@open-mercato/documents 0.6.8-develop.7016.1.4ed7b1e49d

package/dist/modules/documents/lib/entitySuggestion.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/documents/lib/entitySuggestion.ts"],
+  "sourcesContent": ["import { Extension, type Editor } from '@tiptap/core'\nimport { Suggestion, type SuggestionProps } from '@tiptap/suggestion'\nimport type { EntityRefAttributes } from './editorConfig'\n\ntype EntitySuggestionHandlers = {\n  onTrigger: (ctx: { query: string; range: { from: number; to: number } }) => void\n  onClose: () => void\n}\n\nfunction notifyTrigger(\n  handlers: EntitySuggestionHandlers,\n  props: Pick<SuggestionProps<unknown, unknown>, 'query' | 'range'>,\n): void {\n  handlers.onTrigger({\n    query: props.query,\n    range: {\n      from: props.range.from,\n      to: props.range.to,\n    },\n  })\n}\n\nexport function createEntitySuggestionExtension(handlers: EntitySuggestionHandlers): Extension {\n  return Extension.create({\n    name: 'entitySuggestion',\n    addProseMirrorPlugins() {\n      return [\n        Suggestion<unknown, unknown>({\n          editor: this.editor,\n          char: '@',\n          allowSpaces: false,\n          startOfLine: false,\n          items: () => [],\n          command: () => undefined,\n          render: () => ({\n            onStart: (props) => notifyTrigger(handlers, props),\n            onUpdate: (props) => notifyTrigger(handlers, props),\n            onExit: () => handlers.onClose(),\n          }),\n        }),\n      ]\n    },\n  })\n}\n\nexport function insertEntityRef(editor: Editor, attrs: EntityRefAttributes): boolean {\n  return editor\n    .chain()\n    .focus()\n    .insertContent([\n      {\n        type: 'entityRef',\n        attrs,\n      },\n      {\n        type: 'text',\n        text: ' ',\n      },\n    ])\n    .run()\n}\n"],
+  "mappings": "AAAA,SAAS,iBAA8B;AACvC,SAAS,kBAAwC;AAQjD,SAAS,cACP,UACA,OACM;AACN,WAAS,UAAU;AAAA,IACjB,OAAO,MAAM;AAAA,IACb,OAAO;AAAA,MACL,MAAM,MAAM,MAAM;AAAA,MAClB,IAAI,MAAM,MAAM;AAAA,IAClB;AAAA,EACF,CAAC;AACH;AAEO,SAAS,gCAAgC,UAA+C;AAC7F,SAAO,UAAU,OAAO;AAAA,IACtB,MAAM;AAAA,IACN,wBAAwB;AACtB,aAAO;AAAA,QACL,WAA6B;AAAA,UAC3B,QAAQ,KAAK;AAAA,UACb,MAAM;AAAA,UACN,aAAa;AAAA,UACb,aAAa;AAAA,UACb,OAAO,MAAM,CAAC;AAAA,UACd,SAAS,MAAM;AAAA,UACf,QAAQ,OAAO;AAAA,YACb,SAAS,CAAC,UAAU,cAAc,UAAU,KAAK;AAAA,YACjD,UAAU,CAAC,UAAU,cAAc,UAAU,KAAK;AAAA,YAClD,QAAQ,MAAM,SAAS,QAAQ;AAAA,UACjC;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAEO,SAAS,gBAAgB,QAAgB,OAAqC;AACnF,SAAO,OACJ,MAAM,EACN,MAAM,EACN,cAAc;AAAA,IACb;AAAA,MACE,MAAM;AAAA,MACN;AAAA,IACF;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,MAAM;AAAA,IACR;AAAA,EACF,CAAC,EACA,IAAI;AACT;",
+  "names": []
+}

package/dist/modules/documents/lib/favorites.js

@@ -0,0 +1,22 @@
+import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { DocumentFavorite } from "../data/entities.js";
+async function loadDocumentFavoriteIds(em, scope, documentIds) {
+  const uniqueDocumentIds = Array.from(new Set(documentIds));
+  if (uniqueDocumentIds.length === 0) return /* @__PURE__ */ new Set();
+  const favorites = await findWithDecryption(em, DocumentFavorite, {
+    documentId: { $in: uniqueDocumentIds },
+    userId: scope.userId,
+    tenantId: scope.tenantId,
+    organizationId: scope.organizationId,
+    deletedAt: null
+  }, { fields: ["documentId"] }, { tenantId: scope.tenantId, organizationId: scope.organizationId });
+  return new Set(favorites.map((favorite) => favorite.documentId));
+}
+async function isDocumentFavorite(em, scope, documentId) {
+  return (await loadDocumentFavoriteIds(em, scope, [documentId])).has(documentId);
+}
+export {
+  isDocumentFavorite,
+  loadDocumentFavoriteIds
+};
+//# sourceMappingURL=favorites.js.map

package/dist/modules/documents/lib/favorites.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/documents/lib/favorites.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { DocumentFavorite } from '../data/entities'\n\nexport type DocumentFavoriteScope = {\n  tenantId: string\n  organizationId: string\n  userId: string\n}\n\nexport async function loadDocumentFavoriteIds(\n  em: EntityManager,\n  scope: DocumentFavoriteScope,\n  documentIds: readonly string[],\n): Promise<Set<string>> {\n  const uniqueDocumentIds = Array.from(new Set(documentIds))\n  if (uniqueDocumentIds.length === 0) return new Set()\n\n  const favorites = await findWithDecryption(em, DocumentFavorite, {\n    documentId: { $in: uniqueDocumentIds },\n    userId: scope.userId,\n    tenantId: scope.tenantId,\n    organizationId: scope.organizationId,\n    deletedAt: null,\n  }, { fields: ['documentId'] }, { tenantId: scope.tenantId, organizationId: scope.organizationId })\n  return new Set(favorites.map((favorite) => favorite.documentId))\n}\n\nexport async function isDocumentFavorite(\n  em: EntityManager,\n  scope: DocumentFavoriteScope,\n  documentId: string,\n): Promise<boolean> {\n  return (await loadDocumentFavoriteIds(em, scope, [documentId])).has(documentId)\n}\n"],
+  "mappings": "AACA,SAAS,0BAA0B;AACnC,SAAS,wBAAwB;AAQjC,eAAsB,wBACpB,IACA,OACA,aACsB;AACtB,QAAM,oBAAoB,MAAM,KAAK,IAAI,IAAI,WAAW,CAAC;AACzD,MAAI,kBAAkB,WAAW,EAAG,QAAO,oBAAI,IAAI;AAEnD,QAAM,YAAY,MAAM,mBAAmB,IAAI,kBAAkB;AAAA,IAC/D,YAAY,EAAE,KAAK,kBAAkB;AAAA,IACrC,QAAQ,MAAM;AAAA,IACd,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,IACtB,WAAW;AAAA,EACb,GAAG,EAAE,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe,CAAC;AACjG,SAAO,IAAI,IAAI,UAAU,IAAI,CAAC,aAAa,SAAS,UAAU,CAAC;AACjE;AAEA,eAAsB,mBACpB,IACA,OACA,YACkB;AAClB,UAAQ,MAAM,wBAAwB,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI,UAAU;AAChF;",
+  "names": []
+}

package/dist/modules/documents/lib/folderHierarchySerialization.js

@@ -0,0 +1,19 @@
+const FOLDER_HIERARCHY_ADVISORY_LOCK_SQL = "select pg_advisory_xact_lock(hashtextextended(?, 0))";
+function folderHierarchyMutationLockKey(scope) {
+  return `documents:folder-hierarchy:${scope.tenantId}:${scope.organizationId}`;
+}
+async function acquireFolderHierarchyMutationLock(em, scope) {
+  if (!em.isInTransaction()) {
+    throw new Error("[internal] Folder hierarchy mutation lock requires an active transaction");
+  }
+  await em.execute(
+    FOLDER_HIERARCHY_ADVISORY_LOCK_SQL,
+    [folderHierarchyMutationLockKey(scope)]
+  );
+}
+export {
+  FOLDER_HIERARCHY_ADVISORY_LOCK_SQL,
+  acquireFolderHierarchyMutationLock,
+  folderHierarchyMutationLockKey
+};
+//# sourceMappingURL=folderHierarchySerialization.js.map

package/dist/modules/documents/lib/folderHierarchySerialization.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/documents/lib/folderHierarchySerialization.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\n\nconst FOLDER_HIERARCHY_ADVISORY_LOCK_SQL = 'select pg_advisory_xact_lock(hashtextextended(?, 0))'\n\ntype FolderHierarchyMutationScope = {\n  tenantId: string\n  organizationId: string\n}\n\nfunction folderHierarchyMutationLockKey(scope: FolderHierarchyMutationScope): string {\n  return `documents:folder-hierarchy:${scope.tenantId}:${scope.organizationId}`\n}\n\n/**\n * Serialize all folder hierarchy writes inside one tenant and organization.\n * The transaction owns the lock, so PostgreSQL releases it on commit/rollback.\n */\nexport async function acquireFolderHierarchyMutationLock(\n  em: EntityManager,\n  scope: FolderHierarchyMutationScope,\n): Promise<void> {\n  if (!em.isInTransaction()) {\n    throw new Error('[internal] Folder hierarchy mutation lock requires an active transaction')\n  }\n\n  // SqlEntityManager.execute forwards the active transaction context. Calling the\n  // bare connection here would let PostgreSQL release this xact lock immediately.\n  await em.execute(\n    FOLDER_HIERARCHY_ADVISORY_LOCK_SQL,\n    [folderHierarchyMutationLockKey(scope)],\n  )\n}\n\nexport { FOLDER_HIERARCHY_ADVISORY_LOCK_SQL, folderHierarchyMutationLockKey }\n"],
+  "mappings": "AAEA,MAAM,qCAAqC;AAO3C,SAAS,+BAA+B,OAA6C;AACnF,SAAO,8BAA8B,MAAM,QAAQ,IAAI,MAAM,cAAc;AAC7E;AAMA,eAAsB,mCACpB,IACA,OACe;AACf,MAAI,CAAC,GAAG,gBAAgB,GAAG;AACzB,UAAM,IAAI,MAAM,0EAA0E;AAAA,EAC5F;AAIA,QAAM,GAAG;AAAA,IACP;AAAA,IACA,CAAC,+BAA+B,KAAK,CAAC;AAAA,EACxC;AACF;",
+  "names": []
+}

package/dist/modules/documents/lib/historyLimits.js

@@ -0,0 +1,100 @@
+import { sql } from "kysely";
+import { CrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { DocumentComment, DocumentVersion } from "../data/entities.js";
+import {
+  DOCUMENTS_MAX_COMMENTS_PER_DOCUMENT,
+  DOCUMENTS_MAX_VERSION_STORAGE_BYTES,
+  DOCUMENTS_MAX_VERSIONS_PER_DOCUMENT
+} from "./historyPolicy.js";
+import {
+  DOCUMENTS_COMMENT_LIST_PAGE_SIZE,
+  DOCUMENTS_MAX_COMMENTS_PER_DOCUMENT as DOCUMENTS_MAX_COMMENTS_PER_DOCUMENT2,
+  DOCUMENTS_MAX_VERSION_STORAGE_BYTES as DOCUMENTS_MAX_VERSION_STORAGE_BYTES2,
+  DOCUMENTS_MAX_VERSIONS_PER_DOCUMENT as DOCUMENTS_MAX_VERSIONS_PER_DOCUMENT2,
+  DOCUMENTS_VERSION_LIST_PAGE_SIZE
+} from "./historyPolicy.js";
+function documentVersionStorageBytes(input) {
+  return input.yjsSnapshot.byteLength + Buffer.byteLength(input.contentHtml ?? "", "utf8");
+}
+function quotaExceeded() {
+  throw new CrudHttpError(413, { error: "documents.versions.quotaExceeded" });
+}
+function planDocumentVersionRetention(input) {
+  const maxCount = input.maxCount ?? DOCUMENTS_MAX_VERSIONS_PER_DOCUMENT;
+  const maxStorageBytes = input.maxStorageBytes ?? DOCUMENTS_MAX_VERSION_STORAGE_BYTES;
+  if (!Number.isSafeInteger(input.incomingStorageBytes) || input.incomingStorageBytes < 0 || input.incomingStorageBytes > maxStorageBytes) {
+    return quotaExceeded();
+  }
+  const protectedIds = new Set(
+    Array.from(input.protectedIds ?? [], (id) => id.toLowerCase())
+  );
+  const stored = [...input.stored].sort((left, right) => {
+    const timestampDifference = new Date(left.createdAt).getTime() - new Date(right.createdAt).getTime();
+    return timestampDifference || left.id.localeCompare(right.id);
+  });
+  let retainedCount = stored.length + 1;
+  let retainedStorageBytes = stored.reduce((total, row) => {
+    if (!Number.isSafeInteger(row.storageBytes) || row.storageBytes < 0) return quotaExceeded();
+    const nextTotal = total + row.storageBytes;
+    if (!Number.isSafeInteger(nextTotal)) return quotaExceeded();
+    return nextTotal;
+  }, input.incomingStorageBytes);
+  const pruneIds = [];
+  for (const row of stored) {
+    if (retainedCount <= maxCount && retainedStorageBytes <= maxStorageBytes) break;
+    if (protectedIds.has(row.id.toLowerCase())) continue;
+    pruneIds.push(row.id);
+    retainedCount -= 1;
+    retainedStorageBytes -= row.storageBytes;
+  }
+  if (retainedCount > maxCount || retainedStorageBytes > maxStorageBytes) return quotaExceeded();
+  return pruneIds;
+}
+async function enforceDocumentVersionRetention(em, scope, incoming, protectedIds = []) {
+  const db = em.getKysely();
+  const rows = await db.selectFrom("document_versions").select(["id", "created_at"]).select(sql`octet_length(${sql.ref("yjs_snapshot")}) + coalesce(octet_length(${sql.ref("content_html")}), 0)`.as("storage_bytes")).where("tenant_id", "=", scope.tenantId).where("organization_id", "=", scope.organizationId).where("document_id", "=", scope.documentId).orderBy("created_at", "asc").orderBy("id", "asc").execute();
+  const stored = rows.map((row) => ({
+    id: String(row.id),
+    createdAt: row.created_at,
+    storageBytes: Number(row.storage_bytes)
+  }));
+  const pruneIds = planDocumentVersionRetention({
+    stored,
+    incomingStorageBytes: documentVersionStorageBytes(incoming),
+    protectedIds
+  });
+  if (!pruneIds.length) return [];
+  const deleted = await em.nativeDelete(DocumentVersion, {
+    id: { $in: pruneIds },
+    tenantId: scope.tenantId,
+    organizationId: scope.organizationId,
+    documentId: scope.documentId
+  });
+  if (deleted !== pruneIds.length) {
+    throw new CrudHttpError(409, { error: "Record changed by another user" });
+  }
+  return pruneIds;
+}
+async function assertDocumentCommentCapacity(em, scope) {
+  const count = await em.count(DocumentComment, {
+    tenantId: scope.tenantId,
+    organizationId: scope.organizationId,
+    documentId: scope.documentId,
+    deletedAt: null
+  });
+  if (count >= DOCUMENTS_MAX_COMMENTS_PER_DOCUMENT) {
+    throw new CrudHttpError(413, { error: "documents.comments.limitExceeded" });
+  }
+}
+export {
+  DOCUMENTS_COMMENT_LIST_PAGE_SIZE,
+  DOCUMENTS_MAX_COMMENTS_PER_DOCUMENT2 as DOCUMENTS_MAX_COMMENTS_PER_DOCUMENT,
+  DOCUMENTS_MAX_VERSIONS_PER_DOCUMENT2 as DOCUMENTS_MAX_VERSIONS_PER_DOCUMENT,
+  DOCUMENTS_MAX_VERSION_STORAGE_BYTES2 as DOCUMENTS_MAX_VERSION_STORAGE_BYTES,
+  DOCUMENTS_VERSION_LIST_PAGE_SIZE,
+  assertDocumentCommentCapacity,
+  documentVersionStorageBytes,
+  enforceDocumentVersionRetention,
+  planDocumentVersionRetention
+};
+//# sourceMappingURL=historyLimits.js.map

package/dist/modules/documents/lib/historyLimits.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/documents/lib/historyLimits.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { type Kysely, sql } from 'kysely'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { DocumentComment, DocumentVersion } from '../data/entities'\nimport {\n  DOCUMENTS_MAX_COMMENTS_PER_DOCUMENT,\n  DOCUMENTS_MAX_VERSION_STORAGE_BYTES,\n  DOCUMENTS_MAX_VERSIONS_PER_DOCUMENT,\n} from './historyPolicy'\n\nexport {\n  DOCUMENTS_COMMENT_LIST_PAGE_SIZE,\n  DOCUMENTS_MAX_COMMENTS_PER_DOCUMENT,\n  DOCUMENTS_MAX_VERSION_STORAGE_BYTES,\n  DOCUMENTS_MAX_VERSIONS_PER_DOCUMENT,\n  DOCUMENTS_VERSION_LIST_PAGE_SIZE,\n} from './historyPolicy'\n\nexport type DocumentHistoryScope = {\n  tenantId: string\n  organizationId: string\n  documentId: string\n}\n\nexport type StoredDocumentVersionResource = {\n  id: string\n  createdAt: Date | string\n  storageBytes: number\n}\n\ntype HistoryDatabase = {\n  document_versions: {\n    id: string\n    tenant_id: string\n    organization_id: string\n    document_id: string\n    created_at: Date\n    yjs_snapshot: Buffer\n    content_html: string | null\n  }\n}\n\nexport function documentVersionStorageBytes(input: {\n  yjsSnapshot: Buffer | Uint8Array\n  contentHtml?: string | null\n}): number {\n  return input.yjsSnapshot.byteLength + Buffer.byteLength(input.contentHtml ?? '', 'utf8')\n}\n\nfunction quotaExceeded(): never {\n  throw new CrudHttpError(413, { error: 'documents.versions.quotaExceeded' })\n}\n\nexport function planDocumentVersionRetention(input: {\n  stored: StoredDocumentVersionResource[]\n  incomingStorageBytes: number\n  protectedIds?: Iterable<string>\n  maxCount?: number\n  maxStorageBytes?: number\n}): string[] {\n  const maxCount = input.maxCount ?? DOCUMENTS_MAX_VERSIONS_PER_DOCUMENT\n  const maxStorageBytes = input.maxStorageBytes ?? DOCUMENTS_MAX_VERSION_STORAGE_BYTES\n  if (\n    !Number.isSafeInteger(input.incomingStorageBytes)\n    || input.incomingStorageBytes < 0\n    || input.incomingStorageBytes > maxStorageBytes\n  ) {\n    return quotaExceeded()\n  }\n\n  const protectedIds = new Set(\n    Array.from(input.protectedIds ?? [], (id) => id.toLowerCase()),\n  )\n  const stored = [...input.stored].sort((left, right) => {\n    const timestampDifference = new Date(left.createdAt).getTime() - new Date(right.createdAt).getTime()\n    return timestampDifference || left.id.localeCompare(right.id)\n  })\n  let retainedCount = stored.length + 1\n  let retainedStorageBytes = stored.reduce((total, row) => {\n    if (!Number.isSafeInteger(row.storageBytes) || row.storageBytes < 0) return quotaExceeded()\n    const nextTotal = total + row.storageBytes\n    if (!Number.isSafeInteger(nextTotal)) return quotaExceeded()\n    return nextTotal\n  }, input.incomingStorageBytes)\n  const pruneIds: string[] = []\n\n  for (const row of stored) {\n    if (retainedCount <= maxCount && retainedStorageBytes <= maxStorageBytes) break\n    if (protectedIds.has(row.id.toLowerCase())) continue\n    pruneIds.push(row.id)\n    retainedCount -= 1\n    retainedStorageBytes -= row.storageBytes\n  }\n\n  if (retainedCount > maxCount || retainedStorageBytes > maxStorageBytes) return quotaExceeded()\n  return pruneIds\n}\n\nexport async function enforceDocumentVersionRetention(\n  em: EntityManager,\n  scope: DocumentHistoryScope,\n  incoming: { yjsSnapshot: Buffer | Uint8Array; contentHtml?: string | null },\n  protectedIds: Iterable<string> = [],\n): Promise<string[]> {\n  const db = em.getKysely() as unknown as Kysely<HistoryDatabase>\n  const rows = await db\n    .selectFrom('document_versions')\n    .select(['id', 'created_at'])\n    .select(sql<number>`octet_length(${sql.ref('yjs_snapshot')}) + coalesce(octet_length(${sql.ref('content_html')}), 0)`.as('storage_bytes'))\n    .where('tenant_id', '=', scope.tenantId)\n    .where('organization_id', '=', scope.organizationId)\n    .where('document_id', '=', scope.documentId)\n    .orderBy('created_at', 'asc')\n    .orderBy('id', 'asc')\n    .execute() as Array<{ id: string; created_at: Date | string; storage_bytes: number | string }>\n\n  const stored = rows.map((row) => ({\n    id: String(row.id),\n    createdAt: row.created_at,\n    storageBytes: Number(row.storage_bytes),\n  }))\n  const pruneIds = planDocumentVersionRetention({\n    stored,\n    incomingStorageBytes: documentVersionStorageBytes(incoming),\n    protectedIds,\n  })\n  if (!pruneIds.length) return []\n\n  const deleted = await em.nativeDelete(DocumentVersion, {\n    id: { $in: pruneIds },\n    tenantId: scope.tenantId,\n    organizationId: scope.organizationId,\n    documentId: scope.documentId,\n  })\n  if (deleted !== pruneIds.length) {\n    throw new CrudHttpError(409, { error: 'Record changed by another user' })\n  }\n  return pruneIds\n}\n\nexport async function assertDocumentCommentCapacity(\n  em: EntityManager,\n  scope: DocumentHistoryScope,\n): Promise<void> {\n  const count = await em.count(DocumentComment, {\n    tenantId: scope.tenantId,\n    organizationId: scope.organizationId,\n    documentId: scope.documentId,\n    deletedAt: null,\n  })\n  if (count >= DOCUMENTS_MAX_COMMENTS_PER_DOCUMENT) {\n    throw new CrudHttpError(413, { error: 'documents.comments.limitExceeded' })\n  }\n}\n"],
+  "mappings": "AACA,SAAsB,WAAW;AACjC,SAAS,qBAAqB;AAC9B,SAAS,iBAAiB,uBAAuB;AACjD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP;AAAA,EACE;AAAA,EACA,uCAAAA;AAAA,EACA,uCAAAC;AAAA,EACA,uCAAAC;AAAA,EACA;AAAA,OACK;AA0BA,SAAS,4BAA4B,OAGjC;AACT,SAAO,MAAM,YAAY,aAAa,OAAO,WAAW,MAAM,eAAe,IAAI,MAAM;AACzF;AAEA,SAAS,gBAAuB;AAC9B,QAAM,IAAI,cAAc,KAAK,EAAE,OAAO,mCAAmC,CAAC;AAC5E;AAEO,SAAS,6BAA6B,OAMhC;AACX,QAAM,WAAW,MAAM,YAAY;AACnC,QAAM,kBAAkB,MAAM,mBAAmB;AACjD,MACE,CAAC,OAAO,cAAc,MAAM,oBAAoB,KAC7C,MAAM,uBAAuB,KAC7B,MAAM,uBAAuB,iBAChC;AACA,WAAO,cAAc;AAAA,EACvB;AAEA,QAAM,eAAe,IAAI;AAAA,IACvB,MAAM,KAAK,MAAM,gBAAgB,CAAC,GAAG,CAAC,OAAO,GAAG,YAAY,CAAC;AAAA,EAC/D;AACA,QAAM,SAAS,CAAC,GAAG,MAAM,MAAM,EAAE,KAAK,CAAC,MAAM,UAAU;AACrD,UAAM,sBAAsB,IAAI,KAAK,KAAK,SAAS,EAAE,QAAQ,IAAI,IAAI,KAAK,MAAM,SAAS,EAAE,QAAQ;AACnG,WAAO,uBAAuB,KAAK,GAAG,cAAc,MAAM,EAAE;AAAA,EAC9D,CAAC;AACD,MAAI,gBAAgB,OAAO,SAAS;AACpC,MAAI,uBAAuB,OAAO,OAAO,CAAC,OAAO,QAAQ;AACvD,QAAI,CAAC,OAAO,cAAc,IAAI,YAAY,KAAK,IAAI,eAAe,EAAG,QAAO,cAAc;AAC1F,UAAM,YAAY,QAAQ,IAAI;AAC9B,QAAI,CAAC,OAAO,cAAc,SAAS,EAAG,QAAO,cAAc;AAC3D,WAAO;AAAA,EACT,GAAG,MAAM,oBAAoB;AAC7B,QAAM,WAAqB,CAAC;AAE5B,aAAW,OAAO,QAAQ;AACxB,QAAI,iBAAiB,YAAY,wBAAwB,gBAAiB;AAC1E,QAAI,aAAa,IAAI,IAAI,GAAG,YAAY,CAAC,EAAG;AAC5C,aAAS,KAAK,IAAI,EAAE;AACpB,qBAAiB;AACjB,4BAAwB,IAAI;AAAA,EAC9B;AAEA,MAAI,gBAAgB,YAAY,uBAAuB,gBAAiB,QAAO,cAAc;AAC7F,SAAO;AACT;AAEA,eAAsB,gCACpB,IACA,OACA,UACA,eAAiC,CAAC,GACf;AACnB,QAAM,KAAK,GAAG,UAAU;AACxB,QAAM,OAAO,MAAM,GAChB,WAAW,mBAAmB,EAC9B,OAAO,CAAC,MAAM,YAAY,CAAC,EAC3B,OAAO,mBAA2B,IAAI,IAAI,cAAc,CAAC,6BAA6B,IAAI,IAAI,cAAc,CAAC,QAAQ,GAAG,eAAe,CAAC,EACxI,MAAM,aAAa,KAAK,MAAM,QAAQ,EACtC,MAAM,mBAAmB,KAAK,MAAM,cAAc,EAClD,MAAM,eAAe,KAAK,MAAM,UAAU,EAC1C,QAAQ,cAAc,KAAK,EAC3B,QAAQ,MAAM,KAAK,EACnB,QAAQ;AAEX,QAAM,SAAS,KAAK,IAAI,CAAC,SAAS;AAAA,IAChC,IAAI,OAAO,IAAI,EAAE;AAAA,IACjB,WAAW,IAAI;AAAA,IACf,cAAc,OAAO,IAAI,aAAa;AAAA,EACxC,EAAE;AACF,QAAM,WAAW,6BAA6B;AAAA,IAC5C;AAAA,IACA,sBAAsB,4BAA4B,QAAQ;AAAA,IAC1D;AAAA,EACF,CAAC;AACD,MAAI,CAAC,SAAS,OAAQ,QAAO,CAAC;AAE9B,QAAM,UAAU,MAAM,GAAG,aAAa,iBAAiB;AAAA,IACrD,IAAI,EAAE,KAAK,SAAS;AAAA,IACpB,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,IACtB,YAAY,MAAM;AAAA,EACpB,CAAC;AACD,MAAI,YAAY,SAAS,QAAQ;AAC/B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,iCAAiC,CAAC;AAAA,EAC1E;AACA,SAAO;AACT;AAEA,eAAsB,8BACpB,IACA,OACe;AACf,QAAM,QAAQ,MAAM,GAAG,MAAM,iBAAiB;AAAA,IAC5C,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,IACtB,YAAY,MAAM;AAAA,IAClB,WAAW;AAAA,EACb,CAAC;AACD,MAAI,SAAS,qCAAqC;AAChD,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,mCAAmC,CAAC;AAAA,EAC5E;AACF;",
+  "names": ["DOCUMENTS_MAX_COMMENTS_PER_DOCUMENT", "DOCUMENTS_MAX_VERSION_STORAGE_BYTES", "DOCUMENTS_MAX_VERSIONS_PER_DOCUMENT"]
+}

package/dist/modules/documents/lib/historyPolicy.js

@@ -0,0 +1,14 @@
+const MEBIBYTE = 1024 * 1024;
+const DOCUMENTS_MAX_VERSIONS_PER_DOCUMENT = 100;
+const DOCUMENTS_MAX_VERSION_STORAGE_BYTES = 256 * MEBIBYTE;
+const DOCUMENTS_VERSION_LIST_PAGE_SIZE = DOCUMENTS_MAX_VERSIONS_PER_DOCUMENT;
+const DOCUMENTS_MAX_COMMENTS_PER_DOCUMENT = 500;
+const DOCUMENTS_COMMENT_LIST_PAGE_SIZE = 100;
+export {
+  DOCUMENTS_COMMENT_LIST_PAGE_SIZE,
+  DOCUMENTS_MAX_COMMENTS_PER_DOCUMENT,
+  DOCUMENTS_MAX_VERSIONS_PER_DOCUMENT,
+  DOCUMENTS_MAX_VERSION_STORAGE_BYTES,
+  DOCUMENTS_VERSION_LIST_PAGE_SIZE
+};
+//# sourceMappingURL=historyPolicy.js.map

package/dist/modules/documents/lib/historyPolicy.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/documents/lib/historyPolicy.ts"],
+  "sourcesContent": ["const MEBIBYTE = 1024 * 1024\n\nexport const DOCUMENTS_MAX_VERSIONS_PER_DOCUMENT = 100\nexport const DOCUMENTS_MAX_VERSION_STORAGE_BYTES = 256 * MEBIBYTE\nexport const DOCUMENTS_VERSION_LIST_PAGE_SIZE = DOCUMENTS_MAX_VERSIONS_PER_DOCUMENT\nexport const DOCUMENTS_MAX_COMMENTS_PER_DOCUMENT = 500\nexport const DOCUMENTS_COMMENT_LIST_PAGE_SIZE = 100\n"],
+  "mappings": "AAAA,MAAM,WAAW,OAAO;AAEjB,MAAM,sCAAsC;AAC5C,MAAM,sCAAsC,MAAM;AAClD,MAAM,mCAAmC;AACzC,MAAM,sCAAsC;AAC5C,MAAM,mCAAmC;",
+  "names": []
+}

package/dist/modules/documents/lib/organizationAccess.js

@@ -0,0 +1,17 @@
+function normalizeIds(values) {
+  if (!Array.isArray(values)) return [];
+  return Array.from(new Set(values.map((value) => typeof value === "string" ? value.trim() : "").filter((value) => value.length > 0)));
+}
+function hasResolvedDocumentsOrganizationAccess(acl, organizationId, scope) {
+  if (acl.isSuperAdmin || acl.organizations === null) return true;
+  const grants = normalizeIds(acl.organizations);
+  if (grants.includes("__all__")) return true;
+  if (grants.includes(organizationId)) return true;
+  if (grants.length === 0) return false;
+  const allowedIds = normalizeIds(scope?.allowedIds);
+  return allowedIds.includes(organizationId) && grants.some((grant) => allowedIds.includes(grant));
+}
+export {
+  hasResolvedDocumentsOrganizationAccess
+};
+//# sourceMappingURL=organizationAccess.js.map

package/dist/modules/documents/lib/organizationAccess.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/documents/lib/organizationAccess.ts"],
+  "sourcesContent": ["export type DocumentsOrganizationAcl = {\n  isSuperAdmin: boolean\n  organizations: string[] | null\n}\n\nexport type ResolvedDocumentsOrganizationScope = {\n  selectedId?: string | null\n  allowedIds?: string[] | null\n}\n\nfunction normalizeIds(values: unknown): string[] {\n  if (!Array.isArray(values)) return []\n  return Array.from(new Set(values\n    .map((value) => (typeof value === 'string' ? value.trim() : ''))\n    .filter((value) => value.length > 0)))\n}\n\n/**\n * Validate a Documents organization decision against the raw, current ACL.\n *\n * The shared organization resolver intentionally falls back to the account\n * organization when an allowlist expands to no persisted organizations. That\n * behavior is useful for ordinary account navigation, but an authorization\n * boundary must not let an empty or stale allowlist acquire access through\n * that fallback. Requiring both the selected organization and at least one\n * original grant in the expanded set preserves parent-to-child grants while\n * failing closed for empty or unresolved grant lists.\n */\nexport function hasResolvedDocumentsOrganizationAccess(\n  acl: DocumentsOrganizationAcl,\n  organizationId: string,\n  scope?: ResolvedDocumentsOrganizationScope | null,\n): boolean {\n  if (acl.isSuperAdmin || acl.organizations === null) return true\n\n  const grants = normalizeIds(acl.organizations)\n  if (grants.includes('__all__')) return true\n  if (grants.includes(organizationId)) return true\n  if (grants.length === 0) return false\n\n  const allowedIds = normalizeIds(scope?.allowedIds)\n  return allowedIds.includes(organizationId)\n    && grants.some((grant) => allowedIds.includes(grant))\n}\n"],
+  "mappings": "AAUA,SAAS,aAAa,QAA2B;AAC/C,MAAI,CAAC,MAAM,QAAQ,MAAM,EAAG,QAAO,CAAC;AACpC,SAAO,MAAM,KAAK,IAAI,IAAI,OACvB,IAAI,CAAC,UAAW,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI,EAAG,EAC9D,OAAO,CAAC,UAAU,MAAM,SAAS,CAAC,CAAC,CAAC;AACzC;AAaO,SAAS,uCACd,KACA,gBACA,OACS;AACT,MAAI,IAAI,gBAAgB,IAAI,kBAAkB,KAAM,QAAO;AAE3D,QAAM,SAAS,aAAa,IAAI,aAAa;AAC7C,MAAI,OAAO,SAAS,SAAS,EAAG,QAAO;AACvC,MAAI,OAAO,SAAS,cAAc,EAAG,QAAO;AAC5C,MAAI,OAAO,WAAW,EAAG,QAAO;AAEhC,QAAM,aAAa,aAAa,OAAO,UAAU;AACjD,SAAO,WAAW,SAAS,cAAc,KACpC,OAAO,KAAK,CAAC,UAAU,WAAW,SAAS,KAAK,CAAC;AACxD;",
+  "names": []
+}

package/dist/modules/documents/lib/pdfHtml.js

@@ -0,0 +1,62 @@
+const PDF_CSP = "default-src 'none'; img-src data:; style-src 'unsafe-inline'; script-src 'none'; frame-src 'none'; connect-src 'none'; base-uri 'none'; form-action 'none'";
+function escapeHtml(value) {
+  return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
+}
+function buildDocumentPdfHtml(title, contentHtml) {
+  const safeTitle = escapeHtml(title);
+  return `<!DOCTYPE html>
+<html>
+<head>
+  <meta charset="utf-8">
+  <meta http-equiv="Content-Security-Policy" content="${PDF_CSP}">
+  <title>${safeTitle}</title>
+  <style>
+    @page { size: A4; margin: 22mm 20mm; }
+    *, *::before, *::after { box-sizing: border-box; }
+    html { color: #172033; background: #fff; font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif; font-size: 11pt; line-height: 1.55; }
+    body { margin: 0; overflow-wrap: anywhere; }
+    .document-title { margin: 0 0 9mm; color: #111827; font-size: 25pt; font-weight: 650; line-height: 1.18; }
+    .document-content > :first-child { margin-top: 0; }
+    .document-content > :last-child { margin-bottom: 0; }
+    h1, h2, h3, h4, h5, h6 { break-after: avoid-page; color: #111827; font-weight: 650; line-height: 1.25; }
+    h1 { margin: 8mm 0 3mm; font-size: 21pt; }
+    h2 { margin: 7mm 0 2.5mm; font-size: 17pt; }
+    h3 { margin: 6mm 0 2mm; font-size: 14pt; }
+    h4, h5, h6 { margin: 5mm 0 2mm; font-size: 11.5pt; }
+    p { margin: 0 0 3.5mm; }
+    ul, ol { margin: 0 0 4mm; padding-left: 7mm; }
+    li { margin: 1mm 0; padding-left: 1mm; }
+    li > p { margin: 0; }
+    ul:has(input[type="checkbox"]) { list-style: none; padding-left: 0; }
+    ul:has(input[type="checkbox"]) li { display: flex; align-items: flex-start; gap: 2.5mm; padding-left: 0; }
+    ul:has(input[type="checkbox"]) li > label { flex: none; padding-top: 0.5mm; }
+    ul:has(input[type="checkbox"]) li > div { min-width: 0; flex: 1; }
+    input[type="checkbox"] { width: 3.5mm; height: 3.5mm; margin: 0; accent-color: #4f46e5; }
+    blockquote { margin: 5mm 0; border-left: 1.2mm solid #cbd5e1; padding: 1mm 0 1mm 5mm; color: #475569; }
+    pre { margin: 5mm 0; border: 0.25mm solid #dbe3ee; border-radius: 1.5mm; background: #f8fafc; padding: 4mm; break-inside: avoid-page; color: #172033; font: 9.5pt/1.5 ui-monospace, SFMono-Regular, Menlo, Consolas, monospace; white-space: pre-wrap; }
+    code { border-radius: 1mm; background: #f1f5f9; padding: 0.2mm 1mm; font: 0.9em ui-monospace, SFMono-Regular, Menlo, Consolas, monospace; }
+    pre code { background: transparent; padding: 0; font: inherit; }
+    a { color: #4338ca; text-decoration: underline; text-underline-offset: 1px; }
+    span[style*="background-color"] { border-radius: 0.5mm; padding: 0 0.4mm; }
+    hr { margin: 7mm 0; border: 0; border-top: 0.25mm solid #cbd5e1; }
+    img { display: block; max-width: 100%; height: auto; margin: 5mm auto; break-inside: avoid-page; }
+    table { width: 100%; margin: 5mm 0; border-collapse: collapse; table-layout: fixed; font-size: 9.5pt; }
+    thead { display: table-header-group; }
+    tfoot { display: table-footer-group; }
+    tr { break-inside: avoid-page; }
+    th, td { border: 0.25mm solid #94a3b8; padding: 2.5mm 3mm; text-align: left; vertical-align: top; overflow-wrap: anywhere; }
+    th { background: #eef2f7; color: #111827; font-weight: 650; }
+    strong > code:only-child { background: transparent; padding: 0; font: inherit; }
+    strong > code:only-child > span:only-child { display: inline-block; max-width: 100%; border: 0.25mm solid #a5b4fc; border-radius: 1.2mm; background: #eef2ff; padding: 0.15mm 1.5mm; break-inside: avoid-page; color: #3730a3; font-weight: 600; line-height: 1.55; text-decoration: none; vertical-align: baseline; }
+  </style>
+</head>
+<body>
+  <h1 class="document-title">${safeTitle}</h1>
+  <main class="document-content">${contentHtml}</main>
+</body>
+</html>`;
+}
+export {
+  buildDocumentPdfHtml
+};
+//# sourceMappingURL=pdfHtml.js.map

package/dist/modules/documents/lib/pdfHtml.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/documents/lib/pdfHtml.ts"],
+  "sourcesContent": ["const PDF_CSP = \"default-src 'none'; img-src data:; style-src 'unsafe-inline'; script-src 'none'; frame-src 'none'; connect-src 'none'; base-uri 'none'; form-action 'none'\"\n\nfunction escapeHtml(value: string): string {\n  return value\n    .replace(/&/g, '&amp;')\n    .replace(/</g, '&lt;')\n    .replace(/>/g, '&gt;')\n    .replace(/\"/g, '&quot;')\n    .replace(/'/g, '&#39;')\n}\n\nexport function buildDocumentPdfHtml(title: string, contentHtml: string): string {\n  const safeTitle = escapeHtml(title)\n  return `<!DOCTYPE html>\n<html>\n<head>\n  <meta charset=\"utf-8\">\n  <meta http-equiv=\"Content-Security-Policy\" content=\"${PDF_CSP}\">\n  <title>${safeTitle}</title>\n  <style>\n    @page { size: A4; margin: 22mm 20mm; }\n    *, *::before, *::after { box-sizing: border-box; }\n    html { color: #172033; background: #fff; font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", sans-serif; font-size: 11pt; line-height: 1.55; }\n    body { margin: 0; overflow-wrap: anywhere; }\n    .document-title { margin: 0 0 9mm; color: #111827; font-size: 25pt; font-weight: 650; line-height: 1.18; }\n    .document-content > :first-child { margin-top: 0; }\n    .document-content > :last-child { margin-bottom: 0; }\n    h1, h2, h3, h4, h5, h6 { break-after: avoid-page; color: #111827; font-weight: 650; line-height: 1.25; }\n    h1 { margin: 8mm 0 3mm; font-size: 21pt; }\n    h2 { margin: 7mm 0 2.5mm; font-size: 17pt; }\n    h3 { margin: 6mm 0 2mm; font-size: 14pt; }\n    h4, h5, h6 { margin: 5mm 0 2mm; font-size: 11.5pt; }\n    p { margin: 0 0 3.5mm; }\n    ul, ol { margin: 0 0 4mm; padding-left: 7mm; }\n    li { margin: 1mm 0; padding-left: 1mm; }\n    li > p { margin: 0; }\n    ul:has(input[type=\"checkbox\"]) { list-style: none; padding-left: 0; }\n    ul:has(input[type=\"checkbox\"]) li { display: flex; align-items: flex-start; gap: 2.5mm; padding-left: 0; }\n    ul:has(input[type=\"checkbox\"]) li > label { flex: none; padding-top: 0.5mm; }\n    ul:has(input[type=\"checkbox\"]) li > div { min-width: 0; flex: 1; }\n    input[type=\"checkbox\"] { width: 3.5mm; height: 3.5mm; margin: 0; accent-color: #4f46e5; }\n    blockquote { margin: 5mm 0; border-left: 1.2mm solid #cbd5e1; padding: 1mm 0 1mm 5mm; color: #475569; }\n    pre { margin: 5mm 0; border: 0.25mm solid #dbe3ee; border-radius: 1.5mm; background: #f8fafc; padding: 4mm; break-inside: avoid-page; color: #172033; font: 9.5pt/1.5 ui-monospace, SFMono-Regular, Menlo, Consolas, monospace; white-space: pre-wrap; }\n    code { border-radius: 1mm; background: #f1f5f9; padding: 0.2mm 1mm; font: 0.9em ui-monospace, SFMono-Regular, Menlo, Consolas, monospace; }\n    pre code { background: transparent; padding: 0; font: inherit; }\n    a { color: #4338ca; text-decoration: underline; text-underline-offset: 1px; }\n    span[style*=\"background-color\"] { border-radius: 0.5mm; padding: 0 0.4mm; }\n    hr { margin: 7mm 0; border: 0; border-top: 0.25mm solid #cbd5e1; }\n    img { display: block; max-width: 100%; height: auto; margin: 5mm auto; break-inside: avoid-page; }\n    table { width: 100%; margin: 5mm 0; border-collapse: collapse; table-layout: fixed; font-size: 9.5pt; }\n    thead { display: table-header-group; }\n    tfoot { display: table-footer-group; }\n    tr { break-inside: avoid-page; }\n    th, td { border: 0.25mm solid #94a3b8; padding: 2.5mm 3mm; text-align: left; vertical-align: top; overflow-wrap: anywhere; }\n    th { background: #eef2f7; color: #111827; font-weight: 650; }\n    strong > code:only-child { background: transparent; padding: 0; font: inherit; }\n    strong > code:only-child > span:only-child { display: inline-block; max-width: 100%; border: 0.25mm solid #a5b4fc; border-radius: 1.2mm; background: #eef2ff; padding: 0.15mm 1.5mm; break-inside: avoid-page; color: #3730a3; font-weight: 600; line-height: 1.55; text-decoration: none; vertical-align: baseline; }\n  </style>\n</head>\n<body>\n  <h1 class=\"document-title\">${safeTitle}</h1>\n  <main class=\"document-content\">${contentHtml}</main>\n</body>\n</html>`\n}\n"],
+  "mappings": "AAAA,MAAM,UAAU;AAEhB,SAAS,WAAW,OAAuB;AACzC,SAAO,MACJ,QAAQ,MAAM,OAAO,EACrB,QAAQ,MAAM,MAAM,EACpB,QAAQ,MAAM,MAAM,EACpB,QAAQ,MAAM,QAAQ,EACtB,QAAQ,MAAM,OAAO;AAC1B;AAEO,SAAS,qBAAqB,OAAe,aAA6B;AAC/E,QAAM,YAAY,WAAW,KAAK;AAClC,SAAO;AAAA;AAAA;AAAA;AAAA,wDAI+C,OAAO;AAAA,WACpD,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,+BA0CW,SAAS;AAAA,mCACL,WAAW;AAAA;AAAA;AAG9C;",
+  "names": []
+}

package/dist/modules/documents/lib/pdfRenderer.js

@@ -0,0 +1,284 @@
+var _a, _b, _c, _d, _e, _f;
+import puppeteer from "puppeteer-core";
+const PDF_RENDER_MAX_CONCURRENCY = 2;
+const PDF_RENDER_MAX_QUEUE = 4;
+const PDF_RENDER_ACQUIRE_TIMEOUT_MS = 2e3;
+const PDF_RENDER_TIMEOUT_MS = 2e4;
+const PDF_PAGE_CLOSE_TIMEOUT_MS = 1e3;
+const PDF_MAX_OUTPUT_BYTES = 25 * 1024 * 1024;
+const PDF_OVERLOADED_MARKER = /* @__PURE__ */ Symbol.for("open-mercato.documents.pdfRenderer.overloaded");
+const PDF_TIMEOUT_MARKER = /* @__PURE__ */ Symbol.for("open-mercato.documents.pdfRenderer.timeout");
+const PDF_OUTPUT_TOO_LARGE_MARKER = /* @__PURE__ */ Symbol.for("open-mercato.documents.pdfRenderer.outputTooLarge");
+class PdfRenderOverloadedError extends (_b = Error, _a = PDF_OVERLOADED_MARKER, _b) {
+  constructor() {
+    super("PDF renderer is at capacity");
+    this[_a] = true;
+    this.name = "PdfRenderOverloadedError";
+  }
+}
+class PdfRenderTimeoutError extends (_d = Error, _c = PDF_TIMEOUT_MARKER, _d) {
+  constructor() {
+    super("PDF renderer timed out");
+    this[_c] = true;
+    this.name = "PdfRenderTimeoutError";
+  }
+}
+class PdfRenderOutputTooLargeError extends (_f = Error, _e = PDF_OUTPUT_TOO_LARGE_MARKER, _f) {
+  constructor() {
+    super("PDF renderer output exceeded its byte limit");
+    this[_e] = true;
+    this.name = "PdfRenderOutputTooLargeError";
+  }
+}
+function hasErrorMarker(error, marker) {
+  return Boolean(error && typeof error === "object" && error[marker] === true);
+}
+const isPdfRenderOverloadedError = (error) => error instanceof PdfRenderOverloadedError || hasErrorMarker(error, PDF_OVERLOADED_MARKER);
+const isPdfRenderTimeoutError = (error) => error instanceof PdfRenderTimeoutError || hasErrorMarker(error, PDF_TIMEOUT_MARKER);
+const isPdfRenderOutputTooLargeError = (error) => error instanceof PdfRenderOutputTooLargeError || hasErrorMarker(error, PDF_OUTPUT_TOO_LARGE_MARKER);
+class BoundedSemaphore {
+  constructor(capacity, maxQueue, acquireTimeoutMs) {
+    this.capacity = capacity;
+    this.maxQueue = maxQueue;
+    this.acquireTimeoutMs = acquireTimeoutMs;
+    this.active = 0;
+    this.waiters = [];
+  }
+  async acquire() {
+    if (this.active < this.capacity) return this.grant();
+    if (this.waiters.length >= this.maxQueue) throw new PdfRenderOverloadedError();
+    return await new Promise((resolve, reject) => {
+      const waiter = {
+        resolve,
+        reject,
+        timer: setTimeout(() => {
+          const index = this.waiters.indexOf(waiter);
+          if (index >= 0) this.waiters.splice(index, 1);
+          reject(new PdfRenderOverloadedError());
+        }, this.acquireTimeoutMs)
+      };
+      this.waiters.push(waiter);
+    });
+  }
+  grant() {
+    this.active += 1;
+    let released = false;
+    return () => {
+      if (released) return;
+      released = true;
+      this.active -= 1;
+      const waiter = this.waiters.shift();
+      if (!waiter) return;
+      clearTimeout(waiter.timer);
+      waiter.resolve(this.grant());
+    };
+  }
+}
+function withTimeout(promise, timeoutMs, onTimeout) {
+  return new Promise((resolve, reject) => {
+    let settled = false;
+    const timer = setTimeout(() => {
+      if (settled) return;
+      settled = true;
+      onTimeout();
+      reject(new PdfRenderTimeoutError());
+    }, timeoutMs);
+    promise.then(
+      (value) => {
+        if (settled) return;
+        settled = true;
+        clearTimeout(timer);
+        resolve(value);
+      },
+      (error) => {
+        if (settled) return;
+        settled = true;
+        clearTimeout(timer);
+        reject(error);
+      }
+    );
+  });
+}
+async function readBoundedPdfStream(stream, maxOutputBytes) {
+  const reader = stream.getReader();
+  const chunks = [];
+  let totalBytes = 0;
+  try {
+    while (true) {
+      const { done, value } = await reader.read();
+      if (done) break;
+      if (!value || value.byteLength === 0) continue;
+      if (totalBytes + value.byteLength > maxOutputBytes) {
+        await reader.cancel("PDF output exceeded its byte limit").catch(() => void 0);
+        throw new PdfRenderOutputTooLargeError();
+      }
+      totalBytes += value.byteLength;
+      chunks.push(value);
+    }
+  } finally {
+    reader.releaseLock();
+  }
+  const output = new Uint8Array(totalBytes);
+  let offset = 0;
+  for (const chunk of chunks) {
+    output.set(chunk, offset);
+    offset += chunk.byteLength;
+  }
+  return output;
+}
+function createPdfRenderer(launch, options = {}) {
+  const renderTimeoutMs = options.renderTimeoutMs ?? PDF_RENDER_TIMEOUT_MS;
+  const pageCloseTimeoutMs = options.pageCloseTimeoutMs ?? PDF_PAGE_CLOSE_TIMEOUT_MS;
+  const maxOutputBytes = options.maxOutputBytes ?? PDF_MAX_OUTPUT_BYTES;
+  const semaphore = new BoundedSemaphore(
+    options.maxConcurrency ?? PDF_RENDER_MAX_CONCURRENCY,
+    options.maxQueue ?? PDF_RENDER_MAX_QUEUE,
+    options.acquireTimeoutMs ?? PDF_RENDER_ACQUIRE_TIMEOUT_MS
+  );
+  let browserState = null;
+  const terminateBrowser = async (browser) => {
+    let closed = false;
+    const closePromise = browser.close().then(
+      () => {
+        closed = true;
+      },
+      () => void 0
+    );
+    let closeTimer;
+    const closeTimeout = new Promise((resolve) => {
+      closeTimer = setTimeout(resolve, 1e3);
+    });
+    await Promise.race([
+      closePromise,
+      closeTimeout
+    ]);
+    if (closeTimer) clearTimeout(closeTimer);
+    if (!closed) browser.process?.()?.kill("SIGKILL");
+  };
+  const invalidateBrowser = (browser) => {
+    const state = browserState;
+    if (!state) return;
+    if (browser && state.browser && state.browser !== browser) return;
+    if (browser && !state.browser) {
+      void state.promise.then((resolved) => {
+        if (resolved !== browser) return;
+        if (browserState?.promise === state.promise) browserState = null;
+        return terminateBrowser(resolved);
+      }).catch(() => void 0);
+      return;
+    }
+    browserState = null;
+    void state.promise.then((resolved) => {
+      if (!browser || browser === resolved) return terminateBrowser(resolved);
+    }).catch(() => void 0);
+  };
+  const getBrowser = async (executablePath) => {
+    if (browserState && browserState.executablePath !== executablePath) {
+      invalidateBrowser();
+    }
+    if (!browserState) {
+      const promise = launch({
+        executablePath,
+        headless: true,
+        args: [],
+        timeout: Math.min(renderTimeoutMs, 1e4),
+        protocolTimeout: renderTimeoutMs
+      });
+      browserState = { executablePath, promise };
+      promise.then((browser2) => {
+        if (browserState?.promise === promise) browserState.browser = browser2;
+        browser2.on("disconnected", () => {
+          if (browserState?.promise === promise) browserState = null;
+        });
+      }).catch(() => {
+        if (browserState?.promise === promise) browserState = null;
+      });
+    }
+    const browser = await browserState.promise;
+    if (browser.connected === false) {
+      invalidateBrowser(browser);
+      return getBrowser(executablePath);
+    }
+    return browser;
+  };
+  const render = async (input) => {
+    const release = await semaphore.acquire();
+    let browser;
+    let page;
+    try {
+      const renderOperation = (async () => {
+        browser = await getBrowser(input.executablePath);
+        page = await browser.newPage();
+        await page.setJavaScriptEnabled(false);
+        await page.setRequestInterception(true);
+        page.on("request", (request) => {
+          void Promise.resolve().then(() => input.isAllowedRequest(request) ? request.continue() : request.abort()).catch(() => void 0);
+        });
+        await page.setContent(input.html, { waitUntil: "load" });
+        const pdfStream = await page.createPDFStream({
+          format: "A4",
+          printBackground: true,
+          preferCSSPageSize: true
+        });
+        return readBoundedPdfStream(pdfStream, maxOutputBytes);
+      })();
+      try {
+        return await withTimeout(renderOperation, renderTimeoutMs, () => invalidateBrowser(browser));
+      } catch (error) {
+        if (isPdfRenderOutputTooLargeError(error)) invalidateBrowser(browser);
+        throw error;
+      }
+    } finally {
+      if (page) {
+        let closeSettled = false;
+        let closeTimer;
+        const closePromise = page.close().then(
+          () => {
+            closeSettled = true;
+          },
+          () => {
+            closeSettled = true;
+          }
+        );
+        const closeTimeout = new Promise((resolve) => {
+          closeTimer = setTimeout(resolve, pageCloseTimeoutMs);
+        });
+        await Promise.race([closePromise, closeTimeout]);
+        if (closeTimer) clearTimeout(closeTimer);
+        if (!closeSettled) invalidateBrowser(browser);
+      }
+      release();
+    }
+  };
+  return {
+    render,
+    dispose: async () => {
+      const state = browserState;
+      browserState = null;
+      if (state) await state.promise.then(terminateBrowser).catch(() => void 0);
+    }
+  };
+}
+const PDF_RENDERER_KEY = /* @__PURE__ */ Symbol.for("open-mercato.documents.pdfRenderer");
+const globalStore = globalThis;
+const processPdfRenderer = globalStore[PDF_RENDERER_KEY] ?? (globalStore[PDF_RENDERER_KEY] = createPdfRenderer(
+  (options) => puppeteer.launch(options)
+));
+const renderPdfWithChromium = processPdfRenderer.render;
+export {
+  PDF_MAX_OUTPUT_BYTES,
+  PDF_PAGE_CLOSE_TIMEOUT_MS,
+  PDF_RENDER_ACQUIRE_TIMEOUT_MS,
+  PDF_RENDER_MAX_CONCURRENCY,
+  PDF_RENDER_MAX_QUEUE,
+  PDF_RENDER_TIMEOUT_MS,
+  PdfRenderOutputTooLargeError,
+  PdfRenderOverloadedError,
+  PdfRenderTimeoutError,
+  createPdfRenderer,
+  isPdfRenderOutputTooLargeError,
+  isPdfRenderOverloadedError,
+  isPdfRenderTimeoutError,
+  renderPdfWithChromium
+};
+//# sourceMappingURL=pdfRenderer.js.map