@open-mercato/core 0.6.7-develop.6863.1.61001cf9a8 → 0.6.7

package/dist/modules/attachments/lib/quota-service.js

@@ -1,224 +0,0 @@
-import { randomUUID } from "node:crypto";
-import { sql } from "kysely";
-import { AttachmentQuotaReservation } from "../data/entities.js";
-import { resolveAttachmentTenantQuotaBytes } from "./upload-limits.js";
-const DEFAULT_RESERVATION_TTL_MS = 15 * 60 * 1e3;
-class AttachmentQuotaError extends Error {
-  constructor(code, message) {
-    super(message);
-    this.code = code;
-    this.name = "AttachmentQuotaError";
-  }
-}
-function parseUsage(value) {
-  if (typeof value === "number" && Number.isFinite(value) && value >= 0) return value;
-  if (typeof value === "string" && value.trim() !== "") {
-    const parsed = Number(value);
-    if (Number.isFinite(parsed) && parsed >= 0) return parsed;
-  }
-  throw new AttachmentQuotaError("quota_accounting_unavailable", "Storage quota accounting returned an invalid value.");
-}
-function isUniqueViolation(error) {
-  return Boolean(error && typeof error === "object" && "code" in error && error.code === "23505");
-}
-function changedRow(result) {
-  if (Array.isArray(result)) return result.length > 0;
-  if (!result || typeof result !== "object") return false;
-  if ("id" in result) return true;
-  if ("numUpdatedRows" in result) return Number(result.numUpdatedRows ?? 0) > 0;
-  if ("numDeletedRows" in result) return Number(result.numDeletedRows ?? 0) > 0;
-  return false;
-}
-function mapReservationRow(row) {
-  return {
-    id: String(row.id),
-    tenantId: String(row.tenant_id),
-    organizationId: String(row.organization_id),
-    reservedBytes: parseUsage(row.reserved_bytes),
-    actualBytes: row.actual_bytes == null ? null : parseUsage(row.actual_bytes),
-    status: row.status,
-    source: row.source,
-    storageDriver: String(row.storage_driver),
-    partitionCode: row.partition_code == null ? null : String(row.partition_code),
-    storagePath: String(row.storage_path),
-    leaseToken: String(row.lease_token),
-    uploadTokenHash: row.upload_token_hash == null ? null : String(row.upload_token_hash),
-    expiresAt: row.expires_at == null ? null : new Date(row.expires_at)
-  };
-}
-class AttachmentQuotaService {
-  constructor(em) {
-    this.em = em;
-  }
-  async reserve(input) {
-    if (!Number.isSafeInteger(input.bytes) || input.bytes < 0) {
-      throw new AttachmentQuotaError("quota_accounting_unavailable", "Reservation bytes must be a non-negative safe integer.");
-    }
-    const id = randomUUID();
-    const leaseToken = randomUUID();
-    const expiresAt = new Date(Date.now() + Math.max(1e3, input.ttlMs ?? DEFAULT_RESERVATION_TTL_MS));
-    try {
-      await this.em.transactional(async (tx) => {
-        const db = tx.getKysely();
-        await sql`select pg_advisory_xact_lock(hashtextextended(${`attachment-quota:${input.tenantId}`}, 0))`.execute(db);
-        const attachmentUsage = await db.selectFrom("attachments").select(sql`coalesce(sum(file_size), 0)`.as("total_size")).where("tenant_id", "=", input.tenantId).executeTakeFirst();
-        const ledgerUsage = await db.selectFrom("attachment_quota_reservations").select(
-          sql`coalesce(sum(case when status = 'committed' then actual_bytes else reserved_bytes end), 0)`.as("total_size")
-        ).where("tenant_id", "=", input.tenantId).executeTakeFirst();
-        const usedBytes = parseUsage(attachmentUsage?.total_size) + parseUsage(ledgerUsage?.total_size);
-        if (usedBytes + input.bytes > resolveAttachmentTenantQuotaBytes()) {
-          throw new AttachmentQuotaError("quota_exceeded", "Attachment storage quota exceeded for this tenant.");
-        }
-        const reservation = tx.create(AttachmentQuotaReservation, {
-          id,
-          tenantId: input.tenantId,
-          organizationId: input.organizationId,
-          reservedBytes: input.bytes,
-          actualBytes: null,
-          status: "reserved",
-          source: input.source,
-          storageDriver: input.storageDriver,
-          partitionCode: input.partitionCode ?? null,
-          storagePath: input.storagePath,
-          leaseToken,
-          uploadTokenHash: input.uploadTokenHash ?? null,
-          expiresAt
-        });
-        await tx.persist(reservation).flush();
-      });
-    } catch (error) {
-      if (error instanceof AttachmentQuotaError) throw error;
-      if (isUniqueViolation(error)) {
-        throw new AttachmentQuotaError("quota_target_exists", "The target storage path already has an active allocation.");
-      }
-      throw new AttachmentQuotaError("quota_accounting_unavailable", "Storage quota accounting is unavailable.");
-    }
-    return { id, leaseToken, expiresAt };
-  }
-  async beginStorage(id, leaseToken, ttlMs = DEFAULT_RESERVATION_TTL_MS) {
-    await this.transition(id, leaseToken, "reserved", "storing", {
-      expires_at: new Date(Date.now() + Math.max(1e3, ttlMs))
-    });
-  }
-  async markStored(id, leaseToken) {
-    await this.transition(id, leaseToken, "storing", "stored");
-  }
-  async completeAttachment(id, leaseToken, manager = this.em) {
-    const db = manager.getKysely();
-    const result = await db.deleteFrom("attachment_quota_reservations").where("id", "=", id).where("lease_token", "=", leaseToken).where("status", "=", "stored").returning("id").executeTakeFirst();
-    if (!changedRow(result)) throw new AttachmentQuotaError("quota_lease_lost", "The upload reservation lease was lost.");
-  }
-  async completeStandalone(id, leaseToken, actualBytes) {
-    if (!Number.isSafeInteger(actualBytes) || actualBytes < 0) {
-      throw new AttachmentQuotaError("quota_accounting_unavailable", "Actual bytes must be a non-negative safe integer.");
-    }
-    const db = this.em.getKysely();
-    const result = await db.updateTable("attachment_quota_reservations").set({ status: "committed", actual_bytes: actualBytes, expires_at: null, upload_token_hash: null, updated_at: /* @__PURE__ */ new Date() }).where("id", "=", id).where("lease_token", "=", leaseToken).where("status", "=", "stored").where("reserved_bytes", ">=", actualBytes).returning("id").executeTakeFirst();
-    if (!changedRow(result)) throw new AttachmentQuotaError("quota_lease_lost", "The upload reservation lease was lost.");
-  }
-  async release(id, leaseToken) {
-    const db = this.em.getKysely();
-    let query = db.deleteFrom("attachment_quota_reservations").where("id", "=", id).where("status", "!=", "committed");
-    if (leaseToken) query = query.where("lease_token", "=", leaseToken);
-    await query.execute();
-  }
-  async releaseCommittedByPath(input) {
-    const db = this.em.getKysely();
-    await db.deleteFrom("attachment_quota_reservations").where("tenant_id", "=", input.tenantId).where("storage_driver", "=", input.storageDriver).where("storage_path", "=", input.storagePath).where("status", "=", "committed").execute();
-  }
-  async findPendingByUploadTokenHash(uploadTokenHash) {
-    const db = this.em.getKysely();
-    const row = await db.selectFrom("attachment_quota_reservations").selectAll().where("upload_token_hash", "=", uploadTokenHash).where("status", "=", "reserved").where("expires_at", ">", /* @__PURE__ */ new Date()).executeTakeFirst();
-    if (!row) return null;
-    return mapReservationRow(row);
-  }
-  async claimPendingByUploadTokenHash(uploadTokenHash, ttlMs = DEFAULT_RESERVATION_TTL_MS) {
-    const db = this.em.getKysely();
-    const leaseToken = randomUUID();
-    const row = await db.updateTable("attachment_quota_reservations").set({
-      status: "storing",
-      lease_token: leaseToken,
-      expires_at: new Date(Date.now() + Math.max(1e3, ttlMs)),
-      updated_at: /* @__PURE__ */ new Date()
-    }).where("upload_token_hash", "=", uploadTokenHash).where("status", "=", "reserved").where("expires_at", ">", /* @__PURE__ */ new Date()).returningAll().executeTakeFirst();
-    return row ? mapReservationRow(row) : null;
-  }
-  async getReservation(id, scope) {
-    const db = this.em.getKysely();
-    const row = await db.selectFrom("attachment_quota_reservations").selectAll().where("id", "=", id).where("tenant_id", "=", scope.tenantId).where("organization_id", "=", scope.organizationId).executeTakeFirst();
-    return row ? mapReservationRow(row) : null;
-  }
-  async claimExpired(id, scope, recoveryTtlMs = DEFAULT_RESERVATION_TTL_MS) {
-    const db = this.em.getKysely();
-    const leaseToken = randomUUID();
-    const row = await db.updateTable("attachment_quota_reservations").set({
-      status: "recovering",
-      lease_token: leaseToken,
-      expires_at: new Date(Date.now() + Math.max(1e3, recoveryTtlMs)),
-      updated_at: /* @__PURE__ */ new Date()
-    }).where("id", "=", id).where("tenant_id", "=", scope.tenantId).where("organization_id", "=", scope.organizationId).where("status", "in", ["reserved", "storing", "stored", "recovering"]).where("expires_at", "<=", /* @__PURE__ */ new Date()).returningAll().executeTakeFirst();
-    return row ? mapReservationRow(row) : null;
-  }
-  async commitRecoveredStandalone(id, leaseToken, actualBytes) {
-    const db = this.em.getKysely();
-    const result = await db.updateTable("attachment_quota_reservations").set({ status: "committed", actual_bytes: actualBytes, expires_at: null, upload_token_hash: null, updated_at: /* @__PURE__ */ new Date() }).where("id", "=", id).where("lease_token", "=", leaseToken).where("status", "=", "recovering").where("reserved_bytes", ">=", actualBytes).returning("id").executeTakeFirst();
-    if (!changedRow(result)) throw new AttachmentQuotaError("quota_lease_lost", "The recovery reservation lease was lost.");
-  }
-  async reconcileStandaloneObjects(input) {
-    const uniqueObjects = Array.from(new Map(input.objects.map((object) => [object.path, object])).values());
-    for (const object of uniqueObjects) {
-      if (!Number.isSafeInteger(object.bytes) || object.bytes < 0) {
-        throw new AttachmentQuotaError("quota_accounting_unavailable", "Standalone storage accounting returned an invalid size.");
-      }
-    }
-    const db = this.em.getKysely();
-    for (let offset = 0; offset < uniqueObjects.length; offset += 500) {
-      const batch = uniqueObjects.slice(offset, offset + 500);
-      const paths = batch.map((object) => object.path);
-      if (paths.length === 0) continue;
-      const attachmentRows = await db.selectFrom("attachments").select("storage_path").where("tenant_id", "=", input.tenantId).where("storage_driver", "=", input.storageDriver).where("storage_path", "in", paths).execute();
-      const attachmentPaths = new Set(attachmentRows.map((row) => String(row.storage_path)));
-      const ledgerRows = await db.selectFrom("attachment_quota_reservations").select(["storage_path", "status"]).where("tenant_id", "=", input.tenantId).where("storage_driver", "=", input.storageDriver).where("storage_path", "in", paths).execute();
-      const ledgerPaths = new Set(ledgerRows.map((row) => String(row.storage_path)));
-      const doubleCountedPaths = ledgerRows.filter((row) => row.status === "committed" && attachmentPaths.has(String(row.storage_path))).map((row) => String(row.storage_path));
-      if (doubleCountedPaths.length > 0) {
-        await db.deleteFrom("attachment_quota_reservations").where("tenant_id", "=", input.tenantId).where("storage_driver", "=", input.storageDriver).where("storage_path", "in", doubleCountedPaths).where("status", "=", "committed").execute();
-      }
-      for (const object of batch) {
-        if (attachmentPaths.has(object.path) || ledgerPaths.has(object.path)) continue;
-        await sql`
-          insert into attachment_quota_reservations (
-            id, tenant_id, organization_id, reserved_bytes, actual_bytes, status, source,
-            storage_driver, partition_code, storage_path, lease_token, upload_token_hash,
-            expires_at, created_at, updated_at
-          )
-          select ${randomUUID()}::uuid, ${input.tenantId}::uuid, ${input.organizationId}::uuid,
-            ${object.bytes}::bigint, ${object.bytes}::bigint, 'committed', 'storage_s3_upload',
-            ${input.storageDriver}, null, ${object.path}, ${randomUUID()}::uuid, null,
-            null, now(), now()
-          where not exists (
-            select 1 from attachments
-            where tenant_id = ${input.tenantId}::uuid
-              and storage_driver = ${input.storageDriver}
-              and storage_path = ${object.path}
-          )
-          on conflict (tenant_id, storage_driver, storage_path) do nothing
-        `.execute(db);
-      }
-    }
-  }
-  async transition(id, leaseToken, from, to, extra = {}) {
-    const db = this.em.getKysely();
-    const result = await db.updateTable("attachment_quota_reservations").set({ status: to, updated_at: /* @__PURE__ */ new Date(), ...extra }).where("id", "=", id).where("lease_token", "=", leaseToken).where("status", "=", from).returning("id").executeTakeFirst();
-    if (!changedRow(result)) throw new AttachmentQuotaError("quota_lease_lost", "The upload reservation lease was lost.");
-  }
-}
-function createAttachmentQuotaService(em) {
-  return new AttachmentQuotaService(em);
-}
-export {
-  AttachmentQuotaError,
-  AttachmentQuotaService,
-  createAttachmentQuotaService
-};
-//# sourceMappingURL=quota-service.js.map

package/dist/modules/attachments/lib/quota-service.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/attachments/lib/quota-service.ts"],
-  "sourcesContent": ["import { randomUUID } from 'node:crypto'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { sql } from 'kysely'\nimport { AttachmentQuotaReservation } from '../data/entities'\nimport { resolveAttachmentTenantQuotaBytes } from './upload-limits'\n\nconst DEFAULT_RESERVATION_TTL_MS = 15 * 60 * 1000\n\nexport type AttachmentQuotaSource =\n  | 'attachment'\n  | 'storage_s3_upload'\n  | 'storage_s3_signed'\n  | 'storage_service'\n\nexport type AttachmentQuotaReservationHandle = {\n  id: string\n  leaseToken: string\n  expiresAt: Date\n}\n\nexport type AttachmentQuotaReservationRecord = {\n  id: string\n  tenantId: string\n  organizationId: string\n  reservedBytes: number\n  actualBytes: number | null\n  status: 'reserved' | 'storing' | 'stored' | 'recovering' | 'committed'\n  source: AttachmentQuotaSource\n  storageDriver: string\n  partitionCode: string | null\n  storagePath: string\n  leaseToken: string\n  uploadTokenHash: string | null\n  expiresAt: Date | null\n}\n\ntype AttachmentQuotaReservationRow = {\n  id: string\n  tenant_id: string\n  organization_id: string\n  reserved_bytes: unknown\n  actual_bytes: unknown | null\n  status: AttachmentQuotaReservationRecord['status']\n  source: AttachmentQuotaSource\n  storage_driver: string\n  partition_code: string | null\n  storage_path: string\n  lease_token: string\n  upload_token_hash: string | null\n  expires_at: Date | string | null\n  created_at: Date\n  updated_at: Date\n}\n\ntype AttachmentUsageRow = {\n  id: string\n  tenant_id: string\n  storage_driver: string\n  storage_path: string\n  file_size: unknown\n}\n\ntype AttachmentQuotaDatabase = {\n  attachments: AttachmentUsageRow\n  attachment_quota_reservations: AttachmentQuotaReservationRow\n}\n\nexport class AttachmentQuotaError extends Error {\n  constructor(\n    public readonly code:\n      | 'quota_exceeded'\n      | 'quota_accounting_unavailable'\n      | 'quota_target_exists'\n      | 'quota_lease_lost',\n    message: string,\n  ) {\n    super(message)\n    this.name = 'AttachmentQuotaError'\n  }\n}\n\nfunction parseUsage(value: unknown): number {\n  if (typeof value === 'number' && Number.isFinite(value) && value >= 0) return value\n  if (typeof value === 'string' && value.trim() !== '') {\n    const parsed = Number(value)\n    if (Number.isFinite(parsed) && parsed >= 0) return parsed\n  }\n  throw new AttachmentQuotaError('quota_accounting_unavailable', 'Storage quota accounting returned an invalid value.')\n}\n\nfunction isUniqueViolation(error: unknown): boolean {\n  return Boolean(error && typeof error === 'object' && 'code' in error && error.code === '23505')\n}\n\nfunction changedRow(result: unknown): boolean {\n  if (Array.isArray(result)) return result.length > 0\n  if (!result || typeof result !== 'object') return false\n  if ('id' in result) return true\n  if ('numUpdatedRows' in result) return Number((result as { numUpdatedRows?: unknown }).numUpdatedRows ?? 0) > 0\n  if ('numDeletedRows' in result) return Number((result as { numDeletedRows?: unknown }).numDeletedRows ?? 0) > 0\n  return false\n}\n\nfunction mapReservationRow(row: AttachmentQuotaReservationRow): AttachmentQuotaReservationRecord {\n  return {\n    id: String(row.id),\n    tenantId: String(row.tenant_id),\n    organizationId: String(row.organization_id),\n    reservedBytes: parseUsage(row.reserved_bytes),\n    actualBytes: row.actual_bytes == null ? null : parseUsage(row.actual_bytes),\n    status: row.status,\n    source: row.source,\n    storageDriver: String(row.storage_driver),\n    partitionCode: row.partition_code == null ? null : String(row.partition_code),\n    storagePath: String(row.storage_path),\n    leaseToken: String(row.lease_token),\n    uploadTokenHash: row.upload_token_hash == null ? null : String(row.upload_token_hash),\n    expiresAt: row.expires_at == null ? null : new Date(row.expires_at),\n  }\n}\n\nexport class AttachmentQuotaService {\n  constructor(private readonly em: EntityManager) {}\n\n  async reserve(input: {\n    tenantId: string\n    organizationId: string\n    bytes: number\n    source: AttachmentQuotaSource\n    storageDriver: string\n    storagePath: string\n    partitionCode?: string | null\n    uploadTokenHash?: string | null\n    ttlMs?: number\n  }): Promise<AttachmentQuotaReservationHandle> {\n    if (!Number.isSafeInteger(input.bytes) || input.bytes < 0) {\n      throw new AttachmentQuotaError('quota_accounting_unavailable', 'Reservation bytes must be a non-negative safe integer.')\n    }\n    const id = randomUUID()\n    const leaseToken = randomUUID()\n    const expiresAt = new Date(Date.now() + Math.max(1_000, input.ttlMs ?? DEFAULT_RESERVATION_TTL_MS))\n\n    try {\n      await this.em.transactional(async (tx) => {\n        const db = tx.getKysely<AttachmentQuotaDatabase>()\n        await sql`select pg_advisory_xact_lock(hashtextextended(${`attachment-quota:${input.tenantId}`}, 0))`.execute(db)\n\n        const attachmentUsage = await db\n          .selectFrom('attachments')\n          .select(sql<string>`coalesce(sum(file_size), 0)`.as('total_size'))\n          .where('tenant_id', '=', input.tenantId)\n          .executeTakeFirst()\n        const ledgerUsage = await db\n          .selectFrom('attachment_quota_reservations')\n          .select(\n            sql<string>`coalesce(sum(case when status = 'committed' then actual_bytes else reserved_bytes end), 0)`.as('total_size'),\n          )\n          .where('tenant_id', '=', input.tenantId)\n          .executeTakeFirst()\n\n        const usedBytes = parseUsage(attachmentUsage?.total_size) + parseUsage(ledgerUsage?.total_size)\n        if (usedBytes + input.bytes > resolveAttachmentTenantQuotaBytes()) {\n          throw new AttachmentQuotaError('quota_exceeded', 'Attachment storage quota exceeded for this tenant.')\n        }\n\n        const reservation = tx.create(AttachmentQuotaReservation, {\n          id,\n          tenantId: input.tenantId,\n          organizationId: input.organizationId,\n          reservedBytes: input.bytes,\n          actualBytes: null,\n          status: 'reserved',\n          source: input.source,\n          storageDriver: input.storageDriver,\n          partitionCode: input.partitionCode ?? null,\n          storagePath: input.storagePath,\n          leaseToken,\n          uploadTokenHash: input.uploadTokenHash ?? null,\n          expiresAt,\n        })\n        await tx.persist(reservation).flush()\n      })\n    } catch (error) {\n      if (error instanceof AttachmentQuotaError) throw error\n      if (isUniqueViolation(error)) {\n        throw new AttachmentQuotaError('quota_target_exists', 'The target storage path already has an active allocation.')\n      }\n      throw new AttachmentQuotaError('quota_accounting_unavailable', 'Storage quota accounting is unavailable.')\n    }\n\n    return { id, leaseToken, expiresAt }\n  }\n\n  async beginStorage(id: string, leaseToken: string, ttlMs = DEFAULT_RESERVATION_TTL_MS): Promise<void> {\n    await this.transition(id, leaseToken, 'reserved', 'storing', {\n      expires_at: new Date(Date.now() + Math.max(1_000, ttlMs)),\n    })\n  }\n\n  async markStored(id: string, leaseToken: string): Promise<void> {\n    await this.transition(id, leaseToken, 'storing', 'stored')\n  }\n\n  async completeAttachment(id: string, leaseToken: string, manager: EntityManager = this.em): Promise<void> {\n    const db = manager.getKysely<AttachmentQuotaDatabase>()\n    const result = await db\n      .deleteFrom('attachment_quota_reservations')\n      .where('id', '=', id)\n      .where('lease_token', '=', leaseToken)\n      .where('status', '=', 'stored')\n      .returning('id')\n      .executeTakeFirst()\n    if (!changedRow(result)) throw new AttachmentQuotaError('quota_lease_lost', 'The upload reservation lease was lost.')\n  }\n\n  async completeStandalone(id: string, leaseToken: string, actualBytes: number): Promise<void> {\n    if (!Number.isSafeInteger(actualBytes) || actualBytes < 0) {\n      throw new AttachmentQuotaError('quota_accounting_unavailable', 'Actual bytes must be a non-negative safe integer.')\n    }\n    const db = this.em.getKysely<AttachmentQuotaDatabase>()\n    const result = await db\n      .updateTable('attachment_quota_reservations')\n      .set({ status: 'committed', actual_bytes: actualBytes, expires_at: null, upload_token_hash: null, updated_at: new Date() })\n      .where('id', '=', id)\n      .where('lease_token', '=', leaseToken)\n      .where('status', '=', 'stored')\n      .where('reserved_bytes', '>=', actualBytes)\n      .returning('id')\n      .executeTakeFirst()\n    if (!changedRow(result)) throw new AttachmentQuotaError('quota_lease_lost', 'The upload reservation lease was lost.')\n  }\n\n  async release(id: string, leaseToken?: string): Promise<void> {\n    const db = this.em.getKysely<AttachmentQuotaDatabase>()\n    let query = db\n      .deleteFrom('attachment_quota_reservations')\n      .where('id', '=', id)\n      .where('status', '!=', 'committed')\n    if (leaseToken) query = query.where('lease_token', '=', leaseToken)\n    await query.execute()\n  }\n\n  async releaseCommittedByPath(input: {\n    tenantId: string\n    storageDriver: string\n    storagePath: string\n  }): Promise<void> {\n    const db = this.em.getKysely<AttachmentQuotaDatabase>()\n    await db\n      .deleteFrom('attachment_quota_reservations')\n      .where('tenant_id', '=', input.tenantId)\n      .where('storage_driver', '=', input.storageDriver)\n      .where('storage_path', '=', input.storagePath)\n      .where('status', '=', 'committed')\n      .execute()\n  }\n\n  async findPendingByUploadTokenHash(uploadTokenHash: string): Promise<AttachmentQuotaReservationRecord | null> {\n    const db = this.em.getKysely<AttachmentQuotaDatabase>()\n    const row = await db\n      .selectFrom('attachment_quota_reservations')\n      .selectAll()\n      .where('upload_token_hash', '=', uploadTokenHash)\n      .where('status', '=', 'reserved')\n      .where('expires_at', '>', new Date())\n      .executeTakeFirst()\n    if (!row) return null\n    return mapReservationRow(row)\n  }\n\n  async claimPendingByUploadTokenHash(\n    uploadTokenHash: string,\n    ttlMs = DEFAULT_RESERVATION_TTL_MS,\n  ): Promise<AttachmentQuotaReservationRecord | null> {\n    const db = this.em.getKysely<AttachmentQuotaDatabase>()\n    const leaseToken = randomUUID()\n    const row = await db\n      .updateTable('attachment_quota_reservations')\n      .set({\n        status: 'storing',\n        lease_token: leaseToken,\n        expires_at: new Date(Date.now() + Math.max(1_000, ttlMs)),\n        updated_at: new Date(),\n      })\n      .where('upload_token_hash', '=', uploadTokenHash)\n      .where('status', '=', 'reserved')\n      .where('expires_at', '>', new Date())\n      .returningAll()\n      .executeTakeFirst()\n    return row ? mapReservationRow(row) : null\n  }\n\n  async getReservation(\n    id: string,\n    scope: { tenantId: string; organizationId: string },\n  ): Promise<AttachmentQuotaReservationRecord | null> {\n    const db = this.em.getKysely<AttachmentQuotaDatabase>()\n    const row = await db\n      .selectFrom('attachment_quota_reservations')\n      .selectAll()\n      .where('id', '=', id)\n      .where('tenant_id', '=', scope.tenantId)\n      .where('organization_id', '=', scope.organizationId)\n      .executeTakeFirst()\n    return row ? mapReservationRow(row) : null\n  }\n\n  async claimExpired(\n    id: string,\n    scope: { tenantId: string; organizationId: string },\n    recoveryTtlMs = DEFAULT_RESERVATION_TTL_MS,\n  ): Promise<AttachmentQuotaReservationRecord | null> {\n    const db = this.em.getKysely<AttachmentQuotaDatabase>()\n    const leaseToken = randomUUID()\n    const row = await db\n      .updateTable('attachment_quota_reservations')\n      .set({\n        status: 'recovering',\n        lease_token: leaseToken,\n        expires_at: new Date(Date.now() + Math.max(1_000, recoveryTtlMs)),\n        updated_at: new Date(),\n      })\n      .where('id', '=', id)\n      .where('tenant_id', '=', scope.tenantId)\n      .where('organization_id', '=', scope.organizationId)\n      .where('status', 'in', ['reserved', 'storing', 'stored', 'recovering'])\n      .where('expires_at', '<=', new Date())\n      .returningAll()\n      .executeTakeFirst()\n    return row ? mapReservationRow(row) : null\n  }\n\n  async commitRecoveredStandalone(id: string, leaseToken: string, actualBytes: number): Promise<void> {\n    const db = this.em.getKysely<AttachmentQuotaDatabase>()\n    const result = await db\n      .updateTable('attachment_quota_reservations')\n      .set({ status: 'committed', actual_bytes: actualBytes, expires_at: null, upload_token_hash: null, updated_at: new Date() })\n      .where('id', '=', id)\n      .where('lease_token', '=', leaseToken)\n      .where('status', '=', 'recovering')\n      .where('reserved_bytes', '>=', actualBytes)\n      .returning('id')\n      .executeTakeFirst()\n    if (!changedRow(result)) throw new AttachmentQuotaError('quota_lease_lost', 'The recovery reservation lease was lost.')\n  }\n\n  async reconcileStandaloneObjects(input: {\n    tenantId: string\n    organizationId: string\n    storageDriver: string\n    objects: Array<{ path: string; bytes: number }>\n  }): Promise<void> {\n    const uniqueObjects = Array.from(new Map(input.objects.map((object) => [object.path, object])).values())\n    for (const object of uniqueObjects) {\n      if (!Number.isSafeInteger(object.bytes) || object.bytes < 0) {\n        throw new AttachmentQuotaError('quota_accounting_unavailable', 'Standalone storage accounting returned an invalid size.')\n      }\n    }\n    const db = this.em.getKysely<AttachmentQuotaDatabase>()\n    for (let offset = 0; offset < uniqueObjects.length; offset += 500) {\n      const batch = uniqueObjects.slice(offset, offset + 500)\n      const paths = batch.map((object) => object.path)\n      if (paths.length === 0) continue\n\n      const attachmentRows = await db\n        .selectFrom('attachments')\n        .select('storage_path')\n        .where('tenant_id', '=', input.tenantId)\n        .where('storage_driver', '=', input.storageDriver)\n        .where('storage_path', 'in', paths)\n        .execute()\n      const attachmentPaths = new Set(attachmentRows.map((row) => String(row.storage_path)))\n\n      const ledgerRows = await db\n        .selectFrom('attachment_quota_reservations')\n        .select(['storage_path', 'status'])\n        .where('tenant_id', '=', input.tenantId)\n        .where('storage_driver', '=', input.storageDriver)\n        .where('storage_path', 'in', paths)\n        .execute()\n      const ledgerPaths = new Set(ledgerRows.map((row) => String(row.storage_path)))\n\n      const doubleCountedPaths = ledgerRows\n        .filter((row) => row.status === 'committed' && attachmentPaths.has(String(row.storage_path)))\n        .map((row) => String(row.storage_path))\n      if (doubleCountedPaths.length > 0) {\n        await db\n          .deleteFrom('attachment_quota_reservations')\n          .where('tenant_id', '=', input.tenantId)\n          .where('storage_driver', '=', input.storageDriver)\n          .where('storage_path', 'in', doubleCountedPaths)\n          .where('status', '=', 'committed')\n          .execute()\n      }\n\n      for (const object of batch) {\n        if (attachmentPaths.has(object.path) || ledgerPaths.has(object.path)) continue\n        await sql`\n          insert into attachment_quota_reservations (\n            id, tenant_id, organization_id, reserved_bytes, actual_bytes, status, source,\n            storage_driver, partition_code, storage_path, lease_token, upload_token_hash,\n            expires_at, created_at, updated_at\n          )\n          select ${randomUUID()}::uuid, ${input.tenantId}::uuid, ${input.organizationId}::uuid,\n            ${object.bytes}::bigint, ${object.bytes}::bigint, 'committed', 'storage_s3_upload',\n            ${input.storageDriver}, null, ${object.path}, ${randomUUID()}::uuid, null,\n            null, now(), now()\n          where not exists (\n            select 1 from attachments\n            where tenant_id = ${input.tenantId}::uuid\n              and storage_driver = ${input.storageDriver}\n              and storage_path = ${object.path}\n          )\n          on conflict (tenant_id, storage_driver, storage_path) do nothing\n        `.execute(db)\n      }\n    }\n  }\n\n  private async transition(\n    id: string,\n    leaseToken: string,\n    from: AttachmentQuotaReservationRecord['status'],\n    to: AttachmentQuotaReservationRecord['status'],\n    extra: Record<string, unknown> = {},\n  ): Promise<void> {\n    const db = this.em.getKysely<AttachmentQuotaDatabase>()\n    const result = await db\n      .updateTable('attachment_quota_reservations')\n      .set({ status: to, updated_at: new Date(), ...extra })\n      .where('id', '=', id)\n      .where('lease_token', '=', leaseToken)\n      .where('status', '=', from)\n      .returning('id')\n      .executeTakeFirst()\n    if (!changedRow(result)) throw new AttachmentQuotaError('quota_lease_lost', 'The upload reservation lease was lost.')\n  }\n}\n\nexport function createAttachmentQuotaService(em: EntityManager): AttachmentQuotaService {\n  return new AttachmentQuotaService(em)\n}\n"],
-  "mappings": "AAAA,SAAS,kBAAkB;AAE3B,SAAS,WAAW;AACpB,SAAS,kCAAkC;AAC3C,SAAS,yCAAyC;AAElD,MAAM,6BAA6B,KAAK,KAAK;AA6DtC,MAAM,6BAA6B,MAAM;AAAA,EAC9C,YACkB,MAKhB,SACA;AACA,UAAM,OAAO;AAPG;AAQhB,SAAK,OAAO;AAAA,EACd;AACF;AAEA,SAAS,WAAW,OAAwB;AAC1C,MAAI,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,KAAK,SAAS,EAAG,QAAO;AAC9E,MAAI,OAAO,UAAU,YAAY,MAAM,KAAK,MAAM,IAAI;AACpD,UAAM,SAAS,OAAO,KAAK;AAC3B,QAAI,OAAO,SAAS,MAAM,KAAK,UAAU,EAAG,QAAO;AAAA,EACrD;AACA,QAAM,IAAI,qBAAqB,gCAAgC,qDAAqD;AACtH;AAEA,SAAS,kBAAkB,OAAyB;AAClD,SAAO,QAAQ,SAAS,OAAO,UAAU,YAAY,UAAU,SAAS,MAAM,SAAS,OAAO;AAChG;AAEA,SAAS,WAAW,QAA0B;AAC5C,MAAI,MAAM,QAAQ,MAAM,EAAG,QAAO,OAAO,SAAS;AAClD,MAAI,CAAC,UAAU,OAAO,WAAW,SAAU,QAAO;AAClD,MAAI,QAAQ,OAAQ,QAAO;AAC3B,MAAI,oBAAoB,OAAQ,QAAO,OAAQ,OAAwC,kBAAkB,CAAC,IAAI;AAC9G,MAAI,oBAAoB,OAAQ,QAAO,OAAQ,OAAwC,kBAAkB,CAAC,IAAI;AAC9G,SAAO;AACT;AAEA,SAAS,kBAAkB,KAAsE;AAC/F,SAAO;AAAA,IACL,IAAI,OAAO,IAAI,EAAE;AAAA,IACjB,UAAU,OAAO,IAAI,SAAS;AAAA,IAC9B,gBAAgB,OAAO,IAAI,eAAe;AAAA,IAC1C,eAAe,WAAW,IAAI,cAAc;AAAA,IAC5C,aAAa,IAAI,gBAAgB,OAAO,OAAO,WAAW,IAAI,YAAY;AAAA,IAC1E,QAAQ,IAAI;AAAA,IACZ,QAAQ,IAAI;AAAA,IACZ,eAAe,OAAO,IAAI,cAAc;AAAA,IACxC,eAAe,IAAI,kBAAkB,OAAO,OAAO,OAAO,IAAI,cAAc;AAAA,IAC5E,aAAa,OAAO,IAAI,YAAY;AAAA,IACpC,YAAY,OAAO,IAAI,WAAW;AAAA,IAClC,iBAAiB,IAAI,qBAAqB,OAAO,OAAO,OAAO,IAAI,iBAAiB;AAAA,IACpF,WAAW,IAAI,cAAc,OAAO,OAAO,IAAI,KAAK,IAAI,UAAU;AAAA,EACpE;AACF;AAEO,MAAM,uBAAuB;AAAA,EAClC,YAA6B,IAAmB;AAAnB;AAAA,EAAoB;AAAA,EAEjD,MAAM,QAAQ,OAUgC;AAC5C,QAAI,CAAC,OAAO,cAAc,MAAM,KAAK,KAAK,MAAM,QAAQ,GAAG;AACzD,YAAM,IAAI,qBAAqB,gCAAgC,wDAAwD;AAAA,IACzH;AACA,UAAM,KAAK,WAAW;AACtB,UAAM,aAAa,WAAW;AAC9B,UAAM,YAAY,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,IAAI,KAAO,MAAM,SAAS,0BAA0B,CAAC;AAElG,QAAI;AACF,YAAM,KAAK,GAAG,cAAc,OAAO,OAAO;AACxC,cAAM,KAAK,GAAG,UAAmC;AACjD,cAAM,oDAAoD,oBAAoB,MAAM,QAAQ,EAAE,QAAQ,QAAQ,EAAE;AAEhH,cAAM,kBAAkB,MAAM,GAC3B,WAAW,aAAa,EACxB,OAAO,iCAAyC,GAAG,YAAY,CAAC,EAChE,MAAM,aAAa,KAAK,MAAM,QAAQ,EACtC,iBAAiB;AACpB,cAAM,cAAc,MAAM,GACvB,WAAW,+BAA+B,EAC1C;AAAA,UACC,gGAAwG,GAAG,YAAY;AAAA,QACzH,EACC,MAAM,aAAa,KAAK,MAAM,QAAQ,EACtC,iBAAiB;AAEpB,cAAM,YAAY,WAAW,iBAAiB,UAAU,IAAI,WAAW,aAAa,UAAU;AAC9F,YAAI,YAAY,MAAM,QAAQ,kCAAkC,GAAG;AACjE,gBAAM,IAAI,qBAAqB,kBAAkB,oDAAoD;AAAA,QACvG;AAEA,cAAM,cAAc,GAAG,OAAO,4BAA4B;AAAA,UACxD;AAAA,UACA,UAAU,MAAM;AAAA,UAChB,gBAAgB,MAAM;AAAA,UACtB,eAAe,MAAM;AAAA,UACrB,aAAa;AAAA,UACb,QAAQ;AAAA,UACR,QAAQ,MAAM;AAAA,UACd,eAAe,MAAM;AAAA,UACrB,eAAe,MAAM,iBAAiB;AAAA,UACtC,aAAa,MAAM;AAAA,UACnB;AAAA,UACA,iBAAiB,MAAM,mBAAmB;AAAA,UAC1C;AAAA,QACF,CAAC;AACD,cAAM,GAAG,QAAQ,WAAW,EAAE,MAAM;AAAA,MACtC,CAAC;AAAA,IACH,SAAS,OAAO;AACd,UAAI,iBAAiB,qBAAsB,OAAM;AACjD,UAAI,kBAAkB,KAAK,GAAG;AAC5B,cAAM,IAAI,qBAAqB,uBAAuB,2DAA2D;AAAA,MACnH;AACA,YAAM,IAAI,qBAAqB,gCAAgC,0CAA0C;AAAA,IAC3G;AAEA,WAAO,EAAE,IAAI,YAAY,UAAU;AAAA,EACrC;AAAA,EAEA,MAAM,aAAa,IAAY,YAAoB,QAAQ,4BAA2C;AACpG,UAAM,KAAK,WAAW,IAAI,YAAY,YAAY,WAAW;AAAA,MAC3D,YAAY,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,IAAI,KAAO,KAAK,CAAC;AAAA,IAC1D,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,WAAW,IAAY,YAAmC;AAC9D,UAAM,KAAK,WAAW,IAAI,YAAY,WAAW,QAAQ;AAAA,EAC3D;AAAA,EAEA,MAAM,mBAAmB,IAAY,YAAoB,UAAyB,KAAK,IAAmB;AACxG,UAAM,KAAK,QAAQ,UAAmC;AACtD,UAAM,SAAS,MAAM,GAClB,WAAW,+BAA+B,EAC1C,MAAM,MAAM,KAAK,EAAE,EACnB,MAAM,eAAe,KAAK,UAAU,EACpC,MAAM,UAAU,KAAK,QAAQ,EAC7B,UAAU,IAAI,EACd,iBAAiB;AACpB,QAAI,CAAC,WAAW,MAAM,EAAG,OAAM,IAAI,qBAAqB,oBAAoB,wCAAwC;AAAA,EACtH;AAAA,EAEA,MAAM,mBAAmB,IAAY,YAAoB,aAAoC;AAC3F,QAAI,CAAC,OAAO,cAAc,WAAW,KAAK,cAAc,GAAG;AACzD,YAAM,IAAI,qBAAqB,gCAAgC,mDAAmD;AAAA,IACpH;AACA,UAAM,KAAK,KAAK,GAAG,UAAmC;AACtD,UAAM,SAAS,MAAM,GAClB,YAAY,+BAA+B,EAC3C,IAAI,EAAE,QAAQ,aAAa,cAAc,aAAa,YAAY,MAAM,mBAAmB,MAAM,YAAY,oBAAI,KAAK,EAAE,CAAC,EACzH,MAAM,MAAM,KAAK,EAAE,EACnB,MAAM,eAAe,KAAK,UAAU,EACpC,MAAM,UAAU,KAAK,QAAQ,EAC7B,MAAM,kBAAkB,MAAM,WAAW,EACzC,UAAU,IAAI,EACd,iBAAiB;AACpB,QAAI,CAAC,WAAW,MAAM,EAAG,OAAM,IAAI,qBAAqB,oBAAoB,wCAAwC;AAAA,EACtH;AAAA,EAEA,MAAM,QAAQ,IAAY,YAAoC;AAC5D,UAAM,KAAK,KAAK,GAAG,UAAmC;AACtD,QAAI,QAAQ,GACT,WAAW,+BAA+B,EAC1C,MAAM,MAAM,KAAK,EAAE,EACnB,MAAM,UAAU,MAAM,WAAW;AACpC,QAAI,WAAY,SAAQ,MAAM,MAAM,eAAe,KAAK,UAAU;AAClE,UAAM,MAAM,QAAQ;AAAA,EACtB;AAAA,EAEA,MAAM,uBAAuB,OAIX;AAChB,UAAM,KAAK,KAAK,GAAG,UAAmC;AACtD,UAAM,GACH,WAAW,+BAA+B,EAC1C,MAAM,aAAa,KAAK,MAAM,QAAQ,EACtC,MAAM,kBAAkB,KAAK,MAAM,aAAa,EAChD,MAAM,gBAAgB,KAAK,MAAM,WAAW,EAC5C,MAAM,UAAU,KAAK,WAAW,EAChC,QAAQ;AAAA,EACb;AAAA,EAEA,MAAM,6BAA6B,iBAA2E;AAC5G,UAAM,KAAK,KAAK,GAAG,UAAmC;AACtD,UAAM,MAAM,MAAM,GACf,WAAW,+BAA+B,EAC1C,UAAU,EACV,MAAM,qBAAqB,KAAK,eAAe,EAC/C,MAAM,UAAU,KAAK,UAAU,EAC/B,MAAM,cAAc,KAAK,oBAAI,KAAK,CAAC,EACnC,iBAAiB;AACpB,QAAI,CAAC,IAAK,QAAO;AACjB,WAAO,kBAAkB,GAAG;AAAA,EAC9B;AAAA,EAEA,MAAM,8BACJ,iBACA,QAAQ,4BAC0C;AAClD,UAAM,KAAK,KAAK,GAAG,UAAmC;AACtD,UAAM,aAAa,WAAW;AAC9B,UAAM,MAAM,MAAM,GACf,YAAY,+BAA+B,EAC3C,IAAI;AAAA,MACH,QAAQ;AAAA,MACR,aAAa;AAAA,MACb,YAAY,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,IAAI,KAAO,KAAK,CAAC;AAAA,MACxD,YAAY,oBAAI,KAAK;AAAA,IACvB,CAAC,EACA,MAAM,qBAAqB,KAAK,eAAe,EAC/C,MAAM,UAAU,KAAK,UAAU,EAC/B,MAAM,cAAc,KAAK,oBAAI,KAAK,CAAC,EACnC,aAAa,EACb,iBAAiB;AACpB,WAAO,MAAM,kBAAkB,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,eACJ,IACA,OACkD;AAClD,UAAM,KAAK,KAAK,GAAG,UAAmC;AACtD,UAAM,MAAM,MAAM,GACf,WAAW,+BAA+B,EAC1C,UAAU,EACV,MAAM,MAAM,KAAK,EAAE,EACnB,MAAM,aAAa,KAAK,MAAM,QAAQ,EACtC,MAAM,mBAAmB,KAAK,MAAM,cAAc,EAClD,iBAAiB;AACpB,WAAO,MAAM,kBAAkB,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,aACJ,IACA,OACA,gBAAgB,4BACkC;AAClD,UAAM,KAAK,KAAK,GAAG,UAAmC;AACtD,UAAM,aAAa,WAAW;AAC9B,UAAM,MAAM,MAAM,GACf,YAAY,+BAA+B,EAC3C,IAAI;AAAA,MACH,QAAQ;AAAA,MACR,aAAa;AAAA,MACb,YAAY,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,IAAI,KAAO,aAAa,CAAC;AAAA,MAChE,YAAY,oBAAI,KAAK;AAAA,IACvB,CAAC,EACA,MAAM,MAAM,KAAK,EAAE,EACnB,MAAM,aAAa,KAAK,MAAM,QAAQ,EACtC,MAAM,mBAAmB,KAAK,MAAM,cAAc,EAClD,MAAM,UAAU,MAAM,CAAC,YAAY,WAAW,UAAU,YAAY,CAAC,EACrE,MAAM,cAAc,MAAM,oBAAI,KAAK,CAAC,EACpC,aAAa,EACb,iBAAiB;AACpB,WAAO,MAAM,kBAAkB,GAAG,IAAI;AAAA,EACxC;AAAA,EAEA,MAAM,0BAA0B,IAAY,YAAoB,aAAoC;AAClG,UAAM,KAAK,KAAK,GAAG,UAAmC;AACtD,UAAM,SAAS,MAAM,GAClB,YAAY,+BAA+B,EAC3C,IAAI,EAAE,QAAQ,aAAa,cAAc,aAAa,YAAY,MAAM,mBAAmB,MAAM,YAAY,oBAAI,KAAK,EAAE,CAAC,EACzH,MAAM,MAAM,KAAK,EAAE,EACnB,MAAM,eAAe,KAAK,UAAU,EACpC,MAAM,UAAU,KAAK,YAAY,EACjC,MAAM,kBAAkB,MAAM,WAAW,EACzC,UAAU,IAAI,EACd,iBAAiB;AACpB,QAAI,CAAC,WAAW,MAAM,EAAG,OAAM,IAAI,qBAAqB,oBAAoB,0CAA0C;AAAA,EACxH;AAAA,EAEA,MAAM,2BAA2B,OAKf;AAChB,UAAM,gBAAgB,MAAM,KAAK,IAAI,IAAI,MAAM,QAAQ,IAAI,CAAC,WAAW,CAAC,OAAO,MAAM,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC;AACvG,eAAW,UAAU,eAAe;AAClC,UAAI,CAAC,OAAO,cAAc,OAAO,KAAK,KAAK,OAAO,QAAQ,GAAG;AAC3D,cAAM,IAAI,qBAAqB,gCAAgC,yDAAyD;AAAA,MAC1H;AAAA,IACF;AACA,UAAM,KAAK,KAAK,GAAG,UAAmC;AACtD,aAAS,SAAS,GAAG,SAAS,cAAc,QAAQ,UAAU,KAAK;AACjE,YAAM,QAAQ,cAAc,MAAM,QAAQ,SAAS,GAAG;AACtD,YAAM,QAAQ,MAAM,IAAI,CAAC,WAAW,OAAO,IAAI;AAC/C,UAAI,MAAM,WAAW,EAAG;AAExB,YAAM,iBAAiB,MAAM,GAC1B,WAAW,aAAa,EACxB,OAAO,cAAc,EACrB,MAAM,aAAa,KAAK,MAAM,QAAQ,EACtC,MAAM,kBAAkB,KAAK,MAAM,aAAa,EAChD,MAAM,gBAAgB,MAAM,KAAK,EACjC,QAAQ;AACX,YAAM,kBAAkB,IAAI,IAAI,eAAe,IAAI,CAAC,QAAQ,OAAO,IAAI,YAAY,CAAC,CAAC;AAErF,YAAM,aAAa,MAAM,GACtB,WAAW,+BAA+B,EAC1C,OAAO,CAAC,gBAAgB,QAAQ,CAAC,EACjC,MAAM,aAAa,KAAK,MAAM,QAAQ,EACtC,MAAM,kBAAkB,KAAK,MAAM,aAAa,EAChD,MAAM,gBAAgB,MAAM,KAAK,EACjC,QAAQ;AACX,YAAM,cAAc,IAAI,IAAI,WAAW,IAAI,CAAC,QAAQ,OAAO,IAAI,YAAY,CAAC,CAAC;AAE7E,YAAM,qBAAqB,WACxB,OAAO,CAAC,QAAQ,IAAI,WAAW,eAAe,gBAAgB,IAAI,OAAO,IAAI,YAAY,CAAC,CAAC,EAC3F,IAAI,CAAC,QAAQ,OAAO,IAAI,YAAY,CAAC;AACxC,UAAI,mBAAmB,SAAS,GAAG;AACjC,cAAM,GACH,WAAW,+BAA+B,EAC1C,MAAM,aAAa,KAAK,MAAM,QAAQ,EACtC,MAAM,kBAAkB,KAAK,MAAM,aAAa,EAChD,MAAM,gBAAgB,MAAM,kBAAkB,EAC9C,MAAM,UAAU,KAAK,WAAW,EAChC,QAAQ;AAAA,MACb;AAEA,iBAAW,UAAU,OAAO;AAC1B,YAAI,gBAAgB,IAAI,OAAO,IAAI,KAAK,YAAY,IAAI,OAAO,IAAI,EAAG;AACtE,cAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAMK,WAAW,CAAC,WAAW,MAAM,QAAQ,WAAW,MAAM,cAAc;AAAA,cACzE,OAAO,KAAK,aAAa,OAAO,KAAK;AAAA,cACrC,MAAM,aAAa,WAAW,OAAO,IAAI,KAAK,WAAW,CAAC;AAAA;AAAA;AAAA;AAAA,gCAIxC,MAAM,QAAQ;AAAA,qCACT,MAAM,aAAa;AAAA,mCACrB,OAAO,IAAI;AAAA;AAAA;AAAA,UAGpC,QAAQ,EAAE;AAAA,MACd;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,WACZ,IACA,YACA,MACA,IACA,QAAiC,CAAC,GACnB;AACf,UAAM,KAAK,KAAK,GAAG,UAAmC;AACtD,UAAM,SAAS,MAAM,GAClB,YAAY,+BAA+B,EAC3C,IAAI,EAAE,QAAQ,IAAI,YAAY,oBAAI,KAAK,GAAG,GAAG,MAAM,CAAC,EACpD,MAAM,MAAM,KAAK,EAAE,EACnB,MAAM,eAAe,KAAK,UAAU,EACpC,MAAM,UAAU,KAAK,IAAI,EACzB,UAAU,IAAI,EACd,iBAAiB;AACpB,QAAI,CAAC,WAAW,MAAM,EAAG,OAAM,IAAI,qBAAqB,oBAAoB,wCAAwC;AAAA,EACtH;AACF;AAEO,SAAS,6BAA6B,IAA2C;AACtF,SAAO,IAAI,uBAAuB,EAAE;AACtC;",
-  "names": []
-}

package/dist/modules/attachments/migrations/Migration20260709234741_attachments.js

@@ -1,13 +0,0 @@
-import { Migration } from "@mikro-orm/migrations";
-class Migration20260709234741_attachments extends Migration {
-  up() {
-    this.addSql(`create table "attachment_quota_reservations" ("id" uuid not null, "tenant_id" uuid not null, "organization_id" uuid not null, "reserved_bytes" bigint not null, "actual_bytes" bigint null, "status" text not null default 'reserved', "source" text not null, "storage_driver" text not null, "partition_code" text null, "storage_path" text not null, "lease_token" uuid not null, "upload_token_hash" text null, "expires_at" timestamptz null, "created_at" timestamptz not null, "updated_at" timestamptz not null, primary key ("id"));`);
-    this.addSql(`create index "attachment_quota_reservations_expires_idx" on "attachment_quota_reservations" ("expires_at");`);
-    this.addSql(`create index "attachment_quota_reservations_tenant_status_idx" on "attachment_quota_reservations" ("tenant_id", "status");`);
-    this.addSql(`alter table "attachment_quota_reservations" add constraint "attachment_quota_reservations_scope_path_unique" unique ("tenant_id", "storage_driver", "storage_path");`);
-  }
-}
-export {
-  Migration20260709234741_attachments
-};
-//# sourceMappingURL=Migration20260709234741_attachments.js.map

package/dist/modules/attachments/migrations/Migration20260709234741_attachments.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/attachments/migrations/Migration20260709234741_attachments.ts"],
-  "sourcesContent": ["import { Migration } from '@mikro-orm/migrations';\n\nexport class Migration20260709234741_attachments extends Migration {\n\n  override up(): void | Promise<void> {\n    this.addSql(`create table \"attachment_quota_reservations\" (\"id\" uuid not null, \"tenant_id\" uuid not null, \"organization_id\" uuid not null, \"reserved_bytes\" bigint not null, \"actual_bytes\" bigint null, \"status\" text not null default 'reserved', \"source\" text not null, \"storage_driver\" text not null, \"partition_code\" text null, \"storage_path\" text not null, \"lease_token\" uuid not null, \"upload_token_hash\" text null, \"expires_at\" timestamptz null, \"created_at\" timestamptz not null, \"updated_at\" timestamptz not null, primary key (\"id\"));`);\n    this.addSql(`create index \"attachment_quota_reservations_expires_idx\" on \"attachment_quota_reservations\" (\"expires_at\");`);\n    this.addSql(`create index \"attachment_quota_reservations_tenant_status_idx\" on \"attachment_quota_reservations\" (\"tenant_id\", \"status\");`);\n    this.addSql(`alter table \"attachment_quota_reservations\" add constraint \"attachment_quota_reservations_scope_path_unique\" unique (\"tenant_id\", \"storage_driver\", \"storage_path\");`);\n  }\n\n}\n"],
-  "mappings": "AAAA,SAAS,iBAAiB;AAEnB,MAAM,4CAA4C,UAAU;AAAA,EAExD,KAA2B;AAClC,SAAK,OAAO,ghBAAghB;AAC5hB,SAAK,OAAO,6GAA6G;AACzH,SAAK,OAAO,4HAA4H;AACxI,SAAK,OAAO,sKAAsK;AAAA,EACpL;AAEF;",
-  "names": []
-}

package/dist/modules/attachments/workers/quota-recovery.js

@@ -1,45 +0,0 @@
-import { scheduleAttachmentQuotaRecovery } from "../lib/quota-recovery-queue.js";
-const metadata = {
-  queue: "attachments-quota-recovery",
-  id: "attachments:quota-recovery",
-  concurrency: 2
-};
-async function handle(job, ctx) {
-  const quotaService = ctx.resolve("attachmentQuotaService");
-  const scope = {
-    tenantId: job.payload.tenantId,
-    organizationId: job.payload.organizationId
-  };
-  const record = await quotaService.getReservation(job.payload.reservationId, scope);
-  if (!record || record.status === "committed") return;
-  if (record.expiresAt && record.expiresAt.getTime() > Date.now()) {
-    await scheduleAttachmentQuotaRecovery(job.payload, record.expiresAt.getTime() - Date.now());
-    return;
-  }
-  const claimed = await quotaService.claimExpired(record.id, scope);
-  if (!claimed) return;
-  try {
-    const em = ctx.resolve("em");
-    const existingAttachment = await em.getKysely().selectFrom("attachments").select("id").where("tenant_id", "=", claimed.tenantId).where("storage_driver", "=", claimed.storageDriver).where("storage_path", "=", claimed.storagePath).executeTakeFirst();
-    if (!existingAttachment) {
-      if (!claimed.partitionCode) throw new Error("Attachment quota recovery is missing its partition code.");
-      const factory = ctx.resolve("storageDriverFactory");
-      const driver = await factory.resolveForPartition(claimed.partitionCode, {
-        tenantId: claimed.tenantId,
-        organizationId: claimed.organizationId
-      });
-      await (driver.deleteStrict?.(claimed.partitionCode, claimed.storagePath) ?? driver.delete(claimed.partitionCode, claimed.storagePath));
-    }
-    await quotaService.release(claimed.id, claimed.leaseToken);
-  } catch (error) {
-    if (claimed.expiresAt) {
-      await scheduleAttachmentQuotaRecovery(job.payload, claimed.expiresAt.getTime() - Date.now());
-    }
-    throw error;
-  }
-}
-export {
-  handle as default,
-  metadata
-};
-//# sourceMappingURL=quota-recovery.js.map

package/dist/modules/attachments/workers/quota-recovery.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/attachments/workers/quota-recovery.ts"],
-  "sourcesContent": ["import type { JobContext, QueuedJob, WorkerMeta } from '@open-mercato/queue'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { AttachmentQuotaService } from '../lib/quota-service'\nimport type { StorageDriverFactory } from '../lib/drivers'\nimport { scheduleAttachmentQuotaRecovery, type AttachmentQuotaRecoveryJob } from '../lib/quota-recovery-queue'\n\nexport const metadata: WorkerMeta = {\n  queue: 'attachments-quota-recovery',\n  id: 'attachments:quota-recovery',\n  concurrency: 2,\n}\n\ntype HandlerContext = JobContext & { resolve: <T = unknown>(name: string) => T }\n\ntype AttachmentLookupDatabase = {\n  attachments: {\n    id: string\n    tenant_id: string\n    storage_driver: string\n    storage_path: string\n  }\n}\n\nexport default async function handle(\n  job: QueuedJob<AttachmentQuotaRecoveryJob>,\n  ctx: HandlerContext,\n): Promise<void> {\n  const quotaService = ctx.resolve<AttachmentQuotaService>('attachmentQuotaService')\n  const scope = {\n    tenantId: job.payload.tenantId,\n    organizationId: job.payload.organizationId,\n  }\n  const record = await quotaService.getReservation(job.payload.reservationId, scope)\n  if (!record || record.status === 'committed') return\n  if (record.expiresAt && record.expiresAt.getTime() > Date.now()) {\n    await scheduleAttachmentQuotaRecovery(job.payload, record.expiresAt.getTime() - Date.now())\n    return\n  }\n\n  const claimed = await quotaService.claimExpired(record.id, scope)\n  if (!claimed) return\n  try {\n    const em = ctx.resolve<EntityManager>('em')\n    const existingAttachment = await em.getKysely<AttachmentLookupDatabase>()\n      .selectFrom('attachments')\n      .select('id')\n      .where('tenant_id', '=', claimed.tenantId)\n      .where('storage_driver', '=', claimed.storageDriver)\n      .where('storage_path', '=', claimed.storagePath)\n      .executeTakeFirst()\n    if (!existingAttachment) {\n      if (!claimed.partitionCode) throw new Error('Attachment quota recovery is missing its partition code.')\n      const factory = ctx.resolve<StorageDriverFactory>('storageDriverFactory')\n      const driver = await factory.resolveForPartition(claimed.partitionCode, {\n        tenantId: claimed.tenantId,\n        organizationId: claimed.organizationId,\n      })\n      await (driver.deleteStrict?.(claimed.partitionCode, claimed.storagePath)\n        ?? driver.delete(claimed.partitionCode, claimed.storagePath))\n    }\n    await quotaService.release(claimed.id, claimed.leaseToken)\n  } catch (error) {\n    if (claimed.expiresAt) {\n      await scheduleAttachmentQuotaRecovery(job.payload, claimed.expiresAt.getTime() - Date.now())\n    }\n    throw error\n  }\n}\n"],
-  "mappings": "AAIA,SAAS,uCAAwE;AAE1E,MAAM,WAAuB;AAAA,EAClC,OAAO;AAAA,EACP,IAAI;AAAA,EACJ,aAAa;AACf;AAaA,eAAO,OACL,KACA,KACe;AACf,QAAM,eAAe,IAAI,QAAgC,wBAAwB;AACjF,QAAM,QAAQ;AAAA,IACZ,UAAU,IAAI,QAAQ;AAAA,IACtB,gBAAgB,IAAI,QAAQ;AAAA,EAC9B;AACA,QAAM,SAAS,MAAM,aAAa,eAAe,IAAI,QAAQ,eAAe,KAAK;AACjF,MAAI,CAAC,UAAU,OAAO,WAAW,YAAa;AAC9C,MAAI,OAAO,aAAa,OAAO,UAAU,QAAQ,IAAI,KAAK,IAAI,GAAG;AAC/D,UAAM,gCAAgC,IAAI,SAAS,OAAO,UAAU,QAAQ,IAAI,KAAK,IAAI,CAAC;AAC1F;AAAA,EACF;AAEA,QAAM,UAAU,MAAM,aAAa,aAAa,OAAO,IAAI,KAAK;AAChE,MAAI,CAAC,QAAS;AACd,MAAI;AACF,UAAM,KAAK,IAAI,QAAuB,IAAI;AAC1C,UAAM,qBAAqB,MAAM,GAAG,UAAoC,EACrE,WAAW,aAAa,EACxB,OAAO,IAAI,EACX,MAAM,aAAa,KAAK,QAAQ,QAAQ,EACxC,MAAM,kBAAkB,KAAK,QAAQ,aAAa,EAClD,MAAM,gBAAgB,KAAK,QAAQ,WAAW,EAC9C,iBAAiB;AACpB,QAAI,CAAC,oBAAoB;AACvB,UAAI,CAAC,QAAQ,cAAe,OAAM,IAAI,MAAM,0DAA0D;AACtG,YAAM,UAAU,IAAI,QAA8B,sBAAsB;AACxE,YAAM,SAAS,MAAM,QAAQ,oBAAoB,QAAQ,eAAe;AAAA,QACtE,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ;AAAA,MAC1B,CAAC;AACD,aAAO,OAAO,eAAe,QAAQ,eAAe,QAAQ,WAAW,KAClE,OAAO,OAAO,QAAQ,eAAe,QAAQ,WAAW;AAAA,IAC/D;AACA,UAAM,aAAa,QAAQ,QAAQ,IAAI,QAAQ,UAAU;AAAA,EAC3D,SAAS,OAAO;AACd,QAAI,QAAQ,WAAW;AACrB,YAAM,gCAAgC,IAAI,SAAS,QAAQ,UAAU,QAAQ,IAAI,KAAK,IAAI,CAAC;AAAA,IAC7F;AACA,UAAM;AAAA,EACR;AACF;",
-  "names": []
-}

package/dist/modules/audit_logs/api/audit-logs/readScope.js

@@ -1,12 +0,0 @@
-import { NextResponse } from "next/server";
-function isSuperAdmin(auth) {
-  return auth.isSuperAdmin === true;
-}
-function requireResolvedTenantScope(auth) {
-  if (auth.tenantId || isSuperAdmin(auth)) return null;
-  return NextResponse.json({ error: "Forbidden" }, { status: 403 });
-}
-export {
-  requireResolvedTenantScope
-};
-//# sourceMappingURL=readScope.js.map

package/dist/modules/audit_logs/api/audit-logs/readScope.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../../src/modules/audit_logs/api/audit-logs/readScope.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { AuthContext } from '@open-mercato/shared/lib/auth/server'\n\ntype ResolvedAuth = NonNullable<AuthContext>\n\n// `isSuperAdmin` is not part of the declared `AuthContext` shape \u2014 it reaches callers\n// through the type's index signature \u2014 so read it exactly the way\n// `shared/lib/auth/server.ts` does instead of widening the shared contract here.\nfunction isSuperAdmin(auth: ResolvedAuth): boolean {\n  return (auth as Record<string, unknown>).isSuperAdmin === true\n}\n\n/**\n * Fail closed on tenant scope for audit-log reads.\n *\n * `audit_logs.view_tenant` only widens visibility WITHIN a tenant, so cross-tenant reads\n * must be gated on `isSuperAdmin`, never on the caller's tenant being empty: a tenant-less\n * principal (unscoped API key or global account) holding `view_tenant` otherwise drops the\n * tenant, organization and actor predicates at once and reads decrypted action-log rows for\n * every tenant in the instance (issues #3817, #3818).\n *\n * Plain truthiness is deliberate \u2014 it matches the `if (parsed.tenantId)` predicate guard in\n * ActionLogService/AccessLogService, so every value that would skip it is rejected here.\n */\nexport function requireResolvedTenantScope(auth: ResolvedAuth): NextResponse | null {\n  if (auth.tenantId || isSuperAdmin(auth)) return null\n  return NextResponse.json({ error: 'Forbidden' }, { status: 403 })\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAQ7B,SAAS,aAAa,MAA6B;AACjD,SAAQ,KAAiC,iBAAiB;AAC5D;AAcO,SAAS,2BAA2B,MAAyC;AAClF,MAAI,KAAK,YAAY,aAAa,IAAI,EAAG,QAAO;AAChD,SAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAClE;",
-  "names": []
-}

package/dist/modules/audit_logs/extension-points.js

@@ -1,14 +0,0 @@
-import { dataTableExtensionHost, defineModuleExtensionPoints } from "@open-mercato/shared/modules/widgets/extension-points";
-const extensionPoints = defineModuleExtensionPoints({
-  moduleId: "audit_logs",
-  hosts: {
-    accessLogsTable: dataTableExtensionHost({ tableId: "audit_logs.access.list", source: "components/AccessLogsTable.tsx" }),
-    actionsTable: dataTableExtensionHost({ tableId: "audit_logs.actions.list", source: "components/AuditLogsActions.tsx" })
-  }
-});
-var extension_points_default = extensionPoints;
-export {
-  extension_points_default as default,
-  extensionPoints
-};
-//# sourceMappingURL=extension-points.js.map

package/dist/modules/audit_logs/extension-points.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../src/modules/audit_logs/extension-points.ts"],
-  "sourcesContent": ["import { dataTableExtensionHost, defineModuleExtensionPoints } from '@open-mercato/shared/modules/widgets/extension-points'\n\nexport const extensionPoints = defineModuleExtensionPoints({\n  moduleId: 'audit_logs',\n  hosts: {\n    accessLogsTable: dataTableExtensionHost({ tableId: 'audit_logs.access.list', source: 'components/AccessLogsTable.tsx' }),\n    actionsTable: dataTableExtensionHost({ tableId: 'audit_logs.actions.list', source: 'components/AuditLogsActions.tsx' }),\n  },\n})\n\nexport default extensionPoints\n"],
-  "mappings": "AAAA,SAAS,wBAAwB,mCAAmC;AAE7D,MAAM,kBAAkB,4BAA4B;AAAA,EACzD,UAAU;AAAA,EACV,OAAO;AAAA,IACL,iBAAiB,uBAAuB,EAAE,SAAS,0BAA0B,QAAQ,iCAAiC,CAAC;AAAA,IACvH,cAAc,uBAAuB,EAAE,SAAS,2BAA2B,QAAQ,kCAAkC,CAAC;AAAA,EACxH;AACF,CAAC;AAED,IAAO,2BAAQ;",
-  "names": []
-}

package/dist/modules/auth/extension-points.js

@@ -1,21 +0,0 @@
-import { dataTableExtensionHost, defineModuleExtensionPoints, injectionExtensionHost } from "@open-mercato/shared/modules/widgets/extension-points";
-const extensionPoints = defineModuleExtensionPoints({
-  moduleId: "auth",
-  hosts: {
-    loginForm: injectionExtensionHost({
-      family: "generic",
-      spotId: "auth.login:form",
-      supported: ["render-widget"],
-      contextContract: "auth.login-form.v1",
-      source: "frontend/login.tsx"
-    }),
-    usersTable: dataTableExtensionHost({ tableId: "auth.users.list", source: "backend/users/page.tsx" }),
-    rolesTable: dataTableExtensionHost({ tableId: "auth.roles.list", source: "backend/roles/page.tsx" })
-  }
-});
-var extension_points_default = extensionPoints;
-export {
-  extension_points_default as default,
-  extensionPoints
-};
-//# sourceMappingURL=extension-points.js.map

package/dist/modules/auth/extension-points.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../src/modules/auth/extension-points.ts"],
-  "sourcesContent": ["import { dataTableExtensionHost, defineModuleExtensionPoints, injectionExtensionHost } from '@open-mercato/shared/modules/widgets/extension-points'\n\nexport const extensionPoints = defineModuleExtensionPoints({\n  moduleId: 'auth',\n  hosts: {\n    loginForm: injectionExtensionHost({\n      family: 'generic',\n      spotId: 'auth.login:form',\n      supported: ['render-widget'],\n      contextContract: 'auth.login-form.v1',\n      source: 'frontend/login.tsx',\n    }),\n    usersTable: dataTableExtensionHost({ tableId: 'auth.users.list', source: 'backend/users/page.tsx' }),\n    rolesTable: dataTableExtensionHost({ tableId: 'auth.roles.list', source: 'backend/roles/page.tsx' }),\n  },\n})\n\nexport default extensionPoints\n"],
-  "mappings": "AAAA,SAAS,wBAAwB,6BAA6B,8BAA8B;AAErF,MAAM,kBAAkB,4BAA4B;AAAA,EACzD,UAAU;AAAA,EACV,OAAO;AAAA,IACL,WAAW,uBAAuB;AAAA,MAChC,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,WAAW,CAAC,eAAe;AAAA,MAC3B,iBAAiB;AAAA,MACjB,QAAQ;AAAA,IACV,CAAC;AAAA,IACD,YAAY,uBAAuB,EAAE,SAAS,mBAAmB,QAAQ,yBAAyB,CAAC;AAAA,IACnG,YAAY,uBAAuB,EAAE,SAAS,mBAAmB,QAAQ,yBAAyB,CAAC;AAAA,EACrG;AACF,CAAC;AAED,IAAO,2BAAQ;",
-  "names": []
-}

package/dist/modules/business_rules/api/openmercato-call-options/route.js

@@ -1,85 +0,0 @@
-import { NextResponse } from "next/server";
-import { z } from "zod";
-import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
-import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
-import {
-  getCurrentOpenMercatoEndpointOptions,
-  listOpenMercatoApiKeyOptions
-} from "../../lib/openmercato-call-options.js";
-const roleOptionSchema = z.object({
-  id: z.string(),
-  name: z.string().nullable()
-});
-const endpointOptionSchema = z.object({
-  id: z.string(),
-  path: z.string(),
-  method: z.enum(["GET", "POST", "PUT", "PATCH", "DELETE"]),
-  label: z.string(),
-  summary: z.string().nullable(),
-  operationId: z.string().nullable()
-});
-const apiKeyOptionSchema = z.object({
-  id: z.string(),
-  name: z.string(),
-  keyPrefix: z.string(),
-  organizationId: z.string().nullable(),
-  organizationName: z.string().nullable(),
-  roles: z.array(roleOptionSchema)
-});
-const optionsResponseSchema = z.object({
-  endpoints: z.array(endpointOptionSchema),
-  apiKeys: z.array(apiKeyOptionSchema)
-});
-const errorResponseSchema = z.object({
-  error: z.string()
-});
-const metadata = {
-  GET: { requireAuth: true, requireFeatures: ["business_rules.manage", "api_keys.create"] }
-};
-async function GET(req) {
-  const auth = await getAuthFromRequest(req);
-  if (!auth) {
-    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
-  }
-  if (!auth.tenantId) {
-    return NextResponse.json({ error: "Tenant context required" }, { status: 400 });
-  }
-  const container = await createRequestContainer();
-  const em = container.resolve("em");
-  const [endpoints, apiKeys] = await Promise.all([
-    getCurrentOpenMercatoEndpointOptions(),
-    listOpenMercatoApiKeyOptions(em, {
-      tenantId: auth.tenantId,
-      organizationId: auth.orgId ?? null
-    })
-  ]);
-  return NextResponse.json({ endpoints, apiKeys });
-}
-const openApi = {
-  tag: "Business Rules",
-  summary: "List OpenMercato call action options",
-  methods: {
-    GET: {
-      summary: "List OpenMercato call action options",
-      description: "Returns executable Open Mercato API endpoint options and safe API key profile metadata for business-rule actions.",
-      responses: [
-        {
-          status: 200,
-          description: "OpenMercato call options",
-          schema: optionsResponseSchema
-        }
-      ],
-      errors: [
-        { status: 400, description: "Tenant context missing", schema: errorResponseSchema },
-        { status: 401, description: "Unauthorized", schema: errorResponseSchema },
-        { status: 403, description: "Missing required features", schema: errorResponseSchema }
-      ]
-    }
-  }
-};
-export {
-  GET,
-  metadata,
-  openApi
-};
-//# sourceMappingURL=route.js.map

package/dist/modules/business_rules/api/openmercato-call-options/route.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../../src/modules/business_rules/api/openmercato-call-options/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport {\n  getCurrentOpenMercatoEndpointOptions,\n  listOpenMercatoApiKeyOptions,\n} from '../../lib/openmercato-call-options'\n\nconst roleOptionSchema = z.object({\n  id: z.string(),\n  name: z.string().nullable(),\n})\n\nconst endpointOptionSchema = z.object({\n  id: z.string(),\n  path: z.string(),\n  method: z.enum(['GET', 'POST', 'PUT', 'PATCH', 'DELETE']),\n  label: z.string(),\n  summary: z.string().nullable(),\n  operationId: z.string().nullable(),\n})\n\nconst apiKeyOptionSchema = z.object({\n  id: z.string(),\n  name: z.string(),\n  keyPrefix: z.string(),\n  organizationId: z.string().nullable(),\n  organizationName: z.string().nullable(),\n  roles: z.array(roleOptionSchema),\n})\n\nconst optionsResponseSchema = z.object({\n  endpoints: z.array(endpointOptionSchema),\n  apiKeys: z.array(apiKeyOptionSchema),\n})\n\nconst errorResponseSchema = z.object({\n  error: z.string(),\n})\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['business_rules.manage', 'api_keys.create'] },\n}\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  if (!auth.tenantId) {\n    return NextResponse.json({ error: 'Tenant context required' }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n\n  const [endpoints, apiKeys] = await Promise.all([\n    getCurrentOpenMercatoEndpointOptions(),\n    listOpenMercatoApiKeyOptions(em, {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId ?? null,\n    }),\n  ])\n\n  return NextResponse.json({ endpoints, apiKeys })\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Business Rules',\n  summary: 'List OpenMercato call action options',\n  methods: {\n    GET: {\n      summary: 'List OpenMercato call action options',\n      description:\n        'Returns executable Open Mercato API endpoint options and safe API key profile metadata for business-rule actions.',\n      responses: [\n        {\n          status: 200,\n          description: 'OpenMercato call options',\n          schema: optionsResponseSchema,\n        },\n      ],\n      errors: [\n        { status: 400, description: 'Tenant context missing', schema: errorResponseSchema },\n        { status: 401, description: 'Unauthorized', schema: errorResponseSchema },\n        { status: 403, description: 'Missing required features', schema: errorResponseSchema },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAGlB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP,MAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,IAAI,EAAE,OAAO;AAAA,EACb,MAAM,EAAE,OAAO,EAAE,SAAS;AAC5B,CAAC;AAED,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,IAAI,EAAE,OAAO;AAAA,EACb,MAAM,EAAE,OAAO;AAAA,EACf,QAAQ,EAAE,KAAK,CAAC,OAAO,QAAQ,OAAO,SAAS,QAAQ,CAAC;AAAA,EACxD,OAAO,EAAE,OAAO;AAAA,EAChB,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,aAAa,EAAE,OAAO,EAAE,SAAS;AACnC,CAAC;AAED,MAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,IAAI,EAAE,OAAO;AAAA,EACb,MAAM,EAAE,OAAO;AAAA,EACf,WAAW,EAAE,OAAO;AAAA,EACpB,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,EACpC,kBAAkB,EAAE,OAAO,EAAE,SAAS;AAAA,EACtC,OAAO,EAAE,MAAM,gBAAgB;AACjC,CAAC;AAED,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,WAAW,EAAE,MAAM,oBAAoB;AAAA,EACvC,SAAS,EAAE,MAAM,kBAAkB;AACrC,CAAC;AAED,MAAM,sBAAsB,EAAE,OAAO;AAAA,EACnC,OAAO,EAAE,OAAO;AAClB,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,yBAAyB,iBAAiB,EAAE;AAC1F;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,MAAI,CAAC,KAAK,UAAU;AAClB,WAAO,aAAa,KAAK,EAAE,OAAO,0BAA0B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAChF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AAEjC,QAAM,CAAC,WAAW,OAAO,IAAI,MAAM,QAAQ,IAAI;AAAA,IAC7C,qCAAqC;AAAA,IACrC,6BAA6B,IAAI;AAAA,MAC/B,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK,SAAS;AAAA,IAChC,CAAC;AAAA,EACH,CAAC;AAED,SAAO,aAAa,KAAK,EAAE,WAAW,QAAQ,CAAC;AACjD;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aACE;AAAA,MACF,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,0BAA0B,QAAQ,oBAAoB;AAAA,QAClF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,6BAA6B,QAAQ,oBAAoB;AAAA,MACvF;AAAA,IACF;AAAA,EACF;AACF;",
-  "names": []
-}

package/dist/modules/business_rules/events.js

@@ -1,13 +0,0 @@
-import { createModuleEvents } from "@open-mercato/shared/modules/events";
-const events = [
-  { id: "business_rules.rule.execution_failed", label: "Rule Execution Failed", entity: "rule", category: "lifecycle" }
-];
-const eventsConfig = createModuleEvents({ moduleId: "business_rules", events });
-const emitBusinessRulesEvent = eventsConfig.emit;
-var events_default = eventsConfig;
-export {
-  events_default as default,
-  emitBusinessRulesEvent,
-  eventsConfig
-};
-//# sourceMappingURL=events.js.map

package/dist/modules/business_rules/events.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../src/modules/business_rules/events.ts"],
-  "sourcesContent": ["import { createModuleEvents } from '@open-mercato/shared/modules/events'\n\nconst events = [\n  { id: 'business_rules.rule.execution_failed', label: 'Rule Execution Failed', entity: 'rule', category: 'lifecycle' },\n] as const\n\nexport const eventsConfig = createModuleEvents({ moduleId: 'business_rules', events })\nexport const emitBusinessRulesEvent = eventsConfig.emit\nexport type BusinessRulesEventId = typeof events[number]['id']\nexport default eventsConfig\n"],
-  "mappings": "AAAA,SAAS,0BAA0B;AAEnC,MAAM,SAAS;AAAA,EACb,EAAE,IAAI,wCAAwC,OAAO,yBAAyB,QAAQ,QAAQ,UAAU,YAAY;AACtH;AAEO,MAAM,eAAe,mBAAmB,EAAE,UAAU,kBAAkB,OAAO,CAAC;AAC9E,MAAM,yBAAyB,aAAa;AAEnD,IAAO,iBAAQ;",
-  "names": []
-}

package/dist/modules/business_rules/extension-points.js

@@ -1,13 +0,0 @@
-import { dataTableExtensionHost, defineModuleExtensionPoints } from "@open-mercato/shared/modules/widgets/extension-points";
-const extensionPoints = defineModuleExtensionPoints({
-  moduleId: "business_rules",
-  hosts: {
-    rulesTable: dataTableExtensionHost({ tableId: "business-rules.rules.list", source: "backend/rules/page.tsx" })
-  }
-});
-var extension_points_default = extensionPoints;
-export {
-  extension_points_default as default,
-  extensionPoints
-};
-//# sourceMappingURL=extension-points.js.map

package/dist/modules/business_rules/extension-points.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../src/modules/business_rules/extension-points.ts"],
-  "sourcesContent": ["import { dataTableExtensionHost, defineModuleExtensionPoints } from '@open-mercato/shared/modules/widgets/extension-points'\n\nexport const extensionPoints = defineModuleExtensionPoints({\n  moduleId: 'business_rules',\n  hosts: {\n    rulesTable: dataTableExtensionHost({ tableId: 'business-rules.rules.list', source: 'backend/rules/page.tsx' }),\n  },\n})\n\nexport default extensionPoints\n"],
-  "mappings": "AAAA,SAAS,wBAAwB,mCAAmC;AAE7D,MAAM,kBAAkB,4BAA4B;AAAA,EACzD,UAAU;AAAA,EACV,OAAO;AAAA,IACL,YAAY,uBAAuB,EAAE,SAAS,6BAA6B,QAAQ,yBAAyB,CAAC;AAAA,EAC/G;AACF,CAAC;AAED,IAAO,2BAAQ;",
-  "names": []
-}

package/dist/modules/business_rules/lib/openmercato-call-options-types.js

@@ -1,5 +0,0 @@
-const OPENMERCATO_CALL_METHODS = ["GET", "POST", "PUT", "PATCH", "DELETE"];
-export {
-  OPENMERCATO_CALL_METHODS
-};
-//# sourceMappingURL=openmercato-call-options-types.js.map