@vielzeug/archive 26.10.6 → 26.10.7

package/dist/worker/publications.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"publications.cjs","names":[],"sources":["../../src/worker/publications.ts"],"sourcesContent":["import { s } from '@vielzeug/spell';\nimport type { ArchiveCollection } from '../collection';\nimport {\n  ARCHIVE_CONTRACT_VERSION,\n  ARCHIVE_LIMITS,\n  ARCHIVE_SCHEMA_VERSION,\n  type ArchiveModerationAction,\n  archiveAliasSchema,\n  archiveCollectionMetaSchema,\n  archiveHealthSchema,\n  archiveIdentitySchema,\n  archiveLikedIdsSchema,\n  archiveLikeStateSchema,\n  archiveLikesPageSchema,\n  archiveModerationLogSchema,\n  archiveOwnReportsSchema,\n  archiveReportsSchema,\n  archiveSortSchema,\n  isWellFormedText,\n  SESSION_MAX_AGE_SECONDS,\n  uuidSchema,\n} from '../contract';\nimport { decodeCursorValue, encodeCursorValue, forwardPage, nextCursor } from './_pagination';\nimport { JWT_CLOCK_TOLERANCE_SECONDS, type Publisher, type Session } from './auth';\nimport type { ApiConfig, ArchiveWorkerEnv } from './env';\nimport {\n  ApiError,\n  badRequest,\n  conflict,\n  forbidden,\n  invalid,\n  json,\n  noStore,\n  notFound,\n  queryParams,\n  readJsonBody,\n} from './http';\nimport {\n  likedPublicationsSql,\n  likesPageSql,\n  listPublicationsSql,\n  moderationLogSql,\n  type PublicationCursor,\n  type PublicationFilter,\n  reportsPageSql,\n  SQL,\n} from './sql';\n\n/**\n * Route handlers for /api/v1, parameterized by the registered collection. All SQL lives\n * in sql.ts and is bound positionally here in the authored order; the DTO boundary\n * re-validates every stored row before it leaves, content validation lives in the\n * collection's derive step, and moderation state (hidden entries) is visible only\n * through the owner and operator surfaces.\n */\n\ninterface PublicationRow {\n  author_name: string;\n  client_key: string;\n  collection: string;\n  content_hash: string;\n  content_version: number;\n  filter_value: string | null;\n  /** Null while visible; set while an operator has removed the entry from public view. */\n  hidden_at: string | null;\n  id: string;\n  like_count: number;\n  owner_id: string;\n  payload_json: string;\n  published_at: string;\n  revision: number;\n  schema_version: number;\n  tags_json: string;\n  title: string;\n  updated_at: string;\n}\n\nasync function databaseCall<T>(operation: () => Promise<T>): Promise<T> {\n  try {\n    return await operation();\n  } catch (cause) {\n    throw new ApiError(500, 'internal', 'The service is not available.', { cause, diagnostic: { kind: 'database' } });\n  }\n}\nconst first = <T>(env: ArchiveWorkerEnv, sql: string, ...params: (string | number | null)[]) =>\n  databaseCall(() =>\n    env.DB.prepare(sql)\n      .bind(...params)\n      .first<T>(),\n  );\nconst all = <T>(env: ArchiveWorkerEnv, sql: string, ...params: (string | number | null)[]) =>\n  databaseCall(async () => {\n    const result = await env.DB.prepare(sql)\n      .bind(...params)\n      .all<T>();\n    if (!Array.isArray(result.results)) throw new Error('Missing database query results');\n    return result.results;\n  });\nconst run = (env: ArchiveWorkerEnv, sql: string, ...params: (string | number | null)[]) =>\n  databaseCall(() =>\n    env.DB.prepare(sql)\n      .bind(...params)\n      .run(),\n  );\n\nconst uuid = (): string => crypto.randomUUID();\nconst now = (): string => new Date().toISOString();\n\n/** A stored row that fails the emitted-DTO contract is unavailable, not malformed data. */\nconst recordUnavailable = (): ApiError =>\n  new ApiError(503, 'record-unavailable', 'The record is not available.', { diagnostic: { kind: 'record' } });\n\nconst UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n\n/**\n * Maps a joined row to the public DTO through the collection's strict entry schema:\n * stored JSON is parsed and re-validated, stored versions are emitted as-is, and any\n * drift — unknown fields, corrupt payload, mismatched versions — surfaces as 503\n * `record-unavailable` rather than leaking or fabricating data.\n */\nconst rowToEntry = (collection: ArchiveCollection, row: PublicationRow) => {\n  let payloadJson: unknown;\n  try {\n    payloadJson = JSON.parse(row.payload_json);\n  } catch {\n    throw recordUnavailable();\n  }\n  const parsed = collection.contract.entry.safeParse({\n    author: { id: row.owner_id, name: row.author_name },\n    contentHash: row.content_hash,\n    contentVersion: row.content_version,\n    id: row.id,\n    likeCount: row.like_count,\n    payload: payloadJson,\n    publishedAt: row.published_at,\n    revision: row.revision,\n    schemaVersion: row.schema_version,\n    updatedAt: row.updated_at,\n  });\n  if (!parsed.success) throw recordUnavailable();\n  return parsed.data;\n};\n\nconst rowToOwnedEntry = (collection: ArchiveCollection, row: PublicationRow) => {\n  const entry = rowToEntry(collection, row);\n  // The private owner DTO adds the create retry key and the moderation state;\n  // public routes never emit either.\n  const key = uuidSchema.safeParse(row.client_key);\n  if (!key.success) throw recordUnavailable();\n  return { ...entry, clientKey: row.client_key, hidden: row.hidden_at !== null };\n};\n\nconst entryById = async (collection: ArchiveCollection, env: ArchiveWorkerEnv, id: string) => {\n  const row = await first<PublicationRow>(env, SQL.publication, id, collection.name);\n  return row === null ? null : rowToEntry(collection, row);\n};\n\n/* ----------------------------------- list --------------------------------- */\n\ntype CursorDirection = 'next' | 'previous';\n\n/** Normalizes free text into the bounded FTS prefix-match expression the SQL expects. */\nconst searchMatchFor = (search: string | null): string | undefined => {\n  if (search === null) return undefined;\n  if (search.length > ARCHIVE_LIMITS.searchChars) throw badRequest();\n  // Unicode word extraction: punctuation splits terms rather than poisoning them,\n  // so \"Hunter's\" and \"fire-ice\" match the words their indexed titles carry.\n  const terms = (search.match(/[\\p{L}\\p{N}]+/gu) ?? []).slice(0, ARCHIVE_LIMITS.searchTerms);\n  if (terms.length === 0) return undefined;\n  return terms.map((t) => `\"${t}\"*`).join(' ');\n};\n\n/** The cursor carries direction plus filter context so a replayed/mismatched cursor is 400. */\ninterface CursorPayload {\n  c: PublicationCursor;\n  d: CursorDirection;\n  q: {\n    a: string | null;\n    e: string | null;\n    g: string;\n    m: string | null;\n    s: 'liked' | 'recent';\n    t: string | null;\n  };\n}\n\nconst cursorPayloadSchema = s.object({\n  c: s.object({\n    id: s.string().uuid(),\n    likeCount: s.number().int().min(0).max(Number.MAX_SAFE_INTEGER),\n    publishedAt: s.string().isoDateTime(),\n  }),\n  d: s.enum(['next', 'previous'] as const),\n  q: s.object({\n    a: s.string().uuid().nullable(),\n    e: s.string().max(ARCHIVE_LIMITS.vocabChars).nullable(),\n    g: s.string().max(ARCHIVE_LIMITS.vocabChars),\n    m: s\n      .string()\n      .max(ARCHIVE_LIMITS.searchChars * ARCHIVE_LIMITS.searchTerms)\n      .nullable(),\n    s: s.enum(['liked', 'recent'] as const),\n    t: s.string().max(ARCHIVE_LIMITS.vocabChars).nullable(),\n  }),\n});\n\nconst cursorFromRow = (row: PublicationRow): PublicationCursor => ({\n  id: row.id,\n  likeCount: row.like_count,\n  publishedAt: row.published_at,\n});\n\nconst encodeCursor = (row: PublicationRow, direction: CursorDirection, query: PublicationFilter): string =>\n  encodeCursorValue({\n    c: cursorFromRow(row),\n    d: direction,\n    q: {\n      a: query.author ?? null,\n      e: query.filter ?? null,\n      g: query.collection,\n      m: query.searchMatch ?? null,\n      s: query.sort,\n      t: query.tag ?? null,\n    },\n  } satisfies CursorPayload);\n\nconst decodeCursor = (raw: string, query: PublicationFilter): CursorPayload => {\n  const payload = decodeCursorValue(raw, cursorPayloadSchema);\n  const { q } = payload;\n  if (\n    (q.a ?? undefined) !== query.author ||\n    q.s !== query.sort ||\n    q.g !== query.collection ||\n    (q.e ?? undefined) !== query.filter ||\n    (q.m ?? undefined) !== query.searchMatch ||\n    (q.t ?? undefined) !== query.tag\n  ) {\n    throw badRequest();\n  }\n  return payload;\n};\n\nexport async function listEntries(\n  collection: ArchiveCollection,\n  request: Request,\n  env: ArchiveWorkerEnv,\n): Promise<Response> {\n  const url = new URL(request.url);\n  const params = queryParams(url, ['author', 'cursor', 'filter', 'limit', 'search', 'sort', 'tag']);\n\n  const sortRaw = params.get('sort') ?? 'recent';\n  const sortParsed = archiveSortSchema.safeParse(sortRaw);\n  if (!sortParsed.success) throw badRequest();\n\n  const limitRaw = params.get('limit');\n  const limit = limitRaw === null ? ARCHIVE_LIMITS.pageSize : Number(limitRaw);\n  if (!Number.isInteger(limit) || limit < 1 || limit > ARCHIVE_LIMITS.maxPageSize) throw badRequest();\n\n  const filter = params.get('filter');\n  if (filter !== null && !collection.filters.includes(filter)) throw badRequest();\n  const tag = params.get('tag');\n  if (tag !== null && !collection.tags.includes(tag)) throw badRequest();\n  const author = params.get('author');\n  if (author !== null && !UUID_RE.test(author)) throw badRequest();\n\n  const searchMatch = searchMatchFor(params.get('search'));\n  const query: PublicationFilter = {\n    author: author ?? undefined,\n    collection: collection.name,\n    filter: filter ?? undefined,\n    limit: limit + 1,\n    searchMatch,\n    sort: sortParsed.data,\n    tag: tag ?? undefined,\n  };\n\n  // The cursor tells the fetch direction; the first page always walks forward.\n  const cursorRaw = params.get('cursor');\n  const decoded = cursorRaw === null ? null : decodeCursor(cursorRaw, query);\n  const direction: CursorDirection = decoded?.d ?? 'next';\n  if (decoded !== null) query.cursor = decoded.c;\n  query.direction = direction;\n\n  const fetchRows = async (f: PublicationFilter): Promise<PublicationRow[]> => {\n    const bound = listPublicationsSql(f);\n    return all<PublicationRow>(env, bound.sql, ...bound.parameters);\n  };\n\n  const fetched = await fetchRows(query);\n  const hasMore = fetched.length > limit;\n  // 'previous' reads ASC off the cursor; display flips back to normal DESC order.\n  const page = fetched.slice(0, limit);\n  if (direction === 'previous') page.reverse();\n\n  // Bounded index probes — never a count query — decide has-more in the opposite\n  // direction. A first (uncursored) page needs no backward probe: it IS the top.\n  let hasOpposite = false;\n  if (decoded !== null && page.length > 0) {\n    const probe: PublicationFilter = { ...query, limit: 1 };\n    if (direction === 'next') {\n      probe.cursor = cursorFromRow(page[0]);\n      probe.direction = 'previous';\n    } else {\n      probe.cursor = cursorFromRow(page[page.length - 1]);\n      probe.direction = 'next';\n    }\n    hasOpposite = (await fetchRows(probe)).length > 0;\n  }\n\n  const next =\n    page.length > 0 && ((direction === 'next' && hasMore) || (direction === 'previous' && hasOpposite))\n      ? encodeCursor(page[page.length - 1], 'next', query)\n      : null;\n  const previous =\n    page.length > 0 && ((direction === 'previous' && hasMore) || (direction === 'next' && hasOpposite))\n      ? encodeCursor(page[0], 'previous', query)\n      : null;\n\n  // Entries are validated per row through the collection's entry schema; the cursors\n  // are internally generated, so the page composes validated parts directly.\n  const pageDto = { cursor: next, entries: page.map((row) => rowToEntry(collection, row)), previous };\n  return json(200, pageDto, noStore);\n}\n\n/** The collection's public self-description: name plus the declared query vocabularies. */\nexport function collectionMeta(collection: ArchiveCollection): Response {\n  const parsed = archiveCollectionMetaSchema.safeParse({\n    filters: [...collection.filters].sort(),\n    name: collection.name,\n    tags: [...collection.tags].sort(),\n  });\n  if (!parsed.success) throw recordUnavailable();\n  return json(200, parsed.data, noStore);\n}\n\nexport async function getEntry(collection: ArchiveCollection, env: ArchiveWorkerEnv, id: string): Promise<Response> {\n  const entry = await entryById(collection, env, id);\n  if (entry === null) throw notFound();\n  return json(200, entry, noStore);\n}\n\n/* ---------------------------------- health --------------------------------- */\n\n/**\n * Service health: the feature flags, the wire limits, and the storage schema stamp\n * actually present in the database. A database whose migrations lag the package\n * answers `degraded` instead of pretending to be fine — the most likely deployment\n * fault becomes a one-glance diagnosis.\n */\nexport async function healthJson(config: ApiConfig, env: ArchiveWorkerEnv): Promise<Response> {\n  let dbSchemaVersion: number | null = null;\n  let reason: 'database-unavailable' | 'schema-mismatch' | null = null;\n  try {\n    const row = await first<{ applied: number }>(env, SQL.schemaVersion);\n    dbSchemaVersion = row?.applied ?? 0;\n  } catch {\n    reason = 'database-unavailable';\n  }\n  if (reason === null && dbSchemaVersion !== ARCHIVE_SCHEMA_VERSION) reason = 'schema-mismatch';\n  const parsed = archiveHealthSchema.safeParse({\n    dbSchemaVersion,\n    features: { likes: config.likesEnabled, publishing: config.publishingEnabled },\n    limits: ARCHIVE_LIMITS,\n    reason,\n    schemaVersion: ARCHIVE_CONTRACT_VERSION,\n    status: reason === null ? 'ok' : 'degraded',\n  });\n  if (!parsed.success) throw recordUnavailable();\n  return json(reason === null ? 200 : 503, parsed.data, noStore);\n}\n\n/* --------------------------------- identity -------------------------------- */\n\n/** Emits the private identity DTO through the strict shared schema. */\nconst identityJson = (status: number, identity: unknown): Response => {\n  const parsed = archiveIdentitySchema.safeParse(identity);\n  if (!parsed.success) throw recordUnavailable();\n  return json(status, parsed.data, noStore);\n};\n\nexport function getMe(session: Session | null): Response {\n  return identityJson(\n    200,\n    session?.publisher\n      ? { id: session.publisher.id, name: session.publisher.displayName, operator: session.operator }\n      : null,\n  );\n}\n\nexport async function registerMe(request: Request, env: ArchiveWorkerEnv, session: Session): Promise<Response> {\n  const body = await readJsonBody(request);\n  const parsed = registerBodySchema.safeParse(body);\n  if (!parsed.success) throw invalid();\n  const name = parsed.data.name ?? '';\n\n  const existing = await first<{ display_name: string; id: string }>(\n    env,\n    SQL.publisher,\n    session.subject.issuer,\n    session.subject.subject,\n  );\n  if (existing !== null) {\n    return identityJson(200, { id: existing.id, name: existing.display_name, operator: session.operator });\n  }\n  const id = uuid();\n  await run(\n    env,\n    SQL.insertPublisher,\n    id,\n    session.subject.issuer,\n    session.subject.subject,\n    name,\n    now(),\n    session.subject.issuer,\n    session.subject.subject,\n    Date.now(),\n  );\n  const row = await first<{ display_name: string; id: string }>(\n    env,\n    SQL.publisher,\n    session.subject.issuer,\n    session.subject.subject,\n  );\n  if (row === null) {\n    if ((await first(env, SQL.revokedSubject, session.subject.issuer, session.subject.subject, Date.now())) !== null) {\n      throw new ApiError(401, 'unauthenticated', 'Sign-in is required.');\n    }\n    throw conflict();\n  }\n  return identityJson(201, { id: row.id, name: row.display_name, operator: session.operator });\n}\n\nexport async function renameMe(request: Request, env: ArchiveWorkerEnv, session: Session): Promise<Response> {\n  const publisher = requirePublisherRow(session);\n  const body = await readJsonBody(request);\n  const parsed = renameBodySchema.safeParse(body);\n  if (!parsed.success) throw invalid();\n  if (parsed.data.name !== publisher.displayName) {\n    await run(env, SQL.renamePublisher, parsed.data.name, publisher.id, parsed.data.name);\n  }\n  return identityJson(200, { id: publisher.id, name: parsed.data.name, operator: session.operator });\n}\n\n/**\n * Archive-profile erasure, independent of the identity provider's account.\n * The credential survives so an issuer can retry coordinated account erasure.\n */\nexport async function deleteProfile(env: ArchiveWorkerEnv, session: Session): Promise<Response> {\n  if (session.publisher !== null) await run(env, SQL.deletePublisher, session.publisher.id);\n  return new Response(null, {\n    headers: {\n      'cache-control': 'no-store',\n    },\n    status: 204,\n  });\n}\n\n/** Revocation and erasure share a transaction, preventing a stale session from recreating the profile. */\nexport async function deleteAccountProfile(env: ArchiveWorkerEnv, session: Session): Promise<Response> {\n  const { issuer, subject } = session.subject;\n  // Issuance may be one tolerance ahead; expiry verification permits another.\n  await databaseCall(() =>\n    env.DB.batch([\n      env.DB.prepare(SQL.revokeSubject).bind(\n        issuer,\n        subject,\n        Date.now() + (SESSION_MAX_AGE_SECONDS + 2 * JWT_CLOCK_TOLERANCE_SECONDS) * 1000,\n      ),\n      env.DB.prepare(SQL.deleteSubjectPublisher).bind(issuer, subject),\n    ]),\n  );\n  return new Response(null, { headers: noStore, status: 204 });\n}\n\n/**\n * Operator-side GDPR erasure: removes any publisher's row; FK cascades take its\n * publications, likes and retry keys. Idempotent for the same reason the self-erase\n * is: an already-erased publisher is a 204 with nothing left to remove.\n */\nexport async function erasePublisher(env: ArchiveWorkerEnv, session: Session, publisherId: string): Promise<Response> {\n  const operator = requireOperatorRow(session);\n  // The terminal moderation action: erasing a publisher removes their row, and FK\n  // cascades take the publications, likes and retry keys with it — the same cascade a\n  // self-erase walks, applied to any publisher the operator names. The guarded audit\n  // and deletion share a transaction, so retries never record fictitious actions.\n  await databaseCall(() =>\n    env.DB.batch([\n      env.DB.prepare(SQL.auditErasure).bind(uuid(), operator.id, now(), publisherId),\n      env.DB.prepare(SQL.deletePublisher).bind(publisherId),\n    ]),\n  );\n  return new Response(null, { headers: noStore, status: 204 });\n}\n\n/** The operator's accountability log: newest actions first, bounded, ids only. */\nexport async function listModerationLog(request: Request, env: ArchiveWorkerEnv, session: Session): Promise<Response> {\n  requireOperatorRow(session);\n  const context = 'moderation-log';\n  const { cursor, limit } = forwardPage(request, context);\n  const bound = moderationLogSql({ cursor, limit: limit + 1 });\n  const rows = await all<{\n    id: string;\n    action: ArchiveModerationAction;\n    collection: string | null;\n    created_at: string;\n    operator_id: string;\n    target_id: string;\n  }>(env, bound.sql, ...bound.parameters);\n  const page = rows.slice(0, limit);\n  const last = page.at(-1);\n  const parsed = archiveModerationLogSchema.safeParse({\n    actions: page.map((row) => ({\n      action: row.action,\n      collection: row.collection,\n      createdAt: row.created_at,\n      id: row.id,\n      operatorId: row.operator_id,\n      targetId: row.target_id,\n    })),\n    cursor:\n      rows.length > limit && last !== undefined\n        ? nextCursor({ createdAt: last.created_at, id: last.id }, context)\n        : null,\n  });\n  if (!parsed.success) throw recordUnavailable();\n  return json(200, parsed.data, noStore);\n}\n\nexport const requirePublisherRow = (session: Session): Publisher => {\n  if (session.publisher === null) throw forbidden('Register before publishing.');\n  return session.publisher;\n};\n\n/** Operator authority plus a registered publisher row: moderation routes need both,\n * the role claim for authority and the row for attribution. */\nexport const requireOperatorRow = (session: Session): Publisher => {\n  if (!session.operator) throw forbidden('Operator access is required.');\n  if (session.publisher === null) throw forbidden('Register before moderating.');\n  return session.publisher;\n};\n\n// Private identity payloads share the one alias rule with the emitted DTOs.\nconst registerBodySchema = s.object({ name: archiveAliasSchema.optional() });\nconst renameBodySchema = s.object({ name: archiveAliasSchema });\n\nexport async function myPublications(\n  collection: ArchiveCollection,\n  env: ArchiveWorkerEnv,\n  session: Session,\n): Promise<Response> {\n  if (session.publisher === null) return json(200, { entries: [] }, noStore);\n  const rows = await all<PublicationRow>(\n    env,\n    SQL.ownPublications,\n    session.publisher.id,\n    collection.name,\n    ARCHIVE_LIMITS.maxPublications,\n  );\n  // The private owner DTO adds the create retry key; public routes never emit it.\n  return json(200, { entries: rows.map((row) => rowToOwnedEntry(collection, row)) }, noStore);\n}\n\nexport async function myLikes(request: Request, env: ArchiveWorkerEnv, session: Session): Promise<Response> {\n  const params = new URL(request.url).searchParams;\n  const raw = params.get('ids');\n  if (raw === null) {\n    const context = `likes:${session.publisher?.id ?? 'unregistered'}`;\n    const { cursor, limit } = forwardPage(request, context);\n    if (session.publisher === null) return json(200, { cursor: null, ids: [] }, noStore);\n    const bound = likesPageSql(session.publisher.id, { cursor, limit: limit + 1 });\n    const rows = await all<{ created_at: string; publication_id: string }>(env, bound.sql, ...bound.parameters);\n    const page = rows.slice(0, limit);\n    const last = page.at(-1);\n    const parsed = archiveLikesPageSchema.safeParse({\n      cursor:\n        rows.length > limit && last !== undefined\n          ? nextCursor({ createdAt: last.created_at, id: last.publication_id }, context)\n          : null,\n      ids: page.map((row) => row.publication_id),\n    });\n    if (!parsed.success) throw recordUnavailable();\n    return json(200, parsed.data, noStore);\n  }\n  queryParams(new URL(request.url), ['ids']);\n  const ids = [...new Set(raw.split(','))];\n  if (ids.length > ARCHIVE_LIMITS.likeStateIds || ids.some((id) => !UUID_RE.test(id))) throw badRequest();\n  if (session.publisher === null) return json(200, { ids: [] }, noStore);\n  const bound = likedPublicationsSql(session.publisher.id, ids);\n  const rows = await all<{ publication_id: string }>(env, bound.sql, ...bound.parameters);\n  const liked = new Set(rows.map((r) => r.publication_id));\n  const dto = { ids: ids.filter((id) => liked.has(id)) };\n  const validated = archiveLikedIdsSchema.safeParse(dto);\n  if (!validated.success) throw recordUnavailable();\n  return json(200, validated.data, noStore);\n}\n\n/* --------------------------------- mutations ------------------------------- */\n\n// The core validates the request envelope; the collection's derive step validates the payload.\nconst publishBodySchema = s.object({ clientKey: uuidSchema, payload: s.unknown() });\nconst updateBodySchema = s.object({\n  expectedRevision: s.number().int().min(1).max(Number.MAX_SAFE_INTEGER),\n  payload: s.unknown(),\n});\n\nexport async function publishEntry(\n  collection: ArchiveCollection,\n  request: Request,\n  env: ArchiveWorkerEnv,\n  config: ApiConfig,\n  session: Session,\n): Promise<Response> {\n  if (!config.publishingEnabled) throw new ApiError(503, 'publishing-disabled', 'Publishing is currently disabled.');\n  const publisher = requirePublisherRow(session);\n  const body = await readJsonBody(request);\n  const parsed = publishBodySchema.safeParse(body);\n  if (!parsed.success) throw invalid();\n  const { clientKey } = parsed.data;\n  // The derive step owns every content rejection: schema, vocabulary, title, byte bound.\n  const derivation = await collection.derive(parsed.data.payload);\n  if (derivation === null) throw invalid();\n\n  const payloadJson = derivation.canonicalJson;\n  const hash = derivation.contentHash;\n  const owner = publisher.id;\n  const name = collection.name;\n\n  // Retry-key inspection first: the request record decides replay vs conflict vs gone.\n  // A logically expired record is ignored entirely — retention is enforced by time,\n  // not just by the periodic sweep.\n  const nowMs = Date.now();\n  const retry = await first<{ expires_at: number; payload_hash: string; publication_id: string | null }>(\n    env,\n    SQL.request,\n    owner,\n    name,\n    clientKey,\n  );\n  if (retry !== null && retry.expires_at > nowMs) {\n    if (retry.payload_hash !== hash) throw conflict('That key was used for a different payload.');\n    if (retry.publication_id === null) {\n      throw new ApiError(410, 'gone', 'That publication was removed.');\n    }\n    const entry = await entryById(collection, env, retry.publication_id);\n    if (entry !== null) return json(200, entry, noStore);\n  }\n\n  const existing = await first<PublicationRow>(env, SQL.publicationByKey, owner, name, clientKey);\n  if (existing !== null) {\n    // A hidden entry is frozen for its owner too: replaying the create key must not\n    // read as a live publication.\n    if (existing.hidden_at !== null) throw forbidden('This entry is under moderation review.');\n    if (existing.content_hash !== hash) throw conflict('That key was used for a different payload.');\n    return json(200, rowToEntry(collection, existing), noStore);\n  }\n\n  const timestamp = now();\n  const expiresAt = Date.now() + ARCHIVE_LIMITS.idempotencyRetentionMs;\n  const tagsJson = JSON.stringify(derivation.tags);\n  const results = await databaseCall(() =>\n    env.DB.batch([\n      env.DB.prepare(SQL.expireRequests).bind(Date.now()),\n      env.DB.prepare(SQL.insertPublication).bind(\n        uuid(),\n        owner,\n        name,\n        clientKey,\n        ARCHIVE_CONTRACT_VERSION,\n        derivation.contentVersion,\n        payloadJson,\n        hash,\n        derivation.filter,\n        derivation.title,\n        tagsJson,\n        timestamp,\n        timestamp,\n        owner,\n        name,\n        ARCHIVE_LIMITS.maxPublications,\n        owner,\n        name,\n        clientKey,\n        Date.now(),\n      ),\n      env.DB.prepare(SQL.insertRequest).bind(\n        owner,\n        name,\n        clientKey,\n        hash,\n        timestamp,\n        expiresAt,\n        owner,\n        name,\n        clientKey,\n        hash,\n      ),\n    ]),\n  );\n  if ((results[1]?.meta?.changes ?? 0) === 0) {\n    // The guarded insert was skipped: a race already wrote the key, the key's\n    // publication was removed, or the owner's live-publication quota is full.\n    // Re-reading the request record first distinguishes a tombstone from a race.\n    const request = await first<{ expires_at: number; payload_hash: string; publication_id: string | null }>(\n      env,\n      SQL.request,\n      owner,\n      name,\n      clientKey,\n    );\n    if (request !== null && request.expires_at > Date.now()) {\n      if (request.publication_id === null) throw new ApiError(410, 'gone', 'That publication was removed.');\n      if (request.payload_hash === hash) {\n        const entry = await entryById(collection, env, request.publication_id);\n        if (entry !== null) return json(200, entry, noStore);\n        // The publication vanished between checks: the key is a tombstone.\n        throw new ApiError(410, 'gone', 'That publication was removed.');\n      }\n      throw conflict('That key was used for a different payload.');\n    }\n    const raced = await first<PublicationRow>(env, SQL.publicationByKey, owner, name, clientKey);\n    if (raced !== null && raced.hidden_at !== null) throw forbidden('This entry is under moderation review.');\n    if (raced !== null && raced.content_hash === hash) return json(200, rowToEntry(collection, raced), noStore);\n    if (raced !== null) throw conflict('That key was used for a different payload.');\n    throw new ApiError(429, 'quota', 'Publication quota reached.');\n  }\n\n  const created = await first<PublicationRow>(env, SQL.publicationByKey, owner, name, clientKey);\n  if (created === null) throw conflict();\n  return json(201, rowToEntry(collection, created), noStore);\n}\n\nexport async function updateEntry(\n  collection: ArchiveCollection,\n  request: Request,\n  env: ArchiveWorkerEnv,\n  config: ApiConfig,\n  session: Session,\n  id: string,\n): Promise<Response> {\n  if (!config.publishingEnabled) throw new ApiError(503, 'publishing-disabled', 'Publishing is currently disabled.');\n  const publisher = requirePublisherRow(session);\n  // The owner's row regardless of moderation state: the author must be told their\n  // entry is frozen, not that it vanished.\n  const row = await first<PublicationRow>(env, SQL.publicationAny, id, collection.name);\n  // Replacing an entry is the author's alone; anyone else sees the entry as absent.\n  if (row === null || row.owner_id !== publisher.id) throw notFound();\n  // Hidden entries are frozen: an edit must not bypass the operator's decision.\n  if (row.hidden_at !== null) throw forbidden('This entry is under moderation review.');\n\n  const body = await readJsonBody(request);\n  const parsed = updateBodySchema.safeParse(body);\n  if (!parsed.success) throw invalid();\n  const { expectedRevision } = parsed.data;\n\n  if (expectedRevision !== row.revision) throw conflict();\n\n  const derivation = await collection.derive(parsed.data.payload);\n  if (derivation === null) throw invalid();\n  const payloadJson = derivation.canonicalJson;\n  const hash = derivation.contentHash;\n  if (hash === row.content_hash) {\n    const current = await first<PublicationRow>(env, SQL.publicationAny, id, collection.name);\n    if (current === null || current.owner_id !== publisher.id) throw notFound();\n    if (current.hidden_at !== null) throw forbidden('This entry is under moderation review.');\n    if (current.revision !== expectedRevision) throw conflict();\n    return json(200, rowToEntry(collection, current), noStore);\n  }\n\n  const tagsJson = JSON.stringify(derivation.tags);\n  const result = await run(\n    env,\n    SQL.updatePublication,\n    ARCHIVE_CONTRACT_VERSION,\n    derivation.contentVersion,\n    payloadJson,\n    hash,\n    derivation.filter,\n    derivation.title,\n    tagsJson,\n    now(),\n    id,\n    publisher.id,\n    expectedRevision,\n    hash,\n  );\n  if ((result.meta?.changes ?? 0) === 0) {\n    const current = await first<PublicationRow>(env, SQL.publicationAny, id, collection.name);\n    if (current === null) throw notFound();\n    if (current.hidden_at !== null) throw forbidden('This entry is under moderation review.');\n    throw conflict();\n  }\n  const updated = await entryById(collection, env, id);\n  if (updated === null) throw notFound();\n  return json(200, updated, noStore);\n}\n\nexport async function deleteEntry(\n  collection: ArchiveCollection,\n  env: ArchiveWorkerEnv,\n  session: Session,\n  id: string,\n): Promise<Response> {\n  // The owner's row regardless of moderation state: the author may still remove a\n  // hidden entry (their content, their call) — hiding freezes edits, not removal.\n  // Removing an entry is the author's alone; an operator may remove ANY entry — the\n  // terminal moderation action for abusive content. The operator path carries the\n  // same registered-publisher-row requirement every moderation route shares: one\n  // accountable identity per action. Everyone else sees the entry as absent.\n  if (session.operator) {\n    const operator = requireOperatorRow(session);\n    await databaseCall(() =>\n      env.DB.batch([\n        env.DB.prepare(SQL.auditRemoval).bind(uuid(), operator.id, now(), id, collection.name),\n        env.DB.prepare(SQL.removePublicationAny).bind(id, collection.name),\n      ]),\n    );\n  } else {\n    const publisher = requirePublisherRow(session);\n    const row = await first<PublicationRow>(env, SQL.publicationAny, id, collection.name);\n    if (row === null) return new Response(null, { headers: noStore, status: 204 });\n    if (row.owner_id !== publisher.id) throw notFound();\n    await run(env, SQL.removePublication, id, publisher.id);\n  }\n  return new Response(null, { headers: noStore, status: 204 });\n}\n\nexport async function setLike(\n  collection: ArchiveCollection,\n  env: ArchiveWorkerEnv,\n  config: ApiConfig,\n  session: Session,\n  id: string,\n  liked: boolean,\n): Promise<Response> {\n  const publisher = requirePublisherRow(session);\n  if (liked && !config.likesEnabled) throw new ApiError(503, 'likes-disabled', 'Likes are currently disabled.');\n  const row = await first<PublicationRow>(env, SQL.publication, id, collection.name);\n  if (row === null) throw notFound();\n  if (liked) {\n    await run(env, SQL.insertLike, publisher.id, now(), id);\n  } else {\n    await run(env, SQL.removeLike, id, publisher.id);\n  }\n  // One consistent snapshot: the count and the viewer's flag read together.\n  const state = await first<{ id: string; like_count: number; liked: number }>(env, SQL.likeState, publisher.id, id);\n  if (state === null) throw notFound();\n  const dto = { id: state.id, likeCount: state.like_count, liked: state.liked === 1 };\n  const validated = archiveLikeStateSchema.safeParse(dto);\n  if (!validated.success) throw recordUnavailable();\n  return json(200, validated.data, noStore);\n}\n\n/* -------------------------------- moderation ------------------------------- */\n\n// One free-text report reason: trimmed, non-empty, well-formed, bounded.\nconst reportBodySchema = s.object({\n  reason: s.string().check(isWellFormedText).trim().min(1).max(ARCHIVE_LIMITS.reportReasonChars),\n});\n\n/**\n * A reader's abuse report against one visible entry. Idempotent per (entry, reporter):\n * reporting again is the same 204, never a duplicate row. Hidden or missing entries\n * are 404 — they cannot be reported, they are already actioned or gone.\n */\nexport async function reportEntry(\n  collection: ArchiveCollection,\n  request: Request,\n  env: ArchiveWorkerEnv,\n  session: Session,\n  id: string,\n): Promise<Response> {\n  const reporter = requirePublisherRow(session);\n  const body = await readJsonBody(request);\n  const parsed = reportBodySchema.safeParse(body);\n  if (!parsed.success) throw invalid();\n  const row = await first<PublicationRow>(env, SQL.publication, id, collection.name);\n  if (row === null) throw notFound();\n  // Bound in the SQL's authored placeholder order: reporter, reason, created_at,\n  // then the WHERE's entry id and collection.\n  await run(env, SQL.insertReport, uuid(), reporter.id, parsed.data.reason, now(), id, collection.name);\n  return new Response(null, { headers: noStore, status: 204 });\n}\n\n/**\n * The operator soft-hide: removes an entry from every public surface while keeping\n * the row, its likes and its retry key intact. Idempotent — already in the requested\n * state answers the same 204. Operator authority is the session's verified role\n * claim; a registered publisher row is still required (one accountable identity).\n */\nexport async function setHidden(\n  collection: ArchiveCollection,\n  env: ArchiveWorkerEnv,\n  session: Session,\n  id: string,\n  hidden: boolean,\n): Promise<Response> {\n  const operator = requireOperatorRow(session);\n  // Any collection row, visible or hidden: the operator acts on the storage row. The\n  // pre-read establishes existence only. The transactional audit guard decides\n  // whether the requested transition is an effective action.\n  const row = await first<PublicationRow>(env, SQL.publicationAny, id, collection.name);\n  if (row === null) throw notFound();\n  const statement = hidden\n    ? env.DB.prepare(SQL.hidePublication).bind(now(), id, collection.name)\n    : env.DB.prepare(SQL.unhidePublication).bind(id, collection.name);\n  await databaseCall(() =>\n    env.DB.batch([\n      env.DB.prepare(SQL.auditHide).bind(\n        uuid(),\n        operator.id,\n        hidden ? 'hide' : 'unhide',\n        now(),\n        id,\n        collection.name,\n        Number(hidden),\n      ),\n      statement,\n    ]),\n  );\n  return new Response(null, { headers: noStore, status: 204 });\n}\n\n/** The operator's report queue for one collection: newest first, bounded. */\nexport async function listReports(\n  collection: ArchiveCollection,\n  request: Request,\n  env: ArchiveWorkerEnv,\n  session: Session,\n): Promise<Response> {\n  requireOperatorRow(session);\n  const status = new URL(request.url).searchParams.get('status') ?? 'unresolved';\n  if (status !== 'unresolved' && status !== 'resolved') throw badRequest();\n  const context = `reports:${collection.name}:${status}`;\n  const { cursor, limit } = forwardPage(request, context, ['status']);\n  const bound = reportsPageSql(\n    { collection: collection.name, resolved: status === 'resolved' },\n    { cursor, limit: limit + 1 },\n  );\n  const rows = await all<ReportRow>(env, bound.sql, ...bound.parameters);\n  const page = rows.slice(0, limit);\n  const last = page.at(-1);\n  const parsed = archiveReportsSchema.safeParse({\n    cursor:\n      rows.length > limit && last !== undefined\n        ? nextCursor({ createdAt: last.created_at, id: last.id }, context)\n        : null,\n    reports: page.map((row) => ({\n      createdAt: row.created_at,\n      entryId: row.publication_id,\n      entryTitle: row.entry_title,\n      id: row.id,\n      reason: row.reason,\n      reporter: { id: row.reporter_id, name: row.reporter_name },\n      resolvedAt: row.resolved_at,\n    })),\n  });\n  if (!parsed.success) throw recordUnavailable();\n  return json(200, parsed.data, noStore);\n}\n\ninterface ReportRow {\n  collection: string;\n  created_at: string;\n  entry_title: string;\n  id: string;\n  publication_id: string;\n  reason: string;\n  reporter_id: string;\n  reporter_name: string;\n  resolved_at: string | null;\n}\n\nexport async function resolveReport(\n  collection: ArchiveCollection,\n  env: ArchiveWorkerEnv,\n  session: Session,\n  id: string,\n): Promise<Response> {\n  requireOperatorRow(session);\n  const row = await first<{ id: string }>(env, SQL.reportById, id, collection.name);\n  if (row === null) throw notFound();\n  await run(env, SQL.resolveReport, now(), id, collection.name);\n  return new Response(null, { headers: noStore, status: 204 });\n}\n\nexport async function myReports(request: Request, env: ArchiveWorkerEnv, session: Session): Promise<Response> {\n  const context = `own-reports:${session.publisher?.id ?? 'unregistered'}`;\n  const { cursor, limit } = forwardPage(request, context);\n  if (session.publisher === null) return json(200, { cursor: null, reports: [] }, noStore);\n  const bound = reportsPageSql({ publisherId: session.publisher.id }, { cursor, limit: limit + 1 });\n  const rows = await all<ReportRow>(env, bound.sql, ...bound.parameters);\n  const page = rows.slice(0, limit);\n  const last = page.at(-1);\n  const parsed = archiveOwnReportsSchema.safeParse({\n    cursor:\n      rows.length > limit && last !== undefined\n        ? nextCursor({ createdAt: last.created_at, id: last.id }, context)\n        : null,\n    reports: page.map((row) => ({\n      collection: row.collection,\n      createdAt: row.created_at,\n      entryId: row.publication_id,\n      id: row.id,\n      reason: row.reason,\n      resolvedAt: row.resolved_at,\n    })),\n  });\n  if (!parsed.success) throw recordUnavailable();\n  return json(200, parsed.data, noStore);\n}\n"],"mappings":"kJA6EA,eAAe,aAAgB,EAAyC,CACtE,GAAI,CACF,OAAO,MAAM,EAAU,CACzB,OAAS,EAAO,CACd,MAAM,IAAI,EAAA,SAAS,IAAK,WAAY,gCAAiC,CAAE,QAAO,WAAY,CAAE,KAAM,UAAW,CAAE,CAAC,CAClH,CACF,CACA,IAAM,OAAY,EAAuB,EAAa,GAAG,IACvD,iBACE,EAAI,GAAG,QAAQ,CAAG,CAAC,CAChB,KAAK,GAAG,CAAM,CAAC,CACf,MAAS,CACd,EACI,KAAU,EAAuB,EAAa,GAAG,IACrD,aAAa,SAAY,CACvB,IAAM,EAAS,MAAM,EAAI,GAAG,QAAQ,CAAG,CAAC,CACrC,KAAK,GAAG,CAAM,CAAC,CACf,IAAO,EACV,GAAI,CAAC,MAAM,QAAQ,EAAO,OAAO,EAAG,MAAU,MAAM,gCAAgC,EACpF,OAAO,EAAO,OAChB,CAAC,EACG,KAAO,EAAuB,EAAa,GAAG,IAClD,iBACE,EAAI,GAAG,QAAQ,CAAG,CAAC,CAChB,KAAK,GAAG,CAAM,CAAC,CACf,IAAI,CACT,EAEI,SAAqB,OAAO,WAAW,EACvC,QAAoB,IAAI,KAAK,CAAA,CAAE,YAAY,EAG3C,sBACJ,IAAI,EAAA,SAAS,IAAK,qBAAsB,+BAAgC,CAAE,WAAY,CAAE,KAAM,QAAS,CAAE,CAAC,EAEtG,EAAU,kEAQV,YAAc,EAA+B,IAAwB,CACzE,IAAI,EACJ,GAAI,CACF,EAAc,KAAK,MAAM,EAAI,YAAY,CAC3C,MAAQ,CACN,MAAM,kBAAkB,CAC1B,CACA,IAAM,EAAS,EAAW,SAAS,MAAM,UAAU,CACjD,OAAQ,CAAE,GAAI,EAAI,SAAU,KAAM,EAAI,WAAY,EAClD,YAAa,EAAI,aACjB,eAAgB,EAAI,gBACpB,GAAI,EAAI,GACR,UAAW,EAAI,WACf,QAAS,EACT,YAAa,EAAI,aACjB,SAAU,EAAI,SACd,cAAe,EAAI,eACnB,UAAW,EAAI,UACjB,CAAC,EACD,GAAI,CAAC,EAAO,QAAS,MAAM,kBAAkB,EAC7C,OAAO,EAAO,IAChB,EAEM,iBAAmB,EAA+B,IAAwB,CAC9E,IAAM,EAAQ,WAAW,EAAY,CAAG,EAIxC,GAAI,CADQ,EAAA,WAAW,UAAU,EAAI,UAChC,CAAA,CAAI,QAAS,MAAM,kBAAkB,EAC1C,MAAO,CAAE,GAAG,EAAO,UAAW,EAAI,WAAY,OAAQ,EAAI,YAAc,IAAK,CAC/E,EAEM,UAAY,MAAO,EAA+B,EAAuB,IAAe,CAC5F,IAAM,EAAM,MAAM,MAAsB,EAAK,EAAA,IAAI,YAAa,EAAI,EAAW,IAAI,EACjF,OAAO,IAAQ,KAAO,KAAO,WAAW,EAAY,CAAG,CACzD,EAOM,eAAkB,GAA8C,CACpE,GAAI,IAAW,KAAM,OACrB,GAAI,EAAO,OAAS,EAAA,eAAe,YAAa,MAAM,EAAA,WAAW,EAGjE,IAAM,GAAS,EAAO,MAAM,iBAAiB,GAAK,CAAC,EAAA,CAAG,MAAM,EAAG,EAAA,eAAe,WAAW,EACrF,KAAM,SAAW,EACrB,OAAO,EAAM,IAAK,GAAM,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,GAAG,CAC7C,EAgBM,EAAsB,EAAA,EAAE,OAAO,CACnC,EAAG,EAAA,EAAE,OAAO,CACV,GAAI,EAAA,EAAE,OAAO,CAAC,CAAC,KAAK,EACpB,UAAW,EAAA,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAA2B,EAC9D,YAAa,EAAA,EAAE,OAAO,CAAC,CAAC,YAAY,CACtC,CAAC,EACD,EAAG,EAAA,EAAE,KAAK,CAAC,OAAQ,UAAU,CAAU,EACvC,EAAG,EAAA,EAAE,OAAO,CACV,EAAG,EAAA,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,SAAS,EAC9B,EAAG,EAAA,EAAE,OAAO,CAAC,CAAC,IAAI,EAAA,eAAe,UAAU,CAAC,CAAC,SAAS,EACtD,EAAG,EAAA,EAAE,OAAO,CAAC,CAAC,IAAI,EAAA,eAAe,UAAU,EAC3C,EAAG,EAAA,EACA,OAAO,CAAC,CACR,IAAI,EAAA,eAAe,YAAc,EAAA,eAAe,WAAW,CAAC,CAC5D,SAAS,EACZ,EAAG,EAAA,EAAE,KAAK,CAAC,QAAS,QAAQ,CAAU,EACtC,EAAG,EAAA,EAAE,OAAO,CAAC,CAAC,IAAI,EAAA,eAAe,UAAU,CAAC,CAAC,SAAS,CACxD,CAAC,CACH,CAAC,EAEK,cAAiB,IAA4C,CACjE,GAAI,EAAI,GACR,UAAW,EAAI,WACf,YAAa,EAAI,YACnB,GAEM,cAAgB,EAAqB,EAA4B,IACrE,EAAA,kBAAkB,CAChB,EAAG,cAAc,CAAG,EACpB,EAAG,EACH,EAAG,CACD,EAAG,EAAM,QAAU,KACnB,EAAG,EAAM,QAAU,KACnB,EAAG,EAAM,WACT,EAAG,EAAM,aAAe,KACxB,EAAG,EAAM,KACT,EAAG,EAAM,KAAO,IAClB,CACF,CAAyB,EAErB,cAAgB,EAAa,IAA4C,CAC7E,IAAM,EAAU,EAAA,kBAAkB,EAAK,CAAmB,EACpD,CAAE,KAAM,EACd,IACG,EAAE,GAAK,IAAA,MAAe,EAAM,QAC7B,EAAE,IAAM,EAAM,MACd,EAAE,IAAM,EAAM,aACb,EAAE,GAAK,IAAA,MAAe,EAAM,SAC5B,EAAE,GAAK,IAAA,MAAe,EAAM,cAC5B,EAAE,GAAK,IAAA,MAAe,EAAM,IAE7B,MAAM,EAAA,WAAW,EAEnB,OAAO,CACT,EAEA,eAAsB,YACpB,EACA,EACA,EACmB,CACnB,IAAM,EAAM,IAAI,IAAI,EAAQ,GAAG,EACzB,EAAS,EAAA,YAAY,EAAK,CAAC,SAAU,SAAU,SAAU,QAAS,SAAU,OAAQ,KAAK,CAAC,EAE1F,EAAU,EAAO,IAAI,MAAM,GAAK,SAChC,EAAa,EAAA,kBAAkB,UAAU,CAAO,EACtD,GAAI,CAAC,EAAW,QAAS,MAAM,EAAA,WAAW,EAE1C,IAAM,EAAW,EAAO,IAAI,OAAO,EAC7B,EAAQ,IAAa,KAAO,EAAA,eAAe,SAAW,OAAO,CAAQ,EAC3E,GAAI,CAAC,OAAO,UAAU,CAAK,GAAK,EAAQ,GAAK,EAAQ,EAAA,eAAe,YAAa,MAAM,EAAA,WAAW,EAElG,IAAM,EAAS,EAAO,IAAI,QAAQ,EAClC,GAAI,IAAW,MAAQ,CAAC,EAAW,QAAQ,SAAS,CAAM,EAAG,MAAM,EAAA,WAAW,EAC9E,IAAM,EAAM,EAAO,IAAI,KAAK,EAC5B,GAAI,IAAQ,MAAQ,CAAC,EAAW,KAAK,SAAS,CAAG,EAAG,MAAM,EAAA,WAAW,EACrE,IAAM,EAAS,EAAO,IAAI,QAAQ,EAClC,GAAI,IAAW,MAAQ,CAAC,EAAQ,KAAK,CAAM,EAAG,MAAM,EAAA,WAAW,EAE/D,IAAM,EAAc,eAAe,EAAO,IAAI,QAAQ,CAAC,EACjD,EAA2B,CAC/B,OAAQ,GAAU,IAAA,GAClB,WAAY,EAAW,KACvB,OAAQ,GAAU,IAAA,GAClB,MAAO,EAAQ,EACf,cACA,KAAM,EAAW,KACjB,IAAK,GAAO,IAAA,EACd,EAGM,EAAY,EAAO,IAAI,QAAQ,EAC/B,EAAU,IAAc,KAAO,KAAO,aAAa,EAAW,CAAK,EACnE,EAA6B,GAAS,GAAK,OAC7C,IAAY,OAAM,EAAM,OAAS,EAAQ,GAC7C,EAAM,UAAY,EAElB,IAAM,UAAY,KAAO,IAAoD,CAC3E,IAAM,EAAQ,EAAA,oBAAoB,CAAC,EACnC,OAAO,IAAoB,EAAK,EAAM,IAAK,GAAG,EAAM,UAAU,CAChE,EAEM,EAAU,MAAM,UAAU,CAAK,EAC/B,EAAU,EAAQ,OAAS,EAE3B,EAAO,EAAQ,MAAM,EAAG,CAAK,EAC/B,IAAc,YAAY,EAAK,QAAQ,EAI3C,IAAI,EAAc,GAClB,GAAI,IAAY,MAAQ,EAAK,OAAS,EAAG,CACvC,IAAM,EAA2B,CAAE,GAAG,EAAO,MAAO,CAAE,EAClD,IAAc,QAChB,EAAM,OAAS,cAAc,EAAK,EAAE,EACpC,EAAM,UAAY,aAElB,EAAM,OAAS,cAAc,EAAK,EAAK,OAAS,EAAE,EAClD,EAAM,UAAY,QAEpB,GAAe,MAAM,UAAU,CAAK,EAAA,CAAG,OAAS,CAClD,CAEA,IAAM,EACJ,EAAK,OAAS,IAAO,IAAc,QAAU,GAAa,IAAc,YAAc,GAClF,aAAa,EAAK,EAAK,OAAS,GAAI,OAAQ,CAAK,EACjD,KACA,EACJ,EAAK,OAAS,IAAO,IAAc,YAAc,GAAa,IAAc,QAAU,GAClF,aAAa,EAAK,GAAI,WAAY,CAAK,EACvC,KAIA,EAAU,CAAE,OAAQ,EAAM,QAAS,EAAK,IAAK,GAAQ,WAAW,EAAY,CAAG,CAAC,EAAG,UAAS,EAClG,OAAO,EAAA,KAAK,IAAK,EAAS,EAAA,OAAO,CACnC,CAGA,SAAgB,eAAe,EAAyC,CACtE,IAAM,EAAS,EAAA,4BAA4B,UAAU,CACnD,QAAS,CAAC,GAAG,EAAW,OAAO,CAAC,CAAC,KAAK,EACtC,KAAM,EAAW,KACjB,KAAM,CAAC,GAAG,EAAW,IAAI,CAAC,CAAC,KAAK,CAClC,CAAC,EACD,GAAI,CAAC,EAAO,QAAS,MAAM,kBAAkB,EAC7C,OAAO,EAAA,KAAK,IAAK,EAAO,KAAM,EAAA,OAAO,CACvC,CAEA,eAAsB,SAAS,EAA+B,EAAuB,EAA+B,CAClH,IAAM,EAAQ,MAAM,UAAU,EAAY,EAAK,CAAE,EACjD,GAAI,IAAU,KAAM,MAAM,EAAA,SAAS,EACnC,OAAO,EAAA,KAAK,IAAK,EAAO,EAAA,OAAO,CACjC,CAUA,eAAsB,WAAW,EAAmB,EAA0C,CAC5F,IAAI,EAAiC,KACjC,EAA4D,KAChE,GAAI,CAEF,GAAkB,MADA,MAA2B,EAAK,EAAA,IAAI,aAAa,EAAA,EAC5C,SAAW,CACpC,MAAQ,CACN,EAAS,sBACX,CACI,IAAW,MAAQ,IAAA,IAA4C,EAAS,mBAC5E,IAAM,EAAS,EAAA,oBAAoB,UAAU,CAC3C,kBACA,SAAU,CAAE,MAAO,EAAO,aAAc,WAAY,EAAO,iBAAkB,EAC7E,OAAQ,EAAA,eACR,SACA,cAAA,EACA,OAAQ,IAAW,KAAO,KAAO,UACnC,CAAC,EACD,GAAI,CAAC,EAAO,QAAS,MAAM,kBAAkB,EAC7C,OAAO,EAAA,KAAK,IAAW,KAAO,IAAM,IAAK,EAAO,KAAM,EAAA,OAAO,CAC/D,CAKA,IAAM,cAAgB,EAAgB,IAAgC,CACpE,IAAM,EAAS,EAAA,sBAAsB,UAAU,CAAQ,EACvD,GAAI,CAAC,EAAO,QAAS,MAAM,kBAAkB,EAC7C,OAAO,EAAA,KAAK,EAAQ,EAAO,KAAM,EAAA,OAAO,CAC1C,EAEA,SAAgB,MAAM,EAAmC,CACvD,OAAO,aACL,IACA,GAAS,UACL,CAAE,GAAI,EAAQ,UAAU,GAAI,KAAM,EAAQ,UAAU,YAAa,SAAU,EAAQ,QAAS,EAC5F,IACN,CACF,CAEA,eAAsB,WAAW,EAAkB,EAAuB,EAAqC,CAC7G,IAAM,EAAO,MAAM,EAAA,aAAa,CAAO,EACjC,EAAS,EAAmB,UAAU,CAAI,EAChD,GAAI,CAAC,EAAO,QAAS,MAAM,EAAA,QAAQ,EACnC,IAAM,EAAO,EAAO,KAAK,MAAQ,GAE3B,EAAW,MAAM,MACrB,EACA,EAAA,IAAI,UACJ,EAAQ,QAAQ,OAChB,EAAQ,QAAQ,OAClB,EACA,GAAI,IAAa,KACf,OAAO,aAAa,IAAK,CAAE,GAAI,EAAS,GAAI,KAAM,EAAS,aAAc,SAAU,EAAQ,QAAS,CAAC,EAEvG,IAAM,EAAK,KAAK,EAChB,MAAM,IACJ,EACA,EAAA,IAAI,gBACJ,EACA,EAAQ,QAAQ,OAChB,EAAQ,QAAQ,QAChB,EACA,IAAI,EACJ,EAAQ,QAAQ,OAChB,EAAQ,QAAQ,QAChB,KAAK,IAAI,CACX,EACA,IAAM,EAAM,MAAM,MAChB,EACA,EAAA,IAAI,UACJ,EAAQ,QAAQ,OAChB,EAAQ,QAAQ,OAClB,EACA,GAAI,IAAQ,KAIV,MAHK,MAAM,MAAM,EAAK,EAAA,IAAI,eAAgB,EAAQ,QAAQ,OAAQ,EAAQ,QAAQ,QAAS,KAAK,IAAI,CAAC,IAAO,KAGtG,EAAA,SAAS,EAFP,IAAI,EAAA,SAAS,IAAK,kBAAmB,sBAAsB,EAIrE,OAAO,aAAa,IAAK,CAAE,GAAI,EAAI,GAAI,KAAM,EAAI,aAAc,SAAU,EAAQ,QAAS,CAAC,CAC7F,CAEA,eAAsB,SAAS,EAAkB,EAAuB,EAAqC,CAC3G,IAAM,EAAY,oBAAoB,CAAO,EACvC,EAAO,MAAM,EAAA,aAAa,CAAO,EACjC,EAAS,EAAiB,UAAU,CAAI,EAC9C,GAAI,CAAC,EAAO,QAAS,MAAM,EAAA,QAAQ,EAInC,OAHI,EAAO,KAAK,OAAS,EAAU,aACjC,MAAM,IAAI,EAAK,EAAA,IAAI,gBAAiB,EAAO,KAAK,KAAM,EAAU,GAAI,EAAO,KAAK,IAAI,EAE/E,aAAa,IAAK,CAAE,GAAI,EAAU,GAAI,KAAM,EAAO,KAAK,KAAM,SAAU,EAAQ,QAAS,CAAC,CACnG,CAMA,eAAsB,cAAc,EAAuB,EAAqC,CAE9F,OADI,EAAQ,YAAc,MAAM,MAAM,IAAI,EAAK,EAAA,IAAI,gBAAiB,EAAQ,UAAU,EAAE,EACjF,IAAI,SAAS,KAAM,CACxB,QAAS,CACP,gBAAiB,UACnB,EACA,OAAQ,GACV,CAAC,CACH,CAGA,eAAsB,qBAAqB,EAAuB,EAAqC,CACrG,GAAM,CAAE,SAAQ,WAAY,EAAQ,QAYpC,OAVA,MAAM,iBACJ,EAAI,GAAG,MAAM,CACX,EAAI,GAAG,QAAQ,EAAA,IAAI,aAAa,CAAC,CAAC,KAChC,EACA,EACA,KAAK,IAAI,GAAK,EAAA,wBAA0B,IAAmC,GAC7E,EACA,EAAI,GAAG,QAAQ,EAAA,IAAI,sBAAsB,CAAC,CAAC,KAAK,EAAQ,CAAO,CACjE,CAAC,CACH,EACO,IAAI,SAAS,KAAM,CAAE,QAAS,EAAA,QAAS,OAAQ,GAAI,CAAC,CAC7D,CAOA,eAAsB,eAAe,EAAuB,EAAkB,EAAwC,CACpH,IAAM,EAAW,mBAAmB,CAAO,EAW3C,OANA,MAAM,iBACJ,EAAI,GAAG,MAAM,CACX,EAAI,GAAG,QAAQ,EAAA,IAAI,YAAY,CAAC,CAAC,KAAK,KAAK,EAAG,EAAS,GAAI,IAAI,EAAG,CAAW,EAC7E,EAAI,GAAG,QAAQ,EAAA,IAAI,eAAe,CAAC,CAAC,KAAK,CAAW,CACtD,CAAC,CACH,EACO,IAAI,SAAS,KAAM,CAAE,QAAS,EAAA,QAAS,OAAQ,GAAI,CAAC,CAC7D,CAGA,eAAsB,kBAAkB,EAAkB,EAAuB,EAAqC,CACpH,mBAAmB,CAAO,EAC1B,IAAM,EAAU,iBACV,CAAE,SAAQ,SAAU,EAAA,YAAY,EAAS,CAAO,EAChD,EAAQ,EAAA,iBAAiB,CAAE,SAAQ,MAAO,EAAQ,CAAE,CAAC,EACrD,EAAO,MAAM,IAOhB,EAAK,EAAM,IAAK,GAAG,EAAM,UAAU,EAChC,EAAO,EAAK,MAAM,EAAG,CAAK,EAC1B,EAAO,EAAK,GAAG,EAAE,EACjB,EAAS,EAAA,2BAA2B,UAAU,CAClD,QAAS,EAAK,IAAK,IAAS,CAC1B,OAAQ,EAAI,OACZ,WAAY,EAAI,WAChB,UAAW,EAAI,WACf,GAAI,EAAI,GACR,WAAY,EAAI,YAChB,SAAU,EAAI,SAChB,EAAE,EACF,OACE,EAAK,OAAS,GAAS,IAAS,IAAA,GAC5B,EAAA,WAAW,CAAE,UAAW,EAAK,WAAY,GAAI,EAAK,EAAG,EAAG,CAAO,EAC/D,IACR,CAAC,EACD,GAAI,CAAC,EAAO,QAAS,MAAM,kBAAkB,EAC7C,OAAO,EAAA,KAAK,IAAK,EAAO,KAAM,EAAA,OAAO,CACvC,CAEA,IAAa,oBAAuB,GAAgC,CAClE,GAAI,EAAQ,YAAc,KAAM,MAAM,EAAA,UAAU,6BAA6B,EAC7E,OAAO,EAAQ,SACjB,EAIa,mBAAsB,GAAgC,CACjE,GAAI,CAAC,EAAQ,SAAU,MAAM,EAAA,UAAU,8BAA8B,EACrE,GAAI,EAAQ,YAAc,KAAM,MAAM,EAAA,UAAU,6BAA6B,EAC7E,OAAO,EAAQ,SACjB,EAGM,EAAqB,EAAA,EAAE,OAAO,CAAE,KAAM,EAAA,mBAAmB,SAAS,CAAE,CAAC,EACrE,EAAmB,EAAA,EAAE,OAAO,CAAE,KAAM,EAAA,kBAAmB,CAAC,EAE9D,eAAsB,eACpB,EACA,EACA,EACmB,CACnB,GAAI,EAAQ,YAAc,KAAM,OAAO,EAAA,KAAK,IAAK,CAAE,QAAS,CAAC,CAAE,EAAG,EAAA,OAAO,EACzE,IAAM,EAAO,MAAM,IACjB,EACA,EAAA,IAAI,gBACJ,EAAQ,UAAU,GAClB,EAAW,KACX,EAAA,eAAe,eACjB,EAEA,OAAO,EAAA,KAAK,IAAK,CAAE,QAAS,EAAK,IAAK,GAAQ,gBAAgB,EAAY,CAAG,CAAC,CAAE,EAAG,EAAA,OAAO,CAC5F,CAEA,eAAsB,QAAQ,EAAkB,EAAuB,EAAqC,CAE1G,IAAM,EADS,IAAI,IAAI,EAAQ,GAAG,CAAC,CAAC,aACjB,IAAI,KAAK,EAC5B,GAAI,IAAQ,KAAM,CAChB,IAAM,EAAU,SAAS,EAAQ,WAAW,IAAM,iBAC5C,CAAE,SAAQ,SAAU,EAAA,YAAY,EAAS,CAAO,EACtD,GAAI,EAAQ,YAAc,KAAM,OAAO,EAAA,KAAK,IAAK,CAAE,OAAQ,KAAM,IAAK,CAAC,CAAE,EAAG,EAAA,OAAO,EACnF,IAAM,EAAQ,EAAA,aAAa,EAAQ,UAAU,GAAI,CAAE,SAAQ,MAAO,EAAQ,CAAE,CAAC,EACvE,EAAO,MAAM,IAAoD,EAAK,EAAM,IAAK,GAAG,EAAM,UAAU,EACpG,EAAO,EAAK,MAAM,EAAG,CAAK,EAC1B,EAAO,EAAK,GAAG,EAAE,EACjB,EAAS,EAAA,uBAAuB,UAAU,CAC9C,OACE,EAAK,OAAS,GAAS,IAAS,IAAA,GAC5B,EAAA,WAAW,CAAE,UAAW,EAAK,WAAY,GAAI,EAAK,cAAe,EAAG,CAAO,EAC3E,KACN,IAAK,EAAK,IAAK,GAAQ,EAAI,cAAc,CAC3C,CAAC,EACD,GAAI,CAAC,EAAO,QAAS,MAAM,kBAAkB,EAC7C,OAAO,EAAA,KAAK,IAAK,EAAO,KAAM,EAAA,OAAO,CACvC,CACA,EAAA,YAAY,IAAI,IAAI,EAAQ,GAAG,EAAG,CAAC,KAAK,CAAC,EACzC,IAAM,EAAM,CAAC,GAAG,IAAI,IAAI,EAAI,MAAM,GAAG,CAAC,CAAC,EACvC,GAAI,EAAI,OAAS,EAAA,eAAe,cAAgB,EAAI,KAAM,GAAO,CAAC,EAAQ,KAAK,CAAE,CAAC,EAAG,MAAM,EAAA,WAAW,EACtG,GAAI,EAAQ,YAAc,KAAM,OAAO,EAAA,KAAK,IAAK,CAAE,IAAK,CAAC,CAAE,EAAG,EAAA,OAAO,EACrE,IAAM,EAAQ,EAAA,qBAAqB,EAAQ,UAAU,GAAI,CAAG,EACtD,EAAO,MAAM,IAAgC,EAAK,EAAM,IAAK,GAAG,EAAM,UAAU,EAChF,EAAQ,IAAI,IAAI,EAAK,IAAK,GAAM,EAAE,cAAc,CAAC,EACjD,EAAM,CAAE,IAAK,EAAI,OAAQ,GAAO,EAAM,IAAI,CAAE,CAAC,CAAE,EAC/C,EAAY,EAAA,sBAAsB,UAAU,CAAG,EACrD,GAAI,CAAC,EAAU,QAAS,MAAM,kBAAkB,EAChD,OAAO,EAAA,KAAK,IAAK,EAAU,KAAM,EAAA,OAAO,CAC1C,CAKA,IAAM,EAAoB,EAAA,EAAE,OAAO,CAAE,UAAW,EAAA,WAAY,QAAS,EAAA,EAAE,QAAQ,CAAE,CAAC,EAC5E,EAAmB,EAAA,EAAE,OAAO,CAChC,iBAAkB,EAAA,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAA2B,EACrE,QAAS,EAAA,EAAE,QAAQ,CACrB,CAAC,EAED,eAAsB,aACpB,EACA,EACA,EACA,EACA,EACmB,CACnB,GAAI,CAAC,EAAO,kBAAmB,MAAM,IAAI,EAAA,SAAS,IAAK,sBAAuB,mCAAmC,EACjH,IAAM,EAAY,oBAAoB,CAAO,EACvC,EAAO,MAAM,EAAA,aAAa,CAAO,EACjC,EAAS,EAAkB,UAAU,CAAI,EAC/C,GAAI,CAAC,EAAO,QAAS,MAAM,EAAA,QAAQ,EACnC,GAAM,CAAE,aAAc,EAAO,KAEvB,EAAa,MAAM,EAAW,OAAO,EAAO,KAAK,OAAO,EAC9D,GAAI,IAAe,KAAM,MAAM,EAAA,QAAQ,EAEvC,IAAM,EAAc,EAAW,cACzB,EAAO,EAAW,YAClB,EAAQ,EAAU,GAClB,EAAO,EAAW,KAKlB,EAAQ,KAAK,IAAI,EACjB,EAAQ,MAAM,MAClB,EACA,EAAA,IAAI,QACJ,EACA,EACA,CACF,EACA,GAAI,IAAU,MAAQ,EAAM,WAAa,EAAO,CAC9C,GAAI,EAAM,eAAiB,EAAM,MAAM,EAAA,SAAS,4CAA4C,EAC5F,GAAI,EAAM,iBAAmB,KAC3B,MAAM,IAAI,EAAA,SAAS,IAAK,OAAQ,+BAA+B,EAEjE,IAAM,EAAQ,MAAM,UAAU,EAAY,EAAK,EAAM,cAAc,EACnE,GAAI,IAAU,KAAM,OAAO,EAAA,KAAK,IAAK,EAAO,EAAA,OAAO,CACrD,CAEA,IAAM,EAAW,MAAM,MAAsB,EAAK,EAAA,IAAI,iBAAkB,EAAO,EAAM,CAAS,EAC9F,GAAI,IAAa,KAAM,CAGrB,GAAI,EAAS,YAAc,KAAM,MAAM,EAAA,UAAU,wCAAwC,EACzF,GAAI,EAAS,eAAiB,EAAM,MAAM,EAAA,SAAS,4CAA4C,EAC/F,OAAO,EAAA,KAAK,IAAK,WAAW,EAAY,CAAQ,EAAG,EAAA,OAAO,CAC5D,CAEA,IAAM,EAAY,IAAI,EAChB,EAAY,KAAK,IAAI,EAAI,EAAA,eAAe,uBACxC,EAAW,KAAK,UAAU,EAAW,IAAI,EAwC/C,KAAK,MAvCiB,iBACpB,EAAI,GAAG,MAAM,CACX,EAAI,GAAG,QAAQ,EAAA,IAAI,cAAc,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,EAClD,EAAI,GAAG,QAAQ,EAAA,IAAI,iBAAiB,CAAC,CAAC,KACpC,KAAK,EACL,EACA,EACA,EAAA,EAEA,EAAW,eACX,EACA,EACA,EAAW,OACX,EAAW,MACX,EACA,EACA,EACA,EACA,EACA,EAAA,eAAe,gBACf,EACA,EACA,EACA,KAAK,IAAI,CACX,EACA,EAAI,GAAG,QAAQ,EAAA,IAAI,aAAa,CAAC,CAAC,KAChC,EACA,EACA,EACA,EACA,EACA,EACA,EACA,EACA,EACA,CACF,CACF,CAAC,CACH,EAAA,CACa,EAAE,EAAE,MAAM,SAAW,KAAO,EAAG,CAI1C,IAAM,EAAU,MAAM,MACpB,EACA,EAAA,IAAI,QACJ,EACA,EACA,CACF,EACA,GAAI,IAAY,MAAQ,EAAQ,WAAa,KAAK,IAAI,EAAG,CACvD,GAAI,EAAQ,iBAAmB,KAAM,MAAM,IAAI,EAAA,SAAS,IAAK,OAAQ,+BAA+B,EACpG,GAAI,EAAQ,eAAiB,EAAM,CACjC,IAAM,EAAQ,MAAM,UAAU,EAAY,EAAK,EAAQ,cAAc,EACrE,GAAI,IAAU,KAAM,OAAO,EAAA,KAAK,IAAK,EAAO,EAAA,OAAO,EAEnD,MAAM,IAAI,EAAA,SAAS,IAAK,OAAQ,+BAA+B,CACjE,CACA,MAAM,EAAA,SAAS,4CAA4C,CAC7D,CACA,IAAM,EAAQ,MAAM,MAAsB,EAAK,EAAA,IAAI,iBAAkB,EAAO,EAAM,CAAS,EAC3F,GAAI,IAAU,MAAQ,EAAM,YAAc,KAAM,MAAM,EAAA,UAAU,wCAAwC,EACxG,GAAI,IAAU,MAAQ,EAAM,eAAiB,EAAM,OAAO,EAAA,KAAK,IAAK,WAAW,EAAY,CAAK,EAAG,EAAA,OAAO,EAE1G,MADI,IAAU,KACR,IAAI,EAAA,SAAS,IAAK,QAAS,4BAA4B,EADnC,EAAA,SAAS,4CAA4C,CAEjF,CAEA,IAAM,EAAU,MAAM,MAAsB,EAAK,EAAA,IAAI,iBAAkB,EAAO,EAAM,CAAS,EAC7F,GAAI,IAAY,KAAM,MAAM,EAAA,SAAS,EACrC,OAAO,EAAA,KAAK,IAAK,WAAW,EAAY,CAAO,EAAG,EAAA,OAAO,CAC3D,CAEA,eAAsB,YACpB,EACA,EACA,EACA,EACA,EACA,EACmB,CACnB,GAAI,CAAC,EAAO,kBAAmB,MAAM,IAAI,EAAA,SAAS,IAAK,sBAAuB,mCAAmC,EACjH,IAAM,EAAY,oBAAoB,CAAO,EAGvC,EAAM,MAAM,MAAsB,EAAK,EAAA,IAAI,eAAgB,EAAI,EAAW,IAAI,EAEpF,GAAI,IAAQ,MAAQ,EAAI,WAAa,EAAU,GAAI,MAAM,EAAA,SAAS,EAElE,GAAI,EAAI,YAAc,KAAM,MAAM,EAAA,UAAU,wCAAwC,EAEpF,IAAM,EAAO,MAAM,EAAA,aAAa,CAAO,EACjC,EAAS,EAAiB,UAAU,CAAI,EAC9C,GAAI,CAAC,EAAO,QAAS,MAAM,EAAA,QAAQ,EACnC,GAAM,CAAE,oBAAqB,EAAO,KAEpC,GAAI,IAAqB,EAAI,SAAU,MAAM,EAAA,SAAS,EAEtD,IAAM,EAAa,MAAM,EAAW,OAAO,EAAO,KAAK,OAAO,EAC9D,GAAI,IAAe,KAAM,MAAM,EAAA,QAAQ,EACvC,IAAM,EAAc,EAAW,cACzB,EAAO,EAAW,YACxB,GAAI,IAAS,EAAI,aAAc,CAC7B,IAAM,EAAU,MAAM,MAAsB,EAAK,EAAA,IAAI,eAAgB,EAAI,EAAW,IAAI,EACxF,GAAI,IAAY,MAAQ,EAAQ,WAAa,EAAU,GAAI,MAAM,EAAA,SAAS,EAC1E,GAAI,EAAQ,YAAc,KAAM,MAAM,EAAA,UAAU,wCAAwC,EACxF,GAAI,EAAQ,WAAa,EAAkB,MAAM,EAAA,SAAS,EAC1D,OAAO,EAAA,KAAK,IAAK,WAAW,EAAY,CAAO,EAAG,EAAA,OAAO,CAC3D,CAEA,IAAM,EAAW,KAAK,UAAU,EAAW,IAAI,EAiB/C,KAAK,MAhBgB,IACnB,EACA,EAAA,IAAI,kBAAA,EAEJ,EAAW,eACX,EACA,EACA,EAAW,OACX,EAAW,MACX,EACA,IAAI,EACJ,EACA,EAAU,GACV,EACA,CACF,EAAA,CACY,MAAM,SAAW,KAAO,EAAG,CACrC,IAAM,EAAU,MAAM,MAAsB,EAAK,EAAA,IAAI,eAAgB,EAAI,EAAW,IAAI,EAGxF,MAFI,IAAY,KAAY,EAAA,SAAS,EACjC,EAAQ,YAAc,KACpB,EAAA,SAAS,EADuB,EAAA,UAAU,wCAAwC,CAE1F,CACA,IAAM,EAAU,MAAM,UAAU,EAAY,EAAK,CAAE,EACnD,GAAI,IAAY,KAAM,MAAM,EAAA,SAAS,EACrC,OAAO,EAAA,KAAK,IAAK,EAAS,EAAA,OAAO,CACnC,CAEA,eAAsB,YACpB,EACA,EACA,EACA,EACmB,CAOnB,GAAI,EAAQ,SAAU,CACpB,IAAM,EAAW,mBAAmB,CAAO,EAC3C,MAAM,iBACJ,EAAI,GAAG,MAAM,CACX,EAAI,GAAG,QAAQ,EAAA,IAAI,YAAY,CAAC,CAAC,KAAK,KAAK,EAAG,EAAS,GAAI,IAAI,EAAG,EAAI,EAAW,IAAI,EACrF,EAAI,GAAG,QAAQ,EAAA,IAAI,oBAAoB,CAAC,CAAC,KAAK,EAAI,EAAW,IAAI,CACnE,CAAC,CACH,CACF,KAAO,CACL,IAAM,EAAY,oBAAoB,CAAO,EACvC,EAAM,MAAM,MAAsB,EAAK,EAAA,IAAI,eAAgB,EAAI,EAAW,IAAI,EACpF,GAAI,IAAQ,KAAM,OAAO,IAAI,SAAS,KAAM,CAAE,QAAS,EAAA,QAAS,OAAQ,GAAI,CAAC,EAC7E,GAAI,EAAI,WAAa,EAAU,GAAI,MAAM,EAAA,SAAS,EAClD,MAAM,IAAI,EAAK,EAAA,IAAI,kBAAmB,EAAI,EAAU,EAAE,CACxD,CACA,OAAO,IAAI,SAAS,KAAM,CAAE,QAAS,EAAA,QAAS,OAAQ,GAAI,CAAC,CAC7D,CAEA,eAAsB,QACpB,EACA,EACA,EACA,EACA,EACA,EACmB,CACnB,IAAM,EAAY,oBAAoB,CAAO,EAC7C,GAAI,GAAS,CAAC,EAAO,aAAc,MAAM,IAAI,EAAA,SAAS,IAAK,iBAAkB,+BAA+B,EAE5G,GAAI,MADc,MAAsB,EAAK,EAAA,IAAI,YAAa,EAAI,EAAW,IAAI,IACrE,KAAM,MAAM,EAAA,SAAS,EAC7B,EACF,MAAM,IAAI,EAAK,EAAA,IAAI,WAAY,EAAU,GAAI,IAAI,EAAG,CAAE,EAEtD,MAAM,IAAI,EAAK,EAAA,IAAI,WAAY,EAAI,EAAU,EAAE,EAGjD,IAAM,EAAQ,MAAM,MAAyD,EAAK,EAAA,IAAI,UAAW,EAAU,GAAI,CAAE,EACjH,GAAI,IAAU,KAAM,MAAM,EAAA,SAAS,EACnC,IAAM,EAAM,CAAE,GAAI,EAAM,GAAI,UAAW,EAAM,WAAY,MAAO,EAAM,QAAU,CAAE,EAC5E,EAAY,EAAA,uBAAuB,UAAU,CAAG,EACtD,GAAI,CAAC,EAAU,QAAS,MAAM,kBAAkB,EAChD,OAAO,EAAA,KAAK,IAAK,EAAU,KAAM,EAAA,OAAO,CAC1C,CAKA,IAAM,EAAmB,EAAA,EAAE,OAAO,CAChC,OAAQ,EAAA,EAAE,OAAO,CAAC,CAAC,MAAM,EAAA,gBAAgB,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAA,eAAe,iBAAiB,CAC/F,CAAC,EAOD,eAAsB,YACpB,EACA,EACA,EACA,EACA,EACmB,CACnB,IAAM,EAAW,oBAAoB,CAAO,EACtC,EAAO,MAAM,EAAA,aAAa,CAAO,EACjC,EAAS,EAAiB,UAAU,CAAI,EAC9C,GAAI,CAAC,EAAO,QAAS,MAAM,EAAA,QAAQ,EAEnC,GAAI,MADc,MAAsB,EAAK,EAAA,IAAI,YAAa,EAAI,EAAW,IAAI,IACrE,KAAM,MAAM,EAAA,SAAS,EAIjC,OADA,MAAM,IAAI,EAAK,EAAA,IAAI,aAAc,KAAK,EAAG,EAAS,GAAI,EAAO,KAAK,OAAQ,IAAI,EAAG,EAAI,EAAW,IAAI,EAC7F,IAAI,SAAS,KAAM,CAAE,QAAS,EAAA,QAAS,OAAQ,GAAI,CAAC,CAC7D,CAQA,eAAsB,UACpB,EACA,EACA,EACA,EACA,EACmB,CACnB,IAAM,EAAW,mBAAmB,CAAO,EAK3C,GAAI,MADc,MAAsB,EAAK,EAAA,IAAI,eAAgB,EAAI,EAAW,IAAI,IACxE,KAAM,MAAM,EAAA,SAAS,EACjC,IAAM,EAAY,EACd,EAAI,GAAG,QAAQ,EAAA,IAAI,eAAe,CAAC,CAAC,KAAK,IAAI,EAAG,EAAI,EAAW,IAAI,EACnE,EAAI,GAAG,QAAQ,EAAA,IAAI,iBAAiB,CAAC,CAAC,KAAK,EAAI,EAAW,IAAI,EAelE,OAdA,MAAM,iBACJ,EAAI,GAAG,MAAM,CACX,EAAI,GAAG,QAAQ,EAAA,IAAI,SAAS,CAAC,CAAC,KAC5B,KAAK,EACL,EAAS,GACT,EAAS,OAAS,SAClB,IAAI,EACJ,EACA,EAAW,KACX,OAAO,CAAM,CACf,EACA,CACF,CAAC,CACH,EACO,IAAI,SAAS,KAAM,CAAE,QAAS,EAAA,QAAS,OAAQ,GAAI,CAAC,CAC7D,CAGA,eAAsB,YACpB,EACA,EACA,EACA,EACmB,CACnB,mBAAmB,CAAO,EAC1B,IAAM,EAAS,IAAI,IAAI,EAAQ,GAAG,CAAC,CAAC,aAAa,IAAI,QAAQ,GAAK,aAClE,GAAI,IAAW,cAAgB,IAAW,WAAY,MAAM,EAAA,WAAW,EACvE,IAAM,EAAU,WAAW,EAAW,KAAK,GAAG,IACxC,CAAE,SAAQ,SAAU,EAAA,YAAY,EAAS,EAAS,CAAC,QAAQ,CAAC,EAC5D,EAAQ,EAAA,eACZ,CAAE,WAAY,EAAW,KAAM,SAAU,IAAW,UAAW,EAC/D,CAAE,SAAQ,MAAO,EAAQ,CAAE,CAC7B,EACM,EAAO,MAAM,IAAe,EAAK,EAAM,IAAK,GAAG,EAAM,UAAU,EAC/D,EAAO,EAAK,MAAM,EAAG,CAAK,EAC1B,EAAO,EAAK,GAAG,EAAE,EACjB,EAAS,EAAA,qBAAqB,UAAU,CAC5C,OACE,EAAK,OAAS,GAAS,IAAS,IAAA,GAC5B,EAAA,WAAW,CAAE,UAAW,EAAK,WAAY,GAAI,EAAK,EAAG,EAAG,CAAO,EAC/D,KACN,QAAS,EAAK,IAAK,IAAS,CAC1B,UAAW,EAAI,WACf,QAAS,EAAI,eACb,WAAY,EAAI,YAChB,GAAI,EAAI,GACR,OAAQ,EAAI,OACZ,SAAU,CAAE,GAAI,EAAI,YAAa,KAAM,EAAI,aAAc,EACzD,WAAY,EAAI,WAClB,EAAE,CACJ,CAAC,EACD,GAAI,CAAC,EAAO,QAAS,MAAM,kBAAkB,EAC7C,OAAO,EAAA,KAAK,IAAK,EAAO,KAAM,EAAA,OAAO,CACvC,CAcA,eAAsB,cACpB,EACA,EACA,EACA,EACmB,CAGnB,GAFA,mBAAmB,CAAO,EAEtB,MADc,MAAsB,EAAK,EAAA,IAAI,WAAY,EAAI,EAAW,IAAI,IACpE,KAAM,MAAM,EAAA,SAAS,EAEjC,OADA,MAAM,IAAI,EAAK,EAAA,IAAI,cAAe,IAAI,EAAG,EAAI,EAAW,IAAI,EACrD,IAAI,SAAS,KAAM,CAAE,QAAS,EAAA,QAAS,OAAQ,GAAI,CAAC,CAC7D,CAEA,eAAsB,UAAU,EAAkB,EAAuB,EAAqC,CAC5G,IAAM,EAAU,eAAe,EAAQ,WAAW,IAAM,iBAClD,CAAE,SAAQ,SAAU,EAAA,YAAY,EAAS,CAAO,EACtD,GAAI,EAAQ,YAAc,KAAM,OAAO,EAAA,KAAK,IAAK,CAAE,OAAQ,KAAM,QAAS,CAAC,CAAE,EAAG,EAAA,OAAO,EACvF,IAAM,EAAQ,EAAA,eAAe,CAAE,YAAa,EAAQ,UAAU,EAAG,EAAG,CAAE,SAAQ,MAAO,EAAQ,CAAE,CAAC,EAC1F,EAAO,MAAM,IAAe,EAAK,EAAM,IAAK,GAAG,EAAM,UAAU,EAC/D,EAAO,EAAK,MAAM,EAAG,CAAK,EAC1B,EAAO,EAAK,GAAG,EAAE,EACjB,EAAS,EAAA,wBAAwB,UAAU,CAC/C,OACE,EAAK,OAAS,GAAS,IAAS,IAAA,GAC5B,EAAA,WAAW,CAAE,UAAW,EAAK,WAAY,GAAI,EAAK,EAAG,EAAG,CAAO,EAC/D,KACN,QAAS,EAAK,IAAK,IAAS,CAC1B,WAAY,EAAI,WAChB,UAAW,EAAI,WACf,QAAS,EAAI,eACb,GAAI,EAAI,GACR,OAAQ,EAAI,OACZ,WAAY,EAAI,WAClB,EAAE,CACJ,CAAC,EACD,GAAI,CAAC,EAAO,QAAS,MAAM,kBAAkB,EAC7C,OAAO,EAAA,KAAK,IAAK,EAAO,KAAM,EAAA,OAAO,CACvC"}
+{"version":3,"file":"publications.cjs","names":[],"sources":["../../src/worker/publications.ts"],"sourcesContent":["import { s } from '@vielzeug/spell';\nimport type { ArchiveCollection } from '../collection';\nimport {\n  ARCHIVE_CONTRACT_VERSION,\n  ARCHIVE_LIMITS,\n  ARCHIVE_SCHEMA_VERSION,\n  type ArchiveModerationAction,\n  archiveAliasSchema,\n  archiveCollectionMetaSchema,\n  archiveHealthSchema,\n  archiveIdentitySchema,\n  archiveLikedIdsSchema,\n  archiveLikeStateSchema,\n  archiveLikesPageSchema,\n  archiveModerationLogSchema,\n  archiveOwnReportsSchema,\n  archiveReportsSchema,\n  archiveSortSchema,\n  isWellFormedText,\n  SESSION_MAX_AGE_SECONDS,\n  uuidSchema,\n} from '../contract';\nimport { forwardPage, forwardPageParams, nextCursor } from './_pagination';\nimport { JWT_CLOCK_TOLERANCE_SECONDS, type Publisher, type Session } from './auth';\nimport type { ApiConfig, ArchiveWorkerEnv } from './env';\nimport {\n  ApiError,\n  badRequest,\n  conflict,\n  forbidden,\n  invalid,\n  json,\n  noStore,\n  notFound,\n  queryParams,\n  readJsonBody,\n} from './http';\nimport {\n  likedPublicationsSql,\n  likesPageSql,\n  listPublicationsSql,\n  moderationLogSql,\n  type PublicationCursor,\n  type PublicationFilter,\n  reportsPageSql,\n  SQL,\n} from './sql';\n\n/**\n * Route handlers for /api/v1, parameterized by the registered collection. All SQL lives\n * in sql.ts and is bound positionally here in the authored order; the DTO boundary\n * re-validates every stored row before it leaves, content validation lives in the\n * collection's derive step, and moderation state (hidden entries) is visible only\n * through the owner and operator surfaces.\n */\n\ninterface PublicationRow {\n  author_name: string;\n  client_key: string;\n  collection: string;\n  content_hash: string;\n  content_version: number;\n  filter_value: string | null;\n  /** Null while visible; set while an operator has removed the entry from public view. */\n  hidden_at: string | null;\n  id: string;\n  like_count: number;\n  owner_id: string;\n  payload_json: string;\n  published_at: string;\n  revision: number;\n  schema_version: number;\n  tags_json: string;\n  title: string;\n  updated_at: string;\n}\n\nasync function databaseCall<T>(operation: () => Promise<T>): Promise<T> {\n  try {\n    return await operation();\n  } catch (cause) {\n    throw new ApiError(500, 'internal', 'The service is not available.', { cause, diagnostic: { kind: 'database' } });\n  }\n}\nconst first = <T>(env: ArchiveWorkerEnv, sql: string, ...params: (string | number | null)[]) =>\n  databaseCall(() =>\n    env.DB.prepare(sql)\n      .bind(...params)\n      .first<T>(),\n  );\nconst all = <T>(env: ArchiveWorkerEnv, sql: string, ...params: (string | number | null)[]) =>\n  databaseCall(async () => {\n    const result = await env.DB.prepare(sql)\n      .bind(...params)\n      .all<T>();\n    if (!Array.isArray(result.results)) throw new Error('Missing database query results');\n    return result.results;\n  });\nconst run = (env: ArchiveWorkerEnv, sql: string, ...params: (string | number | null)[]) =>\n  databaseCall(() =>\n    env.DB.prepare(sql)\n      .bind(...params)\n      .run(),\n  );\n\nconst uuid = (): string => crypto.randomUUID();\nconst now = (): string => new Date().toISOString();\n\n/** A stored row that fails the emitted-DTO contract is unavailable, not malformed data. */\nconst recordUnavailable = (): ApiError =>\n  new ApiError(503, 'record-unavailable', 'The record is not available.', { diagnostic: { kind: 'record' } });\n\nconst UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n\n/**\n * Maps a joined row to the public DTO through the collection's strict entry schema:\n * stored JSON is parsed and re-validated, stored versions are emitted as-is, and any\n * drift — unknown fields, corrupt payload, mismatched versions — surfaces as 503\n * `record-unavailable` rather than leaking or fabricating data.\n */\nconst rowToEntry = (collection: ArchiveCollection, row: PublicationRow) => {\n  let payloadJson: unknown;\n  try {\n    payloadJson = JSON.parse(row.payload_json);\n  } catch {\n    throw recordUnavailable();\n  }\n  const parsed = collection.contract.entry.safeParse({\n    author: { id: row.owner_id, name: row.author_name },\n    contentHash: row.content_hash,\n    contentVersion: row.content_version,\n    id: row.id,\n    likeCount: row.like_count,\n    payload: payloadJson,\n    publishedAt: row.published_at,\n    revision: row.revision,\n    schemaVersion: row.schema_version,\n    updatedAt: row.updated_at,\n  });\n  if (!parsed.success) throw recordUnavailable();\n  return parsed.data;\n};\n\nconst rowToOwnedEntry = (collection: ArchiveCollection, row: PublicationRow) => {\n  const entry = rowToEntry(collection, row);\n  // The private owner DTO adds the create retry key and the moderation state;\n  // public routes never emit either.\n  const key = uuidSchema.safeParse(row.client_key);\n  if (!key.success) throw recordUnavailable();\n  return { ...entry, clientKey: row.client_key, hidden: row.hidden_at !== null };\n};\n\nconst entryById = async (collection: ArchiveCollection, env: ArchiveWorkerEnv, id: string) => {\n  const row = await first<PublicationRow>(env, SQL.publication, id, collection.name);\n  return row === null ? null : rowToEntry(collection, row);\n};\n\n/* ----------------------------------- list --------------------------------- */\n\n/** Normalizes free text into the bounded FTS prefix-match expression the SQL expects. */\nconst searchMatchFor = (search: string | null): string | undefined => {\n  if (search === null) return undefined;\n  if (search.length > ARCHIVE_LIMITS.searchChars) throw badRequest();\n  // Unicode word extraction: punctuation splits terms rather than poisoning them,\n  // so \"Hunter's\" and \"fire-ice\" match the words their indexed titles carry.\n  const terms = (search.match(/[\\p{L}\\p{N}]+/gu) ?? []).slice(0, ARCHIVE_LIMITS.searchTerms);\n  if (terms.length === 0) return undefined;\n  return terms.map((t) => `\"${t}\"*`).join(' ');\n};\n\n/**\n * The entry-list cursor context: every query dimension the page's boundary depends\n * on, so a cursor minted under one filter/sort/search and replayed under another is\n * a 400 — the same forward-cursor guard every other list in the package uses.\n */\nconst entryCursorContext = (query: {\n  author?: string;\n  collection: string;\n  filter?: string;\n  searchMatch?: string;\n  sort: 'liked' | 'recent';\n  tag?: string;\n}): string =>\n  JSON.stringify([\n    query.collection,\n    query.sort,\n    query.author ?? '',\n    query.filter ?? '',\n    query.tag ?? '',\n    query.searchMatch ?? '',\n  ]);\n\nconst cursorFromRow = (row: PublicationRow): PublicationCursor => ({\n  createdAt: row.published_at,\n  id: row.id,\n  likeCount: row.like_count,\n});\n\nexport async function listEntries(\n  collection: ArchiveCollection,\n  request: Request,\n  env: ArchiveWorkerEnv,\n): Promise<Response> {\n  const url = new URL(request.url);\n  const params = queryParams(url, ['author', 'cursor', 'filter', 'limit', 'search', 'sort', 'tag']);\n\n  const sortRaw = params.get('sort') ?? 'recent';\n  const sortParsed = archiveSortSchema.safeParse(sortRaw);\n  if (!sortParsed.success) throw badRequest();\n\n  const filter = params.get('filter');\n  if (filter !== null && !collection.filters.includes(filter)) throw badRequest();\n  const tag = params.get('tag');\n  if (tag !== null && !collection.tags.includes(tag)) throw badRequest();\n  const author = params.get('author');\n  if (author !== null && !UUID_RE.test(author)) throw badRequest();\n\n  const searchMatch = searchMatchFor(params.get('search'));\n  const context = entryCursorContext({\n    author: author ?? undefined,\n    collection: collection.name,\n    filter: filter ?? undefined,\n    searchMatch,\n    sort: sortParsed.data,\n    tag: tag ?? undefined,\n  });\n  const { cursor, limit } = forwardPageParams(params, context);\n\n  const query: PublicationFilter = {\n    author: author ?? undefined,\n    collection: collection.name,\n    cursor:\n      cursor === null ? undefined : { createdAt: cursor.createdAt, id: cursor.id, likeCount: cursor.likeCount ?? 0 },\n    filter: filter ?? undefined,\n    limit: limit + 1,\n    searchMatch,\n    sort: sortParsed.data,\n    tag: tag ?? undefined,\n  };\n\n  // One bounded query — never a count: the over-read row is the next page's proof.\n  const bound = listPublicationsSql(query);\n  const fetched = await all<PublicationRow>(env, bound.sql, ...bound.parameters);\n  const page = fetched.slice(0, limit);\n  const last = page.at(-1);\n\n  // Entries are validated per row through the collection's entry schema; the cursor\n  // is internally generated, so the page composes validated parts directly.\n  const pageDto = {\n    cursor: fetched.length > limit && last !== undefined ? nextCursor(cursorFromRow(last), context) : null,\n    entries: page.map((row) => rowToEntry(collection, row)),\n  };\n  return json(200, pageDto, noStore);\n}\n\n/** The collection's public self-description: name plus the declared query vocabularies. */\nexport function collectionMeta(collection: ArchiveCollection): Response {\n  const parsed = archiveCollectionMetaSchema.safeParse({\n    filters: [...collection.filters].sort(),\n    name: collection.name,\n    tags: [...collection.tags].sort(),\n  });\n  if (!parsed.success) throw recordUnavailable();\n  return json(200, parsed.data, noStore);\n}\n\nexport async function getEntry(collection: ArchiveCollection, env: ArchiveWorkerEnv, id: string): Promise<Response> {\n  const entry = await entryById(collection, env, id);\n  if (entry === null) throw notFound();\n  return json(200, entry, noStore);\n}\n\n/* ---------------------------------- health --------------------------------- */\n\n/**\n * Service health: the feature flags, the wire limits, and the storage schema stamp\n * actually present in the database. A database whose migrations lag the package\n * answers `degraded` instead of pretending to be fine — the most likely deployment\n * fault becomes a one-glance diagnosis.\n */\nexport async function healthJson(config: ApiConfig, env: ArchiveWorkerEnv): Promise<Response> {\n  let dbSchemaVersion: number | null = null;\n  let reason: 'database-unavailable' | 'schema-mismatch' | null = null;\n  try {\n    const row = await first<{ applied: number }>(env, SQL.schemaVersion);\n    dbSchemaVersion = row?.applied ?? 0;\n  } catch {\n    reason = 'database-unavailable';\n  }\n  if (reason === null && dbSchemaVersion !== ARCHIVE_SCHEMA_VERSION) reason = 'schema-mismatch';\n  const parsed = archiveHealthSchema.safeParse({\n    dbSchemaVersion,\n    features: { likes: config.likesEnabled, publishing: config.publishingEnabled },\n    limits: ARCHIVE_LIMITS,\n    reason,\n    schemaVersion: ARCHIVE_CONTRACT_VERSION,\n    status: reason === null ? 'ok' : 'degraded',\n  });\n  if (!parsed.success) throw recordUnavailable();\n  return json(reason === null ? 200 : 503, parsed.data, noStore);\n}\n\n/* --------------------------------- identity -------------------------------- */\n\n/** Emits the private identity DTO through the strict shared schema. */\nconst identityJson = (status: number, identity: unknown): Response => {\n  const parsed = archiveIdentitySchema.safeParse(identity);\n  if (!parsed.success) throw recordUnavailable();\n  return json(status, parsed.data, noStore);\n};\n\nexport function getMe(session: Session | null): Response {\n  return identityJson(\n    200,\n    session?.publisher\n      ? { id: session.publisher.id, name: session.publisher.displayName, operator: session.operator }\n      : null,\n  );\n}\n\nexport async function registerMe(request: Request, env: ArchiveWorkerEnv, session: Session): Promise<Response> {\n  const body = await readJsonBody(request);\n  const parsed = registerBodySchema.safeParse(body);\n  if (!parsed.success) throw invalid();\n  const name = parsed.data.name ?? '';\n\n  const existing = await first<{ display_name: string; id: string }>(\n    env,\n    SQL.publisher,\n    session.subject.issuer,\n    session.subject.subject,\n  );\n  if (existing !== null) {\n    return identityJson(200, { id: existing.id, name: existing.display_name, operator: session.operator });\n  }\n  const id = uuid();\n  await run(\n    env,\n    SQL.insertPublisher,\n    id,\n    session.subject.issuer,\n    session.subject.subject,\n    name,\n    now(),\n    session.subject.issuer,\n    session.subject.subject,\n    Date.now(),\n  );\n  const row = await first<{ display_name: string; id: string }>(\n    env,\n    SQL.publisher,\n    session.subject.issuer,\n    session.subject.subject,\n  );\n  if (row === null) {\n    if ((await first(env, SQL.revokedSubject, session.subject.issuer, session.subject.subject, Date.now())) !== null) {\n      throw new ApiError(401, 'unauthenticated', 'Sign-in is required.');\n    }\n    throw conflict();\n  }\n  return identityJson(201, { id: row.id, name: row.display_name, operator: session.operator });\n}\n\nexport async function renameMe(request: Request, env: ArchiveWorkerEnv, session: Session): Promise<Response> {\n  const publisher = requirePublisherRow(session);\n  const body = await readJsonBody(request);\n  const parsed = renameBodySchema.safeParse(body);\n  if (!parsed.success) throw invalid();\n  if (parsed.data.name !== publisher.displayName) {\n    await run(env, SQL.renamePublisher, parsed.data.name, publisher.id, parsed.data.name);\n  }\n  return identityJson(200, { id: publisher.id, name: parsed.data.name, operator: session.operator });\n}\n\n/**\n * Archive-profile erasure, independent of the identity provider's account.\n * The credential survives so an issuer can retry coordinated account erasure.\n */\nexport async function deleteProfile(env: ArchiveWorkerEnv, session: Session): Promise<Response> {\n  if (session.publisher !== null) await run(env, SQL.deletePublisher, session.publisher.id);\n  return new Response(null, {\n    headers: {\n      'cache-control': 'no-store',\n    },\n    status: 204,\n  });\n}\n\n/** Revocation and erasure share a transaction, preventing a stale session from recreating the profile. */\nexport async function deleteAccountProfile(env: ArchiveWorkerEnv, session: Session): Promise<Response> {\n  const { issuer, subject } = session.subject;\n  // Issuance may be one tolerance ahead; expiry verification permits another.\n  await databaseCall(() =>\n    env.DB.batch([\n      env.DB.prepare(SQL.revokeSubject).bind(\n        issuer,\n        subject,\n        Date.now() + (SESSION_MAX_AGE_SECONDS + 2 * JWT_CLOCK_TOLERANCE_SECONDS) * 1000,\n      ),\n      env.DB.prepare(SQL.deleteSubjectPublisher).bind(issuer, subject),\n    ]),\n  );\n  return new Response(null, { headers: noStore, status: 204 });\n}\n\n/**\n * Operator-side GDPR erasure: removes any publisher's row; FK cascades take its\n * publications, likes and retry keys. Idempotent for the same reason the self-erase\n * is: an already-erased publisher is a 204 with nothing left to remove.\n */\nexport async function erasePublisher(env: ArchiveWorkerEnv, session: Session, publisherId: string): Promise<Response> {\n  const operator = requireOperatorRow(session);\n  // The terminal moderation action: erasing a publisher removes their row, and FK\n  // cascades take the publications, likes and retry keys with it — the same cascade a\n  // self-erase walks, applied to any publisher the operator names. The guarded audit\n  // and deletion share a transaction, so retries never record fictitious actions.\n  await databaseCall(() =>\n    env.DB.batch([\n      env.DB.prepare(SQL.auditErasure).bind(uuid(), operator.id, now(), publisherId),\n      env.DB.prepare(SQL.deletePublisher).bind(publisherId),\n    ]),\n  );\n  return new Response(null, { headers: noStore, status: 204 });\n}\n\n/** The operator's accountability log: newest actions first, bounded, ids only. */\nexport async function listModerationLog(request: Request, env: ArchiveWorkerEnv, session: Session): Promise<Response> {\n  requireOperatorRow(session);\n  const context = 'moderation-log';\n  const { cursor, limit } = forwardPage(request, context);\n  const bound = moderationLogSql({ cursor, limit: limit + 1 });\n  const rows = await all<{\n    id: string;\n    action: ArchiveModerationAction;\n    collection: string | null;\n    created_at: string;\n    operator_id: string;\n    target_id: string;\n  }>(env, bound.sql, ...bound.parameters);\n  const page = rows.slice(0, limit);\n  const last = page.at(-1);\n  const parsed = archiveModerationLogSchema.safeParse({\n    actions: page.map((row) => ({\n      action: row.action,\n      collection: row.collection,\n      createdAt: row.created_at,\n      id: row.id,\n      operatorId: row.operator_id,\n      targetId: row.target_id,\n    })),\n    cursor:\n      rows.length > limit && last !== undefined\n        ? nextCursor({ createdAt: last.created_at, id: last.id }, context)\n        : null,\n  });\n  if (!parsed.success) throw recordUnavailable();\n  return json(200, parsed.data, noStore);\n}\n\nexport const requirePublisherRow = (session: Session): Publisher => {\n  if (session.publisher === null) throw forbidden('Register before publishing.');\n  return session.publisher;\n};\n\n/** Operator authority plus a registered publisher row: moderation routes need both,\n * the role claim for authority and the row for attribution. */\nexport const requireOperatorRow = (session: Session): Publisher => {\n  if (!session.operator) throw forbidden('Operator access is required.');\n  if (session.publisher === null) throw forbidden('Register before moderating.');\n  return session.publisher;\n};\n\n// Private identity payloads share the one alias rule with the emitted DTOs.\nconst registerBodySchema = s.object({ name: archiveAliasSchema.optional() });\nconst renameBodySchema = s.object({ name: archiveAliasSchema });\n\nexport async function myPublications(\n  collection: ArchiveCollection,\n  env: ArchiveWorkerEnv,\n  session: Session,\n): Promise<Response> {\n  if (session.publisher === null) return json(200, { entries: [] }, noStore);\n  const rows = await all<PublicationRow>(\n    env,\n    SQL.ownPublications,\n    session.publisher.id,\n    collection.name,\n    ARCHIVE_LIMITS.maxPublications,\n  );\n  // The private owner DTO adds the create retry key; public routes never emit it.\n  return json(200, { entries: rows.map((row) => rowToOwnedEntry(collection, row)) }, noStore);\n}\n\nexport async function myLikes(request: Request, env: ArchiveWorkerEnv, session: Session): Promise<Response> {\n  const params = new URL(request.url).searchParams;\n  const raw = params.get('ids');\n  if (raw === null) {\n    const context = `likes:${session.publisher?.id ?? 'unregistered'}`;\n    const { cursor, limit } = forwardPage(request, context);\n    if (session.publisher === null) return json(200, { cursor: null, ids: [] }, noStore);\n    const bound = likesPageSql(session.publisher.id, { cursor, limit: limit + 1 });\n    const rows = await all<{ created_at: string; publication_id: string }>(env, bound.sql, ...bound.parameters);\n    const page = rows.slice(0, limit);\n    const last = page.at(-1);\n    const parsed = archiveLikesPageSchema.safeParse({\n      cursor:\n        rows.length > limit && last !== undefined\n          ? nextCursor({ createdAt: last.created_at, id: last.publication_id }, context)\n          : null,\n      ids: page.map((row) => row.publication_id),\n    });\n    if (!parsed.success) throw recordUnavailable();\n    return json(200, parsed.data, noStore);\n  }\n  queryParams(new URL(request.url), ['ids']);\n  const ids = [...new Set(raw.split(','))];\n  if (ids.length > ARCHIVE_LIMITS.likeStateIds || ids.some((id) => !UUID_RE.test(id))) throw badRequest();\n  if (session.publisher === null) return json(200, { ids: [] }, noStore);\n  const bound = likedPublicationsSql(session.publisher.id, ids);\n  const rows = await all<{ publication_id: string }>(env, bound.sql, ...bound.parameters);\n  const liked = new Set(rows.map((r) => r.publication_id));\n  const dto = { ids: ids.filter((id) => liked.has(id)) };\n  const validated = archiveLikedIdsSchema.safeParse(dto);\n  if (!validated.success) throw recordUnavailable();\n  return json(200, validated.data, noStore);\n}\n\n/* --------------------------------- mutations ------------------------------- */\n\n// The core validates the request envelope; the collection's derive step validates the payload.\nconst publishBodySchema = s.object({ clientKey: uuidSchema, payload: s.unknown() });\nconst updateBodySchema = s.object({\n  expectedRevision: s.number().int().min(1).max(Number.MAX_SAFE_INTEGER),\n  payload: s.unknown(),\n});\n\ninterface RetryRecord {\n  expires_at: number;\n  payload_hash: string;\n  publication_id: string | null;\n}\n\n/**\n * The one replay/conflict/gone decision for a create retry key, shared by the\n * pre-read and the post-insert race re-read: a live record for a different payload\n * is a 409, a tombstone (null publication id) is a 410, and a live record for the\n * same payload replays the entry. `'vanished'` means the recorded publication is\n * no longer readable — hidden or raced-deleted — and only the caller knows which:\n * the pre-read falls through to the publication-by-key lookup (a hidden entry is\n * 403 there), the post-insert re-read answers 410.\n */\nasync function resolveRetryRecord(\n  collection: ArchiveCollection,\n  env: ArchiveWorkerEnv,\n  record: RetryRecord | null,\n  hash: string,\n): Promise<Response | 'vanished' | null> {\n  if (record === null || record.expires_at <= Date.now()) return null;\n  if (record.payload_hash !== hash) throw conflict('That key was used for a different payload.');\n  if (record.publication_id === null) throw new ApiError(410, 'gone', 'That publication was removed.');\n  const entry = await entryById(collection, env, record.publication_id);\n  if (entry === null) return 'vanished';\n  return json(200, entry, noStore);\n}\n\nexport async function publishEntry(\n  collection: ArchiveCollection,\n  request: Request,\n  env: ArchiveWorkerEnv,\n  config: ApiConfig,\n  session: Session,\n): Promise<Response> {\n  if (!config.publishingEnabled) throw new ApiError(503, 'publishing-disabled', 'Publishing is currently disabled.');\n  const publisher = requirePublisherRow(session);\n  const body = await readJsonBody(request);\n  const parsed = publishBodySchema.safeParse(body);\n  if (!parsed.success) throw invalid();\n  const { clientKey } = parsed.data;\n  // The derive step owns every content rejection: schema, vocabulary, title, byte bound.\n  const derivation = await collection.derive(parsed.data.payload);\n  if (derivation === null) throw invalid();\n\n  const payloadJson = derivation.canonicalJson;\n  const hash = derivation.contentHash;\n  const owner = publisher.id;\n  const name = collection.name;\n\n  // Retry-key inspection first: the request record decides replay vs conflict vs gone.\n  // A logically expired record is ignored entirely — retention is enforced by time,\n  // not just by the periodic sweep.\n  const retry = await first<RetryRecord>(env, SQL.request, owner, name, clientKey);\n  const replay = await resolveRetryRecord(collection, env, retry, hash);\n  if (replay !== null && replay !== 'vanished') return replay;\n\n  const existing = await first<PublicationRow>(env, SQL.publicationByKey, owner, name, clientKey);\n  if (existing !== null) {\n    // A hidden entry is frozen for its owner too: replaying the create key must not\n    // read as a live publication.\n    if (existing.hidden_at !== null) throw forbidden('This entry is under moderation review.');\n    if (existing.content_hash !== hash) throw conflict('That key was used for a different payload.');\n    return json(200, rowToEntry(collection, existing), noStore);\n  }\n\n  const timestamp = now();\n  const expiresAt = Date.now() + ARCHIVE_LIMITS.idempotencyRetentionMs;\n  const tagsJson = JSON.stringify(derivation.tags);\n  const results = await databaseCall(() =>\n    env.DB.batch([\n      env.DB.prepare(SQL.expireRequests).bind(Date.now()),\n      env.DB.prepare(SQL.insertPublication).bind(\n        uuid(),\n        owner,\n        name,\n        clientKey,\n        ARCHIVE_CONTRACT_VERSION,\n        derivation.contentVersion,\n        payloadJson,\n        hash,\n        derivation.filter,\n        derivation.title,\n        tagsJson,\n        timestamp,\n        timestamp,\n        owner,\n        name,\n        ARCHIVE_LIMITS.maxPublications,\n        owner,\n        name,\n        clientKey,\n        Date.now(),\n      ),\n      env.DB.prepare(SQL.insertRequest).bind(\n        owner,\n        name,\n        clientKey,\n        hash,\n        timestamp,\n        expiresAt,\n        owner,\n        name,\n        clientKey,\n        hash,\n      ),\n    ]),\n  );\n  if ((results[1]?.meta?.changes ?? 0) === 0) {\n    // The guarded insert was skipped: a race already wrote the key, the key's\n    // publication was removed, or the owner's live-publication quota is full.\n    // Re-reading the request record first distinguishes a tombstone from a race.\n    const racedRecord = await first<RetryRecord>(env, SQL.request, owner, name, clientKey);\n    const racedReplay = await resolveRetryRecord(collection, env, racedRecord, hash);\n    if (racedReplay === 'vanished') throw new ApiError(410, 'gone', 'That publication was removed.');\n    if (racedReplay !== null) return racedReplay;\n    const raced = await first<PublicationRow>(env, SQL.publicationByKey, owner, name, clientKey);\n    if (raced !== null && raced.hidden_at !== null) throw forbidden('This entry is under moderation review.');\n    if (raced !== null && raced.content_hash === hash) return json(200, rowToEntry(collection, raced), noStore);\n    if (raced !== null) throw conflict('That key was used for a different payload.');\n    throw new ApiError(429, 'quota', 'Publication quota reached.');\n  }\n\n  const created = await first<PublicationRow>(env, SQL.publicationByKey, owner, name, clientKey);\n  if (created === null) throw conflict();\n  return json(201, rowToEntry(collection, created), noStore);\n}\n\nexport async function updateEntry(\n  collection: ArchiveCollection,\n  request: Request,\n  env: ArchiveWorkerEnv,\n  config: ApiConfig,\n  session: Session,\n  id: string,\n): Promise<Response> {\n  if (!config.publishingEnabled) throw new ApiError(503, 'publishing-disabled', 'Publishing is currently disabled.');\n  const publisher = requirePublisherRow(session);\n  // The owner's row regardless of moderation state: the author must be told their\n  // entry is frozen, not that it vanished.\n  const row = await first<PublicationRow>(env, SQL.publicationAny, id, collection.name);\n  // Replacing an entry is the author's alone; anyone else sees the entry as absent.\n  if (row === null || row.owner_id !== publisher.id) throw notFound();\n  // Hidden entries are frozen: an edit must not bypass the operator's decision.\n  if (row.hidden_at !== null) throw forbidden('This entry is under moderation review.');\n\n  const body = await readJsonBody(request);\n  const parsed = updateBodySchema.safeParse(body);\n  if (!parsed.success) throw invalid();\n  const { expectedRevision } = parsed.data;\n\n  if (expectedRevision !== row.revision) throw conflict();\n\n  const derivation = await collection.derive(parsed.data.payload);\n  if (derivation === null) throw invalid();\n  const payloadJson = derivation.canonicalJson;\n  const hash = derivation.contentHash;\n  if (hash === row.content_hash) {\n    const current = await first<PublicationRow>(env, SQL.publicationAny, id, collection.name);\n    if (current === null || current.owner_id !== publisher.id) throw notFound();\n    if (current.hidden_at !== null) throw forbidden('This entry is under moderation review.');\n    if (current.revision !== expectedRevision) throw conflict();\n    return json(200, rowToEntry(collection, current), noStore);\n  }\n\n  const tagsJson = JSON.stringify(derivation.tags);\n  const result = await run(\n    env,\n    SQL.updatePublication,\n    ARCHIVE_CONTRACT_VERSION,\n    derivation.contentVersion,\n    payloadJson,\n    hash,\n    derivation.filter,\n    derivation.title,\n    tagsJson,\n    now(),\n    id,\n    publisher.id,\n    expectedRevision,\n    hash,\n  );\n  if ((result.meta?.changes ?? 0) === 0) {\n    const current = await first<PublicationRow>(env, SQL.publicationAny, id, collection.name);\n    if (current === null) throw notFound();\n    if (current.hidden_at !== null) throw forbidden('This entry is under moderation review.');\n    throw conflict();\n  }\n  const updated = await entryById(collection, env, id);\n  if (updated === null) throw notFound();\n  return json(200, updated, noStore);\n}\n\nexport async function deleteEntry(\n  collection: ArchiveCollection,\n  env: ArchiveWorkerEnv,\n  session: Session,\n  id: string,\n): Promise<Response> {\n  // The owner's row regardless of moderation state: the author may still remove a\n  // hidden entry (their content, their call) — hiding freezes edits, not removal.\n  // Removing an entry is the author's alone; an operator may remove ANY entry — the\n  // terminal moderation action for abusive content. The operator path carries the\n  // same registered-publisher-row requirement every moderation route shares: one\n  // accountable identity per action. Everyone else sees the entry as absent.\n  if (session.operator) {\n    const operator = requireOperatorRow(session);\n    await databaseCall(() =>\n      env.DB.batch([\n        env.DB.prepare(SQL.auditRemoval).bind(uuid(), operator.id, now(), id, collection.name),\n        env.DB.prepare(SQL.removePublicationAny).bind(id, collection.name),\n      ]),\n    );\n  } else {\n    const publisher = requirePublisherRow(session);\n    const row = await first<PublicationRow>(env, SQL.publicationAny, id, collection.name);\n    if (row === null) return new Response(null, { headers: noStore, status: 204 });\n    if (row.owner_id !== publisher.id) throw notFound();\n    await run(env, SQL.removePublication, id, publisher.id);\n  }\n  return new Response(null, { headers: noStore, status: 204 });\n}\n\nexport async function setLike(\n  collection: ArchiveCollection,\n  env: ArchiveWorkerEnv,\n  config: ApiConfig,\n  session: Session,\n  id: string,\n  liked: boolean,\n): Promise<Response> {\n  const publisher = requirePublisherRow(session);\n  if (liked && !config.likesEnabled) throw new ApiError(503, 'likes-disabled', 'Likes are currently disabled.');\n  const row = await first<PublicationRow>(env, SQL.publication, id, collection.name);\n  if (row === null) throw notFound();\n  if (liked) {\n    await run(env, SQL.insertLike, publisher.id, now(), id);\n  } else {\n    await run(env, SQL.removeLike, id, publisher.id);\n  }\n  // One consistent snapshot: the count and the viewer's flag read together.\n  const state = await first<{ id: string; like_count: number; liked: number }>(env, SQL.likeState, publisher.id, id);\n  if (state === null) throw notFound();\n  const dto = { id: state.id, likeCount: state.like_count, liked: state.liked === 1 };\n  const validated = archiveLikeStateSchema.safeParse(dto);\n  if (!validated.success) throw recordUnavailable();\n  return json(200, validated.data, noStore);\n}\n\n/* -------------------------------- moderation ------------------------------- */\n\n// One free-text report reason: trimmed, non-empty, well-formed, bounded.\nconst reportBodySchema = s.object({\n  reason: s.string().check(isWellFormedText).trim().min(1).max(ARCHIVE_LIMITS.reportReasonChars),\n});\n\n/**\n * A reader's abuse report against one visible entry. Idempotent per (entry, reporter):\n * reporting again is the same 204, never a duplicate row. Hidden or missing entries\n * are 404 — they cannot be reported, they are already actioned or gone.\n */\nexport async function reportEntry(\n  collection: ArchiveCollection,\n  request: Request,\n  env: ArchiveWorkerEnv,\n  session: Session,\n  id: string,\n): Promise<Response> {\n  const reporter = requirePublisherRow(session);\n  const body = await readJsonBody(request);\n  const parsed = reportBodySchema.safeParse(body);\n  if (!parsed.success) throw invalid();\n  const row = await first<PublicationRow>(env, SQL.publication, id, collection.name);\n  if (row === null) throw notFound();\n  // Bound in the SQL's authored placeholder order: reporter, reason, created_at,\n  // then the WHERE's entry id and collection.\n  await run(env, SQL.insertReport, uuid(), reporter.id, parsed.data.reason, now(), id, collection.name);\n  return new Response(null, { headers: noStore, status: 204 });\n}\n\n/**\n * The operator soft-hide: removes an entry from every public surface while keeping\n * the row, its likes and its retry key intact. Idempotent — already in the requested\n * state answers the same 204. Operator authority is the session's verified role\n * claim; a registered publisher row is still required (one accountable identity).\n */\nexport async function setHidden(\n  collection: ArchiveCollection,\n  env: ArchiveWorkerEnv,\n  session: Session,\n  id: string,\n  hidden: boolean,\n): Promise<Response> {\n  const operator = requireOperatorRow(session);\n  // Any collection row, visible or hidden: the operator acts on the storage row. The\n  // pre-read establishes existence only. The transactional audit guard decides\n  // whether the requested transition is an effective action.\n  const row = await first<PublicationRow>(env, SQL.publicationAny, id, collection.name);\n  if (row === null) throw notFound();\n  const statement = hidden\n    ? env.DB.prepare(SQL.hidePublication).bind(now(), id, collection.name)\n    : env.DB.prepare(SQL.unhidePublication).bind(id, collection.name);\n  await databaseCall(() =>\n    env.DB.batch([\n      env.DB.prepare(SQL.auditHide).bind(\n        uuid(),\n        operator.id,\n        hidden ? 'hide' : 'unhide',\n        now(),\n        id,\n        collection.name,\n        Number(hidden),\n      ),\n      statement,\n    ]),\n  );\n  return new Response(null, { headers: noStore, status: 204 });\n}\n\n/** The operator's report queue for one collection: newest first, bounded. */\nexport async function listReports(\n  collection: ArchiveCollection,\n  request: Request,\n  env: ArchiveWorkerEnv,\n  session: Session,\n): Promise<Response> {\n  requireOperatorRow(session);\n  const status = new URL(request.url).searchParams.get('status') ?? 'unresolved';\n  if (status !== 'unresolved' && status !== 'resolved') throw badRequest();\n  const context = `reports:${collection.name}:${status}`;\n  const { cursor, limit } = forwardPage(request, context, ['status']);\n  const bound = reportsPageSql(\n    { collection: collection.name, resolved: status === 'resolved' },\n    { cursor, limit: limit + 1 },\n  );\n  const rows = await all<ReportRow>(env, bound.sql, ...bound.parameters);\n  const page = rows.slice(0, limit);\n  const last = page.at(-1);\n  const parsed = archiveReportsSchema.safeParse({\n    cursor:\n      rows.length > limit && last !== undefined\n        ? nextCursor({ createdAt: last.created_at, id: last.id }, context)\n        : null,\n    reports: page.map((row) => ({\n      createdAt: row.created_at,\n      entryId: row.publication_id,\n      entryTitle: row.entry_title,\n      id: row.id,\n      reason: row.reason,\n      reporter: { id: row.reporter_id, name: row.reporter_name },\n      resolvedAt: row.resolved_at,\n    })),\n  });\n  if (!parsed.success) throw recordUnavailable();\n  return json(200, parsed.data, noStore);\n}\n\ninterface ReportRow {\n  collection: string;\n  created_at: string;\n  entry_title: string;\n  id: string;\n  publication_id: string;\n  reason: string;\n  reporter_id: string;\n  reporter_name: string;\n  resolved_at: string | null;\n}\n\nexport async function resolveReport(\n  collection: ArchiveCollection,\n  env: ArchiveWorkerEnv,\n  session: Session,\n  id: string,\n): Promise<Response> {\n  requireOperatorRow(session);\n  const row = await first<{ id: string }>(env, SQL.reportById, id, collection.name);\n  if (row === null) throw notFound();\n  await run(env, SQL.resolveReport, now(), id, collection.name);\n  return new Response(null, { headers: noStore, status: 204 });\n}\n\nexport async function myReports(request: Request, env: ArchiveWorkerEnv, session: Session): Promise<Response> {\n  const context = `own-reports:${session.publisher?.id ?? 'unregistered'}`;\n  const { cursor, limit } = forwardPage(request, context);\n  if (session.publisher === null) return json(200, { cursor: null, reports: [] }, noStore);\n  const bound = reportsPageSql({ publisherId: session.publisher.id }, { cursor, limit: limit + 1 });\n  const rows = await all<ReportRow>(env, bound.sql, ...bound.parameters);\n  const page = rows.slice(0, limit);\n  const last = page.at(-1);\n  const parsed = archiveOwnReportsSchema.safeParse({\n    cursor:\n      rows.length > limit && last !== undefined\n        ? nextCursor({ createdAt: last.created_at, id: last.id }, context)\n        : null,\n    reports: page.map((row) => ({\n      collection: row.collection,\n      createdAt: row.created_at,\n      entryId: row.publication_id,\n      id: row.id,\n      reason: row.reason,\n      resolvedAt: row.resolved_at,\n    })),\n  });\n  if (!parsed.success) throw recordUnavailable();\n  return json(200, parsed.data, noStore);\n}\n"],"mappings":"kJA6EA,eAAe,aAAgB,EAAyC,CACtE,GAAI,CACF,OAAO,MAAM,EAAU,CACzB,OAAS,EAAO,CACd,MAAM,IAAI,EAAA,SAAS,IAAK,WAAY,gCAAiC,CAAE,QAAO,WAAY,CAAE,KAAM,UAAW,CAAE,CAAC,CAClH,CACF,CACA,IAAM,OAAY,EAAuB,EAAa,GAAG,IACvD,iBACE,EAAI,GAAG,QAAQ,CAAG,CAAC,CAChB,KAAK,GAAG,CAAM,CAAC,CACf,MAAS,CACd,EACI,KAAU,EAAuB,EAAa,GAAG,IACrD,aAAa,SAAY,CACvB,IAAM,EAAS,MAAM,EAAI,GAAG,QAAQ,CAAG,CAAC,CACrC,KAAK,GAAG,CAAM,CAAC,CACf,IAAO,EACV,GAAI,CAAC,MAAM,QAAQ,EAAO,OAAO,EAAG,MAAU,MAAM,gCAAgC,EACpF,OAAO,EAAO,OAChB,CAAC,EACG,KAAO,EAAuB,EAAa,GAAG,IAClD,iBACE,EAAI,GAAG,QAAQ,CAAG,CAAC,CAChB,KAAK,GAAG,CAAM,CAAC,CACf,IAAI,CACT,EAEI,SAAqB,OAAO,WAAW,EACvC,QAAoB,IAAI,KAAK,CAAA,CAAE,YAAY,EAG3C,sBACJ,IAAI,EAAA,SAAS,IAAK,qBAAsB,+BAAgC,CAAE,WAAY,CAAE,KAAM,QAAS,CAAE,CAAC,EAEtG,EAAU,kEAQV,YAAc,EAA+B,IAAwB,CACzE,IAAI,EACJ,GAAI,CACF,EAAc,KAAK,MAAM,EAAI,YAAY,CAC3C,MAAQ,CACN,MAAM,kBAAkB,CAC1B,CACA,IAAM,EAAS,EAAW,SAAS,MAAM,UAAU,CACjD,OAAQ,CAAE,GAAI,EAAI,SAAU,KAAM,EAAI,WAAY,EAClD,YAAa,EAAI,aACjB,eAAgB,EAAI,gBACpB,GAAI,EAAI,GACR,UAAW,EAAI,WACf,QAAS,EACT,YAAa,EAAI,aACjB,SAAU,EAAI,SACd,cAAe,EAAI,eACnB,UAAW,EAAI,UACjB,CAAC,EACD,GAAI,CAAC,EAAO,QAAS,MAAM,kBAAkB,EAC7C,OAAO,EAAO,IAChB,EAEM,iBAAmB,EAA+B,IAAwB,CAC9E,IAAM,EAAQ,WAAW,EAAY,CAAG,EAIxC,GAAI,CADQ,EAAA,WAAW,UAAU,EAAI,UAChC,CAAA,CAAI,QAAS,MAAM,kBAAkB,EAC1C,MAAO,CAAE,GAAG,EAAO,UAAW,EAAI,WAAY,OAAQ,EAAI,YAAc,IAAK,CAC/E,EAEM,UAAY,MAAO,EAA+B,EAAuB,IAAe,CAC5F,IAAM,EAAM,MAAM,MAAsB,EAAK,EAAA,IAAI,YAAa,EAAI,EAAW,IAAI,EACjF,OAAO,IAAQ,KAAO,KAAO,WAAW,EAAY,CAAG,CACzD,EAKM,eAAkB,GAA8C,CACpE,GAAI,IAAW,KAAM,OACrB,GAAI,EAAO,OAAS,EAAA,eAAe,YAAa,MAAM,EAAA,WAAW,EAGjE,IAAM,GAAS,EAAO,MAAM,iBAAiB,GAAK,CAAC,EAAA,CAAG,MAAM,EAAG,EAAA,eAAe,WAAW,EACrF,KAAM,SAAW,EACrB,OAAO,EAAM,IAAK,GAAM,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,GAAG,CAC7C,EAOM,mBAAsB,GAQ1B,KAAK,UAAU,CACb,EAAM,WACN,EAAM,KACN,EAAM,QAAU,GAChB,EAAM,QAAU,GAChB,EAAM,KAAO,GACb,EAAM,aAAe,EACvB,CAAC,EAEG,cAAiB,IAA4C,CACjE,UAAW,EAAI,aACf,GAAI,EAAI,GACR,UAAW,EAAI,UACjB,GAEA,eAAsB,YACpB,EACA,EACA,EACmB,CACnB,IAAM,EAAM,IAAI,IAAI,EAAQ,GAAG,EACzB,EAAS,EAAA,YAAY,EAAK,CAAC,SAAU,SAAU,SAAU,QAAS,SAAU,OAAQ,KAAK,CAAC,EAE1F,EAAU,EAAO,IAAI,MAAM,GAAK,SAChC,EAAa,EAAA,kBAAkB,UAAU,CAAO,EACtD,GAAI,CAAC,EAAW,QAAS,MAAM,EAAA,WAAW,EAE1C,IAAM,EAAS,EAAO,IAAI,QAAQ,EAClC,GAAI,IAAW,MAAQ,CAAC,EAAW,QAAQ,SAAS,CAAM,EAAG,MAAM,EAAA,WAAW,EAC9E,IAAM,EAAM,EAAO,IAAI,KAAK,EAC5B,GAAI,IAAQ,MAAQ,CAAC,EAAW,KAAK,SAAS,CAAG,EAAG,MAAM,EAAA,WAAW,EACrE,IAAM,EAAS,EAAO,IAAI,QAAQ,EAClC,GAAI,IAAW,MAAQ,CAAC,EAAQ,KAAK,CAAM,EAAG,MAAM,EAAA,WAAW,EAE/D,IAAM,EAAc,eAAe,EAAO,IAAI,QAAQ,CAAC,EACjD,EAAU,mBAAmB,CACjC,OAAQ,GAAU,IAAA,GAClB,WAAY,EAAW,KACvB,OAAQ,GAAU,IAAA,GAClB,cACA,KAAM,EAAW,KACjB,IAAK,GAAO,IAAA,EACd,CAAC,EACK,CAAE,SAAQ,SAAU,EAAA,kBAAkB,EAAQ,CAAO,EAErD,EAA2B,CAC/B,OAAQ,GAAU,IAAA,GAClB,WAAY,EAAW,KACvB,OACE,IAAW,KAAO,IAAA,GAAY,CAAE,UAAW,EAAO,UAAW,GAAI,EAAO,GAAI,UAAW,EAAO,WAAa,CAAE,EAC/G,OAAQ,GAAU,IAAA,GAClB,MAAO,EAAQ,EACf,cACA,KAAM,EAAW,KACjB,IAAK,GAAO,IAAA,EACd,EAGM,EAAQ,EAAA,oBAAoB,CAAK,EACjC,EAAU,MAAM,IAAoB,EAAK,EAAM,IAAK,GAAG,EAAM,UAAU,EACvE,EAAO,EAAQ,MAAM,EAAG,CAAK,EAC7B,EAAO,EAAK,GAAG,EAAE,EAIjB,EAAU,CACd,OAAQ,EAAQ,OAAS,GAAS,IAAS,IAAA,GAAY,EAAA,WAAW,cAAc,CAAI,EAAG,CAAO,EAAI,KAClG,QAAS,EAAK,IAAK,GAAQ,WAAW,EAAY,CAAG,CAAC,CACxD,EACA,OAAO,EAAA,KAAK,IAAK,EAAS,EAAA,OAAO,CACnC,CAGA,SAAgB,eAAe,EAAyC,CACtE,IAAM,EAAS,EAAA,4BAA4B,UAAU,CACnD,QAAS,CAAC,GAAG,EAAW,OAAO,CAAC,CAAC,KAAK,EACtC,KAAM,EAAW,KACjB,KAAM,CAAC,GAAG,EAAW,IAAI,CAAC,CAAC,KAAK,CAClC,CAAC,EACD,GAAI,CAAC,EAAO,QAAS,MAAM,kBAAkB,EAC7C,OAAO,EAAA,KAAK,IAAK,EAAO,KAAM,EAAA,OAAO,CACvC,CAEA,eAAsB,SAAS,EAA+B,EAAuB,EAA+B,CAClH,IAAM,EAAQ,MAAM,UAAU,EAAY,EAAK,CAAE,EACjD,GAAI,IAAU,KAAM,MAAM,EAAA,SAAS,EACnC,OAAO,EAAA,KAAK,IAAK,EAAO,EAAA,OAAO,CACjC,CAUA,eAAsB,WAAW,EAAmB,EAA0C,CAC5F,IAAI,EAAiC,KACjC,EAA4D,KAChE,GAAI,CAEF,GAAkB,MADA,MAA2B,EAAK,EAAA,IAAI,aAAa,EAAA,EAC5C,SAAW,CACpC,MAAQ,CACN,EAAS,sBACX,CACI,IAAW,MAAQ,IAAA,IAA4C,EAAS,mBAC5E,IAAM,EAAS,EAAA,oBAAoB,UAAU,CAC3C,kBACA,SAAU,CAAE,MAAO,EAAO,aAAc,WAAY,EAAO,iBAAkB,EAC7E,OAAQ,EAAA,eACR,SACA,cAAA,EACA,OAAQ,IAAW,KAAO,KAAO,UACnC,CAAC,EACD,GAAI,CAAC,EAAO,QAAS,MAAM,kBAAkB,EAC7C,OAAO,EAAA,KAAK,IAAW,KAAO,IAAM,IAAK,EAAO,KAAM,EAAA,OAAO,CAC/D,CAKA,IAAM,cAAgB,EAAgB,IAAgC,CACpE,IAAM,EAAS,EAAA,sBAAsB,UAAU,CAAQ,EACvD,GAAI,CAAC,EAAO,QAAS,MAAM,kBAAkB,EAC7C,OAAO,EAAA,KAAK,EAAQ,EAAO,KAAM,EAAA,OAAO,CAC1C,EAEA,SAAgB,MAAM,EAAmC,CACvD,OAAO,aACL,IACA,GAAS,UACL,CAAE,GAAI,EAAQ,UAAU,GAAI,KAAM,EAAQ,UAAU,YAAa,SAAU,EAAQ,QAAS,EAC5F,IACN,CACF,CAEA,eAAsB,WAAW,EAAkB,EAAuB,EAAqC,CAC7G,IAAM,EAAO,MAAM,EAAA,aAAa,CAAO,EACjC,EAAS,EAAmB,UAAU,CAAI,EAChD,GAAI,CAAC,EAAO,QAAS,MAAM,EAAA,QAAQ,EACnC,IAAM,EAAO,EAAO,KAAK,MAAQ,GAE3B,EAAW,MAAM,MACrB,EACA,EAAA,IAAI,UACJ,EAAQ,QAAQ,OAChB,EAAQ,QAAQ,OAClB,EACA,GAAI,IAAa,KACf,OAAO,aAAa,IAAK,CAAE,GAAI,EAAS,GAAI,KAAM,EAAS,aAAc,SAAU,EAAQ,QAAS,CAAC,EAEvG,IAAM,EAAK,KAAK,EAChB,MAAM,IACJ,EACA,EAAA,IAAI,gBACJ,EACA,EAAQ,QAAQ,OAChB,EAAQ,QAAQ,QAChB,EACA,IAAI,EACJ,EAAQ,QAAQ,OAChB,EAAQ,QAAQ,QAChB,KAAK,IAAI,CACX,EACA,IAAM,EAAM,MAAM,MAChB,EACA,EAAA,IAAI,UACJ,EAAQ,QAAQ,OAChB,EAAQ,QAAQ,OAClB,EACA,GAAI,IAAQ,KAIV,MAHK,MAAM,MAAM,EAAK,EAAA,IAAI,eAAgB,EAAQ,QAAQ,OAAQ,EAAQ,QAAQ,QAAS,KAAK,IAAI,CAAC,IAAO,KAGtG,EAAA,SAAS,EAFP,IAAI,EAAA,SAAS,IAAK,kBAAmB,sBAAsB,EAIrE,OAAO,aAAa,IAAK,CAAE,GAAI,EAAI,GAAI,KAAM,EAAI,aAAc,SAAU,EAAQ,QAAS,CAAC,CAC7F,CAEA,eAAsB,SAAS,EAAkB,EAAuB,EAAqC,CAC3G,IAAM,EAAY,oBAAoB,CAAO,EACvC,EAAO,MAAM,EAAA,aAAa,CAAO,EACjC,EAAS,EAAiB,UAAU,CAAI,EAC9C,GAAI,CAAC,EAAO,QAAS,MAAM,EAAA,QAAQ,EAInC,OAHI,EAAO,KAAK,OAAS,EAAU,aACjC,MAAM,IAAI,EAAK,EAAA,IAAI,gBAAiB,EAAO,KAAK,KAAM,EAAU,GAAI,EAAO,KAAK,IAAI,EAE/E,aAAa,IAAK,CAAE,GAAI,EAAU,GAAI,KAAM,EAAO,KAAK,KAAM,SAAU,EAAQ,QAAS,CAAC,CACnG,CAMA,eAAsB,cAAc,EAAuB,EAAqC,CAE9F,OADI,EAAQ,YAAc,MAAM,MAAM,IAAI,EAAK,EAAA,IAAI,gBAAiB,EAAQ,UAAU,EAAE,EACjF,IAAI,SAAS,KAAM,CACxB,QAAS,CACP,gBAAiB,UACnB,EACA,OAAQ,GACV,CAAC,CACH,CAGA,eAAsB,qBAAqB,EAAuB,EAAqC,CACrG,GAAM,CAAE,SAAQ,WAAY,EAAQ,QAYpC,OAVA,MAAM,iBACJ,EAAI,GAAG,MAAM,CACX,EAAI,GAAG,QAAQ,EAAA,IAAI,aAAa,CAAC,CAAC,KAChC,EACA,EACA,KAAK,IAAI,GAAK,EAAA,wBAA0B,IAAmC,GAC7E,EACA,EAAI,GAAG,QAAQ,EAAA,IAAI,sBAAsB,CAAC,CAAC,KAAK,EAAQ,CAAO,CACjE,CAAC,CACH,EACO,IAAI,SAAS,KAAM,CAAE,QAAS,EAAA,QAAS,OAAQ,GAAI,CAAC,CAC7D,CAOA,eAAsB,eAAe,EAAuB,EAAkB,EAAwC,CACpH,IAAM,EAAW,mBAAmB,CAAO,EAW3C,OANA,MAAM,iBACJ,EAAI,GAAG,MAAM,CACX,EAAI,GAAG,QAAQ,EAAA,IAAI,YAAY,CAAC,CAAC,KAAK,KAAK,EAAG,EAAS,GAAI,IAAI,EAAG,CAAW,EAC7E,EAAI,GAAG,QAAQ,EAAA,IAAI,eAAe,CAAC,CAAC,KAAK,CAAW,CACtD,CAAC,CACH,EACO,IAAI,SAAS,KAAM,CAAE,QAAS,EAAA,QAAS,OAAQ,GAAI,CAAC,CAC7D,CAGA,eAAsB,kBAAkB,EAAkB,EAAuB,EAAqC,CACpH,mBAAmB,CAAO,EAC1B,IAAM,EAAU,iBACV,CAAE,SAAQ,SAAU,EAAA,YAAY,EAAS,CAAO,EAChD,EAAQ,EAAA,iBAAiB,CAAE,SAAQ,MAAO,EAAQ,CAAE,CAAC,EACrD,EAAO,MAAM,IAOhB,EAAK,EAAM,IAAK,GAAG,EAAM,UAAU,EAChC,EAAO,EAAK,MAAM,EAAG,CAAK,EAC1B,EAAO,EAAK,GAAG,EAAE,EACjB,EAAS,EAAA,2BAA2B,UAAU,CAClD,QAAS,EAAK,IAAK,IAAS,CAC1B,OAAQ,EAAI,OACZ,WAAY,EAAI,WAChB,UAAW,EAAI,WACf,GAAI,EAAI,GACR,WAAY,EAAI,YAChB,SAAU,EAAI,SAChB,EAAE,EACF,OACE,EAAK,OAAS,GAAS,IAAS,IAAA,GAC5B,EAAA,WAAW,CAAE,UAAW,EAAK,WAAY,GAAI,EAAK,EAAG,EAAG,CAAO,EAC/D,IACR,CAAC,EACD,GAAI,CAAC,EAAO,QAAS,MAAM,kBAAkB,EAC7C,OAAO,EAAA,KAAK,IAAK,EAAO,KAAM,EAAA,OAAO,CACvC,CAEA,IAAa,oBAAuB,GAAgC,CAClE,GAAI,EAAQ,YAAc,KAAM,MAAM,EAAA,UAAU,6BAA6B,EAC7E,OAAO,EAAQ,SACjB,EAIa,mBAAsB,GAAgC,CACjE,GAAI,CAAC,EAAQ,SAAU,MAAM,EAAA,UAAU,8BAA8B,EACrE,GAAI,EAAQ,YAAc,KAAM,MAAM,EAAA,UAAU,6BAA6B,EAC7E,OAAO,EAAQ,SACjB,EAGM,EAAqB,EAAA,EAAE,OAAO,CAAE,KAAM,EAAA,mBAAmB,SAAS,CAAE,CAAC,EACrE,EAAmB,EAAA,EAAE,OAAO,CAAE,KAAM,EAAA,kBAAmB,CAAC,EAE9D,eAAsB,eACpB,EACA,EACA,EACmB,CACnB,GAAI,EAAQ,YAAc,KAAM,OAAO,EAAA,KAAK,IAAK,CAAE,QAAS,CAAC,CAAE,EAAG,EAAA,OAAO,EACzE,IAAM,EAAO,MAAM,IACjB,EACA,EAAA,IAAI,gBACJ,EAAQ,UAAU,GAClB,EAAW,KACX,EAAA,eAAe,eACjB,EAEA,OAAO,EAAA,KAAK,IAAK,CAAE,QAAS,EAAK,IAAK,GAAQ,gBAAgB,EAAY,CAAG,CAAC,CAAE,EAAG,EAAA,OAAO,CAC5F,CAEA,eAAsB,QAAQ,EAAkB,EAAuB,EAAqC,CAE1G,IAAM,EADS,IAAI,IAAI,EAAQ,GAAG,CAAC,CAAC,aACjB,IAAI,KAAK,EAC5B,GAAI,IAAQ,KAAM,CAChB,IAAM,EAAU,SAAS,EAAQ,WAAW,IAAM,iBAC5C,CAAE,SAAQ,SAAU,EAAA,YAAY,EAAS,CAAO,EACtD,GAAI,EAAQ,YAAc,KAAM,OAAO,EAAA,KAAK,IAAK,CAAE,OAAQ,KAAM,IAAK,CAAC,CAAE,EAAG,EAAA,OAAO,EACnF,IAAM,EAAQ,EAAA,aAAa,EAAQ,UAAU,GAAI,CAAE,SAAQ,MAAO,EAAQ,CAAE,CAAC,EACvE,EAAO,MAAM,IAAoD,EAAK,EAAM,IAAK,GAAG,EAAM,UAAU,EACpG,EAAO,EAAK,MAAM,EAAG,CAAK,EAC1B,EAAO,EAAK,GAAG,EAAE,EACjB,EAAS,EAAA,uBAAuB,UAAU,CAC9C,OACE,EAAK,OAAS,GAAS,IAAS,IAAA,GAC5B,EAAA,WAAW,CAAE,UAAW,EAAK,WAAY,GAAI,EAAK,cAAe,EAAG,CAAO,EAC3E,KACN,IAAK,EAAK,IAAK,GAAQ,EAAI,cAAc,CAC3C,CAAC,EACD,GAAI,CAAC,EAAO,QAAS,MAAM,kBAAkB,EAC7C,OAAO,EAAA,KAAK,IAAK,EAAO,KAAM,EAAA,OAAO,CACvC,CACA,EAAA,YAAY,IAAI,IAAI,EAAQ,GAAG,EAAG,CAAC,KAAK,CAAC,EACzC,IAAM,EAAM,CAAC,GAAG,IAAI,IAAI,EAAI,MAAM,GAAG,CAAC,CAAC,EACvC,GAAI,EAAI,OAAS,EAAA,eAAe,cAAgB,EAAI,KAAM,GAAO,CAAC,EAAQ,KAAK,CAAE,CAAC,EAAG,MAAM,EAAA,WAAW,EACtG,GAAI,EAAQ,YAAc,KAAM,OAAO,EAAA,KAAK,IAAK,CAAE,IAAK,CAAC,CAAE,EAAG,EAAA,OAAO,EACrE,IAAM,EAAQ,EAAA,qBAAqB,EAAQ,UAAU,GAAI,CAAG,EACtD,EAAO,MAAM,IAAgC,EAAK,EAAM,IAAK,GAAG,EAAM,UAAU,EAChF,EAAQ,IAAI,IAAI,EAAK,IAAK,GAAM,EAAE,cAAc,CAAC,EACjD,EAAM,CAAE,IAAK,EAAI,OAAQ,GAAO,EAAM,IAAI,CAAE,CAAC,CAAE,EAC/C,EAAY,EAAA,sBAAsB,UAAU,CAAG,EACrD,GAAI,CAAC,EAAU,QAAS,MAAM,kBAAkB,EAChD,OAAO,EAAA,KAAK,IAAK,EAAU,KAAM,EAAA,OAAO,CAC1C,CAKA,IAAM,EAAoB,EAAA,EAAE,OAAO,CAAE,UAAW,EAAA,WAAY,QAAS,EAAA,EAAE,QAAQ,CAAE,CAAC,EAC5E,EAAmB,EAAA,EAAE,OAAO,CAChC,iBAAkB,EAAA,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAA2B,EACrE,QAAS,EAAA,EAAE,QAAQ,CACrB,CAAC,EAiBD,eAAe,mBACb,EACA,EACA,EACA,EACuC,CACvC,GAAI,IAAW,MAAQ,EAAO,YAAc,KAAK,IAAI,EAAG,OAAO,KAC/D,GAAI,EAAO,eAAiB,EAAM,MAAM,EAAA,SAAS,4CAA4C,EAC7F,GAAI,EAAO,iBAAmB,KAAM,MAAM,IAAI,EAAA,SAAS,IAAK,OAAQ,+BAA+B,EACnG,IAAM,EAAQ,MAAM,UAAU,EAAY,EAAK,EAAO,cAAc,EAEpE,OADI,IAAU,KAAa,WACpB,EAAA,KAAK,IAAK,EAAO,EAAA,OAAO,CACjC,CAEA,eAAsB,aACpB,EACA,EACA,EACA,EACA,EACmB,CACnB,GAAI,CAAC,EAAO,kBAAmB,MAAM,IAAI,EAAA,SAAS,IAAK,sBAAuB,mCAAmC,EACjH,IAAM,EAAY,oBAAoB,CAAO,EACvC,EAAO,MAAM,EAAA,aAAa,CAAO,EACjC,EAAS,EAAkB,UAAU,CAAI,EAC/C,GAAI,CAAC,EAAO,QAAS,MAAM,EAAA,QAAQ,EACnC,GAAM,CAAE,aAAc,EAAO,KAEvB,EAAa,MAAM,EAAW,OAAO,EAAO,KAAK,OAAO,EAC9D,GAAI,IAAe,KAAM,MAAM,EAAA,QAAQ,EAEvC,IAAM,EAAc,EAAW,cACzB,EAAO,EAAW,YAClB,EAAQ,EAAU,GAClB,EAAO,EAAW,KAMlB,EAAS,MAAM,mBAAmB,EAAY,EAAK,MADrC,MAAmB,EAAK,EAAA,IAAI,QAAS,EAAO,EAAM,CAAS,EACf,CAAI,EACpE,GAAI,IAAW,MAAQ,IAAW,WAAY,OAAO,EAErD,IAAM,EAAW,MAAM,MAAsB,EAAK,EAAA,IAAI,iBAAkB,EAAO,EAAM,CAAS,EAC9F,GAAI,IAAa,KAAM,CAGrB,GAAI,EAAS,YAAc,KAAM,MAAM,EAAA,UAAU,wCAAwC,EACzF,GAAI,EAAS,eAAiB,EAAM,MAAM,EAAA,SAAS,4CAA4C,EAC/F,OAAO,EAAA,KAAK,IAAK,WAAW,EAAY,CAAQ,EAAG,EAAA,OAAO,CAC5D,CAEA,IAAM,EAAY,IAAI,EAChB,EAAY,KAAK,IAAI,EAAI,EAAA,eAAe,uBACxC,EAAW,KAAK,UAAU,EAAW,IAAI,EAwC/C,KAAK,MAvCiB,iBACpB,EAAI,GAAG,MAAM,CACX,EAAI,GAAG,QAAQ,EAAA,IAAI,cAAc,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,EAClD,EAAI,GAAG,QAAQ,EAAA,IAAI,iBAAiB,CAAC,CAAC,KACpC,KAAK,EACL,EACA,EACA,EAAA,EAEA,EAAW,eACX,EACA,EACA,EAAW,OACX,EAAW,MACX,EACA,EACA,EACA,EACA,EACA,EAAA,eAAe,gBACf,EACA,EACA,EACA,KAAK,IAAI,CACX,EACA,EAAI,GAAG,QAAQ,EAAA,IAAI,aAAa,CAAC,CAAC,KAChC,EACA,EACA,EACA,EACA,EACA,EACA,EACA,EACA,EACA,CACF,CACF,CAAC,CACH,EAAA,CACa,EAAE,EAAE,MAAM,SAAW,KAAO,EAAG,CAK1C,IAAM,EAAc,MAAM,mBAAmB,EAAY,EAAK,MADpC,MAAmB,EAAK,EAAA,IAAI,QAAS,EAAO,EAAM,CAAS,EACV,CAAI,EAC/E,GAAI,IAAgB,WAAY,MAAM,IAAI,EAAA,SAAS,IAAK,OAAQ,+BAA+B,EAC/F,GAAI,IAAgB,KAAM,OAAO,EACjC,IAAM,EAAQ,MAAM,MAAsB,EAAK,EAAA,IAAI,iBAAkB,EAAO,EAAM,CAAS,EAC3F,GAAI,IAAU,MAAQ,EAAM,YAAc,KAAM,MAAM,EAAA,UAAU,wCAAwC,EACxG,GAAI,IAAU,MAAQ,EAAM,eAAiB,EAAM,OAAO,EAAA,KAAK,IAAK,WAAW,EAAY,CAAK,EAAG,EAAA,OAAO,EAE1G,MADI,IAAU,KACR,IAAI,EAAA,SAAS,IAAK,QAAS,4BAA4B,EADnC,EAAA,SAAS,4CAA4C,CAEjF,CAEA,IAAM,EAAU,MAAM,MAAsB,EAAK,EAAA,IAAI,iBAAkB,EAAO,EAAM,CAAS,EAC7F,GAAI,IAAY,KAAM,MAAM,EAAA,SAAS,EACrC,OAAO,EAAA,KAAK,IAAK,WAAW,EAAY,CAAO,EAAG,EAAA,OAAO,CAC3D,CAEA,eAAsB,YACpB,EACA,EACA,EACA,EACA,EACA,EACmB,CACnB,GAAI,CAAC,EAAO,kBAAmB,MAAM,IAAI,EAAA,SAAS,IAAK,sBAAuB,mCAAmC,EACjH,IAAM,EAAY,oBAAoB,CAAO,EAGvC,EAAM,MAAM,MAAsB,EAAK,EAAA,IAAI,eAAgB,EAAI,EAAW,IAAI,EAEpF,GAAI,IAAQ,MAAQ,EAAI,WAAa,EAAU,GAAI,MAAM,EAAA,SAAS,EAElE,GAAI,EAAI,YAAc,KAAM,MAAM,EAAA,UAAU,wCAAwC,EAEpF,IAAM,EAAO,MAAM,EAAA,aAAa,CAAO,EACjC,EAAS,EAAiB,UAAU,CAAI,EAC9C,GAAI,CAAC,EAAO,QAAS,MAAM,EAAA,QAAQ,EACnC,GAAM,CAAE,oBAAqB,EAAO,KAEpC,GAAI,IAAqB,EAAI,SAAU,MAAM,EAAA,SAAS,EAEtD,IAAM,EAAa,MAAM,EAAW,OAAO,EAAO,KAAK,OAAO,EAC9D,GAAI,IAAe,KAAM,MAAM,EAAA,QAAQ,EACvC,IAAM,EAAc,EAAW,cACzB,EAAO,EAAW,YACxB,GAAI,IAAS,EAAI,aAAc,CAC7B,IAAM,EAAU,MAAM,MAAsB,EAAK,EAAA,IAAI,eAAgB,EAAI,EAAW,IAAI,EACxF,GAAI,IAAY,MAAQ,EAAQ,WAAa,EAAU,GAAI,MAAM,EAAA,SAAS,EAC1E,GAAI,EAAQ,YAAc,KAAM,MAAM,EAAA,UAAU,wCAAwC,EACxF,GAAI,EAAQ,WAAa,EAAkB,MAAM,EAAA,SAAS,EAC1D,OAAO,EAAA,KAAK,IAAK,WAAW,EAAY,CAAO,EAAG,EAAA,OAAO,CAC3D,CAEA,IAAM,EAAW,KAAK,UAAU,EAAW,IAAI,EAiB/C,KAAK,MAhBgB,IACnB,EACA,EAAA,IAAI,kBAAA,EAEJ,EAAW,eACX,EACA,EACA,EAAW,OACX,EAAW,MACX,EACA,IAAI,EACJ,EACA,EAAU,GACV,EACA,CACF,EAAA,CACY,MAAM,SAAW,KAAO,EAAG,CACrC,IAAM,EAAU,MAAM,MAAsB,EAAK,EAAA,IAAI,eAAgB,EAAI,EAAW,IAAI,EAGxF,MAFI,IAAY,KAAY,EAAA,SAAS,EACjC,EAAQ,YAAc,KACpB,EAAA,SAAS,EADuB,EAAA,UAAU,wCAAwC,CAE1F,CACA,IAAM,EAAU,MAAM,UAAU,EAAY,EAAK,CAAE,EACnD,GAAI,IAAY,KAAM,MAAM,EAAA,SAAS,EACrC,OAAO,EAAA,KAAK,IAAK,EAAS,EAAA,OAAO,CACnC,CAEA,eAAsB,YACpB,EACA,EACA,EACA,EACmB,CAOnB,GAAI,EAAQ,SAAU,CACpB,IAAM,EAAW,mBAAmB,CAAO,EAC3C,MAAM,iBACJ,EAAI,GAAG,MAAM,CACX,EAAI,GAAG,QAAQ,EAAA,IAAI,YAAY,CAAC,CAAC,KAAK,KAAK,EAAG,EAAS,GAAI,IAAI,EAAG,EAAI,EAAW,IAAI,EACrF,EAAI,GAAG,QAAQ,EAAA,IAAI,oBAAoB,CAAC,CAAC,KAAK,EAAI,EAAW,IAAI,CACnE,CAAC,CACH,CACF,KAAO,CACL,IAAM,EAAY,oBAAoB,CAAO,EACvC,EAAM,MAAM,MAAsB,EAAK,EAAA,IAAI,eAAgB,EAAI,EAAW,IAAI,EACpF,GAAI,IAAQ,KAAM,OAAO,IAAI,SAAS,KAAM,CAAE,QAAS,EAAA,QAAS,OAAQ,GAAI,CAAC,EAC7E,GAAI,EAAI,WAAa,EAAU,GAAI,MAAM,EAAA,SAAS,EAClD,MAAM,IAAI,EAAK,EAAA,IAAI,kBAAmB,EAAI,EAAU,EAAE,CACxD,CACA,OAAO,IAAI,SAAS,KAAM,CAAE,QAAS,EAAA,QAAS,OAAQ,GAAI,CAAC,CAC7D,CAEA,eAAsB,QACpB,EACA,EACA,EACA,EACA,EACA,EACmB,CACnB,IAAM,EAAY,oBAAoB,CAAO,EAC7C,GAAI,GAAS,CAAC,EAAO,aAAc,MAAM,IAAI,EAAA,SAAS,IAAK,iBAAkB,+BAA+B,EAE5G,GAAI,MADc,MAAsB,EAAK,EAAA,IAAI,YAAa,EAAI,EAAW,IAAI,IACrE,KAAM,MAAM,EAAA,SAAS,EAC7B,EACF,MAAM,IAAI,EAAK,EAAA,IAAI,WAAY,EAAU,GAAI,IAAI,EAAG,CAAE,EAEtD,MAAM,IAAI,EAAK,EAAA,IAAI,WAAY,EAAI,EAAU,EAAE,EAGjD,IAAM,EAAQ,MAAM,MAAyD,EAAK,EAAA,IAAI,UAAW,EAAU,GAAI,CAAE,EACjH,GAAI,IAAU,KAAM,MAAM,EAAA,SAAS,EACnC,IAAM,EAAM,CAAE,GAAI,EAAM,GAAI,UAAW,EAAM,WAAY,MAAO,EAAM,QAAU,CAAE,EAC5E,EAAY,EAAA,uBAAuB,UAAU,CAAG,EACtD,GAAI,CAAC,EAAU,QAAS,MAAM,kBAAkB,EAChD,OAAO,EAAA,KAAK,IAAK,EAAU,KAAM,EAAA,OAAO,CAC1C,CAKA,IAAM,EAAmB,EAAA,EAAE,OAAO,CAChC,OAAQ,EAAA,EAAE,OAAO,CAAC,CAAC,MAAM,EAAA,gBAAgB,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAA,eAAe,iBAAiB,CAC/F,CAAC,EAOD,eAAsB,YACpB,EACA,EACA,EACA,EACA,EACmB,CACnB,IAAM,EAAW,oBAAoB,CAAO,EACtC,EAAO,MAAM,EAAA,aAAa,CAAO,EACjC,EAAS,EAAiB,UAAU,CAAI,EAC9C,GAAI,CAAC,EAAO,QAAS,MAAM,EAAA,QAAQ,EAEnC,GAAI,MADc,MAAsB,EAAK,EAAA,IAAI,YAAa,EAAI,EAAW,IAAI,IACrE,KAAM,MAAM,EAAA,SAAS,EAIjC,OADA,MAAM,IAAI,EAAK,EAAA,IAAI,aAAc,KAAK,EAAG,EAAS,GAAI,EAAO,KAAK,OAAQ,IAAI,EAAG,EAAI,EAAW,IAAI,EAC7F,IAAI,SAAS,KAAM,CAAE,QAAS,EAAA,QAAS,OAAQ,GAAI,CAAC,CAC7D,CAQA,eAAsB,UACpB,EACA,EACA,EACA,EACA,EACmB,CACnB,IAAM,EAAW,mBAAmB,CAAO,EAK3C,GAAI,MADc,MAAsB,EAAK,EAAA,IAAI,eAAgB,EAAI,EAAW,IAAI,IACxE,KAAM,MAAM,EAAA,SAAS,EACjC,IAAM,EAAY,EACd,EAAI,GAAG,QAAQ,EAAA,IAAI,eAAe,CAAC,CAAC,KAAK,IAAI,EAAG,EAAI,EAAW,IAAI,EACnE,EAAI,GAAG,QAAQ,EAAA,IAAI,iBAAiB,CAAC,CAAC,KAAK,EAAI,EAAW,IAAI,EAelE,OAdA,MAAM,iBACJ,EAAI,GAAG,MAAM,CACX,EAAI,GAAG,QAAQ,EAAA,IAAI,SAAS,CAAC,CAAC,KAC5B,KAAK,EACL,EAAS,GACT,EAAS,OAAS,SAClB,IAAI,EACJ,EACA,EAAW,KACX,OAAO,CAAM,CACf,EACA,CACF,CAAC,CACH,EACO,IAAI,SAAS,KAAM,CAAE,QAAS,EAAA,QAAS,OAAQ,GAAI,CAAC,CAC7D,CAGA,eAAsB,YACpB,EACA,EACA,EACA,EACmB,CACnB,mBAAmB,CAAO,EAC1B,IAAM,EAAS,IAAI,IAAI,EAAQ,GAAG,CAAC,CAAC,aAAa,IAAI,QAAQ,GAAK,aAClE,GAAI,IAAW,cAAgB,IAAW,WAAY,MAAM,EAAA,WAAW,EACvE,IAAM,EAAU,WAAW,EAAW,KAAK,GAAG,IACxC,CAAE,SAAQ,SAAU,EAAA,YAAY,EAAS,EAAS,CAAC,QAAQ,CAAC,EAC5D,EAAQ,EAAA,eACZ,CAAE,WAAY,EAAW,KAAM,SAAU,IAAW,UAAW,EAC/D,CAAE,SAAQ,MAAO,EAAQ,CAAE,CAC7B,EACM,EAAO,MAAM,IAAe,EAAK,EAAM,IAAK,GAAG,EAAM,UAAU,EAC/D,EAAO,EAAK,MAAM,EAAG,CAAK,EAC1B,EAAO,EAAK,GAAG,EAAE,EACjB,EAAS,EAAA,qBAAqB,UAAU,CAC5C,OACE,EAAK,OAAS,GAAS,IAAS,IAAA,GAC5B,EAAA,WAAW,CAAE,UAAW,EAAK,WAAY,GAAI,EAAK,EAAG,EAAG,CAAO,EAC/D,KACN,QAAS,EAAK,IAAK,IAAS,CAC1B,UAAW,EAAI,WACf,QAAS,EAAI,eACb,WAAY,EAAI,YAChB,GAAI,EAAI,GACR,OAAQ,EAAI,OACZ,SAAU,CAAE,GAAI,EAAI,YAAa,KAAM,EAAI,aAAc,EACzD,WAAY,EAAI,WAClB,EAAE,CACJ,CAAC,EACD,GAAI,CAAC,EAAO,QAAS,MAAM,kBAAkB,EAC7C,OAAO,EAAA,KAAK,IAAK,EAAO,KAAM,EAAA,OAAO,CACvC,CAcA,eAAsB,cACpB,EACA,EACA,EACA,EACmB,CAGnB,GAFA,mBAAmB,CAAO,EAEtB,MADc,MAAsB,EAAK,EAAA,IAAI,WAAY,EAAI,EAAW,IAAI,IACpE,KAAM,MAAM,EAAA,SAAS,EAEjC,OADA,MAAM,IAAI,EAAK,EAAA,IAAI,cAAe,IAAI,EAAG,EAAI,EAAW,IAAI,EACrD,IAAI,SAAS,KAAM,CAAE,QAAS,EAAA,QAAS,OAAQ,GAAI,CAAC,CAC7D,CAEA,eAAsB,UAAU,EAAkB,EAAuB,EAAqC,CAC5G,IAAM,EAAU,eAAe,EAAQ,WAAW,IAAM,iBAClD,CAAE,SAAQ,SAAU,EAAA,YAAY,EAAS,CAAO,EACtD,GAAI,EAAQ,YAAc,KAAM,OAAO,EAAA,KAAK,IAAK,CAAE,OAAQ,KAAM,QAAS,CAAC,CAAE,EAAG,EAAA,OAAO,EACvF,IAAM,EAAQ,EAAA,eAAe,CAAE,YAAa,EAAQ,UAAU,EAAG,EAAG,CAAE,SAAQ,MAAO,EAAQ,CAAE,CAAC,EAC1F,EAAO,MAAM,IAAe,EAAK,EAAM,IAAK,GAAG,EAAM,UAAU,EAC/D,EAAO,EAAK,MAAM,EAAG,CAAK,EAC1B,EAAO,EAAK,GAAG,EAAE,EACjB,EAAS,EAAA,wBAAwB,UAAU,CAC/C,OACE,EAAK,OAAS,GAAS,IAAS,IAAA,GAC5B,EAAA,WAAW,CAAE,UAAW,EAAK,WAAY,GAAI,EAAK,EAAG,EAAG,CAAO,EAC/D,KACN,QAAS,EAAK,IAAK,IAAS,CAC1B,WAAY,EAAI,WAChB,UAAW,EAAI,WACf,QAAS,EAAI,eACb,GAAI,EAAI,GACR,OAAQ,EAAI,OACZ,WAAY,EAAI,WAClB,EAAE,CACJ,CAAC,EACD,GAAI,CAAC,EAAO,QAAS,MAAM,kBAAkB,EAC7C,OAAO,EAAA,KAAK,IAAK,EAAO,KAAM,EAAA,OAAO,CACvC"}

package/dist/worker/publications.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"publications.d.ts","sourceRoot":"","sources":["../../src/worker/publications.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAsBvD,OAAO,EAA+B,KAAK,SAAS,EAAE,KAAK,OAAO,EAAE,MAAM,QAAQ,CAAC;AACnF,OAAO,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,OAAO,CAAC;AA0NzD,wBAAsB,WAAW,CAC/B,UAAU,EAAE,iBAAiB,EAC7B,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,gBAAgB,GACpB,OAAO,CAAC,QAAQ,CAAC,CA4EnB;AAED,2FAA2F;AAC3F,wBAAgB,cAAc,CAAC,UAAU,EAAE,iBAAiB,GAAG,QAAQ,CAQtE;AAED,wBAAsB,QAAQ,CAAC,UAAU,EAAE,iBAAiB,EAAE,GAAG,EAAE,gBAAgB,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAIlH;AAID;;;;;GAKG;AACH,wBAAsB,UAAU,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAoB5F;AAWD,wBAAgB,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,GAAG,QAAQ,CAOvD;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAyC7G;AAED,wBAAsB,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAS3G;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAQ9F;AAED,0GAA0G;AAC1G,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAcrG;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAapH;AAED,kFAAkF;AAClF,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CA+BpH;AAED,eAAO,MAAM,mBAAmB,GAAI,SAAS,OAAO,KAAG,SAGtD,CAAC;AAEF;+DAC+D;AAC/D,eAAO,MAAM,kBAAkB,GAAI,SAAS,OAAO,KAAG,SAIrD,CAAC;AAMF,wBAAsB,cAAc,CAClC,UAAU,EAAE,iBAAiB,EAC7B,GAAG,EAAE,gBAAgB,EACrB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,QAAQ,CAAC,CAWnB;AAED,wBAAsB,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAgC1G;AAWD,wBAAsB,YAAY,CAChC,UAAU,EAAE,iBAAiB,EAC7B,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,gBAAgB,EACrB,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,QAAQ,CAAC,CAsHnB;AAED,wBAAsB,WAAW,CAC/B,UAAU,EAAE,iBAAiB,EAC7B,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,gBAAgB,EACrB,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,OAAO,EAChB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,QAAQ,CAAC,CAwDnB;AAED,wBAAsB,WAAW,CAC/B,UAAU,EAAE,iBAAiB,EAC7B,GAAG,EAAE,gBAAgB,EACrB,OAAO,EAAE,OAAO,EAChB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,QAAQ,CAAC,CAuBnB;AAED,wBAAsB,OAAO,CAC3B,UAAU,EAAE,iBAAiB,EAC7B,GAAG,EAAE,gBAAgB,EACrB,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,OAAO,EAChB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,QAAQ,CAAC,CAiBnB;AASD;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,UAAU,EAAE,iBAAiB,EAC7B,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,gBAAgB,EACrB,OAAO,EAAE,OAAO,EAChB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,QAAQ,CAAC,CAWnB;AAED;;;;;GAKG;AACH,wBAAsB,SAAS,CAC7B,UAAU,EAAE,iBAAiB,EAC7B,GAAG,EAAE,gBAAgB,EACrB,OAAO,EAAE,OAAO,EAChB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,OAAO,GACd,OAAO,CAAC,QAAQ,CAAC,CAyBnB;AAED,6EAA6E;AAC7E,wBAAsB,WAAW,CAC/B,UAAU,EAAE,iBAAiB,EAC7B,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,gBAAgB,EACrB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,QAAQ,CAAC,CA8BnB;AAcD,wBAAsB,aAAa,CACjC,UAAU,EAAE,iBAAiB,EAC7B,GAAG,EAAE,gBAAgB,EACrB,OAAO,EAAE,OAAO,EAChB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,QAAQ,CAAC,CAMnB;AAED,wBAAsB,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAwB5G"}
+{"version":3,"file":"publications.d.ts","sourceRoot":"","sources":["../../src/worker/publications.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAsBvD,OAAO,EAA+B,KAAK,SAAS,EAAE,KAAK,OAAO,EAAE,MAAM,QAAQ,CAAC;AACnF,OAAO,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,OAAO,CAAC;AA8KzD,wBAAsB,WAAW,CAC/B,UAAU,EAAE,iBAAiB,EAC7B,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,gBAAgB,GACpB,OAAO,CAAC,QAAQ,CAAC,CAmDnB;AAED,2FAA2F;AAC3F,wBAAgB,cAAc,CAAC,UAAU,EAAE,iBAAiB,GAAG,QAAQ,CAQtE;AAED,wBAAsB,QAAQ,CAAC,UAAU,EAAE,iBAAiB,EAAE,GAAG,EAAE,gBAAgB,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAIlH;AAID;;;;;GAKG;AACH,wBAAsB,UAAU,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAoB5F;AAWD,wBAAgB,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,GAAG,QAAQ,CAOvD;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAyC7G;AAED,wBAAsB,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAS3G;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAQ9F;AAED,0GAA0G;AAC1G,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAcrG;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAapH;AAED,kFAAkF;AAClF,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CA+BpH;AAED,eAAO,MAAM,mBAAmB,GAAI,SAAS,OAAO,KAAG,SAGtD,CAAC;AAEF;+DAC+D;AAC/D,eAAO,MAAM,kBAAkB,GAAI,SAAS,OAAO,KAAG,SAIrD,CAAC;AAMF,wBAAsB,cAAc,CAClC,UAAU,EAAE,iBAAiB,EAC7B,GAAG,EAAE,gBAAgB,EACrB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,QAAQ,CAAC,CAWnB;AAED,wBAAsB,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAgC1G;AAwCD,wBAAsB,YAAY,CAChC,UAAU,EAAE,iBAAiB,EAC7B,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,gBAAgB,EACrB,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,QAAQ,CAAC,CA4FnB;AAED,wBAAsB,WAAW,CAC/B,UAAU,EAAE,iBAAiB,EAC7B,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,gBAAgB,EACrB,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,OAAO,EAChB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,QAAQ,CAAC,CAwDnB;AAED,wBAAsB,WAAW,CAC/B,UAAU,EAAE,iBAAiB,EAC7B,GAAG,EAAE,gBAAgB,EACrB,OAAO,EAAE,OAAO,EAChB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,QAAQ,CAAC,CAuBnB;AAED,wBAAsB,OAAO,CAC3B,UAAU,EAAE,iBAAiB,EAC7B,GAAG,EAAE,gBAAgB,EACrB,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,OAAO,EAChB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,QAAQ,CAAC,CAiBnB;AASD;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,UAAU,EAAE,iBAAiB,EAC7B,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,gBAAgB,EACrB,OAAO,EAAE,OAAO,EAChB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,QAAQ,CAAC,CAWnB;AAED;;;;;GAKG;AACH,wBAAsB,SAAS,CAC7B,UAAU,EAAE,iBAAiB,EAC7B,GAAG,EAAE,gBAAgB,EACrB,OAAO,EAAE,OAAO,EAChB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,OAAO,GACd,OAAO,CAAC,QAAQ,CAAC,CAyBnB;AAED,6EAA6E;AAC7E,wBAAsB,WAAW,CAC/B,UAAU,EAAE,iBAAiB,EAC7B,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,gBAAgB,EACrB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,QAAQ,CAAC,CA8BnB;AAcD,wBAAsB,aAAa,CACjC,UAAU,EAAE,iBAAiB,EAC7B,GAAG,EAAE,gBAAgB,EACrB,OAAO,EAAE,OAAO,EAChB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,QAAQ,CAAC,CAMnB;AAED,wBAAsB,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAwB5G"}

package/dist/worker/publications.js

@@ -1,2 +1,2 @@
-import{ARCHIVE_LIMITS as e,SESSION_MAX_AGE_SECONDS as t,archiveAliasSchema as n,archiveCollectionMetaSchema as r,archiveHealthSchema as i,archiveIdentitySchema as a,archiveLikeStateSchema as o,archiveLikedIdsSchema as s,archiveLikesPageSchema as c,archiveModerationLogSchema as l,archiveOwnReportsSchema as u,archiveReportsSchema as d,archiveSortSchema as f,isWellFormedText as p,uuidSchema as m}from"../contract.js";import{ApiError as h,badRequest as g,conflict as _,forbidden as v,invalid as y,json as b,noStore as x,notFound as S,queryParams as C,readJsonBody as w}from"./http.js";import{SQL as T,likedPublicationsSql as E,likesPageSql as D,listPublicationsSql as O,moderationLogSql as k,reportsPageSql as A}from"./sql.js";import{decodeCursorValue as j,encodeCursorValue as M,forwardPage as N,nextCursor as P}from"./_pagination.js";import{s as F}from"@vielzeug/spell";async function databaseCall(e){try{return await e()}catch(e){throw new h(500,`internal`,`The service is not available.`,{cause:e,diagnostic:{kind:`database`}})}}var first=(e,t,...n)=>databaseCall(()=>e.DB.prepare(t).bind(...n).first()),all=(e,t,...n)=>databaseCall(async()=>{let r=await e.DB.prepare(t).bind(...n).all();if(!Array.isArray(r.results))throw Error(`Missing database query results`);return r.results}),run=(e,t,...n)=>databaseCall(()=>e.DB.prepare(t).bind(...n).run()),uuid=()=>crypto.randomUUID(),now=()=>new Date().toISOString(),recordUnavailable=()=>new h(503,`record-unavailable`,`The record is not available.`,{diagnostic:{kind:`record`}}),I=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i,rowToEntry=(e,t)=>{let n;try{n=JSON.parse(t.payload_json)}catch{throw recordUnavailable()}let r=e.contract.entry.safeParse({author:{id:t.owner_id,name:t.author_name},contentHash:t.content_hash,contentVersion:t.content_version,id:t.id,likeCount:t.like_count,payload:n,publishedAt:t.published_at,revision:t.revision,schemaVersion:t.schema_version,updatedAt:t.updated_at});if(!r.success)throw recordUnavailable();return r.data},rowToOwnedEntry=(e,t)=>{let n=rowToEntry(e,t);if(!m.safeParse(t.client_key).success)throw recordUnavailable();return{...n,clientKey:t.client_key,hidden:t.hidden_at!==null}},entryById=async(e,t,n)=>{let r=await first(t,T.publication,n,e.name);return r===null?null:rowToEntry(e,r)},searchMatchFor=t=>{if(t===null)return;if(t.length>e.searchChars)throw g();let n=(t.match(/[\p{L}\p{N}]+/gu)??[]).slice(0,e.searchTerms);if(n.length!==0)return n.map(e=>`"${e}"*`).join(` `)},L=F.object({c:F.object({id:F.string().uuid(),likeCount:F.number().int().min(0).max(2**53-1),publishedAt:F.string().isoDateTime()}),d:F.enum([`next`,`previous`]),q:F.object({a:F.string().uuid().nullable(),e:F.string().max(e.vocabChars).nullable(),g:F.string().max(e.vocabChars),m:F.string().max(e.searchChars*e.searchTerms).nullable(),s:F.enum([`liked`,`recent`]),t:F.string().max(e.vocabChars).nullable()})}),cursorFromRow=e=>({id:e.id,likeCount:e.like_count,publishedAt:e.published_at}),encodeCursor=(e,t,n)=>M({c:cursorFromRow(e),d:t,q:{a:n.author??null,e:n.filter??null,g:n.collection,m:n.searchMatch??null,s:n.sort,t:n.tag??null}}),decodeCursor=(e,t)=>{let n=j(e,L),{q:r}=n;if((r.a??void 0)!==t.author||r.s!==t.sort||r.g!==t.collection||(r.e??void 0)!==t.filter||(r.m??void 0)!==t.searchMatch||(r.t??void 0)!==t.tag)throw g();return n};async function listEntries(t,n,r){let i=new URL(n.url),a=C(i,[`author`,`cursor`,`filter`,`limit`,`search`,`sort`,`tag`]),o=a.get(`sort`)??`recent`,s=f.safeParse(o);if(!s.success)throw g();let c=a.get(`limit`),l=c===null?e.pageSize:Number(c);if(!Number.isInteger(l)||l<1||l>e.maxPageSize)throw g();let u=a.get(`filter`);if(u!==null&&!t.filters.includes(u))throw g();let d=a.get(`tag`);if(d!==null&&!t.tags.includes(d))throw g();let p=a.get(`author`);if(p!==null&&!I.test(p))throw g();let m=searchMatchFor(a.get(`search`)),h={author:p??void 0,collection:t.name,filter:u??void 0,limit:l+1,searchMatch:m,sort:s.data,tag:d??void 0},_=a.get(`cursor`),v=_===null?null:decodeCursor(_,h),y=v?.d??`next`;v!==null&&(h.cursor=v.c),h.direction=y;let fetchRows=async e=>{let t=O(e);return all(r,t.sql,...t.parameters)},S=await fetchRows(h),w=S.length>l,T=S.slice(0,l);y===`previous`&&T.reverse();let E=!1;if(v!==null&&T.length>0){let e={...h,limit:1};y===`next`?(e.cursor=cursorFromRow(T[0]),e.direction=`previous`):(e.cursor=cursorFromRow(T[T.length-1]),e.direction=`next`),E=(await fetchRows(e)).length>0}let D=T.length>0&&(y===`next`&&w||y===`previous`&&E)?encodeCursor(T[T.length-1],`next`,h):null,k=T.length>0&&(y===`previous`&&w||y===`next`&&E)?encodeCursor(T[0],`previous`,h):null,A={cursor:D,entries:T.map(e=>rowToEntry(t,e)),previous:k};return b(200,A,x)}function collectionMeta(e){let t=r.safeParse({filters:[...e.filters].sort(),name:e.name,tags:[...e.tags].sort()});if(!t.success)throw recordUnavailable();return b(200,t.data,x)}async function getEntry(e,t,n){let r=await entryById(e,t,n);if(r===null)throw S();return b(200,r,x)}async function healthJson(t,n){let r=null,a=null;try{r=(await first(n,T.schemaVersion))?.applied??0}catch{a=`database-unavailable`}a===null&&r!==1&&(a=`schema-mismatch`);let o=i.safeParse({dbSchemaVersion:r,features:{likes:t.likesEnabled,publishing:t.publishingEnabled},limits:e,reason:a,schemaVersion:1,status:a===null?`ok`:`degraded`});if(!o.success)throw recordUnavailable();return b(a===null?200:503,o.data,x)}var identityJson=(e,t)=>{let n=a.safeParse(t);if(!n.success)throw recordUnavailable();return b(e,n.data,x)};function getMe(e){return identityJson(200,e?.publisher?{id:e.publisher.id,name:e.publisher.displayName,operator:e.operator}:null)}async function registerMe(e,t,n){let r=await w(e),i=R.safeParse(r);if(!i.success)throw y();let a=i.data.name??``,o=await first(t,T.publisher,n.subject.issuer,n.subject.subject);if(o!==null)return identityJson(200,{id:o.id,name:o.display_name,operator:n.operator});let s=uuid();await run(t,T.insertPublisher,s,n.subject.issuer,n.subject.subject,a,now(),n.subject.issuer,n.subject.subject,Date.now());let c=await first(t,T.publisher,n.subject.issuer,n.subject.subject);if(c===null)throw await first(t,T.revokedSubject,n.subject.issuer,n.subject.subject,Date.now())===null?_():new h(401,`unauthenticated`,`Sign-in is required.`);return identityJson(201,{id:c.id,name:c.display_name,operator:n.operator})}async function renameMe(e,t,n){let r=requirePublisherRow(n),i=await w(e),a=z.safeParse(i);if(!a.success)throw y();return a.data.name!==r.displayName&&await run(t,T.renamePublisher,a.data.name,r.id,a.data.name),identityJson(200,{id:r.id,name:a.data.name,operator:n.operator})}async function deleteProfile(e,t){return t.publisher!==null&&await run(e,T.deletePublisher,t.publisher.id),new Response(null,{headers:{"cache-control":`no-store`},status:204})}async function deleteAccountProfile(e,n){let{issuer:r,subject:i}=n.subject;return await databaseCall(()=>e.DB.batch([e.DB.prepare(T.revokeSubject).bind(r,i,Date.now()+(t+10)*1e3),e.DB.prepare(T.deleteSubjectPublisher).bind(r,i)])),new Response(null,{headers:x,status:204})}async function erasePublisher(e,t,n){let r=requireOperatorRow(t);return await databaseCall(()=>e.DB.batch([e.DB.prepare(T.auditErasure).bind(uuid(),r.id,now(),n),e.DB.prepare(T.deletePublisher).bind(n)])),new Response(null,{headers:x,status:204})}async function listModerationLog(e,t,n){requireOperatorRow(n);let r=`moderation-log`,{cursor:i,limit:a}=N(e,r),o=k({cursor:i,limit:a+1}),s=await all(t,o.sql,...o.parameters),c=s.slice(0,a),u=c.at(-1),d=l.safeParse({actions:c.map(e=>({action:e.action,collection:e.collection,createdAt:e.created_at,id:e.id,operatorId:e.operator_id,targetId:e.target_id})),cursor:s.length>a&&u!==void 0?P({createdAt:u.created_at,id:u.id},r):null});if(!d.success)throw recordUnavailable();return b(200,d.data,x)}var requirePublisherRow=e=>{if(e.publisher===null)throw v(`Register before publishing.`);return e.publisher},requireOperatorRow=e=>{if(!e.operator)throw v(`Operator access is required.`);if(e.publisher===null)throw v(`Register before moderating.`);return e.publisher},R=F.object({name:n.optional()}),z=F.object({name:n});async function myPublications(t,n,r){if(r.publisher===null)return b(200,{entries:[]},x);let i=await all(n,T.ownPublications,r.publisher.id,t.name,e.maxPublications);return b(200,{entries:i.map(e=>rowToOwnedEntry(t,e))},x)}async function myLikes(t,n,r){let i=new URL(t.url).searchParams.get(`ids`);if(i===null){let e=`likes:${r.publisher?.id??`unregistered`}`,{cursor:i,limit:a}=N(t,e);if(r.publisher===null)return b(200,{cursor:null,ids:[]},x);let o=D(r.publisher.id,{cursor:i,limit:a+1}),s=await all(n,o.sql,...o.parameters),l=s.slice(0,a),u=l.at(-1),d=c.safeParse({cursor:s.length>a&&u!==void 0?P({createdAt:u.created_at,id:u.publication_id},e):null,ids:l.map(e=>e.publication_id)});if(!d.success)throw recordUnavailable();return b(200,d.data,x)}C(new URL(t.url),[`ids`]);let a=[...new Set(i.split(`,`))];if(a.length>e.likeStateIds||a.some(e=>!I.test(e)))throw g();if(r.publisher===null)return b(200,{ids:[]},x);let o=E(r.publisher.id,a),l=await all(n,o.sql,...o.parameters),u=new Set(l.map(e=>e.publication_id)),d={ids:a.filter(e=>u.has(e))},f=s.safeParse(d);if(!f.success)throw recordUnavailable();return b(200,f.data,x)}var B=F.object({clientKey:m,payload:F.unknown()}),V=F.object({expectedRevision:F.number().int().min(1).max(2**53-1),payload:F.unknown()});async function publishEntry(t,n,r,i,a){if(!i.publishingEnabled)throw new h(503,`publishing-disabled`,`Publishing is currently disabled.`);let o=requirePublisherRow(a),s=await w(n),c=B.safeParse(s);if(!c.success)throw y();let{clientKey:l}=c.data,u=await t.derive(c.data.payload);if(u===null)throw y();let d=u.canonicalJson,f=u.contentHash,p=o.id,m=t.name,g=Date.now(),S=await first(r,T.request,p,m,l);if(S!==null&&S.expires_at>g){if(S.payload_hash!==f)throw _(`That key was used for a different payload.`);if(S.publication_id===null)throw new h(410,`gone`,`That publication was removed.`);let e=await entryById(t,r,S.publication_id);if(e!==null)return b(200,e,x)}let C=await first(r,T.publicationByKey,p,m,l);if(C!==null){if(C.hidden_at!==null)throw v(`This entry is under moderation review.`);if(C.content_hash!==f)throw _(`That key was used for a different payload.`);return b(200,rowToEntry(t,C),x)}let E=now(),D=Date.now()+e.idempotencyRetentionMs,O=JSON.stringify(u.tags);if(((await databaseCall(()=>r.DB.batch([r.DB.prepare(T.expireRequests).bind(Date.now()),r.DB.prepare(T.insertPublication).bind(uuid(),p,m,l,1,u.contentVersion,d,f,u.filter,u.title,O,E,E,p,m,e.maxPublications,p,m,l,Date.now()),r.DB.prepare(T.insertRequest).bind(p,m,l,f,E,D,p,m,l,f)])))[1]?.meta?.changes??0)===0){let e=await first(r,T.request,p,m,l);if(e!==null&&e.expires_at>Date.now()){if(e.publication_id===null)throw new h(410,`gone`,`That publication was removed.`);if(e.payload_hash===f){let n=await entryById(t,r,e.publication_id);if(n!==null)return b(200,n,x);throw new h(410,`gone`,`That publication was removed.`)}throw _(`That key was used for a different payload.`)}let n=await first(r,T.publicationByKey,p,m,l);if(n!==null&&n.hidden_at!==null)throw v(`This entry is under moderation review.`);if(n!==null&&n.content_hash===f)return b(200,rowToEntry(t,n),x);throw n===null?new h(429,`quota`,`Publication quota reached.`):_(`That key was used for a different payload.`)}let k=await first(r,T.publicationByKey,p,m,l);if(k===null)throw _();return b(201,rowToEntry(t,k),x)}async function updateEntry(e,t,n,r,i,a){if(!r.publishingEnabled)throw new h(503,`publishing-disabled`,`Publishing is currently disabled.`);let o=requirePublisherRow(i),s=await first(n,T.publicationAny,a,e.name);if(s===null||s.owner_id!==o.id)throw S();if(s.hidden_at!==null)throw v(`This entry is under moderation review.`);let c=await w(t),l=V.safeParse(c);if(!l.success)throw y();let{expectedRevision:u}=l.data;if(u!==s.revision)throw _();let d=await e.derive(l.data.payload);if(d===null)throw y();let f=d.canonicalJson,p=d.contentHash;if(p===s.content_hash){let t=await first(n,T.publicationAny,a,e.name);if(t===null||t.owner_id!==o.id)throw S();if(t.hidden_at!==null)throw v(`This entry is under moderation review.`);if(t.revision!==u)throw _();return b(200,rowToEntry(e,t),x)}let m=JSON.stringify(d.tags);if(((await run(n,T.updatePublication,1,d.contentVersion,f,p,d.filter,d.title,m,now(),a,o.id,u,p)).meta?.changes??0)===0){let t=await first(n,T.publicationAny,a,e.name);throw t===null?S():t.hidden_at===null?_():v(`This entry is under moderation review.`)}let g=await entryById(e,n,a);if(g===null)throw S();return b(200,g,x)}async function deleteEntry(e,t,n,r){if(n.operator){let i=requireOperatorRow(n);await databaseCall(()=>t.DB.batch([t.DB.prepare(T.auditRemoval).bind(uuid(),i.id,now(),r,e.name),t.DB.prepare(T.removePublicationAny).bind(r,e.name)]))}else{let i=requirePublisherRow(n),a=await first(t,T.publicationAny,r,e.name);if(a===null)return new Response(null,{headers:x,status:204});if(a.owner_id!==i.id)throw S();await run(t,T.removePublication,r,i.id)}return new Response(null,{headers:x,status:204})}async function setLike(e,t,n,r,i,a){let s=requirePublisherRow(r);if(a&&!n.likesEnabled)throw new h(503,`likes-disabled`,`Likes are currently disabled.`);if(await first(t,T.publication,i,e.name)===null)throw S();a?await run(t,T.insertLike,s.id,now(),i):await run(t,T.removeLike,i,s.id);let c=await first(t,T.likeState,s.id,i);if(c===null)throw S();let l={id:c.id,likeCount:c.like_count,liked:c.liked===1},u=o.safeParse(l);if(!u.success)throw recordUnavailable();return b(200,u.data,x)}var H=F.object({reason:F.string().check(p).trim().min(1).max(e.reportReasonChars)});async function reportEntry(e,t,n,r,i){let a=requirePublisherRow(r),o=await w(t),s=H.safeParse(o);if(!s.success)throw y();if(await first(n,T.publication,i,e.name)===null)throw S();return await run(n,T.insertReport,uuid(),a.id,s.data.reason,now(),i,e.name),new Response(null,{headers:x,status:204})}async function setHidden(e,t,n,r,i){let a=requireOperatorRow(n);if(await first(t,T.publicationAny,r,e.name)===null)throw S();let o=i?t.DB.prepare(T.hidePublication).bind(now(),r,e.name):t.DB.prepare(T.unhidePublication).bind(r,e.name);return await databaseCall(()=>t.DB.batch([t.DB.prepare(T.auditHide).bind(uuid(),a.id,i?`hide`:`unhide`,now(),r,e.name,Number(i)),o])),new Response(null,{headers:x,status:204})}async function listReports(e,t,n,r){requireOperatorRow(r);let i=new URL(t.url).searchParams.get(`status`)??`unresolved`;if(i!==`unresolved`&&i!==`resolved`)throw g();let a=`reports:${e.name}:${i}`,{cursor:o,limit:s}=N(t,a,[`status`]),c=A({collection:e.name,resolved:i===`resolved`},{cursor:o,limit:s+1}),l=await all(n,c.sql,...c.parameters),u=l.slice(0,s),f=u.at(-1),p=d.safeParse({cursor:l.length>s&&f!==void 0?P({createdAt:f.created_at,id:f.id},a):null,reports:u.map(e=>({createdAt:e.created_at,entryId:e.publication_id,entryTitle:e.entry_title,id:e.id,reason:e.reason,reporter:{id:e.reporter_id,name:e.reporter_name},resolvedAt:e.resolved_at}))});if(!p.success)throw recordUnavailable();return b(200,p.data,x)}async function resolveReport(e,t,n,r){if(requireOperatorRow(n),await first(t,T.reportById,r,e.name)===null)throw S();return await run(t,T.resolveReport,now(),r,e.name),new Response(null,{headers:x,status:204})}async function myReports(e,t,n){let r=`own-reports:${n.publisher?.id??`unregistered`}`,{cursor:i,limit:a}=N(e,r);if(n.publisher===null)return b(200,{cursor:null,reports:[]},x);let o=A({publisherId:n.publisher.id},{cursor:i,limit:a+1}),s=await all(t,o.sql,...o.parameters),c=s.slice(0,a),l=c.at(-1),d=u.safeParse({cursor:s.length>a&&l!==void 0?P({createdAt:l.created_at,id:l.id},r):null,reports:c.map(e=>({collection:e.collection,createdAt:e.created_at,entryId:e.publication_id,id:e.id,reason:e.reason,resolvedAt:e.resolved_at}))});if(!d.success)throw recordUnavailable();return b(200,d.data,x)}export{collectionMeta,deleteAccountProfile,deleteEntry,deleteProfile,erasePublisher,getEntry,getMe,healthJson,listEntries,listModerationLog,listReports,myLikes,myPublications,myReports,publishEntry,registerMe,renameMe,reportEntry,requireOperatorRow,requirePublisherRow,resolveReport,setHidden,setLike,updateEntry};
+import{ARCHIVE_LIMITS as e,SESSION_MAX_AGE_SECONDS as t,archiveAliasSchema as n,archiveCollectionMetaSchema as r,archiveHealthSchema as i,archiveIdentitySchema as a,archiveLikeStateSchema as o,archiveLikedIdsSchema as s,archiveLikesPageSchema as c,archiveModerationLogSchema as l,archiveOwnReportsSchema as u,archiveReportsSchema as d,archiveSortSchema as f,isWellFormedText as p,uuidSchema as m}from"../contract.js";import{ApiError as h,badRequest as g,conflict as _,forbidden as v,invalid as y,json as b,noStore as x,notFound as S,queryParams as C,readJsonBody as w}from"./http.js";import{SQL as T,likedPublicationsSql as E,likesPageSql as D,listPublicationsSql as O,moderationLogSql as k,reportsPageSql as A}from"./sql.js";import{forwardPage as j,forwardPageParams as M,nextCursor as N}from"./_pagination.js";import{s as P}from"@vielzeug/spell";async function databaseCall(e){try{return await e()}catch(e){throw new h(500,`internal`,`The service is not available.`,{cause:e,diagnostic:{kind:`database`}})}}var first=(e,t,...n)=>databaseCall(()=>e.DB.prepare(t).bind(...n).first()),all=(e,t,...n)=>databaseCall(async()=>{let r=await e.DB.prepare(t).bind(...n).all();if(!Array.isArray(r.results))throw Error(`Missing database query results`);return r.results}),run=(e,t,...n)=>databaseCall(()=>e.DB.prepare(t).bind(...n).run()),uuid=()=>crypto.randomUUID(),now=()=>new Date().toISOString(),recordUnavailable=()=>new h(503,`record-unavailable`,`The record is not available.`,{diagnostic:{kind:`record`}}),F=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i,rowToEntry=(e,t)=>{let n;try{n=JSON.parse(t.payload_json)}catch{throw recordUnavailable()}let r=e.contract.entry.safeParse({author:{id:t.owner_id,name:t.author_name},contentHash:t.content_hash,contentVersion:t.content_version,id:t.id,likeCount:t.like_count,payload:n,publishedAt:t.published_at,revision:t.revision,schemaVersion:t.schema_version,updatedAt:t.updated_at});if(!r.success)throw recordUnavailable();return r.data},rowToOwnedEntry=(e,t)=>{let n=rowToEntry(e,t);if(!m.safeParse(t.client_key).success)throw recordUnavailable();return{...n,clientKey:t.client_key,hidden:t.hidden_at!==null}},entryById=async(e,t,n)=>{let r=await first(t,T.publication,n,e.name);return r===null?null:rowToEntry(e,r)},searchMatchFor=t=>{if(t===null)return;if(t.length>e.searchChars)throw g();let n=(t.match(/[\p{L}\p{N}]+/gu)??[]).slice(0,e.searchTerms);if(n.length!==0)return n.map(e=>`"${e}"*`).join(` `)},entryCursorContext=e=>JSON.stringify([e.collection,e.sort,e.author??``,e.filter??``,e.tag??``,e.searchMatch??``]),cursorFromRow=e=>({createdAt:e.published_at,id:e.id,likeCount:e.like_count});async function listEntries(e,t,n){let r=new URL(t.url),i=C(r,[`author`,`cursor`,`filter`,`limit`,`search`,`sort`,`tag`]),a=i.get(`sort`)??`recent`,o=f.safeParse(a);if(!o.success)throw g();let s=i.get(`filter`);if(s!==null&&!e.filters.includes(s))throw g();let c=i.get(`tag`);if(c!==null&&!e.tags.includes(c))throw g();let l=i.get(`author`);if(l!==null&&!F.test(l))throw g();let u=searchMatchFor(i.get(`search`)),d=entryCursorContext({author:l??void 0,collection:e.name,filter:s??void 0,searchMatch:u,sort:o.data,tag:c??void 0}),{cursor:p,limit:m}=M(i,d),h={author:l??void 0,collection:e.name,cursor:p===null?void 0:{createdAt:p.createdAt,id:p.id,likeCount:p.likeCount??0},filter:s??void 0,limit:m+1,searchMatch:u,sort:o.data,tag:c??void 0},_=O(h),v=await all(n,_.sql,..._.parameters),y=v.slice(0,m),S=y.at(-1),w={cursor:v.length>m&&S!==void 0?N(cursorFromRow(S),d):null,entries:y.map(t=>rowToEntry(e,t))};return b(200,w,x)}function collectionMeta(e){let t=r.safeParse({filters:[...e.filters].sort(),name:e.name,tags:[...e.tags].sort()});if(!t.success)throw recordUnavailable();return b(200,t.data,x)}async function getEntry(e,t,n){let r=await entryById(e,t,n);if(r===null)throw S();return b(200,r,x)}async function healthJson(t,n){let r=null,a=null;try{r=(await first(n,T.schemaVersion))?.applied??0}catch{a=`database-unavailable`}a===null&&r!==1&&(a=`schema-mismatch`);let o=i.safeParse({dbSchemaVersion:r,features:{likes:t.likesEnabled,publishing:t.publishingEnabled},limits:e,reason:a,schemaVersion:1,status:a===null?`ok`:`degraded`});if(!o.success)throw recordUnavailable();return b(a===null?200:503,o.data,x)}var identityJson=(e,t)=>{let n=a.safeParse(t);if(!n.success)throw recordUnavailable();return b(e,n.data,x)};function getMe(e){return identityJson(200,e?.publisher?{id:e.publisher.id,name:e.publisher.displayName,operator:e.operator}:null)}async function registerMe(e,t,n){let r=await w(e),i=I.safeParse(r);if(!i.success)throw y();let a=i.data.name??``,o=await first(t,T.publisher,n.subject.issuer,n.subject.subject);if(o!==null)return identityJson(200,{id:o.id,name:o.display_name,operator:n.operator});let s=uuid();await run(t,T.insertPublisher,s,n.subject.issuer,n.subject.subject,a,now(),n.subject.issuer,n.subject.subject,Date.now());let c=await first(t,T.publisher,n.subject.issuer,n.subject.subject);if(c===null)throw await first(t,T.revokedSubject,n.subject.issuer,n.subject.subject,Date.now())===null?_():new h(401,`unauthenticated`,`Sign-in is required.`);return identityJson(201,{id:c.id,name:c.display_name,operator:n.operator})}async function renameMe(e,t,n){let r=requirePublisherRow(n),i=await w(e),a=L.safeParse(i);if(!a.success)throw y();return a.data.name!==r.displayName&&await run(t,T.renamePublisher,a.data.name,r.id,a.data.name),identityJson(200,{id:r.id,name:a.data.name,operator:n.operator})}async function deleteProfile(e,t){return t.publisher!==null&&await run(e,T.deletePublisher,t.publisher.id),new Response(null,{headers:{"cache-control":`no-store`},status:204})}async function deleteAccountProfile(e,n){let{issuer:r,subject:i}=n.subject;return await databaseCall(()=>e.DB.batch([e.DB.prepare(T.revokeSubject).bind(r,i,Date.now()+(t+10)*1e3),e.DB.prepare(T.deleteSubjectPublisher).bind(r,i)])),new Response(null,{headers:x,status:204})}async function erasePublisher(e,t,n){let r=requireOperatorRow(t);return await databaseCall(()=>e.DB.batch([e.DB.prepare(T.auditErasure).bind(uuid(),r.id,now(),n),e.DB.prepare(T.deletePublisher).bind(n)])),new Response(null,{headers:x,status:204})}async function listModerationLog(e,t,n){requireOperatorRow(n);let r=`moderation-log`,{cursor:i,limit:a}=j(e,r),o=k({cursor:i,limit:a+1}),s=await all(t,o.sql,...o.parameters),c=s.slice(0,a),u=c.at(-1),d=l.safeParse({actions:c.map(e=>({action:e.action,collection:e.collection,createdAt:e.created_at,id:e.id,operatorId:e.operator_id,targetId:e.target_id})),cursor:s.length>a&&u!==void 0?N({createdAt:u.created_at,id:u.id},r):null});if(!d.success)throw recordUnavailable();return b(200,d.data,x)}var requirePublisherRow=e=>{if(e.publisher===null)throw v(`Register before publishing.`);return e.publisher},requireOperatorRow=e=>{if(!e.operator)throw v(`Operator access is required.`);if(e.publisher===null)throw v(`Register before moderating.`);return e.publisher},I=P.object({name:n.optional()}),L=P.object({name:n});async function myPublications(t,n,r){if(r.publisher===null)return b(200,{entries:[]},x);let i=await all(n,T.ownPublications,r.publisher.id,t.name,e.maxPublications);return b(200,{entries:i.map(e=>rowToOwnedEntry(t,e))},x)}async function myLikes(t,n,r){let i=new URL(t.url).searchParams.get(`ids`);if(i===null){let e=`likes:${r.publisher?.id??`unregistered`}`,{cursor:i,limit:a}=j(t,e);if(r.publisher===null)return b(200,{cursor:null,ids:[]},x);let o=D(r.publisher.id,{cursor:i,limit:a+1}),s=await all(n,o.sql,...o.parameters),l=s.slice(0,a),u=l.at(-1),d=c.safeParse({cursor:s.length>a&&u!==void 0?N({createdAt:u.created_at,id:u.publication_id},e):null,ids:l.map(e=>e.publication_id)});if(!d.success)throw recordUnavailable();return b(200,d.data,x)}C(new URL(t.url),[`ids`]);let a=[...new Set(i.split(`,`))];if(a.length>e.likeStateIds||a.some(e=>!F.test(e)))throw g();if(r.publisher===null)return b(200,{ids:[]},x);let o=E(r.publisher.id,a),l=await all(n,o.sql,...o.parameters),u=new Set(l.map(e=>e.publication_id)),d={ids:a.filter(e=>u.has(e))},f=s.safeParse(d);if(!f.success)throw recordUnavailable();return b(200,f.data,x)}var R=P.object({clientKey:m,payload:P.unknown()}),z=P.object({expectedRevision:P.number().int().min(1).max(2**53-1),payload:P.unknown()});async function resolveRetryRecord(e,t,n,r){if(n===null||n.expires_at<=Date.now())return null;if(n.payload_hash!==r)throw _(`That key was used for a different payload.`);if(n.publication_id===null)throw new h(410,`gone`,`That publication was removed.`);let i=await entryById(e,t,n.publication_id);return i===null?`vanished`:b(200,i,x)}async function publishEntry(t,n,r,i,a){if(!i.publishingEnabled)throw new h(503,`publishing-disabled`,`Publishing is currently disabled.`);let o=requirePublisherRow(a),s=await w(n),c=R.safeParse(s);if(!c.success)throw y();let{clientKey:l}=c.data,u=await t.derive(c.data.payload);if(u===null)throw y();let d=u.canonicalJson,f=u.contentHash,p=o.id,m=t.name,g=await resolveRetryRecord(t,r,await first(r,T.request,p,m,l),f);if(g!==null&&g!==`vanished`)return g;let S=await first(r,T.publicationByKey,p,m,l);if(S!==null){if(S.hidden_at!==null)throw v(`This entry is under moderation review.`);if(S.content_hash!==f)throw _(`That key was used for a different payload.`);return b(200,rowToEntry(t,S),x)}let C=now(),E=Date.now()+e.idempotencyRetentionMs,D=JSON.stringify(u.tags);if(((await databaseCall(()=>r.DB.batch([r.DB.prepare(T.expireRequests).bind(Date.now()),r.DB.prepare(T.insertPublication).bind(uuid(),p,m,l,1,u.contentVersion,d,f,u.filter,u.title,D,C,C,p,m,e.maxPublications,p,m,l,Date.now()),r.DB.prepare(T.insertRequest).bind(p,m,l,f,C,E,p,m,l,f)])))[1]?.meta?.changes??0)===0){let e=await resolveRetryRecord(t,r,await first(r,T.request,p,m,l),f);if(e===`vanished`)throw new h(410,`gone`,`That publication was removed.`);if(e!==null)return e;let n=await first(r,T.publicationByKey,p,m,l);if(n!==null&&n.hidden_at!==null)throw v(`This entry is under moderation review.`);if(n!==null&&n.content_hash===f)return b(200,rowToEntry(t,n),x);throw n===null?new h(429,`quota`,`Publication quota reached.`):_(`That key was used for a different payload.`)}let O=await first(r,T.publicationByKey,p,m,l);if(O===null)throw _();return b(201,rowToEntry(t,O),x)}async function updateEntry(e,t,n,r,i,a){if(!r.publishingEnabled)throw new h(503,`publishing-disabled`,`Publishing is currently disabled.`);let o=requirePublisherRow(i),s=await first(n,T.publicationAny,a,e.name);if(s===null||s.owner_id!==o.id)throw S();if(s.hidden_at!==null)throw v(`This entry is under moderation review.`);let c=await w(t),l=z.safeParse(c);if(!l.success)throw y();let{expectedRevision:u}=l.data;if(u!==s.revision)throw _();let d=await e.derive(l.data.payload);if(d===null)throw y();let f=d.canonicalJson,p=d.contentHash;if(p===s.content_hash){let t=await first(n,T.publicationAny,a,e.name);if(t===null||t.owner_id!==o.id)throw S();if(t.hidden_at!==null)throw v(`This entry is under moderation review.`);if(t.revision!==u)throw _();return b(200,rowToEntry(e,t),x)}let m=JSON.stringify(d.tags);if(((await run(n,T.updatePublication,1,d.contentVersion,f,p,d.filter,d.title,m,now(),a,o.id,u,p)).meta?.changes??0)===0){let t=await first(n,T.publicationAny,a,e.name);throw t===null?S():t.hidden_at===null?_():v(`This entry is under moderation review.`)}let g=await entryById(e,n,a);if(g===null)throw S();return b(200,g,x)}async function deleteEntry(e,t,n,r){if(n.operator){let i=requireOperatorRow(n);await databaseCall(()=>t.DB.batch([t.DB.prepare(T.auditRemoval).bind(uuid(),i.id,now(),r,e.name),t.DB.prepare(T.removePublicationAny).bind(r,e.name)]))}else{let i=requirePublisherRow(n),a=await first(t,T.publicationAny,r,e.name);if(a===null)return new Response(null,{headers:x,status:204});if(a.owner_id!==i.id)throw S();await run(t,T.removePublication,r,i.id)}return new Response(null,{headers:x,status:204})}async function setLike(e,t,n,r,i,a){let s=requirePublisherRow(r);if(a&&!n.likesEnabled)throw new h(503,`likes-disabled`,`Likes are currently disabled.`);if(await first(t,T.publication,i,e.name)===null)throw S();a?await run(t,T.insertLike,s.id,now(),i):await run(t,T.removeLike,i,s.id);let c=await first(t,T.likeState,s.id,i);if(c===null)throw S();let l={id:c.id,likeCount:c.like_count,liked:c.liked===1},u=o.safeParse(l);if(!u.success)throw recordUnavailable();return b(200,u.data,x)}var B=P.object({reason:P.string().check(p).trim().min(1).max(e.reportReasonChars)});async function reportEntry(e,t,n,r,i){let a=requirePublisherRow(r),o=await w(t),s=B.safeParse(o);if(!s.success)throw y();if(await first(n,T.publication,i,e.name)===null)throw S();return await run(n,T.insertReport,uuid(),a.id,s.data.reason,now(),i,e.name),new Response(null,{headers:x,status:204})}async function setHidden(e,t,n,r,i){let a=requireOperatorRow(n);if(await first(t,T.publicationAny,r,e.name)===null)throw S();let o=i?t.DB.prepare(T.hidePublication).bind(now(),r,e.name):t.DB.prepare(T.unhidePublication).bind(r,e.name);return await databaseCall(()=>t.DB.batch([t.DB.prepare(T.auditHide).bind(uuid(),a.id,i?`hide`:`unhide`,now(),r,e.name,Number(i)),o])),new Response(null,{headers:x,status:204})}async function listReports(e,t,n,r){requireOperatorRow(r);let i=new URL(t.url).searchParams.get(`status`)??`unresolved`;if(i!==`unresolved`&&i!==`resolved`)throw g();let a=`reports:${e.name}:${i}`,{cursor:o,limit:s}=j(t,a,[`status`]),c=A({collection:e.name,resolved:i===`resolved`},{cursor:o,limit:s+1}),l=await all(n,c.sql,...c.parameters),u=l.slice(0,s),f=u.at(-1),p=d.safeParse({cursor:l.length>s&&f!==void 0?N({createdAt:f.created_at,id:f.id},a):null,reports:u.map(e=>({createdAt:e.created_at,entryId:e.publication_id,entryTitle:e.entry_title,id:e.id,reason:e.reason,reporter:{id:e.reporter_id,name:e.reporter_name},resolvedAt:e.resolved_at}))});if(!p.success)throw recordUnavailable();return b(200,p.data,x)}async function resolveReport(e,t,n,r){if(requireOperatorRow(n),await first(t,T.reportById,r,e.name)===null)throw S();return await run(t,T.resolveReport,now(),r,e.name),new Response(null,{headers:x,status:204})}async function myReports(e,t,n){let r=`own-reports:${n.publisher?.id??`unregistered`}`,{cursor:i,limit:a}=j(e,r);if(n.publisher===null)return b(200,{cursor:null,reports:[]},x);let o=A({publisherId:n.publisher.id},{cursor:i,limit:a+1}),s=await all(t,o.sql,...o.parameters),c=s.slice(0,a),l=c.at(-1),d=u.safeParse({cursor:s.length>a&&l!==void 0?N({createdAt:l.created_at,id:l.id},r):null,reports:c.map(e=>({collection:e.collection,createdAt:e.created_at,entryId:e.publication_id,id:e.id,reason:e.reason,resolvedAt:e.resolved_at}))});if(!d.success)throw recordUnavailable();return b(200,d.data,x)}export{collectionMeta,deleteAccountProfile,deleteEntry,deleteProfile,erasePublisher,getEntry,getMe,healthJson,listEntries,listModerationLog,listReports,myLikes,myPublications,myReports,publishEntry,registerMe,renameMe,reportEntry,requireOperatorRow,requirePublisherRow,resolveReport,setHidden,setLike,updateEntry};
 //# sourceMappingURL=publications.js.map