@vielzeug/archive 26.10.15 → 26.10.16

package/dist/worker/publications.js.map

@@ -1 +1 @@
-{"version":3,"file":"publications.js","names":[],"sources":["../../src/worker/publications.ts"],"sourcesContent":["import { s } from '@vielzeug/spell';\nimport type { ArchiveCollection } from '../collection';\nimport {\n  ARCHIVE_CONTRACT_VERSION,\n  ARCHIVE_LIMITS,\n  ARCHIVE_SCHEMA_VERSION,\n  type ArchiveModerationAction,\n  archiveAliasSchema,\n  archiveCollectionMetaSchema,\n  archiveHealthSchema,\n  archiveIdentitySchema,\n  archiveLikedIdsSchema,\n  archiveLikeStateSchema,\n  archiveLikesPageSchema,\n  archiveModerationLogSchema,\n  archiveOwnReportsSchema,\n  archiveReportsSchema,\n  archiveSortSchema,\n  isWellFormedText,\n  SESSION_MAX_AGE_SECONDS,\n  uuidSchema,\n} from '../contract';\nimport { forwardPage, forwardPageParams, nextCursor } from './_pagination';\nimport { JWT_CLOCK_TOLERANCE_SECONDS, type Publisher, type Session } from './auth';\nimport type { ApiConfig, ArchiveWorkerEnv } from './env';\nimport {\n  ApiError,\n  badRequest,\n  conflict,\n  forbidden,\n  invalid,\n  json,\n  noStore,\n  notFound,\n  queryParams,\n  readJsonBody,\n} from './http';\nimport {\n  likedPublicationsSql,\n  likesPageSql,\n  listPublicationsSql,\n  moderationLogSql,\n  type PublicationCursor,\n  type PublicationFilter,\n  reportsPageSql,\n  SQL,\n} from './sql';\n\n/**\n * Route handlers for /api/v1, parameterized by the registered collection. All SQL lives\n * in sql.ts and is bound positionally here in the authored order; the DTO boundary\n * re-validates every stored row before it leaves, content validation lives in the\n * collection's derive step, and moderation state (hidden entries) is visible only\n * through the owner and operator surfaces.\n */\n\ninterface PublicationRow {\n  author_name: string;\n  client_key: string;\n  collection: string;\n  content_hash: string;\n  content_version: number;\n  filter_value: string | null;\n  /** Null while visible; set while an operator has removed the entry from public view. */\n  hidden_at: string | null;\n  id: string;\n  like_count: number;\n  owner_id: string;\n  payload_json: string;\n  published_at: string;\n  revision: number;\n  schema_version: number;\n  tags_json: string;\n  title: string;\n  updated_at: string;\n}\n\nasync function databaseCall<T>(operation: () => Promise<T>): Promise<T> {\n  try {\n    return await operation();\n  } catch (cause) {\n    throw new ApiError(500, 'internal', 'The service is not available.', { cause, diagnostic: { kind: 'database' } });\n  }\n}\nconst first = <T>(env: ArchiveWorkerEnv, sql: string, ...params: (string | number | null)[]) =>\n  databaseCall(() =>\n    env.DB.prepare(sql)\n      .bind(...params)\n      .first<T>(),\n  );\nconst all = <T>(env: ArchiveWorkerEnv, sql: string, ...params: (string | number | null)[]) =>\n  databaseCall(async () => {\n    const result = await env.DB.prepare(sql)\n      .bind(...params)\n      .all<T>();\n    if (!Array.isArray(result.results)) throw new Error('Missing database query results');\n    return result.results;\n  });\nconst run = (env: ArchiveWorkerEnv, sql: string, ...params: (string | number | null)[]) =>\n  databaseCall(() =>\n    env.DB.prepare(sql)\n      .bind(...params)\n      .run(),\n  );\n\nconst uuid = (): string => crypto.randomUUID();\nconst now = (): string => new Date().toISOString();\n\n/** A stored row that fails the emitted-DTO contract is unavailable, not malformed data. */\nconst recordUnavailable = (): ApiError =>\n  new ApiError(503, 'record-unavailable', 'The record is not available.', { diagnostic: { kind: 'record' } });\n\nconst UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n\n/**\n * Maps a joined row to the public DTO through the collection's strict entry schema:\n * stored JSON is parsed and re-validated, stored versions are emitted as-is, and any\n * drift — unknown fields, corrupt payload, mismatched versions — surfaces as 503\n * `record-unavailable` rather than leaking or fabricating data.\n */\nconst rowToEntry = (collection: ArchiveCollection, row: PublicationRow) => {\n  let payloadJson: unknown;\n  try {\n    payloadJson = JSON.parse(row.payload_json);\n  } catch {\n    throw recordUnavailable();\n  }\n  const parsed = collection.contract.entry.safeParse({\n    author: { id: row.owner_id, name: row.author_name },\n    contentHash: row.content_hash,\n    contentVersion: row.content_version,\n    id: row.id,\n    likeCount: row.like_count,\n    payload: payloadJson,\n    publishedAt: row.published_at,\n    revision: row.revision,\n    schemaVersion: row.schema_version,\n    updatedAt: row.updated_at,\n  });\n  if (!parsed.success) throw recordUnavailable();\n  return parsed.data;\n};\n\nconst rowToOwnedEntry = (collection: ArchiveCollection, row: PublicationRow) => {\n  const entry = rowToEntry(collection, row);\n  // The private owner DTO adds the create retry key and the moderation state;\n  // public routes never emit either.\n  const key = uuidSchema.safeParse(row.client_key);\n  if (!key.success) throw recordUnavailable();\n  return { ...entry, clientKey: row.client_key, hidden: row.hidden_at !== null };\n};\n\nconst entryById = async (collection: ArchiveCollection, env: ArchiveWorkerEnv, id: string) => {\n  const row = await first<PublicationRow>(env, SQL.publication, id, collection.name);\n  return row === null ? null : rowToEntry(collection, row);\n};\n\n/* ----------------------------------- list --------------------------------- */\n\n/** Normalizes free text into the bounded FTS prefix-match expression the SQL expects. */\nconst searchMatchFor = (search: string | null): string | undefined => {\n  if (search === null) return undefined;\n  if (search.length > ARCHIVE_LIMITS.searchChars) throw badRequest();\n  // Unicode word extraction: punctuation splits terms rather than poisoning them,\n  // so \"Hunter's\" and \"fire-ice\" match the words their indexed titles carry.\n  const terms = (search.match(/[\\p{L}\\p{N}]+/gu) ?? []).slice(0, ARCHIVE_LIMITS.searchTerms);\n  if (terms.length === 0) return undefined;\n  return terms.map((t) => `\"${t}\"*`).join(' ');\n};\n\n/**\n * The entry-list cursor context: every query dimension the page's boundary depends\n * on, so a cursor minted under one filter/sort/search and replayed under another is\n * a 400 — the same forward-cursor guard every other list in the package uses.\n */\nconst entryCursorContext = (query: {\n  author?: string;\n  collection: string;\n  filters: readonly string[];\n  searchMatch?: string;\n  sort: 'liked' | 'recent';\n  tags: readonly string[];\n}): string =>\n  JSON.stringify([\n    query.collection,\n    query.sort,\n    query.author ?? '',\n    query.filters,\n    query.tags,\n    query.searchMatch ?? '',\n  ]);\n\nconst cursorFromRow = (row: PublicationRow): PublicationCursor => ({\n  createdAt: row.published_at,\n  id: row.id,\n  likeCount: row.like_count,\n});\n\n/** Repeated `filter`/`tag` values one entry-list request may carry (OR within each). */\nconst MAX_VOCAB_VALUES = 16;\n\n/** Reads one repeatable vocabulary param: every value must be declared, no repeats\n *  past the bound, and the list is deduplicated and sorted so `?tag=a&tag=a` matches\n *  `?tag=a` and value order never changes the cursor context. */\nconst vocabValues = (params: URLSearchParams, key: string, declared: readonly string[]): string[] => {\n  const raw = params.getAll(key);\n  if (raw.length > MAX_VOCAB_VALUES) throw badRequest();\n  const values = [...new Set(raw)].sort();\n  if (values.some((value) => !declared.includes(value))) throw badRequest();\n  return values;\n};\n\nexport async function listEntries(\n  collection: ArchiveCollection,\n  request: Request,\n  env: ArchiveWorkerEnv,\n): Promise<Response> {\n  const url = new URL(request.url);\n  const params = queryParams(url, ['author', 'cursor', 'filter', 'limit', 'search', 'sort', 'tag'], ['filter', 'tag']);\n\n  const sortRaw = params.get('sort') ?? 'recent';\n  const sortParsed = archiveSortSchema.safeParse(sortRaw);\n  if (!sortParsed.success) throw badRequest();\n\n  const filters = vocabValues(params, 'filter', collection.filters);\n  const tags = vocabValues(params, 'tag', collection.tags);\n  const author = params.get('author');\n  if (author !== null && !UUID_RE.test(author)) throw badRequest();\n\n  const searchMatch = searchMatchFor(params.get('search'));\n  const context = entryCursorContext({\n    author: author ?? undefined,\n    collection: collection.name,\n    filters,\n    searchMatch,\n    sort: sortParsed.data,\n    tags,\n  });\n  const { cursor, limit } = forwardPageParams(params, context);\n\n  const query: PublicationFilter = {\n    author: author ?? undefined,\n    collection: collection.name,\n    cursor:\n      cursor === null ? undefined : { createdAt: cursor.createdAt, id: cursor.id, likeCount: cursor.likeCount ?? 0 },\n    filters,\n    limit: limit + 1,\n    searchMatch,\n    sort: sortParsed.data,\n    tags,\n  };\n\n  // One bounded query — never a count: the over-read row is the next page's proof.\n  const bound = listPublicationsSql(query);\n  const fetched = await all<PublicationRow>(env, bound.sql, ...bound.parameters);\n  const page = fetched.slice(0, limit);\n  const last = page.at(-1);\n\n  // Entries are validated per row through the collection's entry schema; the cursor\n  // is internally generated, so the page composes validated parts directly.\n  const pageDto = {\n    cursor: fetched.length > limit && last !== undefined ? nextCursor(cursorFromRow(last), context) : null,\n    entries: page.map((row) => rowToEntry(collection, row)),\n  };\n  return json(200, pageDto, noStore);\n}\n\n/** The collection's public self-description: name plus the declared query vocabularies. */\nexport function collectionMeta(collection: ArchiveCollection): Response {\n  const parsed = archiveCollectionMetaSchema.safeParse({\n    filters: [...collection.filters].sort(),\n    name: collection.name,\n    tags: [...collection.tags].sort(),\n  });\n  if (!parsed.success) throw recordUnavailable();\n  return json(200, parsed.data, noStore);\n}\n\nexport async function getEntry(collection: ArchiveCollection, env: ArchiveWorkerEnv, id: string): Promise<Response> {\n  const entry = await entryById(collection, env, id);\n  if (entry === null) throw notFound();\n  return json(200, entry, noStore);\n}\n\n/* ---------------------------------- health --------------------------------- */\n\n/**\n * Service health: the feature flags, the wire limits, and the storage schema stamp\n * actually present in the database. A database whose migrations lag the package\n * answers `degraded` instead of pretending to be fine — the most likely deployment\n * fault becomes a one-glance diagnosis.\n */\nexport async function healthJson(config: ApiConfig, env: ArchiveWorkerEnv): Promise<Response> {\n  let dbSchemaVersion: number | null = null;\n  let reason: 'database-unavailable' | 'schema-mismatch' | null = null;\n  try {\n    const row = await first<{ applied: number }>(env, SQL.schemaVersion);\n    dbSchemaVersion = row?.applied ?? 0;\n  } catch {\n    reason = 'database-unavailable';\n  }\n  if (reason === null && dbSchemaVersion !== ARCHIVE_SCHEMA_VERSION) reason = 'schema-mismatch';\n  const parsed = archiveHealthSchema.safeParse({\n    dbSchemaVersion,\n    features: { likes: config.likesEnabled, publishing: config.publishingEnabled },\n    limits: ARCHIVE_LIMITS,\n    reason,\n    schemaVersion: ARCHIVE_CONTRACT_VERSION,\n    status: reason === null ? 'ok' : 'degraded',\n  });\n  if (!parsed.success) throw recordUnavailable();\n  return json(reason === null ? 200 : 503, parsed.data, noStore);\n}\n\n/* --------------------------------- identity -------------------------------- */\n\n/** Emits the private identity DTO through the strict shared schema. */\nconst identityJson = (status: number, identity: unknown): Response => {\n  const parsed = archiveIdentitySchema.safeParse(identity);\n  if (!parsed.success) throw recordUnavailable();\n  return json(status, parsed.data, noStore);\n};\n\nexport function getMe(session: Session | null): Response {\n  return identityJson(\n    200,\n    session?.publisher\n      ? { id: session.publisher.id, name: session.publisher.displayName, operator: session.operator }\n      : null,\n  );\n}\n\nexport async function registerMe(request: Request, env: ArchiveWorkerEnv, session: Session): Promise<Response> {\n  const body = await readJsonBody(request);\n  const parsed = registerBodySchema.safeParse(body);\n  if (!parsed.success) throw invalid();\n  const name = parsed.data.name ?? '';\n\n  const existing = await first<{ display_name: string; id: string }>(\n    env,\n    SQL.publisher,\n    session.subject.issuer,\n    session.subject.subject,\n  );\n  if (existing !== null) {\n    return identityJson(200, { id: existing.id, name: existing.display_name, operator: session.operator });\n  }\n  const id = uuid();\n  await run(\n    env,\n    SQL.insertPublisher,\n    id,\n    session.subject.issuer,\n    session.subject.subject,\n    name,\n    now(),\n    session.subject.issuer,\n    session.subject.subject,\n    Date.now(),\n  );\n  const row = await first<{ display_name: string; id: string }>(\n    env,\n    SQL.publisher,\n    session.subject.issuer,\n    session.subject.subject,\n  );\n  if (row === null) {\n    if ((await first(env, SQL.revokedSubject, session.subject.issuer, session.subject.subject, Date.now())) !== null) {\n      throw new ApiError(401, 'unauthenticated', 'Sign-in is required.');\n    }\n    throw conflict();\n  }\n  return identityJson(201, { id: row.id, name: row.display_name, operator: session.operator });\n}\n\nexport async function renameMe(request: Request, env: ArchiveWorkerEnv, session: Session): Promise<Response> {\n  const publisher = requirePublisherRow(session);\n  const body = await readJsonBody(request);\n  const parsed = renameBodySchema.safeParse(body);\n  if (!parsed.success) throw invalid();\n  if (parsed.data.name !== publisher.displayName) {\n    await run(env, SQL.renamePublisher, parsed.data.name, publisher.id, parsed.data.name);\n  }\n  return identityJson(200, { id: publisher.id, name: parsed.data.name, operator: session.operator });\n}\n\n/**\n * Archive-profile erasure, independent of the identity provider's account.\n * The credential survives so an issuer can retry coordinated account erasure.\n */\nexport async function deleteProfile(env: ArchiveWorkerEnv, session: Session): Promise<Response> {\n  if (session.publisher !== null) await run(env, SQL.deletePublisher, session.publisher.id);\n  return new Response(null, {\n    headers: {\n      'cache-control': 'no-store',\n    },\n    status: 204,\n  });\n}\n\n/** Revocation and erasure share a transaction, preventing a stale session from recreating the profile. */\nexport async function deleteAccountProfile(env: ArchiveWorkerEnv, session: Session): Promise<Response> {\n  const { issuer, subject } = session.subject;\n  // Issuance may be one tolerance ahead; expiry verification permits another.\n  await databaseCall(() =>\n    env.DB.batch([\n      env.DB.prepare(SQL.revokeSubject).bind(\n        issuer,\n        subject,\n        Date.now() + (SESSION_MAX_AGE_SECONDS + 2 * JWT_CLOCK_TOLERANCE_SECONDS) * 1000,\n      ),\n      env.DB.prepare(SQL.deleteSubjectPublisher).bind(issuer, subject),\n    ]),\n  );\n  return new Response(null, { headers: noStore, status: 204 });\n}\n\n/**\n * Operator-side GDPR erasure: removes any publisher's row; FK cascades take its\n * publications, likes and retry keys. Idempotent for the same reason the self-erase\n * is: an already-erased publisher is a 204 with nothing left to remove.\n */\nexport async function erasePublisher(env: ArchiveWorkerEnv, session: Session, publisherId: string): Promise<Response> {\n  const operator = requireOperatorRow(session);\n  // The terminal moderation action: erasing a publisher removes their row, and FK\n  // cascades take the publications, likes and retry keys with it — the same cascade a\n  // self-erase walks, applied to any publisher the operator names. The guarded audit\n  // and deletion share a transaction, so retries never record fictitious actions.\n  await databaseCall(() =>\n    env.DB.batch([\n      env.DB.prepare(SQL.auditErasure).bind(uuid(), operator.id, now(), publisherId),\n      env.DB.prepare(SQL.deletePublisher).bind(publisherId),\n    ]),\n  );\n  return new Response(null, { headers: noStore, status: 204 });\n}\n\n/** The operator's accountability log: newest actions first, bounded, ids only. */\nexport async function listModerationLog(request: Request, env: ArchiveWorkerEnv, session: Session): Promise<Response> {\n  requireOperatorRow(session);\n  const context = 'moderation-log';\n  const { cursor, limit } = forwardPage(request, context);\n  const bound = moderationLogSql({ cursor, limit: limit + 1 });\n  const rows = await all<{\n    id: string;\n    action: ArchiveModerationAction;\n    collection: string | null;\n    created_at: string;\n    operator_id: string;\n    target_id: string;\n  }>(env, bound.sql, ...bound.parameters);\n  const page = rows.slice(0, limit);\n  const last = page.at(-1);\n  const parsed = archiveModerationLogSchema.safeParse({\n    actions: page.map((row) => ({\n      action: row.action,\n      collection: row.collection,\n      createdAt: row.created_at,\n      id: row.id,\n      operatorId: row.operator_id,\n      targetId: row.target_id,\n    })),\n    cursor:\n      rows.length > limit && last !== undefined\n        ? nextCursor({ createdAt: last.created_at, id: last.id }, context)\n        : null,\n  });\n  if (!parsed.success) throw recordUnavailable();\n  return json(200, parsed.data, noStore);\n}\n\nexport const requirePublisherRow = (session: Session): Publisher => {\n  if (session.publisher === null) throw forbidden('Register before publishing.');\n  return session.publisher;\n};\n\n/** Operator authority plus a registered publisher row: moderation routes need both,\n * the role claim for authority and the row for attribution. */\nexport const requireOperatorRow = (session: Session): Publisher => {\n  if (!session.operator) throw forbidden('Operator access is required.');\n  if (session.publisher === null) throw forbidden('Register before moderating.');\n  return session.publisher;\n};\n\n// Private identity payloads share the one alias rule with the emitted DTOs.\nconst registerBodySchema = s.object({ name: archiveAliasSchema.optional() });\nconst renameBodySchema = s.object({ name: archiveAliasSchema });\n\nexport async function myPublications(\n  collection: ArchiveCollection,\n  env: ArchiveWorkerEnv,\n  session: Session,\n): Promise<Response> {\n  if (session.publisher === null) return json(200, { entries: [] }, noStore);\n  const rows = await all<PublicationRow>(\n    env,\n    SQL.ownPublications,\n    session.publisher.id,\n    collection.name,\n    ARCHIVE_LIMITS.maxPublications,\n  );\n  // The private owner DTO adds the create retry key; public routes never emit it.\n  return json(200, { entries: rows.map((row) => rowToOwnedEntry(collection, row)) }, noStore);\n}\n\nexport async function myLikes(request: Request, env: ArchiveWorkerEnv, session: Session): Promise<Response> {\n  const params = new URL(request.url).searchParams;\n  const raw = params.get('ids');\n  if (raw === null) {\n    const context = `likes:${session.publisher?.id ?? 'unregistered'}`;\n    const { cursor, limit } = forwardPage(request, context);\n    if (session.publisher === null) return json(200, { cursor: null, ids: [] }, noStore);\n    const bound = likesPageSql(session.publisher.id, { cursor, limit: limit + 1 });\n    const rows = await all<{ created_at: string; publication_id: string }>(env, bound.sql, ...bound.parameters);\n    const page = rows.slice(0, limit);\n    const last = page.at(-1);\n    const parsed = archiveLikesPageSchema.safeParse({\n      cursor:\n        rows.length > limit && last !== undefined\n          ? nextCursor({ createdAt: last.created_at, id: last.publication_id }, context)\n          : null,\n      ids: page.map((row) => row.publication_id),\n    });\n    if (!parsed.success) throw recordUnavailable();\n    return json(200, parsed.data, noStore);\n  }\n  queryParams(new URL(request.url), ['ids']);\n  const ids = [...new Set(raw.split(','))];\n  if (ids.length > ARCHIVE_LIMITS.likeStateIds || ids.some((id) => !UUID_RE.test(id))) throw badRequest();\n  if (session.publisher === null) return json(200, { ids: [] }, noStore);\n  const bound = likedPublicationsSql(session.publisher.id, ids);\n  const rows = await all<{ publication_id: string }>(env, bound.sql, ...bound.parameters);\n  const liked = new Set(rows.map((r) => r.publication_id));\n  const dto = { ids: ids.filter((id) => liked.has(id)) };\n  const validated = archiveLikedIdsSchema.safeParse(dto);\n  if (!validated.success) throw recordUnavailable();\n  return json(200, validated.data, noStore);\n}\n\n/* --------------------------------- mutations ------------------------------- */\n\n// The core validates the request envelope; the collection's derive step validates the payload.\nconst publishBodySchema = s.object({ clientKey: uuidSchema, payload: s.unknown() });\nconst updateBodySchema = s.object({\n  expectedRevision: s.number().int().min(1).max(Number.MAX_SAFE_INTEGER),\n  payload: s.unknown(),\n});\n\ninterface RetryRecord {\n  expires_at: number;\n  payload_hash: string;\n  publication_id: string | null;\n}\n\n/**\n * The one replay/conflict/gone decision for a create retry key, shared by the\n * pre-read and the post-insert race re-read: a live record for a different payload\n * is a 409, a tombstone (null publication id) is a 410, and a live record for the\n * same payload replays the entry. `'vanished'` means the recorded publication is\n * no longer readable — hidden or raced-deleted — and only the caller knows which:\n * the pre-read falls through to the publication-by-key lookup (a hidden entry is\n * 403 there), the post-insert re-read answers 410.\n */\nasync function resolveRetryRecord(\n  collection: ArchiveCollection,\n  env: ArchiveWorkerEnv,\n  record: RetryRecord | null,\n  hash: string,\n): Promise<Response | 'vanished' | null> {\n  if (record === null || record.expires_at <= Date.now()) return null;\n  if (record.payload_hash !== hash) throw conflict('That key was used for a different payload.');\n  if (record.publication_id === null) throw new ApiError(410, 'gone', 'That publication was removed.');\n  const entry = await entryById(collection, env, record.publication_id);\n  if (entry === null) return 'vanished';\n  return json(200, entry, noStore);\n}\n\nexport async function publishEntry(\n  collection: ArchiveCollection,\n  request: Request,\n  env: ArchiveWorkerEnv,\n  config: ApiConfig,\n  session: Session,\n): Promise<Response> {\n  if (!config.publishingEnabled) throw new ApiError(503, 'publishing-disabled', 'Publishing is currently disabled.');\n  const publisher = requirePublisherRow(session);\n  const body = await readJsonBody(request);\n  const parsed = publishBodySchema.safeParse(body);\n  if (!parsed.success) throw invalid();\n  const { clientKey } = parsed.data;\n  // The derive step owns every content rejection: schema, vocabulary, title, byte bound.\n  const derivation = await collection.derive(parsed.data.payload);\n  if (derivation === null) throw invalid();\n\n  const payloadJson = derivation.canonicalJson;\n  const hash = derivation.contentHash;\n  const owner = publisher.id;\n  const name = collection.name;\n\n  // Retry-key inspection first: the request record decides replay vs conflict vs gone.\n  // A logically expired record is ignored entirely — retention is enforced by time,\n  // not just by the periodic sweep.\n  const retry = await first<RetryRecord>(env, SQL.request, owner, name, clientKey);\n  const replay = await resolveRetryRecord(collection, env, retry, hash);\n  if (replay !== null && replay !== 'vanished') return replay;\n\n  const existing = await first<PublicationRow>(env, SQL.publicationByKey, owner, name, clientKey);\n  if (existing !== null) {\n    // A hidden entry is frozen for its owner too: replaying the create key must not\n    // read as a live publication.\n    if (existing.hidden_at !== null) throw forbidden('This entry is under moderation review.');\n    if (existing.content_hash !== hash) throw conflict('That key was used for a different payload.');\n    return json(200, rowToEntry(collection, existing), noStore);\n  }\n\n  const timestamp = now();\n  const expiresAt = Date.now() + ARCHIVE_LIMITS.idempotencyRetentionMs;\n  const tagsJson = JSON.stringify(derivation.tags);\n  const results = await databaseCall(() =>\n    env.DB.batch([\n      env.DB.prepare(SQL.expireRequests).bind(Date.now()),\n      env.DB.prepare(SQL.insertPublication).bind(\n        uuid(),\n        owner,\n        name,\n        clientKey,\n        ARCHIVE_CONTRACT_VERSION,\n        derivation.contentVersion,\n        payloadJson,\n        hash,\n        derivation.filter,\n        derivation.title,\n        tagsJson,\n        timestamp,\n        timestamp,\n        owner,\n        name,\n        ARCHIVE_LIMITS.maxPublications,\n        owner,\n        name,\n        clientKey,\n        Date.now(),\n      ),\n      env.DB.prepare(SQL.insertRequest).bind(\n        owner,\n        name,\n        clientKey,\n        hash,\n        timestamp,\n        expiresAt,\n        owner,\n        name,\n        clientKey,\n        hash,\n      ),\n    ]),\n  );\n  if ((results[1]?.meta?.changes ?? 0) === 0) {\n    // The guarded insert was skipped: a race already wrote the key, the key's\n    // publication was removed, or the owner's live-publication quota is full.\n    // Re-reading the request record first distinguishes a tombstone from a race.\n    const racedRecord = await first<RetryRecord>(env, SQL.request, owner, name, clientKey);\n    const racedReplay = await resolveRetryRecord(collection, env, racedRecord, hash);\n    if (racedReplay === 'vanished') throw new ApiError(410, 'gone', 'That publication was removed.');\n    if (racedReplay !== null) return racedReplay;\n    const raced = await first<PublicationRow>(env, SQL.publicationByKey, owner, name, clientKey);\n    if (raced !== null && raced.hidden_at !== null) throw forbidden('This entry is under moderation review.');\n    if (raced !== null && raced.content_hash === hash) return json(200, rowToEntry(collection, raced), noStore);\n    if (raced !== null) throw conflict('That key was used for a different payload.');\n    throw new ApiError(429, 'quota', 'Publication quota reached.');\n  }\n\n  const created = await first<PublicationRow>(env, SQL.publicationByKey, owner, name, clientKey);\n  if (created === null) throw conflict();\n  return json(201, rowToEntry(collection, created), noStore);\n}\n\nexport async function updateEntry(\n  collection: ArchiveCollection,\n  request: Request,\n  env: ArchiveWorkerEnv,\n  config: ApiConfig,\n  session: Session,\n  id: string,\n): Promise<Response> {\n  if (!config.publishingEnabled) throw new ApiError(503, 'publishing-disabled', 'Publishing is currently disabled.');\n  const publisher = requirePublisherRow(session);\n  // The owner's row regardless of moderation state: the author must be told their\n  // entry is frozen, not that it vanished.\n  const row = await first<PublicationRow>(env, SQL.publicationAny, id, collection.name);\n  // Replacing an entry is the author's alone; anyone else sees the entry as absent.\n  if (row === null || row.owner_id !== publisher.id) throw notFound();\n  // Hidden entries are frozen: an edit must not bypass the operator's decision.\n  if (row.hidden_at !== null) throw forbidden('This entry is under moderation review.');\n\n  const body = await readJsonBody(request);\n  const parsed = updateBodySchema.safeParse(body);\n  if (!parsed.success) throw invalid();\n  const { expectedRevision } = parsed.data;\n\n  if (expectedRevision !== row.revision) throw conflict();\n\n  const derivation = await collection.derive(parsed.data.payload);\n  if (derivation === null) throw invalid();\n  const payloadJson = derivation.canonicalJson;\n  const hash = derivation.contentHash;\n  if (hash === row.content_hash) {\n    const current = await first<PublicationRow>(env, SQL.publicationAny, id, collection.name);\n    if (current === null || current.owner_id !== publisher.id) throw notFound();\n    if (current.hidden_at !== null) throw forbidden('This entry is under moderation review.');\n    if (current.revision !== expectedRevision) throw conflict();\n    return json(200, rowToEntry(collection, current), noStore);\n  }\n\n  const tagsJson = JSON.stringify(derivation.tags);\n  const result = await run(\n    env,\n    SQL.updatePublication,\n    ARCHIVE_CONTRACT_VERSION,\n    derivation.contentVersion,\n    payloadJson,\n    hash,\n    derivation.filter,\n    derivation.title,\n    tagsJson,\n    now(),\n    id,\n    publisher.id,\n    expectedRevision,\n    hash,\n  );\n  if ((result.meta?.changes ?? 0) === 0) {\n    const current = await first<PublicationRow>(env, SQL.publicationAny, id, collection.name);\n    if (current === null) throw notFound();\n    if (current.hidden_at !== null) throw forbidden('This entry is under moderation review.');\n    throw conflict();\n  }\n  const updated = await entryById(collection, env, id);\n  if (updated === null) throw notFound();\n  return json(200, updated, noStore);\n}\n\nexport async function deleteEntry(\n  collection: ArchiveCollection,\n  env: ArchiveWorkerEnv,\n  session: Session,\n  id: string,\n): Promise<Response> {\n  // The owner's row regardless of moderation state: the author may still remove a\n  // hidden entry (their content, their call) — hiding freezes edits, not removal.\n  // Removing an entry is the author's alone; an operator may remove ANY entry — the\n  // terminal moderation action for abusive content. The operator path carries the\n  // same registered-publisher-row requirement every moderation route shares: one\n  // accountable identity per action. Everyone else sees the entry as absent.\n  if (session.operator) {\n    const operator = requireOperatorRow(session);\n    await databaseCall(() =>\n      env.DB.batch([\n        env.DB.prepare(SQL.auditRemoval).bind(uuid(), operator.id, now(), id, collection.name),\n        env.DB.prepare(SQL.removePublicationAny).bind(id, collection.name),\n      ]),\n    );\n  } else {\n    const publisher = requirePublisherRow(session);\n    const row = await first<PublicationRow>(env, SQL.publicationAny, id, collection.name);\n    if (row === null) return new Response(null, { headers: noStore, status: 204 });\n    if (row.owner_id !== publisher.id) throw notFound();\n    await run(env, SQL.removePublication, id, publisher.id);\n  }\n  return new Response(null, { headers: noStore, status: 204 });\n}\n\nexport async function setLike(\n  collection: ArchiveCollection,\n  env: ArchiveWorkerEnv,\n  config: ApiConfig,\n  session: Session,\n  id: string,\n  liked: boolean,\n): Promise<Response> {\n  const publisher = requirePublisherRow(session);\n  if (liked && !config.likesEnabled) throw new ApiError(503, 'likes-disabled', 'Likes are currently disabled.');\n  const row = await first<PublicationRow>(env, SQL.publication, id, collection.name);\n  if (row === null) throw notFound();\n  if (liked) {\n    await run(env, SQL.insertLike, publisher.id, now(), id);\n  } else {\n    await run(env, SQL.removeLike, id, publisher.id);\n  }\n  // One consistent snapshot: the count and the viewer's flag read together.\n  const state = await first<{ id: string; like_count: number; liked: number }>(env, SQL.likeState, publisher.id, id);\n  if (state === null) throw notFound();\n  const dto = { id: state.id, likeCount: state.like_count, liked: state.liked === 1 };\n  const validated = archiveLikeStateSchema.safeParse(dto);\n  if (!validated.success) throw recordUnavailable();\n  return json(200, validated.data, noStore);\n}\n\n/* -------------------------------- moderation ------------------------------- */\n\n// One free-text report reason: trimmed, non-empty, well-formed, bounded.\nconst reportBodySchema = s.object({\n  reason: s.string().check(isWellFormedText).trim().min(1).max(ARCHIVE_LIMITS.reportReasonChars),\n});\n\n/**\n * A reader's abuse report against one visible entry. Idempotent per (entry, reporter):\n * reporting again is the same 204, never a duplicate row. Hidden or missing entries\n * are 404 — they cannot be reported, they are already actioned or gone.\n */\nexport async function reportEntry(\n  collection: ArchiveCollection,\n  request: Request,\n  env: ArchiveWorkerEnv,\n  session: Session,\n  id: string,\n): Promise<Response> {\n  const reporter = requirePublisherRow(session);\n  const body = await readJsonBody(request);\n  const parsed = reportBodySchema.safeParse(body);\n  if (!parsed.success) throw invalid();\n  const row = await first<PublicationRow>(env, SQL.publication, id, collection.name);\n  if (row === null) throw notFound();\n  // Bound in the SQL's authored placeholder order: reporter, reason, created_at,\n  // then the WHERE's entry id and collection.\n  await run(env, SQL.insertReport, uuid(), reporter.id, parsed.data.reason, now(), id, collection.name);\n  return new Response(null, { headers: noStore, status: 204 });\n}\n\n/**\n * The operator soft-hide: removes an entry from every public surface while keeping\n * the row, its likes and its retry key intact. Idempotent — already in the requested\n * state answers the same 204. Operator authority is the session's verified role\n * claim; a registered publisher row is still required (one accountable identity).\n */\nexport async function setHidden(\n  collection: ArchiveCollection,\n  env: ArchiveWorkerEnv,\n  session: Session,\n  id: string,\n  hidden: boolean,\n): Promise<Response> {\n  const operator = requireOperatorRow(session);\n  // Any collection row, visible or hidden: the operator acts on the storage row. The\n  // pre-read establishes existence only. The transactional audit guard decides\n  // whether the requested transition is an effective action.\n  const row = await first<PublicationRow>(env, SQL.publicationAny, id, collection.name);\n  if (row === null) throw notFound();\n  const statement = hidden\n    ? env.DB.prepare(SQL.hidePublication).bind(now(), id, collection.name)\n    : env.DB.prepare(SQL.unhidePublication).bind(id, collection.name);\n  await databaseCall(() =>\n    env.DB.batch([\n      env.DB.prepare(SQL.auditHide).bind(\n        uuid(),\n        operator.id,\n        hidden ? 'hide' : 'unhide',\n        now(),\n        id,\n        collection.name,\n        Number(hidden),\n      ),\n      statement,\n    ]),\n  );\n  return new Response(null, { headers: noStore, status: 204 });\n}\n\n/** The operator's report queue for one collection: newest first, bounded. */\nexport async function listReports(\n  collection: ArchiveCollection,\n  request: Request,\n  env: ArchiveWorkerEnv,\n  session: Session,\n): Promise<Response> {\n  requireOperatorRow(session);\n  const status = new URL(request.url).searchParams.get('status') ?? 'unresolved';\n  if (status !== 'unresolved' && status !== 'resolved') throw badRequest();\n  const context = `reports:${collection.name}:${status}`;\n  const { cursor, limit } = forwardPage(request, context, ['status']);\n  const bound = reportsPageSql(\n    { collection: collection.name, resolved: status === 'resolved' },\n    { cursor, limit: limit + 1 },\n  );\n  const rows = await all<ReportRow>(env, bound.sql, ...bound.parameters);\n  const page = rows.slice(0, limit);\n  const last = page.at(-1);\n  const parsed = archiveReportsSchema.safeParse({\n    cursor:\n      rows.length > limit && last !== undefined\n        ? nextCursor({ createdAt: last.created_at, id: last.id }, context)\n        : null,\n    reports: page.map((row) => ({\n      createdAt: row.created_at,\n      entryId: row.publication_id,\n      entryTitle: row.entry_title,\n      id: row.id,\n      reason: row.reason,\n      reporter: { id: row.reporter_id, name: row.reporter_name },\n      resolvedAt: row.resolved_at,\n    })),\n  });\n  if (!parsed.success) throw recordUnavailable();\n  return json(200, parsed.data, noStore);\n}\n\ninterface ReportRow {\n  collection: string;\n  created_at: string;\n  entry_title: string;\n  id: string;\n  publication_id: string;\n  reason: string;\n  reporter_id: string;\n  reporter_name: string;\n  resolved_at: string | null;\n}\n\nexport async function resolveReport(\n  collection: ArchiveCollection,\n  env: ArchiveWorkerEnv,\n  session: Session,\n  id: string,\n): Promise<Response> {\n  requireOperatorRow(session);\n  const row = await first<{ id: string }>(env, SQL.reportById, id, collection.name);\n  if (row === null) throw notFound();\n  await run(env, SQL.resolveReport, now(), id, collection.name);\n  return new Response(null, { headers: noStore, status: 204 });\n}\n\nexport async function myReports(request: Request, env: ArchiveWorkerEnv, session: Session): Promise<Response> {\n  const context = `own-reports:${session.publisher?.id ?? 'unregistered'}`;\n  const { cursor, limit } = forwardPage(request, context);\n  if (session.publisher === null) return json(200, { cursor: null, reports: [] }, noStore);\n  const bound = reportsPageSql({ publisherId: session.publisher.id }, { cursor, limit: limit + 1 });\n  const rows = await all<ReportRow>(env, bound.sql, ...bound.parameters);\n  const page = rows.slice(0, limit);\n  const last = page.at(-1);\n  const parsed = archiveOwnReportsSchema.safeParse({\n    cursor:\n      rows.length > limit && last !== undefined\n        ? nextCursor({ createdAt: last.created_at, id: last.id }, context)\n        : null,\n    reports: page.map((row) => ({\n      collection: row.collection,\n      createdAt: row.created_at,\n      entryId: row.publication_id,\n      id: row.id,\n      reason: row.reason,\n      resolvedAt: row.resolved_at,\n    })),\n  });\n  if (!parsed.success) throw recordUnavailable();\n  return json(200, parsed.data, noStore);\n}\n"],"mappings":"g1BA6EA,eAAe,aAAgB,EAAyC,CACtE,GAAI,CACF,OAAO,MAAM,EAAU,CACzB,OAAS,EAAO,CACd,MAAM,IAAI,EAAS,IAAK,WAAY,gCAAiC,CAAE,QAAO,WAAY,CAAE,KAAM,UAAW,CAAE,CAAC,CAClH,CACF,CACA,IAAM,OAAY,EAAuB,EAAa,GAAG,IACvD,iBACE,EAAI,GAAG,QAAQ,CAAG,CAAC,CAChB,KAAK,GAAG,CAAM,CAAC,CACf,MAAS,CACd,EACI,KAAU,EAAuB,EAAa,GAAG,IACrD,aAAa,SAAY,CACvB,IAAM,EAAS,MAAM,EAAI,GAAG,QAAQ,CAAG,CAAC,CACrC,KAAK,GAAG,CAAM,CAAC,CACf,IAAO,EACV,GAAI,CAAC,MAAM,QAAQ,EAAO,OAAO,EAAG,MAAU,MAAM,gCAAgC,EACpF,OAAO,EAAO,OAChB,CAAC,EACG,KAAO,EAAuB,EAAa,GAAG,IAClD,iBACE,EAAI,GAAG,QAAQ,CAAG,CAAC,CAChB,KAAK,GAAG,CAAM,CAAC,CACf,IAAI,CACT,EAEI,SAAqB,OAAO,WAAW,EACvC,QAAoB,IAAI,KAAK,CAAA,CAAE,YAAY,EAG3C,sBACJ,IAAI,EAAS,IAAK,qBAAsB,+BAAgC,CAAE,WAAY,CAAE,KAAM,QAAS,CAAE,CAAC,EAEtG,EAAU,kEAQV,YAAc,EAA+B,IAAwB,CACzE,IAAI,EACJ,GAAI,CACF,EAAc,KAAK,MAAM,EAAI,YAAY,CAC3C,MAAQ,CACN,MAAM,kBAAkB,CAC1B,CACA,IAAM,EAAS,EAAW,SAAS,MAAM,UAAU,CACjD,OAAQ,CAAE,GAAI,EAAI,SAAU,KAAM,EAAI,WAAY,EAClD,YAAa,EAAI,aACjB,eAAgB,EAAI,gBACpB,GAAI,EAAI,GACR,UAAW,EAAI,WACf,QAAS,EACT,YAAa,EAAI,aACjB,SAAU,EAAI,SACd,cAAe,EAAI,eACnB,UAAW,EAAI,UACjB,CAAC,EACD,GAAI,CAAC,EAAO,QAAS,MAAM,kBAAkB,EAC7C,OAAO,EAAO,IAChB,EAEM,iBAAmB,EAA+B,IAAwB,CAC9E,IAAM,EAAQ,WAAW,EAAY,CAAG,EAIxC,GAAI,CADQ,EAAW,UAAU,EAAI,UAChC,CAAA,CAAI,QAAS,MAAM,kBAAkB,EAC1C,MAAO,CAAE,GAAG,EAAO,UAAW,EAAI,WAAY,OAAQ,EAAI,YAAc,IAAK,CAC/E,EAEM,UAAY,MAAO,EAA+B,EAAuB,IAAe,CAC5F,IAAM,EAAM,MAAM,MAAsB,EAAK,EAAI,YAAa,EAAI,EAAW,IAAI,EACjF,OAAO,IAAQ,KAAO,KAAO,WAAW,EAAY,CAAG,CACzD,EAKM,eAAkB,GAA8C,CACpE,GAAI,IAAW,KAAM,OACrB,GAAI,EAAO,OAAS,EAAe,YAAa,MAAM,EAAW,EAGjE,IAAM,GAAS,EAAO,MAAM,iBAAiB,GAAK,CAAC,EAAA,CAAG,MAAM,EAAG,EAAe,WAAW,EACrF,KAAM,SAAW,EACrB,OAAO,EAAM,IAAK,GAAM,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,GAAG,CAC7C,EAOM,mBAAsB,GAQ1B,KAAK,UAAU,CACb,EAAM,WACN,EAAM,KACN,EAAM,QAAU,GAChB,EAAM,QACN,EAAM,KACN,EAAM,aAAe,EACvB,CAAC,EAEG,cAAiB,IAA4C,CACjE,UAAW,EAAI,aACf,GAAI,EAAI,GACR,UAAW,EAAI,UACjB,GAGM,EAAmB,GAKnB,aAAe,EAAyB,EAAa,IAA0C,CACnG,IAAM,EAAM,EAAO,OAAO,CAAG,EAC7B,GAAI,EAAI,OAAS,EAAkB,MAAM,EAAW,EACpD,IAAM,EAAS,CAAC,GAAG,IAAI,IAAI,CAAG,CAAC,CAAC,CAAC,KAAK,EACtC,GAAI,EAAO,KAAM,GAAU,CAAC,EAAS,SAAS,CAAK,CAAC,EAAG,MAAM,EAAW,EACxE,OAAO,CACT,EAEA,eAAsB,YACpB,EACA,EACA,EACmB,CACnB,IAAM,EAAM,IAAI,IAAI,EAAQ,GAAG,EACzB,EAAS,EAAY,EAAK,CAAC,SAAU,SAAU,SAAU,QAAS,SAAU,OAAQ,KAAK,EAAG,CAAC,SAAU,KAAK,CAAC,EAE7G,EAAU,EAAO,IAAI,MAAM,GAAK,SAChC,EAAa,EAAkB,UAAU,CAAO,EACtD,GAAI,CAAC,EAAW,QAAS,MAAM,EAAW,EAE1C,IAAM,EAAU,YAAY,EAAQ,SAAU,EAAW,OAAO,EAC1D,EAAO,YAAY,EAAQ,MAAO,EAAW,IAAI,EACjD,EAAS,EAAO,IAAI,QAAQ,EAClC,GAAI,IAAW,MAAQ,CAAC,EAAQ,KAAK,CAAM,EAAG,MAAM,EAAW,EAE/D,IAAM,EAAc,eAAe,EAAO,IAAI,QAAQ,CAAC,EACjD,EAAU,mBAAmB,CACjC,OAAQ,GAAU,IAAA,GAClB,WAAY,EAAW,KACvB,UACA,cACA,KAAM,EAAW,KACjB,MACF,CAAC,EACK,CAAE,SAAQ,SAAU,EAAkB,EAAQ,CAAO,EAErD,EAA2B,CAC/B,OAAQ,GAAU,IAAA,GAClB,WAAY,EAAW,KACvB,OACE,IAAW,KAAO,IAAA,GAAY,CAAE,UAAW,EAAO,UAAW,GAAI,EAAO,GAAI,UAAW,EAAO,WAAa,CAAE,EAC/G,UACA,MAAO,EAAQ,EACf,cACA,KAAM,EAAW,KACjB,MACF,EAGM,EAAQ,EAAoB,CAAK,EACjC,EAAU,MAAM,IAAoB,EAAK,EAAM,IAAK,GAAG,EAAM,UAAU,EACvE,EAAO,EAAQ,MAAM,EAAG,CAAK,EAC7B,EAAO,EAAK,GAAG,EAAE,EAIjB,EAAU,CACd,OAAQ,EAAQ,OAAS,GAAS,IAAS,IAAA,GAAY,EAAW,cAAc,CAAI,EAAG,CAAO,EAAI,KAClG,QAAS,EAAK,IAAK,GAAQ,WAAW,EAAY,CAAG,CAAC,CACxD,EACA,OAAO,EAAK,IAAK,EAAS,CAAO,CACnC,CAGA,SAAgB,eAAe,EAAyC,CACtE,IAAM,EAAS,EAA4B,UAAU,CACnD,QAAS,CAAC,GAAG,EAAW,OAAO,CAAC,CAAC,KAAK,EACtC,KAAM,EAAW,KACjB,KAAM,CAAC,GAAG,EAAW,IAAI,CAAC,CAAC,KAAK,CAClC,CAAC,EACD,GAAI,CAAC,EAAO,QAAS,MAAM,kBAAkB,EAC7C,OAAO,EAAK,IAAK,EAAO,KAAM,CAAO,CACvC,CAEA,eAAsB,SAAS,EAA+B,EAAuB,EAA+B,CAClH,IAAM,EAAQ,MAAM,UAAU,EAAY,EAAK,CAAE,EACjD,GAAI,IAAU,KAAM,MAAM,EAAS,EACnC,OAAO,EAAK,IAAK,EAAO,CAAO,CACjC,CAUA,eAAsB,WAAW,EAAmB,EAA0C,CAC5F,IAAI,EAAiC,KACjC,EAA4D,KAChE,GAAI,CAEF,GAAkB,MADA,MAA2B,EAAK,EAAI,aAAa,EAAA,EAC5C,SAAW,CACpC,MAAQ,CACN,EAAS,sBACX,CACI,IAAW,MAAQ,IAAA,IAA4C,EAAS,mBAC5E,IAAM,EAAS,EAAoB,UAAU,CAC3C,kBACA,SAAU,CAAE,MAAO,EAAO,aAAc,WAAY,EAAO,iBAAkB,EAC7E,OAAQ,EACR,SACA,cAAA,EACA,OAAQ,IAAW,KAAO,KAAO,UACnC,CAAC,EACD,GAAI,CAAC,EAAO,QAAS,MAAM,kBAAkB,EAC7C,OAAO,EAAK,IAAW,KAAO,IAAM,IAAK,EAAO,KAAM,CAAO,CAC/D,CAKA,IAAM,cAAgB,EAAgB,IAAgC,CACpE,IAAM,EAAS,EAAsB,UAAU,CAAQ,EACvD,GAAI,CAAC,EAAO,QAAS,MAAM,kBAAkB,EAC7C,OAAO,EAAK,EAAQ,EAAO,KAAM,CAAO,CAC1C,EAEA,SAAgB,MAAM,EAAmC,CACvD,OAAO,aACL,IACA,GAAS,UACL,CAAE,GAAI,EAAQ,UAAU,GAAI,KAAM,EAAQ,UAAU,YAAa,SAAU,EAAQ,QAAS,EAC5F,IACN,CACF,CAEA,eAAsB,WAAW,EAAkB,EAAuB,EAAqC,CAC7G,IAAM,EAAO,MAAM,EAAa,CAAO,EACjC,EAAS,EAAmB,UAAU,CAAI,EAChD,GAAI,CAAC,EAAO,QAAS,MAAM,EAAQ,EACnC,IAAM,EAAO,EAAO,KAAK,MAAQ,GAE3B,EAAW,MAAM,MACrB,EACA,EAAI,UACJ,EAAQ,QAAQ,OAChB,EAAQ,QAAQ,OAClB,EACA,GAAI,IAAa,KACf,OAAO,aAAa,IAAK,CAAE,GAAI,EAAS,GAAI,KAAM,EAAS,aAAc,SAAU,EAAQ,QAAS,CAAC,EAEvG,IAAM,EAAK,KAAK,EAChB,MAAM,IACJ,EACA,EAAI,gBACJ,EACA,EAAQ,QAAQ,OAChB,EAAQ,QAAQ,QAChB,EACA,IAAI,EACJ,EAAQ,QAAQ,OAChB,EAAQ,QAAQ,QAChB,KAAK,IAAI,CACX,EACA,IAAM,EAAM,MAAM,MAChB,EACA,EAAI,UACJ,EAAQ,QAAQ,OAChB,EAAQ,QAAQ,OAClB,EACA,GAAI,IAAQ,KAIV,MAHK,MAAM,MAAM,EAAK,EAAI,eAAgB,EAAQ,QAAQ,OAAQ,EAAQ,QAAQ,QAAS,KAAK,IAAI,CAAC,IAAO,KAGtG,EAAS,EAFP,IAAI,EAAS,IAAK,kBAAmB,sBAAsB,EAIrE,OAAO,aAAa,IAAK,CAAE,GAAI,EAAI,GAAI,KAAM,EAAI,aAAc,SAAU,EAAQ,QAAS,CAAC,CAC7F,CAEA,eAAsB,SAAS,EAAkB,EAAuB,EAAqC,CAC3G,IAAM,EAAY,oBAAoB,CAAO,EACvC,EAAO,MAAM,EAAa,CAAO,EACjC,EAAS,EAAiB,UAAU,CAAI,EAC9C,GAAI,CAAC,EAAO,QAAS,MAAM,EAAQ,EAInC,OAHI,EAAO,KAAK,OAAS,EAAU,aACjC,MAAM,IAAI,EAAK,EAAI,gBAAiB,EAAO,KAAK,KAAM,EAAU,GAAI,EAAO,KAAK,IAAI,EAE/E,aAAa,IAAK,CAAE,GAAI,EAAU,GAAI,KAAM,EAAO,KAAK,KAAM,SAAU,EAAQ,QAAS,CAAC,CACnG,CAMA,eAAsB,cAAc,EAAuB,EAAqC,CAE9F,OADI,EAAQ,YAAc,MAAM,MAAM,IAAI,EAAK,EAAI,gBAAiB,EAAQ,UAAU,EAAE,EACjF,IAAI,SAAS,KAAM,CACxB,QAAS,CACP,gBAAiB,UACnB,EACA,OAAQ,GACV,CAAC,CACH,CAGA,eAAsB,qBAAqB,EAAuB,EAAqC,CACrG,GAAM,CAAE,SAAQ,WAAY,EAAQ,QAYpC,OAVA,MAAM,iBACJ,EAAI,GAAG,MAAM,CACX,EAAI,GAAG,QAAQ,EAAI,aAAa,CAAC,CAAC,KAChC,EACA,EACA,KAAK,IAAI,GAAK,EAA0B,IAAmC,GAC7E,EACA,EAAI,GAAG,QAAQ,EAAI,sBAAsB,CAAC,CAAC,KAAK,EAAQ,CAAO,CACjE,CAAC,CACH,EACO,IAAI,SAAS,KAAM,CAAE,QAAS,EAAS,OAAQ,GAAI,CAAC,CAC7D,CAOA,eAAsB,eAAe,EAAuB,EAAkB,EAAwC,CACpH,IAAM,EAAW,mBAAmB,CAAO,EAW3C,OANA,MAAM,iBACJ,EAAI,GAAG,MAAM,CACX,EAAI,GAAG,QAAQ,EAAI,YAAY,CAAC,CAAC,KAAK,KAAK,EAAG,EAAS,GAAI,IAAI,EAAG,CAAW,EAC7E,EAAI,GAAG,QAAQ,EAAI,eAAe,CAAC,CAAC,KAAK,CAAW,CACtD,CAAC,CACH,EACO,IAAI,SAAS,KAAM,CAAE,QAAS,EAAS,OAAQ,GAAI,CAAC,CAC7D,CAGA,eAAsB,kBAAkB,EAAkB,EAAuB,EAAqC,CACpH,mBAAmB,CAAO,EAC1B,IAAM,EAAU,iBACV,CAAE,SAAQ,SAAU,EAAY,EAAS,CAAO,EAChD,EAAQ,EAAiB,CAAE,SAAQ,MAAO,EAAQ,CAAE,CAAC,EACrD,EAAO,MAAM,IAOhB,EAAK,EAAM,IAAK,GAAG,EAAM,UAAU,EAChC,EAAO,EAAK,MAAM,EAAG,CAAK,EAC1B,EAAO,EAAK,GAAG,EAAE,EACjB,EAAS,EAA2B,UAAU,CAClD,QAAS,EAAK,IAAK,IAAS,CAC1B,OAAQ,EAAI,OACZ,WAAY,EAAI,WAChB,UAAW,EAAI,WACf,GAAI,EAAI,GACR,WAAY,EAAI,YAChB,SAAU,EAAI,SAChB,EAAE,EACF,OACE,EAAK,OAAS,GAAS,IAAS,IAAA,GAC5B,EAAW,CAAE,UAAW,EAAK,WAAY,GAAI,EAAK,EAAG,EAAG,CAAO,EAC/D,IACR,CAAC,EACD,GAAI,CAAC,EAAO,QAAS,MAAM,kBAAkB,EAC7C,OAAO,EAAK,IAAK,EAAO,KAAM,CAAO,CACvC,CAEA,IAAa,oBAAuB,GAAgC,CAClE,GAAI,EAAQ,YAAc,KAAM,MAAM,EAAU,6BAA6B,EAC7E,OAAO,EAAQ,SACjB,EAIa,mBAAsB,GAAgC,CACjE,GAAI,CAAC,EAAQ,SAAU,MAAM,EAAU,8BAA8B,EACrE,GAAI,EAAQ,YAAc,KAAM,MAAM,EAAU,6BAA6B,EAC7E,OAAO,EAAQ,SACjB,EAGM,EAAqB,EAAE,OAAO,CAAE,KAAM,EAAmB,SAAS,CAAE,CAAC,EACrE,EAAmB,EAAE,OAAO,CAAE,KAAM,CAAmB,CAAC,EAE9D,eAAsB,eACpB,EACA,EACA,EACmB,CACnB,GAAI,EAAQ,YAAc,KAAM,OAAO,EAAK,IAAK,CAAE,QAAS,CAAC,CAAE,EAAG,CAAO,EACzE,IAAM,EAAO,MAAM,IACjB,EACA,EAAI,gBACJ,EAAQ,UAAU,GAClB,EAAW,KACX,EAAe,eACjB,EAEA,OAAO,EAAK,IAAK,CAAE,QAAS,EAAK,IAAK,GAAQ,gBAAgB,EAAY,CAAG,CAAC,CAAE,EAAG,CAAO,CAC5F,CAEA,eAAsB,QAAQ,EAAkB,EAAuB,EAAqC,CAE1G,IAAM,EADS,IAAI,IAAI,EAAQ,GAAG,CAAC,CAAC,aACjB,IAAI,KAAK,EAC5B,GAAI,IAAQ,KAAM,CAChB,IAAM,EAAU,SAAS,EAAQ,WAAW,IAAM,iBAC5C,CAAE,SAAQ,SAAU,EAAY,EAAS,CAAO,EACtD,GAAI,EAAQ,YAAc,KAAM,OAAO,EAAK,IAAK,CAAE,OAAQ,KAAM,IAAK,CAAC,CAAE,EAAG,CAAO,EACnF,IAAM,EAAQ,EAAa,EAAQ,UAAU,GAAI,CAAE,SAAQ,MAAO,EAAQ,CAAE,CAAC,EACvE,EAAO,MAAM,IAAoD,EAAK,EAAM,IAAK,GAAG,EAAM,UAAU,EACpG,EAAO,EAAK,MAAM,EAAG,CAAK,EAC1B,EAAO,EAAK,GAAG,EAAE,EACjB,EAAS,EAAuB,UAAU,CAC9C,OACE,EAAK,OAAS,GAAS,IAAS,IAAA,GAC5B,EAAW,CAAE,UAAW,EAAK,WAAY,GAAI,EAAK,cAAe,EAAG,CAAO,EAC3E,KACN,IAAK,EAAK,IAAK,GAAQ,EAAI,cAAc,CAC3C,CAAC,EACD,GAAI,CAAC,EAAO,QAAS,MAAM,kBAAkB,EAC7C,OAAO,EAAK,IAAK,EAAO,KAAM,CAAO,CACvC,CACA,EAAY,IAAI,IAAI,EAAQ,GAAG,EAAG,CAAC,KAAK,CAAC,EACzC,IAAM,EAAM,CAAC,GAAG,IAAI,IAAI,EAAI,MAAM,GAAG,CAAC,CAAC,EACvC,GAAI,EAAI,OAAS,EAAe,cAAgB,EAAI,KAAM,GAAO,CAAC,EAAQ,KAAK,CAAE,CAAC,EAAG,MAAM,EAAW,EACtG,GAAI,EAAQ,YAAc,KAAM,OAAO,EAAK,IAAK,CAAE,IAAK,CAAC,CAAE,EAAG,CAAO,EACrE,IAAM,EAAQ,EAAqB,EAAQ,UAAU,GAAI,CAAG,EACtD,EAAO,MAAM,IAAgC,EAAK,EAAM,IAAK,GAAG,EAAM,UAAU,EAChF,EAAQ,IAAI,IAAI,EAAK,IAAK,GAAM,EAAE,cAAc,CAAC,EACjD,EAAM,CAAE,IAAK,EAAI,OAAQ,GAAO,EAAM,IAAI,CAAE,CAAC,CAAE,EAC/C,EAAY,EAAsB,UAAU,CAAG,EACrD,GAAI,CAAC,EAAU,QAAS,MAAM,kBAAkB,EAChD,OAAO,EAAK,IAAK,EAAU,KAAM,CAAO,CAC1C,CAKA,IAAM,EAAoB,EAAE,OAAO,CAAE,UAAW,EAAY,QAAS,EAAE,QAAQ,CAAE,CAAC,EAC5E,EAAmB,EAAE,OAAO,CAChC,iBAAkB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAA2B,EACrE,QAAS,EAAE,QAAQ,CACrB,CAAC,EAiBD,eAAe,mBACb,EACA,EACA,EACA,EACuC,CACvC,GAAI,IAAW,MAAQ,EAAO,YAAc,KAAK,IAAI,EAAG,OAAO,KAC/D,GAAI,EAAO,eAAiB,EAAM,MAAM,EAAS,4CAA4C,EAC7F,GAAI,EAAO,iBAAmB,KAAM,MAAM,IAAI,EAAS,IAAK,OAAQ,+BAA+B,EACnG,IAAM,EAAQ,MAAM,UAAU,EAAY,EAAK,EAAO,cAAc,EAEpE,OADI,IAAU,KAAa,WACpB,EAAK,IAAK,EAAO,CAAO,CACjC,CAEA,eAAsB,aACpB,EACA,EACA,EACA,EACA,EACmB,CACnB,GAAI,CAAC,EAAO,kBAAmB,MAAM,IAAI,EAAS,IAAK,sBAAuB,mCAAmC,EACjH,IAAM,EAAY,oBAAoB,CAAO,EACvC,EAAO,MAAM,EAAa,CAAO,EACjC,EAAS,EAAkB,UAAU,CAAI,EAC/C,GAAI,CAAC,EAAO,QAAS,MAAM,EAAQ,EACnC,GAAM,CAAE,aAAc,EAAO,KAEvB,EAAa,MAAM,EAAW,OAAO,EAAO,KAAK,OAAO,EAC9D,GAAI,IAAe,KAAM,MAAM,EAAQ,EAEvC,IAAM,EAAc,EAAW,cACzB,EAAO,EAAW,YAClB,EAAQ,EAAU,GAClB,EAAO,EAAW,KAMlB,EAAS,MAAM,mBAAmB,EAAY,EAAK,MADrC,MAAmB,EAAK,EAAI,QAAS,EAAO,EAAM,CAAS,EACf,CAAI,EACpE,GAAI,IAAW,MAAQ,IAAW,WAAY,OAAO,EAErD,IAAM,EAAW,MAAM,MAAsB,EAAK,EAAI,iBAAkB,EAAO,EAAM,CAAS,EAC9F,GAAI,IAAa,KAAM,CAGrB,GAAI,EAAS,YAAc,KAAM,MAAM,EAAU,wCAAwC,EACzF,GAAI,EAAS,eAAiB,EAAM,MAAM,EAAS,4CAA4C,EAC/F,OAAO,EAAK,IAAK,WAAW,EAAY,CAAQ,EAAG,CAAO,CAC5D,CAEA,IAAM,EAAY,IAAI,EAChB,EAAY,KAAK,IAAI,EAAI,EAAe,uBACxC,EAAW,KAAK,UAAU,EAAW,IAAI,EAwC/C,KAAK,MAvCiB,iBACpB,EAAI,GAAG,MAAM,CACX,EAAI,GAAG,QAAQ,EAAI,cAAc,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,EAClD,EAAI,GAAG,QAAQ,EAAI,iBAAiB,CAAC,CAAC,KACpC,KAAK,EACL,EACA,EACA,EAAA,EAEA,EAAW,eACX,EACA,EACA,EAAW,OACX,EAAW,MACX,EACA,EACA,EACA,EACA,EACA,EAAe,gBACf,EACA,EACA,EACA,KAAK,IAAI,CACX,EACA,EAAI,GAAG,QAAQ,EAAI,aAAa,CAAC,CAAC,KAChC,EACA,EACA,EACA,EACA,EACA,EACA,EACA,EACA,EACA,CACF,CACF,CAAC,CACH,EAAA,CACa,EAAE,EAAE,MAAM,SAAW,KAAO,EAAG,CAK1C,IAAM,EAAc,MAAM,mBAAmB,EAAY,EAAK,MADpC,MAAmB,EAAK,EAAI,QAAS,EAAO,EAAM,CAAS,EACV,CAAI,EAC/E,GAAI,IAAgB,WAAY,MAAM,IAAI,EAAS,IAAK,OAAQ,+BAA+B,EAC/F,GAAI,IAAgB,KAAM,OAAO,EACjC,IAAM,EAAQ,MAAM,MAAsB,EAAK,EAAI,iBAAkB,EAAO,EAAM,CAAS,EAC3F,GAAI,IAAU,MAAQ,EAAM,YAAc,KAAM,MAAM,EAAU,wCAAwC,EACxG,GAAI,IAAU,MAAQ,EAAM,eAAiB,EAAM,OAAO,EAAK,IAAK,WAAW,EAAY,CAAK,EAAG,CAAO,EAE1G,MADI,IAAU,KACR,IAAI,EAAS,IAAK,QAAS,4BAA4B,EADnC,EAAS,4CAA4C,CAEjF,CAEA,IAAM,EAAU,MAAM,MAAsB,EAAK,EAAI,iBAAkB,EAAO,EAAM,CAAS,EAC7F,GAAI,IAAY,KAAM,MAAM,EAAS,EACrC,OAAO,EAAK,IAAK,WAAW,EAAY,CAAO,EAAG,CAAO,CAC3D,CAEA,eAAsB,YACpB,EACA,EACA,EACA,EACA,EACA,EACmB,CACnB,GAAI,CAAC,EAAO,kBAAmB,MAAM,IAAI,EAAS,IAAK,sBAAuB,mCAAmC,EACjH,IAAM,EAAY,oBAAoB,CAAO,EAGvC,EAAM,MAAM,MAAsB,EAAK,EAAI,eAAgB,EAAI,EAAW,IAAI,EAEpF,GAAI,IAAQ,MAAQ,EAAI,WAAa,EAAU,GAAI,MAAM,EAAS,EAElE,GAAI,EAAI,YAAc,KAAM,MAAM,EAAU,wCAAwC,EAEpF,IAAM,EAAO,MAAM,EAAa,CAAO,EACjC,EAAS,EAAiB,UAAU,CAAI,EAC9C,GAAI,CAAC,EAAO,QAAS,MAAM,EAAQ,EACnC,GAAM,CAAE,oBAAqB,EAAO,KAEpC,GAAI,IAAqB,EAAI,SAAU,MAAM,EAAS,EAEtD,IAAM,EAAa,MAAM,EAAW,OAAO,EAAO,KAAK,OAAO,EAC9D,GAAI,IAAe,KAAM,MAAM,EAAQ,EACvC,IAAM,EAAc,EAAW,cACzB,EAAO,EAAW,YACxB,GAAI,IAAS,EAAI,aAAc,CAC7B,IAAM,EAAU,MAAM,MAAsB,EAAK,EAAI,eAAgB,EAAI,EAAW,IAAI,EACxF,GAAI,IAAY,MAAQ,EAAQ,WAAa,EAAU,GAAI,MAAM,EAAS,EAC1E,GAAI,EAAQ,YAAc,KAAM,MAAM,EAAU,wCAAwC,EACxF,GAAI,EAAQ,WAAa,EAAkB,MAAM,EAAS,EAC1D,OAAO,EAAK,IAAK,WAAW,EAAY,CAAO,EAAG,CAAO,CAC3D,CAEA,IAAM,EAAW,KAAK,UAAU,EAAW,IAAI,EAiB/C,KAAK,MAhBgB,IACnB,EACA,EAAI,kBAAA,EAEJ,EAAW,eACX,EACA,EACA,EAAW,OACX,EAAW,MACX,EACA,IAAI,EACJ,EACA,EAAU,GACV,EACA,CACF,EAAA,CACY,MAAM,SAAW,KAAO,EAAG,CACrC,IAAM,EAAU,MAAM,MAAsB,EAAK,EAAI,eAAgB,EAAI,EAAW,IAAI,EAGxF,MAFI,IAAY,KAAY,EAAS,EACjC,EAAQ,YAAc,KACpB,EAAS,EADuB,EAAU,wCAAwC,CAE1F,CACA,IAAM,EAAU,MAAM,UAAU,EAAY,EAAK,CAAE,EACnD,GAAI,IAAY,KAAM,MAAM,EAAS,EACrC,OAAO,EAAK,IAAK,EAAS,CAAO,CACnC,CAEA,eAAsB,YACpB,EACA,EACA,EACA,EACmB,CAOnB,GAAI,EAAQ,SAAU,CACpB,IAAM,EAAW,mBAAmB,CAAO,EAC3C,MAAM,iBACJ,EAAI,GAAG,MAAM,CACX,EAAI,GAAG,QAAQ,EAAI,YAAY,CAAC,CAAC,KAAK,KAAK,EAAG,EAAS,GAAI,IAAI,EAAG,EAAI,EAAW,IAAI,EACrF,EAAI,GAAG,QAAQ,EAAI,oBAAoB,CAAC,CAAC,KAAK,EAAI,EAAW,IAAI,CACnE,CAAC,CACH,CACF,KAAO,CACL,IAAM,EAAY,oBAAoB,CAAO,EACvC,EAAM,MAAM,MAAsB,EAAK,EAAI,eAAgB,EAAI,EAAW,IAAI,EACpF,GAAI,IAAQ,KAAM,OAAO,IAAI,SAAS,KAAM,CAAE,QAAS,EAAS,OAAQ,GAAI,CAAC,EAC7E,GAAI,EAAI,WAAa,EAAU,GAAI,MAAM,EAAS,EAClD,MAAM,IAAI,EAAK,EAAI,kBAAmB,EAAI,EAAU,EAAE,CACxD,CACA,OAAO,IAAI,SAAS,KAAM,CAAE,QAAS,EAAS,OAAQ,GAAI,CAAC,CAC7D,CAEA,eAAsB,QACpB,EACA,EACA,EACA,EACA,EACA,EACmB,CACnB,IAAM,EAAY,oBAAoB,CAAO,EAC7C,GAAI,GAAS,CAAC,EAAO,aAAc,MAAM,IAAI,EAAS,IAAK,iBAAkB,+BAA+B,EAE5G,GAAI,MADc,MAAsB,EAAK,EAAI,YAAa,EAAI,EAAW,IAAI,IACrE,KAAM,MAAM,EAAS,EAC7B,EACF,MAAM,IAAI,EAAK,EAAI,WAAY,EAAU,GAAI,IAAI,EAAG,CAAE,EAEtD,MAAM,IAAI,EAAK,EAAI,WAAY,EAAI,EAAU,EAAE,EAGjD,IAAM,EAAQ,MAAM,MAAyD,EAAK,EAAI,UAAW,EAAU,GAAI,CAAE,EACjH,GAAI,IAAU,KAAM,MAAM,EAAS,EACnC,IAAM,EAAM,CAAE,GAAI,EAAM,GAAI,UAAW,EAAM,WAAY,MAAO,EAAM,QAAU,CAAE,EAC5E,EAAY,EAAuB,UAAU,CAAG,EACtD,GAAI,CAAC,EAAU,QAAS,MAAM,kBAAkB,EAChD,OAAO,EAAK,IAAK,EAAU,KAAM,CAAO,CAC1C,CAKA,IAAM,EAAmB,EAAE,OAAO,CAChC,OAAQ,EAAE,OAAO,CAAC,CAAC,MAAM,CAAgB,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAe,iBAAiB,CAC/F,CAAC,EAOD,eAAsB,YACpB,EACA,EACA,EACA,EACA,EACmB,CACnB,IAAM,EAAW,oBAAoB,CAAO,EACtC,EAAO,MAAM,EAAa,CAAO,EACjC,EAAS,EAAiB,UAAU,CAAI,EAC9C,GAAI,CAAC,EAAO,QAAS,MAAM,EAAQ,EAEnC,GAAI,MADc,MAAsB,EAAK,EAAI,YAAa,EAAI,EAAW,IAAI,IACrE,KAAM,MAAM,EAAS,EAIjC,OADA,MAAM,IAAI,EAAK,EAAI,aAAc,KAAK,EAAG,EAAS,GAAI,EAAO,KAAK,OAAQ,IAAI,EAAG,EAAI,EAAW,IAAI,EAC7F,IAAI,SAAS,KAAM,CAAE,QAAS,EAAS,OAAQ,GAAI,CAAC,CAC7D,CAQA,eAAsB,UACpB,EACA,EACA,EACA,EACA,EACmB,CACnB,IAAM,EAAW,mBAAmB,CAAO,EAK3C,GAAI,MADc,MAAsB,EAAK,EAAI,eAAgB,EAAI,EAAW,IAAI,IACxE,KAAM,MAAM,EAAS,EACjC,IAAM,EAAY,EACd,EAAI,GAAG,QAAQ,EAAI,eAAe,CAAC,CAAC,KAAK,IAAI,EAAG,EAAI,EAAW,IAAI,EACnE,EAAI,GAAG,QAAQ,EAAI,iBAAiB,CAAC,CAAC,KAAK,EAAI,EAAW,IAAI,EAelE,OAdA,MAAM,iBACJ,EAAI,GAAG,MAAM,CACX,EAAI,GAAG,QAAQ,EAAI,SAAS,CAAC,CAAC,KAC5B,KAAK,EACL,EAAS,GACT,EAAS,OAAS,SAClB,IAAI,EACJ,EACA,EAAW,KACX,OAAO,CAAM,CACf,EACA,CACF,CAAC,CACH,EACO,IAAI,SAAS,KAAM,CAAE,QAAS,EAAS,OAAQ,GAAI,CAAC,CAC7D,CAGA,eAAsB,YACpB,EACA,EACA,EACA,EACmB,CACnB,mBAAmB,CAAO,EAC1B,IAAM,EAAS,IAAI,IAAI,EAAQ,GAAG,CAAC,CAAC,aAAa,IAAI,QAAQ,GAAK,aAClE,GAAI,IAAW,cAAgB,IAAW,WAAY,MAAM,EAAW,EACvE,IAAM,EAAU,WAAW,EAAW,KAAK,GAAG,IACxC,CAAE,SAAQ,SAAU,EAAY,EAAS,EAAS,CAAC,QAAQ,CAAC,EAC5D,EAAQ,EACZ,CAAE,WAAY,EAAW,KAAM,SAAU,IAAW,UAAW,EAC/D,CAAE,SAAQ,MAAO,EAAQ,CAAE,CAC7B,EACM,EAAO,MAAM,IAAe,EAAK,EAAM,IAAK,GAAG,EAAM,UAAU,EAC/D,EAAO,EAAK,MAAM,EAAG,CAAK,EAC1B,EAAO,EAAK,GAAG,EAAE,EACjB,EAAS,EAAqB,UAAU,CAC5C,OACE,EAAK,OAAS,GAAS,IAAS,IAAA,GAC5B,EAAW,CAAE,UAAW,EAAK,WAAY,GAAI,EAAK,EAAG,EAAG,CAAO,EAC/D,KACN,QAAS,EAAK,IAAK,IAAS,CAC1B,UAAW,EAAI,WACf,QAAS,EAAI,eACb,WAAY,EAAI,YAChB,GAAI,EAAI,GACR,OAAQ,EAAI,OACZ,SAAU,CAAE,GAAI,EAAI,YAAa,KAAM,EAAI,aAAc,EACzD,WAAY,EAAI,WAClB,EAAE,CACJ,CAAC,EACD,GAAI,CAAC,EAAO,QAAS,MAAM,kBAAkB,EAC7C,OAAO,EAAK,IAAK,EAAO,KAAM,CAAO,CACvC,CAcA,eAAsB,cACpB,EACA,EACA,EACA,EACmB,CAGnB,GAFA,mBAAmB,CAAO,EAEtB,MADc,MAAsB,EAAK,EAAI,WAAY,EAAI,EAAW,IAAI,IACpE,KAAM,MAAM,EAAS,EAEjC,OADA,MAAM,IAAI,EAAK,EAAI,cAAe,IAAI,EAAG,EAAI,EAAW,IAAI,EACrD,IAAI,SAAS,KAAM,CAAE,QAAS,EAAS,OAAQ,GAAI,CAAC,CAC7D,CAEA,eAAsB,UAAU,EAAkB,EAAuB,EAAqC,CAC5G,IAAM,EAAU,eAAe,EAAQ,WAAW,IAAM,iBAClD,CAAE,SAAQ,SAAU,EAAY,EAAS,CAAO,EACtD,GAAI,EAAQ,YAAc,KAAM,OAAO,EAAK,IAAK,CAAE,OAAQ,KAAM,QAAS,CAAC,CAAE,EAAG,CAAO,EACvF,IAAM,EAAQ,EAAe,CAAE,YAAa,EAAQ,UAAU,EAAG,EAAG,CAAE,SAAQ,MAAO,EAAQ,CAAE,CAAC,EAC1F,EAAO,MAAM,IAAe,EAAK,EAAM,IAAK,GAAG,EAAM,UAAU,EAC/D,EAAO,EAAK,MAAM,EAAG,CAAK,EAC1B,EAAO,EAAK,GAAG,EAAE,EACjB,EAAS,EAAwB,UAAU,CAC/C,OACE,EAAK,OAAS,GAAS,IAAS,IAAA,GAC5B,EAAW,CAAE,UAAW,EAAK,WAAY,GAAI,EAAK,EAAG,EAAG,CAAO,EAC/D,KACN,QAAS,EAAK,IAAK,IAAS,CAC1B,WAAY,EAAI,WAChB,UAAW,EAAI,WACf,QAAS,EAAI,eACb,GAAI,EAAI,GACR,OAAQ,EAAI,OACZ,WAAY,EAAI,WAClB,EAAE,CACJ,CAAC,EACD,GAAI,CAAC,EAAO,QAAS,MAAM,kBAAkB,EAC7C,OAAO,EAAK,IAAK,EAAO,KAAM,CAAO,CACvC"}
+{"version":3,"file":"publications.js","names":["operation","cause","ApiError","params","env","sql","result","UUID_RE","payloadJson","row","parsed","collection","entry","uuidSchema","SQL","id","search","ARCHIVE_LIMITS","badRequest","terms","t","query","MAX_VOCAB_VALUES","raw","key","values","declared","value","url","request","queryParams","sortRaw","sortParsed","archiveSortSchema","filters","tags","author","searchMatch","context","forwardPageParams","cursor","limit","bound","listPublicationsSql","fetched","page","last","pageDto","nextCursor","json","noStore","archiveCollectionMetaSchema","notFound","dbSchemaVersion","reason","archiveHealthSchema","config","archiveIdentitySchema","identity","status","session","body","readJsonBody","registerBodySchema","invalid","name","existing","conflict","publisher","renameBodySchema","issuer","subject","SESSION_MAX_AGE_SECONDS","operator","publisherId","forwardPage","moderationLogSql","rows","archiveModerationLogSchema","forbidden","s","archiveAliasSchema","likesPageSql","archiveLikesPageSchema","ids","likedPublicationsSql","liked","r","dto","validated","archiveLikedIdsSchema","publishBodySchema","updateBodySchema","record","hash","derivation","owner","replay","clientKey","timestamp","expiresAt","tagsJson","racedReplay","raced","created","expectedRevision","current","updated","state","archiveLikeStateSchema","reportBodySchema","isWellFormedText","reporter","statement","hidden","reportsPageSql","archiveReportsSchema","archiveOwnReportsSchema"],"sources":["../../src/worker/publications.ts"],"sourcesContent":["import { s } from '@vielzeug/spell';\nimport type { ArchiveCollection } from '../collection';\nimport {\n  ARCHIVE_CONTRACT_VERSION,\n  ARCHIVE_LIMITS,\n  ARCHIVE_SCHEMA_VERSION,\n  type ArchiveModerationAction,\n  archiveAliasSchema,\n  archiveCollectionMetaSchema,\n  archiveHealthSchema,\n  archiveIdentitySchema,\n  archiveLikedIdsSchema,\n  archiveLikeStateSchema,\n  archiveLikesPageSchema,\n  archiveModerationLogSchema,\n  archiveOwnReportsSchema,\n  archiveReportsSchema,\n  archiveSortSchema,\n  isWellFormedText,\n  SESSION_MAX_AGE_SECONDS,\n  uuidSchema,\n} from '../contract';\nimport { forwardPage, forwardPageParams, nextCursor } from './_pagination';\nimport { JWT_CLOCK_TOLERANCE_SECONDS, type Publisher, type Session } from './auth';\nimport type { ApiConfig, ArchiveWorkerEnv } from './env';\nimport {\n  ApiError,\n  badRequest,\n  conflict,\n  forbidden,\n  invalid,\n  json,\n  noStore,\n  notFound,\n  queryParams,\n  readJsonBody,\n} from './http';\nimport {\n  likedPublicationsSql,\n  likesPageSql,\n  listPublicationsSql,\n  moderationLogSql,\n  type PublicationCursor,\n  type PublicationFilter,\n  reportsPageSql,\n  SQL,\n} from './sql';\n\n/**\n * Route handlers for /api/v1, parameterized by the registered collection. All SQL lives\n * in sql.ts and is bound positionally here in the authored order; the DTO boundary\n * re-validates every stored row before it leaves, content validation lives in the\n * collection's derive step, and moderation state (hidden entries) is visible only\n * through the owner and operator surfaces.\n */\n\ninterface PublicationRow {\n  author_name: string;\n  client_key: string;\n  collection: string;\n  content_hash: string;\n  content_version: number;\n  filter_value: string | null;\n  /** Null while visible; set while an operator has removed the entry from public view. */\n  hidden_at: string | null;\n  id: string;\n  like_count: number;\n  owner_id: string;\n  payload_json: string;\n  published_at: string;\n  revision: number;\n  schema_version: number;\n  tags_json: string;\n  title: string;\n  updated_at: string;\n}\n\nasync function databaseCall<T>(operation: () => Promise<T>): Promise<T> {\n  try {\n    return await operation();\n  } catch (cause) {\n    throw new ApiError(500, 'internal', 'The service is not available.', { cause, diagnostic: { kind: 'database' } });\n  }\n}\nconst first = <T>(env: ArchiveWorkerEnv, sql: string, ...params: (string | number | null)[]) =>\n  databaseCall(() =>\n    env.DB.prepare(sql)\n      .bind(...params)\n      .first<T>(),\n  );\nconst all = <T>(env: ArchiveWorkerEnv, sql: string, ...params: (string | number | null)[]) =>\n  databaseCall(async () => {\n    const result = await env.DB.prepare(sql)\n      .bind(...params)\n      .all<T>();\n    if (!Array.isArray(result.results)) throw new Error('Missing database query results');\n    return result.results;\n  });\nconst run = (env: ArchiveWorkerEnv, sql: string, ...params: (string | number | null)[]) =>\n  databaseCall(() =>\n    env.DB.prepare(sql)\n      .bind(...params)\n      .run(),\n  );\n\nconst uuid = (): string => crypto.randomUUID();\nconst now = (): string => new Date().toISOString();\n\n/** A stored row that fails the emitted-DTO contract is unavailable, not malformed data. */\nconst recordUnavailable = (): ApiError =>\n  new ApiError(503, 'record-unavailable', 'The record is not available.', { diagnostic: { kind: 'record' } });\n\nconst UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n\n/**\n * Maps a joined row to the public DTO through the collection's strict entry schema:\n * stored JSON is parsed and re-validated, stored versions are emitted as-is, and any\n * drift — unknown fields, corrupt payload, mismatched versions — surfaces as 503\n * `record-unavailable` rather than leaking or fabricating data.\n */\nconst rowToEntry = (collection: ArchiveCollection, row: PublicationRow) => {\n  let payloadJson: unknown;\n  try {\n    payloadJson = JSON.parse(row.payload_json);\n  } catch {\n    throw recordUnavailable();\n  }\n  const parsed = collection.contract.entry.safeParse({\n    author: { id: row.owner_id, name: row.author_name },\n    contentHash: row.content_hash,\n    contentVersion: row.content_version,\n    id: row.id,\n    likeCount: row.like_count,\n    payload: payloadJson,\n    publishedAt: row.published_at,\n    revision: row.revision,\n    schemaVersion: row.schema_version,\n    updatedAt: row.updated_at,\n  });\n  if (!parsed.success) throw recordUnavailable();\n  return parsed.data;\n};\n\nconst rowToOwnedEntry = (collection: ArchiveCollection, row: PublicationRow) => {\n  const entry = rowToEntry(collection, row);\n  // The private owner DTO adds the create retry key and the moderation state;\n  // public routes never emit either.\n  const key = uuidSchema.safeParse(row.client_key);\n  if (!key.success) throw recordUnavailable();\n  return { ...entry, clientKey: row.client_key, hidden: row.hidden_at !== null };\n};\n\nconst entryById = async (collection: ArchiveCollection, env: ArchiveWorkerEnv, id: string) => {\n  const row = await first<PublicationRow>(env, SQL.publication, id, collection.name);\n  return row === null ? null : rowToEntry(collection, row);\n};\n\n/* ----------------------------------- list --------------------------------- */\n\n/** Normalizes free text into the bounded FTS prefix-match expression the SQL expects. */\nconst searchMatchFor = (search: string | null): string | undefined => {\n  if (search === null) return undefined;\n  if (search.length > ARCHIVE_LIMITS.searchChars) throw badRequest();\n  // Unicode word extraction: punctuation splits terms rather than poisoning them,\n  // so \"Hunter's\" and \"fire-ice\" match the words their indexed titles carry.\n  const terms = (search.match(/[\\p{L}\\p{N}]+/gu) ?? []).slice(0, ARCHIVE_LIMITS.searchTerms);\n  if (terms.length === 0) return undefined;\n  return terms.map((t) => `\"${t}\"*`).join(' ');\n};\n\n/**\n * The entry-list cursor context: every query dimension the page's boundary depends\n * on, so a cursor minted under one filter/sort/search and replayed under another is\n * a 400 — the same forward-cursor guard every other list in the package uses.\n */\nconst entryCursorContext = (query: {\n  author?: string;\n  collection: string;\n  filters: readonly string[];\n  searchMatch?: string;\n  sort: 'liked' | 'recent';\n  tags: readonly string[];\n}): string =>\n  JSON.stringify([\n    query.collection,\n    query.sort,\n    query.author ?? '',\n    query.filters,\n    query.tags,\n    query.searchMatch ?? '',\n  ]);\n\nconst cursorFromRow = (row: PublicationRow): PublicationCursor => ({\n  createdAt: row.published_at,\n  id: row.id,\n  likeCount: row.like_count,\n});\n\n/** Repeated `filter`/`tag` values one entry-list request may carry (OR within each). */\nconst MAX_VOCAB_VALUES = 16;\n\n/** Reads one repeatable vocabulary param: every value must be declared, no repeats\n *  past the bound, and the list is deduplicated and sorted so `?tag=a&tag=a` matches\n *  `?tag=a` and value order never changes the cursor context. */\nconst vocabValues = (params: URLSearchParams, key: string, declared: readonly string[]): string[] => {\n  const raw = params.getAll(key);\n  if (raw.length > MAX_VOCAB_VALUES) throw badRequest();\n  const values = [...new Set(raw)].sort();\n  if (values.some((value) => !declared.includes(value))) throw badRequest();\n  return values;\n};\n\nexport async function listEntries(\n  collection: ArchiveCollection,\n  request: Request,\n  env: ArchiveWorkerEnv,\n): Promise<Response> {\n  const url = new URL(request.url);\n  const params = queryParams(url, ['author', 'cursor', 'filter', 'limit', 'search', 'sort', 'tag'], ['filter', 'tag']);\n\n  const sortRaw = params.get('sort') ?? 'recent';\n  const sortParsed = archiveSortSchema.safeParse(sortRaw);\n  if (!sortParsed.success) throw badRequest();\n\n  const filters = vocabValues(params, 'filter', collection.filters);\n  const tags = vocabValues(params, 'tag', collection.tags);\n  const author = params.get('author');\n  if (author !== null && !UUID_RE.test(author)) throw badRequest();\n\n  const searchMatch = searchMatchFor(params.get('search'));\n  const context = entryCursorContext({\n    author: author ?? undefined,\n    collection: collection.name,\n    filters,\n    searchMatch,\n    sort: sortParsed.data,\n    tags,\n  });\n  const { cursor, limit } = forwardPageParams(params, context);\n\n  const query: PublicationFilter = {\n    author: author ?? undefined,\n    collection: collection.name,\n    cursor:\n      cursor === null ? undefined : { createdAt: cursor.createdAt, id: cursor.id, likeCount: cursor.likeCount ?? 0 },\n    filters,\n    limit: limit + 1,\n    searchMatch,\n    sort: sortParsed.data,\n    tags,\n  };\n\n  // One bounded query — never a count: the over-read row is the next page's proof.\n  const bound = listPublicationsSql(query);\n  const fetched = await all<PublicationRow>(env, bound.sql, ...bound.parameters);\n  const page = fetched.slice(0, limit);\n  const last = page.at(-1);\n\n  // Entries are validated per row through the collection's entry schema; the cursor\n  // is internally generated, so the page composes validated parts directly.\n  const pageDto = {\n    cursor: fetched.length > limit && last !== undefined ? nextCursor(cursorFromRow(last), context) : null,\n    entries: page.map((row) => rowToEntry(collection, row)),\n  };\n  return json(200, pageDto, noStore);\n}\n\n/** The collection's public self-description: name plus the declared query vocabularies. */\nexport function collectionMeta(collection: ArchiveCollection): Response {\n  const parsed = archiveCollectionMetaSchema.safeParse({\n    filters: [...collection.filters].sort(),\n    name: collection.name,\n    tags: [...collection.tags].sort(),\n  });\n  if (!parsed.success) throw recordUnavailable();\n  return json(200, parsed.data, noStore);\n}\n\nexport async function getEntry(collection: ArchiveCollection, env: ArchiveWorkerEnv, id: string): Promise<Response> {\n  const entry = await entryById(collection, env, id);\n  if (entry === null) throw notFound();\n  return json(200, entry, noStore);\n}\n\n/* ---------------------------------- health --------------------------------- */\n\n/**\n * Service health: the feature flags, the wire limits, and the storage schema stamp\n * actually present in the database. A database whose migrations lag the package\n * answers `degraded` instead of pretending to be fine — the most likely deployment\n * fault becomes a one-glance diagnosis.\n */\nexport async function healthJson(config: ApiConfig, env: ArchiveWorkerEnv): Promise<Response> {\n  let dbSchemaVersion: number | null = null;\n  let reason: 'database-unavailable' | 'schema-mismatch' | null = null;\n  try {\n    const row = await first<{ applied: number }>(env, SQL.schemaVersion);\n    dbSchemaVersion = row?.applied ?? 0;\n  } catch {\n    reason = 'database-unavailable';\n  }\n  if (reason === null && dbSchemaVersion !== ARCHIVE_SCHEMA_VERSION) reason = 'schema-mismatch';\n  const parsed = archiveHealthSchema.safeParse({\n    dbSchemaVersion,\n    features: { likes: config.likesEnabled, publishing: config.publishingEnabled },\n    limits: ARCHIVE_LIMITS,\n    reason,\n    schemaVersion: ARCHIVE_CONTRACT_VERSION,\n    status: reason === null ? 'ok' : 'degraded',\n  });\n  if (!parsed.success) throw recordUnavailable();\n  return json(reason === null ? 200 : 503, parsed.data, noStore);\n}\n\n/* --------------------------------- identity -------------------------------- */\n\n/** Emits the private identity DTO through the strict shared schema. */\nconst identityJson = (status: number, identity: unknown): Response => {\n  const parsed = archiveIdentitySchema.safeParse(identity);\n  if (!parsed.success) throw recordUnavailable();\n  return json(status, parsed.data, noStore);\n};\n\nexport function getMe(session: Session | null): Response {\n  return identityJson(\n    200,\n    session?.publisher\n      ? { id: session.publisher.id, name: session.publisher.displayName, operator: session.operator }\n      : null,\n  );\n}\n\nexport async function registerMe(request: Request, env: ArchiveWorkerEnv, session: Session): Promise<Response> {\n  const body = await readJsonBody(request);\n  const parsed = registerBodySchema.safeParse(body);\n  if (!parsed.success) throw invalid();\n  const name = parsed.data.name ?? '';\n\n  const existing = await first<{ display_name: string; id: string }>(\n    env,\n    SQL.publisher,\n    session.subject.issuer,\n    session.subject.subject,\n  );\n  if (existing !== null) {\n    return identityJson(200, { id: existing.id, name: existing.display_name, operator: session.operator });\n  }\n  const id = uuid();\n  await run(\n    env,\n    SQL.insertPublisher,\n    id,\n    session.subject.issuer,\n    session.subject.subject,\n    name,\n    now(),\n    session.subject.issuer,\n    session.subject.subject,\n    Date.now(),\n  );\n  const row = await first<{ display_name: string; id: string }>(\n    env,\n    SQL.publisher,\n    session.subject.issuer,\n    session.subject.subject,\n  );\n  if (row === null) {\n    if ((await first(env, SQL.revokedSubject, session.subject.issuer, session.subject.subject, Date.now())) !== null) {\n      throw new ApiError(401, 'unauthenticated', 'Sign-in is required.');\n    }\n    throw conflict();\n  }\n  return identityJson(201, { id: row.id, name: row.display_name, operator: session.operator });\n}\n\nexport async function renameMe(request: Request, env: ArchiveWorkerEnv, session: Session): Promise<Response> {\n  const publisher = requirePublisherRow(session);\n  const body = await readJsonBody(request);\n  const parsed = renameBodySchema.safeParse(body);\n  if (!parsed.success) throw invalid();\n  if (parsed.data.name !== publisher.displayName) {\n    await run(env, SQL.renamePublisher, parsed.data.name, publisher.id, parsed.data.name);\n  }\n  return identityJson(200, { id: publisher.id, name: parsed.data.name, operator: session.operator });\n}\n\n/**\n * Archive-profile erasure, independent of the identity provider's account.\n * The credential survives so an issuer can retry coordinated account erasure.\n */\nexport async function deleteProfile(env: ArchiveWorkerEnv, session: Session): Promise<Response> {\n  if (session.publisher !== null) await run(env, SQL.deletePublisher, session.publisher.id);\n  return new Response(null, {\n    headers: {\n      'cache-control': 'no-store',\n    },\n    status: 204,\n  });\n}\n\n/** Revocation and erasure share a transaction, preventing a stale session from recreating the profile. */\nexport async function deleteAccountProfile(env: ArchiveWorkerEnv, session: Session): Promise<Response> {\n  const { issuer, subject } = session.subject;\n  // Issuance may be one tolerance ahead; expiry verification permits another.\n  await databaseCall(() =>\n    env.DB.batch([\n      env.DB.prepare(SQL.revokeSubject).bind(\n        issuer,\n        subject,\n        Date.now() + (SESSION_MAX_AGE_SECONDS + 2 * JWT_CLOCK_TOLERANCE_SECONDS) * 1000,\n      ),\n      env.DB.prepare(SQL.deleteSubjectPublisher).bind(issuer, subject),\n    ]),\n  );\n  return new Response(null, { headers: noStore, status: 204 });\n}\n\n/**\n * Operator-side GDPR erasure: removes any publisher's row; FK cascades take its\n * publications, likes and retry keys. Idempotent for the same reason the self-erase\n * is: an already-erased publisher is a 204 with nothing left to remove.\n */\nexport async function erasePublisher(env: ArchiveWorkerEnv, session: Session, publisherId: string): Promise<Response> {\n  const operator = requireOperatorRow(session);\n  // The terminal moderation action: erasing a publisher removes their row, and FK\n  // cascades take the publications, likes and retry keys with it — the same cascade a\n  // self-erase walks, applied to any publisher the operator names. The guarded audit\n  // and deletion share a transaction, so retries never record fictitious actions.\n  await databaseCall(() =>\n    env.DB.batch([\n      env.DB.prepare(SQL.auditErasure).bind(uuid(), operator.id, now(), publisherId),\n      env.DB.prepare(SQL.deletePublisher).bind(publisherId),\n    ]),\n  );\n  return new Response(null, { headers: noStore, status: 204 });\n}\n\n/** The operator's accountability log: newest actions first, bounded, ids only. */\nexport async function listModerationLog(request: Request, env: ArchiveWorkerEnv, session: Session): Promise<Response> {\n  requireOperatorRow(session);\n  const context = 'moderation-log';\n  const { cursor, limit } = forwardPage(request, context);\n  const bound = moderationLogSql({ cursor, limit: limit + 1 });\n  const rows = await all<{\n    id: string;\n    action: ArchiveModerationAction;\n    collection: string | null;\n    created_at: string;\n    operator_id: string;\n    target_id: string;\n  }>(env, bound.sql, ...bound.parameters);\n  const page = rows.slice(0, limit);\n  const last = page.at(-1);\n  const parsed = archiveModerationLogSchema.safeParse({\n    actions: page.map((row) => ({\n      action: row.action,\n      collection: row.collection,\n      createdAt: row.created_at,\n      id: row.id,\n      operatorId: row.operator_id,\n      targetId: row.target_id,\n    })),\n    cursor:\n      rows.length > limit && last !== undefined\n        ? nextCursor({ createdAt: last.created_at, id: last.id }, context)\n        : null,\n  });\n  if (!parsed.success) throw recordUnavailable();\n  return json(200, parsed.data, noStore);\n}\n\nexport const requirePublisherRow = (session: Session): Publisher => {\n  if (session.publisher === null) throw forbidden('Register before publishing.');\n  return session.publisher;\n};\n\n/** Operator authority plus a registered publisher row: moderation routes need both,\n * the role claim for authority and the row for attribution. */\nexport const requireOperatorRow = (session: Session): Publisher => {\n  if (!session.operator) throw forbidden('Operator access is required.');\n  if (session.publisher === null) throw forbidden('Register before moderating.');\n  return session.publisher;\n};\n\n// Private identity payloads share the one alias rule with the emitted DTOs.\nconst registerBodySchema = s.object({ name: archiveAliasSchema.optional() });\nconst renameBodySchema = s.object({ name: archiveAliasSchema });\n\nexport async function myPublications(\n  collection: ArchiveCollection,\n  env: ArchiveWorkerEnv,\n  session: Session,\n): Promise<Response> {\n  if (session.publisher === null) return json(200, { entries: [] }, noStore);\n  const rows = await all<PublicationRow>(\n    env,\n    SQL.ownPublications,\n    session.publisher.id,\n    collection.name,\n    ARCHIVE_LIMITS.maxPublications,\n  );\n  // The private owner DTO adds the create retry key; public routes never emit it.\n  return json(200, { entries: rows.map((row) => rowToOwnedEntry(collection, row)) }, noStore);\n}\n\nexport async function myLikes(request: Request, env: ArchiveWorkerEnv, session: Session): Promise<Response> {\n  const params = new URL(request.url).searchParams;\n  const raw = params.get('ids');\n  if (raw === null) {\n    const context = `likes:${session.publisher?.id ?? 'unregistered'}`;\n    const { cursor, limit } = forwardPage(request, context);\n    if (session.publisher === null) return json(200, { cursor: null, ids: [] }, noStore);\n    const bound = likesPageSql(session.publisher.id, { cursor, limit: limit + 1 });\n    const rows = await all<{ created_at: string; publication_id: string }>(env, bound.sql, ...bound.parameters);\n    const page = rows.slice(0, limit);\n    const last = page.at(-1);\n    const parsed = archiveLikesPageSchema.safeParse({\n      cursor:\n        rows.length > limit && last !== undefined\n          ? nextCursor({ createdAt: last.created_at, id: last.publication_id }, context)\n          : null,\n      ids: page.map((row) => row.publication_id),\n    });\n    if (!parsed.success) throw recordUnavailable();\n    return json(200, parsed.data, noStore);\n  }\n  queryParams(new URL(request.url), ['ids']);\n  const ids = [...new Set(raw.split(','))];\n  if (ids.length > ARCHIVE_LIMITS.likeStateIds || ids.some((id) => !UUID_RE.test(id))) throw badRequest();\n  if (session.publisher === null) return json(200, { ids: [] }, noStore);\n  const bound = likedPublicationsSql(session.publisher.id, ids);\n  const rows = await all<{ publication_id: string }>(env, bound.sql, ...bound.parameters);\n  const liked = new Set(rows.map((r) => r.publication_id));\n  const dto = { ids: ids.filter((id) => liked.has(id)) };\n  const validated = archiveLikedIdsSchema.safeParse(dto);\n  if (!validated.success) throw recordUnavailable();\n  return json(200, validated.data, noStore);\n}\n\n/* --------------------------------- mutations ------------------------------- */\n\n// The core validates the request envelope; the collection's derive step validates the payload.\nconst publishBodySchema = s.object({ clientKey: uuidSchema, payload: s.unknown() });\nconst updateBodySchema = s.object({\n  expectedRevision: s.number().int().min(1).max(Number.MAX_SAFE_INTEGER),\n  payload: s.unknown(),\n});\n\ninterface RetryRecord {\n  expires_at: number;\n  payload_hash: string;\n  publication_id: string | null;\n}\n\n/**\n * The one replay/conflict/gone decision for a create retry key, shared by the\n * pre-read and the post-insert race re-read: a live record for a different payload\n * is a 409, a tombstone (null publication id) is a 410, and a live record for the\n * same payload replays the entry. `'vanished'` means the recorded publication is\n * no longer readable — hidden or raced-deleted — and only the caller knows which:\n * the pre-read falls through to the publication-by-key lookup (a hidden entry is\n * 403 there), the post-insert re-read answers 410.\n */\nasync function resolveRetryRecord(\n  collection: ArchiveCollection,\n  env: ArchiveWorkerEnv,\n  record: RetryRecord | null,\n  hash: string,\n): Promise<Response | 'vanished' | null> {\n  if (record === null || record.expires_at <= Date.now()) return null;\n  if (record.payload_hash !== hash) throw conflict('That key was used for a different payload.');\n  if (record.publication_id === null) throw new ApiError(410, 'gone', 'That publication was removed.');\n  const entry = await entryById(collection, env, record.publication_id);\n  if (entry === null) return 'vanished';\n  return json(200, entry, noStore);\n}\n\nexport async function publishEntry(\n  collection: ArchiveCollection,\n  request: Request,\n  env: ArchiveWorkerEnv,\n  config: ApiConfig,\n  session: Session,\n): Promise<Response> {\n  if (!config.publishingEnabled) throw new ApiError(503, 'publishing-disabled', 'Publishing is currently disabled.');\n  const publisher = requirePublisherRow(session);\n  const body = await readJsonBody(request);\n  const parsed = publishBodySchema.safeParse(body);\n  if (!parsed.success) throw invalid();\n  const { clientKey } = parsed.data;\n  // The derive step owns every content rejection: schema, vocabulary, title, byte bound.\n  const derivation = await collection.derive(parsed.data.payload);\n  if (derivation === null) throw invalid();\n\n  const payloadJson = derivation.canonicalJson;\n  const hash = derivation.contentHash;\n  const owner = publisher.id;\n  const name = collection.name;\n\n  // Retry-key inspection first: the request record decides replay vs conflict vs gone.\n  // A logically expired record is ignored entirely — retention is enforced by time,\n  // not just by the periodic sweep.\n  const retry = await first<RetryRecord>(env, SQL.request, owner, name, clientKey);\n  const replay = await resolveRetryRecord(collection, env, retry, hash);\n  if (replay !== null && replay !== 'vanished') return replay;\n\n  const existing = await first<PublicationRow>(env, SQL.publicationByKey, owner, name, clientKey);\n  if (existing !== null) {\n    // A hidden entry is frozen for its owner too: replaying the create key must not\n    // read as a live publication.\n    if (existing.hidden_at !== null) throw forbidden('This entry is under moderation review.');\n    if (existing.content_hash !== hash) throw conflict('That key was used for a different payload.');\n    return json(200, rowToEntry(collection, existing), noStore);\n  }\n\n  const timestamp = now();\n  const expiresAt = Date.now() + ARCHIVE_LIMITS.idempotencyRetentionMs;\n  const tagsJson = JSON.stringify(derivation.tags);\n  const results = await databaseCall(() =>\n    env.DB.batch([\n      env.DB.prepare(SQL.expireRequests).bind(Date.now()),\n      env.DB.prepare(SQL.insertPublication).bind(\n        uuid(),\n        owner,\n        name,\n        clientKey,\n        ARCHIVE_CONTRACT_VERSION,\n        derivation.contentVersion,\n        payloadJson,\n        hash,\n        derivation.filter,\n        derivation.title,\n        tagsJson,\n        timestamp,\n        timestamp,\n        owner,\n        name,\n        ARCHIVE_LIMITS.maxPublications,\n        owner,\n        name,\n        clientKey,\n        Date.now(),\n      ),\n      env.DB.prepare(SQL.insertRequest).bind(\n        owner,\n        name,\n        clientKey,\n        hash,\n        timestamp,\n        expiresAt,\n        owner,\n        name,\n        clientKey,\n        hash,\n      ),\n    ]),\n  );\n  if ((results[1]?.meta?.changes ?? 0) === 0) {\n    // The guarded insert was skipped: a race already wrote the key, the key's\n    // publication was removed, or the owner's live-publication quota is full.\n    // Re-reading the request record first distinguishes a tombstone from a race.\n    const racedRecord = await first<RetryRecord>(env, SQL.request, owner, name, clientKey);\n    const racedReplay = await resolveRetryRecord(collection, env, racedRecord, hash);\n    if (racedReplay === 'vanished') throw new ApiError(410, 'gone', 'That publication was removed.');\n    if (racedReplay !== null) return racedReplay;\n    const raced = await first<PublicationRow>(env, SQL.publicationByKey, owner, name, clientKey);\n    if (raced !== null && raced.hidden_at !== null) throw forbidden('This entry is under moderation review.');\n    if (raced !== null && raced.content_hash === hash) return json(200, rowToEntry(collection, raced), noStore);\n    if (raced !== null) throw conflict('That key was used for a different payload.');\n    throw new ApiError(429, 'quota', 'Publication quota reached.');\n  }\n\n  const created = await first<PublicationRow>(env, SQL.publicationByKey, owner, name, clientKey);\n  if (created === null) throw conflict();\n  return json(201, rowToEntry(collection, created), noStore);\n}\n\nexport async function updateEntry(\n  collection: ArchiveCollection,\n  request: Request,\n  env: ArchiveWorkerEnv,\n  config: ApiConfig,\n  session: Session,\n  id: string,\n): Promise<Response> {\n  if (!config.publishingEnabled) throw new ApiError(503, 'publishing-disabled', 'Publishing is currently disabled.');\n  const publisher = requirePublisherRow(session);\n  // The owner's row regardless of moderation state: the author must be told their\n  // entry is frozen, not that it vanished.\n  const row = await first<PublicationRow>(env, SQL.publicationAny, id, collection.name);\n  // Replacing an entry is the author's alone; anyone else sees the entry as absent.\n  if (row === null || row.owner_id !== publisher.id) throw notFound();\n  // Hidden entries are frozen: an edit must not bypass the operator's decision.\n  if (row.hidden_at !== null) throw forbidden('This entry is under moderation review.');\n\n  const body = await readJsonBody(request);\n  const parsed = updateBodySchema.safeParse(body);\n  if (!parsed.success) throw invalid();\n  const { expectedRevision } = parsed.data;\n\n  if (expectedRevision !== row.revision) throw conflict();\n\n  const derivation = await collection.derive(parsed.data.payload);\n  if (derivation === null) throw invalid();\n  const payloadJson = derivation.canonicalJson;\n  const hash = derivation.contentHash;\n  if (hash === row.content_hash) {\n    const current = await first<PublicationRow>(env, SQL.publicationAny, id, collection.name);\n    if (current === null || current.owner_id !== publisher.id) throw notFound();\n    if (current.hidden_at !== null) throw forbidden('This entry is under moderation review.');\n    if (current.revision !== expectedRevision) throw conflict();\n    return json(200, rowToEntry(collection, current), noStore);\n  }\n\n  const tagsJson = JSON.stringify(derivation.tags);\n  const result = await run(\n    env,\n    SQL.updatePublication,\n    ARCHIVE_CONTRACT_VERSION,\n    derivation.contentVersion,\n    payloadJson,\n    hash,\n    derivation.filter,\n    derivation.title,\n    tagsJson,\n    now(),\n    id,\n    publisher.id,\n    expectedRevision,\n    hash,\n  );\n  if ((result.meta?.changes ?? 0) === 0) {\n    const current = await first<PublicationRow>(env, SQL.publicationAny, id, collection.name);\n    if (current === null) throw notFound();\n    if (current.hidden_at !== null) throw forbidden('This entry is under moderation review.');\n    throw conflict();\n  }\n  const updated = await entryById(collection, env, id);\n  if (updated === null) throw notFound();\n  return json(200, updated, noStore);\n}\n\nexport async function deleteEntry(\n  collection: ArchiveCollection,\n  env: ArchiveWorkerEnv,\n  session: Session,\n  id: string,\n): Promise<Response> {\n  // The owner's row regardless of moderation state: the author may still remove a\n  // hidden entry (their content, their call) — hiding freezes edits, not removal.\n  // Removing an entry is the author's alone; an operator may remove ANY entry — the\n  // terminal moderation action for abusive content. The operator path carries the\n  // same registered-publisher-row requirement every moderation route shares: one\n  // accountable identity per action. Everyone else sees the entry as absent.\n  if (session.operator) {\n    const operator = requireOperatorRow(session);\n    await databaseCall(() =>\n      env.DB.batch([\n        env.DB.prepare(SQL.auditRemoval).bind(uuid(), operator.id, now(), id, collection.name),\n        env.DB.prepare(SQL.removePublicationAny).bind(id, collection.name),\n      ]),\n    );\n  } else {\n    const publisher = requirePublisherRow(session);\n    const row = await first<PublicationRow>(env, SQL.publicationAny, id, collection.name);\n    if (row === null) return new Response(null, { headers: noStore, status: 204 });\n    if (row.owner_id !== publisher.id) throw notFound();\n    await run(env, SQL.removePublication, id, publisher.id);\n  }\n  return new Response(null, { headers: noStore, status: 204 });\n}\n\nexport async function setLike(\n  collection: ArchiveCollection,\n  env: ArchiveWorkerEnv,\n  config: ApiConfig,\n  session: Session,\n  id: string,\n  liked: boolean,\n): Promise<Response> {\n  const publisher = requirePublisherRow(session);\n  if (liked && !config.likesEnabled) throw new ApiError(503, 'likes-disabled', 'Likes are currently disabled.');\n  const row = await first<PublicationRow>(env, SQL.publication, id, collection.name);\n  if (row === null) throw notFound();\n  if (liked) {\n    await run(env, SQL.insertLike, publisher.id, now(), id);\n  } else {\n    await run(env, SQL.removeLike, id, publisher.id);\n  }\n  // One consistent snapshot: the count and the viewer's flag read together.\n  const state = await first<{ id: string; like_count: number; liked: number }>(env, SQL.likeState, publisher.id, id);\n  if (state === null) throw notFound();\n  const dto = { id: state.id, likeCount: state.like_count, liked: state.liked === 1 };\n  const validated = archiveLikeStateSchema.safeParse(dto);\n  if (!validated.success) throw recordUnavailable();\n  return json(200, validated.data, noStore);\n}\n\n/* -------------------------------- moderation ------------------------------- */\n\n// One free-text report reason: trimmed, non-empty, well-formed, bounded.\nconst reportBodySchema = s.object({\n  reason: s.string().check(isWellFormedText).trim().min(1).max(ARCHIVE_LIMITS.reportReasonChars),\n});\n\n/**\n * A reader's abuse report against one visible entry. Idempotent per (entry, reporter):\n * reporting again is the same 204, never a duplicate row. Hidden or missing entries\n * are 404 — they cannot be reported, they are already actioned or gone.\n */\nexport async function reportEntry(\n  collection: ArchiveCollection,\n  request: Request,\n  env: ArchiveWorkerEnv,\n  session: Session,\n  id: string,\n): Promise<Response> {\n  const reporter = requirePublisherRow(session);\n  const body = await readJsonBody(request);\n  const parsed = reportBodySchema.safeParse(body);\n  if (!parsed.success) throw invalid();\n  const row = await first<PublicationRow>(env, SQL.publication, id, collection.name);\n  if (row === null) throw notFound();\n  // Bound in the SQL's authored placeholder order: reporter, reason, created_at,\n  // then the WHERE's entry id and collection.\n  await run(env, SQL.insertReport, uuid(), reporter.id, parsed.data.reason, now(), id, collection.name);\n  return new Response(null, { headers: noStore, status: 204 });\n}\n\n/**\n * The operator soft-hide: removes an entry from every public surface while keeping\n * the row, its likes and its retry key intact. Idempotent — already in the requested\n * state answers the same 204. Operator authority is the session's verified role\n * claim; a registered publisher row is still required (one accountable identity).\n */\nexport async function setHidden(\n  collection: ArchiveCollection,\n  env: ArchiveWorkerEnv,\n  session: Session,\n  id: string,\n  hidden: boolean,\n): Promise<Response> {\n  const operator = requireOperatorRow(session);\n  // Any collection row, visible or hidden: the operator acts on the storage row. The\n  // pre-read establishes existence only. The transactional audit guard decides\n  // whether the requested transition is an effective action.\n  const row = await first<PublicationRow>(env, SQL.publicationAny, id, collection.name);\n  if (row === null) throw notFound();\n  const statement = hidden\n    ? env.DB.prepare(SQL.hidePublication).bind(now(), id, collection.name)\n    : env.DB.prepare(SQL.unhidePublication).bind(id, collection.name);\n  await databaseCall(() =>\n    env.DB.batch([\n      env.DB.prepare(SQL.auditHide).bind(\n        uuid(),\n        operator.id,\n        hidden ? 'hide' : 'unhide',\n        now(),\n        id,\n        collection.name,\n        Number(hidden),\n      ),\n      statement,\n    ]),\n  );\n  return new Response(null, { headers: noStore, status: 204 });\n}\n\n/** The operator's report queue for one collection: newest first, bounded. */\nexport async function listReports(\n  collection: ArchiveCollection,\n  request: Request,\n  env: ArchiveWorkerEnv,\n  session: Session,\n): Promise<Response> {\n  requireOperatorRow(session);\n  const status = new URL(request.url).searchParams.get('status') ?? 'unresolved';\n  if (status !== 'unresolved' && status !== 'resolved') throw badRequest();\n  const context = `reports:${collection.name}:${status}`;\n  const { cursor, limit } = forwardPage(request, context, ['status']);\n  const bound = reportsPageSql(\n    { collection: collection.name, resolved: status === 'resolved' },\n    { cursor, limit: limit + 1 },\n  );\n  const rows = await all<ReportRow>(env, bound.sql, ...bound.parameters);\n  const page = rows.slice(0, limit);\n  const last = page.at(-1);\n  const parsed = archiveReportsSchema.safeParse({\n    cursor:\n      rows.length > limit && last !== undefined\n        ? nextCursor({ createdAt: last.created_at, id: last.id }, context)\n        : null,\n    reports: page.map((row) => ({\n      createdAt: row.created_at,\n      entryId: row.publication_id,\n      entryTitle: row.entry_title,\n      id: row.id,\n      reason: row.reason,\n      reporter: { id: row.reporter_id, name: row.reporter_name },\n      resolvedAt: row.resolved_at,\n    })),\n  });\n  if (!parsed.success) throw recordUnavailable();\n  return json(200, parsed.data, noStore);\n}\n\ninterface ReportRow {\n  collection: string;\n  created_at: string;\n  entry_title: string;\n  id: string;\n  publication_id: string;\n  reason: string;\n  reporter_id: string;\n  reporter_name: string;\n  resolved_at: string | null;\n}\n\nexport async function resolveReport(\n  collection: ArchiveCollection,\n  env: ArchiveWorkerEnv,\n  session: Session,\n  id: string,\n): Promise<Response> {\n  requireOperatorRow(session);\n  const row = await first<{ id: string }>(env, SQL.reportById, id, collection.name);\n  if (row === null) throw notFound();\n  await run(env, SQL.resolveReport, now(), id, collection.name);\n  return new Response(null, { headers: noStore, status: 204 });\n}\n\nexport async function myReports(request: Request, env: ArchiveWorkerEnv, session: Session): Promise<Response> {\n  const context = `own-reports:${session.publisher?.id ?? 'unregistered'}`;\n  const { cursor, limit } = forwardPage(request, context);\n  if (session.publisher === null) return json(200, { cursor: null, reports: [] }, noStore);\n  const bound = reportsPageSql({ publisherId: session.publisher.id }, { cursor, limit: limit + 1 });\n  const rows = await all<ReportRow>(env, bound.sql, ...bound.parameters);\n  const page = rows.slice(0, limit);\n  const last = page.at(-1);\n  const parsed = archiveOwnReportsSchema.safeParse({\n    cursor:\n      rows.length > limit && last !== undefined\n        ? nextCursor({ createdAt: last.created_at, id: last.id }, context)\n        : null,\n    reports: page.map((row) => ({\n      collection: row.collection,\n      createdAt: row.created_at,\n      entryId: row.publication_id,\n      id: row.id,\n      reason: row.reason,\n      resolvedAt: row.resolved_at,\n    })),\n  });\n  if (!parsed.success) throw recordUnavailable();\n  return json(200, parsed.data, noStore);\n}\n"],"mappings":";;;;;;AA6EA,eAAe,aAAgB,GAAyC;CACtE,IAAI;EACF,OAAO,MAAMA,EAAU;CACzB,SAASC,GAAO;EACd,MAAM,IAAIC,EAAS,KAAK,YAAY,iCAAiC;GAAE;GAAO,YAAY,EAAE,MAAM,WAAW;EAAE,CAAC;CAClH;AACF;AACA,IAAM,SAAY,GAAuB,GAAa,GAAGC,MACvD,mBACEC,EAAI,GAAG,QAAQC,CAAG,CAAC,CAChB,KAAK,GAAGF,CAAM,CAAC,CACf,MAAS,CACd,GACI,OAAU,GAAuB,GAAa,GAAGA,MACrD,aAAa,YAAY;CACvB,IAAMG,IAAS,MAAMF,EAAI,GAAG,QAAQC,CAAG,CAAC,CACrC,KAAK,GAAGF,CAAM,CAAC,CACf,IAAO;CACV,IAAI,CAAC,MAAM,QAAQG,EAAO,OAAO,GAAG,MAAU,MAAM,gCAAgC;CACpF,OAAOA,EAAO;AAChB,CAAC,GACG,OAAO,GAAuB,GAAa,GAAGH,MAClD,mBACEC,EAAI,GAAG,QAAQC,CAAG,CAAC,CAChB,KAAK,GAAGF,CAAM,CAAC,CACf,IAAI,CACT,GAEI,aAAqB,OAAO,WAAW,GACvC,6BAAoB,IAAI,KAAK,EAAA,CAAE,YAAY,GAG3C,0BACJ,IAAID,EAAS,KAAK,sBAAsB,gCAAgC,EAAE,YAAY,EAAE,MAAM,SAAS,EAAE,CAAC,GAEtGK,IAAU,mEAQV,cAAc,GAA+B,MAAwB;CACzE,IAAIC;CACJ,IAAI;EACF,IAAc,KAAK,MAAMC,EAAI,YAAY;CAC3C,QAAQ;EACN,MAAM,kBAAkB;CAC1B;CACA,IAAMC,IAASC,EAAW,SAAS,MAAM,UAAU;EACjD,QAAQ;GAAE,IAAIF,EAAI;GAAU,MAAMA,EAAI;EAAY;EAClD,aAAaA,EAAI;EACjB,gBAAgBA,EAAI;EACpB,IAAIA,EAAI;EACR,WAAWA,EAAI;EACf,SAASD;EACT,aAAaC,EAAI;EACjB,UAAUA,EAAI;EACd,eAAeA,EAAI;EACnB,WAAWA,EAAI;CACjB,CAAC;CACD,IAAI,CAACC,EAAO,SAAS,MAAM,kBAAkB;CAC7C,OAAOA,EAAO;AAChB,GAEM,mBAAmB,GAA+B,MAAwB;CAC9E,IAAME,IAAQ,WAAWD,GAAYF,CAAG;CAIxC,IAAI,CADQI,EAAW,UAAUJ,EAAI,UAChC,CAAA,CAAI,SAAS,MAAM,kBAAkB;CAC1C,OAAO;EAAE,GAAGG;EAAO,WAAWH,EAAI;EAAY,QAAQA,EAAI,cAAc;CAAK;AAC/E,GAEM,YAAY,OAAO,GAA+B,GAAuB,MAAe;CAC5F,IAAMA,IAAM,MAAM,MAAsBL,GAAKU,EAAI,aAAaC,GAAIJ,EAAW,IAAI;CACjF,OAAOF,MAAQ,OAAO,OAAO,WAAWE,GAAYF,CAAG;AACzD,GAKM,kBAAkB,MAA8C;CACpE,IAAIO,MAAW,MAAM;CACrB,IAAIA,EAAO,SAASC,EAAe,aAAa,MAAMC,EAAW;CAGjE,IAAMC,KAASH,EAAO,MAAM,iBAAiB,KAAK,CAAC,EAAA,CAAG,MAAM,GAAGC,EAAe,WAAW;CACzF,IAAIE,EAAM,WAAW,GACrB,OAAOA,EAAM,KAAK,MAAM,IAAIC,EAAE,GAAG,CAAC,CAAC,KAAK,GAAG;AAC7C,GAOM,sBAAsB,MAQ1B,KAAK,UAAU;CACbC,EAAM;CACNA,EAAM;CACNA,EAAM,UAAU;CAChBA,EAAM;CACNA,EAAM;CACNA,EAAM,eAAe;AACvB,CAAC,GAEG,iBAAiB,OAA4C;CACjE,WAAWZ,EAAI;CACf,IAAIA,EAAI;CACR,WAAWA,EAAI;AACjB,IAGMa,IAAmB,IAKnB,eAAe,GAAyB,GAAa,MAA0C;CACnG,IAAMC,IAAMpB,EAAO,OAAOqB,CAAG;CAC7B,IAAID,EAAI,SAASD,GAAkB,MAAMJ,EAAW;CACpD,IAAMO,IAAS,CAAC,GAAG,IAAI,IAAIF,CAAG,CAAC,CAAC,CAAC,KAAK;CACtC,IAAIE,EAAO,MAAM,MAAU,CAACC,EAAS,SAASC,CAAK,CAAC,GAAG,MAAMT,EAAW;CACxE,OAAOO;AACT;AAEA,eAAsB,YACpB,GACA,GACA,GACmB;CACnB,IAAMG,IAAM,IAAI,IAAIC,EAAQ,GAAG,GACzB1B,IAAS2B,EAAYF,GAAK;EAAC;EAAU;EAAU;EAAU;EAAS;EAAU;EAAQ;CAAK,GAAG,CAAC,UAAU,KAAK,CAAC,GAE7GG,IAAU5B,EAAO,IAAI,MAAM,KAAK,UAChC6B,IAAaC,EAAkB,UAAUF,CAAO;CACtD,IAAI,CAACC,EAAW,SAAS,MAAMd,EAAW;CAE1C,IAAMgB,IAAU,YAAY/B,GAAQ,UAAUQ,EAAW,OAAO,GAC1DwB,IAAO,YAAYhC,GAAQ,OAAOQ,EAAW,IAAI,GACjDyB,IAASjC,EAAO,IAAI,QAAQ;CAClC,IAAIiC,MAAW,QAAQ,CAAC7B,EAAQ,KAAK6B,CAAM,GAAG,MAAMlB,EAAW;CAE/D,IAAMmB,IAAc,eAAelC,EAAO,IAAI,QAAQ,CAAC,GACjDmC,IAAU,mBAAmB;EACjC,QAAQF,KAAU,KAAA;EAClB,YAAYzB,EAAW;EACvB;EACA;EACA,MAAMqB,EAAW;EACjB;CACF,CAAC,GACK,EAAE,WAAQ,aAAUO,EAAkBpC,GAAQmC,CAAO,GAErDjB,IAA2B;EAC/B,QAAQe,KAAU,KAAA;EAClB,YAAYzB,EAAW;EACvB,QACE6B,MAAW,OAAO,KAAA,IAAY;GAAE,WAAWA,EAAO;GAAW,IAAIA,EAAO;GAAI,WAAWA,EAAO,aAAa;EAAE;EAC/G;EACA,OAAOC,IAAQ;EACf;EACA,MAAMT,EAAW;EACjB;CACF,GAGMU,IAAQC,EAAoBtB,CAAK,GACjCuB,IAAU,MAAM,IAAoBxC,GAAKsC,EAAM,KAAK,GAAGA,EAAM,UAAU,GACvEG,IAAOD,EAAQ,MAAM,GAAGH,CAAK,GAC7BK,IAAOD,EAAK,GAAG,EAAE,GAIjBE,IAAU;EACd,QAAQH,EAAQ,SAASH,KAASK,MAAS,KAAA,IAAYE,EAAW,cAAcF,CAAI,GAAGR,CAAO,IAAI;EAClG,SAASO,EAAK,KAAK,MAAQ,WAAWlC,GAAYF,CAAG,CAAC;CACxD;CACA,OAAOwC,EAAK,KAAKF,GAASG,CAAO;AACnC;AAGA,SAAgB,eAAe,GAAyC;CACtE,IAAMxC,IAASyC,EAA4B,UAAU;EACnD,SAAS,CAAC,GAAGxC,EAAW,OAAO,CAAC,CAAC,KAAK;EACtC,MAAMA,EAAW;EACjB,MAAM,CAAC,GAAGA,EAAW,IAAI,CAAC,CAAC,KAAK;CAClC,CAAC;CACD,IAAI,CAACD,EAAO,SAAS,MAAM,kBAAkB;CAC7C,OAAOuC,EAAK,KAAKvC,EAAO,MAAMwC,CAAO;AACvC;AAEA,eAAsB,SAAS,GAA+B,GAAuB,GAA+B;CAClH,IAAMtC,IAAQ,MAAM,UAAUD,GAAYP,GAAKW,CAAE;CACjD,IAAIH,MAAU,MAAM,MAAMwC,EAAS;CACnC,OAAOH,EAAK,KAAKrC,GAAOsC,CAAO;AACjC;AAUA,eAAsB,WAAW,GAAmB,GAA0C;CAC5F,IAAIG,IAAiC,MACjCC,IAA4D;CAChE,IAAI;EAEF,KAAkB,MADA,MAA2BlD,GAAKU,EAAI,aAAa,EAAA,EAC5C,WAAW;CACpC,QAAQ;EACN,IAAS;CACX;CACA,AAAIwC,MAAW,QAAQD,MAAA,MAA4C,IAAS;CAC5E,IAAM3C,IAAS6C,EAAoB,UAAU;EAC3C;EACA,UAAU;GAAE,OAAOC,EAAO;GAAc,YAAYA,EAAO;EAAkB;EAC7E,QAAQvC;EACR;EACA,eAAA;EACA,QAAQqC,MAAW,OAAO,OAAO;CACnC,CAAC;CACD,IAAI,CAAC5C,EAAO,SAAS,MAAM,kBAAkB;CAC7C,OAAOuC,EAAKK,MAAW,OAAO,MAAM,KAAK5C,EAAO,MAAMwC,CAAO;AAC/D;AAKA,IAAM,gBAAgB,GAAgB,MAAgC;CACpE,IAAMxC,IAAS+C,EAAsB,UAAUC,CAAQ;CACvD,IAAI,CAAChD,EAAO,SAAS,MAAM,kBAAkB;CAC7C,OAAOuC,EAAKU,GAAQjD,EAAO,MAAMwC,CAAO;AAC1C;AAEA,SAAgB,MAAM,GAAmC;CACvD,OAAO,aACL,KACAU,GAAS,YACL;EAAE,IAAIA,EAAQ,UAAU;EAAI,MAAMA,EAAQ,UAAU;EAAa,UAAUA,EAAQ;CAAS,IAC5F,IACN;AACF;AAEA,eAAsB,WAAW,GAAkB,GAAuB,GAAqC;CAC7G,IAAMC,IAAO,MAAMC,EAAajC,CAAO,GACjCnB,IAASqD,EAAmB,UAAUF,CAAI;CAChD,IAAI,CAACnD,EAAO,SAAS,MAAMsD,EAAQ;CACnC,IAAMC,IAAOvD,EAAO,KAAK,QAAQ,IAE3BwD,IAAW,MAAM,MACrB9D,GACAU,EAAI,WACJ8C,EAAQ,QAAQ,QAChBA,EAAQ,QAAQ,OAClB;CACA,IAAIM,MAAa,MACf,OAAO,aAAa,KAAK;EAAE,IAAIA,EAAS;EAAI,MAAMA,EAAS;EAAc,UAAUN,EAAQ;CAAS,CAAC;CAEvG,IAAM7C,IAAK,KAAK;CAChB,MAAM,IACJX,GACAU,EAAI,iBACJC,GACA6C,EAAQ,QAAQ,QAChBA,EAAQ,QAAQ,SAChBK,GACA,IAAI,GACJL,EAAQ,QAAQ,QAChBA,EAAQ,QAAQ,SAChB,KAAK,IAAI,CACX;CACA,IAAMnD,IAAM,MAAM,MAChBL,GACAU,EAAI,WACJ8C,EAAQ,QAAQ,QAChBA,EAAQ,QAAQ,OAClB;CACA,IAAInD,MAAQ,MAIV,MAHK,MAAM,MAAML,GAAKU,EAAI,gBAAgB8C,EAAQ,QAAQ,QAAQA,EAAQ,QAAQ,SAAS,KAAK,IAAI,CAAC,MAAO,OAGtGO,EAAS,IAFP,IAAIjE,EAAS,KAAK,mBAAmB,sBAAsB;CAIrE,OAAO,aAAa,KAAK;EAAE,IAAIO,EAAI;EAAI,MAAMA,EAAI;EAAc,UAAUmD,EAAQ;CAAS,CAAC;AAC7F;AAEA,eAAsB,SAAS,GAAkB,GAAuB,GAAqC;CAC3G,IAAMQ,IAAY,oBAAoBR,CAAO,GACvCC,IAAO,MAAMC,EAAajC,CAAO,GACjCnB,IAAS2D,EAAiB,UAAUR,CAAI;CAC9C,IAAI,CAACnD,EAAO,SAAS,MAAMsD,EAAQ;CAInC,OAHItD,EAAO,KAAK,SAAS0D,EAAU,eACjC,MAAM,IAAIhE,GAAKU,EAAI,iBAAiBJ,EAAO,KAAK,MAAM0D,EAAU,IAAI1D,EAAO,KAAK,IAAI,GAE/E,aAAa,KAAK;EAAE,IAAI0D,EAAU;EAAI,MAAM1D,EAAO,KAAK;EAAM,UAAUkD,EAAQ;CAAS,CAAC;AACnG;AAMA,eAAsB,cAAc,GAAuB,GAAqC;CAE9F,OADIA,EAAQ,cAAc,QAAM,MAAM,IAAIxD,GAAKU,EAAI,iBAAiB8C,EAAQ,UAAU,EAAE,GACjF,IAAI,SAAS,MAAM;EACxB,SAAS,EACP,iBAAiB,WACnB;EACA,QAAQ;CACV,CAAC;AACH;AAGA,eAAsB,qBAAqB,GAAuB,GAAqC;CACrG,IAAM,EAAE,WAAQ,eAAYA,EAAQ;CAYpC,OAVA,MAAM,mBACJxD,EAAI,GAAG,MAAM,CACXA,EAAI,GAAG,QAAQU,EAAI,aAAa,CAAC,CAAC,KAChCwD,GACAC,GACA,KAAK,IAAI,KAAKC,IAA0B,MAAmC,GAC7E,GACApE,EAAI,GAAG,QAAQU,EAAI,sBAAsB,CAAC,CAAC,KAAKwD,GAAQC,CAAO,CACjE,CAAC,CACH,GACO,IAAI,SAAS,MAAM;EAAE,SAASrB;EAAS,QAAQ;CAAI,CAAC;AAC7D;AAOA,eAAsB,eAAe,GAAuB,GAAkB,GAAwC;CACpH,IAAMuB,IAAW,mBAAmBb,CAAO;CAW3C,OANA,MAAM,mBACJxD,EAAI,GAAG,MAAM,CACXA,EAAI,GAAG,QAAQU,EAAI,YAAY,CAAC,CAAC,KAAK,KAAK,GAAG2D,EAAS,IAAI,IAAI,GAAGC,CAAW,GAC7EtE,EAAI,GAAG,QAAQU,EAAI,eAAe,CAAC,CAAC,KAAK4D,CAAW,CACtD,CAAC,CACH,GACO,IAAI,SAAS,MAAM;EAAE,SAASxB;EAAS,QAAQ;CAAI,CAAC;AAC7D;AAGA,eAAsB,kBAAkB,GAAkB,GAAuB,GAAqC;CACpH,mBAAmBU,CAAO;CAC1B,IAAMtB,IAAU,kBACV,EAAE,WAAQ,aAAUqC,EAAY9C,GAASS,CAAO,GAChDI,IAAQkC,EAAiB;EAAE;EAAQ,OAAOnC,IAAQ;CAAE,CAAC,GACrDoC,IAAO,MAAM,IAOhBzE,GAAKsC,EAAM,KAAK,GAAGA,EAAM,UAAU,GAChCG,IAAOgC,EAAK,MAAM,GAAGpC,CAAK,GAC1BK,IAAOD,EAAK,GAAG,EAAE,GACjBnC,IAASoE,EAA2B,UAAU;EAClD,SAASjC,EAAK,KAAK,OAAS;GAC1B,QAAQpC,EAAI;GACZ,YAAYA,EAAI;GAChB,WAAWA,EAAI;GACf,IAAIA,EAAI;GACR,YAAYA,EAAI;GAChB,UAAUA,EAAI;EAChB,EAAE;EACF,QACEoE,EAAK,SAASpC,KAASK,MAAS,KAAA,IAC5BE,EAAW;GAAE,WAAWF,EAAK;GAAY,IAAIA,EAAK;EAAG,GAAGR,CAAO,IAC/D;CACR,CAAC;CACD,IAAI,CAAC5B,EAAO,SAAS,MAAM,kBAAkB;CAC7C,OAAOuC,EAAK,KAAKvC,EAAO,MAAMwC,CAAO;AACvC;AAEA,IAAa,uBAAuB,MAAgC;CAClE,IAAIU,EAAQ,cAAc,MAAM,MAAMmB,EAAU,6BAA6B;CAC7E,OAAOnB,EAAQ;AACjB,GAIa,sBAAsB,MAAgC;CACjE,IAAI,CAACA,EAAQ,UAAU,MAAMmB,EAAU,8BAA8B;CACrE,IAAInB,EAAQ,cAAc,MAAM,MAAMmB,EAAU,6BAA6B;CAC7E,OAAOnB,EAAQ;AACjB,GAGMG,IAAqBiB,EAAE,OAAO,EAAE,MAAMC,EAAmB,SAAS,EAAE,CAAC,GACrEZ,IAAmBW,EAAE,OAAO,EAAE,MAAMC,EAAmB,CAAC;AAE9D,eAAsB,eACpB,GACA,GACA,GACmB;CACnB,IAAIrB,EAAQ,cAAc,MAAM,OAAOX,EAAK,KAAK,EAAE,SAAS,CAAC,EAAE,GAAGC,CAAO;CACzE,IAAM2B,IAAO,MAAM,IACjBzE,GACAU,EAAI,iBACJ8C,EAAQ,UAAU,IAClBjD,EAAW,MACXM,EAAe,eACjB;CAEA,OAAOgC,EAAK,KAAK,EAAE,SAAS4B,EAAK,KAAK,MAAQ,gBAAgBlE,GAAYF,CAAG,CAAC,EAAE,GAAGyC,CAAO;AAC5F;AAEA,eAAsB,QAAQ,GAAkB,GAAuB,GAAqC;CAE1G,IAAM3B,IADS,IAAI,IAAIM,EAAQ,GAAG,CAAC,CAAC,aACjB,IAAI,KAAK;CAC5B,IAAIN,MAAQ,MAAM;EAChB,IAAMe,IAAU,SAASsB,EAAQ,WAAW,MAAM,kBAC5C,EAAE,WAAQ,aAAUe,EAAY9C,GAASS,CAAO;EACtD,IAAIsB,EAAQ,cAAc,MAAM,OAAOX,EAAK,KAAK;GAAE,QAAQ;GAAM,KAAK,CAAC;EAAE,GAAGC,CAAO;EACnF,IAAMR,IAAQwC,EAAatB,EAAQ,UAAU,IAAI;GAAE;GAAQ,OAAOnB,IAAQ;EAAE,CAAC,GACvEoC,IAAO,MAAM,IAAoDzE,GAAKsC,EAAM,KAAK,GAAGA,EAAM,UAAU,GACpGG,IAAOgC,EAAK,MAAM,GAAGpC,CAAK,GAC1BK,IAAOD,EAAK,GAAG,EAAE,GACjBnC,IAASyE,EAAuB,UAAU;GAC9C,QACEN,EAAK,SAASpC,KAASK,MAAS,KAAA,IAC5BE,EAAW;IAAE,WAAWF,EAAK;IAAY,IAAIA,EAAK;GAAe,GAAGR,CAAO,IAC3E;GACN,KAAKO,EAAK,KAAK,MAAQpC,EAAI,cAAc;EAC3C,CAAC;EACD,IAAI,CAACC,EAAO,SAAS,MAAM,kBAAkB;EAC7C,OAAOuC,EAAK,KAAKvC,EAAO,MAAMwC,CAAO;CACvC;CACA,EAAY,IAAI,IAAIrB,EAAQ,GAAG,GAAG,CAAC,KAAK,CAAC;CACzC,IAAMuD,IAAM,CAAC,GAAG,IAAI,IAAI7D,EAAI,MAAM,GAAG,CAAC,CAAC;CACvC,IAAI6D,EAAI,SAASnE,EAAe,gBAAgBmE,EAAI,MAAM,MAAO,CAAC7E,EAAQ,KAAKQ,CAAE,CAAC,GAAG,MAAMG,EAAW;CACtG,IAAI0C,EAAQ,cAAc,MAAM,OAAOX,EAAK,KAAK,EAAE,KAAK,CAAC,EAAE,GAAGC,CAAO;CACrE,IAAMR,IAAQ2C,EAAqBzB,EAAQ,UAAU,IAAIwB,CAAG,GACtDP,IAAO,MAAM,IAAgCzE,GAAKsC,EAAM,KAAK,GAAGA,EAAM,UAAU,GAChF4C,IAAQ,IAAI,IAAIT,EAAK,KAAK,MAAMU,EAAE,cAAc,CAAC,GACjDC,IAAM,EAAE,KAAKJ,EAAI,QAAQ,MAAOE,EAAM,IAAIvE,CAAE,CAAC,EAAE,GAC/C0E,IAAYC,EAAsB,UAAUF,CAAG;CACrD,IAAI,CAACC,EAAU,SAAS,MAAM,kBAAkB;CAChD,OAAOxC,EAAK,KAAKwC,EAAU,MAAMvC,CAAO;AAC1C;AAKA,IAAMyC,IAAoBX,EAAE,OAAO;CAAE,WAAWnE;CAAY,SAASmE,EAAE,QAAQ;AAAE,CAAC,GAC5EY,IAAmBZ,EAAE,OAAO;CAChC,kBAAkBA,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAA2B;CACrE,SAASA,EAAE,QAAQ;AACrB,CAAC;AAiBD,eAAe,mBACb,GACA,GACA,GACA,GACuC;CACvC,IAAIa,MAAW,QAAQA,EAAO,cAAc,KAAK,IAAI,GAAG,OAAO;CAC/D,IAAIA,EAAO,iBAAiBC,GAAM,MAAM3B,EAAS,4CAA4C;CAC7F,IAAI0B,EAAO,mBAAmB,MAAM,MAAM,IAAI3F,EAAS,KAAK,QAAQ,+BAA+B;CACnG,IAAMU,IAAQ,MAAM,UAAUD,GAAYP,GAAKyF,EAAO,cAAc;CAEpE,OADIjF,MAAU,OAAa,aACpBqC,EAAK,KAAKrC,GAAOsC,CAAO;AACjC;AAEA,eAAsB,aACpB,GACA,GACA,GACA,GACA,GACmB;CACnB,IAAI,CAACM,EAAO,mBAAmB,MAAM,IAAItD,EAAS,KAAK,uBAAuB,mCAAmC;CACjH,IAAMkE,IAAY,oBAAoBR,CAAO,GACvCC,IAAO,MAAMC,EAAajC,CAAO,GACjCnB,IAASiF,EAAkB,UAAU9B,CAAI;CAC/C,IAAI,CAACnD,EAAO,SAAS,MAAMsD,EAAQ;CACnC,IAAM,EAAE,iBAActD,EAAO,MAEvBqF,IAAa,MAAMpF,EAAW,OAAOD,EAAO,KAAK,OAAO;CAC9D,IAAIqF,MAAe,MAAM,MAAM/B,EAAQ;CAEvC,IAAMxD,IAAcuF,EAAW,eACzBD,IAAOC,EAAW,aAClBC,IAAQ5B,EAAU,IAClBH,IAAOtD,EAAW,MAMlBsF,IAAS,MAAM,mBAAmBtF,GAAYP,GAAK,MADrC,MAAmBA,GAAKU,EAAI,SAASkF,GAAO/B,GAAMiC,CAAS,GACfJ,CAAI;CACpE,IAAIG,MAAW,QAAQA,MAAW,YAAY,OAAOA;CAErD,IAAM/B,IAAW,MAAM,MAAsB9D,GAAKU,EAAI,kBAAkBkF,GAAO/B,GAAMiC,CAAS;CAC9F,IAAIhC,MAAa,MAAM;EAGrB,IAAIA,EAAS,cAAc,MAAM,MAAMa,EAAU,wCAAwC;EACzF,IAAIb,EAAS,iBAAiB4B,GAAM,MAAM3B,EAAS,4CAA4C;EAC/F,OAAOlB,EAAK,KAAK,WAAWtC,GAAYuD,CAAQ,GAAGhB,CAAO;CAC5D;CAEA,IAAMiD,IAAY,IAAI,GAChBC,IAAY,KAAK,IAAI,IAAInF,EAAe,wBACxCoF,IAAW,KAAK,UAAUN,EAAW,IAAI;CAwC/C,MAAK,MAvCiB,mBACpB3F,EAAI,GAAG,MAAM;EACXA,EAAI,GAAG,QAAQU,EAAI,cAAc,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC;EAClDV,EAAI,GAAG,QAAQU,EAAI,iBAAiB,CAAC,CAAC,KACpC,KAAK,GACLkF,GACA/B,GACAiC,GAAA,GAEAH,EAAW,gBACXvF,GACAsF,GACAC,EAAW,QACXA,EAAW,OACXM,GACAF,GACAA,GACAH,GACA/B,GACAhD,EAAe,iBACf+E,GACA/B,GACAiC,GACA,KAAK,IAAI,CACX;EACA9F,EAAI,GAAG,QAAQU,EAAI,aAAa,CAAC,CAAC,KAChCkF,GACA/B,GACAiC,GACAJ,GACAK,GACAC,GACAJ,GACA/B,GACAiC,GACAJ,CACF;CACF,CAAC,CACH,EAAA,CACa,EAAE,EAAE,MAAM,WAAW,OAAO,GAAG;EAK1C,IAAMQ,IAAc,MAAM,mBAAmB3F,GAAYP,GAAK,MADpC,MAAmBA,GAAKU,EAAI,SAASkF,GAAO/B,GAAMiC,CAAS,GACVJ,CAAI;EAC/E,IAAIQ,MAAgB,YAAY,MAAM,IAAIpG,EAAS,KAAK,QAAQ,+BAA+B;EAC/F,IAAIoG,MAAgB,MAAM,OAAOA;EACjC,IAAMC,IAAQ,MAAM,MAAsBnG,GAAKU,EAAI,kBAAkBkF,GAAO/B,GAAMiC,CAAS;EAC3F,IAAIK,MAAU,QAAQA,EAAM,cAAc,MAAM,MAAMxB,EAAU,wCAAwC;EACxG,IAAIwB,MAAU,QAAQA,EAAM,iBAAiBT,GAAM,OAAO7C,EAAK,KAAK,WAAWtC,GAAY4F,CAAK,GAAGrD,CAAO;EAE1G,MADIqD,MAAU,OACR,IAAIrG,EAAS,KAAK,SAAS,4BAA4B,IADnCiE,EAAS,4CAA4C;CAEjF;CAEA,IAAMqC,IAAU,MAAM,MAAsBpG,GAAKU,EAAI,kBAAkBkF,GAAO/B,GAAMiC,CAAS;CAC7F,IAAIM,MAAY,MAAM,MAAMrC,EAAS;CACrC,OAAOlB,EAAK,KAAK,WAAWtC,GAAY6F,CAAO,GAAGtD,CAAO;AAC3D;AAEA,eAAsB,YACpB,GACA,GACA,GACA,GACA,GACA,GACmB;CACnB,IAAI,CAACM,EAAO,mBAAmB,MAAM,IAAItD,EAAS,KAAK,uBAAuB,mCAAmC;CACjH,IAAMkE,IAAY,oBAAoBR,CAAO,GAGvCnD,IAAM,MAAM,MAAsBL,GAAKU,EAAI,gBAAgBC,GAAIJ,EAAW,IAAI;CAEpF,IAAIF,MAAQ,QAAQA,EAAI,aAAa2D,EAAU,IAAI,MAAMhB,EAAS;CAElE,IAAI3C,EAAI,cAAc,MAAM,MAAMsE,EAAU,wCAAwC;CAEpF,IAAMlB,IAAO,MAAMC,EAAajC,CAAO,GACjCnB,IAASkF,EAAiB,UAAU/B,CAAI;CAC9C,IAAI,CAACnD,EAAO,SAAS,MAAMsD,EAAQ;CACnC,IAAM,EAAE,wBAAqBtD,EAAO;CAEpC,IAAI+F,MAAqBhG,EAAI,UAAU,MAAM0D,EAAS;CAEtD,IAAM4B,IAAa,MAAMpF,EAAW,OAAOD,EAAO,KAAK,OAAO;CAC9D,IAAIqF,MAAe,MAAM,MAAM/B,EAAQ;CACvC,IAAMxD,IAAcuF,EAAW,eACzBD,IAAOC,EAAW;CACxB,IAAID,MAASrF,EAAI,cAAc;EAC7B,IAAMiG,IAAU,MAAM,MAAsBtG,GAAKU,EAAI,gBAAgBC,GAAIJ,EAAW,IAAI;EACxF,IAAI+F,MAAY,QAAQA,EAAQ,aAAatC,EAAU,IAAI,MAAMhB,EAAS;EAC1E,IAAIsD,EAAQ,cAAc,MAAM,MAAM3B,EAAU,wCAAwC;EACxF,IAAI2B,EAAQ,aAAaD,GAAkB,MAAMtC,EAAS;EAC1D,OAAOlB,EAAK,KAAK,WAAWtC,GAAY+F,CAAO,GAAGxD,CAAO;CAC3D;CAEA,IAAMmD,IAAW,KAAK,UAAUN,EAAW,IAAI;CAiB/C,MAAK,MAhBgB,IACnB3F,GACAU,EAAI,mBAAA,GAEJiF,EAAW,gBACXvF,GACAsF,GACAC,EAAW,QACXA,EAAW,OACXM,GACA,IAAI,GACJtF,GACAqD,EAAU,IACVqC,GACAX,CACF,EAAA,CACY,MAAM,WAAW,OAAO,GAAG;EACrC,IAAMY,IAAU,MAAM,MAAsBtG,GAAKU,EAAI,gBAAgBC,GAAIJ,EAAW,IAAI;EAGxF,MAFI+F,MAAY,OAAYtD,EAAS,IACjCsD,EAAQ,cAAc,OACpBvC,EAAS,IADuBY,EAAU,wCAAwC;CAE1F;CACA,IAAM4B,IAAU,MAAM,UAAUhG,GAAYP,GAAKW,CAAE;CACnD,IAAI4F,MAAY,MAAM,MAAMvD,EAAS;CACrC,OAAOH,EAAK,KAAK0D,GAASzD,CAAO;AACnC;AAEA,eAAsB,YACpB,GACA,GACA,GACA,GACmB;CAOnB,IAAIU,EAAQ,UAAU;EACpB,IAAMa,IAAW,mBAAmBb,CAAO;EAC3C,MAAM,mBACJxD,EAAI,GAAG,MAAM,CACXA,EAAI,GAAG,QAAQU,EAAI,YAAY,CAAC,CAAC,KAAK,KAAK,GAAG2D,EAAS,IAAI,IAAI,GAAG1D,GAAIJ,EAAW,IAAI,GACrFP,EAAI,GAAG,QAAQU,EAAI,oBAAoB,CAAC,CAAC,KAAKC,GAAIJ,EAAW,IAAI,CACnE,CAAC,CACH;CACF,OAAO;EACL,IAAMyD,IAAY,oBAAoBR,CAAO,GACvCnD,IAAM,MAAM,MAAsBL,GAAKU,EAAI,gBAAgBC,GAAIJ,EAAW,IAAI;EACpF,IAAIF,MAAQ,MAAM,OAAO,IAAI,SAAS,MAAM;GAAE,SAASyC;GAAS,QAAQ;EAAI,CAAC;EAC7E,IAAIzC,EAAI,aAAa2D,EAAU,IAAI,MAAMhB,EAAS;EAClD,MAAM,IAAIhD,GAAKU,EAAI,mBAAmBC,GAAIqD,EAAU,EAAE;CACxD;CACA,OAAO,IAAI,SAAS,MAAM;EAAE,SAASlB;EAAS,QAAQ;CAAI,CAAC;AAC7D;AAEA,eAAsB,QACpB,GACA,GACA,GACA,GACA,GACA,GACmB;CACnB,IAAMkB,IAAY,oBAAoBR,CAAO;CAC7C,IAAI0B,KAAS,CAAC9B,EAAO,cAAc,MAAM,IAAItD,EAAS,KAAK,kBAAkB,+BAA+B;CAE5G,IAAI,MADc,MAAsBE,GAAKU,EAAI,aAAaC,GAAIJ,EAAW,IAAI,MACrE,MAAM,MAAMyC,EAAS;CACjC,AAAIkC,IACF,MAAM,IAAIlF,GAAKU,EAAI,YAAYsD,EAAU,IAAI,IAAI,GAAGrD,CAAE,IAEtD,MAAM,IAAIX,GAAKU,EAAI,YAAYC,GAAIqD,EAAU,EAAE;CAGjD,IAAMwC,IAAQ,MAAM,MAAyDxG,GAAKU,EAAI,WAAWsD,EAAU,IAAIrD,CAAE;CACjH,IAAI6F,MAAU,MAAM,MAAMxD,EAAS;CACnC,IAAMoC,IAAM;EAAE,IAAIoB,EAAM;EAAI,WAAWA,EAAM;EAAY,OAAOA,EAAM,UAAU;CAAE,GAC5EnB,IAAYoB,EAAuB,UAAUrB,CAAG;CACtD,IAAI,CAACC,EAAU,SAAS,MAAM,kBAAkB;CAChD,OAAOxC,EAAK,KAAKwC,EAAU,MAAMvC,CAAO;AAC1C;AAKA,IAAM4D,IAAmB9B,EAAE,OAAO,EAChC,QAAQA,EAAE,OAAO,CAAC,CAAC,MAAM+B,CAAgB,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI9F,EAAe,iBAAiB,EAC/F,CAAC;AAOD,eAAsB,YACpB,GACA,GACA,GACA,GACA,GACmB;CACnB,IAAM+F,IAAW,oBAAoBpD,CAAO,GACtCC,IAAO,MAAMC,EAAajC,CAAO,GACjCnB,IAASoG,EAAiB,UAAUjD,CAAI;CAC9C,IAAI,CAACnD,EAAO,SAAS,MAAMsD,EAAQ;CAEnC,IAAI,MADc,MAAsB5D,GAAKU,EAAI,aAAaC,GAAIJ,EAAW,IAAI,MACrE,MAAM,MAAMyC,EAAS;CAIjC,OADA,MAAM,IAAIhD,GAAKU,EAAI,cAAc,KAAK,GAAGkG,EAAS,IAAItG,EAAO,KAAK,QAAQ,IAAI,GAAGK,GAAIJ,EAAW,IAAI,GAC7F,IAAI,SAAS,MAAM;EAAE,SAASuC;EAAS,QAAQ;CAAI,CAAC;AAC7D;AAQA,eAAsB,UACpB,GACA,GACA,GACA,GACA,GACmB;CACnB,IAAMuB,IAAW,mBAAmBb,CAAO;CAK3C,IAAI,MADc,MAAsBxD,GAAKU,EAAI,gBAAgBC,GAAIJ,EAAW,IAAI,MACxE,MAAM,MAAMyC,EAAS;CACjC,IAAM6D,IAAYC,IACd9G,EAAI,GAAG,QAAQU,EAAI,eAAe,CAAC,CAAC,KAAK,IAAI,GAAGC,GAAIJ,EAAW,IAAI,IACnEP,EAAI,GAAG,QAAQU,EAAI,iBAAiB,CAAC,CAAC,KAAKC,GAAIJ,EAAW,IAAI;CAelE,OAdA,MAAM,mBACJP,EAAI,GAAG,MAAM,CACXA,EAAI,GAAG,QAAQU,EAAI,SAAS,CAAC,CAAC,KAC5B,KAAK,GACL2D,EAAS,IACTyC,IAAS,SAAS,UAClB,IAAI,GACJnG,GACAJ,EAAW,MACX,OAAOuG,CAAM,CACf,GACAD,CACF,CAAC,CACH,GACO,IAAI,SAAS,MAAM;EAAE,SAAS/D;EAAS,QAAQ;CAAI,CAAC;AAC7D;AAGA,eAAsB,YACpB,GACA,GACA,GACA,GACmB;CACnB,mBAAmBU,CAAO;CAC1B,IAAMD,IAAS,IAAI,IAAI9B,EAAQ,GAAG,CAAC,CAAC,aAAa,IAAI,QAAQ,KAAK;CAClE,IAAI8B,MAAW,gBAAgBA,MAAW,YAAY,MAAMzC,EAAW;CACvE,IAAMoB,IAAU,WAAW3B,EAAW,KAAK,GAAGgD,KACxC,EAAE,WAAQ,aAAUgB,EAAY9C,GAASS,GAAS,CAAC,QAAQ,CAAC,GAC5DI,IAAQyE,EACZ;EAAE,YAAYxG,EAAW;EAAM,UAAUgD,MAAW;CAAW,GAC/D;EAAE;EAAQ,OAAOlB,IAAQ;CAAE,CAC7B,GACMoC,IAAO,MAAM,IAAezE,GAAKsC,EAAM,KAAK,GAAGA,EAAM,UAAU,GAC/DG,IAAOgC,EAAK,MAAM,GAAGpC,CAAK,GAC1BK,IAAOD,EAAK,GAAG,EAAE,GACjBnC,IAAS0G,EAAqB,UAAU;EAC5C,QACEvC,EAAK,SAASpC,KAASK,MAAS,KAAA,IAC5BE,EAAW;GAAE,WAAWF,EAAK;GAAY,IAAIA,EAAK;EAAG,GAAGR,CAAO,IAC/D;EACN,SAASO,EAAK,KAAK,OAAS;GAC1B,WAAWpC,EAAI;GACf,SAASA,EAAI;GACb,YAAYA,EAAI;GAChB,IAAIA,EAAI;GACR,QAAQA,EAAI;GACZ,UAAU;IAAE,IAAIA,EAAI;IAAa,MAAMA,EAAI;GAAc;GACzD,YAAYA,EAAI;EAClB,EAAE;CACJ,CAAC;CACD,IAAI,CAACC,EAAO,SAAS,MAAM,kBAAkB;CAC7C,OAAOuC,EAAK,KAAKvC,EAAO,MAAMwC,CAAO;AACvC;AAcA,eAAsB,cACpB,GACA,GACA,GACA,GACmB;CAGnB,IAFA,mBAAmBU,CAAO,GAEtB,MADc,MAAsBxD,GAAKU,EAAI,YAAYC,GAAIJ,EAAW,IAAI,MACpE,MAAM,MAAMyC,EAAS;CAEjC,OADA,MAAM,IAAIhD,GAAKU,EAAI,eAAe,IAAI,GAAGC,GAAIJ,EAAW,IAAI,GACrD,IAAI,SAAS,MAAM;EAAE,SAASuC;EAAS,QAAQ;CAAI,CAAC;AAC7D;AAEA,eAAsB,UAAU,GAAkB,GAAuB,GAAqC;CAC5G,IAAMZ,IAAU,eAAesB,EAAQ,WAAW,MAAM,kBAClD,EAAE,WAAQ,aAAUe,EAAY9C,GAASS,CAAO;CACtD,IAAIsB,EAAQ,cAAc,MAAM,OAAOX,EAAK,KAAK;EAAE,QAAQ;EAAM,SAAS,CAAC;CAAE,GAAGC,CAAO;CACvF,IAAMR,IAAQyE,EAAe,EAAE,aAAavD,EAAQ,UAAU,GAAG,GAAG;EAAE;EAAQ,OAAOnB,IAAQ;CAAE,CAAC,GAC1FoC,IAAO,MAAM,IAAezE,GAAKsC,EAAM,KAAK,GAAGA,EAAM,UAAU,GAC/DG,IAAOgC,EAAK,MAAM,GAAGpC,CAAK,GAC1BK,IAAOD,EAAK,GAAG,EAAE,GACjBnC,IAAS2G,EAAwB,UAAU;EAC/C,QACExC,EAAK,SAASpC,KAASK,MAAS,KAAA,IAC5BE,EAAW;GAAE,WAAWF,EAAK;GAAY,IAAIA,EAAK;EAAG,GAAGR,CAAO,IAC/D;EACN,SAASO,EAAK,KAAK,OAAS;GAC1B,YAAYpC,EAAI;GAChB,WAAWA,EAAI;GACf,SAASA,EAAI;GACb,IAAIA,EAAI;GACR,QAAQA,EAAI;GACZ,YAAYA,EAAI;EAClB,EAAE;CACJ,CAAC;CACD,IAAI,CAACC,EAAO,SAAS,MAAM,kBAAkB;CAC7C,OAAOuC,EAAK,KAAKvC,EAAO,MAAMwC,CAAO;AACvC"}

package/dist/worker/sql.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"sql.cjs","names":[],"sources":["../../src/worker/sql.ts"],"sourcesContent":["/**\n * The runtime SQL the package-owned migration (`packages/archive/migrations/`) must\n * serve. The collection dimension is data (`collection` column, `publication_tags`),\n * never DDL. The migration also stamps the storage schema (`archive_schema_meta`,\n * equal to `ARCHIVE_SCHEMA_VERSION`), which health reads back.\n */\n\n/** SQL is centralized so every mutation's ownership and no-op predicates are reviewable. */\nexport const SQL = {\n  auditErasure: `INSERT INTO moderation_actions(id, operator_id, action, collection, target_id, created_at)\n    SELECT ?, ?, 'erase-publisher', NULL, id, ? FROM publishers WHERE id = ?`,\n  auditHide: `INSERT INTO moderation_actions(id, operator_id, action, collection, target_id, created_at)\n    SELECT ?, ?, ?, collection, id, ? FROM publications\n    WHERE id = ? AND collection = ? AND (hidden_at IS NOT NULL) <> ?`,\n  auditRemoval: `INSERT INTO moderation_actions(id, operator_id, action, collection, target_id, created_at)\n    SELECT ?, ?, 'remove', collection, id, ? FROM publications WHERE id = ? AND collection = ?`,\n  deletePublisher: `DELETE FROM publishers WHERE id = ?`,\n  deleteSubjectPublisher: `DELETE FROM publishers WHERE issuer = ? AND subject = ?`,\n  expireRequests: `DELETE FROM publication_requests WHERE expires_at <= ?`,\n  expireRevocations: `DELETE FROM revoked_subjects WHERE expires_at <= ?`,\n  hidePublication: `UPDATE publications SET hidden_at = ?\n    WHERE id = ? AND collection = ? AND hidden_at IS NULL`,\n  insertLike: `INSERT INTO likes(publication_id, publisher_id, created_at)\n    SELECT id, ?, ? FROM publications WHERE id = ? AND hidden_at IS NULL\n    ON CONFLICT(publication_id, publisher_id) DO NOTHING`,\n  insertPublication: `INSERT INTO publications(\n      id, owner_id, collection, client_key, schema_version, content_version, payload_json,\n      content_hash, filter_value, title, tags_json, published_at, updated_at\n    ) SELECT ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?\n    WHERE (SELECT count(*) FROM publications WHERE owner_id = ? AND collection = ?) < ?\n      AND NOT EXISTS (\n        SELECT 1 FROM publication_requests\n        WHERE owner_id = ? AND collection = ? AND client_key = ? AND expires_at > ?\n      )\n    ON CONFLICT(collection, owner_id, client_key) DO NOTHING`,\n  insertPublisher: `INSERT INTO publishers(id, issuer, subject, display_name, created_at)\n    SELECT ?, ?, ?, ?, ?\n    WHERE NOT EXISTS (SELECT 1 FROM revoked_subjects WHERE issuer = ? AND subject = ? AND expires_at > ?)\n    ON CONFLICT(issuer, subject) DO NOTHING`,\n  insertReport: `INSERT INTO publication_reports(id, publication_id, reporter_id, reason, created_at)\n    SELECT ?, id, ?, ?, ? FROM publications WHERE id = ? AND collection = ? AND hidden_at IS NULL\n    ON CONFLICT(publication_id, reporter_id) DO NOTHING`,\n  insertRequest: `INSERT INTO publication_requests(\n      owner_id, collection, client_key, payload_hash, publication_id, created_at, expires_at\n    ) SELECT ?, ?, ?, ?, p.id, ?, ? FROM publications p\n    WHERE p.owner_id = ? AND p.collection = ? AND p.client_key = ? AND p.content_hash = ?\n    ON CONFLICT(owner_id, collection, client_key) DO NOTHING`,\n  likeState: `SELECT p.id, p.like_count, EXISTS(SELECT 1 FROM likes l WHERE l.publication_id = p.id AND l.publisher_id = ?) AS liked FROM publications p WHERE p.id = ? AND p.hidden_at IS NULL`,\n  ownPublications: `SELECT p.*, u.display_name AS author_name\n    FROM publications p JOIN publishers u ON u.id = p.owner_id\n    WHERE p.owner_id = ? AND p.collection = ? ORDER BY p.published_at DESC, p.id DESC LIMIT ?`,\n  /** The public detail row: a hidden entry is invisible to everyone but its owner. */\n  publication: `SELECT p.*, u.display_name AS author_name\n    FROM publications p JOIN publishers u ON u.id = p.owner_id\n    WHERE p.id = ? AND p.collection = ? AND p.hidden_at IS NULL`,\n  /** The owner's row regardless of moderation state: update/delete decisions need it. */\n  publicationAny: `SELECT p.*, u.display_name AS author_name\n    FROM publications p JOIN publishers u ON u.id = p.owner_id WHERE p.id = ? AND p.collection = ?`,\n  publicationByKey: `SELECT p.*, u.display_name AS author_name\n    FROM publications p JOIN publishers u ON u.id = p.owner_id\n    WHERE p.owner_id = ? AND p.collection = ? AND p.client_key = ?`,\n  publisher: `SELECT id, display_name, created_at FROM publishers WHERE issuer = ? AND subject = ?`,\n  publisherById: `SELECT id FROM publishers WHERE id = ?`,\n  removeLike: `DELETE FROM likes WHERE publication_id = ? AND publisher_id = ?\n    AND EXISTS (SELECT 1 FROM publications p WHERE p.id = likes.publication_id AND p.hidden_at IS NULL)`,\n  removePublication: `DELETE FROM publications WHERE id = ? AND owner_id = ?`,\n  removePublicationAny: `DELETE FROM publications WHERE id = ? AND collection = ?`,\n  renamePublisher: `UPDATE publishers SET display_name = ? WHERE id = ? AND display_name <> ?`,\n  reportById: `SELECT r.id FROM publication_reports r JOIN publications p ON p.id = r.publication_id\n    WHERE r.id = ? AND p.collection = ?`,\n  request: `SELECT payload_hash, publication_id, expires_at FROM publication_requests\n    WHERE owner_id = ? AND collection = ? AND client_key = ?`,\n  resolveReport: `UPDATE publication_reports SET resolved_at = ?\n    WHERE id = ? AND resolved_at IS NULL AND publication_id IN\n      (SELECT id FROM publications WHERE collection = ?)`,\n  revokedSubject: `SELECT 1 AS revoked FROM revoked_subjects WHERE issuer = ? AND subject = ? AND expires_at > ?`,\n  revokeSubject: `INSERT INTO revoked_subjects(issuer, subject, expires_at) VALUES (?, ?, ?)\n    ON CONFLICT(issuer, subject) DO UPDATE SET expires_at = MAX(expires_at, excluded.expires_at)`,\n  /** The storage schema stamp the final migration writes; health reads it back. */\n  schemaVersion: `SELECT applied FROM archive_schema_meta`,\n  unhidePublication: `UPDATE publications SET hidden_at = NULL\n    WHERE id = ? AND collection = ? AND hidden_at IS NOT NULL`,\n  updatePublication: `UPDATE publications SET\n      schema_version = ?, content_version = ?, payload_json = ?, content_hash = ?,\n      filter_value = ?, title = ?, tags_json = ?, updated_at = ?, revision = revision + 1\n    WHERE id = ? AND owner_id = ? AND revision = ? AND content_hash <> ? AND hidden_at IS NULL`,\n} as const;\n\ninterface ForwardFilter {\n  cursor: { createdAt: string; id: string } | null;\n  limit: number;\n}\n\nconst forwardWhere = (column: string, id: string, filter: ForwardFilter): BoundSql => ({\n  parameters: filter.cursor === null ? [] : [filter.cursor.createdAt, filter.cursor.createdAt, filter.cursor.id],\n  sql: filter.cursor === null ? '' : ` AND (${column} < ? OR (${column} = ? AND ${id} < ?))`,\n});\n\nexport function likesPageSql(publisherId: string, filter: ForwardFilter): BoundSql {\n  const cursor = forwardWhere('created_at', 'publication_id', filter);\n  return {\n    parameters: [publisherId, ...cursor.parameters, filter.limit],\n    sql: `SELECT publication_id, created_at FROM likes WHERE publisher_id = ?${cursor.sql}\n      ORDER BY created_at DESC, publication_id DESC LIMIT ?`,\n  };\n}\n\nexport function moderationLogSql(filter: ForwardFilter): BoundSql {\n  const cursor = forwardWhere('created_at', 'id', filter);\n  return {\n    parameters: [...cursor.parameters, filter.limit],\n    sql: `SELECT id, action, collection, operator_id, target_id, created_at FROM moderation_actions\n      WHERE 1=1${cursor.sql} ORDER BY created_at DESC, id DESC LIMIT ?`,\n  };\n}\n\nexport function reportsPageSql(\n  scope: { collection: string; resolved: boolean } | { publisherId: string },\n  filter: ForwardFilter,\n): BoundSql {\n  const cursor = forwardWhere('r.created_at', 'r.id', filter);\n  const operator = 'collection' in scope;\n  return {\n    parameters: [operator ? scope.collection : scope.publisherId, ...cursor.parameters, filter.limit],\n    sql: `SELECT r.*, p.collection, p.title AS entry_title, u.display_name AS reporter_name\n      FROM publication_reports r JOIN publications p ON p.id = r.publication_id\n      JOIN publishers u ON u.id = r.reporter_id\n      WHERE ${operator ? `p.collection = ? AND r.resolved_at IS ${scope.resolved ? 'NOT ' : ''}NULL` : 'r.reporter_id = ?'}\n      ${cursor.sql} ORDER BY r.created_at DESC, r.id DESC LIMIT ?`,\n  };\n}\n\n/** The entry-list keyset boundary: the shared cursor with its sort field resolved. */\nexport interface PublicationCursor {\n  createdAt: string;\n  id: string;\n  likeCount: number;\n}\n\nexport interface PublicationFilter {\n  /** Restrict to one author's publisher id; omit for all authors. */\n  author?: string;\n  collection: string;\n  /** Forward keyset boundary: `createdAt`/`id` plus the liked sort's `likeCount`. */\n  cursor?: PublicationCursor;\n  /** Declared filter values matched with OR; empty matches every entry. */\n  filters?: readonly string[];\n  limit: number;\n  /** Quoted word-prefix terms, normalized before reaching the SQL boundary. */\n  searchMatch?: string;\n  sort: 'liked' | 'recent';\n  /** Declared tag values matched with OR; empty matches every entry. */\n  tags?: readonly string[];\n}\n\nexport interface BoundSql {\n  parameters: (string | number)[];\n  sql: string;\n}\n\n/** Only fixed SQL fragments are combined; all filters and cursor values remain bindings. */\nexport function listPublicationsSql(filter: PublicationFilter): BoundSql {\n  const where: string[] = [];\n  const parameters: (string | number)[] = [];\n  where.push('p.collection = ?');\n  parameters.push(filter.collection);\n  // Public lists never surface operator-hidden entries.\n  where.push('p.hidden_at IS NULL');\n  if (filter.author) {\n    where.push('p.owner_id = ?');\n    parameters.push(filter.author);\n  }\n  if (filter.filters?.length) {\n    where.push(`p.filter_value IN (${filter.filters.map(() => '?').join(', ')})`);\n    parameters.push(...filter.filters);\n  }\n  if (filter.tags?.length) {\n    where.push(`EXISTS (\n      SELECT 1 FROM publication_tags t WHERE t.publication_id = p.id AND t.tag IN (${filter.tags.map(() => '?').join(', ')})\n    )`);\n    parameters.push(...filter.tags);\n  }\n  if (filter.searchMatch) {\n    where.push(`p.rowid IN (\n      SELECT rowid FROM publication_search WHERE publication_search MATCH ?\n    )`);\n    parameters.push(filter.searchMatch);\n  }\n  // Forward-only keyset walk: every list orders DESC and the cursor is the last\n  // row of the previous page.\n  const cursor = filter.cursor;\n  if (cursor) {\n    if (filter.sort === 'liked') {\n      where.push(`(p.like_count < ? OR (p.like_count = ? AND (\n        p.published_at < ? OR (p.published_at = ? AND p.id < ?)\n      )))`);\n      parameters.push(cursor.likeCount, cursor.likeCount, cursor.createdAt, cursor.createdAt, cursor.id);\n    } else {\n      where.push('(p.published_at < ? OR (p.published_at = ? AND p.id < ?))');\n      parameters.push(cursor.createdAt, cursor.createdAt, cursor.id);\n    }\n  }\n  const order =\n    filter.sort === 'liked' ? 'p.like_count DESC, p.published_at DESC, p.id DESC' : 'p.published_at DESC, p.id DESC';\n  parameters.push(filter.limit);\n  return {\n    parameters,\n    sql: `SELECT p.*, u.display_name AS author_name\n      FROM publications p JOIN publishers u ON u.id = p.owner_id\n      ${where.length ? `WHERE ${where.join(' AND ')}` : ''}\n      ORDER BY ${order} LIMIT ?`,\n  };\n}\n\nexport function likedPublicationsSql(publisherId: string, publicationIds: readonly string[]): BoundSql {\n  return {\n    parameters: [publisherId, ...publicationIds],\n    sql: `SELECT publication_id FROM likes WHERE publisher_id = ?\n      AND publication_id IN (${publicationIds.map(() => '?').join(', ') || 'NULL'})`,\n  };\n}\n"],"mappings":"AAQA,IAAa,EAAM,CACjB,aAAc;8EAEd,UAAW;;sEAGX,aAAc;gGAEd,gBAAiB,sCACjB,uBAAwB,0DACxB,eAAgB,yDAChB,kBAAmB,qDACnB,gBAAiB;2DAEjB,WAAY;;0DAGZ,kBAAmB;;;;;;;;;8DAUnB,gBAAiB;;;6CAIjB,aAAc;;yDAGd,cAAe;;;;8DAKf,UAAW,oLACX,gBAAiB;;+FAIjB,YAAa;;iEAIb,eAAgB;oGAEhB,iBAAkB;;oEAGlB,UAAW,uFACX,cAAe,yCACf,WAAY;yGAEZ,kBAAmB,yDACnB,qBAAsB,2DACtB,gBAAiB,4EACjB,WAAY;yCAEZ,QAAS;8DAET,cAAe;;0DAGf,eAAgB,gGAChB,cAAe;kGAGf,cAAe,0CACf,kBAAmB;+DAEnB,kBAAmB;;;+FAIrB,EAOM,cAAgB,EAAgB,EAAY,KAAqC,CACrF,WAAY,EAAO,SAAW,KAAO,CAAC,EAAI,CAAC,EAAO,OAAO,UAAW,EAAO,OAAO,UAAW,EAAO,OAAO,EAAE,EAC7G,IAAK,EAAO,SAAW,KAAO,GAAK,SAAS,EAAO,WAAW,EAAO,WAAW,EAAG,OACrF,GAEA,SAAgB,aAAa,EAAqB,EAAiC,CACjF,IAAM,EAAS,aAAa,aAAc,iBAAkB,CAAM,EAClE,MAAO,CACL,WAAY,CAAC,EAAa,GAAG,EAAO,WAAY,EAAO,KAAK,EAC5D,IAAK,sEAAsE,EAAO,IAAI;4DAExF,CACF,CAEA,SAAgB,iBAAiB,EAAiC,CAChE,IAAM,EAAS,aAAa,aAAc,KAAM,CAAM,EACtD,MAAO,CACL,WAAY,CAAC,GAAG,EAAO,WAAY,EAAO,KAAK,EAC/C,IAAK;iBACQ,EAAO,IAAI,2CAC1B,CACF,CAEA,SAAgB,eACd,EACA,EACU,CACV,IAAM,EAAS,aAAa,eAAgB,OAAQ,CAAM,EACpD,EAAW,eAAgB,EACjC,MAAO,CACL,WAAY,CAAC,EAAW,EAAM,WAAa,EAAM,YAAa,GAAG,EAAO,WAAY,EAAO,KAAK,EAChG,IAAK;;;cAGK,EAAW,yCAAyC,EAAM,SAAW,OAAS,GAAG,MAAQ,oBAAoB;QACnH,EAAO,IAAI,+CACjB,CACF,CA+BA,SAAgB,oBAAoB,EAAqC,CACvE,IAAM,EAAkB,CAAC,EACnB,EAAkC,CAAC,EACzC,EAAM,KAAK,kBAAkB,EAC7B,EAAW,KAAK,EAAO,UAAU,EAEjC,EAAM,KAAK,qBAAqB,EAC5B,EAAO,SACT,EAAM,KAAK,gBAAgB,EAC3B,EAAW,KAAK,EAAO,MAAM,GAE3B,EAAO,SAAS,SAClB,EAAM,KAAK,sBAAsB,EAAO,QAAQ,QAAU,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,EAC5E,EAAW,KAAK,GAAG,EAAO,OAAO,GAE/B,EAAO,MAAM,SACf,EAAM,KAAK;qFACsE,EAAO,KAAK,QAAU,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE;MACrH,EACF,EAAW,KAAK,GAAG,EAAO,IAAI,GAE5B,EAAO,cACT,EAAM,KAAK;;MAET,EACF,EAAW,KAAK,EAAO,WAAW,GAIpC,IAAM,EAAS,EAAO,OAClB,IACE,EAAO,OAAS,SAClB,EAAM,KAAK;;UAEP,EACJ,EAAW,KAAK,EAAO,UAAW,EAAO,UAAW,EAAO,UAAW,EAAO,UAAW,EAAO,EAAE,IAEjG,EAAM,KAAK,2DAA2D,EACtE,EAAW,KAAK,EAAO,UAAW,EAAO,UAAW,EAAO,EAAE,IAGjE,IAAM,EACJ,EAAO,OAAS,QAAU,oDAAsD,iCAElF,OADA,EAAW,KAAK,EAAO,KAAK,EACrB,CACL,aACA,IAAK;;QAED,EAAM,OAAS,SAAS,EAAM,KAAK,OAAO,IAAM,GAAG;iBAC1C,EAAM,SACrB,CACF,CAEA,SAAgB,qBAAqB,EAAqB,EAA6C,CACrG,MAAO,CACL,WAAY,CAAC,EAAa,GAAG,CAAc,EAC3C,IAAK;+BACsB,EAAe,QAAU,GAAG,CAAC,CAAC,KAAK,IAAI,GAAK,OAAO,EAChF,CACF"}
+{"version":3,"file":"sql.cjs","names":["SQL","filter","column","id","cursor","publisherId","operator","scope","where","parameters","order","publicationIds"],"sources":["../../src/worker/sql.ts"],"sourcesContent":["/**\n * The runtime SQL the package-owned migration (`packages/archive/migrations/`) must\n * serve. The collection dimension is data (`collection` column, `publication_tags`),\n * never DDL. The migration also stamps the storage schema (`archive_schema_meta`,\n * equal to `ARCHIVE_SCHEMA_VERSION`), which health reads back.\n */\n\n/** SQL is centralized so every mutation's ownership and no-op predicates are reviewable. */\nexport const SQL = {\n  auditErasure: `INSERT INTO moderation_actions(id, operator_id, action, collection, target_id, created_at)\n    SELECT ?, ?, 'erase-publisher', NULL, id, ? FROM publishers WHERE id = ?`,\n  auditHide: `INSERT INTO moderation_actions(id, operator_id, action, collection, target_id, created_at)\n    SELECT ?, ?, ?, collection, id, ? FROM publications\n    WHERE id = ? AND collection = ? AND (hidden_at IS NOT NULL) <> ?`,\n  auditRemoval: `INSERT INTO moderation_actions(id, operator_id, action, collection, target_id, created_at)\n    SELECT ?, ?, 'remove', collection, id, ? FROM publications WHERE id = ? AND collection = ?`,\n  deletePublisher: `DELETE FROM publishers WHERE id = ?`,\n  deleteSubjectPublisher: `DELETE FROM publishers WHERE issuer = ? AND subject = ?`,\n  expireRequests: `DELETE FROM publication_requests WHERE expires_at <= ?`,\n  expireRevocations: `DELETE FROM revoked_subjects WHERE expires_at <= ?`,\n  hidePublication: `UPDATE publications SET hidden_at = ?\n    WHERE id = ? AND collection = ? AND hidden_at IS NULL`,\n  insertLike: `INSERT INTO likes(publication_id, publisher_id, created_at)\n    SELECT id, ?, ? FROM publications WHERE id = ? AND hidden_at IS NULL\n    ON CONFLICT(publication_id, publisher_id) DO NOTHING`,\n  insertPublication: `INSERT INTO publications(\n      id, owner_id, collection, client_key, schema_version, content_version, payload_json,\n      content_hash, filter_value, title, tags_json, published_at, updated_at\n    ) SELECT ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?\n    WHERE (SELECT count(*) FROM publications WHERE owner_id = ? AND collection = ?) < ?\n      AND NOT EXISTS (\n        SELECT 1 FROM publication_requests\n        WHERE owner_id = ? AND collection = ? AND client_key = ? AND expires_at > ?\n      )\n    ON CONFLICT(collection, owner_id, client_key) DO NOTHING`,\n  insertPublisher: `INSERT INTO publishers(id, issuer, subject, display_name, created_at)\n    SELECT ?, ?, ?, ?, ?\n    WHERE NOT EXISTS (SELECT 1 FROM revoked_subjects WHERE issuer = ? AND subject = ? AND expires_at > ?)\n    ON CONFLICT(issuer, subject) DO NOTHING`,\n  insertReport: `INSERT INTO publication_reports(id, publication_id, reporter_id, reason, created_at)\n    SELECT ?, id, ?, ?, ? FROM publications WHERE id = ? AND collection = ? AND hidden_at IS NULL\n    ON CONFLICT(publication_id, reporter_id) DO NOTHING`,\n  insertRequest: `INSERT INTO publication_requests(\n      owner_id, collection, client_key, payload_hash, publication_id, created_at, expires_at\n    ) SELECT ?, ?, ?, ?, p.id, ?, ? FROM publications p\n    WHERE p.owner_id = ? AND p.collection = ? AND p.client_key = ? AND p.content_hash = ?\n    ON CONFLICT(owner_id, collection, client_key) DO NOTHING`,\n  likeState: `SELECT p.id, p.like_count, EXISTS(SELECT 1 FROM likes l WHERE l.publication_id = p.id AND l.publisher_id = ?) AS liked FROM publications p WHERE p.id = ? AND p.hidden_at IS NULL`,\n  ownPublications: `SELECT p.*, u.display_name AS author_name\n    FROM publications p JOIN publishers u ON u.id = p.owner_id\n    WHERE p.owner_id = ? AND p.collection = ? ORDER BY p.published_at DESC, p.id DESC LIMIT ?`,\n  /** The public detail row: a hidden entry is invisible to everyone but its owner. */\n  publication: `SELECT p.*, u.display_name AS author_name\n    FROM publications p JOIN publishers u ON u.id = p.owner_id\n    WHERE p.id = ? AND p.collection = ? AND p.hidden_at IS NULL`,\n  /** The owner's row regardless of moderation state: update/delete decisions need it. */\n  publicationAny: `SELECT p.*, u.display_name AS author_name\n    FROM publications p JOIN publishers u ON u.id = p.owner_id WHERE p.id = ? AND p.collection = ?`,\n  publicationByKey: `SELECT p.*, u.display_name AS author_name\n    FROM publications p JOIN publishers u ON u.id = p.owner_id\n    WHERE p.owner_id = ? AND p.collection = ? AND p.client_key = ?`,\n  publisher: `SELECT id, display_name, created_at FROM publishers WHERE issuer = ? AND subject = ?`,\n  publisherById: `SELECT id FROM publishers WHERE id = ?`,\n  removeLike: `DELETE FROM likes WHERE publication_id = ? AND publisher_id = ?\n    AND EXISTS (SELECT 1 FROM publications p WHERE p.id = likes.publication_id AND p.hidden_at IS NULL)`,\n  removePublication: `DELETE FROM publications WHERE id = ? AND owner_id = ?`,\n  removePublicationAny: `DELETE FROM publications WHERE id = ? AND collection = ?`,\n  renamePublisher: `UPDATE publishers SET display_name = ? WHERE id = ? AND display_name <> ?`,\n  reportById: `SELECT r.id FROM publication_reports r JOIN publications p ON p.id = r.publication_id\n    WHERE r.id = ? AND p.collection = ?`,\n  request: `SELECT payload_hash, publication_id, expires_at FROM publication_requests\n    WHERE owner_id = ? AND collection = ? AND client_key = ?`,\n  resolveReport: `UPDATE publication_reports SET resolved_at = ?\n    WHERE id = ? AND resolved_at IS NULL AND publication_id IN\n      (SELECT id FROM publications WHERE collection = ?)`,\n  revokedSubject: `SELECT 1 AS revoked FROM revoked_subjects WHERE issuer = ? AND subject = ? AND expires_at > ?`,\n  revokeSubject: `INSERT INTO revoked_subjects(issuer, subject, expires_at) VALUES (?, ?, ?)\n    ON CONFLICT(issuer, subject) DO UPDATE SET expires_at = MAX(expires_at, excluded.expires_at)`,\n  /** The storage schema stamp the final migration writes; health reads it back. */\n  schemaVersion: `SELECT applied FROM archive_schema_meta`,\n  unhidePublication: `UPDATE publications SET hidden_at = NULL\n    WHERE id = ? AND collection = ? AND hidden_at IS NOT NULL`,\n  updatePublication: `UPDATE publications SET\n      schema_version = ?, content_version = ?, payload_json = ?, content_hash = ?,\n      filter_value = ?, title = ?, tags_json = ?, updated_at = ?, revision = revision + 1\n    WHERE id = ? AND owner_id = ? AND revision = ? AND content_hash <> ? AND hidden_at IS NULL`,\n} as const;\n\ninterface ForwardFilter {\n  cursor: { createdAt: string; id: string } | null;\n  limit: number;\n}\n\nconst forwardWhere = (column: string, id: string, filter: ForwardFilter): BoundSql => ({\n  parameters: filter.cursor === null ? [] : [filter.cursor.createdAt, filter.cursor.createdAt, filter.cursor.id],\n  sql: filter.cursor === null ? '' : ` AND (${column} < ? OR (${column} = ? AND ${id} < ?))`,\n});\n\nexport function likesPageSql(publisherId: string, filter: ForwardFilter): BoundSql {\n  const cursor = forwardWhere('created_at', 'publication_id', filter);\n  return {\n    parameters: [publisherId, ...cursor.parameters, filter.limit],\n    sql: `SELECT publication_id, created_at FROM likes WHERE publisher_id = ?${cursor.sql}\n      ORDER BY created_at DESC, publication_id DESC LIMIT ?`,\n  };\n}\n\nexport function moderationLogSql(filter: ForwardFilter): BoundSql {\n  const cursor = forwardWhere('created_at', 'id', filter);\n  return {\n    parameters: [...cursor.parameters, filter.limit],\n    sql: `SELECT id, action, collection, operator_id, target_id, created_at FROM moderation_actions\n      WHERE 1=1${cursor.sql} ORDER BY created_at DESC, id DESC LIMIT ?`,\n  };\n}\n\nexport function reportsPageSql(\n  scope: { collection: string; resolved: boolean } | { publisherId: string },\n  filter: ForwardFilter,\n): BoundSql {\n  const cursor = forwardWhere('r.created_at', 'r.id', filter);\n  const operator = 'collection' in scope;\n  return {\n    parameters: [operator ? scope.collection : scope.publisherId, ...cursor.parameters, filter.limit],\n    sql: `SELECT r.*, p.collection, p.title AS entry_title, u.display_name AS reporter_name\n      FROM publication_reports r JOIN publications p ON p.id = r.publication_id\n      JOIN publishers u ON u.id = r.reporter_id\n      WHERE ${operator ? `p.collection = ? AND r.resolved_at IS ${scope.resolved ? 'NOT ' : ''}NULL` : 'r.reporter_id = ?'}\n      ${cursor.sql} ORDER BY r.created_at DESC, r.id DESC LIMIT ?`,\n  };\n}\n\n/** The entry-list keyset boundary: the shared cursor with its sort field resolved. */\nexport interface PublicationCursor {\n  createdAt: string;\n  id: string;\n  likeCount: number;\n}\n\nexport interface PublicationFilter {\n  /** Restrict to one author's publisher id; omit for all authors. */\n  author?: string;\n  collection: string;\n  /** Forward keyset boundary: `createdAt`/`id` plus the liked sort's `likeCount`. */\n  cursor?: PublicationCursor;\n  /** Declared filter values matched with OR; empty matches every entry. */\n  filters?: readonly string[];\n  limit: number;\n  /** Quoted word-prefix terms, normalized before reaching the SQL boundary. */\n  searchMatch?: string;\n  sort: 'liked' | 'recent';\n  /** Declared tag values matched with OR; empty matches every entry. */\n  tags?: readonly string[];\n}\n\nexport interface BoundSql {\n  parameters: (string | number)[];\n  sql: string;\n}\n\n/** Only fixed SQL fragments are combined; all filters and cursor values remain bindings. */\nexport function listPublicationsSql(filter: PublicationFilter): BoundSql {\n  const where: string[] = [];\n  const parameters: (string | number)[] = [];\n  where.push('p.collection = ?');\n  parameters.push(filter.collection);\n  // Public lists never surface operator-hidden entries.\n  where.push('p.hidden_at IS NULL');\n  if (filter.author) {\n    where.push('p.owner_id = ?');\n    parameters.push(filter.author);\n  }\n  if (filter.filters?.length) {\n    where.push(`p.filter_value IN (${filter.filters.map(() => '?').join(', ')})`);\n    parameters.push(...filter.filters);\n  }\n  if (filter.tags?.length) {\n    where.push(`EXISTS (\n      SELECT 1 FROM publication_tags t WHERE t.publication_id = p.id AND t.tag IN (${filter.tags.map(() => '?').join(', ')})\n    )`);\n    parameters.push(...filter.tags);\n  }\n  if (filter.searchMatch) {\n    where.push(`p.rowid IN (\n      SELECT rowid FROM publication_search WHERE publication_search MATCH ?\n    )`);\n    parameters.push(filter.searchMatch);\n  }\n  // Forward-only keyset walk: every list orders DESC and the cursor is the last\n  // row of the previous page.\n  const cursor = filter.cursor;\n  if (cursor) {\n    if (filter.sort === 'liked') {\n      where.push(`(p.like_count < ? OR (p.like_count = ? AND (\n        p.published_at < ? OR (p.published_at = ? AND p.id < ?)\n      )))`);\n      parameters.push(cursor.likeCount, cursor.likeCount, cursor.createdAt, cursor.createdAt, cursor.id);\n    } else {\n      where.push('(p.published_at < ? OR (p.published_at = ? AND p.id < ?))');\n      parameters.push(cursor.createdAt, cursor.createdAt, cursor.id);\n    }\n  }\n  const order =\n    filter.sort === 'liked' ? 'p.like_count DESC, p.published_at DESC, p.id DESC' : 'p.published_at DESC, p.id DESC';\n  parameters.push(filter.limit);\n  return {\n    parameters,\n    sql: `SELECT p.*, u.display_name AS author_name\n      FROM publications p JOIN publishers u ON u.id = p.owner_id\n      ${where.length ? `WHERE ${where.join(' AND ')}` : ''}\n      ORDER BY ${order} LIMIT ?`,\n  };\n}\n\nexport function likedPublicationsSql(publisherId: string, publicationIds: readonly string[]): BoundSql {\n  return {\n    parameters: [publisherId, ...publicationIds],\n    sql: `SELECT publication_id FROM likes WHERE publisher_id = ?\n      AND publication_id IN (${publicationIds.map(() => '?').join(', ') || 'NULL'})`,\n  };\n}\n"],"mappings":"AAQA,IAAaA,EAAM,CACjB,aAAc;8EAEd,UAAW;;sEAGX,aAAc;gGAEd,gBAAiB,sCACjB,uBAAwB,0DACxB,eAAgB,yDAChB,kBAAmB,qDACnB,gBAAiB;2DAEjB,WAAY;;0DAGZ,kBAAmB;;;;;;;;;8DAUnB,gBAAiB;;;6CAIjB,aAAc;;yDAGd,cAAe;;;;8DAKf,UAAW,oLACX,gBAAiB;;+FAIjB,YAAa;;iEAIb,eAAgB;oGAEhB,iBAAkB;;oEAGlB,UAAW,uFACX,cAAe,yCACf,WAAY;yGAEZ,kBAAmB,yDACnB,qBAAsB,2DACtB,gBAAiB,4EACjB,WAAY;yCAEZ,QAAS;8DAET,cAAe;;0DAGf,eAAgB,gGAChB,cAAe;kGAGf,cAAe,0CACf,kBAAmB;+DAEnB,kBAAmB;;;+FAIrB,EAOM,cAAgB,EAAgB,EAAY,KAAqC,CACrF,WAAYC,EAAO,SAAW,KAAO,CAAC,EAAI,CAACA,EAAO,OAAO,UAAWA,EAAO,OAAO,UAAWA,EAAO,OAAO,EAAE,EAC7G,IAAKA,EAAO,SAAW,KAAO,GAAK,SAASC,EAAO,WAAWA,EAAO,WAAWC,EAAG,OACrF,GAEA,SAAgB,aAAa,EAAqB,EAAiC,CACjF,IAAMC,EAAS,aAAa,aAAc,iBAAkBH,CAAM,EAClE,MAAO,CACL,WAAY,CAACI,EAAa,GAAGD,EAAO,WAAYH,EAAO,KAAK,EAC5D,IAAK,sEAAsEG,EAAO,IAAI;4DAExF,CACF,CAEA,SAAgB,iBAAiB,EAAiC,CAChE,IAAMA,EAAS,aAAa,aAAc,KAAMH,CAAM,EACtD,MAAO,CACL,WAAY,CAAC,GAAGG,EAAO,WAAYH,EAAO,KAAK,EAC/C,IAAK;iBACQG,EAAO,IAAI,2CAC1B,CACF,CAEA,SAAgB,eACd,EACA,EACU,CACV,IAAMA,EAAS,aAAa,eAAgB,OAAQH,CAAM,EACpDK,EAAW,eAAgBC,EACjC,MAAO,CACL,WAAY,CAACD,EAAWC,EAAM,WAAaA,EAAM,YAAa,GAAGH,EAAO,WAAYH,EAAO,KAAK,EAChG,IAAK;;;cAGKK,EAAW,yCAAyCC,EAAM,SAAW,OAAS,GAAG,MAAQ,oBAAoB;QACnHH,EAAO,IAAI,+CACjB,CACF,CA+BA,SAAgB,oBAAoB,EAAqC,CACvE,IAAMI,EAAkB,CAAC,EACnBC,EAAkC,CAAC,EACzCD,EAAM,KAAK,kBAAkB,EAC7BC,EAAW,KAAKR,EAAO,UAAU,EAEjCO,EAAM,KAAK,qBAAqB,EAC5BP,EAAO,SACTO,EAAM,KAAK,gBAAgB,EAC3BC,EAAW,KAAKR,EAAO,MAAM,GAE3BA,EAAO,SAAS,SAClBO,EAAM,KAAK,sBAAsBP,EAAO,QAAQ,QAAU,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,EAC5EQ,EAAW,KAAK,GAAGR,EAAO,OAAO,GAE/BA,EAAO,MAAM,SACfO,EAAM,KAAK;qFACsEP,EAAO,KAAK,QAAU,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE;MACrH,EACFQ,EAAW,KAAK,GAAGR,EAAO,IAAI,GAE5BA,EAAO,cACTO,EAAM,KAAK;;MAET,EACFC,EAAW,KAAKR,EAAO,WAAW,GAIpC,IAAMG,EAASH,EAAO,OAClBG,IACEH,EAAO,OAAS,SAClBO,EAAM,KAAK;;UAEP,EACJC,EAAW,KAAKL,EAAO,UAAWA,EAAO,UAAWA,EAAO,UAAWA,EAAO,UAAWA,EAAO,EAAE,IAEjGI,EAAM,KAAK,2DAA2D,EACtEC,EAAW,KAAKL,EAAO,UAAWA,EAAO,UAAWA,EAAO,EAAE,IAGjE,IAAMM,EACJT,EAAO,OAAS,QAAU,oDAAsD,iCAElF,OADAQ,EAAW,KAAKR,EAAO,KAAK,EACrB,CACL,aACA,IAAK;;QAEDO,EAAM,OAAS,SAASA,EAAM,KAAK,OAAO,IAAM,GAAG;iBAC1CE,EAAM,SACrB,CACF,CAEA,SAAgB,qBAAqB,EAAqB,EAA6C,CACrG,MAAO,CACL,WAAY,CAACL,EAAa,GAAGM,CAAc,EAC3C,IAAK;+BACsBA,EAAe,QAAU,GAAG,CAAC,CAAC,KAAK,IAAI,GAAK,OAAO,EAChF,CACF,C"}

package/dist/worker/sql.js

@@ -1,60 +1,104 @@
-var e={auditErasure:`INSERT INTO moderation_actions(id, operator_id, action, collection, target_id, created_at)
-    SELECT ?, ?, 'erase-publisher', NULL, id, ? FROM publishers WHERE id = ?`,auditHide:`INSERT INTO moderation_actions(id, operator_id, action, collection, target_id, created_at)
-    SELECT ?, ?, ?, collection, id, ? FROM publications
-    WHERE id = ? AND collection = ? AND (hidden_at IS NOT NULL) <> ?`,auditRemoval:`INSERT INTO moderation_actions(id, operator_id, action, collection, target_id, created_at)
-    SELECT ?, ?, 'remove', collection, id, ? FROM publications WHERE id = ? AND collection = ?`,deletePublisher:`DELETE FROM publishers WHERE id = ?`,deleteSubjectPublisher:`DELETE FROM publishers WHERE issuer = ? AND subject = ?`,expireRequests:`DELETE FROM publication_requests WHERE expires_at <= ?`,expireRevocations:`DELETE FROM revoked_subjects WHERE expires_at <= ?`,hidePublication:`UPDATE publications SET hidden_at = ?
-    WHERE id = ? AND collection = ? AND hidden_at IS NULL`,insertLike:`INSERT INTO likes(publication_id, publisher_id, created_at)
-    SELECT id, ?, ? FROM publications WHERE id = ? AND hidden_at IS NULL
-    ON CONFLICT(publication_id, publisher_id) DO NOTHING`,insertPublication:`INSERT INTO publications(
-      id, owner_id, collection, client_key, schema_version, content_version, payload_json,
-      content_hash, filter_value, title, tags_json, published_at, updated_at
-    ) SELECT ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?
-    WHERE (SELECT count(*) FROM publications WHERE owner_id = ? AND collection = ?) < ?
-      AND NOT EXISTS (
-        SELECT 1 FROM publication_requests
-        WHERE owner_id = ? AND collection = ? AND client_key = ? AND expires_at > ?
-      )
-    ON CONFLICT(collection, owner_id, client_key) DO NOTHING`,insertPublisher:`INSERT INTO publishers(id, issuer, subject, display_name, created_at)
-    SELECT ?, ?, ?, ?, ?
-    WHERE NOT EXISTS (SELECT 1 FROM revoked_subjects WHERE issuer = ? AND subject = ? AND expires_at > ?)
-    ON CONFLICT(issuer, subject) DO NOTHING`,insertReport:`INSERT INTO publication_reports(id, publication_id, reporter_id, reason, created_at)
-    SELECT ?, id, ?, ?, ? FROM publications WHERE id = ? AND collection = ? AND hidden_at IS NULL
-    ON CONFLICT(publication_id, reporter_id) DO NOTHING`,insertRequest:`INSERT INTO publication_requests(
-      owner_id, collection, client_key, payload_hash, publication_id, created_at, expires_at
-    ) SELECT ?, ?, ?, ?, p.id, ?, ? FROM publications p
-    WHERE p.owner_id = ? AND p.collection = ? AND p.client_key = ? AND p.content_hash = ?
-    ON CONFLICT(owner_id, collection, client_key) DO NOTHING`,likeState:`SELECT p.id, p.like_count, EXISTS(SELECT 1 FROM likes l WHERE l.publication_id = p.id AND l.publisher_id = ?) AS liked FROM publications p WHERE p.id = ? AND p.hidden_at IS NULL`,ownPublications:`SELECT p.*, u.display_name AS author_name
-    FROM publications p JOIN publishers u ON u.id = p.owner_id
-    WHERE p.owner_id = ? AND p.collection = ? ORDER BY p.published_at DESC, p.id DESC LIMIT ?`,publication:`SELECT p.*, u.display_name AS author_name
-    FROM publications p JOIN publishers u ON u.id = p.owner_id
-    WHERE p.id = ? AND p.collection = ? AND p.hidden_at IS NULL`,publicationAny:`SELECT p.*, u.display_name AS author_name
-    FROM publications p JOIN publishers u ON u.id = p.owner_id WHERE p.id = ? AND p.collection = ?`,publicationByKey:`SELECT p.*, u.display_name AS author_name
-    FROM publications p JOIN publishers u ON u.id = p.owner_id
-    WHERE p.owner_id = ? AND p.collection = ? AND p.client_key = ?`,publisher:`SELECT id, display_name, created_at FROM publishers WHERE issuer = ? AND subject = ?`,publisherById:`SELECT id FROM publishers WHERE id = ?`,removeLike:`DELETE FROM likes WHERE publication_id = ? AND publisher_id = ?
-    AND EXISTS (SELECT 1 FROM publications p WHERE p.id = likes.publication_id AND p.hidden_at IS NULL)`,removePublication:`DELETE FROM publications WHERE id = ? AND owner_id = ?`,removePublicationAny:`DELETE FROM publications WHERE id = ? AND collection = ?`,renamePublisher:`UPDATE publishers SET display_name = ? WHERE id = ? AND display_name <> ?`,reportById:`SELECT r.id FROM publication_reports r JOIN publications p ON p.id = r.publication_id
-    WHERE r.id = ? AND p.collection = ?`,request:`SELECT payload_hash, publication_id, expires_at FROM publication_requests
-    WHERE owner_id = ? AND collection = ? AND client_key = ?`,resolveReport:`UPDATE publication_reports SET resolved_at = ?
-    WHERE id = ? AND resolved_at IS NULL AND publication_id IN
-      (SELECT id FROM publications WHERE collection = ?)`,revokedSubject:`SELECT 1 AS revoked FROM revoked_subjects WHERE issuer = ? AND subject = ? AND expires_at > ?`,revokeSubject:`INSERT INTO revoked_subjects(issuer, subject, expires_at) VALUES (?, ?, ?)
-    ON CONFLICT(issuer, subject) DO UPDATE SET expires_at = MAX(expires_at, excluded.expires_at)`,schemaVersion:`SELECT applied FROM archive_schema_meta`,unhidePublication:`UPDATE publications SET hidden_at = NULL
-    WHERE id = ? AND collection = ? AND hidden_at IS NOT NULL`,updatePublication:`UPDATE publications SET
-      schema_version = ?, content_version = ?, payload_json = ?, content_hash = ?,
-      filter_value = ?, title = ?, tags_json = ?, updated_at = ?, revision = revision + 1
-    WHERE id = ? AND owner_id = ? AND revision = ? AND content_hash <> ? AND hidden_at IS NULL`},forwardWhere=(e,t,n)=>({parameters:n.cursor===null?[]:[n.cursor.createdAt,n.cursor.createdAt,n.cursor.id],sql:n.cursor===null?``:` AND (${e} < ? OR (${e} = ? AND ${t} < ?))`});function likesPageSql(e,t){let n=forwardWhere(`created_at`,`publication_id`,t);return{parameters:[e,...n.parameters,t.limit],sql:`SELECT publication_id, created_at FROM likes WHERE publisher_id = ?${n.sql}
-      ORDER BY created_at DESC, publication_id DESC LIMIT ?`}}function moderationLogSql(e){let t=forwardWhere(`created_at`,`id`,e);return{parameters:[...t.parameters,e.limit],sql:`SELECT id, action, collection, operator_id, target_id, created_at FROM moderation_actions
-      WHERE 1=1${t.sql} ORDER BY created_at DESC, id DESC LIMIT ?`}}function reportsPageSql(e,t){let n=forwardWhere(`r.created_at`,`r.id`,t),r=`collection`in e;return{parameters:[r?e.collection:e.publisherId,...n.parameters,t.limit],sql:`SELECT r.*, p.collection, p.title AS entry_title, u.display_name AS reporter_name
+//#region src/worker/sql.ts
+var e = {
+	auditErasure: "INSERT INTO moderation_actions(id, operator_id, action, collection, target_id, created_at)\n    SELECT ?, ?, 'erase-publisher', NULL, id, ? FROM publishers WHERE id = ?",
+	auditHide: "INSERT INTO moderation_actions(id, operator_id, action, collection, target_id, created_at)\n    SELECT ?, ?, ?, collection, id, ? FROM publications\n    WHERE id = ? AND collection = ? AND (hidden_at IS NOT NULL) <> ?",
+	auditRemoval: "INSERT INTO moderation_actions(id, operator_id, action, collection, target_id, created_at)\n    SELECT ?, ?, 'remove', collection, id, ? FROM publications WHERE id = ? AND collection = ?",
+	deletePublisher: "DELETE FROM publishers WHERE id = ?",
+	deleteSubjectPublisher: "DELETE FROM publishers WHERE issuer = ? AND subject = ?",
+	expireRequests: "DELETE FROM publication_requests WHERE expires_at <= ?",
+	expireRevocations: "DELETE FROM revoked_subjects WHERE expires_at <= ?",
+	hidePublication: "UPDATE publications SET hidden_at = ?\n    WHERE id = ? AND collection = ? AND hidden_at IS NULL",
+	insertLike: "INSERT INTO likes(publication_id, publisher_id, created_at)\n    SELECT id, ?, ? FROM publications WHERE id = ? AND hidden_at IS NULL\n    ON CONFLICT(publication_id, publisher_id) DO NOTHING",
+	insertPublication: "INSERT INTO publications(\n      id, owner_id, collection, client_key, schema_version, content_version, payload_json,\n      content_hash, filter_value, title, tags_json, published_at, updated_at\n    ) SELECT ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?\n    WHERE (SELECT count(*) FROM publications WHERE owner_id = ? AND collection = ?) < ?\n      AND NOT EXISTS (\n        SELECT 1 FROM publication_requests\n        WHERE owner_id = ? AND collection = ? AND client_key = ? AND expires_at > ?\n      )\n    ON CONFLICT(collection, owner_id, client_key) DO NOTHING",
+	insertPublisher: "INSERT INTO publishers(id, issuer, subject, display_name, created_at)\n    SELECT ?, ?, ?, ?, ?\n    WHERE NOT EXISTS (SELECT 1 FROM revoked_subjects WHERE issuer = ? AND subject = ? AND expires_at > ?)\n    ON CONFLICT(issuer, subject) DO NOTHING",
+	insertReport: "INSERT INTO publication_reports(id, publication_id, reporter_id, reason, created_at)\n    SELECT ?, id, ?, ?, ? FROM publications WHERE id = ? AND collection = ? AND hidden_at IS NULL\n    ON CONFLICT(publication_id, reporter_id) DO NOTHING",
+	insertRequest: "INSERT INTO publication_requests(\n      owner_id, collection, client_key, payload_hash, publication_id, created_at, expires_at\n    ) SELECT ?, ?, ?, ?, p.id, ?, ? FROM publications p\n    WHERE p.owner_id = ? AND p.collection = ? AND p.client_key = ? AND p.content_hash = ?\n    ON CONFLICT(owner_id, collection, client_key) DO NOTHING",
+	likeState: "SELECT p.id, p.like_count, EXISTS(SELECT 1 FROM likes l WHERE l.publication_id = p.id AND l.publisher_id = ?) AS liked FROM publications p WHERE p.id = ? AND p.hidden_at IS NULL",
+	ownPublications: "SELECT p.*, u.display_name AS author_name\n    FROM publications p JOIN publishers u ON u.id = p.owner_id\n    WHERE p.owner_id = ? AND p.collection = ? ORDER BY p.published_at DESC, p.id DESC LIMIT ?",
+	publication: "SELECT p.*, u.display_name AS author_name\n    FROM publications p JOIN publishers u ON u.id = p.owner_id\n    WHERE p.id = ? AND p.collection = ? AND p.hidden_at IS NULL",
+	publicationAny: "SELECT p.*, u.display_name AS author_name\n    FROM publications p JOIN publishers u ON u.id = p.owner_id WHERE p.id = ? AND p.collection = ?",
+	publicationByKey: "SELECT p.*, u.display_name AS author_name\n    FROM publications p JOIN publishers u ON u.id = p.owner_id\n    WHERE p.owner_id = ? AND p.collection = ? AND p.client_key = ?",
+	publisher: "SELECT id, display_name, created_at FROM publishers WHERE issuer = ? AND subject = ?",
+	publisherById: "SELECT id FROM publishers WHERE id = ?",
+	removeLike: "DELETE FROM likes WHERE publication_id = ? AND publisher_id = ?\n    AND EXISTS (SELECT 1 FROM publications p WHERE p.id = likes.publication_id AND p.hidden_at IS NULL)",
+	removePublication: "DELETE FROM publications WHERE id = ? AND owner_id = ?",
+	removePublicationAny: "DELETE FROM publications WHERE id = ? AND collection = ?",
+	renamePublisher: "UPDATE publishers SET display_name = ? WHERE id = ? AND display_name <> ?",
+	reportById: "SELECT r.id FROM publication_reports r JOIN publications p ON p.id = r.publication_id\n    WHERE r.id = ? AND p.collection = ?",
+	request: "SELECT payload_hash, publication_id, expires_at FROM publication_requests\n    WHERE owner_id = ? AND collection = ? AND client_key = ?",
+	resolveReport: "UPDATE publication_reports SET resolved_at = ?\n    WHERE id = ? AND resolved_at IS NULL AND publication_id IN\n      (SELECT id FROM publications WHERE collection = ?)",
+	revokedSubject: "SELECT 1 AS revoked FROM revoked_subjects WHERE issuer = ? AND subject = ? AND expires_at > ?",
+	revokeSubject: "INSERT INTO revoked_subjects(issuer, subject, expires_at) VALUES (?, ?, ?)\n    ON CONFLICT(issuer, subject) DO UPDATE SET expires_at = MAX(expires_at, excluded.expires_at)",
+	schemaVersion: "SELECT applied FROM archive_schema_meta",
+	unhidePublication: "UPDATE publications SET hidden_at = NULL\n    WHERE id = ? AND collection = ? AND hidden_at IS NOT NULL",
+	updatePublication: "UPDATE publications SET\n      schema_version = ?, content_version = ?, payload_json = ?, content_hash = ?,\n      filter_value = ?, title = ?, tags_json = ?, updated_at = ?, revision = revision + 1\n    WHERE id = ? AND owner_id = ? AND revision = ? AND content_hash <> ? AND hidden_at IS NULL"
+}, forwardWhere = (e, t, n) => ({
+	parameters: n.cursor === null ? [] : [
+		n.cursor.createdAt,
+		n.cursor.createdAt,
+		n.cursor.id
+	],
+	sql: n.cursor === null ? "" : ` AND (${e} < ? OR (${e} = ? AND ${t} < ?))`
+});
+function likesPageSql(e, t) {
+	let n = forwardWhere("created_at", "publication_id", t);
+	return {
+		parameters: [
+			e,
+			...n.parameters,
+			t.limit
+		],
+		sql: `SELECT publication_id, created_at FROM likes WHERE publisher_id = ?${n.sql}
+      ORDER BY created_at DESC, publication_id DESC LIMIT ?`
+	};
+}
+function moderationLogSql(e) {
+	let t = forwardWhere("created_at", "id", e);
+	return {
+		parameters: [...t.parameters, e.limit],
+		sql: `SELECT id, action, collection, operator_id, target_id, created_at FROM moderation_actions
+      WHERE 1=1${t.sql} ORDER BY created_at DESC, id DESC LIMIT ?`
+	};
+}
+function reportsPageSql(e, t) {
+	let n = forwardWhere("r.created_at", "r.id", t), r = "collection" in e;
+	return {
+		parameters: [
+			r ? e.collection : e.publisherId,
+			...n.parameters,
+			t.limit
+		],
+		sql: `SELECT r.*, p.collection, p.title AS entry_title, u.display_name AS reporter_name
       FROM publication_reports r JOIN publications p ON p.id = r.publication_id
       JOIN publishers u ON u.id = r.reporter_id
-      WHERE ${r?`p.collection = ? AND r.resolved_at IS ${e.resolved?`NOT `:``}NULL`:`r.reporter_id = ?`}
-      ${n.sql} ORDER BY r.created_at DESC, r.id DESC LIMIT ?`}}function listPublicationsSql(e){let t=[],n=[];t.push(`p.collection = ?`),n.push(e.collection),t.push(`p.hidden_at IS NULL`),e.author&&(t.push(`p.owner_id = ?`),n.push(e.author)),e.filters?.length&&(t.push(`p.filter_value IN (${e.filters.map(()=>`?`).join(`, `)})`),n.push(...e.filters)),e.tags?.length&&(t.push(`EXISTS (
-      SELECT 1 FROM publication_tags t WHERE t.publication_id = p.id AND t.tag IN (${e.tags.map(()=>`?`).join(`, `)})
-    )`),n.push(...e.tags)),e.searchMatch&&(t.push(`p.rowid IN (
-      SELECT rowid FROM publication_search WHERE publication_search MATCH ?
-    )`),n.push(e.searchMatch));let r=e.cursor;r&&(e.sort===`liked`?(t.push(`(p.like_count < ? OR (p.like_count = ? AND (
-        p.published_at < ? OR (p.published_at = ? AND p.id < ?)
-      )))`),n.push(r.likeCount,r.likeCount,r.createdAt,r.createdAt,r.id)):(t.push(`(p.published_at < ? OR (p.published_at = ? AND p.id < ?))`),n.push(r.createdAt,r.createdAt,r.id)));let i=e.sort===`liked`?`p.like_count DESC, p.published_at DESC, p.id DESC`:`p.published_at DESC, p.id DESC`;return n.push(e.limit),{parameters:n,sql:`SELECT p.*, u.display_name AS author_name
+      WHERE ${r ? `p.collection = ? AND r.resolved_at IS ${e.resolved ? "NOT " : ""}NULL` : "r.reporter_id = ?"}
+      ${n.sql} ORDER BY r.created_at DESC, r.id DESC LIMIT ?`
+	};
+}
+function listPublicationsSql(e) {
+	let t = [], n = [];
+	t.push("p.collection = ?"), n.push(e.collection), t.push("p.hidden_at IS NULL"), e.author && (t.push("p.owner_id = ?"), n.push(e.author)), e.filters?.length && (t.push(`p.filter_value IN (${e.filters.map(() => "?").join(", ")})`), n.push(...e.filters)), e.tags?.length && (t.push(`EXISTS (
+      SELECT 1 FROM publication_tags t WHERE t.publication_id = p.id AND t.tag IN (${e.tags.map(() => "?").join(", ")})
+    )`), n.push(...e.tags)), e.searchMatch && (t.push("p.rowid IN (\n      SELECT rowid FROM publication_search WHERE publication_search MATCH ?\n    )"), n.push(e.searchMatch));
+	let r = e.cursor;
+	r && (e.sort === "liked" ? (t.push("(p.like_count < ? OR (p.like_count = ? AND (\n        p.published_at < ? OR (p.published_at = ? AND p.id < ?)\n      )))"), n.push(r.likeCount, r.likeCount, r.createdAt, r.createdAt, r.id)) : (t.push("(p.published_at < ? OR (p.published_at = ? AND p.id < ?))"), n.push(r.createdAt, r.createdAt, r.id)));
+	let i = e.sort === "liked" ? "p.like_count DESC, p.published_at DESC, p.id DESC" : "p.published_at DESC, p.id DESC";
+	return n.push(e.limit), {
+		parameters: n,
+		sql: `SELECT p.*, u.display_name AS author_name
       FROM publications p JOIN publishers u ON u.id = p.owner_id
-      ${t.length?`WHERE ${t.join(` AND `)}`:``}
-      ORDER BY ${i} LIMIT ?`}}function likedPublicationsSql(e,t){return{parameters:[e,...t],sql:`SELECT publication_id FROM likes WHERE publisher_id = ?
-      AND publication_id IN (${t.map(()=>`?`).join(`, `)||`NULL`})`}}export{e as SQL,likedPublicationsSql,likesPageSql,listPublicationsSql,moderationLogSql,reportsPageSql};
+      ${t.length ? `WHERE ${t.join(" AND ")}` : ""}
+      ORDER BY ${i} LIMIT ?`
+	};
+}
+function likedPublicationsSql(e, t) {
+	return {
+		parameters: [e, ...t],
+		sql: `SELECT publication_id FROM likes WHERE publisher_id = ?
+      AND publication_id IN (${t.map(() => "?").join(", ") || "NULL"})`
+	};
+}
+//#endregion
+export { e as SQL, likedPublicationsSql, likesPageSql, listPublicationsSql, moderationLogSql, reportsPageSql };
+
 //# sourceMappingURL=sql.js.map