@nexpress/core 0.3.7 → 0.3.8

package/dist/{audit-43OLHR3U.js → audit-ZLNKBIDO.js}

@@ -1,9 +1,9 @@
 import {
   listAuditEvents,
   recordAuditEvent
-} from "./chunk-ML2E3P3X.js";
+} from "./chunk-5C22NDW4.js";
 import "./chunk-SBCVAC2Z.js";
-import "./chunk-NFHS7CFV.js";
+import "./chunk-Q7MK5ZKG.js";
 import "./chunk-XANPEOJC.js";
 import "./chunk-X7K5F2UI.js";
 import "./chunk-PZ5AY32C.js";
@@ -11,4 +11,4 @@ export {
   listAuditEvents,
   recordAuditEvent
 };
-//# sourceMappingURL=audit-43OLHR3U.js.map
+//# sourceMappingURL=audit-ZLNKBIDO.js.map

package/dist/auth.js

@@ -38,16 +38,16 @@ import {
   verifyPassword,
   verifyToken,
   verifyTokenFull
-} from "./chunk-6UV2P5MW.js";
+} from "./chunk-TIWJVQOO.js";
 import {
   can
 } from "./chunk-EQ2Z3KMD.js";
-import "./chunk-ML2E3P3X.js";
-import "./chunk-RKM4GDWM.js";
+import "./chunk-5C22NDW4.js";
+import "./chunk-6MRTH734.js";
 import "./chunk-SBCVAC2Z.js";
 import "./chunk-ZCINJSS4.js";
 import "./chunk-OROPGO65.js";
-import "./chunk-NFHS7CFV.js";
+import "./chunk-Q7MK5ZKG.js";
 import "./chunk-XANPEOJC.js";
 import "./chunk-X7K5F2UI.js";
 import "./chunk-PZ5AY32C.js";

package/dist/{can-UJ2NAOIR.js → can-U5F4JBZ7.js}

@@ -3,7 +3,7 @@ import {
   isMemberBanned,
   memberCan,
   withMemberWrite
-} from "./chunk-RJ76SKWQ.js";
+} from "./chunk-XU2GJJ6Z.js";
 import "./chunk-U4QCCLAW.js";
 import "./chunk-SBCVAC2Z.js";
 import "./chunk-ZCINJSS4.js";
@@ -16,4 +16,4 @@ export {
   memberCan,
   withMemberWrite
 };
-//# sourceMappingURL=can-UJ2NAOIR.js.map
+//# sourceMappingURL=can-U5F4JBZ7.js.map

package/dist/{chunk-2GXH7566.js → chunk-2O2KMHLO.js}

@@ -1,7 +1,7 @@
 import {
   recordJobLog,
   runInJobContext
-} from "./chunk-QBIJZZ5V.js";
+} from "./chunk-CGLJBRRX.js";
 import {
   getEmailAdapter
 } from "./chunk-LSHHRDVR.js";
@@ -16,7 +16,7 @@ import {
 } from "./chunk-OROPGO65.js";
 import {
   getLogger
-} from "./chunk-NFHS7CFV.js";
+} from "./chunk-Q7MK5ZKG.js";
 import {
   getDb
 } from "./chunk-XANPEOJC.js";
@@ -145,7 +145,7 @@ function registerBuiltinHandlers() {
   registerJobHandler("notifications:sendDigest", handleNotificationsSendDigest);
 }
 async function handleContentPublishScheduled(_) {
-  const { publishScheduledDocuments } = await import("./scheduled-S6IO47JD.js");
+  const { publishScheduledDocuments } = await import("./scheduled-PF2HECSF.js");
   const result = await publishScheduledDocuments();
   if (result.published > 0) {
     console.info(
@@ -193,7 +193,7 @@ async function handleMediaCleanup(data) {
 async function handlePluginScheduledTask(data) {
   if (isRecord(data) && typeof data.pluginId === "string" && typeof data.taskId === "string") {
     try {
-      const { runPluginScheduledTask } = await import("./host-XBGYIQEE.js");
+      const { runPluginScheduledTask } = await import("./host-C5PGUXX7.js");
       await runPluginScheduledTask(data.pluginId, data.taskId);
       return;
     } catch (err) {
@@ -212,7 +212,7 @@ async function handleSessionCleanup(_) {
   await builtinJobContext.cleanupSessions?.();
 }
 async function handleJobLogPrune(_) {
-  const { pruneJobLogsOlderThan: pruneJobLogsOlderThan2, DEFAULT_JOB_LOG_RETENTION_MS: DEFAULT_JOB_LOG_RETENTION_MS2 } = await import("./job-log-N3IGI4NA.js");
+  const { pruneJobLogsOlderThan: pruneJobLogsOlderThan2, DEFAULT_JOB_LOG_RETENTION_MS: DEFAULT_JOB_LOG_RETENTION_MS2 } = await import("./job-log-UY6ERPQZ.js");
   const cutoff = new Date(Date.now() - DEFAULT_JOB_LOG_RETENTION_MS2);
   const deleted = await pruneJobLogsOlderThan2(cutoff);
   if (deleted > 0) {
@@ -387,7 +387,7 @@ async function handleMemberSendPasswordReset(data) {
 async function handleNotificationsSendDigest(data) {
   const cadence = isRecord(data) && (data.cadence === "daily" || data.cadence === "weekly") ? data.cadence : "daily";
   const siteName = isRecord(data) && typeof data.siteName === "string" ? data.siteName : void 0;
-  const { runDigestSweep } = await import("./digest-ZODDTXA2.js");
+  const { runDigestSweep } = await import("./digest-IWHMJPXI.js");
   const result = await runDigestSweep({ cadence, siteName });
   console.info(
     `[nexpress] notifications:sendDigest cadence=${cadence} considered=${result.considered} sent=${result.sent} skipped=${result.skipped} failed=${result.failed}`
@@ -673,7 +673,7 @@ var PgBossAdapter = class {
       this.workRegistrations.push({ queueName, register });
       await register();
     }
-    const { getRegisteredPluginSchedules, runPluginScheduledTask } = await import("./host-XBGYIQEE.js");
+    const { getRegisteredPluginSchedules, runPluginScheduledTask } = await import("./host-C5PGUXX7.js");
     for (const schedule of getRegisteredPluginSchedules()) {
       const queueName = `${toQueueName("plugin:scheduledTask")}.${schedule.pluginId}.${schedule.taskId}`;
       await this.boss.createQueue(queueName);
@@ -775,7 +775,7 @@ var PgBossAdapter = class {
     });
     await this.boss.schedule(digestQueue, "0 8 * * *", { cadence: "daily" }, { key: "daily" });
     await this.boss.schedule(digestQueue, "0 8 * * 1", { cadence: "weekly" }, { key: "weekly" });
-    const { getRegisteredPluginSchedules } = await import("./host-XBGYIQEE.js");
+    const { getRegisteredPluginSchedules } = await import("./host-C5PGUXX7.js");
     for (const schedule of getRegisteredPluginSchedules()) {
       const pgBossName = `${toQueueName("plugin:scheduledTask")}.${schedule.pluginId}.${schedule.taskId}`;
       await this.boss.schedule(pgBossName, schedule.cron, {
@@ -939,7 +939,7 @@ var PgBossAdapter = class {
    * `workerOwnsRegistrations` so the admin UI can warn the operator.
    */
   async reconcilePluginSchedules() {
-    const { getRegisteredPluginSchedules } = await import("./host-XBGYIQEE.js");
+    const { getRegisteredPluginSchedules } = await import("./host-C5PGUXX7.js");
     const wantedList = getRegisteredPluginSchedules();
     const wantedByName = /* @__PURE__ */ new Map();
     for (const schedule of wantedList) {
@@ -1267,4 +1267,4 @@ export {
   stopWorker,
   stopProducer
 };
-//# sourceMappingURL=chunk-2GXH7566.js.map
+//# sourceMappingURL=chunk-2O2KMHLO.js.map

package/dist/chunk-2O2KMHLO.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/jobs/handlers.ts","../src/email/templates.ts","../src/jobs/builtin-handlers.ts","../src/jobs/heartbeat.ts","../src/jobs/pause-state.ts","../src/jobs/pg-boss-adapter.ts","../src/jobs/worker.ts"],"sourcesContent":["import { type NpJobType } from \"../config/types.js\";\n\nexport type NpJobHandler = (data: unknown) => Promise<void>;\n\nconst handlers = new Map<NpJobType, NpJobHandler>();\n\nexport function registerJobHandler(type: NpJobType, handler: NpJobHandler): void {\n  handlers.set(type, handler);\n}\n\nexport function getJobHandler(type: NpJobType): NpJobHandler | undefined {\n  return handlers.get(type);\n}\n\nexport function getAllJobHandlers(): ReadonlyMap<NpJobType, NpJobHandler> {\n  return handlers;\n}\n","export interface NpPasswordResetTemplateData {\n  siteName: string;\n  name: string;\n  resetUrl: string;\n  /** When the link expires (ISO string), for display only. */\n  expiresAt?: string;\n}\n\nexport interface NpEmailTemplate {\n  subject: string;\n  text: string;\n  html: string;\n}\n\nfunction escapeHtml(value: string): string {\n  return value\n    .replace(/&/g, \"&amp;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\")\n    .replace(/\"/g, \"&quot;\")\n    .replace(/'/g, \"&#39;\");\n}\n\nfunction wrap(siteName: string, contentHtml: string): string {\n  // Table-based layout is the safest cross-client default. Keeps styles\n  // inline so most webmail clients don't rewrite them away.\n  return `<!doctype html>\n<html>\n<body style=\"margin:0;padding:24px;background:#f5f5f5;font-family:system-ui,-apple-system,Segoe UI,sans-serif;color:#111;\">\n  <table role=\"presentation\" width=\"100%\" cellpadding=\"0\" cellspacing=\"0\" style=\"max-width:560px;margin:0 auto;background:#fff;border-radius:12px;padding:32px;border:1px solid #e5e5e5;\">\n    <tr>\n      <td>\n        <h1 style=\"margin:0 0 16px;font-size:20px;font-weight:600;\">${escapeHtml(siteName)}</h1>\n        ${contentHtml}\n        <p style=\"margin-top:32px;font-size:12px;color:#777;\">If you didn't expect this email you can ignore it.</p>\n      </td>\n    </tr>\n  </table>\n</body>\n</html>`;\n}\n\nexport function buildInviteEmail(data: NpPasswordResetTemplateData): NpEmailTemplate {\n  const subject = `You're invited to ${data.siteName}`;\n  const text =\n    `Hi ${data.name},\\n\\n` +\n    `You've been invited to ${data.siteName}. Set your password to activate your account:\\n\\n` +\n    `${data.resetUrl}\\n\\n` +\n    `This link expires in 7 days.`;\n\n  const html = wrap(\n    data.siteName,\n    `\n    <p style=\"margin:0 0 16px;\">Hi ${escapeHtml(data.name)},</p>\n    <p style=\"margin:0 0 24px;\">You've been invited to ${escapeHtml(data.siteName)}. Set your password to activate your account:</p>\n    <p style=\"margin:0 0 24px;\"><a href=\"${escapeHtml(data.resetUrl)}\" style=\"display:inline-block;background:#111;color:#fff;text-decoration:none;padding:10px 20px;border-radius:8px;font-weight:500;\">Set my password</a></p>\n    <p style=\"margin:0 0 8px;font-size:13px;color:#555;\">Or copy the link:</p>\n    <p style=\"margin:0;font-size:13px;color:#555;word-break:break-all;\">${escapeHtml(data.resetUrl)}</p>\n    <p style=\"margin-top:24px;font-size:13px;color:#555;\">This link expires in 7 days.</p>\n    `,\n  );\n\n  return { subject, text, html };\n}\n\nexport interface NpMemberVerifyTemplateData {\n  siteName: string;\n  displayName: string;\n  verifyUrl: string;\n}\n\n/**\n * Email a brand-new member to confirm their address. Different copy\n * from the staff invite (members self-register, no admin invited them)\n * but reuses the same wrapper styling.\n */\nexport function buildMemberVerifyEmail(data: NpMemberVerifyTemplateData): NpEmailTemplate {\n  const subject = `Confirm your ${data.siteName} account`;\n  const text =\n    `Hi ${data.displayName},\\n\\n` +\n    `Welcome to ${data.siteName}. Confirm your email so we can activate your account:\\n\\n` +\n    `${data.verifyUrl}\\n\\n` +\n    `This link expires in 24 hours. If you didn't sign up, you can ignore this email.`;\n\n  const html = wrap(\n    data.siteName,\n    `\n    <p style=\"margin:0 0 16px;\">Hi ${escapeHtml(data.displayName)},</p>\n    <p style=\"margin:0 0 24px;\">Welcome to ${escapeHtml(data.siteName)}. Confirm your email so we can activate your account:</p>\n    <p style=\"margin:0 0 24px;\"><a href=\"${escapeHtml(data.verifyUrl)}\" style=\"display:inline-block;background:#111;color:#fff;text-decoration:none;padding:10px 20px;border-radius:8px;font-weight:500;\">Confirm my email</a></p>\n    <p style=\"margin:0 0 8px;font-size:13px;color:#555;\">Or copy the link:</p>\n    <p style=\"margin:0;font-size:13px;color:#555;word-break:break-all;\">${escapeHtml(data.verifyUrl)}</p>\n    <p style=\"margin-top:24px;font-size:13px;color:#555;\">This link expires in 24 hours. If you didn't sign up, you can ignore this email.</p>\n    `,\n  );\n\n  return { subject, text, html };\n}\n\nexport function buildResetEmail(data: NpPasswordResetTemplateData): NpEmailTemplate {\n  const subject = `Reset your ${data.siteName} password`;\n  const text =\n    `Hi ${data.name},\\n\\n` +\n    `Someone requested a password reset for your ${data.siteName} account. ` +\n    `If that was you, use this link to set a new one:\\n\\n` +\n    `${data.resetUrl}\\n\\n` +\n    `This link expires in 1 hour. If you didn't request it, you can ignore this email.`;\n\n  const html = wrap(\n    data.siteName,\n    `\n    <p style=\"margin:0 0 16px;\">Hi ${escapeHtml(data.name)},</p>\n    <p style=\"margin:0 0 24px;\">Someone requested a password reset for your ${escapeHtml(data.siteName)} account. If that was you, use this link to set a new one:</p>\n    <p style=\"margin:0 0 24px;\"><a href=\"${escapeHtml(data.resetUrl)}\" style=\"display:inline-block;background:#111;color:#fff;text-decoration:none;padding:10px 20px;border-radius:8px;font-weight:500;\">Reset password</a></p>\n    <p style=\"margin:0 0 8px;font-size:13px;color:#555;\">Or copy the link:</p>\n    <p style=\"margin:0;font-size:13px;color:#555;word-break:break-all;\">${escapeHtml(data.resetUrl)}</p>\n    <p style=\"margin-top:24px;font-size:13px;color:#555;\">This link expires in 1 hour. If you didn't request it you can ignore this email.</p>\n    `,\n  );\n\n  return { subject, text, html };\n}\n","import {\n  type NpAuthUser,\n  type NpCollectionConfig,\n  type NpCollectionHook,\n  type NpHookPrincipal,\n  type NpJobType,\n} from \"../config/types.js\";\nimport { getEmailAdapter } from \"../email/service.js\";\nimport { buildInviteEmail, buildMemberVerifyEmail, buildResetEmail } from \"../email/templates.js\";\nimport { registerJobHandler } from \"./handlers.js\";\n\ninterface ContentJobData {\n  collection: string;\n  documentId: string;\n  operation: \"create\" | \"update\";\n  userId: string;\n}\n\ninterface ContentDeleteJobData {\n  collection: string;\n  documentId: string;\n  userId: string;\n}\n\ninterface ResolvedHookContext {\n  collectionConfig: NpCollectionConfig;\n  data: Record<string, unknown>;\n  /**\n   * Resolved staff session, or `null` when the originating actor\n   * was a member (Phase 9.7o widened the hook surface so member\n   * writes also fire `afterCreate` / `afterUpdate`).\n   */\n  user: NpAuthUser | null;\n  /**\n   * Polymorphic actor reference. Resolvers should derive this\n   * from whatever actor metadata they recorded with the job —\n   * e.g. by checking whether the saved `userId` is null\n   * (member-authored) and looking up the member id separately.\n   */\n  principal: NpHookPrincipal;\n  originalDoc?: Record<string, unknown> | null;\n}\n\ninterface ResolvedDeleteHookContext {\n  collectionConfig: NpCollectionConfig;\n  data: Record<string, unknown>;\n  user: NpAuthUser | null;\n  principal: NpHookPrincipal;\n}\n\ninterface BuiltinJobContext {\n  resolveContentAfterSaveContext?: (\n    data: ContentJobData,\n  ) => Promise<ResolvedHookContext | null> | ResolvedHookContext | null;\n  resolveContentAfterDeleteContext?: (\n    data: ContentDeleteJobData,\n  ) => Promise<ResolvedDeleteHookContext | null> | ResolvedDeleteHookContext | null;\n  processImage?: (data: unknown) => Promise<void> | void;\n  cleanupMedia?: (data: unknown) => Promise<void> | void;\n  runScheduledPluginTask?: (data: unknown) => Promise<void> | void;\n  pruneRevisions?: () => Promise<void> | void;\n  cleanupSessions?: () => Promise<void> | void;\n  sendPasswordReset?: (data: unknown) => Promise<void> | void;\n  sendMemberVerifyEmail?: (data: unknown) => Promise<void> | void;\n  sendMemberPasswordReset?: (data: unknown) => Promise<void> | void;\n}\n\nconst builtinJobContext: BuiltinJobContext = {};\n\nexport function configureBuiltinJobContext(context: Partial<BuiltinJobContext>): void {\n  Object.assign(builtinJobContext, context);\n}\n\nexport function registerBuiltinHandlers(): void {\n  registerJobHandler(\"content:afterSave\", handleContentAfterSave);\n  registerJobHandler(\"content:afterDelete\", handleContentAfterDelete);\n  registerJobHandler(\"content:publishScheduled\", handleContentPublishScheduled);\n  registerJobHandler(\"media:processImage\", handleMediaProcessImage);\n  registerJobHandler(\"media:cleanup\", handleMediaCleanup);\n  registerJobHandler(\"plugin:scheduledTask\", handlePluginScheduledTask);\n  registerJobHandler(\"system:revisionPrune\", handleRevisionPrune);\n  registerJobHandler(\"system:sessionCleanup\", handleSessionCleanup);\n  registerJobHandler(\"system:jobLogPrune\", handleJobLogPrune);\n  registerJobHandler(\"auth:sendPasswordReset\", handleAuthSendPasswordReset);\n  registerJobHandler(\"members:sendVerifyEmail\", handleMemberSendVerifyEmail);\n  registerJobHandler(\"members:sendPasswordReset\", handleMemberSendPasswordReset);\n  registerJobHandler(\"notifications:sendDigest\", handleNotificationsSendDigest);\n}\n\nasync function handleContentPublishScheduled(_: unknown): Promise<void> {\n  const { publishScheduledDocuments } = await import(\"../collections/scheduled.js\");\n  const result = await publishScheduledDocuments();\n  if (result.published > 0) {\n    console.info(\n      `[nexpress] content:publishScheduled flipped ${result.published} document(s)`,\n      result.byCollection,\n    );\n  }\n}\n\nasync function handleContentAfterSave(data: unknown): Promise<void> {\n  const jobData = asContentJobData(data);\n\n  await revalidateCollectionTags(jobData.collection, jobData.documentId);\n\n  const context = await builtinJobContext.resolveContentAfterSaveContext?.(jobData);\n\n  if (!context) {\n    return;\n  }\n\n  const hooks =\n    jobData.operation === \"create\"\n      ? context.collectionConfig.hooks?.afterCreate\n      : context.collectionConfig.hooks?.afterUpdate;\n\n  await runCollectionHooks(hooks, {\n    data: context.data,\n    user: context.user,\n    principal: context.principal,\n    collection: context.collectionConfig.slug,\n    originalDoc: context.originalDoc,\n  });\n}\n\nasync function handleContentAfterDelete(data: unknown): Promise<void> {\n  const jobData = asContentDeleteJobData(data);\n\n  await revalidateCollectionTags(jobData.collection, jobData.documentId);\n\n  const context = await builtinJobContext.resolveContentAfterDeleteContext?.(jobData);\n\n  if (!context) {\n    return;\n  }\n\n  await runCollectionHooks(context.collectionConfig.hooks?.afterDelete, {\n    data: context.data,\n    user: context.user,\n    principal: context.principal,\n    collection: context.collectionConfig.slug,\n  });\n}\n\nasync function handleMediaProcessImage(data: unknown): Promise<void> {\n  await builtinJobContext.processImage?.(data);\n}\n\nasync function handleMediaCleanup(data: unknown): Promise<void> {\n  await builtinJobContext.cleanupMedia?.(data);\n}\n\nasync function handlePluginScheduledTask(data: unknown): Promise<void> {\n  // Phase 19 — first prefer the inline handler registered via\n  // `definePlugin({ scheduled })`. Falls back to the legacy\n  // `builtinJobContext.runScheduledPluginTask` resolver for\n  // sites that wired their own dispatcher pre-Phase-19.\n  if (isRecord(data) && typeof data.pluginId === \"string\" && typeof data.taskId === \"string\") {\n    try {\n      const { runPluginScheduledTask } = await import(\"../plugins/host.js\");\n      await runPluginScheduledTask(data.pluginId, data.taskId);\n      return;\n    } catch (err) {\n      // No registered schedule with this id — fall through to\n      // the legacy resolver. If that's also absent we re-throw\n      // so the worker's retry policy surfaces the misconfig.\n      const message = err instanceof Error ? err.message : String(err);\n      if (!/no scheduled task/.test(message) && !/is not registered/.test(message)) {\n        throw err;\n      }\n    }\n  }\n  await builtinJobContext.runScheduledPluginTask?.(data);\n}\n\nasync function handleRevisionPrune(_: unknown): Promise<void> {\n  await builtinJobContext.pruneRevisions?.();\n}\n\nasync function handleSessionCleanup(_: unknown): Promise<void> {\n  await builtinJobContext.cleanupSessions?.();\n}\n\n/**\n * Phase 20.3 — keep `np_job_logs` from growing unbounded.\n * Default retention is 14 days; the cron registration in\n * `pg-boss-adapter.scheduleRecurring()` runs this at 03:30 UTC\n * daily (offset from `system:revisionPrune` at 03:00 so the two\n * cleanup jobs don't pile DB load on the same minute).\n */\nasync function handleJobLogPrune(_: unknown): Promise<void> {\n  const { pruneJobLogsOlderThan, DEFAULT_JOB_LOG_RETENTION_MS } = await import(\"./job-log.js\");\n  const cutoff = new Date(Date.now() - DEFAULT_JOB_LOG_RETENTION_MS);\n  const deleted = await pruneJobLogsOlderThan(cutoff);\n  if (deleted > 0) {\n    console.info(`[nexpress] system:jobLogPrune deleted ${deleted} log row(s)`);\n  }\n}\n\ninterface PasswordResetJobData {\n  email: string;\n  name: string;\n  token: string;\n  purpose: \"invite\" | \"reset\";\n  resetUrl: string;\n  /** Optional — producer may pass a site-display name for the template. */\n  siteName?: string;\n}\n\n/**\n * Default handler for password-reset / invite emails. Routes the message\n * through the configured email adapter (noop by default — see\n * `NoopEmailAdapter`). Apps override either by installing a real adapter\n * (`setEmailAdapter(new SmtpEmailAdapter(...))`) or by providing a fully\n * custom handler via `configureBuiltinJobContext({ sendPasswordReset })`.\n */\nasync function handleAuthSendPasswordReset(data: unknown): Promise<void> {\n  if (builtinJobContext.sendPasswordReset) {\n    await builtinJobContext.sendPasswordReset(data);\n    return;\n  }\n\n  const payload = asPasswordResetJobData(data);\n  const templateData = {\n    siteName: payload.siteName ?? \"your site\",\n    name: payload.name,\n    resetUrl: payload.resetUrl,\n  };\n  const template =\n    payload.purpose === \"invite\" ? buildInviteEmail(templateData) : buildResetEmail(templateData);\n\n  await getEmailAdapter().send({\n    to: payload.email,\n    subject: template.subject,\n    text: template.text,\n    html: template.html,\n  });\n}\n\nfunction asPasswordResetJobData(data: unknown): PasswordResetJobData {\n  if (!isRecord(data)) {\n    throw new Error(\"Invalid auth:sendPasswordReset job payload.\");\n  }\n\n  return {\n    email: asString(data.email, \"email\"),\n    name: asString(data.name, \"name\"),\n    token: asString(data.token, \"token\"),\n    siteName:\n      typeof data.siteName === \"string\" && data.siteName.length > 0 ? data.siteName : undefined,\n    purpose: asResetPurpose(data.purpose),\n    resetUrl: asString(data.resetUrl, \"resetUrl\"),\n  };\n}\n\nfunction asResetPurpose(value: unknown): \"invite\" | \"reset\" {\n  if (value === \"invite\" || value === \"reset\") {\n    return value;\n  }\n\n  throw new Error(\"Invalid password reset purpose.\");\n}\n\nasync function runCollectionHooks(\n  hooks: NpCollectionHook[] | undefined,\n  args: Parameters<NpCollectionHook>[0],\n): Promise<void> {\n  if (!hooks || hooks.length === 0) {\n    return;\n  }\n\n  for (const hook of hooks) {\n    await hook(args);\n  }\n}\n\nasync function revalidateCollectionTags(collection: string, documentId: string): Promise<void> {\n  try {\n    const revalidateTag = await loadRevalidateTag();\n\n    if (!revalidateTag) {\n      return;\n    }\n\n    revalidateTag(`nx:${collection}`);\n    revalidateTag(`nx:${collection}:${documentId}`);\n  } catch {\n    return;\n  }\n}\n\nasync function loadRevalidateTag(): Promise<((tag: string) => void) | null> {\n  // Indirect specifier so TypeScript doesn't try to resolve\n  // `next/cache` at compile time — `@nexpress/core` doesn't\n  // depend on Next.js, the cache helpers are only available\n  // when this code runs inside a Next runtime.\n  const moduleId: string = \"next/cache\";\n  let importedModule: unknown;\n  try {\n    importedModule = await import(moduleId);\n  } catch {\n    return null;\n  }\n\n  if (!isRecord(importedModule)) {\n    return null;\n  }\n\n  const revalidateTag = importedModule.revalidateTag as\n    | ((tag: string) => void)\n    | ((tag: string, profile: string) => void);\n\n  if (typeof revalidateTag !== \"function\") {\n    return null;\n  }\n\n  // Next 16 widened the signature to `(tag, profile)`. Detect\n  // the runtime arity so this helper works against both 15.x\n  // and 16.x without a hard pin: pre-16 ignores extra args.\n  return (tag: string) => {\n    if (revalidateTag.length >= 2) {\n      (revalidateTag)(tag, \"default\");\n    } else {\n      (revalidateTag as (tag: string) => void)(tag);\n    }\n  };\n}\n\nfunction asContentJobData(data: unknown): ContentJobData {\n  if (!isRecord(data)) {\n    throw new Error(\"Invalid content:afterSave job payload.\");\n  }\n\n  return {\n    collection: asString(data.collection, \"collection\"),\n    documentId: asString(data.documentId, \"documentId\"),\n    operation: asContentOperation(data.operation),\n    userId: asString(data.userId, \"userId\"),\n  };\n}\n\nfunction asContentDeleteJobData(data: unknown): ContentDeleteJobData {\n  if (!isRecord(data)) {\n    throw new Error(\"Invalid content:afterDelete job payload.\");\n  }\n\n  return {\n    collection: asString(data.collection, \"collection\"),\n    documentId: asString(data.documentId, \"documentId\"),\n    userId: asString(data.userId, \"userId\"),\n  };\n}\n\nfunction asContentOperation(value: unknown): ContentJobData[\"operation\"] {\n  if (value === \"create\" || value === \"update\") {\n    return value;\n  }\n\n  throw new Error(\"Invalid content operation.\");\n}\n\nfunction asString(value: unknown, fieldName: string): string {\n  if (typeof value !== \"string\" || value.length === 0) {\n    throw new Error(`Invalid ${fieldName} field.`);\n  }\n\n  return value;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\ninterface MemberVerifyJobData {\n  email: string;\n  displayName: string;\n  verifyUrl: string;\n  siteName?: string;\n}\n\ninterface MemberResetJobData {\n  email: string;\n  displayName: string;\n  resetUrl: string;\n  siteName?: string;\n}\n\nasync function handleMemberSendVerifyEmail(data: unknown): Promise<void> {\n  if (builtinJobContext.sendMemberVerifyEmail) {\n    await builtinJobContext.sendMemberVerifyEmail(data);\n    return;\n  }\n  if (!isRecord(data)) throw new Error(\"Invalid members:sendVerifyEmail job payload.\");\n  const payload: MemberVerifyJobData = {\n    email: asString(data.email, \"email\"),\n    displayName: asString(data.displayName, \"displayName\"),\n    verifyUrl: asString(data.verifyUrl, \"verifyUrl\"),\n    siteName:\n      typeof data.siteName === \"string\" && data.siteName.length > 0 ? data.siteName : undefined,\n  };\n  const template = buildMemberVerifyEmail({\n    siteName: payload.siteName ?? \"your site\",\n    displayName: payload.displayName,\n    verifyUrl: payload.verifyUrl,\n  });\n  await getEmailAdapter().send({\n    to: payload.email,\n    subject: template.subject,\n    text: template.text,\n    html: template.html,\n  });\n}\n\nasync function handleMemberSendPasswordReset(data: unknown): Promise<void> {\n  if (builtinJobContext.sendMemberPasswordReset) {\n    await builtinJobContext.sendMemberPasswordReset(data);\n    return;\n  }\n  if (!isRecord(data)) throw new Error(\"Invalid members:sendPasswordReset job payload.\");\n  const payload: MemberResetJobData = {\n    email: asString(data.email, \"email\"),\n    displayName: asString(data.displayName, \"displayName\"),\n    resetUrl: asString(data.resetUrl, \"resetUrl\"),\n    siteName:\n      typeof data.siteName === \"string\" && data.siteName.length > 0 ? data.siteName : undefined,\n  };\n  // Reuse the staff `buildResetEmail` template — copy is identical from\n  // the user's POV (\"reset your <site> password\"). When templating\n  // diverges we'll fork the function, not the dispatcher.\n  const template = buildResetEmail({\n    siteName: payload.siteName ?? \"your site\",\n    name: payload.displayName,\n    resetUrl: payload.resetUrl,\n  });\n  await getEmailAdapter().send({\n    to: payload.email,\n    subject: template.subject,\n    text: template.text,\n    html: template.html,\n  });\n}\n\nasync function handleNotificationsSendDigest(data: unknown): Promise<void> {\n  const cadence =\n    isRecord(data) && (data.cadence === \"daily\" || data.cadence === \"weekly\")\n      ? data.cadence\n      : \"daily\";\n  const siteName = isRecord(data) && typeof data.siteName === \"string\" ? data.siteName : undefined;\n  const { runDigestSweep } = await import(\"../community/digest.js\");\n  const result = await runDigestSweep({ cadence, siteName });\n\n  console.info(\n    `[nexpress] notifications:sendDigest cadence=${cadence}` +\n      ` considered=${result.considered} sent=${result.sent}` +\n      ` skipped=${result.skipped} failed=${result.failed}`,\n  );\n}\n\nexport type { BuiltinJobContext, ContentDeleteJobData, ContentJobData, NpJobType };\n","import { hostname } from \"node:os\";\nimport { randomUUID } from \"node:crypto\";\n\nimport { desc, eq, gt, lt } from \"drizzle-orm\";\n\nimport { getDb } from \"../db/runtime.js\";\nimport { readEnvPositiveInt } from \"../config/env.js\";\nimport { npWorkerHeartbeats } from \"../db/schema/system.js\";\nimport { getLogger } from \"../observability/logger.js\";\n\n/**\n * Phase 19 — worker liveness signal.\n *\n * The worker process upserts its row every\n * `WORKER_HEARTBEAT_INTERVAL_MS` so admins can tell whether the\n * pg-boss queue actually has a draining process attached.\n * Without this the only signal was \"Pending stays high while\n * Completed doesn't grow,\" which a stuck DB or a stopped\n * worker look identical from outside.\n *\n * Stale rows (no heartbeat in `WORKER_STALE_THRESHOLD_MS`) are\n * reported `unhealthy`; the row stays in place until an\n * operator GCs it or a worker with the same id rejoins. The\n * id is `hostname:pid` so a restarted process on the same host\n * naturally reclaims its row instead of stacking duplicates.\n */\n\n/**\n * How often a running worker pings its row. Tightening lets\n * `lastSeenAt` track wall-clock more closely; loosening cuts\n * write traffic on idle workers. `NP_WORKER_HEARTBEAT_SECONDS`.\n */\nexport const WORKER_HEARTBEAT_INTERVAL_MS =\n  readEnvPositiveInt(\"NP_WORKER_HEARTBEAT_SECONDS\", 30) * 1_000;\n\n/**\n * After how long with no heartbeat a worker is treated as\n * unhealthy in the admin UI / health check. Default 90s is\n * `3 × HEARTBEAT_INTERVAL` so a single missed beat doesn't trip\n * the alarm. `NP_WORKER_STALE_THRESHOLD_SECONDS`.\n */\nexport const WORKER_STALE_THRESHOLD_MS =\n  readEnvPositiveInt(\"NP_WORKER_STALE_THRESHOLD_SECONDS\", 90) * 1_000;\n\nexport interface NpWorkerHeartbeat {\n  id: string;\n  status: string;\n  startedAt: Date;\n  lastSeenAt: Date;\n  meta: Record<string, unknown>;\n}\n\nexport interface NpWorkerHealthSummary {\n  workers: Array<NpWorkerHeartbeat & { alive: boolean; lastSeenAgoMs: number }>;\n  aliveCount: number;\n  totalCount: number;\n  /** ISO timestamp of the most recent heartbeat across all workers. */\n  newestHeartbeat: string | null;\n}\n\nfunction generateWorkerId(): string {\n  // Hostname is shared across pods on the same VM but differs\n  // across containers. Adding the PID + a short random suffix\n  // keeps the id stable across short crashes (same PID under\n  // same hostname overwrites the row) while still differing\n  // between fresh process starts. Falls back to a UUID when\n  // hostname / pid aren't readable (rare; mostly for\n  // non-Node runtimes).\n  try {\n    const host = hostname();\n    return `${host}:${process.pid}`;\n  } catch {\n    return randomUUID();\n  }\n}\n\n/**\n * Stamp a single heartbeat row. Used by `startHeartbeatLoop`\n * and exposed for tests so they can inject fake worker rows\n * without spinning up a real interval.\n */\nexport async function recordHeartbeat(\n  workerId: string,\n  meta: Record<string, unknown> = {},\n): Promise<void> {\n  const db = getDb();\n  const now = new Date();\n  await db\n    .insert(npWorkerHeartbeats)\n    .values({\n      id: workerId,\n      status: \"running\",\n      startedAt: now,\n      lastSeenAt: now,\n      meta,\n    })\n    .onConflictDoUpdate({\n      target: npWorkerHeartbeats.id,\n      set: { lastSeenAt: now, status: \"running\", meta },\n    });\n}\n\n/**\n * Mark the row as `stopped` so the admin sees a graceful\n * shutdown rather than the row drifting into `unhealthy`.\n */\nexport async function markWorkerStopped(workerId: string): Promise<void> {\n  const db = getDb();\n  await db\n    .update(npWorkerHeartbeats)\n    .set({ status: \"stopped\", lastSeenAt: new Date() })\n    .where(eq(npWorkerHeartbeats.id, workerId));\n}\n\n/**\n * Read every worker row, decorate with `alive` + `lastSeenAgoMs`\n * relative to `now`. Sorted with the most recent heartbeat\n * first so the admin's first row is the freshest worker.\n */\nexport async function listWorkerHealth(now: Date = new Date()): Promise<NpWorkerHealthSummary> {\n  const db = getDb();\n  const rows = (await db\n    .select()\n    .from(npWorkerHeartbeats)\n    .orderBy(desc(npWorkerHeartbeats.lastSeenAt))) as NpWorkerHeartbeat[];\n\n  let aliveCount = 0;\n  const decorated = rows.map((row) => {\n    const lastSeenAgoMs = Math.max(0, now.getTime() - row.lastSeenAt.getTime());\n    const alive = row.status === \"running\" && lastSeenAgoMs < WORKER_STALE_THRESHOLD_MS;\n    if (alive) aliveCount += 1;\n    return { ...row, alive, lastSeenAgoMs };\n  });\n\n  return {\n    workers: decorated,\n    aliveCount,\n    totalCount: rows.length,\n    newestHeartbeat: rows[0]?.lastSeenAt.toISOString() ?? null,\n  };\n}\n\ninterface HeartbeatLoopHandle {\n  workerId: string;\n  stop(): Promise<void>;\n}\n\n/**\n * Spin up a recurring heartbeat. Returns a handle the caller\n * keeps so they can stop it on shutdown. Errors inside the\n * loop are logged and continued — a transient DB blip\n * shouldn't crash the worker, the next tick recovers.\n */\nexport function startHeartbeatLoop(\n  meta: Record<string, unknown> = {},\n  intervalMs: number = WORKER_HEARTBEAT_INTERVAL_MS,\n): HeartbeatLoopHandle {\n  const workerId = generateWorkerId();\n  const log = getLogger();\n\n  const beat = async (): Promise<void> => {\n    try {\n      await recordHeartbeat(workerId, meta);\n    } catch (err) {\n      log.warn(\"worker heartbeat failed\", {\n        workerId,\n        error: err instanceof Error ? err.message : String(err),\n      });\n    }\n  };\n\n  // Beat immediately so the row exists from t=0; subsequent\n  // beats happen on the interval. `setInterval` returns a\n  // Timeout we keep so we can clear it on stop.\n  void beat();\n  const timer = setInterval(() => {\n    void beat();\n  }, intervalMs);\n  // Don't keep the event loop alive on the heartbeat alone —\n  // the worker has its own keep-alive (pg-boss); the heartbeat\n  // is bookkeeping.\n  if (typeof timer.unref === \"function\") timer.unref();\n\n  return {\n    workerId,\n    async stop() {\n      clearInterval(timer);\n      try {\n        await markWorkerStopped(workerId);\n      } catch (err) {\n        log.warn(\"worker heartbeat stop failed to mark row\", {\n          workerId,\n          error: err instanceof Error ? err.message : String(err),\n        });\n      }\n    },\n  };\n}\n\n/**\n * Manual GC hook — purge worker rows whose `last_seen_at` is\n * older than `olderThan`. Operators can call this from a\n * cron / admin action when the table accumulates ghosts.\n */\nexport async function purgeStaleWorkers(\n  olderThan: Date = new Date(Date.now() - WORKER_STALE_THRESHOLD_MS * 10),\n): Promise<number> {\n  const db = getDb();\n  const deleted = (await db\n    .delete(npWorkerHeartbeats)\n    .where(lt(npWorkerHeartbeats.lastSeenAt, olderThan))\n    .returning({ id: npWorkerHeartbeats.id })) as Array<{ id: string }>;\n  return deleted.length;\n}\n\n/** Return only the rows currently considered alive. Cheap probe for boot health. */\nexport async function countAliveWorkers(now: Date = new Date()): Promise<number> {\n  const db = getDb();\n  const cutoff = new Date(now.getTime() - WORKER_STALE_THRESHOLD_MS);\n  const rows = (await db\n    .select({ id: npWorkerHeartbeats.id })\n    .from(npWorkerHeartbeats)\n    .where(gt(npWorkerHeartbeats.lastSeenAt, cutoff))) as Array<{ id: string }>;\n  return rows.length;\n}\n","import { and, eq } from \"drizzle-orm\";\n\nimport { getDb } from \"../db/runtime.js\";\nimport { npSettings } from \"../db/schema/system.js\";\nimport { getLogger } from \"../observability/logger.js\";\nimport { reportError } from \"../observability/error-reporter.js\";\nimport { type NpJobQueue } from \"./queue.js\";\n\n/**\n * Phase 20.2 — global pause / resume for job processing.\n *\n * Stored in `np_settings` under a deliberately reserved\n * `siteId=\"_system\"` key. The pause flag is process-wide\n * (a maintenance window pauses everything, not per-tenant)\n * so it sits outside the per-site settings space. Reads /\n * writes go through this module rather than `getSetting`\n * because the latter scopes by request site.\n */\nconst SYSTEM_SITE_ID = \"_system\";\nconst JOBS_PAUSED_KEY = \"jobs.paused\";\n\nexport interface NpJobsPauseState {\n  paused: boolean;\n  /** ISO timestamp captured the last time the flag flipped. */\n  changedAt: string;\n  /** User id (staff) who flipped the flag, when known. */\n  changedByUserId: string | null;\n  /** Optional note an operator can leave for the next person. */\n  reason: string | null;\n}\n\nconst DEFAULT_STATE: NpJobsPauseState = {\n  paused: false,\n  changedAt: new Date(0).toISOString(),\n  changedByUserId: null,\n  reason: null,\n};\n\nexport async function getJobsPauseState(): Promise<NpJobsPauseState> {\n  const db = getDb();\n  const rows = await db\n    .select()\n    .from(npSettings)\n    .where(and(eq(npSettings.siteId, SYSTEM_SITE_ID), eq(npSettings.key, JOBS_PAUSED_KEY)))\n    .limit(1);\n\n  const row = rows[0];\n  if (!row) return DEFAULT_STATE;\n\n  const value = row.value as Partial<NpJobsPauseState> | null;\n  if (!value || typeof value.paused !== \"boolean\") return DEFAULT_STATE;\n\n  return {\n    paused: value.paused,\n    changedAt: typeof value.changedAt === \"string\" ? value.changedAt : DEFAULT_STATE.changedAt,\n    changedByUserId: typeof value.changedByUserId === \"string\" ? value.changedByUserId : null,\n    reason: typeof value.reason === \"string\" ? value.reason : null,\n  };\n}\n\nexport interface SetJobsPauseStateInput {\n  paused: boolean;\n  changedByUserId?: string | null;\n  reason?: string | null;\n}\n\nexport async function setJobsPauseState(input: SetJobsPauseStateInput): Promise<NpJobsPauseState> {\n  const db = getDb();\n  const next: NpJobsPauseState = {\n    paused: input.paused,\n    changedAt: new Date().toISOString(),\n    changedByUserId: input.changedByUserId ?? null,\n    reason: input.reason ?? null,\n  };\n\n  await db\n    .insert(npSettings)\n    .values({\n      siteId: SYSTEM_SITE_ID,\n      key: JOBS_PAUSED_KEY,\n      value: next,\n    })\n    .onConflictDoUpdate({\n      target: [npSettings.siteId, npSettings.key],\n      set: {\n        value: next,\n        updatedAt: new Date(),\n      },\n    });\n\n  return next;\n}\n\nexport const PAUSE_SYNC_INTERVAL_MS = 30_000;\n\n/**\n * Number of consecutive failures before the loop escalates from a\n * `warn` log to the error reporter. Three ticks at 30s = ~90s of\n * sync drift before an operator gets a tracked alert; tunable here\n * if real-world fault profiles call for tighter or looser\n * thresholds.\n */\nexport const PAUSE_SYNC_ESCALATE_AFTER = 3;\n\nexport interface PauseSyncLoopHandle {\n  stop(): void;\n}\n\n/**\n * Phase 20.2 — multi-pod pause sync. Each worker pod polls the\n * persisted flag on this cadence (default 30 s, matching the\n * heartbeat) and applies any state change locally. So an\n * operator pausing on pod A also stops pod B within roughly\n * one tick, instead of waiting for pod B to restart.\n *\n * Returns a handle whose `stop()` clears the interval. Read\n * errors are logged at warn — we don't want a transient DB\n * blip to wedge the worker. After\n * `PAUSE_SYNC_ESCALATE_AFTER` consecutive failures (#312),\n * the next failure is also reported via `reportError` so an\n * operator monitoring Sentry / their tracker sees the pod has\n * been silently out of sync. The counter resets on the next\n * successful tick.\n */\nexport function startPauseSyncLoop(\n  queue: NpJobQueue,\n  intervalMs: number = PAUSE_SYNC_INTERVAL_MS,\n): PauseSyncLoopHandle {\n  const log = getLogger();\n  let consecutiveFailures = 0;\n  let escalated = false;\n\n  const tick = async (): Promise<void> => {\n    try {\n      const persisted = await getJobsPauseState();\n      const localPaused =\n        typeof queue.isProcessingPaused === \"function\" ? queue.isProcessingPaused() : false;\n\n      if (persisted.paused && !localPaused && typeof queue.pauseProcessing === \"function\") {\n        await queue.pauseProcessing();\n        log.info(\"Pause sync: applied paused=true from settings\", {\n          changedAt: persisted.changedAt,\n        });\n      } else if (!persisted.paused && localPaused && typeof queue.resumeProcessing === \"function\") {\n        await queue.resumeProcessing();\n        log.info(\"Pause sync: applied paused=false from settings\", {\n          changedAt: persisted.changedAt,\n        });\n      }\n\n      // Successful tick — clear the run of failures so a single\n      // recovery resets the escalation gate.\n      if (consecutiveFailures > 0) {\n        log.info(\"Pause sync: recovered after consecutive failures\", {\n          previousFailures: consecutiveFailures,\n        });\n        consecutiveFailures = 0;\n        escalated = false;\n      }\n    } catch (err) {\n      consecutiveFailures += 1;\n      const errorMessage = err instanceof Error ? err.message : String(err);\n      log.warn(\"Pause sync tick failed\", {\n        error: errorMessage,\n        consecutiveFailures,\n      });\n\n      // After `PAUSE_SYNC_ESCALATE_AFTER` consecutive failures,\n      // surface the error to the configured reporter so silent\n      // out-of-sync state is visible to operators. Escalate\n      // exactly once per failure run; the success branch above\n      // resets `escalated` so a subsequent run can re-alert.\n      if (consecutiveFailures >= PAUSE_SYNC_ESCALATE_AFTER && !escalated) {\n        escalated = true;\n        const reportable = err instanceof Error ? err : new Error(errorMessage);\n        await reportError(reportable, {\n          tags: { source: \"worker\", subsystem: \"pause-sync\" },\n          extra: { consecutiveFailures },\n        });\n      }\n    }\n  };\n\n  // Tick once immediately so a worker booted just before a\n  // pause API call doesn't process up to one full interval's\n  // worth of jobs before it sees the flag. Mirrors the pattern\n  // in `startHeartbeatLoop`.\n  void tick();\n  const timer = setInterval(() => {\n    void tick();\n  }, intervalMs);\n  if (typeof timer.unref === \"function\") timer.unref();\n\n  return {\n    stop() {\n      clearInterval(timer);\n    },\n  };\n}\n","import { PgBoss, type ConstructorOptions, type Job } from \"pg-boss\";\nimport { type NpJobType } from \"../config/types.js\";\nimport { getLogger } from \"../observability/logger.js\";\nimport { reportError } from \"../observability/error-reporter.js\";\nimport { getAllJobHandlers } from \"./handlers.js\";\nimport { recordJobLog, runInJobContext } from \"./job-log.js\";\nimport {\n  type NpJobCountOptions,\n  type NpJobListOptions,\n  type NpJobListResult,\n  type NpJobQueue,\n  type NpJobState,\n  type NpJobStateCounts,\n  type NpJobSummary,\n  type NpPluginScheduleStats,\n  type NpReconcileSchedulesResult,\n  type NpScheduleSummary,\n} from \"./queue.js\";\n\n/**\n * pg-boss 12+ rejects queue names containing `:`, but NexPress job types use\n * `:` as a namespace separator (e.g. \"content:afterSave\"). Translate here so\n * the external API keeps its readable form while pg-boss sees an allowed\n * name.\n */\nfunction toQueueName(type: NpJobType): string {\n  return type.replace(/:/g, \".\");\n}\n\nexport class PgBossAdapter implements NpJobQueue {\n  private readonly boss: PgBoss;\n  /**\n   * Phase 20.2 — every queue we've called `boss.work()` on, plus\n   * the function that re-registers it. We need both because\n   * `pauseProcessing()` calls `boss.offWork(name)` (drops the\n   * worker) and `resumeProcessing()` has to re-call the original\n   * `boss.work(...)` to bring it back. Order is preserved so\n   * resume registers in the same order as start did.\n   */\n  private readonly workRegistrations: Array<{\n    queueName: string;\n    register: () => Promise<void>;\n  }> = [];\n  private paused = false;\n  /**\n   * Flips `true` after `start()` runs (full worker mode). `startProducer()`\n   * doesn't set it. Used by `reconcilePluginSchedules()` to tell admins\n   * whether this process owns the `boss.work()` loops for plugin schedules\n   * — the same boss instance can act as producer-only in the web server\n   * and full worker in the worker process.\n   */\n  private workerStarted = false;\n\n  constructor(connectionString: string, options?: ConstructorOptions) {\n    this.boss = new PgBoss({ connectionString, ...options });\n  }\n\n  async enqueue(type: NpJobType, data: unknown): Promise<string> {\n    const jobId = await this.boss.send(toQueueName(type), asJobPayload(data));\n\n    if (!jobId) {\n      throw new Error(`Failed to enqueue job: ${type}`);\n    }\n\n    return jobId;\n  }\n\n  /**\n   * Opens the pg-boss connection and runs its migrations. Safe to call from a\n   * non-worker process (e.g. the Next.js server) so it can enqueue jobs.\n   */\n  async startProducer(): Promise<void> {\n    await this.boss.start();\n  }\n\n  /**\n   * Full start: opens the connection (idempotent with startProducer) and\n   * registers `boss.work()` loops for every handler in the registry. Call\n   * this from the dedicated worker process.\n   */\n  async start(): Promise<void> {\n    await this.boss.start();\n\n    for (const [type, handler] of getAllJobHandlers()) {\n      const queueName = toQueueName(type);\n      await this.boss.createQueue(queueName);\n      const register = async () => {\n        await this.boss.work(queueName, async (jobs: Job<unknown>[]) => {\n          for (const job of jobs) {\n            // Phase 20.3 — every handler invocation runs inside an\n            // AsyncLocalStorage context keyed on the pg-boss job id\n            // so `recordJobLog()` calls (from the framework or\n            // plugin code) get stamped automatically.\n            await runInJobContext(job.id, async () => {\n              try {\n                await handler(job.data);\n              } catch (error) {\n                // Surface job failures to logs + the configured error reporter.\n                // Re-throw so pg-boss applies its retry/dead-letter policy.\n                const err = error instanceof Error ? error : new Error(String(error));\n                getLogger().error(\"Job handler threw\", {\n                  type,\n                  jobId: job.id,\n                  error: err.message,\n                  stack: err.stack,\n                });\n                // Phase 20.3 — capture the failure on the job's\n                // own log stream too. Operator opens the row in\n                // the admin → sees the error message inline.\n                await recordJobLog(\"error\", `Job handler threw: ${err.message}`, {\n                  type,\n                  stack: err.stack,\n                });\n                void reportError(err, {\n                  tags: { source: \"worker\", jobType: type },\n                  extra: { jobId: job.id },\n                });\n                throw err;\n              }\n            });\n          }\n        });\n      };\n      this.workRegistrations.push({ queueName, register });\n      await register();\n    }\n\n    // Phase 19 — register one queue + worker per plugin schedule.\n    // pg-boss enforces a 1:1 mapping between schedule name and\n    // queue, so each `definePlugin({ scheduled })` entry needs\n    // its own queue. The dispatcher inside the handler delegates\n    // to the registered handler via `runPluginScheduledTask`.\n    const { getRegisteredPluginSchedules, runPluginScheduledTask } =\n      await import(\"../plugins/host.js\");\n    for (const schedule of getRegisteredPluginSchedules()) {\n      const queueName = `${toQueueName(\"plugin:scheduledTask\")}.${schedule.pluginId}.${schedule.taskId}`;\n      await this.boss.createQueue(queueName);\n      const register = async () => {\n        await this.boss.work(queueName, async (jobs: Job<unknown>[]) => {\n          for (const job of jobs) {\n            await runInJobContext(job.id, async () => {\n              try {\n                await runPluginScheduledTask(schedule.pluginId, schedule.taskId);\n              } catch (error) {\n                const err = error instanceof Error ? error : new Error(String(error));\n                getLogger().error(\"Plugin scheduled task threw\", {\n                  pluginId: schedule.pluginId,\n                  taskId: schedule.taskId,\n                  jobId: job.id,\n                  error: err.message,\n                  stack: err.stack,\n                });\n                await recordJobLog(\"error\", `Plugin scheduled task threw: ${err.message}`, {\n                  pluginId: schedule.pluginId,\n                  taskId: schedule.taskId,\n                  stack: err.stack,\n                });\n                void reportError(err, {\n                  tags: {\n                    source: \"worker\",\n                    pluginId: schedule.pluginId,\n                    taskId: schedule.taskId,\n                  },\n                  extra: { jobId: job.id },\n                });\n                throw err;\n              }\n            });\n          }\n        });\n      };\n      this.workRegistrations.push({ queueName, register });\n      await register();\n    }\n    this.workerStarted = true;\n  }\n\n  /**\n   * Phase 20.2 — drop every registered worker so the boss stops\n   * claiming new jobs. The pg-boss connection stays open; the\n   * producer can keep enqueueing while paused. In-flight jobs\n   * picked up before pause finish normally because pg-boss only\n   * cancels the polling loop, not the fetch already in flight.\n   */\n  async pauseProcessing(): Promise<void> {\n    if (this.paused) return;\n    for (const { queueName } of this.workRegistrations) {\n      await this.boss.offWork(queueName);\n    }\n    this.paused = true;\n    getLogger().info(\"Job processing paused\", {\n      queues: this.workRegistrations.length,\n    });\n  }\n\n  /** Phase 20.2 — re-run every captured `boss.work()` registration. Idempotent. */\n  async resumeProcessing(): Promise<void> {\n    if (!this.paused) return;\n    for (const { register } of this.workRegistrations) {\n      await register();\n    }\n    this.paused = false;\n    getLogger().info(\"Job processing resumed\", {\n      queues: this.workRegistrations.length,\n    });\n  }\n\n  isProcessingPaused(): boolean {\n    return this.paused;\n  }\n\n  /**\n   * Phase 22.4 — readiness probe round-trip. `boss.isInstalled()`\n   * issues a single SELECT against `pgboss.version`, so a true\n   * answer proves both that the DB connection is alive AND that\n   * pg-boss's schema migrations have applied. Any throw — pool\n   * dead, schema missing, permissions revoked — is caught and\n   * reported as `false`; the readiness probe never sees an\n   * exception bubble out of the queue check.\n   */\n  async isHealthy(): Promise<boolean> {\n    try {\n      return await this.boss.isInstalled();\n    } catch {\n      return false;\n    }\n  }\n\n  async stop(): Promise<void> {\n    await this.boss.stop({ graceful: true, timeout: 30000 });\n  }\n\n  async scheduleRecurring(): Promise<void> {\n    await this.boss.schedule(toQueueName(\"system:revisionPrune\"), \"0 3 * * *\", {});\n    await this.boss.schedule(toQueueName(\"system:sessionCleanup\"), \"0 * * * *\", {});\n    // Phase 20.3 — daily np_job_logs retention sweep at 03:30 UTC.\n    // Offset 30 min from revisionPrune so the two cleanup jobs\n    // don't pile DB load on the same minute.\n    await this.boss.schedule(toQueueName(\"system:jobLogPrune\"), \"30 3 * * *\", {});\n    // Phase 16.4 — daily digest at 08:00 UTC, weekly digest Mondays\n    // 08:00 UTC. Members opt in via their notification prefs;\n    // the handler short-circuits when nobody matches.\n    //\n    // Issue #217 — pg-boss `pgboss.schedule` rows are uniquely\n    // keyed by `(name, key)`. Without an explicit `key`, both\n    // calls write to `(notifications:sendDigest, '')` and the\n    // weekly upsert silently overwrites the daily one. Pass\n    // `{ key }` so the two cadences live in distinct rows;\n    // both schedules still fire jobs into the same queue name\n    // (handler discriminates by `data.cadence`). The empty-key\n    // legacy row from earlier deploys is removed below so a\n    // re-deploy converges on the correct shape.\n    const digestQueue = toQueueName(\"notifications:sendDigest\");\n    await this.boss.unschedule(digestQueue).catch(() => {\n      // First-deploy systems have no row to remove. Older\n      // deploys may have one; clear it so the new\n      // `(name, key='daily')` and `(name, key='weekly')` rows\n      // don't coexist alongside an orphan empty-key row.\n    });\n    await this.boss.schedule(digestQueue, \"0 8 * * *\", { cadence: \"daily\" }, { key: \"daily\" });\n    await this.boss.schedule(digestQueue, \"0 8 * * 1\", { cadence: \"weekly\" }, { key: \"weekly\" });\n    // Phase 19 — first-class plugin cron schedules. Each entry\n    // declared via `definePlugin({ scheduled: [...] })` becomes\n    // one row in `pgboss.schedule`. We share the `plugin:scheduledTask`\n    // queue and dispatch by `(pluginId, taskId)` in the handler;\n    // the schedule's pg-boss `name` is stable per task so a re-\n    // boot doesn't accumulate duplicates.\n    const { getRegisteredPluginSchedules } = await import(\"../plugins/host.js\");\n    for (const schedule of getRegisteredPluginSchedules()) {\n      const pgBossName = `${toQueueName(\"plugin:scheduledTask\")}.${schedule.pluginId}.${schedule.taskId}`;\n      await this.boss.schedule(pgBossName, schedule.cron, {\n        pluginId: schedule.pluginId,\n        taskId: schedule.taskId,\n      });\n    }\n  }\n\n  getBoss(): PgBoss {\n    return this.boss;\n  }\n\n  /**\n   * Phase 13 — admin job introspection. Joins pgboss.job\n   * (pending / active / retry) and pgboss.archive (completed\n   * / failed / expired) into one unified list.\n   *\n   * Phase 13.2 — `since` filter for time-bounded queries\n   * (\"last 24 hours\") and accurate `total` via a parallel\n   * COUNT(*) so the admin pagination shows the right count.\n   * The COUNT runs against the same UNION; the per-page\n   * SELECT still gets the row data.\n   */\n  async listJobs(options: NpJobListOptions): Promise<NpJobListResult> {\n    const limit = Math.min(Math.max(1, options.limit ?? 50), 200);\n    const offset = Math.max(0, options.offset ?? 0);\n\n    const db = (\n      this.boss as unknown as {\n        db: { executeSql: (sql: string, params?: unknown[]) => Promise<{ rows: PgBossRow[] }> };\n      }\n    ).db;\n    const params: unknown[] = [];\n    const where: string[] = [];\n    if (options.name) {\n      params.push(options.name);\n      where.push(`name = $${params.length}`);\n    }\n    if (options.state) {\n      params.push(options.state);\n      where.push(`state = $${params.length}`);\n    }\n    if (options.since) {\n      params.push(options.since.toISOString());\n      where.push(`created_on >= $${params.length}`);\n    }\n    const whereSql = where.length ? `WHERE ${where.join(\" AND \")}` : \"\";\n\n    // Schema name defaults to `pgboss` but can be overridden\n    // via constructor options. We didn't pass `schema`, so the\n    // default is in effect.\n    //\n    // Phase 20.4 — when `options.source` is set we narrow the\n    // UNION to that single table; otherwise we keep the\n    // historical \"show everything\" union. The `source` column on\n    // each row is what the admin uses to split live vs archive\n    // visually without an extra round trip.\n    const liveSelect = `\n      SELECT id, name, state, data, retry_count,\n             output::text AS output, created_on, started_on, completed_on,\n             'live' AS source\n        FROM pgboss.job`;\n    const archiveSelect = `\n      SELECT id, name, state, data, retry_count,\n             output::text AS output, created_on, started_on, completed_on,\n             'archive' AS source\n        FROM pgboss.archive`;\n    const innerUnion =\n      options.source === \"live\"\n        ? liveSelect\n        : options.source === \"archive\"\n          ? archiveSelect\n          : `${liveSelect}\\n        UNION ALL${archiveSelect}`;\n    const listSql = `\n      SELECT id, name, state::text AS state, data, retry_count,\n             output, created_on, started_on, completed_on, source\n      FROM (\n        ${innerUnion}\n      ) jobs\n      ${whereSql}\n      ORDER BY created_on DESC\n      LIMIT ${limit} OFFSET ${offset}\n    `;\n    const liveCount = `SELECT id, name, state, data, created_on, 'live' AS source FROM pgboss.job`;\n    const archiveCount = `SELECT id, name, state, data, created_on, 'archive' AS source FROM pgboss.archive`;\n    const countUnion =\n      options.source === \"live\"\n        ? liveCount\n        : options.source === \"archive\"\n          ? archiveCount\n          : `${liveCount} UNION ALL ${archiveCount}`;\n    const countSql = `\n      SELECT COUNT(*)::bigint AS total\n      FROM (\n        ${countUnion}\n      ) jobs\n      ${whereSql}\n    `;\n    const [listResult, countResult] = await Promise.all([\n      db.executeSql(listSql, params),\n      db.executeSql(countSql, params) as unknown as Promise<{\n        rows: Array<{ total: string | number }>;\n      }>,\n    ]);\n    const rows = listResult.rows ?? [];\n    const totalRaw = countResult.rows?.[0]?.total;\n    const total =\n      typeof totalRaw === \"number\"\n        ? totalRaw\n        : typeof totalRaw === \"string\"\n          ? Number.parseInt(totalRaw, 10)\n          : 0;\n\n    return {\n      jobs: rows.map(rowToSummary),\n      total: Number.isFinite(total) ? total : 0,\n    };\n  }\n\n  /**\n   * Phase 13.2 — list every cron schedule registered in the\n   * queue. Reads from `pgboss.schedule`, which is the table\n   * pg-boss writes to on each `boss.schedule()` call. Sorted\n   * by name for stable display.\n   */\n  async listSchedules(): Promise<NpScheduleSummary[]> {\n    const db = (\n      this.boss as unknown as {\n        db: {\n          executeSql: (sql: string, params?: unknown[]) => Promise<{ rows: PgBossScheduleRow[] }>;\n        };\n      }\n    ).db;\n    const result = await db.executeSql(\n      `SELECT name, key, cron, timezone, data, created_on, updated_on\n         FROM pgboss.schedule\n        ORDER BY name ASC, key ASC`,\n    );\n    return (result.rows ?? []).map(scheduleRowToSummary);\n  }\n\n  /**\n   * Phase 4.2 — pulls per-(pluginId, taskId) execution stats from the\n   * union of `pgboss.job` (in-flight + recently-completed) and\n   * `pgboss.archive` (rolled-over history). One row per taskId so the\n   * caller can index without a second pass.\n   *\n   * The window default is 7 days because longer windows force the\n   * archive table into the hot path and admins typically want recent\n   * health, not lifetime totals. Increase via `windowDays` if surfacing\n   * a \"30-day reliability\" widget.\n   */\n  async getPluginScheduleStats(\n    pluginId: string,\n    options?: { windowDays?: number },\n  ): Promise<NpPluginScheduleStats[]> {\n    const windowDays = Math.max(1, Math.min(365, options?.windowDays ?? 7));\n    const db = (\n      this.boss as unknown as {\n        db: {\n          executeSql: (\n            sql: string,\n            params?: unknown[],\n          ) => Promise<{\n            rows: Array<{\n              task_id: string | null;\n              last_run: Date | string | null;\n              last_success: Date | string | null;\n              last_failure: Date | string | null;\n              completed_count: string | number;\n              failed_count: string | number;\n            }>;\n          }>;\n        };\n      }\n    ).db;\n\n    // Plugin schedule jobs land in pg-boss under two name shapes:\n    //   - `plugin.scheduledTask`                       — `schedulePluginTask()` enqueues\n    //     here for one-shot \"Run now\" invocations (handlePluginScheduledTask\n    //     dispatches by `(pluginId, taskId)` from the payload).\n    //   - `plugin.scheduledTask.<pluginId>.<taskId>`   — cron schedules. Each entry\n    //     declared via `definePlugin({ scheduled: [...] })` gets its own queue +\n    //     row in `pgboss.schedule` (Phase 19).\n    // Both share the `(pluginId, taskId)` payload shape, so we filter by name\n    // prefix and join on `data->>'pluginId'` to collect either source. The\n    // earlier `name = 'plugin.scheduledTask'` filter only matched the first\n    // shape, leaving cron-scheduled stats permanently at zero.\n    const result = await db.executeSql(\n      `WITH plugin_jobs AS (\n         SELECT state, completed_on, data\n           FROM pgboss.job\n          WHERE (name = 'plugin.scheduledTask' OR name LIKE 'plugin.scheduledTask.%')\n            AND data->>'pluginId' = $1\n            AND completed_on > NOW() - ($2 || ' days')::interval\n         UNION ALL\n         SELECT state, completed_on, data\n           FROM pgboss.archive\n          WHERE (name = 'plugin.scheduledTask' OR name LIKE 'plugin.scheduledTask.%')\n            AND data->>'pluginId' = $1\n            AND completed_on > NOW() - ($2 || ' days')::interval\n       )\n       SELECT data->>'taskId' AS task_id,\n              MAX(completed_on) AS last_run,\n              MAX(CASE WHEN state = 'completed' THEN completed_on END) AS last_success,\n              MAX(CASE WHEN state = 'failed' THEN completed_on END) AS last_failure,\n              SUM(CASE WHEN state = 'completed' THEN 1 ELSE 0 END) AS completed_count,\n              SUM(CASE WHEN state = 'failed' THEN 1 ELSE 0 END) AS failed_count\n         FROM plugin_jobs\n        WHERE data->>'taskId' IS NOT NULL\n        GROUP BY data->>'taskId'`,\n      [pluginId, String(windowDays)],\n    );\n\n    return (result.rows ?? [])\n      .filter((row): row is typeof row & { task_id: string } => typeof row.task_id === \"string\")\n      .map((row) => ({\n        taskId: row.task_id,\n        lastRunAt: toIso(row.last_run),\n        lastSuccessAt: toIso(row.last_success),\n        lastFailureAt: toIso(row.last_failure),\n        completedCount: Number(row.completed_count) || 0,\n        failedCount: Number(row.failed_count) || 0,\n        windowDays,\n      }));\n  }\n\n  /**\n   * Issue #461 — diff the in-memory plugin schedule registry against the\n   * `pgboss.schedule` rows whose name starts with `plugin.scheduledTask.*`\n   * and bring pg-boss in line. Without this, `reloadPlugins()` only\n   * rebuilt the in-process registry and pg-boss kept firing the old set\n   * of crons until the worker process restarted — the admin \"Reload all\"\n   * toast was promising behavior the system didn't deliver.\n   *\n   * Worker `boss.work()` registrations stay untouched. In production the\n   * worker is a separate process with its own boss instance; the web\n   * process can't add or drop work loops there. We surface that via\n   * `workerOwnsRegistrations` so the admin UI can warn the operator.\n   */\n  async reconcilePluginSchedules(): Promise<NpReconcileSchedulesResult> {\n    // Pull the current registry inline — same dynamic-import pattern\n    // `start()` uses to dodge a core ↔ jobs cycle.\n    const { getRegisteredPluginSchedules } = await import(\"../plugins/host.js\");\n    const wantedList = getRegisteredPluginSchedules();\n    const wantedByName = new Map<\n      string,\n      { pluginId: string; taskId: string; cron: string }\n    >();\n    for (const schedule of wantedList) {\n      const name = `${toQueueName(\"plugin:scheduledTask\")}.${schedule.pluginId}.${schedule.taskId}`;\n      wantedByName.set(name, {\n        pluginId: schedule.pluginId,\n        taskId: schedule.taskId,\n        cron: schedule.cron,\n      });\n    }\n\n    // Existing schedule rows for the plugin namespace only — the framework\n    // owns its built-in schedules (`system.revisionPrune` etc.) elsewhere\n    // and we mustn't touch them here.\n    const existingAll = await this.listSchedules();\n    const existingByName = new Map<string, NpScheduleSummary>();\n    for (const entry of existingAll) {\n      if (entry.name.startsWith(\"plugin.scheduledTask.\")) {\n        existingByName.set(entry.name, entry);\n      }\n    }\n\n    let added = 0;\n    let updated = 0;\n    let removed = 0;\n\n    // Add or update.\n    for (const [name, want] of wantedByName) {\n      const existing = existingByName.get(name);\n      if (!existing) {\n        await this.boss.schedule(name, want.cron, {\n          pluginId: want.pluginId,\n          taskId: want.taskId,\n        });\n        added++;\n        continue;\n      }\n      if (existing.cron !== want.cron) {\n        await this.boss.unschedule(name).catch(() => {\n          // Race: another reconcile call could have removed the row in\n          // parallel. Either way, the next `schedule()` below installs\n          // the new cron from a clean slate.\n        });\n        await this.boss.schedule(name, want.cron, {\n          pluginId: want.pluginId,\n          taskId: want.taskId,\n        });\n        updated++;\n      }\n    }\n\n    // Remove stale rows.\n    for (const [name] of existingByName) {\n      if (!wantedByName.has(name)) {\n        await this.boss.unschedule(name).catch(() => {\n          // Concurrent removal — fine; the row is gone either way.\n        });\n        removed++;\n      }\n    }\n\n    return {\n      added,\n      updated,\n      removed,\n      workerOwnsRegistrations: this.workerStarted,\n    };\n  }\n\n  /**\n   * Phase 23.5 — `GROUP BY state` across the union of pgboss.job\n   * (live) and pgboss.archive (rolled). Returns a fully-populated\n   * record so callers can index without optional chaining.\n   *\n   * Uses `created_on` for the optional `since` filter. Both tables\n   * carry the same column, so the union pre-filter is a single\n   * predicate.\n   */\n  async countByState(options?: NpJobCountOptions): Promise<NpJobStateCounts> {\n    const db = (\n      this.boss as unknown as {\n        db: {\n          executeSql: (\n            sql: string,\n            params?: unknown[],\n          ) => Promise<{ rows: Array<{ state: string; count: string | number }> }>;\n        };\n      }\n    ).db;\n    const params: unknown[] = [];\n    let whereSql = \"\";\n    if (options?.since) {\n      params.push(options.since.toISOString());\n      whereSql = `WHERE created_on >= $${params.length}`;\n    }\n    const result = await db.executeSql(\n      `SELECT state::text AS state, COUNT(*)::bigint AS count\n         FROM (\n           SELECT state, created_on FROM pgboss.job\n           UNION ALL\n           SELECT state, created_on FROM pgboss.archive\n         ) jobs\n         ${whereSql}\n        GROUP BY state`,\n      params,\n    );\n    const counts: NpJobStateCounts = {\n      created: 0,\n      active: 0,\n      completed: 0,\n      failed: 0,\n      retry: 0,\n      cancelled: 0,\n      expired: 0,\n    };\n    for (const row of result.rows ?? []) {\n      const key = row.state as keyof NpJobStateCounts;\n      if (key in counts) {\n        const value =\n          typeof row.count === \"number\" ? row.count : Number.parseInt(row.count, 10);\n        counts[key] = Number.isFinite(value) ? value : 0;\n      }\n    }\n    return counts;\n  }\n\n  async retryJob(id: string): Promise<string> {\n    // Look up the original payload + queue name first so we\n    // can re-enqueue with the same shape. Could be in either\n    // pgboss.job (still pending/active/retry) or pgboss.archive\n    // (already terminal); UNION handles both.\n    const db = (\n      this.boss as unknown as {\n        db: { executeSql: (sql: string, params?: unknown[]) => Promise<{ rows: PgBossRow[] }> };\n      }\n    ).db;\n    const result = await db.executeSql(\n      `SELECT id, name, state::text AS state, data, retry_count,\n              output::text AS output, created_on, started_on, completed_on\n       FROM pgboss.job WHERE id = $1\n       UNION ALL\n       SELECT id, name, state, data, retry_count,\n              output::text AS output, created_on, started_on, completed_on\n       FROM pgboss.archive WHERE id = $1\n       LIMIT 1`,\n      [id],\n    );\n    const row = result.rows?.[0];\n    if (!row) {\n      throw new Error(`Job ${id} not found`);\n    }\n    const newId = await this.boss.send(row.name, row.data ?? {});\n    if (!newId) {\n      throw new Error(`Failed to re-enqueue ${row.name}`);\n    }\n    return newId;\n  }\n\n  async cancelJob(id: string): Promise<void> {\n    // pg-boss's cancel API requires the queue name; look it up\n    // from pgboss.job. Already-archived (terminal) jobs can't\n    // be cancelled, which matches user intuition.\n    const db = (\n      this.boss as unknown as {\n        db: {\n          executeSql: (sql: string, params?: unknown[]) => Promise<{ rows: { name: string }[] }>;\n        };\n      }\n    ).db;\n    const result = await db.executeSql(`SELECT name FROM pgboss.job WHERE id = $1`, [id]);\n    const row = result.rows?.[0];\n    if (!row) {\n      throw new Error(`Job ${id} not found or already terminal`);\n    }\n    await this.boss.cancel(row.name, id);\n  }\n}\n\ninterface PgBossRow {\n  id: string;\n  name: string;\n  state: string;\n  data: unknown;\n  retry_count?: number;\n  output?: string | null;\n  created_on?: Date | string | null;\n  started_on?: Date | string | null;\n  completed_on?: Date | string | null;\n  /** Phase 20.4 — `live` (pgboss.job) or `archive` (pgboss.archive). */\n  source?: string;\n}\n\ninterface PgBossScheduleRow {\n  name: string;\n  key?: string | null;\n  cron: string;\n  timezone?: string | null;\n  data?: unknown;\n  created_on?: Date | string | null;\n  updated_on?: Date | string | null;\n}\n\nfunction scheduleRowToSummary(row: PgBossScheduleRow): NpScheduleSummary {\n  return {\n    name: row.name,\n    key: row.key ?? \"\",\n    cron: row.cron,\n    timezone: row.timezone ?? null,\n    data: row.data ?? null,\n    createdOn: toIso(row.created_on) ?? new Date(0).toISOString(),\n    updatedOn: toIso(row.updated_on),\n  };\n}\n\nfunction rowToSummary(row: PgBossRow): NpJobSummary {\n  return {\n    id: row.id,\n    name: row.name,\n    state: row.state as NpJobState,\n    data: row.data,\n    retryCount: typeof row.retry_count === \"number\" ? row.retry_count : undefined,\n    output: row.output ?? null,\n    createdOn: toIso(row.created_on) ?? new Date(0).toISOString(),\n    startedOn: toIso(row.started_on),\n    completedOn: toIso(row.completed_on),\n    source: row.source === \"archive\" ? \"archive\" : row.source === \"live\" ? \"live\" : undefined,\n  };\n}\n\nfunction toIso(value: Date | string | null | undefined): string | null {\n  if (!value) return null;\n  if (value instanceof Date) return value.toISOString();\n  const parsed = new Date(value);\n  return Number.isNaN(parsed.getTime()) ? null : parsed.toISOString();\n}\n\nfunction asJobPayload(data: unknown): object {\n  if (!data || typeof data !== \"object\" || Array.isArray(data)) {\n    return { payload: data };\n  }\n\n  return data;\n}\n","import { registerBuiltinHandlers } from \"./builtin-handlers.js\";\nimport { startHeartbeatLoop } from \"./heartbeat.js\";\nimport { getJobsPauseState, startPauseSyncLoop, type PauseSyncLoopHandle } from \"./pause-state.js\";\nimport { PgBossAdapter } from \"./pg-boss-adapter.js\";\nimport { setJobQueue } from \"./queue.js\";\nimport { getLogger } from \"../observability/logger.js\";\n\nlet workerAdapter: PgBossAdapter | null = null;\nlet producerAdapter: PgBossAdapter | null = null;\nlet heartbeatHandle: { stop(): Promise<void> } | null = null;\nlet pauseSyncHandle: PauseSyncLoopHandle | null = null;\nlet signalHandlersInstalled = false;\nconst installedSignalHandlers = new Map<NodeJS.Signals, () => void>();\n\nfunction installShutdownSignalHandlers(): void {\n  if (signalHandlersInstalled) return;\n  signalHandlersInstalled = true;\n\n  // Ensure the heartbeat row flips to `stopped` synchronously\n  // before the process exits, even on signal-driven shutdown.\n  // Without this a SIGTERM-driven shutdown raced with the\n  // event-loop stopping and the row drifted into `unhealthy`\n  // for a full WORKER_STALE_THRESHOLD_MS window.\n  for (const signal of [\"SIGINT\", \"SIGTERM\"] as const) {\n    const handler = (): void => {\n      void (async () => {\n        try {\n          await stopWorker();\n        } catch (err) {\n          getLogger().warn(\"Worker shutdown handler failed\", {\n            signal,\n            error: err instanceof Error ? err.message : String(err),\n          });\n        } finally {\n          process.exit(0);\n        }\n      })();\n    };\n    process.on(signal, handler);\n    installedSignalHandlers.set(signal, handler);\n  }\n}\n\nfunction removeShutdownSignalHandlers(): void {\n  if (!signalHandlersInstalled) return;\n  for (const [signal, handler] of installedSignalHandlers) {\n    process.off(signal, handler);\n  }\n  installedSignalHandlers.clear();\n  signalHandlersInstalled = false;\n}\n\nexport async function startWorker(\n  connectionString: string,\n  options?: {\n    schema?: string;\n    heartbeat?: boolean | { meta?: Record<string, unknown> };\n    /**\n     * When true (default), startWorker installs SIGINT / SIGTERM\n     * listeners that call `stopWorker()` and `process.exit(0)`.\n     * Set false in environments that manage their own shutdown\n     * sequencing (custom supervisors, embedded test harnesses).\n     */\n    installSignalHandlers?: boolean;\n  },\n): Promise<void> {\n  if (workerAdapter) {\n    return;\n  }\n\n  registerBuiltinHandlers();\n\n  workerAdapter = new PgBossAdapter(connectionString, {\n    schema: options?.schema ?? \"public\",\n  });\n\n  setJobQueue(workerAdapter);\n\n  // #318 — wrap the post-init steps so a throw partway through\n  // doesn't strand a half-set-up worker (signal handlers armed\n  // on null state, dangling heartbeat row, etc). The catch\n  // unwinds whatever did succeed before re-throwing, so the\n  // orchestrator sees the original error and a subsequent\n  // `startWorker()` retry starts from a clean slate.\n  try {\n    await workerAdapter.start();\n    await workerAdapter.scheduleRecurring();\n\n    // Phase 20.2 — if the operator paused processing while the\n    // worker was offline, honor it on boot. The flag is global\n    // (in `np_settings` siteId=\"_system\") so it survives worker\n    // restarts. We swallow read errors because a pre-migrate DB\n    // would otherwise stop the worker from starting at all —\n    // safer to default to \"running\" than to refuse to boot.\n    try {\n      const pauseState = await getJobsPauseState();\n      if (pauseState.paused) {\n        await workerAdapter.pauseProcessing();\n        getLogger().info(\"Worker booted in paused state\", {\n          changedAt: pauseState.changedAt,\n          reason: pauseState.reason,\n        });\n      }\n    } catch (err) {\n      getLogger().warn(\"Could not read jobs pause state on worker boot\", {\n        error: err instanceof Error ? err.message : String(err),\n      });\n    }\n\n    // Phase 19 — start the heartbeat loop AFTER pg-boss is up so\n    // a misconfigured DB surfaces as a `boss.start()` throw\n    // rather than a heartbeat row that lies about a worker that\n    // never really booted. Tests can pass `heartbeat: false` to\n    // skip the recurring interval.\n    const heartbeatOpt = options?.heartbeat ?? true;\n    if (heartbeatOpt !== false) {\n      const meta = typeof heartbeatOpt === \"object\" ? (heartbeatOpt.meta ?? {}) : {};\n      heartbeatHandle = startHeartbeatLoop(meta);\n      // Phase 20.2 — multi-pod pause sync. Each tick reads the\n      // persisted flag and applies any divergence to the local\n      // adapter, so an operator pause on one pod propagates to\n      // the rest within ~30 s. Same gate as the heartbeat — if\n      // the operator opted out of background loops (tests), we\n      // skip this too.\n      pauseSyncHandle = startPauseSyncLoop(workerAdapter);\n    }\n\n    // Install signal handlers LAST — if any earlier step threw,\n    // the catch below has already unwound; we don't want to arm\n    // shutdown handlers that would then fire against null state.\n    if (options?.installSignalHandlers !== false) {\n      installShutdownSignalHandlers();\n    }\n  } catch (err) {\n    // Best-effort cleanup of whatever did succeed. Each step is\n    // its own try so one failure here doesn't mask the original.\n    if (heartbeatHandle) {\n      try {\n        await heartbeatHandle.stop();\n      } catch {\n        /* swallow — original error matters more */\n      }\n      heartbeatHandle = null;\n    }\n    if (pauseSyncHandle) {\n      try {\n        pauseSyncHandle.stop();\n      } catch {\n        /* swallow */\n      }\n      pauseSyncHandle = null;\n    }\n    if (workerAdapter) {\n      try {\n        await workerAdapter.stop();\n      } catch {\n        /* swallow */\n      }\n      workerAdapter = null;\n    }\n    removeShutdownSignalHandlers();\n    throw err;\n  }\n}\n\n/**\n * Enqueue-only setup for the web/API process. Wires pg-boss as the job queue\n * singleton without attaching any `boss.work()` loops — those belong in the\n * dedicated worker process. Calling `enqueueJob` after this will actually\n * send jobs instead of no-op'ing.\n */\nexport async function startProducer(\n  connectionString: string,\n  options?: { schema?: string },\n): Promise<void> {\n  if (producerAdapter) {\n    return;\n  }\n\n  producerAdapter = new PgBossAdapter(connectionString, {\n    schema: options?.schema ?? \"public\",\n  });\n\n  setJobQueue(producerAdapter);\n\n  await producerAdapter.startProducer();\n}\n\nexport async function stopWorker(): Promise<void> {\n  if (!workerAdapter) {\n    return;\n  }\n\n  // Phase 19 — stop the heartbeat first so the row flips to\n  // `stopped` while the DB is still reachable. The pg-boss\n  // shutdown then clears the queue lock cleanly.\n  if (heartbeatHandle) {\n    await heartbeatHandle.stop();\n    heartbeatHandle = null;\n  }\n\n  // Phase 20.2 — pause sync interval is just an in-memory\n  // timer; clear it before tearing down the queue so a\n  // late-firing tick doesn't try to call pauseProcessing on a\n  // half-shut-down adapter.\n  if (pauseSyncHandle) {\n    pauseSyncHandle.stop();\n    pauseSyncHandle = null;\n  }\n\n  await workerAdapter.stop();\n  workerAdapter = null;\n  removeShutdownSignalHandlers();\n}\n\nexport async function stopProducer(): Promise<void> {\n  if (!producerAdapter) {\n    return;\n  }\n\n  await producerAdapter.stop();\n  producerAdapter = null;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAIA,IAAM,WAAW,oBAAI,IAA6B;AAE3C,SAAS,mBAAmB,MAAiB,SAA6B;AAC/E,WAAS,IAAI,MAAM,OAAO;AAC5B;AAEO,SAAS,cAAc,MAA2C;AACvE,SAAO,SAAS,IAAI,IAAI;AAC1B;AAEO,SAAS,oBAA0D;AACxE,SAAO;AACT;;;ACFA,SAAS,WAAW,OAAuB;AACzC,SAAO,MACJ,QAAQ,MAAM,OAAO,EACrB,QAAQ,MAAM,MAAM,EACpB,QAAQ,MAAM,MAAM,EACpB,QAAQ,MAAM,QAAQ,EACtB,QAAQ,MAAM,OAAO;AAC1B;AAEA,SAAS,KAAK,UAAkB,aAA6B;AAG3D,SAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,sEAM6D,WAAW,QAAQ,CAAC;AAAA,UAChF,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAOrB;AAEO,SAAS,iBAAiB,MAAoD;AACnF,QAAM,UAAU,qBAAqB,KAAK,QAAQ;AAClD,QAAM,OACJ,MAAM,KAAK,IAAI;AAAA;AAAA,yBACW,KAAK,QAAQ;AAAA;AAAA,EACpC,KAAK,QAAQ;AAAA;AAAA;AAGlB,QAAM,OAAO;AAAA,IACX,KAAK;AAAA,IACL;AAAA,qCACiC,WAAW,KAAK,IAAI,CAAC;AAAA,yDACD,WAAW,KAAK,QAAQ,CAAC;AAAA,2CACvC,WAAW,KAAK,QAAQ,CAAC;AAAA;AAAA,0EAEM,WAAW,KAAK,QAAQ,CAAC;AAAA;AAAA;AAAA,EAGjG;AAEA,SAAO,EAAE,SAAS,MAAM,KAAK;AAC/B;AAaO,SAAS,uBAAuB,MAAmD;AACxF,QAAM,UAAU,gBAAgB,KAAK,QAAQ;AAC7C,QAAM,OACJ,MAAM,KAAK,WAAW;AAAA;AAAA,aACR,KAAK,QAAQ;AAAA;AAAA,EACxB,KAAK,SAAS;AAAA;AAAA;AAGnB,QAAM,OAAO;AAAA,IACX,KAAK;AAAA,IACL;AAAA,qCACiC,WAAW,KAAK,WAAW,CAAC;AAAA,6CACpB,WAAW,KAAK,QAAQ,CAAC;AAAA,2CAC3B,WAAW,KAAK,SAAS,CAAC;AAAA;AAAA,0EAEK,WAAW,KAAK,SAAS,CAAC;AAAA;AAAA;AAAA,EAGlG;AAEA,SAAO,EAAE,SAAS,MAAM,KAAK;AAC/B;AAEO,SAAS,gBAAgB,MAAoD;AAClF,QAAM,UAAU,cAAc,KAAK,QAAQ;AAC3C,QAAM,OACJ,MAAM,KAAK,IAAI;AAAA;AAAA,8CACgC,KAAK,QAAQ;AAAA;AAAA,EAEzD,KAAK,QAAQ;AAAA;AAAA;AAGlB,QAAM,OAAO;AAAA,IACX,KAAK;AAAA,IACL;AAAA,qCACiC,WAAW,KAAK,IAAI,CAAC;AAAA,8EACoB,WAAW,KAAK,QAAQ,CAAC;AAAA,2CAC5D,WAAW,KAAK,QAAQ,CAAC;AAAA;AAAA,0EAEM,WAAW,KAAK,QAAQ,CAAC;AAAA;AAAA;AAAA,EAGjG;AAEA,SAAO,EAAE,SAAS,MAAM,KAAK;AAC/B;;;ACtDA,IAAM,oBAAuC,CAAC;AAEvC,SAAS,2BAA2B,SAA2C;AACpF,SAAO,OAAO,mBAAmB,OAAO;AAC1C;AAEO,SAAS,0BAAgC;AAC9C,qBAAmB,qBAAqB,sBAAsB;AAC9D,qBAAmB,uBAAuB,wBAAwB;AAClE,qBAAmB,4BAA4B,6BAA6B;AAC5E,qBAAmB,sBAAsB,uBAAuB;AAChE,qBAAmB,iBAAiB,kBAAkB;AACtD,qBAAmB,wBAAwB,yBAAyB;AACpE,qBAAmB,wBAAwB,mBAAmB;AAC9D,qBAAmB,yBAAyB,oBAAoB;AAChE,qBAAmB,sBAAsB,iBAAiB;AAC1D,qBAAmB,0BAA0B,2BAA2B;AACxE,qBAAmB,2BAA2B,2BAA2B;AACzE,qBAAmB,6BAA6B,6BAA6B;AAC7E,qBAAmB,4BAA4B,6BAA6B;AAC9E;AAEA,eAAe,8BAA8B,GAA2B;AACtE,QAAM,EAAE,0BAA0B,IAAI,MAAM,OAAO,yBAA6B;AAChF,QAAM,SAAS,MAAM,0BAA0B;AAC/C,MAAI,OAAO,YAAY,GAAG;AACxB,YAAQ;AAAA,MACN,+CAA+C,OAAO,SAAS;AAAA,MAC/D,OAAO;AAAA,IACT;AAAA,EACF;AACF;AAEA,eAAe,uBAAuB,MAA8B;AAClE,QAAM,UAAU,iBAAiB,IAAI;AAErC,QAAM,yBAAyB,QAAQ,YAAY,QAAQ,UAAU;AAErE,QAAM,UAAU,MAAM,kBAAkB,iCAAiC,OAAO;AAEhF,MAAI,CAAC,SAAS;AACZ;AAAA,EACF;AAEA,QAAM,QACJ,QAAQ,cAAc,WAClB,QAAQ,iBAAiB,OAAO,cAChC,QAAQ,iBAAiB,OAAO;AAEtC,QAAM,mBAAmB,OAAO;AAAA,IAC9B,MAAM,QAAQ;AAAA,IACd,MAAM,QAAQ;AAAA,IACd,WAAW,QAAQ;AAAA,IACnB,YAAY,QAAQ,iBAAiB;AAAA,IACrC,aAAa,QAAQ;AAAA,EACvB,CAAC;AACH;AAEA,eAAe,yBAAyB,MAA8B;AACpE,QAAM,UAAU,uBAAuB,IAAI;AAE3C,QAAM,yBAAyB,QAAQ,YAAY,QAAQ,UAAU;AAErE,QAAM,UAAU,MAAM,kBAAkB,mCAAmC,OAAO;AAElF,MAAI,CAAC,SAAS;AACZ;AAAA,EACF;AAEA,QAAM,mBAAmB,QAAQ,iBAAiB,OAAO,aAAa;AAAA,IACpE,MAAM,QAAQ;AAAA,IACd,MAAM,QAAQ;AAAA,IACd,WAAW,QAAQ;AAAA,IACnB,YAAY,QAAQ,iBAAiB;AAAA,EACvC,CAAC;AACH;AAEA,eAAe,wBAAwB,MAA8B;AACnE,QAAM,kBAAkB,eAAe,IAAI;AAC7C;AAEA,eAAe,mBAAmB,MAA8B;AAC9D,QAAM,kBAAkB,eAAe,IAAI;AAC7C;AAEA,eAAe,0BAA0B,MAA8B;AAKrE,MAAI,SAAS,IAAI,KAAK,OAAO,KAAK,aAAa,YAAY,OAAO,KAAK,WAAW,UAAU;AAC1F,QAAI;AACF,YAAM,EAAE,uBAAuB,IAAI,MAAM,OAAO,oBAAoB;AACpE,YAAM,uBAAuB,KAAK,UAAU,KAAK,MAAM;AACvD;AAAA,IACF,SAAS,KAAK;AAIZ,YAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,UAAI,CAAC,oBAAoB,KAAK,OAAO,KAAK,CAAC,oBAAoB,KAAK,OAAO,GAAG;AAC5E,cAAM;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,QAAM,kBAAkB,yBAAyB,IAAI;AACvD;AAEA,eAAe,oBAAoB,GAA2B;AAC5D,QAAM,kBAAkB,iBAAiB;AAC3C;AAEA,eAAe,qBAAqB,GAA2B;AAC7D,QAAM,kBAAkB,kBAAkB;AAC5C;AASA,eAAe,kBAAkB,GAA2B;AAC1D,QAAM,EAAE,uBAAAA,wBAAuB,8BAAAC,8BAA6B,IAAI,MAAM,OAAO,uBAAc;AAC3F,QAAM,SAAS,IAAI,KAAK,KAAK,IAAI,IAAIA,6BAA4B;AACjE,QAAM,UAAU,MAAMD,uBAAsB,MAAM;AAClD,MAAI,UAAU,GAAG;AACf,YAAQ,KAAK,yCAAyC,OAAO,aAAa;AAAA,EAC5E;AACF;AAmBA,eAAe,4BAA4B,MAA8B;AACvE,MAAI,kBAAkB,mBAAmB;AACvC,UAAM,kBAAkB,kBAAkB,IAAI;AAC9C;AAAA,EACF;AAEA,QAAM,UAAU,uBAAuB,IAAI;AAC3C,QAAM,eAAe;AAAA,IACnB,UAAU,QAAQ,YAAY;AAAA,IAC9B,MAAM,QAAQ;AAAA,IACd,UAAU,QAAQ;AAAA,EACpB;AACA,QAAM,WACJ,QAAQ,YAAY,WAAW,iBAAiB,YAAY,IAAI,gBAAgB,YAAY;AAE9F,QAAM,gBAAgB,EAAE,KAAK;AAAA,IAC3B,IAAI,QAAQ;AAAA,IACZ,SAAS,SAAS;AAAA,IAClB,MAAM,SAAS;AAAA,IACf,MAAM,SAAS;AAAA,EACjB,CAAC;AACH;AAEA,SAAS,uBAAuB,MAAqC;AACnE,MAAI,CAAC,SAAS,IAAI,GAAG;AACnB,UAAM,IAAI,MAAM,6CAA6C;AAAA,EAC/D;AAEA,SAAO;AAAA,IACL,OAAO,SAAS,KAAK,OAAO,OAAO;AAAA,IACnC,MAAM,SAAS,KAAK,MAAM,MAAM;AAAA,IAChC,OAAO,SAAS,KAAK,OAAO,OAAO;AAAA,IACnC,UACE,OAAO,KAAK,aAAa,YAAY,KAAK,SAAS,SAAS,IAAI,KAAK,WAAW;AAAA,IAClF,SAAS,eAAe,KAAK,OAAO;AAAA,IACpC,UAAU,SAAS,KAAK,UAAU,UAAU;AAAA,EAC9C;AACF;AAEA,SAAS,eAAe,OAAoC;AAC1D,MAAI,UAAU,YAAY,UAAU,SAAS;AAC3C,WAAO;AAAA,EACT;AAEA,QAAM,IAAI,MAAM,iCAAiC;AACnD;AAEA,eAAe,mBACb,OACA,MACe;AACf,MAAI,CAAC,SAAS,MAAM,WAAW,GAAG;AAChC;AAAA,EACF;AAEA,aAAW,QAAQ,OAAO;AACxB,UAAM,KAAK,IAAI;AAAA,EACjB;AACF;AAEA,eAAe,yBAAyB,YAAoB,YAAmC;AAC7F,MAAI;AACF,UAAM,gBAAgB,MAAM,kBAAkB;AAE9C,QAAI,CAAC,eAAe;AAClB;AAAA,IACF;AAEA,kBAAc,MAAM,UAAU,EAAE;AAChC,kBAAc,MAAM,UAAU,IAAI,UAAU,EAAE;AAAA,EAChD,QAAQ;AACN;AAAA,EACF;AACF;AAEA,eAAe,oBAA6D;AAK1E,QAAM,WAAmB;AACzB,MAAI;AACJ,MAAI;AACF,qBAAiB,MAAM,OAAO;AAAA,EAChC,QAAQ;AACN,WAAO;AAAA,EACT;AAEA,MAAI,CAAC,SAAS,cAAc,GAAG;AAC7B,WAAO;AAAA,EACT;AAEA,QAAM,gBAAgB,eAAe;AAIrC,MAAI,OAAO,kBAAkB,YAAY;AACvC,WAAO;AAAA,EACT;AAKA,SAAO,CAAC,QAAgB;AACtB,QAAI,cAAc,UAAU,GAAG;AAC7B,MAAC,cAAe,KAAK,SAAS;AAAA,IAChC,OAAO;AACL,MAAC,cAAwC,GAAG;AAAA,IAC9C;AAAA,EACF;AACF;AAEA,SAAS,iBAAiB,MAA+B;AACvD,MAAI,CAAC,SAAS,IAAI,GAAG;AACnB,UAAM,IAAI,MAAM,wCAAwC;AAAA,EAC1D;AAEA,SAAO;AAAA,IACL,YAAY,SAAS,KAAK,YAAY,YAAY;AAAA,IAClD,YAAY,SAAS,KAAK,YAAY,YAAY;AAAA,IAClD,WAAW,mBAAmB,KAAK,SAAS;AAAA,IAC5C,QAAQ,SAAS,KAAK,QAAQ,QAAQ;AAAA,EACxC;AACF;AAEA,SAAS,uBAAuB,MAAqC;AACnE,MAAI,CAAC,SAAS,IAAI,GAAG;AACnB,UAAM,IAAI,MAAM,0CAA0C;AAAA,EAC5D;AAEA,SAAO;AAAA,IACL,YAAY,SAAS,KAAK,YAAY,YAAY;AAAA,IAClD,YAAY,SAAS,KAAK,YAAY,YAAY;AAAA,IAClD,QAAQ,SAAS,KAAK,QAAQ,QAAQ;AAAA,EACxC;AACF;AAEA,SAAS,mBAAmB,OAA6C;AACvE,MAAI,UAAU,YAAY,UAAU,UAAU;AAC5C,WAAO;AAAA,EACT;AAEA,QAAM,IAAI,MAAM,4BAA4B;AAC9C;AAEA,SAAS,SAAS,OAAgB,WAA2B;AAC3D,MAAI,OAAO,UAAU,YAAY,MAAM,WAAW,GAAG;AACnD,UAAM,IAAI,MAAM,WAAW,SAAS,SAAS;AAAA,EAC/C;AAEA,SAAO;AACT;AAEA,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAgBA,eAAe,4BAA4B,MAA8B;AACvE,MAAI,kBAAkB,uBAAuB;AAC3C,UAAM,kBAAkB,sBAAsB,IAAI;AAClD;AAAA,EACF;AACA,MAAI,CAAC,SAAS,IAAI,EAAG,OAAM,IAAI,MAAM,8CAA8C;AACnF,QAAM,UAA+B;AAAA,IACnC,OAAO,SAAS,KAAK,OAAO,OAAO;AAAA,IACnC,aAAa,SAAS,KAAK,aAAa,aAAa;AAAA,IACrD,WAAW,SAAS,KAAK,WAAW,WAAW;AAAA,IAC/C,UACE,OAAO,KAAK,aAAa,YAAY,KAAK,SAAS,SAAS,IAAI,KAAK,WAAW;AAAA,EACpF;AACA,QAAM,WAAW,uBAAuB;AAAA,IACtC,UAAU,QAAQ,YAAY;AAAA,IAC9B,aAAa,QAAQ;AAAA,IACrB,WAAW,QAAQ;AAAA,EACrB,CAAC;AACD,QAAM,gBAAgB,EAAE,KAAK;AAAA,IAC3B,IAAI,QAAQ;AAAA,IACZ,SAAS,SAAS;AAAA,IAClB,MAAM,SAAS;AAAA,IACf,MAAM,SAAS;AAAA,EACjB,CAAC;AACH;AAEA,eAAe,8BAA8B,MAA8B;AACzE,MAAI,kBAAkB,yBAAyB;AAC7C,UAAM,kBAAkB,wBAAwB,IAAI;AACpD;AAAA,EACF;AACA,MAAI,CAAC,SAAS,IAAI,EAAG,OAAM,IAAI,MAAM,gDAAgD;AACrF,QAAM,UAA8B;AAAA,IAClC,OAAO,SAAS,KAAK,OAAO,OAAO;AAAA,IACnC,aAAa,SAAS,KAAK,aAAa,aAAa;AAAA,IACrD,UAAU,SAAS,KAAK,UAAU,UAAU;AAAA,IAC5C,UACE,OAAO,KAAK,aAAa,YAAY,KAAK,SAAS,SAAS,IAAI,KAAK,WAAW;AAAA,EACpF;AAIA,QAAM,WAAW,gBAAgB;AAAA,IAC/B,UAAU,QAAQ,YAAY;AAAA,IAC9B,MAAM,QAAQ;AAAA,IACd,UAAU,QAAQ;AAAA,EACpB,CAAC;AACD,QAAM,gBAAgB,EAAE,KAAK;AAAA,IAC3B,IAAI,QAAQ;AAAA,IACZ,SAAS,SAAS;AAAA,IAClB,MAAM,SAAS;AAAA,IACf,MAAM,SAAS;AAAA,EACjB,CAAC;AACH;AAEA,eAAe,8BAA8B,MAA8B;AACzE,QAAM,UACJ,SAAS,IAAI,MAAM,KAAK,YAAY,WAAW,KAAK,YAAY,YAC5D,KAAK,UACL;AACN,QAAM,WAAW,SAAS,IAAI,KAAK,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;AACvF,QAAM,EAAE,eAAe,IAAI,MAAM,OAAO,sBAAwB;AAChE,QAAM,SAAS,MAAM,eAAe,EAAE,SAAS,SAAS,CAAC;AAEzD,UAAQ;AAAA,IACN,+CAA+C,OAAO,eACrC,OAAO,UAAU,SAAS,OAAO,IAAI,YACxC,OAAO,OAAO,WAAW,OAAO,MAAM;AAAA,EACtD;AACF;;;ACxcA,SAAS,gBAAgB;AACzB,SAAS,kBAAkB;AAE3B,SAAS,MAAM,IAAI,IAAI,UAAU;AA6B1B,IAAM,+BACX,mBAAmB,+BAA+B,EAAE,IAAI;AAQnD,IAAM,4BACX,mBAAmB,qCAAqC,EAAE,IAAI;AAkBhE,SAAS,mBAA2B;AAQlC,MAAI;AACF,UAAM,OAAO,SAAS;AACtB,WAAO,GAAG,IAAI,IAAI,QAAQ,GAAG;AAAA,EAC/B,QAAQ;AACN,WAAO,WAAW;AAAA,EACpB;AACF;AAOA,eAAsB,gBACpB,UACA,OAAgC,CAAC,GAClB;AACf,QAAM,KAAK,MAAM;AACjB,QAAM,MAAM,oBAAI,KAAK;AACrB,QAAM,GACH,OAAO,kBAAkB,EACzB,OAAO;AAAA,IACN,IAAI;AAAA,IACJ,QAAQ;AAAA,IACR,WAAW;AAAA,IACX,YAAY;AAAA,IACZ;AAAA,EACF,CAAC,EACA,mBAAmB;AAAA,IAClB,QAAQ,mBAAmB;AAAA,IAC3B,KAAK,EAAE,YAAY,KAAK,QAAQ,WAAW,KAAK;AAAA,EAClD,CAAC;AACL;AAMA,eAAsB,kBAAkB,UAAiC;AACvE,QAAM,KAAK,MAAM;AACjB,QAAM,GACH,OAAO,kBAAkB,EACzB,IAAI,EAAE,QAAQ,WAAW,YAAY,oBAAI,KAAK,EAAE,CAAC,EACjD,MAAM,GAAG,mBAAmB,IAAI,QAAQ,CAAC;AAC9C;AAOA,eAAsB,iBAAiB,MAAY,oBAAI,KAAK,GAAmC;AAC7F,QAAM,KAAK,MAAM;AACjB,QAAM,OAAQ,MAAM,GACjB,OAAO,EACP,KAAK,kBAAkB,EACvB,QAAQ,KAAK,mBAAmB,UAAU,CAAC;AAE9C,MAAI,aAAa;AACjB,QAAM,YAAY,KAAK,IAAI,CAAC,QAAQ;AAClC,UAAM,gBAAgB,KAAK,IAAI,GAAG,IAAI,QAAQ,IAAI,IAAI,WAAW,QAAQ,CAAC;AAC1E,UAAM,QAAQ,IAAI,WAAW,aAAa,gBAAgB;AAC1D,QAAI,MAAO,eAAc;AACzB,WAAO,EAAE,GAAG,KAAK,OAAO,cAAc;AAAA,EACxC,CAAC;AAED,SAAO;AAAA,IACL,SAAS;AAAA,IACT;AAAA,IACA,YAAY,KAAK;AAAA,IACjB,iBAAiB,KAAK,CAAC,GAAG,WAAW,YAAY,KAAK;AAAA,EACxD;AACF;AAaO,SAAS,mBACd,OAAgC,CAAC,GACjC,aAAqB,8BACA;AACrB,QAAM,WAAW,iBAAiB;AAClC,QAAM,MAAM,UAAU;AAEtB,QAAM,OAAO,YAA2B;AACtC,QAAI;AACF,YAAM,gBAAgB,UAAU,IAAI;AAAA,IACtC,SAAS,KAAK;AACZ,UAAI,KAAK,2BAA2B;AAAA,QAClC;AAAA,QACA,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,MACxD,CAAC;AAAA,IACH;AAAA,EACF;AAKA,OAAK,KAAK;AACV,QAAM,QAAQ,YAAY,MAAM;AAC9B,SAAK,KAAK;AAAA,EACZ,GAAG,UAAU;AAIb,MAAI,OAAO,MAAM,UAAU,WAAY,OAAM,MAAM;AAEnD,SAAO;AAAA,IACL;AAAA,IACA,MAAM,OAAO;AACX,oBAAc,KAAK;AACnB,UAAI;AACF,cAAM,kBAAkB,QAAQ;AAAA,MAClC,SAAS,KAAK;AACZ,YAAI,KAAK,4CAA4C;AAAA,UACnD;AAAA,UACA,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,QACxD,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AACF;AAOA,eAAsB,kBACpB,YAAkB,IAAI,KAAK,KAAK,IAAI,IAAI,4BAA4B,EAAE,GACrD;AACjB,QAAM,KAAK,MAAM;AACjB,QAAM,UAAW,MAAM,GACpB,OAAO,kBAAkB,EACzB,MAAM,GAAG,mBAAmB,YAAY,SAAS,CAAC,EAClD,UAAU,EAAE,IAAI,mBAAmB,GAAG,CAAC;AAC1C,SAAO,QAAQ;AACjB;AAGA,eAAsB,kBAAkB,MAAY,oBAAI,KAAK,GAAoB;AAC/E,QAAM,KAAK,MAAM;AACjB,QAAM,SAAS,IAAI,KAAK,IAAI,QAAQ,IAAI,yBAAyB;AACjE,QAAM,OAAQ,MAAM,GACjB,OAAO,EAAE,IAAI,mBAAmB,GAAG,CAAC,EACpC,KAAK,kBAAkB,EACvB,MAAM,GAAG,mBAAmB,YAAY,MAAM,CAAC;AAClD,SAAO,KAAK;AACd;;;AChOA,SAAS,KAAK,MAAAE,WAAU;AAkBxB,IAAM,iBAAiB;AACvB,IAAM,kBAAkB;AAYxB,IAAM,gBAAkC;AAAA,EACtC,QAAQ;AAAA,EACR,YAAW,oBAAI,KAAK,CAAC,GAAE,YAAY;AAAA,EACnC,iBAAiB;AAAA,EACjB,QAAQ;AACV;AAEA,eAAsB,oBAA+C;AACnE,QAAM,KAAK,MAAM;AACjB,QAAM,OAAO,MAAM,GAChB,OAAO,EACP,KAAK,UAAU,EACf,MAAM,IAAIC,IAAG,WAAW,QAAQ,cAAc,GAAGA,IAAG,WAAW,KAAK,eAAe,CAAC,CAAC,EACrF,MAAM,CAAC;AAEV,QAAM,MAAM,KAAK,CAAC;AAClB,MAAI,CAAC,IAAK,QAAO;AAEjB,QAAM,QAAQ,IAAI;AAClB,MAAI,CAAC,SAAS,OAAO,MAAM,WAAW,UAAW,QAAO;AAExD,SAAO;AAAA,IACL,QAAQ,MAAM;AAAA,IACd,WAAW,OAAO,MAAM,cAAc,WAAW,MAAM,YAAY,cAAc;AAAA,IACjF,iBAAiB,OAAO,MAAM,oBAAoB,WAAW,MAAM,kBAAkB;AAAA,IACrF,QAAQ,OAAO,MAAM,WAAW,WAAW,MAAM,SAAS;AAAA,EAC5D;AACF;AAQA,eAAsB,kBAAkB,OAA0D;AAChG,QAAM,KAAK,MAAM;AACjB,QAAM,OAAyB;AAAA,IAC7B,QAAQ,MAAM;AAAA,IACd,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IAClC,iBAAiB,MAAM,mBAAmB;AAAA,IAC1C,QAAQ,MAAM,UAAU;AAAA,EAC1B;AAEA,QAAM,GACH,OAAO,UAAU,EACjB,OAAO;AAAA,IACN,QAAQ;AAAA,IACR,KAAK;AAAA,IACL,OAAO;AAAA,EACT,CAAC,EACA,mBAAmB;AAAA,IAClB,QAAQ,CAAC,WAAW,QAAQ,WAAW,GAAG;AAAA,IAC1C,KAAK;AAAA,MACH,OAAO;AAAA,MACP,WAAW,oBAAI,KAAK;AAAA,IACtB;AAAA,EACF,CAAC;AAEH,SAAO;AACT;AAEO,IAAM,yBAAyB;AAS/B,IAAM,4BAA4B;AAsBlC,SAAS,mBACd,OACA,aAAqB,wBACA;AACrB,QAAM,MAAM,UAAU;AACtB,MAAI,sBAAsB;AAC1B,MAAI,YAAY;AAEhB,QAAM,OAAO,YAA2B;AACtC,QAAI;AACF,YAAM,YAAY,MAAM,kBAAkB;AAC1C,YAAM,cACJ,OAAO,MAAM,uBAAuB,aAAa,MAAM,mBAAmB,IAAI;AAEhF,UAAI,UAAU,UAAU,CAAC,eAAe,OAAO,MAAM,oBAAoB,YAAY;AACnF,cAAM,MAAM,gBAAgB;AAC5B,YAAI,KAAK,iDAAiD;AAAA,UACxD,WAAW,UAAU;AAAA,QACvB,CAAC;AAAA,MACH,WAAW,CAAC,UAAU,UAAU,eAAe,OAAO,MAAM,qBAAqB,YAAY;AAC3F,cAAM,MAAM,iBAAiB;AAC7B,YAAI,KAAK,kDAAkD;AAAA,UACzD,WAAW,UAAU;AAAA,QACvB,CAAC;AAAA,MACH;AAIA,UAAI,sBAAsB,GAAG;AAC3B,YAAI,KAAK,oDAAoD;AAAA,UAC3D,kBAAkB;AAAA,QACpB,CAAC;AACD,8BAAsB;AACtB,oBAAY;AAAA,MACd;AAAA,IACF,SAAS,KAAK;AACZ,6BAAuB;AACvB,YAAM,eAAe,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AACpE,UAAI,KAAK,0BAA0B;AAAA,QACjC,OAAO;AAAA,QACP;AAAA,MACF,CAAC;AAOD,UAAI,uBAAuB,6BAA6B,CAAC,WAAW;AAClE,oBAAY;AACZ,cAAM,aAAa,eAAe,QAAQ,MAAM,IAAI,MAAM,YAAY;AACtE,cAAM,YAAY,YAAY;AAAA,UAC5B,MAAM,EAAE,QAAQ,UAAU,WAAW,aAAa;AAAA,UAClD,OAAO,EAAE,oBAAoB;AAAA,QAC/B,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAMA,OAAK,KAAK;AACV,QAAM,QAAQ,YAAY,MAAM;AAC9B,SAAK,KAAK;AAAA,EACZ,GAAG,UAAU;AACb,MAAI,OAAO,MAAM,UAAU,WAAY,OAAM,MAAM;AAEnD,SAAO;AAAA,IACL,OAAO;AACL,oBAAc,KAAK;AAAA,IACrB;AAAA,EACF;AACF;;;ACtMA,SAAS,cAAiD;AAyB1D,SAAS,YAAY,MAAyB;AAC5C,SAAO,KAAK,QAAQ,MAAM,GAAG;AAC/B;AAEO,IAAM,gBAAN,MAA0C;AAAA,EAC9B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,oBAGZ,CAAC;AAAA,EACE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQT,gBAAgB;AAAA,EAExB,YAAY,kBAA0B,SAA8B;AAClE,SAAK,OAAO,IAAI,OAAO,EAAE,kBAAkB,GAAG,QAAQ,CAAC;AAAA,EACzD;AAAA,EAEA,MAAM,QAAQ,MAAiB,MAAgC;AAC7D,UAAM,QAAQ,MAAM,KAAK,KAAK,KAAK,YAAY,IAAI,GAAG,aAAa,IAAI,CAAC;AAExE,QAAI,CAAC,OAAO;AACV,YAAM,IAAI,MAAM,0BAA0B,IAAI,EAAE;AAAA,IAClD;AAEA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,gBAA+B;AACnC,UAAM,KAAK,KAAK,MAAM;AAAA,EACxB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,QAAuB;AAC3B,UAAM,KAAK,KAAK,MAAM;AAEtB,eAAW,CAAC,MAAM,OAAO,KAAK,kBAAkB,GAAG;AACjD,YAAM,YAAY,YAAY,IAAI;AAClC,YAAM,KAAK,KAAK,YAAY,SAAS;AACrC,YAAM,WAAW,YAAY;AAC3B,cAAM,KAAK,KAAK,KAAK,WAAW,OAAO,SAAyB;AAC9D,qBAAW,OAAO,MAAM;AAKtB,kBAAM,gBAAgB,IAAI,IAAI,YAAY;AACxC,kBAAI;AACF,sBAAM,QAAQ,IAAI,IAAI;AAAA,cACxB,SAAS,OAAO;AAGd,sBAAM,MAAM,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AACpE,0BAAU,EAAE,MAAM,qBAAqB;AAAA,kBACrC;AAAA,kBACA,OAAO,IAAI;AAAA,kBACX,OAAO,IAAI;AAAA,kBACX,OAAO,IAAI;AAAA,gBACb,CAAC;AAID,sBAAM,aAAa,SAAS,sBAAsB,IAAI,OAAO,IAAI;AAAA,kBAC/D;AAAA,kBACA,OAAO,IAAI;AAAA,gBACb,CAAC;AACD,qBAAK,YAAY,KAAK;AAAA,kBACpB,MAAM,EAAE,QAAQ,UAAU,SAAS,KAAK;AAAA,kBACxC,OAAO,EAAE,OAAO,IAAI,GAAG;AAAA,gBACzB,CAAC;AACD,sBAAM;AAAA,cACR;AAAA,YACF,CAAC;AAAA,UACH;AAAA,QACF,CAAC;AAAA,MACH;AACA,WAAK,kBAAkB,KAAK,EAAE,WAAW,SAAS,CAAC;AACnD,YAAM,SAAS;AAAA,IACjB;AAOA,UAAM,EAAE,8BAA8B,uBAAuB,IAC3D,MAAM,OAAO,oBAAoB;AACnC,eAAW,YAAY,6BAA6B,GAAG;AACrD,YAAM,YAAY,GAAG,YAAY,sBAAsB,CAAC,IAAI,SAAS,QAAQ,IAAI,SAAS,MAAM;AAChG,YAAM,KAAK,KAAK,YAAY,SAAS;AACrC,YAAM,WAAW,YAAY;AAC3B,cAAM,KAAK,KAAK,KAAK,WAAW,OAAO,SAAyB;AAC9D,qBAAW,OAAO,MAAM;AACtB,kBAAM,gBAAgB,IAAI,IAAI,YAAY;AACxC,kBAAI;AACF,sBAAM,uBAAuB,SAAS,UAAU,SAAS,MAAM;AAAA,cACjE,SAAS,OAAO;AACd,sBAAM,MAAM,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AACpE,0BAAU,EAAE,MAAM,+BAA+B;AAAA,kBAC/C,UAAU,SAAS;AAAA,kBACnB,QAAQ,SAAS;AAAA,kBACjB,OAAO,IAAI;AAAA,kBACX,OAAO,IAAI;AAAA,kBACX,OAAO,IAAI;AAAA,gBACb,CAAC;AACD,sBAAM,aAAa,SAAS,gCAAgC,IAAI,OAAO,IAAI;AAAA,kBACzE,UAAU,SAAS;AAAA,kBACnB,QAAQ,SAAS;AAAA,kBACjB,OAAO,IAAI;AAAA,gBACb,CAAC;AACD,qBAAK,YAAY,KAAK;AAAA,kBACpB,MAAM;AAAA,oBACJ,QAAQ;AAAA,oBACR,UAAU,SAAS;AAAA,oBACnB,QAAQ,SAAS;AAAA,kBACnB;AAAA,kBACA,OAAO,EAAE,OAAO,IAAI,GAAG;AAAA,gBACzB,CAAC;AACD,sBAAM;AAAA,cACR;AAAA,YACF,CAAC;AAAA,UACH;AAAA,QACF,CAAC;AAAA,MACH;AACA,WAAK,kBAAkB,KAAK,EAAE,WAAW,SAAS,CAAC;AACnD,YAAM,SAAS;AAAA,IACjB;AACA,SAAK,gBAAgB;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,kBAAiC;AACrC,QAAI,KAAK,OAAQ;AACjB,eAAW,EAAE,UAAU,KAAK,KAAK,mBAAmB;AAClD,YAAM,KAAK,KAAK,QAAQ,SAAS;AAAA,IACnC;AACA,SAAK,SAAS;AACd,cAAU,EAAE,KAAK,yBAAyB;AAAA,MACxC,QAAQ,KAAK,kBAAkB;AAAA,IACjC,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,mBAAkC;AACtC,QAAI,CAAC,KAAK,OAAQ;AAClB,eAAW,EAAE,SAAS,KAAK,KAAK,mBAAmB;AACjD,YAAM,SAAS;AAAA,IACjB;AACA,SAAK,SAAS;AACd,cAAU,EAAE,KAAK,0BAA0B;AAAA,MACzC,QAAQ,KAAK,kBAAkB;AAAA,IACjC,CAAC;AAAA,EACH;AAAA,EAEA,qBAA8B;AAC5B,WAAO,KAAK;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,YAA8B;AAClC,QAAI;AACF,aAAO,MAAM,KAAK,KAAK,YAAY;AAAA,IACrC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,OAAsB;AAC1B,UAAM,KAAK,KAAK,KAAK,EAAE,UAAU,MAAM,SAAS,IAAM,CAAC;AAAA,EACzD;AAAA,EAEA,MAAM,oBAAmC;AACvC,UAAM,KAAK,KAAK,SAAS,YAAY,sBAAsB,GAAG,aAAa,CAAC,CAAC;AAC7E,UAAM,KAAK,KAAK,SAAS,YAAY,uBAAuB,GAAG,aAAa,CAAC,CAAC;AAI9E,UAAM,KAAK,KAAK,SAAS,YAAY,oBAAoB,GAAG,cAAc,CAAC,CAAC;AAc5E,UAAM,cAAc,YAAY,0BAA0B;AAC1D,UAAM,KAAK,KAAK,WAAW,WAAW,EAAE,MAAM,MAAM;AAAA,IAKpD,CAAC;AACD,UAAM,KAAK,KAAK,SAAS,aAAa,aAAa,EAAE,SAAS,QAAQ,GAAG,EAAE,KAAK,QAAQ,CAAC;AACzF,UAAM,KAAK,KAAK,SAAS,aAAa,aAAa,EAAE,SAAS,SAAS,GAAG,EAAE,KAAK,SAAS,CAAC;AAO3F,UAAM,EAAE,6BAA6B,IAAI,MAAM,OAAO,oBAAoB;AAC1E,eAAW,YAAY,6BAA6B,GAAG;AACrD,YAAM,aAAa,GAAG,YAAY,sBAAsB,CAAC,IAAI,SAAS,QAAQ,IAAI,SAAS,MAAM;AACjG,YAAM,KAAK,KAAK,SAAS,YAAY,SAAS,MAAM;AAAA,QAClD,UAAU,SAAS;AAAA,QACnB,QAAQ,SAAS;AAAA,MACnB,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,UAAkB;AAChB,WAAO,KAAK;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAM,SAAS,SAAqD;AAClE,UAAM,QAAQ,KAAK,IAAI,KAAK,IAAI,GAAG,QAAQ,SAAS,EAAE,GAAG,GAAG;AAC5D,UAAM,SAAS,KAAK,IAAI,GAAG,QAAQ,UAAU,CAAC;AAE9C,UAAM,KACJ,KAAK,KAGL;AACF,UAAM,SAAoB,CAAC;AAC3B,UAAM,QAAkB,CAAC;AACzB,QAAI,QAAQ,MAAM;AAChB,aAAO,KAAK,QAAQ,IAAI;AACxB,YAAM,KAAK,WAAW,OAAO,MAAM,EAAE;AAAA,IACvC;AACA,QAAI,QAAQ,OAAO;AACjB,aAAO,KAAK,QAAQ,KAAK;AACzB,YAAM,KAAK,YAAY,OAAO,MAAM,EAAE;AAAA,IACxC;AACA,QAAI,QAAQ,OAAO;AACjB,aAAO,KAAK,QAAQ,MAAM,YAAY,CAAC;AACvC,YAAM,KAAK,kBAAkB,OAAO,MAAM,EAAE;AAAA,IAC9C;AACA,UAAM,WAAW,MAAM,SAAS,SAAS,MAAM,KAAK,OAAO,CAAC,KAAK;AAWjE,UAAM,aAAa;AAAA;AAAA;AAAA;AAAA;AAKnB,UAAM,gBAAgB;AAAA;AAAA;AAAA;AAAA;AAKtB,UAAM,aACJ,QAAQ,WAAW,SACf,aACA,QAAQ,WAAW,YACjB,gBACA,GAAG,UAAU;AAAA,mBAAsB,aAAa;AACxD,UAAM,UAAU;AAAA;AAAA;AAAA;AAAA,UAIV,UAAU;AAAA;AAAA,QAEZ,QAAQ;AAAA;AAAA,cAEF,KAAK,WAAW,MAAM;AAAA;AAEhC,UAAM,YAAY;AAClB,UAAM,eAAe;AACrB,UAAM,aACJ,QAAQ,WAAW,SACf,YACA,QAAQ,WAAW,YACjB,eACA,GAAG,SAAS,cAAc,YAAY;AAC9C,UAAM,WAAW;AAAA;AAAA;AAAA,UAGX,UAAU;AAAA;AAAA,QAEZ,QAAQ;AAAA;AAEZ,UAAM,CAAC,YAAY,WAAW,IAAI,MAAM,QAAQ,IAAI;AAAA,MAClD,GAAG,WAAW,SAAS,MAAM;AAAA,MAC7B,GAAG,WAAW,UAAU,MAAM;AAAA,IAGhC,CAAC;AACD,UAAM,OAAO,WAAW,QAAQ,CAAC;AACjC,UAAM,WAAW,YAAY,OAAO,CAAC,GAAG;AACxC,UAAM,QACJ,OAAO,aAAa,WAChB,WACA,OAAO,aAAa,WAClB,OAAO,SAAS,UAAU,EAAE,IAC5B;AAER,WAAO;AAAA,MACL,MAAM,KAAK,IAAI,YAAY;AAAA,MAC3B,OAAO,OAAO,SAAS,KAAK,IAAI,QAAQ;AAAA,IAC1C;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,gBAA8C;AAClD,UAAM,KACJ,KAAK,KAKL;AACF,UAAM,SAAS,MAAM,GAAG;AAAA,MACtB;AAAA;AAAA;AAAA,IAGF;AACA,YAAQ,OAAO,QAAQ,CAAC,GAAG,IAAI,oBAAoB;AAAA,EACrD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAM,uBACJ,UACA,SACkC;AAClC,UAAM,aAAa,KAAK,IAAI,GAAG,KAAK,IAAI,KAAK,SAAS,cAAc,CAAC,CAAC;AACtE,UAAM,KACJ,KAAK,KAiBL;AAaF,UAAM,SAAS,MAAM,GAAG;AAAA,MACtB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAsBA,CAAC,UAAU,OAAO,UAAU,CAAC;AAAA,IAC/B;AAEA,YAAQ,OAAO,QAAQ,CAAC,GACrB,OAAO,CAAC,QAAiD,OAAO,IAAI,YAAY,QAAQ,EACxF,IAAI,CAAC,SAAS;AAAA,MACb,QAAQ,IAAI;AAAA,MACZ,WAAW,MAAM,IAAI,QAAQ;AAAA,MAC7B,eAAe,MAAM,IAAI,YAAY;AAAA,MACrC,eAAe,MAAM,IAAI,YAAY;AAAA,MACrC,gBAAgB,OAAO,IAAI,eAAe,KAAK;AAAA,MAC/C,aAAa,OAAO,IAAI,YAAY,KAAK;AAAA,MACzC;AAAA,IACF,EAAE;AAAA,EACN;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,2BAAgE;AAGpE,UAAM,EAAE,6BAA6B,IAAI,MAAM,OAAO,oBAAoB;AAC1E,UAAM,aAAa,6BAA6B;AAChD,UAAM,eAAe,oBAAI,IAGvB;AACF,eAAW,YAAY,YAAY;AACjC,YAAM,OAAO,GAAG,YAAY,sBAAsB,CAAC,IAAI,SAAS,QAAQ,IAAI,SAAS,MAAM;AAC3F,mBAAa,IAAI,MAAM;AAAA,QACrB,UAAU,SAAS;AAAA,QACnB,QAAQ,SAAS;AAAA,QACjB,MAAM,SAAS;AAAA,MACjB,CAAC;AAAA,IACH;AAKA,UAAM,cAAc,MAAM,KAAK,cAAc;AAC7C,UAAM,iBAAiB,oBAAI,IAA+B;AAC1D,eAAW,SAAS,aAAa;AAC/B,UAAI,MAAM,KAAK,WAAW,uBAAuB,GAAG;AAClD,uBAAe,IAAI,MAAM,MAAM,KAAK;AAAA,MACtC;AAAA,IACF;AAEA,QAAI,QAAQ;AACZ,QAAI,UAAU;AACd,QAAI,UAAU;AAGd,eAAW,CAAC,MAAM,IAAI,KAAK,cAAc;AACvC,YAAM,WAAW,eAAe,IAAI,IAAI;AACxC,UAAI,CAAC,UAAU;AACb,cAAM,KAAK,KAAK,SAAS,MAAM,KAAK,MAAM;AAAA,UACxC,UAAU,KAAK;AAAA,UACf,QAAQ,KAAK;AAAA,QACf,CAAC;AACD;AACA;AAAA,MACF;AACA,UAAI,SAAS,SAAS,KAAK,MAAM;AAC/B,cAAM,KAAK,KAAK,WAAW,IAAI,EAAE,MAAM,MAAM;AAAA,QAI7C,CAAC;AACD,cAAM,KAAK,KAAK,SAAS,MAAM,KAAK,MAAM;AAAA,UACxC,UAAU,KAAK;AAAA,UACf,QAAQ,KAAK;AAAA,QACf,CAAC;AACD;AAAA,MACF;AAAA,IACF;AAGA,eAAW,CAAC,IAAI,KAAK,gBAAgB;AACnC,UAAI,CAAC,aAAa,IAAI,IAAI,GAAG;AAC3B,cAAM,KAAK,KAAK,WAAW,IAAI,EAAE,MAAM,MAAM;AAAA,QAE7C,CAAC;AACD;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA,yBAAyB,KAAK;AAAA,IAChC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,aAAa,SAAwD;AACzE,UAAM,KACJ,KAAK,KAQL;AACF,UAAM,SAAoB,CAAC;AAC3B,QAAI,WAAW;AACf,QAAI,SAAS,OAAO;AAClB,aAAO,KAAK,QAAQ,MAAM,YAAY,CAAC;AACvC,iBAAW,wBAAwB,OAAO,MAAM;AAAA,IAClD;AACA,UAAM,SAAS,MAAM,GAAG;AAAA,MACtB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,WAMK,QAAQ;AAAA;AAAA,MAEb;AAAA,IACF;AACA,UAAM,SAA2B;AAAA,MAC/B,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,OAAO;AAAA,MACP,WAAW;AAAA,MACX,SAAS;AAAA,IACX;AACA,eAAW,OAAO,OAAO,QAAQ,CAAC,GAAG;AACnC,YAAM,MAAM,IAAI;AAChB,UAAI,OAAO,QAAQ;AACjB,cAAM,QACJ,OAAO,IAAI,UAAU,WAAW,IAAI,QAAQ,OAAO,SAAS,IAAI,OAAO,EAAE;AAC3E,eAAO,GAAG,IAAI,OAAO,SAAS,KAAK,IAAI,QAAQ;AAAA,MACjD;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,SAAS,IAA6B;AAK1C,UAAM,KACJ,KAAK,KAGL;AACF,UAAM,SAAS,MAAM,GAAG;AAAA,MACtB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAQA,CAAC,EAAE;AAAA,IACL;AACA,UAAM,MAAM,OAAO,OAAO,CAAC;AAC3B,QAAI,CAAC,KAAK;AACR,YAAM,IAAI,MAAM,OAAO,EAAE,YAAY;AAAA,IACvC;AACA,UAAM,QAAQ,MAAM,KAAK,KAAK,KAAK,IAAI,MAAM,IAAI,QAAQ,CAAC,CAAC;AAC3D,QAAI,CAAC,OAAO;AACV,YAAM,IAAI,MAAM,wBAAwB,IAAI,IAAI,EAAE;AAAA,IACpD;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,UAAU,IAA2B;AAIzC,UAAM,KACJ,KAAK,KAKL;AACF,UAAM,SAAS,MAAM,GAAG,WAAW,6CAA6C,CAAC,EAAE,CAAC;AACpF,UAAM,MAAM,OAAO,OAAO,CAAC;AAC3B,QAAI,CAAC,KAAK;AACR,YAAM,IAAI,MAAM,OAAO,EAAE,gCAAgC;AAAA,IAC3D;AACA,UAAM,KAAK,KAAK,OAAO,IAAI,MAAM,EAAE;AAAA,EACrC;AACF;AA0BA,SAAS,qBAAqB,KAA2C;AACvE,SAAO;AAAA,IACL,MAAM,IAAI;AAAA,IACV,KAAK,IAAI,OAAO;AAAA,IAChB,MAAM,IAAI;AAAA,IACV,UAAU,IAAI,YAAY;AAAA,IAC1B,MAAM,IAAI,QAAQ;AAAA,IAClB,WAAW,MAAM,IAAI,UAAU,MAAK,oBAAI,KAAK,CAAC,GAAE,YAAY;AAAA,IAC5D,WAAW,MAAM,IAAI,UAAU;AAAA,EACjC;AACF;AAEA,SAAS,aAAa,KAA8B;AAClD,SAAO;AAAA,IACL,IAAI,IAAI;AAAA,IACR,MAAM,IAAI;AAAA,IACV,OAAO,IAAI;AAAA,IACX,MAAM,IAAI;AAAA,IACV,YAAY,OAAO,IAAI,gBAAgB,WAAW,IAAI,cAAc;AAAA,IACpE,QAAQ,IAAI,UAAU;AAAA,IACtB,WAAW,MAAM,IAAI,UAAU,MAAK,oBAAI,KAAK,CAAC,GAAE,YAAY;AAAA,IAC5D,WAAW,MAAM,IAAI,UAAU;AAAA,IAC/B,aAAa,MAAM,IAAI,YAAY;AAAA,IACnC,QAAQ,IAAI,WAAW,YAAY,YAAY,IAAI,WAAW,SAAS,SAAS;AAAA,EAClF;AACF;AAEA,SAAS,MAAM,OAAwD;AACrE,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI,iBAAiB,KAAM,QAAO,MAAM,YAAY;AACpD,QAAM,SAAS,IAAI,KAAK,KAAK;AAC7B,SAAO,OAAO,MAAM,OAAO,QAAQ,CAAC,IAAI,OAAO,OAAO,YAAY;AACpE;AAEA,SAAS,aAAa,MAAuB;AAC3C,MAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,IAAI,GAAG;AAC5D,WAAO,EAAE,SAAS,KAAK;AAAA,EACzB;AAEA,SAAO;AACT;;;AC/uBA,IAAI,gBAAsC;AAC1C,IAAI,kBAAwC;AAC5C,IAAI,kBAAoD;AACxD,IAAI,kBAA8C;AAClD,IAAI,0BAA0B;AAC9B,IAAM,0BAA0B,oBAAI,IAAgC;AAEpE,SAAS,gCAAsC;AAC7C,MAAI,wBAAyB;AAC7B,4BAA0B;AAO1B,aAAW,UAAU,CAAC,UAAU,SAAS,GAAY;AACnD,UAAM,UAAU,MAAY;AAC1B,YAAM,YAAY;AAChB,YAAI;AACF,gBAAM,WAAW;AAAA,QACnB,SAAS,KAAK;AACZ,oBAAU,EAAE,KAAK,kCAAkC;AAAA,YACjD;AAAA,YACA,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,UACxD,CAAC;AAAA,QACH,UAAE;AACA,kBAAQ,KAAK,CAAC;AAAA,QAChB;AAAA,MACF,GAAG;AAAA,IACL;AACA,YAAQ,GAAG,QAAQ,OAAO;AAC1B,4BAAwB,IAAI,QAAQ,OAAO;AAAA,EAC7C;AACF;AAEA,SAAS,+BAAqC;AAC5C,MAAI,CAAC,wBAAyB;AAC9B,aAAW,CAAC,QAAQ,OAAO,KAAK,yBAAyB;AACvD,YAAQ,IAAI,QAAQ,OAAO;AAAA,EAC7B;AACA,0BAAwB,MAAM;AAC9B,4BAA0B;AAC5B;AAEA,eAAsB,YACpB,kBACA,SAWe;AACf,MAAI,eAAe;AACjB;AAAA,EACF;AAEA,0BAAwB;AAExB,kBAAgB,IAAI,cAAc,kBAAkB;AAAA,IAClD,QAAQ,SAAS,UAAU;AAAA,EAC7B,CAAC;AAED,cAAY,aAAa;AAQzB,MAAI;AACF,UAAM,cAAc,MAAM;AAC1B,UAAM,cAAc,kBAAkB;AAQtC,QAAI;AACF,YAAM,aAAa,MAAM,kBAAkB;AAC3C,UAAI,WAAW,QAAQ;AACrB,cAAM,cAAc,gBAAgB;AACpC,kBAAU,EAAE,KAAK,iCAAiC;AAAA,UAChD,WAAW,WAAW;AAAA,UACtB,QAAQ,WAAW;AAAA,QACrB,CAAC;AAAA,MACH;AAAA,IACF,SAAS,KAAK;AACZ,gBAAU,EAAE,KAAK,kDAAkD;AAAA,QACjE,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,MACxD,CAAC;AAAA,IACH;AAOA,UAAM,eAAe,SAAS,aAAa;AAC3C,QAAI,iBAAiB,OAAO;AAC1B,YAAM,OAAO,OAAO,iBAAiB,WAAY,aAAa,QAAQ,CAAC,IAAK,CAAC;AAC7E,wBAAkB,mBAAmB,IAAI;AAOzC,wBAAkB,mBAAmB,aAAa;AAAA,IACpD;AAKA,QAAI,SAAS,0BAA0B,OAAO;AAC5C,oCAA8B;AAAA,IAChC;AAAA,EACF,SAAS,KAAK;AAGZ,QAAI,iBAAiB;AACnB,UAAI;AACF,cAAM,gBAAgB,KAAK;AAAA,MAC7B,QAAQ;AAAA,MAER;AACA,wBAAkB;AAAA,IACpB;AACA,QAAI,iBAAiB;AACnB,UAAI;AACF,wBAAgB,KAAK;AAAA,MACvB,QAAQ;AAAA,MAER;AACA,wBAAkB;AAAA,IACpB;AACA,QAAI,eAAe;AACjB,UAAI;AACF,cAAM,cAAc,KAAK;AAAA,MAC3B,QAAQ;AAAA,MAER;AACA,sBAAgB;AAAA,IAClB;AACA,iCAA6B;AAC7B,UAAM;AAAA,EACR;AACF;AAQA,eAAsB,cACpB,kBACA,SACe;AACf,MAAI,iBAAiB;AACnB;AAAA,EACF;AAEA,oBAAkB,IAAI,cAAc,kBAAkB;AAAA,IACpD,QAAQ,SAAS,UAAU;AAAA,EAC7B,CAAC;AAED,cAAY,eAAe;AAE3B,QAAM,gBAAgB,cAAc;AACtC;AAEA,eAAsB,aAA4B;AAChD,MAAI,CAAC,eAAe;AAClB;AAAA,EACF;AAKA,MAAI,iBAAiB;AACnB,UAAM,gBAAgB,KAAK;AAC3B,sBAAkB;AAAA,EACpB;AAMA,MAAI,iBAAiB;AACnB,oBAAgB,KAAK;AACrB,sBAAkB;AAAA,EACpB;AAEA,QAAM,cAAc,KAAK;AACzB,kBAAgB;AAChB,+BAA6B;AAC/B;AAEA,eAAsB,eAA8B;AAClD,MAAI,CAAC,iBAAiB;AACpB;AAAA,EACF;AAEA,QAAM,gBAAgB,KAAK;AAC3B,oBAAkB;AACpB;","names":["pruneJobLogsOlderThan","DEFAULT_JOB_LOG_RETENTION_MS","eq","eq"]}

package/dist/{chunk-ELK6AVW5.js → chunk-2X3GBJOT.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-SBCVAC2Z.js";
 import {
   getLogger
-} from "./chunk-NFHS7CFV.js";
+} from "./chunk-Q7MK5ZKG.js";
 import {
   getDb
 } from "./chunk-XANPEOJC.js";
@@ -222,4 +222,4 @@ export {
   tSync,
   resetTranslationCache
 };
-//# sourceMappingURL=chunk-ELK6AVW5.js.map
+//# sourceMappingURL=chunk-2X3GBJOT.js.map

package/dist/{chunk-ML2E3P3X.js → chunk-5C22NDW4.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-SBCVAC2Z.js";
 import {
   getLogger
-} from "./chunk-NFHS7CFV.js";
+} from "./chunk-Q7MK5ZKG.js";
 import {
   getDb
 } from "./chunk-XANPEOJC.js";
@@ -65,4 +65,4 @@ export {
   recordAuditEvent,
   listAuditEvents
 };
-//# sourceMappingURL=chunk-ML2E3P3X.js.map
+//# sourceMappingURL=chunk-5C22NDW4.js.map

package/dist/chunk-5C22NDW4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/community/audit.ts"],"sourcesContent":["import { and, count, desc, eq, gte, lt } from \"drizzle-orm\";\n\nimport { getDb } from \"../db/runtime.js\";\nimport { npAuditEvents } from \"../db/schema/community.js\";\nimport { getLogger } from \"../observability/logger.js\";\nimport { getCurrentSiteId } from \"../sites/context.js\";\n\n/**\n * Append-only moderation audit log. Every hide / restore / ban /\n * role-grant write goes through here so admins can later answer\n * \"who took this action and when?\" without diffing application logs.\n *\n * Writes are best-effort: a failed audit insert MUST NOT prevent the\n * underlying mod action from succeeding (logged via the observability\n * hooks instead). Reads are paginated and indexed by target.\n */\n\nexport type AuditActorKind = \"staff\" | \"member\" | \"system\";\n\nexport interface AuditActor {\n  kind: AuditActorKind;\n  /** Set only for `kind: \"staff\"`. */\n  userId?: string;\n  /** Set only for `kind: \"member\"`. */\n  memberId?: string;\n}\n\nexport interface RecordAuditEventInput {\n  actor: AuditActor;\n  action: string;\n  targetType?: string;\n  targetId?: string;\n  payload?: Record<string, unknown>;\n  /**\n   * Phase 17 — site this event belongs to. When omitted the\n   * writer reads `getCurrentSiteId()` so request-driven calls\n   * automatically scope to the resolving tenant. Pass `null`\n   * explicitly to record an unscoped event (super-admin\n   * cross-site action, background job).\n   */\n  siteId?: string | null;\n}\n\nexport interface AuditEventRow {\n  id: string;\n  actorKind: AuditActorKind;\n  actorUserId: string | null;\n  actorMemberId: string | null;\n  action: string;\n  targetType: string | null;\n  targetId: string | null;\n  payload: Record<string, unknown>;\n  siteId: string | null;\n  createdAt: Date;\n}\n\nexport async function recordAuditEvent(input: RecordAuditEventInput): Promise<void> {\n  const db = getDb();\n  try {\n    // Phase 17 — fill `site_id` from the request resolver when\n    // the caller doesn't pin it explicitly. Resolver returns\n    // null in non-request contexts (jobs, scripts), which we\n    // record as a NULL site so super-admin queries can find\n    // them via \"no site filter.\"\n    const siteId = input.siteId === undefined ? await getCurrentSiteId() : input.siteId;\n    await db.insert(npAuditEvents).values({\n      actorKind: input.actor.kind,\n      actorUserId: input.actor.userId ?? null,\n      actorMemberId: input.actor.memberId ?? null,\n      action: input.action,\n      targetType: input.targetType ?? null,\n      targetId: input.targetId ?? null,\n      payload: input.payload ?? {},\n      siteId,\n    });\n  } catch (err) {\n    // Audit failures must not block the underlying mod action — but\n    // they MUST surface, otherwise gaps in the forensic record go\n    // unnoticed (column drift, FK violation, transient pg blip).\n    getLogger().error(\"audit insert failed\", {\n      error: err instanceof Error ? err.message : String(err),\n      action: input.action,\n      targetType: input.targetType ?? null,\n      targetId: input.targetId ?? null,\n    });\n  }\n}\n\nexport interface ListAuditOptions {\n  /** Filter to audit events targeting one specific row. */\n  targetType?: string;\n  targetId?: string;\n  /** Filter to events caused by a specific actor. */\n  actorUserId?: string;\n  actorMemberId?: string;\n  /**\n   * Filter to events whose `action` matches. Common operational\n   * query: \"show every ban issued this week\" →\n   * `action=\"member.ban.issue\"` plus `since`.\n   */\n  action?: string;\n  /** Lower-bound `created_at` (inclusive). */\n  since?: Date;\n  /** Upper-bound `created_at` (exclusive). */\n  until?: Date;\n  /**\n   * Phase 17 — site filter. `undefined` means \"use current\n   * request's site\" (the typical admin-page query). Pass an\n   * explicit string to view another site's audit log\n   * (super-admin cross-site triage). Pass `null` to skip the\n   * filter entirely (every site's events).\n   */\n  siteId?: string | null;\n  limit?: number;\n  offset?: number;\n}\n\nexport async function listAuditEvents(\n  options: ListAuditOptions = {},\n): Promise<{ events: AuditEventRow[]; totalDocs: number }> {\n  const db = getDb();\n  const limit = Math.min(Math.max(options.limit ?? 50, 1), 200);\n  const offset = Math.max(options.offset ?? 0, 0);\n\n  const filters = [];\n  if (options.targetType) filters.push(eq(npAuditEvents.targetType, options.targetType));\n  if (options.targetId) filters.push(eq(npAuditEvents.targetId, options.targetId));\n  if (options.actorUserId) filters.push(eq(npAuditEvents.actorUserId, options.actorUserId));\n  if (options.actorMemberId) filters.push(eq(npAuditEvents.actorMemberId, options.actorMemberId));\n  if (options.action) filters.push(eq(npAuditEvents.action, options.action));\n  if (options.since) filters.push(gte(npAuditEvents.createdAt, options.since));\n  if (options.until) filters.push(lt(npAuditEvents.createdAt, options.until));\n\n  // Phase 17 — site scope.\n  // `undefined` (default) → use the resolver's current site if\n  //                        any. Pass `null` to skip filtering\n  //                        (cross-site, super-admin).\n  if (options.siteId !== null) {\n    const resolvedSite = options.siteId !== undefined ? options.siteId : await getCurrentSiteId();\n    if (resolvedSite !== null) {\n      filters.push(eq(npAuditEvents.siteId, resolvedSite));\n    }\n  }\n\n  const where = filters.length > 0 ? and(...filters) : undefined;\n\n  const rows = (await db\n    .select()\n    .from(npAuditEvents)\n    .where(where)\n    .orderBy(desc(npAuditEvents.createdAt))\n    .limit(limit)\n    .offset(offset)) as AuditEventRow[];\n\n  const [totalRow] = (await db\n    .select({ total: count() })\n    .from(npAuditEvents)\n    .where(where)) as Array<{ total: number }>;\n  const totalDocs = Number(totalRow?.total ?? 0);\n  return { events: rows, totalDocs };\n}\n"],"mappings":";;;;;;;;;;;;;;AAAA,SAAS,KAAK,OAAO,MAAM,IAAI,KAAK,UAAU;AAwD9C,eAAsB,iBAAiB,OAA6C;AAClF,QAAM,KAAK,MAAM;AACjB,MAAI;AAMF,UAAM,SAAS,MAAM,WAAW,SAAY,MAAM,iBAAiB,IAAI,MAAM;AAC7E,UAAM,GAAG,OAAO,aAAa,EAAE,OAAO;AAAA,MACpC,WAAW,MAAM,MAAM;AAAA,MACvB,aAAa,MAAM,MAAM,UAAU;AAAA,MACnC,eAAe,MAAM,MAAM,YAAY;AAAA,MACvC,QAAQ,MAAM;AAAA,MACd,YAAY,MAAM,cAAc;AAAA,MAChC,UAAU,MAAM,YAAY;AAAA,MAC5B,SAAS,MAAM,WAAW,CAAC;AAAA,MAC3B;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AAIZ,cAAU,EAAE,MAAM,uBAAuB;AAAA,MACvC,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,MACtD,QAAQ,MAAM;AAAA,MACd,YAAY,MAAM,cAAc;AAAA,MAChC,UAAU,MAAM,YAAY;AAAA,IAC9B,CAAC;AAAA,EACH;AACF;AA+BA,eAAsB,gBACpB,UAA4B,CAAC,GAC4B;AACzD,QAAM,KAAK,MAAM;AACjB,QAAM,QAAQ,KAAK,IAAI,KAAK,IAAI,QAAQ,SAAS,IAAI,CAAC,GAAG,GAAG;AAC5D,QAAM,SAAS,KAAK,IAAI,QAAQ,UAAU,GAAG,CAAC;AAE9C,QAAM,UAAU,CAAC;AACjB,MAAI,QAAQ,WAAY,SAAQ,KAAK,GAAG,cAAc,YAAY,QAAQ,UAAU,CAAC;AACrF,MAAI,QAAQ,SAAU,SAAQ,KAAK,GAAG,cAAc,UAAU,QAAQ,QAAQ,CAAC;AAC/E,MAAI,QAAQ,YAAa,SAAQ,KAAK,GAAG,cAAc,aAAa,QAAQ,WAAW,CAAC;AACxF,MAAI,QAAQ,cAAe,SAAQ,KAAK,GAAG,cAAc,eAAe,QAAQ,aAAa,CAAC;AAC9F,MAAI,QAAQ,OAAQ,SAAQ,KAAK,GAAG,cAAc,QAAQ,QAAQ,MAAM,CAAC;AACzE,MAAI,QAAQ,MAAO,SAAQ,KAAK,IAAI,cAAc,WAAW,QAAQ,KAAK,CAAC;AAC3E,MAAI,QAAQ,MAAO,SAAQ,KAAK,GAAG,cAAc,WAAW,QAAQ,KAAK,CAAC;AAM1E,MAAI,QAAQ,WAAW,MAAM;AAC3B,UAAM,eAAe,QAAQ,WAAW,SAAY,QAAQ,SAAS,MAAM,iBAAiB;AAC5F,QAAI,iBAAiB,MAAM;AACzB,cAAQ,KAAK,GAAG,cAAc,QAAQ,YAAY,CAAC;AAAA,IACrD;AAAA,EACF;AAEA,QAAM,QAAQ,QAAQ,SAAS,IAAI,IAAI,GAAG,OAAO,IAAI;AAErD,QAAM,OAAQ,MAAM,GACjB,OAAO,EACP,KAAK,aAAa,EAClB,MAAM,KAAK,EACX,QAAQ,KAAK,cAAc,SAAS,CAAC,EACrC,MAAM,KAAK,EACX,OAAO,MAAM;AAEhB,QAAM,CAAC,QAAQ,IAAK,MAAM,GACvB,OAAO,EAAE,OAAO,MAAM,EAAE,CAAC,EACzB,KAAK,aAAa,EAClB,MAAM,KAAK;AACd,QAAM,YAAY,OAAO,UAAU,SAAS,CAAC;AAC7C,SAAO,EAAE,QAAQ,MAAM,UAAU;AACnC;","names":[]}

package/dist/{chunk-RKM4GDWM.js → chunk-6MRTH734.js}

@@ -168,4 +168,4 @@ export {
   validateCommunitySettingsPatch,
   updateCommunitySettings
 };
-//# sourceMappingURL=chunk-RKM4GDWM.js.map
+//# sourceMappingURL=chunk-6MRTH734.js.map

package/dist/chunk-6MRTH734.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/community/settings.ts"],"sourcesContent":["import { and, eq } from \"drizzle-orm\";\n\nimport { getDb } from \"../db/runtime.js\";\nimport { npSettings } from \"../db/schema/system.js\";\nimport { NpValidationError } from \"../errors.js\";\n\n/**\n * Site-wide community settings, persisted in the generic `np_settings`\n * table under the `community` key. Sites that never visit the admin UI\n * inherit `DEFAULT_COMMUNITY_SETTINGS` — every read goes through\n * `getCommunitySettings()` which merges the stored value over the\n * defaults so adding a new field doesn't break existing installs.\n *\n * Validation runs on the write path only — readers trust whatever is\n * in the table because the only writer is the admin API which\n * pre-validates. Tests poke values directly into `np_settings` for\n * fault-injection cases.\n */\n/**\n * Per-member upload quota / rate limit. `null` on either field\n * means unlimited (the default — no quota). Both bounds count\n * non-deleted rows on `np_media` keyed by `uploaded_by_member_id`,\n * so admin purges (Phase 9.7l) free up quota the same way a\n * member self-deleting their content would. Staff uploads are\n * never gated.\n */\nexport interface NpMemberUploadQuota {\n  /** Max uploads in the trailing 24h window. `null` = unlimited. */\n  perDay: number | null;\n  /** Lifetime cap on non-deleted member uploads. `null` = unlimited. */\n  total: number | null;\n}\n\nexport interface NpCommunitySettings {\n  /**\n   * Allow-list of reaction `kind` strings. Members can only add\n   * reactions whose kind is in this list; values that pass the\n   * `KIND_RE` regex but aren't in the list are rejected with a 400.\n   * Removal of an already-existing reaction is NOT gated — if a kind\n   * is removed from the list, members can still un-react it.\n   */\n  reactionKinds: string[];\n  /**\n   * When false, `/api/members/register` refuses new sign-ups with a\n   * 403. Existing members can still sign in. Sites that want\n   * invite-only flows turn this off and provision via admin tooling.\n   */\n  registrationEnabled: boolean;\n  /** Per-member upload limits. See `NpMemberUploadQuota`. */\n  memberUploadQuota: NpMemberUploadQuota;\n}\n\nexport const DEFAULT_COMMUNITY_SETTINGS: NpCommunitySettings = {\n  reactionKinds: [\"like\"],\n  registrationEnabled: true,\n  memberUploadQuota: { perDay: null, total: null },\n};\n\nconst SETTINGS_KEY = \"community\";\nconst KIND_RE = /^[a-z][a-z0-9_-]{0,29}$/;\nconst MAX_REACTION_KINDS = 32;\nconst MAX_QUOTA_VALUE = 1_000_000;\n\nfunction mergeWithDefaults(stored: unknown): NpCommunitySettings {\n  if (!stored || typeof stored !== \"object\" || Array.isArray(stored)) {\n    return { ...DEFAULT_COMMUNITY_SETTINGS };\n  }\n  const raw = stored as Record<string, unknown>;\n  const reactionKinds =\n    Array.isArray(raw.reactionKinds) && raw.reactionKinds.every((k) => typeof k === \"string\")\n      ? (raw.reactionKinds)\n      : DEFAULT_COMMUNITY_SETTINGS.reactionKinds;\n  const registrationEnabled =\n    typeof raw.registrationEnabled === \"boolean\"\n      ? raw.registrationEnabled\n      : DEFAULT_COMMUNITY_SETTINGS.registrationEnabled;\n  const memberUploadQuota = readQuota(raw.memberUploadQuota);\n  return { reactionKinds, registrationEnabled, memberUploadQuota };\n}\n\nfunction readQuota(raw: unknown): NpMemberUploadQuota {\n  if (!raw || typeof raw !== \"object\" || Array.isArray(raw)) {\n    return { ...DEFAULT_COMMUNITY_SETTINGS.memberUploadQuota };\n  }\n  const v = raw as Record<string, unknown>;\n  const perDay =\n    typeof v.perDay === \"number\" && Number.isFinite(v.perDay) && v.perDay >= 0\n      ? Math.floor(v.perDay)\n      : null;\n  const total =\n    typeof v.total === \"number\" && Number.isFinite(v.total) && v.total >= 0\n      ? Math.floor(v.total)\n      : null;\n  return { perDay, total };\n}\n\nexport async function getCommunitySettings(): Promise<NpCommunitySettings> {\n  const db = getDb();\n  const { getCurrentSiteId } = await import(\"../sites/context.js\");\n  const { NP_DEFAULT_SITE_ID } = await import(\"../sites/registry.js\");\n  const siteId = (await getCurrentSiteId()) ?? NP_DEFAULT_SITE_ID;\n  const [row] = (await db\n    .select()\n    .from(npSettings)\n    .where(and(eq(npSettings.siteId, siteId), eq(npSettings.key, SETTINGS_KEY)))\n    .limit(1)) as Array<{ value: unknown }>;\n  return mergeWithDefaults(row?.value);\n}\n\n/**\n * Validates an incoming partial patch from the admin UI. Returns the\n * fully-merged settings object that should be persisted. Throws\n * `NpValidationError` with field-level errors on any malformed input.\n */\nexport function validateCommunitySettingsPatch(\n  current: NpCommunitySettings,\n  patch: unknown,\n): NpCommunitySettings {\n  if (!patch || typeof patch !== \"object\" || Array.isArray(patch)) {\n    throw new NpValidationError(\"Invalid input\", [\n      { field: \"body\", message: \"Body must be a JSON object\" },\n    ]);\n  }\n  const raw = patch as Record<string, unknown>;\n  const errors: Array<{ field: string; message: string }> = [];\n  let next: NpCommunitySettings = { ...current };\n\n  if (\"reactionKinds\" in raw) {\n    if (!Array.isArray(raw.reactionKinds)) {\n      errors.push({ field: \"reactionKinds\", message: \"Must be an array of strings\" });\n    } else if (raw.reactionKinds.length === 0) {\n      // Empty list disables reactions entirely. Allowed deliberately —\n      // sites that don't want reactions opt out by clearing the list.\n      next = { ...next, reactionKinds: [] };\n    } else if (raw.reactionKinds.length > MAX_REACTION_KINDS) {\n      errors.push({\n        field: \"reactionKinds\",\n        message: `At most ${MAX_REACTION_KINDS} kinds`,\n      });\n    } else {\n      const seen = new Set<string>();\n      const cleaned: string[] = [];\n      for (let i = 0; i < raw.reactionKinds.length; i++) {\n        const k = raw.reactionKinds[i];\n        if (typeof k !== \"string\" || !KIND_RE.test(k)) {\n          errors.push({\n            field: `reactionKinds[${i}]`,\n            message: \"Each kind must match [a-z][a-z0-9_-]{0,29}\",\n          });\n          continue;\n        }\n        if (seen.has(k)) {\n          errors.push({ field: `reactionKinds[${i}]`, message: `Duplicate kind '${k}'` });\n          continue;\n        }\n        seen.add(k);\n        cleaned.push(k);\n      }\n      if (errors.length === 0) next = { ...next, reactionKinds: cleaned };\n    }\n  }\n\n  if (\"registrationEnabled\" in raw) {\n    if (typeof raw.registrationEnabled !== \"boolean\") {\n      errors.push({ field: \"registrationEnabled\", message: \"Must be a boolean\" });\n    } else {\n      next = { ...next, registrationEnabled: raw.registrationEnabled };\n    }\n  }\n\n  if (\"memberUploadQuota\" in raw) {\n    const q = raw.memberUploadQuota;\n    if (!q || typeof q !== \"object\" || Array.isArray(q)) {\n      errors.push({\n        field: \"memberUploadQuota\",\n        message: \"Must be an object with optional `perDay` / `total` keys\",\n      });\n    } else {\n      const obj = q as Record<string, unknown>;\n      const validateBound = (\n        key: \"perDay\" | \"total\",\n      ): number | null | undefined => {\n        if (!(key in obj)) return undefined; // not patched — keep current\n        const v = obj[key];\n        if (v === null) return null;\n        if (typeof v !== \"number\" || !Number.isFinite(v) || v < 0 || !Number.isInteger(v)) {\n          errors.push({\n            field: `memberUploadQuota.${key}`,\n            message: \"Must be a non-negative integer or null\",\n          });\n          return undefined;\n        }\n        if (v > MAX_QUOTA_VALUE) {\n          errors.push({\n            field: `memberUploadQuota.${key}`,\n            message: `At most ${MAX_QUOTA_VALUE}`,\n          });\n          return undefined;\n        }\n        return v;\n      };\n      const perDay = validateBound(\"perDay\");\n      const total = validateBound(\"total\");\n      if (perDay !== undefined || total !== undefined) {\n        next = {\n          ...next,\n          memberUploadQuota: {\n            perDay: perDay !== undefined ? perDay : next.memberUploadQuota.perDay,\n            total: total !== undefined ? total : next.memberUploadQuota.total,\n          },\n        };\n      }\n    }\n  }\n\n  if (errors.length > 0) throw new NpValidationError(\"Invalid input\", errors);\n  return next;\n}\n\nexport async function updateCommunitySettings(\n  patch: unknown,\n  updatedBy: string | null,\n): Promise<NpCommunitySettings> {\n  const current = await getCommunitySettings();\n  const next = validateCommunitySettingsPatch(current, patch);\n  const db = getDb();\n  // #272 — write: must NOT silently fall through. A staff member\n  // on tenant A who saves community settings without a resolved\n  // site context would otherwise overwrite the default tenant's\n  // policy — silently and across tenants.\n  const { requireSiteId } = await import(\"../sites/context.js\");\n  const siteId = await requireSiteId();\n  await db\n    .insert(npSettings)\n    .values({\n      siteId,\n      key: SETTINGS_KEY,\n      value: next,\n      updatedBy: updatedBy ?? null,\n      updatedAt: new Date(),\n    })\n    .onConflictDoUpdate({\n      target: [npSettings.siteId, npSettings.key],\n      set: {\n        value: next,\n        updatedBy: updatedBy ?? null,\n        updatedAt: new Date(),\n      },\n    });\n  return next;\n}\n"],"mappings":";;;;;;;;;;;AAAA,SAAS,KAAK,UAAU;AAoDjB,IAAM,6BAAkD;AAAA,EAC7D,eAAe,CAAC,MAAM;AAAA,EACtB,qBAAqB;AAAA,EACrB,mBAAmB,EAAE,QAAQ,MAAM,OAAO,KAAK;AACjD;AAEA,IAAM,eAAe;AACrB,IAAM,UAAU;AAChB,IAAM,qBAAqB;AAC3B,IAAM,kBAAkB;AAExB,SAAS,kBAAkB,QAAsC;AAC/D,MAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,GAAG;AAClE,WAAO,EAAE,GAAG,2BAA2B;AAAA,EACzC;AACA,QAAM,MAAM;AACZ,QAAM,gBACJ,MAAM,QAAQ,IAAI,aAAa,KAAK,IAAI,cAAc,MAAM,CAAC,MAAM,OAAO,MAAM,QAAQ,IACnF,IAAI,gBACL,2BAA2B;AACjC,QAAM,sBACJ,OAAO,IAAI,wBAAwB,YAC/B,IAAI,sBACJ,2BAA2B;AACjC,QAAM,oBAAoB,UAAU,IAAI,iBAAiB;AACzD,SAAO,EAAE,eAAe,qBAAqB,kBAAkB;AACjE;AAEA,SAAS,UAAU,KAAmC;AACpD,MAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,MAAM,QAAQ,GAAG,GAAG;AACzD,WAAO,EAAE,GAAG,2BAA2B,kBAAkB;AAAA,EAC3D;AACA,QAAM,IAAI;AACV,QAAM,SACJ,OAAO,EAAE,WAAW,YAAY,OAAO,SAAS,EAAE,MAAM,KAAK,EAAE,UAAU,IACrE,KAAK,MAAM,EAAE,MAAM,IACnB;AACN,QAAM,QACJ,OAAO,EAAE,UAAU,YAAY,OAAO,SAAS,EAAE,KAAK,KAAK,EAAE,SAAS,IAClE,KAAK,MAAM,EAAE,KAAK,IAClB;AACN,SAAO,EAAE,QAAQ,MAAM;AACzB;AAEA,eAAsB,uBAAqD;AACzE,QAAM,KAAK,MAAM;AACjB,QAAM,EAAE,iBAAiB,IAAI,MAAM,OAAO,uBAAqB;AAC/D,QAAM,EAAE,mBAAmB,IAAI,MAAM,OAAO,wBAAsB;AAClE,QAAM,SAAU,MAAM,iBAAiB,KAAM;AAC7C,QAAM,CAAC,GAAG,IAAK,MAAM,GAClB,OAAO,EACP,KAAK,UAAU,EACf,MAAM,IAAI,GAAG,WAAW,QAAQ,MAAM,GAAG,GAAG,WAAW,KAAK,YAAY,CAAC,CAAC,EAC1E,MAAM,CAAC;AACV,SAAO,kBAAkB,KAAK,KAAK;AACrC;AAOO,SAAS,+BACd,SACA,OACqB;AACrB,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAAG;AAC/D,UAAM,IAAI,kBAAkB,iBAAiB;AAAA,MAC3C,EAAE,OAAO,QAAQ,SAAS,6BAA6B;AAAA,IACzD,CAAC;AAAA,EACH;AACA,QAAM,MAAM;AACZ,QAAM,SAAoD,CAAC;AAC3D,MAAI,OAA4B,EAAE,GAAG,QAAQ;AAE7C,MAAI,mBAAmB,KAAK;AAC1B,QAAI,CAAC,MAAM,QAAQ,IAAI,aAAa,GAAG;AACrC,aAAO,KAAK,EAAE,OAAO,iBAAiB,SAAS,8BAA8B,CAAC;AAAA,IAChF,WAAW,IAAI,cAAc,WAAW,GAAG;AAGzC,aAAO,EAAE,GAAG,MAAM,eAAe,CAAC,EAAE;AAAA,IACtC,WAAW,IAAI,cAAc,SAAS,oBAAoB;AACxD,aAAO,KAAK;AAAA,QACV,OAAO;AAAA,QACP,SAAS,WAAW,kBAAkB;AAAA,MACxC,CAAC;AAAA,IACH,OAAO;AACL,YAAM,OAAO,oBAAI,IAAY;AAC7B,YAAM,UAAoB,CAAC;AAC3B,eAAS,IAAI,GAAG,IAAI,IAAI,cAAc,QAAQ,KAAK;AACjD,cAAM,IAAI,IAAI,cAAc,CAAC;AAC7B,YAAI,OAAO,MAAM,YAAY,CAAC,QAAQ,KAAK,CAAC,GAAG;AAC7C,iBAAO,KAAK;AAAA,YACV,OAAO,iBAAiB,CAAC;AAAA,YACzB,SAAS;AAAA,UACX,CAAC;AACD;AAAA,QACF;AACA,YAAI,KAAK,IAAI,CAAC,GAAG;AACf,iBAAO,KAAK,EAAE,OAAO,iBAAiB,CAAC,KAAK,SAAS,mBAAmB,CAAC,IAAI,CAAC;AAC9E;AAAA,QACF;AACA,aAAK,IAAI,CAAC;AACV,gBAAQ,KAAK,CAAC;AAAA,MAChB;AACA,UAAI,OAAO,WAAW,EAAG,QAAO,EAAE,GAAG,MAAM,eAAe,QAAQ;AAAA,IACpE;AAAA,EACF;AAEA,MAAI,yBAAyB,KAAK;AAChC,QAAI,OAAO,IAAI,wBAAwB,WAAW;AAChD,aAAO,KAAK,EAAE,OAAO,uBAAuB,SAAS,oBAAoB,CAAC;AAAA,IAC5E,OAAO;AACL,aAAO,EAAE,GAAG,MAAM,qBAAqB,IAAI,oBAAoB;AAAA,IACjE;AAAA,EACF;AAEA,MAAI,uBAAuB,KAAK;AAC9B,UAAM,IAAI,IAAI;AACd,QAAI,CAAC,KAAK,OAAO,MAAM,YAAY,MAAM,QAAQ,CAAC,GAAG;AACnD,aAAO,KAAK;AAAA,QACV,OAAO;AAAA,QACP,SAAS;AAAA,MACX,CAAC;AAAA,IACH,OAAO;AACL,YAAM,MAAM;AACZ,YAAM,gBAAgB,CACpB,QAC8B;AAC9B,YAAI,EAAE,OAAO,KAAM,QAAO;AAC1B,cAAM,IAAI,IAAI,GAAG;AACjB,YAAI,MAAM,KAAM,QAAO;AACvB,YAAI,OAAO,MAAM,YAAY,CAAC,OAAO,SAAS,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,UAAU,CAAC,GAAG;AACjF,iBAAO,KAAK;AAAA,YACV,OAAO,qBAAqB,GAAG;AAAA,YAC/B,SAAS;AAAA,UACX,CAAC;AACD,iBAAO;AAAA,QACT;AACA,YAAI,IAAI,iBAAiB;AACvB,iBAAO,KAAK;AAAA,YACV,OAAO,qBAAqB,GAAG;AAAA,YAC/B,SAAS,WAAW,eAAe;AAAA,UACrC,CAAC;AACD,iBAAO;AAAA,QACT;AACA,eAAO;AAAA,MACT;AACA,YAAM,SAAS,cAAc,QAAQ;AACrC,YAAM,QAAQ,cAAc,OAAO;AACnC,UAAI,WAAW,UAAa,UAAU,QAAW;AAC/C,eAAO;AAAA,UACL,GAAG;AAAA,UACH,mBAAmB;AAAA,YACjB,QAAQ,WAAW,SAAY,SAAS,KAAK,kBAAkB;AAAA,YAC/D,OAAO,UAAU,SAAY,QAAQ,KAAK,kBAAkB;AAAA,UAC9D;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,MAAI,OAAO,SAAS,EAAG,OAAM,IAAI,kBAAkB,iBAAiB,MAAM;AAC1E,SAAO;AACT;AAEA,eAAsB,wBACpB,OACA,WAC8B;AAC9B,QAAM,UAAU,MAAM,qBAAqB;AAC3C,QAAM,OAAO,+BAA+B,SAAS,KAAK;AAC1D,QAAM,KAAK,MAAM;AAKjB,QAAM,EAAE,cAAc,IAAI,MAAM,OAAO,uBAAqB;AAC5D,QAAM,SAAS,MAAM,cAAc;AACnC,QAAM,GACH,OAAO,UAAU,EACjB,OAAO;AAAA,IACN;AAAA,IACA,KAAK;AAAA,IACL,OAAO;AAAA,IACP,WAAW,aAAa;AAAA,IACxB,WAAW,oBAAI,KAAK;AAAA,EACtB,CAAC,EACA,mBAAmB;AAAA,IAClB,QAAQ,CAAC,WAAW,QAAQ,WAAW,GAAG;AAAA,IAC1C,KAAK;AAAA,MACH,OAAO;AAAA,MACP,WAAW,aAAa;AAAA,MACxB,WAAW,oBAAI,KAAK;AAAA,IACtB;AAAA,EACF,CAAC;AACH,SAAO;AACT;","names":[]}

package/dist/{chunk-HNX7COHQ.js → chunk-6PFUXZJ6.js}

@@ -2,18 +2,18 @@ import {
   getCommunityRole,
   memberCan,
   withMemberWrite
-} from "./chunk-RJ76SKWQ.js";
+} from "./chunk-XU2GJJ6Z.js";
 import {
   getMutedTargetIds
-} from "./chunk-WJJ5MBH5.js";
+} from "./chunk-YEOQJ7WW.js";
 import {
   createNotification,
   extractMentionHandles,
   fanOutMentionNotifications
-} from "./chunk-RDTTK27V.js";
+} from "./chunk-XPD7EQML.js";
 import {
   applyReputation
-} from "./chunk-L6VG7IK6.js";
+} from "./chunk-VBVLYFSZ.js";
 import {
   getSpamAdapter
 } from "./chunk-JKXAPSU4.js";
@@ -22,26 +22,26 @@ import {
 } from "./chunk-KU5M27ZC.js";
 import {
   getMediaUrl
-} from "./chunk-2N53KKIL.js";
+} from "./chunk-EWVXP3GP.js";
 import {
   buildWeightedSearchVectorSql,
   deleteDocument,
   findDocuments,
   getDocumentById,
   saveDocument
-} from "./chunk-MLXKZK6G.js";
+} from "./chunk-CD74WQK7.js";
 import {
   deleteMedia
-} from "./chunk-2VZZ7M26.js";
+} from "./chunk-EAYUAXW3.js";
 import {
   can
 } from "./chunk-EQ2Z3KMD.js";
 import {
   recordAuditEvent
-} from "./chunk-ML2E3P3X.js";
+} from "./chunk-5C22NDW4.js";
 import {
   getCommunitySettings
-} from "./chunk-RKM4GDWM.js";
+} from "./chunk-6MRTH734.js";
 import {
   getI18nConfig
 } from "./chunk-4ZLMEKFX.js";
@@ -64,7 +64,7 @@ import {
 } from "./chunk-ZCINJSS4.js";
 import {
   getLogger
-} from "./chunk-NFHS7CFV.js";
+} from "./chunk-Q7MK5ZKG.js";
 import {
   getDb
 } from "./chunk-XANPEOJC.js";
@@ -1587,7 +1587,7 @@ async function searchCollections(opts) {
       });
       if (adapterResult) return adapterResult;
     } catch (err) {
-      const { getLogger: getLogger2 } = await import("./logger-2WUTTELV.js");
+      const { getLogger: getLogger2 } = await import("./logger-6ZGEKEMK.js");
       getLogger2().warn("search adapter threw \u2014 falling back to pg tsvector", {
         error: err instanceof Error ? err.message : String(err)
       });
@@ -1956,4 +1956,4 @@ export {
   revokeMemberRole,
   purgeMemberContent
 };
-//# sourceMappingURL=chunk-HNX7COHQ.js.map
+//# sourceMappingURL=chunk-6PFUXZJ6.js.map