@haneinfo/attachments 0.0.0-stage → 0.2.0

package/dist/service.d.ts

@@ -0,0 +1,132 @@
+import type { Readable } from 'node:stream';
+import { type AttachmentScannerPort, type BackgroundJobContext, type BackgroundJobsPort, type FileStoragePort, type IdentityStorePort, type RbacPolicyPort } from '@haneinfo/plugin-api';
+import { StateMachineRuntime } from '@haneinfo/state-machine';
+import { type OnModuleInit } from '@nestjs/common';
+import { type AttachmentsConfig } from './config';
+import { AttachmentsStore } from './store';
+export declare class AttachmentsService implements OnModuleInit {
+    readonly store: AttachmentsStore;
+    readonly storage: FileStoragePort;
+    private readonly jobs;
+    private readonly runtime;
+    private readonly rbac?;
+    private readonly identity?;
+    private readonly scanner?;
+    private readonly now;
+    readonly config: {
+        driver: "local" | "s3";
+        maxFileBytes: number;
+        maxAttachmentsPerInstance: number;
+        allowedTypes: ("pdf" | "png" | "jpeg" | "webp" | "gif" | "docx" | "xlsx" | "pptx" | "csv" | "txt")[];
+        deletedRetentionDays: number;
+        pendingScanTimeoutMs: number;
+        maxUploadMs: number;
+        cleanupBatchSize: number;
+        cleanupPollIntervalMs: number;
+        cleanupWorkerEnabled: boolean;
+        localRoot?: string | undefined;
+        s3?: {
+            bucket: string;
+            region: string;
+            forcePathStyle: boolean;
+            endpoint?: string | undefined;
+        } | undefined;
+    };
+    private readonly logger;
+    constructor(store: AttachmentsStore, storage: FileStoragePort, jobs: BackgroundJobsPort, runtime: StateMachineRuntime, config: AttachmentsConfig, rbac?: RbacPolicyPort | undefined, identity?: IdentityStorePort | undefined, scanner?: AttachmentScannerPort | undefined, now?: () => Date);
+    onModuleInit(): void;
+    private authorize;
+    private checkCount;
+    private quotaCount;
+    /** Must run before attaching a multipart parser or consuming the incoming file stream. */
+    preflight(userId: string, instanceId: string): Promise<void>;
+    private metadata;
+    listFor(userId: string, instanceId: string): Promise<{
+        items: {
+            id: string;
+            instanceId: string;
+            fileName: string;
+            declaredContentType: string;
+            detectedContentType: string;
+            size: number;
+            sha256: string;
+            status: "READY" | "PENDING_SCAN" | "REJECTED";
+            uploadedBy: string;
+            uploadedByName: string | null;
+            createdAt: Date;
+            canDelete: boolean;
+        }[];
+        canUpload: boolean;
+        limits: {
+            maxFileBytes: number;
+            maxAttachmentsPerInstance: number;
+            allowedTypes: ("pdf" | "png" | "jpeg" | "webp" | "gif" | "docx" | "xlsx" | "pptx" | "csv" | "txt")[];
+            count: number;
+            remaining: number;
+        };
+    }>;
+    private visible;
+    private notFound;
+    getFor(userId: string, instanceId: string, id: string): Promise<{
+        id: string;
+        instanceId: string;
+        fileName: string;
+        declaredContentType: string;
+        detectedContentType: string;
+        size: number;
+        sha256: string;
+        status: "READY" | "PENDING_SCAN" | "REJECTED";
+        uploadedBy: string;
+        uploadedByName: string | null;
+        createdAt: Date;
+        canDelete: boolean;
+    }>;
+    downloadFor(userId: string, instanceId: string, id: string): Promise<{
+        stream: Readable;
+        headers: {
+            'Content-Disposition': string;
+            'X-Content-Type-Options': string;
+            'Cache-Control': string;
+            'Content-Type': string;
+            'Content-Length': string;
+        };
+    }>;
+    private history;
+    uploadFor(userId: string, instanceId: string, input: {
+        fileName: string;
+        declaredContentType: string;
+        stream: Readable;
+        complete?: Promise<void>;
+    }, signal?: AbortSignal): Promise<{
+        id: string;
+        instanceId: string;
+        fileName: string;
+        declaredContentType: string;
+        detectedContentType: string;
+        size: number;
+        sha256: string;
+        status: "READY" | "PENDING_SCAN" | "REJECTED";
+        uploadedBy: string;
+        uploadedByName: string | null;
+        createdAt: Date;
+        canDelete: boolean;
+    }>;
+    deleteFor(userId: string, instanceId: string, id: string): Promise<{
+        deleted: boolean;
+    }>;
+    private enqueueScan;
+    enqueueCleanup(): Promise<import("@haneinfo/plugin-api").BackgroundJobRecord>;
+    scan(id: string, ctx: BackgroundJobContext): Promise<{
+        skipped: boolean;
+        status?: undefined;
+    } | {
+        status: string;
+        skipped?: undefined;
+    }>;
+    cleanup(ctx: BackgroundJobContext): Promise<{
+        removed: number;
+        garbage: number;
+        staged: number;
+    }>;
+}
+//# sourceMappingURL=service.d.ts.map

package/dist/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAEL,KAAK,qBAAqB,EAG1B,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EAEvB,KAAK,eAAe,EAGpB,KAAK,iBAAiB,EAGtB,KAAK,cAAc,EACpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAyB,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AACrF,OAAO,EAA8B,KAAK,YAAY,EAAY,MAAM,gBAAgB,CAAC;AACzF,OAAO,EAAE,KAAK,iBAAiB,EAA2B,MAAM,UAAU,CAAC;AAC3E,OAAO,EAML,gBAAgB,EAGjB,MAAM,SAAS,CAAC;AASjB,qBACa,kBAAmB,YAAW,YAAY;IAIxB,QAAQ,CAAC,KAAK,EAAE,gBAAgB;IACrC,QAAQ,CAAC,OAAO,EAAE,eAAe;IAC9B,OAAO,CAAC,QAAQ,CAAC,IAAI;IACjB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAEpB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;IACnB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;IAC1B,OAAO,CAAC,QAAQ,CAAC,GAAG;IAX7D,QAAQ,CAAC,MAAM;;;;;;;;;;;;;;;;;;MAAC;IAChB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoC;gBAErB,KAAK,EAAE,gBAAgB,EAC5B,OAAO,EAAE,eAAe,EACb,IAAI,EAAE,kBAAkB,EACpB,OAAO,EAAE,mBAAmB,EAC9C,MAAM,EAAE,iBAAiB,EACH,IAAI,CAAC,EAAE,cAAc,YAAA,EAClB,QAAQ,CAAC,EAAE,iBAAiB,YAAA,EACxB,OAAO,CAAC,EAAE,qBAAqB,YAAA,EAChC,GAAG,GAAE,MAAM,IAAuB;IAK5F,YAAY;YAME,SAAS;YAYT,UAAU;IAQxB,OAAO,CAAC,UAAU;IAKlB,0FAA0F;IACpF,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM;YAMpC,QAAQ;IAsBhB,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;YAqBlC,OAAO;IAKrB,OAAO,CAAC,QAAQ;IAGV,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM;;;;;;;;;;;;;;IAQrD,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM;;;;;;;;;;YAqBlD,OAAO;IAsBf,SAAS,CACb,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE;QACL,QAAQ,EAAE,MAAM,CAAC;QACjB,mBAAmB,EAAE,MAAM,CAAC;QAC5B,MAAM,EAAE,QAAQ,CAAC;QACjB,QAAQ,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;KAC1B,EACD,MAAM,CAAC,EAAE,WAAW;;;;;;;;;;;;;;IA+EhB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM;;;YAsBhD,WAAW;IAiBnB,cAAc;IAGd,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,oBAAoB;;;;;;;IA0C1C,OAAO,CAAC,GAAG,EAAE,oBAAoB;;;;;CAoDxC"}

package/dist/service.js

@@ -0,0 +1,399 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AttachmentsService = void 0;
+const node_crypto_1 = require("node:crypto");
+const promises_1 = require("node:fs/promises");
+const plugin_api_1 = require("@haneinfo/plugin-api");
+const state_machine_1 = require("@haneinfo/state-machine");
+const common_1 = require("@nestjs/common");
+const config_1 = require("./config");
+const store_1 = require("./store");
+const validation_1 = require("./validation");
+let AttachmentsService = class AttachmentsService {
+    constructor(store, storage, jobs, runtime, config, rbac, identity, scanner, now = () => new Date()) {
+        this.store = store;
+        this.storage = storage;
+        this.jobs = jobs;
+        this.runtime = runtime;
+        this.rbac = rbac;
+        this.identity = identity;
+        this.scanner = scanner;
+        this.now = now;
+        this.logger = new common_1.Logger('AttachmentsService');
+        this.config = config_1.attachmentsConfigSchema.parse(config);
+    }
+    onModuleInit() {
+        this.jobs.register(store_1.SCAN_JOB, (params, ctx) => this.scan(params.attachmentId, ctx));
+        this.jobs.register(store_1.CLEANUP_JOB, (_params, ctx) => this.cleanup(ctx));
+    }
+    async authorize(tx, userId, instanceId, write = false) {
+        return this.store.instances.run(tx, async (instances) => {
+            const record = await instances.find(instanceId);
+            const auth = await (0, plugin_api_1.authorizationOfUser)(this.rbac, userId);
+            if (!record || !(await (0, state_machine_1.instanceAccessAllowed)(userId, record, auth, instances)))
+                throw new plugin_api_1.MechanismError('INSTANCE_NOT_FOUND', 'Instance not found', 404);
+            const canUpload = await (0, state_machine_1.instanceAccessAllowed)(userId, record, auth, instances, 'WRITE');
+            if (write && !canUpload)
+                throw new plugin_api_1.MechanismError('FORBIDDEN', 'Instance write access is required', 403);
+            return { record, canUpload, admin: (0, plugin_api_1.hasPermission)(auth, 'state-machine:instance:admin') };
+        });
+    }
+    async checkCount(client, instanceId) {
+        if ((await this.quotaCount(client, instanceId)) >= this.config.maxAttachmentsPerInstance)
+            throw new plugin_api_1.MechanismError('ATTACHMENT_LIMIT_EXCEEDED', 'The instance attachment limit has been reached', 409);
+    }
+    quotaCount(client, instanceId) {
+        return client.attachment.count({
+            where: { instanceId, deletedAt: null, status: { in: ['READY', 'PENDING_SCAN'] } },
+        });
+    }
+    /** Must run before attaching a multipart parser or consuming the incoming file stream. */
+    async preflight(userId, instanceId) {
+        return this.store.run(undefined, async (client, tx) => {
+            await this.authorize(tx, userId, instanceId, true);
+            await this.checkCount(client, instanceId);
+        });
+    }
+    async metadata(records, userId, admin, tx) {
+        const ids = [...new Set(records.map((record) => record.uploadedBy))];
+        const names = new Map(ids.length && this.identity?.findActiveNamesByIds
+            ? (await this.identity.findActiveNamesByIds(ids, tx)).map((user) => [user.id, user.name])
+            : []);
+        return records.map((record) => ({
+            id: record.id,
+            instanceId: record.instanceId,
+            fileName: record.fileName,
+            declaredContentType: record.declaredContentType,
+            detectedContentType: record.detectedContentType,
+            size: Number(record.size),
+            sha256: record.sha256,
+            status: record.status,
+            uploadedBy: record.uploadedBy,
+            uploadedByName: names.get(record.uploadedBy) ?? null,
+            createdAt: record.createdAt,
+            canDelete: admin || record.uploadedBy === userId,
+        }));
+    }
+    async listFor(userId, instanceId) {
+        return this.store.run(undefined, async (client, tx) => {
+            const { admin, canUpload } = await this.authorize(tx, userId, instanceId);
+            const records = await client.attachment.findMany({
+                where: { instanceId, deletedAt: null },
+                orderBy: [{ createdAt: 'asc' }, { id: 'asc' }],
+            });
+            const count = await this.quotaCount(client, instanceId);
+            return {
+                items: await this.metadata(records, userId, admin, tx),
+                canUpload,
+                limits: {
+                    maxFileBytes: this.config.maxFileBytes,
+                    maxAttachmentsPerInstance: this.config.maxAttachmentsPerInstance,
+                    allowedTypes: [...this.config.allowedTypes],
+                    count,
+                    remaining: Math.max(0, this.config.maxAttachmentsPerInstance - count),
+                },
+            };
+        });
+    }
+    async visible(client, instanceId, id) {
+        const record = await client.attachment.findUnique({ where: { id } });
+        if (!record || record.instanceId !== instanceId || record.deletedAt)
+            throw this.notFound();
+        return record;
+    }
+    notFound() {
+        return new plugin_api_1.MechanismError('ATTACHMENT_NOT_FOUND', 'Attachment not found', 404);
+    }
+    async getFor(userId, instanceId, id) {
+        return this.store.run(undefined, async (client, tx) => {
+            const { admin } = await this.authorize(tx, userId, instanceId);
+            return (await this.metadata([await this.visible(client, instanceId, id)], userId, admin, tx))[0];
+        });
+    }
+    async downloadFor(userId, instanceId, id) {
+        const record = await this.store.run(undefined, async (client, tx) => {
+            await this.authorize(tx, userId, instanceId);
+            const record = await this.visible(client, instanceId, id);
+            if (record.status !== 'READY')
+                throw this.notFound();
+            return record;
+        });
+        try {
+            return {
+                stream: await this.storage.get(record.storageKey),
+                headers: (0, validation_1.downloadHeaders)(record),
+            };
+        }
+        catch (error) {
+            if (error.code === 'ENOENT' ||
+                error.name === 'NoSuchKey')
+                throw this.notFound();
+            throw error;
+        }
+    }
+    async history(tx, record, action, userId) {
+        await this.store.instances.run(tx, async (instances) => {
+            const instance = await instances.find(record.instanceId);
+            if (!instance)
+                throw new plugin_api_1.MechanismError('INSTANCE_NOT_FOUND', 'Instance not found', 404);
+            await instances.appendHistory({
+                instanceId: record.instanceId,
+                transition: null,
+                fromState: instance.state,
+                toState: instance.state,
+                triggerType: 'ATTACHMENT',
+                triggerUserId: userId,
+                triggerRef: null,
+                at: this.now(),
+                decision: { attachment: { action, id: record.id, fileName: record.fileName } },
+            });
+        });
+    }
+    async uploadFor(userId, instanceId, input, signal) {
+        await this.preflight(userId, instanceId);
+        const { fileName, extension } = (0, validation_1.cleanFileName)(input.fileName);
+        if (!this.config.allowedTypes.includes(extension))
+            throw new plugin_api_1.MechanismError('ATTACHMENT_TYPE_NOT_ALLOWED', 'The file type is not allowed');
+        const id = (0, node_crypto_1.randomUUID)(), at = this.now();
+        const storageKey = `attachments/${at.getUTCFullYear()}/${String(at.getUTCMonth() + 1).padStart(2, '0')}/${id}`;
+        const abort = new AbortController();
+        const onAbort = () => abort.abort(signal?.reason);
+        signal?.addEventListener('abort', onAbort, { once: true });
+        if (signal?.aborted)
+            onAbort();
+        const timer = setTimeout(() => abort.abort(), this.config.maxUploadMs);
+        timer.unref?.();
+        let staged, marked = false;
+        try {
+            staged = await (0, validation_1.stageUpload)(input.stream, id, extension, this.config, abort.signal);
+            // Wait for the entire multipart envelope: extra fields/files must prevent any commit.
+            await input.complete;
+            abort.signal.throwIfAborted();
+            await this.store.db.attachmentGarbage.create({
+                data: { storageKey, notBefore: new Date(at.getTime() + 60 * 60 * 1000) },
+            });
+            marked = true;
+            const written = await this.storage.put(storageKey, (0, validation_1.createReadStream)(staged.file), {
+                contentType: staged.detectedContentType,
+                signal: abort.signal,
+            });
+            if (written.size !== staged.size)
+                throw new Error('Storage byte count mismatch');
+            const record = await this.store.run(undefined, async (client, tx) => {
+                await this.runtime.get(instanceId, tx, { lock: true });
+                await this.authorize(tx, userId, instanceId, true);
+                await this.checkCount(client, instanceId);
+                abort.signal.throwIfAborted();
+                const record = await client.attachment.create({
+                    data: {
+                        id,
+                        instanceId,
+                        fileName,
+                        declaredContentType: input.declaredContentType.slice(0, 200),
+                        detectedContentType: staged?.detectedContentType,
+                        size: BigInt(staged?.size ?? 0),
+                        sha256: staged?.sha256,
+                        storageKey,
+                        status: this.scanner ? 'PENDING_SCAN' : 'READY',
+                        uploadedBy: userId,
+                        createdAt: at,
+                    },
+                });
+                await this.history(tx, record, 'UPLOADED', userId);
+                await client.attachmentGarbage.deleteMany({ where: { storageKey } });
+                return record;
+            });
+            marked = false;
+            if (this.scanner)
+                await this.enqueueScan(record).catch(() => this.logger.error('Attachment scan enqueue failed; cleanup will recover it'));
+            return await this.getFor(userId, instanceId, record.id);
+        }
+        catch (error) {
+            input.stream.destroy();
+            if (marked) {
+                try {
+                    const committed = await this.store.db.attachment.findUnique({ where: { storageKey } });
+                    if (!committed)
+                        await this.storage.delete(storageKey);
+                    await this.store.db.attachmentGarbage.deleteMany({ where: { storageKey } });
+                }
+                catch {
+                    this.logger.error('Attachment rollback left a durable garbage marker');
+                }
+            }
+            throw error;
+        }
+        finally {
+            clearTimeout(timer);
+            signal?.removeEventListener('abort', onAbort);
+            if (staged)
+                await (0, promises_1.rm)(staged.file, { force: true });
+        }
+    }
+    async deleteFor(userId, instanceId, id) {
+        return this.store.run(undefined, async (client, tx) => {
+            await this.runtime.get(instanceId, tx, { lock: true });
+            const { admin } = await this.authorize(tx, userId, instanceId);
+            const record = await client.attachment.findUnique({ where: { id } });
+            if (!record || record.instanceId !== instanceId)
+                return { deleted: true };
+            if (!admin && record.uploadedBy !== userId)
+                throw new plugin_api_1.MechanismError('FORBIDDEN', 'Only the uploader or an instance administrator may delete this attachment', 403);
+            if (!record.deletedAt) {
+                await client.attachment.update({
+                    where: { id },
+                    data: { deletedAt: this.now(), deletedBy: userId },
+                });
+                await this.history(tx, record, 'DELETED', userId);
+            }
+            return { deleted: true };
+        });
+    }
+    async enqueueScan(record) {
+        if (await this.store.db.backgroundJob.findFirst({
+            where: {
+                type: store_1.SCAN_JOB,
+                status: { in: ['PENDING', 'RUNNING'] },
+                params: { path: ['attachmentId'], equals: record.id },
+            },
+        }))
+            return;
+        await this.jobs.enqueue({
+            type: store_1.SCAN_JOB,
+            params: { attachmentId: record.id },
+            createdBy: record.uploadedBy,
+        });
+    }
+    async enqueueCleanup() {
+        return this.jobs.enqueue({ type: store_1.CLEANUP_JOB, params: {}, createdBy: 'system:attachments' });
+    }
+    async scan(id, ctx) {
+        return this.store.run(ctx.tx, async (client) => {
+            const record = await this.store.lock(client, id);
+            if (!record || record.deletedAt || record.status !== 'PENDING_SCAN')
+                return { skipped: true };
+            if (!this.scanner)
+                throw new Error('Pending attachment requires its scanner to be restored');
+            let stream;
+            try {
+                stream = await this.storage.get(record.storageKey);
+            }
+            catch (error) {
+                if (error.code !== 'ENOENT' &&
+                    error.name !== 'NoSuchKey')
+                    throw error;
+                // A previous rejection may have deleted content before its DB transaction rolled back.
+                await client.attachment.update({ where: { id }, data: { status: 'REJECTED' } });
+                return { status: 'REJECTED' };
+            }
+            const onAbort = () => stream.destroy(new Error('Scan cancelled'));
+            ctx.signal.addEventListener('abort', onAbort, { once: true });
+            try {
+                const result = await this.scanner.scan(stream, {
+                    id,
+                    fileName: record.fileName,
+                    contentType: record.detectedContentType,
+                    size: Number(record.size),
+                    sha256: record.sha256,
+                });
+                await ctx.checkpoint();
+                if (result.status === 'CLEAN')
+                    await client.attachment.update({ where: { id }, data: { status: 'READY' } });
+                else {
+                    await this.storage.delete(record.storageKey);
+                    await client.attachment.update({ where: { id }, data: { status: 'REJECTED' } });
+                }
+                return { status: result.status };
+            }
+            finally {
+                ctx.signal.removeEventListener('abort', onAbort);
+                stream.destroy();
+            }
+        });
+    }
+    async cleanup(ctx) {
+        const now = this.now(), before = new Date(now.getTime() - this.config.deletedRetentionDays * 86400000);
+        const stale = new Date(now.getTime() - this.config.pendingScanTimeoutMs);
+        const limit = this.config.cleanupBatchSize;
+        const client = ctx.tx;
+        const records = await client.attachment.findMany({
+            where: {
+                OR: [
+                    { deletedAt: { lte: before } },
+                    { status: 'REJECTED', deletedAt: null, createdAt: { lte: before } },
+                    { status: 'PENDING_SCAN', deletedAt: null },
+                ],
+            },
+            orderBy: [{ createdAt: 'asc' }, { id: 'asc' }],
+            take: limit,
+        });
+        let removed = 0;
+        for (const candidate of records) {
+            await ctx.checkpoint();
+            const record = await this.store.lock(client, candidate.id);
+            if (!record)
+                continue;
+            const expiredDeletion = record.deletedAt && record.deletedAt <= before;
+            if (record.deletedAt && !expiredDeletion)
+                continue;
+            if (record.status === 'PENDING_SCAN' && !record.deletedAt && record.createdAt > stale) {
+                if (this.scanner)
+                    await this.enqueueScan(record);
+                continue;
+            }
+            if (record.status === 'PENDING_SCAN' && record.createdAt <= stale)
+                await client.attachment.update({ where: { id: record.id }, data: { status: 'REJECTED' } });
+            if (record.status !== 'READY' || expiredDeletion)
+                await this.storage.delete(record.storageKey);
+            if (expiredDeletion || (record.status !== 'READY' && record.createdAt <= before)) {
+                await client.attachment.deleteMany({ where: { id: record.id } });
+                removed++;
+            }
+        }
+        const garbage = await client.attachmentGarbage.findMany({
+            where: { notBefore: { lte: now } },
+            orderBy: { notBefore: 'asc' },
+            take: limit,
+        });
+        for (const item of garbage) {
+            await ctx.checkpoint();
+            // A commit with an ambiguous response must never delete a referenced object.
+            if (!(await client.attachment.findUnique({ where: { storageKey: item.storageKey } })))
+                await this.storage.delete(item.storageKey);
+            await client.attachmentGarbage.deleteMany({ where: { storageKey: item.storageKey } });
+        }
+        const staged = await (0, validation_1.cleanupStaging)(new Date(now.getTime() - 60 * 60 * 1000), limit);
+        return { removed, garbage: garbage.length, staged };
+    }
+};
+exports.AttachmentsService = AttachmentsService;
+exports.AttachmentsService = AttachmentsService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(store_1.ATTACHMENTS_STORE)),
+    __param(1, (0, common_1.Inject)(plugin_api_1.FILE_STORAGE)),
+    __param(2, (0, common_1.Inject)(plugin_api_1.BACKGROUND_JOBS)),
+    __param(3, (0, common_1.Inject)(state_machine_1.StateMachineRuntime)),
+    __param(4, (0, common_1.Inject)(store_1.ATTACHMENTS_CONFIG)),
+    __param(5, (0, common_1.Optional)()),
+    __param(5, (0, common_1.Inject)(plugin_api_1.RBAC_POLICY)),
+    __param(6, (0, common_1.Optional)()),
+    __param(6, (0, common_1.Inject)(plugin_api_1.IDENTITY_STORE)),
+    __param(7, (0, common_1.Optional)()),
+    __param(7, (0, common_1.Inject)(plugin_api_1.ATTACHMENT_SCANNER)),
+    __param(8, (0, common_1.Optional)()),
+    __param(8, (0, common_1.Inject)(store_1.ATTACHMENTS_CLOCK)),
+    __metadata("design:paramtypes", [store_1.AttachmentsStore, Object, Object, state_machine_1.StateMachineRuntime, Object, Object, Object, Object, Function])
+], AttachmentsService);
+//# sourceMappingURL=service.js.map

package/dist/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,6CAAyC;AACzC,+CAAsC;AAEtC,qDAe8B;AAC9B,2DAAqF;AACrF,2CAAyF;AACzF,qCAA2E;AAC3E,mCASiB;AACjB,6CAMsB;AAGf,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAG7B,YAC6B,KAAgC,EACrC,OAAiC,EAC9B,IAAyC,EACrC,OAA6C,EAC9C,MAAyB,EACpB,IAAsC,EACnC,QAA6C,EACzC,OAAgD,EACjD,MAAmC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;QARtD,UAAK,GAAL,KAAK,CAAkB;QAC5B,YAAO,GAAP,OAAO,CAAiB;QACb,SAAI,GAAJ,IAAI,CAAoB;QACpB,YAAO,GAAP,OAAO,CAAqB;QAExB,SAAI,GAAJ,IAAI,CAAiB;QAClB,aAAQ,GAAR,QAAQ,CAAoB;QACxB,YAAO,GAAP,OAAO,CAAwB;QAChC,QAAG,GAAH,GAAG,CAA+B;QAV3E,WAAM,GAAG,IAAI,eAAM,CAAC,oBAAoB,CAAC,CAAC;QAYzD,IAAI,CAAC,MAAM,GAAG,gCAAuB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACtD,CAAC;IAED,YAAY;QACV,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAQ,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAC3C,IAAI,CAAC,IAAI,CAAE,MAAmC,CAAC,YAAY,EAAE,GAAG,CAAC,CAClE,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,mBAAW,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IACvE,CAAC;IACO,KAAK,CAAC,SAAS,CAAC,EAAW,EAAE,MAAc,EAAE,UAAkB,EAAE,KAAK,GAAG,KAAK;QACpF,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;YACtD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAChD,MAAM,IAAI,GAAG,MAAM,IAAA,gCAAmB,EAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC1D,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAA,qCAAqB,EAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;gBAC5E,MAAM,IAAI,2BAAc,CAAC,oBAAoB,EAAE,oBAAoB,EAAE,GAAG,CAAC,CAAC;YAC5E,MAAM,SAAS,GAAG,MAAM,IAAA,qCAAqB,EAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;YACxF,IAAI,KAAK,IAAI,CAAC,SAAS;gBACrB,MAAM,IAAI,2BAAc,CAAC,WAAW,EAAE,mCAAmC,EAAE,GAAG,CAAC,CAAC;YAClF,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,IAAA,0BAAa,EAAC,IAAI,EAAE,8BAA8B,CAAC,EAAE,CAAC;QAC3F,CAAC,CAAC,CAAC;IACL,CAAC;IACO,KAAK,CAAC,UAAU,CAAC,MAAwB,EAAE,UAAkB;QACnE,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,yBAAyB;YACtF,MAAM,IAAI,2BAAc,CACtB,2BAA2B,EAC3B,gDAAgD,EAChD,GAAG,CACJ,CAAC;IACN,CAAC;IACO,UAAU,CAAC,MAAwB,EAAE,UAAkB;QAC7D,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC;YAC7B,KAAK,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,EAAE;SAClF,CAAC,CAAC;IACL,CAAC;IACD,0FAA0F;IAC1F,KAAK,CAAC,SAAS,CAAC,MAAc,EAAE,UAAkB;QAChD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE;YACpD,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;YACnD,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC;IACO,KAAK,CAAC,QAAQ,CAAC,OAA2B,EAAE,MAAc,EAAE,KAAc,EAAE,EAAW;QAC7F,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,oBAAoB;YAC/C,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACzF,CAAC,CAAC,EAAE,CACP,CAAC;QACF,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC9B,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;YAC/C,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;YAC/C,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;YACzB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,cAAc,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,IAAI;YACpD,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,KAAK,IAAI,MAAM,CAAC,UAAU,KAAK,MAAM;SACjD,CAAC,CAAC,CAAC;IACN,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,MAAc,EAAE,UAAkB;QAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE;YACpD,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;YAC1E,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAC/C,KAAK,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE;gBACtC,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;aAC/C,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YACxD,OAAO;gBACL,KAAK,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;gBACtD,SAAS;gBACT,MAAM,EAAE;oBACN,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;oBACtC,yBAAyB,EAAE,IAAI,CAAC,MAAM,CAAC,yBAAyB;oBAChE,YAAY,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;oBAC3C,KAAK;oBACL,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,yBAAyB,GAAG,KAAK,CAAC;iBACtE;aACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IACO,KAAK,CAAC,OAAO,CAAC,MAAwB,EAAE,UAAkB,EAAE,EAAU;QAC5E,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACrE,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,KAAK,UAAU,IAAI,MAAM,CAAC,SAAS;YAAE,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC3F,OAAO,MAAM,CAAC;IAChB,CAAC;IACO,QAAQ;QACd,OAAO,IAAI,2BAAc,CAAC,sBAAsB,EAAE,sBAAsB,EAAE,GAAG,CAAC,CAAC;IACjF,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,UAAkB,EAAE,EAAU;QACzD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE;YACpD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;YAC/D,OAAO,CACL,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CACrF,CAAC,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,WAAW,CAAC,MAAc,EAAE,UAAkB,EAAE,EAAU;QAC9D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE;YAClE,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;YAC7C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;YAC1D,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO;gBAAE,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrD,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,OAAO;gBACL,MAAM,EAAE,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC;gBACjD,OAAO,EAAE,IAAA,4BAAe,EAAC,MAAM,CAAC;aACjC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IACG,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBACjD,KAA2B,CAAC,IAAI,KAAK,WAAW;gBAEjD,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACxB,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IACO,KAAK,CAAC,OAAO,CACnB,EAAW,EACX,MAAwB,EACxB,MAA8B,EAC9B,MAAc;QAEd,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;YACrD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACzD,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,2BAAc,CAAC,oBAAoB,EAAE,oBAAoB,EAAE,GAAG,CAAC,CAAC;YACzF,MAAM,SAAS,CAAC,aAAa,CAAC;gBAC5B,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,UAAU,EAAE,IAAI;gBAChB,SAAS,EAAE,QAAQ,CAAC,KAAK;gBACzB,OAAO,EAAE,QAAQ,CAAC,KAAK;gBACvB,WAAW,EAAE,YAAY;gBACzB,aAAa,EAAE,MAAM;gBACrB,UAAU,EAAE,IAAI;gBAChB,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;gBACd,QAAQ,EAAE,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE;aAC/E,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,SAAS,CACb,MAAc,EACd,UAAkB,EAClB,KAKC,EACD,MAAoB;QAEpB,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACzC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAA,0BAAa,EAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC9D,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,SAAsD,CAAC;YAC5F,MAAM,IAAI,2BAAc,CAAC,6BAA6B,EAAE,8BAA8B,CAAC,CAAC;QAC1F,MAAM,EAAE,GAAG,IAAA,wBAAU,GAAE,EACrB,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAClB,MAAM,UAAU,GAAG,eAAe,EAAE,CAAC,cAAc,EAAE,IAAI,MAAM,CAAC,EAAE,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/G,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACvE,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAChB,IAAI,MAA2D,EAC7D,MAAM,GAAG,KAAK,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAA,wBAAW,EAAC,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YACnF,sFAAsF;YACtF,MAAM,KAAK,CAAC,QAAQ,CAAC;YACrB,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC9B,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC;gBAC3C,IAAI,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE;aACzE,CAAC,CAAC;YACH,MAAM,GAAG,IAAI,CAAC;YACd,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAA,6BAAgB,EAAC,MAAM,CAAC,IAAI,CAAC,EAAE;gBAChF,WAAW,EAAE,MAAM,CAAC,mBAAmB;gBACvC,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC,CAAC;YACH,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YACjF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE;gBAClE,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvD,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;gBACnD,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;gBAC1C,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC9B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;oBAC5C,IAAI,EAAE;wBACJ,EAAE;wBACF,UAAU;wBACV,QAAQ;wBACR,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;wBAC5D,mBAAmB,EAAE,MAAM,EAAE,mBAAmB;wBAChD,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,CAAC;wBAC/B,MAAM,EAAE,MAAM,EAAE,MAAM;wBACtB,UAAU;wBACV,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO;wBAC/C,UAAU,EAAE,MAAM;wBAClB,SAAS,EAAE,EAAE;qBACd;iBACF,CAAC,CAAC;gBACH,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;gBACnD,MAAM,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;gBACrE,OAAO,MAAM,CAAC;YAChB,CAAC,CAAC,CAAC;YACH,MAAM,GAAG,KAAK,CAAC;YACf,IAAI,IAAI,CAAC,OAAO;gBACd,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CACxC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAC7E,CAAC;YACJ,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACvB,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,CAAC;oBACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;oBACvF,IAAI,CAAC,SAAS;wBAAE,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;oBACtD,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;gBAC9E,CAAC;gBAAC,MAAM,CAAC;oBACP,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;gBACzE,CAAC;YACH,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9C,IAAI,MAAM;gBAAE,MAAM,IAAA,aAAE,EAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,MAAc,EAAE,UAAkB,EAAE,EAAU;QAC5D,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE;YACpD,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACvD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;YAC/D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YACrE,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,KAAK,UAAU;gBAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC1E,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,UAAU,KAAK,MAAM;gBACxC,MAAM,IAAI,2BAAc,CACtB,WAAW,EACX,2EAA2E,EAC3E,GAAG,CACJ,CAAC;YACJ,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;gBACtB,MAAM,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;oBAC7B,KAAK,EAAE,EAAE,EAAE,EAAE;oBACb,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;iBACnD,CAAC,CAAC;gBACH,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;YACpD,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC,CAAC,CAAC;IACL,CAAC;IACO,KAAK,CAAC,WAAW,CAAC,MAAwB;QAChD,IACE,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,SAAS,CAAC;YAC1C,KAAK,EAAE;gBACL,IAAI,EAAE,gBAAQ;gBACd,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE;gBACtC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE;aACtD;SACF,CAAC;YAEF,OAAO;QACT,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YACtB,IAAI,EAAE,gBAAQ;YACd,MAAM,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,EAAE;YACnC,SAAS,EAAE,MAAM,CAAC,UAAU;SAC7B,CAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,cAAc;QAClB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,mBAAW,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAU,EAAE,GAAyB;QAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YAC7C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACjD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc;gBAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC9F,IAAI,CAAC,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;YAC7F,IAAI,MAAgB,CAAC;YACrB,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACrD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IACG,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBACjD,KAA2B,CAAC,IAAI,KAAK,WAAW;oBAEjD,MAAM,KAAK,CAAC;gBACd,uFAAuF;gBACvF,MAAM,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;gBAChF,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;YAChC,CAAC;YACD,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;YAClE,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9D,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE;oBAC7C,EAAE;oBACF,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,WAAW,EAAE,MAAM,CAAC,mBAAmB;oBACvC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;oBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;iBACtB,CAAC,CAAC;gBACH,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC;gBACvB,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO;oBAC3B,MAAM,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;qBAC1E,CAAC;oBACJ,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;oBAC7C,MAAM,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;gBAClF,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YACnC,CAAC;oBAAS,CAAC;gBACT,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACjD,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,GAAyB;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EACpB,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,GAAG,QAAQ,CAAC,CAAC;QACjF,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACzE,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,EAAsB,CAAC;QAC1C,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;YAC/C,KAAK,EAAE;gBACL,EAAE,EAAE;oBACF,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;oBAC9B,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;oBACnE,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,IAAI,EAAE;iBAC5C;aACF;YACD,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;YAC9C,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,SAAS,IAAI,OAAO,EAAE,CAAC;YAChC,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;YAC3D,IAAI,CAAC,MAAM;gBAAE,SAAS;YACtB,MAAM,eAAe,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC;YACvE,IAAI,MAAM,CAAC,SAAS,IAAI,CAAC,eAAe;gBAAE,SAAS;YACnD,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,KAAK,EAAE,CAAC;gBACtF,IAAI,IAAI,CAAC,OAAO;oBAAE,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;gBACjD,SAAS;YACX,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,IAAI,MAAM,CAAC,SAAS,IAAI,KAAK;gBAC/D,MAAM,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;YAC7F,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,IAAI,eAAe;gBAC9C,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC/C,IAAI,eAAe,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,EAAE,CAAC;gBACjF,MAAM,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;gBACjE,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,QAAQ,CAAC;YACtD,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YAClC,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE;YAC7B,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC;YACvB,6EAA6E;YAC7E,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;gBACnF,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC7C,MAAM,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAA,2BAAc,EAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;QACrF,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IACtD,CAAC;CACF,CAAA;AA7XY,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,eAAM,EAAC,yBAAiB,CAAC,CAAA;IACzB,WAAA,IAAA,eAAM,EAAC,yBAAY,CAAC,CAAA;IACpB,WAAA,IAAA,eAAM,EAAC,4BAAe,CAAC,CAAA;IACvB,WAAA,IAAA,eAAM,EAAC,mCAAmB,CAAC,CAAA;IAC3B,WAAA,IAAA,eAAM,EAAC,0BAAkB,CAAC,CAAA;IAC1B,WAAA,IAAA,iBAAQ,GAAE,CAAA;IAAE,WAAA,IAAA,eAAM,EAAC,wBAAW,CAAC,CAAA;IAC/B,WAAA,IAAA,iBAAQ,GAAE,CAAA;IAAE,WAAA,IAAA,eAAM,EAAC,2BAAc,CAAC,CAAA;IAClC,WAAA,IAAA,iBAAQ,GAAE,CAAA;IAAE,WAAA,IAAA,eAAM,EAAC,+BAAkB,CAAC,CAAA;IACtC,WAAA,IAAA,iBAAQ,GAAE,CAAA;IAAE,WAAA,IAAA,eAAM,EAAC,yBAAiB,CAAC,CAAA;qCARK,wBAAgB,kBAGJ,mCAAmB;GAPjE,kBAAkB,CA6X9B"}

package/dist/storage.d.ts

@@ -0,0 +1,54 @@
+import { Readable } from 'node:stream';
+import type { FileStoragePort } from '@haneinfo/plugin-api';
+import type { ResolvedAttachmentsConfig } from './config';
+export declare function validateStorageKey(key: string): void;
+export declare class LocalFileStorage implements FileStoragePort {
+    private readonly root;
+    constructor(root: string);
+    private target;
+    put(key: string, stream: Readable, options?: {
+        signal?: AbortSignal;
+    }): Promise<{
+        size: number;
+    }>;
+    get(key: string): Promise<import("fs").ReadStream>;
+    delete(key: string): Promise<void>;
+    exists(key: string): Promise<boolean>;
+}
+type S3Options = NonNullable<ResolvedAttachmentsConfig['s3']>;
+interface S3ClientLike {
+    send(command: unknown): Promise<{
+        Body?: unknown;
+    }>;
+    destroy?(): void;
+}
+interface S3Dependencies {
+    client: S3ClientLike;
+    command(kind: 'get' | 'head' | 'delete', input: Record<string, unknown>): unknown;
+    upload(input: Record<string, unknown>): {
+        done(): Promise<unknown>;
+        abort(): Promise<void>;
+    };
+}
+export type S3ClientFactory = (config: S3Options) => Promise<S3Dependencies>;
+/** Variable imports keep the SDK optional, including in local-driver builds. */
+export declare const defaultS3ClientFactory: S3ClientFactory;
+export declare class S3FileStorage implements FileStoragePort {
+    private readonly config;
+    private readonly deps;
+    private constructor();
+    static create(config: S3Options, factory?: S3ClientFactory): Promise<S3FileStorage>;
+    private input;
+    put(key: string, stream: Readable, options?: {
+        contentType?: string;
+        signal?: AbortSignal;
+    }): Promise<{
+        size: number;
+    }>;
+    get(key: string): Promise<Readable>;
+    delete(key: string): Promise<void>;
+    exists(key: string): Promise<boolean>;
+    onModuleDestroy(): void;
+}
+export {};
+//# sourceMappingURL=storage.d.ts.map

package/dist/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../src/storage.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,QAAQ,EAAa,MAAM,aAAa,CAAC;AAElD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,UAAU,CAAC;AAE1D,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,QAE7C;AAED,qBAAa,gBAAiB,YAAW,eAAe;IACtD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;gBAClB,IAAI,EAAE,MAAM;YAGV,MAAM;IAwBd,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAO;;;IAsBzE,GAAG,CAAC,GAAG,EAAE,MAAM;IAKf,MAAM,CAAC,GAAG,EAAE,MAAM;IAGlB,MAAM,CAAC,GAAG,EAAE,MAAM;CAQzB;AAED,KAAK,SAAS,GAAG,WAAW,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC;AAC9D,UAAU,YAAY;IACpB,IAAI,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC;QAAE,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACpD,OAAO,CAAC,IAAI,IAAI,CAAC;CAClB;AACD,UAAU,cAAc;IACtB,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,CAAC,IAAI,EAAE,KAAK,GAAG,MAAM,GAAG,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;IAClF,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;QAAE,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;QAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;KAAE,CAAC;CAC9F;AACD,MAAM,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,SAAS,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;AAE7E,gFAAgF;AAChF,eAAO,MAAM,sBAAsB,EAAE,eA0CpC,CAAC;AAEF,qBAAa,aAAc,YAAW,eAAe;IAEjD,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAFvB,OAAO;WAIM,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,GAAE,eAAwC;IAGxF,OAAO,CAAC,KAAK;IAIP,GAAG,CACP,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,QAAQ,EAChB,OAAO,GAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAO;;;IA8BxD,GAAG,CAAC,GAAG,EAAE,MAAM;IAKf,MAAM,CAAC,GAAG,EAAE,MAAM;IAGlB,MAAM,CAAC,GAAG,EAAE,MAAM;IAWxB,eAAe;CAGhB"}