@open-mercato/documents 0.6.8-develop.7016.1.4ed7b1e49d

package/dist/modules/documents/lib/capabilities.js

@@ -0,0 +1,32 @@
+import { hasAllFeatures } from "@open-mercato/shared/lib/auth/featureMatch";
+import { hasTier } from "./permissions.js";
+function hasFeature(userFeatures, feature) {
+  return hasAllFeatures([feature], Array.from(userFeatures));
+}
+function hasDocumentsManagerOverride(userFeatures) {
+  return hasFeature(userFeatures, "documents.manage");
+}
+function deriveDocumentCapabilities(input) {
+  const managerOverride = input.managerOverride === true && hasDocumentsManagerOverride(input.userFeatures);
+  const hasRelationship = input.relationshipTier !== null || managerOverride;
+  const canCommentByTier = managerOverride || hasTier(input.relationshipTier, "commenter");
+  const canEditByTier = managerOverride || hasTier(input.relationshipTier, "editor");
+  const canOwnByTier = managerOverride || input.relationshipTier === "owner";
+  const archived = input.archived === true;
+  return {
+    canView: hasRelationship && hasFeature(input.userFeatures, "documents.view"),
+    canComment: !archived && canCommentByTier && hasFeature(input.userFeatures, "documents.view"),
+    canEdit: !archived && canEditByTier && hasFeature(input.userFeatures, "documents.edit"),
+    canShare: !archived && canOwnByTier && hasFeature(input.userFeatures, "documents.share"),
+    canDelete: canOwnByTier && hasFeature(input.userFeatures, "documents.delete"),
+    canCreate: hasFeature(input.userFeatures, "documents.create"),
+    canManageTemplates: hasFeature(input.userFeatures, "documents.templates.manage"),
+    canArchive: canOwnByTier && hasFeature(input.userFeatures, "documents.edit"),
+    canDuplicate: hasRelationship && hasFeature(input.userFeatures, "documents.create") && hasFeature(input.userFeatures, "documents.edit")
+  };
+}
+export {
+  deriveDocumentCapabilities,
+  hasDocumentsManagerOverride
+};
+//# sourceMappingURL=capabilities.js.map

package/dist/modules/documents/lib/capabilities.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/documents/lib/capabilities.ts"],
+  "sourcesContent": ["import { hasAllFeatures } from '@open-mercato/shared/lib/auth/featureMatch'\nimport { hasTier, type DocumentTier } from './permissions'\n\nexport type DocumentCapabilities = {\n  canView: boolean\n  canComment: boolean\n  canEdit: boolean\n  canShare: boolean\n  canDelete: boolean\n  canCreate: boolean\n  canManageTemplates: boolean\n  canArchive: boolean\n  canDuplicate: boolean\n}\n\nexport type DeriveDocumentCapabilitiesInput = {\n  relationshipTier: DocumentTier | null\n  managerOverride?: boolean\n  archived?: boolean\n  userFeatures: readonly string[]\n}\n\nfunction hasFeature(userFeatures: readonly string[], feature: string): boolean {\n  return hasAllFeatures([feature], Array.from(userFeatures))\n}\n\nexport function hasDocumentsManagerOverride(userFeatures: readonly string[]): boolean {\n  return hasFeature(userFeatures, 'documents.manage')\n}\n\nexport function deriveDocumentCapabilities(\n  input: DeriveDocumentCapabilitiesInput,\n): DocumentCapabilities {\n  const managerOverride = input.managerOverride === true\n    && hasDocumentsManagerOverride(input.userFeatures)\n  const hasRelationship = input.relationshipTier !== null || managerOverride\n  const canCommentByTier = managerOverride\n    || hasTier(input.relationshipTier, 'commenter')\n  const canEditByTier = managerOverride\n    || hasTier(input.relationshipTier, 'editor')\n  const canOwnByTier = managerOverride || input.relationshipTier === 'owner'\n  const archived = input.archived === true\n\n  return {\n    canView: hasRelationship && hasFeature(input.userFeatures, 'documents.view'),\n    canComment: !archived && canCommentByTier && hasFeature(input.userFeatures, 'documents.view'),\n    canEdit: !archived && canEditByTier && hasFeature(input.userFeatures, 'documents.edit'),\n    canShare: !archived && canOwnByTier && hasFeature(input.userFeatures, 'documents.share'),\n    canDelete: canOwnByTier && hasFeature(input.userFeatures, 'documents.delete'),\n    canCreate: hasFeature(input.userFeatures, 'documents.create'),\n    canManageTemplates: hasFeature(input.userFeatures, 'documents.templates.manage'),\n    canArchive: canOwnByTier && hasFeature(input.userFeatures, 'documents.edit'),\n    canDuplicate: hasRelationship\n      && hasFeature(input.userFeatures, 'documents.create')\n      && hasFeature(input.userFeatures, 'documents.edit'),\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,sBAAsB;AAC/B,SAAS,eAAkC;AAqB3C,SAAS,WAAW,cAAiC,SAA0B;AAC7E,SAAO,eAAe,CAAC,OAAO,GAAG,MAAM,KAAK,YAAY,CAAC;AAC3D;AAEO,SAAS,4BAA4B,cAA0C;AACpF,SAAO,WAAW,cAAc,kBAAkB;AACpD;AAEO,SAAS,2BACd,OACsB;AACtB,QAAM,kBAAkB,MAAM,oBAAoB,QAC7C,4BAA4B,MAAM,YAAY;AACnD,QAAM,kBAAkB,MAAM,qBAAqB,QAAQ;AAC3D,QAAM,mBAAmB,mBACpB,QAAQ,MAAM,kBAAkB,WAAW;AAChD,QAAM,gBAAgB,mBACjB,QAAQ,MAAM,kBAAkB,QAAQ;AAC7C,QAAM,eAAe,mBAAmB,MAAM,qBAAqB;AACnE,QAAM,WAAW,MAAM,aAAa;AAEpC,SAAO;AAAA,IACL,SAAS,mBAAmB,WAAW,MAAM,cAAc,gBAAgB;AAAA,IAC3E,YAAY,CAAC,YAAY,oBAAoB,WAAW,MAAM,cAAc,gBAAgB;AAAA,IAC5F,SAAS,CAAC,YAAY,iBAAiB,WAAW,MAAM,cAAc,gBAAgB;AAAA,IACtF,UAAU,CAAC,YAAY,gBAAgB,WAAW,MAAM,cAAc,iBAAiB;AAAA,IACvF,WAAW,gBAAgB,WAAW,MAAM,cAAc,kBAAkB;AAAA,IAC5E,WAAW,WAAW,MAAM,cAAc,kBAAkB;AAAA,IAC5D,oBAAoB,WAAW,MAAM,cAAc,4BAA4B;AAAA,IAC/E,YAAY,gBAAgB,WAAW,MAAM,cAAc,gBAAgB;AAAA,IAC3E,cAAc,mBACT,WAAW,MAAM,cAAc,kBAAkB,KACjD,WAAW,MAAM,cAAc,gBAAgB;AAAA,EACtD;AACF;",
+  "names": []
+}

package/dist/modules/documents/lib/collabCloseEvents.js

@@ -0,0 +1,17 @@
+const COLLAB_CONTENT_RESET_CLOSE_CODE = 4205;
+const COLLAB_CONTENT_RESET_CLOSE_REASON = "documents:content-reset";
+const COLLAB_CONTENT_RESET_CLOSE_EVENT = {
+  code: COLLAB_CONTENT_RESET_CLOSE_CODE,
+  reason: COLLAB_CONTENT_RESET_CLOSE_REASON
+};
+function isCollabContentResetCloseEvent(event) {
+  if (!event || typeof event !== "object") return false;
+  return event.reason === COLLAB_CONTENT_RESET_CLOSE_REASON;
+}
+export {
+  COLLAB_CONTENT_RESET_CLOSE_CODE,
+  COLLAB_CONTENT_RESET_CLOSE_EVENT,
+  COLLAB_CONTENT_RESET_CLOSE_REASON,
+  isCollabContentResetCloseEvent
+};
+//# sourceMappingURL=collabCloseEvents.js.map

package/dist/modules/documents/lib/collabCloseEvents.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/documents/lib/collabCloseEvents.ts"],
+  "sourcesContent": ["/**\n * Hocuspocus closes every socket of a room with `ResetConnection` (4205) both\n * when the room only needs to re-authenticate (share/archive changes) and when\n * its content was replaced server-side (version restore, content reset). The\n * provider reconnects with the SAME local Y.Doc in both cases \u2014 after a\n * content replacement that stale document would sync straight back into the\n * freshly loaded room and silently undo the restore. The sidecar therefore\n * closes content-replaced rooms with this dedicated reason so browsers know to\n * discard their local document before reconnecting.\n *\n * Only the reason is significant. Hocuspocus multiplexes documents over one\n * socket, so a per-document close reaches the browser as a Close *message*\n * that the provider surfaces with code 1000 and the server-supplied reason;\n * the 4205 code is only observed when the socket itself is closed.\n */\nexport const COLLAB_CONTENT_RESET_CLOSE_CODE = 4205\nexport const COLLAB_CONTENT_RESET_CLOSE_REASON = 'documents:content-reset'\nexport const COLLAB_CONTENT_RESET_CLOSE_EVENT = {\n  code: COLLAB_CONTENT_RESET_CLOSE_CODE,\n  reason: COLLAB_CONTENT_RESET_CLOSE_REASON,\n} as const\n\nexport function isCollabContentResetCloseEvent(event: unknown): boolean {\n  if (!event || typeof event !== 'object') return false\n  return (event as { reason?: unknown }).reason === COLLAB_CONTENT_RESET_CLOSE_REASON\n}\n"],
+  "mappings": "AAeO,MAAM,kCAAkC;AACxC,MAAM,oCAAoC;AAC1C,MAAM,mCAAmC;AAAA,EAC9C,MAAM;AAAA,EACN,QAAQ;AACV;AAEO,SAAS,+BAA+B,OAAyB;AACtE,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,SAAQ,MAA+B,WAAW;AACpD;",
+  "names": []
+}

package/dist/modules/documents/lib/collabEndpoint.js

@@ -0,0 +1,22 @@
+function isLoopbackHostname(hostname) {
+  return hostname === "localhost" || hostname.endsWith(".localhost") || hostname === "::1" || hostname === "::" || hostname === "0.0.0.0" || /^127(?:\.|$)/.test(hostname) || /^::ffff:7f[0-9a-f]{2}:/.test(hostname) || hostname === "::ffff:0:0";
+}
+function resolveDocumentsCollaborationEndpoint(raw = process.env.NEXT_PUBLIC_DOCUMENTS_COLLAB_URL, options = {}) {
+  if (!raw || raw !== raw.trim()) return null;
+  let endpoint;
+  try {
+    endpoint = new URL(raw);
+  } catch {
+    return null;
+  }
+  const hostname = endpoint.hostname.replace(/^\[|\]$/g, "").toLowerCase().replace(/\.$/, "");
+  if (!["ws:", "wss:"].includes(endpoint.protocol) || !hostname) return null;
+  const nodeEnv = options.nodeEnv ?? process.env.NODE_ENV;
+  const allowLoopback = options.allowLoopback ?? (nodeEnv !== "production" || process.env.OM_DOCUMENTS_COLLAB_INTEGRATION === "1");
+  if (!allowLoopback && isLoopbackHostname(hostname)) return null;
+  return raw;
+}
+export {
+  resolveDocumentsCollaborationEndpoint
+};
+//# sourceMappingURL=collabEndpoint.js.map

package/dist/modules/documents/lib/collabEndpoint.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/documents/lib/collabEndpoint.ts"],
+  "sourcesContent": ["export type CollaborationEndpointOptions = {\n  nodeEnv?: string\n  allowLoopback?: boolean\n}\n\nfunction isLoopbackHostname(hostname: string): boolean {\n  return hostname === 'localhost'\n    || hostname.endsWith('.localhost')\n    || hostname === '::1'\n    || hostname === '::'\n    || hostname === '0.0.0.0'\n    || /^127(?:\\.|$)/.test(hostname)\n    || /^::ffff:7f[0-9a-f]{2}:/.test(hostname)\n    || hostname === '::ffff:0:0'\n}\n\nexport function resolveDocumentsCollaborationEndpoint(\n  raw = process.env.NEXT_PUBLIC_DOCUMENTS_COLLAB_URL,\n  options: CollaborationEndpointOptions = {},\n): string | null {\n  if (!raw || raw !== raw.trim()) return null\n\n  let endpoint: URL\n  try {\n    endpoint = new URL(raw)\n  } catch {\n    return null\n  }\n\n  const hostname = endpoint.hostname\n    .replace(/^\\[|\\]$/g, '')\n    .toLowerCase()\n    .replace(/\\.$/, '')\n  if (!['ws:', 'wss:'].includes(endpoint.protocol) || !hostname) return null\n\n  const nodeEnv = options.nodeEnv ?? process.env.NODE_ENV\n  const allowLoopback = options.allowLoopback ?? (\n    nodeEnv !== 'production' || process.env.OM_DOCUMENTS_COLLAB_INTEGRATION === '1'\n  )\n  if (!allowLoopback && isLoopbackHostname(hostname)) return null\n\n  return raw\n}\n"],
+  "mappings": "AAKA,SAAS,mBAAmB,UAA2B;AACrD,SAAO,aAAa,eACf,SAAS,SAAS,YAAY,KAC9B,aAAa,SACb,aAAa,QACb,aAAa,aACb,eAAe,KAAK,QAAQ,KAC5B,yBAAyB,KAAK,QAAQ,KACtC,aAAa;AACpB;AAEO,SAAS,sCACd,MAAM,QAAQ,IAAI,kCAClB,UAAwC,CAAC,GAC1B;AACf,MAAI,CAAC,OAAO,QAAQ,IAAI,KAAK,EAAG,QAAO;AAEvC,MAAI;AACJ,MAAI;AACF,eAAW,IAAI,IAAI,GAAG;AAAA,EACxB,QAAQ;AACN,WAAO;AAAA,EACT;AAEA,QAAM,WAAW,SAAS,SACvB,QAAQ,YAAY,EAAE,EACtB,YAAY,EACZ,QAAQ,OAAO,EAAE;AACpB,MAAI,CAAC,CAAC,OAAO,MAAM,EAAE,SAAS,SAAS,QAAQ,KAAK,CAAC,SAAU,QAAO;AAEtE,QAAM,UAAU,QAAQ,WAAW,QAAQ,IAAI;AAC/C,QAAM,gBAAgB,QAAQ,kBAC5B,YAAY,gBAAgB,QAAQ,IAAI,oCAAoC;AAE9E,MAAI,CAAC,iBAAiB,mBAAmB,QAAQ,EAAG,QAAO;AAE3D,SAAO;AACT;",
+  "names": []
+}

package/dist/modules/documents/lib/collabMaterializer.js

@@ -0,0 +1,107 @@
+import { createRequire } from "node:module";
+import { TiptapTransformer } from "@hocuspocus/transformer";
+import { isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import * as Y from "yjs";
+import { deriveContentTextFromHtml } from "./contentService.js";
+import { COLLAB_FRAGMENT_FIELD, getDocumentEditorExtensions } from "./editorConfig.js";
+import { assertDocumentContentResourceLimits } from "./resourceLimits.js";
+const requireFromHere = createRequire(import.meta.url);
+let tiptapHtmlServer = null;
+function getTiptapHtmlServer() {
+  if (!tiptapHtmlServer) {
+    tiptapHtmlServer = requireFromHere("@tiptap/html/server");
+  }
+  return tiptapHtmlServer;
+}
+function hasRenderableContent(node) {
+  if (node.type === "text") return Boolean(node.text);
+  if (Array.isArray(node.content) && node.content.some(hasRenderableContent)) return true;
+  return Boolean(node.type && node.type !== "doc" && node.type !== "paragraph" && node.type !== "text");
+}
+function yDocToContent(ydoc) {
+  try {
+    if (ydoc.getXmlFragment(COLLAB_FRAGMENT_FIELD).length === 0) {
+      return { html: "", text: "" };
+    }
+    const json = TiptapTransformer.fromYdoc(ydoc, COLLAB_FRAGMENT_FIELD);
+    if (!json || !hasRenderableContent(json)) {
+      return { html: "", text: "" };
+    }
+    const { generateHTML } = getTiptapHtmlServer();
+    const html = generateHTML(json, getDocumentEditorExtensions());
+    const text = deriveContentTextFromHtml(html);
+    assertDocumentContentResourceLimits({ contentHtml: html, contentText: text });
+    return { html, text };
+  } catch (error) {
+    if (isCrudHttpError(error) && error.status === 413) throw error;
+    return null;
+  }
+}
+function htmlToYDoc(html) {
+  assertDocumentContentResourceLimits({ contentHtml: html });
+  if (!html.trim()) return new Y.Doc();
+  const extensions = getDocumentEditorExtensions();
+  const { generateJSON } = getTiptapHtmlServer();
+  const json = generateJSON(html, extensions);
+  return TiptapTransformer.toYdoc(json, COLLAB_FRAGMENT_FIELD, extensions);
+}
+function materializeDocumentHtml(html) {
+  try {
+    const ydoc = htmlToYDoc(html);
+    const content = yDocToContent(ydoc);
+    if (!content) return null;
+    const result = {
+      yjsState: Buffer.from(Y.encodeStateAsUpdate(ydoc)),
+      html: content.html,
+      text: content.text
+    };
+    assertDocumentContentResourceLimits({
+      yjsState: result.yjsState,
+      contentHtml: result.html,
+      contentText: result.text
+    });
+    return result;
+  } catch (error) {
+    if (isCrudHttpError(error) && error.status === 413) throw error;
+    return null;
+  }
+}
+function materializeDocumentContentReplacement(existingState, html) {
+  try {
+    assertDocumentContentResourceLimits({ yjsState: existingState, contentHtml: html });
+    const replacement = htmlToYDoc(html);
+    const ydoc = new Y.Doc();
+    if (existingState && existingState.length > 0) {
+      Y.applyUpdate(ydoc, new Uint8Array(existingState));
+    }
+    const target = ydoc.getXmlFragment(COLLAB_FRAGMENT_FIELD);
+    const replacementNodes = replacement.getXmlFragment(COLLAB_FRAGMENT_FIELD).toArray().filter((node) => node instanceof Y.XmlElement || node instanceof Y.XmlText).map((node) => node.clone());
+    ydoc.transact(() => {
+      if (target.length > 0) target.delete(0, target.length);
+      if (replacementNodes.length > 0) target.insert(0, replacementNodes);
+    });
+    const content = yDocToContent(ydoc);
+    if (!content) return null;
+    const result = {
+      yjsState: Buffer.from(Y.encodeStateAsUpdate(ydoc)),
+      html: content.html,
+      text: content.text
+    };
+    assertDocumentContentResourceLimits({
+      yjsState: result.yjsState,
+      contentHtml: result.html,
+      contentText: result.text
+    });
+    return result;
+  } catch (error) {
+    if (isCrudHttpError(error) && error.status === 413) throw error;
+    return null;
+  }
+}
+export {
+  htmlToYDoc,
+  materializeDocumentContentReplacement,
+  materializeDocumentHtml,
+  yDocToContent
+};
+//# sourceMappingURL=collabMaterializer.js.map

package/dist/modules/documents/lib/collabMaterializer.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/documents/lib/collabMaterializer.ts"],
+  "sourcesContent": ["import { createRequire } from 'node:module'\nimport type { JSONContent } from '@tiptap/core'\nimport { TiptapTransformer } from '@hocuspocus/transformer'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport * as Y from 'yjs'\nimport { deriveContentTextFromHtml } from './contentService'\nimport { COLLAB_FRAGMENT_FIELD, getDocumentEditorExtensions } from './editorConfig'\nimport { assertDocumentContentResourceLimits } from './resourceLimits'\n\ntype TiptapHtmlServer = typeof import('@tiptap/html/server')\n\nconst requireFromHere = createRequire(import.meta.url)\nlet tiptapHtmlServer: TiptapHtmlServer | null = null\n\nfunction getTiptapHtmlServer(): TiptapHtmlServer {\n  if (!tiptapHtmlServer) {\n    tiptapHtmlServer = requireFromHere('@tiptap/html/server') as TiptapHtmlServer\n  }\n  return tiptapHtmlServer\n}\n\nfunction hasRenderableContent(node: JSONContent): boolean {\n  if (node.type === 'text') return Boolean(node.text)\n  if (Array.isArray(node.content) && node.content.some(hasRenderableContent)) return true\n  return Boolean(node.type && node.type !== 'doc' && node.type !== 'paragraph' && node.type !== 'text')\n}\n\nexport function yDocToContent(ydoc: Y.Doc): { html: string; text: string } | null {\n  try {\n    if (ydoc.getXmlFragment(COLLAB_FRAGMENT_FIELD).length === 0) {\n      return { html: '', text: '' }\n    }\n\n    const json = TiptapTransformer.fromYdoc(ydoc, COLLAB_FRAGMENT_FIELD) as JSONContent | null\n    if (!json || !hasRenderableContent(json)) {\n      return { html: '', text: '' }\n    }\n\n    const { generateHTML } = getTiptapHtmlServer()\n    const html = generateHTML(json, getDocumentEditorExtensions())\n    const text = deriveContentTextFromHtml(html)\n    assertDocumentContentResourceLimits({ contentHtml: html, contentText: text })\n    return { html, text }\n  } catch (error) {\n    if (isCrudHttpError(error) && error.status === 413) throw error\n    return null\n  }\n}\n\nexport function htmlToYDoc(html: string): Y.Doc {\n  assertDocumentContentResourceLimits({ contentHtml: html })\n  if (!html.trim()) return new Y.Doc()\n\n  const extensions = getDocumentEditorExtensions()\n  const { generateJSON } = getTiptapHtmlServer()\n  const json = generateJSON(html, extensions) as JSONContent\n  return TiptapTransformer.toYdoc(json, COLLAB_FRAGMENT_FIELD, extensions)\n}\n\nexport type MaterializedDocumentHtml = {\n  yjsState: Buffer\n  html: string\n  text: string\n}\n\n/**\n * Convert authored HTML through the same editor/Yjs pipeline used by persisted\n * document content. Callers that preview content before writing it must use the\n * returned HTML too, otherwise the preview can differ from the canonical markup\n * users receive after the document is created.\n */\nexport function materializeDocumentHtml(html: string): MaterializedDocumentHtml | null {\n  try {\n    const ydoc = htmlToYDoc(html)\n    const content = yDocToContent(ydoc)\n    if (!content) return null\n    const result = {\n      yjsState: Buffer.from(Y.encodeStateAsUpdate(ydoc)),\n      html: content.html,\n      text: content.text,\n    }\n    assertDocumentContentResourceLimits({\n      yjsState: result.yjsState,\n      contentHtml: result.html,\n      contentText: result.text,\n    })\n    return result\n  } catch (error) {\n    if (isCrudHttpError(error) && error.status === 413) throw error\n    return null\n  }\n}\n\n/**\n * Replace REST-authored content as a Yjs update derived from the current CRDT\n * epoch. Keeping the old structs as deleted tombstones means a retained client\n * can merge the replacement without resurrecting or duplicating stale text.\n */\nexport function materializeDocumentContentReplacement(\n  existingState: Buffer | Uint8Array | null | undefined,\n  html: string,\n): MaterializedDocumentHtml | null {\n  try {\n    assertDocumentContentResourceLimits({ yjsState: existingState, contentHtml: html })\n    const replacement = htmlToYDoc(html)\n    const ydoc = new Y.Doc()\n    if (existingState && existingState.length > 0) {\n      Y.applyUpdate(ydoc, new Uint8Array(existingState))\n    }\n\n    const target = ydoc.getXmlFragment(COLLAB_FRAGMENT_FIELD)\n    const replacementNodes = replacement\n      .getXmlFragment(COLLAB_FRAGMENT_FIELD)\n      .toArray()\n      .filter((node): node is Y.XmlElement | Y.XmlText => (\n        node instanceof Y.XmlElement || node instanceof Y.XmlText\n      ))\n      .map((node) => node.clone())\n    ydoc.transact(() => {\n      if (target.length > 0) target.delete(0, target.length)\n      if (replacementNodes.length > 0) target.insert(0, replacementNodes)\n    })\n    const content = yDocToContent(ydoc)\n    if (!content) return null\n    const result = {\n      yjsState: Buffer.from(Y.encodeStateAsUpdate(ydoc)),\n      html: content.html,\n      text: content.text,\n    }\n    assertDocumentContentResourceLimits({\n      yjsState: result.yjsState,\n      contentHtml: result.html,\n      contentText: result.text,\n    })\n    return result\n  } catch (error) {\n    if (isCrudHttpError(error) && error.status === 413) throw error\n    return null\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,qBAAqB;AAE9B,SAAS,yBAAyB;AAClC,SAAS,uBAAuB;AAChC,YAAY,OAAO;AACnB,SAAS,iCAAiC;AAC1C,SAAS,uBAAuB,mCAAmC;AACnE,SAAS,2CAA2C;AAIpD,MAAM,kBAAkB,cAAc,YAAY,GAAG;AACrD,IAAI,mBAA4C;AAEhD,SAAS,sBAAwC;AAC/C,MAAI,CAAC,kBAAkB;AACrB,uBAAmB,gBAAgB,qBAAqB;AAAA,EAC1D;AACA,SAAO;AACT;AAEA,SAAS,qBAAqB,MAA4B;AACxD,MAAI,KAAK,SAAS,OAAQ,QAAO,QAAQ,KAAK,IAAI;AAClD,MAAI,MAAM,QAAQ,KAAK,OAAO,KAAK,KAAK,QAAQ,KAAK,oBAAoB,EAAG,QAAO;AACnF,SAAO,QAAQ,KAAK,QAAQ,KAAK,SAAS,SAAS,KAAK,SAAS,eAAe,KAAK,SAAS,MAAM;AACtG;AAEO,SAAS,cAAc,MAAoD;AAChF,MAAI;AACF,QAAI,KAAK,eAAe,qBAAqB,EAAE,WAAW,GAAG;AAC3D,aAAO,EAAE,MAAM,IAAI,MAAM,GAAG;AAAA,IAC9B;AAEA,UAAM,OAAO,kBAAkB,SAAS,MAAM,qBAAqB;AACnE,QAAI,CAAC,QAAQ,CAAC,qBAAqB,IAAI,GAAG;AACxC,aAAO,EAAE,MAAM,IAAI,MAAM,GAAG;AAAA,IAC9B;AAEA,UAAM,EAAE,aAAa,IAAI,oBAAoB;AAC7C,UAAM,OAAO,aAAa,MAAM,4BAA4B,CAAC;AAC7D,UAAM,OAAO,0BAA0B,IAAI;AAC3C,wCAAoC,EAAE,aAAa,MAAM,aAAa,KAAK,CAAC;AAC5E,WAAO,EAAE,MAAM,KAAK;AAAA,EACtB,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,KAAK,MAAM,WAAW,IAAK,OAAM;AAC1D,WAAO;AAAA,EACT;AACF;AAEO,SAAS,WAAW,MAAqB;AAC9C,sCAAoC,EAAE,aAAa,KAAK,CAAC;AACzD,MAAI,CAAC,KAAK,KAAK,EAAG,QAAO,IAAI,EAAE,IAAI;AAEnC,QAAM,aAAa,4BAA4B;AAC/C,QAAM,EAAE,aAAa,IAAI,oBAAoB;AAC7C,QAAM,OAAO,aAAa,MAAM,UAAU;AAC1C,SAAO,kBAAkB,OAAO,MAAM,uBAAuB,UAAU;AACzE;AAcO,SAAS,wBAAwB,MAA+C;AACrF,MAAI;AACF,UAAM,OAAO,WAAW,IAAI;AAC5B,UAAM,UAAU,cAAc,IAAI;AAClC,QAAI,CAAC,QAAS,QAAO;AACrB,UAAM,SAAS;AAAA,MACb,UAAU,OAAO,KAAK,EAAE,oBAAoB,IAAI,CAAC;AAAA,MACjD,MAAM,QAAQ;AAAA,MACd,MAAM,QAAQ;AAAA,IAChB;AACA,wCAAoC;AAAA,MAClC,UAAU,OAAO;AAAA,MACjB,aAAa,OAAO;AAAA,MACpB,aAAa,OAAO;AAAA,IACtB,CAAC;AACD,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,KAAK,MAAM,WAAW,IAAK,OAAM;AAC1D,WAAO;AAAA,EACT;AACF;AAOO,SAAS,sCACd,eACA,MACiC;AACjC,MAAI;AACF,wCAAoC,EAAE,UAAU,eAAe,aAAa,KAAK,CAAC;AAClF,UAAM,cAAc,WAAW,IAAI;AACnC,UAAM,OAAO,IAAI,EAAE,IAAI;AACvB,QAAI,iBAAiB,cAAc,SAAS,GAAG;AAC7C,QAAE,YAAY,MAAM,IAAI,WAAW,aAAa,CAAC;AAAA,IACnD;AAEA,UAAM,SAAS,KAAK,eAAe,qBAAqB;AACxD,UAAM,mBAAmB,YACtB,eAAe,qBAAqB,EACpC,QAAQ,EACR,OAAO,CAAC,SACP,gBAAgB,EAAE,cAAc,gBAAgB,EAAE,OACnD,EACA,IAAI,CAAC,SAAS,KAAK,MAAM,CAAC;AAC7B,SAAK,SAAS,MAAM;AAClB,UAAI,OAAO,SAAS,EAAG,QAAO,OAAO,GAAG,OAAO,MAAM;AACrD,UAAI,iBAAiB,SAAS,EAAG,QAAO,OAAO,GAAG,gBAAgB;AAAA,IACpE,CAAC;AACD,UAAM,UAAU,cAAc,IAAI;AAClC,QAAI,CAAC,QAAS,QAAO;AACrB,UAAM,SAAS;AAAA,MACb,UAAU,OAAO,KAAK,EAAE,oBAAoB,IAAI,CAAC;AAAA,MACjD,MAAM,QAAQ;AAAA,MACd,MAAM,QAAQ;AAAA,IAChB;AACA,wCAAoC;AAAA,MAClC,UAAU,OAAO;AAAA,MACjB,aAAa,OAAO;AAAA,MACpB,aAAa,OAAO;AAAA,IACtB,CAAC;AACD,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,KAAK,MAAM,WAAW,IAAK,OAAM;AAC1D,WAAO;AAAA,EACT;AACF;",
+  "names": []
+}

package/dist/modules/documents/lib/collabToken.js

@@ -0,0 +1,120 @@
+import { signJwt, verifyJwt } from "@open-mercato/shared/lib/auth/jwt";
+const COLLAB_TOKEN_AUDIENCE = "documents-collab";
+const COLLAB_TOKEN_V2_AUDIENCE = "documents-collab-v2";
+const COLLAB_TOKEN_TTL_SECONDS = 60;
+const COLLAB_TOKEN_CLOCK_SKEW_SECONDS = 5;
+const COLLAB_TOKEN_V2_MIN_SECRET_BYTES = 32;
+function isNonEmptyString(value) {
+  return typeof value === "string" && value.trim().length > 0;
+}
+function isDocumentTier(value) {
+  return value === "owner" || value === "editor" || value === "commenter" || value === "viewer";
+}
+function readV2Secret() {
+  const secret = process.env.DOCUMENTS_COLLAB_JWT_SECRET_V2?.trim();
+  if (!secret || new TextEncoder().encode(secret).byteLength < COLLAB_TOKEN_V2_MIN_SECRET_BYTES) {
+    return null;
+  }
+  const explicitV1Secret = process.env.DOCUMENTS_COLLAB_JWT_SECRET?.trim();
+  return explicitV1Secret === secret ? null : secret;
+}
+function isCollabTokenV2Ready() {
+  return readV2Secret() !== null;
+}
+function requireV2Secret() {
+  const secret = readV2Secret();
+  if (!secret) {
+    throw new Error(
+      `[internal] DOCUMENTS_COLLAB_JWT_SECRET_V2 must contain at least ${COLLAB_TOKEN_V2_MIN_SECRET_BYTES} UTF-8 bytes and differ from DOCUMENTS_COLLAB_JWT_SECRET`
+    );
+  }
+  return secret;
+}
+function readCommonClaims(claims) {
+  const { userId, tenantId, organizationId, documentId, tier } = claims;
+  if (!isNonEmptyString(userId) || !isNonEmptyString(tenantId) || !isNonEmptyString(organizationId) || !isNonEmptyString(documentId) || !isDocumentTier(tier)) {
+    return null;
+  }
+  return { userId, tenantId, organizationId, documentId, tier };
+}
+function mintCollabToken(claims) {
+  return signJwt(
+    { ...claims, sub: claims.userId },
+    {
+      audience: COLLAB_TOKEN_AUDIENCE,
+      secret: process.env.DOCUMENTS_COLLAB_JWT_SECRET,
+      expiresInSec: COLLAB_TOKEN_TTL_SECONDS
+    }
+  );
+}
+function resolveLegacyCollabTokenVerifier(env = process.env) {
+  const secret = env.DOCUMENTS_COLLAB_JWT_SECRET?.trim();
+  if (!secret || new TextEncoder().encode(secret).byteLength < COLLAB_TOKEN_V2_MIN_SECRET_BYTES) {
+    return null;
+  }
+  return verifyCollabToken;
+}
+function verifyCollabToken(token) {
+  let payload;
+  try {
+    payload = verifyJwt(token, {
+      audience: COLLAB_TOKEN_AUDIENCE,
+      secret: process.env.DOCUMENTS_COLLAB_JWT_SECRET
+    });
+  } catch {
+    return null;
+  }
+  if (!payload || typeof payload !== "object") return null;
+  return readCommonClaims(payload);
+}
+function mintCollabTokenV2(claims) {
+  return signJwt(
+    { ...claims, sub: claims.userId },
+    {
+      audience: COLLAB_TOKEN_V2_AUDIENCE,
+      secret: requireV2Secret(),
+      expiresInSec: COLLAB_TOKEN_TTL_SECONDS
+    }
+  );
+}
+function verifyCollabTokenV2(token) {
+  const secret = readV2Secret();
+  if (!secret) return null;
+  let payload;
+  try {
+    payload = verifyJwt(token, {
+      audience: COLLAB_TOKEN_V2_AUDIENCE,
+      secret
+    });
+  } catch {
+    return null;
+  }
+  if (!payload || typeof payload !== "object") return null;
+  const claims = payload;
+  const common = readCommonClaims(claims);
+  const { exp, iat, readOnly, tokenVersion } = claims;
+  const now = Math.floor(Date.now() / 1e3);
+  if (!common || tokenVersion !== 2 || typeof readOnly !== "boolean" || typeof exp !== "number" || !Number.isInteger(exp) || typeof iat !== "number" || !Number.isInteger(iat) || exp <= now || exp <= iat || exp - iat > COLLAB_TOKEN_TTL_SECONDS || iat > now + COLLAB_TOKEN_CLOCK_SKEW_SECONDS || exp > now + COLLAB_TOKEN_TTL_SECONDS + COLLAB_TOKEN_CLOCK_SKEW_SECONDS) {
+    return null;
+  }
+  return {
+    ...common,
+    tokenVersion,
+    readOnly,
+    exp
+  };
+}
+export {
+  COLLAB_TOKEN_AUDIENCE,
+  COLLAB_TOKEN_CLOCK_SKEW_SECONDS,
+  COLLAB_TOKEN_TTL_SECONDS,
+  COLLAB_TOKEN_V2_AUDIENCE,
+  COLLAB_TOKEN_V2_MIN_SECRET_BYTES,
+  isCollabTokenV2Ready,
+  mintCollabToken,
+  mintCollabTokenV2,
+  resolveLegacyCollabTokenVerifier,
+  verifyCollabToken,
+  verifyCollabTokenV2
+};
+//# sourceMappingURL=collabToken.js.map

package/dist/modules/documents/lib/collabToken.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/documents/lib/collabToken.ts"],
+  "sourcesContent": ["import { signJwt, verifyJwt } from '@open-mercato/shared/lib/auth/jwt'\nimport type { DocumentTier } from '../lib/permissions'\n\nexport const COLLAB_TOKEN_AUDIENCE = 'documents-collab'\nexport const COLLAB_TOKEN_V2_AUDIENCE = 'documents-collab-v2'\nexport const COLLAB_TOKEN_TTL_SECONDS = 60\nexport const COLLAB_TOKEN_CLOCK_SKEW_SECONDS = 5\nexport const COLLAB_TOKEN_V2_MIN_SECRET_BYTES = 32\n\nexport type CollabTokenClaims = {\n  userId: string\n  tenantId: string\n  organizationId: string\n  documentId: string\n  tier: DocumentTier\n}\n\nexport type CollabTokenV2MintInput = CollabTokenClaims & {\n  tokenVersion: 2\n  readOnly: boolean\n}\n\nexport type VerifiedCollabTokenV2Claims = CollabTokenV2MintInput & {\n  exp: number\n}\n\nfunction isNonEmptyString(value: unknown): value is string {\n  return typeof value === 'string' && value.trim().length > 0\n}\n\nfunction isDocumentTier(value: unknown): value is DocumentTier {\n  return value === 'owner' || value === 'editor' || value === 'commenter' || value === 'viewer'\n}\n\nfunction readV2Secret(): string | null {\n  const secret = process.env.DOCUMENTS_COLLAB_JWT_SECRET_V2?.trim()\n  if (!secret || new TextEncoder().encode(secret).byteLength < COLLAB_TOKEN_V2_MIN_SECRET_BYTES) {\n    return null\n  }\n  const explicitV1Secret = process.env.DOCUMENTS_COLLAB_JWT_SECRET?.trim()\n  return explicitV1Secret === secret ? null : secret\n}\n\nexport function isCollabTokenV2Ready(): boolean {\n  return readV2Secret() !== null\n}\n\nfunction requireV2Secret(): string {\n  const secret = readV2Secret()\n  if (!secret) {\n    throw new Error(\n      `[internal] DOCUMENTS_COLLAB_JWT_SECRET_V2 must contain at least ${COLLAB_TOKEN_V2_MIN_SECRET_BYTES} UTF-8 bytes and differ from DOCUMENTS_COLLAB_JWT_SECRET`,\n    )\n  }\n  return secret\n}\n\nfunction readCommonClaims(claims: Record<string, unknown>): CollabTokenClaims | null {\n  const { userId, tenantId, organizationId, documentId, tier } = claims\n  if (\n    !isNonEmptyString(userId)\n    || !isNonEmptyString(tenantId)\n    || !isNonEmptyString(organizationId)\n    || !isNonEmptyString(documentId)\n    || !isDocumentTier(tier)\n  ) {\n    return null\n  }\n\n  return { userId, tenantId, organizationId, documentId, tier }\n}\n\nexport function mintCollabToken(claims: CollabTokenClaims): string {\n  return signJwt(\n    { ...claims, sub: claims.userId },\n    {\n      audience: COLLAB_TOKEN_AUDIENCE,\n      secret: process.env.DOCUMENTS_COLLAB_JWT_SECRET,\n      expiresInSec: COLLAB_TOKEN_TTL_SECONDS,\n    },\n  )\n}\n\n/**\n * Legacy v1 acceptance is a rollout bridge only. Nothing mints v1 tokens\n * anymore, so the sidecar accepts them solely while a dedicated\n * DOCUMENTS_COLLAB_JWT_SECRET is explicitly configured and at least as strong\n * as the v2 minimum. Default deployments (derived JWT_SECRET fallback) accept\n * v2 tokens exclusively.\n */\nexport function resolveLegacyCollabTokenVerifier(\n  env: Record<string, string | undefined> = process.env,\n): ((token: string) => CollabTokenClaims | null) | null {\n  const secret = env.DOCUMENTS_COLLAB_JWT_SECRET?.trim()\n  if (!secret || new TextEncoder().encode(secret).byteLength < COLLAB_TOKEN_V2_MIN_SECRET_BYTES) {\n    return null\n  }\n  return verifyCollabToken\n}\n\nexport function verifyCollabToken(token: string): CollabTokenClaims | null {\n  let payload: unknown\n  try {\n    payload = verifyJwt(token, {\n      audience: COLLAB_TOKEN_AUDIENCE,\n      secret: process.env.DOCUMENTS_COLLAB_JWT_SECRET,\n    })\n  } catch {\n    return null\n  }\n\n  if (!payload || typeof payload !== 'object') return null\n\n  return readCommonClaims(payload as Record<string, unknown>)\n}\n\nexport function mintCollabTokenV2(claims: CollabTokenV2MintInput): string {\n  return signJwt(\n    { ...claims, sub: claims.userId },\n    {\n      audience: COLLAB_TOKEN_V2_AUDIENCE,\n      secret: requireV2Secret(),\n      expiresInSec: COLLAB_TOKEN_TTL_SECONDS,\n    },\n  )\n}\n\nexport function verifyCollabTokenV2(token: string): VerifiedCollabTokenV2Claims | null {\n  const secret = readV2Secret()\n  if (!secret) return null\n\n  let payload: unknown\n  try {\n    payload = verifyJwt(token, {\n      audience: COLLAB_TOKEN_V2_AUDIENCE,\n      secret,\n    })\n  } catch {\n    return null\n  }\n  if (!payload || typeof payload !== 'object') return null\n\n  const claims = payload as Record<string, unknown>\n  const common = readCommonClaims(claims)\n  const { exp, iat, readOnly, tokenVersion } = claims\n  const now = Math.floor(Date.now() / 1000)\n  if (\n    !common\n    || tokenVersion !== 2\n    || typeof readOnly !== 'boolean'\n    || typeof exp !== 'number'\n    || !Number.isInteger(exp)\n    || typeof iat !== 'number'\n    || !Number.isInteger(iat)\n    || exp <= now\n    || exp <= iat\n    || exp - iat > COLLAB_TOKEN_TTL_SECONDS\n    || iat > now + COLLAB_TOKEN_CLOCK_SKEW_SECONDS\n    || exp > now + COLLAB_TOKEN_TTL_SECONDS + COLLAB_TOKEN_CLOCK_SKEW_SECONDS\n  ) {\n    return null\n  }\n\n  return {\n    ...common,\n    tokenVersion,\n    readOnly,\n    exp,\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS,iBAAiB;AAG5B,MAAM,wBAAwB;AAC9B,MAAM,2BAA2B;AACjC,MAAM,2BAA2B;AACjC,MAAM,kCAAkC;AACxC,MAAM,mCAAmC;AAmBhD,SAAS,iBAAiB,OAAiC;AACzD,SAAO,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS;AAC5D;AAEA,SAAS,eAAe,OAAuC;AAC7D,SAAO,UAAU,WAAW,UAAU,YAAY,UAAU,eAAe,UAAU;AACvF;AAEA,SAAS,eAA8B;AACrC,QAAM,SAAS,QAAQ,IAAI,gCAAgC,KAAK;AAChE,MAAI,CAAC,UAAU,IAAI,YAAY,EAAE,OAAO,MAAM,EAAE,aAAa,kCAAkC;AAC7F,WAAO;AAAA,EACT;AACA,QAAM,mBAAmB,QAAQ,IAAI,6BAA6B,KAAK;AACvE,SAAO,qBAAqB,SAAS,OAAO;AAC9C;AAEO,SAAS,uBAAgC;AAC9C,SAAO,aAAa,MAAM;AAC5B;AAEA,SAAS,kBAA0B;AACjC,QAAM,SAAS,aAAa;AAC5B,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI;AAAA,MACR,mEAAmE,gCAAgC;AAAA,IACrG;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,QAA2D;AACnF,QAAM,EAAE,QAAQ,UAAU,gBAAgB,YAAY,KAAK,IAAI;AAC/D,MACE,CAAC,iBAAiB,MAAM,KACrB,CAAC,iBAAiB,QAAQ,KAC1B,CAAC,iBAAiB,cAAc,KAChC,CAAC,iBAAiB,UAAU,KAC5B,CAAC,eAAe,IAAI,GACvB;AACA,WAAO;AAAA,EACT;AAEA,SAAO,EAAE,QAAQ,UAAU,gBAAgB,YAAY,KAAK;AAC9D;AAEO,SAAS,gBAAgB,QAAmC;AACjE,SAAO;AAAA,IACL,EAAE,GAAG,QAAQ,KAAK,OAAO,OAAO;AAAA,IAChC;AAAA,MACE,UAAU;AAAA,MACV,QAAQ,QAAQ,IAAI;AAAA,MACpB,cAAc;AAAA,IAChB;AAAA,EACF;AACF;AASO,SAAS,iCACd,MAA0C,QAAQ,KACI;AACtD,QAAM,SAAS,IAAI,6BAA6B,KAAK;AACrD,MAAI,CAAC,UAAU,IAAI,YAAY,EAAE,OAAO,MAAM,EAAE,aAAa,kCAAkC;AAC7F,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEO,SAAS,kBAAkB,OAAyC;AACzE,MAAI;AACJ,MAAI;AACF,cAAU,UAAU,OAAO;AAAA,MACzB,UAAU;AAAA,MACV,QAAQ,QAAQ,IAAI;AAAA,IACtB,CAAC;AAAA,EACH,QAAQ;AACN,WAAO;AAAA,EACT;AAEA,MAAI,CAAC,WAAW,OAAO,YAAY,SAAU,QAAO;AAEpD,SAAO,iBAAiB,OAAkC;AAC5D;AAEO,SAAS,kBAAkB,QAAwC;AACxE,SAAO;AAAA,IACL,EAAE,GAAG,QAAQ,KAAK,OAAO,OAAO;AAAA,IAChC;AAAA,MACE,UAAU;AAAA,MACV,QAAQ,gBAAgB;AAAA,MACxB,cAAc;AAAA,IAChB;AAAA,EACF;AACF;AAEO,SAAS,oBAAoB,OAAmD;AACrF,QAAM,SAAS,aAAa;AAC5B,MAAI,CAAC,OAAQ,QAAO;AAEpB,MAAI;AACJ,MAAI;AACF,cAAU,UAAU,OAAO;AAAA,MACzB,UAAU;AAAA,MACV;AAAA,IACF,CAAC;AAAA,EACH,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI,CAAC,WAAW,OAAO,YAAY,SAAU,QAAO;AAEpD,QAAM,SAAS;AACf,QAAM,SAAS,iBAAiB,MAAM;AACtC,QAAM,EAAE,KAAK,KAAK,UAAU,aAAa,IAAI;AAC7C,QAAM,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AACxC,MACE,CAAC,UACE,iBAAiB,KACjB,OAAO,aAAa,aACpB,OAAO,QAAQ,YACf,CAAC,OAAO,UAAU,GAAG,KACrB,OAAO,QAAQ,YACf,CAAC,OAAO,UAAU,GAAG,KACrB,OAAO,OACP,OAAO,OACP,MAAM,MAAM,4BACZ,MAAM,MAAM,mCACZ,MAAM,MAAM,2BAA2B,iCAC1C;AACA,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL,GAAG;AAAA,IACH;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/documents/lib/collaborationAwareness.js

@@ -0,0 +1,68 @@
+import { sanitizeDocumentsDisplayLabel } from "./displayLabels.js";
+const COLLABORATION_COLOR_FALLBACK = "#64748b";
+const COLLABORATION_COLOR_PATTERN = /^#[0-9a-f]{6}$/i;
+const UNSAFE_AWARENESS_NAME_PATTERN = /[\u0000-\u001f\u007f-\u009f\u061c\u200b-\u200f\u202a-\u202e\u2060-\u2069\ufeff]/u;
+const MAX_AWARENESS_NAME_LENGTH = 120;
+function isEncryptedAwarenessName(value) {
+  const parts = value.split(":");
+  return parts.length === 4 && parts[3] === "v1";
+}
+function hashString(value) {
+  let hash = 2166136261;
+  for (let index = 0; index < value.length; index += 1) {
+    hash ^= value.charCodeAt(index);
+    hash = Math.imul(hash, 16777619);
+  }
+  return hash >>> 0;
+}
+function channelToHex(value) {
+  return Math.round(value).toString(16).padStart(2, "0");
+}
+function hslToHex(hue, saturationPercent, lightnessPercent) {
+  const saturation = saturationPercent / 100;
+  const lightness = lightnessPercent / 100;
+  const chroma = (1 - Math.abs(2 * lightness - 1)) * saturation;
+  const intermediate = chroma * (1 - Math.abs(hue / 60 % 2 - 1));
+  const match = lightness - chroma / 2;
+  const [red, green, blue] = hue < 60 ? [chroma, intermediate, 0] : hue < 120 ? [intermediate, chroma, 0] : hue < 180 ? [0, chroma, intermediate] : hue < 240 ? [0, intermediate, chroma] : hue < 300 ? [intermediate, 0, chroma] : [chroma, 0, intermediate];
+  return `#${channelToHex((red + match) * 255)}${channelToHex((green + match) * 255)}${channelToHex((blue + match) * 255)}`;
+}
+function normalizeCollaborationColor(value) {
+  if (typeof value !== "string" || !COLLABORATION_COLOR_PATTERN.test(value)) {
+    return COLLABORATION_COLOR_FALLBACK;
+  }
+  return value.toLowerCase();
+}
+function resolveCollaborationUserColor(userId) {
+  return hslToHex(hashString(userId) % 360, 64, 42);
+}
+function sanitizeCollaborationAwarenessName(value) {
+  const label = sanitizeDocumentsDisplayLabel(value);
+  if (!label || label.length > MAX_AWARENESS_NAME_LENGTH || UNSAFE_AWARENESS_NAME_PATTERN.test(label) || isEncryptedAwarenessName(label)) {
+    return "";
+  }
+  return label;
+}
+function firstSafeCollaborationAwarenessName(...values) {
+  for (const value of values) {
+    const label = sanitizeCollaborationAwarenessName(value);
+    if (label) return label;
+  }
+  return "";
+}
+function createCanonicalCollaborationAwarenessUser(userId, name) {
+  return {
+    id: userId,
+    name: sanitizeCollaborationAwarenessName(name),
+    color: resolveCollaborationUserColor(userId)
+  };
+}
+export {
+  COLLABORATION_COLOR_FALLBACK,
+  createCanonicalCollaborationAwarenessUser,
+  firstSafeCollaborationAwarenessName,
+  normalizeCollaborationColor,
+  resolveCollaborationUserColor,
+  sanitizeCollaborationAwarenessName
+};
+//# sourceMappingURL=collaborationAwareness.js.map

package/dist/modules/documents/lib/collaborationAwareness.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/documents/lib/collaborationAwareness.ts"],
+  "sourcesContent": ["import { sanitizeDocumentsDisplayLabel } from './displayLabels'\n\nexport const COLLABORATION_COLOR_FALLBACK = '#64748b'\n\nconst COLLABORATION_COLOR_PATTERN = /^#[0-9a-f]{6}$/i\nconst UNSAFE_AWARENESS_NAME_PATTERN =\n  /[\\u0000-\\u001f\\u007f-\\u009f\\u061c\\u200b-\\u200f\\u202a-\\u202e\\u2060-\\u2069\\ufeff]/u\nconst MAX_AWARENESS_NAME_LENGTH = 120\n\nfunction isEncryptedAwarenessName(value: string): boolean {\n  const parts = value.split(':')\n  return parts.length === 4 && parts[3] === 'v1'\n}\n\nfunction hashString(value: string): number {\n  let hash = 2166136261\n  for (let index = 0; index < value.length; index += 1) {\n    hash ^= value.charCodeAt(index)\n    hash = Math.imul(hash, 16777619)\n  }\n  return hash >>> 0\n}\n\nfunction channelToHex(value: number): string {\n  return Math.round(value).toString(16).padStart(2, '0')\n}\n\nfunction hslToHex(hue: number, saturationPercent: number, lightnessPercent: number): string {\n  const saturation = saturationPercent / 100\n  const lightness = lightnessPercent / 100\n  const chroma = (1 - Math.abs(2 * lightness - 1)) * saturation\n  const intermediate = chroma * (1 - Math.abs(((hue / 60) % 2) - 1))\n  const match = lightness - chroma / 2\n  const [red, green, blue] =\n    hue < 60 ? [chroma, intermediate, 0]\n      : hue < 120 ? [intermediate, chroma, 0]\n        : hue < 180 ? [0, chroma, intermediate]\n          : hue < 240 ? [0, intermediate, chroma]\n            : hue < 300 ? [intermediate, 0, chroma]\n              : [chroma, 0, intermediate]\n  return `#${channelToHex((red + match) * 255)}${channelToHex((green + match) * 255)}${channelToHex((blue + match) * 255)}`\n}\n\n/**\n * Awareness colors are interpolated into inline styles by TipTap. Accept only\n * the single canonical representation emitted by the server, never general\n * CSS color syntax.\n */\nexport function normalizeCollaborationColor(value: unknown): string {\n  if (typeof value !== 'string' || !COLLABORATION_COLOR_PATTERN.test(value)) {\n    return COLLABORATION_COLOR_FALLBACK\n  }\n  return value.toLowerCase()\n}\n\nexport function resolveCollaborationUserColor(userId: string): string {\n  return hslToHex(hashString(userId) % 360, 64, 42)\n}\n\n/**\n * Presence names come from an authenticated profile, but still cross the Yjs\n * awareness boundary. Reject control, directionality, zero-width and UUID\n * content and encryption envelopes so a collaborator cannot visually\n * impersonate another identity or leak internal data through a caret label.\n */\nexport function sanitizeCollaborationAwarenessName(value: unknown): string {\n  const label = sanitizeDocumentsDisplayLabel(value)\n  if (\n    !label\n    || label.length > MAX_AWARENESS_NAME_LENGTH\n    || UNSAFE_AWARENESS_NAME_PATTERN.test(label)\n    || isEncryptedAwarenessName(label)\n  ) {\n    return ''\n  }\n  return label\n}\n\nexport function firstSafeCollaborationAwarenessName(...values: unknown[]): string {\n  for (const value of values) {\n    const label = sanitizeCollaborationAwarenessName(value)\n    if (label) return label\n  }\n  return ''\n}\n\nexport type CanonicalCollaborationAwarenessUser = {\n  id: string\n  name: string\n  color: string\n}\n\nexport function createCanonicalCollaborationAwarenessUser(\n  userId: string,\n  name: unknown,\n): CanonicalCollaborationAwarenessUser {\n  return {\n    id: userId,\n    name: sanitizeCollaborationAwarenessName(name),\n    color: resolveCollaborationUserColor(userId),\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,qCAAqC;AAEvC,MAAM,+BAA+B;AAE5C,MAAM,8BAA8B;AACpC,MAAM,gCACJ;AACF,MAAM,4BAA4B;AAElC,SAAS,yBAAyB,OAAwB;AACxD,QAAM,QAAQ,MAAM,MAAM,GAAG;AAC7B,SAAO,MAAM,WAAW,KAAK,MAAM,CAAC,MAAM;AAC5C;AAEA,SAAS,WAAW,OAAuB;AACzC,MAAI,OAAO;AACX,WAAS,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS,GAAG;AACpD,YAAQ,MAAM,WAAW,KAAK;AAC9B,WAAO,KAAK,KAAK,MAAM,QAAQ;AAAA,EACjC;AACA,SAAO,SAAS;AAClB;AAEA,SAAS,aAAa,OAAuB;AAC3C,SAAO,KAAK,MAAM,KAAK,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AACvD;AAEA,SAAS,SAAS,KAAa,mBAA2B,kBAAkC;AAC1F,QAAM,aAAa,oBAAoB;AACvC,QAAM,YAAY,mBAAmB;AACrC,QAAM,UAAU,IAAI,KAAK,IAAI,IAAI,YAAY,CAAC,KAAK;AACnD,QAAM,eAAe,UAAU,IAAI,KAAK,IAAM,MAAM,KAAM,IAAK,CAAC;AAChE,QAAM,QAAQ,YAAY,SAAS;AACnC,QAAM,CAAC,KAAK,OAAO,IAAI,IACrB,MAAM,KAAK,CAAC,QAAQ,cAAc,CAAC,IAC/B,MAAM,MAAM,CAAC,cAAc,QAAQ,CAAC,IAClC,MAAM,MAAM,CAAC,GAAG,QAAQ,YAAY,IAClC,MAAM,MAAM,CAAC,GAAG,cAAc,MAAM,IAClC,MAAM,MAAM,CAAC,cAAc,GAAG,MAAM,IAClC,CAAC,QAAQ,GAAG,YAAY;AACtC,SAAO,IAAI,cAAc,MAAM,SAAS,GAAG,CAAC,GAAG,cAAc,QAAQ,SAAS,GAAG,CAAC,GAAG,cAAc,OAAO,SAAS,GAAG,CAAC;AACzH;AAOO,SAAS,4BAA4B,OAAwB;AAClE,MAAI,OAAO,UAAU,YAAY,CAAC,4BAA4B,KAAK,KAAK,GAAG;AACzE,WAAO;AAAA,EACT;AACA,SAAO,MAAM,YAAY;AAC3B;AAEO,SAAS,8BAA8B,QAAwB;AACpE,SAAO,SAAS,WAAW,MAAM,IAAI,KAAK,IAAI,EAAE;AAClD;AAQO,SAAS,mCAAmC,OAAwB;AACzE,QAAM,QAAQ,8BAA8B,KAAK;AACjD,MACE,CAAC,SACE,MAAM,SAAS,6BACf,8BAA8B,KAAK,KAAK,KACxC,yBAAyB,KAAK,GACjC;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEO,SAAS,uCAAuC,QAA2B;AAChF,aAAW,SAAS,QAAQ;AAC1B,UAAM,QAAQ,mCAAmC,KAAK;AACtD,QAAI,MAAO,QAAO;AAAA,EACpB;AACA,SAAO;AACT;AAQO,SAAS,0CACd,QACA,MACqC;AACrC,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,MAAM,mCAAmC,IAAI;AAAA,IAC7C,OAAO,8BAA8B,MAAM;AAAA,EAC7C;AACF;",
+  "names": []
+}

package/dist/modules/documents/lib/commentAnchors.js

@@ -0,0 +1,15 @@
+import {
+  documentCommentAnchorWriteSchema
+} from "../data/validators.js";
+function normalizeDocumentCommentAnchor(value) {
+  const parsed = documentCommentAnchorWriteSchema.safeParse(value);
+  return parsed.success ? parsed.data : { kind: "legacy-unknown" };
+}
+function isChangedDocumentCommentAnchor(value) {
+  return "kind" in value && value.kind === "legacy-unknown";
+}
+export {
+  isChangedDocumentCommentAnchor,
+  normalizeDocumentCommentAnchor
+};
+//# sourceMappingURL=commentAnchors.js.map

package/dist/modules/documents/lib/commentAnchors.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/documents/lib/commentAnchors.ts"],
+  "sourcesContent": ["import {\n  documentCommentAnchorWriteSchema,\n  type DocumentCommentAnchor,\n} from '../data/validators'\n\nexport type NormalizedDocumentCommentAnchor =\n  | DocumentCommentAnchor\n  | { kind: 'legacy-unknown' }\n\nexport function normalizeDocumentCommentAnchor(value: unknown): NormalizedDocumentCommentAnchor {\n  const parsed = documentCommentAnchorWriteSchema.safeParse(value)\n  return parsed.success ? parsed.data : { kind: 'legacy-unknown' }\n}\n\nexport function isChangedDocumentCommentAnchor(\n  value: NormalizedDocumentCommentAnchor,\n): value is { kind: 'legacy-unknown' } {\n  return 'kind' in value && value.kind === 'legacy-unknown'\n}\n"],
+  "mappings": "AAAA;AAAA,EACE;AAAA,OAEK;AAMA,SAAS,+BAA+B,OAAiD;AAC9F,QAAM,SAAS,iCAAiC,UAAU,KAAK;AAC/D,SAAO,OAAO,UAAU,OAAO,OAAO,EAAE,MAAM,iBAAiB;AACjE;AAEO,SAAS,+BACd,OACqC;AACrC,SAAO,UAAU,SAAS,MAAM,SAAS;AAC3C;",
+  "names": []
+}

package/dist/modules/documents/lib/constants.js

@@ -0,0 +1,25 @@
+const DOCUMENTS_ENTITY_IDS = {
+  document: "documents:document",
+  documentContent: "documents:document_content",
+  documentFolder: "documents:document_folder",
+  documentShare: "documents:document_share",
+  documentComment: "documents:document_comment",
+  documentFavorite: "documents:document_favorite",
+  documentWatcher: "documents:document_watcher",
+  documentVersion: "documents:document_version",
+  documentAttachment: "documents:document_attachment",
+  documentTemplate: "documents:document_template",
+  documentEntityLink: "documents:document_entity_link"
+};
+const DOCUMENTS_MAX_FOLDER_DEPTH = 64;
+const DOCUMENTS_MAX_FOLDERS_PER_ORGANIZATION = 2e3;
+const DOCUMENTS_MAX_LISTED_FOLDERS = 5e3;
+const DOCUMENTS_MAX_LISTED_SHARES = 500;
+export {
+  DOCUMENTS_ENTITY_IDS,
+  DOCUMENTS_MAX_FOLDERS_PER_ORGANIZATION,
+  DOCUMENTS_MAX_FOLDER_DEPTH,
+  DOCUMENTS_MAX_LISTED_FOLDERS,
+  DOCUMENTS_MAX_LISTED_SHARES
+};
+//# sourceMappingURL=constants.js.map

package/dist/modules/documents/lib/constants.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/documents/lib/constants.ts"],
+  "sourcesContent": ["export const DOCUMENTS_ENTITY_IDS = {\n  document: 'documents:document',\n  documentContent: 'documents:document_content',\n  documentFolder: 'documents:document_folder',\n  documentShare: 'documents:document_share',\n  documentComment: 'documents:document_comment',\n  documentFavorite: 'documents:document_favorite',\n  documentWatcher: 'documents:document_watcher',\n  documentVersion: 'documents:document_version',\n  documentAttachment: 'documents:document_attachment',\n  documentTemplate: 'documents:document_template',\n  documentEntityLink: 'documents:document_entity_link',\n} as const\n\n/** Maximum number of folder nodes from a root through its deepest descendant. */\nexport const DOCUMENTS_MAX_FOLDER_DEPTH = 64\n\n/**\n * Maximum active folders one organization may hold. A navigable folder tree\n * stays in the tens or low hundreds, so this only stops runaway automated\n * creation while bounding the manager-override listing that decrypts every\n * folder in scope.\n */\nexport const DOCUMENTS_MAX_FOLDERS_PER_ORGANIZATION = 2_000\n\n/**\n * Upper bound for one manager-override folder listing. Kept far above the\n * creation cap so an organization that predates that cap still lists a\n * coherent tree it can prune, instead of losing folder navigation entirely.\n */\nexport const DOCUMENTS_MAX_LISTED_FOLDERS = 5_000\n\n/**\n * Upper bound for one document's share listing. Explicit sharing stays in the\n * tens, and the mention path can only add one share per distinct mentioned\n * user, so this sits at the comment cap and keeps the listing (plus its\n * principal-label fan-out) bounded the way the comment and version lists are.\n */\nexport const DOCUMENTS_MAX_LISTED_SHARES = 500\n"],
+  "mappings": "AAAO,MAAM,uBAAuB;AAAA,EAClC,UAAU;AAAA,EACV,iBAAiB;AAAA,EACjB,gBAAgB;AAAA,EAChB,eAAe;AAAA,EACf,iBAAiB;AAAA,EACjB,kBAAkB;AAAA,EAClB,iBAAiB;AAAA,EACjB,iBAAiB;AAAA,EACjB,oBAAoB;AAAA,EACpB,kBAAkB;AAAA,EAClB,oBAAoB;AACtB;AAGO,MAAM,6BAA6B;AAQnC,MAAM,yCAAyC;AAO/C,MAAM,+BAA+B;AAQrC,MAAM,8BAA8B;",
+  "names": []
+}