}; got ${ma(r)}`),ot=(e,t)=>new TypeError(`[daily-report] ${e} must be ${t}`);var de=(e,t,r)=>{if(typeof t=="number"&&Number.isSafeInteger(t)&&t>=r)return t;throw Re(e,`an integer >= ${r}`,t)},qe=(e,t,r,n)=>t===void 0?n:de(e,t,r);var fe=(e,t,r=console)=>{let n=o=>typeof o=="string"?[`${t} ${o}`]:[t,o];return{debug:(o,...a)=>{e<=0&&r.debug(...n(o),...a)},info:(o,...a)=>{e<=1&&r.info(...n(o),...a)},warn:(o,...a)=>{e<=2&&r.warn(...n(o),...a)},error:(o,...a)=>{e<=3&&r.error(...n(o),...a)}}};import{z as pa}from"zod";var Ot=e=>Number.isSafeInteger(e)&&e>0,se=pa.number().int().positive().max(Number.MAX_SAFE_INTEGER);var ya=/^[1-9][0-9]*$/,fa=/^(?:0|[1-9][0-9]*)$/,je=e=>{if(e===null||!ya.test(e))return null;let t=Number(e);return Ot(t)?t:null},ar=e=>{if(e===null||!fa.test(e))return null;let t=Number(e);return Number.isSafeInteger(t)?t:null},ir=e=>e==="true"?!0:e==="false"?!1:null,gt=e=>e===null?!1:ir(e);import{z as Tl}from"zod";var Nt=/^(?:[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}|-[1-9][0-9]{0,15})$/;import{z as E}from"zod";var Yr=15e3,Vr="lastEventId",ha=/^\d{1,15}-\d{1,15}$/,qr=e=>ha.test(e),Ra=E.object({name:E.string().nullish(),affiliation:E.string().nullish()}),ga=E.object({name:E.string().nullish(),text:E.string().nullish(),color:E.string().nullish()}),ba=E.object({id:se,name:E.string().nullish(),color:E.string().nullish()}),jr=E.object({id:se,userId:E.string().nullish(),userName:E.string().nullish(),content:E.string().nullish(),createdAt:E.string().nullish(),isMine:E.boolean()}),Sa=E.object({id:E.string(),fileName:E.string(),fileType:E.string().nullable(),fileSize:E.number().nullable(),createdAt:E.string().nullable(),state:E.enum(["present","absent","unknown"]),hasThumbnail:E.boolean().default(!1)}),sr=E.object({reportHubId:se,date:E.string().nullish(),createdAt:E.string().nullish(),author:E.string().nullish(),userId:E.string().nullish(),sourceType:E.string().nullish(),employeeName:E.string().nullish(),updatedBy:E.string().nullish(),updatedAt:E.string().nullish(),category:E.string().nullish(),creationCategory:E.string().nullish(),visitTimeFrom:E.string().nullish(),visitTimeTo:E.string().nullish(),customerName:E.string().nullish(),interviewers:E.array(Ra),subject:E.string().nullish(),content:E.string().nullish(),externalComments:E.array(ga),isRead:E.boolean(),isStarred:E.boolean(),labels:E.array(ba),postedComments:E.array(jr),attachments:E.array(Sa).default([])}),ze=E.string().regex(Nt),Aa=E.object({type:E.literal("connected")}),kt=E.object({type:E.literal("status-update"),reportHubId:se,statusType:E.enum(["star","read"]),value:E.boolean(),clientTempId:ze,recipientRawUserId:se.optional()}),lr=E.string().optional(),ur=E.object({type:E.literal("comment-add"),reportHubId:se,comment:jr,clientTempId:ze,recipientRawUserId:se.optional(),sourceType:lr}),cr=E.object({type:E.literal("comment-delete"),reportHubId:se,commentId:se,clientTempId:ze,recipientRawUserId:se.optional(),sourceType:lr}),dr=E.object({type:E.literal("report-create"),reportHubId:se,report:sr,clientTempId:ze,recipientRawUserId:se.optional()}),mr=E.object({type:E.literal("report-update"),reportHubId:se,report:sr,clientTempId:ze,recipientRawUserId:se.optional()}),pr=E.object({type:E.literal("report-publish"),reportHubId:se,report:sr,clientTempId:ze,recipientRawUserId:se.optional()}),yr=E.object({type:E.literal("report-delete"),reportHubId:se,clientTempId:ze,sourceType:lr}),zr=E.discriminatedUnion("type",[Aa,kt,ur,cr,dr,mr,pr,yr]);var De=Object.freeze({intent:"intent",clientTempId:"clientTempId",businessDate:"businessDate",operationTimestamp:"operationTimestamp",reportHubId:"reportHubId",title:"title",content:"content",isStarred:"isStarred",isRead:"isRead",commentId:"commentId"});var Bt=Math.max(1,Math.floor(10.556701030927835));var Ee=(e,t)=>{let r=setTimeout(e,t);return r.unref?.(),r};var Ue=e=>{let{windowMs:t,tallies:r,writeSuppressed:n}=e,o=new Map,a=i=>{let l={since:new Date().toISOString(),count:0,tallies:Object.fromEntries(r.map(s=>[s,0]))};o.set(i,l),Ee(()=>{o.delete(i),l.count>0&&n(i,l)},t)};return{record:(i,l,p)=>{let s=o.get(i);if(s!==void 0){s.count+=1,s.tallies[l]+=1;return}p(),a(i)}}};var fr=e=>e!==null&&Nt.test(e)?e:null,Wr=e=>{let t=new URLSearchParams;for(let[r,n]of e){if(typeof n!="string")return null;t.append(r,n)}return t};var Kr=Object.freeze({status:400,error:"Invalid form"}),Jr=e=>({status:413,error:"Form too large",measuredBy:e}),Ta=(e,t,r)=>{let n=0;return e.pipeThrough(new TransformStream({transform(o,a){if(n+=o.byteLength,n>t){r(),a.error(new Error(`action form body exceeds ${t} bytes`));return}a.enqueue(o)}}))},Da=async e=>{let t=ar(e.headers.get("Content-Length"));if(t!==null&&t>1048576)return{refusal:Jr("declared")};let r=!1,n=e.body===null?null:Ta(e.body,1048576,()=>{r=!0}),o=new Headers,a=e.headers.get("Content-Type");a!==null&&o.set("Content-Type",a);let i;try{i=await new Response(n,{headers:o}).formData()}catch{return{refusal:r?Jr("counted"):Kr}}let l=Wr(i);return l===null?{refusal:Kr}:{fields:l}},Qr=(e,t)=>(r,n)=>{let o=r.get(t);if(o===null)return{error:`${t} required`};let a=ir(o);return a===null?{error:`Invalid ${t}`}:{command:{...n,intent:e,value:a}}},Zr=Object.freeze({update:(e,t,r)=>{let n=e.get(De.title),o=e.get(De.content);if(n!==null&&n.length>r.titleMaxLength)return{error:"Invalid title"};let a={};return n!==null&&(a.title=n),o!==null&&(a.content=o),{command:{...t,intent:"update",changes:a}}},publish:(e,t)=>({command:{...t,intent:"publish"}}),delete:(e,t)=>({command:{...t,intent:"delete"}}),toggleStar:Qr("toggleStar",De.isStarred),toggleRead:Qr("toggleRead",De.isRead),addComment:(e,t)=>{let r=e.get(De.content);return r?{command:{...t,intent:"addComment",content:r}}:{error:"Content required"}},deleteComment:(e,t)=>{let r=je(e.get(De.commentId));return r===null?{error:"Invalid commentId"}:{command:{...t,intent:"deleteComment",commentId:r}}}}),_a=e=>Object.hasOwn(Zr,e),Ea=(e,t)=>{let r=e.get(De.intent),n=e.get(De.businessDate),o=n===null?null:nt(n);if(n!==null&&o===null)return{error:"Invalid businessDate"};let a=e.get(De.operationTimestamp),i=ar(a);if(a!==null&&i===null)return{error:"Invalid operationTimestamp"};if(r==="clearCache")return{command:{intent:r}};let l=e.get(De.clientTempId);if(!l)return{error:"clientTempId required"};let p=fr(l);if(p===null)return{error:"Invalid clientTempId"};if(r==="create")return o===null?{error:"businessDate required"}:{command:{intent:r,clientTempId:p,businessDate:o,operationTimestamp:i}};let s=je(e.get(De.reportHubId));return s===null?{error:"Invalid reportHubId"}:r===null||!_a(r)?{error:"Invalid intent"}:Zr[r](e,{clientTempId:p,businessDate:o,operationTimestamp:i,reportHubId:s},t)},en=async(e,t)=>{let r=await Da(e);if("refusal"in r)return r;let n=Ea(r.fields,t);return"error"in n?{refusal:{status:400,error:n.error}}:n},Ia=6e4,wa="form_too_large",Xr=["declared","counted"],tn=e=>{let t=Ue({windowMs:Ia,tallies:Xr,writeSuppressed:(r,{count:n,since:o,tallies:a})=>{e.warn(`form_too_large_suppressed count=${n} since=${o} measured=${Xr.map(i=>`${i}:${a[i]}`).join(",")}`)}});return r=>{let n=()=>{e.warn(`413 action reason=form_too_large measured=${r} limit=${1048576}`)};t.record(wa,r,n)}};var bt=Object.freeze({[Ae.businessDate]:"json",[Ae.idsStream]:"stream",[Ae.report]:"json"}),rn=Object.freeze({json:Object.freeze(["GET"]),stream:Object.freeze(["GET","HEAD"])}),hr=e=>e!==void 0&&Object.hasOwn(bt,e);var Rr=Object.freeze({tile:Object.freeze({maxWidth:480,maxHeight:320})}),nn=e=>Object.hasOwn(Rr,e);var xa="download",Ca="thumbnail",Pa="1";var gr=e=>{let t=e.getAll(Ca),r=e.getAll(xa);if(t.length>0&&r.length>0)return{kind:"invalid",reason:"conflict"};if(t.length>0){let[n]=t;return t.length===1&&nn(n)?{kind:"thumbnail",variant:n}:{kind:"invalid",reason:"thumbnail_variant"}}return r.length>0?r.length===1&&r[0]===Pa?{kind:"download"}:{kind:"invalid",reason:"download_value"}:{kind:"inline"}};var Sr="Cross-site request rejected",Ma="Not Found",va=new Set(["same-origin","none"]),La=new Set(["GET","HEAD","OPTIONS"]),on=["api","action","sse","attachment"],an=(e,t)=>new Response(JSON.stringify({error:{message:t}}),{status:e,headers:{"Content-Type":"application/json","Cache-Control":"no-store","X-Content-Type-Options":"nosniff"}}),Oa=()=>an(403,Sr),Ut=()=>an(404,Ma),St=Object.freeze({navigable:()=>!1,frameworkDataRefusal:()=>null,crossSiteRejection:Oa}),sn=e=>new URL(e.url).pathname.endsWith(".data"),Na=e=>{let t=e.headers.get("Origin");return t===null?!0:URL.canParse(t)&&new URL(t).host===new URL(e.url).host},ln=(e,t)=>{let r=e.headers.get("Sec-Fetch-Site");return r===null?!(La.has(e.method)||Na(e)):va.has(r)?!1:!(e.method==="GET"&&e.headers.get("Sec-Fetch-Mode")==="navigate"&&e.headers.get("Sec-Fetch-Dest")==="document"&&t.navigable(e))},ka=6e4,Ba="refusals",Ua=32,Fa=/^[a-z-]+$/,br=e=>{if(e===null)return"-";let t=e.slice(0,Ua);return Fa.test(t)&&t===e?e:JSON.stringify(t)},un=e=>{let t=Ue({windowMs:ka,tallies:on,writeSuppressed:(r,{count:n,since:o,tallies:a})=>{e.warn(`cross_site_rejected_suppressed count=${n} since=${o} routes=${on.map(i=>`${i}:${a[i]}`).join(",")}`)}});return(r,n)=>{let o=()=>{let{headers:a}=n;e.warn(`cross_site_rejected route=${r} site=${br(a.get("Sec-Fetch-Site"))} mode=${br(a.get("Sec-Fetch-Mode"))} dest=${br(a.get("Sec-Fetch-Dest"))} method=${n.method}`)};t.record(Ba,r,o)}};var cn=(e,t)=>(r,n)=>{let o=n?"markAttachmentPresent":"markAttachmentMissing";e[o](r).catch(a=>{t.error(`${o} failed attachment=${r} message=${a instanceof Error?a.message:"unknown"}`)})};var Ha="same-origin",$a="SAMEORIGIN",at=Object.freeze({"X-Content-Type-Options":"nosniff","Cross-Origin-Resource-Policy":Ha,"X-Frame-Options":$a}),Ft=(e,t,r)=>{let n=new Headers({"Content-Type":"application/json","Cache-Control":"no-store",...r.extraHeaders,...at});return r.cookie&&n.append("Set-Cookie",r.cookie),new Response(JSON.stringify({error:{message:t}}),{status:e,headers:n})},dn=(e,t)=>{if(e===null)return!1;for(let r of e.split(",")){let n=r.trim();if((n.startsWith("W/")?n.slice(2):n)===t)return!0}return!1},mn=new Set(["image/png","image/jpeg","image/gif","image/webp","application/pdf","text/plain"]),Ya=/^[\x20-\x7E]+$/,Va=/^[\w.+-]+\/[\w.+-]+/,Ar=e=>e&&Ya.test(e)&&Va.test(e)?e:null,qa=/[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?<![\uD800-\uDBFF])[\uDC00-\uDFFF]/g,pn=e=>encodeURIComponent(e.replace(qa,"\uFFFD")).replace(/['()*]/g,t=>`%${t.charCodeAt(0).toString(16).toUpperCase()}`),yn=e=>e.replace(/[^\x20-\x7E]/g,"_").replace(/["\\]/g,"_"),Ht={404:"Attachment not found",413:"Attachment too large",502:"Attachment storage unavailable",503:"Attachment storage busy",504:"Attachment storage timed out"},fn={not_found:404,denied:404,invalid_path:404,too_large:413,unavailable:502,busy:503,deadline:504},$t=e=>typeof e=="string"&&Object.hasOwn(fn,e),Yt=e=>fn[e],Oe="Attachment request failed";var it=e=>{let t=de("limit",e.limit,1),r=de("maxHeldPerOwner",e.maxHeldPerOwner,1),n=e.queue===null?null:{max:de("queue.max",e.queue.max,0),maxPerOwner:de("queue.maxPerOwner",e.queue.maxPerOwner,0),maxWaitMs:de("queue.maxWaitMs",e.queue.maxWaitMs,1)},o=0,a=[],i=new Map,l=new Map,p=(f,T)=>f.get(T)??0,s=(f,T,L)=>{let x=p(f,T)+L;x<=0?f.delete(T):f.set(T,x)},b=f=>p(l,f)<r,d=f=>o<t&&b(f),S=f=>(o+=1,s(l,f,1),h(f)),y=()=>{for(;o<t;){let f=a.findIndex(L=>b(L.owner));if(f<0)return;let[T]=a.splice(f,1);s(i,T.owner,-1),T.grant(S(T.owner))}},h=f=>{let T=!1;return()=>{T||(T=!0,o-=1,s(l,f,-1),y())}};return{canAcquire:d,acquire:(f,T)=>{if(T.aborted)return Promise.resolve(null);if(d(f))return Promise.resolve(S(f));if(n===null||a.length>=n.max||p(i,f)>=n.maxPerOwner)return Promise.resolve(null);let{maxWaitMs:L}=n,x=M=>{let I=()=>{let v=a.indexOf(V);v<0||(a.splice(v,1),s(i,f,-1),Y(),M(null))},A=Ee(I,L),Y=()=>{clearTimeout(A),T.removeEventListener("abort",I)},V={owner:f,grant:v=>{Y(),M(v)}};a.push(V),s(i,f,1),T.addEventListener("abort",I,{once:!0})};return new Promise(x)}}};var ja=1024,za="Too many requests",Wa=(e,t)=>{de("limitPerWindow",e,1),de("windowMs",t,1);let r=new Map,n=(a,i)=>{i<=a.lastRefillMs||(a.tokens=Math.min(e,a.tokens+(i-a.lastRefillMs)*e/t),a.lastRefillMs=i)},o=(a,i)=>{let l=r.get(a);l&&r.delete(a);let p=l??{tokens:e,lastRefillMs:i};n(p,i),r.set(a,p);for(let s of r.keys()){if(r.size<=ja)break;r.delete(s)}return p};return{consume:(a,i)=>{let l=o(a,i);return l.tokens<1?!1:(l.tokens-=1,!0)},refund:(a,i,l)=>{let p=r.get(a);p&&(n(p,i),p.tokens=Math.min(e,p.tokens+l))}}},We=e=>{let{reason:t,windowMs:r,logger:n,windowFields:o}=e;if(de("windowMs",r,1e3)%1e3!==0)throw Re("windowMs","a whole number of seconds (a multiple of 1000)",r);let a=Wa(e.limitPerWindow,r),i=Object.freeze({status:429,message:za,headers:Object.freeze({"Retry-After":String(r/1e3)})}),l=Ue({windowMs:r,tallies:[t],writeSuppressed:(p,{count:s,since:b})=>{n.warn(`${t}_suppressed count=${s} since=${b} ${o(p)}`)}});return{spend:(p,s)=>a.consume(p,ae())?null:(l.record(p,t,()=>n.warn(`429 ${s} reason=${t}`)),i),refund:(p,s)=>{a.refund(p,ae(),s)}}};import{createHash as Ga}from"crypto";var At=e=>{let t=JSON.stringify(e);return`"${Ga("sha256").update(t).digest("hex")}"`};var ue=(e,t,r,n=200)=>{let o=At(r),a=new Headers({"Content-Type":"application/json","Cache-Control":"private, max-age=0, must-revalidate","X-Content-Type-Options":"nosniff","X-Frame-Options":"DENY","Content-Security-Policy":"default-src 'none'",ETag:o});return t&&a.append("Set-Cookie",t),e.method==="GET"&&n===200&&e.headers.get("If-None-Match")===o?new Response(null,{status:304,headers:a}):new Response(JSON.stringify(r),{status:n,headers:a})},Ka=5e3/1e3,Ja=new Map([[503,Ka]]),Ne=e=>{let t=Ja.get(e);return t===void 0?{}:{"Retry-After":String(t)}};var Xa=256*1024,hn=6e4,Za=e=>Math.ceil(e/2),ei=new Uint8Array(new ArrayBuffer(0)),ti=(e,t)=>{let r=e,n=0,o,a=()=>{clearTimeout(o),r=ei,t()},i=l=>{clearTimeout(o),o=Ee(()=>{l.error(new Error(`attachment body idle for ${hn} ms`)),a()},hn)};return new ReadableStream({start(l){i(l)},pull(l){let p=Math.min(n+Xa,r.byteLength);if(p>n&&l.enqueue(r.slice(n,p)),n=p,n>=r.byteLength){l.close(),a();return}i(l)},cancel(){a()}},{highWaterMark:0})},Rn=e=>{let{service:t,encodeUserId:r,resolveViewerScope:n,logger:o,recordObjectState:a}=e,i=We({reason:"rate_limit",limitPerWindow:e.rateLimitPerMinute,windowMs:6e4,logger:o,windowFields:p=>`viewer=${p}`}),l=it({limit:e.concurrency,maxHeldPerOwner:Za(e.concurrency),queue:null});return async p=>{let{request:s,delivery:b,attachmentId:d,internalUserId:S,readAttachment:y,cookie:h,fail:f}=p,T=e.maxBytes,L=i.spend(S,`attachment=${d} viewer=${S}`);if(L)return f(L.status,L.message,L.headers);let x=await n(s),M=await t.getAttachmentForUser(x,d,S);if(!M)return o.warn(`404 attachment=${d} viewer=${S} reason=not_visible`),f(404,"Attachment not found");if(M.fileSize!=null&&M.fileSize>T)return o.warn(`413 attachment=${d} viewer=${S} reason=db_size`),f(413,"Attachment too large");let I=Ar(M.fileType),A=`filename="${yn(M.fileName)}"; filename*=UTF-8''${pn(M.fileName)}`,Y=await l.acquire(S,s.signal);if(!Y)return s.signal.aborted?(o.info(`503 attachment=${d} viewer=${S} reason=aborted`),f(503,"Attachment request aborted")):(o.warn(`503 attachment=${d} viewer=${S} reason=concurrency`),f(503,"Too many concurrent downloads",Ne(503)));let V=!1;try{let v=await y(M.filePath,{maxBytes:T,head:s.method==="HEAD",principal:r(S),signal:s.signal});if(s.signal.aborted)return o.info(`503 attachment=${d} viewer=${S} reason=aborted`),f(503,"Attachment request aborted");if(!v.ok){if(!$t(v.reason))return o.error(`500 attachment=${d} viewer=${S} reason=port_contract code=failure_reason`),f(500,Oe);let g=Yt(v.reason);return v.reason==="not_found"&&a(d,!1),o.warn(`${g} attachment=${d} viewer=${S} reason=${v.reason} code=${v.code??"-"}`),f(g,Ht[g],Ne(g))}if(v.bytes.byteLength>T)return o.error(`500 attachment=${d} viewer=${S} reason=port_contract code=over_max_bytes`),f(500,Oe);let Q=s.method==="HEAD";if(Q&&v.size!==void 0&&v.size>T)return o.error(`500 attachment=${d} viewer=${S} reason=port_contract code=over_max_bytes`),f(500,Oe);if(!Q&&v.size!==void 0&&v.size!==v.bytes.byteLength)return o.error(`500 attachment=${d} viewer=${S} reason=port_contract code=size_mismatch`),f(500,Oe);let te=I??Ar(v.contentType),le=te!==null&&mn.has(te),F=le?te:"application/octet-stream",Z=le&&b.kind!=="download"?"inline":"attachment",H=Q?v.size:v.bytes.byteLength,J=new Headers({"Content-Type":F,"Content-Disposition":`${Z}; ${A}`,"Cache-Control":"private, no-store","Content-Security-Policy":"default-src 'none'; sandbox",...at});return H!==void 0&&J.set("Content-Length",String(H)),h&&J.append("Set-Cookie",h),a(d,!0),o.info(`200 attachment=${d} viewer=${S} type=${F} disposition=${Z} bytes=${H??"-"}`),Q?new Response(null,{status:200,headers:J}):(V=!0,new Response(ti(v.bytes,Y),{status:200,headers:J}))}finally{V||Y()}}};var be=Object.freeze({queueWaitMs:3e4,readMs:3e4,renderMs:1e4,transferMarginMs:5e3}),uu=be.queueWaitMs+be.readMs+be.renderMs+be.transferMarginMs;import{Buffer as ri}from"buffer";var Sn=new Set([194,198,202,206]),ni=new Set([192,193,194,195]),An=216,oi=217,Tn=218,ai=4,ii=64,si=2,gn=8,bn=28,Fe=12,Tr=8,li=20,Dn=Fe+Tr+10,ui=2,ke=(e,t)=>e[t]<<8|e[t+1],st=(e,t,r)=>{let n=0;for(let o=r-1;o>=0;o-=1)n=n*256+e[t+o];return n},Pe=(e,t,r)=>{if(e.byteLength<t+r.length)return!1;for(let n=0;n<r.length;n+=1)if(e[t+n]!==r.charCodeAt(n))return!1;return!0},_n=e=>e>=192&&e<=207&&e!==196&&e!==200&&e!==204,En=e=>({marker:0,body:0,length:0,end:0,stepsLeft:e}),In=e=>(e.stepsLeft-=1,e.stepsLeft>=0),wn=e=>e[0]===255&&e[1]===An,xn=(e,t,r)=>{let n=t;for(;;){if(n>=e.byteLength||e[n]!==255)return null;do{if(!In(r))return null;n+=1}while(n<e.byteLength&&e[n]===255);if(n>=e.byteLength)return null;let o=e[n];if(n+=1,o===oi)return"eoi";if(o===0||o===An)return null;if(o===1||o>=208&&o<=215)continue;if(n+2>e.byteLength)return null;let a=ke(e,n),i=n+a;return a<2||i>e.byteLength?null:(r.marker=o,r.body=n+2,r.length=a,r.end=i,"segment")}},ci=(e,t,r)=>{let n=e.byteLength,o=t;for(;;){let a=e.indexOf(255,o);if(a<0)return n;for(;;){if(!In(r))return null;if(a+1>=n)return n;let i=e[a+1];if(i===255)a+=1;else if(i===0||i>=208&&i<=215){if(a+=2,a>=n||e[a]!==255)break}else return a}o=a}},Cn=(e,{marker:t,body:r,length:n})=>{if(n<8)return null;let o=ke(e,r+1),a=ke(e,r+3),i=e[r+5];if(a===0||o===0||i===0||n!==8+3*i)return null;let l=[];for(let p=0;p<i;p+=1){let s=e[r+7+3*p],b=s>>4,d=s&15;if(b<1||b>4||d<1||d>4)return null;l.push({id:e[r+6+3*p],horizontal:b,vertical:d})}return{marker:t,width:a,height:o,components:l}},Pn=(e,{body:t,length:r})=>{if(r<3)return null;let n=e[t];return n<1||n>ai||r!==6+2*n?null:Array.from({length:n},(o,a)=>e[t+1+2*a])},Mn=(e,t)=>({width:e.width,height:e.height,components:e.components.map(({horizontal:r,vertical:n})=>({horizontal:r,vertical:n})),multiScan:Sn.has(e.marker)||t<e.components.length}),Dr=e=>{if(!wn(e))return null;let t=En(e.byteLength),r=null;for(let n=2;;){if(xn(e,n,t)!=="segment")return null;if(_n(t.marker)){if(r!==null||(r=Cn(e,t),r===null))return null}else if(t.marker===Tn){if(r===null)return null;let o=Pn(e,t);return o===null?null:Mn(r,o.length)}n=t.end}},vn=e=>{let t=Math.max(...e.components.map(n=>n.horizontal)),r=Math.max(...e.components.map(n=>n.vertical));return e.components.map(({horizontal:n,vertical:o})=>{let a=Math.ceil(e.width*n/(t*gn)),i=Math.ceil(e.height*o/(r*gn));return Math.ceil(a/n)*n*Math.ceil(i/o)*o})},Ln=e=>e.multiScan?vn(e).reduce((r,n)=>r+n,0)*ii*si:0,di=896,On=(e,{maxBlockVisits:t,maxWalkSteps:r})=>{if(!wn(e))return null;let n=ri.from(e.buffer,e.byteOffset,e.byteLength),o=En(r),a=null,i=null,l=new Map,p=0,s=0,b=0;for(let d=2;;){let S=xn(e,d,o);if(S===null)return null;if(S==="eoi")return i===null?null:{header:i,blockVisits:s};if(d=o.end,_n(o.marker)){if(a!==null||!ni.has(o.marker)||(a=Cn(e,o),a===null))return null;let y=vn(a);l=new Map;for(let[h,f]of a.components.entries()){let T=l.get(f.id);l.set(f.id,T===void 0?y[h]:Math.max(T,y[h]))}p=a.components.length*(Sn.has(a.marker)?di:1)}else if(o.marker===Tn){if(a===null||b===p)return null;let y=Pn(e,o);if(y===null)return null;for(let f of y){let T=l.get(f);if(T===void 0)return null;s+=T}if(b+=1,i===null&&(i=Mn(a,y.length)),s>t||!i.multiScan)return{header:i,blockVisits:s};let h=ci(n,o.end,o);if(h===null)return null;d=h}}},Nn=e=>{if(e.byteLength<24||ke(e,8)!==0||ke(e,10)!==13||!Pe(e,12,"IHDR"))return null;let t=ke(e,16)*65536+ke(e,18),r=ke(e,20)*65536+ke(e,22);return t===0||r===0||t>2147483647||r>2147483647?null:{width:t,height:r}},mi=e=>{if(Pe(e,Fe,"VP8 ")){if(e.byteLength<30||(e[20]&1)!==0||e[23]!==157||e[24]!==1||e[25]!==42)return null;let t=st(e,26,2)&16383,r=st(e,28,2)&16383;return t===0||r===0?null:{width:t,height:r}}if(Pe(e,Fe,"VP8L")){if(e.byteLength<25||e[20]!==47)return null;let t=st(e,21,4);return{width:(t&16383)+1,height:Math.floor(t/16384)%16384+1}}return Pe(e,Fe,"VP8X")?e.byteLength<Dn?null:{width:st(e,24,3)+1,height:st(e,27,3)+1}:null},kn=e=>{if(Nn(e)===null||e.byteLength<=bn)return null;switch(e[bn]){case 0:return!1;case 1:return!0;default:return null}},Bn=(e,t)=>{if(Pe(e,Fe,"VP8 "))return"lossy";if(Pe(e,Fe,"VP8L"))return"lossless";if(!Pe(e,Fe,"VP8X")||e.byteLength<Dn)return null;if((e[li]&ui)!==0)return"animated";let r=!1,n=t;for(let o=Fe;o+Tr<=e.byteLength;){if(n-=1,n<0)return null;if(Pe(e,o,"VP8L"))return"lossless";if(Pe(e,o,"VP8 "))return r?"lossy-alpha":"lossy";Pe(e,o,"ALPH")&&(r=!0);let a=st(e,o+4,4);o+=Tr+a+a%2}return null},Un={png:Nn,jpeg:Dr,webp:mi};var _r=Object.freeze(["image/webp","image/jpeg","image/png"]),Er=1024*1024;var pi=new Set(["image/png","image/jpeg","image/gif","image/webp"]),yi={"image/webp":"webp","image/jpeg":"jpeg","image/png":"png"},fi=new Set(_r),hi=e=>typeof e=="string"&&fi.has(e),Ri=256,Vt=(e,t)=>e.fileType===null||!pi.has(e.fileType)?!1:e.fileSize===null||e.fileSize<=t,gi=[137,80,78,71,13,10,26,10],bi=[255,216,255],Si=[[71,73,70,56,55,97],[71,73,70,56,57,97]],Ai=[82,73,70,70],Ti=[87,69,66,80],Tt=(e,t,r)=>{if(e.byteLength<r+t.length)return!1;for(let[n,o]of t.entries())if(e[r+n]!==o)return!1;return!0},Ir=e=>{if(Tt(e,gi,0))return"png";if(Tt(e,bi,0))return"jpeg";for(let t of Si)if(Tt(e,t,0))return"gif";return Tt(e,Ai,0)&&Tt(e,Ti,8)?"webp":null},Fn=e=>{let t=JSON.stringify([e.rendererId,e.box.maxWidth,e.box.maxHeight,e.attachmentId,e.filePath,e.fileType,e.fileSize]);return{key:t,etag:At([t])}},Hn=(e,t)=>{if(!hi(e.contentType))return"content_type";if(!(e.bytes instanceof Uint8Array))return"bytes";if(e.bytes.byteLength===0)return"empty";if(e.bytes.byteLength>Er)return"too_large";let r=yi[e.contentType];if(Ir(e.bytes)!==r)return"signature";let n=Un[r](e.bytes);return n===null||n.width>t.maxWidth||n.height>t.maxHeight?"dimensions":null},$n=e=>{de("maxBytes",e.maxBytes,0),de("maxEntries",e.maxEntries,0);let t=new Map,r=0,n=o=>{let a=t.get(o);a&&(t.delete(o),r-=a.weight)};return{get:o=>{let a=t.get(o);if(a)return t.delete(o),t.set(o,a),a.entry},set:(o,a)=>{n(o);let i=(a.kind==="thumbnail"?a.bytes.byteLength:0)+Ri;if(i>e.maxBytes||e.maxEntries===0)return;let l=a.kind==="thumbnail"?{kind:"thumbnail",bytes:a.bytes.slice(),contentType:a.contentType}:a;t.set(o,{entry:l,weight:i}),r+=i;for(let p of t.keys()){if(r<=e.maxBytes&&t.size<=e.maxEntries)break;n(p)}}}};var wr=e=>{let{budgetMs:t,flightSignal:r,call:n,onOverrun:o,onStuck:a}=e,i=ae(),l=new AbortController,p=!1,s,b,d=()=>{a(ae()-i)},S=I=>{s=Ee(()=>{p=!0,I({timedOut:!0}),b=Ee(d,t),l.abort(new DOMException(`stage exceeded its ${t} ms budget`,"TimeoutError"))},t)},y=new Promise(S),h=AbortSignal.any([r,l.signal]),f=I=>{I(n(h))},T=new Promise(f),L=I=>(clearTimeout(s),clearTimeout(b),p&&o(ae()-i,I.kind==="error"?{error:I.error}:null),I),x=T.then(I=>L({kind:"value",value:I}),I=>L({kind:"error",error:I}));return{outcome:Promise.race([T.then(I=>({timedOut:!1,value:I})),y]),settled:x}};var He={404:"Attachment not found",500:Oe,502:"Thumbnail unavailable",503:"Thumbnail temporarily unavailable",504:"Thumbnail storage timed out"},Yn=(e,t)=>{if(typeof e!="object"||e===null)return{failure:{kind:"failure",status:500,reason:"port_contract",code:"result"}};let r=e;if(!r.ok)return r.reason==="unsupported"?{entry:{kind:"unrenderable",reason:"unsupported"}}:r.reason==="failed"?{failure:{kind:"failure",status:502,reason:"render_failed"}}:{failure:{kind:"failure",status:500,reason:"port_contract",code:"failure_reason"}};let n=Hn(r,t);return n!==null?{failure:{kind:"failure",status:500,reason:"port_contract",code:n}}:{entry:{kind:"thumbnail",bytes:r.bytes,contentType:r.contentType}}},Di=e=>{let t=new AbortController,r=()=>{t.abort()},n=Ee(r,be.queueWaitMs);return e.addEventListener("abort",r,{once:!0}),e.aborted&&r(),{signal:t.signal,end:()=>{clearTimeout(n),e.removeEventListener("abort",r)}}},Vn=()=>{},_i=(e,t)=>t.aborted?Promise.resolve():new Promise(r=>{let n=()=>{t.removeEventListener("abort",n),r()};t.addEventListener("abort",n,{once:!0}),e.then(n)}),qn=e=>{let{gate:t,cache:r,maxBytes:n,encodeUserId:o,recordObjectState:a,logger:i}=e,l=new Map,p=(y,h)=>{let f=h.then(Vn,Vn);l.set(y,f);let T=()=>{l.get(y)===f&&l.delete(y)};f.then(T)},s=async(y,h)=>{let f=l.get(y.key);if(f===void 0)return t.acquire(y.owner,h);let T=Di(h);try{if(await _i(f,T.signal),T.signal.aborted)return null;let L=r.get(y.key);return L!==void 0?{...L,identity:"verified"}:await t.acquire(y.owner,T.signal)}finally{T.end()}},b=(y,h)=>{if(y.fileSize===null)return h.kind==="exact"?"verified":"unrecorded";if(h.kind==="exact"?h.bytes===y.fileSize:y.fileSize>h.maxBytes)return"verified";let T=h.kind==="exact"?String(h.bytes):`>${h.maxBytes}`;return i.warn(`size_mismatch expected=${y.fileSize} got=${T} attachment=${y.attachmentId} viewer=${y.owner} variant=thumbnail`),"unverified"},d=(y,h)=>(f,T)=>{let L=T===null?"":` message=${T.error instanceof Error?T.error.message:"unknown"}`;i.warn(`${y}_overrun ms=${f} attachment=${h.attachmentId} viewer=${h.owner} variant=thumbnail${L}`)},S=(y,h)=>f=>{i.warn(`${y}_stuck ms=${f} attachment=${h.attachmentId} viewer=${h.owner} variant=thumbnail`)};return async(y,h)=>{let f=await s(y,h);if(f===null)return{kind:"failure",status:503,reason:h.aborted?"aborted":"queue"};if(typeof f!="function")return f;let T=f,L=null;try{if(h.aborted)return{kind:"failure",status:503,reason:"aborted"};let x=r.get(y.key);if(x!==void 0)return{...x,identity:"verified"};let M=wr({budgetMs:be.readMs,flightSignal:h,call:g=>y.readAttachment(y.filePath,{maxBytes:n,head:!1,principal:o(y.owner),signal:g}),onOverrun:d("read",y),onStuck:S("read",y)}),I=await M.outcome;if(I.timedOut)return L=M.settled,h.aborted?{kind:"failure",status:503,reason:"aborted"}:{kind:"failure",status:504,reason:"read_timeout"};if(h.aborted)return{kind:"failure",status:503,reason:"aborted"};let A=I.value;if(!A.ok&&A.reason!=="too_large")return $t(A.reason)?(A.reason==="not_found"&&a(y.attachmentId,!1),{kind:"failure",status:Yt(A.reason),reason:A.reason,code:A.code}):{kind:"failure",status:500,reason:"port_contract",code:"failure_reason"};if(A.ok&&A.bytes.byteLength>n)return{kind:"failure",status:500,reason:"port_contract",code:"over_max_bytes"};let Y=b(y,A.ok?{kind:"exact",bytes:A.bytes.byteLength}:{kind:"over",maxBytes:n}),V=g=>{Y==="verified"&&r.set(y.key,g)},v=g=>(V(g),{...g,identity:Y});if(!A.ok)return v({kind:"unrenderable",reason:"too_large"});let Q=Ir(A.bytes);if(Q===null)return v({kind:"unrenderable",reason:"signature"});let te=wr({budgetMs:be.renderMs,flightSignal:h,call:g=>y.renderer.render(A.bytes,{format:Q,maxWidth:y.box.maxWidth,maxHeight:y.box.maxHeight,signal:g}),onOverrun:d("render",y),onStuck:S("render",y)}),le=g=>{if(g.kind==="error")return;let P=Yn(g.value,y.box);"entry"in P&&V(P.entry)},F=null,Z=()=>(F===null&&(F=te.settled.then(le),p(y.key,F)),F);h.addEventListener("abort",Z,{once:!0});let H=await te.outcome.finally(()=>h.removeEventListener("abort",Z));if(H.timedOut||h.aborted)return L=Z(),h.aborted?{kind:"failure",status:503,reason:"aborted"}:{kind:"failure",status:502,reason:"render_timeout"};let J=Yn(H.value,y.box);return"entry"in J?v(J.entry):J.failure}finally{L===null?T():L.then(T,T)}}};var jn=()=>{let e=new Map;return{join:(t,r,n)=>{let o=()=>{let p=new AbortController,s=()=>{e.get(t)?.controller===p&&e.delete(t)},d={promise:n(p.signal).finally(s),controller:p,waiters:0};return e.set(t,d),d},a=e.get(t)??o();a.waiters+=1;let i=()=>{a.waiters-=1,!(a.waiters>0)&&(a.controller.abort(),e.get(t)===a&&e.delete(t))};r.aborted?i():r.addEventListener("abort",i,{once:!0});let l=()=>{r.removeEventListener("abort",i)};return a.promise.finally(l)}}};var Gn=10,Ei=1/Gn,zn=1-Ei,Ii=1024,wi=64,xi=8,Wn="private, no-cache",Ci="no-store",Pi=Object.freeze({verified:"",unverified:" identity=unverified",unrecorded:" size=unrecorded"}),Mi=e=>{switch(e.status){case 404:case 502:case 504:return"warn";case 500:return"error";case 503:return e.reason==="aborted"?"info":"warn"}},Kn=e=>{let{service:t,encodeUserId:r,resolveViewerScope:n,logger:o,recordObjectState:a,maxBytes:i,thumbnails:l}=e,{renderer:p}=l,s=(I,A)=>We({reason:I,limitPerWindow:A,windowMs:6e4,logger:o,windowFields:Y=>`viewer=${Y} variant=thumbnail`}),b=s("rate_limit",l.rateLimitPerMinute),d=s("revalidation_rate_limit",l.rateLimitPerMinute*Gn),S=it({limit:l.concurrency,maxHeldPerOwner:l.concurrency,queue:{max:wi,maxPerOwner:xi,maxWaitMs:be.queueWaitMs}}),y=$n({maxBytes:l.cacheBytes,maxEntries:Ii}),h=jn(),f=qn({gate:S,cache:y,maxBytes:i,encodeUserId:r,recordObjectState:a,logger:o}),T=(I,A,Y,V)=>{let v=`attachment=${I.attachmentId} viewer=${I.internalUserId} variant=thumbnail cache=${V}`;if(A.kind==="failure")return o[Mi(A)](`${A.status} ${v} reason=${A.reason} code=${A.code??"-"}`),I.fail(A.status,He[A.status],Ne(A.status));let Q=Pi[A.identity];if(A.kind==="unrenderable")return o.info(`404 ${v} reason=${A.reason}${Q}`),I.fail(404,He[404]);let te=A.identity==="verified"?{"Cache-Control":Wn,ETag:Y}:{"Cache-Control":Ci},le=new Headers({"Content-Type":A.contentType,"Content-Length":String(A.bytes.byteLength),...te,"Content-Security-Policy":"default-src 'none'; sandbox",...at});return I.cookie&&le.append("Set-Cookie",I.cookie),o.info(`200 ${v} type=${A.contentType} bytes=${A.bytes.byteLength}${Q}`),new Response(A.bytes,{status:200,headers:le})},L=(I,A)=>{let Y=I.spend(A.internalUserId,`attachment=${A.attachmentId} viewer=${A.internalUserId} variant=thumbnail`);return Y===null?null:A.fail(Y.status,Y.message,Y.headers)},x=I=>L(b,I),M=(I,A)=>A?L(d,I):x(I);return async(I,A)=>{let{request:Y,attachmentId:V,internalUserId:v,readAttachment:Q,cookie:te,fail:le}=I,F=Rr[A],Z=Y.headers.get("If-None-Match"),H=Z!==null,J=M(I,H);if(J)return J;let g=await n(Y),P=await t.getAttachmentForUser(g,V,v),B=P!==null&&Vt(P,i)?Fn({rendererId:p.id,box:F,attachmentId:V,filePath:P.filePath,fileType:P.fileType,fileSize:P.fileSize}):null;if(B&&dn(Z,B.etag)){let D=new Headers({"Cache-Control":Wn,ETag:B.etag,...at});return te&&D.append("Set-Cookie",te),o.info(`304 attachment=${V} viewer=${v} variant=thumbnail cache=revalidated`),new Response(null,{status:304,headers:D})}if(H){let D=x(I);if(D)return D}if(!P)return o.warn(`404 attachment=${V} viewer=${v} variant=thumbnail reason=not_visible`),le(404,He[404]);if(!B)return b.refund(v,zn),o.info(`404 attachment=${V} viewer=${v} variant=thumbnail reason=not_eligible`),le(404,He[404]);let{key:U,etag:q}=B,W=y.get(U);if(W)return b.refund(v,zn),T(I,{...W,identity:"verified"},q,"hit");let z=D=>f({key:U,attachmentId:V,filePath:P.filePath,fileSize:P.fileSize,box:F,owner:v,readAttachment:Q,renderer:p},D),G;try{G=await h.join(U,Y.signal,z)}catch(D){return o.error(`500 attachment=${V} viewer=${v} variant=thumbnail cache=miss reason=port_exception message=${D instanceof Error?D.message:"unknown"}`),le(500,He[500])}return T(I,G,q,"miss")}};var vi='[daily-report] params.token must be passed by the route that mounts attachment.loader; declare a "token" route parameter ({apiBasePath}/attachment/{token})',Li=()=>Ft(403,Sr,{cookie:null}),Jn=Object.freeze({route:"attachment",navigable:e=>{let{kind:t}=gr(new URL(e.url).searchParams);return t==="inline"||t==="download"},frameworkDataRefusal:()=>Ft(404,Ht[404],{cookie:null}),crossSiteRejection:Li}),Qn=e=>{let{authenticate:t,service:r,encodeUserId:n,resolveViewerScope:o,logger:a}=e,i=r.attachmentDelivery,l={service:r,encodeUserId:n,resolveViewerScope:o,logger:a,recordObjectState:cn(r,a)},p=i===null?null:{idCodec:i.idCodec,read:i.read,serveOriginal:Rn({...l,maxBytes:i.maxBytes,rateLimitPerMinute:i.rateLimitPerMinute,concurrency:i.concurrency}),serveThumbnail:i.thumbnails===null?null:Kn({...l,maxBytes:i.maxBytes,thumbnails:i.thumbnails})};return async({request:s,params:b})=>{let d=null,S=(y,h,f={})=>Ft(y,h,{cookie:d,extraHeaders:f});try{let{user:y,cookie:h}=await t(s,{failureRedirect:null});if(d=h??null,!y)return S(401,"Unauthorized");let f=gr(new URL(s.url).searchParams);if(f.kind==="invalid")return S(400,"Invalid attachment request");if(f.kind==="thumbnail"&&s.method!=="GET")return S(405,"Method not allowed",{Allow:"GET"});if(s.method!=="GET"&&s.method!=="HEAD")return S(405,"Method not allowed",{Allow:"GET, HEAD"});if(p===null)return S(404,"Attachment not found");if(b.token===void 0)throw new Error(vi);let T=p.idCodec.decode(b.token);if(T===null||!Ot(T))return S(400,"Invalid attachment token");let L=await r.getUserIdByExternalId(y.id);if(!L)return S(403,"Forbidden");let x={request:s,delivery:f,attachmentId:T,internalUserId:L,readAttachment:p.read,cookie:d,fail:S};return f.kind!=="thumbnail"?await p.serveOriginal(x):p.serveThumbnail===null?S(404,He[404]):await p.serveThumbnail(x,f.variant)}catch(y){if(y instanceof Response)throw y;return a.error(`500 attachment=? viewer=? reason=unexpected message=${y instanceof Error?y.message:"unknown"}`),S(500,Oe)}}};var Oi=32*1024*1024,Ni=60,ki=4,Bi=120,Ui=2,Fi=8*1024*1024,qt=e=>typeof e=="object"&&e!==null&&!Array.isArray(e),Hi=e=>{if(e===void 0)throw ot("attachments.thumbnails.renderer","injected when attachments.thumbnails is given");if(!qt(e))throw Re("attachments.thumbnails.renderer","an object with id and render",e);if(e.render===void 0)throw ot("attachments.thumbnails.renderer.render","a function");if(typeof e.render!="function")throw Re("attachments.thumbnails.renderer.render","a function",e.render);if(typeof e.id!="string"||e.id.trim()==="")throw Re("attachments.thumbnails.renderer.id","a non-blank string naming the rendering pipeline version",e.id);return e},$i=e=>{if(e===void 0)return null;if(!qt(e))throw Re("attachments.thumbnails","an object with renderer",e);return Object.freeze({renderer:Hi(e.renderer),rateLimitPerMinute:qe("attachments.thumbnails.rateLimitPerMinute",e.rateLimitPerMinute,1,Bi),concurrency:qe("attachments.thumbnails.concurrency",e.concurrency,1,Ui),cacheBytes:qe("attachments.thumbnails.cacheBytes",e.cacheBytes,0,Fi)})},Xn=e=>{let t=e;if(t===void 0)return null;if(!qt(t))throw Re("attachments","an object with idCodec and read",t);let{idCodec:r,read:n}=t;if(r===void 0)throw ot("attachments.idCodec","injected when attachments is given");if(!qt(r)||typeof r.encode!="function"||typeof r.decode!="function")throw Re("attachments.idCodec","an object with encode and decode functions",r);if(n===void 0)throw ot("attachments.read","injected when attachments is given");if(typeof n!="function")throw Re("attachments.read","a function",n);return Object.freeze({idCodec:r,read:n,maxBytes:qe("attachments.maxBytes",t.maxBytes,1,Oi),rateLimitPerMinute:qe("attachments.rateLimitPerMinute",t.rateLimitPerMinute,1,Ni),concurrency:qe("attachments.concurrency",t.concurrency,1,ki),thumbnails:$i(t.thumbnails)})},Yi=Object.freeze([["attachmentIdCodec","attachments.idCodec"],["readAttachment","attachments.read"],["attachmentMaxBytes","attachments.maxBytes"],["attachmentRateLimitPerMinute","attachments.rateLimitPerMinute"],["attachmentConcurrency","attachments.concurrency"],["attachmentThumbnailRenderer","attachments.thumbnails.renderer"],["attachmentThumbnailRateLimitPerMinute","attachments.thumbnails.rateLimitPerMinute"],["attachmentThumbnailConcurrency","attachments.thumbnails.concurrency"],["attachmentThumbnailCacheBytes","attachments.thumbnails.cacheBytes"]]),jt=e=>{for(let[t,r]of Yi)if(Object.hasOwn(e,t))throw ot(r,`given in place of the flat key ${t}`)};var Vi=/^[0-9a-f]{1,16}$/;var Zn=e=>{let t=e.get(Ce.cursorReportHubId),r=e.get(Ce.cursorBusinessDate),n=e.get(Ce.cursorSnapshot),o=n!==null&&Vi.test(n)?n:null,a=null;if(t!==null){let l=je(t);if(l===null)return{refused:"cursor"};if(r!==null&&!Lt(r))return{refused:"cursor"};a={businessDate:r,reportHubId:l}}else if(r!==null)return{refused:"cursor"};let i=gt(e.get(Ce.forceRefresh));return i===null?{refused:"forceRefresh"}:{query:{cursor:a,snapshot:o,forceRefresh:i}}};var zt=e=>e.method==="HEAD"?AbortSignal.abort():e.signal,qi=2,ji=16,zi=qi*ji,Wi=6e4,eo=()=>{},to=e=>{let t=it({limit:Number.MAX_SAFE_INTEGER,maxHeldPerOwner:zi,queue:null}),r=Ue({windowMs:Wi,tallies:["sse","ids-stream"],writeSuppressed:(n,{count:o,since:a,tallies:i})=>{e.warn(`streams_per_viewer_suppressed count=${o} since=${a} viewer=${n} routes=sse:${i.sse},ids-stream:${i["ids-stream"]}`)}});return{admit:async(n,o,a)=>{if(n===null)return eo;let i=a.aborted?t.canAcquire(n)?eo:null:await t.acquire(n,a);return i===null&&r.record(n,o,()=>e.warn(`503 ${o} viewer=${n} reason=streams_per_viewer`)),i}}};var Wt=30,io=4e3,Gi="stream interrupted by server error",Ki="Too many streams",Ji=15e3,so=Symbol("ids-stream-heartbeat"),ro=()=>{},no=e=>e.return(void 0).then(ro,ro),Qi=()=>{let e;return{fired:new Promise(r=>{e=setTimeout(()=>r(so),Ji)}),stop:()=>clearTimeout(e)}};async function*oo(e,t,r,n){let o=t?Hr(e,t):0,a=!0;for(;;){let i=e.slice(o,o+(a?r:io));o+=i.length;let l=o>=e.length,p=i[i.length-1];if(yield{kind:"chunk",items:i,nextCursor:l||!p?null:{businessDate:p.businessDate,reportHubId:p.reportHubId},isLast:l,...a?{total:e.length}:{},...a?{streamAnchor:n.streamAnchor}:{},snapshot:n.snapshot,...a&&n.restarted?{restarted:!0}:{}},a=!1,l)return}}var lo=e=>{let t=new Headers({"Content-Type":"application/x-ndjson; charset=utf-8","Cache-Control":"private, no-cache, no-transform","X-Content-Type-Options":"nosniff"});return e&&t.append("Set-Cookie",e),t},ao=(e,t,r,n,o)=>{r.addEventListener("abort",o,{once:!0});let a=async(b,d)=>{o(),d&&await no(t);try{b.close()}catch{}},i=new TextEncoder,l=!1,p=null,s=new ReadableStream({async pull(b){if(l||r.aborted){await a(b,!0);return}let d=Qi();try{p===null&&(p=t.next());let S=await Promise.race([p,d.fired]);if(d.stop(),S===so){if(l||r.aborted){await a(b,!0);return}b.enqueue(i.encode(`
+`));return}p=null;let{value:y,done:h}=S;if(h){await a(b,!1);return}if(l||r.aborted){await a(b,!0);return}b.enqueue(i.encode(`${JSON.stringify(y)}
+`))}catch(S){if(d.stop(),p=null,o(),l||r.aborted)return;n.error(`ids-stream emission failed: ${S instanceof Error?S.message:String(S)}`);try{let y={kind:"error",error:Gi};b.enqueue(i.encode(`${JSON.stringify(y)}
+`)),b.close()}catch{}}},cancel(){l=!0,o(),no(t)}});return new Response(s,{status:200,headers:lo(e)})},uo=e=>{let{service:t,logger:r,streamSlots:n,refuseForcedRead:o}=e,a=async(i,l,p,s,b,d)=>{let S=!1,y=null,h=null,f=new Promise((x,M)=>{y=x,h=M});f.catch(()=>{});let T=t.getDailyReportIdsByExternalId(p,l.id,{forceRefresh:i.forceRefresh,onFetchStart:i.cursor?void 0:()=>{S=!0,t.readSseStreamAnchor().then(x=>t.getDailyReportIdsFirstPageByExternalId(p,l.id,Wt).then(M=>({items:M,streamAnchor:x}))).then(x=>y?.(x),x=>h?.(x))}});if(T.catch(()=>{}),i.cursor){let{items:x,streamAnchor:M,snapshot:I}=await T,A=i.snapshot!==null&&i.snapshot===I;return ao(s,oo(x,A?i.cursor:null,Wt,{snapshot:I,restarted:!A,streamAnchor:M}),b,r,d)}let L=(async function*(){let x=await Promise.race([T.then(A=>({kind:"full",source:A}),A=>({kind:"full-error",error:A})),f.then(A=>({kind:"page",page:A}),()=>({kind:"page-error"}))]),M=null,I=!1;if(x.kind==="full")M=x.source;else if(x.kind==="page"){let{items:A,streamAnchor:Y}=x.page;if(A.length<Wt){yield{kind:"chunk",items:A,nextCursor:null,isLast:!0,total:A.length,streamAnchor:Y};return}yield{kind:"chunk",items:A,nextCursor:null,isLast:!1,provisional:!0},I=!0}else if(x.kind==="full-error"&&S){let A=await f.catch(()=>null);A&&A.items.length>0&&(yield{kind:"chunk",items:A.items,nextCursor:null,isLast:!1,provisional:!0})}M===null&&(M=await T),yield*oo(M.items,null,I?io:Wt,{snapshot:M.snapshot,streamAnchor:M.streamAnchor})})();return ao(s,L,b,r,d)};return async(i,l,p,s,b)=>{let d=Zn(i.searchParams);if("refused"in d)return ue(p,l,{error:{message:d.refused==="cursor"?"Invalid cursor":"Invalid forceRefresh"}},400);let{query:S}=d;if(S.forceRefresh){let f=o(s,p,l);if(f!==null)return f}let y=zt(p),h=await n.admit(await t.getUserIdByExternalId(s.id),"ids-stream",y);if(h===null){let f=ue(p,l,{error:{message:Ki}},503);for(let[T,L]of Object.entries(Ne(503)))f.headers.set(T,L);return f}if(y.aborted)return new Response(null,{status:200,headers:lo(l)});try{return await a(S,s,b,l,y,h)}catch(f){throw h(),f}}};import{systemSseRuntime as cs}from"@aiquants/sse";import{createSseResponse as ds,readLastEventId as ms,startSseHeartbeat as ps,terminalStreamResponse as ys}from"@aiquants/sse/server";var Dt=(e,t)=>{let r=e.message.data;if(!r)return{entry:{id:e.id,message:null},json:void 0};let n;try{n=JSON.parse(r)}catch(i){return t.error(`SSE message ${e.id} is not JSON:`,i),{entry:{id:e.id,message:null},json:void 0}}let o=zr.safeParse(n);if(!o.success)return t.error("SSE message validation failed:",o.error.format()),{entry:{id:e.id,message:null},json:n};let a=Object.freeze({parsed:o.data,published:n,text:r});return{entry:Object.freeze({id:e.id,message:a}),json:n}},Xi=["externalComments","postedComments"],co=new WeakMap,Zi=e=>{let t=co.get(e);if(t!==void 0)return t;let r={recipientRemoved:null,commentsRedacted:null};return co.set(e,r),r},mo=e=>{let{recipientRawUserId:t,...r}=e;return r},po=(e,t)=>{let{published:r}=e;if(!(t||Object.hasOwn(r,"recipientRawUserId")))return e.text;let n=Zi(e);if(t){if(n.commentsRedacted===null){let o=mo(r),a=o.report;n.commentsRedacted=JSON.stringify({...o,report:{...a,...Object.fromEntries(Xi.map(i=>[i,[]]))}})}return n.commentsRedacted}return n.recipientRemoved===null&&(n.recipientRemoved=JSON.stringify(mo(r))),n.recipientRemoved};import{systemSseRuntime as ts}from"@aiquants/sse";import{createSharedSource as rs}from"@aiquants/sse/shared-source";var Ge="daily-report:ids:",Ke="daily-report:business-date:",Gt=(e,t)=>`${e}st:${t}`,xr=e=>`${Ge}user:${e}:`,yo=(e,t)=>Gt(xr(e),t),es=e=>`${Ke}${e}:`,fo=(e,t)=>Gt(es(e),t),_t=e=>`daily-report:date:${e}:user:`,lt=(e,t)=>`${_t(e)}${t}:`,ho=(e,t,r)=>Gt(lt(e,t),r),Me=e=>`daily-report:detail:${e}:user:`,Kt=(e,t)=>`${Me(e)}${t}:`,Ro=(e,t,r)=>Gt(Kt(e,t),r);var $e=(e,t)=>{let[r,n]=e.split("-").map(Number),[o,a]=t.split("-").map(Number);return r!==o?r<o:n<=a},ns=5e3,os=Bt,Et=class{constructor(t){this.config=t;this._lastId=null;this._positioning=null;this._generation=0;this._logger=t.logger??fe(1,"[SSE Reader]"),this._source=this._createSource()}ready(){return this._position().then(()=>{})}subscribe(t,r){return this._source.subscribe({next:n=>{this._lastId=n.id,t(n)},error:n=>r(n instanceof Error?n:new Error(String(n)))})}async destroy(){await this._source.dispose(),this._generation+=1,this._positioning=null,this._lastId=null,this._source=this._createSource()}_position(){if(this._lastId!==null)return Promise.resolve(this._lastId);if(this._positioning===null){let t=this._generation;this._positioning=this._readTail().then(r=>{if(t!==this._generation)throw new Error("SSE reader was destroyed while the stream tail was being read");return this._positioning=null,this._lastId=r,r},r=>{throw t===this._generation&&(this._positioning=null),r})}return this._positioning}async _readTail(){let t=await this.config.redis?.getClient();if(!t)throw new Error("Failed to get Redis client to read the SSE stream tail");let r=await t.xRevRange(this.config.streamKey,"+","-",{COUNT:1});return r.length>0?r[0].id:"0-0"}_createSource(){return rs({start:t=>this._start(t),lingerMs:0,replay:"none",runtime:ts,onListenerError:t=>this._logger.error("SSE reader subscriber threw:",t),onStopError:t=>this._logger.error("SSE reader failed to stop:",t)})}async _start(t){let r=await this._position(),n=await this.config.redis?.createClient();if(!n)throw new Error("Failed to create Redis client for SSE reader");n.on("error",i=>{this._logger.error("Redis client error:",i)});let o=!1,a=this._readLoop(n,t,r,()=>o);return async()=>{if(o=!0,n.isOpen)try{await n.quit()}catch{}await a}}async _readLoop(t,r,n,o){let a=n;try{for(;!o()&&t.isOpen;){let i=await t.xRead([{key:this.config.streamKey,id:a}],{BLOCK:ns,COUNT:os});if(i)for(let l of i)for(let p of l.messages){a=p.id;let{entry:s,json:b}=Dt(p,this._logger);this._invalidateCaches(b),r.next(s)}}}catch(i){o()||(this._logger.error("xRead loop error:",i),r.fail(i instanceof Error?i:new Error(String(i))));return}o()||r.fail(new Error("Redis client for SSE reader closed unexpectedly"))}_invalidateCaches(t){if(t===null||typeof t!="object")return;let{type:r,reportHubId:n}=t;(r==="report-create"||r==="report-delete"||r==="report-publish")&&this.config.cache.invalidatePrefix(Ge),(r==="comment-add"||r==="comment-delete"||r==="status-update")&&typeof n=="number"&&this.config.cache.invalidatePrefix(Me(n))}};import{inArray as as,sql as go}from"drizzle-orm";var is="
",ss=64,ls=e=>e.toLowerCase(),us=e=>e.trim().toLowerCase();function bo(e){if(e==null)return null;if(!Array.isArray(e))return new Set;let t=new Set;for(let r of e){if(typeof r!="string")continue;let n=us(r);n.length>0&&t.add(n)}return t}function ve(e,t){return e===null?!0:t==null?!1:e.has(ls(t))}function Je(e){return e!==null&&e.size===0}function Ao(e,t){if(t!==null)return t.size===0?go`1 = 0`:as(go`LOWER(${e})`,[...t])}var ut,ct,It=class It{constructor(t,r){rr(this,ut);rr(this,ct);nr(this,ut,t),nr(this,ct,r)}get visible(){return ft(this,ut)===null?null:new Set(ft(this,ut))}get commentable(){return ft(this,ct)===null?null:new Set(ft(this,ct))}static restrictTo(t){let r=typeof t=="object"&&t!==null&&"read"in t,n=bo(r?t.read:t),o=r?t.comment:void 0;if(o===void 0)return new It(n,n);let a=bo(o),i=new Set;for(let l of a??[])n.has(l)&&i.add(l);return new It(n,i)}static unrestricted(t){return new It(null,null)}};ut=new WeakMap,ct=new WeakMap;var _e=It;function wt(e){let t=So(e.visible),r=So(e.commentable);return t===r?t:`d:${t.length}:${t}${r}`}function So(e){if(e===null)return"all";if(e.size===0)return"none";let t=[...e].sort().map(n=>`${n.length}:${n}`).join(is);if(t.length<=ss)return`s:${t}`;let r=2166136261;for(let n=0;n<t.length;n++)r^=t.charCodeAt(n),r=Math.imul(r,16777619);return`sh:${(r>>>0).toString(16)}`}var _o=Object.freeze({...St,route:"sse",frameworkDataRefusal:Ut}),To=864e5,fs={baseMs:2e3,jitterMs:8e3},Eo=6e4,Pr=Bt,Io=JSON.stringify({type:"connected"}),Do="0-0",hs=(e,t,r,n)=>{if(r===null&&n===null)return!0;let o=typeof t.sourceType=="string"?t.sourceType:void 0;switch(e.type){case"connected":case"status-update":return!0;case"report-create":case"report-update":case"report-publish":return ve(r,e.report.sourceType);case"comment-add":case"comment-delete":return ve(n,o??"Internal");case"report-delete":return ve(r,o)}},Rs=(e,t)=>t===null||e.type!=="report-create"&&e.type!=="report-update"&&e.type!=="report-publish"?!1:!ve(t,e.report.sourceType),gs=(e,t)=>{e.writeEvent({event:null,id:t,data:Io})},bs=(e,t,r)=>{let{message:n}=t;if(n===null)return;let{parsed:o,published:a}=n,i=typeof a.recipientRawUserId=="number"?a.recipientRawUserId:void 0;if((o.type==="status-update"||i!==void 0)&&i!==r.internalUserId||!hs(o,a,r.visibleSet,r.commentableSet)){gs(e,t.id);return}e.writeEvent({event:null,id:t.id,data:po(n,Rs(o,r.commentableSet))})},wo=e=>{let{authenticate:t,service:r,resolveViewerScope:n,redis:o,sseReader:a,streamKey:i,streamSlots:l,logger:p}=e,s=async(b,d)=>{let{request:S,internalUserId:y,cursor:h}=d,f=d.initialScope.visible,T=d.initialScope.commentable,L=0,x=setInterval(()=>{let F=++L;n(S,"refresh").then(Z=>{F===L&&(f=Z.visible,T=Z.commentable)})},Eo);b.onClose(()=>clearInterval(x));let M=h===null?Do:h,I=h!==null&&o!==void 0,A=[],Y=null,V=F=>{$e(F.id,M)||(M=F.id,bs(b,F,{internalUserId:y,visibleSet:f,commentableSet:T}))},v=async(F,Z)=>{let[H]=await F.xRange(i,"-","+",{COUNT:1});return H!==void 0&&!$e(H.id,Z)},Q=async(F,Z)=>{if(await v(F,Z))return!1;let H=Z;for(;;){let J=await F.xRange(i,H,"+",{COUNT:Pr}),g=J[0];if(g!==void 0&&g.id!==H&&await v(F,H))return!1;for(let k of J){if(Y!==null&&$e(Y,k.id))return!0;$e(k.id,M)||V(Dt(k,p).entry)}let P=J.at(-1);if(J.length<Pr||P===void 0||b.isClosed())return!0;H=P.id}},te=a.subscribe(F=>{if(!I){V(F);return}$e(F.id,M)||(Y===null&&(Y=F.id),A.push(F))},F=>{p.error(`[SSE:${y}] Fan-Out reader error:`,F),b.close()});if(b.onClose(te),h===null){await a.ready();try{let F=await o?.getClient();if(F){let Z=await F.xRevRange(i,"+","-",{COUNT:1});Z.length>0&&!$e(Z[0].id,M)&&(M=Z[0].id)}}catch{}}if(b.writeEvent({event:null,id:M===Do?null:M,data:Io}),ps(b,{intervalMs:Yr,retry:fs,runtime:cs}),h===null||o===void 0)return;await a.ready();let le=await o.getClient();if(le===void 0)throw new Error("redis client unavailable for the SSE catch-up");if(!await Q(le,h)){b.writeRetry(To),b.writeEvent({event:"resync-required",id:null,data:""}),b.close();return}I=!1;for(let F of A.splice(0))V(F)};return async({request:b,params:d})=>{let S,y=()=>{let f=new Headers;return S!==void 0&&f.append("Set-Cookie",S),f},h=f=>ys(f,{data:"",retryMs:To,headers:y()});try{let f=await t(b,{failureRedirect:null});S=f.cookie;let{user:T}=f;if(!T)return h("auth-required");let L=await r.getUserIdByExternalId(T.id);if(!L)return h("forbidden");if(d.endpoint!=="updates")return new Response("Not Found",{status:404,headers:y()});let x=ms(b,Vr);if(x!==null&&!qr(x))return p.warn(`[SSE:${L}] malformed resume cursor; asking the client to resync`),h("resync-required");let M=zt(b),I=await l.admit(L,"sse",M);if(I===null){let Y=y();for(let[V,v]of Object.entries(Ne(503)))Y.set(V,v);return new Response("Too many streams",{status:503,headers:Y})}let A=!1;try{let Y=await n(b,"initial");return ds({requestSignal:M,headers:y(),onError:(V,v)=>p.error(`[SSE:${L}] ${v} failed:`,V),produce:V=>(A=!0,V.onClose(I),s(V,{request:b,internalUserId:L,cursor:x,initialScope:Y}))})}finally{A||I()}}catch(f){if(f instanceof Response)throw f;let T=f instanceof Error?f:new Error(String(f));return p.error(`500 sse name=${T.name} message=${T.message}`),new Response("Internal Server Error",{status:500,headers:y()})}}};var xo=(e,t)=>{let r=new Headers({...t?.headers,"Content-Type":"application/json"});return t?.setCookie&&r.append("Set-Cookie",t.setCookie),new Response(JSON.stringify(e),{status:t?.status??200,headers:r})},Ss=Object.freeze({...St,route:"api",frameworkDataRefusal:({params:e})=>hr(e.endpoint)&&bt[e.endpoint]==="stream"?Ut():null}),As=Object.freeze({...St,route:"action"}),Ts=(e,t,r)=>({...r,status:"OK",intent:e.intent,reportHubId:t,clientTempId:e.clientTempId}),Co=6e4,Po=5,Ds=Po*Math.ceil(Co/500),_s=2,Es=6,Is=6e4,ws=Po*_s*Es;function Mr(e){jt(e);let{authenticate:t,service:r,encodeUserId:n,redis:o,sseReader:a,streamKey:i}=e,l={titleMaxLength:de("service.titleMaxLength",r.titleMaxLength,1)},p=e.loginRedirectPath??"/auth/login",s=e.logger??fe(3,"[DailyReportAPI]"),b=e.logger??fe(3,"[DailyReportVisibility]"),d=e.logger??fe(1,"[DailyReportSSE]"),S=e.logger??fe(1,"[DailyReportAttachment]"),y=e.logger??fe(2,"[DailyReportIsolation]"),h=e.logger??fe(2,"[DailyReportAction]"),f=e.logger??fe(2,"[DailyReportAPI]"),T=e.logger??fe(2,"[DailyReportStreams]"),L=We({reason:"refresh_rate_limit",limitPerWindow:ws,windowMs:Is,logger:f,windowFields:()=>"route=api"}),x=to(T),M=(g,P,k,B)=>{let U=L.spend(P.id,`endpoint=${g}`);if(U===null)return null;let q=ue(k,B,{error:{message:U.message}},U.status);for(let[W,z]of Object.entries(U.headers))q.headers.set(W,z);return q},I=async(g,P="initial")=>{let k=e.resolveVisibleSourceTypes;if(!k)return _e.unrestricted("no visibility port injected: this deployment does not restrict by source type");try{let B=await k(g,{reason:P});return B==null?_e.unrestricted("visibility port returned null/undefined: this deployment opts out of source-type filtering"):_e.restrictTo(B)}catch(B){return b.error("resolveVisibleSourceTypes threw; failing closed (deny all)",B),_e.restrictTo([])}},A=async({request:g})=>{let{user:P,cookie:k}=await t(g,{failureRedirect:p}),B=new Headers;k&&B.append("Set-Cookie",k);let U=await r.getUserIdByExternalId(P.id),q=U?n(U):null;return{data:{user:P,userId:q},headers:B}},Y={[Ae.businessDate]:async(g,P,k,B,U)=>{let q=g.searchParams.get(Ce.businessDate),W=q===null?null:nt(q);if(W===null)return ue(k,P,{error:{message:"Invalid business date"}},400);let z=gt(g.searchParams.get(Ce.forceRefresh));if(z===null)return ue(k,P,{error:{message:"Invalid forceRefresh"}},400);let G=z?M(Ae.businessDate,B,k,P):null;if(G!==null)return G;let D=await r.getDailyReportsByBusinessDateByExternalId(U,W,B.id,{forceRefresh:z});return ue(k,P,{businessDate:W,reports:D},200)},[Ae.idsStream]:uo({service:r,logger:s,streamSlots:x,refuseForcedRead:(g,P,k)=>M(Ae.idsStream,g,P,k)}),[Ae.report]:async(g,P,k,B,U)=>{let q=je(g.searchParams.get(Ce.reportHubId));if(q===null)return ue(k,P,{error:{message:"Invalid reportHubId"}},400);let W=gt(g.searchParams.get(Ce.forceRefresh));if(W===null)return ue(k,P,{error:{message:"Invalid forceRefresh"}},400);let z=W?M(Ae.report,B,k,P):null;if(z!==null)return z;let G=await r.getDailyReportDetailByIdByExternalId(U,q,B.id,{snapshot:!0,forceRefresh:W});return G?ue(k,P,{report:G},200):ue(k,P,{error:{message:"Report not found"}},404)}},V=async({request:g,params:P})=>{let{user:k,cookie:B}=await t(g,{failureRedirect:null}),U=B??null;if(!k)return ue(g,U,{error:{message:"Unauthorized"}},401);let q=P.endpoint;if(!hr(q))return ue(g,U,{error:{message:"Unknown endpoint"}},404);let W=rn[bt[q]];if(!W.includes(g.method)){let G=ue(g,U,{error:{message:"Method not allowed"}},405);return G.headers.set("Allow",W.join(", ")),G}let z=ae();try{let G=new URL(g.url),D=await I(g),ie=await Y[q](G,U,g,k,D);return bt[q]==="json"&&s.debug(`${ie.status} endpoint=${q} etag_match=${ie.status===304}`),ie}catch(G){let D=ae()-z,ie=G instanceof Error?G:new Error(String(G));return s.error(`500 endpoint=${q} elapsed=${D}ms name=${ie.name} code=${"code"in ie?ie.code:"N/A"} message=${ie.message}`),s.error("Stack:",ie.stack),ue(g,U,{error:{message:"Internal Server Error"}},500)}},v=tn(h),Q=We({reason:"rate_limit",limitPerWindow:Ds,windowMs:Co,logger:h,windowFields:()=>"route=action"}),te=async(g,P,k,B,U)=>{let{clientTempId:q}=g;if(g.intent==="create"){let D=await r.createDailyReport(P,g.businessDate,q);return U(g,D.reportHubId,{report:D})}let{reportHubId:W,businessDate:z}=g,G=async(D,ie)=>{try{let xe=await ie(D.value);return U(D,W,{updatedStatus:{isStarred:xe.isStarred,isRead:xe.isRead},operationTimestamp:D.operationTimestamp})}catch(xe){if(xe instanceof Error&&xe.message==="Not Found")return B({error:"Report not found"},{status:404});throw xe}};switch(g.intent){case"update":try{return await r.updateDailyReport(W,P,g.changes,q),U(g,W,{})}catch(D){if(D instanceof Error){if(D.message==="Unauthorized")return B({error:"Unauthorized"},{status:403});if(D.message==="Not Found")return B({error:"Report not found"},{status:404})}throw D}case"publish":try{let D=await r.publishDailyReport(W,P,q);return U(g,W,{report:D})}catch(D){if(D instanceof Error){if(D.message==="Unauthorized")return B({error:"Unauthorized"},{status:403});if(D.message==="Not Found")return B({error:"Report not found"},{status:404})}throw D}case"delete":try{return await r.deleteDailyReport(W,P,q),U(g,W,{})}catch(D){if(D instanceof Error){if(D.message==="Unauthorized")return B({error:"Unauthorized"},{status:403});if(D.message==="Not Found")return B({error:"Report not found"},{status:404})}throw D}case"toggleStar":return await G(g,D=>r.setStarStatus(k,P,W,z,D,q));case"toggleRead":return await G(g,D=>r.setReadStatus(k,P,W,z,D,q));case"addComment":try{let D=await r.addComment(k,P,W,g.content,z,q);return U(g,W,{newComment:D})}catch(D){if(D instanceof Error){if(D.message==="Not Found")return B({error:"Report not found"},{status:404});if(D.message.startsWith("Comments are restricted"))return B({error:"Comments are restricted for this report"},{status:403})}throw D}case"deleteComment":try{return await r.deleteComment(k,P,W,g.commentId,z,q),U(g,W,{deletedCommentId:g.commentId})}catch(D){if(D instanceof Error){if(D.message==="Unauthorized")return B({error:"Unauthorized"},{status:403});if(D.message==="Not Found")return B({error:"Comment not found"},{status:404})}throw D}}},le=async({request:g,params:P})=>{let{user:k,cookie:B}=await t(g,{failureRedirect:null}),U=(z,G)=>xo(z,{...G,setCookie:B}),q=(z,G,D)=>xo(Ts(z,G,D),{setCookie:B});if(!k)return U({error:"Unauthorized"},{status:401});let W=ae();try{if(P.endpoint!==Ae.action)return U({error:"Unknown endpoint"},{status:404});let z=Q.spend(k.id,"action");if(z!==null)return U({error:z.message},{status:z.status,headers:z.headers});let G=await en(g,l);if("refusal"in G){let{refusal:Ze}=G;return Ze.status===413&&v(Ze.measuredBy),U({error:Ze.error},{status:Ze.status})}let{command:D}=G;if(D.intent==="clearCache"&&!e.enableDevCacheClear)return U({error:"Invalid intent"},{status:400});let ie=await r.getUserIdByExternalId(k.id);if(!ie)return U({error:"User not found"},{status:404});let xe=await I(g);return D.intent==="clearCache"?(await r.clearCache(),U({status:"OK",intent:"clearCache"})):await te(D,ie,xe,U,q)}catch(z){if(z instanceof Response)throw z;let G=ae()-W,D=z instanceof Error?z:new Error(String(z));return s.error(`500 action elapsed=${G}ms name=${D.name} message=${D.message}`),s.error("Stack:",D.stack),U({error:"Internal Server Error"},{status:500})}},F=wo({authenticate:t,service:r,resolveViewerScope:I,redis:o,sseReader:a,streamKey:i,streamSlots:x,logger:d}),Z=Qn({authenticate:t,service:r,encodeUserId:n,resolveViewerScope:I,logger:S}),H=un(y),J=(g,P)=>async k=>{let B=sn(k.request)?g.frameworkDataRefusal(k):null;if(B!==null)throw B;return ln(k.request,g)?(H(g.route,k.request),g.crossSiteRejection()):P(k)};return{index:{loader:A},api:{loader:J(Ss,V),action:J(As,le)},sse:{loader:J(_o,F)},attachment:{loader:J(Jn,Z)}}}import{runWithTransactionRetry as Cs}from"@aiquants/mssql";import{aliasedTable as dt,and as ne,asc as Jt,desc as mt,eq as C,getColumns as Ps,inArray as Ie,isNull as ge,or as pt,sql as Mo}from"drizzle-orm";var Qe=e=>Ps(e),vo=Mt([]),he=(e,t)=>{if(!e)return null;let r=e instanceof Date?e:new Date(e);if(Number.isNaN(r.getTime()))return typeof e=="string"?e:null;let n=r.getFullYear(),o=n<0?`-${String(-n).padStart(4,"0")}`:String(n).padStart(4,"0"),a=String(r.getMonth()+1).padStart(2,"0"),i=String(r.getDate()).padStart(2,"0");if(t==="YYYY-MM-DD")return`${o}-${a}-${i}`;let l=String(r.getHours()).padStart(2,"0"),p=String(r.getMinutes()).padStart(2,"0"),s=String(r.getSeconds()).padStart(2,"0");return`${o}-${a}-${i} ${l}:${p}:${s}`},Ms=e=>{let{length:t}=e;if(typeof t=="number"&&Number.isSafeInteger(t)&&t>=1)return t;throw Re("tables.hub.title","a character column with a declared length",t)},Lo=e=>e===""?null:e;function vr(e){let{db:t,tables:r,userTable:n,resolveUserId:o,encodeUserId:a,redis:i,cache:l,epochs:p}=e,{hub:s,internal:b,comment:d,label:S,hubLabel:y,userStatus:h}=r,f=e.externalSources??[],T=e.draftLabelNames&&e.draftLabelNames.length>0?e.draftLabelNames:[e.draftLabelName??"\u4E0B\u66F8\u304D"],L=T[0]??"\u4E0B\u66F8\u304D",x=e.logger??fe(1,"[DailyReportService]");jt(e);let M=Xn(e.attachments),I=Ms(s.title),A=c=>Cs(u=>t.transaction(m=>u(()=>c(m))),e.transactionRetry),Y=e.idsTtlMs??18e4,V="daily-report:ids:epoch",v=e.businessDateTtlMs??3e5,Q="daily-report:date-epoch:",te="daily-report:detail-epoch:",F=`${e.streamKey??"daily-report:sse-stream"}:v2`,Z=e.streamMaxLen??1e4,H=c=>p.incrementEpoch(c),J=c=>Ao(s.sourceType,c),g=async(c,u)=>{let m=await i?.getClient();if(!m){x.warn(`[SSE] Redis client unavailable (${u})`);return}let R=JSON.stringify(c),w=Buffer.byteLength(R);if(w>6356992){x.warn(`[SSE] Event too large (${u}): ${w} bytes > ${6356992}; not published`);return}let O=ae();try{await m.xAdd(F,"*",{data:R},{TRIM:{strategy:"MAXLEN",strategyModifier:"~",threshold:Z}});let _=ae()-O;_>1e3&&x.warn(`[SSE] Slow publish (${u}): ${_}ms`)}catch(_){x.error(`[SSE] Redis publish failed (${u}):`,_)}},P=async()=>{try{let c=await i?.getClient();if(c===void 0)return null;let[u]=await c.xRevRange(F,"+","-",{COUNT:1});return u===void 0?null:u.id}catch(c){return x.error("[DailyReportService] SSE stream anchor read failed",c),null}},k=c=>c==null||c===""?null:/^\d+$/.test(c)?a(Number(c)):c,B=()=>{let c={};for(let u of f)c[`ext_${u.sourceType}`]=Qe(u.table);return c},U=c=>{let u=c;for(let m of f)u=u.leftJoin(m.table,ne(C(s.sourceType,m.sourceType),C(s.sourceIdNum,m.idColumn)));return u},q=(c,u,m)=>{let{hub:R,internal:w}=u,O=R.summary,_=[],N=null,$=null,j=null,ee=null,re=null,Se=null,tt=[],Be=f.find(K=>K.sourceType===R.sourceType),rt=Be?u[`ext_${Be.sourceType}`]:void 0;if(Be&&rt){let K=Be.mapRow(rt);K.content!==void 0&&(O=K.content),K.employeeName!==void 0&&(Se=K.employeeName),K.category!==void 0&&(N=K.category),K.creationCategory!==void 0&&($=K.creationCategory),K.visitTimeFrom!==void 0&&(j=K.visitTimeFrom),K.visitTimeTo!==void 0&&(ee=K.visitTimeTo),K.customerName!==void 0&&(re=K.customerName),K.interviewers!==void 0&&(_=K.interviewers),K.externalComments!==void 0&&(tt=K.externalComments)}else R.sourceType==="Internal"&&w&&(O=w.body);let Le=(u.labels??[]).map(K=>({id:K.id,name:K.name,color:K.color})),pe=u.postedCommentRows??[],oe=ve(c.commentable,R.sourceType),ye=$?T.includes($):!1,tr=et?.[0]??null;return ye&&tr&&!Le.some(K=>K.id===tr)&&Le.push({id:tr,name:L,color:null}),{reportHubId:R.id,date:he(R.businessDate,"YYYY-MM-DD"),author:u.creatorName??k(R.createdBy)??"",userId:R.userId?a(R.userId):"",sourceType:R.sourceType??"Internal",createdAt:he(R.createdAt,"YYYY-MM-DD HH:mm:ss"),updatedAt:he(R.updatedAt,"YYYY-MM-DD HH:mm:ss"),updatedBy:k(R.updatedBy),employeeName:Se??u.creatorName??k(R.createdBy),category:N,creationCategory:$,visitTimeFrom:j,visitTimeTo:ee,customerName:re,interviewers:_,subject:R.title,content:O,externalComments:oe?tt:[],isRead:u.isRead??!1,isStarred:u.isStarred??!1,labels:Le,postedComments:pe.filter(K=>oe||m!==void 0&&K.userId===m).map(K=>({...K,userId:a(K.userId),isMine:m?K.userId===m:!1})),attachments:u.attachments}},W=async(c,u)=>{let m=dt(y,"draft_label"),R=await Ve();return(await t.select({reportHubId:s.id,businessDate:s.businessDate,sourceType:s.sourceType}).from(s).leftJoin(m,ne(C(m.hubId,s.id),Ie(m.labelId,R))).where(ne(ge(s.deletedAt),pt(C(s.userId,u),ge(s.userId),ge(m.hubId)),J(c.visible))).orderBy(mt(s.businessDate),mt(s.id))).map(O=>({...O,businessDate:he(O.businessDate,"YYYY-MM-DD")}))},z=async(c,u,m)=>{let R=await ie(u);if(!R)return[];if(Je(c.visible))return[];let w=dt(y,"draft_label"),O=await Ve();return(await t.select({reportHubId:s.id,businessDate:s.businessDate,sourceType:s.sourceType}).top(m).from(s).leftJoin(w,ne(C(w.hubId,s.id),Ie(w.labelId,O))).where(ne(ge(s.deletedAt),pt(C(s.userId,R),ge(s.userId),ge(w.hubId)),J(c.visible))).orderBy(mt(s.businessDate),mt(s.id))).map(N=>({...N,businessDate:he(N.businessDate,"YYYY-MM-DD")}))},G=async(c,u)=>{let m=await U(t.select({hub:Qe(s),internal:Qe(b),creatorName:n.displayName,...B()}).from(s)).leftJoin(b,C(s.id,b.hubId)).leftJoin(n,C(s.userId,n.id)).where(ne(C(s.businessDate,Mo`${u}`),ge(s.deletedAt),J(c.visible))).orderBy(mt(s.id)),R=await Ct(m.map(w=>w.hub.id));return m.map(w=>q(c,{...w,attachments:R.get(w.hub.id)??[]}))},D=new Map,ie=async c=>{if(!e.disableUserIdCache&&D.has(c))return D.get(c)??null;let u=await o(c);return u!==null&&!e.disableUserIdCache&&D.set(c,u),u},xe=async(c,u,{forceRefresh:m=!1,snapshot:R=!1,ttlMsOverride:w,onFetchStart:O}={})=>{let _=await ie(u);if(!_)return{items:[],streamAnchor:null,snapshot:vo};if(Je(c.visible))return{items:[],streamAnchor:await P(),snapshot:vo};let N=yo(_,wt(c)),[$]=await l.getOrFetch({cacheKey:N,fetcher:async()=>{let j=await P(),ee=await W(c,_);if(!Fr(ee)){x.warn("[DailyReportService] ids array is not in stream order; re-sorting (check SQL ORDER BY vs compareIdsStreamOrder, or concurrent row movement during the scan)");let re=[...ee].sort(vt);return[{items:re,streamAnchor:j,snapshot:Mt(re)}]}return[{items:ee,streamAnchor:j,snapshot:Mt(ee)}]},onFetchStart:O,forceRefresh:m,snapshot:R,ttlMsOverride:w??Y,epochKey:V,refreshAheadRatio:.5});if($===void 0)throw new Error("[DailyReportService] ids cache returned no record");return $},Ze=(c,u,{forceRefresh:m=!1,snapshot:R=!1,ttlMsOverride:w}={})=>{let O=Te(u);return O?Je(c.visible)?Promise.resolve([]):l.getOrFetch({cacheKey:fo(O,wt(c)),fetcher:()=>G(c,O),forceRefresh:m,snapshot:R,ttlMsOverride:w??v}):Promise.resolve([])},et=null,xt=async()=>(et!==null||(et=(await t.select({id:S.id}).from(S).where(Ie(S.name,T)).orderBy(S.id)).map(u=>u.id)),et),Ve=async()=>{let c=await xt();return c.length>0?c:[-1]},Xt=async()=>{let c=await xt();if(c.length===0)return null;let[u]=await t.select({id:S.id}).top(1).from(S).where(C(S.name,L));return u?.id??c[0]},Qo=(c,u)=>u!=null?"absent":c!=null?"present":"unknown",Ct=async c=>{let u=new Map,m=r.attachment;if(c.length===0||!m||M===null)return u;let R=M.idCodec,w=M.thumbnails!==null,O=await t.select({id:m.id,hubId:m.hubId,fileName:m.fileName,fileType:m.fileType,fileSize:m.fileSize,createdAt:m.createdAt,objectCheckedAt:m.objectCheckedAt,objectMissingAt:m.objectMissingAt}).from(m).where(Ie(m.hubId,c)).orderBy(Jt(m.createdAt),Jt(m.id));for(let _ of O){let N=_.fileType?String(_.fileType):null,$=_.fileSize!=null?Number(_.fileSize):null,j=Qo(_.objectCheckedAt,_.objectMissingAt),ee={id:R.encode(Number(_.id)),fileName:String(_.fileName),fileType:N,fileSize:$,createdAt:he(_.createdAt,"YYYY-MM-DD HH:mm:ss"),state:j,hasThumbnail:w&&j!=="absent"&&Vt({fileType:N,fileSize:$},M.maxBytes)},re=u.get(Number(_.hubId));re?re.push(ee):u.set(Number(_.hubId),[ee])}return u},Xo=async(c,u,m)=>{let R=r.attachment;if(!R||Je(c.visible))return null;let w=await Ve(),O=dt(y,"draft_label");return(await t.select({fileName:R.fileName,filePath:R.filePath,fileType:R.fileType,fileSize:R.fileSize}).top(1).from(R).innerJoin(s,C(s.id,R.hubId)).leftJoin(O,ne(C(O.hubId,s.id),Ie(O.labelId,w))).where(ne(C(R.id,u),ge(s.deletedAt),pt(C(s.userId,m),ge(O.hubId)),J(c.visible))))[0]??null},Zo=async c=>{let u=r.attachment;if(!u)return;let m=new Date;try{await t.update(u).set({objectCheckedAt:m,objectMissingAt:m,updatedAt:m}).where(C(u.id,c))}catch(R){x.error("markAttachmentMissing failed",R)}},ea=async c=>{let u=r.attachment;if(!u)return;let m=new Date;try{await t.update(u).set({objectCheckedAt:m,objectMissingAt:null,updatedAt:m}).where(C(u.id,c))}catch(R){x.error("markAttachmentPresent failed",R)}},ta=async(c,u,m,{forceRefresh:R=!1,snapshot:w=!1,ttlMsOverride:O}={})=>{let _=await ie(m);if(!_)return[];let N=Te(u);if(!N)return[];if(Je(c.visible))return[];let $=ho(N,_,wt(c));return l.getOrFetch({cacheKey:$,fetcher:async()=>{let j=await Ve(),ee=dt(y,"draft_label"),re=await U(t.select({hub:Qe(s),internal:Qe(b),isRead:h.isRead,isStarred:h.isStarred,creatorName:n.displayName,...B()}).from(s)).leftJoin(b,C(s.id,b.hubId)).leftJoin(h,ne(C(s.id,h.hubId),C(h.userId,_))).leftJoin(ee,ne(C(ee.hubId,s.id),Ie(ee.labelId,j))).leftJoin(n,C(s.userId,n.id)).where(ne(C(s.businessDate,Mo`${N}`),ge(s.deletedAt),pt(C(s.userId,_),ge(ee.hubId)),J(c.visible))).orderBy(mt(s.id));if(re.length===0)return[];let Se=re.map(oe=>oe.hub.id),tt=await t.select({hubId:y.hubId,id:S.id,name:S.name,color:S.color}).from(y).innerJoin(S,C(y.labelId,S.id)).where(Ie(y.hubId,Se)),Be=await t.select({hubId:d.hubId,id:d.id,body:d.body,createdAt:d.createdAt,userId:d.userId,userName:n.displayName}).from(d).leftJoin(n,C(d.userId,n.id)).where(Ie(d.hubId,Se)).orderBy(Jt(d.createdAt)),rt=await Ct(Se),Le=new Map,pe=new Map;for(let oe of tt){let ye=Le.get(oe.hubId);ye||(ye=[],Le.set(oe.hubId,ye)),ye.push({id:oe.id,name:oe.name,color:oe.color})}for(let oe of Be){let ye=pe.get(oe.hubId);ye||(ye=[],pe.set(oe.hubId,ye)),ye.push({id:oe.id,content:oe.body,createdAt:he(oe.createdAt,"YYYY-MM-DD HH:mm:ss")||"",userId:oe.userId,userName:oe.userName||""})}return re.map(oe=>{let ye=oe.hub.id;return q(c,{...oe,attachments:rt.get(ye)??[],labels:Le.get(ye)||[],postedCommentRows:pe.get(ye)||[]},_)})},forceRefresh:R,snapshot:w,ttlMsOverride:O??v,epochKey:`${Q}${N}`})},yt=async(c,u,m,{forceRefresh:R=!1,snapshot:w=!1,ttlMsOverride:O}={})=>{if(Je(c.visible))return null;let _=Ro(u,m,wt(c));return(await l.getOrFetch({cacheKey:_,fetcher:async()=>{let $=await Ve(),j=dt(y,"draft_label"),ee=await U(t.select({hub:Qe(s),internal:Qe(b),isRead:h.isRead,isStarred:h.isStarred,creatorName:n.displayName,...B()}).from(s)).leftJoin(b,C(s.id,b.hubId)).leftJoin(h,ne(C(s.id,h.hubId),C(h.userId,m))).leftJoin(j,ne(C(j.hubId,s.id),Ie(j.labelId,$))).leftJoin(n,C(s.userId,n.id)).where(ne(C(s.id,u),ge(s.deletedAt),pt(C(s.userId,m),ge(j.hubId)),J(c.visible)));if(ee.length===0)return[];let re=ee[0].hub.id,Se=await t.select({id:S.id,name:S.name,color:S.color}).from(y).innerJoin(S,C(y.labelId,S.id)).where(C(y.hubId,re)),tt=await t.select({id:d.id,body:d.body,createdAt:d.createdAt,userId:d.userId,userName:n.displayName}).from(d).leftJoin(n,C(d.userId,n.id)).where(C(d.hubId,re)).orderBy(Jt(d.createdAt)),Be=await Ct([re]),rt=Se.map(pe=>({id:pe.id,name:pe.name,color:pe.color})),Le=tt.map(pe=>({id:pe.id,content:pe.body,createdAt:he(pe.createdAt,"YYYY-MM-DD HH:mm:ss")||"",userId:pe.userId,userName:pe.userName||""}));return[q(c,{...ee[0],attachments:Be.get(re)??[],labels:rt,postedCommentRows:Le},m)]},forceRefresh:R,snapshot:w,ttlMsOverride:O??v,epochKey:`${te}${u}`}))[0]??null},ra=async(c,u,m,R={})=>{let w=await ie(m);return w?yt(c,u,w,R):null},na=async(c,u)=>{let m=await Ve(),R=dt(y,"draft_label"),[w]=await t.select({sourceType:s.sourceType,deletedAt:s.deletedAt}).top(1).from(s).leftJoin(R,ne(C(R.hubId,s.id),Ie(R.labelId,m))).where(ne(C(s.id,c),pt(C(s.userId,u),ge(R.hubId))));return w??null},Zt=async(c,u,m)=>{let R=await na(u,m);if(!R||R.deletedAt||!ve(c.visible,R.sourceType))throw new Error("Not Found")},oa=async(c,u,m,R,w,O)=>{await Zt(c,m,u);let _=await t.select().top(1).from(h).where(ne(C(h.hubId,m),C(h.userId,u))),N;if(_.length>0?_[0].isStarred!==w?N=(await t.update(h).set({isStarred:w,updatedAt:new Date,updatedBy:String(u)}).output().where(ne(C(h.hubId,m),C(h.userId,u))))[0]:N=_[0]:N=(await t.insert(h).output().values({hubId:m,userId:u,isStarred:w,isRead:!1,createdAt:new Date,createdBy:String(u),updatedAt:new Date,updatedBy:String(u)}))[0],R){let $=Te(R);$&&(l.invalidatePrefix(lt($,u)),await H(`${Q}${$}`))}return l.invalidatePrefix(Kt(m,u)),await H(`${te}${m}`),await g(kt.parse({type:"status-update",reportHubId:m,recipientRawUserId:u,statusType:"star",value:w,clientTempId:O}),"setStarStatus"),N},aa=async(c,u,m,R,w,O)=>{await Zt(c,m,u);let _=await t.select().top(1).from(h).where(ne(C(h.hubId,m),C(h.userId,u))),N;if(_.length>0?_[0].isRead!==w?N=(await t.update(h).set({isRead:w,updatedAt:new Date,updatedBy:String(u)}).output().where(ne(C(h.hubId,m),C(h.userId,u))))[0]:N=_[0]:N=(await t.insert(h).output().values({hubId:m,userId:u,isRead:w,isStarred:!1,createdAt:new Date,createdBy:String(u),updatedAt:new Date,updatedBy:String(u)}))[0],R){let $=Te(R);$&&(l.invalidatePrefix(lt($,u)),await H(`${Q}${$}`))}return l.invalidatePrefix(Kt(m,u)),await H(`${te}${m}`),await g(kt.parse({type:"status-update",reportHubId:m,recipientRawUserId:u,statusType:"read",value:w,clientTempId:O}),"setReadStatus"),N},Lr=async(c,u)=>{if(u===null)return;let m=await Ve(),[R]=await t.select({hubId:y.hubId}).top(1).from(y).where(ne(C(y.hubId,c),Ie(y.labelId,m)));return R?u:void 0},ia=async(c,u,m,R,w,O)=>{let[_]=await t.select({sourceType:s.sourceType,deletedAt:s.deletedAt,userId:s.userId}).top(1).from(s).where(C(s.id,m));if(!_||_.deletedAt)throw new Error("Not Found");if(await Zt(c,m,u),!ve(c.commentable,_.sourceType))throw new Error("Comments are restricted by the viewer's comment permission");if(_.sourceType.toLowerCase()!=="internal")throw new Error("Comments are restricted for external daily report sources");let N=await Lr(m,_.userId),[$]=await t.insert(d).output().values({hubId:m,userId:u,body:R,createdAt:new Date,createdBy:String(u),updatedAt:new Date,updatedBy:String(u)}),[j]=await t.select({displayName:n.displayName}).top(1).from(n).where(C(n.id,u)),ee=j?.displayName??"";if(w){let Se=Te(w);Se&&(l.invalidatePrefix(_t(Se)),await H(`${Q}${Se}`))}l.invalidatePrefix(Me(m)),await H(`${te}${m}`);let re={id:$.id,userId:a($.userId),userName:ee,content:$.body,createdAt:he($.createdAt,"YYYY-MM-DD HH:mm:ss")??"",isMine:!0};return await g(ur.parse({type:"comment-add",reportHubId:m,comment:re,clientTempId:O,recipientRawUserId:N,sourceType:_.sourceType}),"addComment"),re},sa=async(c,u)=>await c.select().top(1).from(d).where(C(d.id,u)),la=async(c,u,m,R,w,O)=>{let _=await sa(t,R);if(_.length===0)throw new Error("Not Found");if(_[0].hubId!==m)throw new Error("Not Found");let[N]=await t.select({userId:s.userId,sourceType:s.sourceType}).top(1).from(s).where(C(s.id,_[0].hubId));if(!(N&&ve(c.visible,N.sourceType)))throw new Error("Not Found");if(_[0].userId!==u)throw new Error("Unauthorized");let $=await Lr(m,N.userId);if(await t.delete(d).where(C(d.id,R)),w){let j=Te(w);j&&(l.invalidatePrefix(_t(j)),await H(`${Q}${j}`))}l.invalidatePrefix(Me(m)),await H(`${te}${m}`),await g(cr.parse({type:"comment-delete",reportHubId:m,commentId:R,clientTempId:O,recipientRawUserId:$,sourceType:N?.sourceType}),"deleteComment")},ua=async(c,u,m)=>{if(!Lt(u))throw Re("createDailyReport: businessDate","a business-date key in the canonical form YYYY-MM-DD naming a day from 0001-01-01 to 9999-12-31",u);x.info("createDailyReport called",{userId:c,businessDate:u});let[R]=await t.select({displayName:n.displayName}).from(n).where(C(n.id,c)),w=R?.displayName??a(c);try{let O=await A(async N=>{x.info("Starting transaction");let $=`internal-temp-${Date.now()}-${Math.random()}`,[j]=await N.insert(s).output().values({sourceType:"Internal",sourceId:$,businessDate:new Date(`${u}T00:00:00Z`),userId:c,title:"(\u7121\u984C)",createdAt:new Date,createdBy:String(c),updatedAt:new Date,updatedBy:String(c)});await N.update(s).set({sourceId:String(j.id)}).where(C(s.id,j.id)),x.info("Hub created",j),await N.insert(b).values({hubId:j.id,body:"",createdAt:new Date,createdBy:String(c),updatedAt:new Date,updatedBy:String(c)}),x.info("Internal created"),x.info("Calling getDraftLabelId");let ee=await Xt();x.info("draftLabelId",ee);let re=[];return ee&&(await N.insert(y).values({hubId:j.id,labelId:ee,createdAt:new Date,createdBy:String(c)}),re.push({id:ee,name:L,color:null})),x.info("Label assigned"),{reportHubId:j.id,date:u,createdAt:he(j.createdAt,"YYYY-MM-DD HH:mm:ss"),author:w,userId:a(c),sourceType:"Internal",employeeName:w,updatedBy:a(c),updatedAt:he(j.updatedAt,"YYYY-MM-DD HH:mm:ss"),category:null,creationCategory:null,visitTimeFrom:null,visitTimeTo:null,customerName:null,interviewers:[],subject:j.title,content:"",externalComments:[],isRead:!0,isStarred:!1,labels:re,postedComments:[],attachments:[]}});l.invalidatePrefix(lt(u,c)),l.invalidatePrefix(Ke),l.invalidatePrefix(xr(c)),await H(V),await H(`${Q}${u}`);let _=await yt(_e.unrestricted("post-write self read: the writer always sees the row they just wrote"),O.reportHubId,c,{forceRefresh:!0});if(_){let N=await xt(),$=_.labels.some(j=>N.includes(j.id));await g(dr.parse({type:"report-create",reportHubId:_.reportHubId,report:_,clientTempId:m,recipientRawUserId:$?c:void 0}),"createDailyReport")}return _??O}catch(O){throw x.error("Error in createDailyReport",O),O}},Pt=async(c,u)=>await c.select().top(1).from(s).where(C(s.id,u)),er=async(c,u,m)=>{await c.update(s).set(m).where(C(s.id,u))},Or=async(c,u,m)=>{await c.update(b).set(m).where(C(b.hubId,u))},Nr=async(c,u,m)=>{await c.delete(y).where(ne(C(y.hubId,u),C(y.labelId,m)))};return{streamKey:F,streamMaxLen:Z,attachmentDelivery:M,titleMaxLength:I,clearCache:async()=>{l.clearAll(),D.clear(),et=null,p&&await H(V),x.info("[DailyReportService] Server-side DB/SQL caches cleared successfully.")},invalidateHubReadCaches:async(c,u)=>{l.invalidatePrefix(Ke),l.invalidatePrefix(Ge),await H(V);for(let m of new Set(c))l.invalidatePrefix(Me(m)),await H(`${te}${m}`);for(let m of new Set(u)){let R=Te(m);R&&await H(`${Q}${R}`)}},getUserIdByExternalId:ie,getDailyReportIdsByExternalId:xe,getDailyReportIdsFirstPageByExternalId:z,readSseStreamAnchor:P,getDailyReportsByBusinessDate:Ze,getDailyReportsByBusinessDateByExternalId:ta,getDailyReportDetailById:yt,getDailyReportDetailByIdByExternalId:ra,getDraftLabelId:Xt,getAttachmentsByHubIds:Ct,getAttachmentForUser:Xo,markAttachmentMissing:Zo,markAttachmentPresent:ea,setStarStatus:oa,setReadStatus:aa,addComment:ia,deleteComment:la,createDailyReport:ua,updateDailyReport:async(c,u,m,R)=>{let w=await Pt(t,c);if(!w.length||w[0].deletedAt)throw new Error("Not Found");if(w[0].userId!==u)throw new Error("Unauthorized");await A(async N=>{m.title!==void 0&&await er(N,c,{title:Lo(m.title),updatedAt:new Date,updatedBy:String(u)}),m.content!==void 0&&await Or(N,c,{body:Lo(m.content),updatedAt:new Date,updatedBy:String(u)})}),l.invalidatePrefix(Me(c)),l.invalidatePrefix(Ke),await H(`${te}${c}`);let O=Te(he(w[0].businessDate,"YYYY-MM-DD"));O&&(l.invalidatePrefix(_t(O)),await H(`${Q}${O}`));let _=await yt(_e.unrestricted("post-write self read: the writer always sees the row they just wrote"),c,u,{forceRefresh:!0});if(_){let N=await xt(),$=_.labels.some(j=>N.includes(j.id));await g(mr.parse({type:"report-update",reportHubId:_.reportHubId,report:_,clientTempId:R,recipientRawUserId:$?u:void 0}),"updateDailyReport")}},publishDailyReport:async(c,u,m)=>{let R=await Pt(t,c);if(!R.length)throw new Error("Not Found");if(R[0].userId!==u)throw new Error("Unauthorized");let w=await Xt();if(!w)return null;if(await Nr(t,c,w),l.invalidatePrefix(Me(c)),l.invalidatePrefix(Ke),l.invalidatePrefix(Ge),await H(V),R[0].businessDate){let N=Te(he(R[0].businessDate,"YYYY-MM-DD"));N&&await H(`${Q}${N}`)}let O=Te(he(R[0].businessDate,"YYYY-MM-DD"));O&&l.invalidatePrefix(lt(O,u));let _=await yt(_e.unrestricted("post-write self read: the writer always sees the row they just wrote"),c,u,{forceRefresh:!0});return _&&await g(pr.parse({type:"report-publish",reportHubId:_.reportHubId,report:_,clientTempId:m}),"publishDailyReport"),_??null},deleteDailyReport:async(c,u,m)=>{let R=await Pt(t,c);if(!R.length||R[0].deletedAt)throw new Error("Not Found");if(R[0].userId!==u)throw new Error("Unauthorized");if(await er(t,c,{deletedAt:new Date,deletedBy:String(u),updatedAt:new Date,updatedBy:String(u)}),l.invalidatePrefix(Me(c)),l.invalidatePrefix(Ke),l.invalidatePrefix(Ge),await H(V),R[0].businessDate){let w=Te(he(R[0].businessDate,"YYYY-MM-DD"));w&&await H(`${Q}${w}`)}await g(yr.parse({type:"report-delete",reportHubId:c,clientTempId:m,sourceType:R[0].sourceType}),"deleteDailyReport")},findDailyReportHubById:Pt,updateDailyReportHub:er,updateDailyReportInternal:Or,deleteDailyReportLabel:Nr}}var vs=fe(1,"[DailyReportExternalSource]"),Ls=(e,t,r,n=vs)=>{if(!e)return[];try{let o=JSON.parse(e);return Array.isArray(o)?o.map(r).filter(a=>a!==null):(n.warn(`Unexpected ${t} format: not an array`),[])}catch(o){return n.warn(`Failed to parse ${t}:`,o),[]}};import{desc as Oo,sql as Os}from"drizzle-orm";import{bigint as ce,bit as No,date as Ns,datetime2 as me,foreignKey as we,index as Ye,int as ks,mssqlSchema as Bs,nvarchar as X,primaryKey as Xe,uniqueIndex as Us}from"drizzle-orm/mssql-core";function Fs(e,t){let r=Bs(e),n=t.userTable,o=r.table("DailyReportHub",{id:ce("id",{mode:"number"}).identity().notNull(),sourceType:X("source_type",{length:20}).notNull(),sourceId:X("source_id",{length:100}).notNull(),sourceIdNum:ce("source_id_num",{mode:"number"}).generatedAlwaysAs(Os`TRY_CAST(source_id AS BIGINT)`),businessDate:Ns("business_date"),userId:ce("user_id",{mode:"number"}),title:X("title",{length:200}),summary:X("summary",{length:"max"}),createdAt:me("created_at").notNull(),createdBy:X("created_by",{length:50}).notNull(),updatedAt:me("updated_at").notNull(),updatedBy:X("updated_by",{length:50}).notNull(),deletedAt:me("deleted_at"),deletedBy:X("deleted_by",{length:50})},d=>[Xe({name:`${e}_DailyReportHub_pk`,columns:[d.id]}),we({name:`${e}_DailyReportHub_user_id_fk`,columns:[d.userId],foreignColumns:[n.id]}),Ye(`${e}_DailyReportHub_business_date_index`).on(d.businessDate),Ye(`${e}_DailyReportHub_updated_at_index`).on(d.updatedAt),Ye(`${e}_DailyReportHub_source_index`).on(d.sourceType,d.sourceId),Ye(`${e}_DailyReportHub_user_id_index`).on(d.userId),Ye(`${e}_DailyReportHub_business_date_id_index`).on(Oo(d.businessDate),Oo(d.id)),Ye(`${e}_DailyReportHub_deleted_at_index`).on(d.deletedAt)]),a=r.table("DailyReportInternal",{hubId:ce("hub_id",{mode:"number"}).notNull(),body:X("body",{length:"max"}),metadata:X("metadata",{length:"max"}),createdAt:me("created_at").notNull(),createdBy:X("created_by",{length:50}).notNull(),updatedAt:me("updated_at").notNull(),updatedBy:X("updated_by",{length:50}).notNull()},d=>[Xe({name:`${e}_DailyReportInternal_pk`,columns:[d.hubId]}),we({name:`${e}_DailyReportInternal_hub_id_fk`,columns:[d.hubId],foreignColumns:[o.id]})]),i=r.table("DailyReportComment",{id:ce("id",{mode:"number"}).identity().notNull(),hubId:ce("hub_id",{mode:"number"}).notNull(),userId:ce("user_id",{mode:"number"}).notNull(),body:X("body",{length:"max"}).notNull(),createdAt:me("created_at").notNull(),createdBy:X("created_by",{length:50}).notNull(),updatedAt:me("updated_at").notNull(),updatedBy:X("updated_by",{length:50}).notNull()},d=>[Xe({name:`${e}_DailyReportComment_pk`,columns:[d.id]}),we({name:`${e}_DailyReportComment_hub_id_fk`,columns:[d.hubId],foreignColumns:[o.id]}),we({name:`${e}_DailyReportComment_user_id_fk`,columns:[d.userId],foreignColumns:[n.id]}),Ye(`${e}_DailyReportComment_hub_id_index`).on(d.hubId)]),l=r.table("DailyReportLabel",{id:ce("id",{mode:"number"}).identity().notNull(),userId:ce("user_id",{mode:"number"}),name:X("name",{length:50}).notNull(),color:X("color",{length:20}),sortOrder:ks("sort_order"),createdAt:me("created_at").notNull(),createdBy:X("created_by",{length:50}).notNull(),updatedAt:me("updated_at").notNull(),updatedBy:X("updated_by",{length:50}).notNull()},d=>[Xe({name:`${e}_DailyReportLabel_pk`,columns:[d.id]}),we({name:`${e}_DailyReportLabel_user_id_fk`,columns:[d.userId],foreignColumns:[n.id]})]),p=r.table("DailyReportHub_Label",{hubId:ce("hub_id",{mode:"number"}).notNull(),labelId:ce("label_id",{mode:"number"}).notNull(),createdAt:me("created_at").notNull(),createdBy:X("created_by",{length:50}).notNull()},d=>[Xe({name:`${e}_DailyReportHub_Label_pk`,columns:[d.hubId,d.labelId]}),we({name:`${e}_DailyReportHub_Label_hub_id_fk`,columns:[d.hubId],foreignColumns:[o.id]}),we({name:`${e}_DailyReportHub_Label_label_id_fk`,columns:[d.labelId],foreignColumns:[l.id]})]),s=r.table("DailyReportUserStatus",{hubId:ce("hub_id",{mode:"number"}).notNull(),userId:ce("user_id",{mode:"number"}).notNull(),isRead:No("is_read").default(!1).notNull(),isStarred:No("is_starred").default(!1).notNull(),createdAt:me("created_at").notNull(),createdBy:X("created_by",{length:50}).notNull(),updatedAt:me("updated_at").notNull(),updatedBy:X("updated_by",{length:50}).notNull()},d=>[Xe({name:`${e}_DailyReportUserStatus_pk`,columns:[d.hubId,d.userId]}),we({name:`${e}_DailyReportUserStatus_hub_id_fk`,columns:[d.hubId],foreignColumns:[o.id]}),we({name:`${e}_DailyReportUserStatus_user_id_fk`,columns:[d.userId],foreignColumns:[n.id]})]),b=r.table("DailyReportAttachment",{id:ce("id",{mode:"number"}).identity().notNull(),hubId:ce("hub_id",{mode:"number"}).notNull(),uploadedBy:ce("uploaded_by",{mode:"number"}),sourceKey:X("source_key",{length:200}).notNull(),fileName:X("file_name",{length:255}).notNull(),filePath:X("file_path",{length:"max"}).notNull(),fileType:X("file_type",{length:100}),fileSize:ce("file_size",{mode:"number"}),objectCheckedAt:me("object_checked_at"),objectMissingAt:me("object_missing_at"),createdAt:me("created_at").notNull(),createdBy:X("created_by",{length:50}).notNull(),updatedAt:me("updated_at").notNull(),updatedBy:X("updated_by",{length:50}).notNull()},d=>[Xe({name:`${e}_DailyReportAttachment_pk`,columns:[d.id]}),we({name:`${e}_DailyReportAttachment_hub_id_fk`,columns:[d.hubId],foreignColumns:[o.id]}),we({name:`${e}_DailyReportAttachment_uploaded_by_fk`,columns:[d.uploadedBy],foreignColumns:[n.id]}),Us(`${e}_DailyReportAttachment_source_unique`).on(d.hubId,d.sourceKey),Ye(`${e}_DailyReportAttachment_hub_id_index`).on(d.hubId,d.createdAt)]);return{hub:o,internal:a,comment:i,attachment:b,label:l,hubLabel:p,userStatus:s}}var Hs=5e7,zo=2e8,$s=1,Wo=Object.freeze({fixedBytes:4*1024*1024,pipelineRows:2048,wholeImageBuffer:Object.freeze({"jpeg-single-scan":Object.freeze({kind:"none"}),"jpeg-multi-scan":Object.freeze({kind:"jpeg-coefficients"}),png:Object.freeze({kind:"none"}),"png-interlaced":Object.freeze({kind:"decoded-raster"}),gif:Object.freeze({kind:"canvas",bytesPerPixel:4}),"webp-lossy":Object.freeze({kind:"none"}),"webp-lossy-alpha":Object.freeze({kind:"canvas",bytesPerPixel:5}),"webp-lossless":Object.freeze({kind:"canvas",bytesPerPixel:4}),"webp-animated":Object.freeze({kind:"canvas",bytesPerPixel:9})})}),ko=125,Bo=4,Uo=16,Fo=50,Ho=2,Qt=Object.freeze({renderMs:be.renderMs,nanosecondsPerBlockVisit:ko,margin:Bo,maxBlockVisits:Math.floor(be.renderMs*1e6/(ko*Bo)),walkBudgetMs:Uo,nanosecondsPerWalkStep:Fo,walkMargin:Ho,maxWalkSteps:Math.floor(Uo*1e6/(Fo*Ho))}),Ys=new Map([["uchar",1],["char",1],["ushort",2],["short",2],["uint",4],["int",4],["float",4],["complex",8],["double",8]]),$o=75,Yo=4,Vo="#ffffff",Vs=1,qs={png:"VipsForeignLoadPngBuffer",jpeg:"VipsForeignLoadJpegBuffer",gif:"VipsForeignLoadNsgifBuffer",webp:"VipsForeignLoadWebpBuffer"},js=[/out of memory/i,/insufficient memory/i,/memory allocation|allocation failed/i,/(?:cannot|could not|unable to|failed to) allocate/i,/picture memory error/i,/unable to create thread|error creating thread|resource temporarily unavailable/i,/too many open files|no space left on device/i,/\b(?:ENOMEM|EAGAIN|EMFILE|ENFILE|ENOSPC)\b/],qo=Object.freeze({ok:!1,reason:"failed"}),jo=Object.freeze({ok:!1,reason:"unsupported"}),Go=e=>({layout:e.multiScan?"jpeg-multi-scan":"jpeg-single-scan",coefficientBytes:Ln(e)}),Ko=(e,t)=>{switch(t){case"jpeg":{let r=Dr(e);return r===null?null:Go(r)}case"png":{let r=kn(e);return r===null?null:{layout:r?"png-interlaced":"png",coefficientBytes:0}}case"gif":return{layout:"gif",coefficientBytes:0};case"webp":{let r=Bn(e,Qt.maxWalkSteps);return r===null?null:{layout:`webp-${r}`,coefficientBytes:0}}}},Jo=(e,t)=>{let r=Ys.get(t.depth);if(r===void 0)return null;let n=t.channels*r,o=Wo,a=o.wholeImageBuffer[e.layout];return(a.kind==="none"?0:a.kind==="decoded-raster"?t.width*t.height*n:a.kind==="jpeg-coefficients"?e.coefficientBytes:t.width*t.height*a.bytesPerPixel)+o.pipelineRows*t.width*n+o.fixedBytes},zs=(e,t,r)=>{let n=Ko(e,t);return n===null?null:Jo(n,r)},Ws=e=>e!==null&&e<=zo,Gs=(e,t)=>{if(t!=="jpeg")return Ko(e,t);let r=On(e,Qt);return r===null||r.blockVisits>Qt.maxBlockVisits?null:Go(r.header)},Ks=e=>{let t=e instanceof Error?e.message:"";return js.some(r=>r.test(t))?"failed":"unsupported"},Js=e=>{e.cache(!1),e.concurrency($s),e.block({operation:["VipsForeignLoad"]}),e.unblock({operation:Object.values(qs)});let t=async(n,o,a,i,l)=>{let p=Gs(n,o);if(p===null)return jo;try{let s=e(n,{limitInputPixels:Hs,animated:!1});if(!Ws(Jo(p,await s.metadata())))return jo;if(l.aborted)return qo;let b=await s.rotate().resize({width:a,height:i,fit:"inside",withoutEnlargement:!0}).flatten({background:Vo}).webp({quality:$o,effort:Yo}).toBuffer();return{ok:!0,bytes:new Uint8Array(b),contentType:"image/webp"}}catch(s){return{ok:!1,reason:Ks(s)}}},r=async(n,{format:o,maxWidth:a,maxHeight:i,signal:l})=>l.aborted?qo:t(n,o,a,i,l);return{id:`sharp-${e.versions.sharp}/vips-${e.versions.vips}/webp-q${$o}-e${Yo}/flatten-${Vo}/v${Vs}`,render:r}};function Td(e){e.redis||(e.logger??console).warn("[DailyReport] redis provider is not injected: cross-worker cache invalidation is disabled (staleness is bounded only by TTL) and SSE publishing is skipped.");let t=or(e.redis),r=new Rt({defaultTtlMs:e.cacheDefaultTtlMs??6e4},t),n=vr({...e,cache:r,epochs:t}),o=new Et({redis:e.redis,streamKey:n.streamKey,cache:r,logger:e.logger}),a=Mr({authenticate:e.authenticate,resolveVisibleSourceTypes:e.resolveVisibleSourceTypes,service:n,encodeUserId:e.encodeUserId,redis:e.redis,sseReader:o,streamKey:n.streamKey,loginRedirectPath:e.loginRedirectPath,enableDevCacheClear:e.enableDevCacheClear,logger:e.logger});return{service:n,cache:r,epochs:t,sseReader:o,streamKey:n.streamKey,knownSourceTypes:[...new Set(["Internal",...(e.externalSources??[]).map(i=>i.sourceType)])],...a}}export{Er as DAILY_REPORT_ATTACHMENT_THUMBNAIL_MAX_OUTPUT_BYTES,_r as DAILY_REPORT_ATTACHMENT_THUMBNAIL_OUTPUT_MEDIA_TYPES,zo as DAILY_REPORT_SHARP_THUMBNAIL_DECODE_BUDGET_BYTES,Qt as DAILY_REPORT_SHARP_THUMBNAIL_DECODE_WORK_MODEL,Wo as DAILY_REPORT_SHARP_THUMBNAIL_WORKING_SET_MODEL,Pr as DAILY_REPORT_SSE_CATCH_UP_BATCH,Eo as DAILY_REPORT_SSE_VISIBILITY_REFRESH_MS,Et as DailyReportSseReader,_e as DailyReportViewerScope,Rt as SqlResultCache,Mr as createDailyReportHandlers,Td as createDailyReportServer,vr as createDailyReportService,or as createEpochStore,Js as createSharpThumbnailRenderer,Fs as defineDailyReportSchema,At as generateETag,$e as isStreamIdLte,ue as jsonResponseWithETag,fr as parseClientTempId,zs as predictSharpThumbnailWorkingSetBytes,Dt as readDailyReportSseStreamEntry,Ls as transformJsonArray};
 /* v8 ignore next -- @preserve 到達不能: 時間切れと中断の購読はどちらも cleanup で同時に外れ、枠を渡すときも先に cleanup するので、列にいない待機者でここへは来ない。それでも splice(-1) が別の待機者を消さないよう残す */