@vielzeug/archive 26.10.15 → 26.10.17

package/dist/worker/publications.js

@@ -1,2 +1,471 @@
-import{ARCHIVE_LIMITS as e,SESSION_MAX_AGE_SECONDS as t,archiveAliasSchema as n,archiveCollectionMetaSchema as r,archiveHealthSchema as i,archiveIdentitySchema as a,archiveLikeStateSchema as o,archiveLikedIdsSchema as s,archiveLikesPageSchema as c,archiveModerationLogSchema as l,archiveOwnReportsSchema as u,archiveReportsSchema as d,archiveSortSchema as f,isWellFormedText as p,uuidSchema as m}from"../contract.js";import{ApiError as h,badRequest as g,conflict as _,forbidden as v,invalid as y,json as b,noStore as x,notFound as S,queryParams as C,readJsonBody as w}from"./http.js";import{SQL as T,likedPublicationsSql as E,likesPageSql as D,listPublicationsSql as O,moderationLogSql as k,reportsPageSql as A}from"./sql.js";import{forwardPage as j,forwardPageParams as M,nextCursor as N}from"./_pagination.js";import{s as P}from"@vielzeug/spell";async function databaseCall(e){try{return await e()}catch(e){throw new h(500,`internal`,`The service is not available.`,{cause:e,diagnostic:{kind:`database`}})}}var first=(e,t,...n)=>databaseCall(()=>e.DB.prepare(t).bind(...n).first()),all=(e,t,...n)=>databaseCall(async()=>{let r=await e.DB.prepare(t).bind(...n).all();if(!Array.isArray(r.results))throw Error(`Missing database query results`);return r.results}),run=(e,t,...n)=>databaseCall(()=>e.DB.prepare(t).bind(...n).run()),uuid=()=>crypto.randomUUID(),now=()=>new Date().toISOString(),recordUnavailable=()=>new h(503,`record-unavailable`,`The record is not available.`,{diagnostic:{kind:`record`}}),F=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i,rowToEntry=(e,t)=>{let n;try{n=JSON.parse(t.payload_json)}catch{throw recordUnavailable()}let r=e.contract.entry.safeParse({author:{id:t.owner_id,name:t.author_name},contentHash:t.content_hash,contentVersion:t.content_version,id:t.id,likeCount:t.like_count,payload:n,publishedAt:t.published_at,revision:t.revision,schemaVersion:t.schema_version,updatedAt:t.updated_at});if(!r.success)throw recordUnavailable();return r.data},rowToOwnedEntry=(e,t)=>{let n=rowToEntry(e,t);if(!m.safeParse(t.client_key).success)throw recordUnavailable();return{...n,clientKey:t.client_key,hidden:t.hidden_at!==null}},entryById=async(e,t,n)=>{let r=await first(t,T.publication,n,e.name);return r===null?null:rowToEntry(e,r)},searchMatchFor=t=>{if(t===null)return;if(t.length>e.searchChars)throw g();let n=(t.match(/[\p{L}\p{N}]+/gu)??[]).slice(0,e.searchTerms);if(n.length!==0)return n.map(e=>`"${e}"*`).join(` `)},entryCursorContext=e=>JSON.stringify([e.collection,e.sort,e.author??``,e.filters,e.tags,e.searchMatch??``]),cursorFromRow=e=>({createdAt:e.published_at,id:e.id,likeCount:e.like_count}),I=16,vocabValues=(e,t,n)=>{let r=e.getAll(t);if(r.length>I)throw g();let i=[...new Set(r)].sort();if(i.some(e=>!n.includes(e)))throw g();return i};async function listEntries(e,t,n){let r=new URL(t.url),i=C(r,[`author`,`cursor`,`filter`,`limit`,`search`,`sort`,`tag`],[`filter`,`tag`]),a=i.get(`sort`)??`recent`,o=f.safeParse(a);if(!o.success)throw g();let s=vocabValues(i,`filter`,e.filters),c=vocabValues(i,`tag`,e.tags),l=i.get(`author`);if(l!==null&&!F.test(l))throw g();let u=searchMatchFor(i.get(`search`)),d=entryCursorContext({author:l??void 0,collection:e.name,filters:s,searchMatch:u,sort:o.data,tags:c}),{cursor:p,limit:m}=M(i,d),h={author:l??void 0,collection:e.name,cursor:p===null?void 0:{createdAt:p.createdAt,id:p.id,likeCount:p.likeCount??0},filters:s,limit:m+1,searchMatch:u,sort:o.data,tags:c},_=O(h),v=await all(n,_.sql,..._.parameters),y=v.slice(0,m),S=y.at(-1),w={cursor:v.length>m&&S!==void 0?N(cursorFromRow(S),d):null,entries:y.map(t=>rowToEntry(e,t))};return b(200,w,x)}function collectionMeta(e){let t=r.safeParse({filters:[...e.filters].sort(),name:e.name,tags:[...e.tags].sort()});if(!t.success)throw recordUnavailable();return b(200,t.data,x)}async function getEntry(e,t,n){let r=await entryById(e,t,n);if(r===null)throw S();return b(200,r,x)}async function healthJson(t,n){let r=null,a=null;try{r=(await first(n,T.schemaVersion))?.applied??0}catch{a=`database-unavailable`}a===null&&r!==1&&(a=`schema-mismatch`);let o=i.safeParse({dbSchemaVersion:r,features:{likes:t.likesEnabled,publishing:t.publishingEnabled},limits:e,reason:a,schemaVersion:1,status:a===null?`ok`:`degraded`});if(!o.success)throw recordUnavailable();return b(a===null?200:503,o.data,x)}var identityJson=(e,t)=>{let n=a.safeParse(t);if(!n.success)throw recordUnavailable();return b(e,n.data,x)};function getMe(e){return identityJson(200,e?.publisher?{id:e.publisher.id,name:e.publisher.displayName,operator:e.operator}:null)}async function registerMe(e,t,n){let r=await w(e),i=L.safeParse(r);if(!i.success)throw y();let a=i.data.name??``,o=await first(t,T.publisher,n.subject.issuer,n.subject.subject);if(o!==null)return identityJson(200,{id:o.id,name:o.display_name,operator:n.operator});let s=uuid();await run(t,T.insertPublisher,s,n.subject.issuer,n.subject.subject,a,now(),n.subject.issuer,n.subject.subject,Date.now());let c=await first(t,T.publisher,n.subject.issuer,n.subject.subject);if(c===null)throw await first(t,T.revokedSubject,n.subject.issuer,n.subject.subject,Date.now())===null?_():new h(401,`unauthenticated`,`Sign-in is required.`);return identityJson(201,{id:c.id,name:c.display_name,operator:n.operator})}async function renameMe(e,t,n){let r=requirePublisherRow(n),i=await w(e),a=R.safeParse(i);if(!a.success)throw y();return a.data.name!==r.displayName&&await run(t,T.renamePublisher,a.data.name,r.id,a.data.name),identityJson(200,{id:r.id,name:a.data.name,operator:n.operator})}async function deleteProfile(e,t){return t.publisher!==null&&await run(e,T.deletePublisher,t.publisher.id),new Response(null,{headers:{"cache-control":`no-store`},status:204})}async function deleteAccountProfile(e,n){let{issuer:r,subject:i}=n.subject;return await databaseCall(()=>e.DB.batch([e.DB.prepare(T.revokeSubject).bind(r,i,Date.now()+(t+10)*1e3),e.DB.prepare(T.deleteSubjectPublisher).bind(r,i)])),new Response(null,{headers:x,status:204})}async function erasePublisher(e,t,n){let r=requireOperatorRow(t);return await databaseCall(()=>e.DB.batch([e.DB.prepare(T.auditErasure).bind(uuid(),r.id,now(),n),e.DB.prepare(T.deletePublisher).bind(n)])),new Response(null,{headers:x,status:204})}async function listModerationLog(e,t,n){requireOperatorRow(n);let r=`moderation-log`,{cursor:i,limit:a}=j(e,r),o=k({cursor:i,limit:a+1}),s=await all(t,o.sql,...o.parameters),c=s.slice(0,a),u=c.at(-1),d=l.safeParse({actions:c.map(e=>({action:e.action,collection:e.collection,createdAt:e.created_at,id:e.id,operatorId:e.operator_id,targetId:e.target_id})),cursor:s.length>a&&u!==void 0?N({createdAt:u.created_at,id:u.id},r):null});if(!d.success)throw recordUnavailable();return b(200,d.data,x)}var requirePublisherRow=e=>{if(e.publisher===null)throw v(`Register before publishing.`);return e.publisher},requireOperatorRow=e=>{if(!e.operator)throw v(`Operator access is required.`);if(e.publisher===null)throw v(`Register before moderating.`);return e.publisher},L=P.object({name:n.optional()}),R=P.object({name:n});async function myPublications(t,n,r){if(r.publisher===null)return b(200,{entries:[]},x);let i=await all(n,T.ownPublications,r.publisher.id,t.name,e.maxPublications);return b(200,{entries:i.map(e=>rowToOwnedEntry(t,e))},x)}async function myLikes(t,n,r){let i=new URL(t.url).searchParams.get(`ids`);if(i===null){let e=`likes:${r.publisher?.id??`unregistered`}`,{cursor:i,limit:a}=j(t,e);if(r.publisher===null)return b(200,{cursor:null,ids:[]},x);let o=D(r.publisher.id,{cursor:i,limit:a+1}),s=await all(n,o.sql,...o.parameters),l=s.slice(0,a),u=l.at(-1),d=c.safeParse({cursor:s.length>a&&u!==void 0?N({createdAt:u.created_at,id:u.publication_id},e):null,ids:l.map(e=>e.publication_id)});if(!d.success)throw recordUnavailable();return b(200,d.data,x)}C(new URL(t.url),[`ids`]);let a=[...new Set(i.split(`,`))];if(a.length>e.likeStateIds||a.some(e=>!F.test(e)))throw g();if(r.publisher===null)return b(200,{ids:[]},x);let o=E(r.publisher.id,a),l=await all(n,o.sql,...o.parameters),u=new Set(l.map(e=>e.publication_id)),d={ids:a.filter(e=>u.has(e))},f=s.safeParse(d);if(!f.success)throw recordUnavailable();return b(200,f.data,x)}var z=P.object({clientKey:m,payload:P.unknown()}),B=P.object({expectedRevision:P.number().int().min(1).max(2**53-1),payload:P.unknown()});async function resolveRetryRecord(e,t,n,r){if(n===null||n.expires_at<=Date.now())return null;if(n.payload_hash!==r)throw _(`That key was used for a different payload.`);if(n.publication_id===null)throw new h(410,`gone`,`That publication was removed.`);let i=await entryById(e,t,n.publication_id);return i===null?`vanished`:b(200,i,x)}async function publishEntry(t,n,r,i,a){if(!i.publishingEnabled)throw new h(503,`publishing-disabled`,`Publishing is currently disabled.`);let o=requirePublisherRow(a),s=await w(n),c=z.safeParse(s);if(!c.success)throw y();let{clientKey:l}=c.data,u=await t.derive(c.data.payload);if(u===null)throw y();let d=u.canonicalJson,f=u.contentHash,p=o.id,m=t.name,g=await resolveRetryRecord(t,r,await first(r,T.request,p,m,l),f);if(g!==null&&g!==`vanished`)return g;let S=await first(r,T.publicationByKey,p,m,l);if(S!==null){if(S.hidden_at!==null)throw v(`This entry is under moderation review.`);if(S.content_hash!==f)throw _(`That key was used for a different payload.`);return b(200,rowToEntry(t,S),x)}let C=now(),E=Date.now()+e.idempotencyRetentionMs,D=JSON.stringify(u.tags);if(((await databaseCall(()=>r.DB.batch([r.DB.prepare(T.expireRequests).bind(Date.now()),r.DB.prepare(T.insertPublication).bind(uuid(),p,m,l,1,u.contentVersion,d,f,u.filter,u.title,D,C,C,p,m,e.maxPublications,p,m,l,Date.now()),r.DB.prepare(T.insertRequest).bind(p,m,l,f,C,E,p,m,l,f)])))[1]?.meta?.changes??0)===0){let e=await resolveRetryRecord(t,r,await first(r,T.request,p,m,l),f);if(e===`vanished`)throw new h(410,`gone`,`That publication was removed.`);if(e!==null)return e;let n=await first(r,T.publicationByKey,p,m,l);if(n!==null&&n.hidden_at!==null)throw v(`This entry is under moderation review.`);if(n!==null&&n.content_hash===f)return b(200,rowToEntry(t,n),x);throw n===null?new h(429,`quota`,`Publication quota reached.`):_(`That key was used for a different payload.`)}let O=await first(r,T.publicationByKey,p,m,l);if(O===null)throw _();return b(201,rowToEntry(t,O),x)}async function updateEntry(e,t,n,r,i,a){if(!r.publishingEnabled)throw new h(503,`publishing-disabled`,`Publishing is currently disabled.`);let o=requirePublisherRow(i),s=await first(n,T.publicationAny,a,e.name);if(s===null||s.owner_id!==o.id)throw S();if(s.hidden_at!==null)throw v(`This entry is under moderation review.`);let c=await w(t),l=B.safeParse(c);if(!l.success)throw y();let{expectedRevision:u}=l.data;if(u!==s.revision)throw _();let d=await e.derive(l.data.payload);if(d===null)throw y();let f=d.canonicalJson,p=d.contentHash;if(p===s.content_hash){let t=await first(n,T.publicationAny,a,e.name);if(t===null||t.owner_id!==o.id)throw S();if(t.hidden_at!==null)throw v(`This entry is under moderation review.`);if(t.revision!==u)throw _();return b(200,rowToEntry(e,t),x)}let m=JSON.stringify(d.tags);if(((await run(n,T.updatePublication,1,d.contentVersion,f,p,d.filter,d.title,m,now(),a,o.id,u,p)).meta?.changes??0)===0){let t=await first(n,T.publicationAny,a,e.name);throw t===null?S():t.hidden_at===null?_():v(`This entry is under moderation review.`)}let g=await entryById(e,n,a);if(g===null)throw S();return b(200,g,x)}async function deleteEntry(e,t,n,r){if(n.operator){let i=requireOperatorRow(n);await databaseCall(()=>t.DB.batch([t.DB.prepare(T.auditRemoval).bind(uuid(),i.id,now(),r,e.name),t.DB.prepare(T.removePublicationAny).bind(r,e.name)]))}else{let i=requirePublisherRow(n),a=await first(t,T.publicationAny,r,e.name);if(a===null)return new Response(null,{headers:x,status:204});if(a.owner_id!==i.id)throw S();await run(t,T.removePublication,r,i.id)}return new Response(null,{headers:x,status:204})}async function setLike(e,t,n,r,i,a){let s=requirePublisherRow(r);if(a&&!n.likesEnabled)throw new h(503,`likes-disabled`,`Likes are currently disabled.`);if(await first(t,T.publication,i,e.name)===null)throw S();a?await run(t,T.insertLike,s.id,now(),i):await run(t,T.removeLike,i,s.id);let c=await first(t,T.likeState,s.id,i);if(c===null)throw S();let l={id:c.id,likeCount:c.like_count,liked:c.liked===1},u=o.safeParse(l);if(!u.success)throw recordUnavailable();return b(200,u.data,x)}var V=P.object({reason:P.string().check(p).trim().min(1).max(e.reportReasonChars)});async function reportEntry(e,t,n,r,i){let a=requirePublisherRow(r),o=await w(t),s=V.safeParse(o);if(!s.success)throw y();if(await first(n,T.publication,i,e.name)===null)throw S();return await run(n,T.insertReport,uuid(),a.id,s.data.reason,now(),i,e.name),new Response(null,{headers:x,status:204})}async function setHidden(e,t,n,r,i){let a=requireOperatorRow(n);if(await first(t,T.publicationAny,r,e.name)===null)throw S();let o=i?t.DB.prepare(T.hidePublication).bind(now(),r,e.name):t.DB.prepare(T.unhidePublication).bind(r,e.name);return await databaseCall(()=>t.DB.batch([t.DB.prepare(T.auditHide).bind(uuid(),a.id,i?`hide`:`unhide`,now(),r,e.name,Number(i)),o])),new Response(null,{headers:x,status:204})}async function listReports(e,t,n,r){requireOperatorRow(r);let i=new URL(t.url).searchParams.get(`status`)??`unresolved`;if(i!==`unresolved`&&i!==`resolved`)throw g();let a=`reports:${e.name}:${i}`,{cursor:o,limit:s}=j(t,a,[`status`]),c=A({collection:e.name,resolved:i===`resolved`},{cursor:o,limit:s+1}),l=await all(n,c.sql,...c.parameters),u=l.slice(0,s),f=u.at(-1),p=d.safeParse({cursor:l.length>s&&f!==void 0?N({createdAt:f.created_at,id:f.id},a):null,reports:u.map(e=>({createdAt:e.created_at,entryId:e.publication_id,entryTitle:e.entry_title,id:e.id,reason:e.reason,reporter:{id:e.reporter_id,name:e.reporter_name},resolvedAt:e.resolved_at}))});if(!p.success)throw recordUnavailable();return b(200,p.data,x)}async function resolveReport(e,t,n,r){if(requireOperatorRow(n),await first(t,T.reportById,r,e.name)===null)throw S();return await run(t,T.resolveReport,now(),r,e.name),new Response(null,{headers:x,status:204})}async function myReports(e,t,n){let r=`own-reports:${n.publisher?.id??`unregistered`}`,{cursor:i,limit:a}=j(e,r);if(n.publisher===null)return b(200,{cursor:null,reports:[]},x);let o=A({publisherId:n.publisher.id},{cursor:i,limit:a+1}),s=await all(t,o.sql,...o.parameters),c=s.slice(0,a),l=c.at(-1),d=u.safeParse({cursor:s.length>a&&l!==void 0?N({createdAt:l.created_at,id:l.id},r):null,reports:c.map(e=>({collection:e.collection,createdAt:e.created_at,entryId:e.publication_id,id:e.id,reason:e.reason,resolvedAt:e.resolved_at}))});if(!d.success)throw recordUnavailable();return b(200,d.data,x)}export{collectionMeta,deleteAccountProfile,deleteEntry,deleteProfile,erasePublisher,getEntry,getMe,healthJson,listEntries,listModerationLog,listReports,myLikes,myPublications,myReports,publishEntry,registerMe,renameMe,reportEntry,requireOperatorRow,requirePublisherRow,resolveReport,setHidden,setLike,updateEntry};
+import { ARCHIVE_LIMITS as e, SESSION_MAX_AGE_SECONDS as t, archiveAliasSchema as n, archiveCollectionMetaSchema as r, archiveHealthSchema as i, archiveIdentitySchema as a, archiveLikeStateSchema as o, archiveLikedIdsSchema as s, archiveLikesPageSchema as c, archiveModerationLogSchema as l, archiveOwnReportsSchema as u, archiveReportsSchema as d, archiveSortSchema as f, isWellFormedText as p, uuidSchema as m } from "../contract.js";
+import { ApiError as h, badRequest as g, conflict as _, forbidden as v, invalid as y, json as b, noStore as x, notFound as S, queryParams as C, readJsonBody as w } from "./http.js";
+import { SQL as T, likedPublicationsSql as E, likesPageSql as D, listPublicationsSql as O, moderationLogSql as k, reportsPageSql as A } from "./sql.js";
+import { forwardPage as j, forwardPageParams as M, nextCursor as N } from "./_pagination.js";
+import { s as P } from "@vielzeug/spell";
+//#region src/worker/publications.ts
+async function databaseCall(e) {
+	try {
+		return await e();
+	} catch (e) {
+		throw new h(500, "internal", "The service is not available.", {
+			cause: e,
+			diagnostic: { kind: "database" }
+		});
+	}
+}
+var first = (e, t, ...n) => databaseCall(() => e.DB.prepare(t).bind(...n).first()), all = (e, t, ...n) => databaseCall(async () => {
+	let r = await e.DB.prepare(t).bind(...n).all();
+	if (!Array.isArray(r.results)) throw Error("Missing database query results");
+	return r.results;
+}), run = (e, t, ...n) => databaseCall(() => e.DB.prepare(t).bind(...n).run()), uuid = () => crypto.randomUUID(), now = () => (/* @__PURE__ */ new Date()).toISOString(), recordUnavailable = () => new h(503, "record-unavailable", "The record is not available.", { diagnostic: { kind: "record" } }), F = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i, rowToEntry = (e, t) => {
+	let n;
+	try {
+		n = JSON.parse(t.payload_json);
+	} catch {
+		throw recordUnavailable();
+	}
+	let r = e.contract.entry.safeParse({
+		author: {
+			id: t.owner_id,
+			name: t.author_name
+		},
+		contentHash: t.content_hash,
+		contentVersion: t.content_version,
+		id: t.id,
+		likeCount: t.like_count,
+		payload: n,
+		publishedAt: t.published_at,
+		revision: t.revision,
+		schemaVersion: t.schema_version,
+		updatedAt: t.updated_at
+	});
+	if (!r.success) throw recordUnavailable();
+	return r.data;
+}, rowToOwnedEntry = (e, t) => {
+	let n = rowToEntry(e, t);
+	if (!m.safeParse(t.client_key).success) throw recordUnavailable();
+	return {
+		...n,
+		clientKey: t.client_key,
+		hidden: t.hidden_at !== null
+	};
+}, entryById = async (e, t, n) => {
+	let r = await first(t, T.publication, n, e.name);
+	return r === null ? null : rowToEntry(e, r);
+}, searchMatchFor = (t) => {
+	if (t === null) return;
+	if (t.length > e.searchChars) throw g();
+	let n = (t.match(/[\p{L}\p{N}]+/gu) ?? []).slice(0, e.searchTerms);
+	if (n.length !== 0) return n.map((e) => `"${e}"*`).join(" ");
+}, entryCursorContext = (e) => JSON.stringify([
+	e.collection,
+	e.sort,
+	e.author ?? "",
+	e.filters,
+	e.tags,
+	e.searchMatch ?? ""
+]), cursorFromRow = (e) => ({
+	createdAt: e.published_at,
+	id: e.id,
+	likeCount: e.like_count
+}), I = 16, vocabValues = (e, t, n) => {
+	let r = e.getAll(t);
+	if (r.length > I) throw g();
+	let i = [...new Set(r)].sort();
+	if (i.some((e) => !n.includes(e))) throw g();
+	return i;
+};
+async function listEntries(e, t, n) {
+	let r = new URL(t.url), i = C(r, [
+		"author",
+		"cursor",
+		"filter",
+		"limit",
+		"search",
+		"sort",
+		"tag"
+	], ["filter", "tag"]), a = i.get("sort") ?? "recent", o = f.safeParse(a);
+	if (!o.success) throw g();
+	let s = vocabValues(i, "filter", e.filters), c = vocabValues(i, "tag", e.tags), l = i.get("author");
+	if (l !== null && !F.test(l)) throw g();
+	let u = searchMatchFor(i.get("search")), d = entryCursorContext({
+		author: l ?? void 0,
+		collection: e.name,
+		filters: s,
+		searchMatch: u,
+		sort: o.data,
+		tags: c
+	}), { cursor: p, limit: m } = M(i, d), h = {
+		author: l ?? void 0,
+		collection: e.name,
+		cursor: p === null ? void 0 : {
+			createdAt: p.createdAt,
+			id: p.id,
+			likeCount: p.likeCount ?? 0
+		},
+		filters: s,
+		limit: m + 1,
+		searchMatch: u,
+		sort: o.data,
+		tags: c
+	}, _ = O(h), v = await all(n, _.sql, ..._.parameters), y = v.slice(0, m), S = y.at(-1), w = {
+		cursor: v.length > m && S !== void 0 ? N(cursorFromRow(S), d) : null,
+		entries: y.map((t) => rowToEntry(e, t))
+	};
+	return b(200, w, x);
+}
+function collectionMeta(e) {
+	let t = r.safeParse({
+		filters: [...e.filters].sort(),
+		name: e.name,
+		tags: [...e.tags].sort()
+	});
+	if (!t.success) throw recordUnavailable();
+	return b(200, t.data, x);
+}
+async function getEntry(e, t, n) {
+	let r = await entryById(e, t, n);
+	if (r === null) throw S();
+	return b(200, r, x);
+}
+async function healthJson(t, n) {
+	let r = null, a = null;
+	try {
+		r = (await first(n, T.schemaVersion))?.applied ?? 0;
+	} catch {
+		a = "database-unavailable";
+	}
+	a === null && r !== 1 && (a = "schema-mismatch");
+	let o = i.safeParse({
+		dbSchemaVersion: r,
+		features: {
+			likes: t.likesEnabled,
+			publishing: t.publishingEnabled
+		},
+		limits: e,
+		reason: a,
+		schemaVersion: 1,
+		status: a === null ? "ok" : "degraded"
+	});
+	if (!o.success) throw recordUnavailable();
+	return b(a === null ? 200 : 503, o.data, x);
+}
+var identityJson = (e, t) => {
+	let n = a.safeParse(t);
+	if (!n.success) throw recordUnavailable();
+	return b(e, n.data, x);
+};
+function getMe(e) {
+	return identityJson(200, e?.publisher ? {
+		id: e.publisher.id,
+		name: e.publisher.displayName,
+		operator: e.operator
+	} : null);
+}
+async function registerMe(e, t, n) {
+	let r = await w(e), i = L.safeParse(r);
+	if (!i.success) throw y();
+	let a = i.data.name ?? "", o = await first(t, T.publisher, n.subject.issuer, n.subject.subject);
+	if (o !== null) return identityJson(200, {
+		id: o.id,
+		name: o.display_name,
+		operator: n.operator
+	});
+	let s = uuid();
+	await run(t, T.insertPublisher, s, n.subject.issuer, n.subject.subject, a, now(), n.subject.issuer, n.subject.subject, Date.now());
+	let c = await first(t, T.publisher, n.subject.issuer, n.subject.subject);
+	if (c === null) throw await first(t, T.revokedSubject, n.subject.issuer, n.subject.subject, Date.now()) === null ? _() : new h(401, "unauthenticated", "Sign-in is required.");
+	return identityJson(201, {
+		id: c.id,
+		name: c.display_name,
+		operator: n.operator
+	});
+}
+async function renameMe(e, t, n) {
+	let r = requirePublisherRow(n), i = await w(e), a = R.safeParse(i);
+	if (!a.success) throw y();
+	return a.data.name !== r.displayName && await run(t, T.renamePublisher, a.data.name, r.id, a.data.name), identityJson(200, {
+		id: r.id,
+		name: a.data.name,
+		operator: n.operator
+	});
+}
+async function deleteProfile(e, t) {
+	return t.publisher !== null && await run(e, T.deletePublisher, t.publisher.id), new Response(null, {
+		headers: { "cache-control": "no-store" },
+		status: 204
+	});
+}
+async function deleteAccountProfile(e, n) {
+	let { issuer: r, subject: i } = n.subject;
+	return await databaseCall(() => e.DB.batch([e.DB.prepare(T.revokeSubject).bind(r, i, Date.now() + (t + 10) * 1e3), e.DB.prepare(T.deleteSubjectPublisher).bind(r, i)])), new Response(null, {
+		headers: x,
+		status: 204
+	});
+}
+async function erasePublisher(e, t, n) {
+	let r = requireOperatorRow(t);
+	return await databaseCall(() => e.DB.batch([e.DB.prepare(T.auditErasure).bind(uuid(), r.id, now(), n), e.DB.prepare(T.deletePublisher).bind(n)])), new Response(null, {
+		headers: x,
+		status: 204
+	});
+}
+async function listModerationLog(e, t, n) {
+	requireOperatorRow(n);
+	let r = "moderation-log", { cursor: i, limit: a } = j(e, r), o = k({
+		cursor: i,
+		limit: a + 1
+	}), s = await all(t, o.sql, ...o.parameters), c = s.slice(0, a), u = c.at(-1), d = l.safeParse({
+		actions: c.map((e) => ({
+			action: e.action,
+			collection: e.collection,
+			createdAt: e.created_at,
+			id: e.id,
+			operatorId: e.operator_id,
+			targetId: e.target_id
+		})),
+		cursor: s.length > a && u !== void 0 ? N({
+			createdAt: u.created_at,
+			id: u.id
+		}, r) : null
+	});
+	if (!d.success) throw recordUnavailable();
+	return b(200, d.data, x);
+}
+var requirePublisherRow = (e) => {
+	if (e.publisher === null) throw v("Register before publishing.");
+	return e.publisher;
+}, requireOperatorRow = (e) => {
+	if (!e.operator) throw v("Operator access is required.");
+	if (e.publisher === null) throw v("Register before moderating.");
+	return e.publisher;
+}, L = P.object({ name: n.optional() }), R = P.object({ name: n });
+async function myPublications(t, n, r) {
+	if (r.publisher === null) return b(200, { entries: [] }, x);
+	let i = await all(n, T.ownPublications, r.publisher.id, t.name, e.maxPublications);
+	return b(200, { entries: i.map((e) => rowToOwnedEntry(t, e)) }, x);
+}
+async function myLikes(t, n, r) {
+	let i = new URL(t.url).searchParams.get("ids");
+	if (i === null) {
+		let e = `likes:${r.publisher?.id ?? "unregistered"}`, { cursor: i, limit: a } = j(t, e);
+		if (r.publisher === null) return b(200, {
+			cursor: null,
+			ids: []
+		}, x);
+		let o = D(r.publisher.id, {
+			cursor: i,
+			limit: a + 1
+		}), s = await all(n, o.sql, ...o.parameters), l = s.slice(0, a), u = l.at(-1), d = c.safeParse({
+			cursor: s.length > a && u !== void 0 ? N({
+				createdAt: u.created_at,
+				id: u.publication_id
+			}, e) : null,
+			ids: l.map((e) => e.publication_id)
+		});
+		if (!d.success) throw recordUnavailable();
+		return b(200, d.data, x);
+	}
+	C(new URL(t.url), ["ids"]);
+	let a = [...new Set(i.split(","))];
+	if (a.length > e.likeStateIds || a.some((e) => !F.test(e))) throw g();
+	if (r.publisher === null) return b(200, { ids: [] }, x);
+	let o = E(r.publisher.id, a), l = await all(n, o.sql, ...o.parameters), u = new Set(l.map((e) => e.publication_id)), d = { ids: a.filter((e) => u.has(e)) }, f = s.safeParse(d);
+	if (!f.success) throw recordUnavailable();
+	return b(200, f.data, x);
+}
+var z = P.object({
+	clientKey: m,
+	payload: P.unknown()
+}), B = P.object({
+	expectedRevision: P.number().int().min(1).max(2 ** 53 - 1),
+	payload: P.unknown()
+});
+async function resolveRetryRecord(e, t, n, r) {
+	if (n === null || n.expires_at <= Date.now()) return null;
+	if (n.payload_hash !== r) throw _("That key was used for a different payload.");
+	if (n.publication_id === null) throw new h(410, "gone", "That publication was removed.");
+	let i = await entryById(e, t, n.publication_id);
+	return i === null ? "vanished" : b(200, i, x);
+}
+async function publishEntry(t, n, r, i, a) {
+	if (!i.publishingEnabled) throw new h(503, "publishing-disabled", "Publishing is currently disabled.");
+	let o = requirePublisherRow(a), s = await w(n), c = z.safeParse(s);
+	if (!c.success) throw y();
+	let { clientKey: l } = c.data, u = await t.derive(c.data.payload);
+	if (u === null) throw y();
+	let d = u.canonicalJson, f = u.contentHash, p = o.id, m = t.name, g = await resolveRetryRecord(t, r, await first(r, T.request, p, m, l), f);
+	if (g !== null && g !== "vanished") return g;
+	let S = await first(r, T.publicationByKey, p, m, l);
+	if (S !== null) {
+		if (S.hidden_at !== null) throw v("This entry is under moderation review.");
+		if (S.content_hash !== f) throw _("That key was used for a different payload.");
+		return b(200, rowToEntry(t, S), x);
+	}
+	let C = now(), E = Date.now() + e.idempotencyRetentionMs, D = JSON.stringify(u.tags);
+	if (((await databaseCall(() => r.DB.batch([
+		r.DB.prepare(T.expireRequests).bind(Date.now()),
+		r.DB.prepare(T.insertPublication).bind(uuid(), p, m, l, 1, u.contentVersion, d, f, u.filter, u.title, D, C, C, p, m, e.maxPublications, p, m, l, Date.now()),
+		r.DB.prepare(T.insertRequest).bind(p, m, l, f, C, E, p, m, l, f)
+	])))[1]?.meta?.changes ?? 0) === 0) {
+		let e = await resolveRetryRecord(t, r, await first(r, T.request, p, m, l), f);
+		if (e === "vanished") throw new h(410, "gone", "That publication was removed.");
+		if (e !== null) return e;
+		let n = await first(r, T.publicationByKey, p, m, l);
+		if (n !== null && n.hidden_at !== null) throw v("This entry is under moderation review.");
+		if (n !== null && n.content_hash === f) return b(200, rowToEntry(t, n), x);
+		throw n === null ? new h(429, "quota", "Publication quota reached.") : _("That key was used for a different payload.");
+	}
+	let O = await first(r, T.publicationByKey, p, m, l);
+	if (O === null) throw _();
+	return b(201, rowToEntry(t, O), x);
+}
+async function updateEntry(e, t, n, r, i, a) {
+	if (!r.publishingEnabled) throw new h(503, "publishing-disabled", "Publishing is currently disabled.");
+	let o = requirePublisherRow(i), s = await first(n, T.publicationAny, a, e.name);
+	if (s === null || s.owner_id !== o.id) throw S();
+	if (s.hidden_at !== null) throw v("This entry is under moderation review.");
+	let c = await w(t), l = B.safeParse(c);
+	if (!l.success) throw y();
+	let { expectedRevision: u } = l.data;
+	if (u !== s.revision) throw _();
+	let d = await e.derive(l.data.payload);
+	if (d === null) throw y();
+	let f = d.canonicalJson, p = d.contentHash;
+	if (p === s.content_hash) {
+		let t = await first(n, T.publicationAny, a, e.name);
+		if (t === null || t.owner_id !== o.id) throw S();
+		if (t.hidden_at !== null) throw v("This entry is under moderation review.");
+		if (t.revision !== u) throw _();
+		return b(200, rowToEntry(e, t), x);
+	}
+	let m = JSON.stringify(d.tags);
+	if (((await run(n, T.updatePublication, 1, d.contentVersion, f, p, d.filter, d.title, m, now(), a, o.id, u, p)).meta?.changes ?? 0) === 0) {
+		let t = await first(n, T.publicationAny, a, e.name);
+		throw t === null ? S() : t.hidden_at === null ? _() : v("This entry is under moderation review.");
+	}
+	let g = await entryById(e, n, a);
+	if (g === null) throw S();
+	return b(200, g, x);
+}
+async function deleteEntry(e, t, n, r) {
+	if (n.operator) {
+		let i = requireOperatorRow(n);
+		await databaseCall(() => t.DB.batch([t.DB.prepare(T.auditRemoval).bind(uuid(), i.id, now(), r, e.name), t.DB.prepare(T.removePublicationAny).bind(r, e.name)]));
+	} else {
+		let i = requirePublisherRow(n), a = await first(t, T.publicationAny, r, e.name);
+		if (a === null) return new Response(null, {
+			headers: x,
+			status: 204
+		});
+		if (a.owner_id !== i.id) throw S();
+		await run(t, T.removePublication, r, i.id);
+	}
+	return new Response(null, {
+		headers: x,
+		status: 204
+	});
+}
+async function setLike(e, t, n, r, i, a) {
+	let s = requirePublisherRow(r);
+	if (a && !n.likesEnabled) throw new h(503, "likes-disabled", "Likes are currently disabled.");
+	if (await first(t, T.publication, i, e.name) === null) throw S();
+	a ? await run(t, T.insertLike, s.id, now(), i) : await run(t, T.removeLike, i, s.id);
+	let c = await first(t, T.likeState, s.id, i);
+	if (c === null) throw S();
+	let l = {
+		id: c.id,
+		likeCount: c.like_count,
+		liked: c.liked === 1
+	}, u = o.safeParse(l);
+	if (!u.success) throw recordUnavailable();
+	return b(200, u.data, x);
+}
+var V = P.object({ reason: P.string().check(p).trim().min(1).max(e.reportReasonChars) });
+async function reportEntry(e, t, n, r, i) {
+	let a = requirePublisherRow(r), o = await w(t), s = V.safeParse(o);
+	if (!s.success) throw y();
+	if (await first(n, T.publication, i, e.name) === null) throw S();
+	return await run(n, T.insertReport, uuid(), a.id, s.data.reason, now(), i, e.name), new Response(null, {
+		headers: x,
+		status: 204
+	});
+}
+async function setHidden(e, t, n, r, i) {
+	let a = requireOperatorRow(n);
+	if (await first(t, T.publicationAny, r, e.name) === null) throw S();
+	let o = i ? t.DB.prepare(T.hidePublication).bind(now(), r, e.name) : t.DB.prepare(T.unhidePublication).bind(r, e.name);
+	return await databaseCall(() => t.DB.batch([t.DB.prepare(T.auditHide).bind(uuid(), a.id, i ? "hide" : "unhide", now(), r, e.name, Number(i)), o])), new Response(null, {
+		headers: x,
+		status: 204
+	});
+}
+async function listReports(e, t, n, r) {
+	requireOperatorRow(r);
+	let i = new URL(t.url).searchParams.get("status") ?? "unresolved";
+	if (i !== "unresolved" && i !== "resolved") throw g();
+	let a = `reports:${e.name}:${i}`, { cursor: o, limit: s } = j(t, a, ["status"]), c = A({
+		collection: e.name,
+		resolved: i === "resolved"
+	}, {
+		cursor: o,
+		limit: s + 1
+	}), l = await all(n, c.sql, ...c.parameters), u = l.slice(0, s), f = u.at(-1), p = d.safeParse({
+		cursor: l.length > s && f !== void 0 ? N({
+			createdAt: f.created_at,
+			id: f.id
+		}, a) : null,
+		reports: u.map((e) => ({
+			createdAt: e.created_at,
+			entryId: e.publication_id,
+			entryTitle: e.entry_title,
+			id: e.id,
+			reason: e.reason,
+			reporter: {
+				id: e.reporter_id,
+				name: e.reporter_name
+			},
+			resolvedAt: e.resolved_at
+		}))
+	});
+	if (!p.success) throw recordUnavailable();
+	return b(200, p.data, x);
+}
+async function resolveReport(e, t, n, r) {
+	if (requireOperatorRow(n), await first(t, T.reportById, r, e.name) === null) throw S();
+	return await run(t, T.resolveReport, now(), r, e.name), new Response(null, {
+		headers: x,
+		status: 204
+	});
+}
+async function myReports(e, t, n) {
+	let r = `own-reports:${n.publisher?.id ?? "unregistered"}`, { cursor: i, limit: a } = j(e, r);
+	if (n.publisher === null) return b(200, {
+		cursor: null,
+		reports: []
+	}, x);
+	let o = A({ publisherId: n.publisher.id }, {
+		cursor: i,
+		limit: a + 1
+	}), s = await all(t, o.sql, ...o.parameters), c = s.slice(0, a), l = c.at(-1), d = u.safeParse({
+		cursor: s.length > a && l !== void 0 ? N({
+			createdAt: l.created_at,
+			id: l.id
+		}, r) : null,
+		reports: c.map((e) => ({
+			collection: e.collection,
+			createdAt: e.created_at,
+			entryId: e.publication_id,
+			id: e.id,
+			reason: e.reason,
+			resolvedAt: e.resolved_at
+		}))
+	});
+	if (!d.success) throw recordUnavailable();
+	return b(200, d.data, x);
+}
+//#endregion
+export { collectionMeta, deleteAccountProfile, deleteEntry, deleteProfile, erasePublisher, getEntry, getMe, healthJson, listEntries, listModerationLog, listReports, myLikes, myPublications, myReports, publishEntry, registerMe, renameMe, reportEntry, requireOperatorRow, requirePublisherRow, resolveReport, setHidden, setLike, updateEntry };
+
 //# sourceMappingURL=publications.js.map