@kernhq/module-inventory 0.2.0 → 0.4.0

package/dist/server/services/assets.js

@@ -1,8 +1,10 @@
 import { KernError, uuidv7 } from '@kernhq/kernel';
-import { and, asc, desc, eq, ilike, isNull, or, sql } from 'drizzle-orm';
+import { and, asc, desc, eq, ilike, isNull, lt, or, sql } from 'drizzle-orm';
 import { alias } from 'drizzle-orm/pg-core';
 import { InventorySettings } from '../../contract/settings.js';
-import { assets, counters } from '../schema.js';
+import { assetHistory, assets, categories, counters } from '../schema.js';
+import { decodeMark, decodeSeqMark, encodeMark, encodeSeqMark } from './cursor.js';
+import { openRepairId } from './status.js';
 /** The wire shape: drizzle gives Date objects for timestamps, the contract promises ISO strings. */
 export function toAsset(row) {
     return {
@@ -29,26 +31,21 @@ export function toAsset(row) {
         archivedAt: row.archivedAt?.toISOString() ?? null,
     };
 }
-const encode = (b) => Buffer.from(JSON.stringify(b), 'utf8').toString('base64url');
-/** Cheap and total, and it runs before the value can reach a `::uuid` cast. */
-const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-function decode(cursor, sort) {
-    const refuse = () => KernError.badRequest('That page marker is not one this list issued');
-    let parsed;
-    try {
-        parsed = JSON.parse(Buffer.from(cursor, 'base64url').toString('utf8'));
-    }
-    catch {
-        throw refuse();
-    }
-    if (typeof parsed?.i !== 'string' || !UUID.test(parsed.i))
-        throw refuse();
-    // One comparison covers both a sort this list never issues and a sort it issued under a
-    // *different* request. Either way the bookmark cannot be read against the ordering asked for,
-    // and pretending otherwise is what made "Load more" loop for ever.
-    if (parsed.s !== sort)
-        throw refuse();
-    return { i: parsed.i, s: sort };
+/**
+ * The wire shape of one timeline entry. Drizzle's `jsonb` columns are nullable in the row and never
+ * null in the contract — `changes: []` and `data: {}` are what "nothing to say" looks like to a
+ * screen, where `null` is one more thing every caller has to remember to handle.
+ */
+export function toHistoryEntry(row) {
+    return {
+        id: row.id,
+        assetId: row.assetId,
+        actorId: row.actorId,
+        action: row.action,
+        changes: row.changes ?? [],
+        data: row.data ?? {},
+        occurredAt: row.occurredAt.toISOString(),
+    };
 }
 /**
  * `%`, `_` and `\` are pattern syntax to `ilike`, not text.
@@ -58,6 +55,14 @@ function decode(cursor, sort) {
  * stripped: somebody typing a per-cent sign means the character.
  */
 const contains = (q) => `%${q.replace(/[\\%_]/g, '\\$&')}%`;
+/**
+ * The one ordering a timeline has, named rather than left as a literal.
+ *
+ * The cursor codec binds a bookmark to the sort it was issued under and refuses it under any other,
+ * so a timeline needs a name for its sort even while there is only one — and the day a second one
+ * exists, every cursor already in a browser tab is refused rather than misread.
+ */
+const HISTORY_SORT = 'recent';
 /** Which column an ordering sorts on, for the list itself and for the bookmarked row alike. */
 const sortKey = (t, sort) => sort === 'name' ? t.name : sort === 'code' ? t.code : t.id;
 export class AssetService {
@@ -115,16 +120,29 @@ export class AssetService {
             filters.push(eq(assets.custodianUserId, input.custodianUserId));
         if (!input.archived)
             filters.push(isNull(assets.archivedAt));
-        // `recent` sorts by id rather than by `created_at`: ids are uuidv7, so they carry the clock,
-        // and one indexed unique column is a cheaper and unambiguous page boundary than a timestamp
-        // two rows can share. Ordered to the millisecond and no finer — the kernel's `uuidv7()` fills
-        // its last ten bytes from `randomUUID()` with no counter — so two assets created inside one
-        // millisecond come back in a stable but arbitrary order relative to each other. That is fine
-        // for a list and fatal for a test that expects creation order; see `inventory.int.test.ts`.
+        /**
+         * `recent` sorts by id rather than by `created_at`: ids are uuidv7, so they carry the clock, and
+         * one indexed unique column is a cheaper and unambiguous page boundary than a timestamp two rows
+         * can share. Ordered to the millisecond and no finer — the kernel's `uuidv7()` fills its last
+         * ten bytes from `randomUUID()` with no counter — so two assets created inside one millisecond
+         * come back in a stable but arbitrary order relative to each other.
+         *
+         * **The timeline deliberately stopped accepting that and this list has not**, so the difference
+         * is worth stating rather than leaving as an inconsistency. `asset_history` is a record somebody
+         * argues from, and a millisecond there holds a create and its own first entry, so an arbitrary
+         * order is a lie about causation — it has a sequence of its own now (`schema.ts`, `seq`). A list
+         * is an ordering of things a person is browsing: nothing hangs on which of two assets imported
+         * in the same millisecond is shown first, and paging stays gapless either way because the id is
+         * unique. If that ever stops being true — a bulk import whose order somebody relies on — the
+         * fix is the same sequence, not a timestamp: `created_at` defaults to the *transaction's*
+         * `now()`, so one import shares it exactly.
+         *
+         * It is fatal for a test that expects creation order; see `inventory.int.test.ts`.
+         */
         const column = sortKey(assets, input.sort);
         const descending = input.sort === 'recent';
         if (input.cursor) {
-            const mark = decode(input.cursor, input.sort);
+            const mark = decodeMark(input.cursor, input.sort);
             /**
              * The sort key comes back out of the bookmarked row rather than out of the cursor, which is
              * what keeps the cursor small and stops it disagreeing with the row it names. Scoped by
@@ -154,9 +172,81 @@ export class AssetService {
             .limit(input.limit + 1);
         const items = rows.slice(0, input.limit);
         const last = items.at(-1);
-        const nextCursor = rows.length > input.limit && last ? encode({ i: last.id, s: input.sort }) : null;
+        const nextCursor = rows.length > input.limit && last ? encodeMark({ i: last.id, s: input.sort }) : null;
         return { items: items.map(toAsset), nextCursor };
     }
+    /**
+     * The asset's own timeline, newest first, paged on the sequence the entries carry.
+     *
+     * **The ordering is `seq`, not `occurred_at` and not the id**, and the middle one of those three
+     * is the interesting correction.
+     *
+     * `occurred_at` was never a candidate: it defaults to `now()`, which is the *transaction*
+     * timestamp, so `create` writes the asset and its `created` entry with the same value and a page
+     * boundary between two entries that share a sort key repeats one and drops the other.
+     *
+     * The id looked like the answer and was only half of one. A uuidv7 is unique, so paging on it is
+     * gapless — but the kernel's `uuidv7()` carries the clock only to the millisecond and fills the
+     * rest from `randomUUID()` with no counter, so two entries written inside one millisecond sort by
+     * ten random bytes. Stable, so nothing was ever dropped or repeated; and arbitrary, so a timeline
+     * could show "Bruno removed the file" above "Bruno added the file". `seq` is a sequence: strictly
+     * increasing whatever the clock does, at whatever rate. `schema.ts` argues it at the column.
+     *
+     * The comparison is a single column because the sort key *is* the bookmark, so there is no
+     * bookmarked-row subquery here. The bookmark is still checked as a bounded positive integer and
+     * still bound to the sort it was issued under, because that is the codec's job and not this
+     * query's.
+     */
+    async history(tx, workspaceId, assetId, input) {
+        // 404 before paging: a timeline for an asset in another workspace must not answer with an
+        // empty list, which reads as "nothing has happened to it" rather than "it is not yours".
+        await this.get(tx, workspaceId, assetId);
+        const filters = [eq(assetHistory.workspaceId, workspaceId), eq(assetHistory.assetId, assetId)];
+        if (input.cursor)
+            filters.push(lt(assetHistory.seq, decodeSeqMark(input.cursor, HISTORY_SORT).n));
+        const rows = await tx
+            .select()
+            .from(assetHistory)
+            .where(and(...filters))
+            .orderBy(desc(assetHistory.seq))
+            .limit(input.limit + 1);
+        const items = rows.slice(0, input.limit);
+        const last = items.at(-1);
+        const nextCursor = rows.length > input.limit && last ? encodeSeqMark({ n: last.seq, s: HISTORY_SORT }) : null;
+        return { items: items.map(toHistoryEntry), nextCursor };
+    }
+    /**
+     * A category id in a request is a claim about a row in this workspace, and it is checked before
+     * it is stored.
+     *
+     * The same defect `photoFileId` had, one field over: `assets.create` and `assets.update` took
+     * `categoryId` on trust, so any uuid at all went into the column. Two things follow from that,
+     * and neither is theoretical. An id belonging to **another workspace** files an asset under a
+     * category this one cannot see, name or unfile — the picker resolves names from its own
+     * `categories.list`, so the field renders blank and the filter it sits behind matches nothing
+     * anybody can select. An id belonging to **nobody** does the same thing with no other workspace
+     * involved. Either way the register holds a reference to a row that is not there, which is
+     * exactly the state `categories.archive` exists to prevent from the other end.
+     *
+     * **Checked inside the caller's transaction, unlike `checkPhoto`.** A file lives in core and has
+     * to be asked for over the broker, so that check happens before a connection is taken — the rule
+     * `codeFormat` documents. A category is this module's own table one join away, so the honest
+     * place for it is the transaction that writes the row: it costs one indexed read, and it cannot
+     * be raced by somebody deleting the category, because nothing deletes one.
+     *
+     * An **archived** category is deliberately allowed. Archiving takes it out of every picker and
+     * leaves every asset already filed under it still naming it; refusing it here would mean an edit
+     * to an asset's location failed because of a category somebody tidied away last year, and it
+     * would make re-filing a batch of assets under an old category impossible for no gain.
+     */
+    async requireCategory(tx, workspaceId, categoryId) {
+        const [row] = await tx
+            .select({ id: categories.id })
+            .from(categories)
+            .where(and(eq(categories.workspaceId, workspaceId), eq(categories.id, categoryId)));
+        if (!row)
+            throw KernError.badRequest('That category is not one this workspace has.');
+    }
     async get(tx, workspaceId, assetId) {
         const [row] = await tx
             .select()
@@ -167,6 +257,8 @@ export class AssetService {
         return row;
     }
     async create(tx, workspaceId, actorId, input, format) {
+        if (input.categoryId)
+            await this.requireCategory(tx, workspaceId, input.categoryId);
         const [row] = await tx
             .insert(assets)
             .values({
@@ -205,6 +297,11 @@ export class AssetService {
         'photoFileId',
     ];
     async update(tx, workspaceId, actorId, assetId, input) {
+        // Before the row is locked, because a refusal here has nothing to do with this asset and
+        // holding a row lock across a check that can throw is a lock held for no reason. `undefined`
+        // means the patch never mentioned a category and `null` means "unfile it"; neither is an id.
+        if (input.categoryId)
+            await this.requireCategory(tx, workspaceId, input.categoryId);
         const [prev] = await tx
             .select()
             .from(assets)
@@ -219,6 +316,16 @@ export class AssetService {
             const value = input[field];
             patch[field] = value !== undefined ? (value ?? null) : prev[field];
         }
+        /**
+         * A new warranty date earns a new notice.
+         *
+         * `warranty_notified_at` is the marker that stops the sweep saying the same thing every morning
+         * for a month; left alone here, extending a warranty by two years would mean nobody is ever told
+         * about the new date, because the row is already marked. Cleared only when the date itself
+         * moved — an edit to the name must not re-arm a notice somebody has already had.
+         */
+        if (patch.warrantyUntil !== prev.warrantyUntil)
+            patch.warrantyNotifiedAt = null;
         // Filtered by workspace as well as by id. The `select … for update` three statements up already
         // carries the predicate, so this is not reachable today — but `core` connects as a superuser
         // with RLS bypassed, which makes the predicate in the statement the only barrier there is. A
@@ -240,7 +347,68 @@ export class AssetService {
         await this.notify.history(tx, activity);
         return { row: row, activity };
     }
-    async archive(tx, workspaceId, actorId, assetId, archived) {
+    /**
+     * @param repairsOn whether the workspace records repairs, read before the transaction opened.
+     * The "it is away for repair" refusal below tells somebody to go and use `repairs.complete`, and
+     * that procedure answers 404 in a workspace with the capability off — so the refusal would be an
+     * instruction to open a door that is not there, and the asset could never leave the register.
+     */
+    async archive(tx, workspaceId, actorId, assetId, archived, repairsOn) {
+        /**
+         * **Locked before either refusal is decided, because both of them are about a race.**
+         *
+         * The two checks below used to read the facts with a plain select, so the state they call
+         * impossible was reachable by simply doing the two things at once: an archive and a handover
+         * each read "nobody is holding it", both were allowed, and the register was left with an
+         * archived asset and an open custody period — the timeline showing a handover that never ended,
+         * and "what is Ada still holding?" quietly not counting it, because that question excludes
+         * archived rows. A check whose answer another transaction may already have changed is not a
+         * check; it is a comment.
+         *
+         * The lock is the same one `CustodyService.stamp` and `RepairService.restamp` take before they
+         * write `status`, which is what makes the ordering complete rather than one-sided: whichever
+         * transaction gets it second re-reads what the first committed, so an archive that arrives
+         * first makes the handover refuse, and a handover that arrives first makes the archive refuse.
+         * `lockAsset` in `status.ts` argues it in full.
+         */
+        const [locked] = await tx
+            .select()
+            .from(assets)
+            .where(and(eq(assets.workspaceId, workspaceId), eq(assets.id, assetId)))
+            .for('update');
+        if (!locked)
+            throw KernError.notFound('Asset');
+        if (archived) {
+            /**
+             * An item somebody is holding cannot leave the register.
+             *
+             * Somebody is answerable for the thing; taking it out of the register does not make them not
+             * answerable, it only stops anybody being able to find out. Two steps instead of one, and
+             * both of them mean something.
+             */
+            if (locked.custodianUserId)
+                throw KernError.conflict('Somebody is still holding this item. Take it back before archiving it.', 'inventory.asset.still_held');
+            /**
+             * An item that is at a repairer cannot leave the register either, and for the same reason as
+             * custody: money is committed and the thing is out of the building, so taking it out of the
+             * register does not settle that — it only stops anybody being able to find out.
+             *
+             * It also keeps two counts that must agree from drifting. `stats.summary` reports
+             * `byStatus.under_repair` from the cached status column, over live rows only, and
+             * `outForRepair` from the repair rows themselves; an archived asset with an open repair
+             * would appear in one and not the other, and neither number would be wrong.
+             *
+             * **Only while the workspace records repairs.** With the `repairs` capability off, this
+             * refusal names a procedure that answers 404 — so it was not a two-step instruction, it was a
+             * dead end: the repair could not be completed, so the asset could not be archived, so the
+             * item was stuck in the register for as long as the capability stayed off. A refusal that
+             * points at a door has to be withdrawn when the door is taken away. `stats.away` counts only
+             * live assets for the same reason, so the two counts still cannot disagree.
+             */
+            const open = repairsOn ? await openRepairId(tx, workspaceId, assetId) : undefined;
+            if (open)
+                throw KernError.conflict('This item is away for repair. Log the repair as returned before archiving it.', 'inventory.asset.under_repair');
+        }
         const [row] = await tx
             .update(assets)
             .set({ archivedAt: archived ? new Date() : null, updatedAt: new Date() })

package/dist/server/services/assets.js.map

@@ -1 +1 @@
-{"version":3,"file":"assets.js","sourceRoot":"","sources":["../../../src/server/services/assets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAwB,MAAM,EAAE,MAAM,gBAAgB,CAAA;AACxE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAA;AACxE,OAAO,EAAE,KAAK,EAAiB,MAAM,qBAAqB,CAAA;AAO1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAA;AAC9D,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AA0B/C,oGAAoG;AACpG,MAAM,UAAU,OAAO,CAAC,GAAQ;IAC9B,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,WAAW,EAAE,GAAG,CAAC,WAAwC;QACzD,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,MAAM,EAAE,GAAG,CAAC,MAA8B;QAC1C,eAAe,EAAE,GAAG,CAAC,eAAe;QACpC,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,WAAW,EAAE,IAAI,IAAI;QACrD,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI;QACpC,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,IAAI;QACxC,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;QACtC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;QACtC,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,IAAI;KAClD,CAAA;AACH,CAAC;AA8BD,MAAM,MAAM,GAAG,CAAC,CAAW,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;AAE5F,+EAA+E;AAC/E,MAAM,IAAI,GAAG,iEAAiE,CAAA;AAE9E,SAAS,MAAM,CAAC,MAAc,EAAE,IAAe;IAC7C,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,8CAA8C,CAAC,CAAA;IACzF,IAAI,MAAgC,CAAA;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAA6B,CAAA;IACpG,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,MAAM,EAAE,CAAA;IAChB,CAAC;IACD,IAAI,OAAO,MAAM,EAAE,CAAC,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAAE,MAAM,MAAM,EAAE,CAAA;IACzE,wFAAwF;IACxF,8FAA8F;IAC9F,mEAAmE;IACnE,IAAI,MAAM,CAAC,CAAC,KAAK,IAAI;QAAE,MAAM,MAAM,EAAE,CAAA;IACrC,OAAO,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAA;AACjC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAA;AAEnE,+FAA+F;AAC/F,MAAM,OAAO,GAAG,CAA6D,CAAI,EAAE,IAAe,EAAE,EAAE,CACpG,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AAc5D,MAAM,OAAO,YAAY;IAEJ;IACA;IAFnB,YACmB,MAAc,EACd,MAAqB;QADrB,WAAM,GAAN,MAAM,CAAQ;QACd,WAAM,GAAN,MAAM,CAAe;IACrC,CAAC;IAEJ;;;;;;;;OAQG;IACH,KAAK,CAAC,UAAU,CAAC,WAAmB;QAClC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAA;QAC/F,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAA;IACzE,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,QAAQ,CAAC,EAAM,EAAE,WAAmB,EAAE,MAAkB;QAC5D,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;aACnB,MAAM,CAAC,QAAQ,CAAC;aAChB,MAAM,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;aACpD,kBAAkB,CAAC;YAClB,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,CAAC;YAC5C,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAA,GAAG,QAAQ,CAAC,KAAK,MAAM,EAAE;SAC3C,CAAC;aACD,SAAS,EAAE,CAAA;QACd,OAAO,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,GAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAA;IAC1E,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAM,EAAE,KAAgB;QACjC,MAAM,OAAO,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAA;QAC3D,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC;YACZ,2FAA2F;YAC3F,kFAAkF;YAClF,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YACjC,OAAO,CAAC,IAAI,CACV,EAAE,CACA,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,EAC3B,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,EAC3B,KAAK,CAAC,GAAG,CAAA,YAAY,MAAM,CAAC,YAAY,OAAO,EAAE,OAAO,CAAC,CACzD,CACH,CAAA;QACH,CAAC;QACD,IAAI,KAAK,CAAC,UAAU;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAA;QAC3E,IAAI,KAAK,CAAC,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;QAC/D,IAAI,KAAK,CAAC,eAAe;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,eAAe,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC,CAAA;QAC1F,IAAI,CAAC,KAAK,CAAC,QAAQ;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAA;QAE5D,6FAA6F;QAC7F,4FAA4F;QAC5F,8FAA8F;QAC9F,4FAA4F;QAC5F,6FAA6F;QAC7F,4FAA4F;QAC5F,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QAC1C,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAA;QAE1C,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;YAC7C;;;;;;;;;;eAUG;YACH,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;YAC3C,MAAM,UAAU,GAAG,EAAE;iBAClB,MAAM,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;iBAC3D,IAAI,CAAC,MAAM,CAAC;iBACZ,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAA;YAC/E,OAAO,CAAC,IAAI,CACV,UAAU;gBACR,CAAC,CAAC,GAAG,CAAA,IAAI,MAAM,KAAK,MAAM,CAAC,EAAE,QAAQ,UAAU,GAAG;gBAClD,CAAC,CAAC,GAAG,CAAA,IAAI,MAAM,KAAK,MAAM,CAAC,EAAE,QAAQ,UAAU,GAAG,CACrD,CAAA;QACH,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;QAE1F,MAAM,IAAI,GAAG,MAAM,EAAE;aAClB,MAAM,EAAE;aACR,IAAI,CAAC,MAAM,CAAC;aACZ,KAAK,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC;aACtB,OAAO,CAAC,GAAG,KAAK,CAAC;aACjB,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;QAEzB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;QACxC,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;QACzB,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QACnG,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,CAAA;IAClD,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,EAAM,EAAE,WAAmB,EAAE,OAAe;QACpD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;aACnB,MAAM,EAAE;aACR,IAAI,CAAC,MAAM,CAAC;aACZ,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAA;QAC1E,IAAI,CAAC,GAAG;YAAE,MAAM,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;QAC3C,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,KAAK,CAAC,MAAM,CACV,EAAM,EACN,WAAmB,EACnB,OAAsB,EACtB,KAAuB,EACvB,MAAkB;QAElB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;aACnB,MAAM,CAAC,MAAM,CAAC;aACd,MAAM,CAAC;YACN,EAAE,EAAE,MAAM,EAAE;YACZ,WAAW;YACX,IAAI,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC;YAClD,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;YACpC,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;YACxC,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;YAChC,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,IAAI;YAC1C,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;YACtC,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,IAAI;YAC1C,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;YACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;YAChC,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;SACvC,CAAC;aACD,SAAS,EAAE,CAAA;QACd,MAAM,QAAQ,GAAiB,EAAE,WAAW,EAAE,OAAO,EAAE,GAAI,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;QAC5F,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAA;QACvC,OAAO,EAAE,GAAG,EAAE,GAAI,EAAE,QAAQ,EAAE,CAAA;IAChC,CAAC;IAED,gGAAgG;IACxF,MAAM,CAAU,QAAQ,GAAG;QACjC,MAAM;QACN,aAAa;QACb,YAAY;QACZ,cAAc;QACd,UAAU;QACV,eAAe;QACf,aAAa;QACb,eAAe;QACf,YAAY;QACZ,UAAU;QACV,aAAa;KACL,CAAA;IAEV,KAAK,CAAC,MAAM,CACV,EAAM,EACN,WAAmB,EACnB,OAAsB,EACtB,OAAe,EACf,KAAsB;QAEtB,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,EAAE;aACpB,MAAM,EAAE;aACR,IAAI,CAAC,MAAM,CAAC;aACZ,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;aACvE,GAAG,CAAC,QAAQ,CAAC,CAAA;QAChB,IAAI,CAAC,IAAI;YAAE,MAAM,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;QAE5C,2FAA2F;QAC3F,8CAA8C;QAC9C,MAAM,KAAK,GAA4B,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAA;QAChE,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAI,KAAiC,CAAC,KAAK,CAAC,CAAA;YACvD,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpE,CAAC;QAED,gGAAgG;QAChG,6FAA6F;QAC7F,6FAA6F;QAC7F,sFAAsF;QACtF,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;aACnB,MAAM,CAAC,MAAM,CAAC;aACd,GAAG,CAAC,KAAK,CAAC;aACV,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;aACvE,SAAS,EAAE,CAAA;QAEd,MAAM,GAAG,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAA;QAC7E,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9F,KAAK,EAAE,CAAC;YACR,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SAClB,CAAC,CAAC,CAAA;QACH,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,GAAG,EAAE,GAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;QAE9D,MAAM,QAAQ,GAAiB,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAA;QAC5F,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAA;QACvC,OAAO,EAAE,GAAG,EAAE,GAAI,EAAE,QAAQ,EAAE,CAAA;IAChC,CAAC;IAED,KAAK,CAAC,OAAO,CACX,EAAM,EACN,WAAmB,EACnB,OAAsB,EACtB,OAAe,EACf,QAAiB;QAEjB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;aACnB,MAAM,CAAC,MAAM,CAAC;aACd,GAAG,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;aACxE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;aACvE,SAAS,EAAE,CAAA;QACd,IAAI,CAAC,GAAG;YAAE,MAAM,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;QAC3C,MAAM,QAAQ,GAAiB;YAC7B,WAAW;YACX,OAAO;YACP,OAAO;YACP,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU;SAC1C,CAAA;QACD,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAA;QACvC,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAA;IAC1B,CAAC"}
+{"version":3,"file":"assets.js","sourceRoot":"","sources":["../../../src/server/services/assets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAwB,MAAM,EAAE,MAAM,gBAAgB,CAAA;AACxE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAA;AAC5E,OAAO,EAAE,KAAK,EAAiB,MAAM,qBAAqB,CAAA;AAQ1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAA;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AACzE,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAElF,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAyB1C,oGAAoG;AACpG,MAAM,UAAU,OAAO,CAAC,GAAQ;IAC9B,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,WAAW,EAAE,GAAG,CAAC,WAAwC;QACzD,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,MAAM,EAAE,GAAG,CAAC,MAA8B;QAC1C,eAAe,EAAE,GAAG,CAAC,eAAe;QACpC,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,WAAW,EAAE,IAAI,IAAI;QACrD,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI;QACpC,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,IAAI;QACxC,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;QACtC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;QACtC,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,IAAI;KAClD,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,GAAqC;IAClE,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE;QAC1B,IAAI,EAAG,GAAG,CAAC,IAAuC,IAAI,EAAE;QACxD,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE;KACzC,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAA;AAEnE;;;;;;GAMG;AACH,MAAM,YAAY,GAAG,QAAQ,CAAA;AAE7B,+FAA+F;AAC/F,MAAM,OAAO,GAAG,CAA6D,CAAI,EAAE,IAAe,EAAE,EAAE,CACpG,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AAc5D,MAAM,OAAO,YAAY;IAEJ;IACA;IAFnB,YACmB,MAAc,EACd,MAAqB;QADrB,WAAM,GAAN,MAAM,CAAQ;QACd,WAAM,GAAN,MAAM,CAAe;IACrC,CAAC;IAEJ;;;;;;;;OAQG;IACH,KAAK,CAAC,UAAU,CAAC,WAAmB;QAClC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAA;QAC/F,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAA;IACzE,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,QAAQ,CAAC,EAAM,EAAE,WAAmB,EAAE,MAAkB;QAC5D,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;aACnB,MAAM,CAAC,QAAQ,CAAC;aAChB,MAAM,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;aACpD,kBAAkB,CAAC;YAClB,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,CAAC;YAC5C,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAA,GAAG,QAAQ,CAAC,KAAK,MAAM,EAAE;SAC3C,CAAC;aACD,SAAS,EAAE,CAAA;QACd,OAAO,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,GAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAA;IAC1E,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAM,EAAE,KAAgB;QACjC,MAAM,OAAO,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAA;QAC3D,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC;YACZ,2FAA2F;YAC3F,kFAAkF;YAClF,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YACjC,OAAO,CAAC,IAAI,CACV,EAAE,CACA,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,EAC3B,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,EAC3B,KAAK,CAAC,GAAG,CAAA,YAAY,MAAM,CAAC,YAAY,OAAO,EAAE,OAAO,CAAC,CACzD,CACH,CAAA;QACH,CAAC;QACD,IAAI,KAAK,CAAC,UAAU;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAA;QAC3E,IAAI,KAAK,CAAC,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;QAC/D,IAAI,KAAK,CAAC,eAAe;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,eAAe,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC,CAAA;QAC1F,IAAI,CAAC,KAAK,CAAC,QAAQ;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAA;QAE5D;;;;;;;;;;;;;;;;;;WAkBG;QACH,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QAC1C,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAA;QAE1C,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;YACjD;;;;;;;;;;eAUG;YACH,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;YAC3C,MAAM,UAAU,GAAG,EAAE;iBAClB,MAAM,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;iBAC3D,IAAI,CAAC,MAAM,CAAC;iBACZ,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAA;YAC/E,OAAO,CAAC,IAAI,CACV,UAAU;gBACR,CAAC,CAAC,GAAG,CAAA,IAAI,MAAM,KAAK,MAAM,CAAC,EAAE,QAAQ,UAAU,GAAG;gBAClD,CAAC,CAAC,GAAG,CAAA,IAAI,MAAM,KAAK,MAAM,CAAC,EAAE,QAAQ,UAAU,GAAG,CACrD,CAAA;QACH,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;QAE1F,MAAM,IAAI,GAAG,MAAM,EAAE;aAClB,MAAM,EAAE;aACR,IAAI,CAAC,MAAM,CAAC;aACZ,KAAK,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC;aACtB,OAAO,CAAC,GAAG,KAAK,CAAC;aACjB,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;QAEzB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;QACxC,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;QACzB,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QACvG,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,CAAA;IAClD,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,KAAK,CAAC,OAAO,CACX,EAAM,EACN,WAAmB,EACnB,OAAe,EACf,KAAyC;QAEzC,0FAA0F;QAC1F,yFAAyF;QACzF,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,CAAA;QAExC,MAAM,OAAO,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;QAC9F,IAAI,KAAK,CAAC,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAEjG,MAAM,IAAI,GAAG,MAAM,EAAE;aAClB,MAAM,EAAE;aACR,IAAI,CAAC,YAAY,CAAC;aAClB,KAAK,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC;aACtB,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;aAC/B,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;QAEzB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;QACxC,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;QACzB,MAAM,UAAU,GACd,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAC5F,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,UAAU,EAAE,CAAA;IACzD,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACK,KAAK,CAAC,eAAe,CAAC,EAAM,EAAE,WAAmB,EAAE,UAAkB;QAC3E,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;aACnB,MAAM,CAAC,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC;aAC7B,IAAI,CAAC,UAAU,CAAC;aAChB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC,CAAA;QACrF,IAAI,CAAC,GAAG;YAAE,MAAM,SAAS,CAAC,UAAU,CAAC,8CAA8C,CAAC,CAAA;IACtF,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,EAAM,EAAE,WAAmB,EAAE,OAAe;QACpD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;aACnB,MAAM,EAAE;aACR,IAAI,CAAC,MAAM,CAAC;aACZ,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAA;QAC1E,IAAI,CAAC,GAAG;YAAE,MAAM,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;QAC3C,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,KAAK,CAAC,MAAM,CACV,EAAM,EACN,WAAmB,EACnB,OAAsB,EACtB,KAAuB,EACvB,MAAkB;QAElB,IAAI,KAAK,CAAC,UAAU;YAAE,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,UAAU,CAAC,CAAA;QACnF,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;aACnB,MAAM,CAAC,MAAM,CAAC;aACd,MAAM,CAAC;YACN,EAAE,EAAE,MAAM,EAAE;YACZ,WAAW;YACX,IAAI,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC;YAClD,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;YACpC,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;YACxC,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;YAChC,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,IAAI;YAC1C,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;YACtC,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,IAAI;YAC1C,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;YACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;YAChC,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;SACvC,CAAC;aACD,SAAS,EAAE,CAAA;QACd,MAAM,QAAQ,GAAiB,EAAE,WAAW,EAAE,OAAO,EAAE,GAAI,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;QAC5F,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAA;QACvC,OAAO,EAAE,GAAG,EAAE,GAAI,EAAE,QAAQ,EAAE,CAAA;IAChC,CAAC;IAED,gGAAgG;IACxF,MAAM,CAAU,QAAQ,GAAG;QACjC,MAAM;QACN,aAAa;QACb,YAAY;QACZ,cAAc;QACd,UAAU;QACV,eAAe;QACf,aAAa;QACb,eAAe;QACf,YAAY;QACZ,UAAU;QACV,aAAa;KACL,CAAA;IAEV,KAAK,CAAC,MAAM,CACV,EAAM,EACN,WAAmB,EACnB,OAAsB,EACtB,OAAe,EACf,KAAsB;QAEtB,yFAAyF;QACzF,6FAA6F;QAC7F,6FAA6F;QAC7F,IAAI,KAAK,CAAC,UAAU;YAAE,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,UAAU,CAAC,CAAA;QAEnF,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,EAAE;aACpB,MAAM,EAAE;aACR,IAAI,CAAC,MAAM,CAAC;aACZ,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;aACvE,GAAG,CAAC,QAAQ,CAAC,CAAA;QAChB,IAAI,CAAC,IAAI;YAAE,MAAM,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;QAE5C,2FAA2F;QAC3F,8CAA8C;QAC9C,MAAM,KAAK,GAA4B,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAA;QAChE,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAI,KAAiC,CAAC,KAAK,CAAC,CAAA;YACvD,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpE,CAAC;QAED;;;;;;;WAOG;QACH,IAAI,KAAK,CAAC,aAAa,KAAK,IAAI,CAAC,aAAa;YAAE,KAAK,CAAC,kBAAkB,GAAG,IAAI,CAAA;QAE/E,gGAAgG;QAChG,6FAA6F;QAC7F,6FAA6F;QAC7F,sFAAsF;QACtF,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;aACnB,MAAM,CAAC,MAAM,CAAC;aACd,GAAG,CAAC,KAAK,CAAC;aACV,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;aACvE,SAAS,EAAE,CAAA;QAEd,MAAM,GAAG,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAA;QAC7E,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9F,KAAK,EAAE,CAAC;YACR,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SAClB,CAAC,CAAC,CAAA;QACH,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,GAAG,EAAE,GAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;QAE9D,MAAM,QAAQ,GAAiB,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAA;QAC5F,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAA;QACvC,OAAO,EAAE,GAAG,EAAE,GAAI,EAAE,QAAQ,EAAE,CAAA;IAChC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAO,CACX,EAAM,EACN,WAAmB,EACnB,OAAsB,EACtB,OAAe,EACf,QAAiB,EACjB,SAAkB;QAElB;;;;;;;;;;;;;;;;WAgBG;QACH,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE;aACtB,MAAM,EAAE;aACR,IAAI,CAAC,MAAM,CAAC;aACZ,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;aACvE,GAAG,CAAC,QAAQ,CAAC,CAAA;QAChB,IAAI,CAAC,MAAM;YAAE,MAAM,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;QAE9C,IAAI,QAAQ,EAAE,CAAC;YACb;;;;;;eAMG;YACH,IAAI,MAAM,CAAC,eAAe;gBACxB,MAAM,SAAS,CAAC,QAAQ,CACtB,wEAAwE,EACxE,4BAA4B,CAC7B,CAAA;YAEH;;;;;;;;;;;;;;;;eAgBG;YACH,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YACjF,IAAI,IAAI;gBACN,MAAM,SAAS,CAAC,QAAQ,CACtB,+EAA+E,EAC/E,8BAA8B,CAC/B,CAAA;QACL,CAAC;QAED,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;aACnB,MAAM,CAAC,MAAM,CAAC;aACd,GAAG,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;aACxE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;aACvE,SAAS,EAAE,CAAA;QACd,IAAI,CAAC,GAAG;YAAE,MAAM,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;QAC3C,MAAM,QAAQ,GAAiB;YAC7B,WAAW;YACX,OAAO;YACP,OAAO;YACP,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU;SAC1C,CAAA;QACD,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAA;QACvC,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAA;IAC1B,CAAC"}

package/dist/server/services/attachments.d.ts

@@ -0,0 +1,80 @@
+import { type Kernel, type Tx } from '@kernhq/kernel';
+import type { Attachment as AttachmentModel } from '../../contract/models.js';
+import { attachments } from '../schema.js';
+import type { HistoryInput, NotifyService } from './notify.js';
+type Row = typeof attachments.$inferSelect;
+/** What this module copies out of core's file record, and all it copies. */
+export interface FileFacts {
+    id: string;
+    name: string;
+    mimeType: string | null;
+    size: number | null;
+}
+/** The wire shape: drizzle gives Date objects for timestamps, the contract promises ISO strings. */
+export declare function toAttachment(row: Row): AttachmentModel;
+/**
+ * Files kept against an asset — receipts, warranties, manuals, a repair invoice.
+ *
+ * **A module does not upload, and this class is what that sentence means in code.** The browser
+ * sends the bytes to core's file service and is handed an id; this records that the asset has that
+ * file, with the name and size copied at attach time so a list can be drawn without asking core once
+ * per row. Nothing here streams, signs, stores or deletes a byte — `remove` detaches, because the
+ * same file may be attached elsewhere and a module has no standing to destroy another module's row.
+ *
+ * The copied name is a snapshot on purpose: renaming a file in core does not rename it here, which
+ * is the same trade every module makes when it copies a label rather than joining across a schema
+ * boundary. What it buys is a files list that is one query rather than one query plus a call per row.
+ */
+export declare class AttachmentService {
+    private readonly kernel;
+    private readonly notify;
+    constructor(kernel: Kernel, notify: NotifyService);
+    /**
+     * What core knows about these files — **called before the transaction opens, never inside one.**
+     *
+     * `kernel.call` is a request to another service over the broker, and awaiting one while holding a
+     * pooled connection is the failure `AssetService.codeFormat` documents: the pool starves under
+     * concurrent writes, and an attach fails outright whenever core is briefly away. So the router
+     * gathers the facts first and hands them to `add`, which does nothing but write.
+     *
+     * Two checks, and the first one is the one that matters: **a file has to belong to this
+     * workspace.** The id arrives in the request, so without this a member of one workspace could
+     * attach another workspace's file and read its name and size back out of the list — the module
+     * boundary does not help here, because core answers this module as a service.
+     */
+    describe(workspaceId: string, fileIds: readonly string[]): Promise<FileFacts[]>;
+    /**
+     * Every file on one asset, its repairs' included, oldest first.
+     *
+     * Not paged and not filtered by repair: one asset's files are bounded by how much paperwork one
+     * item collects, and the panel groups them in the browser. That is the one case where filtering
+     * client-side is right — the list is entirely loaded — and it is the opposite of what a paged
+     * asset list may do.
+     */
+    list(tx: Tx, workspaceId: string, assetId: string): Promise<AttachmentModel[]>;
+    /**
+     * Record that this asset has these files.
+     *
+     * `onConflictDoNothing` on `(asset_id, file_id)`: attaching the same file to the same asset twice
+     * is not an error worth refusing — somebody pressed the button twice, or dropped the same receipt
+     * in again — and the second attempt simply adds nothing. The rows that *were* inserted come back,
+     * so the caller announces exactly what changed.
+     *
+     * An archived asset is deliberately allowed: finding the receipt for something you retired last
+     * month is a reason to file it, not a reason to be refused.
+     */
+    add(tx: Tx, workspaceId: string, actorId: string | null, assetId: string, repairId: string | null, files: readonly FileFacts[]): Promise<{
+        rows: Row[];
+        activities: HistoryInput[];
+    }>;
+    /** Detach one file. Core's copy of it is untouched — see the class docblock. */
+    remove(tx: Tx, workspaceId: string, actorId: string | null, attachmentId: string): Promise<{
+        row: Row;
+        activity: HistoryInput;
+    }>;
+    private requireAsset;
+    /** A repair the file is filed under has to be one of *this* asset's, not merely one that exists. */
+    private requireRepair;
+}
+export {};
+//# sourceMappingURL=attachments.d.ts.map

package/dist/server/services/attachments.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachments.d.ts","sourceRoot":"","sources":["../../../src/server/services/attachments.ts"],"names":[],"mappings":"AACA,OAAO,EAAa,KAAK,MAAM,EAAE,KAAK,EAAE,EAAU,MAAM,gBAAgB,CAAA;AAExE,OAAO,KAAK,EAAE,UAAU,IAAI,eAAe,EAAE,MAAM,0BAA0B,CAAA;AAC7E,OAAO,EAAU,WAAW,EAAW,MAAM,cAAc,CAAA;AAC3D,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAE9D,KAAK,GAAG,GAAG,OAAO,WAAW,CAAC,YAAY,CAAA;AAE1C,4EAA4E;AAC5E,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CACpB;AAED,oGAAoG;AACpG,wBAAgB,YAAY,CAAC,GAAG,EAAE,GAAG,GAAG,eAAe,CAatD;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,iBAAiB;IAE1B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,aAAa;IAGxC;;;;;;;;;;;;OAYG;IACG,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IAmBrF;;;;;;;OAOG;IACG,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IASpF;;;;;;;;;;OAUG;IACG,GAAG,CACP,EAAE,EAAE,EAAE,EACN,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,GAAG,IAAI,EACtB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GAAG,IAAI,EACvB,KAAK,EAAE,SAAS,SAAS,EAAE,GAC1B,OAAO,CAAC;QAAE,IAAI,EAAE,GAAG,EAAE,CAAC;QAAC,UAAU,EAAE,YAAY,EAAE,CAAA;KAAE,CAAC;IA6CvD,gFAAgF;IAC1E,MAAM,CACV,EAAE,EAAE,EAAE,EACN,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,GAAG,IAAI,EACtB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC;QAAE,GAAG,EAAE,GAAG,CAAC;QAAC,QAAQ,EAAE,YAAY,CAAA;KAAE,CAAC;YA0BlC,YAAY;IAQ1B,oGAAoG;YACtF,aAAa;CAS5B"}

package/dist/server/services/attachments.js

@@ -0,0 +1,182 @@
+import { KernError, uuidv7 } from '@kernhq/kernel';
+import { and, asc, eq } from 'drizzle-orm';
+import { assets, attachments, repairs } from '../schema.js';
+/** The wire shape: drizzle gives Date objects for timestamps, the contract promises ISO strings. */
+export function toAttachment(row) {
+    return {
+        id: row.id,
+        workspaceId: row.workspaceId,
+        assetId: row.assetId,
+        repairId: row.repairId,
+        fileId: row.fileId,
+        name: row.name,
+        mimeType: row.mimeType,
+        size: row.size,
+        uploadedBy: row.uploadedBy,
+        createdAt: row.createdAt.toISOString(),
+    };
+}
+/**
+ * Files kept against an asset — receipts, warranties, manuals, a repair invoice.
+ *
+ * **A module does not upload, and this class is what that sentence means in code.** The browser
+ * sends the bytes to core's file service and is handed an id; this records that the asset has that
+ * file, with the name and size copied at attach time so a list can be drawn without asking core once
+ * per row. Nothing here streams, signs, stores or deletes a byte — `remove` detaches, because the
+ * same file may be attached elsewhere and a module has no standing to destroy another module's row.
+ *
+ * The copied name is a snapshot on purpose: renaming a file in core does not rename it here, which
+ * is the same trade every module makes when it copies a label rather than joining across a schema
+ * boundary. What it buys is a files list that is one query rather than one query plus a call per row.
+ */
+export class AttachmentService {
+    kernel;
+    notify;
+    constructor(kernel, notify) {
+        this.kernel = kernel;
+        this.notify = notify;
+    }
+    /**
+     * What core knows about these files — **called before the transaction opens, never inside one.**
+     *
+     * `kernel.call` is a request to another service over the broker, and awaiting one while holding a
+     * pooled connection is the failure `AssetService.codeFormat` documents: the pool starves under
+     * concurrent writes, and an attach fails outright whenever core is briefly away. So the router
+     * gathers the facts first and hands them to `add`, which does nothing but write.
+     *
+     * Two checks, and the first one is the one that matters: **a file has to belong to this
+     * workspace.** The id arrives in the request, so without this a member of one workspace could
+     * attach another workspace's file and read its name and size back out of the list — the module
+     * boundary does not help here, because core answers this module as a service.
+     */
+    async describe(workspaceId, fileIds) {
+        const unique = [...new Set(fileIds)];
+        const found = await Promise.all(unique.map(async (id) => {
+            const file = await this.kernel.call('core.files.get', { id });
+            if (!file || file.workspaceId !== workspaceId)
+                throw KernError.badRequest('That file is not one this workspace can attach.');
+            if (file.status !== 'ready')
+                throw KernError.badRequest('That file has not finished uploading yet.');
+            return {
+                id: file.id,
+                name: file.name,
+                mimeType: file.mimeType || null,
+                size: typeof file.size === 'number' ? file.size : null,
+            };
+        }));
+        return found;
+    }
+    /**
+     * Every file on one asset, its repairs' included, oldest first.
+     *
+     * Not paged and not filtered by repair: one asset's files are bounded by how much paperwork one
+     * item collects, and the panel groups them in the browser. That is the one case where filtering
+     * client-side is right — the list is entirely loaded — and it is the opposite of what a paged
+     * asset list may do.
+     */
+    async list(tx, workspaceId, assetId) {
+        const rows = await tx
+            .select()
+            .from(attachments)
+            .where(and(eq(attachments.workspaceId, workspaceId), eq(attachments.assetId, assetId)))
+            .orderBy(asc(attachments.createdAt), asc(attachments.id));
+        return rows.map(toAttachment);
+    }
+    /**
+     * Record that this asset has these files.
+     *
+     * `onConflictDoNothing` on `(asset_id, file_id)`: attaching the same file to the same asset twice
+     * is not an error worth refusing — somebody pressed the button twice, or dropped the same receipt
+     * in again — and the second attempt simply adds nothing. The rows that *were* inserted come back,
+     * so the caller announces exactly what changed.
+     *
+     * An archived asset is deliberately allowed: finding the receipt for something you retired last
+     * month is a reason to file it, not a reason to be refused.
+     */
+    async add(tx, workspaceId, actorId, assetId, repairId, files) {
+        await this.requireAsset(tx, workspaceId, assetId);
+        if (repairId)
+            await this.requireRepair(tx, workspaceId, assetId, repairId);
+        if (!files.length)
+            return { rows: [], activities: [] };
+        const inserted = await tx
+            .insert(attachments)
+            .values(files.map((file) => ({
+            id: uuidv7(),
+            workspaceId,
+            assetId,
+            repairId,
+            fileId: file.id,
+            name: file.name,
+            mimeType: file.mimeType,
+            size: file.size,
+            uploadedBy: actorId,
+        })))
+            .onConflictDoNothing({ target: [attachments.assetId, attachments.fileId] })
+            .returning();
+        /**
+         * One timeline entry per file, rather than one saying "3 files".
+         *
+         * A timeline is read to find out what happened to a thing, and "attached the purchase receipt"
+         * answers that where "attached 3 files" sends the reader looking. Attaching several at once is
+         * rare enough that the extra rows cost nothing.
+         */
+        const activities = inserted.map((row) => ({
+            workspaceId,
+            assetId,
+            actorId,
+            action: 'attachment_added',
+            data: {
+                attachmentId: row.id,
+                name: row.name,
+                ...(row.repairId ? { repairId: row.repairId } : {}),
+            },
+        }));
+        for (const activity of activities)
+            await this.notify.history(tx, activity);
+        return { rows: inserted, activities };
+    }
+    /** Detach one file. Core's copy of it is untouched — see the class docblock. */
+    async remove(tx, workspaceId, actorId, attachmentId) {
+        const [row] = await tx
+            .select()
+            .from(attachments)
+            .where(and(eq(attachments.workspaceId, workspaceId), eq(attachments.id, attachmentId)));
+        if (!row)
+            throw KernError.notFound('Attachment');
+        // Filtered by workspace as well as by id, like every other write in this module: `core`
+        // connects as a superuser with RLS bypassed, so the predicate in the statement is the only
+        // barrier there is, and a barrier that holds only because of what an earlier statement happened
+        // to do is not one.
+        await tx
+            .delete(attachments)
+            .where(and(eq(attachments.workspaceId, workspaceId), eq(attachments.id, attachmentId)));
+        const activity = {
+            workspaceId,
+            assetId: row.assetId,
+            actorId,
+            action: 'attachment_removed',
+            data: { attachmentId: row.id, name: row.name },
+        };
+        await this.notify.history(tx, activity);
+        return { row, activity };
+    }
+    async requireAsset(tx, workspaceId, assetId) {
+        const [row] = await tx
+            .select({ id: assets.id })
+            .from(assets)
+            .where(and(eq(assets.workspaceId, workspaceId), eq(assets.id, assetId)));
+        if (!row)
+            throw KernError.notFound('Asset');
+    }
+    /** A repair the file is filed under has to be one of *this* asset's, not merely one that exists. */
+    async requireRepair(tx, workspaceId, assetId, repairId) {
+        const [row] = await tx
+            .select({ id: repairs.id })
+            .from(repairs)
+            .where(and(eq(repairs.workspaceId, workspaceId), eq(repairs.id, repairId), eq(repairs.assetId, assetId)));
+        if (!row)
+            throw KernError.notFound('Repair');
+    }
+}
+//# sourceMappingURL=attachments.js.map

package/dist/server/services/attachments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachments.js","sourceRoot":"","sources":["../../../src/server/services/attachments.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAwB,MAAM,EAAE,MAAM,gBAAgB,CAAA;AACxE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAA;AAE1C,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAa3D,oGAAoG;AACpG,MAAM,UAAU,YAAY,CAAC,GAAQ;IACnC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,WAAW,EAAE,GAAG,CAAC,WAA6C;QAC9D,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;KACvC,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,iBAAiB;IAET;IACA;IAFnB,YACmB,MAAc,EACd,MAAqB;QADrB,WAAM,GAAN,MAAM,CAAQ;QACd,WAAM,GAAN,MAAM,CAAe;IACrC,CAAC;IAEJ;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,QAAQ,CAAC,WAAmB,EAAE,OAA0B;QAC5D,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAA;QACpC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YACtB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAyB,gBAAgB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;YACrF,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,WAAW;gBAC3C,MAAM,SAAS,CAAC,UAAU,CAAC,iDAAiD,CAAC,CAAA;YAC/E,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO;gBAAE,MAAM,SAAS,CAAC,UAAU,CAAC,2CAA2C,CAAC,CAAA;YACpG,OAAO;gBACL,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;gBAC/B,IAAI,EAAE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;aACvD,CAAA;QACH,CAAC,CAAC,CACH,CAAA;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,IAAI,CAAC,EAAM,EAAE,WAAmB,EAAE,OAAe;QACrD,MAAM,IAAI,GAAG,MAAM,EAAE;aAClB,MAAM,EAAE;aACR,IAAI,CAAC,WAAW,CAAC;aACjB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;aACtF,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAA;QAC3D,OAAO,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;IAC/B,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,GAAG,CACP,EAAM,EACN,WAAmB,EACnB,OAAsB,EACtB,OAAe,EACf,QAAuB,EACvB,KAA2B;QAE3B,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,CAAA;QACjD,IAAI,QAAQ;YAAE,MAAM,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAA;QAC1E,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAA;QAEtD,MAAM,QAAQ,GAAG,MAAM,EAAE;aACtB,MAAM,CAAC,WAAW,CAAC;aACnB,MAAM,CACL,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACnB,EAAE,EAAE,MAAM,EAAE;YACZ,WAAW;YACX,OAAO;YACP,QAAQ;YACR,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,UAAU,EAAE,OAAO;SACpB,CAAC,CAAC,CACJ;aACA,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;aAC1E,SAAS,EAAE,CAAA;QAEd;;;;;;WAMG;QACH,MAAM,UAAU,GAAmB,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxD,WAAW;YACX,OAAO;YACP,OAAO;YACP,MAAM,EAAE,kBAAkB;YAC1B,IAAI,EAAE;gBACJ,YAAY,EAAE,GAAG,CAAC,EAAE;gBACpB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpD;SACF,CAAC,CAAC,CAAA;QACH,KAAK,MAAM,QAAQ,IAAI,UAAU;YAAE,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAA;QAC1E,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAA;IACvC,CAAC;IAED,gFAAgF;IAChF,KAAK,CAAC,MAAM,CACV,EAAM,EACN,WAAmB,EACnB,OAAsB,EACtB,YAAoB;QAEpB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;aACnB,MAAM,EAAE;aACR,IAAI,CAAC,WAAW,CAAC;aACjB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC,CAAA;QACzF,IAAI,CAAC,GAAG;YAAE,MAAM,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAA;QAEhD,wFAAwF;QACxF,2FAA2F;QAC3F,gGAAgG;QAChG,oBAAoB;QACpB,MAAM,EAAE;aACL,MAAM,CAAC,WAAW,CAAC;aACnB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC,CAAA;QAEzF,MAAM,QAAQ,GAAiB;YAC7B,WAAW;YACX,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,OAAO;YACP,MAAM,EAAE,oBAAoB;YAC5B,IAAI,EAAE,EAAE,YAAY,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE;SAC/C,CAAA;QACD,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAA;QACvC,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAA;IAC1B,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,EAAM,EAAE,WAAmB,EAAE,OAAe;QACrE,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;aACnB,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;aACzB,IAAI,CAAC,MAAM,CAAC;aACZ,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAA;QAC1E,IAAI,CAAC,GAAG;YAAE,MAAM,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;IAC7C,CAAC;IAED,oGAAoG;IAC5F,KAAK,CAAC,aAAa,CAAC,EAAM,EAAE,WAAmB,EAAE,OAAe,EAAE,QAAgB;QACxF,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;aACnB,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;aAC1B,IAAI,CAAC,OAAO,CAAC;aACb,KAAK,CACJ,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAClG,CAAA;QACH,IAAI,CAAC,GAAG;YAAE,MAAM,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;IAC9C,CAAC;CACF"}

package/dist/server/services/audience.d.ts

@@ -0,0 +1,15 @@
+import type { Kernel } from '@kernhq/kernel';
+/**
+ * The members of a workspace who genuinely hold a permission.
+ *
+ * Genuinely, not "hold the role it defaults to": `kernel.authz.can` reads custom roles and scope
+ * bindings as well as the built-in defaults, so a workspace that took `inventory.repair.manage` away
+ * from `member` and gave it to one custom role is answered correctly. Guessing from the role would
+ * have been one local call instead of a handful, and would have quietly told the wrong people.
+ *
+ * Every failure here is swallowed: this decides an audience for a best-effort notification, and a
+ * member whose principal core cannot produce right now is one fewer recipient, not a reason for a
+ * nightly sweep to stop half-way through a workspace.
+ */
+export declare function membersWithPermission(kernel: Kernel, workspaceId: string, permission: string): Promise<string[]>;
+//# sourceMappingURL=audience.d.ts.map