@open-mercato/documents 0.6.8-develop.7016.1.4ed7b1e49d

package/dist/modules/documents/lib/userLabels.js

@@ -0,0 +1,37 @@
+import { sanitizeDocumentsDisplayLabel } from "./displayLabels.js";
+import {
+  resolveAuthPrincipalService
+} from "./platformServices.js";
+function cleanString(value) {
+  return sanitizeDocumentsDisplayLabel(value);
+}
+async function resolveUserLabels(container, scope, userIds) {
+  const uniqueUserIds = Array.from(
+    new Set(userIds.map((id) => id.trim()).filter((id) => id.length > 0))
+  );
+  const labels = /* @__PURE__ */ new Map();
+  if (uniqueUserIds.length === 0) return labels;
+  const service = resolveAuthPrincipalService(container);
+  if (!service) return labels;
+  const users = await service.resolveLabels({ type: "user", ids: uniqueUserIds, scope });
+  for (const user of users) {
+    const label = cleanString(user.label);
+    const secondary = cleanString(user.secondary);
+    if (!label) continue;
+    labels.set(user.id, { label, secondary: secondary && secondary !== label ? secondary : null });
+  }
+  return labels;
+}
+async function resolveViewerSafeUserLabels(container, scope, userIds) {
+  const resolved = await resolveUserLabels(container, scope, userIds);
+  const labels = /* @__PURE__ */ new Map();
+  for (const [userId, value] of resolved.entries()) {
+    labels.set(userId, { label: value.label });
+  }
+  return labels;
+}
+export {
+  resolveUserLabels,
+  resolveViewerSafeUserLabels
+};
+//# sourceMappingURL=userLabels.js.map

package/dist/modules/documents/lib/userLabels.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/documents/lib/userLabels.ts"],
+  "sourcesContent": ["import { sanitizeDocumentsDisplayLabel } from './displayLabels'\nimport {\n  resolveAuthPrincipalService,\n  type DocumentsServiceContainer,\n} from './platformServices'\n\nexport type UserLabel = { label: string; secondary?: string | null }\nexport type ViewerSafeUserLabel = { label: string }\n\nfunction cleanString(value: unknown): string | null {\n  return sanitizeDocumentsDisplayLabel(value)\n}\n\nexport async function resolveUserLabels(\n  container: DocumentsServiceContainer | null | undefined,\n  scope: { tenantId: string; organizationId: string },\n  userIds: string[],\n): Promise<Map<string, UserLabel>> {\n  const uniqueUserIds = Array.from(\n    new Set(userIds.map((id) => id.trim()).filter((id) => id.length > 0)),\n  )\n  const labels = new Map<string, UserLabel>()\n  if (uniqueUserIds.length === 0) return labels\n\n  const service = resolveAuthPrincipalService(container)\n  if (!service) return labels\n  const users = await service.resolveLabels({ type: 'user', ids: uniqueUserIds, scope })\n\n  for (const user of users) {\n    const label = cleanString(user.label)\n    const secondary = cleanString(user.secondary)\n    if (!label) continue\n    labels.set(user.id, { label, secondary: secondary && secondary !== label ? secondary : null })\n  }\n\n  return labels\n}\n\n/**\n * Resolve labels safe for document viewers. Comment history needs readable\n * author names, but it is not a directory surface: secondary identifiers must\n * not cross this boundary. The primary label itself is kept as the directory\n * resolved it \u2014 for an account without a display name that is its email, the\n * same label the list owner column and version history already show, so a\n * commenter never degrades to the \"unknown user\" placeholder.\n */\nexport async function resolveViewerSafeUserLabels(\n  container: DocumentsServiceContainer | null | undefined,\n  scope: { tenantId: string; organizationId: string },\n  userIds: string[],\n): Promise<Map<string, ViewerSafeUserLabel>> {\n  const resolved = await resolveUserLabels(container, scope, userIds)\n  const labels = new Map<string, ViewerSafeUserLabel>()\n  for (const [userId, value] of resolved.entries()) {\n    labels.set(userId, { label: value.label })\n  }\n  return labels\n}\n"],
+  "mappings": "AAAA,SAAS,qCAAqC;AAC9C;AAAA,EACE;AAAA,OAEK;AAKP,SAAS,YAAY,OAA+B;AAClD,SAAO,8BAA8B,KAAK;AAC5C;AAEA,eAAsB,kBACpB,WACA,OACA,SACiC;AACjC,QAAM,gBAAgB,MAAM;AAAA,IAC1B,IAAI,IAAI,QAAQ,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,EAAE,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;AAAA,EACtE;AACA,QAAM,SAAS,oBAAI,IAAuB;AAC1C,MAAI,cAAc,WAAW,EAAG,QAAO;AAEvC,QAAM,UAAU,4BAA4B,SAAS;AACrD,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,QAAQ,MAAM,QAAQ,cAAc,EAAE,MAAM,QAAQ,KAAK,eAAe,MAAM,CAAC;AAErF,aAAW,QAAQ,OAAO;AACxB,UAAM,QAAQ,YAAY,KAAK,KAAK;AACpC,UAAM,YAAY,YAAY,KAAK,SAAS;AAC5C,QAAI,CAAC,MAAO;AACZ,WAAO,IAAI,KAAK,IAAI,EAAE,OAAO,WAAW,aAAa,cAAc,QAAQ,YAAY,KAAK,CAAC;AAAA,EAC/F;AAEA,SAAO;AACT;AAUA,eAAsB,4BACpB,WACA,OACA,SAC2C;AAC3C,QAAM,WAAW,MAAM,kBAAkB,WAAW,OAAO,OAAO;AAClE,QAAM,SAAS,oBAAI,IAAiC;AACpD,aAAW,CAAC,QAAQ,KAAK,KAAK,SAAS,QAAQ,GAAG;AAChD,WAAO,IAAI,QAAQ,EAAE,OAAO,MAAM,MAAM,CAAC;AAAA,EAC3C;AACA,SAAO;AACT;",
+  "names": []
+}

package/dist/modules/documents/lib/versionContent.js

@@ -0,0 +1,131 @@
+import * as Y from "yjs";
+import { CrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { sanitizeRichTextHtml } from "@open-mercato/shared/lib/html/sanitizeRichText";
+import { htmlToYDoc, yDocToContent } from "./collabMaterializer.js";
+import {
+  firstSafeDocumentsDisplayLabel,
+  sanitizeDocumentsDisplayLabel
+} from "./displayLabels.js";
+import { assertDocumentContentResourceLimits } from "./resourceLimits.js";
+const UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function isDocumentAttachmentSource(src, documentId) {
+  if (!UUID_PATTERN.test(documentId)) return false;
+  const match = /^\/api\/documents\/([^/]+)\/attachments\/([^/]+)$/.exec(src);
+  if (!match || !UUID_PATTERN.test(match[1]) || !UUID_PATTERN.test(match[2])) return false;
+  return match[1].toLowerCase() === documentId.toLowerCase();
+}
+function normalizeDocumentEntityRefLabels(contentHtml, fallbackLabel) {
+  const readableFallback = sanitizeDocumentsDisplayLabel(fallbackLabel);
+  if (!readableFallback) {
+    throw new Error("[internal] document entity references require a readable fallback label");
+  }
+  const decodeCandidate = (value) => {
+    try {
+      const decoded = value.replace(/&#x([0-9a-f]+);/gi, (_match, code) => String.fromCodePoint(Number.parseInt(code, 16))).replace(/&#([0-9]+);/g, (_match, code) => String.fromCodePoint(Number.parseInt(code, 10))).replace(/&(amp|quot|apos|lt|gt|nbsp);/gi, (_match, entity) => ({
+        amp: "&",
+        quot: '"',
+        apos: "'",
+        lt: "<",
+        gt: ">",
+        nbsp: " "
+      })[entity.toLowerCase()] ?? "");
+      return /&(?:#\d+|#x[0-9a-f]+|[a-z][a-z0-9]+);/i.test(decoded) ? null : decoded;
+    } catch {
+      return null;
+    }
+  };
+  const readAttribute = (attributes, name) => {
+    const escaped = name.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+    const match = new RegExp(`(?:^|\\s)${escaped}\\s*=\\s*(?:"([^"]*)"|'([^']*)'|([^\\s>]+))`, "i").exec(attributes);
+    const raw = match?.[1] ?? match?.[2] ?? match?.[3];
+    return raw === void 0 ? null : decodeCandidate(raw);
+  };
+  const escapeText = (value) => value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+  return contentHtml.replace(/<span\b([^>]*)>([\s\S]*?)(?:<\/span\s*>|$)/gi, (whole, attributes, innerHtml) => {
+    if (!/(?:^|\s)data-entity-ref(?:\s|=|$)/i.test(attributes)) return whole;
+    const markedInvalid = /(?:^|\s)data-entity-label-invalid(?:\s|=|$)/i.test(attributes);
+    const attributeLabel = readAttribute(attributes, "data-label");
+    const innerText = decodeCandidate(sanitizeRichTextHtml(innerHtml).replace(/<[^>]*>/g, ""));
+    const label = markedInvalid ? readableFallback : firstSafeDocumentsDisplayLabel(attributeLabel, innerText, readableFallback);
+    return `<span>${escapeText(label)}</span>`;
+  });
+}
+function sanitizeDocumentPreviewHtml(contentHtml, documentId, entityRefFallbackLabel = "Record") {
+  assertDocumentContentResourceLimits(
+    { contentHtml },
+    { status: 422, error: "documents.versions.snapshotTooLarge" }
+  );
+  const sanitized = sanitizeRichTextHtml(
+    normalizeDocumentEntityRefLabels(contentHtml, entityRefFallbackLabel)
+  );
+  const withoutExternalImages = sanitized.replace(/<img\b[^>]*>/gi, (tag) => {
+    const match = /\ssrc=(?:"([^"]*)"|'([^']*)')/i.exec(tag);
+    const src = match?.[1] ?? match?.[2] ?? "";
+    return isDocumentAttachmentSource(src, documentId) ? tag : "";
+  });
+  try {
+    const normalized = yDocToContent(htmlToYDoc(withoutExternalImages));
+    if (!normalized) throw new Error("[internal] Unable to normalize document preview");
+    return normalized.html;
+  } catch {
+    throw new CrudHttpError(422, { error: "documents.versions.previewInvalid" });
+  }
+}
+function materializeDocumentVersion(input) {
+  assertDocumentContentResourceLimits(
+    { yjsState: input.yjsSnapshot, contentHtml: input.contentHtml },
+    { status: 422, error: "documents.versions.snapshotTooLarge" }
+  );
+  let ydoc;
+  const snapshot = Buffer.from(input.yjsSnapshot);
+  if (snapshot.length === 0) {
+    try {
+      ydoc = htmlToYDoc(input.contentHtml ?? "");
+    } catch {
+      throw new CrudHttpError(422, { error: "documents.versions.previewInvalid" });
+    }
+  } else {
+    ydoc = new Y.Doc();
+    try {
+      Y.applyUpdate(ydoc, new Uint8Array(snapshot));
+    } catch {
+      throw new CrudHttpError(422, { error: "documents.versions.corruptSnapshot" });
+    }
+  }
+  const materialized = yDocToContent(ydoc);
+  if (!materialized) {
+    throw new CrudHttpError(422, { error: "documents.versions.corruptSnapshot" });
+  }
+  const result = {
+    yjsState: Buffer.from(Y.encodeStateAsUpdate(ydoc)),
+    contentHtml: materialized.html,
+    contentText: materialized.text
+  };
+  assertDocumentContentResourceLimits(
+    result,
+    { status: 422, error: "documents.versions.snapshotTooLarge" }
+  );
+  return result;
+}
+function materializeDocumentVersionPreview(input) {
+  if (Buffer.from(input.yjsSnapshot).length === 0) {
+    return sanitizeDocumentPreviewHtml(
+      input.contentHtml ?? "",
+      input.documentId,
+      input.entityRefFallbackLabel
+    );
+  }
+  const materialized = materializeDocumentVersion(input);
+  return sanitizeDocumentPreviewHtml(
+    materialized.contentHtml,
+    input.documentId,
+    input.entityRefFallbackLabel
+  );
+}
+export {
+  materializeDocumentVersion,
+  materializeDocumentVersionPreview,
+  normalizeDocumentEntityRefLabels,
+  sanitizeDocumentPreviewHtml
+};
+//# sourceMappingURL=versionContent.js.map

package/dist/modules/documents/lib/versionContent.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/documents/lib/versionContent.ts"],
+  "sourcesContent": ["import * as Y from 'yjs'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { sanitizeRichTextHtml } from '@open-mercato/shared/lib/html/sanitizeRichText'\nimport { htmlToYDoc, yDocToContent } from './collabMaterializer'\nimport {\n  firstSafeDocumentsDisplayLabel,\n  sanitizeDocumentsDisplayLabel,\n} from './displayLabels'\nimport { assertDocumentContentResourceLimits } from './resourceLimits'\n\nexport type MaterializedVersionContent = {\n  yjsState: Buffer\n  contentHtml: string\n  contentText: string\n}\n\nconst UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i\n\nfunction isDocumentAttachmentSource(src: string, documentId: string): boolean {\n  if (!UUID_PATTERN.test(documentId)) return false\n  const match = /^\\/api\\/documents\\/([^/]+)\\/attachments\\/([^/]+)$/.exec(src)\n  if (!match || !UUID_PATTERN.test(match[1]!) || !UUID_PATTERN.test(match[2]!)) return false\n  return match[1]!.toLowerCase() === documentId.toLowerCase()\n}\n\nexport function normalizeDocumentEntityRefLabels(\n  contentHtml: string,\n  fallbackLabel: string,\n): string {\n  const readableFallback = sanitizeDocumentsDisplayLabel(fallbackLabel)\n  if (!readableFallback) {\n    throw new Error('[internal] document entity references require a readable fallback label')\n  }\n  const decodeCandidate = (value: string): string | null => {\n    try {\n      const decoded = value\n        .replace(/&#x([0-9a-f]+);/gi, (_match, code: string) => String.fromCodePoint(Number.parseInt(code, 16)))\n        .replace(/&#([0-9]+);/g, (_match, code: string) => String.fromCodePoint(Number.parseInt(code, 10)))\n        .replace(/&(amp|quot|apos|lt|gt|nbsp);/gi, (_match, entity: string) => ({\n          amp: '&', quot: '\"', apos: \"'\", lt: '<', gt: '>', nbsp: ' ',\n        })[entity.toLowerCase()] ?? '')\n      return /&(?:#\\d+|#x[0-9a-f]+|[a-z][a-z0-9]+);/i.test(decoded) ? null : decoded\n    } catch {\n      return null\n    }\n  }\n  const readAttribute = (attributes: string, name: string): string | null => {\n    const escaped = name.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n    const match = new RegExp(`(?:^|\\\\s)${escaped}\\\\s*=\\\\s*(?:\"([^\"]*)\"|'([^']*)'|([^\\\\s>]+))`, 'i').exec(attributes)\n    const raw = match?.[1] ?? match?.[2] ?? match?.[3]\n    return raw === undefined ? null : decodeCandidate(raw)\n  }\n  const escapeText = (value: string): string => value\n    .replace(/&/g, '&amp;')\n    .replace(/</g, '&lt;')\n    .replace(/>/g, '&gt;')\n\n  return contentHtml.replace(/<span\\b([^>]*)>([\\s\\S]*?)(?:<\\/span\\s*>|$)/gi, (whole, attributes: string, innerHtml: string) => {\n    if (!/(?:^|\\s)data-entity-ref(?:\\s|=|$)/i.test(attributes)) return whole\n    const markedInvalid = /(?:^|\\s)data-entity-label-invalid(?:\\s|=|$)/i.test(attributes)\n    const attributeLabel = readAttribute(attributes, 'data-label')\n    const innerText = decodeCandidate(sanitizeRichTextHtml(innerHtml).replace(/<[^>]*>/g, ''))\n    const label = markedInvalid\n      ? readableFallback\n      : firstSafeDocumentsDisplayLabel(attributeLabel, innerText, readableFallback)!\n    return `<span>${escapeText(label)}</span>`\n  })\n}\n\n/**\n * The shared sanitizer deliberately permits https images for other rich-text\n * surfaces. Documents previews are stricter: they must not make any network\n * request while rendering historical content, so only the current document's\n * relative attachment endpoint survives.\n */\nexport function sanitizeDocumentPreviewHtml(\n  contentHtml: string,\n  documentId: string,\n  entityRefFallbackLabel = 'Record',\n): string {\n  assertDocumentContentResourceLimits(\n    { contentHtml },\n    { status: 422, error: 'documents.versions.snapshotTooLarge' },\n  )\n  const sanitized = sanitizeRichTextHtml(\n    normalizeDocumentEntityRefLabels(contentHtml, entityRefFallbackLabel),\n  )\n  const withoutExternalImages = sanitized.replace(/<img\\b[^>]*>/gi, (tag) => {\n    const match = /\\ssrc=(?:\"([^\"]*)\"|'([^']*)')/i.exec(tag)\n    const src = match?.[1] ?? match?.[2] ?? ''\n    return isDocumentAttachmentSource(src, documentId) ? tag : ''\n  })\n  try {\n    const normalized = yDocToContent(htmlToYDoc(withoutExternalImages))\n    if (!normalized) throw new Error('[internal] Unable to normalize document preview')\n    return normalized.html\n  } catch {\n    throw new CrudHttpError(422, { error: 'documents.versions.previewInvalid' })\n  }\n}\n\nexport function materializeDocumentVersion(input: {\n  yjsSnapshot: Buffer | Uint8Array\n  contentHtml: string | null | undefined\n}): MaterializedVersionContent {\n  assertDocumentContentResourceLimits(\n    { yjsState: input.yjsSnapshot, contentHtml: input.contentHtml },\n    { status: 422, error: 'documents.versions.snapshotTooLarge' },\n  )\n  let ydoc: Y.Doc\n  const snapshot = Buffer.from(input.yjsSnapshot)\n  if (snapshot.length === 0) {\n    try {\n      ydoc = htmlToYDoc(input.contentHtml ?? '')\n    } catch {\n      throw new CrudHttpError(422, { error: 'documents.versions.previewInvalid' })\n    }\n  } else {\n    ydoc = new Y.Doc()\n    try {\n      Y.applyUpdate(ydoc, new Uint8Array(snapshot))\n    } catch {\n      throw new CrudHttpError(422, { error: 'documents.versions.corruptSnapshot' })\n    }\n  }\n\n  const materialized = yDocToContent(ydoc)\n  if (!materialized) {\n    throw new CrudHttpError(422, { error: 'documents.versions.corruptSnapshot' })\n  }\n  const result = {\n    yjsState: Buffer.from(Y.encodeStateAsUpdate(ydoc)),\n    contentHtml: materialized.html,\n    contentText: materialized.text,\n  }\n  assertDocumentContentResourceLimits(\n    result,\n    { status: 422, error: 'documents.versions.snapshotTooLarge' },\n  )\n  return result\n}\n\nexport function materializeDocumentVersionPreview(input: {\n  documentId: string\n  yjsSnapshot: Buffer | Uint8Array\n  contentHtml: string | null | undefined\n  entityRefFallbackLabel?: string\n}): string {\n  if (Buffer.from(input.yjsSnapshot).length === 0) {\n    // Legacy HTML must be sanitized before it ever enters the editor parser.\n    return sanitizeDocumentPreviewHtml(\n      input.contentHtml ?? '',\n      input.documentId,\n      input.entityRefFallbackLabel,\n    )\n  }\n  const materialized = materializeDocumentVersion(input)\n  return sanitizeDocumentPreviewHtml(\n    materialized.contentHtml,\n    input.documentId,\n    input.entityRefFallbackLabel,\n  )\n}\n"],
+  "mappings": "AAAA,YAAY,OAAO;AACnB,SAAS,qBAAqB;AAC9B,SAAS,4BAA4B;AACrC,SAAS,YAAY,qBAAqB;AAC1C;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,2CAA2C;AAQpD,MAAM,eAAe;AAErB,SAAS,2BAA2B,KAAa,YAA6B;AAC5E,MAAI,CAAC,aAAa,KAAK,UAAU,EAAG,QAAO;AAC3C,QAAM,QAAQ,oDAAoD,KAAK,GAAG;AAC1E,MAAI,CAAC,SAAS,CAAC,aAAa,KAAK,MAAM,CAAC,CAAE,KAAK,CAAC,aAAa,KAAK,MAAM,CAAC,CAAE,EAAG,QAAO;AACrF,SAAO,MAAM,CAAC,EAAG,YAAY,MAAM,WAAW,YAAY;AAC5D;AAEO,SAAS,iCACd,aACA,eACQ;AACR,QAAM,mBAAmB,8BAA8B,aAAa;AACpE,MAAI,CAAC,kBAAkB;AACrB,UAAM,IAAI,MAAM,yEAAyE;AAAA,EAC3F;AACA,QAAM,kBAAkB,CAAC,UAAiC;AACxD,QAAI;AACF,YAAM,UAAU,MACb,QAAQ,qBAAqB,CAAC,QAAQ,SAAiB,OAAO,cAAc,OAAO,SAAS,MAAM,EAAE,CAAC,CAAC,EACtG,QAAQ,gBAAgB,CAAC,QAAQ,SAAiB,OAAO,cAAc,OAAO,SAAS,MAAM,EAAE,CAAC,CAAC,EACjG,QAAQ,kCAAkC,CAAC,QAAQ,YAAoB;AAAA,QACtE,KAAK;AAAA,QAAK,MAAM;AAAA,QAAK,MAAM;AAAA,QAAK,IAAI;AAAA,QAAK,IAAI;AAAA,QAAK,MAAM;AAAA,MAC1D,GAAG,OAAO,YAAY,CAAC,KAAK,EAAE;AAChC,aAAO,yCAAyC,KAAK,OAAO,IAAI,OAAO;AAAA,IACzE,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AACA,QAAM,gBAAgB,CAAC,YAAoB,SAAgC;AACzE,UAAM,UAAU,KAAK,QAAQ,uBAAuB,MAAM;AAC1D,UAAM,QAAQ,IAAI,OAAO,YAAY,OAAO,+CAA+C,GAAG,EAAE,KAAK,UAAU;AAC/G,UAAM,MAAM,QAAQ,CAAC,KAAK,QAAQ,CAAC,KAAK,QAAQ,CAAC;AACjD,WAAO,QAAQ,SAAY,OAAO,gBAAgB,GAAG;AAAA,EACvD;AACA,QAAM,aAAa,CAAC,UAA0B,MAC3C,QAAQ,MAAM,OAAO,EACrB,QAAQ,MAAM,MAAM,EACpB,QAAQ,MAAM,MAAM;AAEvB,SAAO,YAAY,QAAQ,gDAAgD,CAAC,OAAO,YAAoB,cAAsB;AAC3H,QAAI,CAAC,qCAAqC,KAAK,UAAU,EAAG,QAAO;AACnE,UAAM,gBAAgB,+CAA+C,KAAK,UAAU;AACpF,UAAM,iBAAiB,cAAc,YAAY,YAAY;AAC7D,UAAM,YAAY,gBAAgB,qBAAqB,SAAS,EAAE,QAAQ,YAAY,EAAE,CAAC;AACzF,UAAM,QAAQ,gBACV,mBACA,+BAA+B,gBAAgB,WAAW,gBAAgB;AAC9E,WAAO,SAAS,WAAW,KAAK,CAAC;AAAA,EACnC,CAAC;AACH;AAQO,SAAS,4BACd,aACA,YACA,yBAAyB,UACjB;AACR;AAAA,IACE,EAAE,YAAY;AAAA,IACd,EAAE,QAAQ,KAAK,OAAO,sCAAsC;AAAA,EAC9D;AACA,QAAM,YAAY;AAAA,IAChB,iCAAiC,aAAa,sBAAsB;AAAA,EACtE;AACA,QAAM,wBAAwB,UAAU,QAAQ,kBAAkB,CAAC,QAAQ;AACzE,UAAM,QAAQ,iCAAiC,KAAK,GAAG;AACvD,UAAM,MAAM,QAAQ,CAAC,KAAK,QAAQ,CAAC,KAAK;AACxC,WAAO,2BAA2B,KAAK,UAAU,IAAI,MAAM;AAAA,EAC7D,CAAC;AACD,MAAI;AACF,UAAM,aAAa,cAAc,WAAW,qBAAqB,CAAC;AAClE,QAAI,CAAC,WAAY,OAAM,IAAI,MAAM,iDAAiD;AAClF,WAAO,WAAW;AAAA,EACpB,QAAQ;AACN,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,oCAAoC,CAAC;AAAA,EAC7E;AACF;AAEO,SAAS,2BAA2B,OAGZ;AAC7B;AAAA,IACE,EAAE,UAAU,MAAM,aAAa,aAAa,MAAM,YAAY;AAAA,IAC9D,EAAE,QAAQ,KAAK,OAAO,sCAAsC;AAAA,EAC9D;AACA,MAAI;AACJ,QAAM,WAAW,OAAO,KAAK,MAAM,WAAW;AAC9C,MAAI,SAAS,WAAW,GAAG;AACzB,QAAI;AACF,aAAO,WAAW,MAAM,eAAe,EAAE;AAAA,IAC3C,QAAQ;AACN,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,oCAAoC,CAAC;AAAA,IAC7E;AAAA,EACF,OAAO;AACL,WAAO,IAAI,EAAE,IAAI;AACjB,QAAI;AACF,QAAE,YAAY,MAAM,IAAI,WAAW,QAAQ,CAAC;AAAA,IAC9C,QAAQ;AACN,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,qCAAqC,CAAC;AAAA,IAC9E;AAAA,EACF;AAEA,QAAM,eAAe,cAAc,IAAI;AACvC,MAAI,CAAC,cAAc;AACjB,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,qCAAqC,CAAC;AAAA,EAC9E;AACA,QAAM,SAAS;AAAA,IACb,UAAU,OAAO,KAAK,EAAE,oBAAoB,IAAI,CAAC;AAAA,IACjD,aAAa,aAAa;AAAA,IAC1B,aAAa,aAAa;AAAA,EAC5B;AACA;AAAA,IACE;AAAA,IACA,EAAE,QAAQ,KAAK,OAAO,sCAAsC;AAAA,EAC9D;AACA,SAAO;AACT;AAEO,SAAS,kCAAkC,OAKvC;AACT,MAAI,OAAO,KAAK,MAAM,WAAW,EAAE,WAAW,GAAG;AAE/C,WAAO;AAAA,MACL,MAAM,eAAe;AAAA,MACrB,MAAM;AAAA,MACN,MAAM;AAAA,IACR;AAAA,EACF;AACA,QAAM,eAAe,2BAA2B,KAAK;AACrD,SAAO;AAAA,IACL,aAAa;AAAA,IACb,MAAM;AAAA,IACN,MAAM;AAAA,EACR;AACF;",
+  "names": []
+}

package/dist/modules/documents/lib/versionLabels.js

@@ -0,0 +1,12 @@
+import { sanitizeDocumentsDisplayLabel } from "./displayLabels.js";
+const DOCUMENT_VERSION_LABEL_MAX_LENGTH = 256;
+function sanitizeDocumentVersionLabel(value) {
+  const label = sanitizeDocumentsDisplayLabel(value);
+  if (!label || label.length > DOCUMENT_VERSION_LABEL_MAX_LENGTH) return null;
+  return label;
+}
+export {
+  DOCUMENT_VERSION_LABEL_MAX_LENGTH,
+  sanitizeDocumentVersionLabel
+};
+//# sourceMappingURL=versionLabels.js.map

package/dist/modules/documents/lib/versionLabels.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/documents/lib/versionLabels.ts"],
+  "sourcesContent": ["import { sanitizeDocumentsDisplayLabel } from './displayLabels'\n\nexport const DOCUMENT_VERSION_LABEL_MAX_LENGTH = 256\n\nexport function sanitizeDocumentVersionLabel(value: unknown): string | null {\n  const label = sanitizeDocumentsDisplayLabel(value)\n  if (!label || label.length > DOCUMENT_VERSION_LABEL_MAX_LENGTH) return null\n  return label\n}\n"],
+  "mappings": "AAAA,SAAS,qCAAqC;AAEvC,MAAM,oCAAoC;AAE1C,SAAS,6BAA6B,OAA+B;AAC1E,QAAM,QAAQ,8BAA8B,KAAK;AACjD,MAAI,CAAC,SAAS,MAAM,SAAS,kCAAmC,QAAO;AACvE,SAAO;AACT;",
+  "names": []
+}

package/dist/modules/documents/lib/versioning.js

@@ -0,0 +1,14 @@
+function nextDocumentVersion(current, now = /* @__PURE__ */ new Date()) {
+  return new Date(Math.max(now.getTime(), current.getTime() + 1));
+}
+function preserveMonotonicDocumentVersionOnUpdate(entity, em) {
+  const originalValue = em.getUnitOfWork().getOriginalEntityData(entity)?.updatedAt;
+  const original = originalValue instanceof Date ? originalValue : entity.updatedAt;
+  if (entity.updatedAt.getTime() > original.getTime()) return entity.updatedAt;
+  return nextDocumentVersion(original);
+}
+export {
+  nextDocumentVersion,
+  preserveMonotonicDocumentVersionOnUpdate
+};
+//# sourceMappingURL=versioning.js.map

package/dist/modules/documents/lib/versioning.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/documents/lib/versioning.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/core'\n\ntype VersionedDocumentEntity = {\n  updatedAt: Date\n}\n\n/**\n * Allocate a strictly newer optimistic-lock token even when multiple writes\n * happen in one millisecond or the application clock moves backwards.\n */\nexport function nextDocumentVersion(current: Date, now = new Date()): Date {\n  return new Date(Math.max(now.getTime(), current.getTime() + 1))\n}\n\n/**\n * MikroORM invokes `onUpdate` after command handlers have assigned fields. Do\n * not replace a command's already-monotonic token with a wall-clock value that\n * could be equal or older. When a write did not assign a token, allocate one\n * from the Unit of Work's persisted snapshot.\n */\nexport function preserveMonotonicDocumentVersionOnUpdate(\n  entity: VersionedDocumentEntity,\n  em: EntityManager,\n): Date {\n  const originalValue = em.getUnitOfWork().getOriginalEntityData(entity)?.updatedAt\n  const original = originalValue instanceof Date ? originalValue : entity.updatedAt\n  if (entity.updatedAt.getTime() > original.getTime()) return entity.updatedAt\n  return nextDocumentVersion(original)\n}\n"],
+  "mappings": "AAUO,SAAS,oBAAoB,SAAe,MAAM,oBAAI,KAAK,GAAS;AACzE,SAAO,IAAI,KAAK,KAAK,IAAI,IAAI,QAAQ,GAAG,QAAQ,QAAQ,IAAI,CAAC,CAAC;AAChE;AAQO,SAAS,yCACd,QACA,IACM;AACN,QAAM,gBAAgB,GAAG,cAAc,EAAE,sBAAsB,MAAM,GAAG;AACxE,QAAM,WAAW,yBAAyB,OAAO,gBAAgB,OAAO;AACxE,MAAI,OAAO,UAAU,QAAQ,IAAI,SAAS,QAAQ,EAAG,QAAO,OAAO;AACnE,SAAO,oBAAoB,QAAQ;AACrC;",
+  "names": []
+}